@lotics/cli 0.36.0 → 0.36.1

package/dist/dev/wrapper_page.js

@@ -145,6 +145,20 @@ export function buildWrapperPage(args) {
         return completed.file;
       }
 
+      // openExternal — the wrapper page is the top frame (un-sandboxed), so it
+      // opens the link directly; NOT forwarded to the RPC endpoint (no server
+      // op). Re-validate the scheme; never trust the iframe's payload.
+      function handleOpenExternal(payload) {
+        var url = payload && payload.url;
+        if (typeof url !== "string") throw new Error("openExternal requires a url string");
+        var parsed = new URL(url);
+        if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+          throw new Error('openExternal: unsupported URL scheme "' + parsed.protocol + '"');
+        }
+        window.open(parsed.href, "_blank", "noopener,noreferrer");
+        return undefined;
+      }
+
       window.addEventListener("message", async function (event) {
         if (event.source !== iframe.contentWindow || event.origin !== VITE_ORIGIN) return;
         const msg = event.data;
@@ -153,6 +167,8 @@ export function buildWrapperPage(args) {
         try {
           const data = msg.op === "upload"
             ? await handleUpload(msg.payload)
+            : msg.op === "openExternal"
+            ? handleOpenExternal(msg.payload)
             : await rpc(msg.op, msg.payload);
           const ms = Math.round(performance.now() - startedAt);
           console.debug("[lotics-dev] " + msg.op + " " + ms + "ms", data);

package/dist/src/cli.js

@@ -32257,6 +32257,7 @@ import { tmpdir } from "node:os";
 // src/starter_template.ts
 var STARTER_FALLBACK_UI_VERSION = "1.8.0";
 var STARTER_FALLBACK_SDK_VERSION = "0.11.0";
+var STARTER_REACT_NATIVE_VERSION = "0.85.3";
 function buildStarterTemplate(args) {
   const uiVersion = args.ui_version ?? `^${STARTER_FALLBACK_UI_VERSION}`;
   const sdkVersion = args.sdk_version ?? `^${STARTER_FALLBACK_SDK_VERSION}`;
@@ -32288,7 +32289,7 @@ function buildStarterTemplate(args) {
             "lucide-react-native": "^0.562.0",
             react: "^19.0.0",
             "react-dom": "^19.0.0",
-            "react-native": "0.81.0",
+            "react-native": STARTER_REACT_NATIVE_VERSION,
             "react-native-svg": "^15.0.0",
             "react-native-web": "^0.21.0"
           },
@@ -32366,6 +32367,11 @@ import react from "@vitejs/plugin-react";
 // is identical to RN-SVG when running under RN-Web.
 export default defineConfig({
   plugins: [react()],
+  // RN libraries (react-native-web, @react-native-picker's UnimplementedView)
+  // reference the \`__DEV__\` global that Metro injects but Vite does not \u2014
+  // undefined \u21D2 the bundle throws at load and the iframe renders blank. Define
+  // it (false = production RN behaviour) so dev and the deployed build both boot.
+  define: { __DEV__: "false" },
   resolve: {
     alias: [
       {
@@ -32390,6 +32396,11 @@ export default defineConfig({
     // Pre-bundling forces Vite to convert it to an ESM shim with a default
     // export. Production build (rollup) handles it correctly without this.
     include: ["recharts", "es-toolkit", "es-toolkit/compat"],
+    // The dep optimizer pre-bundles deps with a SEPARATE esbuild pass that
+    // top-level \`define\` doesn't always reach, so a pre-bundled RN dep can
+    // still hit \`__DEV__ is not defined\` under \`lotics app dev\`. Define it
+    // here too \u2014 belt-and-suspenders with the top-level \`define\` above.
+    esbuildOptions: { define: { __DEV__: "false" } },
   },
   build: {
     outDir: "dist",
@@ -32880,6 +32891,20 @@ function buildWrapperPage(args) {
         return completed.file;
       }
 
