@protobase/server 0.21.7 → 0.21.8

package/dist/create-admin.d.ts

@@ -1,8 +1,9 @@
 import { AdminAuth } from "./better-auth/create-auth.js";
 import { EventsOptions } from "./changes/events-options.js";
-import { HistoryOptions } from "./history/options.js";
 import { JobDefinition } from "./jobs/job-types.js";
 import { Admin, Authenticator, PageSource, ViewSource } from "./types.js";
+import { CommentUsers } from "./comments/comment-users.js";
+import { HistoryOptions } from "./history/options.js";
 import { WebhooksOptions } from "./webhooks/table/options.js";
 import { SubscriptionDefinition } from "./webhooks/subscription.js";
 import { FilesOptions } from "./files/options.js";
@@ -10,8 +11,8 @@ import { Difficulty } from "./forms/challenge.js";
 import { ResourceSource } from "./resource-source.js";
 import { FunctionSource } from "./functions/define-function.js";
 import { AdminOptions } from "./admin-options.js";
-import { Db } from "@protobase/query";
 import { BottomBarSource, UserMenuSource } from "@protobase/schema";
+import { Db } from "@protobase/query";
 //#region src/create-admin.d.ts
 export type CreateAdminInput = {
   resources: ResourceSource[];
@@ -34,7 +35,7 @@ export type CreateAdminInput = {
   events?: EventsOptions;
   /** How long the history of resources with `.history()` is kept (see `HistoryOptions`). */
   history?: HistoryOptions;
-  /** The app's jobs (see `defineJob`): with any, or a resource with events or history, admins get the failed jobs page (`failed_jobs`). */
+  /** The app's jobs (see `defineJob`): with any, or a resource with events, history or comments, admins get the failed jobs page (`failed_jobs`). */
   jobs?: JobDefinition[];
   /** Where the resources' events are delivered (`subscription(...)` exports of the config module). */
   subscriptions?: SubscriptionDefinition[];
@@ -55,7 +56,9 @@ export type CreateAdminInput = {
   options?: AdminOptions;
   /** @internal The proof-of-work range of public forms' bot checks, which tests make tiny. */
   formsDifficulty?: Difficulty;
+  /** @internal The users comments name, mention and mail, which tests fake; from `auth` otherwise. */
+  commentUsers?: CommentUsers;
 };
 /** The admin REST API as a Hono app. It uses only Web APIs, so it runs on Node, Workers and anywhere else Hono does. */
-export declare const createAdmin: ({ resources: appResources, views: appViews, pages, userMenu, bottomBars, db, authenticate, auth, functions, files: filesOptions, events, history: historyOptions, jobs, subscriptions, webhooks: webhooksOptions, bundlePlugins, fieldTypes, options, formsDifficulty }: CreateAdminInput) => Admin;
+export declare const createAdmin: ({ resources: appResources, views: appViews, pages, userMenu, bottomBars, db, authenticate, auth, functions, files: filesOptions, events, history: historyOptions, jobs, subscriptions, webhooks: webhooksOptions, bundlePlugins, fieldTypes, options, formsDifficulty, commentUsers: givenCommentUsers }: CreateAdminInput) => Admin;
 //#endregion

