@softr/sdk 0.0.68-props.0 → 0.0.68

package/dist/auth/current-user-row.d.ts

@@ -0,0 +1,20 @@
+import { User } from "./user.js";
+import { DatasourceAction, ReadShape } from "../action.js";
+import { GetRecord } from "../datasource/record.js";
+import "@tanstack/react-start/server-only";
+
+//#region src/auth/current-user-row.d.ts
+
+/**
+ * The signed-in visitor's own row of the Users table, found by email, or null when they are signed out
+ * or the table holds no row for them. For a "mine" filter, an owner set on create, or a page scoped to
+ * what the visitor owns: the row's id is what a link to Users holds.
+ *
+ * @example
+ * const me = await auth.currentUserRow(context.user, usersQuery, 'email')
+ * if (me === null) return []
+ * return ds.list(tasks).where((q) => q.assignee.isOneOf([me.id]))
+ */
+declare function currentUserRow<TShape extends ReadShape>(user: User | null, usersQuery: DatasourceAction<TShape>, email: keyof TShape["fields"] & string): Promise<GetRecord<TShape>>;
+//#endregion
+export { currentUserRow };

package/dist/auth/current-user-row.js

@@ -0,0 +1,22 @@
+import { makeChain } from "../datasource/fields.js";
+import { listRecords } from "../datasource/record.js";
+import "@tanstack/react-start/server-only";
+
+//#region src/auth/current-user-row.ts
+/**
+* The signed-in visitor's own row of the Users table, found by email, or null when they are signed out
+* or the table holds no row for them. For a "mine" filter, an owner set on create, or a page scoped to
+* what the visitor owns: the row's id is what a link to Users holds.
+*
+* @example
+* const me = await auth.currentUserRow(context.user, usersQuery, 'email')
+* if (me === null) return []
+* return ds.list(tasks).where((q) => q.assignee.isOneOf([me.id]))
+*/
+async function currentUserRow(user, usersQuery, email) {
+	if (user === null) return null;
+	return (await listRecords(usersQuery).where(() => makeChain(email).is(user.email)).limit(1)).records[0] ?? null;
+}
+
+//#endregion
+export { currentUserRow };

package/dist/auth/platform.d.ts

@@ -1,3 +1,4 @@
+import "./user.js";
 import "./context.js";
 import { z } from "zod";
 

package/dist/auth/platform.js

@@ -1,8 +1,8 @@
-import { assert, panic } from "../assertions.js";
+import { panic } from "../assertions.js";
 import { fetch } from "../fetch.js";
 import { permissionsSchema } from "./permissions.js";
 import { sessionConfig } from "./config.js";
-import { softrConfig } from "../softr-config.js";
+import { userSchema } from "./user.js";
 import { z } from "zod";
 
