@lowdefy/server-dev 5.6.0 → 6.0.0

package/src/routes/websocket.js

@@ -0,0 +1,33 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { setPendingWebSocketContext } from '../websocket/devWebSocket.js';
+
+// In dev, Vite owns the HTTP server, so websocket upgrades can't flow through
+// @hono/node-server. The Vite plugin (see vite.config.js) fetches this route
+// with the upgrade request's headers to run the full middleware chain (auth
+// session, apiContext), and this handler hands the built context back to the
+// upgrade handler through a pending-context exchange keyed by request id.
+function websocketHandler(c) {
+  const rid = c.req.header('x-lowdefy-websocket-rid');
+  if (!rid) {
+    return c.json({ message: 'WebSocket upgrade required.' }, 400);
+  }
+  setPendingWebSocketContext(rid, c.get('lowdefyContext'));
+  return c.json({ ok: true });
+}
+
+export default websocketHandler;

package/src/websocket/devWebSocket.js

@@ -0,0 +1,78 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { randomUUID } from 'node:crypto';
+import { createChannelRegistry, createWebSocketConnection } from '@lowdefy/api';
+
+import app from '../app.js';
+
+// One registry per dev server process, shared by all websocket connections.
+const registry = createChannelRegistry();
+
+// Contexts built by the /api/websocket route (full middleware chain) are
+// handed to the upgrade handler through this exchange, keyed by request id.
+const pendingContexts = new Map();
+
+function setPendingWebSocketContext(rid, context) {
+  pendingContexts.set(rid, context);
+}
+
+function takePendingWebSocketContext(rid) {
+  const context = pendingContexts.get(rid);
+  pendingContexts.delete(rid);
+  return context;
+}
+
+// Called by the Vite plugin on an HTTP upgrade for /api/websocket. Runs the
+// dev Hono app for the upgrade request (auth session + apiContext), then
+// completes the websocket handshake and wires the connection to the registry.
+async function handleWebSocketUpgrade({ request, socket, head, wss }) {
+  const rid = randomUUID();
+  const headers = new Headers();
+  Object.entries(request.headers).forEach(([key, value]) => {
+    if (value) {
+      headers.set(key, Array.isArray(value) ? value[0] : value);
+    }
+  });
+  headers.set('x-lowdefy-websocket-rid', rid);
+
+  const url = `http://${request.headers.host ?? 'localhost'}${request.url}`;
+  const response = await app.fetch(new Request(url, { headers }));
+  const context = takePendingWebSocketContext(rid);
+
+  if (!context || response.status !== 200) {
+    socket.end('HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n');
+    return;
+  }
+
+  wss.handleUpgrade(request, socket, head, (ws) => {
+    const connection = createWebSocketConnection(context, {
+      registry,
+      send: (message) => ws.send(message),
+    });
+    ws.on('message', (data) => {
+      connection.handleMessage(data.toString());
+    });
+    ws.on('close', () => {
+      connection.close();
+    });
+    ws.on('error', (error) => {
+      context.logger.debug({ event: 'ws_error' }, String(error?.message ?? error));
+    });
+  });
+}
+
+export { handleWebSocketUpgrade, setPendingWebSocketContext };

