@lowdefy/server-e2e 6.0.0 → 7.0.0

package/client/App.jsx

@@ -17,11 +17,13 @@
 import React, { useCallback, useRef } from 'react';
 
 import { ErrorBoundary } from '@lowdefy/block-utils';
-import { useDarkMode, useLocale } from '@lowdefy/client';
+import { IconProvider, useDarkMode, useLocale } from '@lowdefy/client';
 import { StyleProvider } from '@ant-design/cssinjs';
 import { App as AntdApp, theme as antdTheme } from 'antd';
 import { XProvider } from '@ant-design/x';
 
+import { appStorageKey } from '@lowdefy/helpers';
+
 import antdLocaleLoaders from '../build/i18n/antdLocales.js';
 import antdXLocaleLoaders from '../build/i18n/antdXLocales.js';
 import dayjsLocaleMap from '../build/i18n/dayjsLocales.js';
@@ -39,7 +41,7 @@ function ThemeTokenResolver({ lowdefyRef, children }) {
 }
 
 function App({ config }) {
-  const { rootConfig, session } = config;
+  const { rootConfig, user } = config;
 
   const usageDataRef = useRef({});
   const lowdefyRef = useRef({ eventCallback: createLogUsage({ usageDataRef }) });
@@ -47,9 +49,12 @@ function App({ config }) {
     lowdefyRef.current.theme = rootConfig.theme;
   }
 
+  // Device preferences, kept per app (the same key the HTML template's dark mode script reads).
+  const storageScope = { basePath: config.basePath ?? '', slug: rootConfig.lowdefyApp?.slug };
   const { algorithm, token, components } = useDarkMode({
     antd: lowdefyRef.current.theme?.antd,
     configDarkMode: lowdefyRef.current.theme?.darkMode,
+    storageKey: appStorageKey({ ...storageScope, name: 'lowdefy_darkMode' }),
   });
 
   const {
@@ -61,6 +66,7 @@ function App({ config }) {
     antdLocaleLoaders,
     antdXLocaleLoaders,
     dayjsLocaleMap,
+    storageKey: appStorageKey({ ...storageScope, name: 'lowdefy_locale' }),
   });
 
   if (rootConfig?.i18n?.defaultLocale) {
@@ -108,18 +114,22 @@ function App({ config }) {
           algorithm,
         }}
       >
-        <AntdApp>
-          <ThemeTokenResolver lowdefyRef={lowdefyRef}>
-            <ErrorBoundary fullPage onError={handleError}>
-              <Auth session={session}>
-                {(auth) => {
-                  usageDataRef.current.user = auth.session?.hashed_id;
-                  return <Page auth={auth} config={config} lowdefy={lowdefyRef.current} />;
-                }}
-              </Auth>
-            </ErrorBoundary>
-          </ThemeTokenResolver>
-        </AntdApp>
+        {/* Message, Notification and ConfirmModal render in the App.useApp()
+            holders here, above the Client's icon provider. */}
+        <IconProvider icons={rootConfig.theme.icons}>
+          <AntdApp>
+            <ThemeTokenResolver lowdefyRef={lowdefyRef}>
+              <ErrorBoundary fullPage onError={handleError}>
+                <Auth user={user}>
+                  {(auth) => {
+                    usageDataRef.current.user = auth.user?.id;
+                    return <Page auth={auth} config={config} lowdefy={lowdefyRef.current} />;
+                  }}
+                </Auth>
+              </ErrorBoundary>
+            </ThemeTokenResolver>
+          </AntdApp>
+        </IconProvider>
       </XProvider>
     </StyleProvider>
   );

package/client/Page.jsx

@@ -14,13 +14,14 @@
   limitations under the License.
 */
 
-import React, { useEffect, useRef, useState } from 'react';
+import React, { useEffect, useReducer, useRef, useState } from 'react';
 
 import Client from '@lowdefy/client';
 import createRouter from '@lowdefy/client/adapters/createRouter.js';
 import createLinkComponent from '@lowdefy/client/adapters/Link.js';
 import { createUrl } from '@lowdefy/client/adapters/url.js';
 import Head from '@lowdefy/client/adapters/Head.js';
+import { buildPagePath } from '@lowdefy/helpers';
 
 import actions from '../build/plugins/actions.js';
 import blockMetas from '../build/plugins/blockMetas.json';
@@ -29,10 +30,39 @@ import icons from '../build/plugins/icons.js';
 import operators from '../build/plugins/operators/client.js';
 import jsMap from '../build/plugins/operators/clientJsMap.js';
 
