@lowdefy/server-e2e 0.0.0-experimental-20260720072521 → 0.0.0-experimental-20260720135014

package/{src/routes → pages/api}/usage.js

@@ -14,23 +14,20 @@
   limitations under the License.
 */
 
-import fs from 'node:fs';
-import path from 'node:path';
+import packageJson from '../../package.json';
+import apiWrapper from '../../lib/server/apiWrapper.js';
 
-const packageJson = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'package.json'), 'utf8'));
-
-async function usageHandler(c) {
-  if (c.req.method !== 'POST') {
+async function handler({ context, req, res }) {
+  if (req.method !== 'POST') {
     throw new Error('Only POST requests are supported.');
   }
-  const context = c.get('lowdefyContext');
-  const { user, machine } = await c.req.json();
-  const host = c.req.header('host');
+  const { user, machine } = req.body;
+  const host = req.headers.host;
   context.logger.info({ event: 'log_usage', user, machine });
 
   const timestamp = Date.now();
 
-  return c.json({
+  return res.status(200).json({
     offline: false,
     data: {
       gitSha: context.appMeta.gitSha,
@@ -43,4 +40,4 @@ async function usageHandler(c) {
   });
 }
 
-export default usageHandler;
+export default apiWrapper(handler);

package/client/Page.jsx

@@ -1,93 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React, { useEffect, useRef, useState } from 'react';
-
-import Client from '@lowdefy/client';
-import createRouter from '@lowdefy/client/adapters/createRouter.js';
-import createLinkComponent from '@lowdefy/client/adapters/Link.js';
-import Head from '@lowdefy/client/adapters/Head.js';
-
-import actions from '../build/plugins/actions.js';
-import blockMetas from '../build/plugins/blockMetas.json';
-import blocks from '../build/plugins/blocks.js';
-import icons from '../build/plugins/icons.js';
-import operators from '../build/plugins/operators/client.js';
-import jsMap from '../build/plugins/operators/clientJsMap.js';
-
-// Replaces lib/client/Page.js. The first page renders from the config
-// embedded in the HTML; SPA navigations fetch /api/page/* and swap pageConfig.
-function Page({ auth, config, lowdefy }) {
-  const [pageConfig, setPageConfig] = useState(config.pageConfig);
-
-  const routerRef = useRef(null);
-  if (!routerRef.current) {
-    const router = createRouter({ basePath: config.basePath ?? '', window });
-    routerRef.current = {
-      router,
-      Link: createLinkComponent({ router }),
-    };
-  }
-  const { router, Link } = routerRef.current;
-
-  useEffect(() => {
-    const unsubscribe = router.subscribe(async ({ pageId }) => {
-      const targetPageId = pageId ?? config.rootConfig.home.pageId;
-      try {
-        const res = await fetch(`${router.basePath}/api/page/${targetPageId}`);
-        if (!res.ok) {
-          if (targetPageId !== '404') {
-            router.replace({ pathname: '/404' });
-          }
-          return;
-        }
-        const { pageConfig: nextPageConfig } = await res.json();
-        setPageConfig(nextPageConfig);
-      } catch (error) {
-        // Network failure on SPA navigation — fall back to a full page load.
-        window.location.assign(
-          `${router.basePath}/${targetPageId === config.rootConfig.home.pageId ? '' : targetPageId}`
-        );
-      }
-    });
-    return unsubscribe;
-  }, []);
-
-  return (
-    <Client
-      auth={auth}
-      Components={{ Head, Link }}
-      config={{
-        pageConfig,
-        rootConfig: config.rootConfig,
-      }}
-      jsMap={jsMap}
-      lowdefy={lowdefy}
-      router={router}
-      stage="e2e"
-      types={{
-        actions,
-        blockMetas,
-        blocks,
-        icons,
-        operators,
-      }}
-      window={window}
-    />
-  );
-}
-
-export default Page;

package/client/main.jsx

@@ -1,39 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// CSS layer order — MUST be the first CSS import. This locks the cascade
-// priority (antd > base/preflight) before antd's StyleProvider injects
-// @layer antd {} at runtime.
-import '../build/layer-order.css';
-
-import React from 'react';
-import { createRoot } from 'react-dom/client';
-
-import App from './App.jsx';
-
-import '../build/globals.css';
-
-const config = JSON.parse(document.getElementById('__LOWDEFY_CONFIG__').textContent);
-const container = document.getElementById('root');
-
-// Keep one React root across Vite HMR updates — re-running createRoot on a
-// container that already has a root is an error.
-const root = import.meta.hot?.data.root ?? createRoot(container);
-if (import.meta.hot) {
-  import.meta.hot.data.root = root;
-}
-
-root.render(<App config={config} />);

