@lowdefy/server 5.0.0 → 5.2.0

package/lib/build/theme.js

@@ -0,0 +1,19 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+import { serializer } from '@lowdefy/helpers';
+import raw from '../../build/theme.json';
+
+export default serializer.deserialize(raw);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/server",
-  "version": "5.0.0",
+  "version": "5.2.0",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -38,23 +38,23 @@
   ],
   "dependencies": {
     "@ant-design/cssinjs": "2.1.2",
-    "@lowdefy/actions-core": "5.0.0",
-    "@lowdefy/api": "5.0.0",
-    "@lowdefy/block-utils": "5.0.0",
-    "@lowdefy/blocks-antd": "5.0.0",
-    "@lowdefy/blocks-basic": "5.0.0",
-    "@lowdefy/blocks-loaders": "5.0.0",
-    "@lowdefy/client": "5.0.0",
-    "@lowdefy/errors": "5.0.0",
-    "@lowdefy/helpers": "5.0.0",
-    "@lowdefy/layout": "5.0.0",
-    "@lowdefy/logger": "5.0.0",
-    "@lowdefy/node-utils": "5.0.0",
-    "@lowdefy/operators-js": "5.0.0",
-    "@lowdefy/plugin-next-auth": "5.0.0",
+    "@lowdefy/actions-core": "5.2.0",
+    "@lowdefy/api": "5.2.0",
+    "@lowdefy/block-utils": "5.2.0",
+    "@lowdefy/blocks-antd": "5.2.0",
+    "@lowdefy/blocks-basic": "5.2.0",
+    "@lowdefy/blocks-loaders": "5.2.0",
+    "@lowdefy/blocks-tiptap": "5.2.0",
+    "@lowdefy/client": "5.2.0",
+    "@lowdefy/errors": "5.2.0",
+    "@lowdefy/helpers": "5.2.0",
+    "@lowdefy/layout": "5.2.0",
+    "@lowdefy/logger": "5.2.0",
+    "@lowdefy/node-utils": "5.2.0",
+    "@lowdefy/operators-js": "5.2.0",
+    "@lowdefy/plugin-next-auth": "5.2.0",
     "@sentry/nextjs": "8.53.0",
     "@tailwindcss/postcss": "4.2.1",
-    "tailwindcss": "4.2.1",
     "antd": "6.3.1",
     "dayjs": "1.11.19",
     "next": "16.1.6",
@@ -63,10 +63,11 @@
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-icons": "5.6.0",
+    "tailwindcss": "4.2.1",
     "uuid": "13.0.0"
   },
   "devDependencies": {
-    "@lowdefy/build": "5.0.0",
+    "@lowdefy/build": "5.2.0",
     "@next/eslint-plugin-next": "16.1.6",
     "@tailwindcss/postcss": "4.2.1",
     "tailwindcss": "4.2.1",

package/package.original.json

@@ -1,6 +1,6 @@
 {
   "name": "@lowdefy/server",
-  "version": "5.0.0",
+  "version": "5.2.0",
   "license": "Apache-2.0",
   "description": "",
   "homepage": "https://lowdefy.com",
@@ -48,23 +48,23 @@
   },
   "dependencies": {
     "@ant-design/cssinjs": "2.1.2",
-    "@lowdefy/actions-core": "5.0.0",
-    "@lowdefy/api": "5.0.0",
-    "@lowdefy/block-utils": "5.0.0",
-    "@lowdefy/blocks-antd": "5.0.0",
-    "@lowdefy/blocks-basic": "5.0.0",
-    "@lowdefy/blocks-loaders": "5.0.0",
-    "@lowdefy/client": "5.0.0",
-    "@lowdefy/errors": "5.0.0",
-    "@lowdefy/helpers": "5.0.0",
-    "@lowdefy/layout": "5.0.0",
-    "@lowdefy/logger": "5.0.0",
-    "@lowdefy/node-utils": "5.0.0",
-    "@lowdefy/operators-js": "5.0.0",
-    "@lowdefy/plugin-next-auth": "5.0.0",
+    "@lowdefy/actions-core": "5.2.0",
+    "@lowdefy/api": "5.2.0",
+    "@lowdefy/block-utils": "5.2.0",
+    "@lowdefy/blocks-antd": "5.2.0",
+    "@lowdefy/blocks-basic": "5.2.0",
+    "@lowdefy/blocks-loaders": "5.2.0",
+    "@lowdefy/blocks-tiptap": "5.2.0",
+    "@lowdefy/client": "5.2.0",
+    "@lowdefy/errors": "5.2.0",
+    "@lowdefy/helpers": "5.2.0",
+    "@lowdefy/layout": "5.2.0",
+    "@lowdefy/logger": "5.2.0",
+    "@lowdefy/node-utils": "5.2.0",
+    "@lowdefy/operators-js": "5.2.0",
+    "@lowdefy/plugin-next-auth": "5.2.0",
     "@sentry/nextjs": "8.53.0",
     "@tailwindcss/postcss": "4.2.1",
-    "tailwindcss": "4.2.1",
     "antd": "6.3.1",
     "dayjs": "1.11.19",
     "next": "16.1.6",
@@ -73,10 +73,11 @@
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "react-icons": "5.6.0",
+    "tailwindcss": "4.2.1",
     "uuid": "13.0.0"
   },
   "devDependencies": {
-    "@lowdefy/build": "5.0.0",
+    "@lowdefy/build": "5.2.0",
     "@next/eslint-plugin-next": "16.1.6",
     "@tailwindcss/postcss": "4.2.1",
     "tailwindcss": "4.2.1",
@@ -87,6 +88,11 @@
   "engines": {
     "node": ">=18"
   },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "better-sqlite3"
+    ]
+  },
   "publishConfig": {
     "access": "public"
   }

