@base44-preview/vite-plugin 1.0.24-pr.96.c1a9a67 → 1.0.27-pr.98.00a0055

package/README.md

@@ -48,6 +48,62 @@ The plugin registers four sub-plugins when running in a sandbox (`MODAL_SANDBOX_
 
 Outside a sandbox, only the core plugin runs (with optional API proxy support via `VITE_BASE44_APP_BASE_URL`).
 
+### Build-status endpoint
+
+An opt-in, dev-only (`apply: "serve"`) endpoint that reports the last build /
+compile / HMR error observed by the dev server. It exists solely to let the
+preview backend poll for post-load errors — it is **never** part of a
+production build.
+
+Enable it by setting the environment variable at dev-server start:
+
+```bash
+BASE44_BUILD_STATUS_ENABLED=1
+```
+
+The env var is checked when the plugin assembles its plugin list (config load),
+so the generated app's `vite.config.js` does not need to change. When it is
+unset, the build-status sub-plugin is not added to the pipeline at all — its
+`configureServer` hook is never reached.
+
+When enabled, the plugin serves:
+
+```
+GET /__build_status
+```
+
+- **Loopback-only.** Requests from any non-loopback `remoteAddress`
+  (`127.0.0.1`, `::1`, `::ffff:127.0.0.1`) fall through as if the route did
+  not exist. Non-`GET` methods fall through too.
+- **Always `200`.** Health lives in the body, not the status code — a `500`
+  would trip the preview proxy's own error path. The body is:
+
+  ```json
+  { "ok": true, "error": null }
+  ```
+
+  or, when an error is outstanding:
+
+  ```json
+  { "ok": false, "error": { "message": "…", "frame": "…", "loc": { "…": 0 } } }
+  ```
+
+- **Scrubbed.** Even though the endpoint is loopback-only (the backend relays a
+  trimmed form onward), the error is size-capped and absolute filesystem paths
+  are stripped down to basenames.
+- **Fail-open.** All setup and request handling is wrapped in `try/catch` so a
+  bug in this plugin can never break the dev server.
+
+How it works: `configureServer` wraps the HMR send channel
+(`server.hot ?? server.ws`). An `error` payload records the last error; a
+successful `update` or `full-reload` clears it.
+
+**Cold-start caveat & scope.** Errors thrown *before any client has connected*
+are not sent over the HMR channel, so a boot-time transform failure may briefly
+read `ok: true`. That window is already covered server-side by the existing
+`dev_server_error_classifier` (install / start failures surface as `409`). This
+endpoint's job is **post-load HMR / compile errors**, not cold-start failures.
+
 ### Sandbox Injections
 
 In **dev mode**, individual `<script type="module" src="...">` tags are injected for each feature, loaded directly from `node_modules`:

package/dist/build-status-plugin.d.ts

@@ -0,0 +1,8 @@
+import type { Plugin } from "vite";
+/**
+ * Produce a trimmed, path-stripped, size-capped view of an HMR error
+ * payload. Returns `null` when there is no error.
+ */
+export declare function scrub(err: unknown): Record<string, unknown> | null;
+export declare function buildStatusPlugin(): Plugin;
+//# sourceMappingURL=build-status-plugin.d.ts.map

package/dist/build-status-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-status-plugin.d.ts","sourceRoot":"","sources":["../src/build-status-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,MAAM,EAAiB,MAAM,MAAM,CAAC;AAyE3D;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CA2ClE;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAsE1C"}