 //#region src/auth/platform.ts
@@ -33,30 +33,10 @@ const authSettingsSchema = z.object({
 	sso: z.object({ type: z.enum(["SAML", "OPEN_ID"]).nullable() }).nullable()
 });
 function makePlatform(applicationId) {
-	const aliases = Object.entries(softrConfig().user?.properties ?? {});
-	const withAttributes = aliases.length > 0 ? "?includeAttributes=true" : "";
-	const userSchema = z.object({
-		id: z.string(),
-		email: z.string(),
-		fullName: z.string(),
-		userGroupIds: z.array(z.string()),
-		attributes: z.record(z.string(), z.unknown()).optional()
-	}).transform(({ attributes,...identity }) => {
-		const properties = {};
-		for (const [alias, field] of aliases) {
-			assert(attributes !== void 0, "The signed-in user came back without their properties.");
-			assert(Object.hasOwn(attributes, field), `softr.json user.properties.${alias} names the field "${field}", which the users table does not have.`);
-			properties[alias] = attributes[field];
-		}
-		return {
-			...identity,
-			properties
-		};
-	});
 	return {
 		authSettings: () => request(`/v1/vibe/applications/${applicationId}/users/auth-settings`, { method: "GET" }, authSettingsSchema),
 		session: async (token) => {
-			const result = await request(`/v1/vibe/applications/${applicationId}/users/session${withAttributes}`, {
+			const result = await request(`/v1/vibe/applications/${applicationId}/users/session`, {
 				method: "GET",
 				token
 			}, z.object({
@@ -66,7 +46,7 @@ function makePlatform(applicationId) {
 			if (result.status === 404) panic(`Application ${applicationId} not found. Check SOFTR_APPLICATION_ID.`);
 			return result;
 		},
-		tokens: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens${withAttributes}`, {
+		tokens: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens`, {
 			method: "POST",
 			json: credentials
 		}, z.object({
@@ -89,7 +69,7 @@ function makePlatform(applicationId) {
 			method: "POST",
 			json: { email }
 		}, z.null()),
-		signInWithCode: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-code${withAttributes}`, {
+		signInWithCode: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-code`, {
 			method: "POST",
 			json: credentials
 		}, z.object({
@@ -108,7 +88,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		signInWithGoogle: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-google${withAttributes}`, {
+		signInWithGoogle: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-google`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -127,7 +107,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		signInWithMagicLink: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-magic-link${withAttributes}`, {
+		signInWithMagicLink: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-magic-link`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -154,7 +134,7 @@ function makePlatform(applicationId) {
 			method: "POST",
 			json: body
 		}, z.object({ email: z.string() })),
-		setPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/set-password${withAttributes}`, {
+		setPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/set-password`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -177,7 +157,7 @@ function makePlatform(applicationId) {
 			method: "POST",
 			json: body
 		}, z.null()),
-		signUpWithCode: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-code${withAttributes}`, {
+		signUpWithCode: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-code`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -196,7 +176,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		signUpWithPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-password${withAttributes}`, {
+		signUpWithPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-password`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -222,7 +202,7 @@ function makePlatform(applicationId) {
 			otpauthUri: z.string(),
 			qrPngBase64: z.string()
 		})),
-		authenticatorSetupComplete: (token, code) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/complete${withAttributes}`, {
+		authenticatorSetupComplete: (token, code) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/complete`, {
 			method: "POST",
 			token,
 			json: { code }
@@ -234,7 +214,7 @@ function makePlatform(applicationId) {
 			}),
 			backupCodes: z.array(z.string())
 		})),
-		authenticatorSetupDismiss: (token) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/dismiss${withAttributes}`, {
+		authenticatorSetupDismiss: (token) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/dismiss`, {
 			method: "POST",
 			token
 		}, z.object({
@@ -253,7 +233,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		authenticatorVerify: (token, body) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/totp/verify${withAttributes}`, {
+		authenticatorVerify: (token, body) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/totp/verify`, {
 			method: "POST",
 			token,
 			json: body

package/dist/auth/server.d.ts

@@ -6,6 +6,7 @@ import { checkPasswordLink, requestPasswordReset, setPasswordWithLink } from "./
 import { settings } from "./methods/settings.js";
 import { confirmSignUp, signUp } from "./methods/signup.js";
 import { signInWithGoogle } from "./methods/social.js";
+import { currentUserRow } from "./current-user-row.js";
 import "@tanstack/react-start/server-only";
 
 //#region src/auth/server.d.ts
@@ -33,6 +34,7 @@ declare const auth: {
   resetAuthenticator: typeof resetAuthenticator;
   removeAuthenticator: typeof removeAuthenticator;
   settings: typeof settings;
+  currentUserRow: typeof currentUserRow;
 };
 //#endregion
 export { auth };

package/dist/auth/server.js

@@ -6,6 +6,7 @@ import { signIn, signOut } from "./methods/password.js";
 import { checkPasswordLink, requestPasswordReset, setPasswordWithLink } from "./methods/passwordLink.js";
 import { confirmSignUp, signUp } from "./methods/signup.js";
 import { signInWithGoogle } from "./methods/social.js";
+import { currentUserRow } from "./current-user-row.js";
 import "@tanstack/react-start/server-only";
 