package/lib/build/i18n.js

@@ -1,26 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// Build artifacts are read from disk because the Hono server runs as
-// unbundled Node.js ESM — JSON imports would need import attributes, and
-// client code imports the build JSON directly through Vite instead.
-import fs from 'node:fs';
-import path from 'node:path';
-import { serializer } from '@lowdefy/helpers';
-
-const raw = JSON.parse(fs.readFileSync(path.join(process.cwd(), 'build/i18n.json'), 'utf8'));
-
-export default serializer.deserialize(raw);

package/lib/client/auth/Auth.jsx

@@ -1,69 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { serializer } from '@lowdefy/helpers';
-
-import rawAuthConfig from '../../../build/auth.json';
-
-const authConfig = serializer.deserialize(rawAuthConfig);
-
-function e2eNotSupported() {
-  throw new Error('Sign-in and sign-out are not supported in e2e testing.');
-}
-
-function Auth({ children, user }) {
-  const auth = {
-    authConfig,
-    user,
-    // Matches the BetterAuth client contract: { data, error }.
-    getSession: async () => {
-      const res = await fetch('/api/auth/session');
-      if (res.ok) {
-        return { data: await res.json(), error: null };
-      }
-      return { data: null, error: null };
-    },
-    getResolvedUser: async () => {
-      const res = await fetch('/api/user');
-      if (res.ok) {
-        return res.json();
-      }
-      return { user: null };
-    },
-    acceptInvitation: e2eNotSupported,
-    addPasskey: e2eNotSupported,
-    changePassword: e2eNotSupported,
-    deletePasskey: e2eNotSupported,
-    requestPasswordReset: e2eNotSupported,
-    resetPassword: e2eNotSupported,
-    revokeOtherSessions: e2eNotSupported,
-    sendVerificationEmail: e2eNotSupported,
-    setActiveOrganization: e2eNotSupported,
-    signInEmail: e2eNotSupported,
-    signInMagicLink: e2eNotSupported,
-    signInOauth2: e2eNotSupported,
-    signInSocial: e2eNotSupported,
-    signOut: e2eNotSupported,
-    signUpEmail: e2eNotSupported,
-    twoFactorDisable: e2eNotSupported,
-    twoFactorEnable: e2eNotSupported,
-    twoFactorVerifyBackupCode: e2eNotSupported,
-    twoFactorVerifyTotp: e2eNotSupported,
-  };
-  return children(auth);
-}
-
-export default Auth;

package/postcss.config.cjs

@@ -1 +0,0 @@
-module.exports = { plugins: { '@tailwindcss/postcss': {} } };

package/src/app.js

@@ -1,80 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { Hono } from 'hono';
-import { compress } from 'hono/compress';
-import { serveStatic } from '@hono/node-server/serve-static';
-
-import apiContext from './middleware/apiContext.js';
-import apiPageHandler from './routes/apiPage.js';
-import clientErrorHandler from './routes/clientError.js';
-import createErrorHandler from './middleware/errorHandler.js';
-import createLogger from '../lib/server/log/createLogger.js';
-import endpointsHandler from './routes/endpoints.js';
-import lowdefyConfig from '../lib/build/config.js';
-import renderPage from './html/renderPage.js';
-import requestHandler from './routes/request.js';
-import sessionMockHandler from './routes/sessionMock.js';
-import usageHandler from './routes/usage.js';
-import userHandler from './routes/user.js';
-import websocketHandler from './routes/websocket.js';
-
-const basePath = lowdefyConfig.basePath ?? '';
-
-function createApp() {
-  const app = basePath ? new Hono().basePath(basePath) : new Hono();
-  const logger = createLogger({ server: 'lowdefy' });
-
-  app.use('*', async (c, next) => {
-    if (c.req.path.includes('/api/websocket')) {
-      return next();
-    }
-    return compress()(c, next);
-  });
-
-  app.use('/api/*', apiContext());
-  // Mock session endpoint — reads the lowdefy_e2e_user cookie; also the
-  // e2e harness health check (e2e-utils polls /api/auth/session).
-  app.get('/api/auth/session', sessionMockHandler);
-  app.all('/api/request/*', requestHandler);
-  app.all('/api/endpoints/*', endpointsHandler);
-  app.all('/api/client-error', clientErrorHandler);
-  app.all('/api/usage', usageHandler);
-  app.get('/api/websocket', websocketHandler);
-  app.get('/api/page/*', apiPageHandler);
-  app.get('/api/user', userHandler);
-
-  // Vite build output (includes public/ via Vite's publicDir copy). Falls
-  // through to the page routes when no file matches.
-  app.use(
-    '/*',
-    serveStatic({
-      root: './dist/client',
-      rewriteRequestPath: basePath ? (path) => path.replace(basePath, '') : undefined,
-    })
-  );
-
-  app.use('/*', apiContext());
-  app.get('/', (c) => renderPage(c, { pageId: '' }));
-  app.get('/404', (c) => renderPage(c, { pageId: '404', status: 404 }));
-  app.get('/:rest{.+}', (c) => renderPage(c, { pageId: c.req.param('rest') }));
-
-  app.onError(createErrorHandler({ basePath, logger }));
-
-  return app;
-}
-
-export default createApp;