package/dist/create-admin.js

@@ -1,7 +1,11 @@
-import { assistantSettings } from "./assistant/assistant-settings.js";
+import { aiModel } from "./ai/ai-model.js";
+import { hasAiActions, hasAiFields } from "./ai/ai-fields.js";
+import { fillHook } from "./ai/fill-hook.js";
 import { createErrorHandler } from "./error-handler.js";
 import { isCaptured } from "./changes/capture-sql.js";
 import { assistantRecords } from "./assistant/records.js";
+import { fillJob } from "./ai/fill-job.js";
+import { assistantSettings } from "./assistant/assistant-settings.js";
 import { builtInAssistant } from "./assistant/built-in-assistant.js";
 import { consoleAuditQueue } from "./audit/console-queue.js";
 import { webauthnPath } from "./better-auth/origins.js";
@@ -11,8 +15,12 @@ import { authBasePath } from "./better-auth/create-auth.js";
 import { organizationRoutes } from "./better-auth/organizations/admin-routes.js";
 import { statusRoute } from "./better-auth/status-route.js";
 import { changesSchema } from "./changes/events-options.js";
-import { activityResource, activityView } from "./history/activity.js";
+import { appOrigin } from "./comments/app-origin.js";
 import { betterAuthActorNames } from "./history/actor-names.js";
+import { betterAuthCommentUsers } from "./comments/comment-users.js";
+import { mentionJob } from "./comments/mention-job.js";
+import { commentsResource, commentsView } from "./comments/record-comments.js";
+import { activityResource, activityView } from "./history/activity.js";
 import { historyDays } from "./history/options.js";
 import { pruneHistoryJob } from "./history/prune-history.js";
 import { callerRecords } from "./functions/records.js";
@@ -52,23 +60,29 @@ const declaredRoles = (auth, roles) => {
 	return names.length > 0 ? [...new Set(names)] : void 0;
 };
 /** The admin REST API as a Hono app. It uses only Web APIs, so it runs on Node, Workers and anywhere else Hono does. */
-const createAdmin = ({ resources: appResources, views: appViews = [], pages = [], userMenu, bottomBars = [], db, authenticate, auth, functions = {}, files: filesOptions, events, history: historyOptions, jobs = [], subscriptions = [], webhooks: webhooksOptions, bundlePlugins = [], fieldTypes = {}, options = {}, formsDifficulty }) => {
+const createAdmin = ({ resources: appResources, views: appViews = [], pages = [], userMenu, bottomBars = [], db, authenticate, auth, functions = {}, files: filesOptions, events, history: historyOptions, jobs = [], subscriptions = [], webhooks: webhooksOptions, bundlePlugins = [], fieldTypes = {}, options = {}, formsDifficulty, commentUsers: givenCommentUsers }) => {
 	const basePath = options.basePath ?? "/api/v1";
 	const appModels = appResources.map((resource) => resource.toModel());
-	const withJobs = jobs.length > 0 || appModels.some(isCaptured);
+	const withComments = appModels.some((model) => model.comments);
+	const withAiFields = hasAiFields(appModels);
+	const withJobs = jobs.length > 0 || appModels.some(isCaptured) || withComments || withAiFields;
 	const withHistory = appModels.some((model) => model.history);
 	const changes = changesSchema(events);
 	const days = historyDays(historyOptions);
 	const resources = [
 		...appResources,
 		...withJobs ? [failedJobs] : [],
-		...withHistory ? [activityResource(changes, { tenant: appModels.some((model) => model.history && model.tenant) })] : []
+		...withHistory ? [activityResource(changes, { tenant: appModels.some((model) => model.history && model.tenant) })] : [],
+		...withComments ? [commentsResource({ tenant: appModels.some((model) => model.comments && model.tenant) })] : []
 	];
 	const views = [
 		...appViews,
 		...withJobs ? [failedJobsView] : [],
-		...withHistory ? [activityView] : []
+		...withHistory ? [activityView] : [],
+		...withComments ? [commentsView] : []
 	];
+	const commentUsers = withComments ? givenCommentUsers ?? (auth && betterAuthCommentUsers(auth)) : void 0;
+	const mentions = withComments ? mentionJob(commentUsers, auth?.appName ?? readAppName(globalThis.process?.env ?? {}) ?? "Protobase") : void 0;
 	const registry = buildRegistry(resources);
 	const apiFunctions = Object.fromEntries(Object.entries(functions).map(([name, source]) => [name, toApiFunction(name, source)]));
 	const viewModels = views.map((view) => view.toModel());
@@ -109,6 +123,9 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		systemPath
 	});
 	const table = webhooksOptions && webhookTable(webhooksOptions, auth);
+	const withAi = withAiFields || hasAiActions(viewModels);
+	const model = withAi ? aiModel(options.assistant, globalThis.process?.env ?? {}) : void 0;
+	const fill = withAiFields ? fillJob(() => deps) : void 0;
 	const deps = {
 		db,
 		registry,
@@ -120,7 +137,11 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		systemPath,
 		statementTimeoutMs: options.statementTimeoutMs ?? 15e3,
 		guard: createScanGuard(db, options.scanGuard),
-		hooks: [...options.writeHooks ?? [], ...table ? [subscriptionWriteCheck(registry.entries.map((entry) => entry.model), table.checkUrl)] : []],
+		hooks: [
+			...options.writeHooks ?? [],
+			...table ? [subscriptionWriteCheck(registry.entries.map((entry) => entry.model), table.checkUrl)] : [],
+			...fill ? [fillHook(() => deps, fill)] : []
+		],
 		audit: options.audit ?? consoleAuditQueue(),
 		accessOptions: {
 			...options.roles && { roles: options.roles },
@@ -138,6 +159,15 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		...withHistory && { history: {
 			schema: changes,
 			...auth && { actorNames: betterAuthActorNames(auth) }
+		} },
+		...mentions && { comments: {
+			...commentUsers && { users: commentUsers },
+			mentionJob: mentions,
+			appOrigin: appOrigin(auth?.origins ?? [])
+		} },
+		...withAi && { ai: {
+			...model && { model },
+			...options.onUnhandledError && { report: options.onUnhandledError }
 		} }
 	};
 	const meta = createMeta(deps, auth?.appName ?? readAppName(globalThis.process?.env ?? {}) ?? "Protobase");
@@ -229,7 +259,12 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		log: (line) => console.log(line),
 		...table && { table }
 	});
-	return Object.assign(app, { jobs: [...webhooks.jobs, ...withHistory && days !== void 0 ? [pruneHistoryJob(changes, days)] : []] });
+	return Object.assign(app, { jobs: [
+		...webhooks.jobs,
+		...withHistory && days !== void 0 ? [pruneHistoryJob(changes, days)] : [],
+		...mentions ? [mentions] : [],
+		...fill ? [fill] : []
+	] });
 };
 //#endregion
 export { createAdmin };

