@plitzi/sdk-server 0.32.1 → 0.32.2

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @plitzi/sdk-server
 
+## 0.32.2
+
+### Patch Changes
+
+- v0.32.2
+- Updated dependencies
+  - @plitzi/plitzi-sdk@0.32.2
+  - @plitzi/sdk-shared@0.32.2
+
 ## 0.32.1
 
 ### Patch Changes

package/README.md

@@ -72,8 +72,8 @@ type SSRAdapters = {
   getOfflineData: (spaceId: number, environment: string, revision?: number) => Promise<OfflineDataRaw | undefined>;
   getSpaceDeployment: (req: SSRRequest) => Promise<SSRSpaceDeployment>;
   getUser?: (req: SSRRequest) => Promise<SSRUser | undefined>;
-  onLogin?: (req: SSRRequest) => Promise<boolean>;
-  onLogout?: (req: SSRRequest) => Promise<void>;
+  onLogin?: (req: SSRRequest, res: SSRResponseHelpers) => Promise<boolean>;
+  onLogout?: (req: SSRRequest, res: SSRResponseHelpers) => Promise<void>;
   getRscData?: (
     req: SSRRequest,
     spaceId: number,
@@ -88,8 +88,8 @@ type SSRAdapters = {
 - **`getOfflineData`** — returns the space snapshot (schema, plugins, styles, segments, collections) for SSR.
 - **`getSpaceDeployment`** — resolves which space and environment to render for a given inbound request. Return `{ error: { code, message } }` to abort with an HTTP error. Optionally include `templateProps` to override template variables, or `pluginNames` to activate plugins for the space (see [Plugins](#plugins) and [Template props](#template-props)).
 - **`getUser`** *(optional)* — resolves the authenticated user from the inbound request (e.g. via a session cookie or `Authorization` header). Called in parallel with `getOfflineData` on every cache miss. The returned user is forwarded to the SDK as `authenticated: true` and `user.details`, which controls page-level access for guest vs. registered users. Return `undefined` for unauthenticated requests.
-- **`onLogin`** *(optional)* — called when `POST {loginPath}` is received. Responsible for establishing a session or issuing tokens. Return `true` if login succeeded; return `false` to respond with `401 Unauthorized`.
-- **`onLogout`** *(optional)* — called when `POST {logoutPath}` is received. Responsible for invalidating any server-side user session or cache entry. The server responds with `204 No Content` after the adapter resolves.
+- **`onLogin`** *(optional)* — called when `POST {loginPath}` is received. Responsible for establishing a session or issuing tokens. The raw request body is available on `req.body` (e.g. `JSON.stringify({ username, password })`), and `res` lets the adapter set the session cookie via `res.setHeader('Set-Cookie', …)`. Return `true` if login succeeded; return `false` to reject it. For a navigation (full-page form submit, `Sec-Fetch-Mode: navigate`) the server responds with a `303` redirect so the view re-renders via a GET; for a fetch it responds `200`/`401`.
+- **`onLogout`** *(optional)* — called when `POST {logoutPath}` is received. Responsible for invalidating any server-side user session or cache entry, and may clear the session cookie via `res`. A navigation receives a `303` redirect; a fetch receives `204 No Content`.
 - **`getRscData`** *(optional)* — called by the RSC endpoint (`/_rsc`) to fetch server-side data for schema elements with `runtime: 'server'`. Receives the full request, space context, and the resolved user so that authenticated operations can be performed. When `ids` is provided the adapter should return data only for those element IDs (partial refresh); omitting `ids` means a full fetch for all elements. Return `{}` when there is no server data for the current request (see [RSC](#react-server-components-rsc)).
 
 ## JSON adapters (offline mode)
@@ -614,15 +614,15 @@ createSSRServer({ adapters: { getOfflineData, getSpaceDeployment, getUser } });
 
 ### Login endpoint
 
-The server exposes a built-in `POST /auth/login` endpoint. When hit, it calls `adapters.onLogin(req)` and responds with `200 OK` on success or `401 Unauthorized` when the adapter returns `false`:
+The server exposes a built-in `POST /auth/login` endpoint. When hit, it calls `adapters.onLogin(req, res)`. The raw request body is on `req.body`, and `res` is used to set the session cookie. A navigation (full-page form submit) gets a `303` redirect so the view re-renders; a fetch gets `200 OK` on success or `401 Unauthorized` when the adapter returns `false`:
 
 ```ts
-const onLogin = async (req: SSRRequest): Promise<boolean> => {
+const onLogin = async (req: SSRRequest, res: SSRResponseHelpers): Promise<boolean> => {
   const { username, password } = JSON.parse(req.body ?? '{}');
-  const user = await db.users.authenticate(username, password);
-  if (!user) return false;
+  const session = await db.users.authenticate(username, password);
+  if (!session) return false;
 
-  // Set session cookie or issue token here
+  res.setHeader('Set-Cookie', `my_session=${session.token}; Path=/; HttpOnly; SameSite=Lax`);
   return true;
 };
 
@@ -641,14 +641,16 @@ createSSRServer({
 
 ### Logout endpoint
 
-The server exposes a built-in `POST /auth/logout` endpoint. When hit, it calls `adapters.onLogout(req)` and responds with `204 No Content`. Implement `onLogout` to invalidate the session or cached user entry:
+The server exposes a built-in `POST /auth/logout` endpoint. When hit, it calls `adapters.onLogout(req, res)`. A navigation gets a `303` redirect so the view re-renders logged out; a fetch gets `204 No Content`. Implement `onLogout` to invalidate the session or cached user entry and clear the cookie:
 
