@protobase/schema 0.67.7 → 0.67.9

package/dist/fields/json-depth.d.ts

@@ -0,0 +1,4 @@
+//#region src/fields/json-depth.d.ts
+/** How deeply a JSON field's value may nest: each array or object is one level. */
+export declare const maxJsonDepth = 256;
+//#endregion

package/dist/fields/json-depth.js

@@ -0,0 +1,20 @@
+//#region src/fields/json-depth.ts
+/** How deeply a JSON field's value may nest: each array or object is one level. */
+const maxJsonDepth = 256;
+/**
+* Whether `value` nests at most `max` levels, counting each array or object as one level (`[]` is 1, a scalar 0).
+* It walks with a stack of its own rather than recursing, so a value nested far deeper than the call stack allows is
+* refused rather than overflowing, and it stops at the first level past `max`, which also ends a cyclic value.
+*/
+const withinJsonDepth = (value, max = 256) => {
+	const stack = [[value, 0]];
+	while (stack.length > 0) {
+		const [current, depth] = stack.pop();
+		if (typeof current !== "object" || current === null) continue;
+		if (depth + 1 > max) return false;
+		for (const child of Object.values(current)) stack.push([child, depth + 1]);
+	}
+	return true;
+};
+//#endregion
+export { maxJsonDepth, withinJsonDepth };

package/dist/fields/json.js

@@ -1,9 +1,17 @@
+import { withinJsonDepth } from "./json-depth.js";
 import { z } from "zod";
 //#region src/fields/json.ts
 const json = {
 	type: "json",
 	constraints: [],
-	build: () => z.json()
+	build: () => z.preprocess((value, ctx) => {
+		if (!withinJsonDepth(value)) ctx.addIssue({
+			code: "custom",
+			message: `Nested deeper than 256 levels`,
+			params: { max_depth: 256 }
+		});
+		return value;
+	}, z.json())
 };
 //#endregion
 export { json };

