lowdefy 5.5.1 → 6.0.0

package/dist/commands/dev/runDevServer.js

@@ -14,7 +14,23 @@
   limitations under the License.
 */ import { spawnProcess } from '@lowdefy/node-utils';
 import { createStdOutLineHandler } from '@lowdefy/logger/cli';
+import resolveMockUser from './resolveMockUser.js';
 async function runDevServer({ context, directory }) {
+    const env = {
+        ...process.env,
+        LOWDEFY_BUILD_REF_RESOLVER: context.options.refResolver,
+        LOWDEFY_DIRECTORY_CONFIG: context.directories.config,
+        LOWDEFY_LOG_LEVEL: context.options.logLevel,
+        LOWDEFY_SERVER_DEV_OPEN_BROWSER: !!context.options.open,
+        LOWDEFY_SERVER_DEV_WATCH: JSON.stringify(context.options.watch),
+        LOWDEFY_SERVER_DEV_WATCH_IGNORE: JSON.stringify(context.options.watchIgnore),
+        PORT: context.options.port
+    };
+    // Set only when requested — an undefined value would clobber the LOWDEFY_DEV_USER
+    // inherited from process.env above.
+    if (context.options.mockUser) {
+        env.LOWDEFY_DEV_USER = resolveMockUser(context.options.mockUser);
+    }
     await spawnProcess({
         args: [
             'run',
@@ -28,17 +44,7 @@ async function runDevServer({ context, directory }) {
             cwd: directory,
             // https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2#command-injection-via-args-parameter-of-child_processspawn-without-shell-option-enabled-on-windows-cve-2024-27980---high
             shell: process.platform === 'win32',
-            env: {
-                ...process.env,
-                LOWDEFY_BUILD_REF_RESOLVER: context.options.refResolver,
-                LOWDEFY_DIRECTORY_CONFIG: context.directories.config,
-                LOWDEFY_LOG_LEVEL: context.options.logLevel,
-                LOWDEFY_SERVER_DEV_OPEN_BROWSER: !!context.options.open,
-                LOWDEFY_SERVER_DEV_WATCH: JSON.stringify(context.options.watch),
-                LOWDEFY_SERVER_DEV_WATCH_IGNORE: JSON.stringify(context.options.watchIgnore),
-                PORT: context.options.port,
-                NEXT_TELEMETRY_DISABLED: context.options.disableTelemetry ? '1' : undefined
-            }
+            env
         },
         silent: false
     });