package/dist/build-status-plugin.js

@@ -0,0 +1,170 @@
+/**
+ * Opt-in, loopback-gated dev-server endpoint that reports the last
+ * build / compile / HMR error observed since the dev server started.
+ *
+ * `GET /__build_status` responds `200` with a JSON body:
+ *   { ok: boolean, error: <scrubbed error> | null }
+ *
+ * The endpoint is:
+ *   - dev-only (`apply: "serve"`) — it never exists in a production build;
+ *   - loopback-only — requests from non-loopback addresses fall through.
+ *
+ * Enablement (the `BASE44_BUILD_STATUS_ENABLED` env-var check) is decided by
+ * the caller in `index.ts`, which only adds this plugin to the array when the
+ * endpoint is wanted — so `configureServer` here is never even reached when
+ * the feature is off.
+ *
+ * The status is always reported in the body with HTTP `200`, even on error:
+ * a `500` here would trip the preview proxy's own error path.
+ *
+ * Cold-start caveat: errors thrown before any client has connected are not
+ * sent over the HMR channel, so a boot-time transform failure may briefly
+ * read `ok: true`. That window is covered server-side by the existing
+ * dev_server_error_classifier. This endpoint reports post-load
+ * HMR / compile errors.
+ */
+const ENDPOINT = "/__build_status";
+/** Max characters kept per scrubbed string field. */
+const MAX_FIELD = 4000;
+/** Max characters kept for the code frame. */
+const MAX_FRAME = 2000;
+const LOOPBACK_ADDRESSES = new Set([
+    "127.0.0.1",
+    "::1",
+    "::ffff:127.0.0.1",
+]);
+function isLoopback(remoteAddress) {
+    return remoteAddress !== undefined && LOOPBACK_ADDRESSES.has(remoteAddress);
+}
+function clip(value, max) {
+    if (typeof value !== "string" || value.length === 0)
+        return undefined;
+    return value.length > max ? `${value.slice(0, max)}… [truncated]` : value;
+}
+/**
+ * Strip absolute filesystem paths down to their basename so directory
+ * structure never leaks. This is loopback-only, but the backend relays a
+ * trimmed form, so scrub before it leaves this process.
+ */
+function stripPaths(value) {
+    return (value
+        // Windows: C:\Users\foo\bar\file.ext -> file.ext
+        .replace(/[A-Za-z]:\\[^\s:*?"<>|]+/g, (m) => m.split(/[\\/]/).pop() ?? m)
+        // POSIX absolute: /Users/foo/bar/file.ext -> file.ext
+        .replace(/\/(?:[^\s:/]+\/)+[^\s:/]+/g, (m) => m.split("/").pop() ?? m));
+}
+function scrubString(value, max) {
+    const clipped = clip(value, max);
+    return clipped === undefined ? undefined : stripPaths(clipped);
+}
+/**
+ * Produce a trimmed, path-stripped, size-capped view of an HMR error
+ * payload. Returns `null` when there is no error.
+ */
+export function scrub(err) {
+    if (err === null || err === undefined)
+        return null;
+    if (typeof err !== "object") {
+        const message = scrubString(String(err), MAX_FIELD);
+        return message === undefined ? null : { message };
+    }
+    const e = err;
+    const out = {};
+    const message = scrubString(e["message"], MAX_FIELD);
+    if (message !== undefined)
+        out["message"] = message;
+    const stack = scrubString(e["stack"], MAX_FIELD);
+    if (stack !== undefined)
+        out["stack"] = stack;
+    const frame = scrubString(e["frame"], MAX_FRAME);
+    if (frame !== undefined)
+        out["frame"] = frame;
+    const id = scrubString(e["id"], MAX_FIELD);
+    if (id !== undefined)
+        out["id"] = id;
+    const plugin = scrubString(e["plugin"], 200);
+    if (plugin !== undefined)
+        out["plugin"] = plugin;
+    const loc = e["loc"];
+    if (loc && typeof loc === "object") {
+        const l = loc;
+        out["loc"] = {
+            file: scrubString(l["file"], MAX_FIELD),
+            line: typeof l["line"] === "number" ? l["line"] : undefined,
+            column: typeof l["column"] === "number" ? l["column"] : undefined,
+        };
+    }
+    // Fall back to a stringified form if we recognised nothing useful.
+    if (Object.keys(out).length === 0) {
+        const message = scrubString(String(e), MAX_FIELD);
+        return message === undefined ? {} : { message };
+    }
+    return out;
+}
+export function buildStatusPlugin() {
+    let lastError = null;
+    return {
+        name: "base44-build-status",
+        apply: "serve",
+        configureServer(server) {
+            try {
+                // Observe the HMR channel: an `error` payload records the last
+                // error; a successful `update` / `full-reload` clears it.
+                const ch = (server.hot ?? server.ws);
+                if (ch && typeof ch.send === "function") {
+                    const orig = ch.send.bind(ch);
+                    ch.send = (payload, ...rest) => {
+                        try {
+                            const p = payload;
+                            if (p?.type === "error") {
+                                lastError = p.err ?? null;
+                            }
+                            else if (p?.type === "update" || p?.type === "full-reload") {
+                                lastError = null;
+                            }
+                        }
+                        catch {
+                            // Never let bookkeeping break HMR delivery.
+                        }
+                        return orig(payload, ...rest);
+                    };
+                }
+                server.middlewares.use(ENDPOINT, (req, res, next) => {
+                    try {
+                        if (!isLoopback(req.socket?.remoteAddress)) {
+                            next();
+                            return;
+                        }
+                        if (req.method !== "GET") {
+                            next();
+                            return;
+                        }
+                        const body = JSON.stringify({
+                            ok: !lastError,
+                            error: scrub(lastError),
+                        });
+                        // Health lives in the body — keep 200 even on error so the
+                        // preview proxy doesn't treat this as a server failure.
+                        res.statusCode = 200;
+                        res.setHeader("Content-Type", "application/json");
+                        res.setHeader("Cache-Control", "no-store");
+                        res.end(body);
+                    }
+                    catch {
+                        // Fail open: a bug here must never break the dev server.
+                        try {
+                            next();
+                        }
+                        catch {
+                            // ignore
+                        }
+                    }
+                });
+            }
+            catch {
+                // Fail open: setup errors must never break the dev server.
+            }
+        },
+    };
+}
+//# sourceMappingURL=build-status-plugin.js.map

