EpicNext-Cms/next.config.ts

import { execFileSync } from "node:child_process";
import withBundleAnalyzer from "@next/bundle-analyzer";
import type { NextConfig } from "next";
import createNextIntlPlugin from "next-intl/plugin";

function resolveDeploymentId(): string | undefined {
	const configuredId = process.env.NEXT_DEPLOYMENT_ID?.trim();
	if (configuredId) return configuredId;

	try {
		return execFileSync("git", ["rev-parse", "HEAD"], {
			encoding: "utf8",
			stdio: ["ignore", "pipe", "ignore"],
		}).trim();
	} catch {
		return process.env.APP_VERSION?.trim() || undefined;
	}
}

const securityHeaders = [
	{ key: "X-DNS-Prefetch-Control", value: "on" },
	{
		key: "Strict-Transport-Security",
		value: "max-age=63072000; includeSubDomains; preload",
	},
	{ key: "X-Frame-Options", value: "DENY" },
	{ key: "X-Content-Type-Options", value: "nosniff" },
	{ key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
	{
		key: "Permissions-Policy",
		value: "camera=(), microphone=(), geolocation=(), interest-cohort=()",
	},
	// CSP is set per-request in src/proxy.ts with a script nonce (no 'unsafe-inline' for scripts).
];

const nextConfig: NextConfig = {
	cacheComponents: true,
	deploymentId: resolveDeploymentId(),
	serverExternalPackages: ["lzma", "sharp", "pino", "pino-pretty"],

	// The /admin/import hub was consolidated into the catalogue studio at
	// /admin/studio. Redirect the old routes so bookmarks/links don't 404.
	async redirects() {
		return [
			{
				source: "/admin/import",
				destination: "/admin/studio/furni",
				permanent: true,
			},
			{
				source: "/admin/import/badges",
				destination: "/admin/studio/badges",
				permanent: true,
			},
			{
				source: "/admin/import/furni",
				destination: "/admin/studio/furni",
				permanent: true,
			},
			{
				source: "/admin/import/furni/upload",
				destination: "/admin/studio/upload",
				permanent: true,
			},
			{
				source: "/admin/import/clothing",
				destination: "/admin/studio/clothing",
				permanent: true,
			},
			{
				source: "/admin/import/effects",
				destination: "/admin/studio/effects",
				permanent: true,
			},
			{
				source: "/admin/import/pets",
				destination: "/admin/studio/pets",
				permanent: true,
			},
			{
				source: "/admin/import/clone",
				destination: "/admin/studio/clone",
				permanent: true,
			},
			{
				source: "/admin/import/sync",
				destination: "/admin/studio/sync",
				permanent: true,
			},
			{
				source: "/admin/import/repair-icons",
				destination: "/admin/studio/repair-icons",
				permanent: true,
			},
			{
				source: "/admin/import/audit",
				destination: "/admin/studio/audit",
				permanent: true,
			},
		];
	},

	// Silence Turbopack warnings for the broad file patterns in src/lib.
	turbopack: {
		ignoreIssue: [
			{
				path: "**/src/lib/**",
			},
		],
	},

	typescript: {
		ignoreBuildErrors: false,
	},

	// Compress responses with gzip/brotli.
	compress: true,

	// Disable Next.js telemetry and browser sourcemaps in production.
	productionBrowserSourceMaps: false,

	experimental: {
		useTypeScriptCli: true,
		hideLogsAfterAbort: true,
	},

	// Optimize images served through next/image with sharp → AVIF/WebP.
	images: {
		formats: ["image/avif", "image/webp"],
	},

	// Add caching headers for static assets
	async headers() {
		return [
			{
				source: "/(.*)",
				headers: securityHeaders,
			},
			{
				source: "/assets/(.*)",
				headers: [
					{
						key: "Cache-Control",
						value: "public, max-age=31536000, immutable",
					},
				],
			},
			{
				source: "/images/(.*)",
				headers: [{ key: "Cache-Control", value: "public, max-age=86400" }],
			},
		];
	},
};

// next-intl WITHOUT i18n routing — locale comes from the NEXT_LOCALE cookie via
// src/i18n/request.ts, so URLs and the access-guard middleware stay unchanged.
const withNextIntl = createNextIntlPlugin("./src/i18n/request.ts");

const config = withNextIntl(nextConfig);

const withBA = withBundleAnalyzer({
	enabled: process.env.ANALYZE === "true",
});

export default withBA(config);