blitz-js/blitz

Blitz exposes developer-facing commands and application-facing APIs rather than one standalone product UI. Its primary capabilities are application creation, CRUD scaffolding, imported-function RPC, React Query integration, and session-based authentication. Next.js wrappers add server prefetching, serialized props, redirects, and error handling. Sample applications demonstrate password and OAuth flows, with explicit fixture limitations.

• The CLI supports dev, build, start, export, new, generate, codegen, db, console, and routes, with short aliases for common commands and an environment-information mode.
  packages/blitz/src/cli/index.ts#L29-51packages/blitz/src/cli/index.ts#L87-125
• blitz new offers App Router full setup, Pages Router full setup, and minimal Pages Router setup, plus package-manager, form-library, language, dry-run, skip-install, and no-git options.
  packages/blitz/src/cli/commands/new.ts#L33-45packages/blitz/src/cli/commands/new.ts#L56-68packages/blitz/src/cli/commands/new.ts#L125-134
• blitz generate maps all, crud, model, pages, queries, query, mutations, mutation, resource, and custom-templates to generator classes; page generation selects RouteGenerator when src/app/layout.tsx exists.
  packages/blitz/src/cli/commands/generate.ts#L28-39packages/blitz/src/cli/commands/generate.ts#L73-103
• The routes command renders HTTP method, source file, route path, and route type; db seed imports a default seed function and disconnects the application database afterward.
  packages/blitz/src/cli/commands/routes.ts#L18-61packages/blitz/src/cli/commands/db.ts#L24-56
• RPC browser exports include invoke-related client APIs, query and suspense hooks, infinite and paginated queries, mutations, query keys, invalidation, and cache access.
  packages/blitz-rpc/src/index-browser.tsx#L1-35
• resolver.pipe composes ordered stages, resolver.zod selects synchronous or asynchronous parsing, and resolver.authorize delegates access checks to the initialized session.
  packages/blitz-rpc/src/server/resolvers/resolver.ts#L254-291packages/blitz-rpc/src/server/resolvers/resolver.ts#L294-320
• gSSP and gSP provide resolver prefetch helpers, normalize redirects, dehydrate query state, and serialize props with SuperJSON.
  packages/blitz-next/src/index-server.ts#L110-137packages/blitz-next/src/index-server.ts#L163-216packages/blitz-next/src/index-server.ts#L345-367
• Client authentication exports useSession, useAuthorize, useAuthorizeIf, useRedirectAuthenticated, useAuthenticatedSession, and getAntiCSRFToken.
  packages/blitz-auth/src/client/index.tsx#L453-460
• SessionContextClass exposes authorization, session creation and revocation, public-data updates, and private-data reads/writes; simpleRolesIsAuthorized accepts one role or an array of roles.
  packages/blitz-auth/src/server/auth-sessions.ts#L134-172packages/blitz-auth/src/server/auth-sessions.ts#L435-459packages/blitz-auth/src/server/auth-sessions.ts#L486-546
• The sample password-recovery feature generates four-hour reset tokens, stores hashes, sends a mailer request, changes the password, deletes sessions, and logs the user in.
  apps/toolkit-app/src/auth/mutations/forgotPassword.ts#L7-34apps/toolkit-app/src/auth/mutations/resetPassword.ts#L12-48
• passportAuth supports configured strategies and callback session creation; NextAuthAdapter exposes provider-based login/callback handling using NextAuth internals.
  packages/blitz-auth/src/server/adapters/passport/adapter.ts#L73-105packages/blitz-auth/src/server/adapters/passport/adapter.ts#L149-165packages/blitz-auth/src/server/adapters/next-auth/adapter.ts#L47-65packages/blitz-auth/src/server/adapters/next-auth/adapter.ts#L109-129
• Additional public utilities include bounded pagination, an ErrorBoundary that handles RedirectError and route resets, and codemod commands upgrade-legacy and secure-password.
  packages/blitz/src/paginate.ts#L13-64packages/blitz-next/src/error-boundary.tsx#L101-144packages/codemod/src/index.ts#L15-28