zitejs 0.9.120 → 0.9.121

package/dist/cjs/auth/config.d.ts

@@ -2,3 +2,6 @@ export declare function getFlowId(): string;
 export declare function getApiUrl(): string;
 export declare function getAuthPageUrl(): string;
 export declare function getDbToken(): string;
+/** Undefined for apps built before the platform sent this — treat as unknown,
+ *  never as a default side. */
+export declare function getAccessMode(): 'internal' | 'external' | undefined;

package/dist/cjs/auth/config.js

@@ -4,6 +4,7 @@ exports.getFlowId = getFlowId;
 exports.getApiUrl = getApiUrl;
 exports.getAuthPageUrl = getAuthPageUrl;
 exports.getDbToken = getDbToken;
+exports.getAccessMode = getAccessMode;
 const env_js_1 = require("../internal/env.js");
 const API_ENVIRONMENTS = {
     production: 'https://api.fillout.com',
@@ -36,3 +37,9 @@ function getAuthPageUrl() {
 function getDbToken() {
     return (0, env_js_1.getEnv)('ZITE_DB_TOKEN', 'VITE_ZITE_DB_TOKEN') ?? '';
 }
+/** Undefined for apps built before the platform sent this — treat as unknown,
+ *  never as a default side. */
+function getAccessMode() {
+    const mode = (0, env_js_1.getEnv)('ZITE_ACCESS_MODE', 'VITE_ZITE_ACCESS_MODE');
+    return mode === 'internal' || mode === 'external' ? mode : undefined;
+}

package/dist/cjs/auth/index.js

@@ -5,10 +5,12 @@ exports.useAuth = useAuth;
 exports.loginWithRedirect = loginWithRedirect;
 exports.logout = logout;
 exports.updateProfile = updateProfile;
-const react_1 = require("better-auth/react");
+const react_1 = require("react");
+const react_2 = require("better-auth/react");
 const plugins_1 = require("better-auth/client/plugins");
 const constants_js_1 = require("./constants.js");
-const authClient = (0, react_1.createAuthClient)({
+const config_js_1 = require("./config.js");
+const authClient = (0, react_2.createAuthClient)({
     baseURL: '',
     plugins: [
         (0, plugins_1.magicLinkClient)(),
@@ -21,6 +23,22 @@ const authClient = (0, react_1.createAuthClient)({
     ],
 });
 exports.useSession = authClient.useSession;
+/**
+ * An internal app has no signed-out state — SSO runs before the bundle — so an
+ * empty session means it died underneath the app. Only `internal`: elsewhere a
+ * signed-out visitor is legitimate.
+ */
+function shouldRedirectSignedOut(isPending, hasUser) {
+    if (isPending || hasUser)
+        return false;
+    if ((0, config_js_1.getAccessMode)() !== 'internal')
+        return false;
+    if (typeof window === 'undefined')
+        return false;
+    // `loginWithRedirect` won't navigate from an auth page, so claiming a
+    // redirect here would hang `isLoading` forever.
+    return !window.location.pathname.startsWith('/auth/');
+}
 /**
  * `loginWithRedirect` and `logout` are returned as well as exported. The
  * pre-monorepo `useAuth()` returned them, so app code that destructures them
@@ -29,9 +47,17 @@ exports.useSession = authClient.useSession;
  */
 function useAuth() {
     const { data, isPending } = (0, exports.useSession)();
+    const user = data?.user ?? null;
+    const redirecting = shouldRedirectSignedOut(isPending, user !== null);
+    (0, react_1.useEffect)(() => {
+        if (redirecting)
+            loginWithRedirect();
+    }, [redirecting]);
     return {
-        user: data?.user ?? null,
-        isLoading: isPending,
+        user,
+        // Loading, not signed out: the signed-out branch is the empty screen this
+        // exists to prevent.
+        isLoading: isPending || redirecting,
         loginWithRedirect,
         logout,
     };

