create-nextblock 0.2.78 → 0.8.0

package/templates/nextblock-template/next.config.js

@@ -1,66 +1,190 @@
-//@ts-check
-
-/**
- * @typedef {{ protocol?: 'http' | 'https'; hostname: string; port?: string; pathname?: string }} RemotePattern
- */
-
-/** @type {import('next').NextConfig} */
-const nextConfig = {
-  env: {
-    NEXT_PUBLIC_SUPABASE_URL: process.env.NEXT_PUBLIC_SUPABASE_URL,
-    NEXT_PUBLIC_SUPABASE_ANON_KEY: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY,
-  },
-  images: {
-    formats: ['image/avif', 'image/webp'],
-    imageSizes: [16, 32, 48, 64, 96, 128, 256, 384, 512],
-    deviceSizes: [320, 480, 640, 750, 828, 1080, 1200, 1440, 1920, 2048, 2560],
-    qualities: [60, 75],
-    minimumCacheTTL: 31_536_000,
-    dangerouslyAllowSVG: false,
-    contentSecurityPolicy: "default-src 'self'; script-src 'none'; sandbox;",
-    remotePatterns: getRemotePatterns(),
-  },
-  compiler: {
-    removeConsole: process.env.NODE_ENV === 'production',
-  },
-  transpilePackages: [
-    '@nextblock-cms/utils',
-    '@nextblock-cms/ui',
-    '@nextblock-cms/editor',
-  ],
-};
-
-module.exports = nextConfig;
-
-function getRemotePatterns() {
-  /** @type {RemotePattern[]} */
-  const patterns = [
-    {
-      protocol: 'https',
-      hostname: 'pub-a31e3f1a87d144898aeb489a8221f92e.r2.dev',
-      pathname: '/**',
-    },
-    {
-      protocol: 'https',
-      hostname: 'e260676f72b0b18314b868f136ed72ae.r2.cloudflarestorage.com',
-      pathname: '/**',
-    },
-  ];
-
-  if (process.env.NEXT_PUBLIC_URL) {
-    try {
-      const parsed = new URL(process.env.NEXT_PUBLIC_URL);
-      if (parsed.protocol === 'http:' || parsed.protocol === 'https:') {
-        patterns.push({
-          protocol: parsed.protocol === 'https:' ? 'https' : 'http',
-          hostname: parsed.hostname,
-          pathname: '/**',
-        });
-      }
-    } catch {
-      // ignore malformed value
-    }
-  }
-
-  return patterns;
-}
+//@ts-check
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const shouldEnableVercelToolbarPlugin =
+  process.env.NEXTBLOCK_VERCEL_TOOLBAR_ENABLED === 'true';
+
+function ensureVercelToolbarProjectJson() {
+  const vercelDir = path.join(process.cwd(), '.vercel');
+  const projectJsonPath = path.join(vercelDir, 'project.json');
+  const repoJsonPath = path.join(vercelDir, 'repo.json');
+
+  if (fs.existsSync(projectJsonPath) || !fs.existsSync(repoJsonPath)) {
+    return;
+  }
+
+  try {
+    const repo = JSON.parse(fs.readFileSync(repoJsonPath, 'utf8'));
+    const appDirectory = path
+      .relative(process.cwd(), __dirname)
+      .replaceAll(path.sep, '/');
+    const project =
+      repo.projects?.find(
+        /** @param {{ directory?: string }} candidate */
+        (candidate) =>
+          candidate.directory === '.' ||
+          candidate.directory === '' ||
+          candidate.directory === appDirectory
+      ) ?? repo.projects?.[0];
+
+    if (!project?.id || !project?.orgId) {
+      return;
+    }
+
+    fs.writeFileSync(
+      projectJsonPath,
+      `${JSON.stringify({ orgId: project.orgId, projectId: project.id }, null, 2)}\n`
+    );
+  } catch {
+    // The Toolbar plugin will print its normal setup guidance if linking is incomplete.
