@protobase/server 0.36.0 → 0.37.0

package/dist/encryption/apply.js

@@ -1,6 +1,6 @@
+import { columnId, tableId } from "../sql-parts.js";
 import { bindingOf, movedBinding } from "./binding.js";
 import { Sealed, sealText } from "./envelope-seal.js";
-import { columnId, tableId } from "../sql-parts.js";
 import { cascadingKeys } from "./cascading-keys.js";
 import { captureOff } from "./capture-off.js";
 import { scrubHistory, scrubOutbox } from "./remnants.js";

package/dist/encryption/binding.d.ts

@@ -1,2 +1,2 @@
 import "../types.js";
-import { ResourceModel } from "@protobase/schema";
+import { FieldModel, ResourceModel } from "@protobase/schema";

package/dist/encryption/keyring.d.ts

@@ -0,0 +1,12 @@
+//#region src/encryption/keyring.d.ts
+/** One root key, as the AES key derived from it and the id envelopes name it by. */
+export type EncryptionKey = {
+  id: string;
+  aes: Buffer;
+};
+/** The key new values are sealed with, and every key a stored value may name, by id. */
+export type Keyring = {
+  current: EncryptionKey;
+  byId: ReadonlyMap<string, EncryptionKey>;
+};
+//#endregion

package/dist/encryption/runtime.d.ts

@@ -1 +1,8 @@
-import { ResourceModel } from "@protobase/schema";
+import { Keyring } from "./keyring.js";
+import { ResourceModel } from "@protobase/schema";
+//#region src/encryption/runtime.d.ts
+/** The keys encrypted fields are sealed and opened with, when a resource has one. */
+export type EncryptionRuntime = {
+  keyring: Keyring;
+};
+//#endregion

package/dist/encryption/scan.d.ts

@@ -1,4 +1,4 @@
 import "../types.js";
 import "../registry.js";
-import "@protobase/schema";
+import { FieldModel } from "@protobase/schema";
 import { Db } from "@protobase/query";

package/dist/encryption/status.d.ts

@@ -3,7 +3,7 @@ import "./binding.js";
 import { CascadingKey } from "./cascading-keys.js";
 import { UnreadableKind } from "./envelope-open.js";
 import "./scan.js";
-import "@protobase/schema";
+import { FieldModel } from "@protobase/schema";
 import { Db } from "@protobase/query";
 //#region src/encryption/status.d.ts
 /** A stored value that does not open, by its record's key: never the value. */

package/dist/encryption/status.js

@@ -1,6 +1,6 @@
+import { columnId, tableId } from "../sql-parts.js";
 import { bindingOf } from "./binding.js";
 import { envelopePrefix } from "./envelope-seal.js";
-import { columnId, tableId } from "../sql-parts.js";
 import { UnreadableValue, openText } from "./envelope-open.js";
 import { cascadingKeys } from "./cascading-keys.js";
 import { historyRemnants, outboxRemnants } from "./remnants.js";

package/dist/files/cleanup-runner.d.ts

@@ -1,6 +1,11 @@
 import { ResourceModel } from "@protobase/schema";
 import { Db } from "@protobase/query";
 //#region src/files/cleanup-runner.d.ts
+/** A column that holds file values, read without any resource's filters: soft-deleted rows still reference their files. */
+export type FileColumn = {
+  table: ResourceModel['table'];
+  column: string;
+};
 export type CleanupReport = {
   deleted: string[];
   kept: string[];

package/dist/files/runtime.d.ts

@@ -1,5 +1,30 @@
-import "./images.js";
+import { Sharp } from "./images.js";
+import { FileProvider } from "./store.js";
 import "./options.js";
-import "./cleanup-runner.js";
+import { CleanupSchedule } from "./cleanup-schedule.js";
+import { FileColumn } from "./cleanup-runner.js";
+import { Signer } from "./signer.js";
 import { ResourceModel } from "@protobase/schema";
-import { Db } from "@protobase/query";
+import { Db } from "@protobase/query";
+//#region src/files/runtime.d.ts
+/** Everything the API needs to handle files, built once at startup. */
+export type FilesRuntime = {
+  providers: Record<string, FileProvider>;
+  signer: Signer;
+  schedule: CleanupSchedule;
+  /** Milliseconds a provider keeps bytes after their last reference. */
+  retention: (provider: string) => number;
+  /** The path downloads are served under: `<systemPath>/files`. */
+  path: string;
+  columns: FileColumn[];
+  /** Makes image variants and placeholders; set when a field declares them. */
+  sharp?: Sharp;
+  /** The hosts whose images are drawn with the page's referrer, besides the app's own (see `trustedImageHosts`). */
+  trustedHosts: string[];
+  /** The provider `/api/sb/storage/v1` keeps object bytes in and the largest object it takes, when the app serves it. */
+  storage?: {
+    provider: string;
+    maxBytes: number;
+  };
+};
+//#endregion

