@protobase/server 0.21.6 → 0.21.8

package/dist/index.js

@@ -1,17 +1,19 @@
+import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
+import { formatUri, variantPath } from "./files/uri.js";
+import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
+import { isCaptured } from "./changes/capture-sql.js";
+import { defineJob, isJobDefinition, jobDefinitions } from "./jobs/define-job.js";
+import { FatalJobError } from "./jobs/run-job.js";
+import { ModelError, streamChatCompletion } from "./assistant/chat-completions.js";
 import { assistantRoles, assistantSettings, assistantVariables, seesAssistant } from "./assistant/assistant-settings.js";
 import { conversationKey, createConversations } from "./assistant/conversations.js";
 import { fileConversationStore } from "./assistant/file-conversation-store.js";
-import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
 import { assistantProtocolRoutes } from "./assistant/protocol-routes.js";
 import { runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { defineTool } from "./assistant/tools.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
 import { requestApproval } from "./assistant/approval.js";
 import { withCacheBreakpoints } from "./assistant/cache-breakpoints.js";
-import { ModelError, streamChatCompletion } from "./assistant/chat-completions.js";
-import { formatUri, variantPath } from "./files/uri.js";
-import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-import { isCaptured } from "./changes/capture-sql.js";
 import { runTurn } from "./assistant/turn.js";
 import { consoleAuditQueue } from "./audit/console-queue.js";
 import { webauthnPath } from "./better-auth/origins.js";
@@ -22,12 +24,12 @@ import { readPlatformSignIn } from "./better-auth/platform-sign-in.js";
 import { createAuth, normalizeRoles } from "./better-auth/create-auth.js";
 import { addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
 import { createUser, deleteUser, hasUsers, listUsers, roleChoices, setUserBanned, setUserRole } from "./better-auth/users.js";
-import { defineJob, isJobDefinition, jobDefinitions } from "./jobs/define-job.js";
+import { changesMigration, checkChanges, migrationCommand } from "./changes/capture-schema.js";
+import { checkComments, commentsMigration } from "./comments/comments-sql.js";
 import { coalesce } from "./changes/coalesce.js";
 import { eventMatcher } from "./changes/match-events.js";
 import { parseColumns, readOutbox } from "./changes/outbox.js";
 import { recordOf, resourceChange } from "./changes/resource-change.js";
-import { FatalJobError } from "./jobs/run-job.js";
 import { defineFunction } from "./functions/define-function.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { subscription } from "./webhooks/subscription.js";
@@ -51,9 +53,9 @@ import { withTrustedApps } from "./better-auth/app-tokens.js";
 import { betterAuthAuthenticator } from "./better-auth/authenticator.js";
 import { issueToken, maxTokenTtlSeconds } from "./better-auth/tokens.js";
 import { authSchemaMigration, checkAuthSchema } from "./better-auth/auth-schema.js";
-import { changesMigration, checkChanges, migrationCommand } from "./changes/capture-schema.js";
 import { webhooks } from "./webhooks/table/plugin.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
+import { checkAi } from "./ai/check-ai.js";
 import { maxWidgetPropsBytes, widget } from "./assistant/widget.js";
 import { startErrorReporting } from "./error-reporting/error-reporter.js";
 import { functionApp } from "./functions/function-app.js";
@@ -66,4 +68,4 @@ import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/p
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isCaptured, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isCaptured, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/jobs/runtime.js

@@ -1,8 +1,8 @@
 import { clearCurrentJobs, setCurrentJobs } from "./current.js";
 import { jobsSchema } from "./schema.js";
-import { platformMailer } from "../mail/platform-mailer.js";
 import "./schedule.js";
 import { runJob, validatePayload } from "./run-job.js";
+import { platformMailer } from "../mail/platform-mailer.js";
 import { jobsDatabase } from "./database.js";
 import { queueOptions, queueSettingsDiffer, sendOptions } from "./options.js";
 import { createSchedules } from "./schedules.js";

