@softr/sdk 0.0.68-props.0 → 0.0.69-alpha.0

package/dist/auth/current-user-row.d.ts

@@ -0,0 +1,20 @@
+import { User } from "./user.js";
+import { DatasourceAction, ReadShape } from "../action.js";
+import { GetRecord } from "../datasource/record.js";
+import "@tanstack/react-start/server-only";
+
+//#region src/auth/current-user-row.d.ts
+
+/**
+ * The signed-in visitor's own row of the Users table, found by email, or null when they are signed out
+ * or the table holds no row for them. For a "mine" filter, an owner set on create, or a page scoped to
+ * what the visitor owns: the row's id is what a link to Users holds.
+ *
+ * @example
+ * const me = await auth.currentUserRow(context.user, usersQuery, 'email')
+ * if (me === null) return []
+ * return ds.list(tasks).where((q) => q.assignee.isOneOf([me.id]))
+ */
+declare function currentUserRow<TShape extends ReadShape>(user: User | null, usersQuery: DatasourceAction<TShape>, email: keyof TShape["fields"] & string): Promise<GetRecord<TShape>>;
+//#endregion
+export { currentUserRow };

package/dist/auth/current-user-row.js

@@ -0,0 +1,22 @@
+import { makeChain } from "../datasource/fields.js";
+import { listRecords } from "../datasource/record.js";
+import "@tanstack/react-start/server-only";
+
+//#region src/auth/current-user-row.ts
+/**
+* The signed-in visitor's own row of the Users table, found by email, or null when they are signed out
+* or the table holds no row for them. For a "mine" filter, an owner set on create, or a page scoped to
+* what the visitor owns: the row's id is what a link to Users holds.
+*
+* @example
+* const me = await auth.currentUserRow(context.user, usersQuery, 'email')
+* if (me === null) return []
+* return ds.list(tasks).where((q) => q.assignee.isOneOf([me.id]))
+*/
+async function currentUserRow(user, usersQuery, email) {
+	if (user === null) return null;
+	return (await listRecords(usersQuery).where(() => makeChain(email).is(user.email)).limit(1)).records[0] ?? null;
+}
+
+//#endregion
+export { currentUserRow };

package/dist/auth/methods/profile.d.ts

@@ -0,0 +1,26 @@
+import { User } from "../user.js";
+import { AuthError, Result } from "./utils.js";
+
+//#region src/auth/methods/profile.d.ts
+
+/**
+ * Changes the signed-in visitor's own name, photo, or both. A field left out
+ * stays as it is, and `avatar: null` removes the photo.
+ *
+ * The photo can change only where `user.avatarEditable` is true. Elsewhere a
+ * photo answers `avatarNotSupported`, so hide the photo controls instead.
+ *
+ * Answers with the visitor as they are now. The page keeps showing what it
+ * loaded until its route context loads again, so call `router.invalidate()`
+ * after a success.
+ *
+ * @example
+ * const result = await auth.updateProfile({ fullName: 'Ann Lee' })
+ * const result = await auth.updateProfile({ avatar: file })
+ */
+declare function updateProfile(changes: {
+  fullName?: string;
+  avatar?: File | null;
+}): Promise<Result<User, AuthError>>;
+//#endregion
+export { updateProfile };

