zitejs 0.9.100 → 0.9.102

package/dist/cjs/bundle/index.js

@@ -213,11 +213,12 @@ function getSdkImportSource(baseDir) {
 /**
  * `zitejs/db`, `zitejs/api`, `zitejs/integrations` and `zitejs/email` are
  * tsconfig aliases onto generated files, not real package subpaths — they are
- * absent from the `exports` map, and `zitejs` isn't in PREBUNDLED_LIBS either.
- * So marking one external doesn't defer resolution, it guarantees a module
- * that fails to instantiate the first time the deployed endpoint is invoked,
- * long after the build reported success. Fail here instead, where the message
- * can name the file that's missing.
+ * absent from the `exports` map. `zitejs/backend` IS a real subpath export, but
+ * it lands here too and `zitejs` is not in PREBUNDLED_LIBS, so nothing would
+ * resolve it in the worker either. Either way, marking one external doesn't
+ * defer resolution: it guarantees a module that fails to instantiate the first
+ * time the deployed endpoint is invoked, long after the build reported success.
+ * Fail here instead, where the message can name the file that's missing.
  */
 const unresolvedAlias = (specifier, expectedPath) => {
     throw new Error(`Cannot resolve '${specifier}': expected generated file at ${expectedPath}. ` +

package/dist/cjs/runtime/index.d.ts

@@ -90,10 +90,18 @@ export interface TableFindAllOptions<T = Record<string, unknown>> {
      */
     sort?: unknown[];
     filters?: RecordFilters<T>;
+    /**
+     * The nested filter format (`filters` is the legacy flat one). IGNORED here
+     * for the same reason as `sort` — not in `DatabasesFindAllParamsSchema`, so
+     * zod strips it — but kept so code already passing it still compiles. It IS
+     * honored by `zite.auth.findAllUsers`.
+     */
+    filter?: unknown;
     fields?: Array<FieldSelector<T>>;
 }
 export interface BulkCreateResult<T> {
-    success: boolean;
+    /** Absent when `records: []` was passed — the dispatch short-circuits before setting it. */
+    success?: boolean;
     records: T[];
 }
 export interface UpdateResult<T> {
@@ -173,7 +181,16 @@ export type FindAllAuthUsersResult<T extends AuthUser = AuthUser> = {
     total: number;
     hasMore: boolean;
 };
-export type UpdateAuthUserProfile = Partial<Omit<AuthUser, "id" | "email" | "name">>;
+/**
+ * `null` clears a value — `publicUpdateAuthUserInputSchema` accepts
+ * `string | null | undefined` on each of these, and null is the only way to
+ * unset a name.
+ */
+export type UpdateAuthUserProfile = {
+    firstName?: string | null;
+    lastName?: string | null;
+    image?: string | null;
+};
 export interface AuthClient<T extends AuthUser = AuthUser> {
     findAllUsers(options?: FindAllAuthUsersOptions): Promise<FindAllAuthUsersResult<T>>;
     updateUserProfile(userId: string, profile: UpdateAuthUserProfile): Promise<T>;

