@lowdefy/server-e2e 5.2.0 → 5.4.0

package/lib/build/appMeta.js

@@ -0,0 +1,19 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+import { serializer } from '@lowdefy/helpers';
+import raw from '../../build/appMeta.json';
+
+export default serializer.deserialize(raw);

package/lib/build/theme.js

@@ -0,0 +1,19 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+import { serializer } from '@lowdefy/helpers';
+import raw from '../../build/theme.json';
+
+export default serializer.deserialize(raw);

package/lib/server/apiWrapper.js

@@ -19,6 +19,7 @@ import { createApiContext } from '@lowdefy/api';
 import { serializer } from '@lowdefy/helpers';
 import { v4 as uuid } from 'uuid';
 
+import appMeta from '../build/appMeta.js';
 import config from '../build/config.js';
 import connections from '../../build/plugins/connections.js';
 import createLogger from './log/createLogger.js';
@@ -37,6 +38,7 @@ function apiWrapper(handler) {
     const context = {
       // Important to give absolute path so Next can trace build files
       rid: uuid(),
+      appMeta,
       buildDirectory: path.join(process.cwd(), 'build'),
       configDirectory: process.env.LOWDEFY_DIRECTORY_CONFIG || process.cwd(),
       config,

package/lib/server/serverSidePropsWrapper.js

@@ -18,6 +18,7 @@ import path from 'path';
 import { createApiContext } from '@lowdefy/api';
 import { v4 as uuid } from 'uuid';
 
+import appMeta from '../build/appMeta.js';
 import config from '../build/config.js';
 import createLogger from './log/createLogger.js';
 import fileCache from './fileCache.js';
@@ -30,6 +31,7 @@ function serverSidePropsWrapper(handler) {
     const context = {
       // Important to give absolute path so Next can trace build files
       rid: uuid(),
+      appMeta,
       buildDirectory: path.join(process.cwd(), 'build'),
       configDirectory: process.env.LOWDEFY_DIRECTORY_CONFIG || process.cwd(),
       config,

package/lowdefy/build.mjs

@@ -20,6 +20,7 @@ import yargs from 'yargs';
 import { hideBin } from 'yargs/helpers';
 
 import build from '@lowdefy/build';
+import { BuildError } from '@lowdefy/errors';
 import { createNodeLogger } from '@lowdefy/logger/node';
 import createCustomPluginTypesMap from './createCustomPluginTypesMap.mjs';
 
@@ -39,15 +40,10 @@ async function run() {
 
   const customTypesMap = await createCustomPluginTypesMap({ directories });
 
-  let logger;
-  logger = createNodeLogger({
+  const logger = createNodeLogger({
     name: 'lowdefy_build',
     level: process.env.LOWDEFY_LOG_LEVEL ?? 'info',
     base: { pid: undefined, hostname: undefined },
-    mixin: (context, level) => ({
-      ...context,
-      print: context.print ?? logger.levels.labels[level],
-    }),
   });
 
   await build({
@@ -59,8 +55,7 @@ async function run() {
 }
 
 run().catch((error) => {
-  // If error is already formatted (from error collection), just show the message
-  if (error.isFormatted || error.hideStack) {
+  if (error instanceof BuildError) {
     console.error(error.message);
     process.exit(1);
   }

