@lowdefy/server 5.5.1 → 6.0.0

package/next.config.js

@@ -1,34 +0,0 @@
-const { withSentryConfig } = require('@sentry/nextjs');
-const lowdefyConfig = require('./build/config.json');
-const blockPackages = require('./build/blockPackages.json');
-const agentFileSystems = require('./build/agentFileSystems.json');
-const serverExternalPackages = require('./build/serverExternalPackages.json');
-
-const nextConfig = {
-  basePath: lowdefyConfig.basePath,
-  reactStrictMode: true,
-  transpilePackages: [
-    '@lowdefy/client',
-    '@ant-design/x',
-    '@ant-design/x-markdown',
-    ...blockPackages,
-  ],
-  serverExternalPackages,
-  turbopack: {},
-  poweredByHeader: false,
-  // productionBrowserSourceMaps: true
-  output: process.env.LOWDEFY_BUILD_OUTPUT_STANDALONE === '1' ? 'standalone' : undefined,
-  outputFileTracingIncludes: agentFileSystems.length
-    ? { '/api/agent/*': agentFileSystems.map((p) => `${p}/**/*`) }
-    : undefined,
-};
-
-// Only wrap with Sentry if SENTRY_DSN is configured
-// This enables source map uploads when SENTRY_AUTH_TOKEN is present
-module.exports = process.env.SENTRY_DSN
-  ? withSentryConfig(nextConfig, {
-      // Sentry options
-      silent: true,
-      hideSourceMaps: true,
-    })
-  : nextConfig;

package/pages/404.js

@@ -1,49 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import path from 'path';
-import { createApiContext, getPageConfig, getRootConfig } from '@lowdefy/api';
-
-import appMeta from '../lib/build/appMeta.js';
-import config from '../lib/build/config.js';
-import fileCache from '../lib/server/fileCache.js';
-import Page from '../lib/client/Page.js';
-
-export async function getStaticProps() {
-  // Important to give absolute path so Next can trace build files
-  const context = {
-    appMeta,
-    buildDirectory: path.join(process.cwd(), 'build'),
-    config,
-    fileCache,
-    logger: console, // TODO: pino or console or 🤷‍♂️?
-  };
-  createApiContext(context);
-
-  const [rootConfig, pageConfig] = await Promise.all([
-    getRootConfig(context),
-    getPageConfig(context, { pageId: '404' }),
-  ]);
-
-  return {
-    props: {
-      pageConfig,
-      rootConfig,
-    },
-  };
-}
-
-export default Page;

package/pages/[[...pageId]].js

@@ -1,85 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { getPageConfig, getRootConfig } from '@lowdefy/api';
-
-import serverSidePropsWrapper from '../lib/server/serverSidePropsWrapper.js';
-import Page from '../lib/client/Page.js';
-
-async function getServerSidePropsHandler({ context, nextContext }) {
-  const segments = nextContext.params.pageId ?? [];
-  const pageId = segments.join('/');
-  const { logger, session } = context;
-
-  if (!pageId) {
-    const rootConfig = await getRootConfig(context);
-    const { home } = rootConfig;
-    if (home.configured === false) {
-      logger.info({ event: 'redirect_to_homepage', pageId: home.pageId });
-      return {
-        redirect: {
-          destination: `/${home.pageId}`,
-          permanent: false,
-        },
-      };
-    }
-    const pageConfig = await getPageConfig(context, { pageId: home.pageId });
-    if (!pageConfig) {
-      logger.info({ event: 'redirect_page_not_found', pageId: home.pageId });
-      return {
-        redirect: {
-          destination: '/404',
-          permanent: false,
-        },
-      };
-    }
-    logger.info({ event: 'page_view', pageId: home.pageId });
-    return {
-      props: {
-        pageConfig,
-        rootConfig,
-        session,
-      },
-    };
-  }
-
-  const [rootConfig, pageConfig] = await Promise.all([
-    getRootConfig(context),
-    getPageConfig(context, { pageId }),
-  ]);
-
-  if (!pageConfig) {
-    logger.info({ event: 'redirect_page_not_found', pageId });
-    return {
-      redirect: {
-        destination: '/404',
-        permanent: false,
-      },
-    };
-  }
-  logger.info({ event: 'page_view', pageId });
-  return {
-    props: {
-      pageConfig,
-      rootConfig,
-      session,
-    },
-  };
-}
-
-export const getServerSideProps = serverSidePropsWrapper(getServerSidePropsHandler);
-
-export default Page;

