@fluid-app/portal-sdk 0.1.128 → 0.1.130

package/dist/{use-fluid-api-C1KeHB7q.cjs → use-fluid-api-Ds8BInAZ.cjs}

@@ -1,4 +1,4 @@
-const require_FluidProvider = require("./FluidProvider-BMMu_rp3.cjs");
+const require_FluidProvider = require("./FluidProvider-DvqnkjZI.cjs");
 //#region src/hooks/use-fluid-api.ts
 /**
 * Hook to access the Fluid API client
@@ -29,4 +29,4 @@ Object.defineProperty(exports, "useFluidApi", {
 	}
 });
 
-//# sourceMappingURL=use-fluid-api-C1KeHB7q.cjs.map
+//# sourceMappingURL=use-fluid-api-Ds8BInAZ.cjs.map

package/dist/{use-fluid-api-C1KeHB7q.cjs.map → use-fluid-api-Ds8BInAZ.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"use-fluid-api-C1KeHB7q.cjs","names":["useFluidContext"],"sources":["../src/hooks/use-fluid-api.ts"],"sourcesContent":["import { useFluidContext } from \"../providers/FluidProvider\";\nimport type { FluidClient } from \"../client/fluid-client\";\n\n/**\n * Hook to access the Fluid API client\n *\n * @example\n * ```tsx\n * function UserInfo() {\n *   const api = useFluidApi();\n *\n *   const { data: user } = useQuery({\n *     queryKey: [\"me\"],\n *     queryFn: () => api.users.me(),\n *   });\n *\n *   return <p>Hello, {user?.name}</p>;\n * }\n * ```\n */\nexport function useFluidApi(): FluidClient {\n  const { client } = useFluidContext();\n  return client;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,cAA2B;CACzC,MAAM,EAAE,WAAWA,sBAAAA,iBAAiB;AACpC,QAAO"}
+{"version":3,"file":"use-fluid-api-Ds8BInAZ.cjs","names":["useFluidContext"],"sources":["../src/hooks/use-fluid-api.ts"],"sourcesContent":["import { useFluidContext } from \"../providers/FluidProvider\";\nimport type { FluidClient } from \"../client/fluid-client\";\n\n/**\n * Hook to access the Fluid API client\n *\n * @example\n * ```tsx\n * function UserInfo() {\n *   const api = useFluidApi();\n *\n *   const { data: user } = useQuery({\n *     queryKey: [\"me\"],\n *     queryFn: () => api.users.me(),\n *   });\n *\n *   return <p>Hello, {user?.name}</p>;\n * }\n * ```\n */\nexport function useFluidApi(): FluidClient {\n  const { client } = useFluidContext();\n  return client;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,cAA2B;CACzC,MAAM,EAAE,WAAWA,sBAAAA,iBAAiB;AACpC,QAAO"}

package/dist/{use-fluid-auth-BQEV7ylM.mjs → use-fluid-auth-C-Qpl8j4.mjs}

@@ -1,4 +1,4 @@
-import { l as useFluidAuthContext } from "./FluidProvider-CgTeGUnF.mjs";
+import { l as useFluidAuthContext } from "./FluidProvider-BJQSXofR.mjs";
 //#region src/hooks/use-fluid-auth.ts
 /**
 * useFluidAuth Hook
@@ -42,4 +42,4 @@ function useFluidAuth() {
 //#endregion
 export { useFluidAuth as t };
 
-//# sourceMappingURL=use-fluid-auth-BQEV7ylM.mjs.map
+//# sourceMappingURL=use-fluid-auth-C-Qpl8j4.mjs.map

package/dist/{use-fluid-auth-BQEV7ylM.mjs.map → use-fluid-auth-C-Qpl8j4.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"use-fluid-auth-BQEV7ylM.mjs","names":[],"sources":["../src/hooks/use-fluid-auth.ts"],"sourcesContent":["/**\n * useFluidAuth Hook\n *\n * Provides access to authentication state and utilities.\n * This is the primary hook for interacting with auth in components.\n */\n\nimport { useFluidAuthContext } from \"../providers/FluidAuthProvider\";\nimport type { FluidAuthContextValue } from \"../auth/types\";\n\n/**\n * Hook to access authentication state and utilities.\n *\n * Must be used within a `FluidAuthProvider`.\n *\n * @returns Authentication context with user info, loading state, and utilities\n * @throws Error if used outside FluidAuthProvider\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { isAuthenticated, isLoading, user, clearAuth } = useFluidAuth();\n *\n *   if (isLoading) {\n *     return <Spinner />;\n *   }\n *\n *   if (!isAuthenticated) {\n *     return <p>Please log in</p>;\n *   }\n *\n *   return (\n *     <div>\n *       <p>Welcome, {user.full_name}!</p>\n *       <button onClick={clearAuth}>Log out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useFluidAuth(): FluidAuthContextValue {\n  return useFluidAuthContext();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,SAAgB,eAAsC;AACpD,QAAO,qBAAqB"}
+{"version":3,"file":"use-fluid-auth-C-Qpl8j4.mjs","names":[],"sources":["../src/hooks/use-fluid-auth.ts"],"sourcesContent":["/**\n * useFluidAuth Hook\n *\n * Provides access to authentication state and utilities.\n * This is the primary hook for interacting with auth in components.\n */\n\nimport { useFluidAuthContext } from \"../providers/FluidAuthProvider\";\nimport type { FluidAuthContextValue } from \"../auth/types\";\n\n/**\n * Hook to access authentication state and utilities.\n *\n * Must be used within a `FluidAuthProvider`.\n *\n * @returns Authentication context with user info, loading state, and utilities\n * @throws Error if used outside FluidAuthProvider\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { isAuthenticated, isLoading, user, clearAuth } = useFluidAuth();\n *\n *   if (isLoading) {\n *     return <Spinner />;\n *   }\n *\n *   if (!isAuthenticated) {\n *     return <p>Please log in</p>;\n *   }\n *\n *   return (\n *     <div>\n *       <p>Welcome, {user.full_name}!</p>\n *       <button onClick={clearAuth}>Log out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useFluidAuth(): FluidAuthContextValue {\n  return useFluidAuthContext();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,SAAgB,eAAsC;AACpD,QAAO,qBAAqB"}

package/dist/{use-fluid-auth-CyKaXLbW.cjs → use-fluid-auth-sGNMgfnt.cjs}

@@ -1,4 +1,4 @@
-const require_FluidProvider = require("./FluidProvider-BMMu_rp3.cjs");
+const require_FluidProvider = require("./FluidProvider-DvqnkjZI.cjs");
 //#region src/hooks/use-fluid-auth.ts
 /**
 * useFluidAuth Hook
@@ -47,4 +47,4 @@ Object.defineProperty(exports, "useFluidAuth", {
 	}
 });
 
-//# sourceMappingURL=use-fluid-auth-CyKaXLbW.cjs.map
+//# sourceMappingURL=use-fluid-auth-sGNMgfnt.cjs.map

package/dist/{use-fluid-auth-CyKaXLbW.cjs.map → use-fluid-auth-sGNMgfnt.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"use-fluid-auth-CyKaXLbW.cjs","names":["useFluidAuthContext"],"sources":["../src/hooks/use-fluid-auth.ts"],"sourcesContent":["/**\n * useFluidAuth Hook\n *\n * Provides access to authentication state and utilities.\n * This is the primary hook for interacting with auth in components.\n */\n\nimport { useFluidAuthContext } from \"../providers/FluidAuthProvider\";\nimport type { FluidAuthContextValue } from \"../auth/types\";\n\n/**\n * Hook to access authentication state and utilities.\n *\n * Must be used within a `FluidAuthProvider`.\n *\n * @returns Authentication context with user info, loading state, and utilities\n * @throws Error if used outside FluidAuthProvider\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { isAuthenticated, isLoading, user, clearAuth } = useFluidAuth();\n *\n *   if (isLoading) {\n *     return <Spinner />;\n *   }\n *\n *   if (!isAuthenticated) {\n *     return <p>Please log in</p>;\n *   }\n *\n *   return (\n *     <div>\n *       <p>Welcome, {user.full_name}!</p>\n *       <button onClick={clearAuth}>Log out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useFluidAuth(): FluidAuthContextValue {\n  return useFluidAuthContext();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,SAAgB,eAAsC;AACpD,QAAOA,sBAAAA,qBAAqB"}
+{"version":3,"file":"use-fluid-auth-sGNMgfnt.cjs","names":["useFluidAuthContext"],"sources":["../src/hooks/use-fluid-auth.ts"],"sourcesContent":["/**\n * useFluidAuth Hook\n *\n * Provides access to authentication state and utilities.\n * This is the primary hook for interacting with auth in components.\n */\n\nimport { useFluidAuthContext } from \"../providers/FluidAuthProvider\";\nimport type { FluidAuthContextValue } from \"../auth/types\";\n\n/**\n * Hook to access authentication state and utilities.\n *\n * Must be used within a `FluidAuthProvider`.\n *\n * @returns Authentication context with user info, loading state, and utilities\n * @throws Error if used outside FluidAuthProvider\n *\n * @example\n * ```tsx\n * function UserProfile() {\n *   const { isAuthenticated, isLoading, user, clearAuth } = useFluidAuth();\n *\n *   if (isLoading) {\n *     return <Spinner />;\n *   }\n *\n *   if (!isAuthenticated) {\n *     return <p>Please log in</p>;\n *   }\n *\n *   return (\n *     <div>\n *       <p>Welcome, {user.full_name}!</p>\n *       <button onClick={clearAuth}>Log out</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useFluidAuth(): FluidAuthContextValue {\n  return useFluidAuthContext();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,SAAgB,eAAsC;AACpD,QAAOA,sBAAAA,qBAAqB"}

package/dist/{use-portal-products-client-pptYMuSw.cjs → use-portal-products-client-DKYkBjm-.cjs}

@@ -1,48 +1,7 @@
 require("./chunk-9hOWP6kD.cjs");
-const require_FluidProvider = require("./FluidProvider-BMMu_rp3.cjs");
+const require_FluidProvider = require("./FluidProvider-DvqnkjZI.cjs");
+const require_portal_tenant = require("./portal_tenant-CP5Ce8Jn.cjs");
 let react = require("react");
-//#region ../../api-clients/portal-tenant/src/namespaces/portal_tenant.ts
-/**
-* List products
-* Returns a paginated list of products available in the tenant company's catalog.
-*
-* @param client - Fetch client instance
-* @param [params] - params
-*/
-async function products_list(client, params) {
-	return client.get(`/api/products`, params);
-}
-/**
-* Get a product
-* Returns a single product by ID with its variants.
-*
-* @param client - Fetch client instance
-* @param id - id
-*/
-async function products_show(client, id) {
-	return client.get(`/api/products/${id}`);
-}
-/**
-* Search products
-* Searches the tenant company's product catalog by keyword, returning paginated results.
-*
-* @param client - Fetch client instance
-* @param [params] - params
-*/
-async function products_search(client, params) {
-	return client.get(`/api/products/search`, params);
-}
-/**
-* List product media
-* Returns all media (images, videos) attached to a product.
-*
-* @param client - Fetch client instance
-* @param id - id
-*/
-async function products_media_list(client, id) {
-	return client.get(`/api/products/${id}/media`);
-}
-//#endregion
 //#region ../../products/api-client/src/portal-tenant-adapter.ts
 /**
 * Creates a PortalProductsApi-compatible adapter from a portal-tenant FetchClient.
@@ -58,7 +17,7 @@ async function products_media_list(client, id) {
 function createPortalProductsApiAdapter(client) {
 	return {
 		listProducts: async (params) => {
-			const response = await products_list(client, {
+			const response = await require_portal_tenant.products_list(client, {
 				"page[cursor]": params?.cursor,
 				"page[limit]": params?.limit
 			});
@@ -68,14 +27,14 @@ function createPortalProductsApiAdapter(client) {
 			};
 		},
 		getProduct: async (id) => {
-			const response = await products_show(client, id);
+			const response = await require_portal_tenant.products_show(client, id);
 			return {
 				product: response.product ?? {},
 				meta: response.meta
 			};
 		},
 		searchProducts: async (query, params) => {
-			const response = await products_search(client, {
+			const response = await require_portal_tenant.products_search(client, {
 				q: query,
 				"page[cursor]": params?.cursor,
 				"page[limit]": params?.limit
@@ -86,7 +45,7 @@ function createPortalProductsApiAdapter(client) {
 			};
 		},
 		getProductMedia: async (productId) => {
-			const response = await products_media_list(client, productId);
+			const response = await require_portal_tenant.products_media_list(client, productId);
 			return {
 				media: response.media ?? [],
 				meta: response.meta
@@ -113,4 +72,4 @@ Object.defineProperty(exports, "usePortalProductsClient", {
 	}
 });
 
