create-nextjs-cms 0.5.68 → 0.5.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-nextjs-cms",
-  "version": "0.5.68",
+  "version": "0.5.69",
   "private": false,
   "type": "module",
   "bin": {
@@ -29,8 +29,8 @@
     "tsx": "^4.20.6",
     "typescript": "^5.9.2",
     "@lzcms/eslint-config": "0.3.0",
-    "@lzcms/prettier-config": "0.1.0",
-    "@lzcms/tsconfig": "0.1.0"
+    "@lzcms/tsconfig": "0.1.0",
+    "@lzcms/prettier-config": "0.1.0"
   },
   "prettier": "@lzcms/prettier-config",
   "scripts": {

package/templates/default/app/(rootLayout)/(plugins)/[...slug]/page.tsx

@@ -1,7 +1,8 @@
-import { notFound, redirect } from 'next/navigation'
-import { api, HydrateClient } from 'nextjs-cms/api/trpc/server'
+import { notFound } from 'next/navigation'
+import auth from 'nextjs-cms/auth'
+import { getAdminPrivileges } from 'nextjs-cms/api/helpers'
 import { findPluginRouteByPath } from 'nextjs-cms/plugins/server'
-import PluginClient from './PluginClient'
+import { getPluginServerComponent } from './plugin-server-registry'
 
 export const dynamic = 'force-dynamic'
 type Params = Promise<{ slug?: string[] }>
@@ -10,32 +11,26 @@ export default async function Page(props: { params: Params }) {
     const params = await props.params
     const slug = params.slug ?? []
 
-    if (slug[0] === 'plugin') {
-        const rest = slug.slice(1)
-        if (rest.length === 0) {
-            const routes = await api.plugins.routes()
-            const target = routes[0]?.path
-            if (target) {
-                redirect(target)
-            }
-            notFound()
-        }
-        redirect(`/${rest.join('/')}`)
+    const path = `/${slug.join('/')}`
+    const session = await auth()
+    if (!session?.user) {
+        notFound()
     }
 
-    const path = `/${slug.join('/')}`
-    const route = await findPluginRouteByPath(path)
-    if (!route) {
+    const plugin = await findPluginRouteByPath(path)
+    if (!plugin) {
         notFound()
     }
 
-    if (route.prefetch) {
-        await route.prefetch({ api })
+    const privilegeSet = await getAdminPrivileges(session.user.id)
+    if (!privilegeSet.has(plugin.pluginName)) {
+        notFound()
+    }
+
+    const PluginComponent = await getPluginServerComponent(plugin.pluginId, plugin.component)
+    if (!PluginComponent) {
+        notFound()
     }
 
-    return (
-        <HydrateClient>
-            <PluginClient packageName={route.pluginId} component={route.component} />
-        </HydrateClient>
-    )
+    return <PluginComponent />
 }

package/templates/default/app/(rootLayout)/(plugins)/[...slug]/plugin-server-registry.ts

@@ -0,0 +1,25 @@
+import type { ReactNode } from 'react'
+import { pluginServerLoaders } from 'nextjs-cms/plugins/server'
+
+export type PluginServerComponent = (props?: Record<string, unknown>) => ReactNode | Promise<ReactNode>
+
+export type PluginServerModule = {
+    default?: PluginServerComponent
+    [key: string]: unknown
+}
+
+export const getPluginServerComponent = async (packageName: string, componentName: string | undefined) => {
+    const loader = pluginServerLoaders[packageName]
+    if (!loader) return null
+
+    const mod = await loader()
+    const resolved = componentName
+        ? (mod as Record<string, PluginServerComponent | undefined>)[componentName]
+        : mod.default
+
+    if (!resolved || typeof resolved !== 'function') {
+        return null
+    }
+
+    return resolved
+}