package/dist/cjs/auth/useAuth.test.js

@@ -1,18 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const vitest_1 = require("vitest");
-/**
- * The signed-out redirect on internal apps.
- *
- * A separate file from `index.test.ts` because it has to replace
- * `better-auth/react` wholesale to drive `useSession`, and that would strip the
- * real client the export tests next door assert against.
- *
- * The value here is entirely in WHICH signed-out renders it reacts to. An
- * external app has a real logged-out state, and an app built before the
- * platform sent an access mode tells us nothing — redirecting either turns a
- * working public page into a forced sign-in.
- */
+// Separate from index.test.ts: driving `useSession` means replacing
+// `better-auth/react`, which would strip the real client asserted against there.
 const { useSessionMock } = vitest_1.vi.hoisted(() => ({ useSessionMock: vitest_1.vi.fn() }));
 vitest_1.vi.mock('better-auth/react', () => ({
     createAuthClient: () => ({
@@ -27,8 +17,7 @@ vitest_1.vi.mock('better-auth/client/plugins', () => ({
     magicLinkClient: () => ({}),
     inferAdditionalFields: () => ({}),
 }));
-// `useAuth` takes only `useEffect` from React. Running it inline is the whole
-// of what a render would do here, and avoids pulling in a renderer.
+// `useAuth` uses only `useEffect`; running it inline avoids pulling in a renderer.
 vitest_1.vi.mock('react', () => ({ useEffect: (fn) => fn() }));
 const index_js_1 = require("./index.js");
 const APP_URL = 'https://app.zite.so/dashboard';
@@ -57,8 +46,6 @@ const render = (session, { accessMode, href = APP_URL } = {}) => {
     (0, vitest_1.it)('sends a signed-out visitor on an internal app to sign-in', () => {
         const { result, location } = render(signedOut, { accessMode: 'internal' });
         (0, vitest_1.expect)(location.href.startsWith('/auth/login')).toBe(true);
-        // Reported as loading rather than signed out: the signed-out branch of an
-        // internal app is the empty screen this exists to prevent.
         (0, vitest_1.expect)(result.isLoading).toBe(true);
     });
     (0, vitest_1.it)('leaves a signed-out visitor on an external app alone', () => {
@@ -67,7 +54,7 @@ const render = (session, { accessMode, href = APP_URL } = {}) => {
         (0, vitest_1.expect)(result.isLoading).toBe(false);
         (0, vitest_1.expect)(result.user).toBe(null);
     });
-    // Every app published before the platform started sending an access mode.
+    // i.e. every app published before the platform sent an access mode.
     (0, vitest_1.it)('leaves an app that never declared an access mode alone', () => {
         const { result, location } = render(signedOut);
         (0, vitest_1.expect)(location.href).toBe(APP_URL);
@@ -84,8 +71,7 @@ const render = (session, { accessMode, href = APP_URL } = {}) => {
         (0, vitest_1.expect)(result.isLoading).toBe(false);
         (0, vitest_1.expect)(result.user).toMatchObject({ id: 'u1' });
     });
-    // `loginWithRedirect` refuses to navigate away from an auth page, so claiming
-    // a redirect here would hang the caller on `isLoading` forever.
+    // Claiming a redirect it can't make would hang `isLoading` forever.
     (0, vitest_1.it)('does not claim to be loading on an auth page it cannot leave', () => {
         const { result } = render(signedOut, {
             accessMode: 'internal',

package/dist/cjs/backend/index.d.ts

@@ -3,6 +3,27 @@ export type { ZiteSchedule };
 export type ZiteWebhook = {
     paused?: boolean;
 };
+/**
+ * A provider trigger: what should fire the endpoint, declared as a literal.
+ * The platform registers it with the provider at publish, verifies each
+ * delivery and queues it; the endpoint only sees the payload. A `poll`
+ * trigger runs the endpoint on a cadence with `input.__poll.cursor` from the
+ * previous run, and the endpoint returns `{ cursor }` to advance it.
+ */
+export type ZiteTrigger = {
+    /**
+     * The connection's name in `zite.config.json`. Registered with the
+     * provider by `src/triggers/<endpointId>/subscribe.ts` and taken down
+     * by `unsubscribe.ts`, which the platform runs at publish and teardown.
+     */
+    integration: string;
+    paused?: boolean;
+} | {
+    provider: "poll";
+    /** `<n>m` (1–59) or `<n>h` (1–23) */
+    every: string;
+    paused?: boolean;
+};
 export interface ZiteRequestContext {
     user: {
         id: string;
@@ -58,7 +79,7 @@ export type ZiteStreamInterface = {
     write: (data: unknown) => Promise<void>;
     forward: (asyncIterable: AsyncIterable<string>) => Promise<string>;
 };
-export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput> {
+export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput, TTrigger extends ZiteTrigger | undefined = undefined> {
     description?: string;
     inputSchema?: SchemaLike<TInput, TRawInput>;
     /**
@@ -82,6 +103,12 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
      * `{ user: null }` for a webhook fire exactly as it does for a cron one.
      */
     webhook?: TWebhook;
+    /**
+     * When set, the platform fires this endpoint from the named provider. Like
+     * `schedule` and `webhook`, this widens `context`: a provider delivery has
+     * no signed-in user.
+     */
+    trigger?: TTrigger;
     /**
      * Set by {@link createEndpoint}, not by hand. The worker validates
      * `inputSchema` for bundles built before this did, and skips ones that
@@ -90,7 +117,7 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
     validatesInput?: boolean;
     execute: (params: {
         input: TInput;
-        context: TSchedule extends ZiteSchedule ? ZiteRequestContext | ZiteScheduledContext : TWebhook extends ZiteWebhook ? ZiteRequestContext | ZiteScheduledContext : ZiteRequestContext;
+        context: TSchedule extends ZiteSchedule ? ZiteRequestContext | ZiteScheduledContext : TWebhook extends ZiteWebhook ? ZiteRequestContext | ZiteScheduledContext : TTrigger extends ZiteTrigger ? ZiteRequestContext | ZiteScheduledContext : ZiteRequestContext;
     } & (TStream extends true ? {
         stream: ZiteStreamInterface;
     } : {})) => Promise<TOutput> | TOutput;
@@ -102,4 +129,4 @@ export interface EndpointConfig<TInput = unknown, TOutput = unknown, TStream ext
  * field could be missing and the endpoint ran anyway. Parsing here is also what
  * makes `TRawInput` -> `TInput` (defaults, transforms) true at runtime.
  */
-export declare function createEndpoint<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput>(config: EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput>): EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput>;
+export declare function createEndpoint<TInput = unknown, TOutput = unknown, TStream extends boolean = false, TSchedule extends ZiteSchedule | undefined = undefined, TWebhook extends ZiteWebhook | undefined = undefined, TRawInput = TInput, TTrigger extends ZiteTrigger | undefined = undefined>(config: EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput, TTrigger>): EndpointConfig<TInput, TOutput, TStream, TSchedule, TWebhook, TRawInput, TTrigger>;

package/dist/cjs/backend/index.js

@@ -32,7 +32,7 @@ class ZiteError extends Error {
 }
 exports.ZiteError = ZiteError;
 /** Injected by the runner on a platform-fired run — see `isPlatformTriggeredInput`. */
-const PLATFORM_TRIGGER_KEYS = ["__cron", "__webhook"];
+const PLATFORM_TRIGGER_KEYS = ["__cron", "__webhook", "__poll"];
 function isPlatformTriggeredInput(input) {
     if (typeof input !== "object" || input === null)
         return false;
@@ -60,7 +60,7 @@ function describeIssues(error) {
  */
 function createEndpoint(config) {
     const { inputSchema, execute } = config;
-    const firesWithoutARequest = Boolean(config.schedule || config.webhook);
+    const firesWithoutARequest = Boolean(config.schedule || config.webhook || config.trigger);
     // An `inputSchema` that isn't a validator stays inert, as it was.
     if (!inputSchema || typeof inputSchema.parse !== "function")
         return config;

package/dist/cjs/bundle/index.d.ts

@@ -8,7 +8,7 @@
  *
  * Usage:
  *   npx zitejs bundle                     # bundle all endpoints
- *   npx zitejs bundle --app admin-panel   # bundle endpoints for a specific app
+ *   npx zitejs bundle --app admin-panel   # bundle endpoints for one app or automation, by dir name
  *   npx zitejs bundle --script <path>     # bundle a one-off script
  *
  * Output: JSON to stdout

package/dist/cjs/bundle/index.js

@@ -45,7 +45,7 @@ exports.runBundle = runBundle;
  *
  * Usage:
  *   npx zitejs bundle                     # bundle all endpoints
- *   npx zitejs bundle --app admin-panel   # bundle endpoints for a specific app
+ *   npx zitejs bundle --app admin-panel   # bundle endpoints for one app or automation, by dir name
  *   npx zitejs bundle --script <path>     # bundle a one-off script
  *
  * Output: JSON to stdout
@@ -61,6 +61,7 @@ const path = __importStar(require("path"));
 const fs = __importStar(require("fs"));
 const parser_1 = require("@babel/parser");
 const node_module_1 = require("node:module");
+const sourceRoots_js_1 = require("../sourceRoots.js");
 // workerd's `nodejs_compat` does not provide these. Left external they bundle
 // fine and then kill the worker at load time with `No such module`; excluded,
 // esbuild fails the one endpoint with a resolvable error instead. Pinned by
@@ -615,7 +616,10 @@ async function runBundle() {
     const appFlag = args.indexOf('--app');
     let baseDir = process.cwd();
     if (appFlag !== -1 && args[appFlag + 1]) {
-        baseDir = path.resolve(baseDir, 'apps', args[appFlag + 1]);
+        const name = args[appFlag + 1];
+        // A dir that exists under no root still resolves under `apps/`, so the
+        // error names the path a caller expects rather than "not found".
+        baseDir = path.resolve(baseDir, (0, sourceRoots_js_1.findSourceDir)(name, baseDir)?.path ?? path.join('apps', name));
     }
     // If explicit endpoint names passed, use those; otherwise find all.
     // Skipping `--app`'s VALUE as well as the flag: it is a positional arg, so

package/dist/cjs/check/index.js

@@ -4,14 +4,7 @@ exports.runCheck = runCheck;
 const child_process_1 = require("child_process");
 const fs_1 = require("fs");
 const path_1 = require("path");
-function findAppDirs() {
-    const appsDir = 'apps';
-    if (!(0, fs_1.existsSync)(appsDir))
-        return [];
-    return (0, fs_1.readdirSync)(appsDir, { withFileTypes: true })
-        .filter(d => d.isDirectory())
-        .map(d => d.name);
-}
+const sourceRoots_js_1 = require("../sourceRoots.js");
 /**
  * An argument array, not a command string, so no shell is involved.
  *
@@ -66,15 +59,14 @@ function bundleFailures(output) {
     return failures;
 }
 async function runCheck() {
-    const appDirs = findAppDirs();
+    const appDirs = (0, sourceRoots_js_1.listSourceDirs)();
     if (appDirs.length === 0) {
-        console.error('No apps found in apps/ directory.');
+        console.error('No apps or automations found under apps/ or automations/.');
         process.exit(1);
     }
     let allPassed = true;
-    for (const app of appDirs) {
-        const appPath = (0, path_1.join)('apps', app);
-        console.log(`\n── ${app} ──`);
+    for (const { dir: app, path: appPath } of appDirs) {
+        console.log(`\n── ${appPath} ──`);
         // Only tsconfig.app.json compiles anything. The app's tsconfig.json is a
         // solution-style config — `"files": []` plus a reference — so
         // `tsc --noEmit -p tsconfig.json` type-checks zero files and exits 0. It

