create-nextblock 0.16.4 → 0.17.0

package/templates/nextblock-template/app/api/cron/sync-currencies/route.ts

@@ -1,39 +1,39 @@
-import { NextRequest, NextResponse } from 'next/server';
-
-import { syncStoreCurrencyRates } from '@nextblock-cms/ecommerce/server';
-
-export const dynamic = 'force-dynamic';
-export const maxDuration = 30;
-
-export async function GET(request: NextRequest) {
-  // CRON_SECRET is optional: when set we enforce Vercel's `Authorization: Bearer`
-  // header, but a zero-config deploy can leave it unset (the job only does low-harm
-  // FX-rate sync). Set CRON_SECRET in the project env to lock the endpoint down.
-  const cronSecret = process.env.CRON_SECRET?.trim();
-  const authHeader = request.headers.get('authorization');
-
-  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
-    return new NextResponse('Unauthorized', {
-      status: 401,
-    });
-  }
-
-  try {
-    const result = await syncStoreCurrencyRates();
-
-    return NextResponse.json({
-      success: true,
-      ...result,
-    });
-  } catch (error) {
-    return NextResponse.json(
-      {
-        error:
-          error instanceof Error
-            ? error.message
-            : 'Failed to sync currency exchange rates.',
-      },
-      { status: 500 }
-    );
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+
+import { syncStoreCurrencyRates } from '@nextblock-cms/ecommerce/server';
+
+export const dynamic = 'force-dynamic';
+export const maxDuration = 30;
+
+export async function GET(request: NextRequest) {
+  // CRON_SECRET is optional: when set we enforce Vercel's `Authorization: Bearer`
+  // header, but a zero-config deploy can leave it unset (the job only does low-harm
+  // FX-rate sync). Set CRON_SECRET in the project env to lock the endpoint down.
+  const cronSecret = process.env.CRON_SECRET?.trim();
+  const authHeader = request.headers.get('authorization');
+
+  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
+    return new NextResponse('Unauthorized', {
+      status: 401,
+    });
+  }
+
+  try {
+    const result = await syncStoreCurrencyRates();
+
+    return NextResponse.json({
+      success: true,
+      ...result,
+    });
+  } catch (error) {
+    return NextResponse.json(
+      {
+        error:
+          error instanceof Error
+            ? error.message
+            : 'Failed to sync currency exchange rates.',
+      },
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/api/custom-blocks/db-relations/route.ts

