@wealthfolio/addon-dev-tools 3.6.1 → 3.7.0

package/README.md

@@ -47,6 +47,11 @@ wealthfolio-addon test
 
 ## Development Server
 
+> **Version compatibility:** Wealthfolio 3.7 requires
+> `@wealthfolio/addon-dev-tools` 3.7 or newer. If the app reports that the
+> server does not support v3.7 runtime packages, update this package and restart
+> the development server.
+
 The development server provides:
 
 - Hot reload functionality
@@ -57,12 +62,37 @@ The development server provides:
 ### API Endpoints
 
 - `GET /health` - Health check
-- `GET /status` - Addon status and last modified time
+- `GET /status` - Build state and published runtime-package generation
 - `GET /manifest.json` - Addon manifest
 - `GET /addon.js` - Built addon code
+- `GET /runtime-package` - One coherent manifest, code, and asset-metadata
+  snapshot
+- `GET /runtime-files` - Built JavaScript and CSS modules
+- `GET /runtime-assets` - Packaged asset metadata
+- `GET /runtime-assets/:assetId?generation=<id>` - One asset from a published
+  generation
 - `GET /files` - List of built files
 - `GET /test` - Test connectivity
 
+The host loads `/runtime-package` first, then requests asset bytes from the same
+generation. The server retains the four most recent immutable generations so a
+reload cannot mix new metadata with old bytes. A generation older than that
+window is intentionally unavailable and the host must load the current package
+snapshot again. `/manifest.json` and `/addon.js` remain diagnostic/legacy
+endpoints; Wealthfolio 3.7 live loading does not assemble a runtime from them.
+
+Files below `assets/**` and non-code files below `dist/assets/**` are published
+as private asset metadata and lazy byte responses. JavaScript and CSS remain in
+`/runtime-files`. The same 256-entry, 5 MiB-per-file, and 25 MiB-package limits
+used during installation are enforced during development.
+
+Generated projects pin `build.target` to Chrome/Edge 107, Firefox 104, and
+Safari 16, matching Wealthfolio 3.7. Keep that explicit target when customizing
+Vite so a future Vite default cannot silently raise the addon's browser floor.
+The sandbox supports packaged images, fonts, media, CSS, and WebAssembly, but
+does not allow Worker/service-worker entry points, popups, direct network
+requests, or remote CSS imports.
+
 ## Usage in Addon Projects
 