 ```ts
-const onLogout = async (req: SSRRequest): Promise<void> => {
+const onLogout = async (req: SSRRequest, res: SSRResponseHelpers): Promise<void> => {
   const token = parseCookies(req.headers['cookie'] ?? '')['my_session'];
   if (token) {
     await cache.delete(`user-${token}`);
   }
+
+  res.setHeader('Set-Cookie', 'my_session=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0');
 };
 
 createSSRServer({ adapters: { getOfflineData, getSpaceDeployment, getUser, onLogout } });

package/dist/core/mimeTypes.js

@@ -20,7 +20,7 @@ var MIME_TYPES = {
 	".txt": "text/plain; charset=utf-8",
 	".xml": "application/xml"
 };
-var IMMUTABLE_EXTS = new Set([
+var IMMUTABLE_EXTS = /* @__PURE__ */ new Set([
 	".js",
 	".mjs",
 	".cjs",
@@ -38,4 +38,4 @@ var getCacheControl = (filePath) => {
 	return IMMUTABLE_EXTS.has(ext) ? "public, max-age=31536000, immutable" : "public, max-age=3600";
 };
 //#endregion
-export { getCacheControl, getMimeType };
+export { IMMUTABLE_EXTS, MIME_TYPES, getCacheControl, getMimeType };

package/dist/core/requestHandler.js

@@ -1,4 +1,4 @@
-import { parseRequest } from "./requestParser.js";
+import { parseRequest, readRawBody } from "./requestParser.js";
 import { serveStatic } from "./staticFiles.js";
 import { buildResponseHelpers } from "../helpers/buildResponseHelpers.js";
 import { runMiddlewares } from "../helpers/runMiddlewares.js";
@@ -13,6 +13,10 @@ import { fileURLToPath } from "node:url";
 //#region src/core/requestHandler.ts
 var __dirname = path.dirname(fileURLToPath(import.meta.url));
 var BUILTIN_PUBLIC_DIR = path.resolve(__dirname, "../public");
+var safeRedirectTarget = (req) => {
+	const redirectParam = req.query["redirect"];
+	return redirectParam && redirectParam.startsWith("/") && !redirectParam.startsWith("//") ? redirectParam : "/";
+};
 var handleRequest = async (raw, rawRes, config, port, renderFn, caches, pluginManager) => {
 	const req = parseRequest(raw);
 	const res = buildResponseHelpers(rawRes, req.headers["accept-encoding"]);
@@ -54,14 +58,28 @@ var handleRequest = async (raw, rawRes, config, port, renderFn, caches, pluginMa
 	}
 	const loginPath = config.loginPath === false ? null : config.loginPath ?? "/auth/login";
 	if (loginPath && req.method === "POST" && req.path === loginPath) {
-		if (await config.adapters.onLogin?.(req)) res.setStatus(200);
-		else res.setStatus(401);
+		req.body = await readRawBody(raw);
+		const isLoggedIn = await config.adapters.onLogin?.(req, res);
+		if (req.headers["sec-fetch-mode"] === "navigate") {
+			res.setStatus(303);
+			res.setHeader("Location", isLoggedIn ? safeRedirectTarget(req) : loginPath);
+			res.end();
+			return;
+		}
+		res.setStatus(isLoggedIn ? 200 : 401);
 		res.end();
 		return;
 	}
 	const logoutPath = config.logoutPath === false ? null : config.logoutPath ?? "/auth/logout";
 	if (logoutPath && req.method === "POST" && req.path === logoutPath) {
-		await config.adapters.onLogout?.(req);
+		req.body = await readRawBody(raw);
+		await config.adapters.onLogout?.(req, res);
+		if (req.headers["sec-fetch-mode"] === "navigate") {
+			res.setStatus(303);
+			res.setHeader("Location", safeRedirectTarget(req));
+			res.end();
+			return;
+		}
 		res.setStatus(204);
 		res.end();
 		return;

package/dist/core/requestParser.js

@@ -30,5 +30,20 @@ var parseRequest = (raw) => {
 		ctx: {}
 	};
 };
+var MAX_BODY_BYTES = 1024 * 1024;
+var readRawBody = (raw) => new Promise((resolve, reject) => {
+	const chunks = [];
+	let size = 0;
+	raw.on("data", (chunk) => {
+		size += chunk.length;
+		if (size > MAX_BODY_BYTES) {
+			reject(/* @__PURE__ */ new Error("Request body too large"));
+			return;
+		}
+		chunks.push(chunk);
+	});
+	raw.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
+	raw.on("error", reject);
+});
 //#endregion
-export { parseRequest };
+export { parseRequest, readRawBody };

package/dist/core/transports.js

@@ -48,4 +48,4 @@ var buildTransport = (config, handler, port) => {
 	};
 };
 //#endregion
-export { buildTransport, protoLabel };
+export { buildTransport, protoLabel, tlsOptions };

package/dist/helpers/readCookie.js

@@ -0,0 +1,11 @@
+//#region src/helpers/readCookie.ts
+var readCookie = (cookieHeader, name) => {
+	if (!cookieHeader) return;
+	for (const part of cookieHeader.split(";")) {
+		const eq = part.indexOf("=");
+		if (eq === -1) continue;
+		if (part.slice(0, eq).trim() === name) return decodeURIComponent(part.slice(eq + 1).trim());
+	}
+};
+//#endregion
+export { readCookie };

