@softr/sdk 0.0.54-alpha.0 → 0.0.55

package/dist/action.d.ts

@@ -234,35 +234,5 @@ type IntegrationDefinition<TId extends string> = {
  * const res = await listEvents({ query: { timeMin: now, singleEvents: "true" } })
  */
 declare function defineIntegration<const TId extends string>(definition: IntegrationDefinition<TId>): IntegrationAction<TId>;
-type CommentsResource = {
-  type: "COMMENTS";
-  datasourceId: SoftrDatasourceId;
-};
-/** Comment threads on the records of one datasource. It has no `permissions`. */
-type CommentsAction<TId extends string = string> = {
-  id: TId;
-  resource: CommentsResource;
-};
-type CommentsDefinition<TId extends string> = {
-  id: TId;
-  datasourceId: SoftrDatasourceId;
-};
-/**
- * Declares comment threads on the records of a datasource. Each record has one thread.
- *
- * Who may read, post and delete comes from the app's comment settings in Softr, not from code. Two
- * declarations on the same datasource share the same threads.
- *
- * Pass the returned object to `comments.*` from `@softr/sdk/server`.
- *
- * @example
- * const orderComments = defineComments({
- *   id: "orderComments",
- *   datasourceId: "8f14e45f-ceea-467a-9d0b-2c1a0e3b5d77",
- * })
- *
- * const thread = await comments.list(orderComments, { recordId })
- */
-declare function defineComments<const TId extends string>(definition: CommentsDefinition<TId>): CommentsAction<TId>;
 //#endregion
-export { ActionData, ActionPermissions, ActionRecord, ActionShape, CommentsAction, DatasourceAction, FieldTypeOf, IntegrationAction, ReadOf, ReadShape, SoftrDatasources, WorkflowAction, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow };
+export { ActionData, ActionPermissions, ActionRecord, ActionShape, DatasourceAction, FieldTypeOf, IntegrationAction, ReadOf, ReadShape, SoftrDatasources, WorkflowAction, defineIntegration, defineMutation, defineQuery, defineWorkflow };

package/dist/action.js

@@ -50,31 +50,6 @@ function defineIntegration(definition) {
 		permissions
 	};
 }
-/**
-* Declares comment threads on the records of a datasource. Each record has one thread.
-*
-* Who may read, post and delete comes from the app's comment settings in Softr, not from code. Two
-* declarations on the same datasource share the same threads.
-*
-* Pass the returned object to `comments.*` from `@softr/sdk/server`.
-*
-* @example
-* const orderComments = defineComments({
-*   id: "orderComments",
-*   datasourceId: "8f14e45f-ceea-467a-9d0b-2c1a0e3b5d77",
-* })
-*
-* const thread = await comments.list(orderComments, { recordId })
-*/
-function defineComments(definition) {
-	return {
-		id: definition.id,
-		resource: {
-			type: "COMMENTS",
-			datasourceId: definition.datasourceId
-		}
-	};
-}
 function isDatasourceAction(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const candidate = value;
@@ -83,4 +58,4 @@ function isDatasourceAction(value) {
 }
 
 //#endregion
-export { defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow, isDatasourceAction };
+export { defineIntegration, defineMutation, defineQuery, defineWorkflow, isDatasourceAction };

package/dist/auth/isomorphic.d.ts

@@ -17,7 +17,7 @@ import * as _tanstack_react_start0 from "@tanstack/react-start";
  *   requestMiddleware: [softrAuthMiddleware()],
  * }))
  */
-declare function softrAuthMiddleware(): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, readonly [_tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>], {
+declare function softrAuthMiddleware(): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, readonly [_tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>, _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>], {
   user: User | null;
   permissions: Permissions;
 }>;

package/dist/auth/isomorphic.js

@@ -4,6 +4,7 @@ import { sessionConfig } from "./config.js";
 import { clearSession, makeSessionDataCookie, readSessionData, readSessionToken } from "./session.js";
 import { makePlatform } from "./platform.js";
 import { bootErrorMiddleware } from "../boot-error.js";
+import { pwaMiddleware } from "../pwa.js";
 import { createMiddleware, createServerFn, getGlobalStartContext } from "@tanstack/react-start";
 import { rootRouteId, useRouteContext } from "@tanstack/react-router";
 
