lazypock 0.7.0 → 0.8.1

package/dist/index.d.cts

@@ -413,6 +413,8 @@ interface SchemaField {
     id?: string;
     name: string;
     type: string;
+    /** For relation fields: the target collection id (server-resolved). */
+    collectionId?: string | null;
     required?: boolean;
     unique?: boolean;
     options?: {
@@ -456,7 +458,7 @@ type RealtimeCallback = (e: RealtimeMessage) => void;
  *
  * @typeParam T — The record shape for this collection. Defaults to {@link ApiRecord}.
  */
-declare class CollectionService<T = ApiRecord> {
+declare class CollectionService<T = ApiRecord, TData = never> {
     private http;
     private collectionName;
     private authStore?;
@@ -465,8 +467,9 @@ declare class CollectionService<T = ApiRecord> {
     private schema?;
     /**
      * Active field projection from {@link select}. `"*"` (or unset) means
-     * "all visible (non-hidden) fields" — resolved against the schema when
-     * one is available, otherwise left to the server.
+     * "all visible (non-hidden) fields plus the implicit system keys" —
+     * resolved against the schema when one is available, otherwise left to
+     * the server.
      */
     private fieldsPreset?;
     /** @internal */
@@ -484,26 +487,38 @@ declare class CollectionService<T = ApiRecord> {
      * const t = await client.collection("posts").select("id", "title").getList();
      * // GET /api/posts?fields=id,title
      *
-     * // All visible fields (hidden fields are excluded server-side)
+     * // All visible fields (implicit system keys id/created/updated/… are
+     * // kept; hidden fields are excluded via the projection)
      * const all = await client.collection("posts").select("*").getList();
-     * // GET /api/posts?fields=id,title,published,… (schema known)
+     * // GET /api/posts?fields=id,created,updated,collectionId,collectionName,title,published,… (schema known)
      * ```
      *
      * When no schema is known, the default (no `select()` call) sends no
      * `fields` param — the server returns every non-password field.
      * Pass `select("*")` to restore the default after a projection.
      */
-    select<K extends FieldKey<T> | "*">(...fields: K[]): CollectionService<T>;
+    select<K extends FieldKey<T> | "*">(...fields: K[]): CollectionService<T, TData>;
     /**
      * Fields to send with reads:
      * 1. explicit `options.fields` (caller wins)
      * 2. `select()` preset
-     * 3. schema default — all visible (non-hidden, non-system) fields
+     * 3. schema default — all visible (non-hidden) fields plus the implicit
+     *    system keys (`id`, `created`, `updated`, `collectionId`, `collectionName`)
      */
     private effectiveFields;
     /**
-     * All non-hidden, non-system, non-password field names from the schema.
-     * `undefined` when no schema is available (server decides).
+     * All non-hidden, non-password, non-autodate field names from the schema,
+     * prefixed with the implicit system keys that are part of every record
+     * (`id`, `created`, `updated`, `collectionId`, `collectionName`).
+     *
+     * The system keys never appear in the schema (they are implied for every
+     * collection) but MUST be listed explicitly when projecting — the server
+     * applies strict projection, so unrequested fields are dropped. Without
+     * them, `getList`/`getOne` responses lose `id` (and `created`/`updated`),
+     * breaking selection, edits, and relation references.
+     *
+     * `undefined` when no schema fields are available (server decides — its
+     * default returns every non-password field, including the system keys).
      */
     visibleFields(): string | undefined;
     /** Warn once when an expand field is not a relation (schema known). */
@@ -542,7 +557,7 @@ declare class CollectionService<T = ApiRecord> {
      * record type), excess/unknown fields are rejected at compile time.
      * @param options Optional request options.
      */
-    create(data: T extends ApiRecord ? Record<string, unknown> : CreateData<T>, options?: RequestOptions): Promise<T | null>;
+    create(data: [TData] extends [never] ? T extends ApiRecord ? Record<string, unknown> : CreateData<T> : TData, options?: RequestOptions): Promise<T | null>;
     /**
      * Update a record by ID.
      * @param id Record ID.
@@ -550,7 +565,7 @@ declare class CollectionService<T = ApiRecord> {
      * must be a partial of `T` — unknown fields are rejected.
      * @param options Optional request options.
      */
-    update(id: string, data: T extends ApiRecord ? Record<string, unknown> : UpdateData<T>, options?: RequestOptions): Promise<T | null>;
+    update(id: string, data: [TData] extends [never] ? T extends ApiRecord ? Record<string, unknown> : UpdateData<T> : Partial<TData>, options?: RequestOptions): Promise<T | null>;
     /**
      * Delete a record by ID.
      * @param id Record ID.
@@ -588,7 +603,7 @@ declare class CollectionService<T = ApiRecord> {
      * `types.schemas`). Enables schema-aware defaults: hidden fields are
      * excluded from responses, select/expand are validated.
      */
-    withSchema(schema: CollectionSchema): CollectionService<T>;
+    withSchema(schema: CollectionSchema): CollectionService<T, TData>;
     /**
      * Subscribe to realtime changes for this collection.
      * The event's `action` is one of `"create" | "update" | "delete"`.
@@ -865,6 +880,14 @@ interface LazypockClientOptions {
 declare class LazypockClient {
     readonly http: HttpClient;
     readonly authStore: AuthStore;
+    /**
+     * Resolves once persisted auth state has been loaded from storage.
+     * The client auto-initializes its auth store on construction, so a
+     * previously persisted token is ready immediately (no manual
+     * `authStore.init()` needed). Await this only if you must gate on
+     * the restored session.
+     */
+    readonly authReady: Promise<void>;
     readonly realtime: RealtimeService;
     readonly collections: CollectionsService;
     readonly files: FilesService;