package/dist/commands/dockerOutput/dockerOutput.js

@@ -0,0 +1,99 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+import { cleanDirectory, copyFileOrDirectory, writeFile } from '@lowdefy/node-utils';
+import copyTracedFiles from '../../utils/copyTracedFiles.js';
+import findTraceBase from '../../utils/findTraceBase.js';
+// The boot script chdirs into the server directory inside the output (it is nested when the app
+// is a pnpm workspace member) so the server's cwd-relative reads of build/ and dist/client work,
+// then imports the entrypoint. .mjs so it runs as ESM regardless of a package.json at its root.
+function startScript({ relServer }) {
+    const relServerPosix = relServer === '' ? '.' : relServer.split(path.sep).join('/');
+    return `// Generated by \`lowdefy docker-output\` — boots the server from the traced output.
+import path from 'node:path';
+import url from 'node:url';
+
+const serverDirectory = path.join(
+  path.dirname(url.fileURLToPath(import.meta.url)),
+  '${relServerPosix}'
+);
+process.chdir(serverDirectory);
+await import(url.pathToFileURL(path.join(serverDirectory, 'src', 'index.js')));
+`;
+}
+// Assembles a minimal production runtime at .lowdefy/docker from an already-built server directory.
+// Instead of shipping the full node_modules (which includes the client-side block packages that are
+// already compiled into dist/client), the runtime file closure of the Hono server is traced with
+// @vercel/nft — the same mechanism the Vercel deployment uses. Run after `lowdefy build`.
+async function dockerOutput({ context }) {
+    const { directories, logger } = context;
+    logger.info('Assembling Docker runtime output.');
+    const serverDirectory = path.resolve(directories.server);
+    const buildDirectory = path.resolve(directories.build);
+    const clientDirectory = path.join(serverDirectory, 'dist', 'client');
+    const outputDirectory = path.join(path.resolve(directories.config), '.lowdefy', 'docker');
+    const entrypoints = [
+        path.join(serverDirectory, 'src', 'index.js'),
+        path.join(serverDirectory, 'src', 'app.js')
+    ];
+    entrypoints.forEach((entrypoint)=>{
+        if (!fs.existsSync(entrypoint)) {
+            throw new Error(`Cannot trace "${entrypoint}" — run "lowdefy build" first.`);
+        }
+    });
+    if (!fs.existsSync(clientDirectory)) {
+        throw new Error(`Cannot find built client at "${clientDirectory}" — run "lowdefy build" first.`);
+    }
+    // Paths are preserved relative to the trace base (the pnpm workspace root when the server
+    // directory is a workspace member), so the server's relative node_modules symlinks still
+    // resolve inside the output. The server lands at <relServer>/ inside the output directory.
+    const base = findTraceBase({
+        serverDirectory
+    });
+    const relServer = path.relative(base, serverDirectory);
+    const outputServerDirectory = path.join(outputDirectory, relServer);
+    // Start clean so artifacts from a previous build do not leak into the image.
+    await cleanDirectory(outputDirectory);
+    // 1. The runtime file closure of the Hono server, traced with @vercel/nft — the app source, the
+    //    build-generated plugin import files, and exactly the node_modules files they resolve to
+    //    (through pnpm's symlinks, which are preserved).
+    const fileCount = await copyTracedFiles({
+        base,
+        entrypoints,
+        functionDirectory: outputDirectory,
+        logger,
+        processCwd: serverDirectory
+    });
+    logger.info(`Traced ${fileCount} runtime files into the output.`);
+    // 2. Artifacts the server reads from the filesystem at runtime (not imported, so not traced),
+    //    plus src/ and lib/ wholesale as belt-and-braces alongside the traced copies. Unlike the
+    //    Vercel output, dist/client ships in full — the Node server serves the static assets itself.
+    await copyFileOrDirectory(path.join(serverDirectory, 'src'), path.join(outputServerDirectory, 'src'));
+    await copyFileOrDirectory(path.join(serverDirectory, 'lib'), path.join(outputServerDirectory, 'lib'));
+    await copyFileOrDirectory(buildDirectory, path.join(outputServerDirectory, 'build'));
+    await copyFileOrDirectory(clientDirectory, path.join(outputServerDirectory, 'dist', 'client'));
+    await copyFileOrDirectory(path.join(serverDirectory, 'package.json'), path.join(outputServerDirectory, 'package.json'));
+    // 3. A uniform boot script so the container CMD is the same whether or not the server is nested
+    //    under a workspace path inside the output.
+    await writeFile(path.join(outputDirectory, 'start.mjs'), startScript({
+        relServer
+    }));
+    logger.info({
+        spin: 'succeed'
+    }, 'Docker runtime output assembled at .lowdefy/docker.');
+    await context.sendTelemetry();
+}
+export default dockerOutput;

package/dist/commands/emails/emails.js

@@ -0,0 +1,84 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import addCustomPluginsAsDeps from '../../utils/addCustomPluginsAsDeps.js';
+import getServer from '../../utils/getServer.js';
+import installServer from '../../utils/installServer.js';
+import resetServerPackageJson from '../../utils/resetServerPackageJson.js';
+import runLowdefyBuild from '../../utils/runLowdefyBuild.js';
+import generateEmailShims from './generateEmailShims.js';
+import installReactEmail from './installReactEmail.js';
+import readNotificationArtifacts from './readNotificationArtifacts.js';
+import runEmailPreview from './runEmailPreview.js';
+import warnMissingDataKeys from './warnMissingDataKeys.js';
+async function emails({ context }) {
+    context.logger.info('Building app for email preview.');
+    const directory = context.directories.server;
+    // The lowdefy build pipeline minus the client build — guarantees
+    // build/notifications/*.json exists and the second install has installed
+    // react-email, @lowdefy/email-templates and any custom template plugins.
+    await getServer({
+        context,
+        packageName: '@lowdefy/server',
+        directory
+    });
+    await resetServerPackageJson({
+        context,
+        directory
+    });
+    await addCustomPluginsAsDeps({
+        context,
+        directory
+    });
+    await installServer({
+        context,
+        directory
+    });
+    await runLowdefyBuild({
+        context,
+        directory
+    });
+    await installServer({
+        context,
+        directory
+    });
+    const { notifications, appEmail, notificationTypes } = await readNotificationArtifacts({
+        context
+    });
+    if (notifications.length === 0) {
+        context.logger.warn('No notifications configured. Add a "notifications:" section to preview emails.');
+        return;
+    }
+    await installReactEmail({
+        context,
+        directory
+    });
+    await generateEmailShims({
+        context,
+        notifications,
+        appEmail,
+        notificationTypes
+    });
+    await warnMissingDataKeys({
+        context,
+        notifications,
+        notificationTypes
+    });
+    context.logger.info('Preview shims generated. Config changes (properties, testData) need a rerun of "lowdefy emails"; template code changes hot-reload.');
+    await context.sendTelemetry();
+    await runEmailPreview({
+        context
+    });
+}
+export default emails;