package/dist/deps.d.ts

@@ -1,8 +1,10 @@
 import "./types.js";
+import "./comments/comment-users.js";
+import "./comments/mention-job.js";
 import "./files/runtime.js";
 import "./plugins/plugin-settings.js";
 import "./registry.js";
 import "./scan-guard.js";
 import { PageModel } from "@protobase/layout";
-import { Db } from "@protobase/query";
-import { ResolveOptions, ViewModel } from "@protobase/schema";
+import { ResolveOptions, ViewModel } from "@protobase/schema";
+import { Db } from "@protobase/query";

package/dist/error-handler.js

@@ -1,6 +1,6 @@
 import { HttpProblem, problemResponse } from "./problem.js";
-import { HTTPException } from "hono/http-exception";
 import { QueryError } from "@protobase/query";
+import { HTTPException } from "hono/http-exception";
 //#region src/error-handler.ts
 const titles = {
 	400: "Bad Request",

package/dist/files/attach.js

@@ -1,8 +1,8 @@
 import { badRequest } from "../problem.js";
+import { tenantScope } from "../tenant.js";
 import { accepts } from "./media-types.js";
 import { externalFile, parseExternalUrl } from "./external-url.js";
 import { baseOf, parseUri, variantPaths } from "./uri.js";
-import { tenantScope } from "../tenant.js";
 import { readTicket } from "./ticket.js";
 //#region src/files/attach.ts
 /** The ticket scope of a caller's upload for one field. */

package/dist/files/cleanup-runner.d.ts

@@ -1,5 +1,5 @@
-import { Db } from "@protobase/query";
 import { ResourceModel } from "@protobase/schema";
+import { Db } from "@protobase/query";
 //#region src/files/cleanup-runner.d.ts
 export type CleanupReport = {
   deleted: string[];

