@softr/sdk 0.0.22 → 0.0.24

package/dist/types.d.ts

@@ -26,11 +26,13 @@ type GetByIdOptions = {
   id: string;
   where?: never;
   timeZone?: string;
+  select?: Record<string, string>;
 };
 type GetByWhereOptions = {
   id?: never;
   where: AnyConstructable;
   timeZone?: string;
+  select?: Record<string, string>;
 };
 type GetOptions = GetByIdOptions | GetByWhereOptions;
 interface ListOptions {
@@ -66,6 +68,14 @@ interface ListResult<T extends SoftrRecord = SoftrRecord> {
   /** Offset to pass as `offset` in the next call, or `null` when there are no more pages. */
   nextOffset: number | null;
 }
+/**
+ * Augment this interface in a generated datasource-types file to enable
+ * typed `ds.list()` / `ds.get()` return values per datasource ID.
+ * Maps datasource ID → raw field shape (keyed by field ID).
+ */
+interface DatasourceTypeMap {}
+type AliasedFields<Sel extends Record<string, string>, Raw extends Record<string, JsonValue>> = { [K in keyof Sel]: Sel[K] extends keyof Raw ? Raw[Sel[K]] : JsonValue };
+type RecordFieldsFor<Id extends string, Sel extends Record<string, string>> = Id extends keyof DatasourceTypeMap ? [keyof Sel] extends [never] ? DatasourceTypeMap[Id] : AliasedFields<Sel, DatasourceTypeMap[Id]> : Record<string, JsonValue>;
 type AggregationFunction = 'SUM' | 'AVG' | 'MAX' | 'MIN' | 'COUNT' | 'DISTINCT';
 interface MetricOptions {
   select?: Record<string, string>;
@@ -80,7 +90,7 @@ interface MetricResult {
   value: number | null;
   executionTimestamp: Date;
 }
-interface ChartDataOptions {
+interface ChartOptions {
   select?: Record<string, string>;
   where?: AnyConstructable;
   /** Field alias (resolved via select) or raw field ID. */
@@ -93,7 +103,7 @@ interface ChartDataOptions {
   /** Override the timezone for this request. */
   timeZone?: string;
 }
-interface ChartDataResult {
+interface ChartResult {
   data: Record<string, JsonValue>[];
   executionTimestamp: Date;
 }
@@ -115,4 +125,4 @@ interface UpdateOptions {
   data: Record<string, JsonValue>;
 }
 //#endregion
-export { AggregationFunction, ChartDataOptions, ChartDataResult, CreateOptions, DatasourcePermissions, GetOptions, JsonValue, ListOptions, ListResult, MetricOptions, MetricResult, SoftrMe, SoftrPermissions, SoftrRecord, SoftrUser, UpdateOptions };
+export { AggregationFunction, ChartOptions, ChartResult, CreateOptions, DatasourcePermissions, DatasourceTypeMap, GetOptions, JsonValue, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrMe, SoftrPermissions, SoftrRecord, SoftrUser, UpdateOptions };

package/dist/vite.d.ts

@@ -1,14 +1,7 @@
-import { Manifest, ManifestNode } from "./routes/manifest.js";
 import { PluginOption } from "vite";
 
 //#region src/vite.d.ts
-declare const MANIFEST_RELATIVE_PATH: string;
-/** Writes `<root>/dist/routes.json` and returns its path. Throws on a rule it cannot read. */
-declare function generateManifest(root: string): Promise<string>;
-/**
- * Everything Softr adds to an app's Vite config: the build-time routes manifest, plus the studio
- * edit engine when the pod supplies one.
- */
+/** Everything Softr adds to an app's Vite config: the studio edit engine, when the pod supplies one. */
 declare function softr(): PluginOption[];
 //#endregion
-export { MANIFEST_RELATIVE_PATH, type Manifest, type ManifestNode, generateManifest, softr };
+export { softr };