package/dist/index.d.ts

@@ -413,6 +413,8 @@ interface SchemaField {
     id?: string;
     name: string;
     type: string;
+    /** For relation fields: the target collection id (server-resolved). */
+    collectionId?: string | null;
     required?: boolean;
     unique?: boolean;
     options?: {
@@ -456,7 +458,7 @@ type RealtimeCallback = (e: RealtimeMessage) => void;
  *
  * @typeParam T — The record shape for this collection. Defaults to {@link ApiRecord}.
  */
-declare class CollectionService<T = ApiRecord> {
+declare class CollectionService<T = ApiRecord, TData = never> {
     private http;
     private collectionName;
     private authStore?;
@@ -465,8 +467,9 @@ declare class CollectionService<T = ApiRecord> {
     private schema?;
     /**
      * Active field projection from {@link select}. `"*"` (or unset) means
-     * "all visible (non-hidden) fields" — resolved against the schema when
-     * one is available, otherwise left to the server.
+     * "all visible (non-hidden) fields plus the implicit system keys" —
+     * resolved against the schema when one is available, otherwise left to
+     * the server.
      */
     private fieldsPreset?;
     /** @internal */
@@ -484,26 +487,38 @@ declare class CollectionService<T = ApiRecord> {
      * const t = await client.collection("posts").select("id", "title").getList();
      * // GET /api/posts?fields=id,title
      *
-     * // All visible fields (hidden fields are excluded server-side)
+     * // All visible fields (implicit system keys id/created/updated/… are
+     * // kept; hidden fields are excluded via the projection)
      * const all = await client.collection("posts").select("*").getList();
-     * // GET /api/posts?fields=id,title,published,… (schema known)
+     * // GET /api/posts?fields=id,created,updated,collectionId,collectionName,title,published,… (schema known)
      * ```
      *
      * When no schema is known, the default (no `select()` call) sends no
      * `fields` param — the server returns every non-password field.
      * Pass `select("*")` to restore the default after a projection.
      */
-    select<K extends FieldKey<T> | "*">(...fields: K[]): CollectionService<T>;
+    select<K extends FieldKey<T> | "*">(...fields: K[]): CollectionService<T, TData>;
     /**
      * Fields to send with reads:
      * 1. explicit `options.fields` (caller wins)
      * 2. `select()` preset
-     * 3. schema default — all visible (non-hidden, non-system) fields
+     * 3. schema default — all visible (non-hidden) fields plus the implicit
+     *    system keys (`id`, `created`, `updated`, `collectionId`, `collectionName`)
      */
     private effectiveFields;
     /**
-     * All non-hidden, non-system, non-password field names from the schema.
-     * `undefined` when no schema is available (server decides).
+     * All non-hidden, non-password, non-autodate field names from the schema,
+     * prefixed with the implicit system keys that are part of every record
+     * (`id`, `created`, `updated`, `collectionId`, `collectionName`).
+     *
+     * The system keys never appear in the schema (they are implied for every
+     * collection) but MUST be listed explicitly when projecting — the server
+     * applies strict projection, so unrequested fields are dropped. Without
+     * them, `getList`/`getOne` responses lose `id` (and `created`/`updated`),
+     * breaking selection, edits, and relation references.
+     *
+     * `undefined` when no schema fields are available (server decides — its
+     * default returns every non-password field, including the system keys).
      */
     visibleFields(): string | undefined;
     /** Warn once when an expand field is not a relation (schema known). */
@@ -542,7 +557,7 @@ declare class CollectionService<T = ApiRecord> {
      * record type), excess/unknown fields are rejected at compile time.
      * @param options Optional request options.
      */
-    create(data: T extends ApiRecord ? Record<string, unknown> : CreateData<T>, options?: RequestOptions): Promise<T | null>;
+    create(data: [TData] extends [never] ? T extends ApiRecord ? Record<string, unknown> : CreateData<T> : TData, options?: RequestOptions): Promise<T | null>;
     /**
      * Update a record by ID.
      * @param id Record ID.
@@ -550,7 +565,7 @@ declare class CollectionService<T = ApiRecord> {
      * must be a partial of `T` — unknown fields are rejected.
      * @param options Optional request options.
      */
-    update(id: string, data: T extends ApiRecord ? Record<string, unknown> : UpdateData<T>, options?: RequestOptions): Promise<T | null>;
+    update(id: string, data: [TData] extends [never] ? T extends ApiRecord ? Record<string, unknown> : UpdateData<T> : Partial<TData>, options?: RequestOptions): Promise<T | null>;
     /**
      * Delete a record by ID.
      * @param id Record ID.
@@ -588,7 +603,7 @@ declare class CollectionService<T = ApiRecord> {
      * `types.schemas`). Enables schema-aware defaults: hidden fields are
      * excluded from responses, select/expand are validated.
      */
-    withSchema(schema: CollectionSchema): CollectionService<T>;
+    withSchema(schema: CollectionSchema): CollectionService<T, TData>;
     /**
      * Subscribe to realtime changes for this collection.
      * The event's `action` is one of `"create" | "update" | "delete"`.
@@ -865,6 +880,14 @@ interface LazypockClientOptions {
 declare class LazypockClient {
     readonly http: HttpClient;
     readonly authStore: AuthStore;
+    /**
+     * Resolves once persisted auth state has been loaded from storage.
+     * The client auto-initializes its auth store on construction, so a
+     * previously persisted token is ready immediately (no manual
+     * `authStore.init()` needed). Await this only if you must gate on
+     * the restored session.
+     */
+    readonly authReady: Promise<void>;
     readonly realtime: RealtimeService;
     readonly collections: CollectionsService;
     readonly files: FilesService;