package/dist/index.d.ts

@@ -8,6 +8,7 @@ import { AnyField, Constraint, Field, FieldMeta, FieldTypeDef } from "./field.js
 import { RelationField } from "./relation-field.js";
 import { FileField } from "./file-field.js";
 import { f } from "./fields.js";
+import { maxJsonDepth } from "./fields/json-depth.js";
 import { ArgumentSpec, ArgumentType, ArgumentsSpec, argumentsSchema } from "./job-arguments.js";
 import { ComputedReveal, RevealCaller } from "./computed/computed-reveal.js";
 import { FieldRefs, FieldsInput, Ref, Refs } from "./refs.js";
@@ -48,4 +49,4 @@ import { AccessSource, ResolveOptions, ResolvedAccess, RowFilterOperation, acces
 import { restrictModel } from "./access/restrict.js";
 import "./access/index.js";
 import { AssistantAction, AssistantActionRequest, AssistantCardPart, AssistantDiff, AssistantEvent, AssistantMessage, AssistantMessageRequest, AssistantPart, AssistantState, AssistantStep, AssistantStepState, AssistantTablePart, AssistantTextPart, AssistantTone, AssistantWidgetPart } from "./assistant/protocol.js";
-export { type Access, type AccessAction, type AccessContext, type AccessFn, type AccessResult, type AccessSource, type AccessUser, type ActionInputKind, type ActionInputModel, type ActionModel, type ActionRun, type AnyField, type AppAddress, type ArgumentSpec, type ArgumentType, type ArgumentsSpec, type AssistantAction, type AssistantActionRequest, type AssistantCardPart, type AssistantDiff, type AssistantEvent, type AssistantMessage, type AssistantMessageRequest, type AssistantPart, type AssistantState, type AssistantStep, type AssistantStepState, type AssistantTablePart, type AssistantTextPart, type AssistantTone, type AssistantWidgetPart, type BadgeShape, type BadgeTone, type BottomBarItemModel, type BottomBarModel, type BottomBarNames, type BottomBarSource, type CalendarView, type Capability, type CapabilityAction, type CapabilityLimit, type CapabilityScope, type CardFavoriteModel, type CardPhotosModel, type ChartGranularity, type ChartInput, type ChartModel, type ChartRange, type CheckResult, type CheckedFilter, type CommentsSectionModel, type CompareOp, type ComponentRef, type ComputedReveal, type ConnectAddress, type Constraint, type CreateModel, type CreatedOptions, type CustomSectionModel, type DatePreset, type DeletedOptions, type DurationLiteral, type DurationUnit, type Encrypted, type EvaluateOptions, type EventActor, type EventContext, type EventHelpers, type EventMatch, type EventModel, type EventOperation, type EventSpec, type ExactCapability, type ExportModel, type Field, type FieldAccess, type FieldFormat, type FieldMeta, type FieldModel, type FieldPath, type FieldRefValue, type FieldRefs, type FieldRule, type FieldType, type FieldTypeDef, type FieldView, type FieldViewModel, type FieldViews, type FieldWidgetModel, type FieldsInput, type FileField, type FileFieldModel, type FileOptions, type FileProcessor, type FileProcessorInput, type FilterError, type FilterErrorCode, type FilterExpr, type FilterLayout, type FilterLimits, type FilterOf, type FilterParse, type FilterValue, type FilterWidgetModel, type FormAddress, type FormInput, type FormModel, type GalleryModel, type Grant, type GroupChartInput, type GroupChartModel, type GroupItemModel, type GroupModel, type HeldCapability, type HelpWhen, type HistorySectionModel, type ImageFormat, type ImageVariant, type ImageVariantOptions, type InferRecord, type Issue, type JsonValue, type KeyOf, type KeyRefs, type KeyType, type KeyValue, type LayoutItemModel, type ListColumn, type ListDisplayModel, type ListDragModel, type ListModel, type ListQuery, type Literal, type MapSectionModel, type MapView, type NamedListModel, type NavModel, type NavRecentModel, type NowValue, type OrderByCheck, type OrderByItem, type OrderByParse, type PageWidth, type ParentAccess, type ParentModel, type PeriodChartInput, type PeriodChartModel, type PositionAfterModel, type RecordChartModel, type RecordChartRange, type RecordKey, type RecordMode, type RecordOf, type RecordPageModel, type RecordWhen, type Ref, type Refs, type RelatedColumnModel, type RelatedModel, type RelatedPresentation, type RelationField, type ResolveOptions, type ResolvedAccess, type ResourceBuilder, type ResourceModel, type RevealCaller, type RoleEntry, type RoleLimit, type Roles, type RolesOptions, type Rollup, type RollupCount, type RollupFn, type RollupSource, type RollupValue, type RowFilterOperation, type Rule, type SaveFeedback, type SaveSearchModel, type SearchMatch, type SearchRef, type SearchRefs, type SearchResultModel, type SearchesOfModel, type SectionModel, type SectionPresentation, type ShowWhen, type SignInAddress, type SignInPromptModel, type SignInStep, type SignInViewModel, type SortSpec, type Span, type StatusTone, type TabItemModel, type TabModel, type TenantOptions, type TimelineView, type TitleFromModel, type UndeletedOptions, type UpdatedOptions, type UserMenuItemModel, type UserMenuModel, type UserMenuSource, type Validator, type ViewBuilder, type ViewModel, type ViewProps, accessWarnings, addressWords, anonymousRole, appPath, argumentsSchema, badgeTones, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, connectParams, connectPath, connectRoute, createWhere, defineRoles, encrypted, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, formPath, formRoute, imageFormats, isBadgeTone, isRecordCondition, keyTypes, layout as l, maxBottomBarItems, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readConnectAddress, readFormAddress, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };
+export { type Access, type AccessAction, type AccessContext, type AccessFn, type AccessResult, type AccessSource, type AccessUser, type ActionInputKind, type ActionInputModel, type ActionModel, type ActionRun, type AnyField, type AppAddress, type ArgumentSpec, type ArgumentType, type ArgumentsSpec, type AssistantAction, type AssistantActionRequest, type AssistantCardPart, type AssistantDiff, type AssistantEvent, type AssistantMessage, type AssistantMessageRequest, type AssistantPart, type AssistantState, type AssistantStep, type AssistantStepState, type AssistantTablePart, type AssistantTextPart, type AssistantTone, type AssistantWidgetPart, type BadgeShape, type BadgeTone, type BottomBarItemModel, type BottomBarModel, type BottomBarNames, type BottomBarSource, type CalendarView, type Capability, type CapabilityAction, type CapabilityLimit, type CapabilityScope, type CardFavoriteModel, type CardPhotosModel, type ChartGranularity, type ChartInput, type ChartModel, type ChartRange, type CheckResult, type CheckedFilter, type CommentsSectionModel, type CompareOp, type ComponentRef, type ComputedReveal, type ConnectAddress, type Constraint, type CreateModel, type CreatedOptions, type CustomSectionModel, type DatePreset, type DeletedOptions, type DurationLiteral, type DurationUnit, type Encrypted, type EvaluateOptions, type EventActor, type EventContext, type EventHelpers, type EventMatch, type EventModel, type EventOperation, type EventSpec, type ExactCapability, type ExportModel, type Field, type FieldAccess, type FieldFormat, type FieldMeta, type FieldModel, type FieldPath, type FieldRefValue, type FieldRefs, type FieldRule, type FieldType, type FieldTypeDef, type FieldView, type FieldViewModel, type FieldViews, type FieldWidgetModel, type FieldsInput, type FileField, type FileFieldModel, type FileOptions, type FileProcessor, type FileProcessorInput, type FilterError, type FilterErrorCode, type FilterExpr, type FilterLayout, type FilterLimits, type FilterOf, type FilterParse, type FilterValue, type FilterWidgetModel, type FormAddress, type FormInput, type FormModel, type GalleryModel, type Grant, type GroupChartInput, type GroupChartModel, type GroupItemModel, type GroupModel, type HeldCapability, type HelpWhen, type HistorySectionModel, type ImageFormat, type ImageVariant, type ImageVariantOptions, type InferRecord, type Issue, type JsonValue, type KeyOf, type KeyRefs, type KeyType, type KeyValue, type LayoutItemModel, type ListColumn, type ListDisplayModel, type ListDragModel, type ListModel, type ListQuery, type Literal, type MapSectionModel, type MapView, type NamedListModel, type NavModel, type NavRecentModel, type NowValue, type OrderByCheck, type OrderByItem, type OrderByParse, type PageWidth, type ParentAccess, type ParentModel, type PeriodChartInput, type PeriodChartModel, type PositionAfterModel, type RecordChartModel, type RecordChartRange, type RecordKey, type RecordMode, type RecordOf, type RecordPageModel, type RecordWhen, type Ref, type Refs, type RelatedColumnModel, type RelatedModel, type RelatedPresentation, type RelationField, type ResolveOptions, type ResolvedAccess, type ResourceBuilder, type ResourceModel, type RevealCaller, type RoleEntry, type RoleLimit, type Roles, type RolesOptions, type Rollup, type RollupCount, type RollupFn, type RollupSource, type RollupValue, type RowFilterOperation, type Rule, type SaveFeedback, type SaveSearchModel, type SearchMatch, type SearchRef, type SearchRefs, type SearchResultModel, type SearchesOfModel, type SectionModel, type SectionPresentation, type ShowWhen, type SignInAddress, type SignInPromptModel, type SignInStep, type SignInViewModel, type SortSpec, type Span, type StatusTone, type TabItemModel, type TabModel, type TenantOptions, type TimelineView, type TitleFromModel, type UndeletedOptions, type UpdatedOptions, type UserMenuItemModel, type UserMenuModel, type UserMenuSource, type Validator, type ViewBuilder, type ViewModel, type ViewProps, accessWarnings, addressWords, anonymousRole, appPath, argumentsSchema, badgeTones, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, connectParams, connectPath, connectRoute, createWhere, defineRoles, encrypted, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, formPath, formRoute, imageFormats, isBadgeTone, isRecordCondition, keyTypes, layout as l, maxBottomBarItems, maxJsonDepth, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readConnectAddress, readFormAddress, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };

package/dist/index.js

@@ -1,3 +1,4 @@
+import { maxJsonDepth } from "./fields/json-depth.js";
 import { imageFormats } from "./files/file-options.js";
 import { f } from "./fields.js";
 import { argumentsSchema } from "./job-arguments.js";
@@ -29,4 +30,4 @@ import { rule } from "./access/rule.js";
 import { defineRoles } from "./access/roles.js";
 import { pickView } from "./access/pick-view.js";
 import { restrictModel } from "./access/restrict.js";
-export { accessWarnings, addressWords, anonymousRole, appPath, argumentsSchema, badgeTones, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, connectParams, connectPath, connectRoute, createWhere, defineRoles, encrypted, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, formPath, formRoute, imageFormats, isBadgeTone, isRecordCondition, keyTypes, layout as l, maxBottomBarItems, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readConnectAddress, readFormAddress, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };
+export { accessWarnings, addressWords, anonymousRole, appPath, argumentsSchema, badgeTones, bottomBar, bottomBarErrors, checkFilter, checkOrderBy, checkRecord, connectParams, connectPath, connectRoute, createWhere, defineRoles, encrypted, enumLabel, evaluateFilter, f, fieldRef, fieldsUsedBy, fitsKeyType, formPath, formRoute, imageFormats, isBadgeTone, isRecordCondition, keyTypes, layout as l, maxBottomBarItems, maxJsonDepth, parseFilter, parseOrderBy, pickView, printFilter, printOrderBy, readAppPath, readConnectAddress, readFormAddress, readSignInAddress, resolveAccess, resource, restrictModel, rule, signInParams, signInPath, signInRoute, signInSteps, userMenu, view, where };