package/dist/list-photos.js

@@ -1,12 +1,12 @@
 import { badRequest } from "./problem.js";
-import { presentFiles } from "./files/present.js";
-import { exposeRow } from "./rows.js";
 import { checkedSort } from "./filter-input.js";
 import { readScope, requestAccess } from "./request-access.js";
+import { presentFiles } from "./files/present.js";
+import { exposeRow } from "./rows.js";
 import { readTransaction } from "./transactions.js";
 import { cardPhotosErrors } from "./view-card-photos.js";
-import { checkFilter, createWhere } from "@protobase/schema";
 import { cardPhotoLimit } from "@protobase/schema/internal";
+import { checkFilter, createWhere } from "@protobase/schema";
 import { relatedRows } from "@protobase/query";
 //#region src/list-photos.ts
 const where = createWhere();

package/dist/list-service.js

@@ -1,9 +1,9 @@
+import { checkedFilter, checkedSort } from "./filter-input.js";
+import { readScope, requestAccess, requireOperation } from "./request-access.js";
 import { presentFiles } from "./files/present.js";
 import { etagAlias } from "./sql-parts.js";
 import { etagOf } from "./etag.js";
 import { exposeRow, pickFields } from "./rows.js";
-import { checkedFilter, checkedSort } from "./filter-input.js";
-import { readScope, requestAccess, requireOperation } from "./request-access.js";
 import { rowPermissions } from "./row-permissions.js";
 import { readTransaction } from "./transactions.js";
 import { deletedRows, listParams, pageSizeOf, parseParams, seekParams, selectedFields } from "./params.js";

package/dist/map-service.js

@@ -5,8 +5,8 @@ import { parseParams, selectedFields } from "./params.js";
 import { labelRequests } from "./related-labels.js";
 import { photosRequest } from "./list-photos.js";
 import { listRecords } from "./list-service.js";
-import { checkMapPosition, countUpTo, mapBuckets, maxMapZoom } from "@protobase/query";
 import { z } from "zod";
+import { checkMapPosition, countUpTo, mapBuckets, maxMapZoom } from "@protobase/query";
 const mapParams = z.object({
 	latitude: z.string().min(1),
 	longitude: z.string().min(1),

package/dist/meta.js

@@ -1,14 +1,14 @@
-import { seesAssistant } from "./assistant/assistant-settings.js";
-import { sha256Hex, stableJson } from "./hash.js";
 import { requestAccess } from "./request-access.js";
+import { sha256Hex, stableJson } from "./hash.js";
+import { seesAssistant } from "./assistant/assistant-settings.js";
+import { pruneView } from "./view-access.js";
 import { activeRole } from "./active-role.js";
 import { pluginsFor } from "./plugins/plugin-settings.js";
 import { seesRuntime } from "./runtime/runtime-settings.js";
 import { sourcesFor } from "./sources/source-settings.js";
-import { pruneView } from "./view-access.js";
 import { prunePage } from "@protobase/layout";
-import { pickView } from "@protobase/schema";
 import { bottomBarFor } from "@protobase/schema/internal";
+import { pickView } from "@protobase/schema";
 //#region src/meta.ts
 const signInView = (view) => {
 	if (!view?.signIn) return [];