package/dist/cjs/sync/lib.js

@@ -151,7 +151,9 @@ const DATE_FORMAT_EXAMPLES = {
 };
 const withDateFormatExample = (format) => {
     const example = DATE_FORMAT_EXAMPLES[format];
-    return example ? `"${format}" format (e.g. ${example})` : `"${format}" format`;
+    return example
+        ? `"${format}" format (e.g. ${example})`
+        : `"${format}" format`;
 };
 function toPascalCase(name) {
     const pascal = name
@@ -196,7 +198,9 @@ function tsTypeForSchemaField(def, variant = "read") {
                 .map((o) => `"${o.label.replace(/"/g, '\\"')}"`)
                 .join(" | ");
             const union = `${literals} | string`;
-            const read = def.type === "multiple_select" ? `(${union})[] | null` : `${union} | null`;
+            const read = def.type === "multiple_select"
+                ? `(${union})[] | null`
+                : `${union} | null`;
             if (variant === "write") {
                 return def.type === "multiple_select"
                     ? `${union} | (${union})[] | null`
@@ -447,7 +451,7 @@ function generateDbTs(schema) {
     lines.push("//   .findAll({ filters?, sort?, offset?, limit?, fields? }) → { records: T[], hasMore: boolean }");
     lines.push("//     filters: { fieldName: value } for equality, or { fieldName: { <op>: value } }");
     lines.push("//     operators: contains, not, in, notIn, lt, lte, gt, gte");
-    lines.push('//       `not: null` means "is set". An empty `in: []` matches nothing; an', '//       empty `notIn: []` applies no filter.');
+    lines.push('//       `not: null` means "is set". An empty `in: []` matches nothing; an', "//       empty `notIn: []` applies no filter.");
     lines.push("//     sort is currently IGNORED here — it is stripped before the request.", "//       (it does work on zite.auth.findAllUsers). Order in SQL instead.");
     lines.push("//     limit defaults to 500, max 2000; offset is a row count (a number)");
     lines.push("//   .findOne({ id?, filters?, fields? }) → T | undefined");
@@ -620,12 +624,52 @@ function inspectEndpointFile(source) {
  * words are legal object keys.
  */
 const RESERVED_IDENTIFIERS = new Set([
-    "await", "break", "case", "catch", "class", "const", "continue", "debugger",
-    "default", "delete", "do", "else", "enum", "export", "extends", "false",
-    "finally", "for", "function", "if", "implements", "import", "in",
-    "instanceof", "interface", "let", "new", "null", "package", "private",
-    "protected", "public", "return", "static", "super", "switch", "this",
-    "throw", "true", "try", "typeof", "var", "void", "while", "with", "yield",
+    "await",
+    "break",
+    "case",
+    "catch",
+    "class",
+    "const",
+    "continue",
+    "debugger",
+    "default",
+    "delete",
+    "do",
+    "else",
+    "enum",
+    "export",
+    "extends",
+    "false",
+    "finally",
+    "for",
+    "function",
+    "if",
+    "implements",
+    "import",
+    "in",
+    "instanceof",
+    "interface",
+    "let",
+    "new",
+    "null",
+    "package",
+    "private",
+    "protected",
+    "public",
+    "return",
+    "static",
+    "super",
+    "switch",
+    "this",
+    "throw",
+    "true",
+    "try",
+    "typeof",
+    "var",
+    "void",
+    "while",
+    "with",
+    "yield",
 ]);
 const toSafeIdentifier = (camelName) => RESERVED_IDENTIFIERS.has(camelName) ? `_${camelName}` : camelName;
 function generateApiTs(endpointFiles) {
@@ -955,7 +999,7 @@ function generateAirtableTs(lock) {
         '//   each carries its current user-facing name in quotes (// "Task Name"), which is',
         "//   the source of truth for what it means.",
         "//   Values are RAW; format them for display using each field's comment.",
-        "//   Fields marked \"Links to X\" hold Airtable record ids (rec...) from",
+        '//   Fields marked "Links to X" hold Airtable record ids (rec...) from',
         "//   findOne/findAll — never invent one.",
         "//   Read-only fields are absent from the *RecordInput types: Airtable rejects a",
         "//   write to a computed one (formula, rollup, lookup, autonumber, the created/",
@@ -1058,8 +1102,42 @@ function generateBackendWrapperTs(envVarNames = []) {
         // Narrows `user` to this app's generated User. ZiteScheduledContext is
         // re-exported unchanged — a scheduled fire has no user at all, so there is
         // nothing to narrow.
+        "/**",
+        " * The user an endpoint sees. NOT the full `User` from zitejs/auth — that is",
+        " * the browser's better-auth session, and the runtime never sends its",
+        " * `name`, `emailVerified`, `image`, `createdAt` or `updatedAt` to an",
+        " * endpoint. Typing those here let `context.user.createdAt.getFullYear()`",
+        " * compile and throw. `Omit` keeps any index signature merged in by",
+        " * `.zite/user-extensions.d.ts`, so a migrated user-sync app still reads its",
+        " * synced columns off this.",
+        " *",
+        " * The `Pick` intersection is not redundant. On an app that DOES merge in",
+        " * `[key: string]: any`, `keyof User` widens to `string`, `Exclude` then",
+        " * removes nothing, and the `Omit` collapses to a bare index signature —",
+        " * which would silently degrade `user.id` from `string` to `any`. The `Pick`",
+        " * names those members explicitly, so they survive the collapse.",
+        " *",
+        " * Only `id` and `email` are pinned that way, deliberately. On a user-sync",
+        " * app `context.user` IS the synced row (`buildUserContext` returns it",
+        " * whole), and only those two are guaranteed by the runtime: the id is the",
+        " * record id and the email is merged in explicitly. `firstName`/`lastName`",
+        " * come from whatever the app mapped those columns to, so pinning them to",
+        " * `string` would reject a legitimate read on a table that types them",
+        " * differently. Non-widened apps get both from the `Omit` regardless.",
+        " *",
+        " * On such an app `user.createdAt` still compiles, as `any`. That is",
+        " * deliberate: a synced user table may legitimately have its own",
+        " * `createdAt` column, and typing it `never` to close the hole would break",
+        " * exactly the legacy apps `user-extensions.d.ts` exists to keep compiling.",
+        " */",
+        "export type ZiteEndpointUser = Omit<",
+        "  User,",
+        "  'name' | 'emailVerified' | 'image' | 'createdAt' | 'updatedAt'",
+        "> &",
+        "  Pick<User, 'id' | 'email'>;",
+        "",
         'export interface ZiteRequestContext extends Omit<_ZiteRequestContext, "user"> {',
-        "  user: User;",
+        "  user: ZiteEndpointUser;",
         "}",
         "",
         "type SchemaLike<TOut, TIn = TOut> = { _output: TOut; _input: TIn; parse: (data: unknown) => TOut };",

