@lowdefy/build 6.0.0 → 6.1.0

package/dist/index.js

@@ -144,11 +144,12 @@ async function build(options) {
         // appMeta is computed in Phase 0; attach it here (where buildApp used to
         // create it) so the following addKeys pass keys it identically.
         components.appMeta = context.appMeta;
-        tryBuildStep(buildLogger, 'buildLogger', {
+        // validateConfig resolves the current environment, which buildLogger reads for Sentry.
+        tryBuildStep(validateConfig, 'validateConfig', {
             components,
             context
         });
-        tryBuildStep(validateConfig, 'validateConfig', {
+        tryBuildStep(buildLogger, 'buildLogger', {
             components,
             context
         });

package/dist/lowdefySchema.js

@@ -1545,7 +1545,7 @@ export default {
                     }
                 },
                 schedules: {
-                    description: 'Cron schedules that run the routine on a timer: an array (the same in every environment), or with config.cron.environments declared an object keyed by environment name with an optional "default" key that every other environment inherits ("staging: []" turns crons off for staging).',
+                    description: 'Cron schedules that run the routine on a timer: an array (the same in every environment), or with config.environments declared an object keyed by environment name with an optional "default" key that every other environment inherits ("staging: []" turns crons off for staging).',
                     anyOf: [
                         {
                             type: 'array',
@@ -2452,63 +2452,171 @@ export default {
                         }
                     }
                 },
-                cron: {
-                    type: 'object',
-                    additionalProperties: false,
-                    description: "Deployment environments for scheduled endpoints. Vercel fires cron jobs only on the production deployment, so every environment's schedules are registered there and production forwards the ones for other environments to their own /api/cron route.",
-                    required: [
-                        'environments'
-                    ],
+                environment: {
+                    type: 'string',
+                    description: 'The environment this build is for, one of the names in "config.environments". Used when the LOWDEFY_ENVIRONMENT environment variable is not set; the variable always wins.',
                     errorMessage: {
-                        type: 'App "config.cron" should be an object.',
-                        required: {
-                            environments: 'App "config.cron" should have required property "environments".'
-                        }
-                    },
-                    properties: {
-                        '~k': {},
-                        '~r': {},
-                        '~l': {},
-                        environments: {
-                            type: 'object',
-                            description: 'Environments keyed by name. Exactly one environment has no "url": the deployment whose crons Vercel fires. Every other environment needs a "url" (its deployment origin) and a "secret" (the Lowdefy secret name holding that environment\'s CRON_SECRET, set on the production deployment).',
-                            additionalProperties: {
+                        type: 'App "config.environment" should be a string.'
+                    }
+                },
+                environments: {
+                    type: 'object',
+                    description: 'The deployment environments of the app, keyed by name. The current environment (LOWDEFY_ENVIRONMENT) supplies the defaults for everything environment-specific: the app url (auth, notification links), cron forwarding, the email delivery filter and the Sentry environment. Endpoint "schedules" can be keyed by these names.',
+                    additionalProperties: {
+                        type: 'object',
+                        additionalProperties: false,
+                        properties: {
+                            '~k': {},
+                            '~r': {},
+                            '~l': {},
+                            url: {
+                                type: 'string',
+                                description: 'The environment deployment origin, e.g. https://staging.example.com. Default for the auth base URL and notification links, and where crons are forwarded to.',
+                                errorMessage: {
+                                    type: 'App "config.environments.<name>.url" should be a string.'
+                                }
+                            },
+                            cron: {
                                 type: 'object',
                                 additionalProperties: false,
                                 properties: {
                                     '~k': {},
                                     '~r': {},
                                     '~l': {},
-                                    url: {
-                                        type: 'string',
-                                        description: 'The environment deployment origin, e.g. https://staging.example.com.',
-                                        errorMessage: {
-                                            type: 'App "config.cron.environments.<name>.url" should be a string.'
-                                        }
-                                    },
                                     secret: {
                                         type: 'string',
-                                        description: "Lowdefy secret name (LOWDEFY_SECRET_<name> env var) holding this environment's CRON_SECRET.",
+                                        description: "The NAME of the Lowdefy secret (a plain string, not a _secret operator; read from the LOWDEFY_SECRET_<name> env var on the deployment that forwards) holding this environment's CRON_SECRET. An environment with a secret is forwarded to: the environment Vercel fires crons on pings its /api/cron route when one of its schedules fires.",
                                         errorMessage: {
-                                            type: 'App "config.cron.environments.<name>.secret" should be a string.'
+                                            type: 'App "config.environments.<name>.cron.secret" should be a string.'
                                         }
                                     },
                                     enabled: {
                                         type: 'boolean',
                                         description: 'Set false to register no cron jobs for this environment. Defaults to true.',
                                         errorMessage: {
-                                            type: 'App "config.cron.environments.<name>.enabled" should be a boolean.'
+                                            type: 'App "config.environments.<name>.cron.enabled" should be a boolean.'
                                         }
                                     }
                                 },
                                 errorMessage: {
-                                    type: 'App "config.cron.environments.<name>" should be an object.'
+                                    type: 'App "config.environments.<name>.cron" should be an object.'
                                 }
                             },
-                            errorMessage: {