+import getShownPage from './getShownPage.js';
+
+// The path to fetch for a navigation. The app root shows the home page, and
+// /api/page/ with an empty path matches no page, so it fetches the home page's
+// own path.
+function getFetchPath({ path, rootConfig }) {
+  if (path !== '') {
+    return path;
+  }
+  const { home, pagePaths } = rootConfig;
+  return buildPagePath({
+    pageId: home.pageId,
+    path: pagePaths[home.pageId],
+    pathParams: home.pathParams,
+  });
+}
+
 // Replaces lib/client/Page.js. The first page renders from the config
-// embedded in the HTML; SPA navigations fetch /api/page/* and swap pageConfig.
+// embedded in the HTML; SPA navigations fetch /api/page/<path> and swap the
+// page. The server matches the path and answers with the page it shows, the
+// values it carries and the path it matched.
 function Page({ auth, config, lowdefy }) {
-  const [pageConfig, setPageConfig] = useState(config.pageConfig);
+  const [page, setPage] = useState({
+    matchedPath: config.matchedPath,
+    pageConfig: config.pageConfig,
+    pathParams: config.pathParams,
+  });
+  // The navigation listener is subscribed once, so it reads the shown page
+  // through a ref rather than the state its closure captured.
+  const pageRef = useRef(page);
+  // A re-render with the same config is how the page context picks up a new
+  // URL (getContext updates a memoized context on every render).
+  const [, rerender] = useReducer((count) => count + 1, 0);
 
   const routerRef = useRef(null);
   if (!routerRef.current) {
@@ -50,33 +80,38 @@ function Page({ auth, config, lowdefy }) {
   const latestNavRef = useRef(0);
 
   useEffect(() => {
-    const unsubscribe = router.subscribe(async ({ pageId }) => {
+    const unsubscribe = router.subscribe(async ({ path, search }) => {
       const token = ++latestNavRef.current;
-      const targetPageId = pageId ?? config.rootConfig.home.pageId;
+      // The path the shown instance was matched on shows the same page and
+      // values whatever the query, so it needs no fetch. Another spelling of
+      // the same values fetches and lands on the same instance. Dynamic pages
+      // re-resolve per navigation.
+      if (path === pageRef.current.matchedPath && pageRef.current.pageConfig.dynamic !== true) {
+        rerender();
+        return;
+      }
+      const fetchPath = getFetchPath({ path, rootConfig: config.rootConfig });
       try {
         // Forward the current query string so server-side Dynamic block
         // resolution sees the same urlQuery as an initial HTML load.
-        const res = await fetch(
-          `${router.basePath}/api/page/${targetPageId}${window.location.search}`
-        );
+        const res = await fetch(`${router.basePath}/api/page/${fetchPath}${search}`);
         if (!res.ok) {
           if (token !== latestNavRef.current) return;
-          if (targetPageId !== '404') {
+          if (path !== '404') {
             router.replace({ pathname: '/404' });
           }
           return;
         }
-        const { pageConfig: nextPageConfig } = await res.json();
+        const response = await res.json();
         if (token !== latestNavRef.current) return;
-        setPageConfig(nextPageConfig);
+        const nextPage = getShownPage({ path, response });
+        pageRef.current = nextPage;
+        setPage(nextPage);
       } catch (error) {
         // Network failure on SPA navigation — fall back to a full page load.
         if (token !== latestNavRef.current) return;
         window.location.assign(
-          createUrl({
-            basePath: router.basePath,
-            pathname: targetPageId === config.rootConfig.home.pageId ? '/' : `/${targetPageId}`,
-          })
+          createUrl({ basePath: router.basePath, pathname: `/${path}`, query: search.slice(1) })
         );
       }
     });
@@ -88,11 +123,13 @@ function Page({ auth, config, lowdefy }) {
       auth={auth}
       Components={{ Head, Link }}
       config={{
-        pageConfig,
+        pageConfig: page.pageConfig,
         rootConfig: config.rootConfig,
       }}
       jsMap={jsMap}
       lowdefy={lowdefy}
+      matchedPath={page.matchedPath}
+      pathParams={page.pathParams}
       router={router}
       stage="e2e"
       types={{

package/client/getShownPage.js

@@ -0,0 +1,28 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+// The page a navigation to `path` shows, from the page response. At the app root the client
+// fetches the home page's own path, but the shown instance is matched on the root, as on a first
+// load there, so a later navigation to the root (a query change, the home link) needs no fetch.
+function getShownPage({ path, response }) {
+  const { pageConfig, pathParams } = response;
+  if (path === '') {
+    return { matchedPath: '', pageConfig, pathParams };
+  }
+  return { matchedPath: response.matchedPath, pageConfig, pathParams };
+}
+
+export default getShownPage;

