@protobase/server 0.40.9 → 0.41.0

package/dist/admin-options.d.ts

@@ -7,6 +7,7 @@ import { SourceOption } from "./sources/source-settings.js";
 import { CorsOrigins } from "./api-cors.js";
 import { AssistantOptions } from "./assistant/assistant-settings.js";
 import { LocaleOption } from "./locale/locale-option.js";
+import { McpWrites } from "./mcp/mcp-writes.js";
 import { RuntimeOptions } from "./runtime/runtime-settings.js";
 import { ResolveOptions, RoleLimit } from "@protobase/schema";
 //#region src/admin-options.d.ts
@@ -57,12 +58,13 @@ export type AdminOptions = {
    * `run_read_only_query`, which reads the whole database as the app's database role, outside the access rules.
    * `writes: true` offers `create_record` and `update_record`, through the REST API's access rules, `validate` and write
    * hooks; the person approves each write in their client, and a client that cannot ask is refused.
+   * `writes: { resources: ['tasks'] }` offers them on the listed resources only, and refuses a write to any other.
    * `false`: the host serves its own MCP endpoint at `auth.mcp.path`, in front of this app. This app then answers 404
    * there and needs no `forAudience`, while the OAuth provider's discovery stays.
    */
   mcp?: {
     sql?: boolean;
-    writes?: boolean;
+    writes?: McpWrites;
   } | false;
   /**
    * The websites whose browser code may call the API (`/api/*` but `/api/auth/*`) besides the app's own origins (see

package/dist/assistant/write-record-tools.d.ts

@@ -1,9 +1,13 @@
 import { AssistantTool } from "./tools.js";
 //#region src/assistant/write-record-tools.d.ts
+/** The resources the write tools may change: any the caller may write, or only those listed. */
+export type WriteRecordToolsInput = {
+  resources?: string[];
+};
 /** Creates a record of a resource once the user approves it, under the caller's access rules. */
-export declare const createRecordTool: () => AssistantTool;
+export declare const createRecordTool: (input?: WriteRecordToolsInput) => AssistantTool;
 /** Updates one record by its key once the user approves it, under the caller's access rules. */
-export declare const updateRecordTool: () => AssistantTool;
-/** `create_record` and `update_record`. */
-export declare const writeRecordTools: () => AssistantTool[];
+export declare const updateRecordTool: (input?: WriteRecordToolsInput) => AssistantTool;
+/** `create_record` and `update_record`, on the resources `input` allows. */
+export declare const writeRecordTools: (input?: WriteRecordToolsInput) => AssistantTool[];
 //#endregion

package/dist/assistant/write-record-tools.js

@@ -11,15 +11,24 @@ const dataParameter = {
 	description: "Field names to values, as list_resources gives the fields."
 };
 const dataOf = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+const resourceParameterFor = ({ resources }) => resources ? {
+	...resourceParameter,
+	description: `The resource's name: one of ${resources.join(", ")}.`
+} : resourceParameter;
+const onlyNote = ({ resources }) => resources ? ` It writes only ${resources.join(", ")}.` : "";
+const outside = ({ resources }, resource) => resources && !resources.includes(resource) ? JSON.stringify({
+	error: "forbidden",
+	message: `Writes over MCP reach only ${resources.join(", ")}, not ${resource}; nothing was written.`
+}) : void 0;
 const notApproved = (answer) => `The user did not approve this change (${answer}); nothing was written.`;
 /** Creates a record of a resource once the user approves it, under the caller's access rules. */
-const createRecordTool = () => defineTool({
+const createRecordTool = (input = {}) => defineTool({
 	name: "create_record",
-	description: "Creates a record of a resource and returns it as JSON ({ record, etag }). The user approves each write in their client first; nothing is written without it.",
+	description: `Creates a record of a resource and returns it as JSON ({ record, etag }). The user approves each write in their client first; nothing is written without it.${onlyNote(input)}`,
 	parameters: {
 		type: "object",
 		properties: {
-			resource: resourceParameter,
+			resource: resourceParameterFor(input),
 			data: dataParameter
 		},
 		required: ["resource", "data"]
@@ -29,6 +38,8 @@ const createRecordTool = () => defineTool({
 		const resource = resourceOf(args);
 		const data = dataOf(args.data);
 		if (!resource || !data) return "Pass the resource and data as { \"resource\": \"<name>\", \"data\": { \"<field>\": <value> } }.";
+		const refusal = outside(input, resource);
+		if (refusal) return refusal;
 		const answer = await context.approve({
 			title: `Create a record in ${resource}?`,
 			code: JSON.stringify(data, null, 2),
@@ -39,13 +50,13 @@ const createRecordTool = () => defineTool({
 	}
 });
 /** Updates one record by its key once the user approves it, under the caller's access rules. */
-const updateRecordTool = () => defineTool({
+const updateRecordTool = (input = {}) => defineTool({
 	name: "update_record",
-	description: "Updates fields of one record of a resource by its key and returns it as JSON ({ record, etag }). Pass the etag get_record gave to fail when someone changed the record since. The user approves each write in their client first; nothing is written without it.",
+	description: `Updates fields of one record of a resource by its key and returns it as JSON ({ record, etag }). Pass the etag get_record gave to fail when someone changed the record since. The user approves each write in their client first; nothing is written without it.${onlyNote(input)}`,
 	parameters: {
 		type: "object",
 		properties: {
-			resource: resourceParameter,
+			resource: resourceParameterFor(input),
 			key: keyParameter,
 			data: {
 				...dataParameter,
@@ -68,6 +79,8 @@ const updateRecordTool = () => defineTool({
 		const key = keyOf(args.key);
 		const data = dataOf(args.data);
 		if (!resource || key === void 0 || !data) return "Pass the resource, key and data as { \"resource\": \"<name>\", \"key\": \"<key>\", \"data\": { \"<field>\": <value> } }.";
+		const refusal = outside(input, resource);
+		if (refusal) return refusal;
 		const shownKey = Array.isArray(key) ? key.join(",") : String(key);
 		const answer = await context.approve({
 			title: `Update ${resource} ${shownKey}?`,
@@ -79,7 +92,7 @@ const updateRecordTool = () => defineTool({
 		return context.records.update(resource, key, data, { etag }).then((record) => JSON.stringify(record), refused);
 	}
 });
-/** `create_record` and `update_record`. */
-const writeRecordTools = () => [createRecordTool(), updateRecordTool()];
+/** `create_record` and `update_record`, on the resources `input` allows. */
+const writeRecordTools = (input = {}) => [createRecordTool(input), updateRecordTool(input)];
 //#endregion
 export { createRecordTool, updateRecordTool, writeRecordTools };

