@softr/sdk 0.0.78-alpha.2 → 0.0.78

package/dist/index.d.ts

@@ -1,9 +1,8 @@
-import { SoftrUserGroupId, SoftrUserGroups, User } from "./auth/user.js";
-import { ActionPermissions, SoftrDatasources, defineAiAction, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { SoftrUserGroupId, SoftrUserGroups, SoftrUserProperties, User } from "./auth/user.js";
+import { ActionPermissions, SoftrDatasources, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { FileAttachment } from "./core/file-upload.js";
 import { FileItem, useFileUpload } from "./core/use-file-upload.js";
 import { CommentAttachmentInput, CommentMention, CommentThread, CommentView } from "./comments/comments.js";
-import { AiAnswer, AiFile, AiGenerateInit, AiMessage, AiUsage } from "./core/ai.js";
 import { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting } from "./formatting.js";
 import { SoftrContext } from "./auth/context.js";
 import { AuthSettings } from "./auth/platform.js";
@@ -19,4 +18,4 @@ import { useUserTimezone } from "./timezone.js";
 import { PwaInstall, PwaPlatform, SoftrPwaHead, usePwaInstall } from "./pwa.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./route/audience.js";
-export { type ActionPermissions, type AiAnswer, type AiFile, type AiGenerateInit, type AiMessage, type AiUsage, Audience, type AuthOptions, type AuthSettings, AuthSettingsProvider, type CommentAttachmentInput, type CommentMention, type CommentThread, type CommentView, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FieldShape, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type Page, type PageSettings, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, type SoftrFieldRegistry, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type User, type WeekDay, assertRouteAccess, checkAccess, defineAiAction, defineComments, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };
+export { type ActionPermissions, Audience, type AuthOptions, type AuthSettings, AuthSettingsProvider, type CommentAttachmentInput, type CommentMention, type CommentThread, type CommentView, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FieldShape, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type Page, type PageSettings, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, type SoftrFieldRegistry, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type SoftrUserProperties, type User, type WeekDay, assertRouteAccess, checkAccess, defineComments, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };

package/dist/index.js

@@ -1,5 +1,5 @@
 import { useFileUpload } from "./core/use-file-upload.js";
-import { defineAiAction, defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { defineComments, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./route/visibility.js";
 import { assertRouteAccess, guardRoute, isAccessError, isAlreadyAuthenticatedError, isForbiddenError, isUnauthenticatedError } from "./route/route.js";
 import { definePage, pageHead } from "./route/page.js";
@@ -14,4 +14,4 @@ import { useUserTimezone } from "./timezone.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./route/audience.js";
 
-export { Audience, AuthSettingsProvider, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineAiAction, defineComments, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };
+export { Audience, AuthSettingsProvider, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineComments, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { DatasourceAction } from "./action.js";
-import * as _tanstack_react_start0 from "@tanstack/react-start";
+import * as _tanstack_react_start5 from "@tanstack/react-start";
 
 //#region src/mcp.d.ts
 
@@ -31,6 +31,6 @@ type SoftrMcpOptions = {
  *   ],
  * }))
  */
-declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>;
+declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start5.RequestMiddlewareAfterServer<{}, undefined, undefined>;
 //#endregion
 export { softrMcpMiddleware };

package/dist/mcp.js

@@ -2,12 +2,12 @@ import { assert } from "./assertions.js";
 import { fetch } from "./fetch.js";
 import { sessionConfig } from "./auth/config.js";
 import { readSessionToken, withSessionToken } from "./auth/session.js";
+import { softrConfig } from "./softr-config.js";
 import { makePlatform, platformApiUrl } from "./auth/platform.js";
 import { isDatasourceAction } from "./action.js";
-import { softrConfig } from "./softr-config.js";
 import { ds } from "./datasource/datasource.js";
-import { createMiddleware } from "@tanstack/react-start";
 import { z } from "zod";
+import { createMiddleware } from "@tanstack/react-start";
 
 //#region src/mcp.ts
 const MCP_PATH = "/_softr/mcp";

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.78-alpha.2";
+var version = "0.0.78";
 