package/dist/files/signer.d.ts

@@ -0,0 +1,7 @@
+//#region src/files/signer.d.ts
+/** HMAC-SHA256 signatures over JSON values, under a key derived from the files secret by HKDF; one purpose never verifies as another. */
+export type Signer = {
+  sign(purpose: string, parts: unknown[]): Promise<string>;
+  verify(purpose: string, parts: unknown[], signature: string): Promise<boolean>;
+};
+//#endregion

package/dist/functions/records.d.ts

@@ -1,40 +1,13 @@
-import { Row } from "../types.js";
+import "../types.js";
 import "../deps.js";
-import { RecordKeyInput, ToolRecord, ToolRecords } from "../assistant/records.js";
+import { ListParams, RecordKeyInput, RecordPage, ToolRecord, ToolRecords } from "../assistant/records.js";
 //#region src/functions/records.d.ts
-/** The list parameters of the REST API (AIP-132), as values rather than query text. */
-export type ListParams = {
-  filter?: string;
-  order_by?: string;
-  page_size?: number;
-  page_token?: string;
-  fields?: string[];
-  count?: 'exact';
-  show_deleted?: boolean;
-};
-/**
- * A page of records as the REST API lists it: each item with its `etag` and, unless the resource opts out, whether the
- * caller may update and delete it; and the token of the next page, empty on the last.
- */
-export type RecordPage = {
-  items: Array<Row & {
-    etag?: string;
-    permissions?: {
-      update: boolean;
-      delete: boolean;
-    };
-  }>;
-  next_page_token: string;
-  total_size_estimate: number;
-  total_size?: number;
-};
 /**
  * The app's resources as the caller: their access rules, row filters, tenant scope, validation and write hooks apply as
  * in the REST API. A refusal or a missing record rejects with an `HttpProblem`, which becomes the function's response
  * when it is not caught.
  */
 export type FunctionRecords = ToolRecords & {
-  list: (resource: string, params?: ListParams) => Promise<RecordPage>;
   /** With `etag`, fails with 412 when the record changed since it was read. Resolves to the record as it was. */
   delete: (resource: string, key: RecordKeyInput, options?: {
     etag?: string;

package/dist/functions/records.js

@@ -2,30 +2,21 @@ import { notFound } from "../problem.js";
 import { decodeKeyText } from "../key.js";
 import { runWrite } from "../write-pipeline.js";
 import { assistantRecords } from "../assistant/records.js";
-import { listRecords } from "../list-service.js";
 import { encodeKey } from "@protobase/schema/internal";
 //#region src/functions/records.ts
-const filterLength = 2e5;
 /** `FunctionRecords` over the admin's resources for `session`. */
-const callerRecords = (deps, session) => {
-	const entryOf = (resource) => {
+const callerRecords = (deps, session) => ({
+	...assistantRecords(deps, session),
+	delete: async (resource, input, { etag } = {}) => {
 		const entry = deps.registry.find(resource);
 		if (!entry) throw notFound(`There is no resource "${resource}"`);
-		return entry;
-	};
-	return {
-		...assistantRecords(deps, session),
-		list: async (resource, params = {}) => (await listRecords(deps, entryOf(resource), session, params, filterLength)).body,
-		delete: async (resource, input, { etag } = {}) => {
-			const entry = entryOf(resource);
-			const key = decodeKeyText(entry, Array.isArray(input) ? encodeKey(input) : String(input));
-			return runWrite(deps, entry, session, {
-				operation: "delete",
-				key,
-				ifMatch: etag ?? "*"
-			});
-		}
-	};
-};
+		const key = decodeKeyText(entry, Array.isArray(input) ? encodeKey(input) : String(input));
+		return runWrite(deps, entry, session, {
+			operation: "delete",
+			key,
+			ifMatch: etag ?? "*"
+		});
+	}
+});
 //#endregion
 export { callerRecords };

