# System map — blitz-js/blitz

> Canonical page: https://codevetter.com/unpack/blitz/system-map

# System map — blitz-js/blitz

Scanned commit b18f81873e641934043f791fec06e22f5fe5a86e (2025-09-11). Generated by codevetter codevetter 1.15.0 on 2026-10-02.

Source inspection; upstream code and tests were not executed.

The repository separates shared Blitz facilities from authentication, RPC, and Next.js adaptation. Browser and server package entrypoints expose different runtime surfaces, while build loaders connect application resolver imports to HTTP endpoints. Example apps and integration projects consume the same versioned packages and own their databases. Root orchestration builds packages and applications and releases packages through Changesets.
- The workspace spans apps, packages, integration-tests, and recipes; package.json pins pnpm@8.6.6 and delegates build, lint, and test to Turbo. — [package.json#L5-18](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/package.json#L5-L18) [package.json#L41-42](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/package.json#L41-L42) [pnpm-workspace.yaml#L1-5](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/pnpm-workspace.yaml#L1-L5)
- The blitz executable loads dist/index.cjs; CLI dispatch lazily imports development, build, start, export, scaffolding, generation, codegen, database, console, and route commands. — [packages/blitz/bin/blitz#L1-2](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/bin/blitz#L1-L2) [packages/blitz/src/cli/index.ts#L29-40](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/src/cli/index.ts#L29-L40)
- blitz, @blitzjs/next, @blitzjs/rpc, and @blitzjs/auth declare server CJS/ESM entrypoints, a browser entrypoint, and server type declarations. — [packages/blitz/package.json#L18-21](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz/package.json#L18-L21) [packages/blitz-next/package.json#L19-22](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/package.json#L19-L22) [packages/blitz-rpc/package.json#L18-21](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-rpc/package.json#L18-L21) [packages/blitz-auth/package.json#L18-21](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/package.json#L18-L21)
- setupBlitzServer initializes logging, reduces server plugins, and returns gSSP, gSP, api, and plugin exports; setupBlitzClient returns a withBlitz app wrapper and client plugin exports. — [packages/blitz-next/src/index-server.ts#L140-154](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L140-L154) [packages/blitz-next/src/index-server.ts#L219-237](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L219-L237) [packages/blitz-next/src/index-browser.tsx#L77-94](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-browser.tsx#L77-L94)
- withBlitz installs RPC Webpack rules or Turbopack rules and starts route-manifest watching outside production and test modes. — [packages/blitz-next/src/index-server.ts#L250-278](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L250-L278) [packages/blitz-next/src/index-server.ts#L312-333](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-next/src/index-server.ts#L312-L333)
- Authentication storage is supplied by the application: PrismaStorage implements session CRUD, while the toolkit-app fixture models User, Session, and Token in SQLite. — [packages/blitz-auth/src/server/auth-plugin.ts#L42-70](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/packages/blitz-auth/src/server/auth-plugin.ts#L42-L70) [apps/toolkit-app/db/schema.prisma#L4-11](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/db/schema.prisma#L4-L11) [apps/toolkit-app/db/schema.prisma#L15-58](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/db/schema.prisma#L15-L58)
- Both Next router architectures are represented: toolkit-app wraps rpcHandler with api, whereas next13 exports GET, POST, and HEAD from withBlitzAuth(rpcAppHandler()). — [apps/toolkit-app/src/pages/api/rpc/[[...blitz]].ts#L1-16](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app/src/pages/api/rpc/%5B%5B...blitz%5D%5D.ts#L1-L16) [apps/next13/src/app/api/rpc/[[...blitz]]/route.ts#L1-4](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/next13/src/app/api/rpc/%5B%5B...blitz%5D%5D/route.ts#L1-L4)
- Turbo builds dependencies before build/buildapp/test tasks and records dist, .next, or coverage outputs; development tasks are persistent and uncached. — [turbo.json#L3-21](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/turbo.json#L3-L21)
- Deployment-related source includes Next build/start scripts in example apps and npm package publication through a main-branch Changesets release workflow. — [apps/toolkit-app-passportjs/package.json#L4-11](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/toolkit-app-passportjs/package.json#L4-L11) [apps/next13/package.json#L5-9](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/apps/next13/package.json#L5-L9) [.github/workflows/release.yml#L3-6](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/.github/workflows/release.yml#L3-L6) [.github/workflows/release.yml#L37-53](https://github.com/blitz-js/blitz/blob/b18f81873e641934043f791fec06e22f5fe5a86e/.github/workflows/release.yml#L37-L53)

Every claim links to its cited files at the pinned commit. Citations identify source evidence; they do not establish runtime correctness. Independent CodeVetter scan — not reviewed by upstream maintainers.

## Public product links

- [CodeVetter](https://codevetter.com/)
- [Download](https://codevetter.com/download)
- [Documentation](https://codevetter.com/docs/)
- [Source](https://github.com/Codevetter/codevetter)