zitejs 0.9.119 → 0.9.121

package/dist/cjs/auth/config.d.ts

@@ -2,3 +2,6 @@ export declare function getFlowId(): string;
 export declare function getApiUrl(): string;
 export declare function getAuthPageUrl(): string;
 export declare function getDbToken(): string;
+/** Undefined for apps built before the platform sent this — treat as unknown,
+ *  never as a default side. */
+export declare function getAccessMode(): 'internal' | 'external' | undefined;

package/dist/cjs/auth/config.js

@@ -4,6 +4,7 @@ exports.getFlowId = getFlowId;
 exports.getApiUrl = getApiUrl;
 exports.getAuthPageUrl = getAuthPageUrl;
 exports.getDbToken = getDbToken;
+exports.getAccessMode = getAccessMode;
 const env_js_1 = require("../internal/env.js");
 const API_ENVIRONMENTS = {
     production: 'https://api.fillout.com',
@@ -36,3 +37,9 @@ function getAuthPageUrl() {
 function getDbToken() {
     return (0, env_js_1.getEnv)('ZITE_DB_TOKEN', 'VITE_ZITE_DB_TOKEN') ?? '';
 }
+/** Undefined for apps built before the platform sent this — treat as unknown,
+ *  never as a default side. */
+function getAccessMode() {
+    const mode = (0, env_js_1.getEnv)('ZITE_ACCESS_MODE', 'VITE_ZITE_ACCESS_MODE');
+    return mode === 'internal' || mode === 'external' ? mode : undefined;
+}

package/dist/cjs/auth/index.js

@@ -5,10 +5,12 @@ exports.useAuth = useAuth;
 exports.loginWithRedirect = loginWithRedirect;
 exports.logout = logout;
 exports.updateProfile = updateProfile;
-const react_1 = require("better-auth/react");
+const react_1 = require("react");
+const react_2 = require("better-auth/react");
 const plugins_1 = require("better-auth/client/plugins");
 const constants_js_1 = require("./constants.js");
-const authClient = (0, react_1.createAuthClient)({
+const config_js_1 = require("./config.js");
+const authClient = (0, react_2.createAuthClient)({
     baseURL: '',
     plugins: [
         (0, plugins_1.magicLinkClient)(),
@@ -21,6 +23,22 @@ const authClient = (0, react_1.createAuthClient)({
     ],
 });
 exports.useSession = authClient.useSession;
+/**
+ * An internal app has no signed-out state — SSO runs before the bundle — so an
+ * empty session means it died underneath the app. Only `internal`: elsewhere a
+ * signed-out visitor is legitimate.
+ */
+function shouldRedirectSignedOut(isPending, hasUser) {
+    if (isPending || hasUser)
+        return false;
+    if ((0, config_js_1.getAccessMode)() !== 'internal')
+        return false;
+    if (typeof window === 'undefined')
+        return false;
+    // `loginWithRedirect` won't navigate from an auth page, so claiming a
+    // redirect here would hang `isLoading` forever.
+    return !window.location.pathname.startsWith('/auth/');
+}
 /**
  * `loginWithRedirect` and `logout` are returned as well as exported. The
  * pre-monorepo `useAuth()` returned them, so app code that destructures them
@@ -29,9 +47,17 @@ exports.useSession = authClient.useSession;
  */
 function useAuth() {
     const { data, isPending } = (0, exports.useSession)();
+    const user = data?.user ?? null;
+    const redirecting = shouldRedirectSignedOut(isPending, user !== null);
+    (0, react_1.useEffect)(() => {
+        if (redirecting)
+            loginWithRedirect();
+    }, [redirecting]);
     return {
-        user: data?.user ?? null,
-        isLoading: isPending,
+        user,
+        // Loading, not signed out: the signed-out branch is the empty screen this
+        // exists to prevent.
+        isLoading: isPending || redirecting,
         loginWithRedirect,
         logout,
     };

