@softr/sdk 0.0.23 → 0.0.24

package/dist/auth/session.js

@@ -46,8 +46,9 @@ function readSessionData(sessionToken) {
 		permissions: payload.permissions
 	};
 }
-function makeSessionTokenCookie(token, secure = requestIsSecure()) {
-	return serializeCookie(sessionCookieName(SESSION_TOKEN, secure), sealEnvelope(token, SESSION_TOKEN), {
+function makeSessionTokenCookie(token) {
+	const { name, secure } = sessionCookie(SESSION_TOKEN);
+	return serializeCookie(name, sealEnvelope(token, SESSION_TOKEN), {
 		maxAge: sessionConfig().sessionMaxAge,
 		secure
 	});
@@ -71,19 +72,6 @@ function makeSessionDataCookie(session, sessionToken) {
 function clearSession() {
 	clearCookies([SESSION_TOKEN, SESSION_DATA]);
 }
-/** The clearing pair, for the same out-of-context caller as `makeSessionTokenCookie`. */
-function makeSessionClearingCookies(secure) {
-	return serializeClearingCookies([SESSION_TOKEN, SESSION_DATA], secure);
-}
-/**
-* The name `readSessionToken` would look the token up under on a request of this
-* scheme, for a caller that only needs to know whether one is present and cannot
-* decode it. Same `secure` argument as `makeSessionTokenCookie`, so a caller that
-* writes and a caller that probes cannot disagree about the name.
-*/
-function sessionTokenCookieName(secure) {
-	return sessionCookieName(SESSION_TOKEN, secure);
-}
 const sessionDataSchema = z.object({
 	user: userSchema.nullable(),
 	permissions: permissionsSchema,
@@ -95,13 +83,11 @@ const sessionDataSchema = z.object({
 * schemes, and the one left behind would revive if the scheme changed back.
 */
 function clearCookies(bases) {
-	writeCookies(serializeClearingCookies(bases, requestIsSecure()));
-}
-function serializeClearingCookies(bases, secure) {
-	return bases.flatMap((base) => secure ? [sessionCookieName(base, secure), base] : [base]).map((name) => serializeCookie(name, "", {
+	const secure = requestIsSecure();
+	writeCookies(bases.flatMap((base) => secure ? [sessionCookieName(base, secure), base] : [base]).map((name) => serializeCookie(name, "", {
 		maxAge: 0,
 		secure
-	}));
+	})));
 }
 /**
 * Over the plaintext token, never the cookie value: that is resealed with a
@@ -177,4 +163,4 @@ function openEnvelope(raw, purpose) {
 }
 
 //#endregion
-export { clearSession, makeSessionClearingCookies, makeSessionDataCookie, makeSessionTokenCookie, readSessionData, readSessionToken, sessionTokenCookieName };
+export { clearSession, makeSessionDataCookie, makeSessionTokenCookie, readSessionData, readSessionToken };

package/dist/core/datasource.d.ts

@@ -1,4 +1,4 @@
-import { ChartDataOptions, ChartDataResult, CreateOptions, GetOptions, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrRecord, UpdateOptions } from "../types.js";
+import { ChartOptions, ChartResult, CreateOptions, GetOptions, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrRecord, UpdateOptions } from "../types.js";
 
 //#region src/core/datasource.d.ts
 declare function listRecords<Id extends string, Sel extends Record<string, string> = Record<never, never>>(datasourceId: Id, options?: Omit<ListOptions, 'select'> & {
@@ -17,7 +17,7 @@ declare function updateRecord<Id extends string, Sel extends Record<string, stri
 }): Promise<SoftrRecord<RecordFieldsFor<Id, Sel>>>;
 declare function deleteRecord(datasourceId: string, id: string): Promise<void>;
 declare function getMetric(datasourceId: string, options: MetricOptions): Promise<MetricResult>;
-declare function getChartData(datasourceId: string, options: ChartDataOptions): Promise<ChartDataResult>;
+declare function getChart(datasourceId: string, options: ChartOptions): Promise<ChartResult>;
 declare const ds: {
   list: typeof listRecords;
   get: typeof getRecord;
@@ -25,7 +25,7 @@ declare const ds: {
   update: typeof updateRecord;
   delete: typeof deleteRecord;
   metric: typeof getMetric;
-  chartData: typeof getChartData;
+  chart: typeof getChart;
 };
 //#endregion
 export { ds };

package/dist/core/datasource.js

@@ -120,9 +120,10 @@ async function deleteRecord(datasourceId, id) {
 }
 async function getMetric(datasourceId, options) {
 	const { select, where, aggregation, field } = options;
+	if (aggregation !== "COUNT" && !field) throw new Error(`field is required for aggregation "${aggregation}"`);
 	const fieldId = field ? select?.[field] ?? field : void 0;
 	const filterCriteria = where ? dealiasFilterCriteria(buildFilterCriteria(where), select ?? {}) : {};
-	const res = await fetch(`${dsUrl(datasourceId)}/metric/data`, {
+	const res = await fetch(`${dsUrl(datasourceId)}/chart/data`, {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
@@ -131,10 +132,11 @@ async function getMetric(datasourceId, options) {
 		},
 		body: JSON.stringify({
 			options: { userLocale: "en-US" },
-			calculationField: {
+			groupBy: [],
+			metrics: [{
 				field: fieldId,
 				aggregation
-			},
+			}],
 			filterCriteria
 		})
 	});
@@ -142,26 +144,24 @@ async function getMetric(datasourceId, options) {
 	const payload = await res.json();
 	const executionTimestamp = /* @__PURE__ */ new Date(payload.executionTimestamp * 1e3);
 	let value;
-	if (aggregation === "COUNT") value = payload.data.find((item) => COUNT_CNT in item)?.[COUNT_CNT] ?? null;
-	else {
-		if (!fieldId) throw new Error(`field is required for aggregation "${aggregation}"`);
-		value = payload.data.find((item) => fieldId in item)?.[fieldId] ?? null;
-	}
+	const responseKey = aggregation === "COUNT" && !fieldId ? COUNT_CNT : fieldId;
+	value = payload.data.find((item) => responseKey in item)?.[responseKey] ?? null;
 	return {
 		value,
 		executionTimestamp
 	};
 }
-async function getChartData(datasourceId, options) {
+async function getChart(datasourceId, options) {
 	const { select, where, groupBy, metrics, orderBy } = options;
 	const filterCriteria = where ? dealiasFilterCriteria(buildFilterCriteria(where), select ?? {}) : {};
-	const sortingOption = orderBy ? dealiasOrderBy(buildOrderBy(orderBy), select ?? {})[0] : void 0;
+	const sortingOptions = orderBy ? dealiasOrderBy(buildOrderBy(orderBy), select ?? {}) : void 0;
 	const groupByFields = (Array.isArray(groupBy) ? groupBy : [groupBy]).map((field) => ({ field: select?.[field] ?? field }));
 	const yAxisFields = Object.values(metrics).map(({ field, aggregation }) => ({
 		field: field ? select?.[field] ?? field : void 0,
 		aggregation
 	}));
-	const res = await fetch(`${dsUrl(datasourceId)}/chart`, {
+	if (!yAxisFields.length) throw new Error("chart requires at least one metric");
+	const res = await fetch(`${dsUrl(datasourceId)}/chart/data`, {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
@@ -171,12 +171,12 @@ async function getChartData(datasourceId, options) {
 		body: JSON.stringify({
 			options: { userLocale: "en-US" },
 			filterCriteria,
-			sortingOption,
-			xAxisFields: groupByFields,
-			yAxisFields
+			sortingOptions,
+			groupBy: groupByFields,
+			metrics: yAxisFields
 		})
 	});
-	await assertResponseOk(res, `Softr datasource chartData failed for "${datasourceId}"`);
+	await assertResponseOk(res, `Softr datasource chart failed for "${datasourceId}"`);
 	const payload = await res.json();
 	const executionTimestamp = /* @__PURE__ */ new Date(payload.executionTimestamp * 1e3);
 	const aliases = {};
@@ -216,11 +216,11 @@ const ds = {
 	update: updateRecord,
 	delete: deleteRecord,
 	metric: getMetric,
-	chartData: getChartData
+	chart: getChart
 };
 function withoutTrailingSlash(url) {
 	return url.replace(/\/+$/, "");
 }
 
