@lowdefy/server-dev 0.0.0-experimental-20260827092002 → 0.0.0-experimental-20260827105525

package/.eslintrc.yaml

@@ -0,0 +1 @@
+extends: 'plugin:@next/next/core-web-vitals'

package/lib/build/app.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/app.json'), 'utf8'));
+import raw from '../../build/app.json';
 
 export default serializer.deserialize(raw);

package/lib/build/appMeta.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/appMeta.json'), 'utf8'));
+import raw from '../../build/appMeta.json';
 
 export default serializer.deserialize(raw);

package/lib/build/auth.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/auth.json'), 'utf8'));
+import raw from '../../build/auth.json';
 
 export default serializer.deserialize(raw);

package/lib/build/config.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/config.json'), 'utf8'));
+import raw from '../../build/config.json';
 
 export default serializer.deserialize(raw);

package/lib/build/i18n.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/i18n.json'), 'utf8'));
+import raw from '../../build/i18n.json';
 
 export default serializer.deserialize(raw);

package/lib/build/logger.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/logger.json'), 'utf8'));
+import raw from '../../build/logger.json';
 
 export default serializer.deserialize(raw);

package/lib/build/theme.js

@@ -13,14 +13,7 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
 import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/theme.json'), 'utf8'));
+import raw from '../../build/theme.json';
 
 export default serializer.deserialize(raw);

package/lib/client/App.js

@@ -0,0 +1,80 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import React, { Suspense } from 'react';
+
+import { useRouter } from 'next/router';
+
+import Head from 'next/head';
+import Link from 'next/link';
+
+import BuildingPage from './BuildingPage.js';
+import Reload from './Reload.js';
+import Page from './Page.js';
+import setPageId from './setPageId.js';
+import { getReloadVersion } from './utils/useMutateCache.js';
+import useRootConfig from './utils/useRootConfig.js';
+
+import actions from '../../build/plugins/actions.js';
+import blockMetas from '../../build/plugins/blockMetas.json';
+import blocks from '../../build/plugins/blocks.js';
+import icons from '../../build/plugins/icons.js';
+import operators from '../../build/plugins/operators/client.js';
+import staticJsMap from '../../build/plugins/operators/clientJsMap.js';
+
+const App = ({ auth, lowdefy }) => {
+  const router = useRouter();
+  const { data: rootConfig } = useRootConfig(router.basePath);
+
+  if (rootConfig?.theme) {
+    lowdefy.theme = rootConfig.theme;
+  }
+
+  const { redirect, pageId } = setPageId(router, rootConfig);
+  if (redirect) {
+    router.push(`/${pageId}`);
+    return '';
+  }
+  return (
+    <Reload basePath={router.basePath} lowdefy={lowdefy}>
+      {(resetContext) => (
+        <Suspense key={`${pageId}_${getReloadVersion()}`} fallback={<BuildingPage />}>
+          <Page
+            auth={auth}
+            Components={{ Head, Link }}
+            config={{
+              rootConfig,
+            }}
+            jsMap={staticJsMap}
+            lowdefy={lowdefy}
+            pageId={pageId}
+            resetContext={resetContext}
+            router={router}
+            types={{
+              actions,
+              blockMetas,
+              blocks,
+              icons,
+              operators,
+            }}
+          />
+        </Suspense>
+      )}
+    </Reload>
+  );
+};
+
+export default App;

package/{client/Page.jsx → lib/client/Page.js}

@@ -18,10 +18,10 @@ import React, { useEffect, useRef } from 'react';
 import { GenIcon } from 'react-icons/lib';
 import Client from '@lowdefy/client';
 