package/pages/{[pageId].js → [[...pageId]].js}

@@ -20,8 +20,42 @@ import serverSidePropsWrapper from '../lib/server/serverSidePropsWrapper.js';
 import Page from '../lib/client/Page.js';
 
 async function getServerSidePropsHandler({ context, nextContext }) {
-  const { pageId } = nextContext.params;
+  const segments = nextContext.params.pageId ?? [];
+  const pageId = segments.join('/');
   const { logger, session } = context;
+
+  if (!pageId) {
+    const rootConfig = await getRootConfig(context);
+    const { home } = rootConfig;
+    if (home.configured === false) {
+      logger.info({ event: 'redirect_to_homepage', pageId: home.pageId });
+      return {
+        redirect: {
+          destination: `/${home.pageId}`,
+          permanent: false,
+        },
+      };
+    }
+    const pageConfig = await getPageConfig(context, { pageId: home.pageId });
+    if (!pageConfig) {
+      logger.info({ event: 'redirect_page_not_found', pageId: home.pageId });
+      return {
+        redirect: {
+          destination: '/404',
+          permanent: false,
+        },
+      };
+    }
+    logger.info({ event: 'page_view', pageId: home.pageId });
+    return {
+      props: {
+        pageConfig,
+        rootConfig,
+        session,
+      },
+    };
+  }
+
   const [rootConfig, pageConfig] = await Promise.all([
     getRootConfig(context),
     getPageConfig(context, { pageId }),

package/pages/_app.js

@@ -58,11 +58,19 @@ function App({ Component, pageProps: { session, rootConfig, pageConfig } }) {
     lowdefyRef.current.theme = rootConfig.theme;
   }
 
-  const algorithm = useDarkMode({
-    baseAlgorithm: lowdefyRef.current.theme?.antd?.algorithm,
+  const { algorithm, token, components } = useDarkMode({
+    antd: lowdefyRef.current.theme?.antd,
     configDarkMode: lowdefyRef.current.theme?.darkMode,
   });
 
+  const {
+    lightToken: _lightToken,
+    darkToken: _darkToken,
+    lightComponents: _lightComponents,
+    darkComponents: _darkComponents,
+    ...antdConfig
+  } = lowdefyRef.current.theme?.antd ?? {};
+
   const handleError = useCallback((error) => {
     if (lowdefyRef.current?._internal?.handleError) {
       lowdefyRef.current._internal.handleError(error);
@@ -75,7 +83,9 @@ function App({ Component, pageProps: { session, rootConfig, pageConfig } }) {
     <StyleProvider layer>
       <ConfigProvider
         theme={{
-          ...lowdefyRef.current.theme?.antd,
+          ...antdConfig,
+          token,
+          components,
           cssVar: { key: 'lowdefy' },
           hashed: false,
           algorithm,

package/pages/_document.js

@@ -19,8 +19,34 @@ import Document, { Html, Head, Main, NextScript } from 'next/document';
 
 import appJson from '../lib/build/app.js';
 import lowdefyConfig from '../lib/build/config.js';
+import themeConfig from '../lib/build/theme.js';
 
 const basePath = lowdefyConfig.basePath ?? '';
+const VALID_COLOR_MODES = ['system', 'light', 'dark'];
+const configColorMode = VALID_COLOR_MODES.includes(themeConfig.darkMode)
+  ? themeConfig.darkMode
+  : 'system';
+const darkBg = themeConfig?.antd?.darkToken?.colorBgLayout ?? '#000';
+const lightBg = themeConfig?.antd?.lightToken?.colorBgLayout ?? '';
+
+// Escape characters that could break out of the enclosing <script> tag or
+// terminate a JS string literal. Used to defuse the js/bad-code-sanitization
+// class of injection for values embedded into the pre-hydration inline script.
+const SCRIPT_ESCAPES = {
+  '<': '\\u003C',
+  '>': '\\u003E',
+  '\b': '\\b',
+  '\f': '\\f',
+  '\n': '\\n',
+  '\r': '\\r',
+  '\t': '\\t',
+  '\0': '\\0',
+  '\u2028': '\\u2028',
+  '\u2029': '\\u2029',
+};
+function safeScriptJson(value) {
+  return JSON.stringify(value).replace(/[<>\b\f\n\r\t\0\u2028\u2029]/g, (c) => SCRIPT_ESCAPES[c]);
+}
 