package/lowdefy/createCustomPluginTypesMap.mjs

@@ -29,6 +29,9 @@ async function getPluginDefinitions({ directories }) {
   if (!lowdefyYaml) {
     lowdefyYaml = await readFile(path.join(directories.config, 'lowdefy.yml'));
   }
+  if (!lowdefyYaml) {
+    return [];
+  }
   const lowdefy = YAML.parse(lowdefyYaml);
   return get(lowdefy, 'plugins', { default: [] });
 }
@@ -36,12 +39,14 @@ async function getPluginDefinitions({ directories }) {
 async function createCustomPluginTypesMap({ directories }) {
   const customTypesMap = {
     actions: {},
+    agents: {},
     auth: {
       adapters: {},
       callbacks: {},
       events: {},
       providers: {},
     },
+    blockMetas: {},
     blocks: {},
     connections: {},
     icons: {},
@@ -57,7 +62,7 @@ async function createCustomPluginTypesMap({ directories }) {
   for (const plugin of pluginDefinitions) {
     const types = require(`${plugin.name}/types`);
     createPluginTypesMap({
-      packageTypes: types,
+      packageTypes: types.default ?? types,
       typesMap: customTypesMap,
       packageName: plugin.name,
       version: plugin.version,

package/lowdefy/createCustomPluginTypesMap.test.mjs

@@ -0,0 +1,115 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { jest } from '@jest/globals';
+
+const pluginYaml = `
+plugins:
+  - name: fake-plugin
+    version: 1.0.0
+`;
+
+const pluginTypesEsm = {
+  __esModule: true,
+  default: {
+    actions: ['FakeAction'],
+    blocks: ['FakeBlock'],
+    blockMetas: {
+      FakeBlock: { category: 'display' },
+    },
+    operators: {
+      client: ['_fakeClientOp'],
+      server: ['_fakeServerOp'],
+    },
+    requests: ['FakeRequest'],
+    icons: {
+      FakeBlock: 'icon-name',
+    },
+  },
+};
+
+jest.unstable_mockModule('@lowdefy/node-utils', () => ({
+  cleanDirectory: jest.fn(),
+  copyFileOrDirectory: jest.fn(),
+  getFileExtension: jest.fn(),
+  getFileSubExtension: jest.fn(),
+  getSecretsFromEnv: jest.fn(),
+  spawnProcess: jest.fn(),
+  readFile: jest.fn(async () => pluginYaml),
+  writeFile: jest.fn(),
+}));
+
+jest.unstable_mockModule('node:module', () => ({
+  createRequire: () => (moduleName) => {
+    if (moduleName === 'fake-plugin/types') {
+      return pluginTypesEsm;
+    }
+    throw new Error(`Unexpected require: ${moduleName}`);
+  },
+}));
+
+beforeEach(() => {
+  jest.clearAllMocks();
+});
+
+test('unwraps ESM default export when loading plugin types', async () => {
+  const { default: createCustomPluginTypesMap } = await import('./createCustomPluginTypesMap.mjs');
+  const result = await createCustomPluginTypesMap({ directories: { config: '/config' } });
+  expect(result.actions).toEqual({
+    FakeAction: { package: 'fake-plugin', originalTypeName: 'FakeAction', version: '1.0.0' },
+  });
+  expect(result.blocks).toEqual({
+    FakeBlock: { package: 'fake-plugin', originalTypeName: 'FakeBlock', version: '1.0.0' },
+  });
+  expect(result.operators.client).toEqual({
+    _fakeClientOp: { package: 'fake-plugin', originalTypeName: '_fakeClientOp', version: '1.0.0' },
+  });
+  expect(result.operators.server).toEqual({
+    _fakeServerOp: { package: 'fake-plugin', originalTypeName: '_fakeServerOp', version: '1.0.0' },
+  });
+  expect(result.requests).toEqual({
+    FakeRequest: { package: 'fake-plugin', originalTypeName: 'FakeRequest', version: '1.0.0' },
+  });
+});
+
+test('populates blockMetas from plugin types', async () => {
+  const { default: createCustomPluginTypesMap } = await import('./createCustomPluginTypesMap.mjs');
+  const result = await createCustomPluginTypesMap({ directories: { config: '/config' } });
+  expect(result.blockMetas).toEqual({
+    FakeBlock: { category: 'display' },
+  });
+});
+
+test('populates icons from plugin types', async () => {
+  const { default: createCustomPluginTypesMap } = await import('./createCustomPluginTypesMap.mjs');
+  const result = await createCustomPluginTypesMap({ directories: { config: '/config' } });
+  expect(result.icons).toEqual({
+    FakeBlock: 'icon-name',
+  });
+});
+
+test('returns empty typesMap when neither lowdefy.yaml nor lowdefy.yml exists', async () => {
+  const { readFile } = await import('@lowdefy/node-utils');
+  readFile.mockResolvedValue(undefined);
+  const { default: createCustomPluginTypesMap } = await import('./createCustomPluginTypesMap.mjs');
+  const result = await createCustomPluginTypesMap({ directories: { config: '/config' } });
+  expect(result.actions).toEqual({});
+  expect(result.blocks).toEqual({});
+  expect(result.blockMetas).toEqual({});
+  expect(result.icons).toEqual({});
+  expect(result.requests).toEqual({});
+  expect(result.operators).toEqual({ client: {}, server: {} });
+});

