@softr/sdk 0.0.63-alpha.0 → 0.0.63

package/dist/action.d.ts

@@ -234,35 +234,5 @@ type IntegrationDefinition<TId extends string> = {
  * const res = await listEvents({ query: { timeMin: now, singleEvents: "true" } })
  */
 declare function defineIntegration<const TId extends string>(definition: IntegrationDefinition<TId>): IntegrationAction<TId>;
-type CommentsResource = {
-  type: "COMMENTS";
-  datasourceId: SoftrDatasourceId;
-};
-/** Comment threads on the records of one datasource. It has no `permissions`. */
-type CommentsAction<TId extends string = string> = {
-  id: TId;
-  resource: CommentsResource;
-};
-type CommentsDefinition<TId extends string> = {
-  id: TId;
-  datasourceId: SoftrDatasourceId;
-};
-/**
- * Declares comment threads on the records of a datasource. Each record has one thread.
- *
- * Who may read, post and delete comes from the app's comment settings in Softr, not from code. Two
- * declarations on the same datasource share the same threads.
- *
- * Pass the returned object to `comments.*` from `@softr/sdk/server`.
- *
- * @example
- * const orderComments = defineComments({
- *   id: "orderComments",
- *   datasourceId: "8f14e45f-ceea-467a-9d0b-2c1a0e3b5d77",
- * })
- *
- * const thread = await comments.list(orderComments, { recordId })
- */
-declare function defineComments<const TId extends string>(definition: CommentsDefinition<TId>): CommentsAction<TId>;
 //#endregion
-export { ActionData, ActionPermissions, ActionRecord, ActionShape, CommentsAction, DatasourceAction, FieldTypeOf, IntegrationAction, ReadOf, ReadShape, SoftrDatasources, WorkflowAction, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow };
+export { ActionData, ActionPermissions, ActionRecord, ActionShape, DatasourceAction, FieldTypeOf, IntegrationAction, ReadOf, ReadShape, SoftrDatasources, WorkflowAction, defineIntegration, defineMutation, defineQuery, defineWorkflow };

package/dist/action.js

@@ -50,31 +50,6 @@ function defineIntegration(definition) {
 		permissions
 	};
 }
-/**
-* Declares comment threads on the records of a datasource. Each record has one thread.
-*
-* Who may read, post and delete comes from the app's comment settings in Softr, not from code. Two
-* declarations on the same datasource share the same threads.
-*
-* Pass the returned object to `comments.*` from `@softr/sdk/server`.
-*
-* @example
-* const orderComments = defineComments({
-*   id: "orderComments",
-*   datasourceId: "8f14e45f-ceea-467a-9d0b-2c1a0e3b5d77",
-* })
-*
-* const thread = await comments.list(orderComments, { recordId })
-*/
-function defineComments(definition) {
-	return {
-		id: definition.id,
-		resource: {
-			type: "COMMENTS",
-			datasourceId: definition.datasourceId
-		}
-	};
-}
 function isDatasourceAction(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const candidate = value;
@@ -83,4 +58,4 @@ function isDatasourceAction(value) {
 }
 
 //#endregion
-export { defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow, isDatasourceAction };
+export { defineIntegration, defineMutation, defineQuery, defineWorkflow, isDatasourceAction };

package/dist/client.d.ts

@@ -1,4 +1,3 @@
 import { FileItem, useFileUpload } from "./core/use-file-upload.js";
-import { useCommentComposer } from "./comments/use-comment-composer.js";
 import "@tanstack/react-start/client-only";
-export { type FileItem, useCommentComposer, useFileUpload };
+export { type FileItem, useFileUpload };

package/dist/client.js

@@ -1,5 +1,4 @@
 import { useFileUpload } from "./core/use-file-upload.js";
-import { useCommentComposer } from "./comments/use-comment-composer.js";
 import "@tanstack/react-start/client-only";
 
-export { useCommentComposer, useFileUpload };
+export { useFileUpload };

package/dist/core/file-upload.d.ts

@@ -1,4 +1,4 @@
-import { CommentsAction, DatasourceAction } from "../action.js";
+import { DatasourceAction } from "../action.js";
 