+  }
+}
+
+if (shouldEnableVercelToolbarPlugin) {
+  ensureVercelToolbarProjectJson();
+}
+
+/**
+ * @typedef {{ protocol?: 'http' | 'https'; hostname: string; port?: string; pathname?: string }} RemotePattern
+ */
+
+const securityHeaders = [
+  {
+    key: 'X-DNS-Prefetch-Control',
+    value: 'on',
+  },
+  {
+    key: 'Strict-Transport-Security',
+    value: 'max-age=63072000; includeSubDomains; preload',
+  },
+  {
+    key: 'X-Frame-Options',
+    value: 'SAMEORIGIN',
+  },
+  {
+    key: 'X-Content-Type-Options',
+    value: 'nosniff',
+  },
+  {
+    key: 'Referrer-Policy',
+    value: 'strict-origin-when-cross-origin',
+  },
+  {
+    key: 'Permissions-Policy',
+    value: 'camera=(), microphone=(), geolocation=()',
+  },
+  {
+    key: 'Cross-Origin-Opener-Policy',
+    value: 'same-origin',
+  },
+];
+
+/** @type {import('next').NextConfig} */
+const nextConfig = {
+  experimental: {
+    optimizePackageImports: ['@nextblock-cms/ui', '@nextblock-cms/utils'],
+  },
+  env: {
+    NEXT_PUBLIC_SUPABASE_URL: process.env.NEXT_PUBLIC_SUPABASE_URL,
+    NEXT_PUBLIC_SUPABASE_ANON_KEY: process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY,
+  },
+  images: {
+    formats: ['image/avif', 'image/webp'],
+    imageSizes: [16, 32, 48, 64, 96, 128, 256, 384, 512],
+    deviceSizes: [320, 480, 640, 750, 828, 1080, 1200, 1440, 1920, 2048, 2560],
+    qualities: [60, 75],
+    minimumCacheTTL: 31_536_000,
+    dangerouslyAllowSVG: false,
+    contentSecurityPolicy: "default-src 'self'; script-src 'none'; sandbox;",
+    remotePatterns: getRemotePatterns(),
+  },
+  compiler: {
+    removeConsole: process.env.NODE_ENV === 'production',
+  },
+  turbopack: {
+    // Work around Turbopack subpath resolution for the latest y-protocols package.
+    resolveAlias: {
+      'y-protocols/awareness': 'y-protocols/awareness.js',
+    },
+  },
+  transpilePackages: [
+    '@nextblock-cms/utils',
+    '@nextblock-cms/ui',
+    '@nextblock-cms/editor',
+  ],
+  async headers() {
+    const headers = [...securityHeaders];
+    if (process.env.NEXT_PUBLIC_IS_SANDBOX === 'true') {
+      headers.push({
+        key: 'X-Robots-Tag',
+        value: 'noindex',
+      });
+    }
+    return [
+      {
+        source: '/:path*',
+        headers,
+      },
+    ];
+  },
+};
+
+/** @type {typeof import('@vercel/toolbar/plugins/next').withVercelToolbar} */
+const withVercelToolbar = require('@vercel/toolbar/plugins/next').withVercelToolbar;
+
+module.exports = shouldEnableVercelToolbarPlugin
+  ? withVercelToolbar()(nextConfig)
+  : nextConfig;
+
+function getRemotePatterns() {
+  /** @type {RemotePattern[]} */
+  const patterns = [];
+
+  // Add R2 Bucket URL if authenticated
+  if (process.env.NEXT_PUBLIC_R2_PUBLIC_URL) {
+    try {
+      const parsed = new URL(process.env.NEXT_PUBLIC_R2_PUBLIC_URL);
+      patterns.push({
+        protocol: parsed.protocol === 'https:' ? 'https' : 'http',
+        hostname: parsed.hostname,
+        pathname: '/**',
+      });
+    } catch {
+      // ignore malformed value
+    }
+  }
+
+  // Add R2 Custom Domain URL
+  if (process.env.NEXT_PUBLIC_R2_BASE_URL) {
+    try {
+      const parsed = new URL(process.env.NEXT_PUBLIC_R2_BASE_URL);
+      patterns.push({
+        protocol: parsed.protocol === 'https:' ? 'https' : 'http',
+        hostname: parsed.hostname,
+        pathname: '/**',
+      });
+    } catch {
+      // ignore malformed value
+    }
+  }
+
+  // Add General Public URL