 //#endregion
 export { version };

package/dist/pwa.js

@@ -2,9 +2,9 @@ import { logger } from "./logger.js";
 import { fetch } from "./fetch.js";
 import { sessionConfig } from "./auth/config.js";
 import { platformApiUrl } from "./auth/platform.js";
+import { z } from "zod";
 import { Fragment, createElement, useEffect, useState } from "react";
 import { createMiddleware } from "@tanstack/react-start";
-import { z } from "zod";
 
 //#region src/pwa.ts
 const MANIFEST_PATH = "/manifest.webmanifest";

package/dist/route/route.js

@@ -1,6 +1,6 @@
 import { panic } from "../assertions.js";
-import { ACCESS_REASONS, checkRule } from "./visibility.js";
 import { softrConfig } from "../softr-config.js";
+import { ACCESS_REASONS, checkRule } from "./visibility.js";
 import { redirect } from "@tanstack/react-router";
 
 //#region src/route/route.ts

package/dist/server.d.ts

@@ -1,10 +1,9 @@
 import { upload } from "./core/file-upload.js";
 import { comments } from "./comments/comments.js";
-import { AiError, ai } from "./core/ai.js";
 import { auth } from "./auth/server.js";
 import { FieldChoice, RecordOption, RecordOptions } from "./core/options.js";
 import { ds } from "./datasource/datasource.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
 import "@tanstack/react-start/server-only";
-export { AiError, type FieldChoice, type RecordOption, type RecordOptions, ai, auth, comments, ds, integration, upload, workflow };
+export { type FieldChoice, type RecordOption, type RecordOptions, auth, comments, ds, integration, upload, workflow };

package/dist/server.js

@@ -3,8 +3,7 @@ import { ds } from "./datasource/datasource.js";
 import { auth } from "./auth/server.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
-import { AiError, ai } from "./core/ai.js";
 import { comments } from "./comments/comments.js";
 import "@tanstack/react-start/server-only";
 
-export { AiError, ai, auth, comments, ds, integration, upload, workflow };
+export { auth, comments, ds, integration, upload, workflow };

package/dist/softr-config.schema.js

@@ -1,6 +1,17 @@
+import { throwAtCaller } from "./assertions.js";
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
 import { z } from "zod";
 
 //#region src/softr-config.schema.ts
+const SOFTR_CONFIG_FILE = "softr.json";
+/** The cause is in softr.json, so the app's author can fix it. */
+var SoftrConfigError = class extends Error {
+	name = "SoftrConfigError";
+};
+function panicConfig(message) {
+	throwAtCaller(panicConfig, new SoftrConfigError(message));
+}
 const AccessBehaviour = z.union([
 	z.string(),
 	z.object({
@@ -9,32 +20,49 @@ const AccessBehaviour = z.union([
 	}),
 	z.object({ strategy: z.literal("throw") })
 ], { error: "must be a path like \"/login\", { \"strategy\": \"redirect\", \"to\": \"/login\" } or { \"strategy\": \"throw\" }" });
-const AppPath = z.string().refine((path) => path.startsWith("/") && !path.includes("?") && !path.includes("#") && new URL(path, "https://app.invalid").origin === "https://app.invalid", { error: "must be a path on this app like \"/login\", with no \"?\" or \"#\"" });
-const SoftrConfigSchema = z.object({ auth: z.strictObject({
-	routes: z.strictObject({
-		login: z.strictObject({
-			path: AppPath,
-			redirectParam: z.string()
+const AppPath = z.string().refine((path$1) => path$1.startsWith("/") && !path$1.includes("?") && !path$1.includes("#") && new URL(path$1, "https://app.invalid").origin === "https://app.invalid", { error: "must be a path on this app like \"/login\", with no \"?\" or \"#\"" });
+const SoftrConfigSchema = z.object({
+	auth: z.strictObject({
+		routes: z.strictObject({
+			login: z.strictObject({
+				path: AppPath,
+				redirectParam: z.string()
+			}),
+			resetPassword: z.strictObject({
+				path: AppPath,
+				tokenParam: z.string()
+			}),
+			acceptInvitation: z.strictObject({
+				path: AppPath,
+				tokenParam: z.string()
+			}),
+			magicLink: z.strictObject({
+				path: AppPath,
+				tokenParam: z.string()
+			})
 		}),
-		resetPassword: z.strictObject({
-			path: AppPath,
-			tokenParam: z.string()
-		}),
-		acceptInvitation: z.strictObject({
-			path: AppPath,
-			tokenParam: z.string()
-		}),
-		magicLink: z.strictObject({
-			path: AppPath,
-			tokenParam: z.string()
+		guard: z.strictObject({
+			unauthenticated: AccessBehaviour,
+			forbidden: AccessBehaviour,
+			alreadyAuthenticated: AccessBehaviour
 		})
 	}),
-	guard: z.strictObject({
-		unauthenticated: AccessBehaviour,
-		forbidden: AccessBehaviour,
-		alreadyAuthenticated: AccessBehaviour
-	})
-}) });
+	user: z.strictObject({ properties: z.record(z.string(), z.string()) }).optional()
+});
+function loadSoftrConfig(root) {
+	const file = path.join(root, SOFTR_CONFIG_FILE);
+	if (!existsSync(file)) panicConfig(`${SOFTR_CONFIG_FILE} is missing from ${root}`);
+	const source = readFileSync(file, "utf8");
+	let parsed;
+	try {
+		parsed = JSON.parse(source);
+	} catch (error) {
+		panicConfig(`${SOFTR_CONFIG_FILE} is not valid JSON: ${error instanceof Error ? error.message : error}`);
+	}
+	const result = SoftrConfigSchema.safeParse(parsed);
+	if (!result.success) panicConfig(`${SOFTR_CONFIG_FILE} does not match the schema:\n\n${z.prettifyError(result.error)}`);
+	return result.data;
+}
 