package/dist/openapi/resource-paths.js

@@ -1,5 +1,6 @@
 import { writableFields } from "../request-access.js";
 import { pascal } from "./naming.js";
+import { pickView } from "@protobase/schema";
 import { mapCellPixels, maxMapBuckets, maxMapZoom } from "@protobase/query";
 //#region src/openapi/resource-paths.ts
 const param = (name) => ({ $ref: `#/components/parameters/${name}` });
@@ -85,6 +86,37 @@ const page = (name, seek = false) => json({
 		photos
 	}
 });
+const person = {
+	type: "object",
+	required: ["id"],
+	properties: {
+		id: { type: "string" },
+		name: { type: "string" }
+	}
+};
+const comment = {
+	type: "object",
+	required: [
+		"id",
+		"created_at",
+		"body",
+		"author",
+		"mentions"
+	],
+	properties: {
+		id: { type: "string" },
+		created_at: {
+			type: "string",
+			format: "date-time"
+		},
+		body: { type: "string" },
+		author: person,
+		mentions: {
+			type: "array",
+			items: person
+		}
+	}
+};
 const bounds = {
 	type: "object",
 	properties: {
@@ -140,6 +172,7 @@ const needs = {
 	create: "create",
 	update: "update",
 	undelete: "update",
+	generate: "update",
 	delete: "delete"
 };
 const withoutDenied = (paths, access) => Object.fromEntries(Object.entries(paths).flatMap(([path, methods]) => {
@@ -160,6 +193,7 @@ const resourcePaths = (access) => {
 		404: error("NotFound")
 	};
 	const sensitive = Object.values(access.readable.fields).filter((field) => field.sensitive).map((field) => field.name);
+	const aiActions = (pickView(access.deps.views, access.session.user.roles, entry.name)?.actions ?? []).filter((action) => action.run?.kind === "ai").map((action) => action.name);
 	const paths = {
 		[`/${entry.name}`]: {
 			get: {
@@ -325,6 +359,31 @@ const resourcePaths = (access) => {
 				...keyErrors
 			}
 		} } },
+		...aiActions.length > 0 && { [`/${entry.name}/{key}:generate`]: { post: {
+			operationId: `generate_${entry.name}`,
+			tags: tag,
+			summary: `Run an AI action on a ${entry.name} record`,
+			description: "The model writes the action's field from its prompt, as the caller, who must be signed in, may read the fields the prompt names and may update the field. An edit made while the model answers is a 412; empty inputs or an empty answer are a 422, and nothing is written.",
+			parameters: [param("key")],
+			requestBody: {
+				required: true,
+				content: json({
+					type: "object",
+					required: ["action"],
+					properties: { action: {
+						type: "string",
+						enum: aiActions
+					} },
+					additionalProperties: false
+				})
+			},
+			responses: {
+				200: record(name, entry),
+				...keyErrors,
+				403: error("Forbidden"),
+				412: error("PreconditionFailed")
+			}
+		} } },
 		...entry.model.history && { [`/${entry.name}/{key}:history`]: { get: {
 			operationId: `history_${entry.name}`,
 			tags: tag,
@@ -396,6 +455,98 @@ const resourcePaths = (access) => {
 				...keyErrors
 			}
 		} } },
+		...entry.model.comments && {
+			[`/${entry.name}/{key}:comments`]: {
+				get: {
+					operationId: `comments_${entry.name}`,
+					tags: tag,
+					summary: `The comments on a ${entry.name} record`,
+					description: "Newest first, with the same access as a get, a deleted record included.",
+					parameters: [
+						param("key"),
+						query("page_size", "Comments per page, at most 100 (default 20)", { type: "integer" }),
+						query("page_token", "The next_page_token of the previous page")
+					],
+					responses: {
+						200: {
+							description: "A page of comments",
+							content: json({
+								type: "object",
+								required: ["items", "next_page_token"],
+								properties: {
+									items: {
+										type: "array",
+										items: comment
+									},
+									next_page_token: {
+										type: "string",
+										description: "Empty on the last page"
+									}
+								}
+							})
+						},
+						...keyErrors
+					}
+				},
+				post: {
+					operationId: `comment_${entry.name}`,
+					tags: tag,
+					summary: `Comment on a ${entry.name} record`,
+					description: "For a signed-in caller who may read the record, not deleted. Each mentioned user must be able to read the record too, and is emailed a link to it.",
+					parameters: [param("key")],
+					requestBody: {
+						required: true,
+						content: json({
+							type: "object",
+							required: ["body"],
+							properties: {
+								body: {
+									type: "string",
+									maxLength: 1e4
+								},
+								mentions: {
+									type: "array",
+									items: { type: "string" },
+									maxItems: 20,
+									description: "The user ids it mentions"
+								}
+							},
+							additionalProperties: false
+						})
+					},
+					responses: {
+						201: {
+							description: "The comment",
+							content: json(comment)
+						},
+						...keyErrors,
+						403: error("Forbidden")
+					}
+				}
+			},
+			[`/${entry.name}/{key}:mentionable`]: { get: {
+				operationId: `mentionable_${entry.name}`,
+				tags: tag,
+				summary: `The users a comment on a ${entry.name} record may mention`,
+				description: "At most 8, by name: users whose name contains q who may read the record, without the caller.",
+				parameters: [param("key"), query("q", "Part of the name")],
+				responses: {
+					200: {
+						description: "The users",
+						content: json({
+							type: "object",
+							required: ["items"],
+							properties: { items: {
+								type: "array",
+								items: person
+							} }
+						})
+					},
+					...keyErrors,
+					403: error("Forbidden")
+				}
+			} }
+		},
 		[`/${entry.name}:facets`]: { get: {
 			operationId: `facets_${entry.name}`,
 			tags: tag,