package/dist/files/runtime.d.ts

@@ -1,5 +1,5 @@
 import "./images.js";
 import "./options.js";
 import "./cleanup-runner.js";
-import { Db } from "@protobase/query";
-import { ResourceModel } from "@protobase/schema";
+import { ResourceModel } from "@protobase/schema";
+import { Db } from "@protobase/query";

package/dist/files/upload.js

@@ -1,8 +1,8 @@
 import { HttpProblem, badRequest } from "../problem.js";
-import { accepts, servedType } from "./media-types.js";
-import { cleanName, tenantSegment, variantPath } from "./uri.js";
 import { tenantScope } from "../tenant.js";
 import { requestAccess, requireOperation, writableFields } from "../request-access.js";
+import { accepts, servedType } from "./media-types.js";
+import { cleanName, tenantSegment, variantPath } from "./uri.js";
 import { issueTicket } from "./ticket.js";
 import { ticketScope } from "./attach.js";
 import { ticketSeconds } from "./runtime.js";

package/dist/history/read-history.js

@@ -6,8 +6,8 @@ import { fetchReadable } from "../read-service.js";
 import { quoteIdent } from "../changes/capture-sql.js";
 import { parseParams } from "../params.js";
 import { encodeKey } from "@protobase/schema/internal";
-import { sql } from "kysely";
 import { z } from "zod";
+import { sql } from "kysely";
 //#region src/history/read-history.ts
 const params = z.object({
 	page_size: z.coerce.number().int().min(0).max(100).optional(),

package/dist/index.d.ts

@@ -9,16 +9,18 @@ import { PlatformSignIn, readPlatformSignIn } from "./better-auth/platform-sign-
 import { EmailComponent, EmailOptions, EmailTemplate, RenderedEmail, defineEmail } from "./mail/define-email.js";
 import { AdminAuth, CreateAuthOptions, UserCreatedHook, createAuth, normalizeRoles } from "./better-auth/create-auth.js";
 import { EventsOptions } from "./changes/events-options.js";
-import { HistoryOptions } from "./history/options.js";
 import { StandardSchema, readJson } from "./functions/read-json.js";
 import { EnqueueOptions, JobContext, JobDefinition, JobOptions } from "./jobs/job-types.js";
 import { Admin, AuditEvent, AuditQueue, Authenticator, PipelineHook, ScanGuardMode, Session, SessionOrganization, TenantValue, User, ViewSource, WriteEvent, WriteOperation } from "./types.js";
+import { CommentUsers } from "./comments/comment-users.js";
+import { HistoryOptions } from "./history/options.js";
 import { WebhooksOptions } from "./webhooks/table/options.js";
 import { EventData, RunContext, SubscriptionDefinition, SubscriptionEvent, SubscriptionOptions, subscription } from "./webhooks/subscription.js";
 import { Sharp, renderVariant, thumbHash } from "./files/images.js";
 import { FileProvider, FileStore, StoredObject } from "./files/store.js";
 import { FilesOptions } from "./files/options.js";
 import { ErrorReportingOptions, ErrorReportingSettings, errorReportingSettings, errorReportingVariable } from "./error-reporting/error-reporting-settings.js";
+import { ChatMessage, ChatTextPart, Completion, CompletionOptions, ModelError, ModelSettings, ReasoningDetail, ReasoningEffort, ToolCall, ToolSpec, streamChatCompletion } from "./assistant/chat-completions.js";
 import { CleanupEntry, CleanupSchedule, ScheduledDelete, storageCleanupSchedule } from "./files/cleanup-schedule.js";
 import { CleanupReport } from "./files/cleanup-runner.js";
 import { MapLayer } from "./maps/map-layers.js";
@@ -30,7 +32,6 @@ import { RecordKeyInput, ToolRecord, ToolRecords } from "./assistant/records.js"
 import { FunctionRecords, ListParams, RecordPage } from "./functions/records.js";
 import { ApiFunction, CorsOptions, FunctionApp, FunctionCaller, FunctionContext, FunctionHandler, FunctionOptions, FunctionSource, ProtectedFunctionOptions, PublicFunctionContext, PublicFunctionHandler, PublicFunctionOptions, defineFunction } from "./functions/define-function.js";
 import { CorsOrigins } from "./api-cors.js";
-import { ChatMessage, ChatTextPart, Completion, CompletionOptions, ModelError, ModelSettings, ReasoningDetail, ReasoningEffort, ToolCall, ToolSpec, streamChatCompletion } from "./assistant/chat-completions.js";
 import { ConversationRecord, ConversationStore } from "./assistant/conversation-store.js";
 import { Conversation, ConversationsOptions, conversationKey, createConversations } from "./assistant/conversations.js";
 import { ApprovalAnswer, ApprovalRequest, requestApproval } from "./assistant/approval.js";
@@ -61,6 +62,9 @@ import { parseColumns, readOutbox } from "./changes/outbox.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { webhooks } from "./webhooks/table/plugin.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
+import { checkComments, commentsMigration } from "./comments/comments-sql.js";
+import { CheckAiInput, checkAi } from "./ai/check-ai.js";
+import { CommentItem } from "./comments/comment-item.js";
 import { MemberInput, NewOrganization, addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
 import { AssistantBackend, assistantProtocolRoutes } from "./assistant/protocol-routes.js";
 import { fileConversationStore } from "./assistant/file-conversation-store.js";
@@ -87,4 +91,4 @@ import { FatalJobError } from "./jobs/run-job.js";
 import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type CapturedRow, type ChatMessage, type ChatTextPart, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type MemberInput, MissingCredentials, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isCaptured, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticatorOptions, type CapturedRow, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type MemberInput, MissingCredentials, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isCaptured, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/index.js