package/dist/build-status-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-status-plugin.js","sourceRoot":"","sources":["../src/build-status-plugin.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC,qDAAqD;AACrD,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,8CAA8C;AAC9C,MAAM,SAAS,GAAG,IAAI,CAAC;AAIvB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW;IACX,KAAK;IACL,kBAAkB;CACnB,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,aAAiC;IACnD,OAAO,aAAa,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,GAAW;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,CACL,KAAK;QACH,iDAAiD;SAChD,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzE,sDAAsD;SACrD,OAAO,CAAC,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,GAAW;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,GAAY;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QACpD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;IAEpD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAE9C,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAE9C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAErC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IAEjD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,GAAG,CAAC,KAAK,CAAC,GAAG;YACX,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;YACvC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3D,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAClD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,IAAI,SAAS,GAAY,IAAI,CAAC;IAE9B,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,OAAO;QACd,eAAe,CAAC,MAAqB;YACnC,IAAI,CAAC;gBACH,+DAA+D;gBAC/D,0DAA0D;gBAC1D,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAuC,CAAC;gBAC3E,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC9B,EAAE,CAAC,IAAI,GAAG,CAAC,OAAgB,EAAE,GAAG,IAAe,EAAE,EAAE;wBACjD,IAAI,CAAC;4BACH,MAAM,CAAC,GAAG,OAAuD,CAAC;4BAClE,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gCACxB,SAAS,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC;4BAC5B,CAAC;iCAAM,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gCAC7D,SAAS,GAAG,IAAI,CAAC;4BACnB,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,4CAA4C;wBAC9C,CAAC;wBACD,OAAO,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;oBAChC,CAAC,CAAC;gBACJ,CAAC;gBAED,MAAM,CAAC,WAAW,CAAC,GAAG,CACpB,QAAQ,EACR,CACE,GAA4B,EAC5B,GAAmB,EACnB,IAA0B,EAC1B,EAAE;oBACF,IAAI,CAAC;wBACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;4BAC3C,IAAI,EAAE,CAAC;4BACP,OAAO;wBACT,CAAC;wBACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;4BACzB,IAAI,EAAE,CAAC;4BACP,OAAO;wBACT,CAAC;wBAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;4BAC1B,EAAE,EAAE,CAAC,SAAS;4BACd,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC;yBACxB,CAAC,CAAC;wBACH,2DAA2D;wBAC3D,wDAAwD;wBACxD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;wBACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;wBAClD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;wBAC3C,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC;wBACP,yDAAyD;wBACzD,IAAI,CAAC;4BACH,IAAI,EAAE,CAAC;wBACT,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS;wBACX,CAAC;oBACH,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,MAAM,CAAC;AAW/C,MAAM,CAAC,OAAO,UAAU,UAAU,CAChC,IAAI,GAAE;IACJ,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACvB,iBAiOP"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAc,MAAM,MAAM,CAAC;AAU/C,MAAM,CAAC,OAAO,UAAU,UAAU,CAChC,IAAI,GAAE;IACJ,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACvB,iBA+NP"}

