@lightdash/cli 1.89.1 → 1.91.0

package/dist/handlers/apps/scaffolding.d.ts

@@ -14,6 +14,7 @@ export declare const rewriteWorkspaceDeps: (packageJson: string, version: string
  * Returns {} on any read/parse error so callers degrade gracefully.
  */
 export declare const loadTemplateDependencies: (sdkVersion: string) => Record<string, string>;
+export declare const loadVendoredBuildScaffold: (sdkVersion: string) => DataAppCodeFile[];
 export declare const loadVendoredStarterSource: () => DataAppCodeFile[];
 /**
  * Assembles static authoring files (configs, skills, templates) to deploy alongside a data app.

package/dist/handlers/apps/scaffolding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/scaffolding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAKpE;AA6DD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,gBAChB,MAAM,WACV,MAAM,KAChB,MAAmE,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,eACrB,MAAM,KACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAevB,CAAC;AAWF,eAAO,MAAM,yBAAyB,QAAO,eAAe,EAG3D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,SAAU;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB,KAAG,eAAe,EAkElB,CAAC"}
+{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/scaffolding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAMzD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAKpE;AA6DD;;;GAGG;AACH,eAAO,MAAM,oBAAoB,gBAChB,MAAM,WACV,MAAM,KAChB,MAAmE,CAAC;AAEvE;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,eACrB,MAAM,KACnB,MAAM,CAAC,MAAM,EAAE,MAAM,CAevB,CAAC;AAWF,eAAO,MAAM,yBAAyB,eACtB,MAAM,KACnB,eAAe,EAeb,CAAC;AAEN,eAAO,MAAM,yBAAyB,QAAO,eAAe,EAG3D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,SAAU;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACtB,KAAG,eAAe,EAuDlB,CAAC"}

package/dist/handlers/apps/scaffolding.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildStaticAuthoringFiles = exports.loadVendoredStarterSource = exports.loadTemplateDependencies = exports.rewriteWorkspaceDeps = void 0;
+exports.buildStaticAuthoringFiles = exports.loadVendoredStarterSource = exports.loadVendoredBuildScaffold = exports.loadTemplateDependencies = exports.rewriteWorkspaceDeps = void 0;
 exports.firstExistingDir = firstExistingDir;
 const tslib_1 = require("tslib");
 const fs_1 = require("fs");
@@ -88,6 +88,13 @@ const loadVendoredTemplate = () => {
     const SKIP = new Set(['skill.md', 'scripts', 'src']);
     return walkDir(templateDir, templateDir, SKIP);
 };
+const loadVendoredBuildScaffold = (sdkVersion) => loadVendoredTemplate().map((file) => file.path === 'package.json'
+    ? {
+        ...file,
+        contentBase64: Buffer.from((0, exports.rewriteWorkspaceDeps)(Buffer.from(file.contentBase64, 'base64').toString('utf-8'), sdkVersion)).toString('base64'),
+    }
+    : file);
+exports.loadVendoredBuildScaffold = loadVendoredBuildScaffold;
 const loadVendoredStarterSource = () => {
     const { templateDir } = resolveVendorDirs();
     return walkDir(path.join(templateDir, 'src'), templateDir, new Set());
@@ -101,17 +108,8 @@ const buildStaticAuthoringFiles = (args) => {
     const { templateDir, authoringDir } = resolveVendorDirs();
     const files = [];
     // 1. Template scaffold files (src/, scripts/, skill.md excluded)
-    for (const file of loadVendoredTemplate()) {
-        if (file.path === 'package.json') {
-            const rewritten = (0, exports.rewriteWorkspaceDeps)(Buffer.from(file.contentBase64, 'base64').toString('utf-8'), sdkVersion);
-            files.push({
-                path: 'package.json',
-                contentBase64: Buffer.from(rewritten).toString('base64'),
-            });
-        }
-        else {
-            files.push(file);
-        }
+    for (const file of (0, exports.loadVendoredBuildScaffold)(sdkVersion)) {
+        files.push(file);
     }
     // 2. skill.md → .claude/skills/lightdash-data-app/SKILL.md
     files.push({