package/dist/internal.d.ts

@@ -10,6 +10,7 @@ import { decodeKey, encodeKey } from "./keys.js";
 import { parseCapability } from "./access/capability.js";
 import { checkEventFilter } from "./events/event-models.js";
 import { webhookResources } from "./webhooks/webhook-resources.js";
+import { workflowResources } from "./workflows/workflow-resources.js";
 import { PropShapes, RefShape, pruneByShape, shapes } from "./ref-shape.js";
 import { SearchTerm, matchedSearchField, matchesSearch, searchTerms, termMatches } from "./search-match.js";
 import { defaultRecentLimit, navRecentErrors, statusTones } from "./nav-recent.js";
@@ -43,4 +44,4 @@ import { builtInFieldTypes } from "./built-in-field-types.js";
 import { CallCandidate, CallClientMessage, CallDescription, CallGuestLink, CallGuestRefusal, CallGuestState, CallLeftReason, CallLobbyGuest, CallMode, CallRemoteTrack, CallResume, CallRosterMember, CallServerMessage, CallTrackRequest, CallTrackSource, CallVideoLayer } from "./calls/call-protocol.js";
 import { guestCallsPath } from "./calls/call-guests.js";
 import { CallRing, callsChannelEvent, declineWord, ringNotice, ringsPath } from "./calls/call-rings.js";
-export { type AddressCheck, type Availability, type CallCandidate, type CallClientMessage, type CallDescription, type CallGuestLink, type CallGuestRefusal, type CallGuestState, type CallLeftReason, type CallLobbyGuest, type CallMode, type CallRemoteTrack, type CallResume, type CallRing, type CallRosterMember, type CallServerMessage, type CallTrackRequest, type CallTrackSource, type CallVideoLayer, type FormulaNode, type Locale, type MobileReleaseAnswer, type PersonStatus, type PluginHost, type PluginRequirement, type PropShapes, type RefShape, type ReleaseBinding, type SearchTerm, type StatusInput, actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, availabilities, boardErrors, bottomBarFor, builtInFieldTypes, callsChannelEvent, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, confirmationMinutes, datesErrors, declineWord, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emailCodeMinutes, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, firstPartyCodeKey, guestCallsPath, heldStatus, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, maxStatusText, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, releaseStatementContext, releaseStatementFile, renderPrompt, ringNotice, ringsPath, searchTerms, serviceWorkerFile, shapes, shownInputs, statusPath, statusTextProblem, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources };
+export { type AddressCheck, type Availability, type CallCandidate, type CallClientMessage, type CallDescription, type CallGuestLink, type CallGuestRefusal, type CallGuestState, type CallLeftReason, type CallLobbyGuest, type CallMode, type CallRemoteTrack, type CallResume, type CallRing, type CallRosterMember, type CallServerMessage, type CallTrackRequest, type CallTrackSource, type CallVideoLayer, type FormulaNode, type Locale, type MobileReleaseAnswer, type PersonStatus, type PluginHost, type PluginRequirement, type PropShapes, type RefShape, type ReleaseBinding, type SearchTerm, type StatusInput, actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, availabilities, boardErrors, bottomBarFor, builtInFieldTypes, callsChannelEvent, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, confirmationMinutes, datesErrors, declineWord, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emailCodeMinutes, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, firstPartyCodeKey, guestCallsPath, heldStatus, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, maxStatusText, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, releaseStatementContext, releaseStatementFile, renderPrompt, ringNotice, ringsPath, searchTerms, serviceWorkerFile, shapes, shownInputs, statusPath, statusTextProblem, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources, workflowResources };

package/dist/internal.js

@@ -18,6 +18,7 @@ import { boardErrors, cardPhotoLimit, datesErrors, displayFields, tableDisplay }
 import { bottomBarFor } from "./bottom-bar.js";
 import { decodeKey, encodeKey } from "./keys.js";
 import { webhookResources } from "./webhooks/webhook-resources.js";
+import { workflowResources } from "./workflows/workflow-resources.js";
 import { pruneByShape, shapes } from "./ref-shape.js";
 import { inRange, pluginProblem } from "./plugin-version.js";
 import { redactSecrets } from "./redact-secrets.js";
@@ -42,4 +43,4 @@ import { listColumnNames } from "./list-columns.js";
 import { builtInFieldTypes } from "./built-in-field-types.js";
 import { guestCallsPath } from "./calls/call-guests.js";
 import { callsChannelEvent, declineWord, ringNotice, ringsPath } from "./calls/call-rings.js";
-export { actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, availabilities, boardErrors, bottomBarFor, builtInFieldTypes, callsChannelEvent, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, confirmationMinutes, datesErrors, declineWord, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emailCodeMinutes, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, firstPartyCodeKey, guestCallsPath, heldStatus, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, maxStatusText, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, releaseStatementContext, releaseStatementFile, renderPrompt, ringNotice, ringsPath, searchTerms, serviceWorkerFile, shapes, shownInputs, statusPath, statusTextProblem, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources };
+export { actionConditionError, actionInputErrors, addressErrors, addressPlaceholders, apiOriginMeta, appHrefError, applyAssistantEvent, authBasePath, availabilities, boardErrors, bottomBarFor, builtInFieldTypes, callsChannelEvent, capacitorOrigin, cardPhotoLimit, chartFields, checkEventFilter, checkedAccept, checkedProvider, confirmationMinutes, datesErrors, declineWord, decodeKey, defaultRecentLimit, deviceIdParam, devicesPath, displayFields, emailCodeMinutes, emptyAssistantState, encodeKey, fieldRefsIn, fillAddress, firstPartyCodeKey, guestCallsPath, heldStatus, historyIdParam, historyIdPattern, historyPath, hrefField, hrefPlaceholders, humanize, inRange, isFieldRef, isGroupChart, isLocale, labelFieldOf, layoutItems, leavesApp, linkActionError, listColumnNames, locales, markFieldRefs, matchedSearchField, matchesSearch, maxStatusText, mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleaseQuery, mobileReleasesPath, navRecentErrors, parseCapability, parseFormula, parseSize, parseTable, pickLocale, pluginProblem, promptError, promptFields, pruneByShape, pushRecord, readEventStream, recordTitle, recordTitleField, redactSecrets, releaseManifestFile, releaseStatementContext, releaseStatementFile, renderPrompt, ringNotice, ringsPath, searchTerms, serviceWorkerFile, shapes, shownInputs, statusPath, statusTextProblem, statusTones, tableDisplay, termMatches, unmarkFieldRefs, updateSetErrors, updateValues, viewOfList, webhookResources, workflowResources };

package/dist/workflows/workflow-resources.d.ts

@@ -0,0 +1,127 @@
+import { Field } from "../field.js";
+import { Ref } from "../refs.js";
+import { ResourceBuilder } from "../resource.js";
+import { ViewBuilder } from "../view.js";
+import "../index.js";
+//#region src/workflows/workflow-resources.d.ts
+/**
+ * The resources and views `workflows` adds to an app, over the tables of `schema`: Workflows with their versions, runs
+ * and steps. Config only; the server checks and runs them.
+ */
+export declare const workflowResources: (schema: string) => {
+  workflows: ResourceBuilder<{
+    readonly id: Field<string>;
+    readonly name: Field<string>;
+    readonly description: Field<string | null>;
+    readonly definition: Field<import("zod").JSONType>;
+    readonly version: Field<number | null>;
+    readonly tenant_id: Field<string | null>;
+    readonly created_at: Field<string>;
+    readonly updated_at: Field<string>;
+  }, Ref<"id", string>>;
+  workflowsView: ViewBuilder<ResourceBuilder<{
+    readonly id: Field<string>;
+    readonly name: Field<string>;
+    readonly description: Field<string | null>;
+    readonly definition: Field<import("zod").JSONType>;
+    readonly version: Field<number | null>;
+    readonly tenant_id: Field<string | null>;
+    readonly created_at: Field<string>;
+    readonly updated_at: Field<string>;
+  }, Ref<"id", string>>>;
+  workflowVersions: ResourceBuilder<{
+    readonly workflow_id: Field<string | number>;
+    readonly version: Field<number>;
+    readonly definition: Field<import("zod").JSONType>;
+    readonly saved_by: Field<string | null>;
+    readonly tenant_id: Field<string | null>;
+    readonly saved_at: Field<string>;
+  }, readonly [Ref<"workflow_id", string | number>, Ref<"version", number>]>;
+  workflowVersionsView: ViewBuilder<ResourceBuilder<{
+    readonly workflow_id: Field<string | number>;
+    readonly version: Field<number>;
+    readonly definition: Field<import("zod").JSONType>;
+    readonly saved_by: Field<string | null>;
+    readonly tenant_id: Field<string | null>;
+    readonly saved_at: Field<string>;
+  }, readonly [Ref<"workflow_id", string | number>, Ref<"version", number>]>>;
+  workflowRuns: ResourceBuilder<{
+    readonly id: Field<string>;
+    readonly workflow_id: Field<string | number>;
+    readonly version: Field<number | null>;
+    readonly input: Field<import("zod").JSONType>;
+    readonly key: Field<string | null>;
+    readonly status: Field<"waiting" | "failed" | "queued" | "running" | "succeeded">;
+    readonly output: Field<import("zod").JSONType>;
+    readonly error: Field<string | null>;
+    readonly cause: Field<string | null>;
+    readonly resume_at: Field<string | null>;
+    readonly started_by: Field<string | null>;
+    readonly tenant_id: Field<string | null>;
+    readonly created_at: Field<string>;
+    readonly finished_at: Field<string | null>;
+    readonly duration_ms: Field<string | null>;
+  }, Ref<"id", string>>;
+  workflowRunsView: ViewBuilder<ResourceBuilder<{
+    readonly id: Field<string>;
+    readonly workflow_id: Field<string | number>;
+    readonly version: Field<number | null>;
+    readonly input: Field<import("zod").JSONType>;
+    readonly key: Field<string | null>;
+    readonly status: Field<"waiting" | "failed" | "queued" | "running" | "succeeded">;
+    readonly output: Field<import("zod").JSONType>;
+    readonly error: Field<string | null>;
+    readonly cause: Field<string | null>;
+    readonly resume_at: Field<string | null>;
+    readonly started_by: Field<string | null>;
+    readonly tenant_id: Field<string | null>;
+    readonly created_at: Field<string>;
+    readonly finished_at: Field<string | null>;
+    readonly duration_ms: Field<string | null>;
+  }, Ref<"id", string>>>;
+  workflowSteps: ResourceBuilder<{
+    readonly id: Field<string>;
+    readonly run_id: Field<string | number>;
+    readonly tenant_id: Field<string | null>;
+    readonly scope: Field<string>;
+    readonly seq: Field<number>;
+    readonly state: Field<string>;
+    readonly type: Field<string>;
+    readonly status: Field<"failed" | "succeeded" | "retrying" | "caught">;
+    readonly attempt: Field<number>;
+    readonly input: Field<import("zod").JSONType>;
+    readonly output: Field<import("zod").JSONType>;
+    readonly assigned: Field<import("zod").JSONType>;
+    readonly next: Field<string | null>;
+    readonly resume_at: Field<string | null>;
+    readonly error: Field<string | null>;
+    readonly cause: Field<string | null>;
+    readonly logs: Field<import("zod").JSONType>;
+    readonly started_at: Field<string>;
+    readonly finished_at: Field<string>;
+    readonly duration_ms: Field<string | null>;
+  }, Ref<"id", string>>;
+  workflowStepsView: ViewBuilder<ResourceBuilder<{
+    readonly id: Field<string>;
+    readonly run_id: Field<string | number>;
+    readonly tenant_id: Field<string | null>;
+    readonly scope: Field<string>;
+    readonly seq: Field<number>;
+    readonly state: Field<string>;
+    readonly type: Field<string>;
+    readonly status: Field<"failed" | "succeeded" | "retrying" | "caught">;
+    readonly attempt: Field<number>;
+    readonly input: Field<import("zod").JSONType>;
+    readonly output: Field<import("zod").JSONType>;
+    readonly assigned: Field<import("zod").JSONType>;
+    readonly next: Field<string | null>;
+    readonly resume_at: Field<string | null>;
+    readonly error: Field<string | null>;
+    readonly cause: Field<string | null>;
+    readonly logs: Field<import("zod").JSONType>;
+    readonly started_at: Field<string>;
+    readonly finished_at: Field<string>;
+    readonly duration_ms: Field<string | null>;
+  }, Ref<"id", string>>>;
+};
+//#endregion