-import BuildErrorPage from '../lib/client/BuildErrorPage.jsx';
-import InstallingPluginsPage from '../lib/client/InstallingPluginsPage.jsx';
-import RestartingPage from '../lib/client/RestartingPage.jsx';
-import usePageConfig from '../lib/client/utils/usePageConfig.js';
+import BuildErrorPage from './BuildErrorPage.js';
+import InstallingPluginsPage from './InstallingPluginsPage.js';
+import RestartingPage from './RestartingPage.js';
+import usePageConfig from './utils/usePageConfig.js';
 
 const Page = ({
   auth,
@@ -48,7 +48,7 @@ const Page = ({
   }, [pageConfig?._warnings, lowdefy]);
 
   if (!pageConfig) {
-    router.replace({ pathname: '/404' });
+    router.replace(`/404`);
     return '';
   }
   if (pageConfig.buildError) {

package/{client/Reload.jsx → lib/client/Reload.js}

@@ -16,12 +16,9 @@
 
 import React, { useEffect, useState } from 'react';
 
-import useMutateCache from '../lib/client/utils/useMutateCache.js';
-import waitForRestartedServer from '../lib/client/utils/waitForRestartedServer.js';
+import useMutateCache from './utils/useMutateCache.js';
+import waitForRestartedServer from './utils/waitForRestartedServer.js';
 
-// SSE listener — config rebuilds notify via /api/reload. Tailwind CSS updates
-// arrive through Vite HMR now (globals.css is in the dev module graph), so
-// the old tailwind-jit.css link cache-bust is gone.
 const Reload = ({ children, basePath, lowdefy }) => {
   const [reset, setReset] = useState(false);
   const [restarting, setRestarting] = useState(false);
@@ -37,6 +34,11 @@ const Reload = ({ children, basePath, lowdefy }) => {
         if (lowdefy._internal?.initialised) {
           lowdefy._internal.initialised = false;
         }
+        // Refresh JIT CSS link to pick up newly compiled Tailwind classes
+        const cssLink = document.getElementById('tailwind-jit-css');
+        if (cssLink) {
+          cssLink.href = `${basePath}/tailwind-jit.css?v=${Date.now()}`;
+        }
         setReset(true);
         console.log('Reloaded config.');
       }, 600);

package/lib/client/auth/{Auth.jsx → Auth.js}

@@ -13,22 +13,13 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
 /* eslint-disable react/jsx-props-no-spreading */
 
 import React from 'react';
-import AuthConfigured from './AuthConfigured.jsx';
+import AuthConfigured from './AuthConfigured.js';
 import AuthNotConfigured from './AuthNotConfigured.js';
 
-import { serializer } from '@lowdefy/helpers';
-
-// Client code imports the build JSON directly — Vite handles JSON imports;
-// the lib/build/*.js wrappers are server-only (they read from disk).
-// Deserialize to restore arrays from their ~arr build markers (providers
-// must be a real array for single-provider inference in createAuthMethods).
-import rawAuthConfig from '../../../build/auth.json';
-
-const authConfig = serializer.deserialize(rawAuthConfig);
+import authConfig from '../../build/auth.js';
 
 function Auth({ children, session }) {
   if (authConfig.configured === true) {

package/lib/client/auth/{AuthConfigured.jsx → AuthConfigured.js}

@@ -13,30 +13,12 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
 /* eslint-disable react/jsx-props-no-spreading */
 
 import React, { useEffect, useRef } from 'react';
-import {
-  authConfigManager,
-  getSession,
-  SessionProvider,
-  signIn,
-  signOut,
-  useSession,
-} from '@hono/auth-js/react';
-
-import { serializer } from '@lowdefy/helpers';
-
-import rawLowdefyConfig from '../../../build/config.json';
+import { getSession, SessionProvider, signIn, signOut, useSession } from 'next-auth/react';
 
-const lowdefyConfig = serializer.deserialize(rawLowdefyConfig);
-
-// @hono/auth-js/react configures its fetch paths through a module-level
-// manager instead of SessionProvider props.
-if (lowdefyConfig.basePath) {
-  authConfigManager.setConfig({ basePath: `${lowdefyConfig.basePath}/api/auth` });
-}
+import lowdefyConfig from '../../build/config.js';
 
 function Session({ children }) {
   const wasAuthenticated = useRef(false);
@@ -49,8 +31,9 @@ function Session({ children }) {
     }
   }, [status]);
 