package/dist/handlers/apps/scaffolding.test.js

@@ -74,26 +74,39 @@ describe('buildStaticAuthoringFiles', () => {
     });
     it('uses npm for the standard local workflow', () => {
         expect(text('README.md')).toContain('run `npm install` first');
-        expect(text('AGENTS.md')).toContain('npm install && npm run build');
-        expect(text('.claude/skills/developing-data-apps-locally/SKILL.md')).toContain('run `npm install` first');
+        expect(text('AGENTS.md')).toContain('run `npm install` first');
+        expect(text('.claude/skills/developing-data-apps-locally/SKILL.md')).toContain('run `npm install` before');
         expect(text('.npmrc')).toContain('ignore-scripts=true');
         expect(text('.npmrc')).not.toContain('shamefully-hoist');
     });
-    it('classifies local build failures as non-blocking warnings', () => {
+    it('documents Cloud-parity validation builds', () => {
         for (const path of [
             'README.md',
             'AGENTS.md',
             '.claude/skills/developing-data-apps-locally/SKILL.md',
         ]) {
-            expect(text(path)).toContain('non-blocking warning');
-            expect(text(path)).toContain('continue to upload');
-            expect(text(path)).toContain('server build');
+            expect(text(path)).toContain('validate --build');
+            expect(text(path)).toContain('Cloud-parity');
         }
     });
     it('never writes app source (no src/ files)', () => {
         expect(files.every((f) => !f.path.startsWith('src/'))).toBe(true);
     });
 });
+describe('loadVendoredBuildScaffold', () => {
+    const files = (0, scaffolding_1.loadVendoredBuildScaffold)('0.3275.0');
+    const byPath = (p) => files.find((file) => file.path === p);
+    it('loads the trusted build files without app source', () => {
+        expect(byPath('vite.config.js')).toBeDefined();
+        expect(byPath('index.html')).toBeDefined();
+        expect(files.every((file) => !file.path.startsWith('src/'))).toBe(true);
+    });
+    it('pins the SDK used by the local build', () => {
+        const packageJson = Buffer.from(byPath('package.json').contentBase64, 'base64').toString('utf-8');
+        expect(packageJson).toContain('"@lightdash/query-sdk": "0.3275.0"');
+        expect(packageJson).not.toContain('workspace:');
+    });
+});
 describe('loadVendoredStarterSource', () => {
     const files = (0, scaffolding_1.loadVendoredStarterSource)();
     it('loads the starter app source with bundle-relative paths', () => {

package/dist/handlers/apps/validate.d.ts

@@ -1,11 +1,12 @@
-import { type DataAppDataReferences, type DataAppExploreIndex, type DataReferenceLocation } from '@lightdash/common';
+import { type DataAppCode, type DataAppDataReferences, type DataAppExploreIndex, type DataReferenceLocation } from '@lightdash/common';
 export type AppsValidateFormat = 'human' | 'json';
 export type AppsValidateOptions = {
+    build: boolean;
     format: AppsValidateFormat;
     live: boolean;
     verbose: boolean;
 };
-export type AppsValidationIssueCode = 'bundle' | 'dependencies' | 'external_connection' | 'manifest' | 'semantic_layer' | 'semantic_reference' | 'source_parse';
+export type AppsValidationIssueCode = 'build' | 'bundle' | 'dependencies' | 'external_connection' | 'manifest' | 'semantic_layer' | 'semantic_reference' | 'source_parse';
 export type AppsValidationIssue = {
     code: AppsValidationIssueCode;
     message: string;
@@ -24,6 +25,7 @@ export type AppValidationResult = {
     coverage: AppsValidationCoverage;
 };
 export type AppsValidationReport = {
+    build: boolean;
     valid: boolean;
     mode: 'live' | 'offline';
     summary: {
@@ -36,13 +38,32 @@ export type AppsValidationReport = {
     apps: AppValidationResult[];
 };
 type ValidateAppOptions = {
+    build?: boolean;
     live: boolean;
     liveProjectUuid?: string;
     loadLiveIndex: (projectUuid: string) => Promise<DataAppExploreIndex>;
+    runBuild?: (args: {
+        appDir: string;
+        bundle: DataAppCode;
+    }) => Promise<AppsValidationIssue[]>;
 };
+type DataAppBuildCommand = {
+    command: string;
+    args: string[];
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    preferLocal?: boolean;
+    timeoutMs: number;
+};
+export type RunDataAppBuildCommand = (command: DataAppBuildCommand) => Promise<void>;
+export declare const validateDataAppBuild: (args: {
+    appDir: string;
+    bundle: DataAppCode;
+    runCommand?: RunDataAppBuildCommand;
+}) => Promise<AppsValidationIssue[]>;
 export declare const fetchLiveDataAppExploreIndex: (projectUuid: string) => Promise<DataAppExploreIndex>;
 export declare const validateLocalDataApp: (appPath: string, options: ValidateAppOptions) => Promise<AppValidationResult>;
-export declare const buildAppsValidationReport: (apps: AppValidationResult[], live: boolean) => AppsValidationReport;
+export declare const buildAppsValidationReport: (apps: AppValidationResult[], live: boolean, build?: boolean) => AppsValidationReport;
 export declare const renderAppsValidationHuman: (report: AppsValidationReport) => string;
 export declare const appsValidateHandler: (pathArgs: string[] | undefined, options: AppsValidateOptions) => Promise<void>;
 export {};