@@ -21,7 +22,7 @@ import { rootRouteId, useRouteContext } from "@tanstack/react-router";
 * }))
 */
 function softrAuthMiddleware() {
-	return createMiddleware({ type: "request" }).middleware([bootErrorMiddleware()]).server(async ({ next }) => {
+	return createMiddleware({ type: "request" }).middleware([bootErrorMiddleware(), pwaMiddleware()]).server(async ({ next }) => {
 		async function getSession() {
 			const token = readSessionToken();
 			const cached = readSessionData(token);

package/dist/boot-error.js

@@ -16,6 +16,7 @@ function bootErrorMiddleware() {
 			return await next();
 		} catch (error) {
 			if (handlerType === "serverFn" || error instanceof Response || isRedirect(error) || isNotFound(error)) throw error;
+			console.error("[@softr/sdk] boot error:", error);
 			return new Response(errorPage(error), {
 				status: 500,
 				headers: { "content-type": "text/html; charset=utf-8" }

package/dist/client.d.ts

@@ -1,4 +1,3 @@
 import { FileItem, useFileUpload } from "./core/use-file-upload.js";
-import { useCommentComposer } from "./comments/use-comment-composer.js";
 import "@tanstack/react-start/client-only";
-export { type FileItem, useCommentComposer, useFileUpload };
+export { type FileItem, useFileUpload };

package/dist/client.js

@@ -1,5 +1,4 @@
 import { useFileUpload } from "./core/use-file-upload.js";
-import { useCommentComposer } from "./comments/use-comment-composer.js";
 import "@tanstack/react-start/client-only";
 
-export { useCommentComposer, useFileUpload };
+export { useFileUpload };

package/dist/default-error-overlay.d.ts

@@ -1,4 +1,4 @@
-import * as react0 from "react";
+import * as react1 from "react";
 
 //#region src/default-error-overlay.d.ts
 type Props = {
@@ -8,6 +8,6 @@ type Props = {
 declare function DefaultErrorOverlay({
   error,
   reset
-}: Props): react0.JSX.Element;
+}: Props): react1.JSX.Element;
 //#endregion
 export { DefaultErrorOverlay };

package/dist/default-error-overlay.js

@@ -1,10 +1,25 @@
-import { useRef, useState } from "react";
+import { useEffect, useRef, useState, useSyncExternalStore } from "react";
+import { useRouter } from "@tanstack/react-router";
 import { jsx, jsxs } from "react/jsx-runtime";
 