package/next.config.js

@@ -1,34 +1,20 @@
 const lowdefyConfig = require('./build/config.json');
+const blockPackages = require('./build/blockPackages.json');
+const serverExternalPackages = require('./build/serverExternalPackages.json');
 
 const nextConfig = {
   basePath: lowdefyConfig.basePath,
   reactStrictMode: true,
   transpilePackages: [
     '@lowdefy/client',
-    '@lowdefy/blocks-loaders',
-    '@lowdefy/blocks-markdown',
-    '@lowdefy/blocks-tiptap',
+    '@ant-design/x',
+    '@ant-design/x-markdown',
+    ...blockPackages,
   ],
-  webpack: (config, { isServer }) => {
-    if (!isServer) {
-      config.resolve.fallback = {
-        assert: false,
-        buffer: false,
-        crypto: false,
-        events: false,
-        fs: false,
-        path: false,
-        process: require.resolve('process/browser'),
-        util: false,
-      };
-    }
-    return config;
-  },
+  serverExternalPackages,
+  turbopack: {},
   poweredByHeader: false,
   output: process.env.LOWDEFY_BUILD_OUTPUT_STANDALONE === '1' ? 'standalone' : undefined,
-  eslint: {
-    ignoreDuringBuilds: true,
-  },
 };
 