package/dist/auth/methods/profile.js

@@ -0,0 +1,52 @@
+import { assert, panic } from "../../assertions.js";
+import { sessionConfig } from "../config.js";
+import { clearSessionData, readSessionToken } from "../session.js";
+import { makePlatform } from "../platform.js";
+import { authError } from "./utils.js";
+
+//#region src/auth/methods/profile.ts
+/**
+* Changes the signed-in visitor's own name, photo, or both. A field left out
+* stays as it is, and `avatar: null` removes the photo.
+*
+* The photo can change only where `user.avatarEditable` is true. Elsewhere a
+* photo answers `avatarNotSupported`, so hide the photo controls instead.
+*
+* Answers with the visitor as they are now. The page keeps showing what it
+* loaded until its route context loads again, so call `router.invalidate()`
+* after a success.
+*
+* @example
+* const result = await auth.updateProfile({ fullName: 'Ann Lee' })
+* const result = await auth.updateProfile({ avatar: file })
+*/
+async function updateProfile(changes) {
+	assert(changes.fullName !== void 0 || changes.avatar !== void 0, "updateProfile needs a name or a photo to change");
+	const token = readSessionToken();
+	if (token === null) return authError("notAuthenticated", "Nobody is signed in.");
+	const form = new FormData();
+	if (changes.fullName !== void 0) form.set("fullName", changes.fullName);
+	if (changes.avatar === null) form.set("removeAvatar", "true");
+	if (changes.avatar) form.set("avatar", changes.avatar);
+	const result = await makePlatform(sessionConfig().applicationId).updateProfile(token, form);
+	if (!result.ok) {
+		switch (result.status) {
+			case 400: return authError("invalidName", result.message);
+			case 401: return authError("notAuthenticated", result.message);
+			case 409: return authError("avatarNotSupported", result.message);
+			case 413: return authError("fileTooLarge", result.message);
+			case 415: return authError("notAnImage", result.message);
+			case 429: return authError("tooManyAttempts", result.message);
+		}
+		if (result.status >= 500) panic(`Expected the profile to update, but got ${result.status}: ` + result.message);
+		throw new Error(`${result.message}. Check SOFTR_APPLICATION_ID.`);
+	}
+	clearSessionData();
+	return {
+		success: true,
+		data: result.data
+	};
+}
+
+//#endregion
+export { updateProfile };

package/dist/auth/methods/utils.d.ts

@@ -10,6 +10,6 @@ type AuthError = {
   code: AuthErrorCode;
   message: string;
 };
-type AuthErrorCode = "invalidCredentials" | "tooManyAttempts" | "emailTaken" | "invalidDetails" | "invalidCode" | "notAuthenticated" | "emailDomainNotAllowed" | "linkExpired";
+type AuthErrorCode = "invalidCredentials" | "tooManyAttempts" | "emailTaken" | "invalidDetails" | "invalidCode" | "notAuthenticated" | "emailDomainNotAllowed" | "linkExpired" | "invalidName" | "fileTooLarge" | "notAnImage" | "avatarNotSupported";
 //#endregion
 export { AuthError, Result };

package/dist/auth/platform.d.ts

@@ -1,3 +1,4 @@
+import "./user.js";
 import "./context.js";
 import { z } from "zod";
 

package/dist/auth/platform.js

@@ -2,7 +2,7 @@ import { assert, panic } from "../assertions.js";
 import { fetch } from "../fetch.js";
 import { permissionsSchema } from "./permissions.js";
 import { sessionConfig } from "./config.js";
-import { softrConfig } from "../softr-config.js";
+import { userSchema } from "./user.js";
 import { z } from "zod";
 
