@lowdefy/server-dev 5.6.0 → 6.0.0

package/pages/_document.js

@@ -1,109 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React from 'react';
-import Document, { Html, Head, Main, NextScript } from 'next/document';
-
-import appJson from '../lib/build/app.js';
-import lowdefyConfig from '../lib/build/config.js';
-import themeConfig from '../lib/build/theme.js';
-
-const basePath = lowdefyConfig.basePath ?? '';
-const VALID_COLOR_MODES = ['system', 'light', 'dark'];
-const configColorMode = VALID_COLOR_MODES.includes(themeConfig.darkMode)
-  ? themeConfig.darkMode
-  : 'system';
-const darkBg = themeConfig?.antd?.darkToken?.colorBgLayout ?? '#000';
-const lightBg = themeConfig?.antd?.lightToken?.colorBgLayout ?? '';
-
-// Escape characters that could break out of the enclosing <script> tag or
-// terminate a JS string literal. Used to defuse the js/bad-code-sanitization
-// class of injection for values embedded into the pre-hydration inline script.
-const SCRIPT_ESCAPES = {
-  '<': '\\u003C',
-  '>': '\\u003E',
-  '\b': '\\b',
-  '\f': '\\f',
-  '\n': '\\n',
-  '\r': '\\r',
-  '\t': '\\t',
-  '\0': '\\0',
-  '\u2028': '\\u2028',
-  '\u2029': '\\u2029',
-};
-function safeScriptJson(value) {
-  return JSON.stringify(value).replace(/[<>\b\f\n\r\t\0\u2028\u2029]/g, (c) => SCRIPT_ESCAPES[c]);
-}
-
-class LowdefyDocument extends Document {
-  render() {
-    return (
-      <Html className="lowdefy">
-        <Head>
-          {/* Synchronous script that creates the @layer order declaration and keeps
-              it as the first child of <head> via MutationObserver. antd's CSS-in-JS
-              uses prependQueue to inject <style> tags at the top of <head>, which
-              would otherwise make @layer antd the first (lowest priority) layer.
-              MutationObserver fires before paint, so the browser never sees the
-              wrong cascade order. */}
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `(function(){var s=document.createElement("style");s.id="__lf-layer-order";s.textContent="@layer theme, base, antd, components, utilities;";document.head.prepend(s);new MutationObserver(function(){if(document.head.firstChild!==s)document.head.prepend(s)}).observe(document.head,{childList:true})})();`,
-            }}
-          />
-          {/* Synchronous pre-hydration script setting the <html> background and
-              color-scheme — prevents a mode-mismatch flash of the page and of
-              browser chrome (scrollbars, form controls) on page navigation.
-              Mirrors useDarkMode.js resolution order:
-              configDarkMode → localStorage → prefers-color-scheme. Uses the user's
-              configured colorBgLayout tokens when present (theme.antd.darkToken and
-              theme.antd.lightToken), falling back to #000 in dark and no inline style
-              in light so default behavior is unchanged. */}
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `(function(){var c=${safeScriptJson(configColorMode)};var db=${safeScriptJson(
-                darkBg
-              )};var lb=${safeScriptJson(
-                lightBg
-              )};var d;if(c==="dark")d=true;else if(c==="light")d=false;else{try{var p=localStorage.getItem("lowdefy_darkMode");if(p==="dark")d=true;else if(p==="light")d=false;else d=window.matchMedia("(prefers-color-scheme:dark)").matches}catch(e){d=window.matchMedia("(prefers-color-scheme:dark)").matches}}var bg=d?db:lb;document.documentElement.style.colorScheme=d?"dark":"light";if(bg)document.documentElement.style.backgroundColor=bg})();`,
-            }}
-          />
-          <link rel="manifest" href={`${basePath}/manifest.webmanifest`} />
-          <link rel="icon" type="image/svg+xml" href={`${basePath}/icon.svg`} />
-          <link rel="apple-touch-icon" href={`${basePath}/apple-touch-icon.png`} />
-          <link id="tailwind-jit-css" rel="stylesheet" href={`${basePath}/tailwind-jit.css`} />
-          <meta name="viewport" content="width=device-width, initial-scale=1" />
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `/* start of Lowdefy append head */</script>${appJson.html.appendHead}<script>/* end of Lowdefy append head */`,
-            }}
-          />
-        </Head>
-        <body>
-          <Main />
-          <NextScript />
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `/* start of Lowdefy append body */</script>${appJson.html.appendBody}<script>/* end of Lowdefy append body */`,
-            }}
-          />
-        </body>
-      </Html>
-    );
-  }
-}
-
-export default LowdefyDocument;