 Add to your addon's `package.json`:
@@ -73,7 +103,7 @@ Add to your addon's `package.json`:
     "dev:server": "wealthfolio-addon dev"
   },
   "devDependencies": {
-    "@wealthfolio/addon-dev-tools": "^1.0.0"
+    "@wealthfolio/addon-dev-tools": "^3.7.0"
   }
 }
 ```

package/dev-server.js

@@ -15,8 +15,219 @@ const path = require("path");
 const fs = require("fs");
 const { exec } = require("child_process");
 const { promisify } = require("util");
+const { createHash } = require("crypto");
 
 const execAsync = promisify(exec);
+const MAX_RUNTIME_PACKAGE_ENTRIES = 256;
+const MAX_RUNTIME_ASSET_FILE_SIZE = 5 * 1024 * 1024;
+const MAX_RUNTIME_ASSET_TOTAL_SIZE = 25 * 1024 * 1024;
+const MAX_RUNTIME_PACKAGE_GENERATIONS = 4;
+
+function runtimeAssetMimeType(filePath) {
+  const extension = path.extname(filePath).toLowerCase();
+  return (
+    {
+      ".avif": "image/avif",
+      ".bmp": "image/bmp",
+      ".css": "text/css",
+      ".csv": "text/csv",
+      ".gif": "image/gif",
+      ".html": "text/html",
+      ".ico": "image/x-icon",
+      ".jpeg": "image/jpeg",
+      ".jpg": "image/jpeg",
+      ".json": "application/json",
+      ".md": "text/markdown",
+      ".mp3": "audio/mpeg",
+      ".mp4": "video/mp4",
+      ".ogg": "audio/ogg",
+      ".otf": "font/otf",
+      ".pdf": "application/pdf",
+      ".png": "image/png",
+      ".svg": "image/svg+xml",
+      ".ttf": "font/ttf",
+      ".txt": "text/plain",
+      ".wasm": "application/wasm",
+      ".wav": "audio/wav",
+      ".webm": "video/webm",
+      ".webp": "image/webp",
+      ".woff": "font/woff",
+      ".woff2": "font/woff2",
+      ".xml": "application/xml",
+    }[extension] || "application/octet-stream"
+  );
+}
+
+function walkRuntimeFiles(rootPath, visit) {
+  if (!fs.existsSync(rootPath)) return;
+  const rootStats = fs.lstatSync(rootPath);
+  if (rootStats.isSymbolicLink() || !rootStats.isDirectory()) {
+    throw new Error(`Runtime asset root is not a regular directory: ${rootPath}`);
+  }
+  for (const entry of fs.readdirSync(rootPath, { withFileTypes: true })) {
+    const entryPath = path.join(rootPath, entry.name);
+    if (entry.isSymbolicLink()) {
+      throw new Error(`Runtime assets cannot contain symbolic links: ${entryPath}`);
+    }
+    if (entry.isDirectory()) {
+      walkRuntimeFiles(entryPath, visit);
+    } else if (entry.isFile()) {
+      visit(entryPath);
+    }
+  }
+}
+
+function getRuntimePackageEntries(addonPath) {
+  const entries = [];
+  let totalSize = 0;
+  for (const root of [path.join(addonPath, "dist"), path.join(addonPath, "assets")]) {
+    walkRuntimeFiles(root, (filePath) => {
+      const logicalPath = path.relative(addonPath, filePath).split(path.sep).join("/");
+      const extension = path.extname(filePath).toLowerCase();
+      if (extension === ".map") return;
+      if ([".gitkeep", ".ds_store"].includes(path.basename(filePath).toLowerCase())) return;
+      const kind =
+        extension === ".js" || extension === ".css"
+          ? "text"
+          : logicalPath.startsWith("assets/") || logicalPath.startsWith("dist/assets/")
+            ? "asset"
+            : undefined;
+      if (!kind) return;
+      if (entries.length >= MAX_RUNTIME_PACKAGE_ENTRIES) {
+        throw new Error("Runtime package contains more than 256 files");
+      }
+      const size = fs.statSync(filePath).size;
+      if (size > MAX_RUNTIME_ASSET_FILE_SIZE) {
+        throw new Error(`Runtime package file exceeds 5 MiB: ${filePath}`);
+      }
+      totalSize += size;
+      if (totalSize > MAX_RUNTIME_ASSET_TOTAL_SIZE) {
+        throw new Error("Runtime package exceeds the 25 MiB package limit");
+      }
+      entries.push({ extension, filePath, kind, logicalPath, size });
+    });
+  }
+  return entries.sort((left, right) => left.logicalPath.localeCompare(right.logicalPath));
+}
+
+function runtimeAssetId(logicalPath, content) {
+  return createHash("sha256").update(logicalPath).update("\0").update(content).digest("hex");
+}
+
+function readRuntimeEntry(entry) {
+  const content = fs.readFileSync(entry.filePath);
+  if (content.length !== entry.size) {
+    throw new Error(`Runtime package changed while it was being indexed: ${entry.filePath}`);
+  }
+  return content;
+}
+
+function runtimeAssetsFromEntries(entries) {