package/dist/index.d.ts

@@ -1,2 +1,2 @@
-export * from './src/index'
+export * from './src/index.js'
 export {}

package/dist/modules/mcp/handler.js

@@ -1,6 +1,6 @@
 import { createMcpServer } from "./server.js";
 import AIEngine from "../ai/AIEngine.js";
-import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp";
 //#region src/modules/mcp/handler.ts
 var readMcpBody = (req) => new Promise((resolve, reject) => {
 	let raw = "";

package/dist/modules/mcp/helpers.js

@@ -72,4 +72,4 @@ var adapterWrapper = (adapterName, handler) => {
 	};
 };
 //#endregion
-export { bindTools, getAllowedModes, isToolActive, resolveToolHandler, toolResponseErr, toolResponseOk, zodToJsonSchema };
+export { adapterWrapper, bindTools, getAllowedModes, isToolActive, resolveToolHandler, toolResponseErr, toolResponseOk, zodToJsonSchema };

package/dist/modules/mcp/resources/index.js

@@ -68,4 +68,4 @@ var getResourceList = () => allResources.map(({ uri, name, description }) => ({
 }));
 var getResourceByUri = (uri) => allResources.find((r) => r.uri === uri);
 //#endregion
-export { getResourceByUri, getResourceList, registerResources };
+export { allResources, getResourceByUri, getResourceList, registerResources };

package/dist/modules/mcp/tools/index.js

@@ -147,4 +147,4 @@ var tools_exports = /* @__PURE__ */ __exportAll({
 	updateVariableTool: () => updateVariableTool
 });
 //#endregion
-export { tools_exports };
+export { addPluginTool, addResourceTool, applyPreviewTool, cloneElementTool, createCollectionRecordTool, createCollectionTool, createElementTool, createPageFolderTool, createPageTool, createSegmentElementTool, createSegmentStyleVariableTool, createSegmentTool, createSegmentVariableTool, createStyleSelectorTool, createStyleVariableTool, createVariableTool, deleteCollectionRecordTool, deleteCollectionTool, deleteElementTool, deletePageFolderTool, deletePageTool, deleteSegmentElementTool, deleteSegmentStyleVariableTool, deleteSegmentTool, deleteSegmentVariableTool, deleteStyleSelectorTool, deleteStyleVariableTool, deleteVariableTool, getCollectionRecordTool, getCollectionRecordsTool, getCollectionTool, getCollectionsTool, getElementTool, getElementsTool, getPageBySlugTool, getPageFolderTool, getPageFoldersTool, getPageTool, getPagesTool, getResourceTool, getResourcesTool, getSegmentTool, getSegmentsTool, getSpaceSettingsTool, getStyleSelectorsTool, getStyleVariableTool, getStyleVariablesTool, getVariableTool, getVariablesTool, listElementsTool, listPluginsTool, listResourcesTool, moveElementTool, moveResourceTool, moveSegmentElementTool, readResourceTool, removePluginTool, removeResourceTool, tools_exports, updateCollectionRecordTool, updateCollectionTool, updateElementTool, updatePageFolderTool, updatePageTool, updatePluginTool, updateSegmentElementTool, updateSegmentStyleVariableTool, updateSegmentTool, updateSegmentVariableTool, updateSpaceSettingsTool, updateStyleSelectorTool, updateStyleVariableTool, updateVariableTool };

package/dist/modules/mcp/tools/space/schema/schemas.js

@@ -50,4 +50,4 @@ var schemaVariableSchema = z.object({
 	})).describe("Conditional sub-values")
 });
 //#endregion
-export { elementSchema, pageFolderSchema, schemaVariableSchema };
+export { elementDefinitionSchema, elementSchema, pageFolderSchema, schemaVariableSchema };

package/dist/modules/ssr/Component.js

@@ -1,7 +1,7 @@
 import PlitziSdk from "@plitzi/plitzi-sdk";
 import { jsx } from "react/jsx-runtime";
 //#region src/modules/ssr/Component.tsx
-var Component = ({ server, renderMode = "raw", previewMode = true, offlineData, environment = "main", plugins }) => {
+var Component = ({ server, renderMode = "raw", previewMode = true, offlineData, environment = "main", plugins, ssrResult, sdkDevToolsStylePath, debugMode = false }) => {
 	return /* @__PURE__ */ jsx(PlitziSdk, {
 		environment,
 		server,
@@ -9,6 +9,9 @@ var Component = ({ server, renderMode = "raw", previewMode = true, offlineData,
 		renderMode,
 		offlineMode: !!offlineData && Object.keys(offlineData).length > 0,
 		offlineData,
+		ssrResult,
+		sdkDevToolsStylePath,
+		debugMode,
 		children: plugins && Object.keys(plugins).map((key) => /* @__PURE__ */ jsx(PlitziSdk.Plugin, {
 			renderType: key,
 			component: plugins[key].component,

package/dist/modules/ssr/applySSRResult.js

@@ -0,0 +1,14 @@
+//#region src/modules/ssr/applySSRResult.ts
+var applySSRResult = (res, result) => {
+	if (result.headers) for (const [name, value] of Object.entries(result.headers)) res.setHeader(name, value);
+	if (result.redirect !== void 0) {
+		res.setStatus(result.status ?? 302);
+		res.setHeader("Location", result.redirect);
+		res.send("");
+		return true;
+	}
+	if (result.status !== void 0) res.setStatus(result.status);
+	return false;
+};
+//#endregion
+export { applySSRResult };