package/dist/index.global.js

@@ -519,9 +519,10 @@ var Lazypock = (() => {
      * const t = await client.collection("posts").select("id", "title").getList();
      * // GET /api/posts?fields=id,title
      *
-     * // All visible fields (hidden fields are excluded server-side)
+     * // All visible fields (implicit system keys id/created/updated/… are
+     * // kept; hidden fields are excluded via the projection)
      * const all = await client.collection("posts").select("*").getList();
-     * // GET /api/posts?fields=id,title,published,… (schema known)
+     * // GET /api/posts?fields=id,created,updated,collectionId,collectionName,title,published,… (schema known)
      * ```
      *
      * When no schema is known, the default (no `select()` call) sends no
@@ -554,7 +555,8 @@ var Lazypock = (() => {
      * Fields to send with reads:
      * 1. explicit `options.fields` (caller wins)
      * 2. `select()` preset
-     * 3. schema default — all visible (non-hidden, non-system) fields
+     * 3. schema default — all visible (non-hidden) fields plus the implicit
+     *    system keys (`id`, `created`, `updated`, `collectionId`, `collectionName`)
      */
     effectiveFields(optionsFields) {
       if (optionsFields !== void 0) return optionsFields;
@@ -567,15 +569,35 @@ var Lazypock = (() => {
       return this.visibleFields();
     }
     /**
-     * All non-hidden, non-system, non-password field names from the schema.
-     * `undefined` when no schema is available (server decides).
+     * All non-hidden, non-password, non-autodate field names from the schema,
+     * prefixed with the implicit system keys that are part of every record
+     * (`id`, `created`, `updated`, `collectionId`, `collectionName`).
+     *
+     * The system keys never appear in the schema (they are implied for every
+     * collection) but MUST be listed explicitly when projecting — the server
+     * applies strict projection, so unrequested fields are dropped. Without
+     * them, `getList`/`getOne` responses lose `id` (and `created`/`updated`),
+     * breaking selection, edits, and relation references.
+     *
+     * `undefined` when no schema fields are available (server decides — its
+     * default returns every non-password field, including the system keys).
      */
     visibleFields() {
       if (!this.schema?.fields) return void 0;
       const visible = this.schema.fields.filter(
         (f) => !f.hidden && f.type !== "password" && f.type !== "autodate"
       ).map((f) => f.name);
-      return visible.length > 0 ? visible.join(",") : void 0;
+      if (visible.length === 0) return void 0;
+      return [
+        .../* @__PURE__ */ new Set([
+          "id",
+          "created",
+          "updated",
+          "collectionId",
+          "collectionName",
+          ...visible
+        ])
+      ].join(",");
     }
     /** Warn once when an expand field is not a relation (schema known). */
     validateExpand(expand) {
@@ -1461,6 +1483,12 @@ var Lazypock = (() => {
           body
         })}`
       );
+      const createLines = fields.map((f) => createDataMemberLine(f)).filter((l) => l !== "");
+      sections.push(
+        `export interface ${typeName}CreateData${renderInterface({
+          body: createLines.join("\n")
+        })}`
+      );
     }
     sections.push(`export interface AuthRecord extends BaseRecord {
   email: string;
@@ -1471,6 +1499,10 @@ var Lazypock = (() => {
     ).join("\n");
     sections.push(`export interface LazypockCollections {
 ${mapEntries}
+}`);
+    const createMapEntries = filtered.map((c) => `  "${c.name}": ${collectionTypeName(c.name)}CreateData;`).join("\n");
+    sections.push(`export interface LazypockCreateData {
+${createMapEntries}
 }`);
     const schemaEntries = collections.map(
       (c) => `  {
@@ -1494,6 +1526,10 @@ ${schemaEntries}
  * Collection access is fully type-checked:
  *   client.collection("posts").create({ title: "x" }) // title must exist
  *
+ * For auth collections the generated *CreateData type includes the
+ * write-only password field, so creating a user is type-safe:
+ *   client.collection("users").create({ email, password }) // \u2713
+ *
  * The schema snapshot is wired into the client automatically, so hidden
  * fields are excluded from responses and select/expand are validated.
  */
@@ -1508,10 +1544,16 @@ export function createClient(options: LazypockClientOptions): TypedClient {
 }
 
 export class TypedClient extends LazypockClient {
-  override collection<T extends string>(name: T): T extends keyof LazypockCollections
-    ? CollectionService<LazypockCollections[T]>
-    : CollectionService<unknown> {
-    return super.collection(name) as T extends keyof LazypockCollections ? CollectionService<LazypockCollections[T]> : CollectionService<unknown>;
+  // K extends keyof LazypockCollections (rather than a generic string with a
+  // conditional return) so the IDE suggests collection names and unknown names
+  // are rejected at compile time:
+  //   client.collection("posts")  // suggested + typed
+  //   client.collection("nope")   // TS error
+  //
+  // create()/update() take the collection's *CreateData \u2014 the read model
+  // omits password/hidden fields, but the write model carries them.
+  override collection<K extends keyof LazypockCollections>(name: K): CollectionService<LazypockCollections[K], LazypockCreateData[K]> {
+    return super.collection(name) as CollectionService<LazypockCollections[K], LazypockCreateData[K]>;
   }
 }
 `);
@@ -1532,6 +1574,14 @@ ${opts.body}
     if (type === "never") return "";
     return `  ${JSON.stringify(key)}${req}: ${type};`;
   }
+  function createDataMemberLine(f) {
+    if (f.type === "autodate") return "";
+    const key = fieldKey(f.name);
+    const req = f.required ? "" : "?";
+    const type = f.type === "password" ? "string" : fieldTypeScriptType(f);
+    if (type === "never") return "";
+    return `  ${JSON.stringify(key)}${req}: ${type};`;
+  }
 
   // src/lazypock.ts
   var LazypockClient = class {
@@ -1543,6 +1593,7 @@ ${opts.body}
       this.collectionCache = /* @__PURE__ */ new Map();
       const baseUrl = options.baseUrl.replace(/\/+$/, "");
       this.authStore = options.authStore ?? new AuthStore(options.storage ?? memoryStorage);
+      this.authReady = options.authStore ? Promise.resolve() : this.authStore.init();
       this.http = new HttpClient(baseUrl, this.authStore);
       this.realtime = options.realtime ?? new RealtimeService();
       if (!options.realtime) {