+  return entries
+    .filter((entry) => entry.kind === "asset")
+    .map((entry) => {
+      const content = readRuntimeEntry(entry);
+      return {
+        content,
+        descriptor: {
+          id: runtimeAssetId(entry.logicalPath, content),
+          mimeType: runtimeAssetMimeType(entry.filePath),
+          path: entry.logicalPath,
+          size: content.length,
+        },
+      };
+    });
+}
+
+function runtimeTextFilesFromEntries(entries) {
+  return entries
+    .filter((entry) => entry.kind === "text")
+    .map((entry) => ({
+      content: readRuntimeEntry(entry).toString("utf8"),
+      isMain: entry.logicalPath === "dist/addon.js",
+      name: entry.logicalPath,
+    }));
+}
+
+function getRuntimeAssets(addonPath) {
+  return runtimeAssetsFromEntries(getRuntimePackageEntries(addonPath));
+}
+
+function getRuntimeTextFiles(addonPath) {
+  return runtimeTextFilesFromEntries(getRuntimePackageEntries(addonPath));
+}
+
+function shouldPublishRuntimeFileChange(config, filePath) {
+  if (!config.buildCommand) return true;
+  const absolutePath = path.resolve(filePath);
+  const manifestPath = path.resolve(config.manifestPath);
+  const assetRoot = path.resolve(config.addonPath, "assets");
+  return absolutePath === manifestPath || absolutePath.startsWith(`${assetRoot}${path.sep}`);
+}
+
+class RuntimePackageRegistry {
+  constructor(addonPath, manifestPath = path.join(addonPath, "manifest.json")) {
+    this.addonPath = addonPath;
+    this.manifestPath = manifestPath;
+    this.currentGeneration = 0;
+    this.snapshots = new Map();
+  }
+
+  createSnapshot() {
+    const entries = getRuntimePackageEntries(this.addonPath);
+    const manifest = fs.existsSync(this.manifestPath)
+      ? JSON.parse(fs.readFileSync(this.manifestPath, "utf8"))
+      : null;
+    return {
+      assets: runtimeAssetsFromEntries(entries),
+      files: runtimeTextFilesFromEntries(entries),
+      manifest,
+    };
+  }
+
+  refresh() {
+    const generation = this.currentGeneration + 1;
+    const snapshot = { generation, ...this.createSnapshot() };
+    this.snapshots.set(generation, snapshot);
+    this.currentGeneration = generation;
+    while (this.snapshots.size > MAX_RUNTIME_PACKAGE_GENERATIONS) {
+      this.snapshots.delete(this.snapshots.keys().next().value);
+    }
+    return snapshot;
+  }
+
+  getSnapshot(generation) {
+    if (this.currentGeneration === 0) {
+      throw new Error("No runtime package generation has been published");
+    }
+    const requestedGeneration = generation ?? this.currentGeneration;
+    const snapshot = this.snapshots.get(requestedGeneration);
+    if (!snapshot) {
+      throw new Error(`Runtime package generation is no longer available: ${requestedGeneration}`);
+    }
+    return snapshot;
+  }
+
+  getPackage(generation) {
+    return this.getSnapshot(generation);
+  }
+
+  getAssets(generation) {
+    return this.getSnapshot(generation).assets;
+  }
+
+  getTextFiles(generation) {
+    return this.getSnapshot(generation).files;
+  }
+
+  getManifest(generation) {
+    return this.getSnapshot(generation).manifest;
+  }
+
+  getGeneration() {
+    return this.currentGeneration;
+  }
+}
 
 class AddonDevServer {
   constructor(config) {
@@ -25,9 +236,16 @@ class AddonDevServer {
     this.lastModified = new Date();
     this.buildInProgress = false;
     this.viteWatcher = null;
+    this.publishTimer = null;
+    this.runtimePackageRegistry = new RuntimePackageRegistry(
+      this.config.addonPath,
+      this.config.manifestPath,
+    );
+    this.publishRuntimePackage();
 
     this.setupMiddleware();
     this.setupRoutes();
+    this.app.use(express.static(this.config.addonPath));
     this.setupFileWatcher();
     this.startViteWatcher();
   }
@@ -39,7 +257,6 @@ class AddonDevServer {
         credentials: true,
       }),
     );
-    this.app.use(express.static(this.config.addonPath));
   }
 
   setupRoutes() {
@@ -57,6 +274,7 @@ class AddonDevServer {
       res.json({
         lastModified: this.lastModified.toISOString(),
         buildInProgress: this.buildInProgress,
+        generation: this.runtimePackageRegistry.getGeneration(),
         files: this.getFileList(),
       });
     });
@@ -64,9 +282,8 @@ class AddonDevServer {