 //#region src/auth/server.ts
@@ -31,7 +32,8 @@ const auth = {
 	sendAuthenticatorResetCode,
 	resetAuthenticator,
 	removeAuthenticator,
-	settings
+	settings,
+	currentUserRow
 };
 
 //#endregion

package/dist/auth/session.js

@@ -2,10 +2,10 @@ import { readRequestCookies, serializeCookie, writeCookies } from "../cookies.js
 import { permissionsSchema } from "./permissions.js";
 import { sessionConfig } from "./config.js";
 import { userSchema } from "./user.js";
-import { z } from "zod";
 import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { getRequestProtocol } from "@tanstack/react-start/server";
+import { z } from "zod";
 
 //#region src/auth/session.ts
 const SESSION_TOKEN = "session_token";

package/dist/auth/user.d.ts

@@ -13,19 +13,12 @@ interface SoftrUserGroups {}
 type SoftrUserGroupId = SoftrUserGroups extends {
   ids: infer Id extends string;
 } ? Id : string;
-/**
- * The fields of the visitor's row that softr.json declares under
- * `user.properties`, keyed by their aliases. The app's generated types declare
- * it.
- */
-interface SoftrUserProperties {}
 /** The signed-in visitor. */
 type User = {
   id: string;
   email: string;
   fullName: string;
   userGroupIds: Array<SoftrUserGroupId>;
-  properties: SoftrUserProperties;
 };
 //#endregion
-export { SoftrUserGroupId, SoftrUserGroups, SoftrUserProperties, User };
+export { SoftrUserGroupId, SoftrUserGroups, User };

package/dist/auth/user.js

@@ -5,8 +5,7 @@ const userSchema = z.object({
 	id: z.string(),
 	email: z.string(),
 	fullName: z.string(),
-	userGroupIds: z.array(z.string()),
-	properties: z.record(z.string(), z.unknown())
+	userGroupIds: z.array(z.string())
 });
 
 //#endregion

package/dist/cli.js

@@ -2,26 +2,30 @@
 import { version } from "./package.js";
 import { requireDefined } from "./assertions.js";
 import { fetchSoftrEnvInput, metadataSourceFromEnv } from "./codegen/fetch-metadata.js";
-import { renderUserPropertiesDoc } from "./codegen/datasource-docs.js";
 import { renderUserGroupsDoc } from "./codegen/user-groups.js";
 import { renderSoftrEnv } from "./codegen/softr-env.js";
+import { renderSoftrFields } from "./codegen/softr-fields.js";
 import { writeIfChanged } from "./codegen/write-if-changed.js";
 import { writeDatasourceDocs } from "./codegen/write-datasource-docs.js";
-import { loadSoftrConfig } from "./softr-config.schema.js";
-import { rmSync, writeFileSync } from "node:fs";
+import { writeFileSync } from "node:fs";
 import path from "node:path";
 import { parseArgs } from "node:util";
 