package/dist/vite.js

@@ -1,75 +1,10 @@
-import { ManifestError, generateRoutesManifest } from "./routes/manifest.js";
-import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 
 //#region src/vite.ts
-const MANIFEST_RELATIVE_PATH = path.join("dist", "routes.json");
-async function renderManifest(root) {
-	try {
-		return await generateRoutesManifest(root);
-	} catch (error) {
-		if (error instanceof ManifestError) {
-			const { filePath, line, column, message } = error.detail;
-			throw new Error(`[softr] ${filePath}:${line}:${column} — ${message}`, { cause: error });
-		}
-		throw error;
-	}
-}
-async function writeManifest(root, contents) {
-	const target = path.resolve(root, MANIFEST_RELATIVE_PATH);
-	await mkdir(path.dirname(target), { recursive: true });
-	await writeFile(target, contents, "utf8");
-	return target;
-}
-/** Writes `<root>/dist/routes.json` and returns its path. Throws on a rule it cannot read. */
-async function generateManifest(root) {
-	return writeManifest(root, await renderManifest(root));
-}
-/**
-* Everything Softr adds to an app's Vite config: the build-time routes manifest, plus the studio
-* edit engine when the pod supplies one.
-*/
+/** Everything Softr adds to an app's Vite config: the studio edit engine, when the pod supplies one. */
 function softr() {
-	return [
-		routesManifest(),
-		previewIdentity(),
-		editEngine()
-	];
-}
-/**
-* Signing the preview in writes the cookie this app's own session code reads back, so it lives here
-* rather than in the edit engine — one implementation of the format, no version to keep in step.
-*
-* `SOFTR_APPLICATION_ID` gates it: the pod sets it, a developer's machine has none.
-*/
-async function previewIdentity() {
-	if (!process.env.SOFTR_APPLICATION_ID) return false;
-	const { PREVIEW_REDEMPTION_PATH, PREVIEW_SIGNED_IN_PATH, redeemGrant, reportSignedIn } = await import("./preview-identity/preview-identity.js");
-	return {
-		name: "softr-preview-identity",
-		apply: "serve",
-		configureServer(server) {
-			server.middlewares.use(PREVIEW_REDEMPTION_PATH, redeemGrant);
-			server.middlewares.use(PREVIEW_SIGNED_IN_PATH, reportSignedIn);
-		}
-	};
-}
-/** Plugin order does not matter: this puts nothing into the module graph. */
-function routesManifest() {
-	let root = process.cwd();
-	let rendered = null;
-	return {
-		name: "softr",
-		apply: "build",
-		configResolved(config) {
-			root = config.root;
-		},
-		async closeBundle() {
-			rendered ??= renderManifest(root);
-			await writeManifest(root, await rendered);
-		}
-	};
+	return [editEngine()];
 }
 /**
 * The edit engine is provided by the pod runtime rather than an app dependency: it is never in the
@@ -91,4 +26,4 @@ async function editEngine() {
 }
 
 //#endregion
-export { MANIFEST_RELATIVE_PATH, generateManifest, softr };
+export { softr };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.22",
+  "version": "0.0.24",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
@@ -16,17 +16,12 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@babel/parser": "^7.28.0",
-    "@babel/traverse": "^7.28.0",
-    "@babel/types": "^7.28.0",
-    "@tanstack/router-generator": "^1.167.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@tanstack/intent": "^0.3.6",
     "@tanstack/react-router": "^1.168.0",
     "@tanstack/react-start": "^1.168.0",
-    "@types/babel__traverse": "^7.28.0",
     "@types/node": "^24.3.0",
     "tsdown": "^0.15.0",
     "typescript": "^5.9.2",

package/skills/softr-sdk/SKILL.md

@@ -6,11 +6,12 @@ description: >-
   boundary between them, softrAuthMiddleware, getSoftrContext,
   initialSoftrContext, SoftrContext, and which sub-skill to load for route
   visibility, the current user, reading records, writing records, or auth. Load
-  this before any other Softr SDK skill.
+  this when unsure which sub-skill applies, or when touching the wiring; each
+  sub-skill stands alone for its own task.
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.22
+  library_version: 0.0.24
 ---
 