@@ -1,17 +1,19 @@
+import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
+import { formatUri, variantPath } from "./files/uri.js";
+import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
+import { isCaptured } from "./changes/capture-sql.js";
+import { defineJob, isJobDefinition, jobDefinitions } from "./jobs/define-job.js";
+import { FatalJobError } from "./jobs/run-job.js";
+import { ModelError, streamChatCompletion } from "./assistant/chat-completions.js";
 import { assistantRoles, assistantSettings, assistantVariables, seesAssistant } from "./assistant/assistant-settings.js";
 import { conversationKey, createConversations } from "./assistant/conversations.js";
 import { fileConversationStore } from "./assistant/file-conversation-store.js";
-import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
 import { assistantProtocolRoutes } from "./assistant/protocol-routes.js";
 import { runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { defineTool } from "./assistant/tools.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
 import { requestApproval } from "./assistant/approval.js";
 import { withCacheBreakpoints } from "./assistant/cache-breakpoints.js";
-import { ModelError, streamChatCompletion } from "./assistant/chat-completions.js";
-import { formatUri, variantPath } from "./files/uri.js";
-import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-import { isCaptured } from "./changes/capture-sql.js";
 import { runTurn } from "./assistant/turn.js";
 import { consoleAuditQueue } from "./audit/console-queue.js";
 import { webauthnPath } from "./better-auth/origins.js";
@@ -22,12 +24,12 @@ import { readPlatformSignIn } from "./better-auth/platform-sign-in.js";
 import { createAuth, normalizeRoles } from "./better-auth/create-auth.js";
 import { addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
 import { createUser, deleteUser, hasUsers, listUsers, roleChoices, setUserBanned, setUserRole } from "./better-auth/users.js";
-import { defineJob, isJobDefinition, jobDefinitions } from "./jobs/define-job.js";
+import { changesMigration, checkChanges, migrationCommand } from "./changes/capture-schema.js";
+import { checkComments, commentsMigration } from "./comments/comments-sql.js";
 import { coalesce } from "./changes/coalesce.js";
 import { eventMatcher } from "./changes/match-events.js";
 import { parseColumns, readOutbox } from "./changes/outbox.js";
 import { recordOf, resourceChange } from "./changes/resource-change.js";
-import { FatalJobError } from "./jobs/run-job.js";
 import { defineFunction } from "./functions/define-function.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { subscription } from "./webhooks/subscription.js";
@@ -51,9 +53,9 @@ import { withTrustedApps } from "./better-auth/app-tokens.js";
 import { betterAuthAuthenticator } from "./better-auth/authenticator.js";
 import { issueToken, maxTokenTtlSeconds } from "./better-auth/tokens.js";
 import { authSchemaMigration, checkAuthSchema } from "./better-auth/auth-schema.js";
-import { changesMigration, checkChanges, migrationCommand } from "./changes/capture-schema.js";
 import { webhooks } from "./webhooks/table/plugin.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
+import { checkAi } from "./ai/check-ai.js";
 import { maxWidgetPropsBytes, widget } from "./assistant/widget.js";
 import { startErrorReporting } from "./error-reporting/error-reporter.js";
 import { functionApp } from "./functions/function-app.js";
@@ -66,4 +68,4 @@ import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/p
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAuthSchema, checkChanges, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isCaptured, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createFileCleanup, createOrganization, createUser, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, handleDroppedConnections, hasUsers, imageSize, isCaptured, isJobDefinition, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, parseColumns, parseRoles, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storeFile, streamChatCompletion, subscription, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/jobs/runtime.js