package/dist/commands/emails/generateEmailShims.js

@@ -0,0 +1,94 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+import { type } from '@lowdefy/helpers';
+function pascalCase(id) {
+    return id.split(/[^A-Za-z0-9]+/).filter(Boolean).map((part)=>part.charAt(0).toUpperCase() + part.slice(1)).join('');
+}
+function createShimContent({ notification, typeDefinition, appEmail }) {
+    const componentName = `${pascalCase(notification.notificationId)}Preview`;
+    // Shallow merge, matching the runtime theme resolution.
+    const theme = {
+        ...appEmail,
+        ...notification.theme ?? {}
+    };
+    // The preview has no serverUrl — match the runtime fallback for relative
+    // logos (drop it, EmailLayout shows the companyName text header) instead of
+    // rendering a broken image.
+    if (type.isString(theme.logo) && theme.logo.startsWith('/') && !theme.logo.startsWith('//')) {
+        delete theme.logo;
+    }
+    const config = {
+        id: notification.notificationId,
+        type: notification.type,
+        properties: notification.properties ?? {},
+        theme,
+        testData: notification.testData ?? {}
+    };
+    // React.createElement instead of JSX syntax so the shim is immune to the
+    // preview toolchain's JSX runtime configuration.
+    return `// Generated by lowdefy emails. Do not edit.
+import React from 'react';
+import { ${typeDefinition.originalTypeName} as Template } from '${typeDefinition.package}/notifications';
+import { buildPreviewProps } from '@lowdefy/email-templates';
+
+const config = ${JSON.stringify(config, null, 2)};
+
+function ${componentName}(props) {
+  return React.createElement(Template, props);
+}
+// A wrapper component per shim — setting PreviewProps on the shared imported
+// template would clobber across notifications using the same template type.
+${componentName}.PreviewProps = buildPreviewProps({ Template, config });
+
+export default ${componentName};
+`;
+}
+async function generateEmailShims({ context, notifications, appEmail, notificationTypes }) {
+    const emailsDirectory = context.directories.emails;
+    const serverDirectory = context.directories.server;
+    await fs.promises.rm(emailsDirectory, {
+        recursive: true,
+        force: true
+    });
+    await fs.promises.mkdir(emailsDirectory, {
+        recursive: true
+    });
+    // Bare imports in the shims resolve against the server's installed tree.
+    // 'junction' works unprivileged on Windows; on POSIX it creates a normal
+    // directory symlink.
+    await fs.promises.symlink(path.join(serverDirectory, 'node_modules'), path.join(emailsDirectory, 'node_modules'), 'junction');
+    for (const notification of notifications){
+        const typeDefinition = notificationTypes[notification.type];
+        if (!typeDefinition) {
+            context.logger.warn(`Notification "${notification.notificationId}": template type "${notification.type}" not found in the build types map. Skipping preview.`);
+            continue;
+        }
+        const content = createShimContent({
+            notification,
+            typeDefinition,
+            appEmail
+        });
+        // Module notifications have scoped ids ("invites/invite-user") — nested
+        // shim paths group the preview sidebar by module entry.
+        const shimPath = path.join(emailsDirectory, `${notification.notificationId}.jsx`);
+        await fs.promises.mkdir(path.dirname(shimPath), {
+            recursive: true
+        });
+        await fs.promises.writeFile(shimPath, content);
+    }
+}
+export default generateEmailShims;

package/dist/commands/emails/installReactEmail.js

@@ -0,0 +1,53 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+import { spawnProcess } from '@lowdefy/node-utils';
+const reactEmailVersion = '6.6.6';
+// The react-email preview CLI is a dev-only tool — the build never adds it to
+// the server package, so production installs don't carry it. Install it
+// just-in-time into the server directory when the emails command runs.
+async function installReactEmail({ context, directory }) {
+    const emailBin = path.join(directory, 'node_modules', '.bin', process.platform === 'win32' ? 'email.cmd' : 'email');
+    if (fs.existsSync(emailBin)) {
+        return;
+    }
+    context.logger.info({
+        spin: 'start'
+    }, 'Installing the react-email preview server.');
+    try {
+        await spawnProcess({
+            command: context.pnpmCmd,
+            args: [
+                'add',
+                '--save-dev',
+                `react-email@${reactEmailVersion}`
+            ],
+            stdOutLineHandler: (line)=>context.logger.debug(line),
+            processOptions: {
+                cwd: directory,
+                // https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2#command-injection-via-args-parameter-of-child_processspawn-without-shell-option-enabled-on-windows-cve-2024-27980---high
+                shell: process.platform === 'win32'
+            }
+        });
+    } catch (error) {
+        context.logger.info({
+            spin: 'fail'
+        }, 'Installing the react-email preview server.');
+        throw new Error('react-email installation failed.');
+    }
+    context.logger.info('react-email preview server installed.');
+}
+export default installReactEmail;