package/dist/index.js

@@ -3,8 +3,8 @@ import { errorOverlayPlugin } from "./error-overlay-plugin.js";
 import { visualEditPlugin } from "./visual-edit-plugin.js";
 import { filterPackagesInProject } from "./utils.js";
 import { htmlInjectionsPlugin } from "./html-injections-plugin.js";
+import { buildStatusPlugin } from "./build-status-plugin.js";
 const isRunningInSandbox = !!process.env.MODAL_SANDBOX_ID;
-const SANDBOX_DEP_CACHE_DIR = "/var/cache/base44-vite-deps";
 export default function vitePlugin(opts = {}) {
     const { legacySDKImports = false, hmrNotifier = false, navigationNotifier = false, visualEditAgent = false, analyticsTracker = false, } = opts;
     return [
@@ -29,17 +29,8 @@ export default function vitePlugin(opts = {}) {
                     ...(isRunningInSandbox
                         ? {
                             logLevel: "error",
-                            // The sandbox /app mount can't rename() dirs from the snapshot
-                            // layer (EXDEV), which breaks the dep optimizer's commit step.
-                            // Keep the dep cache on the container rootfs instead.
-                            cacheDir: SANDBOX_DEP_CACHE_DIR,
                             server: {
                                 cors: true,
-                                fs: {
-                                    // Explicit allow replaces Vite's defaults, so include the
-                                    // app root alongside the external cache dir (served via /@fs/).
-                                    allow: [root, SANDBOX_DEP_CACHE_DIR],
-                                },
                                 host: "0.0.0.0", // Bind to all interfaces for container access
                                 port: 5173,
                                 strictPort: true,
@@ -171,6 +162,13 @@ export default function vitePlugin(opts = {}) {
             : []),
         // HTML injections - handles both dev (sandbox) and production injections
         htmlInjectionsPlugin({ hmrNotifier, navigationNotifier, visualEditAgent, analyticsTracker }),
+        // Opt-in, loopback-gated dev-server build-status endpoint. Gated here on
+        // the BASE44_BUILD_STATUS_ENABLED env var so the generated app's
+        // vite.config.js doesn't need to change and the sub-plugin isn't even
+        // added to the pipeline when disabled. The endpoint itself is dev-only.
+        ...(process.env.BASE44_BUILD_STATUS_ENABLED === "1"
+            ? [buildStatusPlugin()]
+            : []),
     ];
 }
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,MAAM,kBAAkB,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAE1D,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAE5D,MAAM,CAAC,OAAO,UAAU,UAAU,CAChC,OAMI,EAAE;IAEN,MAAM,EACJ,gBAAgB,GAAG,KAAK,EACxB,WAAW,GAAG,KAAK,EACnB,kBAAkB,GAAG,KAAK,EAC1B,eAAe,GAAG,KAAK,EACvB,gBAAgB,GAAG,KAAK,GACzB,GAAG,IAAI,CAAC;IAET,OAAO;QACL;YACE,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;gBACzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBAErD,OAAO;oBACL,OAAO,EAAE;wBACP,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO;yBACd;qBACF;oBACD,GAAG,CAAC,gBAAgB;wBAClB,CAAC,CAAC;4BACE,MAAM,EAAE;gCACN,gCAAgC,EAAE,IAAI,CAAC,SAAS,CAC9C,GAAG,CAAC,kBAAkB,CACvB;gCACD,qCAAqC,EAAE,IAAI,CAAC,SAAS,CACnD,GAAG,CAAC,uBAAuB,CAC5B;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,kBAAkB;wBACpB,CAAC,CAAE;4BACC,QAAQ,EAAE,OAAO;4BACjB,+DAA+D;4BAC/D,+DAA+D;4BAC/D,sDAAsD;4BACtD,QAAQ,EAAE,qBAAqB;4BAC/B,MAAM,EAAE;gCACN,IAAI,EAAE,IAAI;gCACV,EAAE,EAAE;oCACF,0DAA0D;oCAC1D,gEAAgE;oCAChE,KAAK,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC;iCACrC;gCACD,IAAI,EAAE,SAAS,EAAE,8CAA8C;gCAC/D,IAAI,EAAE,IAAI;gCACV,UAAU,EAAE,IAAI;gCAChB,oDAAoD;gCACpD,YAAY,EAAE,IAAI;gCAClB,+DAA+D;gCAC/D,iEAAiE;gCACjE,+DAA+D;gCAC/D,uCAAuC;gCACvC