@@ -1,8 +1,8 @@
 import { clearCurrentJobs, setCurrentJobs } from "./current.js";
 import { jobsSchema } from "./schema.js";
-import { platformMailer } from "../mail/platform-mailer.js";
 import "./schedule.js";
 import { runJob, validatePayload } from "./run-job.js";
+import { platformMailer } from "../mail/platform-mailer.js";
 import { jobsDatabase } from "./database.js";
 import { queueOptions, queueSettingsDiffer, sendOptions } from "./options.js";
 import { createSchedules } from "./schedules.js";

package/dist/list-photos.js

@@ -1,13 +1,13 @@
 import { badRequest } from "./problem.js";
-import { presentFiles } from "./files/present.js";
-import { exposeRow } from "./rows.js";
 import { checkedSort } from "./filter-input.js";
 import { readScope, requestAccess } from "./request-access.js";
+import { presentFiles } from "./files/present.js";
+import { exposeRow } from "./rows.js";
 import { readTransaction } from "./transactions.js";
 import { cardPhotosErrors } from "./view-card-photos.js";
 import { cardPhotoLimit } from "@protobase/schema/internal";
-import { relatedRows } from "@protobase/query";
 import { checkFilter, createWhere } from "@protobase/schema";
+import { relatedRows } from "@protobase/query";
 //#region src/list-photos.ts
 const where = createWhere();
 const invalid = (parameter, message) => badRequest("invalid-parameter", `Invalid ${parameter}: ${message}`, { errors: [{

package/dist/list-service.js

@@ -1,9 +1,9 @@
+import { checkedFilter, checkedSort } from "./filter-input.js";
+import { readScope, requestAccess, requireOperation } from "./request-access.js";
 import { presentFiles } from "./files/present.js";
 import { etagAlias } from "./sql-parts.js";
 import { etagOf } from "./etag.js";
 import { exposeRow, pickFields } from "./rows.js";
-import { checkedFilter, checkedSort } from "./filter-input.js";
-import { readScope, requestAccess, requireOperation } from "./request-access.js";
 import { rowPermissions } from "./row-permissions.js";
 import { readTransaction } from "./transactions.js";
 import { deletedRows, listParams, pageSizeOf, parseParams, seekParams, selectedFields } from "./params.js";