-                                type: 'App "config.cron.environments" should be an object.'
+                            email: {
+                                type: 'object',
+                                additionalProperties: false,
+                                properties: {
+                                    '~k': {},
+                                    '~r': {},
+                                    '~l': {},
+                                    enabled: {
+                                        type: 'boolean',
+                                        description: 'Set false to send no email from SMTPMailSend and SendGridMailSend requests in this environment. Auth emails still send. Defaults to true.',
+                                        errorMessage: {
+                                            type: 'App "config.environments.<name>.email.enabled" should be a boolean.'
+                                        }
+                                    },
+                                    filter: {
+                                        type: 'object',
+                                        description: 'Delivery filter applied to every SMTPMailSend and SendGridMailSend request in this environment, unless the connection sets its own "filter" (false turns filtering off for that connection). Auth emails are not filtered.',
+                                        additionalProperties: false,
+                                        properties: {
+                                            '~k': {},
+                                            '~r': {},
+                                            '~l': {},
+                                            replaceAddress: {
+                                                type: [
+                                                    'string',
+                                                    'null'
+                                                ],
+                                                description: 'Send every email to this address instead of its recipients.'
+                                            },
+                                            allowlist: {
+                                                type: 'array',
+                                                items: {
+                                                    type: 'string'
+                                                },
+                                                description: 'Only deliver to recipients on these domains.'
+                                            },
+                                            regex: {
+                                                type: 'string',
+                                                description: 'Only deliver to recipients matching this regular expression.'
+                                            }
+                                        },
+                                        errorMessage: {
+                                            type: 'App "config.environments.<name>.email.filter" should be an object.'
+                                        }
+                                    }
+                                },
+                                errorMessage: {
+                                    type: 'App "config.environments.<name>.email" should be an object.'
+                                }
+                            },
+                            guards: {
+                                type: 'object',
+                                additionalProperties: false,
+                                description: 'Pin secrets and environment variables to a regular expression kept in config: in this environment the build fails unless each value matches (a missing value fails too). Changing a guarded value then takes a config change as well. Values are never printed.',
+                                properties: {
+                                    '~k': {},
+                                    '~r': {},
+                                    '~l': {},
+                                    secrets: {
+                                        type: 'object',
+                                        description: 'Lowdefy secret name (LOWDEFY_SECRET_<name>) to the regular expression its value must match.',
+                                        additionalProperties: {
+                                            type: 'string',
+                                            errorMessage: {
+                                                type: 'App "config.environments.<name>.guards.secrets.<name>" should be a regular expression string.'
+                                            }
+                                        },
+                                        errorMessage: {
+                                            type: 'App "config.environments.<name>.guards.secrets" should be an object.'
+                                        }
+                                    },
+                                    env: {
+                                        type: 'object',
+                                        description: 'Environment variable name to the regular expression its value must match.',
+                                        additionalProperties: {
+                                            type: 'string',
+                                            errorMessage: {
+                                                type: 'App "config.environments.<name>.guards.env.<name>" should be a regular expression string.'
+                                            }
+                                        },
+                                        errorMessage: {
+                                            type: 'App "config.environments.<name>.guards.env" should be an object.'
+                                        }
+                                    }
+                                },
+                                errorMessage: {
+                                    type: 'App "config.environments.<name>.guards" should be an object.'
+                                }
+                            },
+                            sentry: {
+                                type: 'object',
+                                additionalProperties: false,
+                                properties: {
+                                    '~k': {},
+                                    '~r': {},
+                                    '~l': {},
+                                    enabled: {
+                                        type: 'boolean',
+                                        description: 'Set false to turn Sentry off (server and client) in this environment. Defaults to true.',
+                                        errorMessage: {
+                                            type: 'App "config.environments.<name>.sentry.enabled" should be a boolean.'
+                                        }
+                                    }
+                                },
+                                errorMessage: {
+                                    type: 'App "config.environments.<name>.sentry" should be an object.'
+                                }
                             }
+                        },
+                        errorMessage: {
+                            type: 'App "config.environments.<name>" should be an object.'
                         }
+                    },
+                    errorMessage: {
+                        type: 'App "config.environments" should be an object.'
                     }
                 },
                 requestTimeout: {

