@softr/sdk 0.0.63-alpha.0 → 0.0.64-alpha.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/dist/action.d.ts +1 -31
  2. package/dist/action.js +1 -26
  3. package/dist/auth/isomorphic.d.ts +60 -1
  4. package/dist/auth/isomorphic.js +63 -5
  5. package/dist/auth/methods/passwordLink.d.ts +47 -0
  6. package/dist/auth/methods/passwordLink.js +86 -0
  7. package/dist/auth/methods/settings.d.ts +11 -0
  8. package/dist/auth/methods/settings.js +17 -0
  9. package/dist/auth/methods/signup.js +1 -0
  10. package/dist/auth/methods/social.js +1 -0
  11. package/dist/auth/methods/utils.d.ts +1 -1
  12. package/dist/auth/platform.d.ts +46 -0
  13. package/dist/auth/platform.js +54 -0
  14. package/dist/auth/server.d.ts +6 -0
  15. package/dist/auth/server.js +7 -1
  16. package/dist/client.d.ts +1 -2
  17. package/dist/client.js +1 -2
  18. package/dist/core/file-upload.d.ts +2 -7
  19. package/dist/core/file-upload.js +1 -6
  20. package/dist/core/use-file-upload.d.ts +2 -2
  21. package/dist/datasource/record.js +11 -5
  22. package/dist/default-error-overlay.d.ts +2 -2
  23. package/dist/formatting.d.ts +3 -3
  24. package/dist/index.d.ts +5 -5
  25. package/dist/index.js +4 -4
  26. package/dist/mcp.d.ts +2 -8
  27. package/dist/mcp.js +8 -8
  28. package/dist/package.js +1 -1
  29. package/dist/pwa.d.ts +2 -2
  30. package/dist/server.d.ts +1 -2
  31. package/dist/server.js +1 -2
  32. package/dist/softr-config.d.ts +1 -0
  33. package/dist/softr-config.js +26 -5
  34. package/dist/visibility/route.d.ts +26 -6
  35. package/dist/visibility/route.js +36 -13
  36. package/package.json +33 -12
  37. package/schema/softr.schema.json +42 -1
  38. package/skills/softr-sdk/SKILL.md +7 -10
  39. package/skills/softr-sdk/auth/SKILL.md +129 -31
  40. package/skills/softr-sdk/charts-and-metrics/SKILL.md +1 -1
  41. package/skills/softr-sdk/current-user/SKILL.md +1 -1
  42. package/skills/softr-sdk/file-uploads/SKILL.md +4 -5
  43. package/skills/softr-sdk/formatting/SKILL.md +4 -4
  44. package/skills/softr-sdk/integrations/SKILL.md +1 -1
  45. package/skills/softr-sdk/mcp/SKILL.md +7 -14
  46. package/skills/softr-sdk/pwa/SKILL.md +3 -3
  47. package/skills/softr-sdk/record-mutations/SKILL.md +1 -1
  48. package/skills/softr-sdk/record-queries/SKILL.md +1 -1
  49. package/skills/softr-sdk/region-visibility/SKILL.md +1 -1
  50. package/skills/softr-sdk/routes-and-visibility/SKILL.md +24 -12
  51. package/skills/softr-sdk/workflows/SKILL.md +1 -1
  52. package/dist/comments/comments.d.ts +0 -168
  53. package/dist/comments/comments.js +0 -413
  54. package/dist/comments/use-comment-composer.d.ts +0 -46
  55. package/dist/comments/use-comment-composer.js +0 -134
  56. package/skills/softr-sdk/comments/SKILL.md +0 -181
@@ -1,134 +0,0 @@
1
- import { assert } from "../assertions.js";
2
- import { useLayoutEffect, useRef, useState } from "react";
3
-
4
- //#region src/comments/use-comment-composer.ts
5
- const EMPTY = {
6
- text: "",
7
- mentions: [],
8
- caret: 0
9
- };
10
- /**
11
- * The state of a comment box: the text, the people mentioned in it, and the `@` fragment being
12
- * typed. Spread `textareaProps` onto a `<textarea>`. Show a mention menu while `query` is not
13
- * `null`, and call `pick` with the person chosen from it.
14
- *
15
- * Post `text` and `mentions` as they are, then call `reset` once the post succeeds.
16
- *
17
- * To edit a comment, pass its source as initial, in a composer mounted only while editing.
18
- * `initial` is read once, on mount.