 //#region src/default-error-overlay.tsx
+/** Set by Studio's canvas engine, which ships apart from the SDK each app pins, so renaming it breaks older apps. */
+const AGENT_TURN_ATTRIBUTE = "data-agent-turn";
+function subscribeToAgentTurn(listener) {
+	const observer = new MutationObserver(listener);
+	observer.observe(document.documentElement, {
+		attributes: true,
+		attributeFilter: [AGENT_TURN_ATTRIBUTE]
+	});
+	return () => observer.disconnect();
+}
+function isAgentTurnRunning() {
+	return document.documentElement.getAttribute(AGENT_TURN_ATTRIBUTE) === "running";
+}
 function DefaultErrorOverlay({ error, reset }) {
 	if (process.env.NODE_ENV === "production") return /* @__PURE__ */ jsx("div", {
 		style: s.overlay,
+		"data-softr-error-overlay": "error",
 		children: /* @__PURE__ */ jsxs("div", {
 			style: s.card,
 			children: [
@@ -26,8 +41,33 @@ function DefaultErrorOverlay({ error, reset }) {
 	});
 }
 function DevView({ error, reset }) {
+	const running = useSyncExternalStore(subscribeToAgentTurn, isAgentTurnRunning, () => false);
+	const [retryPending, setRetryPending] = useState(running);
+	const router = useRouter();
+	useEffect(() => {
+		if (running) {
+			setRetryPending(true);
+			return;
+		}
+		if (!retryPending) return;
+		const showError = () => setRetryPending(false);
+		const timer = setTimeout(() => {
+			router.invalidate().then(() => {
+				reset?.();
+				showError();
+			}, showError);
+		}, 1e3);
+		return () => clearTimeout(timer);
+	}, [
+		running,
+		retryPending,
+		reset,
+		router
+	]);
+	if (running || retryPending) return /* @__PURE__ */ jsx(UpdatingView, {});
 	return /* @__PURE__ */ jsx("div", {
 		style: s.overlay,
+		"data-softr-error-overlay": "error",
 		children: /* @__PURE__ */ jsxs("div", {
 			style: s.card,
 			children: [
@@ -56,6 +96,39 @@ function DevView({ error, reset }) {
 		})
 	});
 }
+function UpdatingView() {
+	return /* @__PURE__ */ jsx("div", {
+		style: s.overlay,
+		"data-softr-error-overlay": "updating",
+		children: /* @__PURE__ */ jsxs("div", {
+			style: s.card,
+			children: [/* @__PURE__ */ jsx("div", {
+				style: s.pending,
+				children: /* @__PURE__ */ jsxs("svg", {
+					style: icon.md,
+					viewBox: "0 0 24 24",
+					fill: "none",
+					stroke: "currentColor",
+					strokeWidth: "2",
+					strokeLinecap: "round",
+					strokeLinejoin: "round",
+					children: [
+						/* @__PURE__ */ jsx("path", { d: "M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8" }),
+						/* @__PURE__ */ jsx("path", { d: "M21 3v5h-5" }),
+						/* @__PURE__ */ jsx("path", { d: "M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16" }),
+						/* @__PURE__ */ jsx("path", { d: "M8 16H3v5" })
+					]
+				})
+			}), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h1", {
+				style: s.heading,
+				children: "Updating the app…"
+			}), /* @__PURE__ */ jsx("p", {
+				style: s.body,
+				children: "The agent is still working on this change. The preview will recover once it is complete."
+			})] })]
+		})
+	});
+}
 function cleanStack(stack) {
 	return stack.split("\n").slice(1).filter((line) => line.trim().startsWith("at ") && !line.includes("/node_modules/")).map((line) => line.replace(/https?:\/\/[^/]+\//, "").replace(/\?[^):]+/g, "")).join("\n");
 }
@@ -228,6 +301,17 @@ const s = {
 		color: "var(--destructive, oklch(0.577 0.245 27.325))",
 		flexShrink: 0
 	},
+	pending: {
+		display: "flex",
+		alignItems: "center",
+		justifyContent: "center",
+		width: "2.5rem",
+		height: "2.5rem",
+		borderRadius: "var(--radius, 0.625rem)",
+		background: "var(--muted, oklch(0.97 0 0))",
+		color: "var(--muted-foreground, oklch(0.556 0 0))",
+		flexShrink: 0
+	},
 	heading: {
 		margin: 0,
 		fontSize: "1rem",
@@ -267,7 +351,7 @@ const s = {
 		border: "1px solid var(--input, oklch(0.922 0 0))",
 		borderRadius: "var(--radius, 0.625rem)",
 		background: "var(--input-fill, oklch(1 0 0))",
-		color: "var(--primary-foreground, oklch(0.985 0 0))",
+		color: "var(--foreground, oklch(0.145 0 0))",
 		fontFamily: "inherit",
 		fontSize: "0.875rem",
 		fontWeight: 500,

package/dist/fetch.js

@@ -8,11 +8,11 @@ const fetch = async (input, init) => {
 	const started = Date.now();
 	try {
 		const response = await globalThis.fetch(input, init);
-		logger.info(`${method} ${response.status} ${url} ${Date.now() - started}ms`);
+		if (!response.ok) logger.warn(`${method} ${response.status} ${url} ${Date.now() - started}ms`);
 		return response;
 	} catch (error) {
 		const label = error instanceof Error ? `${error.name}: ${error.message}` : String(error);
-		logger.info(`${method} ERR ${url} ${label} in ${Date.now() - started}ms`);
+		logger.error(`${method} ERR ${url} ${label} in ${Date.now() - started}ms`);
 		throw error;
 	}
 };