package/vite.config.js

@@ -0,0 +1,111 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import fs from 'node:fs';
+import { defineConfig } from 'vite';
+import react from '@vitejs/plugin-react';
+import devServer from '@hono/vite-dev-server';
+import { WebSocketServer } from 'ws';
+
+// basePath from the Lowdefy build — assets and routes are served under it.
+let basePath = '';
+try {
+  const config = JSON.parse(fs.readFileSync('./build/config.json', 'utf8'));
+  basePath = config.basePath ?? '';
+} catch (e) {
+  // No build yet — default base.
+}
+
+// Vite owns the HTTP server in dev, so /api/websocket upgrades are handled
+// here instead of @hono/node-server. The upgrade handler module is loaded
+// through Vite's SSR graph so it shares the Hono app and @lowdefy/api module
+// instances with the dev server routes. Vite's own HMR websocket uses a
+// different path and is untouched.
+function lowdefyWebSocket() {
+  return {
+    name: 'lowdefy-websocket',
+    configureServer(server) {
+      const wss = new WebSocketServer({ noServer: true, maxPayload: 256 * 1024 });
+      server.httpServer?.on('upgrade', async (request, socket, head) => {
+        const { pathname } = new URL(request.url ?? '/', 'http://localhost');
+        if (pathname !== `${basePath}/api/websocket`) {
+          return;
+        }
+        try {
+          const { handleWebSocketUpgrade } = await server.ssrLoadModule(
+            './src/websocket/devWebSocket.js'
+          );
+          await handleWebSocketUpgrade({ request, socket, head, wss });
+        } catch (error) {
+          console.error(error);
+          socket.destroy();
+        }
+      });
+    },
+  };
+}
+
+export default defineConfig(({ mode }) => ({
+  base: `${basePath}/`,
+  plugins: [
+    react(),
+    lowdefyWebSocket(),
+    devServer({
+      entry: './src/app.js',
+      // Vite serves these itself; everything else routes to the Hono app.
+      exclude: [
+        /^\/client\/.+/,
+        /^\/lib\/.+/,
+        /^\/build\/.+/,
+        /^\/@.+$/,
+        /^\/node_modules\/.*/,
+        /\?t=\d+$/,
+        /^\/favicon\.ico$/,
+      ],
+    }),
+  ],
+  define: {
+    // Vite does not replace process.env.NODE_ENV inside dependencies —
+    // plugin and client code branch on it.
+    'process.env.NODE_ENV': JSON.stringify(mode === 'production' ? 'production' : 'development'),
+  },
+  optimizeDeps: {
+    // There is no index.html in the root (the Hono app renders HTML), so the
+    // dependency scanner has nothing to crawl and would discover client deps
+    // lazily at first request — ending in a mid-session "optimized
+    // dependencies changed" full reload. The client entry reaches every
+    // plugin import statically (main.jsx → App → Routing → build/plugins/*),
+    // so a startup crawl discovers the full set. Linked workspace plugins are
+    // intentionally not pre-bundled (Vite default) so local plugin edits stay
+    // live.
+    entries: ['client/main.jsx'],
+  },
+  resolve: {
+    // linked plugin packages (pnpm link: / workspace) must share one React.
+    dedupe: ['react', 'react-dom'],
+  },
+  server: {
+    watch: {
+      // Tailwind scan inputs are rewritten by JIT page builds, and Vite
+      // full-reloads the browser on any watched .html change — killing
+      // in-flight requests on every first page visit. CSS recompilation does
+      // not need these events: globals.css imports build/tailwind-candidates.css,
+      // which the JIT builder touches whenever tailwind content changes (the
+      // sole recompile trigger — see writeGlobalsCss in @lowdefy/build).
+      ignored: ['**/lowdefy-build/tailwind/**'],
+    },
+  },
+}));

package/.eslintrc.yaml

@@ -1 +0,0 @@
-extends: 'plugin:@next/next/core-web-vitals'

package/lib/client/App.js

@@ -1,80 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React, { Suspense } from 'react';
-
-import { useRouter } from 'next/router';
-
-import Head from 'next/head';
-import Link from 'next/link';
-
-import BuildingPage from './BuildingPage.js';
-import Reload from './Reload.js';
-import Page from './Page.js';
-import setPageId from './setPageId.js';
-import { getReloadVersion } from './utils/useMutateCache.js';
-import useRootConfig from './utils/useRootConfig.js';
-
-import actions from '../../build/plugins/actions.js';
-import blockMetas from '../../build/plugins/blockMetas.json';
-import blocks from '../../build/plugins/blocks.js';
-import icons from '../../build/plugins/icons.js';
-import operators from '../../build/plugins/operators/client.js';
-import staticJsMap from '../../build/plugins/operators/clientJsMap.js';
-
-const App = ({ auth, lowdefy }) => {
-  const router = useRouter();
-  const { data: rootConfig } = useRootConfig(router.basePath);
-
-  if (rootConfig?.theme) {
-    lowdefy.theme = rootConfig.theme;
-  }
-
-  const { redirect, pageId } = setPageId(router, rootConfig);
-  if (redirect) {
-    router.push(`/${pageId}`);
-    return '';
-  }
-  return (
-    <Reload basePath={router.basePath} lowdefy={lowdefy}>
-      {(resetContext) => (
-        <Suspense key={`${pageId}_${getReloadVersion()}`} fallback={<BuildingPage />}>
-          <Page
-            auth={auth}
-            Components={{ Head, Link }}
-            config={{
-              rootConfig,
-            }}
-            jsMap={staticJsMap}
-            lowdefy={lowdefy}
-            pageId={pageId}
-            resetContext={resetContext}
-            router={router}
-            types={{
-              actions,
-              blockMetas,
-              blocks,
-              icons,
-              operators,
-            }}
-          />
-        </Suspense>
-      )}
-    </Reload>
-  );
-};
-
-export default App;