19
- *
20
- * @example
21
- * const composer = useCommentComposer()
22
- * <textarea {...composer.textareaProps} />
23
- * {composer.query !== null && <MentionMenu query={composer.query} onPick={composer.pick} />}
24
- */
25
- function useCommentComposer(options) {
26
- const [state, setState] = useState(() => options?.initial === void 0 ? EMPTY : {
27
- text: options.initial.text,
28
- mentions: [...options.initial.mentions],
29
- caret: options.initial.text.length
30
- });
31
- const ref = useRef(null);
32
- const pendingCaret = useRef(null);
33
- useLayoutEffect(() => {
34
- const caret = pendingCaret.current;
35
- if (caret === null || ref.current === null) return;
36
- pendingCaret.current = null;
37
- ref.current.focus();
38
- ref.current.setSelectionRange(caret, caret);
39
- });
40
- const fragment = findMentionQuery(state.text, state.caret, state.mentions);
41
- return {
42
- text: state.text,
43
- mentions: state.mentions,
44
- query: fragment?.query ?? null,
45
- textareaProps: {
46
- ref,
47
- value: state.text,
48
- onChange(event) {
49
- const next = event.currentTarget.value;
50
- const caret = event.currentTarget.selectionStart;
51
- setState((previous) => ({
52
- text: next,
53
- mentions: remapMentions(previous.text, next, previous.mentions),
54
- caret
55
- }));
56
- },
57
- onSelect(event) {
58
- const caret = event.currentTarget.selectionStart;
59
- setState((previous) => previous.caret === caret ? previous : {
60
- ...previous,
61
- caret
62
- });
63
- }
64
- },
65
- pick(person) {
66
- assert(fragment, "pick needs an @ fragment under the caret");
67
- const label = `@${person.name}`;
68
- const text = `${state.text.slice(0, fragment.start)}${label} ${state.text.slice(state.caret)}`;
69
- const added = {
70
- ...person,
71
- start: fragment.start,
72
- end: fragment.start + label.length
73
- };
74
- const caret = added.end + 1;
75
- pendingCaret.current = caret;
76
- setState({
77
- text,
78
- mentions: [...remapMentions(state.text, text, state.mentions), added],
79
- caret
80
- });
81
- },
82
- reset() {
83
- setState(EMPTY);
84
- }
85
- };
86
- }
87
- /** A fragment longer than this is prose, not a name being typed. */
88
- const MENTION_QUERY_MAX_LENGTH = 32;
89
- /**
90
- * Moves mention ranges through an edit. A textarea reports only its new value, so the edit is the
91
- * span between the longest common prefix and suffix. Ranges after it shift. Ranges it reached into
92
- * are dropped, which is how deleting part of a name un-mentions that person.
93
- */
94
- function remapMentions(previous, next, mentions) {
95
- if (previous === next) return mentions;
96
- let prefix = 0;
97
- while (prefix < previous.length && prefix < next.length && previous[prefix] === next[prefix]) prefix += 1;
98
- let suffix = 0;
99
- while (suffix < previous.length - prefix && suffix < next.length - prefix && previous[previous.length - 1 - suffix] === next[next.length - 1 - suffix]) suffix += 1;
100
- const editStart = prefix;
101
- const editEnd = previous.length - suffix;
102
- const delta = next.length - previous.length;
103
- return mentions.flatMap((mention) => {
104
- if (mention.end <= editStart) return [mention];
105
- if (mention.start >= editEnd) return [{
106
- ...mention,
107
- start: mention.start + delta,
108
- end: mention.end + delta
109
- }];
110
- return [];
111
- });
112
- }
113
- /**
114
- * The `@` fragment the caret sits in, or `null`. An `@` does not count when:
115
- * - it does not start a word, so an email address opens no menu;
116
- * - it belongs to a mention already made;
117
- * - the fragment ran past a newline or is long enough to be prose. Spaces are fine, names have them.
118
- */
119
- function findMentionQuery(text, caret, mentions) {
120
- const before = text.slice(0, caret);
121
- const at = before.lastIndexOf("@");
122
- if (at === -1) return null;
123
- if (at > 0 && !/\s/.test(before.charAt(at - 1))) return null;
124
- if (mentions.some((mention) => at >= mention.start && at < mention.end)) return null;
125
- const query = before.slice(at + 1);
126
- if (query.includes("\n") || query.length > MENTION_QUERY_MAX_LENGTH) return null;
127
- return {
128
- query,
129
- start: at
130
- };
131
- }
132
-
133
- //#endregion
134
- export { useCommentComposer };
@@ -1,181 +0,0 @@
1
- ---
2
- name: comments
3
- description: >-
4
- Comment threads on records: defineComments from @softr/sdk declares which
5
- datasource has comments; comments.list, create, update, delete, react,
6
- subscription, setSubscription and searchMentions from @softr/sdk/server read
7
- and write one record's thread inside a server function; useCommentComposer
8
- and useFileUpload from @softr/sdk/client keep a textarea's text, its
9
- @mentions and its attachments in step. Bodies come back as sanitised
10
- bodyHtml. A null thread means render nothing.