package/dist/history/read-history.js

@@ -1,10 +1,10 @@
 import { notFound } from "../problem.js";
 import { tenantScope } from "../tenant.js";
 import { requestAccess, requireOperation } from "../request-access.js";
+import { parseParams } from "../params.js";
 import { fetchReadable } from "../fetch-readable.js";
 import { readTransaction } from "../transactions.js";
 import { quoteIdent } from "../changes/capture-sql.js";
-import { parseParams } from "../params.js";
 import { encodeKey } from "@protobase/schema/internal";
 import { z } from "zod";
 import { sql } from "kysely";

package/dist/index.d.ts

@@ -34,14 +34,14 @@ import { MapOptions, MapSettings, mapSettings, mapStyleUrl, mapStyleVariable } f
 import { PluginOption, PluginRef, beforeSignInPluginsVariable, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable } from "./plugins/plugin-settings.js";
 import { ResourceSource, configExports } from "./resource-source.js";
 import { SourceOption, SourceRef, checkSourceNames, sourceOptions, sourcesFor, sourcesVariable } from "./sources/source-settings.js";
-import { RecordKeyInput, ToolRecord, ToolRecords } from "./assistant/records.js";
-import { FunctionRecords, ListParams, RecordPage } from "./functions/records.js";
+import { ListParams, RecordKeyInput, RecordPage, ToolRecord, ToolRecords } from "./assistant/records.js";
+import { FunctionRecords } from "./functions/records.js";
 import { ApiFunction, CorsOptions, FunctionApp, FunctionCaller, FunctionContext, FunctionHandler, FunctionOptions, FunctionSource, KeyFunctionContext, ProtectedFunctionOptions, PublicFunctionContext, PublicFunctionHandler, PublicFunctionOptions, defineFunction } from "./functions/define-function.js";
 import { CorsOrigins } from "./api-cors.js";
 import { ConversationRecord, ConversationStore } from "./assistant/conversation-store.js";
 import { Conversation, ConversationsOptions, conversationKey, createConversations } from "./assistant/conversations.js";
 import { ApprovalAnswer, ApprovalRequest, requestApproval } from "./assistant/approval.js";
-import { AssistantTool, ToolContext, defineTool } from "./assistant/tools.js";
+import { AssistantTool, ReadableResources, ToolAnnotations, ToolContext, defineTool } from "./assistant/tools.js";
 import { AssistantOptions, AssistantSettings, assistantRoles, assistantSettings, assistantVariables, seesAssistant } from "./assistant/assistant-settings.js";
 import { RuntimeOptions, runtimeUrl, runtimeVariable, seesRuntime } from "./runtime/runtime-settings.js";
 import { AdminOptions } from "./admin-options.js";
@@ -83,9 +83,17 @@ import { AssistantBackend, assistantProtocolRoutes } from "./assistant/protocol-
 import { fileConversationStore } from "./assistant/file-conversation-store.js";
 import { withCacheBreakpoints } from "./assistant/cache-breakpoints.js";
 import { TurnOptions, runTurn } from "./assistant/turn.js";
+import { readableResources } from "./assistant/readable-resources.js";
 import { WidgetOptions, maxWidgetPropsBytes, widget } from "./assistant/widget.js";
 import { QueryOptions, QueryResult, runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
+import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
+import { McpServerInput, mcpServer } from "./mcp/mcp-server.js";
+import { McpToolsInput, mcpTools } from "./mcp/mcp-tools.js";
+import { McpGateInput, mcpGate, sessionOf } from "./mcp/mcp-gate.js";
+import { McpHandlerInput, mcpHandler } from "./mcp/mcp-handler.js";
+import { McpRoutesInput, mcpRoutes } from "./mcp/mcp-routes.js";
+import { mcpToolContext } from "./mcp/mcp-context.js";
 import { ErrorReporter } from "./error-reporting/sentry-reporter.js";
 import { startErrorReporting } from "./error-reporting/error-reporter.js";
 import { FunctionEnv, PublicFunctionEnv, functionApp } from "./functions/function-app.js";
@@ -112,4 +120,4 @@ import { isSchedule } from "./jobs/schedule.js";
 import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type MemberInput, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, goTruePath, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, realtimeLimits, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type MemberInput, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readWriteQueryTool, readableResources, realtimeLimits, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/index.js