package/client/getShownPage.test.mjs

@@ -0,0 +1,52 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import getShownPage from './getShownPage.js';
+
+const pageConfig = { pageId: 'ticket', path: 'tickets/{space}/{ticket_id}' };
+
+test('getShownPage keeps the path the server matched', () => {
+  expect(
+    getShownPage({
+      path: 'tickets/a%2Bb/1',
+      response: {
+        pageId: 'ticket',
+        pathParams: { space: 'a+b', ticket_id: '1' },
+        matchedPath: 'tickets/a%2Bb/1',
+        pageConfig,
+      },
+    })
+  ).toEqual({
+    matchedPath: 'tickets/a%2Bb/1',
+    pageConfig,
+    pathParams: { space: 'a+b', ticket_id: '1' },
+  });
+});
+
+test('getShownPage matches the home page fetched for the app root on the root', () => {
+  const homeConfig = { pageId: 'users', path: 'admin/users' };
+  expect(
+    getShownPage({
+      path: '',
+      response: {
+        pageId: 'users',
+        pathParams: {},
+        matchedPath: 'admin/users',
+        pageConfig: homeConfig,
+      },
+    })
+  ).toEqual({ matchedPath: '', pageConfig: homeConfig, pathParams: {} });
+});

package/lib/client/auth/Auth.jsx

@@ -24,19 +24,45 @@ function e2eNotSupported() {
   throw new Error('Sign-in and sign-out are not supported in e2e testing.');
 }
 
-function Auth({ children, session }) {
+function Auth({ children, user }) {
   const auth = {
     authConfig,
-    session,
+    user,
+    // Matches the BetterAuth client contract: { data, error }.
     getSession: async () => {
       const res = await fetch('/api/auth/session');
+      if (res.ok) {
+        return { data: await res.json(), error: null };
+      }
+      return { data: null, error: null };
+    },
+    getResolvedUser: async () => {
+      const res = await fetch('/api/user');
       if (res.ok) {
         return res.json();
       }
-      return null;
+      return { user: null };
     },
-    signIn: e2eNotSupported,
+    acceptInvitation: e2eNotSupported,
+    addPasskey: e2eNotSupported,
+    changePassword: e2eNotSupported,
+    deletePasskey: e2eNotSupported,
+    updatePasskey: e2eNotSupported,
+    requestPasswordReset: e2eNotSupported,
+    resetPassword: e2eNotSupported,
+    revokeOtherSessions: e2eNotSupported,
+    sendVerificationEmail: e2eNotSupported,
+    setActiveOrganization: e2eNotSupported,
+    signInEmail: e2eNotSupported,
+    signInMagicLink: e2eNotSupported,
+    signInSocial: e2eNotSupported,
     signOut: e2eNotSupported,
+    signUpEmail: e2eNotSupported,
+    twoFactorDisable: e2eNotSupported,
+    twoFactorEnable: e2eNotSupported,
+    twoFactorGenerateBackupCodes: e2eNotSupported,
+    twoFactorVerifyBackupCode: e2eNotSupported,
+    twoFactorVerifyTotp: e2eNotSupported,
   };
   return children(auth);
 }

package/lib/server/auth/{session.js → getUser.js}

@@ -14,22 +14,23 @@
   limitations under the License.
 */
 
-// E2E test-user injection: the session is read from the lowdefy_e2e_user
+// E2E test-user injection: the caller is read from the lowdefy_e2e_user
 // cookie (base64-encoded JSON user object) instead of a real auth engine.
-function getSession(c) {
+// The cookie user is pre-resolved - it substitutes for resolveAuthentication
+// and its roles are authoritative.
+function getUser(c) {
   const cookieHeader = c.req.header('cookie') ?? '';
   const match = cookieHeader.match(/lowdefy_e2e_user=([^;]+)/);
   if (!match) {
-    return undefined;
+    return null;
   }
 
   try {
     const decoded = Buffer.from(decodeURIComponent(match[1]), 'base64').toString();
-    const user = JSON.parse(decoded);
-    return { user };
+    return JSON.parse(decoded);
   } catch {
-    return undefined;
+    return null;
   }
 }
 