 # Softr SDK core
@@ -20,9 +21,9 @@ metadata:
 > **CRITICAL**: The SDK is split across four entrypoints and the split is enforced. `ds` and `auth` exist only on `@softr/sdk/server` and only run inside a `createServerFn` handler. Importing them anywhere else fails the build.
 > **CRITICAL**: Every route file must declare its audience with `defineVisibility`. There is no default and nothing is inherited from a sibling. A route file without a declaration is a lint error.
 > **CRITICAL**: The app is already wired. `src/start.ts`, `src/router.tsx` and `src/routes/__root.tsx` register the middleware and resolve the session. Do not add a second registration.
-> **CRITICAL**: `ds.metric`, `ds.chartData`, `workflow.trigger` and `integration.fetch` are exploratory. They exist on the entrypoints below and they typecheck, but their endpoints are not final. Do not build a feature on any of them. Tell the user the capability is not ready and ask how they want to proceed.
+> **CRITICAL**: `workflow.trigger` is exploratory. It exists on the entrypoints below and typechecks, but its endpoint is not final. Do not build a feature on it. Tell the user the capability is not ready and ask how they want to proceed.
 
-Load this skill, then load **one** sub-skill for the task at hand. Add a second only when the work genuinely crosses that boundary. A page that lists records behind a group restriction needs `reading-records` plus `routes-and-visibility`.
+Each sub-skill stands alone for its task and repeats the boundary above, so most work needs **one** sub-skill and not this file. Load this one when you are unsure which sub-skill applies, or when the wiring below is what you are touching. Add a second sub-skill only when the work genuinely crosses that boundary: a page that lists records behind a group restriction needs `reading-records` plus `routes-and-visibility`.
 
 ## Entrypoints
 
@@ -123,4 +124,4 @@ type User = {
 
 ## Version
 
-Targets `@softr/sdk` v0.0.21.
+Targets `@softr/sdk` v0.0.24.

package/skills/softr-sdk/auth/SKILL.md

@@ -10,10 +10,10 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22
+  library_version: 0.0.24
 ---
 
-This skill builds on softr-sdk. Read it first for the entrypoints and the client/server boundary.
+**Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineVisibility`, the hooks and every type come from `@softr/sdk`. The app is already wired (`src/start.ts`, `src/router.tsx`, `src/routes/__root.tsx`); never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
 
 # Auth
 

package/skills/softr-sdk/current-user/SKILL.md

@@ -10,10 +10,10 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22
+  library_version: 0.0.24
 ---
 
-This skill builds on softr-sdk. Read it first for the entrypoints and the wiring that puts a visitor on route context.
+**Boundary.** `useCurrentUser`, `usePermissions` and every type come from `@softr/sdk` and work anywhere; `ds` and `auth` live on `@softr/sdk/server` and run only inside a `createServerFn` handler. The app is already wired — `src/start.ts` registers `softrAuthMiddleware`, `src/routes/__root.tsx` publishes the visitor as route context — never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
 
 # The current user
 

package/skills/softr-sdk/data-mutations/SKILL.md

@@ -8,14 +8,14 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22
+  library_version: 0.0.24
 ---
 
-This skill builds on softr-sdk. Read it first for the entrypoints and the client/server boundary.
+**Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `q` and every type come from `@softr/sdk` and can be imported anywhere. The app is already wired (`src/start.ts`, `src/router.tsx`, `src/routes/__root.tsx`); never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
 
 # Writing records
 
-`ds` writes records to a Softr datasource. Like every read, a write lives on `@softr/sdk/server` and runs on the server only, so it happens inside a `createServerFn` handler and never in a component.
+`ds` writes records to a Softr datasource, from the server only.
 