@@ -13,6 +13,7 @@ import { assistantProtocolRoutes } from "./assistant/protocol-routes.js";
 import { runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { defineTool } from "./assistant/tools.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
+import { readableResources } from "./assistant/readable-resources.js";
 import { requestApproval } from "./assistant/approval.js";
 import { withCacheBreakpoints } from "./assistant/cache-breakpoints.js";
 import { runTurn } from "./assistant/turn.js";
@@ -32,6 +33,13 @@ import { passwordLength } from "./better-auth/new-account-password.js";
 import { readOperatorSettings } from "./better-auth/operator-provider.js";
 import { readPlatformSignIn } from "./better-auth/platform-sign-in.js";
 import { createAuth, normalizeRoles } from "./better-auth/create-auth.js";
+import { mcpToolContext } from "./mcp/mcp-context.js";
+import { mcpGate, sessionOf } from "./mcp/mcp-gate.js";
+import { mcpHandler } from "./mcp/mcp-handler.js";
+import { mcpRoutes } from "./mcp/mcp-routes.js";
+import { mcpServer } from "./mcp/mcp-server.js";
+import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
+import { mcpTools } from "./mcp/mcp-tools.js";
 import { addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
 import { createUser, deleteUser, hasUsers, listUsers, roleChoices, setUserBanned, setUserRole } from "./better-auth/users.js";
 import { changesMigration, checkChanges, migrationCommand } from "./changes/capture-schema.js";
@@ -83,4 +91,4 @@ import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/p
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, goTruePath, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readWriteQueryTool, realtimeLimits, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readWriteQueryTool, readableResources, realtimeLimits, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps };

package/dist/list-service.js

@@ -1,13 +1,13 @@
 import { checkedFilter, checkedSort } from "./filter-input.js";
 import { readScope, requestAccess, requireOperation } from "./request-access.js";
-import { presentFiles } from "./files/present.js";
+import { deletedRows, listParams, pageSizeOf, parseParams, seekParams, selectedFields } from "./params.js";
 import { etagAlias } from "./sql-parts.js";
 import { etagOf } from "./etag.js";
+import { presentFiles } from "./files/present.js";
 import { exposeRow, pickFields } from "./rows.js";
 import { rowPermissions } from "./row-permissions.js";
-import { readTransaction } from "./transactions.js";
-import { deletedRows, listParams, pageSizeOf, parseParams, seekParams, selectedFields } from "./params.js";
 import { labelRequests, relatedLabels } from "./related-labels.js";
+import { readTransaction } from "./transactions.js";
 import { photosRequest, recordPhotos } from "./list-photos.js";
 import { countUpTo, estimateCount, listQuery, seekToPosition } from "@protobase/query";
 //#region src/list-service.ts

package/dist/map-service.js

@@ -1,8 +1,8 @@
 import { checkedFilter } from "./filter-input.js";
 import { readScope, requestAccess, requireOperation } from "./request-access.js";
-import { readTransaction } from "./transactions.js";
 import { parseParams, selectedFields } from "./params.js";
 import { labelRequests } from "./related-labels.js";
+import { readTransaction } from "./transactions.js";
 import { photosRequest } from "./list-photos.js";
 import { listRecords } from "./list-service.js";
 import { z } from "zod";

package/dist/mcp/mcp-authenticator.js

@@ -0,0 +1,14 @@
+//#region src/mcp/mcp-authenticator.ts
+const hasAudiences = (authenticate) => typeof authenticate.forAudience === "function";
+/**
+* The authenticator of the MCP endpoint's tokens, when MCP is on (`createAuth({ mcp })`). Stops the server at startup
+* when `options.mcp` is set without MCP, or when `authenticate` cannot verify tokens for another audience.
+*/
+const mcpAuthenticator = (authenticate, mcp, options) => {
+	if (options && !mcp) throw new Error("options.mcp needs createAuth({ mcp }) passed as auth");
+	if (!mcp) return void 0;
+	if (!hasAudiences(authenticate)) throw new Error("MCP needs authenticate from betterAuthAuthenticator, whose forAudience verifies the MCP tokens");
+	return authenticate.forAudience(mcp.resource);
+};
+//#endregion
+export { mcpAuthenticator };

package/dist/mcp/mcp-context.d.ts

@@ -0,0 +1,11 @@
+import { Session } from "../types.js";
+import { Deps } from "../deps.js";
+import { ToolContext } from "../assistant/tools.js";
+import { Meta } from "../meta.js";
+//#region src/mcp/mcp-context.d.ts
+/**
+ * What tools get over MCP for `session`: the records and resources it may read, under its access rules. Nothing shows
+ * beside a tool's result, and asking for approval fails: no read tool asks, and approval over MCP comes with writes.
+ */
+export declare const mcpToolContext: (deps: Deps, meta: Pick<Meta, "forCaller">, session: Session) => ToolContext;
+//#endregion

package/dist/mcp/mcp-context.js

@@ -0,0 +1,16 @@
+import { assistantRecords } from "../assistant/records.js";
+import { readableResources } from "../assistant/readable-resources.js";
+//#region src/mcp/mcp-context.ts
+/**
+* What tools get over MCP for `session`: the records and resources it may read, under its access rules. Nothing shows
+* beside a tool's result, and asking for approval fails: no read tool asks, and approval over MCP comes with writes.
+*/
+const mcpToolContext = (deps, meta, session) => ({
+	session,
+	records: assistantRecords(deps, session),
+	resources: () => readableResources(meta, session),
+	show: () => {},
+	approve: () => Promise.reject(/* @__PURE__ */ new Error("Not implemented: MCP tools cannot ask for approval yet"))
+});
+//#endregion
+export { mcpToolContext };

package/dist/mcp/mcp-gate.d.ts

@@ -0,0 +1,19 @@
+import { Authenticator, Session } from "../types.js";
+import { AuthInfo } from "@modelcontextprotocol/server";
+//#region src/mcp/mcp-gate.d.ts
+export type McpGateInput = {
+  /** Verifies the request's MCP access token, its audience and any DPoP proof, such as `betterAuthAuthenticator(...).forAudience(resource)`. */
+  authenticate: Authenticator;
+  /** The endpoint's URL, the audience its tokens carry. */
+  resource: string;
+  /** The scope a token needs. */
+  scope: string;
+};
+/**
+ * Admits a request whose MCP access token `authenticate` verifies, with `scope`: resolves to its `AuthInfo`, carrying
+ * the session (see `sessionOf`), or to the 401 or 403 answer whose challenge names the resource's metadata document.
+ */
+export declare const mcpGate: ({ authenticate, resource, scope }: McpGateInput) => (request: Request) => Promise<AuthInfo | Response>;
+/** The session `mcpGate` admitted the request with. */
+export declare const sessionOf: (authInfo: AuthInfo | undefined) => Session;
+//#endregion