package/dist/modules/ssr/buildBody.js

@@ -5,16 +5,24 @@ import { jsx } from "react/jsx-runtime";
 //#region src/modules/ssr/buildBody.tsx
 var buildBody = async (req, config, spaceId, environment, revision, renderFn, pluginManager, offlineDataCache, metrics) => {
 	const prep = await prepareRender(req, config, spaceId, environment, revision, pluginManager, offlineDataCache, metrics);
+	const result = {};
 	const reactStart = metrics ? performance.now() : 0;
-	const html = renderToString(/* @__PURE__ */ jsx(Component, { ...prep.componentProps })).trim();
+	const html = renderToString(/* @__PURE__ */ jsx(Component, {
+		...prep.componentProps,
+		ssrResult: result
+	})).trim();
 	metrics?.record("react", Math.round(performance.now() - reactStart));
+	if (result.redirect !== void 0) return { result };
 	const templateStart = metrics ? performance.now() : 0;
 	const body = renderFn({
 		...prep.templateParams,
 		html
 	});
 	metrics?.record("template", Math.round(performance.now() - templateStart));
-	return body;
+	return {
+		body,
+		result
+	};
 };
 //#endregion
 export { buildBody };

package/dist/modules/ssr/handler.js

@@ -1,4 +1,5 @@
 import { buildHtmlCacheKey } from "../../helpers/cache/keys.js";
+import { applySSRResult } from "./applySSRResult.js";
 import { buildBody } from "./buildBody.js";
 import { streamBody } from "./streamBody.js";
 import { RequestMetrics } from "../../helpers/metrics.js";
@@ -24,13 +25,14 @@ var renderSSR = async (req, res, config, renderFn, pluginManager, caches) => {
 		await streamBody(req, res, config, spaceId, environment, revision, renderFn, pluginManager, caches.offlineData, htmlCache, cacheKey, metrics);
 		return;
 	}
-	const body = await buildBody(req, config, spaceId, environment, revision, renderFn, pluginManager, caches.offlineData, metrics);
-	if (htmlCache && cacheKey) htmlCache.set(cacheKey, body);
+	const { body, result } = await buildBody(req, config, spaceId, environment, revision, renderFn, pluginManager, caches.offlineData, metrics);
 	if (metrics) {
 		res.setHeader("Server-Timing", metrics.toServerTimingHeader());
 		metrics.log(`${req.method} ${req.path}`);
 	}
-	res.send(body);
+	if (applySSRResult(res, result)) return;
+	if (htmlCache && cacheKey && body !== void 0) htmlCache.set(cacheKey, body);
+	res.send(body ?? "");
 };
 //#endregion
 export { renderSSR };

package/dist/modules/ssr/prepareRender.js

@@ -3,6 +3,7 @@ import { loadPluginComponents } from "./loadPluginComponents.js";
 import { registerExternalPlugins } from "./registerExternalPlugins.js";
 import { buildServerInfo } from "../../helpers/buildServerInfo.js";
 import { escapeJson } from "../../helpers/escapeJson.js";
+import { readCookie } from "../../helpers/readCookie.js";
 //#region src/modules/ssr/prepareRender.tsx
 var prepareRender = async (req, config, spaceId, environment, revision, pluginManager, offlineDataCache, metrics) => {
 	const m = (name, fn) => metrics ? metrics.measure(name, fn) : Promise.resolve(fn());
@@ -10,12 +11,17 @@ var prepareRender = async (req, config, spaceId, environment, revision, pluginMa
 	const cachedOfflineStr = offlineCacheKey ? offlineDataCache?.get(offlineCacheKey) : void 0;
 	const [offlineData, server] = await Promise.all([cachedOfflineStr ? JSON.parse(cachedOfflineStr) : m("schema", () => config.adapters.getOfflineData(spaceId, environment, revision)), m("rsc", () => buildServerInfo(req, config))]);
 	if (!cachedOfflineStr && offlineCacheKey && offlineData !== void 0) offlineDataCache?.set(offlineCacheKey, JSON.stringify(offlineData));
+	const v = config.assetVersion ? `?v=${config.assetVersion}` : "";
+	const sdkDevToolsStylePath = `/sdk-assets/plitzi-sdk-devtools.css${v}`;
+	const debugCookie = readCookie(req.headers.cookie, "plitzi_debug");
+	const debugMode = debugCookie === void 0 ? config.devMode : debugCookie === "true";
 	const offlineDataStr = escapeJson(JSON.stringify({
 		offlineData,
 		offlineMode: true,
 		environment,
 		renderMode: "raw",
-		server
+		server,
+		sdkDevToolsStylePath
 	}));
 	const pluginNames = req.ctx.spaceDeployment?.pluginNames ?? [];
 	const pluginSources = req.ctx.spaceDeployment?.pluginSources;
@@ -34,14 +40,15 @@ var prepareRender = async (req, config, spaceId, environment, revision, pluginMa
 	const entries = allPluginNames.length > 0 ? await pluginManager.getEntries(allPluginNames) : [];
 	const pluginComponents = await m("plugins", () => loadPluginComponents(entries, pluginManager.getComponents()));
 	const templatePlugins = entries.length > 0 ? entries : req.ctx.spaceDeployment?.templateProps?.plugins;
-	const v = config.assetVersion ? `?v=${config.assetVersion}` : "";
 	const vendorJs = (config.devMode ? "/sdk-assets/plitzi-sdk-dev-vendor.js" : "/sdk-assets/plitzi-sdk-vendor.js") + v;
 	return {
 		componentProps: {
 			plugins: Object.keys(pluginComponents).length > 0 ? pluginComponents : void 0,
 			offlineData,
 			server,
-			environment: req.ctx.spaceDeployment?.environment ?? environment
+			environment: req.ctx.spaceDeployment?.environment ?? environment,
+			debugMode,
+			sdkDevToolsStylePath
 		},
 		entries,
 		templateParams: {
@@ -52,9 +59,10 @@ var prepareRender = async (req, config, spaceId, environment, revision, pluginMa
 			reactJsx: vendorJs,
 			reactDom: vendorJs,
 			reactDomClient: vendorJs,
+			reactCompilerRuntime: vendorJs,
 			...req.ctx.spaceDeployment?.templateProps,
 			plugins: templatePlugins,
-			debugMode: config.devMode,
+			debugMode,
 			ssrOnly: config.ssrOnly === true,
 			offlineData: offlineDataStr
 		}