-  // If session is passed to SessionProvider from the server-rendered config
-  // we won't have a loading state here, but unauthenticated first loads do.
+  // If session is passed to SessionProvider from getServerSideProps
+  // we won't have a loading state here.
+  // But 404 uses getStaticProps so we have this for 404.
   if (status === 'loading') {
     return '';
   }
@@ -59,8 +42,12 @@ function Session({ children }) {
 
 function AuthConfigured({ authConfig, children, serverSession }) {
   const auth = { authConfig, getSession, signIn, signOut };
+  let basePath = lowdefyConfig.basePath;
+  if (basePath) {
+    basePath = `${basePath}/api/auth`;
+  }
   return (
-    <SessionProvider session={serverSession}>
+    <SessionProvider session={serverSession} basePath={basePath}>
       <Session>
         {(session) => {
           auth.session = session;

package/lib/client/setPageId.js

@@ -14,19 +14,18 @@
   limitations under the License.
 */
 
-// location comes from the custom router (@lowdefy/client/adapters):
-// { pageId, pathname, search }. pageId is null at the root path.
-function setPageId(location, rootConfig) {
-  if (location.pageId === '404') {
+function setPageId(router, rootConfig) {
+  if (router.pathname === `/404`) {
     return { redirect: false, pageId: '404' };
   }
-  if (!location.pageId) {
+  const segments = router.query.pageId;
+  if (!segments || segments.length === 0) {
     if (rootConfig.home.configured === false) {
       return { redirect: true, pageId: rootConfig.home.pageId };
     }
     return { redirect: false, pageId: rootConfig.home.pageId };
   }
-  return { redirect: false, pageId: location.pageId };
+  return { redirect: false, pageId: segments.join('/') };
 }
 
 export default setPageId;

package/lib/client/utils/useMutateCache.js

@@ -16,25 +16,12 @@
 
 import { useSWRConfig } from 'swr';
 
-// Module-level counters that bust usePageConfig SWR keys: reloadVersion moves
-// on config reloads (all pages), navVersion on client-side navigations
-// (dynamic pages only — server-resolved content must re-resolve per
-// navigation, never serve from the SWR cache).
 let reloadVersion = 0;
-let navVersion = 0;
 
 function getReloadVersion() {
   return reloadVersion;
 }
 
-function bumpNavVersion() {
-  navVersion += 1;
-}
-
-function getNavVersion() {
-  return navVersion;
-}
-
 function useMutateCache(basePath) {
   const { mutate } = useSWRConfig();
   return () => {
@@ -47,5 +34,5 @@ function useMutateCache(basePath) {
   };
 }
 
-export { bumpNavVersion, getNavVersion, getReloadVersion };
+export { getReloadVersion };
 export default useMutateCache;

package/lib/client/utils/usePageConfig.js

@@ -13,12 +13,7 @@
 
 import useSWR from 'swr';
 
-import { getNavVersion, getReloadVersion } from './useMutateCache.js';
-
-// URLs whose config is server-resolved per request — learned from the fetched
-// config's dynamic flag, so the first visit caches like a static page and
-// every later navigation refetches.
-const dynamicUrls = new Set();
+import { getReloadVersion } from './useMutateCache.js';
 
 function parseJsModule(text) {
   const fn = new Function('exports', text.replace('export default', 'exports.default ='));
@@ -76,31 +71,23 @@ async function fetchPageConfig(url) {
   data._jsEntries = jsEntries;
   data._dynamicIcons = dynamicIcons;
 