 //#endregion
-export { SoftrConfigSchema };
+export { SOFTR_CONFIG_FILE, SoftrConfigError, loadSoftrConfig, panicConfig };

package/dist/vite.js

@@ -1,12 +1,8 @@
-import { assert, panic } from "./assertions.js";
-import { SoftrConfigSchema } from "./softr-config.schema.js";
-import { existsSync, readFileSync } from "node:fs";
+import { SOFTR_CONFIG_FILE, loadSoftrConfig } from "./softr-config.schema.js";
 import path from "node:path";
-import { z } from "zod";
 import { pathToFileURL } from "node:url";
 
 //#region src/vite.ts
-const SOFTR_CONFIG_FILE = "softr.json";
 function softr() {
 	return [softrConfig(), editEngine()];
 }
@@ -27,20 +23,6 @@ function softrConfig() {
 		}
 	};
 }
-function loadSoftrConfig(root) {
-	const file = path.join(root, SOFTR_CONFIG_FILE);
-	assert(existsSync(file), `${SOFTR_CONFIG_FILE} is missing from ${root}`);
-	const source = readFileSync(file, "utf8");
-	let parsed;
-	try {
-		parsed = JSON.parse(source);
-	} catch (error) {
-		panic(`${SOFTR_CONFIG_FILE} is not valid JSON: ${error instanceof Error ? error.message : error}`);
-	}
-	const result = SoftrConfigSchema.safeParse(parsed);
-	if (!result.success) panic(`${SOFTR_CONFIG_FILE} does not match the schema:\n\n${z.prettifyError(result.error)}`);
-	return result.data;
-}
 /**
 * The edit engine is provided by the pod runtime rather than an app dependency: it is never in the
 * app's `package.json` and never in its `node_modules`. The pod points `SOFTR_EDIT_ENGINE_DIR` at

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.78-alpha.2",
+  "version": "0.0.78",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },

package/schema/softr.schema.json

@@ -54,6 +54,19 @@
       },
       "required": ["routes", "guard"],
       "additionalProperties": false
+    },
+    "user": {
+      "type": "object",
+      "description": "The signed-in user.",
+      "properties": {
+        "properties": {
+          "type": "object",
+          "description": "Fields of the users table the app reads as user.properties, keyed by the name the app uses. Each value is a field id. No other field leaves the server.",
+          "additionalProperties": { "type": "string" }
+        }
+      },
+      "required": ["properties"],
+      "additionalProperties": false
     }
   },
   "required": ["auth"],