package/dist/handlers/apps/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAcH,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EAGxB,KAAK,qBAAqB,EAC7B,MAAM,mBAAmB,CAAC;AAgB3B,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;AAElD,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC7B,QAAQ,GACR,cAAc,GACd,qBAAqB,GACrB,UAAU,GACV,gBAAgB,GAChB,oBAAoB,GACpB,cAAc,CAAC;AAErB,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,uBAAuB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG;IAClE,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,QAAQ,EAAE,sBAAsB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,mBAAmB,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC/B,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxE,CAAC;AA2LF,eAAO,MAAM,4BAA4B,gBACxB,MAAM,KACpB,OAAO,CAAC,mBAAmB,CAqB7B,CAAC;AAEF,eAAO,MAAM,oBAAoB,YACpB,MAAM,WACN,kBAAkB,KAC5B,OAAO,CAAC,mBAAmB,CA4H7B,CAAC;AAEF,eAAO,MAAM,yBAAyB,SAC5B,mBAAmB,EAAE,QACrB,OAAO,KACd,oBAwBF,CAAC;AAmBF,eAAO,MAAM,yBAAyB,WAC1B,oBAAoB,KAC7B,MA4CF,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAClB,MAAM,EAAE,GAAG,SAAS,WACrB,mBAAmB,KAC7B,OAAO,CAAC,IAAI,CA2Cd,CAAC"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../../src/handlers/apps/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAeH,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EAGxB,KAAK,qBAAqB,EAC7B,MAAM,mBAAmB,CAAC;AAsB3B,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,CAAC;AAElD,MAAM,MAAM,mBAAmB,GAAG;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,kBAAkB,CAAC;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC7B,OAAO,GACP,QAAQ,GACR,cAAc,GACd,qBAAqB,GACrB,UAAU,GACV,gBAAgB,GAChB,oBAAoB,GACpB,cAAc,CAAC;AAErB,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,uBAAuB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG;IAClE,UAAU,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,QAAQ,EAAE,sBAAsB,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,mBAAmB,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC/B,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QACd,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,WAAW,CAAC;KACvB,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;CACxC,CAAC;AAmLF,KAAK,mBAAmB,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,CACjC,OAAO,EAAE,mBAAmB,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;AAmEnB,eAAO,MAAM,oBAAoB,SAAgB;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACvC,KAAG,OAAO,CAAC,mBAAmB,EAAE,CA+HhC,CAAC;AAUF,eAAO,MAAM,4BAA4B,gBACxB,MAAM,KACpB,OAAO,CAAC,mBAAmB,CAqB7B,CAAC;AAEF,eAAO,MAAM,oBAAoB,YACpB,MAAM,WACN,kBAAkB,KAC5B,OAAO,CAAC,mBAAmB,CAsI7B,CAAC;AAEF,eAAO,MAAM,yBAAyB,SAC5B,mBAAmB,EAAE,QACrB,OAAO,sBAEd,oBAyBF,CAAC;AAmBF,eAAO,MAAM,yBAAyB,WAC1B,oBAAoB,KAC7B,MA4CF,CAAC;AAEF,eAAO,MAAM,mBAAmB,aAClB,MAAM,EAAE,GAAG,SAAS,WACrB,mBAAmB,KAC7B,OAAO,CAAC,IAAI,CA4Cd,CAAC"}