package/pages/api/agent/[...path].js

@@ -1,86 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { callAgent } from '@lowdefy/api';
-import { translate, type } from '@lowdefy/helpers';
-
-import apiWrapper from '../../../lib/server/apiWrapper.js';
-
-async function handler({ context, req, res }) {
-  const t = (key, values) => translate({ key, values, i18n: context.i18n });
-  if (req.method !== 'POST') {
-    throw new Error(t('agent.runtime.methodNotAllowed'));
-  }
-  const segments = req.query.path;
-  if (!Array.isArray(segments) || segments.length < 2) {
-    res.status(400).json({ error: t('agent.runtime.invalidPath') });
-    return;
-  }
-  const agentId = segments[segments.length - 1];
-  const pageId = segments.slice(0, -1).join('/');
-  context.logger.info({ color: 'gray' }, `Agent: ${pageId} → ${agentId}`);
-  const { conversationId } = req.query;
-  const { messages, urlQuery, sharedState } = req.body;
-  if (!Array.isArray(messages)) {
-    res.status(400).json({ error: t('agent.runtime.messagesMustBeArray') });
-    return;
-  }
-  if (urlQuery != null && (typeof urlQuery !== 'object' || Array.isArray(urlQuery))) {
-    res.status(400).json({ error: t('agent.runtime.urlQueryMustBeObject') });
-    return;
-  }
-  if (sharedState != null && !type.isObject(sharedState)) {
-    res.status(400).json({ error: t('agent.runtime.sharedStateMustBeObject') });
-    return;
-  }
-  const { response: webResponse } = await callAgent(context, {
-    agentId,
-    pageId,
-    messages,
-    conversationId: conversationId ?? undefined,
-    sharedState: sharedState ?? undefined,
-    urlQuery: urlQuery ?? undefined,
-  });
-
-  // Stream the Web Response body to the Next.js response
-  res.setHeader('Content-Type', 'text/event-stream');
-  res.setHeader('Cache-Control', 'no-cache');
-  res.setHeader('Connection', 'keep-alive');
-  res.setHeader('Content-Encoding', 'none');
-  res.setHeader('Transfer-Encoding', 'chunked');
-
-  const reader = webResponse.body.getReader();
-  const decoder = new TextDecoder();
-  let done = false;
-  while (!done) {
-    const { value, done: readerDone } = await reader.read();
-    done = readerDone;
-    if (value) {
-      res.write(decoder.decode(value, { stream: true }));
-    }
-  }
-  res.end();
-}
-
-export const config = {
-  api: {
-    bodyParser: {
-      sizeLimit: '10mb',
-    },
-  },
-};
-
-export default apiWrapper(handler);

package/pages/api/auth/[...nextauth].js

@@ -1,48 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import NextAuth from 'next-auth';
-
-import apiWrapper from '../../../lib/server/apiWrapper.js';
-import authJson from '../../../lib/build/auth.js';
-import getMockSession from '../../../lib/server/auth/getMockSession.js';
-
-async function handler({ context, req, res }) {
-  if (authJson.configured !== true) {
-    return res.status(404).json({
-      message: 'Auth not configured',
-    });
-  }
-
-  // Required for emails in corporate networks, see:
-  // https://next-auth.js.org/tutorials/avoid-corporate-link-checking-email-provider
-  if (req.method === 'HEAD') {
-    return res.status(200).end();
-  }
-
-  // Return mock session for session requests (dev server only)
-  const nextauthPath = req.query.nextauth ?? [];
-  if (nextauthPath[0] === 'session') {
-    const mockSession = await getMockSession();
-    if (mockSession) {
-      return res.status(200).json(mockSession);
-    }
-  }
-
-  return NextAuth(req, res, context.authOptions);
-}
-
-export default apiWrapper(handler);

package/pages/api/client-error.js

@@ -1,45 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { logClientError } from '@lowdefy/api';
-
-import apiWrapper from '../../lib/server/apiWrapper.js';
-
-async function handler({ context, req, res }) {
-  if (req.method !== 'POST') {
-    throw new Error('Only POST requests are supported.');
-  }
-
-  const origin = req.headers.origin;
-  if (!origin) {
-    res.status(403).json({ error: 'Forbidden' });
-    return;
-  }
-  try {
-    if (new URL(origin).host !== req.headers.host) {
-      res.status(403).json({ error: 'Forbidden' });
-      return;
-    }
-  } catch {
-    res.status(403).json({ error: 'Forbidden' });
-    return;
-  }
-
-  const { error, ...response } = await logClientError(context, req.body);
-  res.status(200).json(response);
-}
-
-export default apiWrapper(handler);

