@lotics/cli 0.42.0 → 0.44.0

package/dist/dev/wrapper_page.d.ts

@@ -8,7 +8,9 @@
  * wrapper (different port), so the app gets its own real origin (and Web
  * Storage) without being able to reach the wrapper. `allow-downloads` lets
  * apps trigger file downloads (generated xlsx / pdf etc.) — Chrome blocks
- * every download path from sandboxed iframes without it. The iframe sends postMessage RPCs to
+ * every download path from sandboxed iframes without it. `allow="...; geolocation"`
+ * delegates the host's location permission to the app so geofenced actions can
+ * read the device position — matching production. The iframe sends postMessage RPCs to
  * this wrapper, which forwards them to the local /_rpc endpoint, which
  * dispatches to api.lotics.ai with the CLI's API key.
  *

package/dist/dev/wrapper_page.js

@@ -8,7 +8,9 @@
  * wrapper (different port), so the app gets its own real origin (and Web
  * Storage) without being able to reach the wrapper. `allow-downloads` lets
  * apps trigger file downloads (generated xlsx / pdf etc.) — Chrome blocks
- * every download path from sandboxed iframes without it. The iframe sends postMessage RPCs to
+ * every download path from sandboxed iframes without it. `allow="...; geolocation"`
+ * delegates the host's location permission to the app so geofenced actions can
+ * read the device position — matching production. The iframe sends postMessage RPCs to
  * this wrapper, which forwards them to the local /_rpc endpoint, which
  * dispatches to api.lotics.ai with the CLI's API key.
  *
@@ -60,7 +62,7 @@ export function buildWrapperPage(args) {
     <span>workspace <code>${escapeHtml(workspace_id)}</code></span>
     <span>RPC → <code>${escapeHtml(api_url)}</code></span>
   </header>
-  <iframe id="app" sandbox="allow-scripts allow-same-origin allow-downloads" allow="clipboard-write"></iframe>
+  <iframe id="app" sandbox="allow-scripts allow-same-origin allow-downloads" allow="clipboard-write; geolocation"></iframe>
   <script>
     (function () {
       const APP_ID = ${JSON.stringify(app_id)};

package/dist/src/cli.js

@@ -30179,7 +30179,7 @@ import { spawn as spawn2 } from "node:child_process";
 import { tmpdir } from "node:os";
 
 // src/starter_template.ts
-var STARTER_FALLBACK_UI_VERSION = "1.8.0";
+var STARTER_FALLBACK_UI_VERSION = "2.0.0";
 var STARTER_FALLBACK_SDK_VERSION = "0.11.0";
 var STARTER_REACT_NATIVE_VERSION = "0.85.3";
 function buildStarterTemplate(args) {
@@ -30322,13 +30322,6 @@ export default defineConfig({
     dedupe: ["react", "react-dom", "react-native-web"],
   },
   optimizeDeps: {
-    // \`recharts\` (used by @lotics/ui chart_* + sparkline) imports
-    // \`es-toolkit/compat/get\` as a default-export CJS module. Vite's dev
-    // server treats \`compat/*\` as ESM and won't synthesize a default,
-    // so \`import get from "es-toolkit/compat/get"\` fails to resolve.
-    // Pre-bundling forces Vite to convert it to an ESM shim with a default
-    // export. Production build (rollup) handles it correctly without this.
-    include: ["recharts", "es-toolkit", "es-toolkit/compat"],
     // The dep optimizer pre-bundles deps with a SEPARATE esbuild pass that
     // top-level \`define\` doesn't always reach, so a pre-bundled RN dep can
     // still hit \`__DEV__ is not defined\` under \`lotics app dev\`. Define it
@@ -30766,7 +30759,7 @@ function buildWrapperPage(args) {
     <span>workspace <code>${escapeHtml2(workspace_id)}</code></span>
     <span>RPC \u2192 <code>${escapeHtml2(api_url)}</code></span>
   </header>
-  <iframe id="app" sandbox="allow-scripts allow-same-origin allow-downloads" allow="clipboard-write"></iframe>
+  <iframe id="app" sandbox="allow-scripts allow-same-origin allow-downloads" allow="clipboard-write; geolocation"></iframe>
   <script>
     (function () {
       const APP_ID = ${JSON.stringify(app_id)};