package/templates/default/app/(rootLayout)/dashboard/page.tsx

@@ -0,0 +1,44 @@
+export const dynamic = 'force-dynamic'
+
+export default function DashboardPage() {
+    return (
+        <div className='w-full'>
+            <div className='bg-linear-to-r from-amber-200 via-orange-200 to-rose-200 p-8 text-foreground dark:from-amber-900 dark:via-orange-900 dark:to-rose-900'>
+                <h1 className='text-3xl font-extrabold tracking-tight'>Welcome to Mission Control</h1>
+                <p className='mt-2 text-base text-muted-foreground'>
+                    Your CMS is ready. Chart a course, publish boldly, and keep the lights green.
+                </p>
+            </div>
+
+            <div className='space-y-6 p-6'>
+                <section className='rounded-lg border bg-card p-6 text-card-foreground shadow-sm'>
+                    <h2 className='text-xl font-semibold'>Today&apos;s focus</h2>
+                    <p className='mt-2 text-sm text-muted-foreground'>
+                        Start with one small win: verify a section, ship a quick update, or polish a headline.
+                    </p>
+                </section>
+
+                <section className='grid gap-4 md:grid-cols-3'>
+                    <div className='rounded-lg border bg-card p-4 text-card-foreground shadow-sm'>
+                        <div className='text-sm font-semibold'>Ship with confidence</div>
+                        <div className='mt-2 text-sm text-muted-foreground'>
+                            Keep changes tight and reversible. Small releases, fast feedback.
+                        </div>
+                    </div>
+                    <div className='rounded-lg border bg-card p-4 text-card-foreground shadow-sm'>
+                        <div className='text-sm font-semibold'>Stay organized</div>
+                        <div className='mt-2 text-sm text-muted-foreground'>
+                            Group your content by intent, not just by type.
+                        </div>
+                    </div>
+                    <div className='rounded-lg border bg-card p-4 text-card-foreground shadow-sm'>
+                        <div className='text-sm font-semibold'>Delight users</div>
+                        <div className='mt-2 text-sm text-muted-foreground'>
+                            A clean headline and a single strong image can do the heavy lifting.
+                        </div>
+                    </div>
+                </section>
+            </div>
+        </div>
+    )
+}

package/templates/default/app/_trpc/client.ts

@@ -1,4 +1,3 @@
-import type { AppRouter } from 'nextjs-cms/api'
-import { createTRPCReact } from '@trpc/react-query'
-
-export const trpc = createTRPCReact<AppRouter>()
+'use client'
+
+export { trpc } from 'nextjs-cms/api/trpc/client'

package/templates/default/app/api/editor/photo/route.ts

@@ -2,6 +2,13 @@ import { NextRequest, NextResponse } from 'next/server'
 import sharp from 'sharp'
 import auth from 'nextjs-cms/auth'
 
+/**
+ * This route handler is used to use a photo in rich text editor
+ * It expects an image file in the request body
+ * It returns the base64 string of the image
+ * @param request
+ * @returns NextResponse with the base64 string of the image
+ */
 export async function POST(request: NextRequest) {
     const session = await auth()
 

package/templates/default/app/api/video/route.ts

@@ -65,7 +65,7 @@ export async function GET(request: NextRequest) {
     if (!section || !section.name) {
         return NextResponse.json(
             {
-                error: 'Invalid file path',
+                error: 'File not found, or you do not have access to it.',
             },
             { status: 400 },
         )

package/templates/default/components/AdminCard.tsx

@@ -4,6 +4,7 @@ import useModal from '@/hooks/useModal'
 import ProtectedImage from '@/components/ProtectedImage'
 import AdminEditPage from '@/components/AdminEditPage'
 import { useToast } from '@/components/ui/use-toast'
+import { ScrollArea } from '@/components/ui/scroll-area'
 import { Card, CardContent, CardFooter, CardHeader, CardTitle } from '@/components/ui/card'
 import { Badge } from '@/components/ui/badge'
 import { Button } from '@/components/ui/button'
@@ -76,28 +77,30 @@ export default function AdminCard({
                                     height={50}
                                     width={50}
                                     alt={admin.username}
-                                    className='rounded-full ring-2 ring-inset ring-amber-300'
+                                    className='rounded-full ring-2 ring-amber-300 ring-inset'
                                 />
                             )}
                         </div>
                         <div className='flex flex-col break-all'>
-                            <div className='text-sm font-medium text-foreground'>
+                            <div className='text-foreground text-sm font-medium'>
                                 <div className='font-bold'>{admin.username}</div>
                             </div>
                         </div>
                     </div>
                 </CardTitle>
             </CardHeader>
-            <CardContent>
-                <div className='flex flex-wrap gap-2'>
-                    {admin.roles &&
-                        admin.roles.length > 0 &&
-                        admin.roles.map((role, index: number) => (
-                            <Badge key={index} className='border-foreground' variant='secondary'>
-                                {role.sectionName} ({role.operations})
-                            </Badge>
-                        ))}
-                </div>
+            <CardContent className='p-1'>
+                <ScrollArea className='bg-accent/50 h-[100px] p-2' type='always'>
+                    <div className='flex flex-wrap gap-2'>
+                        {admin.roles &&
+                            admin.roles.length > 0 &&
+                            admin.roles.map((role, index: number) => (
+                                <Badge key={index} className='border-foreground/30' variant='outline'>
+                                    {role.sectionName} ({role.operations})
+                                </Badge>
+                            ))}
+                    </div>
+                </ScrollArea>
             </CardContent>
             <CardFooter className='flex flex-wrap gap-4'>
                 <Button