package/dist/modules/ssr/registerExternalPlugins.js

@@ -1,5 +1,33 @@
+import path from "node:path";
+import crypto from "node:crypto";
+import fs from "node:fs/promises";
 //#region src/modules/ssr/registerExternalPlugins.ts
-var fetchManifest = async (resource) => {
+var MANIFEST_TTL_MS = 600 * 1e3;
+var manifestCache = /* @__PURE__ */ new Map();
+var refreshing = /* @__PURE__ */ new Set();
+var cacheDir;
+var manifestCacheDir = (pluginManager) => {
+	cacheDir ??= path.join(pluginManager.outputDir, ".manifest-cache");
+	return cacheDir;
+};
+var cacheFilePath = (dir, resource) => path.join(dir, `${crypto.createHash("sha1").update(resource).digest("hex")}.json`);
+var readDiskEntry = async (dir, resource) => {
+	try {
+		const raw = await fs.readFile(cacheFilePath(dir, resource), "utf-8");
+		return JSON.parse(raw);
+	} catch {
+		return null;
+	}
+};
+var writeDiskEntry = async (dir, resource, entry) => {
+	try {
+		await fs.mkdir(dir, { recursive: true });
+		await fs.writeFile(cacheFilePath(dir, resource), JSON.stringify(entry), "utf-8");
+	} catch (err) {
+		console.warn(`[SSR] Failed to persist plugin manifest cache for ${resource}:`, err);
+	}
+};
+var fetchAndStore = async (dir, resource) => {
 	try {
 		const url = `${resource}/plugin-manifest.json`;
 		const res = await fetch(url);
@@ -7,12 +35,34 @@ var fetchManifest = async (resource) => {
 			console.warn(`[SSR] Failed to fetch plugin manifest from ${url}: HTTP ${res.status}`);
 			return null;
 		}
-		return await res.json();
+		const manifest = await res.json();
+		const entry = {
+			manifest,
+			expiresAt: Date.now() + MANIFEST_TTL_MS
+		};
+		manifestCache.set(resource, entry);
+		await writeDiskEntry(dir, resource, entry);
+		return manifest;
 	} catch (err) {
 		console.warn(`[SSR] Error fetching plugin manifest from ${resource}:`, err);
 		return null;
 	}
 };
+var revalidate = (dir, resource) => {
+	if (refreshing.has(resource)) return;
+	refreshing.add(resource);
+	fetchAndStore(dir, resource).finally(() => refreshing.delete(resource));
+};
+var fetchManifest = async (pluginManager, resource) => {
+	const dir = manifestCacheDir(pluginManager);
+	const cached = manifestCache.get(resource) ?? await readDiskEntry(dir, resource) ?? void 0;
+	if (cached) {
+		manifestCache.set(resource, cached);
+		if (cached.expiresAt <= Date.now()) revalidate(dir, resource);
+		return cached.manifest;
+	}
+	return fetchAndStore(dir, resource);
+};
 var resolveAssetUrl = (resource, asset) => {
 	if (asset.url) return asset.url;
 	if (asset.src) return `${resource}/${asset.src}`;
@@ -26,7 +76,7 @@ var findAsset = (manifest, type, resource) => {
 var isAbsoluteUrl = (url) => url.startsWith("http://") || url.startsWith("https://");
 var registerPlugin = async (pluginManager, plugin) => {
 	if (!plugin.resource || !isAbsoluteUrl(plugin.resource)) return null;
-	const manifest = await fetchManifest(plugin.resource);
+	const manifest = await fetchManifest(pluginManager, plugin.resource);
 	if (!manifest) return null;
 	const jsUrl = findAsset(manifest, "script", plugin.resource);
 	if (!jsUrl) {