-  if (data?.dynamic === true) {
-    dynamicUrls.add(url);
+  // Bust CSS cache so the browser picks up newly compiled Tailwind classes
+  const cssLink = document.getElementById('tailwind-jit-css');
+  if (cssLink) {
+    cssLink.href = `${basePath}/tailwind-jit.css?v=${Date.now()}`;
   }
 
   return data;
 }
 
 function usePageConfig(pageId, basePath) {
-  // Forward the current query string so server-side Dynamic block resolution
-  // sees the same urlQuery as an initial HTML load. Including it in the SWR
-  // key also caches dynamic pages per query string.
-  const url = `${basePath}/api/page/${pageId}${window.location.search}`;
+  const url = `${basePath}/api/page/${pageId}`;
   // Include reloadVersion in the SWR key so that after a config reload,
-  // previously cached page data is not reused. Dynamic pages also key on the
-  // navigation version — server-resolved content must re-resolve on every
-  // navigation, never serve from the SWR cache. The fetcher receives
-  // [url, ...versions] but only uses url — the versions just bust the cache.
-  const navVersion = dynamicUrls.has(url) ? getNavVersion() : 0;
-  const { data } = useSWR(
-    [url, getReloadVersion(), navVersion],
-    ([fetchUrl]) => fetchPageConfig(fetchUrl),
-    {
-      suspense: true,
-    }
-  );
+  // previously cached page data is not reused. The fetcher receives
+  // [url, version] but only uses url — the version just busts the cache.
+  const { data } = useSWR([url, getReloadVersion()], ([fetchUrl]) => fetchPageConfig(fetchUrl), {
+    suspense: true,
+  });
   return { data };
 }
 

package/lib/server/{createLowdefyContext.js → apiWrapper.js}

@@ -13,35 +13,30 @@
   See the License for the specific language governing permissions and
   limitations under the License.
 */
-
-import fs from 'node:fs';
-import path from 'node:path';
+import fs from 'fs';
+import path from 'path';
 import { createApiContext } from '@lowdefy/api';
 import { getSecretsFromEnv } from '@lowdefy/node-utils';
+import { serializer } from '@lowdefy/helpers';
 import { v4 as uuid } from 'uuid';
 
 import agents from '../../build/plugins/agents.js';
 import appMeta from '../build/appMeta.js';
 import config from '../build/config.js';
+import i18nConfig from '../build/i18n.js';
 import connections from '../../build/plugins/connections.js';
-import createHandleError from './log/createHandleError.js';
 import createLogger from './log/createLogger.js';
 import fileCache from './fileCache.js';
-import getSession from './auth/session.js';
-import i18nConfig from '../build/i18n.js';
+import getServerSession from './auth/getServerSession.js';
+import createHandleError from './log/createHandleError.js';
 import logRequest from './log/logRequest.js';
-import notifications, {
-  interpolateProperties,
-  renderEmail,
-} from '../../build/plugins/notifications.js';
 import operators from '../../build/plugins/operators/server.js';
 import staticJsMap from '../../build/plugins/operators/serverJsMap.js';
-import websockets from '../../build/plugins/websockets.js';
+import getAuthOptions from './auth/getAuthOptions.js';
 
 const secrets = getSecretsFromEnv();
 
-// Dynamic JS map loading for JIT-built pages — the build rewrites
-// serverJsMap.js when a JIT page discovers new _js operators.
+// Dynamic JS map loading for JIT-built pages
 let cachedJsMapMtime = null;
 let cachedJsMap = staticJsMap;
 
@@ -65,54 +60,57 @@ function loadDynamicJsMap(buildDirectory) {
   }
 }
 
-// Builds the per-request lowdefy API context (connections, secrets,
-// operators, logger, session, etc.). Factored out of the /api/* middleware
-// (src/middleware/apiContext.js) so run_request (lib/docs/runRequest.js) can
-// build an identical context outside the Hono middleware chain, to call
-// callRequest directly for agent-driven request execution.
-async function createLowdefyContext({ c }) {
-  const buildDirectory = path.join(process.cwd(), 'build');
-  const jsMap = loadDynamicJsMap(buildDirectory);
+function apiWrapper(handler) {
+  return async function wrappedHandler(req, res) {
+    const buildDirectory = path.join(process.cwd(), 'build');
+    const jsMap = loadDynamicJsMap(buildDirectory);
 