package/dist/index.d.ts

@@ -1,14 +1,14 @@
 import { SoftrUserGroupId, SoftrUserGroups, User } from "./auth/user.js";
-import { ActionPermissions, SoftrDatasources, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { ActionPermissions, SoftrDatasources, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { FileAttachment } from "./core/file-upload.js";
 import { FileItem, useFileUpload } from "./core/use-file-upload.js";
-import { CommentMention, CommentThread, CommentView } from "./comments/comments.js";
 import { SoftrContext } from "./auth/context.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./visibility/visibility.js";
 import { assertRouteAccess, guardRoute, isAccessError, isAlreadyAuthenticatedError, isForbiddenError, isUnauthenticatedError } from "./visibility/route.js";
 import { getSoftrContext, initialSoftrContext, softrAuthMiddleware, useCurrentUser } from "./auth/isomorphic.js";
 import { softrMcpMiddleware } from "./mcp.js";
 import { useUserTimezone } from "./timezone.js";
+import { PwaInstall, PwaPlatform, SoftrPwaHead, usePwaInstall } from "./pwa.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./visibility/audience.js";
-export { type ActionPermissions, Audience, type CommentMention, type CommentThread, type CommentView, DefaultErrorOverlay, type FileAttachment, type FileItem, type SoftrContext, type SoftrDatasources, type SoftrUserGroupId, type SoftrUserGroups, type User, assertRouteAccess, checkAccess, defineComments, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, useUserTimezone };
+export { type ActionPermissions, Audience, DefaultErrorOverlay, type FileAttachment, type FileItem, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type User, assertRouteAccess, checkAccess, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, usePwaInstall, useUserTimezone };

package/dist/index.js

@@ -1,11 +1,12 @@
 import { useFileUpload } from "./core/use-file-upload.js";
-import { defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./visibility/visibility.js";
 import { assertRouteAccess, guardRoute, isAccessError, isAlreadyAuthenticatedError, isForbiddenError, isUnauthenticatedError } from "./visibility/route.js";
+import { SoftrPwaHead, usePwaInstall } from "./pwa.js";
 import { getSoftrContext, initialSoftrContext, softrAuthMiddleware, useCurrentUser } from "./auth/isomorphic.js";
 import { softrMcpMiddleware } from "./mcp.js";
 import { useUserTimezone } from "./timezone.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./visibility/audience.js";
 
-export { Audience, DefaultErrorOverlay, assertRouteAccess, checkAccess, defineComments, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, useUserTimezone };
+export { Audience, DefaultErrorOverlay, SoftrPwaHead, assertRouteAccess, checkAccess, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, usePwaInstall, useUserTimezone };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { DatasourceAction } from "./action.js";
-import * as _tanstack_react_start2 from "@tanstack/react-start";
+import * as _tanstack_react_start0 from "@tanstack/react-start";
 
 //#region src/mcp.d.ts
 
@@ -37,6 +37,6 @@ type SoftrMcpOptions = {
  *   ],
  * }))
  */
-declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start2.RequestMiddlewareAfterServer<{}, undefined, undefined>;
+declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>;
 //#endregion
 export { softrMcpMiddleware };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.54-alpha.0";
+var version = "0.0.55";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -0,0 +1,54 @@
+import * as react0 from "react";
+import "@tanstack/react-start";
+
+//#region src/pwa.d.ts
+
+/**
+ * The links that make the app installable: its manifest and its home screen
+ * icon. Render it once, in `<head>` in the root route's `RootDocument`.
+ *
+ * @example
+ * function RootDocument({ children }: { children: React.ReactNode }) {
+ *   return (
+ *     <html lang="en">
+ *       <head>
+ *         <HeadContent />
+ *         <SoftrPwaHead />
+ *       </head>
+ *       <body>
+ *         {children}
+ *         <Scripts />
+ *       </body>
+ *     </html>
+ *   )
+ * }
+ */
+declare function SoftrPwaHead(): react0.FunctionComponentElement<react0.FragmentProps>;
+type PwaPlatform = "ios" | "android" | "desktop";
+type PwaInstall = {
+  available: false;
+} | {
+  available: true;
+  /** Which steps install the app on this device. */
+  platform: PwaPlatform;
+  /** The name the home screen will show. */
+  name: string;
+  /** The icon the home screen will show. */
+  iconUrl: string;
+};
+/**
+ * Whether to offer installing the app, and on which platform. Render an
+ * install button only while this says `available`: it is unavailable while
+ * loading, when the builder has not turned the PWA on, when Softr has switched
+ * it off, and when the app already runs installed.
+ *
+ * @example
+ * function InstallButton() {
+ *   const install = usePwaInstall()
+ *   if (!install.available) return null
+ *   return <button onClick={() => openSteps(install.platform)}>Install {install.name}</button>
+ * }
+ */
+declare function usePwaInstall(): PwaInstall;
+//#endregion
+export { PwaInstall, PwaPlatform, SoftrPwaHead, usePwaInstall };