11
- metadata:
12
- type: sub-skill
13
- library: softr-sdk
14
- library_version: 0.0.63-alpha.0
15
- ---
16
-
17
- **Boundary.** `comments` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler. Importing it into a component fails the build. `useCommentComposer` lives on `@softr/sdk/client` and runs in components. `defineComments` comes from `@softr/sdk` and can be imported anywhere.
18
-
19
- # Comments on records
20
-
21
- Each record of a commented datasource has one thread. The SDK reads and writes it. The app owns what you see: layout, copy, order, dates.
22
-
23
- ## Setup
24
-
25
- ```ts
26
- import { createServerFn } from '@tanstack/react-start'
27
- import { defineComments, type CommentMention, type CommentAttachmentInput } from '@softr/sdk'
28
- import { comments } from '@softr/sdk/server'
29
- import { useCommentComposer, useFileUpload } from '@softr/sdk/client'
30
- ```
31
-
32
- ## Declare the comments action
33
-
34
- ```ts
35
- export const orderComments = defineComments({
36
- id: 'orderComments',
37
- datasourceId: '8f14e45f-ceea-467a-9d0b-2c1a0e3b5d77',
38
- })
39
- ```
40
-
41
- - `id` is your name for it, unique in the app. `datasourceId` is the table that gets threads.
42
- - No `permissions`. Who can read, post and delete is set in Settings → Comments, shared with native blocks.
43
- - A viewer sees a thread only if a `read` action (`defineQuery`) on the same table lets them read it. Without one, `list` returns `null` for them.
44
- - One declaration per datasource. Two on the same table are the **same** threads, so "internal notes" plus "customer comments" on one table isn't possible.
45
- - Write the object inline. A variable hides it from the build.
46
-
47
- ## Read a thread
48
-
49
- ```ts
50
- const getThread = createServerFn({ method: 'GET' })
51
- .validator((data: { recordId: string; offset?: number | null }) => data)
52
- .handler(({ data }) => comments.list(orderComments, { recordId: data.recordId, offset: data.offset }))
53
- ```
54
-
55
- `comments.list` returns `null` when this visitor can't see comments on the record (comments are off, the table isn't set up, or their group can't read). Render nothing for `null`, not an error.
56
-
57
- Otherwise it returns:
58
-
59
- | Field | What it is |
60
- | --- | --- |
61
- | `items` | This page's comments, newest first. Each is a `CommentView` |
62
- | `canPost` | Whether the visitor can post. Hide the composer when false |
63
- | `allowMentions` | Whether `@` opens a mention menu. Don't call `searchMentions` when false |
64
- | `allowAttachments` | Whether the composer can attach files |
65
- | `notificationsEnabled` | Whether to show the notifications switch at all |
66
- | `quickReactions` | The five `{ emoji, label }` reactions. There are no others |
67
- | `total`, `nextOffset` | Paging. Pass `nextOffset` back as `offset` to get the next, older page. `null` on the last page |
68
-
69
- A `CommentView` is `{ id, bodyHtml, attachments, author: { name, avatar, isDeactivated }, createdAt, canDelete, canEdit, edited, source, reactions }`.
70
-
71
- - `createdAt` is ISO 8601. Format it with `useUserTimezone`.
72
- - `attachments` are `{ url, filename, type }`. `type` is `null` when unknown.
73
- - `edited` is true once the comment changed after posting.
74
- - `source` is `{ text, mentions }` for the edit box, or `null` when `canEdit` is false.
75
- - Each reaction is `{ emoji, label, count, isSelected }`.
76
-
77
- `bodyHtml` is already sanitised. Render it with `dangerouslySetInnerHTML` and nothing else:
78
-
79
- ```tsx
80
- <div className="comment-body" dangerouslySetInnerHTML={{ __html: comment.bodyHtml }} />
81
- ```
82
-
83
- It holds `p`, `br`, `strong`, `em`, `u`, `s`, `del`, `a`, `ul`, `ol`, `li`, `code`, `pre`, `blockquote`, `h1`–`h3` and mentions (`span[data-type="mention"]`). Links open in a new tab. Style these tags under the body's class: the reset strips bullets, link colour and spacing.
84
-
85
- ## Post a comment
86
-
87
- ```ts
88
- const postComment = createServerFn({ method: 'POST' })
89
- .validator(
90
- (data: {
91
- recordId: string
92
- body: string
93
- mentions: Array<CommentMention>
94
- attachments?: Array<CommentAttachmentInput>
95
- }) => data,
96
- )
97
- .handler(({ data }) => comments.create(orderComments, data))
98
- ```
99
-
100
- Pass the composer's `text` and `mentions` as they are. Mentioned people get an email. A mention whose `@name` was edited posts as plain text.