package/dist/map-service.js

@@ -5,8 +5,8 @@ import { parseParams, selectedFields } from "./params.js";
 import { labelRequests } from "./related-labels.js";
 import { photosRequest } from "./list-photos.js";
 import { listRecords } from "./list-service.js";
-import { checkMapPosition, countUpTo, mapBuckets, maxMapZoom } from "@protobase/query";
 import { z } from "zod";
+import { checkMapPosition, countUpTo, mapBuckets, maxMapZoom } from "@protobase/query";
 const mapParams = z.object({
 	latitude: z.string().min(1),
 	longitude: z.string().min(1),

package/dist/meta.js

@@ -1,6 +1,6 @@
-import { seesAssistant } from "./assistant/assistant-settings.js";
-import { sha256Hex, stableJson } from "./hash.js";
 import { requestAccess } from "./request-access.js";
+import { sha256Hex, stableJson } from "./hash.js";
+import { seesAssistant } from "./assistant/assistant-settings.js";
 import { pruneView } from "./view-access.js";
 import { activeRole } from "./active-role.js";
 import { pluginsFor } from "./plugins/plugin-settings.js";

package/dist/openapi/resource-paths.js

@@ -1,5 +1,6 @@
 import { writableFields } from "../request-access.js";
 import { pascal } from "./naming.js";
+import { pickView } from "@protobase/schema";
 import { mapCellPixels, maxMapBuckets, maxMapZoom } from "@protobase/query";
 //#region src/openapi/resource-paths.ts
 const param = (name) => ({ $ref: `#/components/parameters/${name}` });
@@ -85,6 +86,37 @@ const page = (name, seek = false) => json({
 		photos
 	}
 });
+const person = {
+	type: "object",
+	required: ["id"],
+	properties: {
+		id: { type: "string" },
+		name: { type: "string" }
+	}
+};
+const comment = {
+	type: "object",
+	required: [
+		"id",
+		"created_at",
+		"body",
+		"author",
+		"mentions"
+	],
+	properties: {
+		id: { type: "string" },
+		created_at: {
+			type: "string",
+			format: "date-time"
+		},
+		body: { type: "string" },
+		author: person,
+		mentions: {
+			type: "array",
+			items: person
+		}
+	}
+};
 const bounds = {
 	type: "object",
 	properties: {
@@ -140,6 +172,7 @@ const needs = {
 	create: "create",
 	update: "update",
 	undelete: "update",
+	generate: "update",
 	delete: "delete"
 };
 const withoutDenied = (paths, access) => Object.fromEntries(Object.entries(paths).flatMap(([path, methods]) => {
@@ -160,6 +193,7 @@ const resourcePaths = (access) => {
 		404: error("NotFound")
 	};
 	const sensitive = Object.values(access.readable.fields).filter((field) => field.sensitive).map((field) => field.name);
+	const aiActions = (pickView(access.deps.views, access.session.user.roles, entry.name)?.actions ?? []).filter((action) => action.run?.kind === "ai").map((action) => action.name);
 	const paths = {
 		[`/${entry.name}`]: {
 			get: {
@@ -325,6 +359,31 @@ const resourcePaths = (access) => {
 				...keyErrors
 			}
 		} } },
+		...aiActions.length > 0 && { [`/${entry.name}/{key}:generate`]: { post: {
+			operationId: `generate_${entry.name}`,
+			tags: tag,
+			summary: `Run an AI action on a ${entry.name} record`,
+			description: "The model writes the action's field from its prompt, as the caller, who must be signed in, may read the fields the prompt names and may update the field. An edit made while the model answers is a 412; empty inputs or an empty answer are a 422, and nothing is written.",
+			parameters: [param("key")],
+			requestBody: {
+				required: true,
+				content: json({
+					type: "object",
+					required: ["action"],
+					properties: { action: {
+						type: "string",
+						enum: aiActions
+					} },
+					additionalProperties: false
+				})
+			},
+			responses: {
+				200: record(name, entry),
+				...keyErrors,
+				403: error("Forbidden"),
+				412: error("PreconditionFailed")
+			}
+		} } },
 		...entry.model.history && { [`/${entry.name}/{key}:history`]: { get: {
 			operationId: `history_${entry.name}`,
 			tags: tag,
@@ -396,6 +455,98 @@ const resourcePaths = (access) => {
 				...keyErrors
 			}
 		} } },