+      // openExternal \u2014 the wrapper page is the top frame (un-sandboxed), so it
+      // opens the link directly; NOT forwarded to the RPC endpoint (no server
+      // op). Re-validate the scheme; never trust the iframe's payload.
+      function handleOpenExternal(payload) {
+        var url = payload && payload.url;
+        if (typeof url !== "string") throw new Error("openExternal requires a url string");
+        var parsed = new URL(url);
+        if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+          throw new Error('openExternal: unsupported URL scheme "' + parsed.protocol + '"');
+        }
+        window.open(parsed.href, "_blank", "noopener,noreferrer");
+        return undefined;
+      }
+
       window.addEventListener("message", async function (event) {
         if (event.source !== iframe.contentWindow || event.origin !== VITE_ORIGIN) return;
         const msg = event.data;
@@ -32888,6 +32913,8 @@ function buildWrapperPage(args) {
         try {
           const data = msg.op === "upload"
             ? await handleUpload(msg.payload)
+            : msg.op === "openExternal"
+            ? handleOpenExternal(msg.payload)
             : await rpc(msg.op, msg.payload);
           const ms = Math.round(performance.now() - startedAt);
           console.debug("[lotics-dev] " + msg.op + " " + ms + "ms", data);

package/dist/starter_template.d.ts

@@ -41,6 +41,16 @@ export interface StarterFile {
  */
 export declare const STARTER_FALLBACK_UI_VERSION = "1.8.0";
 export declare const STARTER_FALLBACK_SDK_VERSION = "0.11.0";
+/**
+ * react-native pin for scaffolded apps. Matches the monorepo frontend's pin so
+ * an app deep-typechecks `@lotics/ui`'s `.tsx` source against the SAME RN types
+ * the package is developed and CI'd against. A mismatch surfaces RN-version-
+ * sensitive type errors (e.g. `StyleSheet.absoluteFill`, which `frontend/` CI
+ * never sees because `packages/ui` is only typechecked through `frontend/`).
+ * RN is aliased to react-native-web at runtime, so this pin is effectively
+ * types-only.
+ */
+export declare const STARTER_REACT_NATIVE_VERSION = "0.85.3";
 export declare function buildStarterTemplate(args: {
     app_name: string;
     app_id: string;

package/dist/starter_template.js

@@ -37,6 +37,16 @@
  */
 export const STARTER_FALLBACK_UI_VERSION = "1.8.0";
 export const STARTER_FALLBACK_SDK_VERSION = "0.11.0";
+/**
+ * react-native pin for scaffolded apps. Matches the monorepo frontend's pin so
+ * an app deep-typechecks `@lotics/ui`'s `.tsx` source against the SAME RN types
+ * the package is developed and CI'd against. A mismatch surfaces RN-version-
+ * sensitive type errors (e.g. `StyleSheet.absoluteFill`, which `frontend/` CI
+ * never sees because `packages/ui` is only typechecked through `frontend/`).
+ * RN is aliased to react-native-web at runtime, so this pin is effectively
+ * types-only.
+ */
+export const STARTER_REACT_NATIVE_VERSION = "0.85.3";
 export function buildStarterTemplate(args) {
     const uiVersion = args.ui_version ?? `^${STARTER_FALLBACK_UI_VERSION}`;
     const sdkVersion = args.sdk_version ?? `^${STARTER_FALLBACK_SDK_VERSION}`;
@@ -72,7 +82,7 @@ export function buildStarterTemplate(args) {
                     "lucide-react-native": "^0.562.0",
                     react: "^19.0.0",
                     "react-dom": "^19.0.0",
-                    "react-native": "0.81.0",
+                    "react-native": STARTER_REACT_NATIVE_VERSION,
                     "react-native-svg": "^15.0.0",
                     "react-native-web": "^0.21.0",
                 },
@@ -143,6 +153,11 @@ import react from "@vitejs/plugin-react";
 // is identical to RN-SVG when running under RN-Web.
 export default defineConfig({
   plugins: [react()],
+  // RN libraries (react-native-web, @react-native-picker's UnimplementedView)
+  // reference the \`__DEV__\` global that Metro injects but Vite does not —
+  // undefined ⇒ the bundle throws at load and the iframe renders blank. Define
+  // it (false = production RN behaviour) so dev and the deployed build both boot.
+  define: { __DEV__: "false" },
   resolve: {
     alias: [
       {
@@ -167,6 +182,11 @@ export default defineConfig({
     // Pre-bundling forces Vite to convert it to an ESM shim with a default
     // export. Production build (rollup) handles it correctly without this.
     include: ["recharts", "es-toolkit", "es-toolkit/compat"],
+    // The dep optimizer pre-bundles deps with a SEPARATE esbuild pass that
+    // top-level \`define\` doesn't always reach, so a pre-bundled RN dep can
+    // still hit \`__DEV__ is not defined\` under \`lotics app dev\`. Define it
+    // here too — belt-and-suspenders with the top-level \`define\` above.
+    esbuildOptions: { define: { __DEV__: "false" } },
   },
   build: {
     outDir: "dist",