package/dist/workflows/workflow-resources.js

@@ -0,0 +1,287 @@
+import { f } from "../fields.js";
+import { resource } from "../resource.js";
+import { view } from "../view.js";
+import { layout } from "../layout.js";
+//#region src/workflows/workflow-resources.ts
+const runStatuses = [
+	"queued",
+	"running",
+	"waiting",
+	"succeeded",
+	"failed"
+];
+const stepStatuses = [
+	"succeeded",
+	"retrying",
+	"caught",
+	"failed"
+];
+/**
+* Workflows: a trigger and a state machine in the States Language with JSONata, checked on every save, each changed definition a new version. A
+* role's wildcard such as `*.read` reaches none of the workflow resources: their runs read and send data as the
+* definition says, so each is granted on its own.
+*/
+const workflowsResource = (schema) => resource("workflows").table(`${schema}.workflows`).fields({
+	id: f.uuid().readOnly().dbDefault(),
+	name: f.text().min(1).max(100).filterable().sortable(),
+	description: f.text().optional().max(2e3),
+	definition: f.json(),
+	version: f.integer().optional().readOnly(),
+	tenant_id: f.text().optional().readOnly(),
+	created_at: f.timestamp().readOnly().dbDefault(),
+	updated_at: f.timestamp().readOnly().dbDefault().sortable()
+}).primaryKey((r) => r.id).tenant((r) => r.tenant_id).search((r) => [r.name]).explicitGrants();
+const workflowsView = view("workflows").names({
+	singular: "Workflow",
+	plural: "Workflows"
+}).icon("workflow").title((r) => r.name).help("Steps that run one after another along their edges, written in the States Language with JSONata expressions. Each save that changes its definition is a new version; a run keeps the version it started on.").fields((r) => ({
+	definition: r.definition.help("Its trigger and its state machine in the States Language with JSONata, every value read by name: the run's input as $states.context.Execution.Input, an earlier result by the variable a state assigned"),
+	updated_at: r.updated_at.label("Updated")
+})).list((r) => ({
+	columns: [
+		r.name,
+		r.version,
+		r.updated_at
+	],
+	sort: [[r.updated_at, "desc"]]
+})).layout((r) => [
+	layout.section("Workflow", [
+		r.name,
+		r.description,
+		r.definition
+	]),
+	layout.sidebar([
+		r.version,
+		r.created_at,
+		r.updated_at
+	]),
+	layout.related("Runs", {
+		resource: "workflow_runs",
+		field: "workflow_id",
+		columns: [
+			"status",
+			"version",
+			"created_at",
+			"duration_ms",
+			"error"
+		]
+	}),
+	layout.related("Versions", {
+		resource: "workflow_versions",
+		field: "workflow_id",
+		columns: [
+			"version",
+			"saved_by",
+			"saved_at"
+		]
+	})
+]);
+/** Each version of a workflow's definition, as it was saved. */
+const versionsResource = (schema) => resource("workflow_versions").table(`${schema}.versions`).fields({
+	workflow_id: f.relation("workflows").readOnly().filterable(),
+	version: f.integer().readOnly().sortable(),
+	definition: f.json().readOnly(),
+	saved_by: f.text().optional().readOnly(),
+	tenant_id: f.text().optional().readOnly(),
+	saved_at: f.timestamp().readOnly().dbDefault()
+}).primaryKey((r) => [r.workflow_id, r.version]).tenant((r) => r.tenant_id).explicitGrants().access({
+	create: () => false,
+	update: () => false,
+	delete: () => false
+});
+const versionsView = view("workflow_versions").names({
+	singular: "Workflow version",
+	plural: "Workflow versions"
+}).icon("history").title((r) => r.version).fields((r) => ({
+	saved_by: r.saved_by.label("Saved by"),
+	saved_at: r.saved_at.label("Saved")
+})).list((r) => ({
+	columns: [
+		r.workflow_id,
+		r.version,
+		r.saved_by,
+		r.saved_at
+	],
+	sort: [[r.version, "desc"]]
+}));
+/** A run of a workflow, started by creating it with its input: it runs the version its workflow has then. */
+const runsResource = (schema) => resource("workflow_runs").table(`${schema}.runs`).fields({
+	id: f.uuid().readOnly().dbDefault(),
+	workflow_id: f.relation("workflows").filterable(),
+	version: f.integer().optional().readOnly(),
+	input: f.json().optional(),
+	key: f.text().optional().max(200),
+	status: f.enum(runStatuses).readOnly().dbDefault().filterable(),
+	output: f.json().optional().readOnly(),
+	error: f.text().optional().readOnly(),
+	cause: f.text().optional().readOnly(),
+	resume_at: f.timestamp().optional().readOnly(),
+	started_by: f.text().optional().readOnly(),
+	tenant_id: f.text().optional().readOnly(),
+	created_at: f.timestamp().readOnly().dbDefault().sortable(),
+	finished_at: f.timestamp().optional().readOnly(),
+	duration_ms: f.bigint().optional().readOnly()
+}).primaryKey((r) => r.id).tenant((r) => r.tenant_id).author((r) => r.started_by).explicitGrants().access({
+	update: () => false,
+	delete: () => false
+});
+const runsView = view("workflow_runs").names({
+	singular: "Workflow run",
+	plural: "Workflow runs"