 module.exports = nextConfig;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/server-e2e",
-  "version": "5.2.0",
+  "version": "5.4.0",
   "license": "Apache-2.0",
   "description": "Lowdefy e2e testing server with cookie-based user injection",
   "homepage": "https://lowdefy.com",
@@ -39,39 +39,43 @@
   ],
   "dependencies": {
     "@ant-design/cssinjs": "2.1.2",
-    "@lowdefy/actions-core": "5.2.0",
-    "@lowdefy/api": "5.2.0",
-    "@lowdefy/block-utils": "5.2.0",
-    "@lowdefy/blocks-antd": "5.2.0",
-    "@lowdefy/blocks-basic": "5.2.0",
-    "@lowdefy/blocks-loaders": "5.2.0",
-    "@lowdefy/blocks-markdown": "5.2.0",
-    "@lowdefy/blocks-tiptap": "5.2.0",
-    "@lowdefy/client": "5.2.0",
-    "@lowdefy/connection-axios-http": "5.2.0",
-    "@lowdefy/connection-mongodb": "5.2.0",
-    "@lowdefy/errors": "5.2.0",
-    "@lowdefy/helpers": "5.2.0",
-    "@lowdefy/layout": "5.2.0",
-    "@lowdefy/logger": "5.2.0",
-    "@lowdefy/node-utils": "5.2.0",
-    "@lowdefy/operators-js": "5.2.0",
-    "@lowdefy/operators-nunjucks": "5.2.0",
-    "@lowdefy/operators-uuid": "5.2.0",
+    "@lowdefy/actions-core": "5.4.0",
+    "@lowdefy/api": "5.4.0",
+    "@lowdefy/block-utils": "5.4.0",
+    "@lowdefy/blocks-antd": "5.4.0",
+    "@lowdefy/blocks-antd-x": "5.4.0",
+    "@lowdefy/blocks-basic": "5.4.0",
+    "@lowdefy/blocks-loaders": "5.4.0",
+    "@lowdefy/blocks-markdown": "5.4.0",
+    "@lowdefy/blocks-tiptap": "5.4.0",
+    "@lowdefy/client": "5.4.0",
+    "@lowdefy/connection-axios-http": "5.4.0",
+    "@lowdefy/connection-mongodb": "5.4.0",
+    "@lowdefy/errors": "5.4.0",
+    "@lowdefy/helpers": "5.4.0",
+    "@lowdefy/layout": "5.4.0",
+    "@lowdefy/logger": "5.4.0",
+    "@lowdefy/node-utils": "5.4.0",
+    "@lowdefy/operators-js": "5.4.0",
+    "@lowdefy/operators-nunjucks": "5.4.0",
+    "@lowdefy/operators-uuid": "5.4.0",
+    "@tailwindcss/postcss": "4.2.1",
     "antd": "6.3.1",
     "dayjs": "1.11.19",
     "next": "16.1.6",
     "pino": "8.16.2",
-    "process": "0.11.10",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-icons": "5.6.0",
+    "tailwindcss": "4.2.1",
     "uuid": "13.0.0"
   },
   "devDependencies": {
-    "@lowdefy/build": "5.2.0",
+    "@jest/globals": "28.1.3",
+    "@lowdefy/build": "5.4.0",
     "@next/eslint-plugin-next": "16.1.6",
     "@tailwindcss/postcss": "4.2.1",
+    "jest": "28.1.3",
     "tailwindcss": "4.2.1",
     "webpack": "5.94.0",
     "yaml": "2.3.4",
@@ -90,6 +94,7 @@
     "dev": "next dev",
     "start": "next start",
     "lint": "next lint",
-    "next": "next"
+    "next": "next",
+    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js"
   }
 }

package/package.original.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/server-e2e",
-  "version": "5.2.0",
+  "version": "5.4.0",
   "license": "Apache-2.0",
   "description": "Lowdefy e2e testing server with cookie-based user injection",
   "homepage": "https://lowdefy.com",
@@ -45,43 +45,48 @@
     "start": "next start",
     "lint": "next lint",
     "next": "next",
+    "test": "node --experimental-vm-modules node_modules/jest/bin/jest.js",
     "prepublishOnly": "pnpm build"
   },
   "dependencies": {
     "@ant-design/cssinjs": "2.1.2",
-    "@lowdefy/actions-core": "5.2.0",
-    "@lowdefy/api": "5.2.0",
-    "@lowdefy/block-utils": "5.2.0",
-    "@lowdefy/blocks-antd": "5.2.0",
-    "@lowdefy/blocks-basic": "5.2.0",
-    "@lowdefy/blocks-loaders": "5.2.0",
-    "@lowdefy/blocks-markdown": "5.2.0",
-    "@lowdefy/blocks-tiptap": "5.2.0",
-    "@lowdefy/client": "5.2.0",
-    "@lowdefy/connection-axios-http": "5.2.0",
-    "@lowdefy/connection-mongodb": "5.2.0",
-    "@lowdefy/errors": "5.2.0",
-    "@lowdefy/helpers": "5.2.0",
-    "@lowdefy/layout": "5.2.0",
-    "@lowdefy/logger": "5.2.0",
-    "@lowdefy/node-utils": "5.2.0",
-    "@lowdefy/operators-js": "5.2.0",
-    "@lowdefy/operators-nunjucks": "5.2.0",
-    "@lowdefy/operators-uuid": "5.2.0",
+    "@lowdefy/actions-core": "5.4.0",
+    "@lowdefy/api": "5.4.0",
+    "@lowdefy/block-utils": "5.4.0",
+    "@lowdefy/blocks-antd": "5.4.0",
+    "@lowdefy/blocks-antd-x": "5.4.0",
+    "@lowdefy/blocks-basic": "5.4.0",
+    "@lowdefy/blocks-loaders": "5.4.0",
+    "@lowdefy/blocks-markdown": "5.4.0",
+    "@lowdefy/blocks-tiptap": "5.4.0",
+    "@lowdefy/client": "5.4.0",
+    "@lowdefy/connection-axios-http": "5.4.0",
+    "@lowdefy/connection-mongodb": "5.4.0",
+    "@lowdefy/errors": "5.4.0",
+    "@lowdefy/helpers": "5.4.0",
+    "@lowdefy/layout": "5.4.0",
+    "@lowdefy/logger": "5.4.0",
+    "@lowdefy/node-utils": "5.4.0",
+    "@lowdefy/operators-js": "5.4.0",
+    "@lowdefy/operators-nunjucks": "5.4.0",
+    "@lowdefy/operators-uuid": "5.4.0",
+    "@tailwindcss/postcss": "4.2.1",
     "antd": "6.3.1",
     "dayjs": "1.11.19",
     "next": "16.1.6",
     "pino": "8.16.2",
-    "process": "0.11.10",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-icons": "5.6.0",
+    "tailwindcss": "4.2.1",
     "uuid": "13.0.0"
   },
   "devDependencies": {
-    "@lowdefy/build": "5.2.0",
+    "@jest/globals": "28.1.3",
+    "@lowdefy/build": "5.4.0",
     "@next/eslint-plugin-next": "16.1.6",
     "@tailwindcss/postcss": "4.2.1",
+    "jest": "28.1.3",
     "tailwindcss": "4.2.1",
     "webpack": "5.94.0",
     "yaml": "2.3.4",