 ## Setup
 
@@ -49,7 +49,7 @@ const createProject = createServerFn({ method: 'POST' })
   )
 ```
 
-Returns the created record as `{ id, fields }`.
+Resolves to `{ id, fields }`, and on a Softr table `fields` holds **only the keys you wrote** — not the rest of the record. See "What a write answers with" below.
 
 **The payload key is `data`, not `fields`.** A record answers with `fields`, which is where the confusion comes from, but the option you pass is `data`. `CreateOptions` requires it, so a call keyed by `fields` does not type-check.
 
@@ -73,7 +73,24 @@ const renameProject = createServerFn({ method: 'POST' })
 
 The record id is its own option, so keep it out of `data`.
 
-Returns the updated record. `update` writes the keys in `data` and leaves every other field alone, so a field you leave out is a field you are not writing. An empty `id` throws.
+`update` writes the keys in `data` and leaves every other field alone, so a field you leave out is a field you are not writing. An empty `id` throws.
+
+### What a write answers with
+
+`create` and `update` resolve to `{ id, fields }`, but `fields` is **not the record**. On a Softr table it carries only the keys you sent, aliased through `select`; a status change answers with `{ id, fields: { status } }` and nothing else. (Other datasource types may answer with more. Rely on neither.)
+
+So the answer is a receipt, not a replacement for what the page holds. Putting it where a loader-fetched record was blanks every column you did not write. Two honest ways to show the result:
+
+- **A quick change to one field** — a status select, a card dragged to another column, an archive toggle — is optimistic: change that one field in your own state immediately, keep the rest of the record as the loader gave it, save in the background, and on a rejected write restore the old value with a clear message. Do not `router.invalidate()` or re-fetch after a successful write; the local change is already what the user sees.
+- **A saved form, or anything that changes several fields**, refreshes the route's data — `router.invalidate()`, see `@tanstack/router-core#router-core/data-loading` — so the list or detail re-reads through its own `select`.
+
+Do not re-read the one record with `ds.get` for either: it takes no `select`, so it answers with raw field ids.
+
+### Writing a choice field
+
+A `SELECT` or `LINKED_RECORD` field reads back as `{ id, label }` (see [field-types](../reading-records/references/field-types.md)). Writing one accepts the option's `id`, its `label`, or `{ id, label }`, matched case-insensitively.
+
+**A value that matches no option is not an error — it silently adds a new option to the field.** A typo'd label leaves a junk choice in the schema. So write `{ label }` (or the `{ id, label }` you read), copy labels from the table's schema verbatim, and never invent one.
 
 ### Delete a record
 
@@ -101,7 +118,7 @@ Stamping a record with who created it, or scoping an update to the person making
 
 **A datasource id built from a name.** `'ds_projects'`, the table id, or the table's name glued to a uuid are not datasource ids. The id is the opaque UUID assigned when the table was registered on the application; copy it from there. Anything else fails at request time as not found or forbidden.
 
-**A datasource id stored in a variable.** The build reads ids statically to build the route manifest; it cannot resolve a name. Pass the UUID as a string literal directly at the call site. The lint rule `@softr/ds-no-computed-id` catches this at development time.
+**A datasource id stored in a variable.** Pass the UUID as a string literal directly at the call site. The lint rule `@softr/ds-no-computed-id` catches this at development time.
 
 **A write that sends `fields`.** The option is `data`. Only typecheck catches this, so it survives any run that does not typecheck.
 
@@ -113,8 +130,6 @@ Stamping a record with who created it, or scoping an update to the person making
 
 **Expecting `select` on a read-then-write round trip.** `ds.get` takes no `select`, so a record fetched by id answers with raw field ids. Load `reading-records` before pairing a read with a write.
 
-**A write outside a server function.** `ds` is server-only. Importing it into a component fails the build.
-
 **Reading the visitor from somewhere other than `context`.** There is nothing to import. See [current-user](../current-user/SKILL.md).
 
 ## References

package/skills/softr-sdk/reading-records/SKILL.md

@@ -10,14 +10,14 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22
+  library_version: 0.0.24
 ---
 
-This skill builds on softr-sdk. Read it first for the entrypoints and the client/server boundary.
+**Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `q` and every type come from `@softr/sdk` and can be imported anywhere. The app is already wired (`src/start.ts`, `src/router.tsx`, `src/routes/__root.tsx`); never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
 
 # Reading records
 
-`ds` reads records out of a Softr datasource. It lives on `@softr/sdk/server` and runs on the server only, so every read happens inside a `createServerFn` handler or a server-side route hook, never in a component.
+`ds` reads records out of a Softr datasource, from the server only.
 
 ## Setup
 
@@ -27,17 +27,15 @@ import { ds } from '@softr/sdk/server'
 import { q } from '@softr/sdk'
 ```
 
