@softr/sdk 0.0.97-alpha.2 → 0.0.98-anonsession.0

package/dist/action.d.ts

@@ -234,50 +234,6 @@ type IntegrationDefinition<TId extends string> = {
  * const res = await listEvents({ query: { timeMin: now, singleEvents: "true" } })
  */
 declare function defineIntegration<const TId extends string>(definition: IntegrationDefinition<TId>): IntegrationAction<TId>;
-type EmailInputs = {
-  senderId?: string;
-  to?: ReadonlyArray<string>;
-  cc?: ReadonlyArray<string>;
-  bcc?: ReadonlyArray<string>;
-  replyTo?: string;
-};
-type EmailResource = {
-  type: "SOFTR_EMAIL";
-  inputs: EmailInputs;
-};
-type EmailAction<TId extends string = string> = Action<EmailResource> & {
-  id: TId;
-};
-type EmailDefinition<TId extends string> = EmailInputs & {
-  id: TId;
-  permissions: ActionPermissions;
-};
-/**
- * Declares an email action: who may send it, and the fields every email it sends keeps whatever the
- * call says. Softr sends it from the app's email sender and bills the workspace's workflow credits.
- *
- * - `to`, `cc`, `bcc`: addresses. An element may be a whole `{LOGGED_IN_USER:EMAIL}` or
- *   `{LOGGED_IN_USER:<field>}` placeholder, filled in for the signed-in sender.
- * - `replyTo`: an address or one such placeholder.
- * - `senderId`: one of the workspace's email senders, for an email that must come from that address.
- *   Left out, the app's sender is used. The call can never choose the sender.
- *
- * A field declared here wins over the call's, and declaring `to` also ignores the call's `cc` and
- * `bcc`. Fix the recipients whenever the use case allows,
- * because anyone in the audience can otherwise send any email to anyone.
- *
- * Pass the returned object to `email.send()` at runtime.
- *
- * @example
- * const notifyOwner = defineEmailAction({
- *   id: "notifyOwner",
- *   to: ["owner@acme.com"],
- *   permissions: { userGroupTypes: ["NON_LOGGED_IN_USERS", "LOGGED_IN_USERS"] },
- * })
- *
- * await email.send(notifyOwner, { subject: "New submission", body: html, replyTo: data.email })
- */
-declare function defineEmailAction<const TId extends string>(definition: EmailDefinition<TId>): EmailAction<TId>;
 type AiResource = {
   type: "SOFTR_AI";
   model: string;
@@ -312,4 +268,4 @@ type AiDefinition<TId extends string> = {
  */
 declare function defineAiAction<const TId extends string>(definition: AiDefinition<TId>): AiAction<TId>;
 //#endregion
-export { ActionData, ActionPermissions, ActionRecord, ActionShape, AiAction, DatasourceAction, EmailAction, FieldTypeOf, IntegrationAction, ReadOf, ReadShape, SoftrDatasources, WorkflowAction, defineAiAction, defineEmailAction, defineIntegration, defineMutation, defineQuery, defineWorkflow };
+export { ActionData, ActionPermissions, ActionRecord, ActionShape, AiAction, DatasourceAction, FieldTypeOf, IntegrationAction, ReadOf, ReadShape, SoftrDatasources, WorkflowAction, defineAiAction, defineIntegration, defineMutation, defineQuery, defineWorkflow };

package/dist/action.js

@@ -50,42 +50,6 @@ function defineIntegration(definition) {
 		permissions
 	};
 }
-/**
-* Declares an email action: who may send it, and the fields every email it sends keeps whatever the
-* call says. Softr sends it from the app's email sender and bills the workspace's workflow credits.
-*
-* - `to`, `cc`, `bcc`: addresses. An element may be a whole `{LOGGED_IN_USER:EMAIL}` or
-*   `{LOGGED_IN_USER:<field>}` placeholder, filled in for the signed-in sender.
-* - `replyTo`: an address or one such placeholder.
-* - `senderId`: one of the workspace's email senders, for an email that must come from that address.
-*   Left out, the app's sender is used. The call can never choose the sender.
-*
-* A field declared here wins over the call's, and declaring `to` also ignores the call's `cc` and
-* `bcc`. Fix the recipients whenever the use case allows,
-* because anyone in the audience can otherwise send any email to anyone.
-*
-* Pass the returned object to `email.send()` at runtime.
-*
-* @example
-* const notifyOwner = defineEmailAction({
-*   id: "notifyOwner",
-*   to: ["owner@acme.com"],
-*   permissions: { userGroupTypes: ["NON_LOGGED_IN_USERS", "LOGGED_IN_USERS"] },
-* })
-*
-* await email.send(notifyOwner, { subject: "New submission", body: html, replyTo: data.email })
-*/
-function defineEmailAction(definition) {
-	const { id, permissions,...inputs } = definition;
-	return {
-		id,
-		resource: {
-			type: "SOFTR_EMAIL",
-			inputs
-		},
-		permissions
-	};
-}
 function isDatasourceAction(value) {
 	if (typeof value !== "object" || value === null) return false;
 	const candidate = value;
@@ -105,4 +69,4 @@ function defineAiAction(definition) {
 }
 