package/dist/commands/emails/readNotificationArtifacts.js

@@ -0,0 +1,37 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+async function readNotificationArtifacts({ context }) {
+    const buildDirectory = context.directories.build;
+    const notificationsDirectory = path.join(buildDirectory, 'notifications');
+    let notifications = [];
+    if (fs.existsSync(notificationsDirectory)) {
+        // Recursive — module notifications write scoped artifacts in
+        // subdirectories (notifications/<entry>/<id>.json).
+        const files = await fs.promises.readdir(notificationsDirectory, {
+            recursive: true
+        });
+        notifications = await Promise.all(files.filter((file)=>file.endsWith('.json')).map(async (file)=>JSON.parse(await fs.promises.readFile(path.join(notificationsDirectory, file), 'utf8'))));
+    }
+    const app = JSON.parse(await fs.promises.readFile(path.join(buildDirectory, 'app.json'), 'utf8'));
+    const types = JSON.parse(await fs.promises.readFile(path.join(buildDirectory, 'types.json'), 'utf8'));
+    return {
+        notifications,
+        appEmail: app.email ?? {},
+        notificationTypes: types.notifications ?? {}
+    };
+}
+export default readNotificationArtifacts;

package/dist/commands/emails/runEmailPreview.js

@@ -0,0 +1,47 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import fs from 'fs';
+import path from 'path';
+import { spawnProcess } from '@lowdefy/node-utils';
+import { createStdOutLineHandler } from '@lowdefy/logger/cli';
+async function runEmailPreview({ context }) {
+    const serverDirectory = context.directories.server;
+    const emailBin = path.join(serverDirectory, 'node_modules', '.bin', process.platform === 'win32' ? 'email.cmd' : 'email');
+    if (!fs.existsSync(emailBin)) {
+        throw new Error('react-email is not installed. Rerun "lowdefy emails" to install it.');
+    }
+    const port = context.options.port ?? 3001;
+    context.logger.info(`Starting the email preview server on port ${port}.`);
+    await spawnProcess({
+        command: emailBin,
+        args: [
+            'dev',
+            '--dir',
+            context.directories.emails,
+            '--port',
+            String(port)
+        ],
+        stdOutLineHandler: createStdOutLineHandler({
+            context
+        }),
+        processOptions: {
+            cwd: serverDirectory,
+            shell: process.platform === 'win32',
+            env: process.env
+        },
+        silent: false
+    });
+}
+export default runEmailPreview;

package/dist/commands/emails/warnMissingDataKeys.js

@@ -0,0 +1,45 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/ import path from 'path';
+import { createRequire } from 'module';
+import { pathToFileURL } from 'url';
+// A template documents the data keys it renders (Template.dataKeys). A key
+// missing from testData means the preview section renders empty — usually a
+// pipeline/template naming mismatch, surfaced here instead of as a silently
+// empty email.
+async function warnMissingDataKeys({ context, notifications, notificationTypes }) {
+    const serverRequire = createRequire(path.join(context.directories.server, 'package.json'));
+    const templateModules = {};
+    for (const notification of notifications){
+        const typeDefinition = notificationTypes[notification.type];
+        if (!typeDefinition) continue;
+        try {
+            if (!templateModules[typeDefinition.package]) {
+                const modulePath = serverRequire.resolve(`${typeDefinition.package}/notifications`);
+                templateModules[typeDefinition.package] = await import(pathToFileURL(modulePath));
+            }
+            const Template = templateModules[typeDefinition.package][typeDefinition.originalTypeName];
+            const testDataKeys = Object.keys(notification.testData ?? {});
+            (Template?.dataKeys ?? []).forEach((key)=>{
+                if (!testDataKeys.includes(key)) {
+                    context.logger.warn(`Notification "${notification.notificationId}": template ${notification.type} renders "data.${key}" but testData has no "${key}" key — the preview section will be empty.`);
+                }
+            });
+        } catch (error) {
+            context.logger.debug(`Could not inspect template "${notification.type}" for data keys: ${error.message}`);
+        }
+    }
+}
+export default warnMissingDataKeys;

package/dist/commands/init-docker/Dockerfile

@@ -1,34 +1,52 @@
-FROM node:18-buster AS builder
+# syntax=docker/dockerfile:1
+
+FROM node:22-slim AS builder
 
 WORKDIR /lowdefy
 
-COPY . .
-# Configure standalone next build
-ENV LOWDEFY_BUILD_OUTPUT_STANDALONE 1
+# pnpm is required by the Lowdefy build to install server dependencies. Installed
+# through npm rather than corepack — corepack is not bundled from Node.js 25.
+RUN npm install --global pnpm@10
 
-# Enable pnpm using corepack
-RUN corepack enable
+# pnpm stores packages in $PNPM_HOME/store — mounted as a BuildKit cache below so
+# repeat builds only download new or changed packages.
+ENV PNPM_HOME=/pnpm
+ENV PATH="$PNPM_HOME/bin:$PATH"
 
-# Build lowdefy app
-RUN pnpx lowdefy@4 build --log-level=debug
+COPY . .
 
-FROM node:18-alpine AS runner
+# Build the app then assemble a minimal runtime at .lowdefy/docker. docker-output
+# traces the server's actual dependency graph (via @vercel/nft), so the runtime
+# ships only the files the server imports — not the full node_modules, which
+# includes the client block packages already compiled into dist/client. The CLI
+# is pinned to the `lowdefy:` version in lowdefy.yaml so builds are reproducible.
+RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
+  LOWDEFY_VERSION=$(sed -nE "s/^lowdefy:(.*)/\1/p" lowdefy.yaml lowdefy.yml 2>/dev/null | tr -d '[:space:]') \
+  && test -n "$LOWDEFY_VERSION" || { echo "Could not read the lowdefy version from lowdefy.yaml"; exit 1; } \
+  && npx lowdefy@"$LOWDEFY_VERSION" build \
+  && npx lowdefy@"$LOWDEFY_VERSION" docker-output
 
-ENV NODE_ENV production
-ENV NEXT_TELEMETRY_DISABLED 1
+FROM node:22-slim AS runner
 
-WORKDIR /lowdefy
+ENV NODE_ENV=production
+ENV PORT=3000
 
-RUN addgroup --system --gid 1001 nodejs
-RUN adduser --system --uid 1001 lowdefy
+WORKDIR /lowdefy
 
-COPY --from=builder /lowdefy/.lowdefy/server/public ./public
-COPY --from=builder --chown=lowdefy:nodejs /lowdefy/.lowdefy/server/.next/standalone ./
+# The node user (uid 1000) ships with the official Node.js images.
+COPY --from=builder --chown=node:node /lowdefy/.lowdefy/docker ./
 
-USER lowdefy
+USER node
 
 EXPOSE 3000
 
-ENV PORT 3000
+# The Lowdefy server serves a liveness endpoint at /api/lowdefy-health. If your app sets a
+# basePath, prepend it to the path below. Orchestrators with their own probes
+# (e.g. Kubernetes) ignore this and should point their probes at the same path.
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD ["node", "-e", "fetch('http://localhost:'+(process.env.PORT||3000)+'/api/lowdefy-health').then((res)=>process.exit(res.ok?0:1)).catch(()=>process.exit(1))"]
 
-CMD ["node", "server.js"]
+# start.mjs (written by docker-output) chdirs into the server directory and boots
+# it. Exec form keeps node as PID 1 — the server handles SIGTERM/SIGINT for
+# graceful shutdown, so no init wrapper is needed.
+CMD ["node", "start.mjs"]

package/dist/commands/init-docker/dockerignore

@@ -0,0 +1,8 @@
+.git
+.lowdefy
+.env
+.env.*
+node_modules
+Dockerfile
+.dockerignore
+README.md

package/dist/commands/init-docker/initDocker.js

@@ -20,7 +20,9 @@ async function initDocker({ context }) {
     const dockerfile = await readFile(url.fileURLToPath(new URL('./Dockerfile', import.meta.url)));
     await writeFile(path.join(context.directories.config, 'Dockerfile'), dockerfile);
     context.logger.info("Created 'Dockerfile'.");
-    const dockerignore = await readFile(url.fileURLToPath(new URL('./.dockerignore', import.meta.url)));
+    // Template stored without the leading dot — swc --copy-files drops dotfiles,
+    // so a .dockerignore template would be missing from the published package.
+    const dockerignore = await readFile(url.fileURLToPath(new URL('./dockerignore', import.meta.url)));
     await writeFile(path.join(context.directories.config, '.dockerignore'), dockerignore);
     context.logger.info("Created '.dockerignore'.");
     await context.sendTelemetry();