package/dist/mcp/mcp-gate.js

@@ -0,0 +1,52 @@
+import { HttpProblem } from "../problem.js";
+import { decodeJwt } from "jose";
+import { OAuthError, OAuthErrorCode, getOAuthProtectedResourceMetadataUrl, requireBearerAuth } from "@modelcontextprotocol/server";
+//#region src/mcp/mcp-gate.ts
+const bearerOnly = (request) => {
+	const authorization = request.headers.get("authorization");
+	const headers = new Headers();
+	if (authorization) headers.set("authorization", authorization.replace(/^DPoP /i, "Bearer "));
+	return new Request(request.url, { headers });
+};
+/**
+* Admits a request whose MCP access token `authenticate` verifies, with `scope`: resolves to its `AuthInfo`, carrying
+* the session (see `sessionOf`), or to the 401 or 403 answer whose challenge names the resource's metadata document.
+*/
+const mcpGate = ({ authenticate, resource, scope }) => {
+	const resourceUrl = new URL(resource);
+	const resourceMetadataUrl = getOAuthProtectedResourceMetadataUrl(resourceUrl);
+	return async (request) => {
+		let unexpected;
+		const answer = await requireBearerAuth({
+			verifier: { verifyAccessToken: async (token) => {
+				const session = await Promise.resolve(authenticate(request)).catch((error) => {
+					if (error instanceof HttpProblem && error.status === 401) throw new OAuthError(OAuthErrorCode.InvalidToken, error.detail);
+					unexpected = { error };
+					throw error;
+				});
+				if (!session.client) throw new OAuthError(OAuthErrorCode.InvalidToken, "The token was not issued to an MCP client");
+				return {
+					token,
+					clientId: session.client.id,
+					scopes: session.client.scopes,
+					expiresAt: decodeJwt(token).exp,
+					resource: resourceUrl,
+					extra: { session }
+				};
+			} },
+			requiredScopes: [scope],
+			resourceMetadataUrl,
+			expectedResource: resourceUrl
+		})(bearerOnly(request));
+		if (unexpected) throw unexpected.error;
+		return answer;
+	};
+};
+/** The session `mcpGate` admitted the request with. */
+const sessionOf = (authInfo) => {
+	const session = authInfo?.extra?.session;
+	if (!session) throw new Error("The MCP request carries no session");
+	return session;
+};
+//#endregion
+export { mcpGate, sessionOf };

package/dist/mcp/mcp-handler.d.ts

@@ -0,0 +1,15 @@
+import { Session } from "../types.js";
+import { McpGateInput } from "./mcp-gate.js";
+import { McpServer } from "@modelcontextprotocol/server";
+//#region src/mcp/mcp-handler.d.ts
+export type McpHandlerInput = McpGateInput & {
+  /** Builds the server for the caller of one request, such as `mcpServer(...)` with tools of your own registered on it. */
+  server: (session: Session) => McpServer | Promise<McpServer>;
+};
+/**
+ * The MCP endpoint as a fetch handler: refuses a request addressed to another host than the resource's, then one
+ * without a valid token (see `mcpGate`), and serves the rest with the server `server` builds for its caller. Each
+ * request is served on its own, without a session: a GET or DELETE answers 405.
+ */
+export declare const mcpHandler: ({ server, ...gate }: McpHandlerInput) => (request: Request) => Promise<Response>;
+//#endregion

package/dist/mcp/mcp-handler.js

@@ -0,0 +1,22 @@
+import { mcpGate, sessionOf } from "./mcp-gate.js";
+import { createMcpHandler, hostHeaderValidationResponse } from "@modelcontextprotocol/server";
+//#region src/mcp/mcp-handler.ts
+/**
+* The MCP endpoint as a fetch handler: refuses a request addressed to another host than the resource's, then one
+* without a valid token (see `mcpGate`), and serves the rest with the server `server` builds for its caller. Each
+* request is served on its own, without a session: a GET or DELETE answers 405.
+*/
+const mcpHandler = ({ server, ...gate }) => {
+	const hostname = new URL(gate.resource).hostname;
+	const admit = mcpGate(gate);
+	const handler = createMcpHandler((context) => server(sessionOf(context.authInfo)), { legacy: "stateless" });
+	return async (request) => {
+		const wrongHost = hostHeaderValidationResponse(request, [hostname]);
+		if (wrongHost) return wrongHost;
+		const authInfo = await admit(request);
+		if (authInfo instanceof Response) return authInfo;
+		return handler.fetch(request, { authInfo });
+	};
+};
+//#endregion
+export { mcpHandler };

package/dist/mcp/mcp-routes.d.ts

@@ -0,0 +1,12 @@
+import { Env, Hono } from "hono";
+//#region src/mcp/mcp-routes.d.ts
+export type McpRoutesInput = {
+  path: string;
+  handler: (request: Request) => Promise<Response>;
+};
+/**
+ * Serves the MCP endpoint at `path`, callable from any origin: a client in a browser sends its token, never cookies.
+ * A preflight gets back the headers it asks for, such as `authorization`, `dpop` and `mcp-protocol-version`.
+ */
+export declare const mcpRoutes: <E extends Env>(app: Hono<E>, { path, handler }: McpRoutesInput) => void;
+//#endregion