 //#endregion
-export { defineAiAction, defineEmailAction, defineIntegration, defineMutation, defineQuery, defineWorkflow, isDatasourceAction };
+export { defineAiAction, defineIntegration, defineMutation, defineQuery, defineWorkflow, isDatasourceAction };

package/dist/auth/context.d.ts

@@ -7,7 +7,10 @@ import { Permissions } from "./permissions.js";
 type Session = {
   /** The visitor, or `null` when signed out. */
   user: User | null;
-  /** The visitor's global data restrictions. An escape hatch; the SDK already checks them. */
+  /**
+   * @deprecated Always empty. Softr checks every data request against the
+   * action's own `permissions`.
+   */
   permissions: Permissions;
 };
 /**

package/dist/auth/isomorphic.d.ts

@@ -8,7 +8,7 @@ import * as _tanstack_react_start0 from "@tanstack/react-start";
 //#region src/auth/isomorphic.d.ts
 
 /**
- * Resolves the Softr visitor, their permissions and the app's formatting for
+ * Resolves the Softr visitor and the app's formatting for
  * every request, so that `getSoftrContext` and the route guards have something
  * to read.
  *

package/dist/auth/isomorphic.js

@@ -19,7 +19,7 @@ import { jsx } from "react/jsx-runtime";
 
 //#region src/auth/isomorphic.tsx
 /**
-* Resolves the Softr visitor, their permissions and the app's formatting for
+* Resolves the Softr visitor and the app's formatting for
 * every request, so that `getSoftrContext` and the route guards have something
 * to read.
 *
@@ -42,6 +42,7 @@ function softrAuthMiddleware() {
 	]).server(async ({ next }) => {
 		async function getSession() {
 			const token = readSessionToken();
+			if (token === null) return { user: null };
 			if (process.env.NODE_ENV === "production") {
 				const cached = readSessionData(token);
 				if (cached !== null) return cached;

package/dist/auth/methods/authenticator.js

@@ -46,10 +46,7 @@ async function confirmAuthenticatorSetup(details) {
 		throw new Error(`${result.message}. Check SOFTR_APPLICATION_ID and that the app allows an authenticator app.`);
 	}
 	const { session, backupCodes } = result.data;
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,
@@ -75,10 +72,7 @@ async function skipAuthenticatorSetup() {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from skipping setup, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,
@@ -101,10 +95,7 @@ async function verifyAuthenticator(credentials) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from verification, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/methods/code.js

@@ -56,10 +56,7 @@ async function signInWithCode(credentials) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from sign-in, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/methods/emailCode2fa.js

@@ -36,10 +36,7 @@ async function verifyEmailCode(details) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from verification, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/methods/magicLink.js

@@ -36,10 +36,7 @@ async function signInWithMagicLink(credentials) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from magic-link sign-in, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	return {
 		success: true,
 		data: {

package/dist/auth/methods/password.js

@@ -40,10 +40,7 @@ async function signIn(credentials) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from sign-in, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/methods/passwordLink.js

@@ -68,10 +68,7 @@ async function setPasswordWithLink(details) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from setting a password, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/methods/signup.js

@@ -66,10 +66,7 @@ async function confirmSignUp(details) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from sign-up, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/methods/social.js