package/dist/test-utils/runBuild.js

@@ -54,6 +54,9 @@ import createTestLogger from './createTestLogger.js';
         Button: {
             package: '@lowdefy/blocks-basic'
         },
+        ClickableHtml: {
+            package: '@lowdefy/blocks-basic'
+        },
         DangerousHtml: {
             package: '@lowdefy/blocks-basic'
         },

package/dist/test-utils/runBuildForSnapshots.js

@@ -87,6 +87,9 @@ import path from 'path';
         Button: {
             package: '@lowdefy/blocks-basic'
         },
+        ClickableHtml: {
+            package: '@lowdefy/blocks-basic'
+        },
         DangerousHtml: {
             package: '@lowdefy/blocks-basic'
         },

package/dist/utils/{getCronEnvironmentNames.js → getEnvironmentNames.js}

@@ -12,14 +12,15 @@
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.
-*/ // The declared environment names in config.cron.environments. Build key markers (~k, ~r, ~l) live
-// on the same object as the environments, so they are skipped rather than treated as names.
+*/ // The declared environment names in config.environments.
+// Build key markers (~k, ~r, ~l) live on the same object as the environments, so they are skipped
+// rather than treated as names.
 const markerKeys = new Set([
     '~k',
     '~r',
     '~l'
 ]);
-function getCronEnvironmentNames(environments) {
+function getEnvironmentNames(environments) {
     return Object.keys(environments ?? {}).filter((key)=>!markerKeys.has(key));
 }
-export default getCronEnvironmentNames;
+export default getEnvironmentNames;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/build",
-  "version": "6.0.0",
+  "version": "6.1.0",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -46,71 +46,71 @@
     "dist/*"
   ],
   "dependencies": {
-    "@lowdefy/ai-utils": "6.0.0",
-    "@lowdefy/ajv": "6.0.0",
-    "@lowdefy/block-utils": "6.0.0",
-    "@lowdefy/blocks-basic": "6.0.0",
-    "@lowdefy/blocks-loaders": "6.0.0",
-    "@lowdefy/errors": "6.0.0",
-    "@lowdefy/helpers": "6.0.0",
-    "@lowdefy/node-utils": "6.0.0",
-    "@lowdefy/nunjucks": "6.0.0",
-    "@lowdefy/operators": "6.0.0",
-    "@lowdefy/operators-js": "6.0.0",
+    "@lowdefy/ai-utils": "6.1.0",
+    "@lowdefy/ajv": "6.1.0",
+    "@lowdefy/block-utils": "6.1.0",
+    "@lowdefy/blocks-basic": "6.1.0",
+    "@lowdefy/blocks-loaders": "6.1.0",
+    "@lowdefy/errors": "6.1.0",
+    "@lowdefy/helpers": "6.1.0",
+    "@lowdefy/node-utils": "6.1.0",
+    "@lowdefy/nunjucks": "6.1.0",
+    "@lowdefy/operators": "6.1.0",
+    "@lowdefy/operators-js": "6.1.0",
     "ajv": "8.20.0",
     "json5": "2.2.3",
-    "picomatch": "4.0.1",
+    "picomatch": "4.0.4",
     "semver": "7.7.4",
-    "tar": "7.5.13",
+    "tar": "7.5.21",
     "yaml": "2.9.0",
     "yargs": "18.0.0"
   },
   "devDependencies": {
     "@jest/globals": "28.1.3",
-    "@lowdefy/actions-core": "6.0.0",
-    "@lowdefy/actions-pdf-make": "6.0.0",
-    "@lowdefy/blocks-aggrid": "6.0.0",
-    "@lowdefy/blocks-antd": "6.0.0",
-    "@lowdefy/blocks-antd-x": "6.0.0",
-    "@lowdefy/blocks-diff": "6.0.0",
-    "@lowdefy/blocks-echarts": "6.0.0",
-    "@lowdefy/blocks-files": "6.0.0",
-    "@lowdefy/blocks-google-maps": "6.0.0",
-    "@lowdefy/blocks-markdown": "6.0.0",
-    "@lowdefy/blocks-qr": "6.0.0",
-    "@lowdefy/blocks-tiptap": "6.0.0",