 //#region src/cli.ts
 const OUTPUT = "softr-env.d.ts";
+const FIELDS_OUTPUT = "src/softr-fields.ts";
 const DOCS_DIR = "docs/datasources";
 const USER_GROUPS_DOC = "docs/user-groups.md";
-const USER_PROPERTIES_DOC = "docs/user-properties.md";
 async function generate({ json }) {
 	if (json) console.info = console.error;
-	const input = await fetchSoftrEnvInput(metadataSourceFromEnv(), loadSoftrConfig(process.cwd()).user?.properties ?? {});
+	const input = await fetchSoftrEnvInput(metadataSourceFromEnv());
 	writeFileSync(path.resolve(process.cwd(), OUTPUT), renderSoftrEnv(input, version), "utf8");
 	const report = writeDocs(input);
+	report.docs.push({
+		subject: "field shapes",
+		path: FIELDS_OUTPUT,
+		changed: writeIfChanged(path.resolve(process.cwd(), FIELDS_OUTPUT), renderSoftrFields(input.datasources, version))
+	});
 	if (json) {
 		process.stdout.write(`${JSON.stringify(report)}\n`);
 		return;
@@ -29,30 +33,18 @@ async function generate({ json }) {
 	printReport(report);
 }
 function writeDocs(input) {
-	if (input.users === null) rmSync(path.resolve(process.cwd(), USER_PROPERTIES_DOC), { force: true });
 	const datasourceDocs = writeDatasourceDocs(input.datasources, path.resolve(process.cwd(), DOCS_DIR));
 	return {
 		types: OUTPUT,
-		docs: [
-			{
-				subject: "datasources",
-				path: `${DOCS_DIR}/README.md`,
-				changed: datasourceDocs.changed
-			},
-			{
-				subject: "user groups",
-				path: USER_GROUPS_DOC,
-				changed: writeIfChanged(path.resolve(process.cwd(), USER_GROUPS_DOC), renderUserGroupsDoc(input.userGroups))
-			},
-			...input.users === null ? [] : [{
-				subject: "user properties",
-				path: USER_PROPERTIES_DOC,
-				changed: writeIfChanged(path.resolve(process.cwd(), USER_PROPERTIES_DOC), renderUserPropertiesDoc(input.users, {
-					datasources: new Map(input.datasources.map((d) => [d.id, d])),
-					fileNames: datasourceDocs.fileNames
-				}))
-			}]
-		],
+		docs: [{
+			subject: "datasources",
+			path: `${DOCS_DIR}/README.md`,
+			changed: datasourceDocs.changed
+		}, {
+			subject: "user groups",
+			path: USER_GROUPS_DOC,
+			changed: writeIfChanged(path.resolve(process.cwd(), USER_GROUPS_DOC), renderUserGroupsDoc(input.userGroups))
+		}],
 		datasources: input.datasources.map(({ id, name }) => ({
 			id,
 			name,