package/dist/cjs/auth/useAuth.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/cjs/auth/useAuth.test.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+// Separate from index.test.ts: driving `useSession` means replacing
+// `better-auth/react`, which would strip the real client asserted against there.
+const { useSessionMock } = vitest_1.vi.hoisted(() => ({ useSessionMock: vitest_1.vi.fn() }));
+vitest_1.vi.mock('better-auth/react', () => ({
+    createAuthClient: () => ({
+        useSession: useSessionMock,
+        signIn: {},
+        signUp: {},
+        signOut: vitest_1.vi.fn(),
+        updateUser: vitest_1.vi.fn(),
+    }),
+}));
+vitest_1.vi.mock('better-auth/client/plugins', () => ({
+    magicLinkClient: () => ({}),
+    inferAdditionalFields: () => ({}),
+}));
+// `useAuth` uses only `useEffect`; running it inline avoids pulling in a renderer.
+vitest_1.vi.mock('react', () => ({ useEffect: (fn) => fn() }));
+const index_js_1 = require("./index.js");
+const APP_URL = 'https://app.zite.so/dashboard';
+function stubLocation(href) {
+    const location = { pathname: new URL(href).pathname, href };
+    vitest_1.vi.stubGlobal('window', { location });
+    return location;
+}
+const signedOut = { data: null, isPending: false };
+(0, vitest_1.beforeEach)(() => {
+    delete process.env.ZITE_ACCESS_MODE;
+});
+(0, vitest_1.afterEach)(() => {
+    delete process.env.ZITE_ACCESS_MODE;
+    vitest_1.vi.unstubAllGlobals();
+    useSessionMock.mockReset();
+});
+const render = (session, { accessMode, href = APP_URL } = {}) => {
+    if (accessMode !== undefined)
+        process.env.ZITE_ACCESS_MODE = accessMode;
+    const location = stubLocation(href);
+    useSessionMock.mockReturnValue(session);
+    return { result: (0, index_js_1.useAuth)(), location };
+};
+(0, vitest_1.describe)('useAuth signed-out handling', () => {
+    (0, vitest_1.it)('sends a signed-out visitor on an internal app to sign-in', () => {
+        const { result, location } = render(signedOut, { accessMode: 'internal' });
+        (0, vitest_1.expect)(location.href.startsWith('/auth/login')).toBe(true);
+        (0, vitest_1.expect)(result.isLoading).toBe(true);
+    });
+    (0, vitest_1.it)('leaves a signed-out visitor on an external app alone', () => {
+        const { result, location } = render(signedOut, { accessMode: 'external' });
+        (0, vitest_1.expect)(location.href).toBe(APP_URL);
+        (0, vitest_1.expect)(result.isLoading).toBe(false);
+        (0, vitest_1.expect)(result.user).toBe(null);
+    });
+    // i.e. every app published before the platform sent an access mode.
+    (0, vitest_1.it)('leaves an app that never declared an access mode alone', () => {
+        const { result, location } = render(signedOut);
+        (0, vitest_1.expect)(location.href).toBe(APP_URL);
+        (0, vitest_1.expect)(result.isLoading).toBe(false);
+    });
+    (0, vitest_1.it)('does not redirect while the session is still resolving', () => {
+        const { result, location } = render({ data: null, isPending: true }, { accessMode: 'internal' });
+        (0, vitest_1.expect)(location.href).toBe(APP_URL);
+        (0, vitest_1.expect)(result.isLoading).toBe(true);
+    });
+    (0, vitest_1.it)('does not redirect a signed-in visitor', () => {
+        const { result, location } = render({ data: { user: { id: 'u1', email: 'a@b.com' } }, isPending: false }, { accessMode: 'internal' });
+        (0, vitest_1.expect)(location.href).toBe(APP_URL);
+        (0, vitest_1.expect)(result.isLoading).toBe(false);
+        (0, vitest_1.expect)(result.user).toMatchObject({ id: 'u1' });
+    });
+    // Claiming a redirect it can't make would hang `isLoading` forever.
+    (0, vitest_1.it)('does not claim to be loading on an auth page it cannot leave', () => {
+        const { result } = render(signedOut, {
+            accessMode: 'internal',
+            href: 'https://app.zite.so/auth/login',
+        });
+        (0, vitest_1.expect)(result.isLoading).toBe(false);
+    });
+});

package/dist/cjs/backend/index.d.ts

@@ -3,6 +3,27 @@ export type { ZiteSchedule };
 export type ZiteWebhook = {
     paused?: boolean;
 };
+/**
+ * A provider trigger: what should fire the endpoint, declared as a literal.
+ * The platform registers it with the provider at publish, verifies each
+ * delivery and queues it; the endpoint only sees the payload. A `poll`
+ * trigger runs the endpoint on a cadence with `input.__poll.cursor` from the
+ * previous run, and the endpoint returns `{ cursor }` to advance it.
+ */
+export type ZiteTrigger = {
+    /**
+     * The connection's name in `zite.config.json`. Registered with the
+     * provider by `src/triggers/<endpointId>/subscribe.ts` and taken down
+     * by `unsubscribe.ts`, which the platform runs at publish and teardown.
+     */
+    integration: string;
+    paused?: boolean;
+} | {
+    provider: "poll";
+    /** `<n>m` (1–59) or `<n>h` (1–23) */
+    every: string;
+    paused?: boolean;
+};
 export interface ZiteRequestContext {
     user: {
         id: string;
@@ -58,7 +79,7 @@ export type ZiteStreamInterface = {
     write: (data: unknown) => Promise<void>;
     forward: (asyncIterable: AsyncIterable<string>) => Promise<string>;
 };
-export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput> {
+export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput, TTrigger extends ZiteTrigger | undefined = undefined> {
     description?: string;
     inputSchema?: SchemaLike<TInput, TRawInput>;
     /**
@@ -82,6 +103,12 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
      * `{ user: null }` for a webhook fire exactly as it does for a cron one.
      */
     webhook?: TWebhook;
+    /**
+     * When set, the platform fires this endpoint from the named provider. Like
+     * `schedule` and `webhook`, this widens `context`: a provider delivery has
+     * no signed-in user.
+     */
+    trigger?: TTrigger;
     /**
      * Set by {@link createEndpoint}, not by hand. The worker validates
      * `inputSchema` for bundles built before this did, and skips ones that
@@ -90,7 +117,7 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
     validatesInput?: boolean;
     execute: (params: {
         input: TInput;
-        context: TSchedule extends ZiteSchedule ? ZiteRequestContext | ZiteScheduledContext : TWebhook extends ZiteWebhook ? ZiteRequestContext | ZiteScheduledContext : ZiteRequestContext;
+        context: TSchedule extends ZiteSchedule ? ZiteRequestContext | ZiteScheduledContext : TWebhook extends ZiteWebhook ? ZiteRequestContext | ZiteScheduledContext : TTrigger extends ZiteTrigger ? ZiteRequestContext | ZiteScheduledContext : ZiteRequestContext;
     } & (TStream extends true ? {
         stream: ZiteStreamInterface;
     } : {})) => Promise<TOutput> | TOutput;
@@ -102,4 +129,4 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
  * field could be missing and the endpoint ran anyway. Parsing here is also what
  * makes `TRawInput` -> `TInput` (defaults, transforms) true at runtime.
  */
-export declare function createEndpoint<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput>(config: EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput>): EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput>;
+export declare function createEndpoint<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput, TTrigger extends ZiteTrigger | undefined = undefined>(config: EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput, TTrigger>): EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput, TTrigger>;

package/dist/cjs/backend/index.js

@@ -32,7 +32,7 @@ class ZiteError extends Error {
 }
 exports.ZiteError = ZiteError;
 /** Injected by the runner on a platform-fired run — see `isPlatformTriggeredInput`. */
-const PLATFORM_TRIGGER_KEYS = ["__cron", "__webhook"];
+const PLATFORM_TRIGGER_KEYS = ["__cron", "__webhook", "__poll"];
 function isPlatformTriggeredInput(input) {
     if (typeof input !== "object" || input === null)
         return false;
@@ -60,7 +60,7 @@ function describeIssues(error) {
  */
 function createEndpoint(config) {
     const { inputSchema, execute } = config;
-    const firesWithoutARequest = Boolean(config.schedule || config.webhook);
+    const firesWithoutARequest = Boolean(config.schedule || config.webhook || config.trigger);
     // An `inputSchema` that isn't a validator stays inert, as it was.
     if (!inputSchema || typeof inputSchema.parse !== "function")
         return config;

package/dist/cjs/bundle/index.d.ts

@@ -8,7 +8,7 @@
  *
  * Usage:
  *   npx zitejs bundle                     # bundle all endpoints
- *   npx zitejs bundle --app admin-panel   # bundle endpoints for a specific app
+ *   npx zitejs bundle --app admin-panel   # bundle endpoints for one app or automation, by dir name
  *   npx zitejs bundle --script <path>     # bundle a one-off script
  *
  * Output: JSON to stdout

package/dist/cjs/bundle/index.js

@@ -45,7 +45,7 @@ exports.runBundle = runBundle;
  *
  * Usage:
  *   npx zitejs bundle                     # bundle all endpoints
- *   npx zitejs bundle --app admin-panel   # bundle endpoints for a specific app
+ *   npx zitejs bundle --app admin-panel   # bundle endpoints for one app or automation, by dir name
  *   npx zitejs bundle --script <path>     # bundle a one-off script
  *
  * Output: JSON to stdout
@@ -61,6 +61,7 @@ const path = __importStar(require("path"));
 const fs = __importStar(require("fs"));
 const parser_1 = require("@babel/parser");
 const node_module_1 = require("node:module");
+const sourceRoots_js_1 = require("../sourceRoots.js");
 // workerd's `nodejs_compat` does not provide these. Left external they bundle
 // fine and then kill the worker at load time with `No such module`; excluded,
 // esbuild fails the one endpoint with a resolvable error instead. Pinned by
@@ -615,7 +616,10 @@ async function runBundle() {
     const appFlag = args.indexOf('--app');
     let baseDir = process.cwd();
     if (appFlag !== -1 && args[appFlag + 1]) {
-        baseDir = path.resolve(baseDir, 'apps', args[appFlag + 1]);
+        const name = args[appFlag + 1];
+        // A dir that exists under no root still resolves under `apps/`, so the
+        // error names the path a caller expects rather than "not found".
+        baseDir = path.resolve(baseDir, (0, sourceRoots_js_1.findSourceDir)(name, baseDir)?.path ?? path.join('apps', name));
     }
     // If explicit endpoint names passed, use those; otherwise find all.
     // Skipping `--app`'s VALUE as well as the flag: it is a positional arg, so

package/dist/cjs/check/index.js

@@ -4,14 +4,7 @@ exports.runCheck = runCheck;
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const path_1 = require("path");
-function findAppDirs() {
-    const appsDir = 'apps';
-    if (!(0, fs_1.existsSync)(appsDir))
-        return [];
-    return (0, fs_1.readdirSync)(appsDir, { withFileTypes: true })
-        .filter(d => d.isDirectory())
-        .map(d => d.name);
-}
+const sourceRoots_js_1 = require("../sourceRoots.js");
 /**
  * An argument array, not a command string, so no shell is involved.
  *
@@ -66,15 +59,14 @@ function bundleFailures(output) {
     return failures;
 }
 async function runCheck() {
-    const appDirs = findAppDirs();
+    const appDirs = (0, sourceRoots_js_1.listSourceDirs)();
     if (appDirs.length === 0) {
-        console.error('No apps found in apps/ directory.');
+        console.error('No apps or automations found under apps/ or automations/.');
         process.exit(1);
     }
     let allPassed = true;
-    for (const app of appDirs) {
-        const appPath = (0, path_1.join)('apps', app);
-        console.log(`\n── ${app} ──`);
+    for (const { dir: app, path: appPath } of appDirs) {
+        console.log(`\n── ${appPath} ──`);
         // Only tsconfig.app.json compiles anything. The app's tsconfig.json is a
         // solution-style config — `"files": []` plus a reference — so
         // `tsc --noEmit -p tsconfig.json` type-checks zero files and exits 0. It