package/dist/starter_template.d.ts

@@ -39,7 +39,7 @@ export interface StarterFile {
  * scaffolds resolve the live version via `fetchLatestNpmVersion` and only
  * fall back here when the lookup fails.
  */
-export declare const STARTER_FALLBACK_UI_VERSION = "1.8.0";
+export declare const STARTER_FALLBACK_UI_VERSION = "2.0.0";
 export declare const STARTER_FALLBACK_SDK_VERSION = "0.11.0";
 /**
  * react-native pin for scaffolded apps. Matches the monorepo frontend's pin so

package/dist/starter_template.js

@@ -35,7 +35,7 @@
  * scaffolds resolve the live version via `fetchLatestNpmVersion` and only
  * fall back here when the lookup fails.
  */
-export const STARTER_FALLBACK_UI_VERSION = "1.8.0";
+export const STARTER_FALLBACK_UI_VERSION = "2.0.0";
 export const STARTER_FALLBACK_SDK_VERSION = "0.11.0";
 /**
  * react-native pin for scaffolded apps. Matches the monorepo frontend's pin so
@@ -184,13 +184,6 @@ export default defineConfig({
     dedupe: ["react", "react-dom", "react-native-web"],
   },
   optimizeDeps: {
-    // \`recharts\` (used by @lotics/ui chart_* + sparkline) imports
-    // \`es-toolkit/compat/get\` as a default-export CJS module. Vite's dev
-    // server treats \`compat/*\` as ESM and won't synthesize a default,
-    // so \`import get from "es-toolkit/compat/get"\` fails to resolve.
-    // Pre-bundling forces Vite to convert it to an ESM shim with a default
-    // export. Production build (rollup) handles it correctly without this.
-    include: ["recharts", "es-toolkit", "es-toolkit/compat"],
     // The dep optimizer pre-bundles deps with a SEPARATE esbuild pass that
     // top-level \`define\` doesn't always reach, so a pre-bundled RN dep can
     // still hit \`__DEV__ is not defined\` under \`lotics app dev\`. Define it

package/dist/starter_template.test.js

@@ -8,14 +8,15 @@ function fileNamed(files, path) {
 }
 describe("buildStarterTemplate", () => {
     const baseArgs = { app_name: "Demo", app_id: "app_test", workspace_id: "wsp_test" };
-    test("vite.config.ts pre-bundles recharts / es-toolkit for the dev server", () => {
+    test("vite.config.ts pre-bundles RN deps with __DEV__ + .web.js for the dev server", () => {
         const config = fileNamed(buildStarterTemplate(baseArgs), "vite.config.ts");
-        // Without this, `lotics app dev` crashes on `es-toolkit/compat/get` no
-        // default export when the app imports any @lotics/ui chart component.
+        // The optimizer runs a SEPARATE esbuild pass that ignores `resolve.extensions`
+        // and the top-level `define`, so `__DEV__` + `.web.js` must be repeated here —
+        // else a pre-bundled RN dep (e.g. react-native-svg, which @lotics/ui charts
+        // use) resolves to its native build and `__DEV__` is undefined.
         expect(config).toMatch(/optimizeDeps:\s*\{/);
-        expect(config).toContain('"recharts"');
-        expect(config).toContain('"es-toolkit"');
-        expect(config).toContain('"es-toolkit/compat"');
+        expect(config).toContain('__DEV__: "false"');
+        expect(config).toContain('".web.js"');
     });
     test("vite.config.ts defines the RN __DEV__ global (else the bundle throws at load → blank iframe)", () => {
         // `__DEV__` is a Metro-injected global that RN-ecosystem deps reference at

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.42.0",
+  "version": "0.44.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {