@softr/sdk 0.0.22-alpha.2 → 0.0.22

package/dist/preview-identity/preview-identity.js

@@ -3,11 +3,7 @@ import { makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieN
 //#region src/preview-identity/preview-identity.ts
 const PREVIEW_REDEMPTION_PATH = "/__preview/identity";
 const PREVIEW_SIGNED_IN_PATH = "/__preview/signed-in";
-/**
-* Signs the preview in as one of the app's own users by spending the one-time grant studio-api put
-* in this URL. No cookie of its own is forwarded: the grant is the only credential, and studio-api
-* authorized the builder before it issued one.
-*/
+/** The grant in the URL is the only credential: studio-api authorized the builder before issuing it. */
 const redeemGrant = async (req, res) => {
 	res.setHeader("Cache-Control", "no-store");
 	res.setHeader("Referrer-Policy", "no-referrer");
@@ -34,14 +30,7 @@ const redeemGrant = async (req, res) => {
 	res.setHeader("Set-Cookie", session.anonymous ? makeSessionClearingCookies(secure) : makeSessionTokenCookie(session.jwt, secure));
 	res.end();
 };
-/**
-* Whether the preview currently holds a session, and nothing else.
-*
-* Presence only, never decoded: whether anyone is signed in is all Studio's picker needs, and
-* decoding would put an app user's identity on a route the studio bundle can read. Asked under the
-* one name this scheme's app would read, so a cookie the app ignores reads as signed out here too
-* rather than as a session it cannot see.
-*/
+/** Presence only, never decoded: decoding would put an app user's identity on a route Studio reads. */
 const reportSignedIn = (req, res) => {
 	res.setHeader("Cache-Control", "no-store");
 	if (req.method !== "GET") {
@@ -89,13 +78,7 @@ async function redeemPreviewGrant(req, grant) {
 	};
 }
 const STAGING_HOST_PATTERN = /(?:^|\.)staging(\d+)\.softr\.io$/;
-/**
-* The studio-api base URL of the environment this dev server runs in, read off the request's host.
-*
-* The host is the only per-environment signal the app has: it is served at
-* `<slug>-app.vibe-coding-preview.staging12.softr.io`, and staging 12's API is
-* `studio-api-staging12.softr.io`. Every other host gives `null` — localhost included.
-*/
+/** The host is the only per-environment signal the app has. Anything but a staging one gives null. */
 function studioApiUrlFor(req) {
 	const forwarded = req.headers["x-forwarded-host"];
 	const name = ((Array.isArray(forwarded) ? forwarded[0] : forwarded) ?? req.headers.host ?? "").split(",")[0].trim().split(":")[0];
@@ -111,12 +94,9 @@ function hasSessionCookie(header, name) {
 	});
 }
 /**
-* Whether this request is https, by the same rule the session code reads the cookie back with.
-*
-* h3's `getRequestProtocol` compares `x-forwarded-proto` for exact equality, so it reads anything
-* else — `https, http` from a two-hop chain, or `HTTPS` — as not-https. Being more generous here
-* than it is writes `__Host-session_token` where the app then looks up `session_token`, and the
-* visitor is silently anonymous with no error on either side.
+* Exactly as strict as h3's `getRequestProtocol`, which reads the cookie back. Being more generous
+* writes `__Host-session_token` where the app looks up `session_token`, and the visitor is silently
+* anonymous with no error on either side.
 */
 function requestIsHttps(req) {
 	const forwarded = req.headers["x-forwarded-proto"];

package/dist/vite.js

@@ -38,15 +38,10 @@ function softr() {
 	];
 }
 /**
-* The routes that sign the preview in as one of the app's own users, and report whether it is.
+* Signing the preview in writes the cookie this app's own session code reads back, so it lives here
+* rather than in the edit engine — one implementation of the format, no version to keep in step.
 *
-* They live in this package, not in the edit engine, because signing the preview in means writing
-* the very cookie this app's own session code reads back — one implementation of the cookie format,
-* with no version to keep in step across a package seam.
-*
-* `SOFTR_APPLICATION_ID` is the gate: the pod sets it, and it is what binds a redemption to the
-* application the grant was issued for. An app running on a developer's machine has none, and
-* serves neither route.
+* `SOFTR_APPLICATION_ID` gates it: the pod sets it, a developer's machine has none.
 */
 async function previewIdentity() {
 	if (!process.env.SOFTR_APPLICATION_ID) return false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.22-alpha.2",
+  "version": "0.0.22",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },

package/skills/softr-sdk/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.22-alpha.2
+  library_version: 0.0.22
 ---
 
 # Softr SDK core

package/skills/softr-sdk/auth/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22-alpha.2
+  library_version: 0.0.22
 ---
 
 This skill builds on softr-sdk. Read it first for the entrypoints and the client/server boundary.

package/skills/softr-sdk/current-user/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22-alpha.2
+  library_version: 0.0.22
 ---
 
 This skill builds on softr-sdk. Read it first for the entrypoints and the wiring that puts a visitor on route context.

package/skills/softr-sdk/data-mutations/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22-alpha.2
+  library_version: 0.0.22
 ---
 
 This skill builds on softr-sdk. Read it first for the entrypoints and the client/server boundary.

package/skills/softr-sdk/reading-records/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22-alpha.2
+  library_version: 0.0.22
 ---
 
 This skill builds on softr-sdk. Read it first for the entrypoints and the client/server boundary.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -12,7 +12,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22-alpha.2
+  library_version: 0.0.22
 ---
 
 This skill builds on softr-sdk. Read it first for the entrypoints and the wiring that puts a visitor on route context.