package/dist/cjs/cli.js

@@ -73,8 +73,8 @@ async function main() {
             console.error('Commands:');
             console.error('  sync      Generate .zite/db.ts from database schema (single-app)');
             console.error('  dev       Run sync then watch for changes (like npx convex dev)');
-            console.error('  generate  One-shot sync + regenerate all apps .zite/ files (monorepo)');
-            console.error('  check   Run tsc --noEmit and vite build for all apps');
+            console.error('  generate  Regenerate every app and automation .zite/ (monorepo)');
+            console.error('  check   Run tsc --noEmit (and vite build where there is one) for every app and automation');
             console.error('  bundle  Bundle src/api/*.ts endpoints for cloudflare-lambda');
             process.exit(1);
     }

package/dist/cjs/dev/index.js

@@ -5,6 +5,7 @@ exports.runDev = runDev;
 const fs_1 = require("fs");
 const fs_2 = require("fs");
 const path_1 = require("path");
+const sourceRoots_js_1 = require("../sourceRoots.js");
 const index_js_1 = require("../sync/index.js");
 const lib_js_1 = require("../sync/lib.js");
 const debounceTimers = new Map();
@@ -14,17 +15,9 @@ function debounce(key, fn, ms) {
         clearTimeout(existing);
     debounceTimers.set(key, setTimeout(fn, ms));
 }
-function findAppDirs() {
-    const appsDir = "apps";
-    if (!(0, fs_2.existsSync)(appsDir))
-        return [];
-    return (0, fs_2.readdirSync)(appsDir, { withFileTypes: true })
-        .filter((d) => d.isDirectory())
-        .map((d) => d.name);
-}
 function getFlowId(appDir) {
     try {
-        const configPath = (0, path_1.join)("apps", appDir, "zite.config.json");
+        const configPath = (0, path_1.join)(appDir.path, "zite.config.json");
         if ((0, fs_2.existsSync)(configPath)) {
             const config = JSON.parse((0, fs_2.readFileSync)(configPath, "utf-8"));
             return config.id;
@@ -33,28 +26,22 @@ function getFlowId(appDir) {
     catch { }
     return undefined;
 }
-/**
- * Find the connected email integration's key in an app's zite.config.json,
- * if any. The key is the integrationId used by the runtime SDK bridge.
- */
-function getEmailIntegrationId(appDir) {
+const readJsonFile = (path) => {
     try {
-        const configPath = (0, path_1.join)("apps", appDir, "zite.config.json");
-        if (!(0, fs_2.existsSync)(configPath))
-            return undefined;
-        const config = JSON.parse((0, fs_2.readFileSync)(configPath, "utf-8"));
-        const integrations = config.integrations ?? {};
-        for (const [id, int] of Object.entries(integrations)) {
-            if (int?.type === "email")
-                return id;
-        }
+        return (0, fs_2.existsSync)(path)
+            ? JSON.parse((0, fs_2.readFileSync)(path, "utf-8"))
+            : undefined;
     }
-    catch { }
-    return undefined;
+    catch {
+        return undefined;
+    }
+};
+function getEmailIntegrationId(appDir) {
+    return (0, lib_js_1.findEmailIntegrationId)(readJsonFile((0, path_1.join)(appDir.path, "zite.config.json")), readJsonFile("zite.config.json"));
 }
 function getDeclaredEnvVarNames(appDir) {
     try {
-        const configPath = (0, path_1.join)("apps", appDir, "zite.config.json");
+        const configPath = (0, path_1.join)(appDir.path, "zite.config.json");
         if (!(0, fs_2.existsSync)(configPath))
             return [];
         const config = JSON.parse((0, fs_2.readFileSync)(configPath, "utf-8"));
@@ -65,7 +52,7 @@ function getDeclaredEnvVarNames(appDir) {
     }
 }
 function regenerateAppTypedWrappers(appDir) {
-    const outDir = (0, path_1.join)("apps", appDir, ".zite");
+    const outDir = (0, path_1.join)(appDir.path, ".zite");
     (0, fs_2.mkdirSync)(outDir, { recursive: true });
     // user.ts and auth.ts no longer generated — User type is fixed in zitejs/auth
     // Email integration: generate the Email client at .zite/integrations/email.ts.
@@ -80,7 +67,7 @@ function regenerateAppTypedWrappers(appDir) {
     (0, fs_2.writeFileSync)((0, path_1.join)(outDir, "backend.ts"), (0, lib_js_1.generateBackendWrapperTs)(getDeclaredEnvVarNames(appDir)));
 }
 function regenerateAppApiTs(appDir) {
-    const apiDir = (0, path_1.join)("apps", appDir, "src", "api");
+    const apiDir = (0, path_1.join)(appDir.path, "src", "api");