package/dist/codegen/datasource-docs.js

@@ -18,98 +18,6 @@ function renderDatasourceDoc(datasource, context) {
 		...renderExamples(datasource, context.datasources)
 	].join("\n");
 }
-function renderUserPropertiesDoc(users, context) {
-	const aliases = Object.entries(users.properties);
-	assert(aliases.length > 0, "Expected user properties to document, but got none");
-	const [first] = requireDefined(aliases[0]);
-	const registered = linkedDatasource(users.tableId, context.datasources);
-	const types = /* @__PURE__ */ new Set();
-	const sampled = aliases.filter(([, field]) => {
-		const type = fieldTypeLiteral(field);
-		if (types.has(type)) return false;
-		types.add(type);
-		return true;
-	});
-	return [
-		"# User properties",
-		"",
-		`Users datasource: ${displayName(users.name) || users.tableId}  `,
-		`Datasource ID: ${users.datasourceId}` + (registered === void 0 ? "" : `  \nRegistered as: [${datasourceLabel(registered)}](./datasources/${requireDefined(context.fileNames.get(registered.id))}) (${registered.id})`),
-		"",
-		"> This document is generated automatically when softr.json's `user.properties` or the users table changes.",
-		"",
-		"Each alias below is declared in softr.json under `user.properties`, and read as `user.properties.<alias>`.",
-		"",
-		"## Field reference",
-		"",
-		...aliases.flatMap(([alias, field]) => {
-			const linkedId = option(field.options, "linkedTableId");
-			const linked = typeof linkedId === "string" ? linkedDatasource(linkedId, context.datasources) : void 0;
-			return [
-				`### ${alias}`,
-				"",
-				`- Field: ${displayName(field.name)}`,
-				`- ID: ${field.id}`,
-				`- Type: ${fieldTypeLiteral(field).slice(1, -1)}`,
-				...optionLines(field),
-				...choiceLines(field),
-				...typeof linkedId !== "string" ? [] : linked === void 0 ? [`- Links to: ${linkedId}, not registered`] : [`- Links to: [${datasourceLabel(linked)}](./datasources/${requireDefined(context.fileNames.get(linked.id))}) (${linked.id})`],
-				""
-			];
-		}),
-		"## Read shape",
-		"",
-		"In a component:",
-		"",
-		"```tsx",
-		"import { useCurrentUser } from '@softr/sdk'",
-		"",
-		"const user = useCurrentUser()",
-		"if (user === null) return null",
-		"",
-		...sampled.map(([alias, field]) => `user.properties.${alias} // ${fieldTypeLiteral(field).slice(1, -1)}`),
-		"```",
-		"",
-		"In a route's `beforeLoad`, to send a visitor elsewhere. It guards navigation only, not data:",
-		"",
-		"```tsx",
-		"import { createFileRoute, redirect } from '@tanstack/react-router'",
-		"import { assertRouteAccess, defineVisibility } from '@softr/sdk'",
-		"",
-		"const visibility = defineVisibility({ userGroupTypes: ['LOGGED_IN_USERS'] })",
-		"",
-		"export const Route = createFileRoute('/example')({",
-		"  beforeLoad: (opts) => {",
-		"    assertRouteAccess(visibility, opts)",
-		`    if (opts.context.user.properties.${first} == null) throw redirect({ to: '/' })`,
-		"  },",
-		"})",
-		"```",
-		"",
-		"In a server function, called from a route's `loader`. The handler checks the visitor itself:",
-		"",
-		"```tsx",
-		"import { createFileRoute } from '@tanstack/react-router'",
-		"import { createServerFn } from '@tanstack/react-start'",
-		"",
-		`const get${pascalCase(first)} = createServerFn().handler(async ({ context }) => {`,
-		"  if (!context.user) throw new Error('Not signed in')",
-		`  return context.user.properties.${first}`,
-		"})",
-		"",
-		"export const Route = createFileRoute('/example')({",
-		`  loader: () => get${pascalCase(first)}(),`,
-		"  component: Example,",
-		"})",
-		"",
-		"function Example() {",
-		`  const ${first} = Route.useLoaderData()`,
-		"  // ...",
-		"}",
-		"```",
-		""
-	].join("\n");
-}
 /** Two trailing spaces are a markdown hard break, which keeps the block one paragraph. */
 function summary(datasource, context) {
 	const lines = [`Datasource ID: ${datasource.id}`];
@@ -407,4 +315,4 @@ function words(value) {
 }
 
 //#endregion
-export { renderDatasourceDoc, renderDatasourceIndex, renderUserPropertiesDoc };
+export { renderDatasourceDoc, renderDatasourceIndex };

package/dist/codegen/datasource-types.js

@@ -251,21 +251,6 @@ function linkedRecord(options, context) {
 	if (linked === void 0 || linked.primaryFieldId === "") return "LinkedRecord";
 	return `LinkedRecord<NonNullable<${`${nameOf(linked.id, context)}Read[${quote(linked.primaryFieldId)}]`}>>`;
 }
-/** `SoftrUserProperties`, each alias typed as its field reads. */
-function renderUserProperties(properties, datasources) {
-	const context = {
-		datasources: byId(datasources),
-		names: typeNames(datasources)
-	};
-	return [
-		"interface SoftrUserProperties {",
-		...Object.entries(properties).map(([alias, field]) => indent(readMember({
-			...field,
-			id: alias
-		}, context))),
-		"}"
-	].join("\n");
-}
 function renderRegistry(datasources, context) {
 	return [
 		"interface SoftrDatasources {",
@@ -509,4 +494,4 @@ function indent(block) {
 }
 
 //#endregion
-export { choiceEntries, fieldTypeLiteral, isWritable, linkedDatasource, option, readExample, renderDatasourceTypes, renderUserProperties, resolvedShape, scalarExample, underlyingType };
+export { choiceEntries, fieldTypeLiteral, isWritable, linkedDatasource, option, readExample, renderDatasourceTypes, resolvedShape, scalarExample, underlyingType };

package/dist/codegen/fetch-metadata.js

@@ -1,4 +1,4 @@
-import { assert, panic } from "../assertions.js";
+import { panic } from "../assertions.js";
 import { fetch } from "../fetch.js";
 
