@softr/sdk 0.0.62-alpha.0 → 0.0.63-alpha.0

package/dist/core/integration.js

@@ -1,6 +1,6 @@
 import { fetch } from "../fetch.js";
 import { readSessionToken } from "../auth/session.js";
-import { dsUrl } from "../datasource/record.js";
+import { dsUrl, refererHeader } from "../datasource/record.js";
 
 //#region src/core/integration.ts
 async function integrationFetch(action, { params, query, headers = {}, body, signal } = {}) {
@@ -15,7 +15,8 @@ async function integrationFetch(action, { params, query, headers = {}, body, sig
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
-			"Authorization": `Bearer ${readSessionToken()}`
+			"Authorization": `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify(payload),
 		signal

package/dist/datasource/chart.js

@@ -4,7 +4,7 @@ import { readUserTimezone } from "../cookies.js";
 import { readSessionToken } from "../auth/session.js";
 import { INTERNAL_KIND, buildFilterCriteria, buildOrderBy, dealiasFilterCriteria } from "./filter.js";
 import { andAll, makeFieldSet, makeSortSet } from "./fields.js";
-import { describeFailure, dsUrl, resolveTarget } from "./record.js";
+import { describeFailure, dsUrl, refererHeader, resolveTarget } from "./record.js";
 
 //#region src/datasource/chart.ts
 const COUNT_CNT = "COUNT_CNT";
@@ -198,7 +198,8 @@ async function executeChart(query, state) {
 		headers: {
 			"Content-Type": "application/json",
 			"X-User-Timezone": readUserTimezone() ?? "UTC",
-			Authorization: `Bearer ${readSessionToken()}`
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify(body)
 	});
@@ -271,7 +272,8 @@ async function executeMetric(query, handle, filters) {
 		headers: {
 			"Content-Type": "application/json",
 			"X-User-Timezone": readUserTimezone() ?? "UTC",
-			Authorization: `Bearer ${readSessionToken()}`
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify(body)
 	});

package/dist/datasource/record.js

@@ -5,6 +5,7 @@ import { readSessionToken } from "../auth/session.js";
 import { isDatasourceAction } from "../action.js";
 import { buildFilterCriteria, buildOrderBy, dealiasFilterCriteria, dealiasOrderBy } from "./filter.js";
 import { andAll, makeFieldSet, makeSortSet } from "./fields.js";
+import { getRequestHeader } from "@tanstack/react-start/server";
 
 //#region src/datasource/record.ts
 const MAX_RECORD_COUNT = 100;
@@ -15,6 +16,15 @@ const dsUrl = (actionId) => {
 	if (!applicationId) panic("SOFTR_APPLICATION_ID is not set.");
 	return `${withoutTrailingSlash(datasourceApiUrl)}/v1/datasource/vibe/applications/${applicationId}/actions/${actionId}`;
 };
+/**
+* The datasource API wants to know which page made the call.
+* The browser sends that page to the app server, so we pass it on.
+* Without an incoming Referer, we send none.
+*/
+function refererHeader() {
+	const referer = getRequestHeader("referer");
+	return referer ? { Referer: referer } : {};
+}
 async function describeFailure(res) {
 	const body = await res.json().catch(() => null);
 	const message = typeof body === "object" && body !== null && "message" in body ? body.message : null;
@@ -80,7 +90,8 @@ async function executeList(query, args) {
 		headers: {
 			"Content-Type": "application/json",
 			"X-User-Timezone": readUserTimezone() ?? "UTC",
-			Authorization: `Bearer ${readSessionToken()}`
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify({
 			options: { userLocale: "en-US" },
@@ -151,7 +162,8 @@ async function executeGet(query, id, filters) {
 		headers: {
 			"Content-Type": "application/json",
 			"X-User-Timezone": readUserTimezone() ?? "UTC",
-			Authorization: `Bearer ${readSessionToken()}`
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify({
 			options: { userLocale: "en-US" },
@@ -183,7 +195,8 @@ async function createRecord(action, options) {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
-			Authorization: `Bearer ${readSessionToken()}`
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify({ fields: rawFields })
 	});
@@ -212,7 +225,8 @@ async function updateRecord(action, options) {
 		method: "PATCH",
 		headers: {
 			"Content-Type": "application/json",
-			Authorization: `Bearer ${readSessionToken()}`
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
 		},
 		body: JSON.stringify({ fields: rawFields })
 	});
@@ -233,7 +247,10 @@ async function deleteRecord(action, options) {
 	const { actionId } = resolveTarget(action, "delete");
 	const res = await fetch(`${dsUrl(actionId)}/records/${options.id}`, {
 		method: "DELETE",
-		headers: { Authorization: `Bearer ${readSessionToken()}` }
+		headers: {
+			Authorization: `Bearer ${readSessionToken()}`,
+			...refererHeader()
+		}
 	});
 	if (!res.ok) throw new Error(`datasource delete failed for action "${actionId}": ${await describeFailure(res)}`);
 }
@@ -262,4 +279,4 @@ function withoutTrailingSlash(url) {
 }
 
