@softr/sdk 0.0.89-alpha.4 → 0.0.90-alpha.0

package/dist/agent/agent-fns.js

@@ -1,8 +1,8 @@
 import { assert } from "../assertions.js";
+import { softrApiUrl } from "../softr-api.js";
 import { fetch } from "../fetch.js";
 import { sessionConfig } from "../auth/config.js";
 import { readSessionToken } from "../auth/session.js";
-import { softrApiUrl } from "../softr-api.js";
 import { describeFailure, refererHeader } from "../datasource/record.js";
 import { z } from "zod";
 import { createServerFn } from "@tanstack/react-start";

package/dist/auth/platform.js

@@ -1,8 +1,8 @@
 import { assert, panic } from "../assertions.js";
+import { softrApiUrl } from "../softr-api.js";
 import { fetch } from "../fetch.js";
 import { softrConfig } from "../softr-config.js";
 import { permissionsSchema } from "./permissions.js";
-import { softrApiUrl } from "../softr-api.js";
 import { z } from "zod";
 
 //#region src/auth/platform.ts

package/dist/core/file-upload.js

@@ -1,7 +1,8 @@
+import { softrApiUrl } from "../softr-api.js";
 import { fetch } from "../fetch.js";
 import { sessionConfig } from "../auth/config.js";
 import { readSessionToken } from "../auth/session.js";
-import { softrApiUrl } from "../softr-api.js";
+import { describeFailure } from "../datasource/record.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/core/file-upload.ts
@@ -18,7 +19,7 @@ async function upload(action, file) {
 		headers: token ? { Authorization: `Bearer ${token}` } : {},
 		body: formData
 	});
-	if (!res.ok) throw new Error(`File upload failed: ${res.status}`);
+	if (!res.ok) throw new Error(`File upload failed: ${await describeFailure(res)}`);
 	const resultJSON = await res.json();
 	return {
 		url: resultJSON.url,

package/dist/core/workflow.js

@@ -1,7 +1,8 @@
+import { softrApiUrl } from "../softr-api.js";
 import { fetch } from "../fetch.js";
 import { sessionConfig } from "../auth/config.js";
 import { readSessionToken } from "../auth/session.js";
-import { softrApiUrl } from "../softr-api.js";
+import { describeFailure } from "../datasource/record.js";
 
 //#region src/core/workflow.ts
 const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
@@ -14,7 +15,7 @@ async function triggerWorkflow(action, payload) {
 		},
 		body: JSON.stringify({ input: payload ?? {} })
 	});
-	if (!triggerRes.ok) throw new Error(`Workflow trigger failed: ${triggerRes.status}`);
+	if (!triggerRes.ok) throw new Error(`Workflow trigger failed: ${await describeFailure(triggerRes)}`);
 	let details = await triggerRes.json();
 	while (details.status !== "FINISHED") {
 		if (details.status === "PENDING_INTERACTION") for (const interaction of details.nextInteractions) {
@@ -23,11 +24,11 @@ async function triggerWorkflow(action, payload) {
 				headers: { "Content-Type": "application/json" },
 				body: "{}"
 			});
-			if (!interactionRes.ok) throw new Error(`Workflow interaction failed: ${interactionRes.status}`);
+			if (!interactionRes.ok) throw new Error(`Workflow interaction failed: ${await describeFailure(interactionRes)}`);
 		}
 		await sleep(1e3);
 		const detailsRes = await fetch(`${softrApiUrl("SOFTR_WORKFLOWS_API_URL")}/v1/workflows/${action.resource.workflowId}/executions/${details.id}/details`);
-		if (!detailsRes.ok) throw new Error(`Workflow status check failed: ${detailsRes.status}`);
+		if (!detailsRes.ok) throw new Error(`Workflow status check failed: ${await describeFailure(detailsRes)}`);
 		details = await detailsRes.json();
 	}
 }

package/dist/datasource/record.js

@@ -1,8 +1,8 @@
 import { assert, panic } from "../assertions.js";
+import { softrApiUrl } from "../softr-api.js";
 import { fetch } from "../fetch.js";
 import { readUserTimezone } from "../cookies.js";
 import { readSessionToken } from "../auth/session.js";
-import { softrApiUrl } from "../softr-api.js";
 import { isDatasourceAction } from "../action.js";
 import { buildFilterCriteria, buildOrderBy, dealiasFilterCriteria, dealiasOrderBy } from "./filter.js";
 import { andAll, makeFieldSet, makeSortSet } from "./fields.js";

package/dist/fetch.js

@@ -1,9 +1,29 @@
+import { version } from "./package.js";
+import { assert, requireDefined } from "./assertions.js";
 import { logger } from "./logger.js";
+import { softrApiUrl } from "./softr-api.js";
 