 //#region src/core/file-upload.d.ts
 
@@ -10,12 +10,7 @@ type FileAttachment = {
   url: string;
   filename: string;
   id: string;
-  type?: string | null;
 };
-/**
- * A COMMENTS action uploads a comment attachment.
- * The platform checks the comment settings.
- */
-declare function upload(action: DatasourceAction | CommentsAction, file: File): Promise<FileAttachment>;
+declare function upload(action: DatasourceAction, file: File): Promise<FileAttachment>;
 //#endregion
 export { FileAttachment, upload };

package/dist/core/file-upload.js

@@ -5,10 +5,6 @@ import { platformApiUrl } from "../auth/platform.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/core/file-upload.ts
-/**
-* A COMMENTS action uploads a comment attachment.
-* The platform checks the comment settings.
-*/
 async function upload(action, file) {
 	const { applicationId } = sessionConfig();
 	const baseUrl = await platformApiUrl();
@@ -27,8 +23,7 @@ async function upload(action, file) {
 	return {
 		url: resultJSON.url,
 		filename: resultJSON.filename || "Untitled file",
-		id: resultJSON.id || randomUUID(),
-		type: resultJSON.type ?? null
+		id: resultJSON.id || randomUUID()
 	};
 }
 

package/dist/core/use-file-upload.d.ts

@@ -1,4 +1,4 @@
-import { CommentsAction, DatasourceAction } from "../action.js";
+import { DatasourceAction } from "../action.js";
 import { FileAttachment } from "./file-upload.js";
 
 //#region src/core/use-file-upload.d.ts
@@ -16,7 +16,7 @@ type FileItem = {
   filename: string;
   error: Error;
 };
-declare function useFileUpload(action: DatasourceAction | CommentsAction, options?: {
+declare function useFileUpload(action: DatasourceAction, options?: {
   initialAttachments?: FileAttachment[];
 }): {
   files: FileItem[];

package/dist/datasource/record.js

@@ -5,7 +5,7 @@ import { readSessionToken } from "../auth/session.js";
 import { isDatasourceAction } from "../action.js";
 import { buildFilterCriteria, buildOrderBy, dealiasFilterCriteria, dealiasOrderBy } from "./filter.js";
 import { andAll, makeFieldSet, makeSortSet } from "./fields.js";
-import { getRequestHeader } from "@tanstack/react-start/server";
+import { getRequestHeader, getRequestUrl } from "@tanstack/react-start/server";
 
 //#region src/datasource/record.ts
 const MAX_RECORD_COUNT = 100;
@@ -17,13 +17,19 @@ const dsUrl = (actionId) => {
 	return `${withoutTrailingSlash(datasourceApiUrl)}/v1/datasource/vibe/applications/${applicationId}/actions/${actionId}`;
 };
 /**
-* The datasource API wants to know which page made the call.
-* The browser sends that page to the app server, so we pass it on.
-* Without an incoming Referer, we send none.
+* The datasource API wants to know which page made the call, and rejects a call without it.
+*
+* A call from the browser has a Referer on this app's origin, and that Referer names the page.
+* A page load has the previous page as its Referer: Studio, or none for a pasted link.
+* There the page is the request itself, so we send the request URL.
 */
 function refererHeader() {
+	const page = getRequestUrl({
+		xForwardedHost: true,
+		xForwardedProto: true
+	});
 	const referer = getRequestHeader("referer");
-	return referer ? { Referer: referer } : {};
+	return { Referer: referer !== void 0 && URL.parse(referer)?.origin === page.origin ? referer : page.href };
 }
 async function describeFailure(res) {
 	const body = await res.json().catch(() => null);

package/dist/formatting.d.ts

@@ -1,4 +1,4 @@
-import * as react1 from "react";
+import * as react0 from "react";
 import { ReactNode } from "react";
 import { z } from "zod";
 
@@ -94,7 +94,7 @@ declare function FormattingScope({
   /** A BCP 47 locale, such as `de-DE`. It drops the app's fixed date format inside the scope. */
   locale?: string;
   children?: ReactNode;
-}): react1.FunctionComponentElement<react1.ProviderProps<Scope>>;
+}): react0.FunctionComponentElement<react0.ProviderProps<Scope>>;
 /**
  * A date in the app's format, safe to render on the server. A timestamp whose
  * zone is not known yet renders `fallback` until the browser supplies it, so
@@ -115,6 +115,6 @@ declare function FormattedDate({
   time?: boolean;
   /** What renders while the visitor's zone is unknown. */
   fallback?: ReactNode;
-}): react1.FunctionComponentElement<react1.FragmentProps>;
+}): react0.FunctionComponentElement<react0.FragmentProps>;
 //#endregion
 export { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting };

package/dist/index.d.ts

@@ -1,8 +1,7 @@
 import { SoftrUserGroupId, SoftrUserGroups, User } from "./auth/user.js";
-import { ActionPermissions, SoftrDatasources, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { ActionPermissions, SoftrDatasources, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { FileAttachment } from "./core/file-upload.js";
 import { FileItem, useFileUpload } from "./core/use-file-upload.js";
-import { CommentAttachmentInput, CommentMention, CommentThread, CommentView } from "./comments/comments.js";
 import { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting } from "./formatting.js";
 import { SoftrContext } from "./auth/context.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./visibility/visibility.js";
@@ -13,4 +12,4 @@ import { useUserTimezone } from "./timezone.js";
 import { PwaInstall, PwaPlatform, SoftrPwaHead, usePwaInstall } from "./pwa.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./visibility/audience.js";
-export { type ActionPermissions, Audience, type CommentAttachmentInput, type CommentMention, type CommentThread, type CommentView, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type User, type WeekDay, assertRouteAccess, checkAccess, defineComments, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, formatDate, formatDateTime, formatNumber, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, useFormatting, usePwaInstall, useUserTimezone };
+export { type ActionPermissions, Audience, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type User, type WeekDay, assertRouteAccess, checkAccess, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, formatDate, formatDateTime, formatNumber, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, useFormatting, usePwaInstall, useUserTimezone };

package/dist/index.js

@@ -1,5 +1,5 @@
 import { useFileUpload } from "./core/use-file-upload.js";
-import { defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./visibility/visibility.js";
 import { assertRouteAccess, guardRoute, isAccessError, isAlreadyAuthenticatedError, isForbiddenError, isUnauthenticatedError } from "./visibility/route.js";
 import { FormattedDate, FormattingScope, formatDate, formatDateTime, formatNumber, useFormatting } from "./formatting.js";
@@ -10,4 +10,4 @@ import { useUserTimezone } from "./timezone.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./visibility/audience.js";
 
-export { Audience, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineComments, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, formatDate, formatDateTime, formatNumber, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, useFormatting, usePwaInstall, useUserTimezone };
+export { Audience, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineIntegration, defineMutation, defineQuery, defineVisibility, defineWorkflow, formatDate, formatDateTime, formatNumber, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, softrAuthMiddleware, softrMcpMiddleware, useCurrentUser, useFileUpload, useFormatting, usePwaInstall, useUserTimezone };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.63-alpha.0";
+var version = "0.0.63";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -1,4 +1,4 @@
-import * as react0 from "react";
+import * as react3 from "react";
 import "@tanstack/react-start";
 
 //#region src/pwa.d.ts
@@ -23,7 +23,7 @@ import "@tanstack/react-start";
  *   )
  * }
  */
-declare function SoftrPwaHead(): react0.FunctionComponentElement<react0.FragmentProps>;
+declare function SoftrPwaHead(): react3.FunctionComponentElement<react3.FragmentProps>;
 type PwaPlatform = "ios" | "android" | "desktop";
 type PwaInstall = {
   available: false;

package/dist/server.d.ts

@@ -1,8 +1,7 @@
 import { upload } from "./core/file-upload.js";
-import { comments } from "./comments/comments.js";
 import { auth } from "./auth/server.js";
 import { ds } from "./datasource/datasource.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
 import "@tanstack/react-start/server-only";
-export { auth, comments, ds, integration, upload, workflow };
+export { auth, ds, integration, upload, workflow };

package/dist/server.js

@@ -3,7 +3,6 @@ import { ds } from "./datasource/datasource.js";
 import { auth } from "./auth/server.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
-import { comments } from "./comments/comments.js";
 import "@tanstack/react-start/server-only";
 
-export { auth, comments, ds, integration, upload, workflow };
+export { auth, ds, integration, upload, workflow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.63-alpha.0",
+  "version": "0.0.63",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },
@@ -17,8 +17,6 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "marked": "^18.0.14",
-    "xss": "^1.0.15",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/skills/softr-sdk/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 # Softr SDK core
@@ -29,9 +29,9 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 
 | Import | Runs | Holds |
 | --- | --- | --- |
-| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineComments`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `FormattedDate`, `FormattingScope`, `useFormatting`, `formatDate`, `formatDateTime`, `formatNumber`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
-| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration`, `comments` |
-| `@softr/sdk/client` | Browser only | `useCommentComposer` |
+| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `FormattedDate`, `FormattingScope`, `useFormatting`, `formatDate`, `formatDateTime`, `formatNumber`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
+| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration` |
+| `@softr/sdk/client` | Browser only | Nothing yet, reserved for browser-only utilities |
 | `@softr/sdk/vite` | Build | `softr()`, already in `vite.config.ts` |
 
