# Feature catalog — blitz-js/blitz

> Canonical page: https://codevetter.com/unpack/blitz/feature-catalog

# Feature catalog — blitz-js/blitz

Scanned commit b18f81873e641934043f791fec06e22f5fe5a86e (2025-09-11). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

Blitz exposes developer-facing commands and application-facing APIs rather than one standalone product UI. Its primary capabilities are application creation, CRUD scaffolding, imported-function RPC, React Query integration, and session-based authentication. Next.js wrappers add server prefetching, serialized props, redirects, and error handling. Sample applications demonstrate password and OAuth flows, with explicit fixture limitations.
- The CLI supports dev, build, start, export, new, generate, codegen, db, console, and routes, with short aliases for common commands and an environment-information mode. — [packages/blitz/src/cli/index.ts#L29-51](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/index.ts#L29-L51) [packages/blitz/src/cli/index.ts#L87-125](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/index.ts#L87-L125)
- blitz new offers App Router full setup, Pages Router full setup, and minimal Pages Router setup, plus package-manager, form-library, language, dry-run, skip-install, and no-git options. — [packages/blitz/src/cli/commands/new.ts#L33-45](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/new.ts#L33-L45) [packages/blitz/src/cli/commands/new.ts#L56-68](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/new.ts#L56-L68) [packages/blitz/src/cli/commands/new.ts#L125-134](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/new.ts#L125-L134)
- blitz generate maps all, crud, model, pages, queries, query, mutations, mutation, resource, and custom-templates to generator classes; page generation selects RouteGenerator when src/app/layout.tsx exists. — [packages/blitz/src/cli/commands/generate.ts#L28-39](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/generate.ts#L28-L39) [packages/blitz/src/cli/commands/generate.ts#L73-103](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/generate.ts#L73-L103)
- The routes command renders HTTP method, source file, route path, and route type; db seed imports a default seed function and disconnects the application database afterward. — [packages/blitz/src/cli/commands/routes.ts#L18-61](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/routes.ts#L18-L61) [packages/blitz/src/cli/commands/db.ts#L24-56](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/commands/db.ts#L24-L56)
- RPC browser exports include invoke-related client APIs, query and suspense hooks, infinite and paginated queries, mutations, query keys, invalidation, and cache access. — [packages/blitz-rpc/src/index-browser.tsx#L1-35](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/src/index-browser.tsx#L1-L35)
- resolver.pipe composes ordered stages, resolver.zod selects synchronous or asynchronous parsing, and resolver.authorize delegates access checks to the initialized session. — [packages/blitz-rpc/src/server/resolvers/resolver.ts#L254-291](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/src/server/resolvers/resolver.ts#L254-L291) [packages/blitz-rpc/src/server/resolvers/resolver.ts#L294-320](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/src/server/resolvers/resolver.ts#L294-L320)
- gSSP and gSP provide resolver prefetch helpers, normalize redirects, dehydrate query state, and serialize props with SuperJSON. — [packages/blitz-next/src/index-server.ts#L110-137](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L110-L137) [packages/blitz-next/src/index-server.ts#L163-216](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L163-L216) [packages/blitz-next/src/index-server.ts#L345-367](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L345-L367)
- Client authentication exports useSession, useAuthorize, useAuthorizeIf, useRedirectAuthenticated, useAuthenticatedSession, and getAntiCSRFToken. — [packages/blitz-auth/src/client/index.tsx#L453-460](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/client/index.tsx#L453-L460)
- SessionContextClass exposes authorization, session creation and revocation, public-data updates, and private-data reads/writes; simpleRolesIsAuthorized accepts one role or an array of roles. — [packages/blitz-auth/src/server/auth-sessions.ts#L134-172](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-sessions.ts#L134-L172) [packages/blitz-auth/src/server/auth-sessions.ts#L435-459](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-sessions.ts#L435-L459) [packages/blitz-auth/src/server/auth-sessions.ts#L486-546](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-sessions.ts#L486-L546)
- The sample password-recovery feature generates four-hour reset tokens, stores hashes, sends a mailer request, changes the password, deletes sessions, and logs the user in. — [apps/toolkit-app/src/auth/mutations/forgotPassword.ts#L7-34](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/auth/mutations/forgotPassword.ts#L7-L34) [apps/toolkit-app/src/auth/mutations/resetPassword.ts#L12-48](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/auth/mutations/resetPassword.ts#L12-L48)
- passportAuth supports configured strategies and callback session creation; NextAuthAdapter exposes provider-based login/callback handling using NextAuth internals. — [packages/blitz-auth/src/server/adapters/passport/adapter.ts#L73-105](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/adapters/passport/adapter.ts#L73-L105) [packages/blitz-auth/src/server/adapters/passport/adapter.ts#L149-165](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/adapters/passport/adapter.ts#L149-L165) [packages/blitz-auth/src/server/adapters/next-auth/adapter.ts#L47-65](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/adapters/next-auth/adapter.ts#L47-L65) [packages/blitz-auth/src/server/adapters/next-auth/adapter.ts#L109-129](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/adapters/next-auth/adapter.ts#L109-L129)
- Additional public utilities include bounded pagination, an ErrorBoundary that handles RedirectError and route resets, and codemod commands upgrade-legacy and secure-password. — [packages/blitz/src/paginate.ts#L13-64](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/paginate.ts#L13-L64) [packages/blitz-next/src/error-boundary.tsx#L101-144](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/error-boundary.tsx#L101-L144) [packages/codemod/src/index.ts#L15-28](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/codemod/src/index.ts#L15-L28)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)