101
-
102
- `attachments` are the finished uploads: `useFileUpload(orderComments).files.filter((f) => f.status === 'done')`. `useFileUpload` takes the comments declaration like a mutation. Send files only when `allowAttachments` is true. A comment needs text or at least one file.
103
-
104
- ## The composer
105
-
106
- ```tsx
107
- const composer = useCommentComposer()
108
- const { files, isUploading, upload, remove } = useFileUpload(orderComments)
109
- const done = files.filter((f) => f.status === 'done')
110
-
111
- <textarea {...composer.textareaProps} placeholder="Write a comment" />
112
- {/* While composer.query is not null, list findPeople's answer for it. Picking a person calls composer.pick(person). */}
113
- <button
114
- disabled={(composer.text.trim() === '' && done.length === 0) || isUploading}
115
- onClick={async () => {
116
- await postComment({ data: { recordId, body: composer.text, mentions: composer.mentions, attachments: done } })
117
- composer.reset()
118
- done.forEach((f) => remove(f.id))
119
- }}
120
- >
121
- Post
122
- </button>
123
- ```
124
-
125
- - Spread `textareaProps` onto the `<textarea>` and don't override its handlers.
126
- - `query` is the text after `@` before the caret, or `null`. It's `""` right after `@` is typed.
127
- - `pick({ name, email })` writes `@name`, records the mention and moves the caret after it.
128
- - `reset()` empties the box. Call it only after the post succeeds.
129
-
130
- ## Editing a comment
131
-
132
- Offer Edit only where `canEdit` is true. Mount the edit box only while editing.
133
-
134
- - Text: `useCommentComposer({ initial: comment.source })`.
135
- - Files: `useFileUpload(orderComments, { initialAttachments: comment.attachments.map((a) => ({ ...a, id: a.url })) })`. Attachments have no `id`, so the url stands in.
136
- - Save with `comments.update`, passing the full file list: the kept files plus new uploads. With `allowAttachments` false the server keeps the old files whatever you send.
137
-
138
- ## Mentions
139
-
140
- ```ts
141
- const findPeople = createServerFn({ method: 'GET' })
142
- .validator((data: { query: string }) => data)
143
- .handler(({ data }) => comments.searchMentions(orderComments, data))
144
- ```
145
-
146
- It returns `[{ name, email, avatar }]`: people the visitor can mention whose name or email matches. Who's mentionable is set per user group in Settings → Comments.
147
-
148
- ## Delete, update, react, subscribe
149
-
150
- ```ts
151
- await comments.delete(orderComments, { recordId, commentId })
152
- await comments.update(orderComments, { recordId, commentId, body, mentions, attachments })
153
- await comments.react(orderComments, { recordId, commentId, emoji: '👍', selected: !reaction.isSelected })
154
- const subscribed = await comments.subscription(orderComments, { recordId })
155
- await comments.setSubscription(orderComments, { recordId, subscribed: !subscribed })
156
- ```
157
-
158
- Each runs in its own server function, like `list`. Writes return nothing, so re-read the thread after each one.
159
-
160
- - Offer delete only where `canDelete` is true.
161
- - `react` adds the reaction when `selected` is true and removes it when false. `emoji` must be one of `quickReactions`.
162
- - A subscription means the visitor gets an email about new comments on the record. It needs a signed-in visitor. Posting subscribes the author; a mention subscribes the person mentioned.
163
- - Mails go out a few minutes after a comment, never to its author, and only while notifications are on in Settings → Comments.
164
-
165
- ## Failure modes
166
-
167
- **Keying the thread on the URL.** Pass the fetched `record.id`, never a route or search param. A param can be a slug or stale, and the thread shows another record's comments.
168
-
169
- **Treating `null` as an error.** Render nothing. An error box shows every such visitor a broken page.
170
-
171
- **Rendering a body as text, or sanitising it again.** Use `bodyHtml` with `dangerouslySetInnerHTML`. As text it shows raw tags; a second sanitiser strips the mentions.
172
-
173
- **Inventing reactions.** Only `quickReactions` can be stored. `react` throws for anything else.
174
-
175
- **Sending only new files on edit.** `update` replaces the whole list, so kept files you leave out get deleted.
176
-
177
- **Calling `comments.*` from a component.** It's server only. Wrap each call in a `createServerFn`.
178
-
179
- ## References
180
-
181
- - [record-queries/SKILL.md](../record-queries/SKILL.md): fetching the record whose `id` keys the thread