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;oCAC7B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE;oCAChD,CAAC,CAAC,EAAE,CAAC;gCACP,KAAK,EAAE;oCACL,gEAAgE;oCAChE,UAAU,EAAE,IAAI;oCAChB,QAAQ,EAAE,GAAG,EAAE,uCAAuC;oCACtD,yDAAyD;oCACzD,gBAAgB,EAAE;wCAChB,kBAAkB,EAAE,GAAG;wCACvB,YAAY,EAAE,EAAE;qCACjB;iCACF;6BACF;4BACD,KAAK,EAAE;gCACL,aAAa,EAAE;oCACb,MAAM,CAAC,OAAO,EAAE,IAAI;wCAClB,sCAAsC;wCACtC,IACE,OAAO,CAAC,IAAI,KAAK,mBAAmB;4CACpC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EACjC,CAAC;4CACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;wCACtD,CAAC;wCACD,iCAAiC;wCACjC,IAAI,CAAC,OAAO,CAAC,CAAC;oCAChB,CAAC;iCACF;6BACF;yBACsB;wBAC3B,CAAC,CAAC,CAAC,GAAG,EAAE;4BACJ,IAAI,GAAG,CAAC,wBAAwB,EAAE,CAAC;gCACjC,OAAO,CAAC,GAAG,CACT,mCAAmC,GAAG,CAAC,wBAAwB,EAAE,CAClE,CAAC;gCACF,OAAO;oCACL,MAAM,EAAE;wCACN,KAAK,EAAE;4CACL,MAAM,EAAE;gDACN,MAAM,EAAE,GAAG,CAAC,wBAAwB;gDACpC,YAAY,EAAE,IAAI;6CACnB;yCACF;qCACF;iCACF,CAAC;4BACJ,CAAC;4BACD,OAAO,CAAC,GAAG,CACT,+DAA+D,CAChE,CAAC;4BACF,OAAO,EAAE,CAAC;wBACZ,CAAC,CAAC,EAAE,CAAC;oBACT,YAAY,EAAE;wBACZ,GAAG,CAAC,kBAAkB;4BACpB,CAAC,CAAC;gCACE,OAAO,EAAE,uBAAuB,CAC9B;oCACE,OAAO;oCACP,WAAW;oCACX,eAAe;oCACf,QAAQ;oCACR,QAAQ;oCACR,aAAa;iCACd,EACD,IAAI,CACL;6BACF;4BACH,CAAC,CAAC,EAAE,CAAC;wBACP,cAAc,EAAE;4BACd,MAAM,EAAE;gCACN,KAAK,EAAE,KAAK;6BACb;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO;gBACvC,yEAAyE;gBACzE,2EAA2E;gBAC3E,IAAI,gBAAgB,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3C,MAAM,EACN,QAAQ,EACR,OAAO,CACR,CAAC;oBAEF,IAAI,kBAAkB,EAAE,CAAC;wBACvB,OAAO,kBAAkB,CAAC;oBAC5B,CAAC;oBAED,iFAAiF;oBACjF,uEAAuE;oBACvE,8CAA8C;oBAC9C,IACE,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;wBACrC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAClC,CAAC;wBACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,cAAc,CAAC,EACjD,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,iEAAiE;oBACjE,IACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;wBAC5B,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;4BAC1C,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC7C,CAAC;wBACD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACzD,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACjC,OAAO,IAAI,CAAC,OAAO,CACjB,yCAAyC,EACzC,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBAClC,OAAO,IAAI,CAAC,OAAO,CACjB,0CAA0C,EAC1C,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;wBACrC,OAAO,IAAI,CAAC,OAAO,CACjB,6CAA6C,EAC7C,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC/B,OAAO,IAAI,CAAC,OAAO,CACjB,uCAAuC,EACvC,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;SACQ;QACX,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,YAAY;oBAClB,eAAe,CAAC,MAAM;wBACpB,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;4BACxC,yBAAyB;4BACzB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;4BAC7C,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;4BAC/D,IAAI,EAAE,CAAC;wBACT,CAAC,CAAC,CAAC;oBACL,CAAC;iBACQ;gBACX,kBAAkB,EAAE;gBACpB,gBAAgB,EAAE;aACnB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,yEAAyE;QACzE,oBAAoB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC;KAC7F,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,kBAAkB,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;AAE1D,MAAM,CAAC,OAAO,UAAU,UAAU,CAChC,OAMI,EAAE;IAEN,MAAM,EACJ,gBAAgB,GAAG,KAAK,EACxB,WAAW,GAAG,KAAK,EACnB,kBAAkB,GAAG,KAAK,EAC1B,eAAe,GAAG,KAAK,EACvB,gBAAgB,GAAG,KAAK,GACzB,GAAG,IAAI,CAAC;IAET,OAAO;QACL;YACE,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;gBACzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;gBAErD,OAAO;oBACL,OAAO,EAAE;wBACP,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO;yBACd;qBACF;oBACD,GAAG,CAAC,gBAAgB;wBAClB,CAAC,CAAC;4BACE,MAAM,EAAE;gCACN,gCAAgC,EAAE,IAAI,CAAC,SAAS,CAC9C,GAAG,CAAC,kBAAkB,CACvB;gCACD,qCAAqC,EAAE,IAAI,CAAC,SAAS,CACnD,GAAG,CAAC,uBAAuB,CAC5B;6BACF;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,kBAAkB;wBACpB,CAAC,CAAE;4BACC,QAAQ,EAAE,OAAO;4BACjB,MAAM,EAAE;gCACN,IAAI,EAAE,IAAI;gCACV,IAAI,EAAE,SAAS,EAAE,8CAA8C;gCAC/D,IAAI,EAAE,IAAI;gCACV,UAAU,EAAE,IAAI;gCAChB,oDAAoD;gCACpD,YAAY,EAAE,IAAI;gCAClB,+DAA+D;gCAC/D,iEAAiE;gCACjE,+DAA+D;gCAC/D,uCAAuC;gCACvC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe;oCAC7B,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE;oCAChD,CAAC,CAAC,EAAE,CAAC;gCACP,KAAK,EAAE;oCACL,gEAAgE;oCAChE,UAAU,EAAE,IAAI;oCAChB,QAAQ,EAAE,GAAG,EAAE,uCAAuC;oCACtD,yDAAyD;oCACzD,gBAAgB,EAAE;wCAChB,kBAAkB,EAAE,GAAG;wCACvB,YAAY,EAAE,EAAE;qCACjB;iCACF;6BACF;4BACD,KAAK,EAAE;gCACL,aAAa,EAAE;oCACb,MAAM,CAAC,OAAO,EAAE,IAAI;wCAClB,sCAAsC;wCACtC,IACE,OAAO,CAAC,IAAI,KAAK,mBAAmB;4CACpC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EACjC,CAAC;4CACD,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;wCACtD,CAAC;wCACD,iCAAiC;wCACjC,IAAI,CAAC,OAAO,CAAC,CAAC;oCAChB,CAAC;iCACF;6BACF;yBACsB;wBAC3B,CAAC,CAAC,CAAC,GAAG,EAAE;4BACJ,IAAI,GAAG,CAAC,wBAAwB,EAAE,CAAC;gCACjC,OAAO,CAAC,GAAG,CACT,mCAAmC,GAAG,CAAC,wBAAwB,EAAE,CAClE,CAAC;gCACF,OAAO;oCACL,MAAM,EAAE;wCACN,KAAK,EAAE;4CACL,MAAM,EAAE;gDACN,MAAM,EAAE,GAAG,CAAC,wBAAwB;gDACpC,YAAY,EAAE,IAAI;6CACnB;yCACF;qCACF;iCACF,CAAC;4BACJ,CAAC;4BACD,OAAO,CAAC,GAAG,CACT,+DAA+D,CAChE,CAAC;4BACF,OAAO,EAAE,CAAC;wBACZ,CAAC,CAAC,EAAE,CAAC;oBACT,YAAY,EAAE;wBACZ,GAAG,CAAC,kBAAkB;4BACpB,CAAC,CAAC;gCACE,OAAO,EAAE,uBAAuB,CAC9B;oCACE,OAAO;oCACP,WAAW;oCACX,eAAe;oCACf,QAAQ;oCACR,QAAQ;oCACR,aAAa;iCACd,EACD,IAAI,CACL;6BACF;4BACH,CAAC,CAAC,EAAE,CAAC;wBACP,cAAc,EAAE;4BACd,MAAM,EAAE;gCACN,KAAK,EAAE,KAAK;6BACb;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO;gBACvC,yEAAyE;gBACzE,2EAA2E;gBAC3E,IAAI,gBAAgB,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3C,MAAM,EACN,QAAQ,EACR,OAAO,CACR,CAAC;oBAEF,IAAI,kBAAkB,EAAE,CAAC;wBACvB,OAAO,kBAAkB,CAAC;oBAC5B,CAAC;oBAED,iFAAiF;oBACjF,uEAAuE;oBACvE,8CAA8C;oBAC9C,IACE,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC;wBACrC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,EAClC,CAAC;wBACD,OAAO,IAAI,CAAC,OAAO,CACjB,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,cAAc,CAAC,EACjD,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,iEAAiE;oBACjE,IACE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;wBAC5B,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC;4BAC1C,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAC7C,CAAC;wBACD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACzD,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBACjC,OAAO,IAAI,CAAC,OAAO,CACjB,yCAAyC,EACzC,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;wBAClC,OAAO,IAAI,CAAC,OAAO,CACjB,0CAA0C,EAC1C,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;wBACrC,OAAO,IAAI,CAAC,OAAO,CACjB,6CAA6C,EAC7C,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC/B,OAAO,IAAI,CAAC,OAAO,CACjB,uCAAuC,EACvC,QAAQ,EACR,OAAO,CACR,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;SACQ;QACX,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,YAAY;oBAClB,eAAe,CAAC,MAAM;wBACpB,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;4BACxC,yBAAyB;4BACzB,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;4BAC7C,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;4BAC/D,IAAI,EAAE,CAAC;wBACT,CAAC,CAAC,CAAC;oBACL,CAAC;iBACQ;gBACX,kBAAkB,EAAE;gBACpB,gBAAgB,EAAE;aACnB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,yEAAyE;QACzE,oBAAoB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC;QAC5F,yEAAyE;QACzE,iEAAiE;QACjE,sEAAsE;QACtE,wEAAwE;QACxE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;YACjD,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACvB,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@base44-preview/vite-plugin",
-  "version": "1.0.24-pr.96.c1a9a67",
+  "version": "1.0.27-pr.98.00a0055",
   "description": "The Vite plugin for base44 based applications",
   "type": "module",
   "license": "MIT",