 //#endregion
-export { ds };
+export { ds, dsUrl };

package/dist/core/integration.js

@@ -1,7 +1,7 @@
 import { readSessionToken } from "../auth/session.js";
+import { dsUrl } from "./datasource.js";
 
 //#region src/core/integration.ts
-const BASE_URL = () => (import.meta.env.VITE_SOFTR_BASE_URL ?? "").replace(/\/$/, "");
 async function integrationFetch(integrationId, input, init) {
 	const req = new Request(input, init);
 	if (req.signal.aborted) throw req.signal.reason ?? new DOMException("The operation was aborted.", "AbortError");
@@ -16,7 +16,7 @@ async function integrationFetch(integrationId, input, init) {
 	};
 	const method = req.method.toUpperCase();
 	if (method !== "GET" && method !== "HEAD" && req.body !== null) payload.body = await req.clone().text();
-	return fetch(`${BASE_URL()}/api/integrations/${integrationId}/proxy`, {
+	return fetch(`${dsUrl(integrationId)}/proxy`, {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",

package/dist/index.d.ts

@@ -1,10 +1,10 @@
 import { q } from "./core/query.js";
 import { SoftrUserGroupId, SoftrUserGroups, User } from "./auth/user.js";
-import { AggregationFunction, ChartDataOptions, ChartDataResult, CreateOptions, DatasourcePermissions, DatasourceTypeMap, GetOptions, JsonValue, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrMe, SoftrPermissions, SoftrRecord, SoftrUser, UpdateOptions } from "./types.js";
+import { AggregationFunction, ChartOptions, ChartResult, CreateOptions, DatasourcePermissions, DatasourceTypeMap, GetOptions, JsonValue, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrMe, SoftrPermissions, SoftrRecord, SoftrUser, UpdateOptions } from "./types.js";
 import { Permissions } from "./auth/permissions.js";
 import { SoftrContext } from "./auth/context.js";
 import { AccessBehaviour, AccessCheck, AccessError, AccessReason, RouteVisibility, VisibilityHandle, defineVisibility, isAccessError, isAlreadySignedInError, isForbiddenError, isUnauthenticatedError } from "./routes/visibility.js";
 import { getSoftrContext, initialSoftrContext, softrAuthMiddleware, useCurrentUser, usePermissions } from "./auth/isomorphic.js";
 import { useUserTimezone } from "./timezone.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
-export { type AccessBehaviour, type AccessCheck, type AccessError, type AccessReason, type AggregationFunction, type ChartDataOptions, type ChartDataResult, type CreateOptions, type DatasourcePermissions, type DatasourceTypeMap, DefaultErrorOverlay, type GetOptions, type JsonValue, type ListOptions, type ListResult, type MetricOptions, type MetricResult, type Permissions, type RecordFieldsFor, type RouteVisibility, type SoftrContext, type SoftrMe, type SoftrPermissions, type SoftrRecord, type SoftrUser, type SoftrUserGroupId, type SoftrUserGroups, type UpdateOptions, type User, type VisibilityHandle, defineVisibility, getSoftrContext, initialSoftrContext, isAccessError, isAlreadySignedInError, isForbiddenError, isUnauthenticatedError, q, softrAuthMiddleware, useCurrentUser, usePermissions, useUserTimezone };
+export { type AccessBehaviour, type AccessCheck, type AccessError, type AccessReason, type AggregationFunction, type ChartOptions, type ChartResult, type CreateOptions, type DatasourcePermissions, type DatasourceTypeMap, DefaultErrorOverlay, type GetOptions, type JsonValue, type ListOptions, type ListResult, type MetricOptions, type MetricResult, type Permissions, type RecordFieldsFor, type RouteVisibility, type SoftrContext, type SoftrMe, type SoftrPermissions, type SoftrRecord, type SoftrUser, type SoftrUserGroupId, type SoftrUserGroups, type UpdateOptions, type User, type VisibilityHandle, defineVisibility, getSoftrContext, initialSoftrContext, isAccessError, isAlreadySignedInError, isForbiddenError, isUnauthenticatedError, q, softrAuthMiddleware, useCurrentUser, usePermissions, useUserTimezone };

package/dist/types.d.ts

@@ -90,7 +90,7 @@ interface MetricResult {
   value: number | null;
   executionTimestamp: Date;
 }
-interface ChartDataOptions {
+interface ChartOptions {
   select?: Record<string, string>;
   where?: AnyConstructable;
   /** Field alias (resolved via select) or raw field ID. */
@@ -103,7 +103,7 @@ interface ChartDataOptions {
   /** Override the timezone for this request. */
   timeZone?: string;
 }
-interface ChartDataResult {
+interface ChartResult {
   data: Record<string, JsonValue>[];
   executionTimestamp: Date;
 }
@@ -125,4 +125,4 @@ interface UpdateOptions {
   data: Record<string, JsonValue>;
 }
 //#endregion
-export { AggregationFunction, ChartDataOptions, ChartDataResult, CreateOptions, DatasourcePermissions, DatasourceTypeMap, GetOptions, JsonValue, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrMe, SoftrPermissions, SoftrRecord, SoftrUser, UpdateOptions };
+export { AggregationFunction, ChartOptions, ChartResult, CreateOptions, DatasourcePermissions, DatasourceTypeMap, GetOptions, JsonValue, ListOptions, ListResult, MetricOptions, MetricResult, RecordFieldsFor, SoftrMe, SoftrPermissions, SoftrRecord, SoftrUser, UpdateOptions };

package/dist/vite.d.ts

@@ -1,14 +1,7 @@
-import { Manifest, ManifestNode } from "./routes/manifest.js";
 import { PluginOption } from "vite";
 