package/dist/esm/bundle/index.js

@@ -177,11 +177,12 @@ function getSdkImportSource(baseDir) {
 /**
  * `zitejs/db`, `zitejs/api`, `zitejs/integrations` and `zitejs/email` are
  * tsconfig aliases onto generated files, not real package subpaths — they are
- * absent from the `exports` map, and `zitejs` isn't in PREBUNDLED_LIBS either.
- * So marking one external doesn't defer resolution, it guarantees a module
- * that fails to instantiate the first time the deployed endpoint is invoked,
- * long after the build reported success. Fail here instead, where the message
- * can name the file that's missing.
+ * absent from the `exports` map. `zitejs/backend` IS a real subpath export, but
+ * it lands here too and `zitejs` is not in PREBUNDLED_LIBS, so nothing would
+ * resolve it in the worker either. Either way, marking one external doesn't
+ * defer resolution: it guarantees a module that fails to instantiate the first
+ * time the deployed endpoint is invoked, long after the build reported success.
+ * Fail here instead, where the message can name the file that's missing.
  */
 const unresolvedAlias = (specifier, expectedPath) => {
     throw new Error(`Cannot resolve '${specifier}': expected generated file at ${expectedPath}. ` +

package/dist/esm/runtime/index.d.ts

@@ -90,10 +90,18 @@ export interface TableFindAllOptions<T = Record<string, unknown>> {
      */
     sort?: unknown[];
     filters?: RecordFilters<T>;
+    /**
+     * The nested filter format (`filters` is the legacy flat one). IGNORED here
+     * for the same reason as `sort` — not in `DatabasesFindAllParamsSchema`, so
+     * zod strips it — but kept so code already passing it still compiles. It IS
+     * honored by `zite.auth.findAllUsers`.
+     */
+    filter?: unknown;
     fields?: Array<FieldSelector<T>>;
 }
 export interface BulkCreateResult<T> {
-    success: boolean;
+    /** Absent when `records: []` was passed — the dispatch short-circuits before setting it. */
+    success?: boolean;
     records: T[];
 }
 export interface UpdateResult<T> {
@@ -173,7 +181,16 @@ export type FindAllAuthUsersResult<T extends AuthUser = AuthUser> = {
     total: number;
     hasMore: boolean;
 };
-export type UpdateAuthUserProfile = Partial<Omit<AuthUser, "id" | "email" | "name">>;
+/**
+ * `null` clears a value — `publicUpdateAuthUserInputSchema` accepts
+ * `string | null | undefined` on each of these, and null is the only way to
+ * unset a name.
+ */
+export type UpdateAuthUserProfile = {
+    firstName?: string | null;
+    lastName?: string | null;
+    image?: string | null;
+};
 export interface AuthClient<T extends AuthUser = AuthUser> {
     findAllUsers(options?: FindAllAuthUsersOptions): Promise<FindAllAuthUsersResult<T>>;
     updateUserProfile(userId: string, profile: UpdateAuthUserProfile): Promise<T>;