@@ -41,10 +41,7 @@ async function signInWithGoogle(credentials) {
 	}
 	const { session } = result.data;
 	assert(session, "Expected a session from Google sign-in, but got none");
-	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({
-		user: session.user,
-		permissions: session.permissions
-	}, session.jwt)]);
+	writeCookies([...makeSessionTokenCookie(session.jwt), makeSessionDataCookie({ user: session.user }, session.jwt)]);
 	clearPendingAuth();
 	return {
 		success: true,

package/dist/auth/permissions.d.ts

@@ -1,13 +1,4 @@
-import { z } from "zod";
-
 //#region src/auth/permissions.d.ts
-
-/**
- * What the visitor may do in this app, as the platform sees it.
- *
- * Rendering hints, not enforcement: every data request is authorized again
- * server-side, and these may go stale between the two.
- */
 type DatasourcePermissions = {
   read: boolean;
   create: boolean;

package/dist/auth/platform.js

@@ -2,7 +2,6 @@ import { assert, panic } from "../assertions.js";
 import { softrApiUrl } from "../softr-api.js";
 import { fetch } from "../fetch.js";
 import { softrConfig } from "../softr-config.js";
-import { permissionsSchema } from "./permissions.js";
 import { z } from "zod";
 
 //#region src/auth/platform.ts
@@ -61,10 +60,7 @@ function makePlatform(applicationId) {
 			const result = await request(`/v1/vibe/applications/${applicationId}/users/session${withAttributes}`, {
 				method: "GET",
 				token
-			}, z.object({
-				user: userSchema.nullable(),
-				permissions: permissionsSchema
-			}));
+			}, z.object({ user: userSchema.nullable() }));
 			if (result.status === 404) panic(`Application ${applicationId} not found. Check SOFTR_APPLICATION_ID.`);
 			return result;
 		},
@@ -75,8 +71,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -96,8 +91,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -123,8 +117,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -142,8 +135,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -161,8 +153,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -188,8 +179,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -211,8 +201,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -230,8 +219,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -256,8 +244,7 @@ function makePlatform(applicationId) {
 		}, z.object({
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}),
 			backupCodes: z.array(z.string())
 		})),
@@ -268,8 +255,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([
@@ -288,8 +274,7 @@ function makePlatform(applicationId) {
 			status: z.enum(["AUTHENTICATED", "MFA_REQUIRED"]),
 			session: z.object({
 				jwt: z.string(),
-				user: userSchema,
-				permissions: permissionsSchema
+				user: userSchema
 			}).nullish(),
 			mfa: z.object({
 				action: z.enum([

package/dist/default-error-overlay.d.ts

@@ -1,4 +1,4 @@
-import * as react6 from "react";
+import * as react4 from "react";
 
 //#region src/default-error-overlay.d.ts
 type Props = {
@@ -8,6 +8,6 @@ type Props = {
 declare function DefaultErrorOverlay({
   error,
   reset
-}: Props): react6.JSX.Element;
+}: Props): react4.JSX.Element;
 //#endregion
 export { DefaultErrorOverlay };

package/dist/index.d.ts

@@ -1,9 +1,8 @@
 import { SoftrUserGroupId, SoftrUserGroups, SoftrUserProperties, User } from "./auth/user.js";
-import { ActionPermissions, SoftrDatasources, defineAiAction, defineEmailAction, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { ActionPermissions, SoftrDatasources, defineAiAction, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { FileAttachment } from "./core/file-upload.js";
 import { FileItem, useFileUpload } from "./core/use-file-upload.js";
 import { AiAnswer, AiFile, AiGenerateInit, AiMessage, AiUsage } from "./core/ai.js";
-import { EmailSendInit, EmailSent } from "./core/email.js";
 import { DateOptions, DateParts, DateSeparator, DateValue, FixedDateFormat, FormattedDate, Formatting, FormattingScope, WeekDay, formatDate, formatDateTime, formatNumber, useFormatting } from "./formatting.js";
 import { SoftrContext } from "./auth/context.js";
 import { AuthSettings } from "./auth/platform.js";
@@ -19,4 +18,4 @@ import { useUserTimezone } from "./timezone.js";
 import { PwaInstall, PwaPlatform, SoftrPwaHead, usePwaInstall } from "./pwa.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./route/audience.js";
-export { type ActionPermissions, type AiAnswer, type AiFile, type AiGenerateInit, type AiMessage, type AiUsage, Audience, type AuthOptions, type AuthSettings, AuthSettingsProvider, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type EmailSendInit, type EmailSent, type FieldShape, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type Page, type PageSettings, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, type SoftrFieldRegistry, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type SoftrUserProperties, type User, type WeekDay, assertRouteAccess, checkAccess, defineAiAction, defineEmailAction, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };
+export { type ActionPermissions, type AiAnswer, type AiFile, type AiGenerateInit, type AiMessage, type AiUsage, Audience, type AuthOptions, type AuthSettings, AuthSettingsProvider, type DateOptions, type DateParts, type DateSeparator, type DateValue, DefaultErrorOverlay, type FieldShape, type FileAttachment, type FileItem, type FixedDateFormat, FormattedDate, type Formatting, FormattingScope, type Page, type PageSettings, type PwaInstall, type PwaPlatform, type SoftrContext, type SoftrDatasources, type SoftrFieldRegistry, SoftrPwaHead, type SoftrUserGroupId, type SoftrUserGroups, type SoftrUserProperties, type User, type WeekDay, assertRouteAccess, checkAccess, defineAiAction, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { defineAiAction, defineEmailAction, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
+import { defineAiAction, defineIntegration, defineMutation, defineQuery, defineWorkflow } from "./action.js";
 import { useFileUpload } from "./core/use-file-upload.js";
 import { checkAccess, defineVisibility, isAuthorized } from "./route/visibility.js";
 import { assertRouteAccess, guardRoute, isAccessError, isAlreadyAuthenticatedError, isForbiddenError, isUnauthenticatedError } from "./route/route.js";
@@ -14,4 +14,4 @@ import { useUserTimezone } from "./timezone.js";
 import { DefaultErrorOverlay } from "./default-error-overlay.js";
 import { Audience } from "./route/audience.js";
 