 //#region src/vite.d.ts
-declare const MANIFEST_RELATIVE_PATH: string;
-/** Writes `<root>/dist/routes.json` and returns its path. Throws on a rule it cannot read. */
-declare function generateManifest(root: string): Promise<string>;
-/**
- * Everything Softr adds to an app's Vite config: the build-time routes manifest, plus the studio
- * edit engine when the pod supplies one.
- */
+/** Everything Softr adds to an app's Vite config: the studio edit engine, when the pod supplies one. */
 declare function softr(): PluginOption[];
 //#endregion
-export { MANIFEST_RELATIVE_PATH, type Manifest, type ManifestNode, generateManifest, softr };
+export { softr };

package/dist/vite.js

@@ -1,75 +1,10 @@
-import { ManifestError, generateRoutesManifest } from "./routes/manifest.js";
-import { mkdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { pathToFileURL } from "node:url";
 
 //#region src/vite.ts
-const MANIFEST_RELATIVE_PATH = path.join("dist", "routes.json");
-async function renderManifest(root) {
-	try {
-		return await generateRoutesManifest(root);
-	} catch (error) {
-		if (error instanceof ManifestError) {
-			const { filePath, line, column, message } = error.detail;
-			throw new Error(`[softr] ${filePath}:${line}:${column} — ${message}`, { cause: error });
-		}
-		throw error;
-	}
-}
-async function writeManifest(root, contents) {
-	const target = path.resolve(root, MANIFEST_RELATIVE_PATH);
-	await mkdir(path.dirname(target), { recursive: true });
-	await writeFile(target, contents, "utf8");
-	return target;
-}
-/** Writes `<root>/dist/routes.json` and returns its path. Throws on a rule it cannot read. */
-async function generateManifest(root) {
-	return writeManifest(root, await renderManifest(root));
-}
-/**
-* Everything Softr adds to an app's Vite config: the build-time routes manifest, plus the studio
-* edit engine when the pod supplies one.
-*/
+/** Everything Softr adds to an app's Vite config: the studio edit engine, when the pod supplies one. */
 function softr() {
-	return [
-		routesManifest(),
-		previewIdentity(),
-		editEngine()
-	];
-}
-/**
-* Signing the preview in writes the cookie this app's own session code reads back, so it lives here
-* rather than in the edit engine — one implementation of the format, no version to keep in step.
-*
-* `SOFTR_APPLICATION_ID` gates it: the pod sets it, a developer's machine has none.
-*/
-async function previewIdentity() {
-	if (!process.env.SOFTR_APPLICATION_ID) return false;
-	const { PREVIEW_REDEMPTION_PATH, PREVIEW_SIGNED_IN_PATH, redeemGrant, reportSignedIn } = await import("./preview-identity/preview-identity.js");
-	return {
-		name: "softr-preview-identity",
-		apply: "serve",
-		configureServer(server) {
-			server.middlewares.use(PREVIEW_REDEMPTION_PATH, redeemGrant);
-			server.middlewares.use(PREVIEW_SIGNED_IN_PATH, reportSignedIn);
-		}
-	};
-}
-/** Plugin order does not matter: this puts nothing into the module graph. */
-function routesManifest() {
-	let root = process.cwd();
-	let rendered = null;
-	return {
-		name: "softr",
-		apply: "build",
-		configResolved(config) {
-			root = config.root;
-		},
-		async closeBundle() {
-			rendered ??= renderManifest(root);
-			await writeManifest(root, await rendered);
-		}
-	};
+	return [editEngine()];
 }
 /**
 * The edit engine is provided by the pod runtime rather than an app dependency: it is never in the
@@ -91,4 +26,4 @@ async function editEngine() {
 }
 
 //#endregion
-export { MANIFEST_RELATIVE_PATH, generateManifest, softr };
+export { softr };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.23",
+  "version": "0.0.24",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
@@ -16,17 +16,12 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@babel/parser": "^7.28.0",
-    "@babel/traverse": "^7.28.0",
-    "@babel/types": "^7.28.0",
-    "@tanstack/router-generator": "^1.167.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@tanstack/intent": "^0.3.6",
     "@tanstack/react-router": "^1.168.0",
     "@tanstack/react-start": "^1.168.0",
-    "@types/babel__traverse": "^7.28.0",
     "@types/node": "^24.3.0",
     "tsdown": "^0.15.0",
     "typescript": "^5.9.2",

package/skills/softr-sdk/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.23
+  library_version: 0.0.24
 ---
 
 # Softr SDK core
@@ -21,7 +21,7 @@ metadata:
 > **CRITICAL**: The SDK is split across four entrypoints and the split is enforced. `ds` and `auth` exist only on `@softr/sdk/server` and only run inside a `createServerFn` handler. Importing them anywhere else fails the build.
 > **CRITICAL**: Every route file must declare its audience with `defineVisibility`. There is no default and nothing is inherited from a sibling. A route file without a declaration is a lint error.
 > **CRITICAL**: The app is already wired. `src/start.ts`, `src/router.tsx` and `src/routes/__root.tsx` register the middleware and resolve the session. Do not add a second registration.
-> **CRITICAL**: `ds.metric`, `ds.chartData`, `workflow.trigger` and `integration.fetch` are exploratory. They exist on the entrypoints below and they typecheck, but their endpoints are not final. Do not build a feature on any of them. Tell the user the capability is not ready and ask how they want to proceed.
+> **CRITICAL**: `workflow.trigger` is exploratory. It exists on the entrypoints below and typechecks, but its endpoint is not final. Do not build a feature on it. Tell the user the capability is not ready and ask how they want to proceed.
 
 Each sub-skill stands alone for its task and repeats the boundary above, so most work needs **one** sub-skill and not this file. Load this one when you are unsure which sub-skill applies, or when the wiring below is what you are touching. Add a second sub-skill only when the work genuinely crosses that boundary: a page that lists records behind a group restriction needs `reading-records` plus `routes-and-visibility`.
 