-//# sourceMappingURL=use-portal-products-client-pptYMuSw.cjs.map
+//# sourceMappingURL=use-portal-products-client-DKYkBjm-.cjs.map

package/dist/use-portal-products-client-DKYkBjm-.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-portal-products-client-DKYkBjm-.cjs","names":["useFluidContext","createFetchClient"],"sources":["../../../products/api-client/src/portal-tenant-adapter.ts","../src/products/use-portal-products-client.ts"],"sourcesContent":["import type {\n  PortalProductsApi,\n  portalProducts,\n} from \"@fluid-app/products-core\";\nimport type { FetchClient } from \"./lib/fetch-client\";\nimport { portalTenant } from \"@fluid-app/portal-tenant-api-client\";\n\n/**\n * Creates a PortalProductsApi-compatible adapter from a portal-tenant FetchClient.\n *\n * This bridges the auto-generated portal-tenant API client to the abstract\n * PortalProductsApi interface defined in @fluid-app/products-core, closing\n * over the FetchClient so consumers don't need to pass it per-call.\n *\n * Each method maps the BFF response to the port type at runtime rather than\n * using type assertions, so TypeScript catches schema drift between the\n * generated client and the hand-authored port types at compile time.\n */\nexport function createPortalProductsApiAdapter(\n  client: FetchClient,\n): PortalProductsApi {\n  return {\n    listProducts: async (params) => {\n      const response = await portalTenant.products_list(client, {\n        \"page[cursor]\": params?.cursor,\n        \"page[limit]\": params?.limit,\n      });\n      return {\n        products: response.products ?? [],\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductsResponse;\n    },\n\n    getProduct: async (id) => {\n      const response = await portalTenant.products_show(client, id);\n      return {\n        product: response.product ?? {},\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductResponse;\n    },\n\n    searchProducts: async (query, params) => {\n      const response = await portalTenant.products_search(client, {\n        q: query,\n        \"page[cursor]\": params?.cursor,\n        \"page[limit]\": params?.limit,\n      });\n      return {\n        products: response.products ?? [],\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductsResponse;\n    },\n\n    getProductMedia: async (productId) => {\n      const response = await portalTenant.products_media_list(\n        client,\n        productId,\n      );\n      return {\n        media: response.media ?? [],\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductMediaResponse;\n    },\n  };\n}\n","import { useMemo } from \"react\";\nimport type { PortalProductsApi } from \"@fluid-app/products-core\";\nimport { createPortalProductsApiAdapter } from \"@fluid-app/products-api-client\";\nimport { createFetchClient } from \"@fluid-app/portal-tenant-api-client\";\nimport { useFluidContext } from \"../providers/FluidProvider\";\n\nexport function usePortalProductsClient(): PortalProductsApi {\n  const { config } = useFluidContext();\n\n  return useMemo(() => {\n    // Portal-tenant endpoints already include /api in their paths\n    // (e.g. client.get('/api/products')), so the base URL must NOT\n    // have /api appended — otherwise we get double /api/api.\n    const client = createFetchClient({\n      baseUrl: config.baseUrl.replace(/\\/+$/, \"\"),\n      onAuthError: config.onAuthError,\n    });\n    return createPortalProductsApiAdapter(client);\n  }, [config.baseUrl, config.onAuthError]);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkBA,SAAgB,+BACd,QACmB;AACnB,QAAO;EACL,cAAc,OAAO,WAAW;GAC9B,MAAM,WAAW,MAAA,sBAAA,cAAiC,QAAQ;IACxD,gBAAgB,QAAQ;IACxB,eAAe,QAAQ;IACxB,CAAC;AACF,UAAO;IACL,UAAU,SAAS,YAAY,EAAE;IACjC,MAAM,SAAS;IAChB;;EAGH,YAAY,OAAO,OAAO;GACxB,MAAM,WAAW,MAAA,sBAAA,cAAiC,QAAQ,GAAG;AAC7D,UAAO;IACL,SAAS,SAAS,WAAW,EAAE;IAC/B,MAAM,SAAS;IAChB;;EAGH,gBAAgB,OAAO,OAAO,WAAW;GACvC,MAAM,WAAW,MAAA,sBAAA,gBAAmC,QAAQ;IAC1D,GAAG;IACH,gBAAgB,QAAQ;IACxB,eAAe,QAAQ;IACxB,CAAC;AACF,UAAO;IACL,UAAU,SAAS,YAAY,EAAE;IACjC,MAAM,SAAS;IAChB;;EAGH,iBAAiB,OAAO,cAAc;GACpC,MAAM,WAAW,MAAA,sBAAA,oBACf,QACA,UACD;AACD,UAAO;IACL,OAAO,SAAS,SAAS,EAAE;IAC3B,MAAM,SAAS;IAChB;;EAEJ;;;;ACzDH,SAAgB,0BAA6C;CAC3D,MAAM,EAAE,WAAWA,sBAAAA,iBAAiB;AAEpC,SAAA,GAAA,MAAA,eAAqB;AAQnB,SAAO,+BAJQC,sBAAAA,kBAAkB;GAC/B,SAAS,OAAO,QAAQ,QAAQ,QAAQ,GAAG;GAC3C,aAAa,OAAO;GACrB,CAAC,CAC2C;IAC5C,CAAC,OAAO,SAAS,OAAO,YAAY,CAAC"}

package/dist/{use-portal-products-client-BL1xVtex.mjs → use-portal-products-client-s2qtZjhU.mjs}

@@ -1,47 +1,6 @@
-import { ct as createFetchClient, n as useFluidContext } from "./FluidProvider-CgTeGUnF.mjs";
+import { n as useFluidContext, rt as createFetchClient } from "./FluidProvider-BJQSXofR.mjs";
+import { a as products_list, c as products_show, o as products_media_list, s as products_search } from "./portal_tenant-CWy4Zg2t.mjs";
 import { useMemo } from "react";
-//#region ../../api-clients/portal-tenant/src/namespaces/portal_tenant.ts
-/**
-* List products
-* Returns a paginated list of products available in the tenant company's catalog.
-*
-* @param client - Fetch client instance
-* @param [params] - params
-*/
-async function products_list(client, params) {
-	return client.get(`/api/products`, params);
-}
-/**
-* Get a product
-* Returns a single product by ID with its variants.
-*
-* @param client - Fetch client instance
-* @param id - id
-*/
-async function products_show(client, id) {
-	return client.get(`/api/products/${id}`);
-}
-/**
-* Search products
-* Searches the tenant company's product catalog by keyword, returning paginated results.
-*
-* @param client - Fetch client instance
-* @param [params] - params
-*/
-async function products_search(client, params) {
-	return client.get(`/api/products/search`, params);
-}
-/**
-* List product media
-* Returns all media (images, videos) attached to a product.
-*
-* @param client - Fetch client instance
-* @param id - id
-*/
-async function products_media_list(client, id) {
-	return client.get(`/api/products/${id}/media`);
-}
-//#endregion
 //#region ../../products/api-client/src/portal-tenant-adapter.ts
 /**
 * Creates a PortalProductsApi-compatible adapter from a portal-tenant FetchClient.
@@ -107,4 +66,4 @@ function usePortalProductsClient() {
 //#endregion
 export { usePortalProductsClient as t };
 
-//# sourceMappingURL=use-portal-products-client-BL1xVtex.mjs.map
+//# sourceMappingURL=use-portal-products-client-s2qtZjhU.mjs.map

package/dist/use-portal-products-client-s2qtZjhU.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"use-portal-products-client-s2qtZjhU.mjs","names":["portalTenant.products_list","portalTenant.products_show","portalTenant.products_search","portalTenant.products_media_list"],"sources":["../../../products/api-client/src/portal-tenant-adapter.ts","../src/products/use-portal-products-client.ts"],"sourcesContent":["import type {\n  PortalProductsApi,\n  portalProducts,\n} from \"@fluid-app/products-core\";\nimport type { FetchClient } from \"./lib/fetch-client\";\nimport { portalTenant } from \"@fluid-app/portal-tenant-api-client\";\n\n/**\n * Creates a PortalProductsApi-compatible adapter from a portal-tenant FetchClient.\n *\n * This bridges the auto-generated portal-tenant API client to the abstract\n * PortalProductsApi interface defined in @fluid-app/products-core, closing\n * over the FetchClient so consumers don't need to pass it per-call.\n *\n * Each method maps the BFF response to the port type at runtime rather than\n * using type assertions, so TypeScript catches schema drift between the\n * generated client and the hand-authored port types at compile time.\n */\nexport function createPortalProductsApiAdapter(\n  client: FetchClient,\n): PortalProductsApi {\n  return {\n    listProducts: async (params) => {\n      const response = await portalTenant.products_list(client, {\n        \"page[cursor]\": params?.cursor,\n        \"page[limit]\": params?.limit,\n      });\n      return {\n        products: response.products ?? [],\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductsResponse;\n    },\n\n    getProduct: async (id) => {\n      const response = await portalTenant.products_show(client, id);\n      return {\n        product: response.product ?? {},\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductResponse;\n    },\n\n    searchProducts: async (query, params) => {\n      const response = await portalTenant.products_search(client, {\n        q: query,\n        \"page[cursor]\": params?.cursor,\n        \"page[limit]\": params?.limit,\n      });\n      return {\n        products: response.products ?? [],\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductsResponse;\n    },\n\n    getProductMedia: async (productId) => {\n      const response = await portalTenant.products_media_list(\n        client,\n        productId,\n      );\n      return {\n        media: response.media ?? [],\n        meta: response.meta,\n      } satisfies portalProducts.PortalProductMediaResponse;\n    },\n  };\n}\n","import { useMemo } from \"react\";\nimport type { PortalProductsApi } from \"@fluid-app/products-core\";\nimport { createPortalProductsApiAdapter } from \"@fluid-app/products-api-client\";\nimport { createFetchClient } from \"@fluid-app/portal-tenant-api-client\";\nimport { useFluidContext } from \"../providers/FluidProvider\";\n\nexport function usePortalProductsClient(): PortalProductsApi {\n  const { config } = useFluidContext();\n\n  return useMemo(() => {\n    // Portal-tenant endpoints already include /api in their paths\n    // (e.g. client.get('/api/products')), so the base URL must NOT\n    // have /api appended — otherwise we get double /api/api.\n    const client = createFetchClient({\n      baseUrl: config.baseUrl.replace(/\\/+$/, \"\"),\n      onAuthError: config.onAuthError,\n    });\n    return createPortalProductsApiAdapter(client);\n  }, [config.baseUrl, config.onAuthError]);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,SAAgB,+BACd,QACmB;AACnB,QAAO;EACL,cAAc,OAAO,WAAW;GAC9B,MAAM,WAAW,MAAMA,cAA2B,QAAQ;IACxD,gBAAgB,QAAQ;IACxB,eAAe,QAAQ;IACxB,CAAC;AACF,UAAO;IACL,UAAU,SAAS,YAAY,EAAE;IACjC,MAAM,SAAS;IAChB;;EAGH,YAAY,OAAO,OAAO;GACxB,MAAM,WAAW,MAAMC,cAA2B,QAAQ,GAAG;AAC7D,UAAO;IACL,SAAS,SAAS,WAAW,EAAE;IAC/B,MAAM,SAAS;IAChB;;EAGH,gBAAgB,OAAO,OAAO,WAAW;GACvC,MAAM,WAAW,MAAMC,gBAA6B,QAAQ;IAC1D,GAAG;IACH,gBAAgB,QAAQ;IACxB,eAAe,QAAQ;IACxB,CAAC;AACF,UAAO;IACL,UAAU,SAAS,YAAY,EAAE;IACjC,MAAM,SAAS;IAChB;;EAGH,iBAAiB,OAAO,cAAc;GACpC,MAAM,WAAW,MAAMC,oBACrB,QACA,UACD;AACD,UAAO;IACL,OAAO,SAAS,SAAS,EAAE;IAC3B,MAAM,SAAS;IAChB;;EAEJ;;;;ACzDH,SAAgB,0BAA6C;CAC3D,MAAM,EAAE,WAAW,iBAAiB;AAEpC,QAAO,cAAc;AAQnB,SAAO,+BAJQ,kBAAkB;GAC/B,SAAS,OAAO,QAAQ,QAAQ,QAAQ,GAAG;GAC3C,aAAa,OAAO;GACrB,CAAC,CAC2C;IAC5C,CAAC,OAAO,SAAS,OAAO,YAAY,CAAC"}