package/dist/pwa.js

@@ -0,0 +1,152 @@
+import { logger } from "./logger.js";
+import { fetch } from "./fetch.js";
+import { sessionConfig } from "./auth/config.js";
+import { platformApiUrl } from "./auth/platform.js";
+import { Fragment, createElement, useEffect, useState } from "react";
+import { createMiddleware } from "@tanstack/react-start";
+import { z } from "zod";
+
+//#region src/pwa.ts
+const MANIFEST_PATH = "/manifest.webmanifest";
+const ICON_PATH = "/apple-touch-icon.png";
+const INSTALL_PATH = "/_softr/pwa.json";
+const TTL_MS = 6e4;
+const CACHE_CONTROL = "public, max-age=60";
+const pwaSchema = z.object({
+	manifest: z.record(z.string(), z.unknown()),
+	install: z.object({
+		name: z.string(),
+		iconUrl: z.string()
+	})
+});
+let cached;
+/**
+* The app's PWA, or `null` when it is not installable right now. Never
+* rejects: a failure reads as not installable and is not remembered, so the
+* next request tries again.
+*/
+function readPwa() {
+	const now = Date.now();
+	if (cached !== void 0 && cached.expires > now) return cached.pwa;
+	const entry = {
+		expires: now + TTL_MS,
+		pwa: fetchPwa().catch((error) => {
+			logger.warn("Could not read the PWA settings:", error);
+			if (cached === entry) cached = void 0;
+			return null;
+		})
+	};
+	cached = entry;
+	return entry.pwa;
+}
+async function fetchPwa() {
+	const { applicationId } = sessionConfig();
+	const response = await fetch(`${await platformApiUrl()}/v1/vibe/applications/${applicationId}/pwa`, { headers: { accept: "application/json" } });
+	if (response.status === 404) return null;
+	if (!response.ok) throw new Error(`The platform answered ${response.status}`);
+	return pwaSchema.parse(await response.json());
+}
+/**
+* Serves the app's web app manifest, its home screen icon, and what an install
+* button needs to know, from the app's own origin. Every other request passes
+* through untouched.
+*
+* Answers 404, never an error page, when the app is not installable: a browser
+* silently drops a manifest it cannot parse, so a 500 there would be invisible.
+*/
+function pwaMiddleware() {
+	return createMiddleware({ type: "request" }).server(async ({ next, pathname }) => {
+		if (pathname !== MANIFEST_PATH && pathname !== ICON_PATH && pathname !== INSTALL_PATH) return next();
+		const pwa = await readPwa();
+		if (pwa === null) return new Response(null, { status: 404 });
+		if (pathname === MANIFEST_PATH) return new Response(JSON.stringify(pwa.manifest), { headers: {
+			"content-type": "application/manifest+json",
+			"cache-control": CACHE_CONTROL
+		} });
+		if (pathname === INSTALL_PATH) return Response.json(pwa.install, { headers: { "cache-control": CACHE_CONTROL } });
+		try {
+			const iconResponse = await fetch(pwa.install.iconUrl);
+			if (!iconResponse.ok) return new Response(null, { status: 404 });
+			return new Response(iconResponse.body, { headers: {
+				"content-type": "image/png",
+				"cache-control": CACHE_CONTROL
+			} });
+		} catch (error) {
+			logger.warn("Could not fetch the PWA icon:", error);
+			return new Response(null, { status: 404 });
+		}
+	});
+}
+/**
+* The links that make the app installable: its manifest and its home screen
+* icon. Render it once, in `<head>` in the root route's `RootDocument`.
+*
+* @example
+* function RootDocument({ children }: { children: React.ReactNode }) {
+*   return (
+*     <html lang="en">
+*       <head>
+*         <HeadContent />
+*         <SoftrPwaHead />
+*       </head>
+*       <body>
+*         {children}
+*         <Scripts />
+*       </body>
+*     </html>
+*   )
+* }
+*/
+function SoftrPwaHead() {
+	return createElement(Fragment, null, createElement("link", {
+		rel: "manifest",
+		href: MANIFEST_PATH
+	}), createElement("link", {
+		rel: "apple-touch-icon",
+		href: ICON_PATH
+	}));
+}
+const installSchema = pwaSchema.shape.install;
+/**
+* Whether to offer installing the app, and on which platform. Render an
+* install button only while this says `available`: it is unavailable while
+* loading, when the builder has not turned the PWA on, when Softr has switched
+* it off, and when the app already runs installed.
+*
+* @example
+* function InstallButton() {
+*   const install = usePwaInstall()
+*   if (!install.available) return null
+*   return <button onClick={() => openSteps(install.platform)}>Install {install.name}</button>
+* }
+*/
+function usePwaInstall() {
+	const [install, setInstall] = useState({ available: false });
+	useEffect(() => {
+		if (window.matchMedia("(display-mode: standalone)").matches || "standalone" in navigator && navigator.standalone === true) return;
+		let cancelled = false;
+		fetch(INSTALL_PATH, { headers: { accept: "application/json" } }).then(async (response) => {
+			if (!response.ok) return;
+			const parsed = installSchema.safeParse(await response.json());
+			if (!parsed.success || cancelled) return;
+			setInstall({
+				available: true,
+				platform: detectPlatform(),
+				...parsed.data
+			});
+		}).catch(() => {});
+		return () => {
+			cancelled = true;
+		};
+	}, []);
+	return install;
+}
+function detectPlatform() {
+	const userAgent = navigator.userAgent;
+	if (/iPhone|iPad|iPod/.test(userAgent) || /Macintosh/.test(userAgent) && navigator.maxTouchPoints > 1) return "ios";
+	if (/Android/.test(userAgent)) return "android";
+	return "desktop";
+}
+
+//#endregion
+export { SoftrPwaHead, pwaMiddleware, usePwaInstall };

