@protobase/server 0.21.7 → 0.21.9

package/dist/related-labels.js

@@ -1,8 +1,8 @@
 import { badRequest } from "./problem.js";
-import { exposeRow } from "./rows.js";
 import { readScope, requestAccess } from "./request-access.js";
-import { listQuery } from "@protobase/query";
+import { exposeRow } from "./rows.js";
 import { checkFilter, createWhere } from "@protobase/schema";
+import { listQuery } from "@protobase/query";
 //#region src/related-labels.ts
 const where = createWhere();
 const invalid = (entry, message) => badRequest("invalid-parameter", `Invalid labels entry "${entry}": ${message}`, { errors: [{

package/dist/request-access.d.ts

@@ -1,5 +1,5 @@
 import "./types.js";
 import "./registry.js";
 import "./deps.js";
-import "@protobase/query";
-import { ResourceModel } from "@protobase/schema";
+import { ResourceModel } from "@protobase/schema";
+import "@protobase/query";

package/dist/routes/record.js

@@ -9,6 +9,10 @@ import { returnPreference } from "./preferences.js";
 import { resolveTarget } from "./target.js";
 import { revealField } from "../reveal-service.js";
 import { readHistory } from "../history/read-history.js";
+import { mentionable } from "../comments/mentionable.js";
+import { postComment } from "../comments/post-comment.js";
+import { readComments } from "../comments/read-comments.js";
+import { generateField } from "../ai/generate-route.js";
 import { Hono } from "hono";
 //#region src/routes/record.ts
 const recordRoutes = (deps) => {
@@ -16,6 +20,8 @@ const recordRoutes = (deps) => {
 	app.get("/:resource/:key", async (c) => {
 		const { entry } = resolveTarget(deps, c.req.param("resource"));
 		if (c.req.param("key").endsWith(":history")) return c.json(await readHistory(deps, entry, c.get("session"), keyFromPath(c, entry, ":history"), c.req.query()));
+		if (c.req.param("key").endsWith(":comments")) return c.json(await readComments(deps, entry, c.get("session"), keyFromPath(c, entry, ":comments"), c.req.query()));
+		if (c.req.param("key").endsWith(":mentionable")) return c.json(await mentionable(deps, entry, c.get("session"), keyFromPath(c, entry, ":mentionable"), c.req.query()));
 		const deleted = deletedRows(entry.model, c.req.query("show_deleted") === "true");
 		const found = await readRecord(deps, entry, c.get("session"), keyFromPath(c, entry), deleted);
 		const columns = selectedFields({
@@ -40,6 +46,17 @@ const recordRoutes = (deps) => {
 	app.post("/:resource/:key", async (c) => {
 		const { entry } = resolveTarget(deps, c.req.param("resource"));
 		if (c.req.param("key").endsWith(":reveal")) return reveal(c, entry);
+		if (c.req.param("key").endsWith(":comments")) {
+			const body = await c.req.json();
+			return c.json(await postComment(deps, entry, c.get("session"), keyFromPath(c, entry, ":comments"), body, c.req.url), 201);
+		}
+		if (c.req.param("key").endsWith(":generate")) {
+			const generated = await generateField(deps, entry, c.get("session"), keyFromPath(c, entry, ":generate"), await c.req.json(), c.req.raw.signal);
+			return c.json({
+				...generated.record,
+				etag: generated.etag
+			}, 200, { ETag: generated.etag });
+		}
 		if (!c.req.param("key").endsWith(":undelete")) throw notFound("There is no such method");
 		const restored = await runWrite(deps, entry, c.get("session"), {
 			operation: "undelete",

package/dist/row-permissions.js

@@ -1,9 +1,9 @@
-import { aliasedColumn, columnId, scopeConditions, tableId, whereClause } from "./sql-parts.js";
-import { fetchRecord } from "./records.js";
 import { tenantScope } from "./tenant.js";
 import { recordDecision } from "./request-access.js";
-import { compileFilter } from "@protobase/query";
+import { aliasedColumn, columnId, scopeConditions, tableId, whereClause } from "./sql-parts.js";
+import { fetchRecord } from "./records.js";
 import { sql } from "kysely";
+import { compileFilter } from "@protobase/query";
 //#region src/row-permissions.ts
 const keyOf = (access, row) => JSON.stringify(access.full.primaryKey.map((name) => String(row[name])));
 const matching = async (trx, access, rows, filter) => {