package/pages/404.js

@@ -17,6 +17,7 @@
 import path from 'path';
 import { createApiContext, getPageConfig, getRootConfig } from '@lowdefy/api';
 
+import appMeta from '../lib/build/appMeta.js';
 import config from '../lib/build/config.js';
 import fileCache from '../lib/server/fileCache.js';
 import Page from '../lib/client/Page.js';
@@ -24,6 +25,7 @@ import Page from '../lib/client/Page.js';
 export async function getStaticProps() {
   // Important to give absolute path so Next can trace build files
   const context = {
+    appMeta,
     buildDirectory: path.join(process.cwd(), 'build'),
     config,
     fileCache,

package/pages/{[pageId].js → [[...pageId]].js}

@@ -20,8 +20,42 @@ import serverSidePropsWrapper from '../lib/server/serverSidePropsWrapper.js';
 import Page from '../lib/client/Page.js';
 
 async function getServerSidePropsHandler({ context, nextContext }) {
-  const { pageId } = nextContext.params;
+  const segments = nextContext.params.pageId ?? [];
+  const pageId = segments.join('/');
   const { logger, session } = context;
+
+  if (!pageId) {
+    const rootConfig = await getRootConfig(context);
+    const { home } = rootConfig;
+    if (home.configured === false) {
+      logger.info({ event: 'redirect_to_homepage', pageId: home.pageId });
+      return {
+        redirect: {
+          destination: `/${home.pageId}`,
+          permanent: false,
+        },
+      };
+    }
+    const pageConfig = await getPageConfig(context, { pageId: home.pageId });
+    if (!pageConfig) {
+      logger.info({ event: 'redirect_page_not_found', pageId: home.pageId });
+      return {
+        redirect: {
+          destination: '/404',
+          permanent: false,
+        },
+      };
+    }
+    logger.info({ event: 'page_view', pageId: home.pageId });
+    return {
+      props: {
+        pageConfig,
+        rootConfig,
+        session,
+      },
+    };
+  }
+
   const [rootConfig, pageConfig] = await Promise.all([
     getRootConfig(context),
     getPageConfig(context, { pageId }),

package/pages/_app.js

@@ -23,6 +23,7 @@ import React, { useCallback, useRef } from 'react';
 import dynamic from 'next/dynamic';
 
 import { ErrorBoundary } from '@lowdefy/block-utils';
+import { useDarkMode } from '@lowdefy/client';
 import { StyleProvider } from '@ant-design/cssinjs';
 import { App as AntdApp, ConfigProvider, theme as antdTheme } from 'antd';
 