package/skills/softr-sdk/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 # Softr SDK core
@@ -18,7 +18,6 @@ metadata:
 > **CRITICAL**: The SDK is split across four entrypoints and the split is enforced. `ds` and `auth` exist only on `@softr/sdk/server` and only run inside a `createServerFn` handler. Importing them anywhere else fails the build.
 > **CRITICAL**: Every route file must declare its audience with `defineVisibility` and guard itself with that rule in `beforeLoad`. There is no default and nothing is inherited from a sibling.
 > **CRITICAL**: The app is already wired. `src/start.ts`, `src/router.tsx` and `src/routes/__root.tsx` register `softrAuthMiddleware` and resolve the session. Do not add a second registration of it. `softrMcpMiddleware` is the one thing an app adds to `src/start.ts` itself — load the `softr-sdk/mcp` sub-skill before doing so.
-> **CRITICAL**: `ai.generate` and `ai.stream` live on `@softr/sdk/server` and only run inside a `createServerFn` handler. Use `defineAiAction` from `@softr/sdk` to declare the action with the model it runs on, an id copied from the `ai_list_models` tool. Softr runs the model on its own keys; never ask the user for an API key for the app's own AI feature. Load the `softr-sdk/ai` sub-skill for the full pattern.
 > **CRITICAL**: `workflow.trigger` lives on `@softr/sdk/server` and only runs inside a `createServerFn` handler. Use `defineWorkflow` from `@softr/sdk` to declare the action, then pass it to `workflow.trigger`. Load the `softr-sdk/workflows` sub-skill for the full pattern.
 
 Each sub-skill stands alone for its task and repeats the boundary above, so most work needs **one** sub-skill and not this file. Load this one when you are unsure which sub-skill applies, or when the wiring below is what you are touching. Add a second sub-skill only when the work genuinely crosses that boundary: a page that lists records behind a group restriction needs `record-queries` plus `routes-and-visibility`.
@@ -27,8 +26,8 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 
 | Import | Runs | Holds |
 | --- | --- | --- |
-| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineComments`, `defineAiAction`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `FormattedDate`, `FormattingScope`, `useFormatting`, `formatDate`, `formatDateTime`, `formatNumber`, `formatValue`, `formatField`, `fieldShape`, `registerSoftrFields`, `useOverrides`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
-| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration`, `comments`, `ai` |
+| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineComments`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `FormattedDate`, `FormattingScope`, `useFormatting`, `formatDate`, `formatDateTime`, `formatNumber`, `formatValue`, `formatField`, `fieldShape`, `registerSoftrFields`, `useOverrides`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
+| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration`, `comments` |
 | `@softr/sdk/client` | Browser only | `useFileUpload`, `useCommentComposer` |
 | `@softr/sdk/vite` | Build | `softr()`, already in `vite.config.ts` |
 
@@ -44,8 +43,7 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 | Create, update or delete a record | [record-mutations/SKILL.md](./record-mutations/SKILL.md) |
 | Trigger a Softr workflow | [workflows/SKILL.md](./workflows/SKILL.md) |
 | Sign a visitor in, out, or up | [auth/SKILL.md](./auth/SKILL.md) |
-| Ask an AI model: a summary, an extraction from a document, a classification, a draft, a chat | [ai/SKILL.md](./ai/SKILL.md) |
-| Call a connected third-party API (Slack, Stripe, Gmail, …), or an AI model on the user's own provider account | [integrations/SKILL.md](./integrations/SKILL.md) |
+| Call a connected third-party API (Slack, Stripe, Gmail, …) | [integrations/SKILL.md](./integrations/SKILL.md) |
 | Open the app to AI assistants over MCP | [mcp/SKILL.md](./mcp/SKILL.md) |
 | Let visitors install the app on their home screen | [pwa/SKILL.md](./pwa/SKILL.md) |
 | Show a date, a time or a number | [formatting/SKILL.md](./formatting/SKILL.md) |
@@ -78,15 +76,9 @@ Triggering a Softr workflow from a button or form?
 Wiring a login, signup, or sign-out?
   load softr-sdk/auth
 
-Asking an AI model for anything: a summary, fields out of a document, a classification, a draft, a chat?
-  load softr-sdk/ai — Softr runs the model on its own keys, nothing to connect; pick the model from ai_list_models
-
 Calling a connected third-party API (Slack, Stripe, Gmail, Google Calendar, …)?
   load softr-sdk/integrations
 