package/templates/default/components/form/helpers/_section-hot-reload.js

@@ -8,4 +8,4 @@ export const revalidate = 0
 
 // @refresh reset
 
-export const configLastUpdated = 1767359297387
+export const configLastUpdated = 1767365990312

package/templates/default/next.config.ts

@@ -1,36 +1,7 @@
 import type { NextConfig } from 'next'
 
 const nextConfig: NextConfig = {
-    serverExternalPackages: [
-        'esbuild',
-        'esbuild-register',
-        '@esbuild/win32-x64',
-        // optional: if you deploy to linux/mac too, include these:
-        '@esbuild/linux-x64',
-        '@esbuild/linux-arm64',
-        '@esbuild/darwin-x64',
-        '@esbuild/darwin-arm64',
-    ],
-    turbopack: {
-        rules: {
-            'esbuild.exe': {
-                loaders: ['raw-loader'],
-                as: 'executable',
-            },
-            '*.md': {
-                loaders: ['raw-loader'],
-                as: '*.js',
-            },
-        },
-    },
 
-    typescript: {
-        // !! WARN !!
-        // Dangerously allow production builds to successfully complete even if
-        // your project has type errors.
-        // !! WARN !!
-        ignoreBuildErrors: true,
-    },
     reactStrictMode: true,
     async rewrites() {
         return [
@@ -42,27 +13,16 @@ const nextConfig: NextConfig = {
     },
     images: {
         formats: ['image/avif', 'image/webp'],
-        unoptimized: true,
-        remotePatterns: [
-            {
-                protocol: 'https',
-                hostname: 'lazemnicms.com',
-                port: '',
-                pathname: '/**',
-            },
-            {
-                protocol: 'https',
-                hostname: 'api.lazemnicms.com',
-                port: '',
-                pathname: '/**',
-            },
-            {
-                protocol: 'https',
-                hostname: 'images.lazemnicms.com',
-                port: '',
-                pathname: '/**',
-            },
-        ],
+        remotePatterns: [
+            // Use remotePatterns in your next.config.js file to allow images from specific external paths and block all others.
+            // https://nextjs.org/docs/app/api-reference/components/image#remotepatterns
+            // {
+            //     protocol: 'https',
+            //     hostname: 'example.com',
+            //     port: '',
+            //     pathname: '/**',
+            // },
+        ],
     },
 }
 

package/templates/default/package.json

@@ -64,7 +64,7 @@
     "nanoid": "^5.1.2",
     "next": "16.1.1",
     "next-themes": "^0.4.6",
-    "nextjs-cms": "0.5.68",
+    "nextjs-cms": "0.5.69",
     "plaiceholder": "^3.0.0",
     "prettier-plugin-tailwindcss": "^0.7.2",
     "qrcode": "^1.5.4",
@@ -97,7 +97,7 @@
     "eslint-config-prettier": "^10.0.1",
     "eslint-plugin-prettier": "^5.2.3",
     "fs-extra": "^11.3.3",
-    "nextjs-cms-kit": "0.5.68",
+    "nextjs-cms-kit": "0.5.69",
     "postcss": "^8.5.1",
     "prettier": "3.5.0",
     "raw-loader": "^4.0.2",

package/templates/default/app/(rootLayout)/(plugins)/[...slug]/PluginClient.tsx

@@ -1,55 +0,0 @@
-'use client'
-
-import dynamic from 'next/dynamic'
-import React, { useMemo } from 'react'
-import { trpc } from '@/app/_trpc/client'
-import { getPluginClientLoader } from './plugin-registry'
-
-type PluginClientProps = {
-    packageName: string
-    component: string
-}
-
-const isComponentType = (value: unknown): value is React.ComponentType<any> => {
-    if (typeof value === 'function') return true
-    if (typeof value === 'object' && value !== null && '$$typeof' in value) return true
-    return false
-}
-
-export function PluginClient({ packageName, component }: PluginClientProps) {
-    const loader = getPluginClientLoader(packageName)
-    if (!loader) {
-        return <div className='text-destructive p-6 text-sm'>Plugin client package not registered: {packageName}</div>
-    }
-
-    const Component = useMemo(
-        () =>
-            dynamic(
-                async () => {
-                    const mod = await loader()
-                    const resolved =
-                        (mod.components && mod.components[component]) ||
-                        (mod as Record<string, React.ComponentType<any>>)[component] ||
-                        mod.default
-
-                    if (!resolved || !isComponentType(resolved)) {
-                        return {
-                            default: () => (
-                                <div className='text-destructive p-6 text-sm'>
-                                    Plugin component not found: {component}
-                                </div>
-                            ),
-                        }
-                    }
-
-                    return { default: resolved }
-                },
-                { ssr: false },
-            ),
-        [component, loader],
-    )
-
-    return <Component trpc={trpc} />
-}
-
-export default PluginClient

package/templates/default/app/(rootLayout)/(plugins)/[...slug]/plugin-registry.ts