+  if (process.env.NEXT_PUBLIC_URL) {
+    try {
+      const parsed = new URL(process.env.NEXT_PUBLIC_URL);
+      if (parsed.protocol === 'http:' || parsed.protocol === 'https:') {
+        patterns.push({
+          protocol: parsed.protocol === 'https:' ? 'https' : 'http',
+          hostname: parsed.hostname,
+          pathname: '/**',
+        });
+      }
+    } catch {
+      // ignore malformed value
+    }
+  }
+
+  return patterns;
+}

package/templates/nextblock-template/package.json

@@ -1,64 +1,68 @@
 {
   "name": "@nextblock-cms/template",
-  "version": "0.2.55",
+  "version": "0.8.0",
   "private": true,
   "scripts": {
     "dev": "next dev",
     "build": "next build",
     "start": "next start",
     "lint": "next lint",
-    "deploy:supabase": "node tools/deploy-supabase.js"
+    "deploy:supabase": "node tools/deploy-supabase.js",
+    "configure:supabase-auth": "node tools/configure-supabase-auth.js"
   },
   "dependencies": {
-    "@aws-sdk/client-s3": "^3.920.0",
-    "@aws-sdk/s3-request-presigner": "^3.919.0",
+    "@aws-sdk/client-s3": "^3.1039.0",
+    "@aws-sdk/s3-request-presigner": "^3.1039.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
+    "@hookform/resolvers": "^5.2.2",
     "@nextblock-cms/db": "workspace:*",
     "@nextblock-cms/editor": "workspace:*",
     "@nextblock-cms/sdk": "workspace:*",
     "@nextblock-cms/ui": "workspace:*",
     "@nextblock-cms/utils": "workspace:*",
     "@radix-ui/react-tooltip": "^1.2.8",
-    "@supabase/ssr": "^0.7.0",
-    "@supabase/supabase-js": "^2.77.0",
-    "@tiptap/react": "^3.9.0",
+    "@supabase/ssr": "^0.10.2",
+    "@supabase/supabase-js": "^2.105.1",
+    "@tiptap/react": "^3.22.5",
     "@vercel/analytics": "^1.6.1",
+    "beasties": "^0.4.2",
     "clsx": "^2.1.1",
-    "critters": "^0.0.25",
     "date-fns": "^4.1.0",
-    "dotenv": "^17.2.3",
+    "dotenv": "^17.4.2",
     "fast-json-patch": "^3.1.1",
-    "html-react-parser": "^5.2.7",
+    "html-react-parser": "^5.2.17",
     "js-cookie": "^3.0.5",
-    "katex": "^0.16.25",
+    "katex": "^0.16.45",
     "lodash.debounce": "^4.0.8",
-    "lucide-react": "^0.548.0",
-    "next": "16.0.10",
+    "lucide-react": "^0.577.0",
+    "next": "16.2.7",
     "next-themes": "^0.4.6",
-    "nodemailer": "^7.0.10",
+    "nodemailer": "^8.0.10",
     "plaiceholder": "^3.0.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0",
+    "react": "^19.2.5",
+    "react-dom": "^19.2.5",
+    "react-hook-form": "^7.74.0",
     "react-hot-toast": "^2.6.0",
-    "sharp": "^0.34.2",
-    "tailwind-merge": "^3.3.1",
+    "sharp": "^0.34.5",
+    "sonner": "^2.0.7",
+    "tailwind-merge": "^3.5.0",
     "tailwindcss-animate": "^1.0.7",
-    "uuid": "^10.0.0",
-    "zod": "^3.25.76"
+    "uuid": "^11.0.4",
+    "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@types/node": "^24.9.1",
-    "@types/react": "^19.2.2",
-    "@types/react-dom": "^19.2.2",
-    "@tailwindcss/postcss": "^4.1.16",
-    "autoprefixer": "^10.4.21",
-    "eslint": "^9.38.0",
-    "eslint-config-next": "^16.0.6",
-    "postcss": "^8.5.6",
-    "tailwindcss": "^4.1.16",
+    "@types/node": "^24.12.2",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@tailwindcss/postcss": "^4.2.4",
+    "autoprefixer": "^10.5.0",
+    "eslint": "^9.39.4",
+    "eslint-config-next": "16.2.7",
+    "postcss": "^8.5.12",
+    "tailwindcss": "^4.2.4",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.46.2"
+    "typescript-eslint": "^8.59.1"
   }
 }