@@ -32,22 +33,35 @@ import createLogUsage from '../lib/client/createLogUsage.js';
 // Must be in _app due to next specifications.
 import '../build/globals.css';
 
-const algorithmMap = {
-  default: antdTheme.defaultAlgorithm,
-  dark: antdTheme.darkAlgorithm,
-  compact: antdTheme.compactAlgorithm,
-};
-
-function resolveAlgorithm(algorithm) {
-  if (Array.isArray(algorithm)) {
-    return algorithm.map((a) => algorithmMap[a] || antdTheme.defaultAlgorithm);
+function ThemeTokenResolver({ lowdefyRef, children }) {
+  const { token } = antdTheme.useToken();
+  if (!lowdefyRef.current.theme) {
+    lowdefyRef.current.theme = {};
   }
-  return algorithmMap[algorithm] || antdTheme.defaultAlgorithm;
+  lowdefyRef.current.theme._resolvedAntdToken = token;
+  return children;
 }
 
 function App({ Component, pageProps: { session, rootConfig, pageConfig } }) {
   const usageDataRef = useRef({});
   const lowdefyRef = useRef({ eventCallback: createLogUsage({ usageDataRef }) });
+  if (rootConfig?.theme) {
+    lowdefyRef.current.theme = rootConfig.theme;
+  }
+
+  const { algorithm, token, components } = useDarkMode({
+    antd: lowdefyRef.current.theme?.antd,
+    configDarkMode: lowdefyRef.current.theme?.darkMode,
+  });
+
+  const {
+    lightToken: _lightToken,
+    darkToken: _darkToken,
+    lightComponents: _lightComponents,
+    darkComponents: _darkComponents,
+    ...antdConfig
+  } = lowdefyRef.current.theme?.antd ?? {};
+
   const handleError = useCallback((error) => {
     if (lowdefyRef.current?._internal?.handleError) {
       lowdefyRef.current._internal.handleError(error);
@@ -60,28 +74,32 @@ function App({ Component, pageProps: { session, rootConfig, pageConfig } }) {
     <StyleProvider layer>
       <ConfigProvider
         theme={{
-          ...lowdefyRef.current.theme?.antd,
+          ...antdConfig,
+          token,
+          components,
           cssVar: { key: 'lowdefy' },
           hashed: false,
-          algorithm: resolveAlgorithm(lowdefyRef.current.theme?.antd?.algorithm),
+          algorithm,
         }}
       >
         <AntdApp>
-          <ErrorBoundary fullPage onError={handleError}>
-            <Auth session={session}>
-              {(auth) => {
-                usageDataRef.current.user = auth.session?.hashed_id;
-                return (
-                  <Component
-                    auth={auth}
-                    lowdefy={lowdefyRef.current}
-                    rootConfig={rootConfig}
-                    pageConfig={pageConfig}
-                  />
-                );
-              }}
-            </Auth>
-          </ErrorBoundary>
+          <ThemeTokenResolver lowdefyRef={lowdefyRef}>
+            <ErrorBoundary fullPage onError={handleError}>
+              <Auth session={session}>
+                {(auth) => {
+                  usageDataRef.current.user = auth.session?.hashed_id;
+                  return (
+                    <Component
+                      auth={auth}
+                      lowdefy={lowdefyRef.current}
+                      rootConfig={rootConfig}
+                      pageConfig={pageConfig}
+                    />
+                  );
+                }}
+              </Auth>
+            </ErrorBoundary>
+          </ThemeTokenResolver>
         </AntdApp>
       </ConfigProvider>
     </StyleProvider>