package/src/html/getAssets.js

@@ -1,45 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import fs from 'node:fs';
-import path from 'node:path';
-
-// The Vite manifest is read once at startup — deploys start a new server
-// process after `vite build` completes, so assets never change at runtime.
-// In-place deploys must build before restarting (documented).
-let assets = null;
-
-function getAssets() {
-  if (assets) {
-    return assets;
-  }
-  const manifestPath = path.join(process.cwd(), 'dist/client/.vite/manifest.json');
-  const manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8'));
-  const entry = manifest['client/main.jsx'];
-  if (!entry) {
-    throw new Error(
-      'Vite manifest has no "client/main.jsx" entry. Run the client build before starting the server.'
-    );
-  }
-  assets = {
-    js: entry.file,
-    css: entry.css ?? [],
-    imports: (entry.imports ?? []).map((key) => manifest[key]?.file).filter(Boolean),
-  };
-  return assets;
-}
-
-export default getAssets;

package/src/html/renderPage.js

@@ -1,78 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { getPageConfig, getRootConfig } from '@lowdefy/api';
-
-import appJson from '../../lib/build/app.js';
-import lowdefyConfig from '../../lib/build/config.js';
-import themeConfig from '../../lib/build/theme.js';
-import getAssets from './getAssets.js';
-import template from './template.js';
-
-const basePath = lowdefyConfig.basePath ?? '';
-
-// Replaces pages/[[...pageId]].js getServerSideProps and pages/404.js
-// getStaticProps. The home redirect logic lives here, not at the route level.
-async function renderPage(c, { pageId, status = 200 }) {
-  const context = c.get('lowdefyContext');
-  const { logger, user } = context;
-
-  let resolvedPageId = pageId;
-  const rootConfig = await getRootConfig(context);
-
-  if (!resolvedPageId) {
-    const { home } = rootConfig;
-    if (home.configured === false) {
-      logger.info({ event: 'redirect_to_homepage', pageId: home.pageId });
-      return c.redirect(`${basePath}/${home.pageId}`, 302);
-    }
-    resolvedPageId = home.pageId;
-  }
-
-  const result = await getPageConfig(context, { pageId: resolvedPageId });
-
-  if (result.status !== 'ok') {
-    if (resolvedPageId === '404') {
-      // No 404 page in the build — return a plain 404 rather than redirecting in a loop.
-      return c.text('Page not found.', 404);
-    }
-    logger.info({ event: 'redirect_page_not_found', pageId: resolvedPageId });
-    return c.redirect(`${basePath}/404`, 302);
-  }
-
-  const { pageConfig } = result;
-
-  logger.info({ event: 'page_view', pageId: resolvedPageId });
-
-  const html = template({
-    appendBody: appJson.html?.appendBody ?? '',
-    appendHead: appJson.html?.appendHead ?? '',
-    assets: getAssets(),
-    basePath,
-    config: {
-      basePath,
-      pageConfig,
-      rootConfig,
-      user: user ?? null,
-    },
-    themeConfig,
-    title: pageConfig.properties?.title ?? resolvedPageId,
-  });
-
-  return c.html(html, status);
-}
-
-export default renderPage;