@@ -124,4 +124,4 @@ type User = {
 
 ## Version
 
-Targets `@softr/sdk` v0.0.23.
+Targets `@softr/sdk` v0.0.24.

package/skills/softr-sdk/auth/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.23
+  library_version: 0.0.24
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineVisibility`, the hooks and every type come from `@softr/sdk`. The app is already wired (`src/start.ts`, `src/router.tsx`, `src/routes/__root.tsx`); never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.

package/skills/softr-sdk/current-user/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.23
+  library_version: 0.0.24
 ---
 
 **Boundary.** `useCurrentUser`, `usePermissions` and every type come from `@softr/sdk` and work anywhere; `ds` and `auth` live on `@softr/sdk/server` and run only inside a `createServerFn` handler. The app is already wired — `src/start.ts` registers `softrAuthMiddleware`, `src/routes/__root.tsx` publishes the visitor as route context — never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.

package/skills/softr-sdk/data-mutations/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.23
+  library_version: 0.0.24
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `q` and every type come from `@softr/sdk` and can be imported anywhere. The app is already wired (`src/start.ts`, `src/router.tsx`, `src/routes/__root.tsx`); never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
@@ -118,7 +118,7 @@ Stamping a record with who created it, or scoping an update to the person making
 
 **A datasource id built from a name.** `'ds_projects'`, the table id, or the table's name glued to a uuid are not datasource ids. The id is the opaque UUID assigned when the table was registered on the application; copy it from there. Anything else fails at request time as not found or forbidden.
 
-**A datasource id stored in a variable.** The build reads ids statically to build the route manifest; it cannot resolve a name. Pass the UUID as a string literal directly at the call site. The lint rule `@softr/ds-no-computed-id` catches this at development time.
+**A datasource id stored in a variable.** Pass the UUID as a string literal directly at the call site. The lint rule `@softr/ds-no-computed-id` catches this at development time.
 
 **A write that sends `fields`.** The option is `data`. Only typecheck catches this, so it survives any run that does not typecheck.
 

package/skills/softr-sdk/reading-records/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.23
+  library_version: 0.0.24
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `q` and every type come from `@softr/sdk` and can be imported anywhere. The app is already wired (`src/start.ts`, `src/router.tsx`, `src/routes/__root.tsx`); never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
@@ -29,13 +29,13 @@ import { q } from '@softr/sdk'
 
 Every `ds` call names its datasource by an opaque UUID from the table's registration on the application (Softr Studio's Data tab, or the `register_application_data_source` tool when an agent does it). It is not the table id, and it is never derived from the table's name — `'ds_posts'` or a name glued to a uuid fails at request time as not found or forbidden.
 
-**The datasource id must be a string literal at the call site.** Do not assign it to a variable and pass the variable — the build reads ids statically and cannot resolve a name. Write the UUID directly as the first argument:
+**The datasource id must be a string literal at the call site.** Do not assign it to a variable and pass the variable. Write the UUID directly as the first argument:
 
 ```ts
 // correct
 ds.list('8ffb4814-b028-4496-b679-7face2167ebc', { ... })
 
-// wrong — the build cannot read this
+// wrong
 const POSTS = '8ffb4814-b028-4496-b679-7face2167ebc'
 ds.list(POSTS, { ... })
 ```

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -7,19 +7,19 @@ description: >-
   per-reason overrides, the redirect and throw strategies, rendering an access
   error with isAccessError, isUnauthenticatedError, isForbiddenError and
   isAlreadySignedInError, guarding a layout, and the lint rule that requires a
-  declaration alongside the build rules that reject a duplicate, computed or
+  declaration alongside the rules that reject a duplicate, computed or
   root-level one.
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.23
+  library_version: 0.0.24
 ---
 
 **Boundary.** `defineVisibility`, the error predicates and every type come from `@softr/sdk` and work anywhere; `ds` and `auth` live on `@softr/sdk/server` and run only inside a `createServerFn` handler. The app is already wired — `src/start.ts` registers `softrAuthMiddleware`, `src/routes/__root.tsx` publishes the visitor as route context — never add a second registration. Load the core `softr-sdk` skill only if you are unsure this is the right sub-skill.
 
 # Route visibility
 
-Every route file in a Softr app declares who may see it. The build reads that declaration out of the source text without executing it and publishes it to Softr Studio, which shows the app owner every route and its audience. That is why the rules below are strict: a rule the build cannot read is a rule Studio cannot show.
+Every route file in a Softr app declares who may see it. Softr reads that declaration out of the source text without executing it and publishes it to Softr Studio, which shows the app owner every route and its audience. That is why the rules below are strict: a rule Softr cannot read is a rule Studio cannot show.
 
 ## Setup
 
@@ -43,11 +43,11 @@ function Billing() {
 
 One `defineVisibility` call per file, at module scope, with an inline object literal as its argument.
 
-Three rules about that shape, because the build reads the file rather than running it:
+Three rules about that shape, because Softr reads the file rather than running it:
 
 - The call must initialise a top-level `const`.
 - The import must be a direct named import from `@softr/sdk`.
-- Never declare on `__root.tsx`. The root cannot carry an audience, so the build rejects a declaration there rather than shipping an app that only looks gated. Put the rule on a layout below the root instead.
+- Never declare on `__root.tsx`. The root cannot carry an audience, so a declaration there would gate nothing while looking like it does. Softr rejects it. Put the rule on a layout below the root instead.
 
 The four rules:
 