package/pages/_document.js

@@ -19,8 +19,34 @@ import Document, { Html, Head, Main, NextScript } from 'next/document';
 
 import appJson from '../lib/build/app.js';
 import lowdefyConfig from '../lib/build/config.js';
+import themeConfig from '../lib/build/theme.js';
 
 const basePath = lowdefyConfig.basePath ?? '';
+const VALID_COLOR_MODES = ['system', 'light', 'dark'];
+const configColorMode = VALID_COLOR_MODES.includes(themeConfig.darkMode)
+  ? themeConfig.darkMode
+  : 'system';
+const darkBg = themeConfig?.antd?.darkToken?.colorBgLayout ?? '#000';
+const lightBg = themeConfig?.antd?.lightToken?.colorBgLayout ?? '';
+
+// Escape characters that could break out of the enclosing <script> tag or
+// terminate a JS string literal. Used to defuse the js/bad-code-sanitization
+// class of injection for values embedded into the pre-hydration inline script.
+const SCRIPT_ESCAPES = {
+  '<': '\\u003C',
+  '>': '\\u003E',
+  '\b': '\\b',
+  '\f': '\\f',
+  '\n': '\\n',
+  '\r': '\\r',
+  '\t': '\\t',
+  '\0': '\\0',
+  '\u2028': '\\u2028',
+  '\u2029': '\\u2029',
+};
+function safeScriptJson(value) {
+  return JSON.stringify(value).replace(/[<>\b\f\n\r\t\0\u2028\u2029]/g, (c) => SCRIPT_ESCAPES[c]);
+}
 
 class LowdefyDocument extends Document {
   render() {
@@ -38,6 +64,21 @@ class LowdefyDocument extends Document {
               __html: `(function(){var s=document.createElement("style");s.id="__lf-layer-order";s.textContent="@layer theme, base, antd, components, utilities;";document.head.prepend(s);new MutationObserver(function(){if(document.head.firstChild!==s)document.head.prepend(s)}).observe(document.head,{childList:true})})();`,
             }}
           />
+          {/* Synchronous pre-hydration background script — prevents mode-mismatch
+              flash on page navigation. Mirrors useDarkMode.js resolution order:
+              configDarkMode → localStorage → prefers-color-scheme. Uses the user's
+              configured colorBgLayout tokens when present (theme.antd.darkToken and
+              theme.antd.lightToken), falling back to #000 in dark and no inline style
+              in light so default behavior is unchanged. */}
+          <script
+            dangerouslySetInnerHTML={{
+              __html: `(function(){var c=${safeScriptJson(configColorMode)};var db=${safeScriptJson(
+                darkBg
+              )};var lb=${safeScriptJson(
+                lightBg
+              )};var d;if(c==="dark")d=true;else if(c==="light")d=false;else{try{var p=localStorage.getItem("lowdefy_darkMode");if(p==="dark")d=true;else if(p==="light")d=false;else d=window.matchMedia("(prefers-color-scheme:dark)").matches}catch(e){d=window.matchMedia("(prefers-color-scheme:dark)").matches}}var bg=d?db:lb;if(bg)document.documentElement.style.backgroundColor=bg})();`,
+            }}
+          />
           <link rel="manifest" href={`${basePath}/manifest.webmanifest`} />
           <link rel="icon" type="image/svg+xml" href={`${basePath}/icon.svg`} />
           <link rel="apple-touch-icon" href={`${basePath}/apple-touch-icon.png`} />

package/pages/api/client-error.js

@@ -22,8 +22,30 @@ async function handler({ context, req, res }) {
   if (req.method !== 'POST') {
     throw new Error('Only POST requests are supported.');
   }
-  const response = await logClientError(context, req.body);
-  res.status(200).json(response);
+
+  const origin = req.headers.origin;
+  if (!origin) {
+    res.status(403).json({ error: 'Forbidden' });
+    return;
+  }
+  try {
+    if (new URL(origin).host !== req.headers.host) {
+      res.status(403).json({ error: 'Forbidden' });
+      return;
+    }
+  } catch {
+    res.status(403).json({ error: 'Forbidden' });
+    return;
+  }
+
+  // Strip received from payload — prod doesn't need it for schema validation
+  if (req.body?.['~e']) {
+    delete req.body['~e'].received;
+  }
+  // eslint-disable-next-line no-unused-vars
+  const { error, ...response } = await logClientError(context, req.body);
+
+  res.status(200).json({ success: true });
 }
 