package/dist/handlers/apps/validate.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.appsValidateHandler = exports.renderAppsValidationHuman = exports.buildAppsValidationReport = exports.validateLocalDataApp = exports.fetchLiveDataAppExploreIndex = void 0;
+exports.appsValidateHandler = exports.renderAppsValidationHuman = exports.buildAppsValidationReport = exports.validateLocalDataApp = exports.fetchLiveDataAppExploreIndex = exports.validateDataAppBuild = void 0;
 const tslib_1 = require("tslib");
 const common_1 = require("@lightdash/common");
+const execa_1 = tslib_1.__importDefault(require("execa"));
 const fs_1 = require("fs");
+const os = tslib_1.__importStar(require("os"));
 const p_limit_1 = tslib_1.__importDefault(require("p-limit"));
 const path = tslib_1.__importStar(require("path"));
 const config_1 = require("../../config");
@@ -127,6 +129,132 @@ const validateDependencies = async (appDir) => {
         return [issue('dependencies', (0, common_1.getErrorMessage)(error))];
     }
 };
+const runDataAppBuildCommand = async (command) => {
+    await (0, execa_1.default)(command.command, command.args, {
+        cwd: command.cwd,
+        env: command.env,
+        localDir: command.preferLocal ? command.cwd : undefined,
+        preferLocal: command.preferLocal,
+        timeout: command.timeoutMs,
+    });
+};
+const commandFailureOutput = (error) => {
+    const commandError = typeof error === 'object' && error !== null
+        ? error
+        : {};
+    const output = [commandError.stderr, commandError.stdout]
+        .filter((value) => typeof value === 'string' || Buffer.isBuffer(value))
+        .map(String)
+        .filter(Boolean)
+        .join('\n')
+        .trim();
+    return (output || (0, common_1.getErrorMessage)(error)).slice(-2000);
+};
+const hasNodeModules = async (appDir) => fs_1.promises
+    .stat(path.join(appDir, 'node_modules'))
+    .then((entry) => entry.isDirectory())
+    .catch(() => false);
+const buildPackageJsonForCustomDependencies = (scaffold, packageJson) => {
+    const packageFile = scaffold.find((file) => file.path === 'package.json');
+    if (packageFile === undefined) {
+        throw new Error('Vendored data app template is missing package.json.');
+    }
+    const templatePackage = JSON.parse(Buffer.from(packageFile.contentBase64, 'base64').toString('utf-8'));
+    if (templatePackage.scripts === undefined ||
+        templatePackage.devDependencies === undefined) {
+        throw new Error('Vendored data app template package.json is missing scripts or devDependencies.');
+    }
+    return (0, common_1.sanitizeAppPackageJsonScripts)(packageJson, templatePackage.scripts, templatePackage.devDependencies);
+};
+const validateDataAppBuild = async (args) => {
+    const runCommand = args.runCommand ?? runDataAppBuildCommand;
+    let dependencies;
+    let hasCustomDependencies;
+    try {
+        dependencies = await (0, appCodeFiles_1.readDependenciesFromDir)(args.appDir);
+        const templateDependencies = dependencies === null
+            ? (0, scaffolding_1.loadTemplateDependencies)(env_1.CLI_VERSION)
+            : (0, appCodeFiles_1.applySdkMirrorToTemplateDeps)((0, scaffolding_1.loadTemplateDependencies)(env_1.CLI_VERSION), dependencies.packageJson);
+        const customDependencies = dependencies === null
+            ? {}
+            : (0, common_1.computeCustomDependencies)(dependencies.packageJson, templateDependencies);
+        hasCustomDependencies = Object.keys(customDependencies).length > 0;
+    }
+    catch (error) {
+        return [issue('dependencies', (0, common_1.getErrorMessage)(error))];
+    }
+    if (!hasCustomDependencies && !(await hasNodeModules(args.appDir))) {
+        return [
+            issue('dependencies', `Dependencies are not installed. Run 'npm install' in ${args.appDir} before using lightdash apps validate --build.`),
+        ];
+    }
+    if (hasCustomDependencies &&
+        dependencies !== null &&
+        dependencies.lockfile === null) {
+        return [
+            issue('dependencies', 'Custom dependencies require pnpm-lock.yaml before the Cloud-parity build can run.'),
+        ];
+    }
+    let buildDir;
+    try {
+        buildDir = await fs_1.promises.mkdtemp(path.join(os.tmpdir(), 'lightdash-app-build-'));
+        const scaffold = (0, scaffolding_1.loadVendoredBuildScaffold)(env_1.CLI_VERSION);
+        await (0, appCodeFiles_1.writeFilesToDir)(buildDir, [...scaffold, ...args.bundle.files]);
+        if (hasCustomDependencies &&
+            dependencies !== null &&
+            dependencies.lockfile !== null) {
+            await Promise.all([