package/dist/project-config.d.ts

@@ -1,7 +1,7 @@
 import { AdminAuth } from "./better-auth/create-auth.js";
 import { EventsOptions } from "./changes/events-options.js";
-import { HistoryOptions } from "./history/options.js";
 import { Authenticator } from "./types.js";
+import { HistoryOptions } from "./history/options.js";
 import { WebhooksOptions } from "./webhooks/table/options.js";
 import { FilesOptions } from "./files/options.js";
 import { FunctionSource } from "./functions/define-function.js";

package/dist/read-service.js

@@ -1,9 +1,9 @@
 import { notFound } from "./problem.js";
+import { tenantScope } from "./tenant.js";
+import { recordDecision, requestAccess, requireOperation, targetFilter, visibleFields, writableFields } from "./request-access.js";
 import { presentFiles } from "./files/present.js";
 import { pickFields } from "./rows.js";
 import { fetchRecord } from "./records.js";
-import { tenantScope } from "./tenant.js";
-import { recordDecision, requestAccess, requireOperation, targetFilter, visibleFields, writableFields } from "./request-access.js";
 import { rowPermissions } from "./row-permissions.js";
 import { readTransaction } from "./transactions.js";
 //#region src/read-service.ts

package/dist/related-labels.js

@@ -1,6 +1,6 @@
 import { badRequest } from "./problem.js";
-import { exposeRow } from "./rows.js";
 import { readScope, requestAccess } from "./request-access.js";
+import { exposeRow } from "./rows.js";
 import { checkFilter, createWhere } from "@protobase/schema";
 import { listQuery } from "@protobase/query";
 //#region src/related-labels.ts

package/dist/request-access.js

@@ -9,14 +9,38 @@ const withoutSensitive = (model) => ({
 	...model,
 	fields: Object.fromEntries(Object.entries(model.fields).filter(([, field]) => !field.sensitive))
 });
-const requestAccess = async (deps, entry, session) => {
-	const resolved = await resolveAccess(entry.source, {
+const withoutAnonymousCreate = (resolved, session) => session.anonymous ? {
+	...resolved,
+	operations: {
+		...resolved.operations,
+		create: false
+	},
+	writableFields: {
+		...resolved.writableFields,
+		create: []
+	}
+} : resolved;
+const throughForm = (resolved, form) => {
+	const create = resolved.writableFields.create.filter((name) => form.fields.includes(name));
+	return {
+		...resolved,
+		readableFields: [.../* @__PURE__ */ new Set([...resolved.readableFields, ...create])],
+		writableFields: {
+			create,
+			update: []
+		}
+	};
+};
+/** `form` is the public form a visitor sends, the only way a caller without a token creates. */
+const requestAccess = async (deps, entry, session, form) => {
+	const all = await resolveAccess(entry.source, {
 		user: {
 			id: session.user.id,
 			roles: session.user.roles
 		},
 		...organizationOf(session)
 	}, deps.accessOptions);
+	const resolved = form ? throughForm(all, form) : withoutAnonymousCreate(all, session);
 	checkOwnerId(entry, session.user, resolved);
 	const readable = restrictModel(entry.model, resolved);
 	return {