package/lib/client/Reload.js

@@ -1,60 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React, { useEffect, useState } from 'react';
-
-import useMutateCache from './utils/useMutateCache.js';
-import waitForRestartedServer from './utils/waitForRestartedServer.js';
-
-const Reload = ({ children, basePath, lowdefy }) => {
-  const [reset, setReset] = useState(false);
-  const [restarting, setRestarting] = useState(false);
-  const mutateCache = useMutateCache(basePath);
-  useEffect(() => {
-    const sse = new EventSource(`${basePath}/api/reload`);
-
-    sse.addEventListener('reload', () => {
-      // add a update delay to prevent rerender before server is shut down for rebuild, ideally we don't want to do this.
-      // TODO: We need to pass a flag when a rebuild will happen so that client does not trigger render.
-      setTimeout(async () => {
-        await mutateCache();
-        if (lowdefy._internal?.initialised) {
-          lowdefy._internal.initialised = false;
-        }
-        // Refresh JIT CSS link to pick up newly compiled Tailwind classes
-        const cssLink = document.getElementById('tailwind-jit-css');
-        if (cssLink) {
-          cssLink.href = `${basePath}/tailwind-jit.css?v=${Date.now()}`;
-        }
-        setReset(true);
-        console.log('Reloaded config.');
-      }, 600);
-    });
-
-    sse.onerror = () => {
-      setRestarting(true);
-      console.log('Rebuilding Lowdefy App.');
-      sse.close();
-      waitForRestartedServer(basePath);
-    };
-    return () => {
-      sse.close();
-    };
-  }, []);
-  return <>{children({ reset, setReset, restarting })}</>;
-};
-
-export default Reload;

package/lib/server/apiWrapper.js

@@ -1,109 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-import fs from 'fs';
-import path from 'path';
-import { createApiContext, redactErrorResponse } from '@lowdefy/api';
-import { getSecretsFromEnv } from '@lowdefy/node-utils';
-import { v4 as uuid } from 'uuid';
-
-import agents from '../../build/plugins/agents.js';
-import appMeta from '../build/appMeta.js';
-import config from '../build/config.js';
-import i18nConfig from '../build/i18n.js';
-import connections from '../../build/plugins/connections.js';
-import createLogger from './log/createLogger.js';
-import fileCache from './fileCache.js';
-import getServerSession from './auth/getServerSession.js';
-import createHandleError from './log/createHandleError.js';
-import logRequest from './log/logRequest.js';
-import operators from '../../build/plugins/operators/server.js';
-import staticJsMap from '../../build/plugins/operators/serverJsMap.js';
-import getAuthOptions from './auth/getAuthOptions.js';
-
-const secrets = getSecretsFromEnv();
-
-// Dynamic JS map loading for JIT-built pages
-let cachedJsMapMtime = null;
-let cachedJsMap = staticJsMap;
-
-function loadDynamicJsMap(buildDirectory) {
-  const jsMapPath = path.join(buildDirectory, 'plugins', 'operators', 'serverJsMap.js');
-  try {
-    const stat = fs.statSync(jsMapPath);
-    if (cachedJsMapMtime && stat.mtimeMs === cachedJsMapMtime) {
-      return cachedJsMap;
-    }
-    cachedJsMapMtime = stat.mtimeMs;
-    // For server-side, we can read and eval the JS file
-    const content = fs.readFileSync(jsMapPath, 'utf8');
-    const fn = new Function('exports', content.replace('export default', 'exports.default ='));
-    const exports = {};
-    fn(exports);
-    cachedJsMap = { ...staticJsMap, ...(exports.default ?? {}) };
-    return cachedJsMap;
-  } catch {
-    return cachedJsMap;
-  }
-}
-
-function apiWrapper(handler) {
-  return async function wrappedHandler(req, res) {
-    const buildDirectory = path.join(process.cwd(), 'build');
-    const jsMap = loadDynamicJsMap(buildDirectory);
-
-    const context = {
-      // Important to give absolute path so Next can trace build files
-      rid: uuid(),
-      agents,
-      appMeta,
-      buildDirectory,
-      configDirectory: process.env.LOWDEFY_DIRECTORY_CONFIG || process.cwd(),
-      config,
-      connections,
-      fileCache,
-      headers: req?.headers,
-      i18n: i18nConfig,
-      jsMap,
-      handleError: async (err) => {
-        console.error(err);
-      },
-      logger: console,
-      operators,
-      req,
-      res,
-      secrets,
-    };
-    try {
-      context.logger = createLogger();
-      context.handleError = createHandleError({ context });
-      context.authOptions = getAuthOptions(context);
-      if (!req.url.startsWith('/api/auth')) {
-        context.session = await getServerSession(context);
-      }
-      createApiContext(context);
-      logRequest({ context });
-      // Await here so that if handler throws it is caught.
-      const response = await handler({ context, req, res });
-      // TODO: Log response time?
-      return response;
-    } catch (error) {
-      await context.handleError(error);
-      res.status(500).json(redactErrorResponse(context, error));
-    }
-  };
-}
-
-export default apiWrapper;