+                fs_1.promises.writeFile(path.join(buildDir, 'package.json'), buildPackageJsonForCustomDependencies(scaffold, dependencies.packageJson)),
+                fs_1.promises.writeFile(path.join(buildDir, 'pnpm-lock.yaml'), dependencies.lockfile),
+            ]);
+            try {
+                await runCommand({
+                    command: 'pnpm',
+                    args: ['install', '--frozen-lockfile', '--ignore-scripts'],
+                    cwd: buildDir,
+                    env: { CI: 'true' },
+                    timeoutMs: 120_000,
+                });
+            }
+            catch (error) {
+                return [
+                    issue('dependencies', `Dependency install failed: ${commandFailureOutput(error)}`),
+                ];
+            }
+        }
+        else {
+            await fs_1.promises.symlink(path.resolve(args.appDir, 'node_modules'), path.join(buildDir, 'node_modules'), process.platform === 'win32' ? 'junction' : 'dir');
+        }
+        try {
+            await runCommand({
+                command: 'vite',
+                args: ['build'],
+                cwd: buildDir,
+                preferLocal: true,
+                timeoutMs: 60_000,
+            });
+        }
+        catch (error) {
+            return [
+                issue('build', `Vite build failed:\n${commandFailureOutput(error)}`),
+            ];
+        }
+        return [];
+    }
+    catch (error) {
+        return [
+            issue('build', `Could not prepare the Vite build: ${(0, common_1.getErrorMessage)(error)}`),
+        ];
+    }
+    finally {
+        if (buildDir !== undefined) {
+            await fs_1.promises
+                .rm(buildDir, { recursive: true, force: true })
+                .catch(() => undefined);
+        }
+    }
+};
+exports.validateDataAppBuild = validateDataAppBuild;
 const sourceFilesFromBundle = (files) => files.map((file) => ({
     path: file.path,
     content: Buffer.from(file.contentBase64, 'base64').toString('utf-8'),
@@ -170,7 +298,8 @@ const validateLocalDataApp = async (appPath, options) => {
     const { manifest } = bundle;
     const manifestResult = validateManifest(manifest);
     errors.push(...manifestResult.errors);
-    errors.push(...(await validateDependencies(appDir)));
+    const dependencyErrors = await validateDependencies(appDir);
+    errors.push(...dependencyErrors);
     const sourceFiles = sourceFilesFromBundle(bundle.files);
     if (sourceFiles.length === 0) {
         errors.push(issue('bundle', 'App bundle has no files under src/ to validate.'));
@@ -227,6 +356,12 @@ const validateLocalDataApp = async (appPath, options) => {
     else if (typeof manifest.projectUuid === 'string') {
         projectUuid = manifest.projectUuid;
     }
+    if (options.build && dependencyErrors.length === 0) {
+        errors.push(...(await (options.runBuild ?? exports.validateDataAppBuild)({
+            appDir,
+            bundle,
+        })));
+    }
     return {
         path: appDir,
         name: typeof manifest.name === 'string' ? manifest.name : null,
@@ -238,10 +373,11 @@ const validateLocalDataApp = async (appPath, options) => {
     };
 };
 exports.validateLocalDataApp = validateLocalDataApp;
-const buildAppsValidationReport = (apps, live) => {
+const buildAppsValidationReport = (apps, live, build = false) => {
     const errors = apps.reduce((count, app) => count + app.errors.length, 0);
     const warnings = apps.reduce((count, app) => count + app.warnings.length, 0);
     return {
+        build,
         valid: errors === 0,
         mode: live ? 'live' : 'offline',
         summary: {
@@ -274,7 +410,7 @@ const renderAppsValidationHuman = (report) => {
     const lines = [
         `Validating ${report.summary.apps} data app(s) using ${report.mode === 'live'
             ? 'the live project semantic layer'
-            : 'local semantic layer snapshots'}.`,
+            : 'local semantic layer snapshots'}${report.build ? ' and running Vite production builds' : ''}.`,
     ];
     if (report.mode === 'offline') {
         lines.push(styles.secondary('Offline snapshots may be stale. Use --live for upload-time semantic validation parity.'));
@@ -320,8 +456,9 @@ const appsValidateHandler = async (pathArgs, options) => {
         live: options.live,
         liveProjectUuid,
         loadLiveIndex,
+        build: options.build,
     })));
-    const report = (0, exports.buildAppsValidationReport)(apps, options.live);
+    const report = (0, exports.buildAppsValidationReport)(apps, options.live, options.build);
     process.stdout.write(options.format === 'json'
         ? `${JSON.stringify(report, null, 2)}\n`
         : (0, exports.renderAppsValidationHuman)(report));

