@protobase/server 0.19.3 → 0.19.4

package/dist/admin-options.d.ts

@@ -1,10 +1,10 @@
 import { AuditQueue, PipelineHook, ScanGuardMode } from "./types.js";
 import { ErrorReportingOptions } from "./error-reporting/error-reporting-settings.js";
+import { MapOptions } from "./maps/map-settings.js";
 import { PluginOption } from "./plugins/plugin-settings.js";
 import { SourceOption } from "./sources/source-settings.js";
 import { CorsOrigins } from "./api-cors.js";
 import { AssistantOptions } from "./assistant/assistant-settings.js";
-import { MapOptions } from "./maps/map-settings.js";
 import { RuntimeOptions } from "./runtime/runtime-settings.js";
 import { ResolveOptions, RoleLimit } from "@protobase/schema";
 //#region src/admin-options.d.ts
@@ -54,8 +54,9 @@ export type AdminOptions = {
   /** The runtime updates endpoint behind the top bar's update button (see `RuntimeOptions`); `false` turns it off. */
   runtime?: RuntimeOptions | false;
   /**
-   * The map style the record page's maps (`l.map`) are drawn with (see `MapOptions`). Defaults to the one the platform
-   * passes in `PROTOBASE_MAP_STYLE_URL`; without either, or with `false`, the app draws no maps.
+   * The map style the app's maps (`l.map`, `d.map`) are drawn with, and the layers they may switch to (see
+   * `MapOptions`). The style defaults to the one the platform passes in `PROTOBASE_MAP_STYLE_URL`; without either, or
+   * with `false`, the app draws no maps.
    */
   maps?: MapOptions | false;
   /**

package/dist/create-admin.js

@@ -22,7 +22,7 @@ import { errorReportingSettings } from "./error-reporting/error-reporting-settin
 import { createFilesRuntime } from "./files/runtime.js";
 import { fileRoutes } from "./files/routes.js";
 import { functionRoutes } from "./functions/routes.js";
-import { mapStyleUrl } from "./maps/map-settings.js";
+import { mapSettings } from "./maps/map-settings.js";
 import { pluginOptions, pluginsBeforeSignIn } from "./plugins/plugin-settings.js";
 import { runtimeUrl } from "./runtime/runtime-settings.js";
 import { checkSourceNames, sourceOptions } from "./sources/source-settings.js";
@@ -67,7 +67,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	const assistant = assistantSettings(options.assistant, globalThis.process?.env ?? {});
 	const runtime = runtimeUrl(options.runtime, globalThis.process?.env ?? {});
 	const errorReporting = errorReportingSettings(options.errorReporting, globalThis.process?.env ?? {});
-	const mapStyle = mapStyleUrl(options.maps, globalThis.process?.env ?? {});
+	const maps = mapSettings(options.maps, globalThis.process?.env ?? {});
 	const plugins = pluginOptions(options.plugins, globalThis.process?.env ?? {}, bundlePlugins);
 	const sources = sourceOptions(options.sources, globalThis.process?.env ?? {});
 	checkSourceNames(sources, {
@@ -102,7 +102,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		...assistant && { assistant: assistant.kind === "external" ? assistant.url : `${systemPath}/assistant` },
 		...runtime && { runtime },
 		...errorReporting && { errorReporting },
-		...mapStyle && { mapStyle },
+		...maps && { maps },
 		plugins,
 		sources,
 		...files && { files },

package/dist/index.d.ts

@@ -20,6 +20,8 @@ import { FilesOptions } from "./files/options.js";
 import { ErrorReportingOptions, ErrorReportingSettings, errorReportingSettings, errorReportingVariable } from "./error-reporting/error-reporting-settings.js";
 import { CleanupEntry, CleanupSchedule, ScheduledDelete, storageCleanupSchedule } from "./files/cleanup-schedule.js";
 import { CleanupReport } from "./files/cleanup-runner.js";
+import { MapLayer } from "./maps/map-layers.js";
+import { MapOptions, MapSettings, mapSettings, mapStyleUrl, mapStyleVariable } from "./maps/map-settings.js";
 import { PluginOption, PluginRef, beforeSignInPluginsVariable, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable } from "./plugins/plugin-settings.js";
 import { ResourceSource, configExports } from "./resource-source.js";
 import { SourceOption, SourceRef, checkSourceNames, sourceOptions, sourcesFor, sourcesVariable } from "./sources/source-settings.js";
@@ -33,7 +35,6 @@ import { Conversation, ConversationsOptions, conversationKey, createConversation
 import { ApprovalAnswer, ApprovalRequest, requestApproval } from "./assistant/approval.js";
 import { AssistantTool, ToolContext, defineTool } from "./assistant/tools.js";
 import { AssistantOptions, AssistantSettings, assistantRoles, assistantSettings, assistantVariables, seesAssistant } from "./assistant/assistant-settings.js";
-import { MapOptions, mapStyleUrl, mapStyleVariable } from "./maps/map-settings.js";
 import { RuntimeOptions, runtimeUrl, runtimeVariable, seesRuntime } from "./runtime/runtime-settings.js";
 import { AdminOptions } from "./admin-options.js";
 import { CreateAdminInput, createAdmin } from "./create-admin.js";
@@ -83,4 +84,4 @@ import { FatalJobError } from "./jobs/run-job.js";
 import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type CapturedRow, type ChatMessage, type ChatTextPart, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSource, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapOptions, type MemberInput, MissingCredentials, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, hasUsers, imageSize, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type CapturedRow, type ChatMessage, type ChatTextPart, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSource, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type MemberInput, MissingCredentials, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, hasUsers, imageSize, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/index.js