package/dist/preview-identity/preview-identity.js

@@ -1,121 +0,0 @@
-import { makeSessionClearingCookies, makeSessionTokenCookie, sessionTokenCookieName } from "../auth/session.js";
-
-//#region src/preview-identity/preview-identity.ts
-const PREVIEW_REDEMPTION_PATH = "/__preview/identity";
-const PREVIEW_SIGNED_IN_PATH = "/__preview/signed-in";
-/** The grant in the URL is the only credential: studio-api authorized the builder before issuing it. */
-const redeemGrant = async (req, res) => {
-	res.setHeader("Cache-Control", "no-store");
-	res.setHeader("Referrer-Policy", "no-referrer");
-	if (req.method !== "GET") {
-		sendJson(res, 405, { error: `${PREVIEW_REDEMPTION_PATH} only supports GET` });
-		return;
-	}
-	const grant = searchParamsOf(req).get("grant");
-	if (!grant) {
-		sendJson(res, 400, { error: "no grant" });
-		return;
-	}
-	const landing = landingPath(searchParamsOf(req).get("next"));
-	let session;
-	try {
-		session = await redeemPreviewGrant(req, grant);
-	} catch (error) {
-		sendJson(res, statusOf(error), { error: messageOf(error) });
-		return;
-	}
-	const secure = requestIsHttps(req);
-	res.statusCode = 302;
-	res.setHeader("Location", landing);
-	res.setHeader("Set-Cookie", session.anonymous ? makeSessionClearingCookies(secure) : makeSessionTokenCookie(session.jwt, secure));
-	res.end();
-};
-/** Presence only, never decoded: decoding would put an app user's identity on a route Studio reads. */
-const reportSignedIn = (req, res) => {
-	res.setHeader("Cache-Control", "no-store");
-	if (req.method !== "GET") {
-		sendJson(res, 405, { error: `${PREVIEW_SIGNED_IN_PATH} only supports GET` });
-		return;
-	}
-	sendJson(res, 200, { signedIn: hasSessionCookie(req.headers.cookie, sessionTokenCookieName(requestIsHttps(req))) });
-};
-var RedemptionError = class extends Error {
-	status;
-	constructor(status, message) {
-		super(message);
-		this.status = status;
-	}
-};
-function statusOf(error) {
-	return error instanceof RedemptionError ? error.status : 503;
-}
-function messageOf(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-async function redeemPreviewGrant(req, grant) {
-	const applicationId = process.env.SOFTR_APPLICATION_ID;
-	const studioApiUrl = process.env.SOFTR_STUDIO_API_URL?.trim() || studioApiUrlFor(req);
-	if (!applicationId || !studioApiUrl) throw new RedemptionError(503, "studio-api is unavailable");
-	let response;
-	try {
-		response = await fetch(`${studioApiUrl}/v1/applications/${encodeURIComponent(applicationId)}/vibe-coding/preview-identity/redeem`, {
-			method: "POST",
-			headers: { "content-type": "application/json" },
-			body: JSON.stringify({ grant })
-		});
-	} catch {
-		throw new RedemptionError(503, "studio-api is unreachable");
-	}
-	if (!response.ok) throw new RedemptionError(response.status, "studio-api refused the preview identity grant");
-	const body = await response.json().catch(() => null);
-	if (typeof body !== "object" || body === null) throw new RedemptionError(503, "studio-api returned no session");
-	const { anonymous, jwt } = body;
-	if (anonymous === true) return { anonymous: true };
-	if (typeof jwt !== "string" || jwt.length === 0) throw new RedemptionError(503, "studio-api returned no token");
-	return {
-		anonymous: false,
-		jwt
-	};
-}
-const STAGING_HOST_PATTERN = /(?:^|\.)staging(\d+)\.softr\.io$/;
-/** The host is the only per-environment signal the app has. Anything but a staging one gives null. */
-function studioApiUrlFor(req) {
-	const forwarded = req.headers["x-forwarded-host"];
-	const name = ((Array.isArray(forwarded) ? forwarded[0] : forwarded) ?? req.headers.host ?? "").split(",")[0].trim().split(":")[0];
-	const digits = STAGING_HOST_PATTERN.exec(name)?.[1];
-	if (!digits) return null;
-	return `https://studio-api-staging${digits.padStart(2, "0")}.softr.io`;
-}
-function hasSessionCookie(header, name) {
-	if (!header) return false;
-	return header.split(";").some((pair) => {
-		const separator = pair.indexOf("=");
-		return separator !== -1 && pair.slice(0, separator).trim() === name;
-	});
-}
-/**
-* Exactly as strict as h3's `getRequestProtocol`, which reads the cookie back. Being more generous
-* writes `__Host-session_token` where the app looks up `session_token`, and the visitor is silently
-* anonymous with no error on either side.
-*/
-function requestIsHttps(req) {
-	const forwarded = req.headers["x-forwarded-proto"];
-	if (forwarded === "https") return true;
-	if (forwarded === "http") return false;
-	return Boolean(req.socket?.encrypted);
-}
-function landingPath(next) {
-	if (!next || !next.startsWith("/") || next.startsWith("//") || next.includes("\\") || next.includes("://") || /[\u0000-\u001f\u007f]/.test(next)) return "/";
-	return next;
-}
-function searchParamsOf(req) {
-	return new URL(req.url ?? "", "http://request.invalid").searchParams;
-}
-function sendJson(res, status, body) {
-	res.statusCode = status;
-	res.setHeader("Content-Type", "application/json");
-	res.end(JSON.stringify(body));
-}
-
-//#endregion
-export { PREVIEW_REDEMPTION_PATH, PREVIEW_SIGNED_IN_PATH, redeemGrant, reportSignedIn };

package/dist/routes/discover.d.ts

@@ -1,14 +0,0 @@
-import "@tanstack/router-generator";
-
-//#region src/routes/discover.d.ts
-
-type DatasourceMethod = "list" | "get" | "create" | "update" | "delete" | "metric" | "chartData";
-type DatasourceAccess = {
-  id: string;
-  methods: Array<DatasourceMethod>;
-};
-type VisibilityValue = string | Array<VisibilityValue> | {
-  [key: string]: VisibilityValue;
-};
-//#endregion
-export { DatasourceAccess, VisibilityValue };