package/dist/vite/index.cjs

@@ -279,12 +279,54 @@ function isAllowedOrigin(origin) {
 * Dev mode: serves `/__preview__` by transforming preview.html through
 * Vite's HTML pipeline (so import resolution and HMR work).
 *
-* Build mode: no-op — the production preview.html is handled by adding
-* it as a second Rollup input in vite.config.ts.
+* Build mode: adds preview.html as a second Rollup input so `vite build`
+* produces it alongside index.html for production deployment.
 */
 function fluidPreviewPlugin() {
 	return {
 		name: "fluid-preview-plugin",
+		config(_config, { command }) {
+			if (command !== "build") return;
+			const projectRoot = process.cwd();
+			const previewHtml = (0, node_path.resolve)(projectRoot, "preview.html");
+			if (!(0, node_fs.existsSync)(previewHtml)) return;
+			return { build: { rollupOptions: { input: {
+				main: (0, node_path.resolve)(projectRoot, "index.html"),
+				preview: previewHtml
+			} } } };
+		},
+		configurePreviewServer(server) {
+			server.middlewares.use("/__preview__", async (req, res) => {
+				try {
+					const distDir = server.config.build.outDir;
+					const html = await (0, node_fs_promises.readFile)((0, node_path.resolve)(distDir, "preview.html"), "utf-8");
+					res.setHeader("Content-Type", "text/html");
+					const origin = req.headers.origin;
+					if (origin && isAllowedOrigin(origin)) {
+						res.setHeader("Access-Control-Allow-Origin", origin);
+						res.setHeader("Vary", "Origin");
+					}
+					res.statusCode = 200;
+					res.end(html);
+				} catch {
+					res.statusCode = 404;
+					res.end("preview.html not found in build output");
+				}
+			});
+			server.middlewares.use("/__manifests__", async (_req, res) => {
+				try {
+					const distDir = server.config.build.outDir;
+					const json = await (0, node_fs_promises.readFile)((0, node_path.resolve)(distDir, "__manifests__.json"), "utf-8");
+					res.setHeader("Content-Type", "application/json");
+					res.setHeader("Access-Control-Allow-Origin", "*");
+					res.statusCode = 200;
+					res.end(json);
+				} catch {
+					res.statusCode = 404;
+					res.end("__manifests__.json not found in build output");
+				}
+			});
+		},
 		configureServer(server) {
 			server.middlewares.use("/__preview__", async (req, res) => {
 				try {