     // Serve addon manifest
     this.app.get("/manifest.json", (req, res) => {
       try {
-        const manifestPath = path.resolve(this.config.manifestPath);
-        if (fs.existsSync(manifestPath)) {
-          const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+        const manifest = this.runtimePackageRegistry.getManifest();
+        if (manifest) {
           res.json(manifest);
         } else {
           res.status(404).json({ error: "Manifest not found" });
@@ -86,7 +303,13 @@ class AddonDevServer {
         const fileExists = await this.waitForFile(addonFile, 3000);
 
         if (fileExists) {
-          const code = fs.readFileSync(addonFile, "utf-8");
+          const code = this.runtimePackageRegistry
+            .getTextFiles()
+            .find((file) => file.isMain)?.content;
+          if (code === undefined) {
+            res.status(404).json({ error: "Addon entry point is not in the published package" });
+            return;
+          }
           res.type("application/javascript").send(code);
         } else {
           console.error(`❌ Addon file not found at: ${addonFile}`);
@@ -100,6 +323,70 @@ class AddonDevServer {
       }
     });
 
+    this.app.get("/runtime-package", (req, res) => {
+      try {
+        const runtimePackage = this.runtimePackageRegistry.getPackage();
+        const mainFile = runtimePackage.files.find((file) => file.isMain);
+        if (!mainFile) {
+          res.status(409).json({ error: "Runtime package has no published addon entry point" });
+          return;
+        }
+        res.set("Cache-Control", "no-store");
+        res.json({
+          assets: runtimePackage.assets.map((asset) => asset.descriptor),
+          files: runtimePackage.files,
+          generation: runtimePackage.generation,
+          manifest: runtimePackage.manifest,
+        });
+      } catch (error) {
+        res.status(500).json({ error: error.message });
+      }
+    });
+
+    // Metadata-only package registry used by the opaque iframe asset broker.
+    this.app.get("/runtime-assets", (req, res) => {
+      try {
+        res.set("Cache-Control", "no-store");
+        res.json(this.runtimePackageRegistry.getAssets().map((asset) => asset.descriptor));
+      } catch (error) {
+        res.status(500).json({ error: error.message });
+      }
+    });
+
+    this.app.get("/runtime-assets/:assetId", (req, res) => {
+      try {
+        const requestedGeneration =
+          req.query.generation === undefined ? undefined : Number(req.query.generation);
+        if (
+          requestedGeneration !== undefined &&
+          (!Number.isSafeInteger(requestedGeneration) || requestedGeneration < 1)
+        ) {
+          res.status(400).json({ error: "Invalid runtime package generation" });
+          return;
+        }
+        const asset = this.runtimePackageRegistry
+          .getAssets(requestedGeneration)
+          .find((candidate) => candidate.descriptor.id === req.params.assetId);
+        if (!asset) {
+          res.status(404).json({ error: "Runtime asset not found" });
+          return;
+        }
+        res.set("Cache-Control", "no-store");
+        res.type(asset.descriptor.mimeType).send(asset.content);
+      } catch (error) {
+        res.status(500).json({ error: error.message });
+      }
+    });
+
+    this.app.get("/runtime-files", (req, res) => {
+      try {
+        res.set("Cache-Control", "no-store");
+        res.json(this.runtimePackageRegistry.getTextFiles());
+      } catch (error) {
+        res.status(500).json({ error: error.message });
+      }
+    });
+
     // Hot reload endpoint
     this.app.get("/reload", (req, res) => {
       res.json({
@@ -167,24 +454,57 @@ class AddonDevServer {
 
     watcher.on("change", (filePath) => {
       console.log(`📝 File changed: ${filePath}`);
-      // Don't trigger manual build since Vite is already watching
-      // Just update the timestamp for status endpoint
-      this.lastModified = new Date();
+      this.handleRuntimeFileChange(filePath);
     });
 
     watcher.on("add", (filePath) => {
       console.log(`➕ File added: ${filePath}`);
-      this.lastModified = new Date();
+      this.handleRuntimeFileChange(filePath);
     });
 
     watcher.on("unlink", (filePath) => {