     if (!(0, fs_2.existsSync)(apiDir))
         return;
     // Sorted because `readdir` order is unspecified — it is whatever the
@@ -100,14 +87,14 @@ function regenerateAppApiTs(appDir) {
     }));
     const content = (0, lib_js_1.generateApiTs)(endpointFiles);
     if (content) {
-        const outDir = (0, path_1.join)("apps", appDir, ".zite");
+        const outDir = (0, path_1.join)(appDir.path, ".zite");
         (0, fs_2.mkdirSync)(outDir, { recursive: true });
         (0, fs_2.writeFileSync)((0, path_1.join)(outDir, "api.ts"), content);
-        console.log(`Updated apps/${appDir}/.zite/api.ts`);
+        console.log(`Updated ${appDir.path}/.zite/api.ts`);
     }
 }
 function regenerateAppAirtableSdk(appDir) {
-    const lockPath = (0, path_1.join)("apps", appDir, "zite.lock");
+    const lockPath = (0, path_1.join)(appDir.path, "zite.lock");
     console.log(`[airtable-sdk] Checking ${lockPath} exists: ${(0, fs_2.existsSync)(lockPath)}`);
     if (!(0, fs_2.existsSync)(lockPath))
         return;
@@ -128,15 +115,15 @@ function regenerateAppAirtableSdk(appDir) {
             };
             const content = (0, lib_js_1.generateAirtableTs)(airtableLock);
             if (content) {
-                const outDir = (0, path_1.join)("apps", appDir, ".zite", "integrations");
+                const outDir = (0, path_1.join)(appDir.path, ".zite", "integrations");
                 (0, fs_2.mkdirSync)(outDir, { recursive: true });
                 (0, fs_2.writeFileSync)((0, path_1.join)(outDir, "airtable.ts"), content);
-                console.log(`Updated apps/${appDir}/.zite/integrations/airtable.ts`);
+                console.log(`Updated ${appDir.path}/.zite/integrations/airtable.ts`);
             }
         }
     }
     catch (err) {
-        console.error(`[airtable-sdk] Error processing lock for ${appDir}:`, err);
+        console.error(`[airtable-sdk] Error processing lock for ${appDir.path}:`, err);
     }
 }
 async function runGenerate() {
@@ -160,8 +147,8 @@ async function runGenerate() {
     catch (err) {
         console.warn("DB SDK generation failed:", err instanceof Error ? err.message : err);
     }
-    // 2. Find all apps and regenerate their .zite/ files
-    const appDirs = findAppDirs();
+    // 2. Find every app and automation and regenerate their .zite/ files
+    const appDirs = (0, sourceRoots_js_1.listSourceDirs)();
     for (const app of appDirs) {
         regenerateAppApiTs(app);
         regenerateAppTypedWrappers(app);
@@ -181,33 +168,33 @@ async function runDev() {
         console.warn("Initial sync failed (continuing with watcher):", err instanceof Error ? err.message : err);
     }
     console.log("");
-    // 2. Find all apps and regenerate their .zite/ files
-    const appDirs = findAppDirs();
+    // 2. Find every app and automation and regenerate their .zite/ files
+    const appDirs = (0, sourceRoots_js_1.listSourceDirs)();
     for (const app of appDirs) {
         regenerateAppApiTs(app);
         regenerateAppTypedWrappers(app);
     }
-    // 3. Watch each app's src/api/ for endpoint changes
+    // 3. Watch each dir's src/api/ for endpoint changes
     let watchingAny = false;
     for (const app of appDirs) {
-        const apiDir = (0, path_1.join)("apps", app, "src", "api");
+        const apiDir = (0, path_1.join)(app.path, "src", "api");
         if (!(0, fs_2.existsSync)(apiDir))
             continue;
         watchingAny = true;
-        console.log(`Watching apps/${app}/src/api/ for endpoint changes...`);
+        console.log(`Watching ${app.path}/src/api/ for endpoint changes...`);
         (0, fs_1.watch)(apiDir, { recursive: true }, (_event, filename) => {
             if (!filename)
                 return;
             if (!filename.endsWith(".ts") && !filename.endsWith(".js"))
                 return;
-            debounce(app, () => {
-                console.log(`Endpoint changed in ${app}: ${filename}`);
+            debounce(app.path, () => {
+                console.log(`Endpoint changed in ${app.path}: ${filename}`);
                 regenerateAppApiTs(app);
             }, 200);
         });
     }
     if (!watchingAny) {
-        console.log("No apps with src/api/ found.");
+        console.log("No apps or automations with src/api/ found.");
     }
     // 4. Watch zite.schema.json for schema drift
     if ((0, fs_2.existsSync)("zite.schema.json")) {