@@ -1,92 +1,92 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { createClient } from '@nextblock-cms/db/server';
-
-import {
-  getCustomBlockRelationTargetsResponse,
-  searchCustomBlockRelationRows,
-} from '../../../../lib/custom-block-relations';
-
-export const dynamic = 'force-dynamic';
-
-function parseFilters(rawFilters: string | null) {
-  if (!rawFilters) {
-    return null;
-  }
-
-  try {
-    const parsed = JSON.parse(rawFilters);
-    return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
-      ? (parsed as Record<string, unknown>)
-      : null;
-  } catch {
-    return null;
-  }
-}
-
-function parseValues(rawValues: string | null) {
-  if (!rawValues) {
-    return null;
-  }
-
-  return rawValues
-    .split(',')
-    .map((value) => value.trim())
-    .filter(Boolean);
-}
-
-export async function GET(request: NextRequest) {
-  try {
-    const supabase = createClient();
-    const {
-      data: { user },
-      error: authError,
-    } = await supabase.auth.getUser();
-
-    if (authError || !user) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
-    }
-
-    const { data: profile } = await supabase
-      .from('profiles')
-      .select('role')
-      .eq('id', user.id)
-      .single();
-
-    if (!profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
-      return NextResponse.json(
-        { error: 'Forbidden: Insufficient permissions' },
-        { status: 403 }
-      );
-    }
-
-    const { searchParams } = new URL(request.url);
-    const mode = searchParams.get('mode');
-    const table = searchParams.get('table')?.trim();
-
-    if (mode === 'tables' || !table) {
-      return NextResponse.json(getCustomBlockRelationTargetsResponse(), { status: 200 });
-    }
-
-    const result = await searchCustomBlockRelationRows(supabase, {
-      displayColumn: searchParams.get('displayColumn'),
-      filters: parseFilters(searchParams.get('filters')),
-      limit: searchParams.get('limit'),
-      query: searchParams.get('q'),
-      table,
-      valueColumn: searchParams.get('valueColumn'),
-      values: parseValues(searchParams.get('values')),
-    });
-
-    if ('error' in result) {
-      return NextResponse.json({ error: result.error }, { status: result.status });
-    }
-
-    return NextResponse.json(result, { status: 200 });
-  } catch (error) {
-    console.error('[Custom Block Relations API] Unexpected error:', error);
-    return NextResponse.json(
-      { error: 'Unexpected relation selector error.' },
-      { status: 500 }
-    );
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { createClient } from '@nextblock-cms/db/server';
+
+import {
+  getCustomBlockRelationTargetsResponse,
+  searchCustomBlockRelationRows,
+} from '../../../../lib/custom-block-relations';
+
+export const dynamic = 'force-dynamic';
+
+function parseFilters(rawFilters: string | null) {
+  if (!rawFilters) {
+    return null;
+  }
+
+  try {
+    const parsed = JSON.parse(rawFilters);
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+      ? (parsed as Record<string, unknown>)
+      : null;
+  } catch {
+    return null;
+  }
+}
+
+function parseValues(rawValues: string | null) {
+  if (!rawValues) {
+    return null;
+  }
+
+  return rawValues
+    .split(',')
+    .map((value) => value.trim())
+    .filter(Boolean);
+}
+
+export async function GET(request: NextRequest) {
+  try {
+    const supabase = createClient();
+    const {
+      data: { user },
+      error: authError,
+    } = await supabase.auth.getUser();
+
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const { data: profile } = await supabase
+      .from('profiles')
+      .select('role')
+      .eq('id', user.id)
+      .single();
+
+    if (!profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
+      return NextResponse.json(
+        { error: 'Forbidden: Insufficient permissions' },
+        { status: 403 }
+      );
+    }
+
+    const { searchParams } = new URL(request.url);
+    const mode = searchParams.get('mode');
+    const table = searchParams.get('table')?.trim();
+
+    if (mode === 'tables' || !table) {
+      return NextResponse.json(getCustomBlockRelationTargetsResponse(), { status: 200 });
+    }
+
+    const result = await searchCustomBlockRelationRows(supabase, {
+      displayColumn: searchParams.get('displayColumn'),
+      filters: parseFilters(searchParams.get('filters')),
+      limit: searchParams.get('limit'),
+      query: searchParams.get('q'),
+      table,
+      valueColumn: searchParams.get('valueColumn'),
+      values: parseValues(searchParams.get('values')),
+    });
+
+    if ('error' in result) {
+      return NextResponse.json({ error: result.error }, { status: result.status });
+    }
+
+    return NextResponse.json(result, { status: 200 });
+  } catch (error) {
+    console.error('[Custom Block Relations API] Unexpected error:', error);
+    return NextResponse.json(
+      { error: 'Unexpected relation selector error.' },
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/api/custom-blocks/editor-definitions/route.ts

@@ -1,43 +1,43 @@
-import { NextResponse } from 'next/server';
-import { createClient } from '@nextblock-cms/db/server';
-
-import { loadDynamicCustomBlockExtensionDefinitions } from '../../../../lib/editor/dynamic-extension-loader';
-
-export const dynamic = 'force-dynamic';
-
-export async function GET() {
-  try {
-    const supabase = createClient();
-    const {
-      data: { user },
-      error: authError,
-    } = await supabase.auth.getUser();
-
-    if (authError || !user) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
-    }
-
-    const { data: profile } = await supabase
-      .from('profiles')
-      .select('role')
-      .eq('id', user.id)
-      .single();
-
-    if (!profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
-      return NextResponse.json(
-        { error: 'Forbidden: Insufficient permissions' },
-        { status: 403 }
-      );
-    }
-
-    const definitions = await loadDynamicCustomBlockExtensionDefinitions();
-
-    return NextResponse.json({ definitions }, { status: 200 });
-  } catch (error) {
-    console.error('[Custom Block Editor Definitions API] Unexpected error:', error);
-    return NextResponse.json(
-      { error: 'Unexpected custom block editor definition error.' },
-      { status: 500 }
-    );
-  }
-}
+import { NextResponse } from 'next/server';
+import { createClient } from '@nextblock-cms/db/server';
+
+import { loadDynamicCustomBlockExtensionDefinitions } from '../../../../lib/editor/dynamic-extension-loader';
+
+export const dynamic = 'force-dynamic';
+
+export async function GET() {
+  try {
+    const supabase = createClient();
+    const {
+      data: { user },
+      error: authError,
+    } = await supabase.auth.getUser();
+
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const { data: profile } = await supabase
+      .from('profiles')
+      .select('role')
+      .eq('id', user.id)
+      .single();
+
+    if (!profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
+      return NextResponse.json(
+        { error: 'Forbidden: Insufficient permissions' },
+        { status: 403 }
+      );
+    }
+
+    const definitions = await loadDynamicCustomBlockExtensionDefinitions();
+
+    return NextResponse.json({ definitions }, { status: 200 });
+  } catch (error) {
+    console.error('[Custom Block Editor Definitions API] Unexpected error:', error);
+    return NextResponse.json(
+      { error: 'Unexpected custom block editor definition error.' },
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/api/media/library/route.ts