-`ds` is server-only and lives on `@softr/sdk/server`. `q` builds queries and nothing more, so it ships on the root entrypoint and can be imported anywhere.
-
 Every `ds` call names its datasource by an opaque UUID from the table's registration on the application (Softr Studio's Data tab, or the `register_application_data_source` tool when an agent does it). It is not the table id, and it is never derived from the table's name — `'ds_posts'` or a name glued to a uuid fails at request time as not found or forbidden.
 
-**The datasource id must be a string literal at the call site.** Do not assign it to a variable and pass the variable — the build reads ids statically and cannot resolve a name. Write the UUID directly as the first argument:
+**The datasource id must be a string literal at the call site.** Do not assign it to a variable and pass the variable. Write the UUID directly as the first argument:
 
 ```ts
 // correct
 ds.list('8ffb4814-b028-4496-b679-7face2167ebc', { ... })
 
-// wrong — the build cannot read this
+// wrong
 const POSTS = '8ffb4814-b028-4496-b679-7face2167ebc'
 ds.list(POSTS, { ... })
 ```

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -7,19 +7,19 @@ description: >-
   per-reason overrides, the redirect and throw strategies, rendering an access
   error with isAccessError, isUnauthenticatedError, isForbiddenError and
   isAlreadySignedInError, guarding a layout, and the lint rule that requires a
-  declaration alongside the build rules that reject a duplicate, computed or
+  declaration alongside the rules that reject a duplicate, computed or
   root-level one.
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.22
+  library_version: 0.0.24
 ---
 
-This skill builds on softr-sdk. Read it first for the entrypoints and the wiring that puts a visitor on route context.
+**Boundary.** `defineVisibility`, the error predicates and every type come from `@softr/sdk` and work anywhere; `ds` and `auth` live on `@softr/sdk/server` and run only inside a `createServerFn` handler. The app is already wired — `src/start.ts` registers `softrAuthMiddleware`, `src/routes/__root.tsx` publishes the visitor as route context — never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
 
 # Route visibility
 
-Every route file in a Softr app declares who may see it. The build reads that declaration out of the source text without executing it and publishes it to Softr Studio, which shows the app owner every route and its audience. That is why the rules below are strict: a rule the build cannot read is a rule Studio cannot show.
+Every route file in a Softr app declares who may see it. Softr reads that declaration out of the source text without executing it and publishes it to Softr Studio, which shows the app owner every route and its audience. That is why the rules below are strict: a rule Softr cannot read is a rule Studio cannot show.
 
 ## Setup
 
@@ -43,11 +43,11 @@ function Billing() {
 
 One `defineVisibility` call per file, at module scope, with an inline object literal as its argument.
 