package/dist/mcp/mcp-routes.js

@@ -0,0 +1,15 @@
+import { cors } from "hono/cors";
+//#region src/mcp/mcp-routes.ts
+/**
+* Serves the MCP endpoint at `path`, callable from any origin: a client in a browser sends its token, never cookies.
+* A preflight gets back the headers it asks for, such as `authorization`, `dpop` and `mcp-protocol-version`.
+*/
+const mcpRoutes = (app, { path, handler }) => {
+	app.use(path, cors({
+		origin: "*",
+		exposeHeaders: ["www-authenticate", "mcp-session-id"]
+	}));
+	app.all(path, (c) => handler(c.req.raw));
+};
+//#endregion
+export { mcpRoutes };

package/dist/mcp/mcp-server.d.ts

@@ -0,0 +1,19 @@
+import { AssistantTool, ToolContext } from "../assistant/tools.js";
+import { McpServer } from "@modelcontextprotocol/server";
+//#region src/mcp/mcp-server.d.ts
+export type McpServerInput = {
+  /** The name, version and title the server tells clients when they connect. */
+  info: {
+    name: string;
+    version: string;
+    title?: string;
+  };
+  tools: AssistantTool[];
+  /** What each tool gets as its context, for the caller of the request. */
+  context: ToolContext;
+  /** Gets the errors a tool throws, which the client only sees as a failure. */
+  report: (error: unknown) => void;
+};
+/** An MCP server offering `tools` as MCP tools, each with its JSON Schema, its hints, and the text it returns. */
+export declare const mcpServer: ({ info, tools, context, report }: McpServerInput) => McpServer;
+//#endregion

package/dist/mcp/mcp-server.js

@@ -0,0 +1,35 @@
+import { checkedTools } from "../assistant/checked-tools.js";
+import { McpServer, fromJsonSchema } from "@modelcontextprotocol/server";
+//#region src/mcp/mcp-server.ts
+const failed = {
+	content: [{
+		type: "text",
+		text: "The server failed to answer."
+	}],
+	isError: true
+};
+/** An MCP server offering `tools` as MCP tools, each with its JSON Schema, its hints, and the text it returns. */
+const mcpServer = ({ info, tools, context, report }) => {
+	const server = new McpServer(info);
+	for (const tool of checkedTools(tools)) {
+		const config = {
+			description: tool.description,
+			inputSchema: fromJsonSchema(tool.parameters),
+			...tool.annotations && { annotations: tool.annotations }
+		};
+		server.registerTool(tool.name, config, async (args) => {
+			try {
+				return { content: [{
+					type: "text",
+					text: await tool.run(args, context)
+				}] };
+			} catch (error) {
+				report(error);
+				return failed;
+			}
+		});
+	}
+	return server;
+};
+//#endregion
+export { mcpServer };

package/dist/mcp/mcp-tools.d.ts

@@ -0,0 +1,12 @@
+import { Session } from "../types.js";
+import { AssistantTool } from "../assistant/tools.js";
+import { Db } from "@protobase/query";
+//#region src/mcp/mcp-tools.d.ts
+export type McpToolsInput = {
+  db: Db;
+  /** Offers `run_read_only_query` to callers who see the assistant (`admin` or `ai`); it reads outside the access rules. */
+  sql: boolean;
+};
+/** The default MCP tools for a caller: the record tools, and read-only SQL when `sql` is on and the caller sees the assistant. */
+export declare const mcpTools: ({ db, sql }: McpToolsInput) => (session: Session) => AssistantTool[];
+//#endregion

package/dist/mcp/mcp-tools.js

@@ -0,0 +1,8 @@
+import { seesAssistant } from "../assistant/assistant-settings.js";
+import { readOnlyQueryTool } from "../assistant/query-tools.js";
+import { readRecordTools } from "../assistant/record-tools.js";
+//#region src/mcp/mcp-tools.ts
+/** The default MCP tools for a caller: the record tools, and read-only SQL when `sql` is on and the caller sees the assistant. */
+const mcpTools = ({ db, sql }) => (session) => [...readRecordTools(), ...sql && seesAssistant(session.user.roles) ? [readOnlyQueryTool(db)] : []];
+//#endregion
+export { mcpTools };