-Running a model on the user's OWN provider account, because they asked for that?
-  load softr-sdk/integrations: its "Calling an AI model" section
-
 Opening the app to an AI assistant over MCP?
   load softr-sdk/mcp
 

package/skills/softr-sdk/auth/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/comments/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `comments` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler. Importing it into a component fails the build. `useCommentComposer` lives on `@softr/sdk/client` and runs in components. `defineComments` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 # The current user

package/skills/softr-sdk/file-uploads/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `upload` lives on `@softr/sdk/server` and runs inside server functions. `useFileUpload` and `FileItem` live on `@softr/sdk` and run in components. `FileAttachment` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/formatting/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 # Dates, times and numbers

package/skills/softr-sdk/integrations/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `integration` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineIntegration` and every type come from `@softr/sdk` and can be imported anywhere.
@@ -126,9 +126,9 @@ Do not add an `Authorization` key to `headers` — Softr injects the integration
 
 ## Calling an AI model
 
-**This is the path for the user's own provider account only.** An AI feature of the app's own — a summary, an extraction, a chat — runs on Softr's keys through an AI action, with nothing to connect and no key to ask for: load the `ai` sub-skill for it. Call a model through an integration only when the user asked to use their own OpenAI, Anthropic or Gemini account, and had it connected.
-
-An AI integration is called like any other. For `ANTHROPIC_AI`, the action is `POST` on
+A button on one record that hands its fields to the model and shows the answer is the `ai-action` pattern:
+it carries this call and the model id, so write the call by hand only for another shape — a batch, a chat,
+a field the model fills on create. An AI integration is called like any other. For `ANTHROPIC_AI`, the action is `POST` on
 `https://api.anthropic.com/v1/messages`, the request carries the `anthropic-version` header and a body of
 `model`, `max_tokens`, `system` and `messages`, and the answer's text is in `content[].text`:
 

package/skills/softr-sdk/mcp/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `softrMcpMiddleware` lives on `@softr/sdk` and is registered once, in `src/start.ts`. The actions you hand it are the same `defineQuery` / `defineMutation` values the app's own pages use — declared wherever they already live, not duplicated for MCP.

package/skills/softr-sdk/pwa/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 # Installing the app

package/skills/softr-sdk/record-mutations/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineMutation` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/record-queries/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. The same holds for any helper that calls `ds`: declare it inside the handler. A function at module level that calls `ds` keeps the server-only import in the browser bundle, and every page stops loading until it moves. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/region-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `Audience` and `defineVisibility` come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `defineVisibility`, the access functions and the error predicates come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/workflows/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.77
+  library_version: 0.0.78
 ---
 
 **Boundary.** `workflow` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineWorkflow` and every type come from `@softr/sdk` and can be imported anywhere.