-export default getSession;
+export default getUser;

package/lib/server/log/createLogger.js

@@ -15,11 +15,14 @@
 */
 
 import { createNodeLogger } from '@lowdefy/logger/node';
+import { scrubCredentials } from '@lowdefy/node-utils';
 
 const logger = createNodeLogger({
   name: 'lowdefy_server_e2e',
   level: process.env.LOWDEFY_LOG_LEVEL ?? 'info',
   base: { pid: undefined, hostname: undefined },
+  // Secrets stay in these logs, but a value a request marked with _credential does not.
+  hooks: { streamWrite: scrubCredentials },
 });
 
 function createLogger(metadata = {}) {

package/lib/server/log/logRequest.js

@@ -15,13 +15,11 @@
 */
 
 function logRequest({ context }) {
-  const { user = {} } = context.session ?? {};
+  const user = context.user ?? {};
   context.logger.debug({
     user: {
       id: user.id,
       roles: user.roles,
-      sub: user.sub,
-      session_id: user.session_id,
     },
     url: context.req.url,
     method: context.req.method,

package/lib/server/scrubSecrets.js

@@ -0,0 +1,25 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { createSecretScrubber } from '@lowdefy/node-utils';
+
+import getE2eSecrets from './getE2eSecrets.js';
+
+// E2E logs stay unscrubbed, but _error reads this off the context like every
+// other server package, so a thrown message behaves identically in every mode.
+const scrubSecrets = createSecretScrubber({ secrets: getE2eSecrets() });
+
+export default scrubSecrets;

package/lowdefy/build.mjs

@@ -51,6 +51,7 @@ async function run() {
     directories,
     logger,
     refResolver: argv.refResolver || process.env.LOWDEFY_BUILD_REF_RESOLVER,
+    skipPluginChecks: process.env.LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS === 'true',
   });
 }
 

package/lowdefy/build.test.mjs

@@ -0,0 +1,65 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+import { jest } from '@jest/globals';
+
+const mockBuild = jest.fn();
+
+jest.unstable_mockModule('@lowdefy/build', () => ({ default: mockBuild }));
+jest.unstable_mockModule('@lowdefy/logger/node', () => ({
+  createNodeLogger: jest.fn(() => 'logger'),
+}));
+jest.unstable_mockModule('./createCustomPluginTypesMap.mjs', () => ({
+  default: jest.fn().mockResolvedValue({}),
+}));
+
+const savedSkip = process.env.LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS;
+let loadCount = 0;
+
+// build.mjs runs the build when imported, so each case loads a fresh module
+// instance and waits for the build call.
+async function runScript() {
+  loadCount += 1;
+  await import(`./build.mjs?case=${loadCount}`);
+  await new Promise((resolve) => setImmediate(resolve));
+}
+
+beforeEach(() => {
+  delete process.env.LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS;
+  mockBuild.mockReset();
+  mockBuild.mockResolvedValue();
+});
+
+afterAll(() => {
+  if (savedSkip === undefined) {
+    delete process.env.LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS;
+  } else {
+    process.env.LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS = savedSkip;
+  }
+});
+
+test('build passes skipPluginChecks true when LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS is true', async () => {
+  process.env.LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS = 'true';
+  await runScript();
+  expect(mockBuild).toHaveBeenCalledTimes(1);
+  expect(mockBuild.mock.calls[0][0].skipPluginChecks).toBe(true);
+});
+
+test('build passes skipPluginChecks false when LOWDEFY_BUILD_SKIP_PLUGIN_CHECKS is unset', async () => {
+  await runScript();
+  expect(mockBuild).toHaveBeenCalledTimes(1);
+  expect(mockBuild.mock.calls[0][0].skipPluginChecks).toBe(false);
+});

package/lowdefy/createCustomPluginTypesMap.mjs

@@ -42,14 +42,15 @@ async function createCustomPluginTypesMap({ directories }) {
     agents: {},
     auth: {
       adapters: {},
-      callbacks: {},
-      events: {},
       providers: {},
+      strategies: {},
     },
     blockMetas: {},
+    connectionMetas: {},
     blocks: {},
     connections: {},
     icons: {},
+    iconSets: {},
     operators: {
       client: {},
       server: {},

package/lowdefy/createCustomPluginTypesMap.test.mjs

@@ -41,7 +41,12 @@ const pluginTypesEsm = {
   },
 };
 