package/pages/_document.js

@@ -1,106 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React from 'react';
-import Document, { Html, Head, Main, NextScript } from 'next/document';
-
-import appJson from '../lib/build/app.js';
-import lowdefyConfig from '../lib/build/config.js';
-import themeConfig from '../lib/build/theme.js';
-
-const basePath = lowdefyConfig.basePath ?? '';
-const VALID_COLOR_MODES = ['system', 'light', 'dark'];
-const configColorMode = VALID_COLOR_MODES.includes(themeConfig.darkMode)
-  ? themeConfig.darkMode
-  : 'system';
-const darkBg = themeConfig?.antd?.darkToken?.colorBgLayout ?? '#000';
-const lightBg = themeConfig?.antd?.lightToken?.colorBgLayout ?? '';
-
-// Escape characters that could break out of the enclosing <script> tag or
-// terminate a JS string literal. Used to defuse the js/bad-code-sanitization
-// class of injection for values embedded into the pre-hydration inline script.
-const SCRIPT_ESCAPES = {
-  '<': '\\u003C',
-  '>': '\\u003E',
-  '\b': '\\b',
-  '\f': '\\f',
-  '\n': '\\n',
-  '\r': '\\r',
-  '\t': '\\t',
-  '\0': '\\0',
-  '\u2028': '\\u2028',
-  '\u2029': '\\u2029',
-};
-function safeScriptJson(value) {
-  return JSON.stringify(value).replace(/[<>\b\f\n\r\t\0\u2028\u2029]/g, (c) => SCRIPT_ESCAPES[c]);
-}
-
-class LowdefyDocument extends Document {
-  render() {
-    return (
-      <Html className="lowdefy">
-        <Head>
-          {/* Synchronous script that creates the @layer order declaration and keeps
-              it as the first child of <head> via MutationObserver. antd's CSS-in-JS
-              uses prependQueue to inject <style> tags at the top of <head>, which
-              would otherwise make @layer antd the first (lowest priority) layer.
-              MutationObserver fires before paint, so the browser never sees the
-              wrong cascade order. */}
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `(function(){var s=document.createElement("style");s.id="__lf-layer-order";s.textContent="@layer theme, base, antd, components, utilities;";document.head.prepend(s);new MutationObserver(function(){if(document.head.firstChild!==s)document.head.prepend(s)}).observe(document.head,{childList:true})})();`,
-            }}
-          />
-          {/* Synchronous pre-hydration background script — prevents mode-mismatch
-              flash on page navigation. Mirrors useDarkMode.js resolution order:
-              configDarkMode → localStorage → prefers-color-scheme. Uses the user's
-              configured colorBgLayout tokens when present (theme.antd.darkToken and
-              theme.antd.lightToken), falling back to #000 in dark and no inline style
-              in light so default behavior is unchanged. */}
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `(function(){var c=${safeScriptJson(configColorMode)};var db=${safeScriptJson(
-                darkBg
-              )};var lb=${safeScriptJson(
-                lightBg
-              )};var d;if(c==="dark")d=true;else if(c==="light")d=false;else{try{var p=localStorage.getItem("lowdefy_darkMode");if(p==="dark")d=true;else if(p==="light")d=false;else d=window.matchMedia("(prefers-color-scheme:dark)").matches}catch(e){d=window.matchMedia("(prefers-color-scheme:dark)").matches}}var bg=d?db:lb;if(bg)document.documentElement.style.backgroundColor=bg})();`,
-            }}
-          />
-          <link rel="manifest" href={`${basePath}/manifest.webmanifest`} />
-          <link rel="icon" type="image/svg+xml" href={`${basePath}/icon.svg`} />
-          <link rel="apple-touch-icon" href={`${basePath}/apple-touch-icon.png`} />
-          <meta name="viewport" content="width=device-width, initial-scale=1" />
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `/* start of Lowdefy append head */</script>${appJson.html.appendHead}<script>/* end of Lowdefy append head */`,
-            }}
-          />
-        </Head>
-        <body>
-          <Main />
-          <NextScript />
-          <script
-            dangerouslySetInnerHTML={{
-              __html: `/* start of Lowdefy append body */</script>${appJson.html.appendBody}<script>/* end of Lowdefy append body */`,
-            }}
-          />
-        </body>
-      </Html>
-    );
-  }
-}
-
-export default LowdefyDocument;