package/dist/vite/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":[],"sources":["../../src/vite/validate-manifest.ts","../../src/vite/builder-preview-plugin.ts","../../src/vite/manifest-plugin.ts","../../../core/src/preview/protocol.ts","../../src/vite/preview-plugin.ts"],"sourcesContent":["/**\n * Lightweight manifest validation for the SDK vite plugin.\n *\n * Inlined here (rather than imported from @fluid-app/portal-core) because\n * portal-core is private and not published to npm. This avoids a runtime\n * ERR_MODULE_NOT_FOUND for portals installed from npm.\n */\n\nconst VALID_FIELD_TYPES = [\n  \"text\",\n  \"textarea\",\n  \"number\",\n  \"boolean\",\n  \"select\",\n  \"color\",\n  \"range\",\n  \"dataSource\",\n  \"resource\",\n  \"image\",\n  \"alignment\",\n  \"slider\",\n  \"colorPicker\",\n  \"sectionHeader\",\n  \"separator\",\n  \"buttonGroup\",\n  \"colorSelect\",\n  \"sectionLayoutSelect\",\n  \"background\",\n  \"contentPosition\",\n  \"textSizeSelect\",\n  \"cssUnit\",\n  \"fontPicker\",\n  \"stringArray\",\n  \"borderRadius\",\n  \"screenPicker\",\n] as const;\n\ninterface ValidationError {\n  path: string;\n  message: string;\n}\n\ntype ValidationResult =\n  | { success: true }\n  | { success: false; errors: ValidationError[] };\n\nexport function validateManifest(input: unknown): ValidationResult {\n  const errors: ValidationError[] = [];\n  const m = input as Record<string, unknown>;\n\n  if (!m || typeof m !== \"object\") {\n    return {\n      success: false,\n      errors: [{ path: \"\", message: \"Manifest must be an object\" }],\n    };\n  }\n\n  // Required string fields\n  for (const key of [\n    \"type\",\n    \"displayName\",\n    \"description\",\n    \"icon\",\n    \"category\",\n  ]) {\n    if (typeof m[key] !== \"string\" || (m[key] as string).length === 0) {\n      errors.push({\n        path: key,\n        message: `${key} is required and must be a non-empty string`,\n      });\n    }\n  }\n\n  if (typeof m.manifestVersion !== \"number\" || m.manifestVersion < 1) {\n    errors.push({\n      path: \"manifestVersion\",\n      message: \"manifestVersion must be a positive integer\",\n    });\n  }\n\n  if (typeof m.component !== \"function\") {\n    errors.push({\n      path: \"component\",\n      message: \"component must be a React component (function)\",\n    });\n  }\n\n  // Property schema validation\n  const schema = m.propertySchema as Record<string, unknown> | undefined;\n  if (schema && typeof schema === \"object\") {\n    if (typeof schema.widgetType !== \"string\" || !schema.widgetType) {\n      errors.push({\n        path: \"propertySchema.widgetType\",\n        message: \"widgetType is required\",\n      });\n    }\n    if (typeof m.type === \"string\" && schema.widgetType !== m.type) {\n      errors.push({\n        path: \"propertySchema.widgetType\",\n        message: \"manifest.type must match manifest.propertySchema.widgetType\",\n      });\n    }\n    if (Array.isArray(schema.fields)) {\n      for (let i = 0; i < schema.fields.length; i++) {\n        const field = schema.fields[i] as Record<string, unknown>;\n        if (!field || typeof field.type !== \"string\") continue;\n        if (\n          !VALID_FIELD_TYPES.includes(\n            field.type as (typeof VALID_FIELD_TYPES)[number],\n          )\n        ) {\n          errors.push({\n            path: `propertySchema.fields.${i}.type`,\n            message: `Invalid field type \"${field.type}\". Valid types: ${VALID_FIELD_TYPES.join(\", \")}`,\n          });\n        }\n      }\n    }\n  }\n\n  return errors.length === 0 ? { success: true } : { success: false, errors };\n}\n","import type { Plugin, ResolvedConfig } from \"vite\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nconst VIRTUAL_ENTRY_ID = \"virtual:builder-preview-entry\";\nconst RESOLVED_VIRTUAL_ID = \"\\0\" + VIRTUAL_ENTRY_ID;\n\nconst RAW_HTML = `<!doctype html>\n<html lang=\"en\" data-theme-mode=\"dark\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>Custom Widget Preview</title>\n    <style>\n      body { margin: 0; font-family: system-ui, -apple-system, sans-serif; }\n    </style>\n  </head>\n  <body>\n    <div id=\"builder-preview-root\"></div>\n    <script type=\"module\" src=\"/@id/virtual:builder-preview-entry\"></script>\n  </body>\n</html>`;\n\n/**\n * Vite plugin that serves a standalone widget preview page at /builder-preview.\n *\n * Dev mode only. Renders all customWidgets from portal.config.ts with\n * a live preview and property editor — no auth, no iframe, no fluid-admin needed.\n */\nexport function fluidBuilderPreviewPlugin(): Plugin {\n  let configPath: string;\n  let cssPath: string;\n\n  return {\n    name: \"fluid-builder-preview\",\n    apply: \"serve\",\n\n    configResolved(config: ResolvedConfig) {\n      const root = config.root;\n      const candidates = [\"src/portal.config.ts\", \"portal.config.ts\"];\n      configPath =\n        candidates.find((c) => existsSync(join(root, c))) ??\n        \"src/portal.config.ts\";\n      const cssCandidates = [\n        \"src/index.css\",\n        \"src/styles/index.css\",\n        \"index.css\",\n      ];\n      cssPath =\n        cssCandidates.find((c) => existsSync(join(root, c))) ?? \"src/index.css\";\n    },\n\n    resolveId(id) {\n      if (id === VIRTUAL_ENTRY_ID) return RESOLVED_VIRTUAL_ID;\n    },\n\n    load(id) {\n      if (id === RESOLVED_VIRTUAL_ID) {\n        return `\nimport \"/${cssPath}\";\nimport * as portalConfig from \"/${configPath}\";\nimport { createRoot } from \"react-dom/client\";\nimport { createElement } from \"react\";\nimport { BuilderPreviewApp } from \"@fluid-app/portal-preview\";\n\nconst widgets = portalConfig.customWidgets || [];\nconst root = document.getElementById(\"builder-preview-root\");\nif (root) {\n  createRoot(root).render(\n    createElement(BuilderPreviewApp, { widgets })\n  );\n}\n`;\n      }\n    },\n\n    configureServer(server) {\n      server.middlewares.use(async (req, res, next) => {\n        const pathname = (req.url ?? \"\").split(\"?\")[0];\n        if (pathname !== \"/builder-preview\" && pathname !== \"/builder-preview/\")\n          return next();\n        try {\n          const transformed = await server.transformIndexHtml(\n            \"/builder-preview\",\n            RAW_HTML,\n          );\n          res.setHeader(\"Content-Type\", \"text/html\");\n          res.end(transformed);\n        } catch (e) {\n          server.config.logger.error(\n            `[fluid] Failed to serve builder preview: ${e}`,\n          );\n          res.statusCode = 500;\n          res.end(\"Builder preview failed to load\");\n        }\n      });\n    },\n  };\n}\n","import type { Plugin, ResolvedConfig, ViteDevServer, Logger } from \"vite\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { validateManifest } from \"./validate-manifest\";\nimport { fluidBuilderPreviewPlugin } from \"./builder-preview-plugin\";\n\n/**\n * Vite plugin bundle that serves widget manifest metadata and the builder preview.\n *\n * Returns an array of plugins:\n * 1. Manifest plugin — serves /__manifests__ (dev) and emits __manifests__.json (build)\n * 2. Builder preview plugin — serves /builder-preview with live widget editing (dev only)\n *\n * Every portal using `fluidManifestPlugin()` automatically gets the builder preview.\n */\nexport function fluidManifestPlugin(): Plugin[] {\n  return [fluidManifestPluginInternal(), fluidBuilderPreviewPlugin()];\n}\n\nfunction fluidManifestPluginInternal(): Plugin {\n  let configPath: string;\n\n  return {\n    name: \"fluid-manifest-plugin\",\n\n    configResolved(config: ResolvedConfig) {\n      const root = config.root;\n      const candidates = [\n        \"src/widgets.config.ts\",\n        \"src/portal.config.ts\",\n        \"portal.config.ts\",\n      ];\n      configPath =\n        \"/\" +\n        (candidates.find((c) => existsSync(join(root, c))) ??\n          \"src/portal.config.ts\");\n    },\n\n    configureServer(server) {\n      server.middlewares.use(\"/__manifests__\", async (_req, res) => {\n        try {\n          const serializable = await loadManifests(\n            server,\n            server.config.logger,\n            configPath,\n          );\n\n          res.setHeader(\"Content-Type\", \"application/json\");\n          res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n          res.end(JSON.stringify(serializable));\n        } catch (err) {\n          server.config.logger.error(\n            `[fluid] Failed to load manifests: ${err}`,\n          );\n          res.statusCode = 500;\n          res.end(JSON.stringify({ error: String(err) }));\n        }\n      });\n    },\n\n    generateBundle() {\n      // Build mode: emit placeholder. The CLI extraction utility handles\n      // actual build-time manifest extraction via tsx subprocess.\n      this.warn(\n        \"[fluid] fluidManifestPlugin: emitting empty __manifests__.json. \" +\n          \"Run `fluid build` instead of `vite build` to include widget manifests.\",\n      );\n      this.emitFile({\n        type: \"asset\",\n        fileName: \"__manifests__.json\",\n        source: JSON.stringify([]),\n      });\n    },\n  };\n}\n\n/**\n * Load and serialize manifests from the resolved widget config\n * (widgets.config.ts or portal.config.ts) via Vite's ssrLoadModule.\n * Validates each manifest before stripping the `component` field.\n * Returns an empty array if the config module or export is missing/invalid.\n */\nasync function loadManifests(\n  server: ViteDevServer,\n  logger?: Logger,\n  configFilePath?: string,\n): Promise<unknown[]> {\n  let mod: Record<string, unknown>;\n  try {\n    mod = await server.ssrLoadModule(configFilePath ?? \"/src/portal.config.ts\");\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const isSSRError =\n      /(document|window|navigator|localStorage|sessionStorage|location|history|HTMLElement) is not defined/.test(\n        message,\n      );\n\n    if (isSSRError) {\n      const configFile = configFilePath ?? \"/src/portal.config.ts\";\n      const isPortalConfig = configFile.includes(\"portal.config\");\n      const fixHint = isPortalConfig\n        ? `  Fix: Create src/widgets.config.ts with only your customWidgets export.\\n` +\n          `  The manifest plugin will load it instead of portal.config.ts.\\n`\n        : `  Fix: Ensure ${configFile} does not import browser-only code.\\n`;\n\n      logger?.warn(\n        `[fluid] Cannot load widget manifests — ${configFile} imports ` +\n          `browser-only code that fails during server-side evaluation.\\n` +\n          `  Custom widgets will not appear in the builder.\\n` +\n          fixHint +\n          `  Widget components are fine — the issue is usually screen imports\\n` +\n          `  (e.g. DashboardScreen) that pull in the SDK barrel export.`,\n      );\n    } else {\n      logger?.warn(`[fluid] Could not load widget config: ${message}`);\n    }\n    return [];\n  }\n\n  const rawWidgets = mod.customWidgets;\n  if (!rawWidgets) {\n    if (configFilePath?.includes(\"widgets.config\")) {\n      logger?.warn(\n        `[fluid] widgets.config.ts was loaded but exports no customWidgets. ` +\n          `Custom widgets will not appear in the builder.`,\n      );\n    }\n    return [];\n  }\n\n  if (!Array.isArray(rawWidgets)) {\n    logger?.warn(\n      `[fluid] customWidgets export is not an array (got ${typeof rawWidgets}). Skipping manifest serving.`,\n    );\n    return [];\n  }\n\n  const manifests = rawWidgets as Record<string, unknown>[];\n\n  // Validate full manifests (with component) before stripping\n  if (logger) {\n    for (const manifest of manifests) {\n      const result = validateManifest(manifest);\n      if (!result.success) {\n        const type = (manifest as { type?: string }).type ?? \"unknown\";\n        logger.warn(\n          `[fluid] Invalid manifest for \"${type}\":\\n` +\n            result.errors.map((e) => `  - ${e.path}: ${e.message}`).join(\"\\n\"),\n        );\n      }\n    }\n  }\n\n  return manifests.map(\n    ({ component: _component, ...rest }: Record<string, unknown>) => rest,\n  );\n}\n","/**\n * PostMessage protocol for builder ↔ iframe widget preview communication.\n *\n * Four-step handshake:\n *   1. Iframe sends `ready` once mounted\n *   2. Builder sends `auth` with token (NEVER via URL)\n *   3. Iframe sends `auth-ready` once FluidProvider settles\n *   4. Builder sends `render-widget` with type + props\n *\n * This prevents the race condition where render-widget arrives\n * before the provider stack has initialized with the auth token.