package/dist/esm/sync/lib.js

@@ -141,7 +141,9 @@ const DATE_FORMAT_EXAMPLES = {
 };
 const withDateFormatExample = (format) => {
     const example = DATE_FORMAT_EXAMPLES[format];
-    return example ? `"${format}" format (e.g. ${example})` : `"${format}" format`;
+    return example
+        ? `"${format}" format (e.g. ${example})`
+        : `"${format}" format`;
 };
 export function toPascalCase(name) {
     const pascal = name
@@ -186,7 +188,9 @@ function tsTypeForSchemaField(def, variant = "read") {
                 .map((o) => `"${o.label.replace(/"/g, '\\"')}"`)
                 .join(" | ");
             const union = `${literals} | string`;
-            const read = def.type === "multiple_select" ? `(${union})[] | null` : `${union} | null`;
+            const read = def.type === "multiple_select"
+                ? `(${union})[] | null`
+                : `${union} | null`;
             if (variant === "write") {
                 return def.type === "multiple_select"
                     ? `${union} | (${union})[] | null`
@@ -437,7 +441,7 @@ export function generateDbTs(schema) {
     lines.push("//   .findAll({ filters?, sort?, offset?, limit?, fields? }) → { records: T[], hasMore: boolean }");
     lines.push("//     filters: { fieldName: value } for equality, or { fieldName: { <op>: value } }");
     lines.push("//     operators: contains, not, in, notIn, lt, lte, gt, gte");
-    lines.push('//       `not: null` means "is set". An empty `in: []` matches nothing; an', '//       empty `notIn: []` applies no filter.');
+    lines.push('//       `not: null` means "is set". An empty `in: []` matches nothing; an', "//       empty `notIn: []` applies no filter.");
     lines.push("//     sort is currently IGNORED here — it is stripped before the request.", "//       (it does work on zite.auth.findAllUsers). Order in SQL instead.");
     lines.push("//     limit defaults to 500, max 2000; offset is a row count (a number)");
     lines.push("//   .findOne({ id?, filters?, fields? }) → T | undefined");
@@ -610,12 +614,52 @@ function inspectEndpointFile(source) {
  * words are legal object keys.
  */
 const RESERVED_IDENTIFIERS = new Set([
-    "await", "break", "case", "catch", "class", "const", "continue", "debugger",
-    "default", "delete", "do", "else", "enum", "export", "extends", "false",
-    "finally", "for", "function", "if", "implements", "import", "in",
-    "instanceof", "interface", "let", "new", "null", "package", "private",
-    "protected", "public", "return", "static", "super", "switch", "this",
-    "throw", "true", "try", "typeof", "var", "void", "while", "with", "yield",
+    "await",
+    "break",
+    "case",
+    "catch",
+    "class",
+    "const",
+    "continue",
+    "debugger",
+    "default",
+    "delete",
+    "do",
+    "else",
+    "enum",
+    "export",
+    "extends",
+    "false",
+    "finally",
+    "for",
+    "function",
+    "if",
+    "implements",
+    "import",
+    "in",
+    "instanceof",
+    "interface",
+    "let",
+    "new",
+    "null",
+    "package",
+    "private",
+    "protected",
+    "public",
+    "return",
+    "static",
+    "super",
+    "switch",
+    "this",
+    "throw",
+    "true",
+    "try",
+    "typeof",
+    "var",
+    "void",
+    "while",
+    "with",
+    "yield",
 ]);
 const toSafeIdentifier = (camelName) => RESERVED_IDENTIFIERS.has(camelName) ? `_${camelName}` : camelName;
 export function generateApiTs(endpointFiles) {
@@ -945,7 +989,7 @@ export function generateAirtableTs(lock) {
         '//   each carries its current user-facing name in quotes (// "Task Name"), which is',