@@ -35,7 +35,7 @@ import { storageCleanupSchedule } from "./files/cleanup-schedule.js";
 import { limitedFileStore } from "./files/limits.js";
 import { localFileStore, localFiles } from "./files/local-files.js";
 import { s3FileStore, s3Files } from "./files/s3-files.js";
-import { mapStyleUrl, mapStyleVariable } from "./maps/map-settings.js";
+import { mapSettings, mapStyleUrl, mapStyleVariable } from "./maps/map-settings.js";
 import { beforeSignInPluginsVariable, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable } from "./plugins/plugin-settings.js";
 import { runtimeUrl, runtimeVariable, seesRuntime } from "./runtime/runtime-settings.js";
 import { checkSourceNames, sourceOptions, sourcesFor, sourcesVariable } from "./sources/source-settings.js";
@@ -64,4 +64,4 @@ import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/p
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, hasUsers, imageSize, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, hasUsers, imageSize, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/maps/map-layers.d.ts

@@ -0,0 +1,20 @@
+//#region src/maps/map-layers.d.ts
+/**
+ * A map of raster tiles that the maps' switch offers in place of the style's, such as aerial photos.
+ * `id`: names the layer in the browser's memory of the choice, in lowercase letters, digits and `_`, like `aerial_nl`.
+ * `label`: what the switch says.
+ * `tiles`: the URL of its 256-pixel tiles in Web Mercator, with `{z}`, `{x}` and `{y}` where the zoom, column and row
+ * go, as an XYZ service or a WMTS in its `GoogleMapsCompatible` (EPSG:3857) tile matrix set takes them.
+ * `attribution`: the credit the tiles' licence asks for, shown in the map's corner while the layer is; it may hold links.
+ * `bounds`: `[west, south, east, north]` in degrees, where the tiles are: elsewhere the style's map shows through.
+ * `maxzoom`: the deepest zoom the tiles go to; the map enlarges them past it. Default 22.
+ */
+export type MapLayer = {
+  id: string;
+  label: string;
+  tiles: string;
+  attribution: string;
+  bounds?: [number, number, number, number];
+  maxzoom?: number;
+};
+//#endregion

package/dist/maps/map-layers.js

@@ -0,0 +1,46 @@
+//#region src/maps/map-layers.ts
+const idPattern = /^[a-z][a-z0-9_]*$/;
+const checkedBounds = (bounds, source) => {
+	if (!(Array.isArray(bounds) && bounds.length === 4 && bounds.every((value) => typeof value === "number" && Number.isFinite(value)))) throw new Error(`${source}.bounds must be [west, south, east, north] in degrees`);
+	const [west, south, east, north] = bounds;
+	if (!(west >= -180 && east <= 180 && south >= -90 && north <= 90 && west < east && south < north)) throw new Error(`${source}.bounds must be [west, south, east, north] in degrees, west of east and south of north`);
+	return [
+		west,
+		south,
+		east,
+		north
+	];
+};
+const checkedLayer = (layer, index) => {
+	const source = `options.maps.layers[${index}]`;
+	if (typeof layer.id !== "string" || !idPattern.test(layer.id)) throw new Error(`${source}.id must be lowercase letters, digits and _, like aerial_nl`);
+	if (typeof layer.label !== "string" || !layer.label.trim()) throw new Error(`${source}.label must say what the switch shows`);
+	if (typeof layer.attribution !== "string" || !layer.attribution.trim()) throw new Error(`${source}.attribution must credit the tiles as their licence asks`);
+	const tiles = typeof layer.tiles === "string" ? layer.tiles.trim() : "";
+	if (!URL.canParse(tiles) || !["https:", "http:"].includes(new URL(tiles).protocol)) throw new Error(`${source}.tiles must be an https:// or http:// URL`);
+	const missing = [
+		"{z}",
+		"{x}",
+		"{y}"
+	].filter((placeholder) => !tiles.includes(placeholder));
+	if (missing.length > 0) throw new Error(`${source}.tiles must hold ${missing.join(", ")} where the tile's zoom, column and row go`);
+	const maxzoom = layer.maxzoom;
+	if (maxzoom !== void 0 && !(Number.isInteger(maxzoom) && maxzoom >= 0 && maxzoom <= 24)) throw new Error(`${source}.maxzoom must be a whole number from 0 to 24`);
+	return {
+		id: layer.id,
+		label: layer.label.trim(),
+		tiles,
+		attribution: layer.attribution.trim(),
+		...layer.bounds !== void 0 && { bounds: checkedBounds(layer.bounds, source) },
+		...maxzoom !== void 0 && { maxzoom }
+	};
+};
+/** The layers as `/meta` names them; one that is not as `MapLayer` says, or a repeated id, stops the server at startup. */
+const checkedMapLayers = (layers) => {
+	const checked = layers.map(checkedLayer);
+	const repeated = checked.find((layer, index) => checked.findIndex((other) => other.id === layer.id) !== index);
+	if (repeated) throw new Error(`options.maps.layers: the id ${repeated.id} is used twice`);
+	return checked;
+};
+//#endregion
+export { checkedMapLayers };