package/dist/routes/discover.js

@@ -1,305 +0,0 @@
-import { createReadOnlyFs } from "./mem-fs.js";
-import { randomUUID } from "node:crypto";
-import path from "node:path";
-import { Generator, getConfig } from "@tanstack/router-generator";
-import os from "node:os";
-import { parse } from "@babel/parser";
-import babelTraverse from "@babel/traverse";
-
-//#region src/routes/discover.ts
-async function crawlRoutes(opts) {
-	const config = getConfig({
-		disableLogging: true,
-		tmpDir: TMP_DIR,
-		generatedRouteTree: generatedRouteTreePath()
-	}, opts.root);
-	const generator = new Generator({
-		config,
-		root: opts.root,
-		fs: createReadOnlyFs()
-	});
-	await generator.run();
-	const crawlingResult = await generator.getCrawlingResult();
-	if (!crawlingResult) throw new Error(`the route crawl produced no result for ${opts.root}`);
-	return {
-		rootRouteNode: crawlingResult.rootRouteNode,
-		routeNodes: crawlingResult.acc.routeNodes,
-		routePiecesByPath: crawlingResult.acc.routePiecesByPath,
-		routeTree: crawlingResult.acc.routeTree,
-		routesDirectory: path.relative(opts.root, path.resolve(opts.root, config.routesDirectory)).split(path.sep).join("/")
-	};
-}
-/** Reads the rule out of the source text. The route file is never executed. */
-function extractVisibility(source, filePath) {
-	let program;
-	try {
-		program = parse(source, {
-			sourceType: "module",
-			plugins: ["typescript", "jsx"]
-		});
-	} catch (error) {
-		const position = error.loc;
-		return fail("unparsable", `could not parse ${filePath}: ${error.message}`, filePath, position?.line ?? 1, position?.column ?? 0);
-	}
-	const calls = findVisibilityCalls(program);
-	if (calls.length > 1) {
-		const second = calls[1].call;
-		return fail("duplicate-declaration", `${filePath} declares visibility more than once; a route has exactly one rule`, filePath, second.loc?.start.line ?? 1, second.loc?.start.column ?? 0);
-	}
-	const declaration = calls[0];
-	if (declaration === void 0) return {
-		ok: true,
-		visibility: null
-	};
-	const { call, statement } = declaration;
-	const argument = call.arguments[0];
-	if (argument === void 0) return fail("not-literal", `${filePath} calls ${VISIBILITY_FUNCTION} with no argument`, filePath, call.loc?.start.line ?? 1, call.loc?.start.column ?? 0);
-	const read = readLiteral(argument);
-	if (!read.ok) return fail("not-literal", `${filePath}: the visibility rule must be a literal — ${read.reason}`, filePath, read.line, read.column);
-	return {
-		ok: true,
-		visibility: {
-			value: read.value,
-			line: statement.loc?.start.line ?? 1,
-			column: statement.loc?.start.column ?? 0
-		}
-	};
-}
-/** Reads all ds.method() calls from the source text. The route file is never executed. */
-function extractDatasources(source, filePath) {
-	let program;
-	try {
-		program = parse(source, {
-			sourceType: "module",
-			plugins: ["typescript", "jsx"]
-		});
-	} catch (error) {
-		const position = error.loc;
-		return {
-			ok: false,
-			error: {
-				code: "unparsable",
-				message: `could not parse ${filePath}: ${error.message}`,
-				filePath,
-				line: position?.line ?? 1,
-				column: position?.column ?? 0
-			}
-		};
-	}
-	const raw = findDatasourceCalls(program, filePath);
-	if (!raw.ok) return raw;
-	const byId = /* @__PURE__ */ new Map();
-	for (const { id, method } of raw.calls) {
-		if (!byId.has(id)) byId.set(id, /* @__PURE__ */ new Set());
-		byId.get(id).add(method);
-	}
-	return {
-		ok: true,
-		datasources: Array.from(byId.entries()).map(([id, methods]) => ({
-			id,
-			methods: [...methods]
-		}))
-	};
-}
-/**
-* The generator `mkdirSync`s `tmpDir` and the directory of `generatedRouteTree` outside the `fs`
-* shim, so defaulted they create directories in the crawled project. Aimed at `os.tmpdir()` both
-* calls are no-ops, and nothing is ever written through either path. The uuid keeps the generated
-* tree file a miss rather than whatever a shared temp directory happens to hold.
-*/
-const TMP_DIR = os.tmpdir();
-const generatedRouteTreePath = () => path.join(TMP_DIR, `softr-sdk-route-tree-${randomUUID()}.gen.ts`);
-const SDK_PACKAGE_NAME = "@softr/sdk";
-const SDK_SERVER_PACKAGE_NAME = "@softr/sdk/server";
-const VISIBILITY_FUNCTION = "defineVisibility";
-const DS_BINDING = "ds";
-const DS_METHODS = new Set([
-	"list",
-	"get",
-	"create",
-	"update",
-	"delete",
-	"metric",
-	"chartData"
-]);
-function fail(code, message, filePath, line, column) {
-	return {
-		ok: false,
-		error: {
-			code,
-			message,
-			filePath,
-			line,
-			column
-		}
-	};
-}
-function findDatasourceCalls(ast, filePath) {
-	const calls = [];
-	let error = null;
-	traverse(ast, { CallExpression(path$1) {
-		const { node } = path$1;
-		const { callee } = node;
-		if (callee.type !== "MemberExpression") return;
-		if (callee.computed) return;
-		if (callee.object.type !== "Identifier") return;
-		if (callee.property.type !== "Identifier") return;
-		const method = callee.property.name;
-		if (!DS_METHODS.has(method)) return;
-		if (!isDsImport(path$1, callee.object.name)) return;
-		const firstArg = node.arguments[0];
-		if (firstArg === void 0 || firstArg.type === "SpreadElement") {
-			error = {
-				code: "not-literal",
-				message: `${filePath}: ds.${method}() must be called with a string literal datasource id`,
-				filePath,
-				line: node.loc?.start.line ?? 1,
-				column: node.loc?.start.column ?? 0
-			};
-			path$1.stop();
-			return;
-		}
-		if (firstArg.type !== "StringLiteral") {
-			error = {