+// The module under test imports @lowdefy/build, which links against every
+// export it uses, so the real module passes through and only file access is
+// replaced.
+const realNodeUtils = await import('@lowdefy/node-utils');
 jest.unstable_mockModule('@lowdefy/node-utils', () => ({
+  ...realNodeUtils,
   cleanDirectory: jest.fn(),
   copyFileOrDirectory: jest.fn(),
   getFileExtension: jest.fn(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/server-e2e",
-  "version": "6.0.0",
+  "version": "7.0.0",
   "license": "Apache-2.0",
   "description": "Lowdefy e2e testing server with cookie-based user injection",
   "homepage": "https://lowdefy.com",
@@ -41,58 +41,57 @@
   ],
   "dependencies": {
     "@ant-design/cssinjs": "2.1.2",
-    "@ant-design/x": "2.7.0",
-    "@hono/node-server": "2.0.4",
-    "@lowdefy/actions-core": "6.0.0",
-    "@lowdefy/api": "6.0.0",
-    "@lowdefy/block-utils": "6.0.0",
-    "@lowdefy/blocks-aggrid": "6.0.0",
-    "@lowdefy/blocks-antd": "6.0.0",
-    "@lowdefy/blocks-antd-x": "6.0.0",
-    "@lowdefy/blocks-basic": "6.0.0",
-    "@lowdefy/blocks-echarts": "6.0.0",
-    "@lowdefy/blocks-loaders": "6.0.0",
-    "@lowdefy/blocks-markdown": "6.0.0",
-    "@lowdefy/blocks-tiptap": "6.0.0",
-    "@lowdefy/client": "6.0.0",
-    "@lowdefy/connection-axios-http": "6.0.0",
-    "@lowdefy/connection-mongodb": "6.0.0",
-    "@lowdefy/errors": "6.0.0",
-    "@lowdefy/helpers": "6.0.0",
-    "@lowdefy/layout": "6.0.0",
-    "@lowdefy/logger": "6.0.0",
-    "@lowdefy/node-utils": "6.0.0",
-    "@lowdefy/operators-js": "6.0.0",
-    "@lowdefy/operators-nunjucks": "6.0.0",
-    "@lowdefy/operators-uuid": "6.0.0",
-    "@lowdefy/websockets-core": "6.0.0",
-    "@tailwindcss/postcss": "4.3.1",
+    "@ant-design/x": "2.9.0",
+    "@hono/node-server": "2.0.10",
+    "@lowdefy/actions-core": "7.0.0",
+    "@lowdefy/api": "7.0.0",
+    "@lowdefy/block-utils": "7.0.0",
+    "@lowdefy/blocks-aggrid": "7.0.0",
+    "@lowdefy/blocks-antd": "7.0.0",
+    "@lowdefy/blocks-antd-x": "7.0.0",
+    "@lowdefy/blocks-basic": "7.0.0",
+    "@lowdefy/blocks-captcha": "7.0.0",
+    "@lowdefy/blocks-echarts": "7.0.0",
+    "@lowdefy/blocks-loaders": "7.0.0",
+    "@lowdefy/blocks-markdown": "7.0.0",
+    "@lowdefy/blocks-table": "7.0.0",
+    "@lowdefy/blocks-tiptap": "7.0.0",
+    "@lowdefy/client": "7.0.0",
+    "@lowdefy/connection-axios-http": "7.0.0",
+    "@lowdefy/connection-mongodb": "7.0.0",
+    "@lowdefy/errors": "7.0.0",
+    "@lowdefy/helpers": "7.0.0",
+    "@lowdefy/layout": "7.0.0",
+    "@lowdefy/logger": "7.0.0",
+    "@lowdefy/node-utils": "7.0.0",
+    "@lowdefy/operators-js": "7.0.0",
+    "@lowdefy/operators-nunjucks": "7.0.0",
+    "@lowdefy/operators-uuid": "7.0.0",
+    "@lowdefy/websockets-core": "7.0.0",
+    "@tailwindcss/postcss": "4.3.3",
     "@vitejs/plugin-react": "6.0.2",
-    "antd": "6.3.1",
+    "antd": "6.6.5",
     "dayjs": "1.11.20",
-    "hono": "4.12.25",
-    "pino": "10.3.1",
+    "hono": "4.13.7",
+    "lightningcss": "1.32.0",
     "react": "18.2.0",
     "react-dom": "18.2.0",
-    "react-icons": "5.6.0",
-    "tailwindcss": "4.3.1",
+    "tailwindcss": "4.3.3",
     "uuid": "14.0.0",
     "vite": "8.0.16",
-    "ws": "8.18.0"
+    "ws": "8.21.0"
   },
   "devDependencies": {
     "@jest/globals": "28.1.3",
-    "@lowdefy/build": "6.0.0",
-    "@next/eslint-plugin-next": "16.1.6",
-    "@tailwindcss/postcss": "4.3.1",
+    "@lowdefy/build": "7.0.0",
+    "@tailwindcss/postcss": "4.3.3",
     "jest": "28.1.3",
-    "tailwindcss": "4.3.1",
-    "webpack": "5.94.0",
+    "tailwindcss": "4.3.3",
     "yaml": "2.9.0",
     "yargs": "18.0.0"
   },
   "engines": {
-    "node": ">=22"
+    "node": ">=24"
   },
   "publishConfig": {
     "access": "public"