package/dist/maps/map-settings.d.ts

@@ -1,12 +1,27 @@
+import { MapLayer } from "./map-layers.js";
 //#region src/maps/map-settings.d.ts
 /**
  * `style`: the URL of the MapLibre style the app draws its maps with (`l.map`), such as one of self-hosted PMTiles
  * (`pmtiles://` sources). Falls back to `PROTOBASE_MAP_STYLE_URL`.
+ * `layers`: other maps of raster tiles, such as aerial photos, that a switch on every map offers in place of the
+ * style's (see `MapLayer`). They need a style: without one there is no map to switch.
  */
 export type MapOptions = {
   style?: string;
+  layers?: MapLayer[];
+};
+/** What `/meta` names: the style and the layers a map may switch to. */
+export type MapSettings = {
+  style: string;
+  layers?: MapLayer[];
 };
 export declare const mapStyleVariable = "PROTOBASE_MAP_STYLE_URL";
 /** The map style, when one is set and the option is not `false`. A value that is no http(s) URL stops the server at startup. */
 export declare const mapStyleUrl: (option: MapOptions | false | undefined, env: Record<string, string | undefined>) => string | undefined;
-//#endregion
+/**
+ * The style and its layers, when there is a style. The layers are checked whether or not there is one, so a mistake in
+ * them stops the server even where the style is not set.
+ */
+export declare const mapSettings: (option: MapOptions | false | undefined, env: Record<string, string | undefined>) => MapSettings | undefined;
+//#endregion
+export type { MapLayer };

package/dist/maps/map-settings.js

@@ -1,4 +1,5 @@
 import { checkedUrl } from "../checked-url.js";
+import { checkedMapLayers } from "./map-layers.js";
 //#region src/maps/map-settings.ts
 const mapStyleVariable = "PROTOBASE_MAP_STYLE_URL";
 /** The map style, when one is set and the option is not `false`. A value that is no http(s) URL stops the server at startup. */
@@ -8,5 +9,18 @@ const mapStyleUrl = (option, env) => {
 	if (!url) return void 0;
 	return checkedUrl(url, option?.style === void 0 ? mapStyleVariable : "options.maps.style");
 };
+/**
+* The style and its layers, when there is a style. The layers are checked whether or not there is one, so a mistake in
+* them stops the server even where the style is not set.
+*/
+const mapSettings = (option, env) => {
+	const layers = option ? checkedMapLayers(option.layers ?? []) : [];
+	const style = mapStyleUrl(option, env);
+	if (!style) return void 0;
+	return {
+		style,
+		...layers.length > 0 && { layers }
+	};
+};
 //#endregion
-export { mapStyleUrl, mapStyleVariable };
+export { mapSettings, mapStyleUrl, mapStyleVariable };

package/dist/meta.js

@@ -78,7 +78,7 @@ const createMeta = (deps) => {
 			...deps.assistant && seesAssistant(session.user.roles) && { assistant: { url: deps.assistant } },
 			...deps.runtime && seesRuntime(session.user.roles) && { runtime: { url: deps.runtime } },
 			...deps.errorReporting && { errorReporting: deps.errorReporting },
-			...deps.mapStyle && { maps: { style: deps.mapStyle } },
+			...deps.maps && { maps: deps.maps },
 			...deps.files && deps.files.trustedHosts.length > 0 && { files: { trustedHosts: deps.files.trustedHosts } },
 			...plugins.length > 0 && { plugins },
 			...sources.length > 0 && { sources }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.19.3",
+  "version": "0.19.4",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -30,9 +30,9 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.7",
-    "@protobase/layout": "0.19.3",
-    "@protobase/query": "0.19.3",
-    "@protobase/schema": "0.19.3",
+    "@protobase/layout": "0.19.4",
+    "@protobase/query": "0.19.4",
+    "@protobase/schema": "0.19.4",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",