@@ -1,69 +1,69 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { createClient as createSupabaseClient } from '@supabase/supabase-js';
-import type { Database } from '@nextblock-cms/db';
-
-const MAX_MEDIA_LIBRARY_ITEMS = 100;
-const DEFAULT_MEDIA_LIBRARY_ITEMS = 50;
-export const dynamic = 'force-dynamic';
-
-function getMediaLibrarySupabaseClient() {
-  const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL;
-  const supabaseAnonKey =
-    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY ||
-    process.env.SUPABASE_ANON_KEY ||
-    process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY ||
-    process.env.SUPABASE_PUBLISHABLE_KEY;
-
-  if (!supabaseUrl || !supabaseAnonKey) {
-    throw new Error('Missing Supabase environment variables for media library API');
-  }
-
-  return createSupabaseClient<Database>(supabaseUrl, supabaseAnonKey, {
-    auth: {
-      autoRefreshToken: false,
-      persistSession: false,
-    },
-  });
-}
-
-export async function GET(request: NextRequest) {
-  try {
-    const { searchParams } = new URL(request.url);
-    const query = searchParams.get('q')?.trim() ?? '';
-    const limitParam = Number.parseInt(searchParams.get('limit') ?? '', 10);
-    const limit =
-      Number.isFinite(limitParam) && limitParam > 0
-        ? Math.min(limitParam, MAX_MEDIA_LIBRARY_ITEMS)
-        : DEFAULT_MEDIA_LIBRARY_ITEMS;
-
-    const supabase = getMediaLibrarySupabaseClient();
-
-    let mediaQuery = supabase
-      .from('media')
-      .select('*')
-      .order('created_at', { ascending: false })
-      .limit(limit);
-
-    if (query) {
-      mediaQuery = mediaQuery.ilike('file_name', `%${query}%`);
-    }
-
-    const { data, error } = await mediaQuery;
-
-    if (error) {
-      console.error('[Media Library API] Failed to load media:', error);
-      return NextResponse.json(
-        { error: 'Failed to load media library.' },
-        { status: 500 }
-      );
-    }
-
-    return NextResponse.json({ items: data ?? [] }, { status: 200 });
-  } catch (error) {
-    console.error('[Media Library API] Unexpected error:', error);
-    return NextResponse.json(
-      { error: 'Unexpected media library error.' },
-      { status: 500 }
-    );
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { createClient as createSupabaseClient } from '@supabase/supabase-js';
+import type { Database } from '@nextblock-cms/db';
+
+const MAX_MEDIA_LIBRARY_ITEMS = 100;
+const DEFAULT_MEDIA_LIBRARY_ITEMS = 50;
+export const dynamic = 'force-dynamic';
+
+function getMediaLibrarySupabaseClient() {
+  const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL || process.env.SUPABASE_URL;
+  const supabaseAnonKey =
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY ||
+    process.env.SUPABASE_ANON_KEY ||
+    process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY ||
+    process.env.SUPABASE_PUBLISHABLE_KEY;
+
+  if (!supabaseUrl || !supabaseAnonKey) {
+    throw new Error('Missing Supabase environment variables for media library API');
+  }
+
+  return createSupabaseClient<Database>(supabaseUrl, supabaseAnonKey, {
+    auth: {
+      autoRefreshToken: false,
+      persistSession: false,
+    },
+  });
+}
+
+export async function GET(request: NextRequest) {
+  try {
+    const { searchParams } = new URL(request.url);
+    const query = searchParams.get('q')?.trim() ?? '';
+    const limitParam = Number.parseInt(searchParams.get('limit') ?? '', 10);
+    const limit =
+      Number.isFinite(limitParam) && limitParam > 0
+        ? Math.min(limitParam, MAX_MEDIA_LIBRARY_ITEMS)
+        : DEFAULT_MEDIA_LIBRARY_ITEMS;
+
+    const supabase = getMediaLibrarySupabaseClient();
+
+    let mediaQuery = supabase
+      .from('media')
+      .select('*')
+      .order('created_at', { ascending: false })
+      .limit(limit);
+
+    if (query) {
+      mediaQuery = mediaQuery.ilike('file_name', `%${query}%`);
+    }
+
+    const { data, error } = await mediaQuery;
+
+    if (error) {
+      console.error('[Media Library API] Failed to load media:', error);
+      return NextResponse.json(
+        { error: 'Failed to load media library.' },
+        { status: 500 }
+      );
+    }
+
+    return NextResponse.json({ items: data ?? [] }, { status: 200 });
+  } catch (error) {
+    console.error('[Media Library API] Unexpected error:', error);
+    return NextResponse.json(
+      { error: 'Unexpected media library error.' },
+      { status: 500 }
+    );
+  }
+}