         "//   the source of truth for what it means.",
         "//   Values are RAW; format them for display using each field's comment.",
-        "//   Fields marked \"Links to X\" hold Airtable record ids (rec...) from",
+        '//   Fields marked "Links to X" hold Airtable record ids (rec...) from',
         "//   findOne/findAll — never invent one.",
         "//   Read-only fields are absent from the *RecordInput types: Airtable rejects a",
         "//   write to a computed one (formula, rollup, lookup, autonumber, the created/",
@@ -1048,8 +1092,42 @@ export function generateBackendWrapperTs(envVarNames = []) {
         // Narrows `user` to this app's generated User. ZiteScheduledContext is
         // re-exported unchanged — a scheduled fire has no user at all, so there is
         // nothing to narrow.
+        "/**",
+        " * The user an endpoint sees. NOT the full `User` from zitejs/auth — that is",
+        " * the browser's better-auth session, and the runtime never sends its",
+        " * `name`, `emailVerified`, `image`, `createdAt` or `updatedAt` to an",
+        " * endpoint. Typing those here let `context.user.createdAt.getFullYear()`",
+        " * compile and throw. `Omit` keeps any index signature merged in by",
+        " * `.zite/user-extensions.d.ts`, so a migrated user-sync app still reads its",
+        " * synced columns off this.",
+        " *",
+        " * The `Pick` intersection is not redundant. On an app that DOES merge in",
+        " * `[key: string]: any`, `keyof User` widens to `string`, `Exclude` then",
+        " * removes nothing, and the `Omit` collapses to a bare index signature —",
+        " * which would silently degrade `user.id` from `string` to `any`. The `Pick`",
+        " * names those members explicitly, so they survive the collapse.",
+        " *",
+        " * Only `id` and `email` are pinned that way, deliberately. On a user-sync",
+        " * app `context.user` IS the synced row (`buildUserContext` returns it",
+        " * whole), and only those two are guaranteed by the runtime: the id is the",
+        " * record id and the email is merged in explicitly. `firstName`/`lastName`",
+        " * come from whatever the app mapped those columns to, so pinning them to",
+        " * `string` would reject a legitimate read on a table that types them",
+        " * differently. Non-widened apps get both from the `Omit` regardless.",
+        " *",
+        " * On such an app `user.createdAt` still compiles, as `any`. That is",
+        " * deliberate: a synced user table may legitimately have its own",
+        " * `createdAt` column, and typing it `never` to close the hole would break",
+        " * exactly the legacy apps `user-extensions.d.ts` exists to keep compiling.",
+        " */",
+        "export type ZiteEndpointUser = Omit<",
+        "  User,",
+        "  'name' | 'emailVerified' | 'image' | 'createdAt' | 'updatedAt'",
+        "> &",
+        "  Pick<User, 'id' | 'email'>;",
+        "",
         'export interface ZiteRequestContext extends Omit<_ZiteRequestContext, "user"> {',
-        "  user: User;",
+        "  user: ZiteEndpointUser;",
         "}",
         "",
         "type SchemaLike<TOut, TIn = TOut> = { _output: TOut; _input: TIn; parse: (data: unknown) => TOut };",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zitejs",
-  "version": "0.9.100",
+  "version": "0.9.102",
   "description": "The Zite framework — build apps on Zite Database",
   "type": "module",
   "main": "./dist/cjs/index.js",