-export { Audience, AuthSettingsProvider, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineAiAction, defineEmailAction, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };
+export { Audience, AuthSettingsProvider, DefaultErrorOverlay, FormattedDate, FormattingScope, SoftrPwaHead, assertRouteAccess, checkAccess, defineAiAction, defineIntegration, defineMutation, definePage, defineQuery, defineVisibility, defineWorkflow, fieldShape, formatDate, formatDateTime, formatDuration, formatField, formatNumber, formatValue, getAuthSettings, getSoftrContext, guardRoute, initialSoftrContext, isAccessError, isAlreadyAuthenticatedError, isAuthorized, isForbiddenError, isUnauthenticatedError, pageHead, registerSoftrFields, softrAuthMiddleware, softrMcpMiddleware, toReturnPath, useAuthSettings, useCurrentUser, useFileUpload, useFormatting, useOverrides, usePwaInstall, useUserTimezone };

package/dist/package.js

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "0.0.97-alpha.2";
+var version = "0.0.98-anonsession.0";
 
 //#endregion
 export { version };

package/dist/pwa.d.ts

@@ -1,4 +1,4 @@
-import * as react4 from "react";
+import * as react5 from "react";
 import "@tanstack/react-start";
 
 //#region src/pwa.d.ts
@@ -23,7 +23,7 @@ import "@tanstack/react-start";
  *   )
  * }
  */
-declare function SoftrPwaHead(): react4.FunctionComponentElement<react4.FragmentProps>;
+declare function SoftrPwaHead(): react5.FunctionComponentElement<react5.FragmentProps>;
 type PwaPlatform = "ios" | "android" | "desktop";
 type PwaInstall = {
   available: false;

package/dist/server.d.ts

@@ -1,10 +1,9 @@
 import { upload } from "./core/file-upload.js";
 import { AiError, ai } from "./core/ai.js";
-import { EmailError, EmailErrorCode, email } from "./core/email.js";
 import { auth } from "./auth/server.js";
 import { FieldChoice, RecordOption, RecordOptions } from "./core/options.js";
 import { ds } from "./datasource/datasource.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
 import "@tanstack/react-start/server-only";
-export { AiError, EmailError, type EmailErrorCode, type FieldChoice, type RecordOption, type RecordOptions, ai, auth, ds, email, integration, upload, workflow };
+export { AiError, type FieldChoice, type RecordOption, type RecordOptions, ai, auth, ds, integration, upload, workflow };

package/dist/server.js

@@ -4,7 +4,6 @@ import { auth } from "./auth/server.js";
 import { workflow } from "./core/workflow.js";
 import { integration } from "./core/integration.js";
 import { AiError, ai } from "./core/ai.js";
-import { EmailError, email } from "./core/email.js";
 import "@tanstack/react-start/server-only";
 
-export { AiError, EmailError, ai, auth, ds, email, integration, upload, workflow };
+export { AiError, ai, auth, ds, integration, upload, workflow };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@softr/sdk",
-  "version": "0.0.97-alpha.2",
+  "version": "0.0.98-anonsession.0",
   "type": "module",
   "exports": {
     ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" },

package/skills/softr-sdk/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: core
   library: softr-sdk
-  library_version: 0.0.97-alpha.2
+  library_version: 0.0.98-anonsession.0
 ---
 