 //#region src/auth/platform.ts
@@ -33,30 +33,10 @@ const authSettingsSchema = z.object({
 	sso: z.object({ type: z.enum(["SAML", "OPEN_ID"]).nullable() }).nullable()
 });
 function makePlatform(applicationId) {
-	const aliases = Object.entries(softrConfig().user?.properties ?? {});
-	const withAttributes = aliases.length > 0 ? "?includeAttributes=true" : "";
-	const userSchema = z.object({
-		id: z.string(),
-		email: z.string(),
-		fullName: z.string(),
-		userGroupIds: z.array(z.string()),
-		attributes: z.record(z.string(), z.unknown()).optional()
-	}).transform(({ attributes,...identity }) => {
-		const properties = {};
-		for (const [alias, field] of aliases) {
-			assert(attributes !== void 0, "The signed-in user came back without their properties.");
-			assert(Object.hasOwn(attributes, field), `softr.json user.properties.${alias} names the field "${field}", which the users table does not have.`);
-			properties[alias] = attributes[field];
-		}
-		return {
-			...identity,
-			properties
-		};
-	});
 	return {
 		authSettings: () => request(`/v1/vibe/applications/${applicationId}/users/auth-settings`, { method: "GET" }, authSettingsSchema),
 		session: async (token) => {
-			const result = await request(`/v1/vibe/applications/${applicationId}/users/session${withAttributes}`, {
+			const result = await request(`/v1/vibe/applications/${applicationId}/users/session`, {
 				method: "GET",
 				token
 			}, z.object({
@@ -66,7 +46,7 @@ function makePlatform(applicationId) {
 			if (result.status === 404) panic(`Application ${applicationId} not found. Check SOFTR_APPLICATION_ID.`);
 			return result;
 		},
-		tokens: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens${withAttributes}`, {
+		tokens: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens`, {
 			method: "POST",
 			json: credentials
 		}, z.object({
@@ -89,7 +69,7 @@ function makePlatform(applicationId) {
 			method: "POST",
 			json: { email }
 		}, z.null()),
-		signInWithCode: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-code${withAttributes}`, {
+		signInWithCode: (credentials) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-code`, {
 			method: "POST",
 			json: credentials
 		}, z.object({
@@ -108,7 +88,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		signInWithGoogle: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-google${withAttributes}`, {
+		signInWithGoogle: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-google`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -127,7 +107,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		signInWithMagicLink: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-magic-link${withAttributes}`, {
+		signInWithMagicLink: (body) => request(`/v1/vibe/applications/${applicationId}/users/tokens/with-magic-link`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -154,7 +134,7 @@ function makePlatform(applicationId) {
 			method: "POST",
 			json: body
 		}, z.object({ email: z.string() })),
-		setPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/set-password${withAttributes}`, {
+		setPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/set-password`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -177,7 +157,7 @@ function makePlatform(applicationId) {
 			method: "POST",
 			json: body
 		}, z.null()),
-		signUpWithCode: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-code${withAttributes}`, {
+		signUpWithCode: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-code`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -196,7 +176,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		signUpWithPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-password${withAttributes}`, {
+		signUpWithPassword: (body) => request(`/v1/vibe/applications/${applicationId}/users/sign-up/with-password`, {
 			method: "POST",
 			json: body
 		}, z.object({
@@ -222,7 +202,7 @@ function makePlatform(applicationId) {
 			otpauthUri: z.string(),
 			qrPngBase64: z.string()
 		})),
-		authenticatorSetupComplete: (token, code) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/complete${withAttributes}`, {
+		authenticatorSetupComplete: (token, code) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/complete`, {
 			method: "POST",
 			token,
 			json: { code }
@@ -234,7 +214,7 @@ function makePlatform(applicationId) {
 			}),
 			backupCodes: z.array(z.string())
 		})),
-		authenticatorSetupDismiss: (token) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/dismiss${withAttributes}`, {
+		authenticatorSetupDismiss: (token) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/setup/dismiss`, {
 			method: "POST",
 			token
 		}, z.object({
@@ -253,7 +233,7 @@ function makePlatform(applicationId) {
 				challengeToken: z.string()
 			}).nullish()
 		})),
-		authenticatorVerify: (token, body) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/totp/verify${withAttributes}`, {
+		authenticatorVerify: (token, body) => request(`/v1/vibe/applications/${applicationId}/users/authenticator/totp/verify`, {
 			method: "POST",
 			token,
 			json: body
@@ -287,6 +267,11 @@ function makePlatform(applicationId) {
 			token,
 			json: { code }
 		}, z.null()),
+		updateProfile: (token, form) => request(`/v1/vibe/applications/${applicationId}/users/me/profile`, {
+			method: "PATCH",
+			token,
+			form
+		}, userSchema),
 		signOut: (token) => request(`/v1/applications/${applicationId}/users/sign-out`, {
 			method: "POST",
 			token
@@ -295,6 +280,7 @@ function makePlatform(applicationId) {
 }
 const errorSchema = z.object({ message: z.string() });
 async function request(path, init, schema, parse = (response$1) => response$1.json()) {
+	assert(init.json === void 0 || init.form === void 0, "A platform request carries a JSON body or a form, not both");
 	const response = await fetch(`${await platformApiUrl()}${path}`, {
 		method: init.method,
 		headers: {
@@ -302,7 +288,8 @@ async function request(path, init, schema, parse = (response$1) => response$1.js
 			...init.json === void 0 ? {} : { "content-type": "application/json" },
 			...init.token ? { authorization: `Bearer ${init.token}` } : {}
 		},
-		...init.json === void 0 ? {} : { body: JSON.stringify(init.json) }
+		...init.json === void 0 ? {} : { body: JSON.stringify(init.json) },
+		...init.form === void 0 ? {} : { body: init.form }
 	});
 	if (!response.ok) {
 		const error = errorSchema.safeParse(await response.json().catch(() => null));