       console.log(`➖ File removed: ${filePath}`);
-      this.lastModified = new Date();
+      this.handleRuntimeFileChange(filePath);
     });
 
     console.log(`👀 Watching files: ${this.config.watchPaths.join(", ")}`);
   }
 
+  handleRuntimeFileChange(filePath) {
+    // Source and dist events are intermediate Vite states. The Vite completion
+    // signal publishes their next coherent package generation.
+    if (shouldPublishRuntimeFileChange(this.config, filePath)) {
+      this.scheduleRuntimePackagePublish();
+    }
+  }
+
+  scheduleRuntimePackagePublish() {
+    if (this.publishTimer) clearTimeout(this.publishTimer);
+    this.publishTimer = setTimeout(() => {
+      this.publishTimer = null;
+      if (this.buildInProgress) {
+        this.scheduleRuntimePackagePublish();
+        return;
+      }
+      this.publishRuntimePackage();
+    }, 100);
+  }
+
+  publishRuntimePackage() {
+    if (this.publishTimer) {
+      clearTimeout(this.publishTimer);
+      this.publishTimer = null;
+    }
+    try {
+      const runtimePackage = this.runtimePackageRegistry.refresh();
+      this.lastModified = new Date();
+      return runtimePackage;
+    } catch (error) {
+      console.error("❌ Failed to publish runtime package:", error);
+      return null;
+    }
+  }
+
   async triggerBuild() {
     if (this.buildInProgress || !this.config.buildCommand) return;
 
@@ -197,7 +517,7 @@ class AddonDevServer {
       });
 
       console.log("✅ Build completed successfully");
-      this.lastModified = new Date();
+      this.publishRuntimePackage();
     } catch (error) {
       console.error("❌ Build failed:", error);
     } finally {
@@ -277,7 +597,7 @@ class AddonDevServer {
 
       if (output.includes("built in")) {
         console.log(`✅ Vite rebuild completed`);
-        this.lastModified = new Date();
+        this.publishRuntimePackage();
         this.buildInProgress = false;
       }
 
@@ -325,6 +645,10 @@ class AddonDevServer {
   stop() {
     console.log("🛑 Shutting down dev server...");
 
+    if (this.publishTimer) {
+      clearTimeout(this.publishTimer);
+      this.publishTimer = null;
+    }
     if (this.viteWatcher) {
       this.viteWatcher.kill("SIGTERM");
       this.viteWatcher = null;
@@ -343,7 +667,12 @@ function main() {
     addonPath: path.resolve(addonPath),
     manifestPath: path.resolve(addonPath, "manifest.json"),
     buildCommand: "pnpm run build",
-    watchPaths: [path.resolve(addonPath, "src"), path.resolve(addonPath, "manifest.json")],
+    watchPaths: [
+      path.resolve(addonPath, "src"),
+      path.resolve(addonPath, "assets"),
+      path.resolve(addonPath, "dist"),
+      path.resolve(addonPath, "manifest.json"),
+    ],
   };
 
   // Check if addon directory exists
@@ -363,7 +692,13 @@ function main() {
 }
 
 // Export for use as a module
-module.exports = { AddonDevServer };
+module.exports = {
+  AddonDevServer,
+  RuntimePackageRegistry,
+  getRuntimeAssets,
+  getRuntimeTextFiles,
+  shouldPublishRuntimeFileChange,
+};
 
 // Run if called directly
 if (require.main === module) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wealthfolio/addon-dev-tools",
-  "version": "3.6.1",
+  "version": "3.7.0",
   "description": "Development tools for Wealthfolio addons - hot reload server and CLI",
   "main": "index.js",
   "bin": {
@@ -37,7 +37,7 @@
     "access": "public"
   },
   "scripts": {
-    "test": "echo \"No tests yet\" && exit 0"
+    "test": "node --test dev-server.test.js scaffold.test.js"
   },
   "dependencies": {
     "chokidar": "^4.0.3",

package/templates/CHANGELOG.md.template

@@ -25,7 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Initial release of {{addonName}} addon
 - Basic addon functionality and core features
-- Integration with Wealthfolio addon SDK v1.0.0
+- Integration with Wealthfolio addon SDK v3.7.0
 - Sidebar navigation integration for easy access
 - Responsive design for all screen sizes
 
@@ -34,5 +34,5 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - User-friendly interface
 - Compatible with Wealthfolio platform
 
-### Permissions
-- UI components access for sidebar and routing
+### Compatibility
+- Requires Wealthfolio 3.7.0 or newer

package/templates/README.md.template

@@ -18,6 +18,14 @@ npm run build
 npm run bundle
 ```
 