-    "@lowdefy/connection-ai-gateway": "6.0.0",
-    "@lowdefy/connection-anthropic": "6.0.0",
-    "@lowdefy/connection-axios-http": "6.0.0",
-    "@lowdefy/connection-elasticsearch": "6.0.0",
-    "@lowdefy/connection-google": "6.0.0",
-    "@lowdefy/connection-google-sheets": "6.0.0",
-    "@lowdefy/connection-knex": "6.0.0",
-    "@lowdefy/connection-mcp": "6.0.0",
-    "@lowdefy/connection-mongodb": "6.0.0",
-    "@lowdefy/connection-openai": "6.0.0",
-    "@lowdefy/connection-redis": "6.0.0",
-    "@lowdefy/connection-sendgrid": "6.0.0",
-    "@lowdefy/connection-smtp": "6.0.0",
-    "@lowdefy/connection-stripe": "6.0.0",
-    "@lowdefy/connection-test": "6.0.0",
-    "@lowdefy/email-templates": "6.0.0",
-    "@lowdefy/logger": "6.0.0",
-    "@lowdefy/operators-change-case": "6.0.0",
-    "@lowdefy/operators-dayjs": "6.0.0",
-    "@lowdefy/operators-diff": "6.0.0",
-    "@lowdefy/operators-jsonata": "6.0.0",
-    "@lowdefy/operators-mql": "6.0.0",
-    "@lowdefy/operators-nunjucks": "6.0.0",
-    "@lowdefy/operators-uuid": "6.0.0",
-    "@lowdefy/operators-yaml": "6.0.0",
-    "@lowdefy/plugin-auth0": "6.0.0",
-    "@lowdefy/plugin-aws": "6.0.0",
-    "@lowdefy/plugin-azure": "6.0.0",
-    "@lowdefy/plugin-csv": "6.0.0",
-    "@lowdefy/plugin-gcp": "6.0.0",
-    "@lowdefy/plugin-next-auth": "6.0.0",
-    "@lowdefy/websockets-core": "6.0.0",
+    "@lowdefy/actions-core": "6.1.0",
+    "@lowdefy/actions-pdf-make": "6.1.0",
+    "@lowdefy/blocks-aggrid": "6.1.0",
+    "@lowdefy/blocks-antd": "6.1.0",
+    "@lowdefy/blocks-antd-x": "6.1.0",
+    "@lowdefy/blocks-diff": "6.1.0",
+    "@lowdefy/blocks-echarts": "6.1.0",
+    "@lowdefy/blocks-files": "6.1.0",
+    "@lowdefy/blocks-google-maps": "6.1.0",
+    "@lowdefy/blocks-markdown": "6.1.0",
+    "@lowdefy/blocks-qr": "6.1.0",
+    "@lowdefy/blocks-tiptap": "6.1.0",
+    "@lowdefy/connection-ai-gateway": "6.1.0",
+    "@lowdefy/connection-anthropic": "6.1.0",
+    "@lowdefy/connection-axios-http": "6.1.0",
+    "@lowdefy/connection-elasticsearch": "6.1.0",
+    "@lowdefy/connection-google": "6.1.0",
+    "@lowdefy/connection-google-sheets": "6.1.0",
+    "@lowdefy/connection-knex": "6.1.0",
+    "@lowdefy/connection-mcp": "6.1.0",
+    "@lowdefy/connection-mongodb": "6.1.0",
+    "@lowdefy/connection-openai": "6.1.0",
+    "@lowdefy/connection-redis": "6.1.0",
+    "@lowdefy/connection-sendgrid": "6.1.0",
+    "@lowdefy/connection-smtp": "6.1.0",
+    "@lowdefy/connection-stripe": "6.1.0",
+    "@lowdefy/connection-test": "6.1.0",
+    "@lowdefy/email-templates": "6.1.0",
+    "@lowdefy/logger": "6.1.0",
+    "@lowdefy/operators-change-case": "6.1.0",
+    "@lowdefy/operators-dayjs": "6.1.0",
+    "@lowdefy/operators-diff": "6.1.0",
+    "@lowdefy/operators-jsonata": "6.1.0",
+    "@lowdefy/operators-mql": "6.1.0",
+    "@lowdefy/operators-nunjucks": "6.1.0",
+    "@lowdefy/operators-uuid": "6.1.0",
+    "@lowdefy/operators-yaml": "6.1.0",
+    "@lowdefy/plugin-auth0": "6.1.0",
+    "@lowdefy/plugin-aws": "6.1.0",
+    "@lowdefy/plugin-azure": "6.1.0",
+    "@lowdefy/plugin-csv": "6.1.0",
+    "@lowdefy/plugin-gcp": "6.1.0",
+    "@lowdefy/plugin-next-auth": "6.1.0",
+    "@lowdefy/websockets-core": "6.1.0",
     "@swc/cli": "0.8.1",
     "@swc/core": "1.15.32",
     "@swc/jest": "0.2.39",