\n */\n\n// ---------------------------------------------------------------------------\n// Builder → Iframe commands\n// ---------------------------------------------------------------------------\n\nexport interface AuthCommand {\n  type: \"auth\";\n  token: string;\n}\n\nexport interface RenderWidgetCommand {\n  type: \"render-widget\";\n  widgetType: string;\n  props: Record<string, unknown>;\n}\n\nexport interface UnmountWidgetCommand {\n  type: \"unmount-widget\";\n}\n\nexport interface SelectWidgetCommand {\n  type: \"select-widget\";\n  widgetType: string;\n}\n\nexport type PreviewCommand =\n  | AuthCommand\n  | RenderWidgetCommand\n  | UnmountWidgetCommand\n  | SelectWidgetCommand;\n\n// ---------------------------------------------------------------------------\n// Iframe → Builder events\n// ---------------------------------------------------------------------------\n\nexport interface ReadyEvent {\n  type: \"ready\";\n}\n\nexport interface AuthReadyEvent {\n  type: \"auth-ready\";\n}\n\nexport interface WidgetRenderedEvent {\n  type: \"widget-rendered\";\n  widgetType: string;\n  dimensions: { width: number; height: number };\n}\n\nexport interface WidgetErrorEvent {\n  type: \"widget-error\";\n  widgetType: string;\n  error: string;\n}\n\nexport interface WidgetClickedEvent {\n  type: \"widget-clicked\";\n  widgetType: string;\n}\n\nexport interface WidgetHmrEvent {\n  type: \"widget-hmr\";\n}\n\nexport type PreviewEvent =\n  | ReadyEvent\n  | AuthReadyEvent\n  | WidgetRenderedEvent\n  | WidgetErrorEvent\n  | WidgetClickedEvent\n  | WidgetHmrEvent;\n\n// ---------------------------------------------------------------------------\n// Origin validation\n// ---------------------------------------------------------------------------\n\nconst ALLOWED_ORIGIN_PATTERNS = [\n  /^https?:\\/\\/localhost(:\\d+)?$/,\n  /^https?:\\/\\/127\\.0\\.0\\.1(:\\d+)?$/,\n  /^https:\\/\\/[a-z0-9-]+\\.portal\\.fluid\\.app$/,\n  /^https:\\/\\/[a-z0-9-]+\\.fluid\\.app$/,\n];\n\n/**\n * Validate that a postMessage origin is trusted.\n * Accepts localhost (any port), *.portal.fluid.app, and *.fluid.app.\n */\nexport function isAllowedOrigin(origin: string): boolean {\n  return ALLOWED_ORIGIN_PATTERNS.some((pattern) => pattern.test(origin));\n}\n\n// ---------------------------------------------------------------------------\n// Type guards\n// ---------------------------------------------------------------------------\n\n/** Check if a message is a valid PreviewCommand (builder → iframe). */\nexport function isPreviewCommand(data: unknown): data is PreviewCommand {\n  if (typeof data !== \"object\" || data === null) return false;\n  const msg = data as Record<string, unknown>;\n  switch (msg[\"type\"]) {\n    case \"auth\":\n      return typeof msg[\"token\"] === \"string\";\n    case \"render-widget\":\n      return (\n        typeof msg[\"widgetType\"] === \"string\" &&\n        typeof msg[\"props\"] === \"object\" &&\n        msg[\"props\"] !== null &&\n        !Array.isArray(msg[\"props\"])\n      );\n    case \"unmount-widget\":\n      return true;\n    case \"select-widget\":\n      return typeof msg[\"widgetType\"] === \"string\";\n    default:\n      return false;\n  }\n}\n\n/** Check if a message is a valid PreviewEvent (iframe → builder). */\nexport function isPreviewEvent(data: unknown): data is PreviewEvent {\n  if (typeof data !== \"object\" || data === null) return false;\n  const msg = data as Record<string, unknown>;\n  switch (msg[\"type\"]) {\n    case \"ready\":\n    case \"auth-ready\":\n    case \"widget-hmr\":\n      return true;\n    case \"widget-rendered\":\n      return (\n        typeof msg[\"widgetType\"] === \"string\" &&\n        typeof msg[\"dimensions\"] === \"object\" &&\n        msg[\"dimensions\"] !== null &&\n        Number.isFinite(\n          (msg[\"dimensions\"] as Record<string, unknown>)[\"width\"],\n        ) &&\n        Number.isFinite(\n          (msg[\"dimensions\"] as Record<string, unknown>)[\"height\"],\n        )\n      );\n    case \"widget-error\":\n      return (\n        typeof msg[\"widgetType\"] === \"string\" &&\n        typeof msg[\"error\"] === \"string\"\n      );\n    case \"widget-clicked\":\n      return typeof msg[\"widgetType\"] === \"string\";\n    default:\n      return false;\n  }\n}\n","import { resolve } from \"node:path\";\nimport { readFile } from \"node:fs/promises\";\nimport type { Plugin } from \"vite\";\nimport { isAllowedOrigin } from \"@fluid-app/portal-core/preview/protocol\";\n\n/**\n * Vite plugin that serves the widget preview route.\n *\n * Dev mode: serves `/__preview__` by transforming preview.html through\n * Vite's HTML pipeline (so import resolution and HMR work).\n *\n * Build mode: no-op — the production preview.html is handled by adding\n * it as a second Rollup input in vite.config.ts.\n */\nexport function fluidPreviewPlugin(): Plugin {\n  return {\n    name: \"fluid-preview-plugin\",\n\n    configureServer(server) {\n      // Serve the preview HTML shell at /__preview__\n      server.middlewares.use(\"/__preview__\", async (req, res) => {\n        try {\n          // Read the preview.html from the project root (copied from template)\n          const htmlPath = resolve(server.config.root, \"preview.html\");\n          let html: string;\n          try {\n            html = await readFile(htmlPath, \"utf-8\");\n          } catch {\n            // Fallback: serve a minimal preview shell\n            html = getDefaultPreviewHtml();\n          }\n\n          // Transform through Vite's HTML pipeline for HMR + import resolution\n          html = await server.transformIndexHtml(\"/__preview__\", html);\n\n          res.setHeader(\"Content-Type\", \"text/html\");\n          const origin = req.headers.origin;\n          if (origin && isAllowedOrigin(origin)) {\n            res.setHeader(\"Access-Control-Allow-Origin\", origin);\n            res.setHeader(\"Vary\", \"Origin\");\n          }\n          res.statusCode = 200;\n          res.end(html);\n        } catch (err) {\n          server.config.logger.error(`[fluid] Failed to serve preview: ${err}`);\n          res.statusCode = 500;\n          res.end(\"Preview failed to load\");\n        }\n      });\n    },\n  };\n}\n\nfunction getDefaultPreviewHtml(): string {\n  return `<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>Widget Preview</title>\n    <meta name=\"referrer\" content=\"strict-origin-when-cross-origin\" />\n    <style>body { margin: 0; padding: 0; }</style>\n  </head>\n  <body>\n    <div id=\"preview-root\"></div>\n    <script type=\"module\" src=\"/src/preview-entry.tsx\"></script>\n  </body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;AAQA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAWD,SAAgB,iBAAiB,OAAkC;CACjE,MAAM,SAA4B,EAAE;CACpC,MAAM,IAAI;AAEV,KAAI,CAAC,KAAK,OAAO,MAAM,SACrB,QAAO;EACL,SAAS;EACT,QAAQ,CAAC;GAAE,MAAM;GAAI,SAAS;GAA8B,CAAC;EAC9D;AAIH,MAAK,MAAM,OAAO;EAChB;EACA;EACA;EACA;EACA;EACD,CACC,KAAI,OAAO,EAAE,SAAS,YAAa,EAAE,KAAgB,WAAW,EAC9D,QAAO,KAAK;EACV,MAAM;EACN,SAAS,GAAG,IAAI;EACjB,CAAC;AAIN,KAAI,OAAO,EAAE,oBAAoB,YAAY,EAAE,kBAAkB,EAC/D,QAAO,KAAK;EACV,MAAM;EACN,SAAS;EACV,CAAC;AAGJ,KAAI,OAAO,EAAE,cAAc,WACzB,QAAO,KAAK;EACV,MAAM;EACN,SAAS;EACV,CAAC;CAIJ,MAAM,SAAS,EAAE;AACjB,KAAI,UAAU,OAAO,WAAW,UAAU;AACxC,MAAI,OAAO,OAAO,eAAe,YAAY,CAAC,OAAO,WACnD,QAAO,KAAK;GACV,MAAM;GACN,SAAS;GACV,CAAC;AAEJ,MAAI,OAAO,EAAE,SAAS,YAAY,OAAO,eAAe,EAAE,KACxD,QAAO,KAAK;GACV,MAAM;GACN,SAAS;GACV,CAAC;AAEJ,MAAI,MAAM,QAAQ,OAAO,OAAO,CAC9B,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,OAAO,QAAQ,KAAK;GAC7C,MAAM,QAAQ,OAAO,OAAO;AAC5B,OAAI,CAAC,SAAS,OAAO,MAAM,SAAS,SAAU;AAC9C,OACE,CAAC,kBAAkB,SACjB,MAAM,KACP,CAED,QAAO,KAAK;IACV,MAAM,yBAAyB,EAAE;IACjC,SAAS,uBAAuB,MAAM,KAAK,kBAAkB,kBAAkB,KAAK,KAAK;IAC1F,CAAC;;;AAMV,QAAO,OAAO,WAAW,IAAI,EAAE,SAAS,MAAM,GAAG;EAAE,SAAS;EAAO;EAAQ;;;;ACpH7E,MAAM,mBAAmB;AACzB,MAAM,sBAAsB,OAAO;AAEnC,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;AAsBjB,SAAgB,4BAAoC;CAClD,IAAI;CACJ,IAAI;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EAEP,eAAe,QAAwB;GACrC,MAAM,OAAO,OAAO;AAEpB,gBADmB,CAAC,wBAAwB,mBAAmB,CAElD,MAAM,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAsB,MAAM,EAAE,CAAC,CAAC,IACjD;AAMF,aALsB;IACpB;IACA;IACA;IACD,CAEe,MAAM,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAsB,MAAM,EAAE,CAAC,CAAC,IAAI;;EAG5D,UAAU,IAAI;AACZ,OAAI,OAAO,iBAAkB,QAAO;;EAGtC,KAAK,IAAI;AACP,OAAI,OAAO,oBACT,QAAO;WACJ,QAAQ;kCACe,WAAW;;;;;;;;;;;;;;EAgBzC,gBAAgB,QAAQ;AACtB,UAAO,YAAY,IAAI,OAAO,KAAK,KAAK,SAAS;IAC/C,MAAM,YAAY,IAAI,OAAO,IAAI,MAAM,IAAI,CAAC;AAC5C,QAAI,aAAa,sBAAsB,aAAa,oBAClD,QAAO,MAAM;AACf,QAAI;KACF,MAAM,cAAc,MAAM,OAAO,mBAC/B,oBACA,SACD;AACD,SAAI,UAAU,gBAAgB,YAAY;AAC1C,SAAI,IAAI,YAAY;aACb,GAAG;AACV,YAAO,OAAO,OAAO,MACnB,4CAA4C,IAC7C;AACD,SAAI,aAAa;AACjB,SAAI,IAAI,iCAAiC;;KAE3C;;EAEL;;;;;;;;;;;;;AClFH,SAAgB,sBAAgC;AAC9C,QAAO,CAAC,6BAA6B,EAAE,2BAA2B,CAAC;;AAGrE,SAAS,8BAAsC;CAC7C,IAAI;AAEJ,QAAO;EACL,MAAM;EAEN,eAAe,QAAwB;GACrC,MAAM,OAAO,OAAO;AAMpB,gBACE,OANiB;IACjB;IACA;IACA;IACD,CAGa,MAAM,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAsB,MAAM,EAAE,CAAC,CAAC,IAChD;;EAGN,gBAAgB,QAAQ;AACtB,UAAO,YAAY,IAAI,kBAAkB,OAAO,MAAM,QAAQ;AAC5D,QAAI;KACF,MAAM,eAAe,MAAM,cACzB,QACA,OAAO,OAAO,QACd,WACD;AAED,SAAI,UAAU,gBAAgB,mBAAmB;AACjD,SAAI,UAAU,+BAA+B,IAAI;AACjD,SAAI,IAAI,KAAK,UAAU,aAAa,CAAC;aAC9B,KAAK;AACZ,YAAO,OAAO,OAAO,MACnB,qCAAqC,MACtC;AACD,SAAI,aAAa;AACjB,SAAI,IAAI,KAAK,UAAU,EAAE,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;;KAEjD;;EAGJ,iBAAiB;AAGf,QAAK,KACH,yIAED;AACD,QAAK,SAAS;IACZ,MAAM;IACN,UAAU;IACV,QAAQ,KAAK,UAAU,EAAE,CAAC;IAC3B,CAAC;;EAEL;;;;;;;;AASH,eAAe,cACb,QACA,QACA,gBACoB;CACpB,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,OAAO,cAAc,kBAAkB,wBAAwB;UACpE,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAMhE,MAJE,sGAAsG,KACpG,QACD,EAEa;GACd,MAAM,aAAa,kBAAkB;GAErC,MAAM,UADiB,WAAW,SAAS,gBAAgB,GAEvD,gJAEA,iBAAiB,WAAW;AAEhC,WAAQ,KACN,0CAA0C,WAAW,4HAGnD,UACA,mIAEH;QAED,SAAQ,KAAK,yCAAyC,UAAU;AAElE,SAAO,EAAE;;CAGX,MAAM,aAAa,IAAI;AACvB,KAAI,CAAC,YAAY;AACf,MAAI,gBAAgB,SAAS,iBAAiB,CAC5C,SAAQ,KACN,oHAED;AAEH,SAAO,EAAE;;AAGX,KAAI,CAAC,MAAM,QAAQ,WAAW,EAAE;AAC9B,UAAQ,KACN,qDAAqD,OAAO,WAAW,+BACxE;AACD,SAAO,EAAE;;CAGX,MAAM,YAAY;AAGlB,KAAI,OACF,MAAK,MAAM,YAAY,WAAW;EAChC,MAAM,SAAS,iBAAiB,SAAS;AACzC,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,OAAQ,SAA+B,QAAQ;AACrD,UAAO,KACL,iCAAiC,KAAK,QACpC,OAAO,OAAO,KAAK,MAAM,OAAO,EAAE,KAAK,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK,CACrE;;;AAKP,QAAO,UAAU,KACd,EAAE,WAAW,YAAY,GAAG,WAAoC,KAClE;;;;ACnEH,MAAM,0BAA0B;CAC9B;CACA;CACA;CACA;CACD;;;;;AAMD,SAAgB,gBAAgB,QAAyB;AACvD,QAAO,wBAAwB,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;;;;;;;;;;;;;ACtFxE,SAAgB,qBAA6B;AAC3C,QAAO;EACL,MAAM;EAEN,gBAAgB,QAAQ;AAEtB,UAAO,YAAY,IAAI,gBAAgB,OAAO,KAAK,QAAQ;AACzD,QAAI;KAEF,MAAM,YAAA,GAAA,UAAA,SAAmB,OAAO,OAAO,MAAM,eAAe;KAC5D,IAAI;AACJ,SAAI;AACF,aAAO,OAAA,GAAA,iBAAA,UAAe,UAAU,QAAQ;aAClC;AAEN,aAAO,uBAAuB;;AAIhC,YAAO,MAAM,OAAO,mBAAmB,gBAAgB,KAAK;AAE5D,SAAI,UAAU,gBAAgB,YAAY;KAC1C,MAAM,SAAS,IAAI,QAAQ;AAC3B,SAAI,UAAU,gBAAgB,OAAO,EAAE;AACrC,UAAI,UAAU,+BAA+B,OAAO;AACpD,UAAI,UAAU,QAAQ,SAAS;;AAEjC,SAAI,aAAa;AACjB,SAAI,IAAI,KAAK;aACN,KAAK;AACZ,YAAO,OAAO,OAAO,MAAM,oCAAoC,MAAM;AACrE,SAAI,aAAa;AACjB,SAAI,IAAI,yBAAyB;;KAEnC;;EAEL;;AAGH,SAAS,wBAAgC;AACvC,QAAO"}