+Wealthfolio 3.7 indexes private files below `assets/` and `dist/assets/` automatically. Use
+`ctx.assets.getBlob(path)` or `ctx.assets.getUrl(path)` to load them in the sandbox; no manifest
+asset list or permission is required. Blob URLs are valid only for the current addon lifetime.
+
+The generated Vite config targets Chrome/Edge 107, Firefox 104, and Safari 16, matching Wealthfolio
+3.7. The sandbox supports packaged images, fonts, media, CSS, and WebAssembly. Worker/service-worker
+entry points, popups, direct network requests, and remote CSS imports are intentionally unavailable.
+
 ## Features
 
 - Add your features here

package/templates/addon.tsx.template

@@ -1,6 +1,12 @@
-import { createRoot, type Root } from 'react-dom/client';
-import type { AddonContext } from '@wealthfolio/addon-sdk';
-import { Card, CardContent, Icons } from '@wealthfolio/ui';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import type { AddonContext, AddonEnableFunction } from '@wealthfolio/addon-sdk';
+import { Card, CardContent } from '@wealthfolio/ui';
+
+// The host owns a single React root per addon and mounts the route `component`
+// itself (`createElement(Component, { location })`) with no access to the addon
+// context. Capture it at enable time so the route wrapper can hand it down.
+// (Do NOT call createRoot yourself — the host manages the lifecycle.)
+let addonCtx: AddonContext | undefined;
 
 function AddonExample({ ctx }: { ctx: AddonContext }) {
   return (
@@ -17,35 +23,32 @@ function AddonExample({ ctx }: { ctx: AddonContext }) {
   );
 }
 
-export default function enable(ctx: AddonContext) {
-  let root: Root | null = null;
+// Route component. The sidebar entry + route are declared in manifest.json
+// (`contributes.routes` + `contributes.links`), so the host renders navigation
+// without booting the addon; this component only runs when the route is first
+// visited. The QueryClientProvider reuses this addon's isolated cache across
+// route navigations; invalidations/refetches are bridged to the host.
+const AddonRoute = () => (
+  <QueryClientProvider client={addonCtx!.api.query.getClient() as QueryClient}>
+    <AddonExample ctx={addonCtx!} />
+  </QueryClientProvider>
+);
 
-  // Add a sidebar item
-  const sidebarItem = ctx.sidebar.addItem({
-    id: '{{addonId}}',
-    label: '{{addonName}}',
-    icon: 'blocks',
-    route: '/addon/{{addonId}}',
-    order: 100,
-  });
+const enable: AddonEnableFunction = (ctx) => {
+  addonCtx = ctx;
 