package/src/build-status-plugin.ts

@@ -0,0 +1,193 @@
+import type { Connect, Plugin, ViteDevServer } from "vite";
+import type { ServerResponse } from "http";
+
+/**
+ * Opt-in, loopback-gated dev-server endpoint that reports the last
+ * build / compile / HMR error observed since the dev server started.
+ *
+ * `GET /__build_status` responds `200` with a JSON body:
+ *   { ok: boolean, error: <scrubbed error> | null }
+ *
+ * The endpoint is:
+ *   - dev-only (`apply: "serve"`) — it never exists in a production build;
+ *   - loopback-only — requests from non-loopback addresses fall through.
+ *
+ * Enablement (the `BASE44_BUILD_STATUS_ENABLED` env-var check) is decided by
+ * the caller in `index.ts`, which only adds this plugin to the array when the
+ * endpoint is wanted — so `configureServer` here is never even reached when
+ * the feature is off.
+ *
+ * The status is always reported in the body with HTTP `200`, even on error:
+ * a `500` here would trip the preview proxy's own error path.
+ *
+ * Cold-start caveat: errors thrown before any client has connected are not
+ * sent over the HMR channel, so a boot-time transform failure may briefly
+ * read `ok: true`. That window is covered server-side by the existing
+ * dev_server_error_classifier. This endpoint reports post-load
+ * HMR / compile errors.
+ */
+
+const ENDPOINT = "/__build_status";
+
+/** Max characters kept per scrubbed string field. */
+const MAX_FIELD = 4000;
+/** Max characters kept for the code frame. */
+const MAX_FRAME = 2000;
+
+type SendChannel = { send: (...args: unknown[]) => void };
+
+const LOOPBACK_ADDRESSES = new Set([
+  "127.0.0.1",
+  "::1",
+  "::ffff:127.0.0.1",
+]);
+
+function isLoopback(remoteAddress: string | undefined): boolean {
+  return remoteAddress !== undefined && LOOPBACK_ADDRESSES.has(remoteAddress);
+}
+
+function clip(value: unknown, max: number): string | undefined {
+  if (typeof value !== "string" || value.length === 0) return undefined;
+  return value.length > max ? `${value.slice(0, max)}… [truncated]` : value;
+}
+
+/**
+ * Strip absolute filesystem paths down to their basename so directory
+ * structure never leaks. This is loopback-only, but the backend relays a
+ * trimmed form, so scrub before it leaves this process.
+ */
+function stripPaths(value: string): string {
+  return (
+    value
+      // Windows: C:\Users\foo\bar\file.ext -> file.ext
+      .replace(/[A-Za-z]:\\[^\s:*?"<>|]+/g, (m) => m.split(/[\\/]/).pop() ?? m)
+      // POSIX absolute: /Users/foo/bar/file.ext -> file.ext
+      .replace(/\/(?:[^\s:/]+\/)+[^\s:/]+/g, (m) => m.split("/").pop() ?? m)
+  );
+}
+
+function scrubString(value: unknown, max: number): string | undefined {
+  const clipped = clip(value, max);
+  return clipped === undefined ? undefined : stripPaths(clipped);
+}
+
+/**
+ * Produce a trimmed, path-stripped, size-capped view of an HMR error
+ * payload. Returns `null` when there is no error.
+ */
+export function scrub(err: unknown): Record<string, unknown> | null {
+  if (err === null || err === undefined) return null;
+
+  if (typeof err !== "object") {
+    const message = scrubString(String(err), MAX_FIELD);
+    return message === undefined ? null : { message };
+  }
+
+  const e = err as Record<string, unknown>;
+  const out: Record<string, unknown> = {};
+
+  const message = scrubString(e["message"], MAX_FIELD);
+  if (message !== undefined) out["message"] = message;
+
+  const stack = scrubString(e["stack"], MAX_FIELD);
+  if (stack !== undefined) out["stack"] = stack;
+
+  const frame = scrubString(e["frame"], MAX_FRAME);
+  if (frame !== undefined) out["frame"] = frame;
+
+  const id = scrubString(e["id"], MAX_FIELD);
+  if (id !== undefined) out["id"] = id;
+
+  const plugin = scrubString(e["plugin"], 200);
+  if (plugin !== undefined) out["plugin"] = plugin;
+
+  const loc = e["loc"];
+  if (loc && typeof loc === "object") {
+    const l = loc as Record<string, unknown>;
+    out["loc"] = {
+      file: scrubString(l["file"], MAX_FIELD),
+      line: typeof l["line"] === "number" ? l["line"] : undefined,
+      column: typeof l["column"] === "number" ? l["column"] : undefined,
+    };
+  }
+
+  // Fall back to a stringified form if we recognised nothing useful.
+  if (Object.keys(out).length === 0) {
+    const message = scrubString(String(e), MAX_FIELD);
+    return message === undefined ? {} : { message };
+  }
+
+  return out;
+}
+
+export function buildStatusPlugin(): Plugin {
+  let lastError: unknown = null;
+
+  return {
+    name: "base44-build-status",
+    apply: "serve",
+    configureServer(server: ViteDevServer) {
+      try {
+        // Observe the HMR channel: an `error` payload records the last
+        // error; a successful `update` / `full-reload` clears it.
+        const ch = (server.hot ?? server.ws) as unknown as SendChannel | undefined;
+        if (ch && typeof ch.send === "function") {
+          const orig = ch.send.bind(ch);
+          ch.send = (payload: unknown, ...rest: unknown[]) => {
+            try {
+              const p = payload as { type?: string; err?: unknown } | undefined;
+              if (p?.type === "error") {
+                lastError = p.err ?? null;
+              } else if (p?.type === "update" || p?.type === "full-reload") {
+                lastError = null;
+              }
+            } catch {
+              // Never let bookkeeping break HMR delivery.
+            }
+            return orig(payload, ...rest);
+          };
+        }
+
+        server.middlewares.use(
+          ENDPOINT,
+          (
+            req: Connect.IncomingMessage,
+            res: ServerResponse,
+            next: Connect.NextFunction
+          ) => {
+            try {
+              if (!isLoopback(req.socket?.remoteAddress)) {
+                next();
+                return;
+              }
+              if (req.method !== "GET") {
+                next();
+                return;
+              }
+
+              const body = JSON.stringify({
+                ok: !lastError,
+                error: scrub(lastError),
+              });
+              // Health lives in the body — keep 200 even on error so the
+              // preview proxy doesn't treat this as a server failure.
+              res.statusCode = 200;
+              res.setHeader("Content-Type", "application/json");
+              res.setHeader("Cache-Control", "no-store");
+              res.end(body);
+            } catch {
+              // Fail open: a bug here must never break the dev server.
+              try {
+                next();
+              } catch {
+                // ignore
+              }
+            }
+          }
+        );
+      } catch {
+        // Fail open: setup errors must never break the dev server.
+      }
+    },
+  };
+}