package/dist/core/ai.d.ts

@@ -1,76 +0,0 @@
-import { AiAction } from "../action.js";
-
-//#region src/core/ai.d.ts
-/** A document or image the model reads, by the URL the app holds it under: one of its own uploads, as a rule. */
-interface AiFile {
-  /** An https URL Softr may fetch. */
-  url: string;
-  /** The file's type when the URL does not say, such as `application/pdf`. */
-  mimeType?: string;
-}
-/** One earlier turn of a conversation. */
-interface AiMessage {
-  role: 'user' | 'assistant';
-  content: string;
-}
-interface AiGenerateInit {
-  /** What the model is and the rules it answers under. */
-  system?: string;
-  /** The earlier turns of a conversation, oldest first, before the prompt. Leave out for a one-shot call. */
-  messages?: ReadonlyArray<AiMessage>;
-  /** What it is asked, with the facts it is given. */
-  prompt: string;
-  /**
-   * A JSON schema the answer has to match. With it, the model is asked for JSON only and the
-   * answer comes back parsed in `json` as well as written in `text`.
-   */
-  schema?: Record<string, unknown>;
-  /** Documents and images the model reads alongside the prompt. */
-  files?: ReadonlyArray<AiFile>;
-  /** A cap on the answer's length, in tokens; Softr caps it further. */
-  maxOutputTokens?: number;
-  /**
-   * How hard a reasoning model thinks before it answers. A model that does not reason ignores it;
-   * the catalog says which do. Left out, the provider's default applies.
-   */
-  reasoning?: 'low' | 'medium' | 'high';
-  /** How varied the answer is, 0 to 1: 0 for an extraction, higher for a draft. A low default when left out. */
-  temperature?: number;
-  signal?: AbortSignal;
-}
-interface AiUsage {
-  inputTokens: number;
-  outputTokens: number;
-}
-interface AiAnswer {
-  /** The answer as the model wrote it. */
-  text: string;
-  /** The answer parsed as JSON when `schema` was given and the model kept to it; `null` otherwise. */
-  json: unknown;
-  usage: AiUsage;
-  /** The model that answered. */
-  model: string;
-}
-/**
- * Thrown when the model call was refused or failed. `status` is the HTTP status Softr answered
- * with; 402 means the workspace has no AI credits left.
- */
-declare class AiError extends Error {
-  readonly status: number;
-  constructor(status: number, message: string);
-}
-/** Runs the action once and answers when the model is done. */
-declare function aiGenerate(action: AiAction, init: AiGenerateInit): Promise<AiAnswer>;
-/**
- * Runs the action and answers while the model writes. The returned `Response` body is a stream of
- * Server-Sent Events, one JSON object per `data:` line: `{ "text": "..." }` for each piece of the
- * answer, then `{ "done": true, "usage": {...}, "model": "..." }`, or `{ "error": "..." }` in its
- * place. Hand it to the browser as a `Response` with `Content-Type: text/event-stream`.
- */
-declare function aiStream(action: AiAction, init: AiGenerateInit): Promise<Response>;
-declare const ai: {
-  generate: typeof aiGenerate;
-  stream: typeof aiStream;
-};
-//#endregion
-export { AiAnswer, AiError, AiFile, AiGenerateInit, AiMessage, AiUsage, ai };

package/dist/core/ai.js

@@ -1,64 +0,0 @@
-import { fetch } from "../fetch.js";
-import { readSessionToken } from "../auth/session.js";
-import { describeFailure, dsUrl, refererHeader } from "../datasource/record.js";
-
-//#region src/core/ai.ts
-/**
-* Thrown when the model call was refused or failed. `status` is the HTTP status Softr answered
-* with; 402 means the workspace has no AI credits left.
-*/
-var AiError = class extends Error {
-	status;
-	constructor(status, message) {
-		super(message);
-		this.name = "AiError";
-		this.status = status;
-	}
-};
-function body(init) {
-	return JSON.stringify({
-		system: init.system,
-		messages: init.messages,
-		prompt: init.prompt,
-		schema: init.schema,
-		files: init.files,
-		maxOutputTokens: init.maxOutputTokens,
-		reasoning: init.reasoning,
-		temperature: init.temperature
-	});
-}
-async function post(action, path, init) {
-	if (init.signal?.aborted) throw init.signal.reason ?? new DOMException("The operation was aborted.", "AbortError");
-	const res = await fetch(`${dsUrl(action.id)}/${path}`, {
-		method: "POST",
-		headers: {
-			"Content-Type": "application/json",
-			"Authorization": `Bearer ${readSessionToken()}`,
-			...refererHeader()
-		},
-		body: body(init),
-		signal: init.signal
-	});
-	if (!res.ok) throw new AiError(res.status, `AI call "${action.id}" failed: ${await describeFailure(res)}`);
-	return res;
-}
-/** Runs the action once and answers when the model is done. */
-async function aiGenerate(action, init) {
-	return await (await post(action, "softr-ai/generate", init)).json();
-}
-/**
-* Runs the action and answers while the model writes. The returned `Response` body is a stream of
-* Server-Sent Events, one JSON object per `data:` line: `{ "text": "..." }` for each piece of the
-* answer, then `{ "done": true, "usage": {...}, "model": "..." }`, or `{ "error": "..." }` in its
-* place. Hand it to the browser as a `Response` with `Content-Type: text/event-stream`.
-*/
-async function aiStream(action, init) {
-	return post(action, "softr-ai/generate/stream", init);
-}
-const ai = {
-	generate: aiGenerate,
-	stream: aiStream
-};
-
-//#endregion
-export { AiError, ai };