package/dist/starter_template.test.js

@@ -1,5 +1,5 @@
 import { describe, expect, test } from "vitest";
-import { buildStarterTemplate, STARTER_FALLBACK_SDK_VERSION, STARTER_FALLBACK_UI_VERSION, } from "./starter_template.js";
+import { buildStarterTemplate, STARTER_FALLBACK_SDK_VERSION, STARTER_FALLBACK_UI_VERSION, STARTER_REACT_NATIVE_VERSION, } from "./starter_template.js";
 function fileNamed(files, path) {
     const f = files.find((f) => f.path === path);
     if (!f)
@@ -17,6 +17,23 @@ describe("buildStarterTemplate", () => {
         expect(config).toContain('"es-toolkit"');
         expect(config).toContain('"es-toolkit/compat"');
     });
+    test("vite.config.ts defines the RN __DEV__ global (else the bundle throws at load → blank iframe)", () => {
+        // `__DEV__` is a Metro-injected global that RN-ecosystem deps reference at
+        // module-eval time (e.g. @react-native-picker's UnimplementedView, pulled in
+        // via @lotics/ui's DatePicker). Vite doesn't define it; undefined ⇒ a runtime
+        // ReferenceError that no typecheck/lint/build catches. Pin it so it can't
+        // silently regress and re-blank every app that imports such a dep.
+        const config = fileNamed(buildStarterTemplate(baseArgs), "vite.config.ts");
+        // Top-level define (covers the prod build + most dev modules)...
+        expect(config).toMatch(/define:\s*\{\s*__DEV__:\s*"false"/);
+        // ...and the dep-optimizer's separate esbuild pass (covers pre-bundled
+        // deps under `lotics app dev`).
+        expect(config).toMatch(/esbuildOptions:\s*\{\s*define:\s*\{\s*__DEV__:\s*"false"/);
+    });
+    test("package.json pins react-native to the monorepo version (so apps typecheck @lotics/ui against the same RN types)", () => {
+        const pkg = JSON.parse(fileNamed(buildStarterTemplate(baseArgs), "package.json"));
+        expect(pkg.dependencies["react-native"]).toBe(STARTER_REACT_NATIVE_VERSION);
+    });
     test("package.json uses caller-supplied versions for @lotics/ui and @lotics/app-sdk", () => {
         const pkg = JSON.parse(fileNamed(buildStarterTemplate({ ...baseArgs, ui_version: "^9.9.9", sdk_version: "^2.2.2" }), "package.json"));
         expect(pkg.dependencies["@lotics/ui"]).toBe("^9.9.9");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.36.0",
+  "version": "0.36.1",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {
@@ -24,7 +24,7 @@
     "@lotics/xlsx": "*",
     "@types/node": "^22.15.21",
     "esbuild": "^0.25.0",
-    "vitest": "^4.0.15"
+    "vitest": "^4.1.7"
   },
   "keywords": [
     "lotics",