@lovable.dev/vite-tanstack-config 2.23.0 → 2.23.1

package/dist/hmr-gate.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
+let node_crypto = require("node:crypto");
 //#region src/hmr-gate/index.ts
 const statusCorsOriginRe = /^(?:https:\/\/(?:[^/]+\.)?lovable\.dev|https?:\/\/(?:(?:[^/:]+\.)?localhost|127\.0\.0\.1|\[::1\]))(?::\d+)?$/;
 function requestPathname(req) {

package/dist/hmr-gate.js

@@ -1,5 +1,5 @@
-import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
+import { createHash } from "node:crypto";
 //#region src/hmr-gate/index.ts
 const statusCorsOriginRe = /^(?:https:\/\/(?:[^/]+\.)?lovable\.dev|https?:\/\/(?:(?:[^/:]+\.)?localhost|127\.0\.0\.1|\[::1\]))(?::\d+)?$/;
 function requestPathname(req) {

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 //#endregion
+let node_fs = require("node:fs");
 let node_path = require("node:path");
 let node_url = require("node:url");
 let vite = require("vite");
@@ -153,7 +154,7 @@ function bundledDevCssUrlShim() {
 //#endregion
 //#region package.json
 var name = "@lovable.dev/vite-tanstack-config";
-var version = "2.23.0";
+var version = "2.23.1";
 //#endregion
 //#region src/logging.ts
 const PACKAGE_NAME = "@lovable.dev/vite-tanstack-config";
@@ -668,6 +669,18 @@ const LOVABLE_SANDBOX_ENV_VAR = "LOVABLE_SANDBOX";
 function isSandboxEnvironment() {
 	return process.env[LOVABLE_SANDBOX_ENV_VAR] === "1" || !!process.env[SANDBOX_ENV_VAR];
 }
+function sandboxFsAllow(root) {
+	let nodeModules;
+	let realRoot;
+	try {
+		nodeModules = node_fs.realpathSync.native((0, node_path.join)(root, "node_modules"));
+		realRoot = node_fs.realpathSync.native(root);
+	} catch {
+		return;
+	}
+	if (nodeModules.startsWith(realRoot + node_path.sep)) return void 0;
+	return [(0, vite.searchForWorkspaceRoot)(root), nodeModules];
+}
 const TOOL_MANAGED_WATCH_IGNORES = [
 	"**/.workspace/**",
 	"**/.agents/**",
@@ -1643,12 +1656,14 @@ function defineConfig(configOrOptions = {}) {
 		}
 		if (isSandbox) {
 			validateConfig(config);
+			const fsAllow = sandboxFsAllow(process.cwd());
 			config = cleanServerConfig((0, vite.mergeConfig)(config, { server: {
 				host: "::",
 				port: 8080,
 				strictPort: true,
 				watch: { ignored: [...TOOL_MANAGED_WATCH_IGNORES] },
-				hmr: { overlay: false }
+				hmr: { overlay: false },
+				...fsAllow ? { fs: { allow: fsAllow } } : {}
 			} }));
 		} else config = (0, vite.mergeConfig)({ server: {
 			host: "::",

package/dist/index.js

@@ -1,6 +1,7 @@
+import { realpathSync } from "node:fs";
 import { basename, extname, join, relative, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-import { loadEnv, mergeConfig } from "vite";
+import { loadEnv, mergeConfig, searchForWorkspaceRoot } from "vite";
 import https from "node:https";
 //#region src/assetsProxyPlugin.ts
 const ASSET_RE = /^\/__l5e\/assets-v1\//;
@@ -129,7 +130,7 @@ function bundledDevCssUrlShim() {
 //#endregion
 //#region package.json
 var name = "@lovable.dev/vite-tanstack-config";
-var version = "2.23.0";
+var version = "2.23.1";
 //#endregion
 //#region src/logging.ts
 const PACKAGE_NAME = "@lovable.dev/vite-tanstack-config";
@@ -644,6 +645,18 @@ const LOVABLE_SANDBOX_ENV_VAR = "LOVABLE_SANDBOX";
 function isSandboxEnvironment() {
 	return process.env[LOVABLE_SANDBOX_ENV_VAR] === "1" || !!process.env[SANDBOX_ENV_VAR];
 }
+function sandboxFsAllow(root) {
+	let nodeModules;
+	let realRoot;
+	try {
+		nodeModules = realpathSync.native(join(root, "node_modules"));
+		realRoot = realpathSync.native(root);
+	} catch {
+		return;
+	}
+	if (nodeModules.startsWith(realRoot + sep)) return void 0;
+	return [searchForWorkspaceRoot(root), nodeModules];
+}
 const TOOL_MANAGED_WATCH_IGNORES = [
 	"**/.workspace/**",
 	"**/.agents/**",
@@ -1619,12 +1632,14 @@ function defineConfig(configOrOptions = {}) {
 		}
 		if (isSandbox) {
 			validateConfig(config);
+			const fsAllow = sandboxFsAllow(process.cwd());
 			config = cleanServerConfig(mergeConfig(config, { server: {
 				host: "::",
 				port: 8080,
 				strictPort: true,
 				watch: { ignored: [...TOOL_MANAGED_WATCH_IGNORES] },
-				hmr: { overlay: false }
+				hmr: { overlay: false },
+				...fsAllow ? { fs: { allow: fsAllow } } : {}
 			} }));
 		} else config = mergeConfig({ server: {
 			host: "::",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lovable.dev/vite-tanstack-config",
-  "version": "2.23.0",
+  "version": "2.23.1",
   "description": "Vite config wrapper for Lovable TanStack Start projects",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",