-  // Add a route
+  // The route `id` MUST match `contributes.routes[].id` in manifest.json.
+  // The host derives this root path from the manifest addon id.
   ctx.router.add({
-    path: '/addon/{{addonId}}',
-    render: ({ root: routeRoot }) => {
-      root ??= createRoot(routeRoot);
-      root.render(<AddonExample ctx={ctx} />);
-    },
+    id: '{{addonId}}',
+    path: '/addons/{{addonId}}',
+    component: AddonRoute,
   });
 
-  // Cleanup on disable
+  // The host owns the React root, so there is nothing to unmount here.
   ctx.onDisable(() => {
-    try {
-      sidebarItem.remove();
-      root?.unmount();
-      root = null;
-    } catch (err) {
-      ctx.api.logger.error(`Failed to remove sidebar item: ${String(err)}`);
-    }
+    addonCtx = undefined;
   });
-}
+};
+
+export default enable;

package/templates/manifest.json.template

@@ -5,26 +5,34 @@
   "description": "{{description}}",
   "author": "{{author}}",
   "main": "dist/addon.js",
-  "sdkVersion": "3.6.0",
-  "minWealthfolioVersion": "3.6.0",
+  "sdkVersion": "3.7.0",
+  "minWealthfolioVersion": "3.7.0",
   "enabled": true,
+  "contributes": {
+    "routes": [{ "id": "{{addonId}}" }],
+    "links": {
+      "sidebar": [
+        {
+          "id": "{{addonId}}",
+          "route": "{{addonId}}",
+          "label": "{{addonName}}",
+          "icon": "squares-four",
+          "order": 100
+        }
+      ]
+    }
+  },
   "hostDependencies": {
     "@tanstack/react-query": "^5.90.0",
-    "@wealthfolio/addon-sdk": "^3.6.0",
-    "@wealthfolio/ui": "^3.6.0",
+    "@wealthfolio/addon-sdk": "^3.7.0",
+    "@wealthfolio/ui": "^3.7.0",
     "date-fns": "^4.1.0",
     "lucide-react": "^0.561.0",
     "react": "^19.2.0",
     "react-dom": "^19.2.0",
     "recharts": "^3.7.0"
   },
-  "permissions": [
-    {
-      "category": "ui",
-      "functions": ["sidebar.addItem", "router.add"],
-      "purpose": "Add navigation items and pages"
-    }
-  ],
+  "permissions": [],
   "keywords": ["wealthfolio", "addon"],
   "license": "MIT"
 }

package/templates/package.json.template

@@ -9,17 +9,17 @@
   "scripts": {
     "build": "vite build",
     "dev": "vite build --watch",
-    "dev:server": "wealthfolio dev",
+    "dev:server": "wealthfolio-addon dev",
     "clean": "rm -rf dist",
-    "package": "mkdir -p dist && find dist -name '*.map' -delete && zip -r dist/$npm_package_name-$npm_package_version.zip manifest.json dist/ assets/ README.md -x '*.map'",
+    "package": "mkdir -p dist assets && find dist -name '*.map' -delete && zip -r dist/$npm_package_name-$npm_package_version.zip manifest.json dist/ assets/ README.md -x '*.map'",
     "bundle": "pnpm clean && pnpm build && pnpm package",
     "lint": "tsc --noEmit",
     "type-check": "tsc --noEmit"
   },
   "peerDependencies": {
     "@tanstack/react-query": "^5.90.0",
-    "@wealthfolio/addon-sdk": "^3.6.0",
-    "@wealthfolio/ui": "^3.6.0",
+    "@wealthfolio/addon-sdk": "^3.7.0",
+    "@wealthfolio/ui": "^3.7.0",
     "date-fns": "^4.1.0",
     "lucide-react": "^0.561.0",
     "react": "^19.2.0",
@@ -29,9 +29,9 @@
   "devDependencies": {
     "@tanstack/react-query": "^5.90.20",
     "@tailwindcss/vite": "^4.1.13",
-    "@wealthfolio/addon-dev-tools": "^3.6.0",
-    "@wealthfolio/addon-sdk": "^3.6.0",
-    "@wealthfolio/ui": "^3.6.0",
+    "@wealthfolio/addon-dev-tools": "^3.7.0",
+    "@wealthfolio/addon-sdk": "^3.7.0",
+    "@wealthfolio/ui": "^3.7.0",
     "@types/node": "^20.0.0",
     "@types/react": "^19.2.13",
     "@types/react-dom": "^19.2.3",