package/dist/cjs/cli.js

@@ -73,8 +73,8 @@ async function main() {
             console.error('Commands:');
             console.error('  sync      Generate .zite/db.ts from database schema (single-app)');
             console.error('  dev       Run sync then watch for changes (like npx convex dev)');
-            console.error('  generate  One-shot sync + regenerate all apps .zite/ files (monorepo)');
-            console.error('  check   Run tsc --noEmit and vite build for all apps');
+            console.error('  generate  Regenerate every app and automation .zite/ (monorepo)');
+            console.error('  check   Run tsc --noEmit (and vite build where there is one) for every app and automation');
             console.error('  bundle  Bundle src/api/*.ts endpoints for cloudflare-lambda');
             process.exit(1);
     }

package/dist/cjs/dev/index.js

@@ -5,6 +5,7 @@ exports.runDev = runDev;
 const fs_1 = require("fs");
 const fs_2 = require("fs");
 const path_1 = require("path");
+const sourceRoots_js_1 = require("../sourceRoots.js");
 const index_js_1 = require("../sync/index.js");
 const lib_js_1 = require("../sync/lib.js");
 const debounceTimers = new Map();
@@ -14,17 +15,9 @@ function debounce(key, fn, ms) {
         clearTimeout(existing);
     debounceTimers.set(key, setTimeout(fn, ms));
 }
-function findAppDirs() {
-    const appsDir = "apps";
-    if (!(0, fs_2.existsSync)(appsDir))
-        return [];
-    return (0, fs_2.readdirSync)(appsDir, { withFileTypes: true })
-        .filter((d) => d.isDirectory())
-        .map((d) => d.name);
-}
 function getFlowId(appDir) {
     try {
-        const configPath = (0, path_1.join)("apps", appDir, "zite.config.json");
+        const configPath = (0, path_1.join)(appDir.path, "zite.config.json");
         if ((0, fs_2.existsSync)(configPath)) {
             const config = JSON.parse((0, fs_2.readFileSync)(configPath, "utf-8"));
             return config.id;
@@ -44,11 +37,11 @@ const readJsonFile = (path) => {
     }
 };
 function getEmailIntegrationId(appDir) {
-    return (0, lib_js_1.findEmailIntegrationId)(readJsonFile((0, path_1.join)("apps", appDir, "zite.config.json")), readJsonFile("zite.config.json"));
+    return (0, lib_js_1.findEmailIntegrationId)(readJsonFile((0, path_1.join)(appDir.path, "zite.config.json")), readJsonFile("zite.config.json"));
 }
 function getDeclaredEnvVarNames(appDir) {
     try {
-        const configPath = (0, path_1.join)("apps", appDir, "zite.config.json");
+        const configPath = (0, path_1.join)(appDir.path, "zite.config.json");
         if (!(0, fs_2.existsSync)(configPath))
             return [];
         const config = JSON.parse((0, fs_2.readFileSync)(configPath, "utf-8"));
@@ -59,7 +52,7 @@ function getDeclaredEnvVarNames(appDir) {
     }
 }
 function regenerateAppTypedWrappers(appDir) {
-    const outDir = (0, path_1.join)("apps", appDir, ".zite");
+    const outDir = (0, path_1.join)(appDir.path, ".zite");
     (0, fs_2.mkdirSync)(outDir, { recursive: true });
     // user.ts and auth.ts no longer generated — User type is fixed in zitejs/auth
     // Email integration: generate the Email client at .zite/integrations/email.ts.
@@ -74,7 +67,7 @@ function regenerateAppTypedWrappers(appDir) {
     (0, fs_2.writeFileSync)((0, path_1.join)(outDir, "backend.ts"), (0, lib_js_1.generateBackendWrapperTs)(getDeclaredEnvVarNames(appDir)));
 }
 function regenerateAppApiTs(appDir) {
-    const apiDir = (0, path_1.join)("apps", appDir, "src", "api");
+    const apiDir = (0, path_1.join)(appDir.path, "src", "api");
     if (!(0, fs_2.existsSync)(apiDir))
         return;
     // Sorted because `readdir` order is unspecified — it is whatever the
@@ -94,14 +87,14 @@ function regenerateAppApiTs(appDir) {
     }));
     const content = (0, lib_js_1.generateApiTs)(endpointFiles);
     if (content) {
-        const outDir = (0, path_1.join)("apps", appDir, ".zite");
+        const outDir = (0, path_1.join)(appDir.path, ".zite");