 //#region src/codegen/fetch-metadata.ts
@@ -17,54 +17,27 @@ function metadataSourceFromEnv(env = process.env) {
 		token: env.SOFTR_STUDIO_TOKEN
 	};
 }
-async function fetchSoftrEnvInput(source, aliases) {
+async function fetchSoftrEnvInput(source) {
 	const { studioApiUrl, datasourceApiUrl, applicationId, token } = source;
 	const [registered, userGroups] = await Promise.all([apiFetch(`${studioApiUrl}/v1/applications/${applicationId}/datasources`, token), apiFetch(`${studioApiUrl}/v1/applications/${applicationId}/access-control/user-groups`, token)]);
-	const datasources = await Promise.all(registered.map(async ({ name, datasource }) => {
-		const metadata = await apiFetch(`${datasourceApiUrl}/v1/datasource/vibe/studio/applications/${applicationId}/datasources/${datasource.id}/metadata`, token);
-		return {
-			...metadata,
-			id: datasource.id,
-			tableId: metadata.id,
-			name
-		};
-	}));
-	let users = null;
-	if (Object.keys(aliases).length > 0) {
-		const { payload } = await apiFetch(`${studioApiUrl}/v1/applications/${applicationId}`, token);
-		const connection = payload.user_connection?.datasource ?? panic("softr.json declares user.properties, but this app has no users table.");
-		const metadata = await apiFetch(`${datasourceApiUrl}/v1/datasource/${applicationId}/${connection.integration_id}/metadata`, token, {
-			datasourceType: connection.datasource_integration_type,
-			resourceIdentifier: { keys: connection.resource_identifier.keys }
-		});
-		users = {
-			datasourceId: connection.id,
-			tableId: metadata.id,
-			name: metadata.name,
-			properties: {}
-		};
-		for (const [alias, fieldId] of Object.entries(aliases)) {
-			const field = metadata.fields.find(({ id }) => id === fieldId) ?? panic(`softr.json user.properties.${alias} names "${fieldId}", which is not a field of the users table.`);
-			assert(field.type !== "ATTACHMENT" && field.type !== "LONG_TEXT" && !(field.allowMultipleEntries && (field.type === "LINKED_RECORD" || field.type === "LOOKUP")), `softr.json user.properties.${alias} names "${field.name}", a ${field.allowMultipleEntries ? "multiple " : ""}${field.type} field, which can be too big to read with the signed-in user. Remove it, and read it with defineQuery on the users table instead.`);
-			users.properties[alias] = field;
-		}
-	}
 	return {
-		datasources,
-		userGroups,
-		users
+		datasources: await Promise.all(registered.map(async ({ name, datasource }) => {
+			const metadata = await apiFetch(`${datasourceApiUrl}/v1/datasource/vibe/studio/applications/${applicationId}/datasources/${datasource.id}/metadata`, token);
+			return {
+				...metadata,
+				id: datasource.id,
+				tableId: metadata.id,
+				name
+			};
+		})),
+		userGroups
 	};
 }
-async function apiFetch(url, token, body) {
-	const response = await fetch(url, {
-		method: body === void 0 ? "GET" : "POST",
-		headers: {
-			accept: "application/json",
-			...body === void 0 ? {} : { "content-type": "application/json" },
-			Authorization: `Bearer ${token}`
-		},
-		body: body === void 0 ? void 0 : JSON.stringify(body)
-	}).catch(() => panic(`Could not reach ${url}`));
+async function apiFetch(url, token) {
+	const response = await fetch(url, { headers: {
+		accept: "application/json",
+		Authorization: `Bearer ${token}`
+	} }).catch(() => panic(`Could not reach ${url}`));
 	if (!response.ok) panic(`${url} answered ${response.status}`);
 	return await response.json();
 }

package/dist/codegen/softr-env.js

@@ -1,4 +1,4 @@
-import { renderDatasourceTypes, renderUserProperties } from "./datasource-types.js";
+import { renderDatasourceTypes } from "./datasource-types.js";
 import { renderUserGroups } from "./user-groups.js";
 