package/dist/auth/server.d.ts

@@ -6,6 +6,8 @@ import { checkPasswordLink, requestPasswordReset, setPasswordWithLink } from "./
 import { settings } from "./methods/settings.js";
 import { confirmSignUp, signUp } from "./methods/signup.js";
 import { signInWithGoogle } from "./methods/social.js";
+import { updateProfile } from "./methods/profile.js";
+import { currentUserRow } from "./current-user-row.js";
 import "@tanstack/react-start/server-only";
 
 //#region src/auth/server.d.ts
@@ -33,6 +35,8 @@ declare const auth: {
   resetAuthenticator: typeof resetAuthenticator;
   removeAuthenticator: typeof removeAuthenticator;
   settings: typeof settings;
+  updateProfile: typeof updateProfile;
+  currentUserRow: typeof currentUserRow;
 };
 //#endregion
 export { auth };

package/dist/auth/server.js

@@ -6,6 +6,8 @@ import { signIn, signOut } from "./methods/password.js";
 import { checkPasswordLink, requestPasswordReset, setPasswordWithLink } from "./methods/passwordLink.js";
 import { confirmSignUp, signUp } from "./methods/signup.js";
 import { signInWithGoogle } from "./methods/social.js";
+import { updateProfile } from "./methods/profile.js";
+import { currentUserRow } from "./current-user-row.js";
 import "@tanstack/react-start/server-only";
 
 //#region src/auth/server.ts
@@ -31,7 +33,9 @@ const auth = {
 	sendAuthenticatorResetCode,
 	resetAuthenticator,
 	removeAuthenticator,
-	settings
+	settings,
+	updateProfile,
+	currentUserRow
 };
 
 //#endregion

package/dist/auth/session.js

@@ -2,10 +2,10 @@ import { readRequestCookies, serializeCookie, writeCookies } from "../cookies.js
 import { permissionsSchema } from "./permissions.js";
 import { sessionConfig } from "./config.js";
 import { userSchema } from "./user.js";
-import { z } from "zod";
 import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { getRequestProtocol } from "@tanstack/react-start/server";
+import { z } from "zod";
 
 //#region src/auth/session.ts
 const SESSION_TOKEN = "session_token";
@@ -118,6 +118,16 @@ function clearSession() {
 		PENDING_AUTH
 	]);
 }
+/**
+* Drops the cached visitor and leaves the session signed in, so the next
+* request needing a visitor re-reads one from the platform.
+*
+* For a mutation to what the visitor's own record holds — their name, their
+* groups — which the cache would otherwise answer stale for up to five minutes.
+*/
+function clearSessionData() {
+	clearCookies([SESSION_DATA]);
+}
 const standInToken = new AsyncLocalStorage();
 const sessionDataSchema = z.object({
 	user: userSchema.nullable(),
@@ -210,4 +220,4 @@ function openEnvelope(raw, purpose) {
 }
 