package/dist/modules/ssr/streamBody.js

@@ -1,3 +1,4 @@
+import { applySSRResult } from "./applySSRResult.js";
 import Component from "./Component.js";
 import { prepareRender } from "./prepareRender.js";
 import { renderToPipeableStream } from "react-dom/server";
@@ -16,6 +17,7 @@ var streamBody = async (req, res, config, spaceId, environment, revision, render
 	const sentinelIdx = fullTemplate.indexOf(SSR_SENTINEL);
 	const head = sentinelIdx >= 0 ? fullTemplate.slice(0, sentinelIdx) : fullTemplate;
 	const tail = sentinelIdx >= 0 ? fullTemplate.slice(sentinelIdx + 18) : "";
+	const result = {};
 	await new Promise((resolve, reject) => {
 		const chunks = cacheKey && htmlCache ? [] : null;
 		const writable = new Writable({
@@ -34,13 +36,21 @@ var streamBody = async (req, res, config, spaceId, environment, revision, render
 			}
 		});
 		const reactStart = metrics ? performance.now() : 0;
-		const { pipe } = renderToPipeableStream(/* @__PURE__ */ jsx(Component, { ...prep.componentProps }), {
+		const { pipe, abort } = renderToPipeableStream(/* @__PURE__ */ jsx(Component, {
+			...prep.componentProps,
+			ssrResult: result
+		}), {
 			onShellReady() {
 				metrics?.record("react", Math.round(performance.now() - reactStart));
 				if (metrics) {
 					res.setHeader("Server-Timing", metrics.toServerTimingHeader());
 					metrics.log(`${req.method} ${req.path}`);
 				}
+				if (applySSRResult(res, result)) {
+					abort();
+					resolve();
+					return;
+				}
 				res.write(Buffer.from(head, "utf-8"));
 				pipe(writable);
 			},

package/dist/modules/ssr/views/template.ejs

@@ -20,6 +20,7 @@
           "react-dom": "<%= locals.reactDom || '' %>",
           "react-dom/client": "<%= locals.reactDomClient || '' %>",
           "react/jsx-runtime": "<%= locals.reactJsx || '' %>",
+          "react/compiler-runtime": "<%= locals.reactCompilerRuntime || locals.react || '' %>",
           "@plitzi/plitzi-sdk": "<%= locals.jsPath || '' %>"
         }
       }

package/dist/package.js

@@ -1,62 +1,77 @@
+//#region package.json
+var name = "@plitzi/sdk-server";
+var version = "0.32.2";
+var license = "AGPL-3.0";
+var files = ["dist"];
+var main = "dist/index.js";
+var module = "dist/index.js";
+var types = "dist/index.d.ts";
+var exports = { ".": {
+	"types": "./dist/index.d.ts",
+	"import": "./dist/index.js",
+	"default": "./dist/index.js"
+} };
+var repository = {
+	"type": "https",
+	"url": "https://github.com/plitzi/plitzi-workspace.git"
+};
+var type = "module";
+var dependencies = {
+	"@modelcontextprotocol/sdk": "^1.29.0",
+	"@plitzi/plitzi-sdk": "workspace:*",
+	"@plitzi/sdk-shared": "workspace:*",
+	"ejs": "^6.0.1",
+	"esbuild": "^0.28.1",
+	"zod": "^4.4.3"
+};
+var peerDependencies = {
+	"react": "^19",
+	"react-dom": "^19"
+};
+var devDependencies = {
+	"@types/ejs": "^3.1.5",
+	"@types/node": "^26.0.0",
+	"@types/react": "^19.2.17",
+	"@vitejs/plugin-react": "^6.0.2",
+	"@vitest/coverage-v8": "^4.1.9",
+	"eslint": "^9.39.4",
+	"eslint-plugin-import": "^2.32.0",
+	"react": "^19.2.7",
+	"react-dom": "^19.2.7",
+	"tsx": "^4.22.4",
+	"typescript": "^6.0.3",
+	"vite": "^8.0.16",
+	"vite-plugin-dts": "^5.0.2",
+	"vitest": "^4.1.9"
+};
+var scripts = {
+	"start:dev": "node --import ./src/standalone/register-alias.mjs --watch src/standalone/server.ts",
+	"start": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx src/standalone/server.ts",
+	"start:watch": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --watch src/standalone/server.ts",
+	"start:inspect": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --inspect src/standalone/server.ts",
+	"build:dev": "vite build --mode development",
+	"build:prod": "vite build",
+	"lint": "TIMING=1 eslint ./src",
+	"typecheck": "tsc -p tsconfig.app.json --noEmit",
+	"test": "vitest run",
+	"test:coverage": "vitest run --coverage"
+};
 var package_default = {
-	name: "@plitzi/sdk-server",
-	version: "0.32.1",
-	license: "AGPL-3.0",
-	files: ["dist"],
-	main: "dist/index.js",
-	module: "dist/index.js",
-	types: "dist/index.d.ts",
-	exports: { ".": {
-		"types": "./dist/index.d.ts",
-		"import": "./dist/index.js",
-		"default": "./dist/index.js"
-	} },
-	repository: {
-		"type": "https",
-		"url": "https://github.com/plitzi/plitzi-workspace.git"
-	},
-	type: "module",
+	name,
+	version,
+	license,
+	files,
+	main,
+	module,
+	types,
+	exports,
+	repository,
+	type,
 	sideEffects: false,
-	dependencies: {
-		"@modelcontextprotocol/sdk": "^1.29.0",
-		"@plitzi/plitzi-sdk": "workspace:*",
-		"@plitzi/sdk-shared": "workspace:*",
-		"ejs": "^6.0.1",
-		"esbuild": "^0.28.0",
-		"zod": "^4.4.3"
-	},
-	peerDependencies: {
-		"react": "^19",
-		"react-dom": "^19"
-	},
-	devDependencies: {
-		"@types/ejs": "^3.1.5",
-		"@types/node": "^25.9.1",
-		"@types/react": "^19.2.15",
-		"@vitejs/plugin-react": "^6.0.2",
-		"@vitest/coverage-v8": "^4.1.7",
-		"eslint": "^9.39.4",
-		"eslint-plugin-import": "^2.32.0",
-		"react": "^19.2.6",
-		"react-dom": "^19.2.6",
-		"tsx": "^4.22.3",
-		"typescript": "^6.0.3",
-		"vite": "^8.0.14",
-		"vite-plugin-dts": "^5.0.1",
-		"vitest": "^4.1.7"
-	},
-	scripts: {
-		"start:dev": "TSX_TSCONFIG_PATH=tsconfig.app.json ALIAS_LOADER_DEBUG=1  node --import ./src/standalone/register-alias.mjs --import tsx --watch src/standalone/server.ts",
-		"start": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx src/standalone/server.ts",
-		"start:watch": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --watch src/standalone/server.ts",
-		"start:inspect": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --inspect src/standalone/server.ts",
-		"build:dev": "vite build --mode development",
-		"build:prod": "vite build",
-		"lint": "TIMING=1 eslint ./src",
-		"typecheck": "tsc -p tsconfig.app.json --noEmit",
-		"test": "vitest run",
-		"test:coverage": "vitest run --coverage"
-	}
+	dependencies,
+	peerDependencies,
+	devDependencies,
+	scripts
 };
 //#endregion
-export { package_default as default };
+export { package_default as default, dependencies, devDependencies, exports, files, license, main, module, name, peerDependencies, repository, scripts, type, types, version };