package/dist/handlers/apps/validate.test.js

@@ -241,6 +241,155 @@ describe('validateLocalDataApp', () => {
         expect(result.valid).toBe(true);
         expect(result.warnings).toContainEqual(expect.objectContaining({ code: 'source_parse' }));
     });
+    it('includes Cloud-parity build failures when --build is enabled', async () => {
+        const dir = await makeApp();
+        const runBuild = vi.fn().mockResolvedValue([
+            {
+                code: 'build',
+                message: 'Vite build failed: broken import',
+                location: null,
+            },
+        ]);
+        const result = await (0, validate_1.validateLocalDataApp)(dir, {
+            build: true,
+            live: false,
+            loadLiveIndex: unusedLiveLoader,
+            runBuild,
+        });
+        expect(runBuild).toHaveBeenCalledOnce();
+        expect(result.valid).toBe(false);
+        expect(result.errors).toContainEqual(expect.objectContaining({
+            code: 'build',
+            message: expect.stringContaining('broken import'),
+        }));
+    });
+});
+describe('validateDataAppBuild', () => {
+    it('builds source in an isolated vendored scaffold with bare Vite', async () => {
+        const dir = await makeApp();
+        await fs_1.promises.mkdir(path.join(dir, 'node_modules'));
+        const bundle = await (0, appCodeFiles_1.readBundleFromDir)(dir);
+        const runCommand = vi.fn(async (command) => {
+            expect(command).toMatchObject({
+                command: 'vite',
+                args: ['build'],
+                preferLocal: true,
+                timeoutMs: 60_000,
+            });
+            expect(command.args).not.toContain('tsc');
+            await expect(fs_1.promises.readFile(path.join(command.cwd, 'vite.config.js'), 'utf-8')).resolves.toContain('defineConfig');
+            await expect(fs_1.promises.readFile(path.join(command.cwd, 'src', 'App.tsx'), 'utf-8')).resolves.toContain("query('orders')");
+            expect((await fs_1.promises.lstat(path.join(command.cwd, 'node_modules'))).isSymbolicLink()).toBe(true);
+        });
+        const issues = await (0, validate_1.validateDataAppBuild)({
+            appDir: dir,
+            bundle,
+            runCommand,
+        });
+        expect(issues).toEqual([]);
+        expect(runCommand).toHaveBeenCalledOnce();
+    });
+    it('restores custom dependencies with a frozen lockfile before Vite', async () => {
+        const dir = await makeApp({
+            packageJson: JSON.stringify({
+                name: 'custom-app',
+                version: '1.0.0',
+                dependencies: { 'left-pad': '1.3.0' },
+                devDependencies: { malicious: '1.0.0' },
+                scripts: { build: 'tsc --noEmit' },
+            }),
+            lockfile: [
+                "lockfileVersion: '9.0'",
+                'packages:',
+                '  left-pad@1.3.0: {}',
+            ].join('\n'),
+        });
+        const bundle = await (0, appCodeFiles_1.readBundleFromDir)(dir);
+        const commands = [];
+        const runCommand = vi.fn(async (command) => {
+            commands.push(command);
+            if (command.command === 'pnpm') {
+                const packageJson = JSON.parse(await fs_1.promises.readFile(path.join(command.cwd, 'package.json'), 'utf-8'));
+                expect(packageJson.dependencies).toEqual({
+                    'left-pad': '1.3.0',
+                });
+                expect(packageJson.scripts).toEqual(expect.objectContaining({ build: 'vite build' }));
+                expect(packageJson.devDependencies).not.toHaveProperty('malicious');
+            }
+        });
+        const issues = await (0, validate_1.validateDataAppBuild)({
+            appDir: dir,
+            bundle,
+            runCommand,
+        });
+        expect(issues).toEqual([]);
+        expect(commands).toEqual([
+            expect.objectContaining({
+                command: 'pnpm',
+                args: ['install', '--frozen-lockfile', '--ignore-scripts'],
+                env: { CI: 'true' },
+                timeoutMs: 120_000,
+            }),
+            expect.objectContaining({
+                command: 'vite',
+                args: ['build'],
+                preferLocal: true,
+            }),
+        ]);
+    });
+    it('reports Vite output as a build validation error', async () => {
+        const dir = await makeApp();
+        await fs_1.promises.mkdir(path.join(dir, 'node_modules'));
+        const bundle = await (0, appCodeFiles_1.readBundleFromDir)(dir);
+        const viteError = Object.assign(new Error('Command failed'), {
+            stderr: 'src/App.tsx:7: Could not resolve "missing-package"',
+            stdout: 'vite v8 building for production',
+        });
+        const issues = await (0, validate_1.validateDataAppBuild)({
+            appDir: dir,
+            bundle,
+            runCommand: vi.fn().mockRejectedValue(viteError),
+        });
+        expect(issues).toEqual([
+            expect.objectContaining({
+                code: 'build',
+                message: expect.stringContaining('Could not resolve "missing-package"'),
+            }),
+        ]);
+    });
+    it('handles non-object command failures without masking them', async () => {
+        const dir = await makeApp();
+        await fs_1.promises.mkdir(path.join(dir, 'node_modules'));
+        const bundle = await (0, appCodeFiles_1.readBundleFromDir)(dir);
+        const issues = await (0, validate_1.validateDataAppBuild)({
+            appDir: dir,
+            bundle,
+            runCommand: vi.fn().mockRejectedValue(null),
+        });
+        expect(issues).toEqual([
+            expect.objectContaining({
+                code: 'build',
+                message: expect.stringContaining('Unknown object error'),
+            }),
+        ]);
+    });
+    it('requires local template dependencies without installing them', async () => {
+        const dir = await makeApp();
+        const bundle = await (0, appCodeFiles_1.readBundleFromDir)(dir);
+        const runCommand = vi.fn();
+        const issues = await (0, validate_1.validateDataAppBuild)({
+            appDir: dir,
+            bundle,
+            runCommand,
+        });
+        expect(issues).toEqual([
+            expect.objectContaining({
+                code: 'dependencies',
+                message: expect.stringContaining("Run 'npm install'"),
+            }),
+        ]);
+        expect(runCommand).not.toHaveBeenCalled();
+    });
 });
 describe('renderAppsValidationHuman', () => {
     it('makes partial green coverage explicit', () => {
@@ -260,11 +409,12 @@ describe('renderAppsValidationHuman', () => {
                     unanalyzed: 3,
                 },
             },
-        ], false);
+        ], false, true);
         const output = (0, validate_1.renderAppsValidationHuman)(report);
         expect(output).toContain("3 of 14 data-reference call site(s) couldn't be fully analyzed");
         expect(output).toContain('unresolved values were skipped');
         expect(output).toContain('Validation passed');
         expect(output).toContain('Offline snapshots may be stale');
+        expect(output).toContain('running Vite production builds');
     });
 });