package/src/index.ts

@@ -4,11 +4,10 @@ import { errorOverlayPlugin } from "./error-overlay-plugin.js";
 import { visualEditPlugin } from "./visual-edit-plugin.js";
 import { filterPackagesInProject } from "./utils.js";
 import { htmlInjectionsPlugin } from "./html-injections-plugin.js";
+import { buildStatusPlugin } from "./build-status-plugin.js";
 
 const isRunningInSandbox = !!process.env.MODAL_SANDBOX_ID;
 
-const SANDBOX_DEP_CACHE_DIR = "/var/cache/base44-vite-deps";
-
 export default function vitePlugin(
   opts: {
     legacySDKImports?: boolean;
@@ -53,17 +52,8 @@ export default function vitePlugin(
           ...(isRunningInSandbox
             ? ({
                 logLevel: "error",
-                // The sandbox /app mount can't rename() dirs from the snapshot
-                // layer (EXDEV), which breaks the dep optimizer's commit step.
-                // Keep the dep cache on the container rootfs instead.
-                cacheDir: SANDBOX_DEP_CACHE_DIR,
                 server: {
                   cors: true,
-                  fs: {
-                    // Explicit allow replaces Vite's defaults, so include the
-                    // app root alongside the external cache dir (served via /@fs/).
-                    allow: [root, SANDBOX_DEP_CACHE_DIR],
-                  },
                   host: "0.0.0.0", // Bind to all interfaces for container access
                   port: 5173,
                   strictPort: true,
@@ -240,5 +230,12 @@ export default function vitePlugin(
       : []),
     // HTML injections - handles both dev (sandbox) and production injections
     htmlInjectionsPlugin({ hmrNotifier, navigationNotifier, visualEditAgent, analyticsTracker }),
+    // Opt-in, loopback-gated dev-server build-status endpoint. Gated here on
+    // the BASE44_BUILD_STATUS_ENABLED env var so the generated app's
+    // vite.config.js doesn't need to change and the sub-plugin isn't even
+    // added to the pipeline when disabled. The endpoint itself is dev-only.
+    ...(process.env.BASE44_BUILD_STATUS_ENABLED === "1"
+      ? [buildStatusPlugin()]
+      : []),
   ];
 }