+{"version":3,"file":"index.cjs","names":[],"sources":["../../src/vite/validate-manifest.ts","../../src/vite/builder-preview-plugin.ts","../../src/vite/manifest-plugin.ts","../../../core/src/preview/protocol.ts","../../src/vite/preview-plugin.ts"],"sourcesContent":["/**\n * Lightweight manifest validation for the SDK vite plugin.\n *\n * Inlined here (rather than imported from @fluid-app/portal-core) because\n * portal-core is private and not published to npm. This avoids a runtime\n * ERR_MODULE_NOT_FOUND for portals installed from npm.\n */\n\nconst VALID_FIELD_TYPES = [\n  \"text\",\n  \"textarea\",\n  \"number\",\n  \"boolean\",\n  \"select\",\n  \"color\",\n  \"range\",\n  \"dataSource\",\n  \"resource\",\n  \"image\",\n  \"alignment\",\n  \"slider\",\n  \"colorPicker\",\n  \"sectionHeader\",\n  \"separator\",\n  \"buttonGroup\",\n  \"colorSelect\",\n  \"sectionLayoutSelect\",\n  \"background\",\n  \"contentPosition\",\n  \"textSizeSelect\",\n  \"cssUnit\",\n  \"fontPicker\",\n  \"stringArray\",\n  \"borderRadius\",\n  \"screenPicker\",\n] as const;\n\ninterface ValidationError {\n  path: string;\n  message: string;\n}\n\ntype ValidationResult =\n  | { success: true }\n  | { success: false; errors: ValidationError[] };\n\nexport function validateManifest(input: unknown): ValidationResult {\n  const errors: ValidationError[] = [];\n  const m = input as Record<string, unknown>;\n\n  if (!m || typeof m !== \"object\") {\n    return {\n      success: false,\n      errors: [{ path: \"\", message: \"Manifest must be an object\" }],\n    };\n  }\n\n  // Required string fields\n  for (const key of [\n    \"type\",\n    \"displayName\",\n    \"description\",\n    \"icon\",\n    \"category\",\n  ]) {\n    if (typeof m[key] !== \"string\" || (m[key] as string).length === 0) {\n      errors.push({\n        path: key,\n        message: `${key} is required and must be a non-empty string`,\n      });\n    }\n  }\n\n  if (typeof m.manifestVersion !== \"number\" || m.manifestVersion < 1) {\n    errors.push({\n      path: \"manifestVersion\",\n      message: \"manifestVersion must be a positive integer\",\n    });\n  }\n\n  if (typeof m.component !== \"function\") {\n    errors.push({\n      path: \"component\",\n      message: \"component must be a React component (function)\",\n    });\n  }\n\n  // Property schema validation\n  const schema = m.propertySchema as Record<string, unknown> | undefined;\n  if (schema && typeof schema === \"object\") {\n    if (typeof schema.widgetType !== \"string\" || !schema.widgetType) {\n      errors.push({\n        path: \"propertySchema.widgetType\",\n        message: \"widgetType is required\",\n      });\n    }\n    if (typeof m.type === \"string\" && schema.widgetType !== m.type) {\n      errors.push({\n        path: \"propertySchema.widgetType\",\n        message: \"manifest.type must match manifest.propertySchema.widgetType\",\n      });\n    }\n    if (Array.isArray(schema.fields)) {\n      for (let i = 0; i < schema.fields.length; i++) {\n        const field = schema.fields[i] as Record<string, unknown>;\n        if (!field || typeof field.type !== \"string\") continue;\n        if (\n          !VALID_FIELD_TYPES.includes(\n            field.type as (typeof VALID_FIELD_TYPES)[number],\n          )\n        ) {\n          errors.push({\n            path: `propertySchema.fields.${i}.type`,\n            message: `Invalid field type \"${field.type}\". Valid types: ${VALID_FIELD_TYPES.join(\", \")}`,\n          });\n        }\n      }\n    }\n  }\n\n  return errors.length === 0 ? { success: true } : { success: false, errors };\n}\n","import type { Plugin, ResolvedConfig } from \"vite\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\nconst VIRTUAL_ENTRY_ID = \"virtual:builder-preview-entry\";\nconst RESOLVED_VIRTUAL_ID = \"\\0\" + VIRTUAL_ENTRY_ID;\n\nconst RAW_HTML = `<!doctype html>\n<html lang=\"en\" data-theme-mode=\"dark\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>Custom Widget Preview</title>\n    <style>\n      body { margin: 0; font-family: system-ui, -apple-system, sans-serif; }\n    </style>\n  </head>\n  <body>\n    <div id=\"builder-preview-root\"></div>\n    <script type=\"module\" src=\"/@id/virtual:builder-preview-entry\"></script>\n  </body>\n</html>`;\n\n/**\n * Vite plugin that serves a standalone widget preview page at /builder-preview.\n *\n * Dev mode only. Renders all customWidgets from portal.config.ts with\n * a live preview and property editor — no auth, no iframe, no fluid-admin needed.\n */\nexport function fluidBuilderPreviewPlugin(): Plugin {\n  let configPath: string;\n  let cssPath: string;\n\n  return {\n    name: \"fluid-builder-preview\",\n    apply: \"serve\",\n\n    configResolved(config: ResolvedConfig) {\n      const root = config.root;\n      const candidates = [\"src/portal.config.ts\", \"portal.config.ts\"];\n      configPath =\n        candidates.find((c) => existsSync(join(root, c))) ??\n        \"src/portal.config.ts\";\n      const cssCandidates = [\n        \"src/index.css\",\n        \"src/styles/index.css\",\n        \"index.css\",\n      ];\n      cssPath =\n        cssCandidates.find((c) => existsSync(join(root, c))) ?? \"src/index.css\";\n    },\n\n    resolveId(id) {\n      if (id === VIRTUAL_ENTRY_ID) return RESOLVED_VIRTUAL_ID;\n    },\n\n    load(id) {\n      if (id === RESOLVED_VIRTUAL_ID) {\n        return `\nimport \"/${cssPath}\";\nimport * as portalConfig from \"/${configPath}\";\nimport { createRoot } from \"react-dom/client\";\nimport { createElement } from \"react\";\nimport { BuilderPreviewApp } from \"@fluid-app/portal-preview\";\n\nconst widgets = portalConfig.customWidgets || [];\nconst root = document.getElementById(\"builder-preview-root\");\nif (root) {\n  createRoot(root).render(\n    createElement(BuilderPreviewApp, { widgets })\n  );\n}\n`;\n      }\n    },\n\n    configureServer(server) {\n      server.middlewares.use(async (req, res, next) => {\n        const pathname = (req.url ?? \"\").split(\"?\")[0];\n        if (pathname !== \"/builder-preview\" && pathname !== \"/builder-preview/\")\n          return next();\n        try {\n          const transformed = await server.transformIndexHtml(\n            \"/builder-preview\",\n            RAW_HTML,\n          );\n          res.setHeader(\"Content-Type\", \"text/html\");\n          res.end(transformed);\n        } catch (e) {\n          server.config.logger.error(\n            `[fluid] Failed to serve builder preview: ${e}`,\n          );\n          res.statusCode = 500;\n          res.end(\"Builder preview failed to load\");\n        }\n      });\n    },\n  };\n}\n","import type { Plugin, ResolvedConfig, ViteDevServer, Logger } from \"vite\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { validateManifest } from \"./validate-manifest\";\nimport { fluidBuilderPreviewPlugin } from \"./builder-preview-plugin\";\n\n/**\n * Vite plugin bundle that serves widget manifest metadata and the builder preview.\n *\n * Returns an array of plugins:\n * 1. Manifest plugin — serves /__manifests__ (dev) and emits __manifests__.json (build)\n * 2. Builder preview plugin — serves /builder-preview with live widget editing (dev only)\n *\n * Every portal using `fluidManifestPlugin()` automatically gets the builder preview.\n */\nexport function fluidManifestPlugin(): Plugin[] {\n  return [fluidManifestPluginInternal(), fluidBuilderPreviewPlugin()];\n}\n\nfunction fluidManifestPluginInternal(): Plugin {\n  let configPath: string;\n\n  return {\n    name: \"fluid-manifest-plugin\",\n\n    configResolved(config: ResolvedConfig) {\n      const root = config.root;\n      const candidates = [\n        \"src/widgets.config.ts\",\n        \"src/portal.config.ts\",\n        \"portal.config.ts\",\n      ];\n      configPath =\n        \"/\" +\n        (candidates.find((c) => existsSync(join(root, c))) ??\n          \"src/portal.config.ts\");\n    },\n\n    configureServer(server) {\n      server.middlewares.use(\"/__manifests__\", async (_req, res) => {\n        try {\n          const serializable = await loadManifests(\n            server,\n            server.config.logger,\n            configPath,\n          );\n\n          res.setHeader(\"Content-Type\", \"application/json\");\n          res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n          res.end(JSON.stringify(serializable));\n        } catch (err) {\n          server.config.logger.error(\n            `[fluid] Failed to load manifests: ${err}`,\n          );\n          res.statusCode = 500;\n          res.end(JSON.stringify({ error: String(err) }));\n        }\n      });\n    },\n\n    generateBundle() {\n      // Build mode: emit placeholder. The CLI extraction utility handles\n      // actual build-time manifest extraction via tsx subprocess.\n      this.warn(\n        \"[fluid] fluidManifestPlugin: emitting empty __manifests__.json. \" +\n          \"Run `fluid build` instead of `vite build` to include widget manifests.\",\n      );\n      this.emitFile({\n        type: \"asset\",\n        fileName: \"__manifests__.json\",\n        source: JSON.stringify([]),\n      });\n    },\n  };\n}\n\n/**\n * Load and serialize manifests from the resolved widget config\n * (widgets.config.ts or portal.config.ts) via Vite's ssrLoadModule.\n * Validates each manifest before stripping the `component` field.\n * Returns an empty array if the config module or export is missing/invalid.\n */\nasync function loadManifests(\n  server: ViteDevServer,\n  logger?: Logger,\n  configFilePath?: string,\n): Promise<unknown[]> {\n  let mod: Record<string, unknown>;\n  try {\n    mod = await server.ssrLoadModule(configFilePath ?? \"/src/portal.config.ts\");\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const isSSRError =\n      /(document|window|navigator|localStorage|sessionStorage|location|history|HTMLElement) is not defined/.test(\n        message,\n      );\n\n    if (isSSRError) {\n      const configFile = configFilePath ?? \"/src/portal.config.ts\";\n      const isPortalConfig = configFile.includes(\"portal.config\");\n      const fixHint = isPortalConfig\n        ? `  Fix: Create src/widgets.config.ts with only your customWidgets export.\\n` +\n          `  The manifest plugin will load it instead of portal.config.ts.\\n`\n        : `  Fix: Ensure ${configFile} does not import browser-only code.\\n`;\n\n      logger?.warn(\n        `[fluid] Cannot load widget manifests — ${configFile} imports ` +\n          `browser-only code that fails during server-side evaluation.\\n` +\n          `  Custom widgets will not appear in the builder.\\n` +\n          fixHint +\n          `  Widget components are fine — the issue is usually screen imports\\n` +\n          `  (e.g. DashboardScreen) that pull in the SDK barrel export.`,\n      );\n    } else {\n      logger?.warn(`[fluid] Could not load widget config: ${message}`);\n    }\n    return [];\n  }\n\n  const rawWidgets = mod.customWidgets;\n  if (!rawWidgets) {\n    if (configFilePath?.includes(\"widgets.config\")) {\n      logger?.warn(\n        `[fluid] widgets.config.ts was loaded but exports no customWidgets. ` +\n          `Custom widgets will not appear in the builder.`,\n      );\n    }\n    return [];\n  }\n\n  if (!Array.isArray(rawWidgets)) {\n    logger?.warn(\n      `[fluid] customWidgets export is not an array (got ${typeof rawWidgets}). Skipping manifest serving.`,\n    );\n    return [];\n  }\n\n  const manifests = rawWidgets as Record<string, unknown>[];\n\n  // Validate full manifests (with component) before stripping\n  if (logger) {\n    for (const manifest of manifests) {\n      const result = validateManifest(manifest);\n      if (!result.success) {\n        const type = (manifest as { type?: string }).type ?? \"unknown\";\n        logger.warn(\n          `[fluid] Invalid manifest for \"${type}\":\\n` +\n            result.errors.map((e) => `  - ${e.path}: ${e.message}`).join(\"\\n\"),\n        );\n      }\n    }\n  }\n\n  return manifests.map(\n    ({ component: _component, ...rest }: Record<string, unknown>) => rest,\n  );\n}\n","/**\n * PostMessage protocol for builder ↔ iframe widget preview communication.\n *\n * Four-step handshake:\n *   1. Iframe sends `ready` once mounted\n *   2. Builder sends `auth` with token (NEVER via URL)\n *   3. Iframe sends `auth-ready` once FluidProvider settles\n *   4. Builder sends `render-widget` with type + props\n *\n * This prevents the race condition where render-widget arrives\n * before the provider stack has initialized with the auth token.\n */\n\n// ---------------------------------------------------------------------------\n// Builder → Iframe commands\n// ---------------------------------------------------------------------------\n\nexport interface AuthCommand {\n  type: \"auth\";\n  token: string;\n}\n\nexport interface RenderWidgetCommand {\n  type: \"render-widget\";\n  widgetType: string;\n  props: Record<string, unknown>;\n}\n\nexport interface UnmountWidgetCommand {\n  type: \"unmount-widget\";\n}\n\nexport interface SelectWidgetCommand {\n  type: \"select-widget\";\n  widgetType: string;\n}\n\nexport type PreviewCommand =\n  | AuthCommand\n  | RenderWidgetCommand\n  | UnmountWidgetCommand\n  | SelectWidgetCommand;\n\n// ---------------------------------------------------------------------------\n// Iframe → Builder events\n// ---------------------------------------------------------------------------\n\nexport interface ReadyEvent {\n  type: \"ready\";\n}\n\nexport interface AuthReadyEvent {\n  type: \"auth-ready\";\n}\n\nexport interface WidgetRenderedEvent {\n  type: \"widget-rendered\";\n  widgetType: string;\n  dimensions: { width: number; height: number };\n}\n\nexport interface WidgetErrorEvent {\n  type: \"widget-error\";\n  widgetType: string;\n  error: string;\n}\n\nexport interface WidgetClickedEvent {\n  type: \"widget-clicked\";\n  widgetType: string;\n}\n\nexport interface WidgetHmrEvent {\n  type: \"widget-hmr\";\n}\n\nexport type PreviewEvent =\n  | ReadyEvent\n  | AuthReadyEvent\n  | WidgetRenderedEvent\n  | WidgetErrorEvent\n  | WidgetClickedEvent\n  | WidgetHmrEvent;\n\n// ---------------------------------------------------------------------------\n// Origin validation\n// ---------------------------------------------------------------------------\n\nconst ALLOWED_ORIGIN_PATTERNS = [\n  /^https?:\\/\\/localhost(:\\d+)?$/,\n  /^https?:\\/\\/127\\.0\\.0\\.1(:\\d+)?