package/pages/api/js/[env].js

@@ -1,42 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import fs from 'fs';
-import path from 'path';
-
-async function handler(req, res) {
-  const { env } = req.query;
-
-  if (env !== 'client' && env !== 'server') {
-    res.status(400).send('Invalid env parameter. Use "client" or "server".');
-    return;
-  }
-
-  const fileName = env === 'client' ? 'clientJsMap.js' : 'serverJsMap.js';
-  const filePath = path.join(process.cwd(), 'build', 'plugins', 'operators', fileName);
-
-  try {
-    const content = fs.readFileSync(filePath, 'utf8');
-    res.setHeader('Content-Type', 'application/javascript');
-    res.status(200).send(content);
-  } catch {
-    // Return empty default export if file doesn't exist yet
-    res.setHeader('Content-Type', 'application/javascript');
-    res.status(200).send('export default {};');
-  }
-}
-
-export default handler;

package/pages/api/page/[...pageId].js

@@ -1,74 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { getPageConfig } from '@lowdefy/api';
-
-import apiWrapper from '../../../lib/server/apiWrapper.js';
-import buildPageIfNeeded from '../../../lib/server/jitPageBuilder.js';
-
-async function handler({ context, req, res }) {
-  const pageId = req.query.pageId.join('/');
-
-  // Attempt JIT build if page not yet compiled
-  let buildResult;
-  try {
-    buildResult = await buildPageIfNeeded({
-      pageId,
-      buildDirectory: context.buildDirectory,
-      configDirectory: context.configDirectory,
-    });
-  } catch (error) {
-    const rawErrors = error.buildErrors ?? [error];
-    const errors = [];
-    for (const err of rawErrors) {
-      await context.handleError(err);
-      errors.push({
-        type: err.name ?? 'Error',
-        message: err.message,
-        source: err.source ?? null,
-        stack: err.stack ?? null,
-      });
-    }
-    res.status(500).json({
-      buildError: true,
-      errors,
-      // Keep top-level message/source for backward compatibility
-      message: error.message,
-      source: error.source ?? null,
-    });
-    return;
-  }
-
-  if (buildResult && buildResult.installing) {
-    res.status(200).json({
-      installing: true,
-      packages: buildResult.packages,
-    });
-    return;
-  }
-
-  const pageConfig = await getPageConfig(context, { pageId });
-  if (pageConfig === null) {
-    res.status(404).send('Page not found.');
-  } else {
-    if (buildResult?.warnings?.length > 0) {
-      pageConfig._warnings = buildResult.warnings;
-    }
-    res.status(200).json(pageConfig);
-  }
-}
-
-export default apiWrapper(handler);

package/pages/api/reload.js

@@ -1,53 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import chokidar from 'chokidar';
-
-const handler = async (req, res) => {
-  res.setHeader('Content-Type', 'text/event-stream;charset=utf-8');
-  res.setHeader('Cache-Control', 'no-cache, no-transform');
-  res.setHeader('X-Accel-Buffering', 'no');
-  res.setHeader('Connection', 'keep-alive');
-
-  const watcher = chokidar.watch(['./build/reload'], {
-    persistent: true,
-    ignoreInitial: true,
-  });
-
-  const reload = () => {
-    try {
-      res.write(`event: reload\ndata: ${JSON.stringify({})}\n\n`);
-    } catch (e) {
-      console.error(e);
-    }
-  };
-  watcher.on('add', () => reload());
-  watcher.on('change', () => reload());
-  // Do not reload on unlink — cleanBuildDirectory deletes build/reload during
-  // skeleton rebuilds, which would send a premature SSE event before the new
-  // build artifacts are written. The real reload comes via add/change when
-  // reloadClients() creates the file after the build completes.
-
-  // TODO: This isn't working.
-  req.on('close', () => {
-    console.log('req closed');
-    watcher.close().then(() => {
-      console.log('watcher closed');
-    });
-  });
-};
-
-export default handler;

package/pages/api/request/[...path].js

@@ -1,41 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { callRequest } from '@lowdefy/api';
-
-import apiWrapper from '../../../lib/server/apiWrapper.js';
-
-async function handler({ context, req, res }) {
-  if (req.method !== 'POST') {
-    throw new Error('Only POST requests are supported.');
-  }
-  const segments = req.query.path;
-  if (!Array.isArray(segments) || segments.length < 2) {
-    res.status(400).json({ error: 'Invalid request path' });
-    return;
-  }
-  const requestId = segments[segments.length - 1];
-  const pageId = segments.slice(0, -1).join('/');
-  const { actionId, blockId, payload } = req.body;
-  context.logger.info(
-    { color: 'gray' },
-    `Request: ${pageId} · ${blockId} · ${actionId} → ${requestId}`
-  );
-  const response = await callRequest(context, { blockId, pageId, payload, requestId });
-  res.status(200).json(response);
-}
-
-export default apiWrapper(handler);