package/dist/server.d.ts

@@ -1,8 +1,7 @@
 import { upload } from "./core/file-upload.js";
-import { comments } from "./comments/comments.js";
 import { auth } from "./auth/server.js";
 import { ds } from "./datasource/datasource.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
 import "@tanstack/react-start/server-only";
-export { auth, comments, ds, integration, upload, workflow };
+export { auth, ds, integration, upload, workflow };

package/dist/server.js

@@ -3,7 +3,6 @@ import { ds } from "./datasource/datasource.js";
 import { auth } from "./auth/server.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
-import { comments } from "./comments/comments.js";
 import "@tanstack/react-start/server-only";
 
-export { auth, comments, ds, integration, upload, workflow };
+export { auth, ds, integration, upload, workflow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.54-alpha.0",
+  "version": "0.0.55",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
@@ -17,8 +17,6 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "marked": "^18.0.14",
-    "xss": "^1.0.15",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/skills/softr-sdk/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.52
+  library_version: 0.0.55
 ---
 
 # Softr SDK core
@@ -29,9 +29,9 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 
 | Import | Runs | Holds |
 | --- | --- | --- |
-| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineComments`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
-| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration`, `comments` |
-| `@softr/sdk/client` | Browser only | `useCommentComposer` |
+| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
+| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration` |
+| `@softr/sdk/client` | Browser only | Nothing yet, reserved for browser-only utilities |
 | `@softr/sdk/vite` | Build | `softr()`, already in `vite.config.ts` |
 
 ## Sub-Skills
@@ -48,7 +48,7 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 | Sign a visitor in, out, or up | [auth/SKILL.md](./auth/SKILL.md) |
 | Call a connected third-party API (Slack, Stripe, Gmail, …) | [integrations/SKILL.md](./integrations/SKILL.md) |
 | Open the app to AI assistants over MCP | [mcp/SKILL.md](./mcp/SKILL.md) |
-| Add comments to a record | [comments/SKILL.md](./comments/SKILL.md) |
+| Let visitors install the app on their home screen | [pwa/SKILL.md](./pwa/SKILL.md) |
 
 ## Quick Decision Tree
 
@@ -83,8 +83,8 @@ Calling a connected third-party API (Slack, Stripe, Gmail, Google Calendar, …)
 Opening the app to an AI assistant over MCP?
   load softr-sdk/mcp
 
-Letting visitors comment on a record?
-  load softr-sdk/comments
+Adding an install button, or making the app installable?
+  load softr-sdk/pwa
 
 Writing a server function, loader, or middleware in general?
   not a Softr concern. Use the TanStack Start skills.

package/skills/softr-sdk/auth/SKILL.md

@@ -16,7 +16,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.52
+  library_version: 0.0.55
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -12,7 +12,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.52
+  library_version: 0.0.55
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.52
+  library_version: 0.0.55
 ---
 
 # The current user