package/dist/scan-guard.d.ts

@@ -1,4 +1,4 @@
 import "./types.js";
 import "./registry.js";
-import { Db } from "@protobase/query";
-import { ResourceModel } from "@protobase/schema";
+import { ResourceModel } from "@protobase/schema";
+import { Db } from "@protobase/query";

package/dist/sql-parts.js

@@ -1,5 +1,5 @@
-import { compileFilter } from "@protobase/query";
 import { sql } from "kysely";
+import { compileFilter } from "@protobase/query";
 //#region src/sql-parts.ts
 const etagAlias = "__pb_etag";
 const tableId = (model) => {

package/dist/types.d.ts

@@ -1,8 +1,8 @@
 import { JobDefinition } from "./jobs/job-types.js";
 import { Hono } from "hono";
 import { PageModel } from "@protobase/layout";
-import { Db } from "@protobase/query";
 import { ResourceModel, ViewModel } from "@protobase/schema";
+import { Db } from "@protobase/query";
 //#region src/types.d.ts
 export type TenantValue = string | number;
 export type User = {
@@ -35,6 +35,8 @@ export type WriteEvent = {
   resource: ResourceModel;
   user: User;
   tenant?: TenantValue;
+  /** The writer is a visitor without a token, through a public form. */
+  anonymous?: true;
   before?: Row;
   after?: Row;
 };

package/dist/view-access.js

@@ -1,19 +1,26 @@
-import { relatedErrors } from "./view-related.js";
+import { openErrors, relatedErrors } from "./view-related.js";
 import { cardPhotosErrors } from "./view-card-photos.js";
 import { cardFavoriteErrors } from "./view-card-favorite.js";
 import { searchesOfFor } from "./view-saved-search.js";
 import { relatedColumnErrors } from "./view-related-column.js";
 import { resolveFieldPath } from "@protobase/layout";
-import { addressErrors, chartFields, hrefPlaceholders, navRecentErrors, pruneByShape, shapes, tableDisplay } from "@protobase/schema/internal";
+import { addressErrors, chartFields, hrefPlaceholders, navRecentErrors, promptFields, pruneByShape, shapes, tableDisplay } from "@protobase/schema/internal";
 //#region src/view-access.ts
 const pruneRelated = (item, resource, models) => {
-	const { columns, ...rest } = item;
+	const { columns, open, ...rest } = item;
 	const visible = models[item.resource] ? columns?.filter((column) => resolveFieldPath(models, item.resource, column).ok) : void 0;
 	const narrowed = visible && visible.length > 0 ? {
 		...rest,
 		columns: visible
 	} : rest;
-	return relatedErrors(narrowed, resource, models).length === 0 ? narrowed : void 0;
+	const opened = open !== void 0 && openErrors({
+		...narrowed,
+		open
+	}, models).length === 0 ? {
+		...narrowed,
+		open
+	} : narrowed;
+	return relatedErrors(opened, resource, models).length === 0 ? opened : void 0;
 };
 const pruneGallery = (item, resource, model, models) => {
 	const image = item.image !== void 0 && Object.hasOwn(model.fields, item.image) ? item.image : void 0;
@@ -101,6 +108,15 @@ const listShape = (resource, model, models, prompted) => shapes.object({
 			badge: shapes.field,
 			meta: shapes.list(shapes.field)
 		}, { requires: ["by"] }),
+		calendar: shapes.object({
+			kind: shapes.data,
+			name: shapes.data,
+			label: shapes.data,
+			icon: shapes.data,
+			start: shapes.field,
+			end: shapes.field,
+			title: shapes.field
+		}, { requires: ["start"] }),
 		custom: shapes.object({
 			kind: shapes.data,
 			name: shapes.data,
@@ -178,6 +194,11 @@ const layoutShape = (resource, model, models) => shapes.oneOf({
 		title: shapes.data,
 		limit: shapes.data,
 		when: shapes.data
+	}),
+	comments: shapes.object({
+		kind: shapes.data,
+		title: shapes.data,
+		when: shapes.data
 	})
 });
 const linkShape = (model, models) => shapes.map((run) => {
@@ -186,6 +207,12 @@ const linkShape = (model, models) => shapes.map((run) => {
 		source: model
 	}).length === 0 : hrefPlaceholders(run.href).every((name) => Object.hasOwn(model.fields, name))) ? run : void 0;
 });
+const aiShape = (model) => shapes.map((run) => {
+	return [run.writes, ...promptFields(run.prompt ?? "")].every((name) => Object.hasOwn(model.fields, name)) ? {
+		kind: "ai",
+		writes: run.writes
+	} : void 0;
+});
 const inputsShape = (models) => shapes.map((inputs) => inputs.every((input) => input.resource === void 0 || Object.hasOwn(models, input.resource)) ? inputs : void 0);
 const actionShape = (model, models) => shapes.object({
 	name: shapes.data,
@@ -199,7 +226,8 @@ const actionShape = (model, models) => shapes.object({
 			values: shapes.keys({ all: true })
 		}, { requires: ["values"] }),
 		delete: shapes.data,
-		link: linkShape(model, models)
+		link: linkShape(model, models),
+		ai: aiShape(model)
 	}),
 	inputs: inputsShape(models)
 }, { requires: ["run", "inputs"] });