-  const context = {
-    rid: uuid(),
-    agents,
-    appMeta,
-    buildDirectory,
-    configDirectory: process.env.LOWDEFY_DIRECTORY_CONFIG || process.cwd(),
-    config,
-    connections,
-    fileCache,
-    headers: c.req.header(),
-    // The deployment's own origin — detached endpoint calls loop back
-    // through it so the target runs in its own function invocation.
-    origin: new URL(c.req.url).origin,
-    i18n: i18nConfig,
-    interpolateProperties,
-    jsMap,
-    handleError: async (err) => {
-      console.error(err);
-    },
-    logger: console,
-    notifications,
-    operators,
-    renderEmail,
-    req: {
-      url: c.req.path,
-      method: c.req.method,
-      hostname: c.req.header('host'),
-    },
-    secrets,
-    websockets,
+    const context = {
+      // Important to give absolute path so Next can trace build files
+      rid: uuid(),
+      agents,
+      appMeta,
+      buildDirectory,
+      configDirectory: process.env.LOWDEFY_DIRECTORY_CONFIG || process.cwd(),
+      config,
+      connections,
+      fileCache,
+      headers: req?.headers,
+      i18n: i18nConfig,
+      jsMap,
+      handleError: async (err) => {
+        console.error(err);
+      },
+      logger: console,
+      operators,
+      req,
+      res,
+      secrets,
+    };
+    try {
+      context.logger = createLogger();
+      context.handleError = createHandleError({ context });
+      context.authOptions = getAuthOptions(context);
+      if (!req.url.startsWith('/api/auth')) {
+        context.session = await getServerSession(context);
+      }
+      createApiContext(context);
+      logRequest({ context });
+      // Await here so that if handler throws it is caught.
+      const response = await handler({ context, req, res });
+      // TODO: Log response time?
+      return response;
+    } catch (error) {
+      await context.handleError(error);
+      const serialized = serializer.serialize(error);
+      if (serialized?.['~e']) {
+        delete serialized['~e'].received;
+        delete serialized['~e'].stack;
+        delete serialized['~e'].configKey;
+      }
+      res.status(500).json(serialized);
+    }
   };
-  context.logger = createLogger();
-  context.handleError = createHandleError({ context });
-  if (!c.req.path.includes('/api/auth')) {
-    context.session = await getSession(c);
-  }
-  createApiContext(context);
-  logRequest({ context });
-  return context;
 }
 
-export default createLowdefyContext;
+export default apiWrapper;

package/lib/server/auth/{getAuthConfig.js → getAuthOptions.js}

@@ -14,25 +14,22 @@
   limitations under the License.
 */
 
-import { getAuthConfig as getApiAuthConfig } from '@lowdefy/api';
+import { getNextAuthConfig } from '@lowdefy/api';
 import { getSecretsFromEnv } from '@lowdefy/node-utils';
 
 import adapters from '../../../build/plugins/auth/adapters.js';
-import appMeta from '../../build/appMeta.js';
 import authJson from '../../build/auth.js';
 import callbacks from '../../../build/plugins/auth/callbacks.js';
 import events from '../../../build/plugins/auth/events.js';
 import providers from '../../../build/plugins/auth/providers.js';
 
-function getAuthConfig({ logger }) {
-  return getApiAuthConfig({
-    appMeta,
+function getAuthOptions({ logger }) {
+  return getNextAuthConfig({
     authJson,
-    dev: true,
     logger,
     plugins: { adapters, callbacks, events, providers },
     secrets: getSecretsFromEnv(),
   });
 }
 
-export default getAuthConfig;
+export default getAuthOptions;