-Three rules about that shape, because the build reads the file rather than running it:
+Three rules about that shape, because Softr reads the file rather than running it:
 
 - The call must initialise a top-level `const`.
 - The import must be a direct named import from `@softr/sdk`.
-- Never declare on `__root.tsx`. The root cannot carry an audience, so the build rejects a declaration there rather than shipping an app that only looks gated. Put the rule on a layout below the root instead.
+- Never declare on `__root.tsx`. The root cannot carry an audience, so a declaration there would gate nothing while looking like it does. Softr rejects it. Put the rule on a layout below the root instead.
 
 The four rules:
 
@@ -82,7 +82,7 @@ export const Route = createFileRoute('/_app')({
 
 The whole match chain runs, so a layout guards everything beneath it. Sibling routes do not guard each other. `/admin/index.tsx` does nothing for `/admin/users.tsx` unless an `admin.tsx` layout exists. Routes below a guarded layout still declare their own rule, because the declaration is what Studio reads.
 
-A thrown error renders in place of the guarded route's component. Guard the layout that draws your nav and chrome, and the error screen replaces the chrome along with it. Put the guard on a layout inside the shell rather than on the shell itself.
+A thrown error renders in place of the guarded route's component. The template's `_app.tsx` shell is guarded with `LOGGED_IN_USERS`, whose default for a signed-out visitor is a redirect, so nothing ever renders there. A rule that can *throw* — a `userGroupIds` rule, whose `forbidden` default is throw — should not sit on the shell itself, or the refusal replaces the nav and chrome. Put it on a layout inside the shell, or on the restricted routes, so the refusal renders inside the chrome.
 