-				code: "not-literal",
-				message: `${filePath}: the datasource id passed to ds.${method}() must be a string literal`,
-				filePath,
-				line: firstArg.loc?.start.line ?? 1,
-				column: firstArg.loc?.start.column ?? 0
-			};
-			path$1.stop();
-			return;
-		}
-		calls.push({
-			id: firstArg.value,
-			method
-		});
-	} });
-	if (error !== null) return {
-		ok: false,
-		error
-	};
-	return {
-		ok: true,
-		calls
-	};
-}
-function isDsImport(path$1, name) {
-	const binding = path$1.scope.getBinding(name);
-	if (binding === void 0 || binding.kind !== "module") return false;
-	const specifier = binding.path.node;
-	const declaration = binding.path.parent;
-	if (specifier.type !== "ImportSpecifier" || declaration.type !== "ImportDeclaration") return false;
-	if (specifier.importKind === "type" || declaration.importKind === "type") return false;
-	if (declaration.source.value !== SDK_SERVER_PACKAGE_NAME) return false;
-	return (specifier.imported.type === "Identifier" ? specifier.imported.name : specifier.imported.value) === DS_BINDING;
-}
-const traverse = babelTraverse.default ?? babelTraverse;
-/** Only a call initialising a top-level variable counts; one inside a function or block does not. */
-function findVisibilityCalls(ast) {
-	const found = [];
-	traverse(ast, { VariableDeclarator(path$1) {
-		const list = path$1.parentPath;
-		if (!list.isVariableDeclaration()) return;
-		const statement = list.parentPath.isExportNamedDeclaration() ? list.parentPath : list;
-		if (!statement.parentPath?.isProgram()) return;
-		if (path$1.node.init === null || path$1.node.init === void 0) return;
-		const call = unwrap(path$1.node.init);
-		if (call.type !== "CallExpression" && call.type !== "OptionalCallExpression") return;
-		if (call.callee.type !== "Identifier") return;
-		if (!isVisibilityImport(path$1, call.callee.name)) return;
-		found.push({
-			call,
-			statement: statement.node
-		});
-	} });
-	return found;
-}
-function isVisibilityImport(path$1, name) {
-	const binding = path$1.scope.getBinding(name);
-	if (binding === void 0 || binding.kind !== "module") return false;
-	const specifier = binding.path.node;
-	const declaration = binding.path.parent;
-	if (specifier.type !== "ImportSpecifier" || declaration.type !== "ImportDeclaration") return false;
-	if (specifier.importKind === "type" || declaration.importKind === "type") return false;
-	if (declaration.source.value !== SDK_PACKAGE_NAME) return false;
-	return (specifier.imported.type === "Identifier" ? specifier.imported.name : specifier.imported.value) === VISIBILITY_FUNCTION;
-}
-/** Strips the wrappers that leave the runtime value unchanged: `as const`, `satisfies`, `!`, `()`. */
-function unwrap(node) {
-	switch (node.type) {
-		case "TSAsExpression":
-		case "TSSatisfiesExpression":
-		case "TSNonNullExpression":
-		case "TSTypeAssertion":
-		case "TSInstantiationExpression":
-		case "ParenthesizedExpression": return unwrap(node.expression);
-		default: return node;
-	}
-}
-function reject(node, reason) {
-	return {
-		ok: false,
-		reason,
-		line: node.loc?.start.line ?? 1,
-		column: node.loc?.start.column ?? 0
-	};
-}
-function readLiteral(input) {
-	const node = unwrap(input);
-	switch (node.type) {
-		case "StringLiteral": return {
-			ok: true,
-			value: node.value
-		};
-		case "TemplateLiteral":
-			if (node.expressions.length > 0) return reject(node, "a template literal with an expression is not a static value");
-			return {
-				ok: true,
-				value: node.quasis[0]?.value.cooked ?? ""
-			};
-		case "ArrayExpression": {
-			const values = [];
-			for (const element of node.elements) {
-				if (element === null) return reject(node, "an array hole is not a static value");
-				if (element.type === "SpreadElement") return reject(element, "a spread is not a static value");
-				const read = readLiteral(element);
-				if (!read.ok) return read;
-				values.push(read.value);
-			}
-			return {
-				ok: true,
-				value: values
-			};
-		}
-		case "ObjectExpression": {
-			const value = {};
-			for (const property of node.properties) {
-				if (property.type === "SpreadElement") return reject(property, "a spread is not a static value");
-				if (property.type === "ObjectMethod") return reject(property, "a method is not a static value");
-				if (property.computed) return reject(property, "a computed key is not a static value");
-				if (property.shorthand) return reject(property, "a shorthand property is not a static value");
-				const key = property.key.type === "Identifier" ? property.key.name : property.key.type === "StringLiteral" ? property.key.value : null;
-				if (key === null) return reject(property.key, "this key is not a static value");
-				if (key === "__proto__") return reject(property.key, "a __proto__ key is not a static value");
-				const read = readLiteral(property.value);
-				if (!read.ok) return read;
-				value[key] = read.value;
-			}
-			return {
-				ok: true,
-				value
-			};
-		}
-		case "NumericLiteral":
-		case "BooleanLiteral":
-		case "NullLiteral": return reject(node, "a visibility rule is built from strings, arrays and objects");
-		case "Identifier": return reject(node, `an identifier (${node.name}) is not a static value`);
-		case "CallExpression":
-		case "NewExpression": return reject(node, "a call is not a static value");
-		default: return reject(node, `${node.type} is not a static value`);
-	}
-}
-
-//#endregion
-export { crawlRoutes, extractDatasources, extractVisibility };