 export default apiWrapper(handler);

package/pages/api/endpoints/{[endpointId].js → [...endpointId].js}

@@ -22,7 +22,7 @@ async function handler({ context, req, res }) {
   if (req.method !== 'POST') {
     throw new Error('Only POST requests are supported.');
   }
-  const { endpointId } = req.query;
+  const endpointId = req.query.endpointId.join('/');
   const { blockId, payload, pageId } = req.body;
   context.logger.info({ event: 'call_api_endpoint', blockId, endpointId, pageId });
   const response = await callEndpoint(context, { blockId, endpointId, pageId, payload });

package/pages/api/request/{[pageId]/[requestId].js → [...path].js}

@@ -16,13 +16,19 @@
 
 import { callRequest } from '@lowdefy/api';
 
-import apiWrapper from '../../../../lib/server/apiWrapper.js';
+import apiWrapper from '../../../lib/server/apiWrapper.js';
 
 async function handler({ context, req, res }) {
   if (req.method !== 'POST') {
     throw new Error('Only POST requests are supported.');
   }
-  const { pageId, requestId } = req.query;
+  const segments = req.query.path;
+  if (!Array.isArray(segments) || segments.length < 2) {
+    res.status(400).json({ error: 'Invalid request path' });
+    return;
+  }
+  const requestId = segments[segments.length - 1];
+  const pageId = segments.slice(0, -1).join('/');
   const { actionId, blockId, payload } = req.body;
   context.logger.info({ event: 'call_request', pageId, requestId, blockId, actionId });
   const response = await callRequest(context, { blockId, pageId, payload, requestId });

package/pages/api/usage.js

@@ -14,7 +14,6 @@
   limitations under the License.
 */
 
-import appJson from '../../lib/build/app.js';
 import packageJson from '../../package.json';
 import apiWrapper from '../../lib/server/apiWrapper.js';
 
@@ -31,7 +30,7 @@ async function handler({ context, req, res }) {
   return res.status(200).json({
     offline: false,
     data: {
-      git_sha: appJson.git_sha,
+      gitSha: context.appMeta.gitSha,
       host,
       machine,
       timestamp,

package/pages/index.js

@@ -1,58 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { getPageConfig, getRootConfig } from '@lowdefy/api';
-
-import serverSidePropsWrapper from '../lib/server/serverSidePropsWrapper.js';
-import Page from '../lib/client/Page.js';
-
-async function getServerSidePropsHandler({ context }) {
-  const rootConfig = await getRootConfig(context);
-  const { home } = rootConfig;
-  const { logger, session } = context;
-
-  if (home.configured === false) {
-    logger.info({ event: 'redirect_to_homepage', pageId: home.pageId });
-    return {
-      redirect: {
-        destination: `/${home.pageId}`,
-        permanent: false,
-      },
-    };
-  }
-  const pageConfig = await getPageConfig(context, { pageId: home.pageId });
-  if (!pageConfig) {
-    logger.info({ event: 'redirect_page_not_found', pageId: home.pageId });
-    return {
-      redirect: {
-        destination: '/404',
-        permanent: false,
-      },
-    };
-  }
-  logger.info({ event: 'page_view', pageId: home.pageId });
-  return {
-    props: {
-      pageConfig,
-      rootConfig,
-      session,
-    },
-  };
-}
-
-export const getServerSideProps = serverSidePropsWrapper(getServerSidePropsHandler);
-
-export default Page;