         (0, fs_2.mkdirSync)(outDir, { recursive: true });
         (0, fs_2.writeFileSync)((0, path_1.join)(outDir, "api.ts"), content);
-        console.log(`Updated apps/${appDir}/.zite/api.ts`);
+        console.log(`Updated ${appDir.path}/.zite/api.ts`);
     }
 }
 function regenerateAppAirtableSdk(appDir) {
-    const lockPath = (0, path_1.join)("apps", appDir, "zite.lock");
+    const lockPath = (0, path_1.join)(appDir.path, "zite.lock");
     console.log(`[airtable-sdk] Checking ${lockPath} exists: ${(0, fs_2.existsSync)(lockPath)}`);
     if (!(0, fs_2.existsSync)(lockPath))
         return;
@@ -122,15 +115,15 @@ function regenerateAppAirtableSdk(appDir) {
             };
             const content = (0, lib_js_1.generateAirtableTs)(airtableLock);
             if (content) {
-                const outDir = (0, path_1.join)("apps", appDir, ".zite", "integrations");
+                const outDir = (0, path_1.join)(appDir.path, ".zite", "integrations");
                 (0, fs_2.mkdirSync)(outDir, { recursive: true });
                 (0, fs_2.writeFileSync)((0, path_1.join)(outDir, "airtable.ts"), content);
-                console.log(`Updated apps/${appDir}/.zite/integrations/airtable.ts`);
+                console.log(`Updated ${appDir.path}/.zite/integrations/airtable.ts`);
             }
         }
     }
     catch (err) {
-        console.error(`[airtable-sdk] Error processing lock for ${appDir}:`, err);
+        console.error(`[airtable-sdk] Error processing lock for ${appDir.path}:`, err);
     }
 }
 async function runGenerate() {
@@ -154,8 +147,8 @@ async function runGenerate() {
     catch (err) {
         console.warn("DB SDK generation failed:", err instanceof Error ? err.message : err);
     }
-    // 2. Find all apps and regenerate their .zite/ files
-    const appDirs = findAppDirs();
+    // 2. Find every app and automation and regenerate their .zite/ files
+    const appDirs = (0, sourceRoots_js_1.listSourceDirs)();
     for (const app of appDirs) {
         regenerateAppApiTs(app);
         regenerateAppTypedWrappers(app);
@@ -175,33 +168,33 @@ async function runDev() {
         console.warn("Initial sync failed (continuing with watcher):", err instanceof Error ? err.message : err);
     }
     console.log("");
-    // 2. Find all apps and regenerate their .zite/ files
-    const appDirs = findAppDirs();
+    // 2. Find every app and automation and regenerate their .zite/ files
+    const appDirs = (0, sourceRoots_js_1.listSourceDirs)();
     for (const app of appDirs) {
         regenerateAppApiTs(app);
         regenerateAppTypedWrappers(app);
     }
-    // 3. Watch each app's src/api/ for endpoint changes
+    // 3. Watch each dir's src/api/ for endpoint changes
     let watchingAny = false;
     for (const app of appDirs) {
-        const apiDir = (0, path_1.join)("apps", app, "src", "api");
+        const apiDir = (0, path_1.join)(app.path, "src", "api");
         if (!(0, fs_2.existsSync)(apiDir))
             continue;
         watchingAny = true;
-        console.log(`Watching apps/${app}/src/api/ for endpoint changes...`);
+        console.log(`Watching ${app.path}/src/api/ for endpoint changes...`);
         (0, fs_1.watch)(apiDir, { recursive: true }, (_event, filename) => {
             if (!filename)
                 return;
             if (!filename.endsWith(".ts") && !filename.endsWith(".js"))
                 return;
-            debounce(app, () => {
-                console.log(`Endpoint changed in ${app}: ${filename}`);
+            debounce(app.path, () => {
+                console.log(`Endpoint changed in ${app.path}: ${filename}`);
                 regenerateAppApiTs(app);
             }, 200);
         });
     }
     if (!watchingAny) {
-        console.log("No apps with src/api/ found.");
+        console.log("No apps or automations with src/api/ found.");
     }
     // 4. Watch zite.schema.json for schema drift
     if ((0, fs_2.existsSync)("zite.schema.json")) {