 //#endregion
-export { clearPendingAuth, clearSession, makePendingAuthCookie, makeSessionDataCookie, makeSessionTokenCookie, readPendingAuthToken, readSessionData, readSessionToken, withSessionToken };
+export { clearPendingAuth, clearSession, clearSessionData, makePendingAuthCookie, makeSessionDataCookie, makeSessionTokenCookie, readPendingAuthToken, readSessionData, readSessionToken, withSessionToken };

package/dist/auth/user.d.ts

@@ -13,19 +13,16 @@ interface SoftrUserGroups {}
 type SoftrUserGroupId = SoftrUserGroups extends {
   ids: infer Id extends string;
 } ? Id : string;
-/**
- * The fields of the visitor's row that softr.json declares under
- * `user.properties`, keyed by their aliases. The app's generated types declare
- * it.
- */
-interface SoftrUserProperties {}
 /** The signed-in visitor. */
 type User = {
   id: string;
   email: string;
   fullName: string;
   userGroupIds: Array<SoftrUserGroupId>;
-  properties: SoftrUserProperties;
+  /** Their photo, or `null` when they have none. Show their initials then. */
+  avatarUrl: string | null;
+  /** Whether `auth.updateProfile` can change their photo in this app. */
+  avatarEditable: boolean;
 };
 //#endregion
-export { SoftrUserGroupId, SoftrUserGroups, SoftrUserProperties, User };
+export { SoftrUserGroupId, SoftrUserGroups, User };

package/dist/auth/user.js

@@ -6,7 +6,8 @@ const userSchema = z.object({
 	email: z.string(),
 	fullName: z.string(),
 	userGroupIds: z.array(z.string()),
-	properties: z.record(z.string(), z.unknown())
+	avatarUrl: z.string().nullable().default(null),
+	avatarEditable: z.boolean().default(false)
 });
 
 //#endregion

package/dist/cli.js

@@ -2,26 +2,30 @@
 import { version } from "./package.js";
 import { requireDefined } from "./assertions.js";
 import { fetchSoftrEnvInput, metadataSourceFromEnv } from "./codegen/fetch-metadata.js";
-import { renderUserPropertiesDoc } from "./codegen/datasource-docs.js";
 import { renderUserGroupsDoc } from "./codegen/user-groups.js";
 import { renderSoftrEnv } from "./codegen/softr-env.js";
+import { renderSoftrFields } from "./codegen/softr-fields.js";
 import { writeIfChanged } from "./codegen/write-if-changed.js";
 import { writeDatasourceDocs } from "./codegen/write-datasource-docs.js";
-import { loadSoftrConfig } from "./softr-config.schema.js";
-import { rmSync, writeFileSync } from "node:fs";
+import { writeFileSync } from "node:fs";
 import path from "node:path";
 import { parseArgs } from "node:util";
 