package/templates/nextblock-template/app/api/media/r2-presigned/route.ts

@@ -1,53 +1,53 @@
-import { NextRequest, NextResponse } from 'next/server';
-import { createClient } from '@nextblock-cms/db/server';
-
-import {
-  createR2PresignedUpload,
-  R2PresignedUploadError,
-  validateR2PresignedUploadPayload,
-} from '../../../../lib/custom-block-r2-upload';
-
-export const dynamic = 'force-dynamic';
-export const runtime = 'nodejs';
-
-export async function POST(request: NextRequest) {
-  try {
-    const supabase = createClient();
-    const {
-      data: { user },
-      error: authError,
-    } = await supabase.auth.getUser();
-
-    if (authError || !user) {
-      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
-    }
-
-    const { data: profile } = await supabase
-      .from('profiles')
-      .select('role')
-      .eq('id', user.id)
-      .single();
-
-    if (!profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
-      return NextResponse.json(
-        { error: 'Forbidden: Insufficient permissions' },
-        { status: 403 }
-      );
-    }
-
-    const payload = validateR2PresignedUploadPayload(await request.json());
-    const upload = await createR2PresignedUpload(payload, { userId: user.id });
-
-    return NextResponse.json(upload, { status: 200 });
-  } catch (error) {
-    if (error instanceof R2PresignedUploadError) {
-      return NextResponse.json({ error: error.message }, { status: error.status });
-    }
-
-    console.error('[R2 Presigned Upload] Unexpected error:', error);
-    return NextResponse.json(
-      { error: 'Failed to generate upload URL.' },
-      { status: 500 }
-    );
-  }
-}
+import { NextRequest, NextResponse } from 'next/server';
+import { createClient } from '@nextblock-cms/db/server';
+
+import {
+  createR2PresignedUpload,
+  R2PresignedUploadError,
+  validateR2PresignedUploadPayload,
+} from '../../../../lib/custom-block-r2-upload';
+
+export const dynamic = 'force-dynamic';
+export const runtime = 'nodejs';
+
+export async function POST(request: NextRequest) {
+  try {
+    const supabase = createClient();
+    const {
+      data: { user },
+      error: authError,
+    } = await supabase.auth.getUser();
+
+    if (authError || !user) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    const { data: profile } = await supabase
+      .from('profiles')
+      .select('role')
+      .eq('id', user.id)
+      .single();
+
+    if (!profile || !['ADMIN', 'WRITER'].includes(profile.role)) {
+      return NextResponse.json(
+        { error: 'Forbidden: Insufficient permissions' },
+        { status: 403 }
+      );
+    }
+
+    const payload = validateR2PresignedUploadPayload(await request.json());
+    const upload = await createR2PresignedUpload(payload, { userId: user.id });
+
+    return NextResponse.json(upload, { status: 200 });
+  } catch (error) {
+    if (error instanceof R2PresignedUploadError) {
+      return NextResponse.json({ error: error.message }, { status: error.status });
+    }
+
+    console.error('[R2 Presigned Upload] Unexpected error:', error);
+    return NextResponse.json(
+      { error: 'Failed to generate upload URL.' },
+      { status: 500 }
+    );
+  }
+}