package/dist/routes/record.js

@@ -9,6 +9,10 @@ import { returnPreference } from "./preferences.js";
 import { resolveTarget } from "./target.js";
 import { revealField } from "../reveal-service.js";
 import { readHistory } from "../history/read-history.js";
+import { mentionable } from "../comments/mentionable.js";
+import { postComment } from "../comments/post-comment.js";
+import { readComments } from "../comments/read-comments.js";
+import { generateField } from "../ai/generate-route.js";
 import { Hono } from "hono";
 //#region src/routes/record.ts
 const recordRoutes = (deps) => {
@@ -16,6 +20,8 @@ const recordRoutes = (deps) => {
 	app.get("/:resource/:key", async (c) => {
 		const { entry } = resolveTarget(deps, c.req.param("resource"));
 		if (c.req.param("key").endsWith(":history")) return c.json(await readHistory(deps, entry, c.get("session"), keyFromPath(c, entry, ":history"), c.req.query()));
+		if (c.req.param("key").endsWith(":comments")) return c.json(await readComments(deps, entry, c.get("session"), keyFromPath(c, entry, ":comments"), c.req.query()));
+		if (c.req.param("key").endsWith(":mentionable")) return c.json(await mentionable(deps, entry, c.get("session"), keyFromPath(c, entry, ":mentionable"), c.req.query()));
 		const deleted = deletedRows(entry.model, c.req.query("show_deleted") === "true");
 		const found = await readRecord(deps, entry, c.get("session"), keyFromPath(c, entry), deleted);
 		const columns = selectedFields({
@@ -40,6 +46,17 @@ const recordRoutes = (deps) => {
 	app.post("/:resource/:key", async (c) => {
 		const { entry } = resolveTarget(deps, c.req.param("resource"));
 		if (c.req.param("key").endsWith(":reveal")) return reveal(c, entry);
+		if (c.req.param("key").endsWith(":comments")) {
+			const body = await c.req.json();
+			return c.json(await postComment(deps, entry, c.get("session"), keyFromPath(c, entry, ":comments"), body, c.req.url), 201);
+		}
+		if (c.req.param("key").endsWith(":generate")) {
+			const generated = await generateField(deps, entry, c.get("session"), keyFromPath(c, entry, ":generate"), await c.req.json(), c.req.raw.signal);
+			return c.json({
+				...generated.record,
+				etag: generated.etag
+			}, 200, { ETag: generated.etag });
+		}
 		if (!c.req.param("key").endsWith(":undelete")) throw notFound("There is no such method");
 		const restored = await runWrite(deps, entry, c.get("session"), {
 			operation: "undelete",

package/dist/row-permissions.js

@@ -1,9 +1,9 @@
-import { aliasedColumn, columnId, scopeConditions, tableId, whereClause } from "./sql-parts.js";
-import { fetchRecord } from "./records.js";
 import { tenantScope } from "./tenant.js";
 import { recordDecision } from "./request-access.js";
-import { compileFilter } from "@protobase/query";
+import { aliasedColumn, columnId, scopeConditions, tableId, whereClause } from "./sql-parts.js";
+import { fetchRecord } from "./records.js";
 import { sql } from "kysely";
+import { compileFilter } from "@protobase/query";
 //#region src/row-permissions.ts
 const keyOf = (access, row) => JSON.stringify(access.full.primaryKey.map((name) => String(row[name])));
 const matching = async (trx, access, rows, filter) => {

package/dist/sql-parts.js

@@ -1,5 +1,5 @@
-import { compileFilter } from "@protobase/query";
 import { sql } from "kysely";
+import { compileFilter } from "@protobase/query";
 //#region src/sql-parts.ts
 const etagAlias = "__pb_etag";
 const tableId = (model) => {

package/dist/types.d.ts

@@ -35,6 +35,8 @@ export type WriteEvent = {
   resource: ResourceModel;
   user: User;
   tenant?: TenantValue;
+  /** The writer is a visitor without a token, through a public form. */
+  anonymous?: true;
   before?: Row;
   after?: Row;
 };

package/dist/validate-body.js

@@ -20,6 +20,11 @@ const isObject = (value) => typeof value === "object" && value !== null && !Arra
 const reserved = ["etag", "permissions"];
 const isEmptyText = (field, value) => field.type === "text" && !field.nullable && value === "";
 /**
+* Whether a create must give the field, as `validateBody` decides when it is missing: the database supplies no value,
+* it may not be null, and its schema has no default of its own (`.default()`).
+*/
+const requiredOnCreate = (field, schema) => !(field.default && "db" in field.default) && !field.nullable && !schema.safeParse(void 0).success;
+/**
 * Checks a create or update body for this caller. A field the caller cannot read is an unknown field, one they can read
 * but not write is read-only (the tenant column and the API's own `etag` and `permissions` keys are always read-only);
 * every provided value goes through its field's zod schema, then `.validate()` rules run on the result. An empty text
@@ -92,4 +97,4 @@ const validateBody = (access, mode, body, current = {}) => {
 	return values;
 };
 //#endregion
-export { validateBody };
+export { requiredOnCreate, validateBody };