 //#region src/cli.ts
 const OUTPUT = "softr-env.d.ts";
+const FIELDS_OUTPUT = "src/softr-fields.ts";
 const DOCS_DIR = "docs/datasources";
 const USER_GROUPS_DOC = "docs/user-groups.md";
-const USER_PROPERTIES_DOC = "docs/user-properties.md";
 async function generate({ json }) {
 	if (json) console.info = console.error;
-	const input = await fetchSoftrEnvInput(metadataSourceFromEnv(), loadSoftrConfig(process.cwd()).user?.properties ?? {});
+	const input = await fetchSoftrEnvInput(metadataSourceFromEnv());
 	writeFileSync(path.resolve(process.cwd(), OUTPUT), renderSoftrEnv(input, version), "utf8");
 	const report = writeDocs(input);
+	report.docs.push({
+		subject: "field shapes",
+		path: FIELDS_OUTPUT,
+		changed: writeIfChanged(path.resolve(process.cwd(), FIELDS_OUTPUT), renderSoftrFields(input.datasources, version))
+	});
 	if (json) {
 		process.stdout.write(`${JSON.stringify(report)}\n`);
 		return;
@@ -29,30 +33,18 @@ async function generate({ json }) {
 	printReport(report);
 }
 function writeDocs(input) {
-	if (input.users === null) rmSync(path.resolve(process.cwd(), USER_PROPERTIES_DOC), { force: true });
 	const datasourceDocs = writeDatasourceDocs(input.datasources, path.resolve(process.cwd(), DOCS_DIR));
 	return {
 		types: OUTPUT,
-		docs: [
-			{
-				subject: "datasources",
-				path: `${DOCS_DIR}/README.md`,
-				changed: datasourceDocs.changed
-			},
-			{
-				subject: "user groups",
-				path: USER_GROUPS_DOC,
-				changed: writeIfChanged(path.resolve(process.cwd(), USER_GROUPS_DOC), renderUserGroupsDoc(input.userGroups))
-			},
-			...input.users === null ? [] : [{
-				subject: "user properties",
-				path: USER_PROPERTIES_DOC,
-				changed: writeIfChanged(path.resolve(process.cwd(), USER_PROPERTIES_DOC), renderUserPropertiesDoc(input.users, {
-					datasources: new Map(input.datasources.map((d) => [d.id, d])),
-					fileNames: datasourceDocs.fileNames
-				}))
-			}]
-		],
+		docs: [{
+			subject: "datasources",
+			path: `${DOCS_DIR}/README.md`,
+			changed: datasourceDocs.changed
+		}, {
+			subject: "user groups",
+			path: USER_GROUPS_DOC,
+			changed: writeIfChanged(path.resolve(process.cwd(), USER_GROUPS_DOC), renderUserGroupsDoc(input.userGroups))
+		}],
 		datasources: input.datasources.map(({ id, name }) => ({
 			id,
 			name,