package/dist/view-related.js

@@ -34,6 +34,18 @@ const throughErrors = (through, resource, models) => {
 		...filterErrors(via, through.filter).map((error) => `filter: ${error}`)
 	].map((error) => `through: ${error}`);
 };
+/** What is wrong with the relation a related section's rows open; empty without one. */
+const openErrors = (item, models) => {
+	const target = models[item.resource];
+	if (item.open === void 0 || !target) return [];
+	const field = Object.hasOwn(target.fields, item.open) ? target.fields[item.open] : void 0;
+	if (!field) return [`open: unknown field "${item.open}" on ${target.name}`];
+	if (field.type !== "relation" || !field.relation) return [`open: "${item.open}" on ${target.name} is not a relation`];
+	if (item.open === item.field) return [`open: "${item.open}" is the field that matches this record`];
+	const far = models[field.relation.resource];
+	if (!far) return [`open: unknown resource "${field.relation.resource}"`];
+	return far.primaryKey.length === 1 ? [] : [`open: ${far.name} has a composite key, so its records cannot be opened from "${item.open}"`];
+};
 /**
 * What is wrong with a related section on the record page of `resource`, against these models; empty when it can be
 * shown. Against the full models it checks the config; against a caller's models, whether that caller can use it.
@@ -52,8 +64,9 @@ const relatedErrors = (item, resource, models) => {
 			if (!resolved.ok) return [`column: ${resolved.message}`];
 			return resolved.steps.at(-1).field.sensitive ? [`column: "${column}" is sensitive, so it cannot be listed`] : [];
 		}),
-		...item.limit === void 0 || Number.isInteger(item.limit) && item.limit >= 1 && item.limit <= 100 ? [] : ["limit must be a whole number from 1 to 100"]
+		...item.limit === void 0 || Number.isInteger(item.limit) && item.limit >= 1 && item.limit <= 100 ? [] : ["limit must be a whole number from 1 to 100"],
+		...openErrors(item, models)
 	];
 };
 //#endregion
-export { matchErrors, relatedErrors, sortErrors, throughKey };
+export { matchErrors, openErrors, relatedErrors, sortErrors, throughKey };

package/dist/webhooks/subscription.d.ts

@@ -1,6 +1,6 @@
 import { Row, TenantValue } from "../types.js";
-import { Db } from "@protobase/query";
 import { EventActor, EventOperation } from "@protobase/schema";
+import { Db } from "@protobase/query";
 //#region src/webhooks/subscription.d.ts
 /** What happened, as a receiver gets it in the `data` of an event. Records use field names, as the API shows them. */
 export type EventData = {

package/dist/webhooks/table/schema.js

@@ -1,8 +1,8 @@
 import { quoteIdent } from "../../changes/capture-sql.js";
 import { changesSchema } from "../../changes/events-options.js";
+import { migrationCommand } from "../../changes/capture-schema.js";
 import { webhooksSchema } from "./options.js";
 import { commandsSql, deliveriesSql, deliveryLogSql, subscriptionsSql, webhooksComment } from "./schema-sql.js";
-import { migrationCommand } from "../../changes/capture-schema.js";
 import { sql } from "kysely";
 //#region src/webhooks/table/schema.ts
 const functionNames = ["subscription_commands", "deliveries_resend"];