package/dist/cjs/meta/index.d.ts

@@ -0,0 +1,14 @@
+export type ZiteProjectUser = {
+    uuid: string;
+    firstName: string | null;
+    lastName: string | null;
+    email: string;
+    profilePictureUrl: string | null;
+};
+export type MetaListUsersResult = {
+    users: ZiteProjectUser[];
+};
+export declare class ZiteMeta {
+    static listUsers(): Promise<MetaListUsersResult>;
+}
+export declare const Meta: typeof ZiteMeta;

package/dist/cjs/meta/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Meta = exports.ZiteMeta = void 0;
+const sdkCall_js_1 = require("../internal/sdkCall.js");
+const META_SDK_INTEGRATION_ID = '__meta__';
+class ZiteMeta {
+    static listUsers() {
+        return (0, sdkCall_js_1.getSdkCall)()(META_SDK_INTEGRATION_ID, 'ZiteMeta', 'listUsers', {});
+    }
+}
+exports.ZiteMeta = ZiteMeta;
+exports.Meta = ZiteMeta;

package/dist/cjs/notifications/index.d.ts

@@ -0,0 +1,25 @@
+export interface NotificationLink {
+    path?: string;
+    params?: Record<string, string>;
+}
+export type NotificationsCreateParams = {
+    recipients: string[];
+    title: string;
+    body?: string;
+    link?: NotificationLink;
+    path?: string;
+    params?: Record<string, string>;
+    payload?: Record<string, unknown>;
+    idempotencyKey?: string;
+};
+export type NotificationsCreateResult = {
+    created: number;
+} | {
+    created: 0;
+    preview: true;
+    wouldCreate: number;
+};
+export declare class ZiteNotifications {
+    static create(params: NotificationsCreateParams): Promise<NotificationsCreateResult>;
+}
+export declare const Notifications: typeof ZiteNotifications;