package/dist/package.json.d.ts

@@ -1,6 +1,6 @@
 declare const _default: {
   "name": "@plitzi/sdk-server",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "license": "AGPL-3.0",
   "files": [
     "dist"
@@ -26,7 +26,7 @@ declare const _default: {
     "@plitzi/plitzi-sdk": "workspace:*",
     "@plitzi/sdk-shared": "workspace:*",
     "ejs": "^6.0.1",
-    "esbuild": "^0.28.0",
+    "esbuild": "^0.28.1",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
@@ -35,22 +35,22 @@ declare const _default: {
   },
   "devDependencies": {
     "@types/ejs": "^3.1.5",
-    "@types/node": "^25.9.1",
-    "@types/react": "^19.2.15",
+    "@types/node": "^26.0.0",
+    "@types/react": "^19.2.17",
     "@vitejs/plugin-react": "^6.0.2",
-    "@vitest/coverage-v8": "^4.1.7",
+    "@vitest/coverage-v8": "^4.1.9",
     "eslint": "^9.39.4",
     "eslint-plugin-import": "^2.32.0",
-    "react": "^19.2.6",
-    "react-dom": "^19.2.6",
-    "tsx": "^4.22.3",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
+    "tsx": "^4.22.4",
     "typescript": "^6.0.3",
-    "vite": "^8.0.14",
-    "vite-plugin-dts": "^5.0.1",
-    "vitest": "^4.1.7"
+    "vite": "^8.0.16",
+    "vite-plugin-dts": "^5.0.2",
+    "vitest": "^4.1.9"
   },
   "scripts": {
-    "start:dev": "TSX_TSCONFIG_PATH=tsconfig.app.json ALIAS_LOADER_DEBUG=1  node --import ./src/standalone/register-alias.mjs --import tsx --watch src/standalone/server.ts",
+    "start:dev": "node --import ./src/standalone/register-alias.mjs --watch src/standalone/server.ts",
     "start": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx src/standalone/server.ts",
     "start:watch": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --watch src/standalone/server.ts",
     "start:inspect": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --inspect src/standalone/server.ts",

package/dist/src/core/requestParser.d.ts

@@ -1,3 +1,4 @@
 import { SSRRequest } from '@plitzi/sdk-shared';
 import { IncomingMessage } from 'node:http';
 export declare const parseRequest: (raw: IncomingMessage) => SSRRequest;
+export declare const readRawBody: (raw: IncomingMessage) => Promise<string>;

package/dist/src/helpers/readCookie.d.ts

@@ -0,0 +1 @@
+export declare const readCookie: (cookieHeader: string | undefined, name: string) => string | undefined;

package/dist/src/modules/mcp/handler.d.ts

@@ -1,4 +1,4 @@
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp';
 import { McpServerConfig, AiContext } from '@plitzi/sdk-shared';
 import { IncomingMessage, ServerResponse } from 'node:http';

package/dist/src/modules/ssr/Component.d.ts

@@ -1,4 +1,4 @@
-import { OfflineDataRaw, Environment, RenderMode, Server, SSRPlugin } from '@plitzi/sdk-shared';
+import { OfflineDataRaw, Environment, RenderMode, Server, SSRPlugin, SSRRenderResult } from '@plitzi/sdk-shared';
 export type ComponentProps = {
     server: Partial<Server>;
     renderMode?: Extract<RenderMode, 'raw'>;
@@ -6,6 +6,9 @@ export type ComponentProps = {
     previewMode?: boolean;
     offlineData?: OfflineDataRaw;
     plugins?: Record<string, SSRPlugin>;
+    ssrResult?: SSRRenderResult;
+    sdkDevToolsStylePath?: string;
+    debugMode?: boolean;
 };
-declare const Component: ({ server, renderMode, previewMode, offlineData, environment, plugins }: ComponentProps) => import("react/jsx-runtime").JSX.Element;
+declare const Component: ({ server, renderMode, previewMode, offlineData, environment, plugins, ssrResult, sdkDevToolsStylePath, debugMode }: ComponentProps) => import("react").JSX.Element;
 export default Component;