 //#region src/fetch.ts
 const fetch = async (input, init) => {
-	if (process.env.NODE_ENV === "production") return globalThis.fetch(input, init);
 	const url = input instanceof Request ? input.url : String(input);
+	if ([
+		softrApiUrl("SOFTR_PLATFORM_API_URL"),
+		softrApiUrl("SOFTR_DATASOURCE_API_URL"),
+		softrApiUrl("SOFTR_WORKFLOWS_API_URL")
+	].some((base) => url.startsWith(`${base}/`))) {
+		const headers = new Headers(init?.headers ?? (input instanceof Request ? input.headers : void 0));
+		headers.set("user-agent", `softr-sdk/${version}`);
+		init = {
+			...init,
+			headers
+		};
+		const signed = await sign(input, init);
+		if (signed) {
+			input = signed;
+			init = void 0;
+		}
+	}
+	if (process.env.NODE_ENV === "production") return globalThis.fetch(input, init);
 	const method = init?.method ?? (input instanceof Request ? input.method : "GET");
 	const started = Date.now();
 	try {
@@ -16,6 +36,48 @@ const fetch = async (input, init) => {
 		throw error;
 	}
 };
+/**
+* RFC 9421 signature over the request, with the key Studio handed the app at publish or session start. The SDK
+* never derives, rotates or inspects the key: Softr derives it from a master key and the app's nonce, and the key
+* id (`<environment>/<applicationId>/<master number>`) is copied into the signature as is so the verifier can
+* derive the same key.
+*
+* The signature covers the method, authority, path, query and, when sent, the Authorization header. The body is
+* not covered: TLS protects it in transit, and signing is there to tell the app's own server from anyone holding a
+* user token, which needs no body coverage. So nothing is buffered here and the body streams through as given.
+*/
+async function sign(input, init) {
+	const key = process.env.SOFTR_REQUEST_SIGNING_KEY;
+	const keyId = process.env.SOFTR_REQUEST_SIGNING_KEY_ID;
+	if (!key || !keyId) return void 0;
+	assert(/^[0-9a-f]{64}$/i.test(key), "SOFTR_REQUEST_SIGNING_KEY must be 64 hex characters");
+	assert(!/["\\]/.test(keyId), "SOFTR_REQUEST_SIGNING_KEY_ID must not contain quotes or backslashes");
+	const request = new Request(input, init);
+	const headers = new Headers(request.headers);
+	const { host, pathname, search } = new URL(request.url);
+	const derived = {
+		"@method": request.method,
+		"@authority": host,
+		"@path": pathname,
+		"@query": search || "?"
+	};
+	const fields = Object.keys(derived);
+	if (headers.has("authorization")) fields.push("authorization");
+	const created = Math.floor(Date.now() / 1e3);
+	const params = `(${fields.map((field) => `"${field}"`).join(" ")});created=${created};keyid="${keyId}";tag="softr-code-app"`;
+	const base = [...fields.map((field) => `"${field}": ${derived[field] ?? requireDefined(headers.get(field), field)}`), `"@signature-params": ${params}`].join("\n");
+	const hmacKey = await crypto.subtle.importKey("raw", Uint8Array.from(key.match(/../g) ?? [], (byte) => parseInt(byte, 16)), {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	const signature = base64(await crypto.subtle.sign("HMAC", hmacKey, new TextEncoder().encode(base)));
+	headers.set("signature-input", `softr=${params}`);
+	headers.set("signature", `softr=:${signature}:`);
+	return new Request(request, { headers });
+}
+function base64(bytes) {
+	return btoa(String.fromCharCode(...new Uint8Array(bytes)));
+}
 
 //#endregion
 export { fetch };

package/dist/formatting.d.ts

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import * as react2 from "react";
+import * as react0 from "react";
 import { ReactNode } from "react";
 
 //#region src/formatting.d.ts
@@ -94,7 +94,7 @@ declare function FormattingScope({
   /** A BCP 47 locale, such as `de-DE`. It drops the app's fixed date format inside the scope. */
   locale?: string;
   children?: ReactNode;
-}): react2.FunctionComponentElement<react2.ProviderProps<Scope>>;
+}): react0.FunctionComponentElement<react0.ProviderProps<Scope>>;
 /**
  * A date in the app's format, safe to render on the server. A timestamp whose
  * zone is not known yet renders `fallback` until the browser supplies it, so
@@ -115,6 +115,6 @@ declare function FormattedDate({
   time?: boolean;
   /** What renders while the visitor's zone is unknown. */
   fallback?: ReactNode;
-}): react2.FunctionComponentElement<react2.FragmentProps>;
+}): react0.FunctionComponentElement<react0.FragmentProps>;
 //#endregion
 export { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { useFileUpload } from "./core/use-file-upload.js";
 import { defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { useFileUpload } from "./core/use-file-upload.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./route/visibility.js";
 import { assertRouteAccess, guardRoute, isAccessError, isAlreadyAuthenticatedError, isForbiddenError, isUnauthenticatedError } from "./route/route.js";
 import { definePage, pageHead } from "./route/page.js";

package/dist/locale-settings.js

@@ -1,8 +1,8 @@
 import { logger } from "./logger.js";
+import { softrApiUrl } from "./softr-api.js";
 import { fetch } from "./fetch.js";
 import { readRequestCookies, serializeCookie, writeCookies } from "./cookies.js";
 import { sessionConfig } from "./auth/config.js";
-import { softrApiUrl } from "./softr-api.js";
 import { localeSettingsSchema } from "./formatting.js";
 import { getRequestProtocol } from "@tanstack/react-start/server";
 

package/dist/mcp.d.ts

@@ -1,5 +1,5 @@
 import { DatasourceAction } from "./action.js";
-import * as _tanstack_react_start0 from "@tanstack/react-start";
+import * as _tanstack_react_start6 from "@tanstack/react-start";
 