package/dist/build/validateCronConfig.js

@@ -1,110 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/ import { type } from '@lowdefy/helpers';
-import { ConfigError } from '@lowdefy/errors';
-import getCronEnvironmentNames from '../utils/getCronEnvironmentNames.js';
-// Environment names become a path segment (/api/cron-forward/<environment>/<endpointId>).
-const environmentNamePattern = /^[A-Za-z0-9\-_]+$/;
-function isAbsoluteHttpUrl(value) {
-    try {
-        const url = new URL(value);
-        return url.protocol === 'http:' || url.protocol === 'https:';
-    } catch  {
-        return false;
-    }
-}
-// Returns true when the environment is forwarded to (has a url), false for the host environment.
-function validateCronEnvironment({ name, environment, configKey }) {
-    if (name === 'default') {
-        throw new ConfigError('Cron environment name "default" is reserved: it names the schedules every environment inherits.', {
-            configKey
-        });
-    }
-    if (!environmentNamePattern.test(name)) {
-        throw new ConfigError(`Cron environment name "${name}" is invalid. Environment names must only contain A-Z, a-z, 0-9, "-" and "_".`, {
-            configKey
-        });
-    }
-    if (!type.isObject(environment)) {
-        throw new ConfigError(`Cron environment "${name}" is not an object.`, {
-            received: environment,
-            configKey
-        });
-    }
-    if (!type.isUndefined(environment.enabled) && !type.isBoolean(environment.enabled)) {
-        throw new ConfigError(`Cron environment "${name}" enabled is not a boolean.`, {
-            received: environment.enabled,
-            configKey: environment['~k'] ?? configKey
-        });
-    }
-    if (type.isUndefined(environment.url)) {
-        if (!type.isUndefined(environment.secret)) {
-            throw new ConfigError(`Cron environment "${name}" has a secret but no url. The environment without a url is the deployment that runs the crons and needs no secret.`, {
-                configKey: environment['~k'] ?? configKey
-            });
-        }
-        return false;
-    }
-    if (!type.isString(environment.url) || !isAbsoluteHttpUrl(environment.url)) {
-        throw new ConfigError(`Cron environment "${name}" url is not an absolute http(s) URL, e.g. "https://staging.example.com".`, {
-            received: environment.url,
-            configKey: environment['~k'] ?? configKey
-        });
-    }
-    if (!type.isString(environment.secret) || environment.secret === '') {
-        throw new ConfigError(`Cron environment "${name}" has a url but no secret. Set secret to the Lowdefy secret name that holds the environment's CRON_SECRET.`, {
-            received: environment.secret,
-            configKey: environment['~k'] ?? configKey
-        });
-    }
-    return true;
-}
-// Validates config.cron: the deployment environments scheduled endpoints run in. Exactly one
-// environment has no url — the deployment whose crons Vercel fires — and every other environment
-// is forwarded to from there, so it needs a url and the secret that authorizes the forwarded call.
-function validateCronConfig({ components }) {
-    const cron = components.config.cron;
-    if (type.isUndefined(cron)) return;
-    const configKey = cron['~k'] ?? components.config['~k'];
-    if (!type.isObject(cron)) {
-        throw new ConfigError('lowdefy.config.cron is not an object.', {
-            received: cron,
-            configKey
-        });
-    }
-    if (!type.isObject(cron.environments)) {
-        throw new ConfigError('lowdefy.config.cron.environments is not an object.', {
-            received: cron.environments,
-            configKey
-        });
-    }
-    const names = getCronEnvironmentNames(cron.environments);
-    if (names.length === 0) {
-        throw new ConfigError('lowdefy.config.cron.environments declares no environments.', {
-            configKey
-        });
-    }
-    const hosts = names.filter((name)=>!validateCronEnvironment({
-            name,
-            environment: cron.environments[name],
-            configKey
-        }));
-    if (hosts.length !== 1) {
-        throw new ConfigError(`Exactly one environment in lowdefy.config.cron.environments must have no url (the deployment that runs the crons). Received ${JSON.stringify(hosts)}.`, {
-            configKey
-        });
-    }
-}
-export default validateCronConfig;