 ## Sub-Skills
@@ -50,7 +50,6 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 | Open the app to AI assistants over MCP | [mcp/SKILL.md](./mcp/SKILL.md) |
 | Let visitors install the app on their home screen | [pwa/SKILL.md](./pwa/SKILL.md) |
 | Show a date, a time or a number | [formatting/SKILL.md](./formatting/SKILL.md) |
-| Add comments to a record | [comments/SKILL.md](./comments/SKILL.md) |
 
 ## Quick Decision Tree
 
@@ -91,9 +90,6 @@ Adding an install button, or making the app installable?
 Showing a date, a time or a number on a page?
   load softr-sdk/formatting
 
-Letting visitors comment on a record?
-  load softr-sdk/comments
-
 Writing a server function, loader, or middleware in general?
   not a Softr concern. Use the TanStack Start skills.
 ```

package/skills/softr-sdk/auth/SKILL.md

@@ -16,7 +16,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -12,7 +12,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 # The current user

package/skills/softr-sdk/file-uploads/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `upload` lives on `@softr/sdk/server` and runs inside server functions. `useFileUpload` and `FileItem` live on `@softr/sdk` and run in components. `FileAttachment` comes from `@softr/sdk` and can be imported anywhere.
@@ -75,10 +75,9 @@ function ApplicationForm() {
 