package/dist/view-access.js

@@ -1,19 +1,26 @@
-import { relatedErrors } from "./view-related.js";
+import { openErrors, relatedErrors } from "./view-related.js";
 import { cardPhotosErrors } from "./view-card-photos.js";
 import { cardFavoriteErrors } from "./view-card-favorite.js";
 import { searchesOfFor } from "./view-saved-search.js";
 import { relatedColumnErrors } from "./view-related-column.js";
 import { resolveFieldPath } from "@protobase/layout";
-import { addressErrors, chartFields, hrefPlaceholders, navRecentErrors, pruneByShape, shapes, tableDisplay } from "@protobase/schema/internal";
+import { addressErrors, chartFields, hrefPlaceholders, navRecentErrors, promptFields, pruneByShape, shapes, tableDisplay } from "@protobase/schema/internal";
 //#region src/view-access.ts
 const pruneRelated = (item, resource, models) => {
-	const { columns, ...rest } = item;
+	const { columns, open, ...rest } = item;
 	const visible = models[item.resource] ? columns?.filter((column) => resolveFieldPath(models, item.resource, column).ok) : void 0;
 	const narrowed = visible && visible.length > 0 ? {
 		...rest,
 		columns: visible
 	} : rest;
-	return relatedErrors(narrowed, resource, models).length === 0 ? narrowed : void 0;
+	const opened = open !== void 0 && openErrors({
+		...narrowed,
+		open
+	}, models).length === 0 ? {
+		...narrowed,
+		open
+	} : narrowed;
+	return relatedErrors(opened, resource, models).length === 0 ? opened : void 0;
 };
 const pruneGallery = (item, resource, model, models) => {
 	const image = item.image !== void 0 && Object.hasOwn(model.fields, item.image) ? item.image : void 0;
@@ -101,6 +108,15 @@ const listShape = (resource, model, models, prompted) => shapes.object({
 			badge: shapes.field,
 			meta: shapes.list(shapes.field)
 		}, { requires: ["by"] }),
+		calendar: shapes.object({
+			kind: shapes.data,
+			name: shapes.data,
+			label: shapes.data,
+			icon: shapes.data,
+			start: shapes.field,
+			end: shapes.field,
+			title: shapes.field
+		}, { requires: ["start"] }),
 		custom: shapes.object({
 			kind: shapes.data,
 			name: shapes.data,
@@ -178,6 +194,11 @@ const layoutShape = (resource, model, models) => shapes.oneOf({
 		title: shapes.data,
 		limit: shapes.data,
 		when: shapes.data
+	}),
+	comments: shapes.object({
+		kind: shapes.data,
+		title: shapes.data,
+		when: shapes.data
 	})
 });
 const linkShape = (model, models) => shapes.map((run) => {
@@ -186,6 +207,12 @@ const linkShape = (model, models) => shapes.map((run) => {
 		source: model
 	}).length === 0 : hrefPlaceholders(run.href).every((name) => Object.hasOwn(model.fields, name))) ? run : void 0;
 });
+const aiShape = (model) => shapes.map((run) => {
+	return [run.writes, ...promptFields(run.prompt ?? "")].every((name) => Object.hasOwn(model.fields, name)) ? {
+		kind: "ai",
+		writes: run.writes
+	} : void 0;
+});
 const inputsShape = (models) => shapes.map((inputs) => inputs.every((input) => input.resource === void 0 || Object.hasOwn(models, input.resource)) ? inputs : void 0);
 const actionShape = (model, models) => shapes.object({
 	name: shapes.data,
@@ -199,7 +226,8 @@ const actionShape = (model, models) => shapes.object({
 			values: shapes.keys({ all: true })
 		}, { requires: ["values"] }),
 		delete: shapes.data,
-		link: linkShape(model, models)
+		link: linkShape(model, models),
+		ai: aiShape(model)
 	}),
 	inputs: inputsShape(models)
 }, { requires: ["run", "inputs"] });
@@ -235,7 +263,8 @@ const viewShape = (resource, model, models, prompted) => shapes.object({
 	searchesOf: shapes.map((searches) => searchesOfFor(searches, resource, models)),
 	import: shapes.data,
 	export: shapes.data,
-	create: shapes.data
+	create: shapes.data,
+	forms: shapes.map(() => void 0)
 });
 /**
 * The view with every reference to a field the caller cannot read removed: list columns, sort, search and displays,