package/dist/index.js

@@ -451,6 +451,7 @@ appsProgram
     .command('validate [paths...]')
     .description('Validate data app source, manifests, dependencies, and semantic-layer references locally.')
     .option('--live', 'Validate against fresh explores from each app project instead of its downloaded semantic-layer snapshot.', false)
+    .option('--build', 'Run the same Vite production build as Lightdash Cloud.', false)
     .addOption(new commander_1.Option('--format <format>', 'Output format: human or json')
     .choices(['human', 'json'])
     .default('human'))

package/dist/vendor/authoring/AGENTS.md.tmpl

@@ -2,11 +2,11 @@
 
 Two skills in `.claude/skills/` describe how to edit this app:
 - `lightdash-data-app` — the Lightdash SDK surface (querying data, filters, downloads).
-- `developing-data-apps-locally` — the local workflow: edit `src/`, `npm run build`, `lightdash apps preview`, `lightdash upload --apps <slug>`; the SDK is the only data access; `.lightdash/context/` holds the project's semantic layer and theme.
+- `developing-data-apps-locally` — the local workflow: edit `src/`, `lightdash apps validate --build`, `lightdash apps preview`, `lightdash upload --apps <slug>`; the SDK is the only data access; `.lightdash/context/` holds the project's semantic layer and theme.
 
 Edit only `src/`. Root config files are read-only reference — the server rebuilds against a trusted template.
 
-The local build is an optional pre-check. Apps made with `lightdash apps create` already have dependencies installed and can run `npm run build`; after `lightdash download`, use `npm install && npm run build` if you choose to build locally. If the local install or build fails, report it as a non-blocking warning with a short failure summary, then continue to upload — never modify machine config, npmrc, or dependency files to force it. The local pre-check does not decide whether the app ships; the server build is authoritative and surfaces its result on the app page.
+Use `lightdash apps validate --build` for the Cloud-parity local pre-check. It builds `src/` against the CLI's trusted template and reports Vite failures as validation errors. Apps made with `lightdash apps create` already have dependencies installed; after `lightdash download`, run `npm install` first if `node_modules` is absent. Never modify machine config, npmrc, or dependency files to force the check to pass. The server still rebuilds on upload and surfaces its final result on the app page.
 
 Build with the template's preinstalled dependency set (see `package.json`). Adding new npm packages only works when the Lightdash organization has custom dependencies enabled — assume it does not; ask the user before considering a new library, and never vendor library source into `src/` as a workaround. Where enabled, adding a dependency is the one workflow that still requires pnpm: upload requires a matching `pnpm-lock.yaml`, so `pnpm add <pkg>` (or `pnpm install --lockfile-only`) must succeed locally. If it fails, stop and report the error — hand-editing `package.json` without the lockfile makes the upload fail.
 

package/dist/vendor/authoring/README.md.tmpl

@@ -4,10 +4,9 @@ Created or downloaded with the Lightdash CLI.
 
 ## Edit → build → upload
 1. Edit files under `src/`.
-2. Run `lightdash apps validate` to check the source, manifest, dependencies, external-connection aliases, and semantic references against the downloaded context. Use `--live` for fresh project explores or `--format json` in CI.
-3. Optionally, run `npm run build` to check it compiles locally. `lightdash apps create` installs the initial dependencies after asking permission; after `lightdash download`, run `npm install` first if `node_modules` is absent. If the local install or build fails in your environment, treat it as a non-blocking warning and continue to upload. Keep the failure details because they may predict a server build problem, but don't change machine or registry config to force the pre-check to pass — the server build on upload is authoritative and surfaces its result on the app page.
-4. Optionally, preview against real data: `lightdash apps preview` (needs a successful `npm install`).
-5. `lightdash upload --apps <slug>` (the `slug` from `lightdash-app.yml`) — Lightdash rebuilds and serves the app.
+2. Run `lightdash apps validate` to check the source, manifest, dependencies, external-connection aliases, and semantic references against the downloaded context. Use `lightdash apps validate --build` to add the Cloud-parity Vite production build; use `--live` for fresh project explores or `--format json` in CI. `lightdash apps create` installs the initial dependencies after asking permission; after `lightdash download`, run `npm install` first if `node_modules` is absent. Custom dependencies are installed from `pnpm-lock.yaml` with a frozen lockfile and lifecycle scripts disabled. A build failure is a validation error with the Vite output and a non-zero exit.
+3. Optionally, preview against real data: `lightdash apps preview` (needs a successful `npm install`).
+4. `lightdash upload --apps <slug>` (the `slug` from `lightdash-app.yml`) — Lightdash rebuilds and serves the app.
 