 # Softr SDK core
@@ -22,8 +22,6 @@ metadata:
 >
 > **CRITICAL**: The app is already wired. `src/start.ts`, `src/router.tsx` and `src/routes/__root.tsx` register `softrAuthMiddleware` and resolve the session. Do not add a second registration of it. `softrMcpMiddleware` is the one thing an app adds to `src/start.ts` itself — load the `softr-sdk/mcp` sub-skill before doing so.
 >
-> **CRITICAL**: `email.send` lives on `@softr/sdk/server` and only runs inside a `createServerFn` handler. Use `defineEmailAction` from `@softr/sdk` to declare who may send it and the recipients it fixes. An email the app sends itself needs no workflow and no connected mail service. Load the `softr-sdk/email` sub-skill for the full pattern.
->
 > **CRITICAL**: `ai.generate` and `ai.stream` live on `@softr/sdk/server` and only run inside a `createServerFn` handler. Use `defineAiAction` from `@softr/sdk` to declare the action with the model it runs on, an id copied from the `ai_list_models` tool. Softr runs the model on its own keys; never ask the user for an API key for the app's own AI feature. Load the `softr-sdk/ai` sub-skill for the full pattern.
 >
 > **CRITICAL**: `workflow.trigger` lives on `@softr/sdk/server` and only runs inside a `createServerFn` handler. Use `defineWorkflow` from `@softr/sdk` to declare the action, then pass it to `workflow.trigger`. Load the `softr-sdk/workflows` sub-skill for the full pattern.
@@ -34,8 +32,8 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 
 | Import | Runs | Holds |
 | --- | --- | --- |
-| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineEmailAction`, `defineAiAction`, `definePage`, `pageHead`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `FormattedDate`, `FormattingScope`, `useFormatting`, `formatDate`, `formatDateTime`, `formatNumber`, `formatValue`, `formatField`, `fieldShape`, `registerSoftrFields`, `useOverrides`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
-| `@softr/sdk/server` | Server only | `ds`, `auth`, `email`, `EmailError`, `workflow`, `integration`, `ai` |
+| `@softr/sdk` | Both | `defineQuery`, `defineMutation`, `defineAiAction`, `definePage`, `pageHead`, `defineVisibility`, `guardRoute`, `assertRouteAccess`, `isAuthorized`, `checkAccess`, `Audience`, `useCurrentUser`, `useUserTimezone`, `FormattedDate`, `FormattingScope`, `useFormatting`, `formatDate`, `formatDateTime`, `formatNumber`, `formatValue`, `formatField`, `fieldShape`, `registerSoftrFields`, `useOverrides`, `SoftrPwaHead`, `usePwaInstall`, `getSoftrContext`, `initialSoftrContext`, `softrAuthMiddleware`, the error predicates, and every type |
+| `@softr/sdk/server` | Server only | `ds`, `auth`, `workflow`, `integration`, `ai` |
 | `@softr/sdk/client` | Browser only | `useFileUpload` |
 | `@softr/sdk/vite` | Build | `softr()`, already in `vite.config.ts` |
 
@@ -49,11 +47,10 @@ Each sub-skill stands alone for its task and repeats the boundary above, so most
 | Fetch records from a datasource | [record-queries/SKILL.md](./record-queries/SKILL.md) |
 | Chart, aggregate or count records | [charts-and-metrics/SKILL.md](./charts-and-metrics/SKILL.md) |
 | Create, update or delete a record | [record-mutations/SKILL.md](./record-mutations/SKILL.md) |
-| Send an email from the app: a form that emails the owner, a confirmation, staff emailing a client | [email/SKILL.md](./email/SKILL.md) |
 | Trigger a Softr workflow | [workflows/SKILL.md](./workflows/SKILL.md) |
 | Sign a visitor in, out, or up | [auth/SKILL.md](./auth/SKILL.md) |
 | Ask an AI model: a summary, an extraction from a document, a classification, a draft, a chat | [ai/SKILL.md](./ai/SKILL.md) |
-| Call a connected third-party API (Slack, Stripe, Gmail from the user's own mailbox, …), or an AI model on the user's own provider account | [integrations/SKILL.md](./integrations/SKILL.md) |
+| Call a connected third-party API (Slack, Stripe, Gmail, …), or an AI model on the user's own provider account | [integrations/SKILL.md](./integrations/SKILL.md) |
 | Open the app to AI assistants over MCP | [mcp/SKILL.md](./mcp/SKILL.md) |
 | Let visitors install the app on their home screen | [pwa/SKILL.md](./pwa/SKILL.md) |
 | Show a date, a time or a number | [formatting/SKILL.md](./formatting/SKILL.md) |
@@ -79,9 +76,6 @@ Drawing a chart, a stat tile, or any aggregated number?
 Submitting a form, editing a record, or deleting one?
   load softr-sdk/record-mutations
 
