dh-remixer-sdk 0.0.36 → 0.0.37-0df23bc

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dh-remixer-sdk",
-  "version": "0.0.36",
+  "version": "0.0.37-0df23bc",
   "type": "module",
   "files": [
     "templates",

package/scripts/ssg-helmet/prerenderer.mjs

@@ -334,6 +334,28 @@ export class Prerenderer {
     // can't parse it when spawned directly — and use a clean headless flag.
     const args = chromium.args.filter((a) => !a.startsWith("--headless"));
     args.push("--headless=new");
+    // Ads/analytics are never part of the prerendered SEO HTML, and their
+    // iframes keep loading/beaconing so the page never reaches network-idle
+    // (AI-7017: ~15s idle-cap burned per page × N pages → 540s Lambda kill).
+    // They load in cross-origin (out-of-process) frames, so a top-level CDP
+    // Network.setBlockedURLs never sees them — fail their DNS browser-wide
+    // instead, which applies to every render process/frame. Ad requests then
+    // error instantly and each page reaches network-idle in <1s. Keep this to
+    // ad/tracking hosts only — do NOT block *.googleapis.com (Maps geocoding,
+    // Fonts) or the app's own APIs.
+    const AD_TRACKING_HOSTS = [
+      "*.googlesyndication.com",
+      "*.doubleclick.net",
+      "*.googleadservices.com",
+      "*.googletagservices.com",
+      "*.adtrafficquality.google",
+      "*.google-analytics.com",
+      "*.googletagmanager.com",
+    ];
+    args.push(
+      "--host-resolver-rules=" +
+        AD_TRACKING_HOSTS.map((h) => `MAP ${h} ~NOTFOUND`).join(","),
+    );
     args.push(
       `--user-data-dir=/tmp/chrome-data-${debugPort}`,
       `--remote-debugging-port=${debugPort}`,

package/templates/base/remixer/auth.ts

@@ -15,8 +15,6 @@ async function brokerEmailAuth(path: 'signin' | 'signup', email: string, passwor
       email,
       password,
       metadata,
-      // Land email-confirmation on /account so the generated Account page's
-      // exchange handler redeems the code — same return target as Google sign-in.
       return_to: `${window.location.origin}/account`,
     }),
   });
@@ -83,6 +81,46 @@ export const auth = {
       refresh_token: payload.refresh_token,
     });
   },
+
+  async resetPassword(email: string) {
+    const res = await fetch(`${getAuthBrokerBaseUrl()}/auth/email/reset`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({
+        email,
+        return_to: `${window.location.origin}/reset-password`,
+      }),
+    });
+
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body.error || `Password reset failed (${res.status})`);
+    }
+
+    return res.json();
+  },
+
+  async updatePassword(newPassword: string) {
+    const session = await getProjectSession();
+    const accessToken = session?.access_token;
+    if (!accessToken) throw new Error('No active session to update password');
+
+    const res = await fetch(`${getAuthBrokerBaseUrl()}/auth/email/update-password`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${accessToken}`,
+      },
+      body: JSON.stringify({ password: newPassword }),
+    });
+
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body.error || `Password update failed (${res.status})`);
+    }
+
+    return res.json();
+  },
   signOut() {
     return supabase.auth.signOut();
   },