package/dist/cjs/sourceRoots.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The repo-root directories a project's own source lives under: `apps/` for
+ * apps and `automations/` for automations (endpoints with no frontend). The
+ * backend keeps the same list; a dir name is unique across both roots, so a
+ * bare name still identifies one dir.
+ */
+export declare const SOURCE_ROOTS: readonly ["apps", "automations"];
+export type SourceRoot = (typeof SOURCE_ROOTS)[number];
+export interface SourceDir {
+    root: SourceRoot;
+    /** The bare directory name. */
+    dir: string;
+    /** `<root>/<dir>`, relative to the repo root. */
+    path: string;
+}
+/** Every source dir under every root, in root order then name order. */
+export declare function listSourceDirs(cwd?: string): SourceDir[];
+/** The source dir with this bare name, under whichever root holds it. */
+export declare function findSourceDir(name: string, cwd?: string): SourceDir | undefined;

package/dist/cjs/sourceRoots.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOURCE_ROOTS = void 0;
+exports.listSourceDirs = listSourceDirs;
+exports.findSourceDir = findSourceDir;
+const fs_1 = require("fs");
+const path_1 = require("path");
+/**
+ * The repo-root directories a project's own source lives under: `apps/` for
+ * apps and `automations/` for automations (endpoints with no frontend). The
+ * backend keeps the same list; a dir name is unique across both roots, so a
+ * bare name still identifies one dir.
+ */
+exports.SOURCE_ROOTS = ["apps", "automations"];
+/** Every source dir under every root, in root order then name order. */
+function listSourceDirs(cwd = ".") {
+    const dirs = [];
+    for (const root of exports.SOURCE_ROOTS) {
+        const rootPath = (0, path_1.join)(cwd, root);
+        if (!(0, fs_1.existsSync)(rootPath))
+            continue;
+        for (const entry of (0, fs_1.readdirSync)(rootPath, { withFileTypes: true })) {
+            if (!entry.isDirectory())
+                continue;
+            dirs.push({ root, dir: entry.name, path: (0, path_1.join)(root, entry.name) });
+        }
+    }
+    return dirs;
+}
+/** The source dir with this bare name, under whichever root holds it. */
+function findSourceDir(name, cwd = ".") {
+    return listSourceDirs(cwd).find((d) => d.dir === name);
+}

package/dist/cjs/upload/index.js

@@ -113,6 +113,25 @@ async function performUpload(data, filename) {
     if (!putRes.ok) {
         throw new FileUploadError('Upload failed');
     }
+    // Gateways that predate the storage ledger omit the token. The file is
+    // already at fileUrl, so those uploads still succeed.
+    if (session.completionToken) {
+        const completeRes = await fetch((0, config_js_1.getApiUrl)() +
+            '/v1/zite/public/' +
+            flowId +
+            '/complete-upload?mode=' +
+            mode, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                ...authHeaders(),
+            },
+            body: JSON.stringify({ completionToken: session.completionToken }),
+        });
+        if (!completeRes.ok) {
+            throw new FileUploadError(await readErrorMessage(completeRes, 'Upload failed'));
+        }
+    }
     return session.fileUrl;
 }
 async function uploadFile({ data, filename, }) {