package/dist/routes/manifest.d.ts

@@ -1,24 +0,0 @@
-import { DatasourceAccess, VisibilityValue } from "./discover.js";
-
-//#region src/routes/manifest.d.ts
-type DatasourceEntry = DatasourceAccess & {
-  /** Project-relative path to the file where the datasource is accessed. */
-  filename: string;
-  /** Route path, if the file is a route file. */
-  route?: string;
-};
-type ManifestNode = {
-  routePath: string;
-  filePath: string;
-  _fsRouteType?: string;
-  inferFullPath: string | null;
-  createFileRouteProps: Array<string>;
-  visibility: VisibilityValue | null;
-  children: Array<ManifestNode>;
-};
-type Manifest = {
-  root: ManifestNode;
-  datasources: Array<DatasourceEntry>;
-};
-//#endregion
-export { Manifest, ManifestNode };

package/dist/routes/manifest.js

@@ -1,168 +0,0 @@
-import { crawlRoutes, extractDatasources, extractVisibility } from "./discover.js";
-import { readFile } from "node:fs/promises";
-import path from "node:path";
-import { inferFullPath } from "@tanstack/router-generator";
-
-//#region src/routes/manifest.ts
-var ManifestError = class extends Error {
-	detail;
-	constructor(detail) {
-		super(detail.message);
-		this.name = "ManifestError";
-		this.detail = detail;
-	}
-};
-/** Returns the manifest as the exact text to write. Throws on a declaration it cannot read. */
-async function generateRoutesManifest(root) {
-	const crawl = await crawlRoutes({ root });
-	const routeFiles = new Set([crawl.rootRouteNode.filePath]);
-	for (const node of crawl.routeNodes) routeFiles.add(node.filePath);
-	for (const pieces of Object.values(crawl.routePiecesByPath)) if (pieces.lazy) routeFiles.add(pieces.lazy.filePath);
-	const sources = /* @__PURE__ */ new Map();
-	for (const relative of routeFiles) {
-		const absolute = path.resolve(root, crawl.routesDirectory, relative);
-		const source = await readIfPresent(absolute);
-		if (source !== null) sources.set(absolute, source);
-	}
-	const manifest = buildManifest({
-		crawl,
-		root,
-		sources
-	});
-	return `${JSON.stringify(manifest, null, 2)}\n`;
-}
-function buildManifest(opts) {
-	const routesDirectory = opts.crawl.routesDirectory;
-	const datasources = [];
-	const toNode = (node) => {
-		const projectRelative = toProjectRelative(opts.root, routesDirectory, node.filePath);
-		const routePath = node.routePath;
-		if (routePath === void 0) throw new Error(`the route crawl produced a node with no route path: ${projectRelative}`);
-		let declared = visibilityOf(opts, node.filePath);
-		datasources.push(...datasourceEntriesOf(opts, node.filePath, routePath));
-		const lazyPiece = opts.crawl.routePiecesByPath[routePath]?.lazy;
-		if (lazyPiece && lazyPiece.filePath !== node.filePath) {
-			const lazyDeclared = visibilityOf(opts, lazyPiece.filePath);
-			if (lazyDeclared !== null && declared !== null) throw new ManifestError({
-				code: "duplicate-declaration",
-				message: `${routePath} declares visibility in both ${projectRelative} and ${lazyDeclared.filePath}; a route has exactly one rule`,
-				filePath: lazyDeclared.filePath,
-				line: lazyDeclared.line,
-				column: lazyDeclared.column
-			});
-			if (lazyDeclared !== null) declared = lazyDeclared;
-			datasources.push(...datasourceEntriesOf(opts, lazyPiece.filePath, routePath));
-		}
-		return {
-			routePath,
-			filePath: projectRelative,
-			...node._fsRouteType ? { _fsRouteType: node._fsRouteType } : {},
-			inferFullPath: inferFullPath(node) ?? null,
-			createFileRouteProps: [...node.createFileRouteProps ?? []].sort(),
-			visibility: declared?.value ?? null,
-			children: (node.children ?? []).map(toNode)
-		};
-	};
-	const rootNode = opts.crawl.rootRouteNode;
-	const rootRelative = toProjectRelative(opts.root, routesDirectory, rootNode.filePath);
-	const rootDeclared = visibilityOf(opts, rootNode.filePath);
-	if (rootDeclared !== null) throw new ManifestError({
-		code: "root-declaration",
-		message: "the root route cannot carry a visibility rule: it would gate sign-in with no way back in. Move this declaration to the routes you want gated.",
-		filePath: rootRelative,
-		line: rootDeclared.line,
-		column: rootDeclared.column
-	});
-	datasources.push(...datasourceEntriesOf(opts, rootNode.filePath, ROOT_ROUTE_ID));
-	return {
-		root: {
-			routePath: ROOT_ROUTE_ID,
-			filePath: rootRelative,
-			inferFullPath: inferFullPath(rootNode) ?? null,
-			createFileRouteProps: [...rootNode.createFileRouteProps ?? []].sort(),
-			visibility: null,
-			children: opts.crawl.routeTree.map(toNode)
-		},
-		datasources
-	};
-}
-/**
-* `rootRouteId` from `@tanstack/router-core`, which is what a consumer matches against — not the
-* generator's `rootPathId`, which is the base name of `__root.tsx` and names a file, not a route.
-*/
-const ROOT_ROUTE_ID = "__root__";
-/** The crawl's paths are relative to the routes directory; the manifest's are project-relative. */
-function toProjectRelative(root, routesDirectory, filePath) {
-	const absolute = path.resolve(root, routesDirectory, filePath);
-	return path.relative(root, absolute).split(path.sep).join("/");
-}
-const USER_GROUPS = [
-	"ALL_USERS",
-	"NON_LOGGED_IN_USERS",
-	"LOGGED_IN_USERS"
-];
-function checkVisibilityShape(declared) {
-	const reject = (message) => {
-		throw new ManifestError({
-			code: "invalid-visibility",
-			message: `${declared.filePath}: ${message}`,
-			filePath: declared.filePath,
-			line: declared.line,
-			column: declared.column
-		});
-	};
-	const visibility = declared.value;
-	if (typeof visibility !== "object" || Array.isArray(visibility)) reject(`the visibility rule must be an object literal like { userGroup: 'ALL_USERS' }, not ${JSON.stringify(visibility)}`);
-	for (const key of Object.keys(visibility)) {
-		if (key === "userGroup" || key === "userGroupIds") continue;
-		reject(`"${key}" is not part of a visibility rule; a rule has userGroup and, under LOGGED_IN_USERS, userGroupIds. Check the spelling.`);
-	}
-	const userGroup = visibility["userGroup"];
-	if (typeof userGroup !== "string" || !USER_GROUPS.includes(userGroup)) reject(`userGroup must be one of ${USER_GROUPS.join(", ")}, not ${JSON.stringify(userGroup)}. A rule the build cannot read is a route with no rule at all.`);
-	if (!("userGroupIds" in visibility)) return;
-	if (userGroup !== "LOGGED_IN_USERS") reject(`userGroupIds only means anything under LOGGED_IN_USERS, not under ${userGroup}`);
-	const ids = visibility["userGroupIds"];
-	if (!Array.isArray(ids) || ids.some((id) => typeof id !== "string")) reject(`userGroupIds must be an array of group id strings, not ${JSON.stringify(ids)}. Drop the key entirely to mean "any logged-in user".`);
-}
-function visibilityOf(opts, filePath) {
-	const projectRelative = toProjectRelative(opts.root, opts.crawl.routesDirectory, filePath);
-	const source = opts.sources.get(path.resolve(opts.root, opts.crawl.routesDirectory, filePath));
-	if (source === void 0) return null;
-	const result = extractVisibility(source, projectRelative);
-	if (!result.ok) throw new ManifestError(result.error);
-	if (result.visibility === null) return null;
-	const declared = {
-		...result.visibility,
-		filePath: projectRelative
-	};
-	checkVisibilityShape(declared);
-	return declared;
-}
-function datasourceEntriesOf(opts, filePath, routePath) {
-	const projectRelative = toProjectRelative(opts.root, opts.crawl.routesDirectory, filePath);
-	const source = opts.sources.get(path.resolve(opts.root, opts.crawl.routesDirectory, filePath));
-	if (source === void 0) return [];
-	const result = extractDatasources(source, projectRelative);
-	if (!result.ok) throw new ManifestError(result.error);
-	return result.datasources.map(({ id, methods }) => ({
-		id,
-		methods,
-		filename: projectRelative,
-		route: routePath
-	}));
-}
-/**
-* Only ENOENT becomes `null`. The caller reads `null` as "nothing declared here", so swallowing any
-* other read error would turn an unreadable declaration into an ungated route.
-*/
-async function readIfPresent(filePath) {
-	try {
-		return await readFile(filePath, "utf8");
-	} catch (error) {
-		if (error.code === "ENOENT") return null;
-		throw error;
-	}
-}
-
-//#endregion
-export { ManifestError, generateRoutesManifest };

package/dist/routes/mem-fs.js

@@ -1,71 +0,0 @@
-import * as nodeFs from "node:fs/promises";
-import path from "node:path";
-
-//#region src/routes/mem-fs.ts
-/**
-* Reads through to disk and swallows every write. Driving the generator without this rewrites the
-* app's route sources and strips Start's `Register` block from its routeTree.gen.ts.
-*/
-function createReadOnlyFs() {
-	const writes = /* @__PURE__ */ new Map();
-	return {
-		async stat(filePath) {
-			const stat = await statOrNull(path.resolve(filePath));
-			if (stat === null) return {
-				mtimeMs: SYNTHETIC_MTIME,
-				mode: 420,
-				uid: 0,
-				gid: 0
-			};
-			return {
-				mtimeMs: stat.mtimeMs,
-				mode: Number(stat.mode),
-				uid: Number(stat.uid),
-				gid: Number(stat.gid)
-			};
-		},
-		async rename(oldPath, newPath) {
-			const from = path.resolve(oldPath);
-			const content = writes.get(from);
-			if (content !== void 0) {
-				writes.delete(from);
-				writes.set(path.resolve(newPath), content);
-			}
-		},
-		async writeFile(filePath, content) {
-			writes.set(path.resolve(filePath), content);
-		},
-		async readFile(filePath) {
-			const resolved = path.resolve(filePath);
-			const pending = writes.get(resolved);
-			const stat = await statOrNull(resolved);
-			if (pending !== void 0) return {
-				stat: { mtimeMs: stat?.mtimeMs ?? SYNTHETIC_MTIME },
-				fileContent: pending
-			};
-			if (stat === null) return "file-not-existing";
-			try {
-				const fileContent = await nodeFs.readFile(resolved, "utf8");
-				return {
-					stat: { mtimeMs: stat.mtimeMs },
-					fileContent
-				};
-			} catch {
-				return "file-not-existing";
-			}
-		},
-		async chmod() {},
-		async chown() {}
-	};
-}
-const SYNTHETIC_MTIME = 1n;
-async function statOrNull(filePath) {
-	try {
-		return await nodeFs.stat(filePath, { bigint: true });
-	} catch {
-		return null;
-	}
-}
-
-//#endregion
-export { createReadOnlyFs };