@@ -1,16 +0,0 @@
-import type { ComponentType } from 'react'
-
-export type PluginClientComponent = ComponentType<any>
-
-export type PluginClientModule = {
-    components?: Record<string, PluginClientComponent>
-    default?: unknown
-    [key: string]: unknown
-}
-
-export type PluginClientLoader = () => Promise<PluginClientModule>
-
-// Keep this list in sync with cms.config.ts and apps/cms/package.json.
-const pluginClientLoaders: Record<string, PluginClientLoader> = {}
-
-export const getPluginClientLoader = (packageName: string) => pluginClientLoaders[packageName]

package/templates/default/apps/cms/node_modules/next/node_modules/_tmp_40516_de1b9f7e36eccb968b79dbd2b8c388ea/LICENSE

@@ -1,191 +0,0 @@
-Apache License
-Version 2.0, January 2004
-http://www.apache.org/licenses/
-
-TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-1. Definitions.
-
-"License" shall mean the terms and conditions for use, reproduction, and
-distribution as defined by Sections 1 through 9 of this document.
-
-"Licensor" shall mean the copyright owner or entity authorized by the copyright
-owner that is granting the License.
-
-"Legal Entity" shall mean the union of the acting entity and all other entities
-that control, are controlled by, or are under common control with that entity.
-For the purposes of this definition, "control" means (i) the power, direct or
-indirect, to cause the direction or management of such entity, whether by
-contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the
-outstanding shares, or (iii) beneficial ownership of such entity.
-
-"You" (or "Your") shall mean an individual or Legal Entity exercising
-permissions granted by this License.
-
-"Source" form shall mean the preferred form for making modifications, including
-but not limited to software source code, documentation source, and configuration
-files.
-
-"Object" form shall mean any form resulting from mechanical transformation or
-translation of a Source form, including but not limited to compiled object code,
-generated documentation, and conversions to other media types.
-
-"Work" shall mean the work of authorship, whether in Source or Object form, made
-available under the License, as indicated by a copyright notice that is included
-in or attached to the work (an example is provided in the Appendix below).
-
-"Derivative Works" shall mean any work, whether in Source or Object form, that
-is based on (or derived from) the Work and for which the editorial revisions,
-annotations, elaborations, or other modifications represent, as a whole, an
-original work of authorship. For the purposes of this License, Derivative Works
-shall not include works that remain separable from, or merely link (or bind by
-name) to the interfaces of, the Work and Derivative Works thereof.
-
-"Contribution" shall mean any work of authorship, including the original version
-of the Work and any modifications or additions to that Work or Derivative Works
-thereof, that is intentionally submitted to Licensor for inclusion in the Work
-by the copyright owner or by an individual or Legal Entity authorized to submit
-on behalf of the copyright owner. For the purposes of this definition,
-"submitted" means any form of electronic, verbal, or written communication sent
-to the Licensor or its representatives, including but not limited to
-communication on electronic mailing lists, source code control systems, and
-issue tracking systems that are managed by, or on behalf of, the Licensor for
-the purpose of discussing and improving the Work, but excluding communication
-that is conspicuously marked or otherwise designated in writing by the copyright
-owner as "Not a Contribution."
-
-"Contributor" shall mean Licensor and any individual or Legal Entity on behalf
-of whom a Contribution has been received by Licensor and subsequently
-incorporated within the Work.
-
-2. Grant of Copyright License.
-
-Subject to the terms and conditions of this License, each Contributor hereby
-grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
-irrevocable copyright license to reproduce, prepare Derivative Works of,
-publicly display, publicly perform, sublicense, and distribute the Work and such
-Derivative Works in Source or Object form.
-
-3. Grant of Patent License.
-
-Subject to the terms and conditions of this License, each Contributor hereby
-grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free,
-irrevocable (except as stated in this section) patent license to make, have
-made, use, offer to sell, sell, import, and otherwise transfer the Work, where
-such license applies only to those patent claims licensable by such Contributor
-that are necessarily infringed by their Contribution(s) alone or by combination
-of their Contribution(s) with the Work to which such Contribution(s) was
-submitted. If You institute patent litigation against any entity (including a
-cross-claim or counterclaim in a lawsuit) alleging that the Work or a
-Contribution incorporated within the Work constitutes direct or contributory
-patent infringement, then any patent licenses granted to You under this License
-for that Work shall terminate as of the date such litigation is filed.
-
-4. Redistribution.
-
-You may reproduce and distribute copies of the Work or Derivative Works thereof