package/pages/api/auth/[...nextauth].js

@@ -1,37 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import NextAuth from 'next-auth';
-
-import apiWrapper from '../../../lib/server/apiWrapper.js';
-import authJson from '../../../lib/build/auth.js';
-
-async function handler({ context, req, res }) {
-  if (authJson.configured !== true) {
-    return res.status(404).json({
-      message: 'Auth not configured',
-    });
-  }
-
-  // Required for emails in corporate networks, see:
-  // https://next-auth.js.org/tutorials/avoid-corporate-link-checking-email-provider
-  if (req.method === 'HEAD') {
-    return res.status(200).end();
-  }
-  return NextAuth(req, res, context.authOptions);
-}
-
-export default apiWrapper(handler);

package/pages/api/endpoints/[...endpointId].js

@@ -1,32 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { callEndpoint } from '@lowdefy/api';
-
-import apiWrapper from '../../../lib/server/apiWrapper.js';
-
-async function handler({ context, req, res }) {
-  if (req.method !== 'POST') {
-    throw new Error('Only POST requests are supported.');
-  }
-  const endpointId = req.query.endpointId.join('/');
-  const { blockId, payload, pageId } = req.body;
-  context.logger.info({ event: 'call_api_endpoint', blockId, endpointId, pageId });
-  const response = await callEndpoint(context, { blockId, endpointId, pageId, payload });
-  res.status(200).json(response);
-}
-
-export default apiWrapper(handler);

package/pages/api/usage.js

@@ -1,67 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// TODO
-// import crypto from 'crypto';
-
-import packageJson from '../../package.json';
-import apiWrapper from '../../lib/server/apiWrapper.js';
-// import validateLicense from '../../lib/server/validateLicense.js';
-
-async function handler({ context, req, res }) {
-  if (req.method !== 'POST') {
-    throw new Error('Only POST requests are supported.');
-  }
-  const { user, machine } = req.body;
-  const host = req.headers.host;
-  context.logger.info({ event: 'log_usage', user, machine });
-
-  // const license = await validateLicense();
-  // if (license.entitlements.includes['OFFLINE']) {
-  //   return res.status(200).json({ offline: true });
-  // }
-  const timestamp = Date.now();
-
-  // const data = [
-  //   `gitSha: ${context.appMeta.gitSha}`,
-  //   `host: ${host}`,
-  //   `license_key: ${license.id}`,
-  //   `machine: ${machine}`,
-  //   `timestamp: ${timestamp}`,
-  //   `user: ${user}`,
-  //   `version: ${packageJson.version}`,
-  // ].join('\n');
-
-  // const hmac = crypto.createHmac('sha256', process.env.LOWDEFY_LICENSE_KEY ?? 'NO_LICENSE');
-  // hmac.update(data);
-  // const sig = hmac.digest('base64');
-
-  return res.status(200).json({
-    offline: false,
-    data: {
-      gitSha: context.appMeta.gitSha,
-      host,
-      // license_key: license.id,
-      machine,
-      // sig,
-      timestamp,
-      user,
-      version: packageJson.version,
-    },
-  });
-}
-
-export default apiWrapper(handler);