 ### Change what a denied visitor gets
 

package/dist/preview-identity/preview-identity.js

@@ -1,121 +0,0 @@
-import { makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName } from "../auth/session.js";
-
-//#region src/preview-identity/preview-identity.ts
-const PREVIEW_REDEMPTION_PATH = "/__preview/identity";
-const PREVIEW_SIGNED_IN_PATH = "/__preview/signed-in";
-/** The grant in the URL is the only credential: studio-api authorized the builder before issuing it. */
-const redeemGrant = async (req, res) => {
-	res.setHeader("Cache-Control", "no-store");
-	res.setHeader("Referrer-Policy", "no-referrer");
-	if (req.method !== "GET") {
-		sendJson(res, 405, { error: `${PREVIEW_REDEMPTION_PATH} only supports GET` });
-		return;
-	}
-	const grant = searchParamsOf(req).get("grant");
-	if (!grant) {
-		sendJson(res, 400, { error: "no grant" });
-		return;
-	}
-	const landing = landingPath(searchParamsOf(req).get("next"));
-	let session;
-	try {
-		session = await redeemPreviewGrant(req, grant);
-	} catch (error) {
-		sendJson(res, statusOf(error), { error: messageOf(error) });
-		return;
-	}
-	const secure = requestIsHttps(req);
-	res.statusCode = 302;
-	res.setHeader("Location", landing);
-	res.setHeader("Set-Cookie", session.anonymous ? makeSessionClearingCookies(secure) : makeSessionTokenCookie(session.jwt, secure));
-	res.end();
-};
-/** Presence only, never decoded: decoding would put an app user's identity on a route Studio reads. */
-const reportSignedIn = (req, res) => {
-	res.setHeader("Cache-Control", "no-store");
-	if (req.method !== "GET") {
-		sendJson(res, 405, { error: `${PREVIEW_SIGNED_IN_PATH} only supports GET` });
-		return;
-	}
-	sendJson(res, 200, { signedIn: hasSessionCookie(req.headers.cookie, sessionTokenCookieName(requestIsHttps(req))) });
-};
-var RedemptionError = class extends Error {
-	status;
-	constructor(status, message) {
-		super(message);
-		this.status = status;
-	}
-};
-function statusOf(error) {
-	return error instanceof RedemptionError ? error.status : 503;
-}
-function messageOf(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-async function redeemPreviewGrant(req, grant) {
-	const applicationId = process.env.SOFTR_APPLICATION_ID;
-	const studioApiUrl = process.env.SOFTR_STUDIO_API_URL?.trim() || studioApiUrlFor(req);
-	if (!applicationId || !studioApiUrl) throw new RedemptionError(503, "studio-api is unavailable");
-	let response;
-	try {
-		response = await fetch(`${studioApiUrl}/v1/applications/${encodeURIComponent(applicationId)}/vibe-coding/preview-identity/redeem`, {
-			method: "POST",
-			headers: { "content-type": "application/json" },
-			body: JSON.stringify({ grant })
-		});
-	} catch {
-		throw new RedemptionError(503, "studio-api is unreachable");
-	}
-	if (!response.ok) throw new RedemptionError(response.status, "studio-api refused the preview identity grant");
-	const body = await response.json().catch(() => null);
-	if (typeof body !== "object" || body === null) throw new RedemptionError(503, "studio-api returned no session");
-	const { anonymous, jwt } = body;
-	if (anonymous === true) return { anonymous: true };
-	if (typeof jwt !== "string" || jwt.length === 0) throw new RedemptionError(503, "studio-api returned no token");
-	return {
-		anonymous: false,
-		jwt
-	};
-}
-const STAGING_HOST_PATTERN = /(?:^|\.)staging(\d+)\.softr\.io$/;
-/** The host is the only per-environment signal the app has. Anything but a staging one gives null. */
-function studioApiUrlFor(req) {
-	const forwarded = req.headers["x-forwarded-host"];
-	const name = ((Array.isArray(forwarded) ? forwarded[0] : forwarded) ?? req.headers.host ?? "").split(",")[0].trim().split(":")[0];
-	const digits = STAGING_HOST_PATTERN.exec(name)?.[1];
-	if (!digits) return null;
-	return `https://studio-api-staging${digits.padStart(2, "0")}.softr.io`;
-}
-function hasSessionCookie(header, name) {
-	if (!header) return false;
-	return header.split(";").some((pair) => {
-		const separator = pair.indexOf("=");
-		return separator !== -1 && pair.slice(0, separator).trim() === name;
-	});
-}
-/**
-* Exactly as strict as h3's `getRequestProtocol`, which reads the cookie back. Being more generous
-* writes `__Host-session_token` where the app looks up `session_token`, and the visitor is silently
-* anonymous with no error on either side.
-*/
-function requestIsHttps(req) {
-	const forwarded = req.headers["x-forwarded-proto"];
-	if (forwarded === "https") return true;
-	if (forwarded === "http") return false;
-	return Boolean(req.socket?.encrypted);
-}
-function landingPath(next) {
-	if (!next || !next.startsWith("/") || next.startsWith("//") || next.includes("\\") || next.includes("://") || /[\u0000-\u001f\u007f]/.test(next)) return "/";
-	return next;
-}
-function searchParamsOf(req) {
-	return new URL(req.url ?? "", "http://request.invalid").searchParams;
-}
-function sendJson(res, status, body) {
-	res.statusCode = status;
-	res.setHeader("Content-Type", "application/json");
-	res.end(JSON.stringify(body));
-}
-
-//#endregion
-export { PREVIEW_REDEMPTION_PATH, PREVIEW_SIGNED_IN_PATH, redeemGrant, reportSignedIn };

package/dist/routes/discover.d.ts

@@ -1,14 +0,0 @@
-import "@tanstack/router-generator";
-
-//#region src/routes/discover.d.ts
-
-type DatasourceMethod = "list" | "get" | "create" | "update" | "delete" | "metric" | "chartData";
-type DatasourceAccess = {
-  id: string;
-  methods: Array<DatasourceMethod>;
-};
-type VisibilityValue = string | Array<VisibilityValue> | {
-  [key: string]: VisibilityValue;
-};
-//#endregion
-export { DatasourceAccess, VisibilityValue };