package/lib/server/compileCss.js

@@ -1,39 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import fs from 'fs';
-import path from 'path';
-import postcss from 'postcss';
-import tailwindcssPlugin from '@tailwindcss/postcss';
-
-async function compileCss(buildDirectory) {
-  const serverDirectory = path.resolve(buildDirectory, '..');
-  const inputPath = path.join(buildDirectory, 'globals.css');
-  const outputPath = path.join(serverDirectory, 'public/tailwind-jit.css');
-  if (!fs.existsSync(inputPath)) return;
-  const css = fs.readFileSync(inputPath, 'utf8');
-  const result = await postcss([tailwindcssPlugin()]).process(css, {
-    from: inputPath,
-    to: outputPath,
-  });
-  // The Tailwind PostCSS plugin consumes the @layer order declaration from
-  // globals.css during compilation. Re-inject it as the first line so the
-  // browser establishes the correct cascade priority (antd > base/preflight).
-  const layerOrder = '@layer theme, base, antd, components, utilities;\n';
-  fs.writeFileSync(outputPath, layerOrder + result.css);
-}
-
-export default compileCss;

package/manager/processes/compileCss.mjs

@@ -1,54 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import fs from 'fs';
-import path from 'path';
-import postcss from 'postcss';
-import tailwindcssPlugin from '@tailwindcss/postcss';
-
-function formatDuration(ms) {
-  if (ms < 1000) return `${ms}ms`;
-  return `${(ms / 1000).toFixed(2)}s`;
-}
-
-function compileCss({ directories, logger }) {
-  return async () => {
-    const inputPath = path.join(directories.build, 'globals.css');
-    const outputPath = path.join(directories.server, 'public/tailwind-jit.css');
-    if (!fs.existsSync(inputPath)) return;
-
-    logger.info({ spin: 'start' }, 'Compiling CSS...');
-    const startTime = Date.now();
-
-    const css = fs.readFileSync(inputPath, 'utf8');
-    const result = await postcss([tailwindcssPlugin()]).process(css, {
-      from: inputPath,
-      to: outputPath,
-    });
-    // The Tailwind PostCSS plugin consumes the @layer order declaration from
-    // globals.css during compilation. Re-inject it as the first line so the
-    // browser establishes the correct cascade priority (antd > base/preflight).
-    const layerOrder = '@layer theme, base, antd, components, utilities;\n';
-    fs.writeFileSync(outputPath, layerOrder + result.css);
-
-    logger.info(
-      { spin: 'succeed' },
-      `Compiled CSS in ${formatDuration(Date.now() - startTime)}.`
-    );
-  };
-}
-
-export default compileCss;

package/manager/processes/nextBuild.mjs

@@ -1,50 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { BuildError } from '@lowdefy/errors';
-import { spawnProcess } from '@lowdefy/node-utils';
-
-function formatDuration(ms) {
-  if (ms < 1000) return `${ms}ms`;
-  return `${(ms / 1000).toFixed(2)}s`;
-}
-
-function nextBuild({ bin, logger }) {
-  return async () => {
-    logger.info({ spin: 'start' }, 'Building app...');
-    const startTime = Date.now();
-    const errorLines = [];
-    try {
-      await spawnProcess({
-        command: 'node',
-        args: ['--max-old-space-size=4096', bin.next, 'build'],
-        stdOutLineHandler: (line) => logger.debug(line),
-        stdErrLineHandler: (line) => {
-          logger.debug(line);
-          errorLines.push(line);
-        },
-      });
-    } catch (err) {
-      if (errorLines.length > 0) {
-        errorLines.forEach((line) => logger.error(line));
-      }
-      throw new BuildError('Next.js build failed. See above for details.');
-    }
-    logger.info({ spin: 'succeed' }, `Built app in ${formatDuration(Date.now() - startTime)}.`);
-  };
-}
-
-export default nextBuild;

package/next.config.js

@@ -1,25 +0,0 @@
-const lowdefyConfig = require('./build/config.json');
-const blockPackages = require('./build/blockPackages.json');
-const serverExternalPackages = require('./build/serverExternalPackages.json');
-
-// Transpile @lowdefy/client plus all block plugin packages that may
-// contain CSS imports (e.g., AG Grid themes, loaders, markdown).
-// Built dynamically so custom user plugins are included automatically.
-const transpilePackages = [
-  '@lowdefy/client',
-  '@ant-design/x',
-  '@ant-design/x-markdown',
-  ...blockPackages,
-];
-
-const nextConfig = {
-  basePath: lowdefyConfig.basePath,
-  // reactStrictMode: true,
-  turbopack: {},
-  transpilePackages,
-  serverExternalPackages,
-  compress: false,
-  poweredByHeader: false,
-};
-
-module.exports = nextConfig;