 ```ts
 type FileAttachment = {
-  url: string             // clean URL, no internal query params
-  filename: string        // original filename
-  id: string              // file id extracted from the upload response
-  type?: string | null    // content type from the upload response, or null when the platform doesn't know it
+  url: string      // clean URL, no internal query params
+  filename: string // original filename
+  id: string       // file id extracted from the upload response
 }
 ```
 

package/skills/softr-sdk/formatting/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 # Dates, times and numbers

package/skills/softr-sdk/integrations/SKILL.md

@@ -10,7 +10,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `integration` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineIntegration` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/mcp/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `softrMcpMiddleware` lives on `@softr/sdk` and is registered once, in `src/start.ts`. The actions you hand it are the same `defineQuery` / `defineMutation` values the app's own pages use — declared wherever they already live, not duplicated for MCP.

package/skills/softr-sdk/pwa/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 # Installing the app

package/skills/softr-sdk/record-mutations/SKILL.md

@@ -11,7 +11,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineMutation` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/record-queries/SKILL.md

@@ -13,7 +13,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. The same holds for any helper that calls `ds`: declare it inside the handler. A function at module level that calls `ds` keeps the server-only import in the browser bundle, and every page stops loading until it moves. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/region-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `Audience` and `defineVisibility` come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -13,7 +13,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `defineVisibility`, the access functions and the error predicates come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/workflows/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.63-alpha.0
+  library_version: 0.0.61
 ---
 
 **Boundary.** `workflow` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineWorkflow` and every type come from `@softr/sdk` and can be imported anywhere.

package/dist/comments/comments.d.ts

@@ -1,168 +0,0 @@
-import { CommentsAction } from "../action.js";
-
-//#region src/comments/comments.d.ts
-/** A person picked in the composer, and where their `@name` sits in the text. */
-type CommentMention = {
-  name: string;
-  email: string;
-  start: number;
-  end: number;
-};
-type CommentAttachmentInput = {
-  url: string;
-  filename: string;
-  type?: string | null;
-};
-type CommentView = {
-  id: string;
-  /** The body as safe HTML. Render it with `dangerouslySetInnerHTML`, never as text. */
-  bodyHtml: string;
-  attachments: Array<{
-    url: string;
-    filename: string;
-    type: string | null;
-  }>;
-  author: {
-    name: string;
-    avatar: string | null;
-    isDeactivated: boolean;
-  };
-  /** ISO 8601. */
-  createdAt: string;
-  canDelete: boolean;
-  canEdit: boolean;
-  edited: boolean;
-  /** The body as the visitor typed it, to fill an edit box. `null` unless `canEdit`. */
-  source: {
-    text: string;
-    mentions: Array<CommentMention>;
-  } | null;
-  reactions: Array<{
-    emoji: string;
-    label: string;
-    count: number;
-    isSelected: boolean;
-  }>;
-};
-type CommentThread = {
-  canPost: boolean;
-  allowMentions: boolean;
-  allowAttachments: boolean;
-  notificationsEnabled: boolean;
-  quickReactions: ReadonlyArray<{
-    emoji: string;
-    label: string;
-  }>;
-  total: number;
-  /** Pass it back as `offset` for the next page. `null` on the last page. */
-  nextOffset: number | null;
-  items: Array<CommentView>;
-};
-/**
- * The thread on one record, or `null` when this visitor cannot see comments on it. Render nothing
- * for `null`.
- *
- * @example
- * const thread = await comments.list(orderComments, { recordId: order.id })
- */
-declare function listComments(action: CommentsAction, options: {
-  recordId: string;
-  offset?: number | null;
-  limit?: number;
-}): Promise<CommentThread | null>;
-/**
- * Posts a comment. `body` is the text the visitor typed. `mentions` are the people they picked,
- * each with the range of its `@name` in `body`. A range that no longer reads as `@name` is posted as
- * plain text. `attachments` are the files `useFileUpload` finished uploading.
- *
- * @example
- * await comments.create(orderComments, { recordId, body: "Hey @Ann", mentions, attachments })
- */
-declare function createComment(action: CommentsAction, options: {
-  recordId: string;
-  body: string;
-  mentions: ReadonlyArray<CommentMention>;
-  attachments?: ReadonlyArray<CommentAttachmentInput>;
-}): Promise<void>;
-/**
- * Saves an edit. Offer it only where the comment's `canEdit` is true, and fill the edit box from its
- * `source`. `attachments` is the full list after the edit: the files kept plus any new ones.
- *
- * @example
- * await comments.update(orderComments, { recordId, commentId, body, mentions, attachments })
- */
-declare function updateComment(action: CommentsAction, options: {
-  recordId: string;
-  commentId: string;
-  body: string;
-  mentions: ReadonlyArray<CommentMention>;
-  attachments: ReadonlyArray<CommentAttachmentInput>;
-}): Promise<void>;
-/**
- * Deletes a comment. Offer it only where the comment's `canDelete` is true.
- *
- * @example
- * await comments.delete(orderComments, { recordId, commentId })
- */
-declare function deleteComment(action: CommentsAction, options: {
-  recordId: string;
-  commentId: string;
-}): Promise<void>;
-/**
- * Adds the visitor's reaction when `selected` is true, and removes it when false. Pass the
- * reaction's current `isSelected` negated.
- *
- * @example
- * await comments.react(orderComments, { recordId, commentId, emoji: "👍", selected: true })
- */
-declare function reactToComment(action: CommentsAction, options: {
-  recordId: string;
-  commentId: string;
-  emoji: string;
-  selected: boolean;
-}): Promise<void>;
-/**
- * Whether the visitor gets an email when someone comments on this record.
- *
- * @example
- * const subscribed = await comments.subscription(orderComments, { recordId })
- */
-declare function readSubscription(action: CommentsAction, options: {
-  recordId: string;
-}): Promise<boolean>;
-/**
- * Turns the visitor's emails about this record's comments on or off.
- *
- * @example
- * await comments.setSubscription(orderComments, { recordId, subscribed: false })
- */
-declare function setSubscription(action: CommentsAction, options: {
-  recordId: string;
-  subscribed: boolean;
-}): Promise<void>;
-/**
- * The people the visitor may mention whose name or email matches `query`. Only call it when the
- * thread's `allowMentions` is true.
- *
- * @example
- * const people = await comments.searchMentions(orderComments, { query: "an" })
- */
-declare function searchMentions(action: CommentsAction, options: {
-  query: string;
-}): Promise<Array<{
-  name: string;
-  email: string;
-  avatar: string | null;
-}>>;
-declare const comments: {
-  list: typeof listComments;
-  create: typeof createComment;
-  update: typeof updateComment;
-  delete: typeof deleteComment;
-  react: typeof reactToComment;
-  subscription: typeof readSubscription;
-  setSubscription: typeof setSubscription;
-  searchMentions: typeof searchMentions;
-};
-//#endregion
-export { CommentAttachmentInput, CommentMention, CommentThread, CommentView, comments };