-Sending an email when a form is submitted or a button is pressed?
-  load softr-sdk/email — no workflow, no connected mail service
-
 Triggering a Softr workflow from a button or form?
   load softr-sdk/workflows
 

package/skills/softr-sdk/ai/SKILL.md

@@ -13,7 +13,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.97-alpha.2
+  library_version: 0.0.98-anonsession.0
 ---
 
 **Boundary.** `ai` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build. `defineAiAction` and every type come from `@softr/sdk` and can be imported anywhere.
@@ -102,6 +102,8 @@ const summarize = createServerFn({ method: 'POST' })
   })
 ```
 
+The record id comes from the browser, so it can name any deal. The read of `dealQuery` takes the table's scope, like every other read of the table. Where reps see only their own deals, a read without it briefs anyone on any deal: see [record-queries](../record-queries/SKILL.md#keep-each-visitor-to-their-own-records).
+
 ## Extraction: an answer that is data
 
 A document dropped on the app, fields pulled out of it, a record created — the model reads the file and answers in the shape the record needs. Give it the schema and the file; validate the parsed answer before writing it, since a model may stray from the shape.

package/skills/softr-sdk/auth/SKILL.md

@@ -9,7 +9,7 @@ description: >-
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.97-alpha.2
+  library_version: 0.0.98-anonsession.0
 ---
 
 **Boundary.** `auth` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler — importing it into a component fails the build.

package/skills/softr-sdk/charts-and-metrics/SKILL.md

@@ -3,13 +3,13 @@ name: charts-and-metrics
 description: >-
   Aggregate records in a server function: ds.chart with groupBy, metrics, where,
   orderBy and date buckets for chart rows, ds.metric for one number, and
-  distinct values for filter controls. Use for a chart, a stat tile or any
-  counted, summed or averaged number, or when a chart comes back wrong. Single
-  records are record-queries.
+  distinct values for filter controls, scoped to the records the visitor may
+  read. Use for a chart, a stat tile or any counted, summed or averaged number,
+  or when a chart comes back wrong. Single records are record-queries.
 metadata:
   type: sub-skill
   library: softr-sdk
-  library_version: 0.0.97-alpha.2
+  library_version: 0.0.98-anonsession.0
 ---
 
 **Boundary.** `ds` lives on `@softr/sdk/server` and runs only inside a `createServerFn` handler or a server-side route hook — importing it into a component fails the build. `defineQuery` and every type come from `@softr/sdk` and can be imported anywhere.
@@ -166,6 +166,23 @@ const loadDashboard = createServerFn().handler(async () => {
 
 Each tile and panel is its own request, fired in parallel from one handler.
 
+### Scope a figure like the records behind it
+
+A chart or a metric reads the same records as a list, so it takes the same scope as every read of the table (see [record-queries](../record-queries/SKILL.md#keep-each-visitor-to-their-own-records)). Without it, a "my revenue" tile adds up everyone's sales, and a chart grouped by a person shows the names of people the visitor may not see. Here a rep sees only their own sales, and `usersQuery` is the app's query on the Users table:
+
+```ts
+import { auth, ds } from '@softr/sdk/server'
+
+const myRevenue = createServerFn().handler(async ({ context }) => {
+  const me = await auth.currentUserRow(context.user, usersQuery, 'email')
+  if (me === null) return null
+  const { value } = await ds
+    .metric(sales, (q) => q.amount.sum)
+    .where((q) => q.rep.isOneOf([me.id]))
+  return value
+})
+```
+
 ## Order of calls
 
 `groupBy` comes first and exactly once; a chart cannot be awaited before it. `metrics` follows, at most once, or not at all for distinct values. `where` can be chained anywhere, repeatedly, and calling it more than once ands the filters together. `orderBy` sorts by the chart's own keys, group and metric alike, and only sees the keys declared so far, so call it last.