 //#endregion
-export { createRecord, deleteRecord, describeFailure, dsUrl, getRecord, listRecords, resolveTarget, updateRecord };
+export { createRecord, deleteRecord, describeFailure, dsUrl, getRecord, listRecords, refererHeader, resolveTarget, updateRecord };

package/dist/default-error-overlay.d.ts

@@ -1,4 +1,4 @@
-import * as react3 from "react";
+import * as react5 from "react";
 
 //#region src/default-error-overlay.d.ts
 type Props = {
@@ -8,6 +8,6 @@ type Props = {
 declare function DefaultErrorOverlay({
   error,
   reset
-}: Props): react3.JSX.Element;
+}: Props): react5.JSX.Element;
 //#endregion
 export { DefaultErrorOverlay };

package/dist/formatting.d.ts

@@ -1,4 +1,4 @@
-import * as react0 from "react";
+import * as react1 from "react";
 import { ReactNode } from "react";
 import { z } from "zod";
 
@@ -94,7 +94,7 @@ declare function FormattingScope({
   /** A BCP 47 locale, such as `de-DE`. It drops the app's fixed date format inside the scope. */
   locale?: string;
   children?: ReactNode;
-}): react0.FunctionComponentElement<react0.ProviderProps<Scope>>;
+}): react1.FunctionComponentElement<react1.ProviderProps<Scope>>;
 /**
  * A date in the app's format, safe to render on the server. A timestamp whose
  * zone is not known yet renders `fallback` until the browser supplies it, so
@@ -115,6 +115,6 @@ declare function FormattedDate({
   time?: boolean;
   /** What renders while the visitor's zone is unknown. */
   fallback?: ReactNode;
-}): react0.FunctionComponentElement<react0.FragmentProps>;
+}): react1.FunctionComponentElement<react1.FragmentProps>;
 //#endregion
 export { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { DatasourceAction } from "./action.js";
-import * as _tanstack_react_start0 from "@tanstack/react-start";
+import * as _tanstack_react_start3 from "@tanstack/react-start";
 
 //#region src/mcp.d.ts
 
@@ -37,6 +37,6 @@ type SoftrMcpOptions = {
  *   ],
  * }))
  */
-declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>;
+declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start3.RequestMiddlewareAfterServer<{}, undefined, undefined>;
 //#endregion
 export { softrMcpMiddleware };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.62-alpha.0";
+var version = "0.0.63-alpha.0";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -1,4 +1,4 @@
-import * as react4 from "react";
+import * as react0 from "react";
 import "@tanstack/react-start";
 
 //#region src/pwa.d.ts
@@ -23,7 +23,7 @@ import "@tanstack/react-start";
  *   )
  * }
  */
-declare function SoftrPwaHead(): react4.FunctionComponentElement<react4.FragmentProps>;
+declare function SoftrPwaHead(): react0.FunctionComponentElement<react0.FragmentProps>;
 type PwaPlatform = "ios" | "android" | "desktop";
 type PwaInstall = {
   available: false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.62-alpha.0",
+  "version": "0.0.63-alpha.0",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },

package/skills/softr-sdk/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 # Softr SDK core

package/skills/softr-sdk/auth/SKILL.md

@@ -16,7 +16,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -12,7 +12,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/comments/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `comments` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler. Importing it into a component fails the build. `useCommentComposer` lives on `@softr/sdk/client` and runs in components. `defineComments` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 # The current user

package/skills/softr-sdk/file-uploads/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `upload` lives on `@softr/sdk/server` and runs inside server functions. `useFileUpload` and `FileItem` live on `@softr/sdk` and run in components. `FileAttachment` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/formatting/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 # Dates, times and numbers

package/skills/softr-sdk/integrations/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `integration` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineIntegration` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/mcp/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `softrMcpMiddleware` lives on `@softr/sdk` and is registered once, in `src/start.ts`. The actions you hand it are the same `defineQuery` / `defineMutation` values the app's own pages use — declared wherever they already live, not duplicated for MCP.

package/skills/softr-sdk/pwa/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 # Installing the app

package/skills/softr-sdk/record-mutations/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineMutation` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/record-queries/SKILL.md

@@ -13,7 +13,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. The same holds for any helper that calls `ds`: declare it inside the handler. A function at module level that calls `ds` keeps the server-only import in the browser bundle, and every page stops loading until it moves. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/region-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `Audience` and `defineVisibility` come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -13,7 +13,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `defineVisibility`, the access functions and the error predicates come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/workflows/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.62-alpha.0
+  library_version: 0.0.63-alpha.0
 ---
 
 **Boundary.** `workflow` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineWorkflow` and every type come from `@softr/sdk` and can be imported anywhere.