package/dist/cjs/upload/index.test.js

@@ -25,7 +25,7 @@ const fetchMock = vitest_1.vi.fn();
     });
 });
 (0, vitest_1.describe)('uploadFile', () => {
-    (0, vitest_1.it)('requests a session then PUTs the bytes to the presigned URL', async () => {
+    (0, vitest_1.it)('requests a session, PUTs the bytes, then completes the upload', async () => {
         const file = new File(['hello-world'], 'hello.txt', { type: 'text/plain' });
         fetchMock
             .mockResolvedValueOnce({
@@ -35,12 +35,14 @@ const fetchMock = vitest_1.vi.fn();
                 presignedUrl: 'https://s3.example.com/put',
                 fileUrl: 'https://uploads.zite.com/orgid-1/zite-uploads/app_123/hello.txt',
                 contentType: 'text/plain',
+                completionToken: 'signed-token',
             }),
         })
-            .mockResolvedValueOnce({ ok: true });
+            .mockResolvedValueOnce({ ok: true })
+            .mockResolvedValueOnce({ ok: true, json: async () => ({ success: true }) });
         const result = await (0, index_js_1.uploadFile)({ data: file, filename: 'hello.txt' });
         (0, vitest_1.expect)(result.fileUrl).toContain('hello.txt');
-        (0, vitest_1.expect)(fetchMock).toHaveBeenCalledTimes(2);
+        (0, vitest_1.expect)(fetchMock).toHaveBeenCalledTimes(3);
         (0, vitest_1.expect)(fetchMock.mock.calls[0][0]).toBe('https://api.example.com/v1/zite/public/app_123/upload-session?mode=live');
         const sessionInit = fetchMock.mock.calls[0][1];
         (0, vitest_1.expect)(JSON.parse(sessionInit.body)).toEqual({
@@ -50,6 +52,31 @@ const fetchMock = vitest_1.vi.fn();
         });
         (0, vitest_1.expect)(fetchMock.mock.calls[1][0]).toBe('https://s3.example.com/put');
         (0, vitest_1.expect)(fetchMock.mock.calls[1][1].method).toBe('PUT');
+        (0, vitest_1.expect)(fetchMock.mock.calls[2][0]).toBe('https://api.example.com/v1/zite/public/app_123/complete-upload?mode=live');
+        const completeInit = fetchMock.mock.calls[2][1];
+        (0, vitest_1.expect)(completeInit.method).toBe('POST');
+        (0, vitest_1.expect)(JSON.parse(completeInit.body)).toEqual({
+            completionToken: 'signed-token',
+        });
+    });
+    (0, vitest_1.it)('skips completion when the gateway does not issue a token', async () => {
+        fetchMock
+            .mockResolvedValueOnce({
+            ok: true,
+            json: async () => ({
+                success: true,
+                presignedUrl: 'https://s3.example.com/put',
+                fileUrl: 'https://uploads.zite.com/orgid-1/zite-uploads/app_123/hello.txt',
+                contentType: 'text/plain',
+            }),
+        })
+            .mockResolvedValueOnce({ ok: true });
+        const result = await (0, index_js_1.uploadFile)({
+            data: new File(['hello-world'], 'hello.txt', { type: 'text/plain' }),
+            filename: 'hello.txt',
+        });
+        (0, vitest_1.expect)(result.fileUrl).toContain('hello.txt');
+        (0, vitest_1.expect)(fetchMock).toHaveBeenCalledTimes(2);
     });
     (0, vitest_1.it)('surfaces the plan-limit message from the session endpoint', async () => {
         fetchMock.mockResolvedValueOnce({

package/dist/cjs/vite/domTagNames.d.ts

@@ -0,0 +1 @@
+export declare const domTagNames: ReadonlySet<string>;