-in any medium, with or without modifications, and in Source or Object form,
-provided that You meet the following conditions:
-
-You must give any other recipients of the Work or Derivative Works a copy of
-this License; and
-You must cause any modified files to carry prominent notices stating that You
-changed the files; and
-You must retain, in the Source form of any Derivative Works that You distribute,
-all copyright, patent, trademark, and attribution notices from the Source form
-of the Work, excluding those notices that do not pertain to any part of the
-Derivative Works; and
-If the Work includes a "NOTICE" text file as part of its distribution, then any
-Derivative Works that You distribute must include a readable copy of the
-attribution notices contained within such NOTICE file, excluding those notices
-that do not pertain to any part of the Derivative Works, in at least one of the
-following places: within a NOTICE text file distributed as part of the
-Derivative Works; within the Source form or documentation, if provided along
-with the Derivative Works; or, within a display generated by the Derivative
-Works, if and wherever such third-party notices normally appear. The contents of
-the NOTICE file are for informational purposes only and do not modify the
-License. You may add Your own attribution notices within Derivative Works that
-You distribute, alongside or as an addendum to the NOTICE text from the Work,
-provided that such additional attribution notices cannot be construed as
-modifying the License.
-You may add Your own copyright statement to Your modifications and may provide
-additional or different license terms and conditions for use, reproduction, or
-distribution of Your modifications, or for any such Derivative Works as a whole,
-provided Your use, reproduction, and distribution of the Work otherwise complies
-with the conditions stated in this License.
-
-5. Submission of Contributions.
-
-Unless You explicitly state otherwise, any Contribution intentionally submitted
-for inclusion in the Work by You to the Licensor shall be under the terms and
-conditions of this License, without any additional terms or conditions.
-Notwithstanding the above, nothing herein shall supersede or modify the terms of
-any separate license agreement you may have executed with Licensor regarding
-such Contributions.
-
-6. Trademarks.
-
-This License does not grant permission to use the trade names, trademarks,
-service marks, or product names of the Licensor, except as required for
-reasonable and customary use in describing the origin of the Work and
-reproducing the content of the NOTICE file.
-
-7. Disclaimer of Warranty.
-
-Unless required by applicable law or agreed to in writing, Licensor provides the
-Work (and each Contributor provides its Contributions) on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied,
-including, without limitation, any warranties or conditions of TITLE,
-NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are
-solely responsible for determining the appropriateness of using or
-redistributing the Work and assume any risks associated with Your exercise of
-permissions under this License.
-
-8. Limitation of Liability.
-
-In no event and under no legal theory, whether in tort (including negligence),
-contract, or otherwise, unless required by applicable law (such as deliberate
-and grossly negligent acts) or agreed to in writing, shall any Contributor be
-liable to You for damages, including any direct, indirect, special, incidental,
-or consequential damages of any character arising as a result of this License or
-out of the use or inability to use the Work (including but not limited to
-damages for loss of goodwill, work stoppage, computer failure or malfunction, or
-any and all other commercial damages or losses), even if such Contributor has
-been advised of the possibility of such damages.
-
-9. Accepting Warranty or Additional Liability.
-
-While redistributing the Work or Derivative Works thereof, You may choose to
-offer, and charge a fee for, acceptance of support, warranty, indemnity, or
-other liability obligations and/or rights consistent with this License. However,
-in accepting such obligations, You may act only on Your own behalf and on Your
-sole responsibility, not on behalf of any other Contributor, and only if You
-agree to indemnify, defend, and hold each Contributor harmless for any liability
-incurred by, or claims asserted against, such Contributor by reason of your
-accepting any such warranty or additional liability.
-
-END OF TERMS AND CONDITIONS
-
-APPENDIX: How to apply the Apache License to your work
-
-To apply the Apache License to your work, attach the following boilerplate
-notice, with the fields enclosed by brackets "[]" replaced with your own
-identifying information. (Don't include the brackets!) The text should be
-enclosed in the appropriate comment syntax for the file format. We also
-recommend that a file or class name and description of purpose be included on
-the same "printed page" as the copyright notice for easier identification within
-third-party archives.
-
-   Copyright [yyyy] [name of copyright owner]
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-     http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.