$/,\n  /^https:\\/\\/[a-z0-9-]+\\.portal\\.fluid\\.app$/,\n  /^https:\\/\\/[a-z0-9-]+\\.fluid\\.app$/,\n];\n\n/**\n * Validate that a postMessage origin is trusted.\n * Accepts localhost (any port), *.portal.fluid.app, and *.fluid.app.\n */\nexport function isAllowedOrigin(origin: string): boolean {\n  return ALLOWED_ORIGIN_PATTERNS.some((pattern) => pattern.test(origin));\n}\n\n// ---------------------------------------------------------------------------\n// Type guards\n// ---------------------------------------------------------------------------\n\n/** Check if a message is a valid PreviewCommand (builder → iframe). */\nexport function isPreviewCommand(data: unknown): data is PreviewCommand {\n  if (typeof data !== \"object\" || data === null) return false;\n  const msg = data as Record<string, unknown>;\n  switch (msg[\"type\"]) {\n    case \"auth\":\n      return typeof msg[\"token\"] === \"string\";\n    case \"render-widget\":\n      return (\n        typeof msg[\"widgetType\"] === \"string\" &&\n        typeof msg[\"props\"] === \"object\" &&\n        msg[\"props\"] !== null &&\n        !Array.isArray(msg[\"props\"])\n      );\n    case \"unmount-widget\":\n      return true;\n    case \"select-widget\":\n      return typeof msg[\"widgetType\"] === \"string\";\n    default:\n      return false;\n  }\n}\n\n/** Check if a message is a valid PreviewEvent (iframe → builder). */\nexport function isPreviewEvent(data: unknown): data is PreviewEvent {\n  if (typeof data !== \"object\" || data === null) return false;\n  const msg = data as Record<string, unknown>;\n  switch (msg[\"type\"]) {\n    case \"ready\":\n    case \"auth-ready\":\n    case \"widget-hmr\":\n      return true;\n    case \"widget-rendered\":\n      return (\n        typeof msg[\"widgetType\"] === \"string\" &&\n        typeof msg[\"dimensions\"] === \"object\" &&\n        msg[\"dimensions\"] !== null &&\n        Number.isFinite(\n          (msg[\"dimensions\"] as Record<string, unknown>)[\"width\"],\n        ) &&\n        Number.isFinite(\n          (msg[\"dimensions\"] as Record<string, unknown>)[\"height\"],\n        )\n      );\n    case \"widget-error\":\n      return (\n        typeof msg[\"widgetType\"] === \"string\" &&\n        typeof msg[\"error\"] === \"string\"\n      );\n    case \"widget-clicked\":\n      return typeof msg[\"widgetType\"] === \"string\";\n    default:\n      return false;\n  }\n}\n","import { resolve } from \"node:path\";\nimport { readFile } from \"node:fs/promises\";\nimport { existsSync } from \"node:fs\";\nimport type { Plugin, UserConfig } from \"vite\";\nimport { isAllowedOrigin } from \"@fluid-app/portal-core/preview/protocol\";\n\n/**\n * Vite plugin that serves the widget preview route.\n *\n * Dev mode: serves `/__preview__` by transforming preview.html through\n * Vite's HTML pipeline (so import resolution and HMR work).\n *\n * Build mode: adds preview.html as a second Rollup input so `vite build`\n * produces it alongside index.html for production deployment.\n */\nexport function fluidPreviewPlugin(): Plugin {\n  return {\n    name: \"fluid-preview-plugin\",\n\n    config(_config: UserConfig, { command }) {\n      if (command !== \"build\") return;\n\n      // config() runs before configResolved, so use process.cwd()\n      // which is the project root when invoked via `vite build`.\n      const projectRoot = process.cwd();\n      const previewHtml = resolve(projectRoot, \"preview.html\");\n      if (!existsSync(previewHtml)) return;\n\n      // Add preview.html as a second Rollup entry point\n      return {\n        build: {\n          rollupOptions: {\n            input: {\n              main: resolve(projectRoot, \"index.html\"),\n              preview: previewHtml,\n            },\n          },\n        },\n      };\n    },\n\n    // vite preview: static file server with no rewrite rules.\n    // Map /__preview__ → preview.html and /__manifests__ → __manifests__.json\n    // so local production testing works the same as nginx in production.\n    configurePreviewServer(server) {\n      server.middlewares.use(\"/__preview__\", async (req, res) => {\n        try {\n          const distDir = server.config.build.outDir;\n          const html = await readFile(\n            resolve(distDir, \"preview.html\"),\n            \"utf-8\",\n          );\n          res.setHeader(\"Content-Type\", \"text/html\");\n          const origin = req.headers.origin;\n          if (origin && isAllowedOrigin(origin)) {\n            res.setHeader(\"Access-Control-Allow-Origin\", origin);\n            res.setHeader(\"Vary\", \"Origin\");\n          }\n          res.statusCode = 200;\n          res.end(html);\n        } catch {\n          res.statusCode = 404;\n          res.end(\"preview.html not found in build output\");\n        }\n      });\n\n      server.middlewares.use(\"/__manifests__\", async (_req, res) => {\n        try {\n          const distDir = server.config.build.outDir;\n          const json = await readFile(\n            resolve(distDir, \"__manifests__.json\"),\n            \"utf-8\",\n          );\n          res.setHeader(\"Content-Type\", \"application/json\");\n          res.setHeader(\"Access-Control-Allow-Origin\", \"*\");\n          res.statusCode = 200;\n          res.end(json);\n        } catch {\n          res.statusCode = 404;\n          res.end(\"__manifests__.json not found in build output\");\n        }\n      });\n    },\n\n    // vite dev: serve /__preview__ with Vite's HTML transform pipeline\n    configureServer(server) {\n      // Serve the preview HTML shell at /__preview__\n      server.middlewares.use(\"/__preview__\", async (req, res) => {\n        try {\n          // Read the preview.html from the project root (copied from template)\n          const htmlPath = resolve(server.config.root, \"preview.html\");\n          let html: string;\n          try {\n            html = await readFile(htmlPath, \"utf-8\");\n          } catch {\n            // Fallback: serve a minimal preview shell\n            html = getDefaultPreviewHtml();\n          }\n\n          // Transform through Vite's HTML pipeline for HMR + import resolution\n          html = await server.transformIndexHtml(\"/__preview__\", html);\n\n          res.setHeader(\"Content-Type\", \"text/html\");\n          const origin = req.headers.origin;\n          if (origin && isAllowedOrigin(origin)) {\n            res.setHeader(\"Access-Control-Allow-Origin\", origin);\n            res.setHeader(\"Vary\", \"Origin\");\n          }\n          res.statusCode = 200;\n          res.end(html);\n        } catch (err) {\n          server.config.logger.error(`[fluid] Failed to serve preview: ${err}`);\n          res.statusCode = 500;\n          res.end(\"Preview failed to load\");\n        }\n      });\n    },\n  };\n}\n\nfunction getDefaultPreviewHtml(): string {\n  return `<!doctype html>\n<html lang=\"en\">\n  <head>\n    <meta charset=\"UTF-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n    <title>Widget Preview</title>\n    <meta name=\"referrer\" content=\"strict-origin-when-cross-origin\" />\n    <style>body { margin: 0; padding: 0; }</style>\n  </head>\n  <body>\n    <div id=\"preview-root\"></div>\n    <script type=\"module\" src=\"/src/preview-entry.tsx\"></script>\n  </body>\n</html>`;\n}\n"],"mappings":";;;;;;;;;;;;;AAQA,MAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAWD,SAAgB,iBAAiB,OAAkC;CACjE,MAAM,SAA4B,EAAE;CACpC,MAAM,IAAI;AAEV,KAAI,CAAC,KAAK,OAAO,MAAM,SACrB,QAAO;EACL,SAAS;EACT,QAAQ,CAAC;GAAE,MAAM;GAAI,SAAS;GAA8B,CAAC;EAC9D;AAIH,MAAK,MAAM,OAAO;EAChB;EACA;EACA;EACA;EACA;EACD,CACC,KAAI,OAAO,EAAE,SAAS,YAAa,EAAE,KAAgB,WAAW,EAC9D,QAAO,KAAK;EACV,MAAM;EACN,SAAS,GAAG,IAAI;EACjB,CAAC;AAIN,KAAI,OAAO,EAAE,oBAAoB,YAAY,EAAE,kBAAkB,EAC/D,QAAO,KAAK;EACV,MAAM;EACN,SAAS;EACV,CAAC;AAGJ,KAAI,OAAO,EAAE,cAAc,WACzB,QAAO,KAAK;EACV,MAAM;EACN,SAAS;EACV,CAAC;CAIJ,MAAM,SAAS,EAAE;AACjB,KAAI,UAAU,OAAO,WAAW,UAAU;AACxC,MAAI,OAAO,OAAO,eAAe,YAAY,CAAC,OAAO,WACnD,QAAO,KAAK;GACV,MAAM;GACN,SAAS;GACV,CAAC;AAEJ,MAAI,OAAO,EAAE,SAAS,YAAY,OAAO,eAAe,EAAE,KACxD,QAAO,KAAK;GACV,MAAM;GACN,SAAS;GACV,CAAC;AAEJ,MAAI,MAAM,QAAQ,OAAO,OAAO,CAC9B,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,OAAO,QAAQ,KAAK;GAC7C,MAAM,QAAQ,OAAO,OAAO;AAC5B,OAAI,CAAC,SAAS,OAAO,MAAM,SAAS,SAAU;AAC9C,OACE,CAAC,kBAAkB,SACjB,MAAM,KACP,CAED,QAAO,KAAK;IACV,MAAM,yBAAyB,EAAE;IACjC,SAAS,uBAAuB,MAAM,KAAK,kBAAkB,kBAAkB,KAAK,KAAK;IAC1F,CAAC;;;AAMV,QAAO,OAAO,WAAW,IAAI,EAAE,SAAS,MAAM,GAAG;EAAE,SAAS;EAAO;EAAQ;;;;ACpH7E,MAAM,mBAAmB;AACzB,MAAM,sBAAsB,OAAO;AAEnC,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;AAsBjB,SAAgB,4BAAoC;CAClD,IAAI;CACJ,IAAI;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EAEP,eAAe,QAAwB;GACrC,MAAM,OAAO,OAAO;AAEpB,gBADmB,CAAC,wBAAwB,mBAAmB,CAElD,MAAM,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAsB,MAAM,EAAE,CAAC,CAAC,IACjD;AAMF,aALsB;IACpB;IACA;IACA;IACD,CAEe,MAAM,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAsB,MAAM,EAAE,CAAC,CAAC,IAAI;;EAG5D,UAAU,IAAI;AACZ,OAAI,OAAO,iBAAkB,QAAO;;EAGtC,KAAK,IAAI;AACP,OAAI,OAAO,oBACT,QAAO;WACJ,QAAQ;kCACe,WAAW;;;;;;;;;;;;;;EAgBzC,gBAAgB,QAAQ;AACtB,UAAO,YAAY,IAAI,OAAO,KAAK,KAAK,SAAS;IAC/C,MAAM,YAAY,IAAI,OAAO,IAAI,MAAM,IAAI,CAAC;AAC5C,QAAI,aAAa,sBAAsB,aAAa,oBAClD,QAAO,MAAM;AACf,QAAI;KACF,MAAM,cAAc,MAAM,OAAO,mBAC/B,oBACA,SACD;AACD,SAAI,UAAU,gBAAgB,YAAY;AAC1C,SAAI,IAAI,YAAY;aACb,GAAG;AACV,YAAO,OAAO,OAAO,MACnB,4CAA4C,IAC7C;AACD,SAAI,aAAa;AACjB,SAAI,IAAI,iCAAiC;;KAE3C;;EAEL;;;;;;;;;;;;;AClFH,SAAgB,sBAAgC;AAC9C,QAAO,CAAC,6BAA6B,EAAE,2BAA2B,CAAC;;AAGrE,SAAS,8BAAsC;CAC7C,IAAI;AAEJ,QAAO;EACL,MAAM;EAEN,eAAe,QAAwB;GACrC,MAAM,OAAO,OAAO;AAMpB,gBACE,OANiB;IACjB;IACA;IACA;IACD,CAGa,MAAM,OAAA,GAAA,QAAA,aAAA,GAAA,UAAA,MAAsB,MAAM,EAAE,CAAC,CAAC,IAChD;;EAGN,gBAAgB,QAAQ;AACtB,UAAO,YAAY,IAAI,kBAAkB,OAAO,MAAM,QAAQ;AAC5D,QAAI;KACF,MAAM,eAAe,MAAM,cACzB,QACA,OAAO,OAAO,QACd,WACD;AAED,SAAI,UAAU,gBAAgB,mBAAmB;AACjD,SAAI,UAAU,+BAA+B,IAAI;AACjD,SAAI,IAAI,KAAK,UAAU,aAAa,CAAC;aAC9B,KAAK;AACZ,YAAO,OAAO,OAAO,MACnB,qCAAqC,MACtC;AACD,SAAI,aAAa;AACjB,SAAI,IAAI,KAAK,UAAU,EAAE,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;;KAEjD;;EAGJ,iBAAiB;AAGf,QAAK,KACH,yIAED;AACD,QAAK,SAAS;IACZ,MAAM;IACN,UAAU;IACV,QAAQ,KAAK,UAAU,EAAE,CAAC;IAC3B,CAAC;;EAEL;;;;;;;;AASH,eAAe,cACb,QACA,QACA,gBACoB;CACpB,IAAI;AACJ,KAAI;AACF,QAAM,MAAM,OAAO,cAAc,kBAAkB,wBAAwB;UACpE,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAMhE,MAJE,sGAAsG,KACpG,QACD,EAEa;GACd,MAAM,aAAa,kBAAkB;GAErC,MAAM,UADiB,WAAW,SAAS,gBAAgB,GAEvD,gJAEA,iBAAiB,WAAW;AAEhC,WAAQ,KACN,0CAA0C,WAAW,4HAGnD,UACA,mIAEH;QAED,SAAQ,KAAK,yCAAyC,UAAU;AAElE,SAAO,EAAE;;CAGX,MAAM,aAAa,IAAI;AACvB,KAAI,CAAC,YAAY;AACf,MAAI,gBAAgB,SAAS,iBAAiB,CAC5C,SAAQ,KACN,oHAED;AAEH,SAAO,EAAE;;AAGX,KAAI,CAAC,MAAM,QAAQ,WAAW,EAAE;AAC9B,UAAQ,KACN,qDAAqD,OAAO,WAAW,+BACxE;AACD,SAAO,EAAE;;CAGX,MAAM,YAAY;AAGlB,KAAI,OACF,MAAK,MAAM,YAAY,WAAW;EAChC,MAAM,SAAS,iBAAiB,SAAS;AACzC,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,OAAQ,SAA+B,QAAQ;AACrD,UAAO,KACL,iCAAiC,KAAK,QACpC,OAAO,OAAO,KAAK,MAAM,OAAO,EAAE,KAAK,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK,CACrE;;;AAKP,QAAO,UAAU,KACd,EAAE,WAAW,YAAY,GAAG,WAAoC,KAClE;;;;ACnEH,MAAM,0BAA0B;CAC9B;CACA;CACA;CACA;CACD;;;;;AAMD,SAAgB,gBAAgB,QAAyB;AACvD,QAAO,wBAAwB,MAAM,YAAY,QAAQ,KAAK,OAAO,CAAC;;;;;;;;;;;;;ACrFxE,SAAgB,qBAA6B;AAC3C,QAAO;EACL,MAAM;EAEN,OAAO,SAAqB,EAAE,WAAW;AACvC,OAAI,YAAY,QAAS;GAIzB,MAAM,cAAc,QAAQ,KAAK;GACjC,MAAM,eAAA,GAAA,UAAA,SAAsB,aAAa,eAAe;AACxD,OAAI,EAAA,GAAA,QAAA,YAAY,YAAY,CAAE;AAG9B,UAAO,EACL,OAAO,EACL,eAAe,EACb,OAAO;IACL,OAAA,GAAA,UAAA,SAAc,aAAa,aAAa;IACxC,SAAS;IACV,EACF,EACF,EACF;;EAMH,uBAAuB,QAAQ;AAC7B,UAAO,YAAY,IAAI,gBAAgB,OAAO,KAAK,QAAQ;AACzD,QAAI;KACF,MAAM,UAAU,OAAO,OAAO,MAAM;KACpC,MAAM,OAAO,OAAA,GAAA,iBAAA,WAAA,GAAA,UAAA,SACH,SAAS,eAAe,EAChC,QACD;AACD,SAAI,UAAU,gBAAgB,YAAY;KAC1C,MAAM,SAAS,IAAI,QAAQ;AAC3B,SAAI,UAAU,gBAAgB,OAAO,EAAE;AACrC,UAAI,UAAU,+BAA+B,OAAO;AACpD,UAAI,UAAU,QAAQ,SAAS;;AAEjC,SAAI,aAAa;AACjB,SAAI,IAAI,KAAK;YACP;AACN,SAAI,aAAa;AACjB,SAAI,IAAI,yCAAyC;;KAEnD;AAEF,UAAO,YAAY,IAAI,kBAAkB,OAAO,MAAM,QAAQ;AAC5D,QAAI;KACF,MAAM,UAAU,OAAO,OAAO,MAAM;KACpC,MAAM,OAAO,OAAA,GAAA,iBAAA,WAAA,GAAA,UAAA,SACH,SAAS,qBAAqB,EACtC,QACD;AACD,SAAI,UAAU,gBAAgB,mBAAmB;AACjD,SAAI,UAAU,+BAA+B,IAAI;AACjD,SAAI,aAAa;AACjB,SAAI,IAAI,KAAK;YACP;AACN,SAAI,aAAa;AACjB,SAAI,IAAI,+CAA+C;;KAEzD;;EAIJ,gBAAgB,QAAQ;AAEtB,UAAO,YAAY,IAAI,gBAAgB,OAAO,KAAK,QAAQ;AACzD,QAAI;KAEF,MAAM,YAAA,GAAA,UAAA,SAAmB,OAAO,OAAO,MAAM,eAAe;KAC5D,IAAI;AACJ,SAAI;AACF,aAAO,OAAA,GAAA,iBAAA,UAAe,UAAU,QAAQ;aAClC;AAEN,aAAO,uBAAuB;;AAIhC,YAAO,MAAM,OAAO,mBAAmB,gBAAgB,KAAK;AAE5D,SAAI,UAAU,gBAAgB,YAAY;KAC1C,MAAM,SAAS,IAAI,QAAQ;AAC3B,SAAI,UAAU,gBAAgB,OAAO,EAAE;AACrC,UAAI,UAAU,+BAA+B,OAAO;AACpD,UAAI,UAAU,QAAQ,SAAS;;AAEjC,SAAI,aAAa;AACjB,SAAI,IAAI,KAAK;aACN,KAAK;AACZ,YAAO,OAAO,OAAO,MAAM,oCAAoC,MAAM;AACrE,SAAI,aAAa;AACjB,SAAI,IAAI,yBAAyB;;KAEnC;;EAEL;;AAGH,SAAS,wBAAgC;AACvC,QAAO"}