package/dist/webhooks/table/webhook-table.js

@@ -1,6 +1,6 @@
+import { betterAuthOwnerRoles } from "./owner-roles.js";
 import { webhooksSchema } from "./options.js";
 import { checkWebhookUrl } from "./address-check.js";
-import { betterAuthOwnerRoles } from "./owner-roles.js";
 import { tableSubscriptions } from "./table-subscriptions.js";
 //#region src/webhooks/table/webhook-table.ts
 /**

package/dist/webhooks/webhooks.js

@@ -1,5 +1,6 @@
 import { dispatchJobName, isCaptured } from "../changes/capture-sql.js";
 import { defineJob } from "../jobs/define-job.js";
+import { FatalJobError } from "../jobs/run-job.js";
 import { coalesce } from "../changes/coalesce.js";
 import { EventCodeError } from "../changes/event-code-error.js";
 import { eventMatcher } from "../changes/match-events.js";
@@ -7,7 +8,6 @@ import { deleteOutbox, readOutbox } from "../changes/outbox.js";
 import { resourceChange } from "../changes/resource-change.js";
 import { callerRecords } from "../functions/records.js";
 import { writeHistory } from "../history/write-history.js";
-import { FatalJobError } from "../jobs/run-job.js";
 import { maxTries, nextRetryDelay } from "./retry-schedule.js";
 import { subscriberEvents } from "./subscriber-view.js";
 import { attemptDelivery } from "./attempt.js";

package/dist/write-pipeline.js

@@ -1,10 +1,10 @@
 import { HttpProblem, badRequest } from "./problem.js";
-import { isDatabaseError } from "./error-handler.js";
-import { deleteRecord, fetchRecord, insertRecord, restoreRecord } from "./records.js";
 import { tenantScope } from "./tenant.js";
 import { requestAccess, requireOperation, targetFilter, writableFields } from "./request-access.js";
+import { deleteRecord, fetchRecord, insertRecord, restoreRecord } from "./records.js";
 import { writeTransaction } from "./transactions.js";
 import { blockedDelete } from "./blocked-delete.js";
+import { isDatabaseError } from "./error-handler.js";
 import { attachFiles } from "./files/attach.js";
 import { actorSettings, wakeDispatch } from "./changes/actor.js";
 import { validateBody } from "./validate-body.js";

package/dist/write-shared.js

@@ -1,10 +1,10 @@
 import { forbidden, notFound, preconditionFailed, preconditionRequired } from "./problem.js";
+import { tenantScope } from "./tenant.js";
+import { andFilters, recordDecision } from "./request-access.js";
 import { presentFiles } from "./files/present.js";
 import { ifMatchSatisfied } from "./etag.js";
 import { pickFields } from "./rows.js";
 import { fetchRecord } from "./records.js";
-import { tenantScope } from "./tenant.js";
-import { andFilters, recordDecision } from "./request-access.js";
 import { scheduleRemovedFiles } from "./files/attach.js";
 //#region src/write-shared.ts
 const missing = (entry) => notFound(`No ${entry.name} with this key`);
@@ -45,6 +45,7 @@ const notifier = (deps, access) => async (trx, kind, before, after) => {
 		resource: access.full,
 		user: session.user,
 		...session.tenant !== void 0 && { tenant: session.tenant },
+		...session.anonymous && { anonymous: true },
 		...before && { before },
 		...after && { after }
 	};

package/dist/write-update.js

@@ -1,6 +1,6 @@
-import { fetchRecord, updateRecord } from "./records.js";
 import { tenantScope } from "./tenant.js";
 import { targetFilter } from "./request-access.js";
+import { fetchRecord, updateRecord } from "./records.js";
 import { attachFiles } from "./files/attach.js";
 import { validateBody } from "./validate-body.js";
 import { assertWritten, checkPrecondition, decide, denied, firstKeyField, missing, notifier } from "./write-shared.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.21.7",
+  "version": "0.21.9",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -30,9 +30,9 @@
   },
   "dependencies": {
     "@better-auth/passkey": "^1.7.7",
-    "@protobase/layout": "0.21.7",
-    "@protobase/query": "0.21.7",
-    "@protobase/schema": "0.21.7",
+    "@protobase/layout": "0.21.9",
+    "@protobase/query": "0.21.9",
+    "@protobase/schema": "0.21.9",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",