package/dist/view-related.js

@@ -34,6 +34,18 @@ const throughErrors = (through, resource, models) => {
 		...filterErrors(via, through.filter).map((error) => `filter: ${error}`)
 	].map((error) => `through: ${error}`);
 };
+/** What is wrong with the relation a related section's rows open; empty without one. */
+const openErrors = (item, models) => {
+	const target = models[item.resource];
+	if (item.open === void 0 || !target) return [];
+	const field = Object.hasOwn(target.fields, item.open) ? target.fields[item.open] : void 0;
+	if (!field) return [`open: unknown field "${item.open}" on ${target.name}`];
+	if (field.type !== "relation" || !field.relation) return [`open: "${item.open}" on ${target.name} is not a relation`];
+	if (item.open === item.field) return [`open: "${item.open}" is the field that matches this record`];
+	const far = models[field.relation.resource];
+	if (!far) return [`open: unknown resource "${field.relation.resource}"`];
+	return far.primaryKey.length === 1 ? [] : [`open: ${far.name} has a composite key, so its records cannot be opened from "${item.open}"`];
+};
 /**
 * What is wrong with a related section on the record page of `resource`, against these models; empty when it can be
 * shown. Against the full models it checks the config; against a caller's models, whether that caller can use it.
@@ -52,8 +64,9 @@ const relatedErrors = (item, resource, models) => {
 			if (!resolved.ok) return [`column: ${resolved.message}`];
 			return resolved.steps.at(-1).field.sensitive ? [`column: "${column}" is sensitive, so it cannot be listed`] : [];
 		}),
-		...item.limit === void 0 || Number.isInteger(item.limit) && item.limit >= 1 && item.limit <= 100 ? [] : ["limit must be a whole number from 1 to 100"]
+		...item.limit === void 0 || Number.isInteger(item.limit) && item.limit >= 1 && item.limit <= 100 ? [] : ["limit must be a whole number from 1 to 100"],
+		...openErrors(item, models)
 	];
 };
 //#endregion
-export { matchErrors, relatedErrors, sortErrors, throughKey };
+export { matchErrors, openErrors, relatedErrors, sortErrors, throughKey };

package/dist/webhooks/route-events.js

@@ -1,7 +1,7 @@
 import { EventCodeError } from "../changes/event-code-error.js";
 import { eventPatternMatches } from "./subscription.js";
-import { evaluateFilter } from "@protobase/schema";
 import { checkEventFilter } from "@protobase/schema/internal";
+import { evaluateFilter } from "@protobase/schema";
 //#region src/webhooks/route-events.ts
 const declaredEvents = (models) => models.flatMap((model) => (model.events ?? []).map((event) => ({
 	model,

package/dist/webhooks/table/schema.js

@@ -1,8 +1,8 @@
 import { quoteIdent } from "../../changes/capture-sql.js";
 import { changesSchema } from "../../changes/events-options.js";
+import { migrationCommand } from "../../changes/capture-schema.js";
 import { webhooksSchema } from "./options.js";
 import { commandsSql, deliveriesSql, deliveryLogSql, subscriptionsSql, webhooksComment } from "./schema-sql.js";
-import { migrationCommand } from "../../changes/capture-schema.js";
 import { sql } from "kysely";
 //#region src/webhooks/table/schema.ts
 const functionNames = ["subscription_commands", "deliveries_resend"];

package/dist/webhooks/table/webhook-table.js

@@ -1,6 +1,6 @@
+import { betterAuthOwnerRoles } from "./owner-roles.js";
 import { webhooksSchema } from "./options.js";
 import { checkWebhookUrl } from "./address-check.js";
-import { betterAuthOwnerRoles } from "./owner-roles.js";
 import { tableSubscriptions } from "./table-subscriptions.js";
 //#region src/webhooks/table/webhook-table.ts
 /**