package/dist/vite/index.d.cts

@@ -28,8 +28,8 @@ declare function fluidBuilderPreviewPlugin(): Plugin;
 * Dev mode: serves `/__preview__` by transforming preview.html through
 * Vite's HTML pipeline (so import resolution and HMR work).
 *
-* Build mode: no-op — the production preview.html is handled by adding
-* it as a second Rollup input in vite.config.ts.
+* Build mode: adds preview.html as a second Rollup input so `vite build`
+* produces it alongside index.html for production deployment.
 */
 declare function fluidPreviewPlugin(): Plugin;
 //#endregion

package/dist/vite/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/vite/manifest-plugin.ts","../../src/vite/builder-preview-plugin.ts","../../src/vite/preview-plugin.ts"],"mappings":";;;;;AAeA;;;;;;;iBAAgB,mBAAA,CAAA,GAAuB,MAAA;;;;;AAAvC;;;;iBCcgB,yBAAA,CAAA,GAA6B,MAAA;;;;;ADd7C;;;;;;;iBEDgB,kBAAA,CAAA,GAAsB,MAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/vite/manifest-plugin.ts","../../src/vite/builder-preview-plugin.ts","../../src/vite/preview-plugin.ts"],"mappings":";;;;;AAeA;;;;;;;iBAAgB,mBAAA,CAAA,GAAuB,MAAA;;;;;AAAvC;;;;iBCcgB,yBAAA,CAAA,GAA6B,MAAA;;;;;ADd7C;;;;;;;iBEAgB,kBAAA,CAAA,GAAsB,MAAA"}

package/dist/vite/index.d.mts

@@ -28,8 +28,8 @@ declare function fluidBuilderPreviewPlugin(): Plugin;
 * Dev mode: serves `/__preview__` by transforming preview.html through
 * Vite's HTML pipeline (so import resolution and HMR work).
 *
-* Build mode: no-op — the production preview.html is handled by adding
-* it as a second Rollup input in vite.config.ts.
+* Build mode: adds preview.html as a second Rollup input so `vite build`
+* produces it alongside index.html for production deployment.
 */
 declare function fluidPreviewPlugin(): Plugin;
 //#endregion

package/dist/vite/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/vite/manifest-plugin.ts","../../src/vite/builder-preview-plugin.ts","../../src/vite/preview-plugin.ts"],"mappings":";;;;;AAeA;;;;;;;iBAAgB,mBAAA,CAAA,GAAuB,MAAA;;;;;AAAvC;;;;iBCcgB,yBAAA,CAAA,GAA6B,MAAA;;;;;ADd7C;;;;;;;iBEDgB,kBAAA,CAAA,GAAsB,MAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/vite/manifest-plugin.ts","../../src/vite/builder-preview-plugin.ts","../../src/vite/preview-plugin.ts"],"mappings":";;;;;AAeA;;;;;;;iBAAgB,mBAAA,CAAA,GAAuB,MAAA;;;;;AAAvC;;;;iBCcgB,yBAAA,CAAA,GAA6B,MAAA;;;;;ADd7C;;;;;;;iBEAgB,kBAAA,CAAA,GAAsB,MAAA"}

package/dist/vite/index.mjs

@@ -277,12 +277,54 @@ function isAllowedOrigin(origin) {
 * Dev mode: serves `/__preview__` by transforming preview.html through
 * Vite's HTML pipeline (so import resolution and HMR work).
 *
-* Build mode: no-op — the production preview.html is handled by adding
-* it as a second Rollup input in vite.config.ts.
+* Build mode: adds preview.html as a second Rollup input so `vite build`
+* produces it alongside index.html for production deployment.
 */
 function fluidPreviewPlugin() {
 	return {
 		name: "fluid-preview-plugin",
+		config(_config, { command }) {
+			if (command !== "build") return;
+			const projectRoot = process.cwd();
+			const previewHtml = resolve(projectRoot, "preview.html");
+			if (!existsSync(previewHtml)) return;
+			return { build: { rollupOptions: { input: {
+				main: resolve(projectRoot, "index.html"),
+				preview: previewHtml
+			} } } };
+		},
+		configurePreviewServer(server) {
+			server.middlewares.use("/__preview__", async (req, res) => {
+				try {
+					const distDir = server.config.build.outDir;
+					const html = await readFile(resolve(distDir, "preview.html"), "utf-8");
+					res.setHeader("Content-Type", "text/html");
+					const origin = req.headers.origin;
+					if (origin && isAllowedOrigin(origin)) {
+						res.setHeader("Access-Control-Allow-Origin", origin);
+						res.setHeader("Vary", "Origin");
+					}
+					res.statusCode = 200;
+					res.end(html);
+				} catch {
+					res.statusCode = 404;
+					res.end("preview.html not found in build output");
+				}
+			});
+			server.middlewares.use("/__manifests__", async (_req, res) => {
+				try {
+					const distDir = server.config.build.outDir;
+					const json = await readFile(resolve(distDir, "__manifests__.json"), "utf-8");
+					res.setHeader("Content-Type", "application/json");
+					res.setHeader("Access-Control-Allow-Origin", "*");
+					res.statusCode = 200;
+					res.end(json);
+				} catch {
+					res.statusCode = 404;
+					res.end("__manifests__.json not found in build output");
+				}
+			});
+		},
 		configureServer(server) {
 			server.middlewares.use("/__preview__", async (req, res) => {
 				try {