 Local preview uses your existing CLI login through a project- and route-restricted loopback proxy; the credential is not written into this folder or exposed to browser code. It runs local tooling as your OS user (with access to that user's files, including the existing CLI config) and shows data under your own permissions, so preview only source/dependencies you trust. Host-mediated features such as external connections and data-app-viz context still need testing after upload.
 

package/dist/vendor/authoring/developing-data-apps-locally/SKILL.md

@@ -28,16 +28,15 @@ You are editing a Lightdash **data app** that was created or downloaded with the
 ## The edit → build → upload loop
 
 1. Edit files under `src/` only.
-2. Run `lightdash apps validate` to check the source, manifest, dependencies, external-connection aliases, and semantic references against the downloaded context. Use `--live` to check against fresh project explores; use `--format json` in CI. A green run reports any call sites it could not fully analyze instead of silently claiming complete coverage.
-3. Optionally, run `npm run build` to check it compiles. Apps made with `lightdash apps create` already have their initial dependencies installed. After `lightdash download`, if you choose to do the local pre-check and `node_modules` is absent, run `npm install` first. This is an **optional local pre-check** — see below.
-4. `lightdash upload --apps <slug>` (the `slug` from this folder's `lightdash-app.yml`) — the **server** rebuilds and serves the app. The server rebuild, not your local build, is what ships.
+2. Run `lightdash apps validate` to check the source, manifest, dependencies, external-connection aliases, and semantic references against the downloaded context. Use `lightdash apps validate --build` to add the Cloud-parity Vite production build; use `--live` to check against fresh project explores or `--format json` in CI. A green run reports any call sites it could not fully analyze instead of silently claiming complete coverage.
+3. `lightdash upload --apps <slug>` (the `slug` from this folder's `lightdash-app.yml`) — the **server** rebuilds and serves the app. The server rebuild remains the final result that ships.
 
-## The local build is optional — never fight a failing install
+## Cloud-parity local builds
 
-- If `npm install` fails (registry policy, an unavailable pinned SDK version, no network access), **skip the local build entirely and go straight to upload**. The server rebuild is authoritative and surfaces build errors on the app page.
-- Treat any standard local install or build failure as a **non-blocking warning**, not as an upload error or a failed task. Preserve a short summary of the local failure because it may predict a server build problem, then continue to upload. Make it explicit that the local pre-check did not complete, but that it does not decide whether the app ships; the server build does.
-- Do **not** modify machine configuration, `.npmrc` files, registry settings, or the project's dependency files to force an install to work.
-- A missing `node_modules` is a normal state, not a problem to fix. Never run installs just because it is absent.
+- `lightdash apps validate --build` assembles `src/` in an isolated copy of the CLI's trusted template and invokes bare `vite build` — it deliberately does not typecheck because the Cloud build does not typecheck.
+- Apps made with `lightdash apps create` already have the standard template dependencies installed. After `lightdash download`, run `npm install` before requesting `--build` if `node_modules` is absent. Validation does not install the standard dependency set implicitly.
+- Apps with custom dependencies are restored into the isolated build directory with `pnpm install --frozen-lockfile --ignore-scripts`, matching Cloud. An install or Vite failure is a validation error, includes the command output, and exits non-zero.
+- Do **not** modify machine configuration, `.npmrc` files, registry settings, or the project's dependency files to force the check to pass. The server rebuild on upload remains authoritative.
 - **Exception — adding a dependency** (only for organizations with custom dependencies enabled — see "Library boundaries" above). This is the one workflow that still requires pnpm: upload rejects new dependencies unless `pnpm-lock.yaml` was regenerated to match `package.json`, so dependency resolution MUST succeed locally. Use `pnpm add <pkg>` — prefixed with Socket Firewall when available (`sfw pnpm add <pkg>`; check with `command -v sfw`) to block known-malicious packages — or after editing `package.json` run `pnpm install --lockfile-only` (updates the lockfile without installing). If resolution fails, **stop and report the exact pnpm error to the user** — never hand-edit `package.json` and proceed without the lockfile; the upload will fail.
 - **Never run dependency lifecycle scripts.** The app's `.npmrc` sets `ignore-scripts=true` — leave it. A downloaded app can be authored by someone else, and their dependencies' install scripts must not execute on this machine. Explicit `npm run build`/`npm run dev` and `pnpm build`/`pnpm dev` commands still work.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightdash/cli",
-  "version": "1.89.1",
+  "version": "1.91.0",
   "description": "Lightdash CLI tool",
   "license": "MIT",
   "repository": {
@@ -41,8 +41,8 @@
     "unique-names-generator": "4.7.1",
     "uuid": "11.1.1",
     "yaml": "2.8.3",
-    "@lightdash/common": "1.89.1",
-    "@lightdash/warehouses": "1.89.1"
+    "@lightdash/common": "1.91.0",
+    "@lightdash/warehouses": "1.91.0"
   },
   "devDependencies": {
     "@types/inquirer": "8.2.4",