package/dist/codegen/datasource-docs.js

@@ -18,98 +18,6 @@ function renderDatasourceDoc(datasource, context) {
 		...renderExamples(datasource, context.datasources)
 	].join("\n");
 }
-function renderUserPropertiesDoc(users, context) {
-	const aliases = Object.entries(users.properties);
-	assert(aliases.length > 0, "Expected user properties to document, but got none");
-	const [first] = requireDefined(aliases[0]);
-	const registered = linkedDatasource(users.tableId, context.datasources);
-	const types = /* @__PURE__ */ new Set();
-	const sampled = aliases.filter(([, field]) => {
-		const type = fieldTypeLiteral(field);
-		if (types.has(type)) return false;
-		types.add(type);
-		return true;
-	});
-	return [
-		"# User properties",
-		"",
-		`Users datasource: ${displayName(users.name) || users.tableId}  `,
-		`Datasource ID: ${users.datasourceId}` + (registered === void 0 ? "" : `  \nRegistered as: [${datasourceLabel(registered)}](./datasources/${requireDefined(context.fileNames.get(registered.id))}) (${registered.id})`),
-		"",
-		"> This document is generated automatically when softr.json's `user.properties` or the users table changes.",
-		"",
-		"Each alias below is declared in softr.json under `user.properties`, and read as `user.properties.<alias>`.",
-		"",
-		"## Field reference",
-		"",
-		...aliases.flatMap(([alias, field]) => {
-			const linkedId = option(field.options, "linkedTableId");
-			const linked = typeof linkedId === "string" ? linkedDatasource(linkedId, context.datasources) : void 0;
-			return [
-				`### ${alias}`,
-				"",
-				`- Field: ${displayName(field.name)}`,
-				`- ID: ${field.id}`,
-				`- Type: ${fieldTypeLiteral(field).slice(1, -1)}`,
-				...optionLines(field),
-				...choiceLines(field),
-				...typeof linkedId !== "string" ? [] : linked === void 0 ? [`- Links to: ${linkedId}, not registered`] : [`- Links to: [${datasourceLabel(linked)}](./datasources/${requireDefined(context.fileNames.get(linked.id))}) (${linked.id})`],
-				""
-			];
-		}),
-		"## Read shape",
-		"",
-		"In a component:",
-		"",
-		"```tsx",
-		"import { useCurrentUser } from '@softr/sdk'",
-		"",
-		"const user = useCurrentUser()",
-		"if (user === null) return null",
-		"",
-		...sampled.map(([alias, field]) => `user.properties.${alias} // ${fieldTypeLiteral(field).slice(1, -1)}`),
-		"```",
-		"",
-		"In a route's `beforeLoad`, to send a visitor elsewhere. It guards navigation only, not data:",
-		"",
-		"```tsx",
-		"import { createFileRoute, redirect } from '@tanstack/react-router'",
-		"import { assertRouteAccess, defineVisibility } from '@softr/sdk'",
-		"",
-		"const visibility = defineVisibility({ userGroupTypes: ['LOGGED_IN_USERS'] })",
-		"",
-		"export const Route = createFileRoute('/example')({",
-		"  beforeLoad: (opts) => {",
-		"    assertRouteAccess(visibility, opts)",
-		`    if (opts.context.user.properties.${first} == null) throw redirect({ to: '/' })`,
-		"  },",
-		"})",
-		"```",
-		"",
-		"In a server function, called from a route's `loader`. The handler checks the visitor itself:",
-		"",
-		"```tsx",
-		"import { createFileRoute } from '@tanstack/react-router'",
-		"import { createServerFn } from '@tanstack/react-start'",
-		"",
-		`const get${pascalCase(first)} = createServerFn().handler(async ({ context }) => {`,
-		"  if (!context.user) throw new Error('Not signed in')",
-		`  return context.user.properties.${first}`,
-		"})",
-		"",
-		"export const Route = createFileRoute('/example')({",
-		`  loader: () => get${pascalCase(first)}(),`,
-		"  component: Example,",
-		"})",
-		"",
-		"function Example() {",
-		`  const ${first} = Route.useLoaderData()`,
-		"  // ...",
-		"}",
-		"```",
-		""
-	].join("\n");
-}
 /** Two trailing spaces are a markdown hard break, which keeps the block one paragraph. */
 function summary(datasource, context) {
 	const lines = [`Datasource ID: ${datasource.id}`];
@@ -407,4 +315,4 @@ function words(value) {
 }
 
 //#endregion
-export { renderDatasourceDoc, renderDatasourceIndex, renderUserPropertiesDoc };
+export { renderDatasourceDoc, renderDatasourceIndex };

package/dist/codegen/datasource-types.js

@@ -251,21 +251,6 @@ function linkedRecord(options, context) {
 	if (linked === void 0 || linked.primaryFieldId === "") return "LinkedRecord";
 	return `LinkedRecord<NonNullable<${`${nameOf(linked.id, context)}Read[${quote(linked.primaryFieldId)}]`}>>`;
 }
-/** `SoftrUserProperties`, each alias typed as its field reads. */
-function renderUserProperties(properties, datasources) {
-	const context = {
-		datasources: byId(datasources),
-		names: typeNames(datasources)
-	};
-	return [
-		"interface SoftrUserProperties {",
-		...Object.entries(properties).map(([alias, field]) => indent(readMember({
-			...field,
-			id: alias
-		}, context))),
-		"}"
-	].join("\n");
-}
 function renderRegistry(datasources, context) {
 	return [
 		"interface SoftrDatasources {",
@@ -509,4 +494,4 @@ function indent(block) {
 }
 
 //#endregion
-export { choiceEntries, fieldTypeLiteral, isWritable, linkedDatasource, option, readExample, renderDatasourceTypes, renderUserProperties, resolvedShape, scalarExample, underlyingType };
+export { choiceEntries, fieldTypeLiteral, isWritable, linkedDatasource, option, readExample, renderDatasourceTypes, resolvedShape, scalarExample, underlyingType };