 class LowdefyDocument extends Document {
   render() {
@@ -38,6 +64,21 @@ class LowdefyDocument extends Document {
               __html: `(function(){var s=document.createElement("style");s.id="__lf-layer-order";s.textContent="@layer theme, base, antd, components, utilities;";document.head.prepend(s);new MutationObserver(function(){if(document.head.firstChild!==s)document.head.prepend(s)}).observe(document.head,{childList:true})})();`,
             }}
           />
+          {/* Synchronous pre-hydration background script — prevents mode-mismatch
+              flash on page navigation. Mirrors useDarkMode.js resolution order:
+              configDarkMode → localStorage → prefers-color-scheme. Uses the user's
+              configured colorBgLayout tokens when present (theme.antd.darkToken and
+              theme.antd.lightToken), falling back to #000 in dark and no inline style
+              in light so default behavior is unchanged. */}
+          <script
+            dangerouslySetInnerHTML={{
+              __html: `(function(){var c=${safeScriptJson(configColorMode)};var db=${safeScriptJson(
+                darkBg
+              )};var lb=${safeScriptJson(
+                lightBg
+              )};var d;if(c==="dark")d=true;else if(c==="light")d=false;else{try{var p=localStorage.getItem("lowdefy_darkMode");if(p==="dark")d=true;else if(p==="light")d=false;else d=window.matchMedia("(prefers-color-scheme:dark)").matches}catch(e){d=window.matchMedia("(prefers-color-scheme:dark)").matches}}var bg=d?db:lb;if(bg)document.documentElement.style.backgroundColor=bg})();`,
+            }}
+          />
           <link rel="manifest" href={`${basePath}/manifest.webmanifest`} />
           <link rel="icon" type="image/svg+xml" href={`${basePath}/icon.svg`} />
           <link rel="apple-touch-icon" href={`${basePath}/apple-touch-icon.png`} />

package/pages/api/endpoints/{[endpointId].js → [...endpointId].js}

@@ -22,7 +22,7 @@ async function handler({ context, req, res }) {
   if (req.method !== 'POST') {
     throw new Error('Only POST requests are supported.');
   }
-  const { endpointId } = req.query;
+  const endpointId = req.query.endpointId.join('/');
   const { blockId, payload, pageId } = req.body;
   context.logger.info({ event: 'call_api_endpoint', blockId, endpointId, pageId });
   const response = await callEndpoint(context, { blockId, endpointId, pageId, payload });

package/pages/api/request/{[pageId]/[requestId].js → [...path].js}

@@ -16,13 +16,19 @@
 
 import { callRequest } from '@lowdefy/api';
 
-import apiWrapper from '../../../../lib/server/apiWrapper.js';
+import apiWrapper from '../../../lib/server/apiWrapper.js';
 
 async function handler({ context, req, res }) {
   if (req.method !== 'POST') {
     throw new Error('Only POST requests are supported.');
   }
-  const { pageId, requestId } = req.query;
+  const segments = req.query.path;
+  if (!Array.isArray(segments) || segments.length < 2) {
+    res.status(400).json({ error: 'Invalid request path' });
+    return;
+  }
+  const requestId = segments[segments.length - 1];
+  const pageId = segments.slice(0, -1).join('/');
   const { actionId, blockId, payload } = req.body;
   context.logger.info({ event: 'call_request', pageId, requestId, blockId, actionId });
   const response = await callRequest(context, { blockId, pageId, payload, requestId });

package/pages/index.js

@@ -1,57 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { getPageConfig, getRootConfig } from '@lowdefy/api';
-
-import serverSidePropsWrapper from '../lib/server/serverSidePropsWrapper.js';
-import Page from '../lib/client/Page.js';
-
-async function getServerSidePropsHandler({ context }) {
-  const rootConfig = await getRootConfig(context);
-  const { home } = rootConfig;
-  const { logger, session } = context;
-  if (home.configured === false) {
-    logger.info({ event: 'redirect_to_homepage', pageId: home.pageId });
-    return {
-      redirect: {
-        destination: `/${home.pageId}`,
-        permanent: false,
-      },
-    };
-  }
-  const pageConfig = await getPageConfig(context, { pageId: home.pageId });
-  if (!pageConfig) {
-    logger.info({ event: 'redirect_page_not_found', pageId: home.pageId });
-    return {
-      redirect: {
-        destination: '/404',
-        permanent: false,
-      },
-    };
-  }
-  logger.info({ event: 'page_view', pageId: home.pageId });
-  return {
-    props: {
-      pageConfig,
-      rootConfig,
-      session,
-    },
-  };
-}
-
-export const getServerSideProps = serverSidePropsWrapper(getServerSidePropsHandler);
-
-export default Page;