 //#region src/codegen/softr-env.ts
@@ -15,7 +15,6 @@ function renderSoftrEnv(input, sdkVersion) {
 		indent(interfaces),
 		"",
 		indent(renderUserGroups(input.userGroups)),
-		...input.users === null ? [] : ["", indent(renderUserProperties(input.users.properties, input.datasources))],
 		"}",
 		""
 	].join("\n");

package/dist/codegen/softr-fields.js

@@ -0,0 +1,41 @@
+//#region src/codegen/softr-fields.ts
+/**
+* Renders the app's `src/softr-fields.ts`: every registered datasource's fields by id, with the type
+* and options a value's text depends on, registered with the SDK as a side effect of being imported.
+* The root route imports it once, and `formatValue(query, alias, value, formatting)` then formats any
+* value a query read by its field's own type.
+*/
+function renderSoftrFields(datasources, sdkVersion) {
+	const entries = [...datasources].sort((a, b) => a.id.localeCompare(b.id)).map((datasource) => {
+		const fields = [...datasource.fields].sort((a, b) => a.id.localeCompare(b.id)).map((field) => {
+			const shape = { type: field.type };
+			if (field.options !== null && field.options !== void 0 && Object.keys(field.options).length > 0) shape.options = field.options;
+			if (field.allowMultipleEntries) shape.allowMultipleEntries = true;
+			return `    ${JSON.stringify(field.id)}: ${JSON.stringify(shape)},`;
+		});
+		return [
+			`  // ${datasource.name}`,
+			`  ${JSON.stringify(datasource.id)}: {`,
+			...fields,
+			"  },"
+		].join("\n");
+	});
+	return [
+		`// Generated by @softr/sdk ${sdkVersion}. Do not edit: the SDK's codegen rewrites it after a schema change.`,
+		"//",
+		"// The type and options of every field, by datasource and field id, for `formatValue` and",
+		"// `fieldShape` from @softr/sdk. Imported once, in the root route, it registers them with the SDK.",
+		"import { registerSoftrFields } from \"@softr/sdk\";",
+		"import type { SoftrFieldRegistry } from \"@softr/sdk\";",
+		"",
+		"export const softrFields = {",
+		...entries,
+		"} as const satisfies SoftrFieldRegistry;",
+		"",
+		"registerSoftrFields(softrFields);",
+		""
+	].join("\n");
+}
+
+//#endregion
+export { renderSoftrFields };

package/dist/cookies.js

@@ -1,4 +1,3 @@
-import { softAssert } from "./assertions.js";
 import { getRequestHeader, getResponseHeaders, setResponseHeader } from "@tanstack/react-start/server";
 
 //#region src/cookies.ts
@@ -39,16 +38,9 @@ const USER_TIMEZONE_COOKIE = "user-timezone";
 function readUserTimezone() {
 	return readRequestCookies()[USER_TIMEZONE_COOKIE] ?? null;
 }
-/** What browsers keep of one cookie's name and value. They drop a larger one silently. */
-const COOKIE_MAX_BYTES = 4096;
 function writeCookies(cookies) {
-	const written = cookies.filter((cookie) => {
-		const size = cookie.split(";")[0].length;
-		softAssert(size <= COOKIE_MAX_BYTES, () => `The ${cookie.slice(0, cookie.indexOf("="))} cookie is ${size} bytes, over the ${COOKIE_MAX_BYTES} a browser keeps. It was not written.`);
-		return size <= COOKIE_MAX_BYTES;
-	});
-	if (written.length === 0) return;
-	setResponseHeader("Set-Cookie", [...getResponseHeaders().getSetCookie(), ...written]);
+	if (cookies.length === 0) return;
+	setResponseHeader("Set-Cookie", [...getResponseHeaders().getSetCookie(), ...cookies]);
 }
 
 //#endregion