package/dist/src/modules/ssr/applySSRResult.d.ts

@@ -0,0 +1,2 @@
+import { SSRRenderResult, SSRResponseHelpers } from '@plitzi/sdk-shared';
+export declare const applySSRResult: (res: SSRResponseHelpers, result: SSRRenderResult) => boolean;

package/dist/src/modules/ssr/buildBody.d.ts

@@ -1,5 +1,9 @@
 import { TtlCache } from '../../helpers/cache';
 import { RequestMetrics } from '../../helpers/metrics';
 import { PluginManager } from '../../plugins/manager';
-import { Environment, SSRRequest, SSRServerConfig, SSRTemplateFn } from '@plitzi/sdk-shared';
-export declare const buildBody: (req: SSRRequest, config: SSRServerConfig, spaceId: number, environment: Environment, revision: number, renderFn: SSRTemplateFn, pluginManager: PluginManager, offlineDataCache?: TtlCache<string>, metrics?: RequestMetrics) => Promise<string>;
+import { Environment, SSRRenderResult, SSRRequest, SSRServerConfig, SSRTemplateFn } from '@plitzi/sdk-shared';
+export type BuildBodyResult = {
+    body?: string;
+    result: SSRRenderResult;
+};
+export declare const buildBody: (req: SSRRequest, config: SSRServerConfig, spaceId: number, environment: Environment, revision: number, renderFn: SSRTemplateFn, pluginManager: PluginManager, offlineDataCache?: TtlCache<string>, metrics?: RequestMetrics) => Promise<BuildBodyResult>;

package/dist/src/standalone/alias-loader.d.mts

@@ -1 +1,2 @@
 export function resolve(specifier: any, context: any, defaultResolve: any): Promise<any>;
+export function load(url: any, context: any, nextLoad: any): Promise<any>;

package/dist/src/standalone/plugins/ClientInfo.d.ts

@@ -1,2 +1,2 @@
-declare const ClientInfo: () => import("react/jsx-runtime").JSX.Element;
+declare const ClientInfo: () => import("react").JSX.Element;
 export default ClientInfo;

package/dist/src/standalone/plugins/ServerInfo.d.ts

@@ -1,2 +1,2 @@
-declare const ServerInfo: () => import("react/jsx-runtime").JSX.Element;
+declare const ServerInfo: () => import("react").JSX.Element;
 export default ServerInfo;

package/dist/src/standalone/plugins/SharedInfo.d.ts

@@ -1,2 +1,2 @@
-declare const SharedInfo: () => import("react/jsx-runtime").JSX.Element;
+declare const SharedInfo: () => import("react").JSX.Element;
 export default SharedInfo;

package/dist/src/standalone/stubs/react-syntax-highlighter.d.mts

@@ -0,0 +1,31 @@
+export function PrismLight({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+export namespace PrismLight {
+    function registerLanguage(): void;
+}
+export function PrismLight({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+export namespace PrismLight { }
+export function PrismLight({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+export namespace PrismLight { }
+export function PrismLight({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+export namespace PrismLight { }
+export function PrismLight({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+export namespace PrismLight { }
+export function PrismLight({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+export namespace PrismLight { }
+export default SyntaxHighlighter;
+declare function SyntaxHighlighter({ children }: {
+    children: any;
+}): import('react').ReactElement<unknown, string | import('react').JSXElementConstructor<any>>;
+declare namespace SyntaxHighlighter { }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plitzi/sdk-server",
-  "version": "0.32.1",
+  "version": "0.32.2",
   "license": "AGPL-3.0",
   "files": [
     "dist"
@@ -23,10 +23,10 @@
   "sideEffects": false,
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@plitzi/plitzi-sdk": "0.32.1",
-    "@plitzi/sdk-shared": "0.32.1",
+    "@plitzi/plitzi-sdk": "0.32.2",
+    "@plitzi/sdk-shared": "0.32.2",
     "ejs": "^6.0.1",
-    "esbuild": "^0.28.0",
+    "esbuild": "^0.28.1",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
@@ -35,22 +35,22 @@
   },
   "devDependencies": {
     "@types/ejs": "^3.1.5",
-    "@types/node": "^25.9.1",
-    "@types/react": "^19.2.15",
+    "@types/node": "^26.0.0",
+    "@types/react": "^19.2.17",
     "@vitejs/plugin-react": "^6.0.2",
-    "@vitest/coverage-v8": "^4.1.7",
+    "@vitest/coverage-v8": "^4.1.9",
     "eslint": "^9.39.4",
     "eslint-plugin-import": "^2.32.0",
-    "react": "^19.2.6",
-    "react-dom": "^19.2.6",
-    "tsx": "^4.22.3",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
+    "tsx": "^4.22.4",
     "typescript": "^6.0.3",
-    "vite": "^8.0.14",
-    "vite-plugin-dts": "^5.0.1",
-    "vitest": "^4.1.7"
+    "vite": "^8.0.16",
+    "vite-plugin-dts": "^5.0.2",
+    "vitest": "^4.1.9"
   },
   "scripts": {
-    "start:dev": "TSX_TSCONFIG_PATH=tsconfig.app.json ALIAS_LOADER_DEBUG=1  node --import ./src/standalone/register-alias.mjs --import tsx --watch src/standalone/server.ts",
+    "start:dev": "node --import ./src/standalone/register-alias.mjs --watch src/standalone/server.ts",
     "start": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx src/standalone/server.ts",
     "start:watch": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --watch src/standalone/server.ts",
     "start:inspect": "TSX_TSCONFIG_PATH=tsconfig.app.json node --import tsx --inspect src/standalone/server.ts",