+		...entry.model.comments && {
+			[`/${entry.name}/{key}:comments`]: {
+				get: {
+					operationId: `comments_${entry.name}`,
+					tags: tag,
+					summary: `The comments on a ${entry.name} record`,
+					description: "Newest first, with the same access as a get, a deleted record included.",
+					parameters: [
+						param("key"),
+						query("page_size", "Comments per page, at most 100 (default 20)", { type: "integer" }),
+						query("page_token", "The next_page_token of the previous page")
+					],
+					responses: {
+						200: {
+							description: "A page of comments",
+							content: json({
+								type: "object",
+								required: ["items", "next_page_token"],
+								properties: {
+									items: {
+										type: "array",
+										items: comment
+									},
+									next_page_token: {
+										type: "string",
+										description: "Empty on the last page"
+									}
+								}
+							})
+						},
+						...keyErrors
+					}
+				},
+				post: {
+					operationId: `comment_${entry.name}`,
+					tags: tag,
+					summary: `Comment on a ${entry.name} record`,
+					description: "For a signed-in caller who may read the record, not deleted. Each mentioned user must be able to read the record too, and is emailed a link to it.",
+					parameters: [param("key")],
+					requestBody: {
+						required: true,
+						content: json({
+							type: "object",
+							required: ["body"],
+							properties: {
+								body: {
+									type: "string",
+									maxLength: 1e4
+								},
+								mentions: {
+									type: "array",
+									items: { type: "string" },
+									maxItems: 20,
+									description: "The user ids it mentions"
+								}
+							},
+							additionalProperties: false
+						})
+					},
+					responses: {
+						201: {
+							description: "The comment",
+							content: json(comment)
+						},
+						...keyErrors,
+						403: error("Forbidden")
+					}
+				}
+			},
+			[`/${entry.name}/{key}:mentionable`]: { get: {
+				operationId: `mentionable_${entry.name}`,
+				tags: tag,
+				summary: `The users a comment on a ${entry.name} record may mention`,
+				description: "At most 8, by name: users whose name contains q who may read the record, without the caller.",
+				parameters: [param("key"), query("q", "Part of the name")],
+				responses: {
+					200: {
+						description: "The users",
+						content: json({
+							type: "object",
+							required: ["items"],
+							properties: { items: {
+								type: "array",
+								items: person
+							} }
+						})
+					},
+					...keyErrors,
+					403: error("Forbidden")
+				}
+			} }
+		},
 		[`/${entry.name}:facets`]: { get: {
 			operationId: `facets_${entry.name}`,
 			tags: tag,

package/dist/project-config.d.ts

@@ -1,7 +1,7 @@
 import { AdminAuth } from "./better-auth/create-auth.js";
 import { EventsOptions } from "./changes/events-options.js";
-import { HistoryOptions } from "./history/options.js";
 import { Authenticator } from "./types.js";
+import { HistoryOptions } from "./history/options.js";
 import { WebhooksOptions } from "./webhooks/table/options.js";
 import { FilesOptions } from "./files/options.js";
 import { FunctionSource } from "./functions/define-function.js";

package/dist/read-service.js

@@ -1,9 +1,9 @@
 import { notFound } from "./problem.js";
+import { tenantScope } from "./tenant.js";
+import { recordDecision, requestAccess, requireOperation, targetFilter, visibleFields, writableFields } from "./request-access.js";
 import { presentFiles } from "./files/present.js";
 import { pickFields } from "./rows.js";
 import { fetchRecord } from "./records.js";
-import { tenantScope } from "./tenant.js";
-import { recordDecision, requestAccess, requireOperation, targetFilter, visibleFields, writableFields } from "./request-access.js";
 import { rowPermissions } from "./row-permissions.js";
 import { readTransaction } from "./transactions.js";
 //#region src/read-service.ts