package/src/html/template.js

@@ -1,94 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import safeScriptJson from '../lib/safeScriptJson.js';
-
-const HTML_ESCAPES = { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' };
-
-function escapeHtml(value) {
-  return String(value).replace(/[&<>"]/g, (c) => HTML_ESCAPES[c]);
-}
-
-// Synchronous script that creates the @layer order declaration and keeps it as
-// the first child of <head> via MutationObserver. antd's CSS-in-JS uses
-// prependQueue to inject <style> tags at the top of <head>, which would
-// otherwise make @layer antd the first (lowest priority) layer.
-// MutationObserver fires before paint, so the browser never sees the wrong
-// cascade order.
-const layerOrderScript = `(function(){var s=document.createElement("style");s.id="__lf-layer-order";s.textContent="@layer theme, base, antd, components, utilities;";document.head.prepend(s);new MutationObserver(function(){if(document.head.firstChild!==s)document.head.prepend(s)}).observe(document.head,{childList:true})})();`;
-
-// Synchronous pre-hydration background script — prevents mode-mismatch flash
-// on page load. Mirrors useDarkMode.js resolution order:
-// configDarkMode → localStorage → prefers-color-scheme.
-function darkModeScript({ configColorMode, darkBg, lightBg }) {
-  return `(function(){var c=${safeScriptJson(configColorMode)};var db=${safeScriptJson(
-    darkBg
-  )};var lb=${safeScriptJson(
-    lightBg
-  )};var d;if(c==="dark")d=true;else if(c==="light")d=false;else{try{var p=localStorage.getItem("lowdefy_darkMode");if(p==="dark")d=true;else if(p==="light")d=false;else d=window.matchMedia("(prefers-color-scheme:dark)").matches}catch(e){d=window.matchMedia("(prefers-color-scheme:dark)").matches}}var bg=d?db:lb;if(bg)document.documentElement.style.backgroundColor=bg})();`;
-}
-
-function template({
-  appendBody = '',
-  appendHead = '',
-  assets,
-  basePath = '',
-  config,
-  themeConfig = {},
-  title,
-}) {
-  const VALID_COLOR_MODES = ['system', 'light', 'dark'];
-  const configColorMode = VALID_COLOR_MODES.includes(themeConfig.darkMode)
-    ? themeConfig.darkMode
-    : 'system';
-  const darkBg = themeConfig?.antd?.darkToken?.colorBgLayout ?? '#000';
-  const lightBg = themeConfig?.antd?.lightToken?.colorBgLayout ?? '';
-
-  const cssLinks = assets.css
-    .map((file) => `<link rel="stylesheet" href="${basePath}/${file}" />`)
-    .join('\n    ');
-  const modulePreloads = assets.imports
-    .map((file) => `<link rel="modulepreload" href="${basePath}/${file}" />`)
-    .join('\n    ');
-
-  // appendHead and appendBody are intentionally raw HTML from app config
-  // (analytics snippets, font links) — they must not be escaped. The config
-  // JSON and pre-hydration interpolations go through safeScriptJson.
-  return `<!DOCTYPE html>
-<html class="lowdefy">
-  <head>
-    <meta charset="utf-8" />
-    <script>${layerOrderScript}</script>
-    <script>${darkModeScript({ configColorMode, darkBg, lightBg })}</script>
-    <link rel="manifest" href="${basePath}/manifest.webmanifest" />
-    <link rel="icon" type="image/svg+xml" href="${basePath}/icon.svg" />
-    <link rel="apple-touch-icon" href="${basePath}/apple-touch-icon.png" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    ${title ? `<title>${escapeHtml(title)}</title>` : ''}
-    ${cssLinks}
-    ${modulePreloads}
-    ${appendHead}
-  </head>
-  <body>
-    <div id="root"></div>
-    <script id="__LOWDEFY_CONFIG__" type="application/json">${safeScriptJson(config)}</script>
-    ${appendBody}
-    <script type="module" src="${basePath}/${assets.js}"></script>
-  </body>
-</html>`;
-}
-
-export default template;

package/src/index.js

@@ -1,40 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { serve } from '@hono/node-server';
-import { WebSocketServer } from 'ws';
-
-import createApp from './app.js';
-import createLogger from '../lib/server/log/createLogger.js';
-
-const app = createApp();
-const logger = createLogger();
-const port = Number(process.env.PORT ?? 3000);
-
-const wss = new WebSocketServer({ noServer: true, maxPayload: 256 * 1024 });
-
-const server = serve({ fetch: app.fetch, port, websocket: { server: wss } }, (info) => {
-  logger.info(`Lowdefy e2e server listening on http://localhost:${info.port}`);
-});
-
-function shutdown() {
-  server.close(() => {
-    process.exit(0);
-  });
-}
-
-process.on('SIGINT', shutdown);
-process.on('SIGTERM', shutdown);

package/src/lib/safeScriptJson.js

@@ -1,38 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// Escape characters that could break out of the enclosing <script> tag or
-// terminate a JS string literal. Used to defuse the js/bad-code-sanitization
-// class of injection for values embedded into inline scripts and the
-// application/json config script.
-const SCRIPT_ESCAPES = {
-  '<': '\\u003C',
-  '>': '\\u003E',
-  '\b': '\\b',
-  '\f': '\\f',
-  '\n': '\\n',
-  '\r': '\\r',
-  '\t': '\\t',
-  '\0': '\\0',
-  '\u2028': '\\u2028',
-  '\u2029': '\\u2029',
-};
-
-function safeScriptJson(value) {
-  return JSON.stringify(value).replace(/[<>\b\f\n\r\t\0\u2028\u2029]/g, (c) => SCRIPT_ESCAPES[c]);
-}
-
-export default safeScriptJson;