+}).icon("play").title((r) => r.created_at).help("A run of a workflow with its input. It takes up where it stands after a restart; each of its steps is listed with what it read, gave and logged.").fields((r) => ({
+	workflow_id: r.workflow_id.label("Workflow"),
+	input: r.input.help("Read by every state as $states.context.Execution.Input"),
+	key: r.key.help("A workflow runs once per key, such as the record a trigger found ready"),
+	status: r.status.valueLabels({
+		queued: "Queued",
+		running: "Running",
+		waiting: "Waiting",
+		succeeded: "Succeeded",
+		failed: "Failed"
+	}).valueColors({
+		succeeded: "green",
+		failed: "red"
+	}),
+	resume_at: r.resume_at.label("Goes on at"),
+	started_by: r.started_by.label("Started by"),
+	created_at: r.created_at.label("Started"),
+	finished_at: r.finished_at.label("Finished"),
+	duration_ms: r.duration_ms.label("Duration (ms)")
+})).list((r) => ({
+	columns: [
+		r.created_at,
+		r.workflow_id,
+		r.status,
+		r.duration_ms,
+		r.error
+	],
+	sort: [[r.created_at, "desc"]]
+})).layout((r) => [
+	layout.section("Run", [
+		r.workflow_id,
+		r.input,
+		r.output,
+		r.error,
+		r.cause
+	]),
+	layout.sidebar([
+		r.status,
+		r.version,
+		r.started_by,
+		r.created_at,
+		r.resume_at,
+		r.finished_at,
+		r.duration_ms
+	]),
+	layout.related("Steps", {
+		resource: "workflow_steps",
+		field: "run_id",
+		columns: [
+			"scope",
+			"seq",
+			"state",
+			"status",
+			"attempt",
+			"duration_ms",
+			"error"
+		]
+	})
+]);
+/** Every step of every run: its input with secrets redacted, output, variables, logs, timing, try and error. */
+const stepsResource = (schema) => resource("workflow_steps").table(`${schema}.steps`).fields({
+	id: f.bigint().readOnly().sortable(),
+	run_id: f.relation("workflow_runs").readOnly().filterable(),
+	tenant_id: f.text().optional().readOnly(),
+	scope: f.text().readOnly(),
+	seq: f.integer().readOnly(),
+	state: f.text().readOnly().filterable(),
+	type: f.text().readOnly(),
+	status: f.enum(stepStatuses).readOnly().filterable(),
+	attempt: f.integer().readOnly(),
+	input: f.json().optional().readOnly(),
+	output: f.json().optional().readOnly(),
+	assigned: f.json().optional().readOnly(),
+	next: f.text().optional().readOnly(),
+	resume_at: f.timestamp().optional().readOnly(),
+	error: f.text().optional().readOnly(),
+	cause: f.text().optional().readOnly(),
+	logs: f.json().readOnly(),
+	started_at: f.timestamp().readOnly(),
+	finished_at: f.timestamp().readOnly(),
+	duration_ms: f.bigint().optional().readOnly()
+}).primaryKey((r) => r.id).tenant((r) => r.tenant_id).explicitGrants().access({
+	create: () => false,
+	update: () => false,
+	delete: () => false
+});
+const stepsView = view("workflow_steps").names({
+	singular: "Workflow step",
+	plural: "Workflow steps"
+}).icon("list-checks").title((r) => r.state).fields((r) => ({
+	run_id: r.run_id.label("Run"),
+	scope: r.scope.help("Where the step ran: empty for the run itself, or the Map item, such as Each.3[0]").format("code"),
+	seq: r.seq.label("Step"),
+	attempt: r.attempt.label("Try"),
+	status: r.status.valueLabels({
+		succeeded: "Succeeded",
+		retrying: "Retried",
+		caught: "Caught",
+		failed: "Failed"
+	}).valueColors({
+		succeeded: "green",
+		failed: "red"
+	}),
+	input: r.input.help("The app's secrets, and fields whose name says they hold one such as Authorization, are blanked out"),
+	assigned: r.assigned.label("Variables assigned"),
+	next: r.next.label("Goes on to"),
+	resume_at: r.resume_at.label("Next state not before"),
+	duration_ms: r.duration_ms.label("Duration (ms)")
+})).list((r) => ({
+	columns: [
+		r.run_id,
+		r.scope,
+		r.seq,
+		r.state,
+		r.status,
+		r.attempt,
+		r.duration_ms,
+		r.error
+	],
+	sort: [[r.id, "asc"]]
+})).layout((r) => [layout.section("Step", [
+	r.run_id,
+	r.state,
+	r.type,
+	r.scope,
+	r.seq,
+	r.input,
+	r.output,
+	r.assigned,
+	r.logs,
+	r.error,
+	r.cause
+]), layout.sidebar([
+	r.status,
+	r.attempt,
+	r.next,
+	r.resume_at,
+	r.started_at,
+	r.finished_at,
+	r.duration_ms
+])]);
+/**
+* The resources and views `workflows` adds to an app, over the tables of `schema`: Workflows with their versions, runs
+* and steps. Config only; the server checks and runs them.
+*/
+const workflowResources = (schema) => ({
+	workflows: workflowsResource(schema),
+	workflowsView,
+	workflowVersions: versionsResource(schema),
+	workflowVersionsView: versionsView,
+	workflowRuns: runsResource(schema),
+	workflowRunsView: runsView,
+	workflowSteps: stepsResource(schema),
+	workflowStepsView: stepsView
+});
+//#endregion
+export { workflowResources };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/schema",
-  "version": "0.67.7",
+  "version": "0.67.9",
   "description": "Resource, field, view and access definitions for Protobase configs.",
   "license": "Apache-2.0",
   "repository": {