 //#region src/mcp.d.ts
 
@@ -31,6 +31,6 @@ type SoftrMcpOptions = {
  *   ],
  * }))
  */
-declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start0.RequestMiddlewareAfterServer<{}, undefined, undefined>;
+declare function softrMcpMiddleware(options?: SoftrMcpOptions): _tanstack_react_start6.RequestMiddlewareAfterServer<{}, undefined, undefined>;
 //#endregion
 export { softrMcpMiddleware };

package/dist/mcp.js

@@ -1,9 +1,9 @@
 import { assert } from "./assertions.js";
+import { softrApiUrl } from "./softr-api.js";
 import { fetch } from "./fetch.js";
 import { softrConfig } from "./softr-config.js";
 import { sessionConfig } from "./auth/config.js";
 import { readSessionToken, withSessionToken } from "./auth/session.js";
-import { softrApiUrl } from "./softr-api.js";
 import { isDatasourceAction } from "./action.js";
 import { makePlatform } from "./auth/platform.js";
 import { ds } from "./datasource/datasource.js";

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.89-alpha.4";
+var version = "0.0.90-alpha.0";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -1,4 +1,4 @@
-import * as react0 from "react";
+import * as react4 from "react";
 import "@tanstack/react-start";
 
 //#region src/pwa.d.ts
@@ -23,7 +23,7 @@ import "@tanstack/react-start";
  *   )
  * }
  */
-declare function SoftrPwaHead(): react0.FunctionComponentElement<react0.FragmentProps>;
+declare function SoftrPwaHead(): react4.FunctionComponentElement<react4.FragmentProps>;
 type PwaPlatform = "ios" | "android" | "desktop";
 type PwaInstall = {
   available: false;

package/dist/pwa.js

@@ -1,7 +1,7 @@
 import { logger } from "./logger.js";
+import { softrApiUrl } from "./softr-api.js";
 import { fetch } from "./fetch.js";
 import { sessionConfig } from "./auth/config.js";
-import { softrApiUrl } from "./softr-api.js";
 import { z } from "zod";
 import { Fragment, createElement, useEffect, useState } from "react";
 import { createMiddleware } from "@tanstack/react-start";
@@ -125,7 +125,7 @@ function usePwaInstall() {
 	useEffect(() => {
 		if (window.matchMedia("(display-mode: standalone)").matches || "standalone" in navigator && navigator.standalone === true) return;
 		let cancelled = false;
-		fetch(INSTALL_PATH, { headers: { accept: "application/json" } }).then(async (response) => {
+		globalThis.fetch(INSTALL_PATH, { headers: { accept: "application/json" } }).then(async (response) => {
 			if (!response.ok) return;
 			const parsed = installSchema.safeParse(await response.json());
 			if (!parsed.success || cancelled) return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.89-alpha.4",
+  "version": "0.0.90-alpha.0",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },

package/skills/softr-sdk/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 # Softr SDK core

package/skills/softr-sdk/agent-chat/SKILL.md

@@ -12,7 +12,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `listAgents` and `useAgentChat` live on `@softr/sdk`. `listAgents` runs in a route loader, `useAgentChat` in a component. Neither needs a route, server function or registration of its own. It chats as the signed-in visitor, or anonymously when no one is signed in.

package/skills/softr-sdk/auth/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/current-user/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 # The current user

package/skills/softr-sdk/file-uploads/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `upload` lives on `@softr/sdk/server` and runs inside server functions. `useFileUpload` and `FileItem` live on `@softr/sdk` and run in components. `FileAttachment` comes from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/formatting/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 # Dates, times and numbers

package/skills/softr-sdk/integrations/SKILL.md

@@ -7,7 +7,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `integration` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineIntegration` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/mcp/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `softrMcpMiddleware` lives on `@softr/sdk` and is registered once, in `src/start.ts`. The actions you hand it are the same `defineQuery` / `defineMutation` values the app's own pages use — declared wherever they already live, not duplicated for MCP.

package/skills/softr-sdk/pwa/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 # Installing the app

package/skills/softr-sdk/record-mutations/SKILL.md

@@ -8,7 +8,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineMutation` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/record-queries/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. The same holds for any helper that calls `ds`: declare it inside the handler. A function at module level that calls `ds` keeps the server-only import in the browser bundle, and every page stops loading until it moves. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.

package/skills/softr-sdk/region-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `Audience` and `defineVisibility` come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/routes-and-visibility/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `definePage`, `pageHead`, the access functions and the error predicates come from `@softr/sdk` and work anywhere.

package/skills/softr-sdk/workflows/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.89-alpha.4
+  library_version: 0.0.90-alpha.0
 ---
 
 **Boundary.** `workflow` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineWorkflow` and every type come from `@softr/sdk` and can be imported anywhere.