package/dist/cjs/notifications/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Notifications = exports.ZiteNotifications = void 0;
+const sdkCall_js_1 = require("../internal/sdkCall.js");
+const NOTIFICATIONS_SDK_INTEGRATION_ID = '__notifications__';
+class ZiteNotifications {
+    static create(params) {
+        return (0, sdkCall_js_1.getSdkCall)()(NOTIFICATIONS_SDK_INTEGRATION_ID, 'ZiteNotifications', 'create', params);
+    }
+}
+exports.ZiteNotifications = ZiteNotifications;
+exports.Notifications = ZiteNotifications;

package/dist/cjs/sourceRoots.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The repo-root directories a project's own source lives under: `apps/` for
+ * apps and `automations/` for automations (endpoints with no frontend). The
+ * backend keeps the same list; a dir name is unique across both roots, so a
+ * bare name still identifies one dir.
+ */
+export declare const SOURCE_ROOTS: readonly ["apps", "automations"];
+export type SourceRoot = (typeof SOURCE_ROOTS)[number];
+export interface SourceDir {
+    root: SourceRoot;
+    /** The bare directory name. */
+    dir: string;
+    /** `<root>/<dir>`, relative to the repo root. */
+    path: string;
+}
+/** Every source dir under every root, in root order then name order. */
+export declare function listSourceDirs(cwd?: string): SourceDir[];
+/** The source dir with this bare name, under whichever root holds it. */
+export declare function findSourceDir(name: string, cwd?: string): SourceDir | undefined;

package/dist/cjs/sourceRoots.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOURCE_ROOTS = void 0;
+exports.listSourceDirs = listSourceDirs;
+exports.findSourceDir = findSourceDir;
+const fs_1 = require("fs");
+const path_1 = require("path");
+/**
+ * The repo-root directories a project's own source lives under: `apps/` for
+ * apps and `automations/` for automations (endpoints with no frontend). The
+ * backend keeps the same list; a dir name is unique across both roots, so a
+ * bare name still identifies one dir.
+ */
+exports.SOURCE_ROOTS = ["apps", "automations"];
+/** Every source dir under every root, in root order then name order. */
+function listSourceDirs(cwd = ".") {
+    const dirs = [];
+    for (const root of exports.SOURCE_ROOTS) {
+        const rootPath = (0, path_1.join)(cwd, root);
+        if (!(0, fs_1.existsSync)(rootPath))
+            continue;
+        for (const entry of (0, fs_1.readdirSync)(rootPath, { withFileTypes: true })) {
+            if (!entry.isDirectory())
+                continue;
+            dirs.push({ root, dir: entry.name, path: (0, path_1.join)(root, entry.name) });
+        }
+    }
+    return dirs;
+}
+/** The source dir with this bare name, under whichever root holds it. */
+function findSourceDir(name, cwd = ".") {
+    return listSourceDirs(cwd).find((d) => d.dir === name);
+}

package/dist/cjs/sync/lib.d.ts

@@ -82,6 +82,12 @@ export declare function normalizeAirtableLockNames(lock: AirtableLock): {
 };
 export declare function generateAirtableTs(inputLock: AirtableLock): string | null;
 export declare function generateBackendWrapperTs(envVarNames?: string[]): string;
+/**
+ * The key of the email integration an app sends through, which is the
+ * integrationId the runtime SDK bridge dispatches on. The app's own entry wins;
+ * otherwise it is the workspace email the app has `integrationSettings` for.
+ */
+export declare function findEmailIntegrationId(appConfig: unknown, workspaceConfig: unknown): string | undefined;
 /**
  * Generate `.zite/integrations/email.ts` — the `Email` client for an app with
  * an email integration connected. Mirrors the airtable SDK generation: a thin