package/templates/vite.config.ts.template

@@ -1,42 +1,43 @@
-import react from '@vitejs/plugin-react';
-import tailwindcss from '@tailwindcss/vite';
-import { defineConfig } from 'vite';
+import react from "@vitejs/plugin-react";
+import tailwindcss from "@tailwindcss/vite";
+import { defineConfig } from "vite";
 
 const hostProvidedDependencies = [
-  '@tanstack/react-query',
-  '@wealthfolio/addon-sdk',
-  '@wealthfolio/addon-sdk/goal-progress',
-  '@wealthfolio/addon-sdk/host-api',
-  '@wealthfolio/addon-sdk/host-dependencies',
-  '@wealthfolio/addon-sdk/manifest',
-  '@wealthfolio/addon-sdk/permissions',
-  '@wealthfolio/addon-sdk/query-keys',
-  '@wealthfolio/addon-sdk/types',
-  '@wealthfolio/addon-sdk/utils',
-  '@wealthfolio/ui',
-  '@wealthfolio/ui/chart',
-  'date-fns',
-  'lucide-react',
-  'react',
-  'react-dom',
-  'react-dom/client',
-  'react/jsx-dev-runtime',
-  'react/jsx-runtime',
-  'recharts',
+  "@tanstack/react-query",
+  "@wealthfolio/addon-sdk",
+  "@wealthfolio/addon-sdk/goal-progress",
+  "@wealthfolio/addon-sdk/host-api",
+  "@wealthfolio/addon-sdk/host-dependencies",
+  "@wealthfolio/addon-sdk/manifest",
+  "@wealthfolio/addon-sdk/permissions",
+  "@wealthfolio/addon-sdk/query-keys",
+  "@wealthfolio/addon-sdk/types",
+  "@wealthfolio/addon-sdk/utils",
+  "@wealthfolio/ui",
+  "@wealthfolio/ui/chart",
+  "date-fns",
+  "lucide-react",
+  "react",
+  "react-dom",
+  "react-dom/client",
+  "react/jsx-dev-runtime",
+  "react/jsx-runtime",
+  "recharts",
 ];
 
 export default defineConfig({
   plugins: [react(), tailwindcss()],
   define: {
-    'process.env.NODE_ENV': JSON.stringify('production'),
+    "process.env.NODE_ENV": JSON.stringify("production"),
   },
   build: {
+    target: ["chrome107", "edge107", "firefox104", "safari16"],
     lib: {
-      entry: 'src/addon.tsx',
-      fileName: () => 'addon.js',
-      formats: ['es'],
+      entry: "src/addon.tsx",
+      fileName: () => "addon.js",
+      formats: ["es"],
     },
-    outDir: 'dist',
+    outDir: "dist",
     minify: true,
     sourcemap: false,
     rollupOptions: {
@@ -44,8 +45,8 @@ export default defineConfig({
     },
     watch: {
       // Watch mode options for better hot reloading
-      include: ['src/**'],
-      exclude: ['node_modules/**', 'dist/**']
-    }
+      include: ["src/**"],
+      exclude: ["node_modules/**", "dist/**"],
+    },
   },
 });