package/dist/create-admin.js

@@ -23,6 +23,7 @@ import { realtimePath, restPath, storagePath, supabaseFunctionsPath, supabasePat
 import { goTruePath } from "./gotrue/keys.js";
 import { authBasePath } from "./better-auth/auth-base-path.js";
 import { mcpDiscovery } from "./better-auth/mcp/discovery-routes.js";
+import { checkMcpWrites } from "./mcp/mcp-writes.js";
 import { mcpAuthenticator } from "./mcp/mcp-authenticator.js";
 import { mcpToolContext } from "./mcp/mcp-context.js";
 import { mcpHandler } from "./mcp/mcp-handler.js";
@@ -127,6 +128,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	checkRoleLimits(registry, options.roles?.limits ?? []);
 	checkOwnerFields(registry, authenticate.userIdType, auth);
 	const mcpAuthenticate = mcpAuthenticator(authenticate, auth?.mcp, options.mcp);
+	if (options.mcp) checkMcpWrites(registry, options.mcp.writes);
 	checkPositionAfter(registry);
 	checkParents(registry);
 	checkPages(pageModels, {
@@ -300,7 +302,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		const tools = mcpTools({
 			db,
 			sql: options.mcp !== false && options.mcp?.sql === true,
-			writes: options.mcp !== false && options.mcp?.writes === true
+			writes: options.mcp !== false && options.mcp?.writes || false
 		});
 		const server = (session) => mcpServer({
 			info: {

package/dist/index.d.ts

@@ -43,6 +43,7 @@ import { Conversation, ConversationsOptions, conversationKey, createConversation
 import { ApprovalAnswer, ApprovalRequest, requestApproval } from "./assistant/approval.js";
 import { AssistantTool, ReadableResources, ToolAnnotations, ToolContext, defineTool } from "./assistant/tools.js";
 import { AssistantOptions, AssistantSettings, assistantRoles, assistantSettings, assistantVariables, seesAssistant } from "./assistant/assistant-settings.js";
+import { McpWrites } from "./mcp/mcp-writes.js";
 import { RuntimeOptions, runtimeUrl, runtimeVariable, seesRuntime } from "./runtime/runtime-settings.js";
 import { AdminOptions } from "./admin-options.js";
 import { CreateAdminInput, createAdmin } from "./create-admin.js";
@@ -89,7 +90,7 @@ import { WidgetOptions, maxWidgetPropsBytes, widget } from "./assistant/widget.j
 import { QueryOptions, QueryResult, runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
 import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
-import { createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
+import { WriteRecordToolsInput, createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
 import { McpServerInput, mcpServer } from "./mcp/mcp-server.js";
 import { McpToolsInput, mcpTools } from "./mcp/mcp-tools.js";
 import { McpGateInput, mcpGate, sessionOf } from "./mcp/mcp-gate.js";
@@ -124,4 +125,7 @@ import { isSchedule } from "./jobs/schedule.js";
 import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type MemberInput, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readWriteQueryTool, readableResources, realtimeLimits, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+import { MobileRelease, ReleaseFile, ServedReleaseFile, composeRelease, releaseManifest } from "./mobile-release/release.js";
+import { MobileReleaseAppInput, OfferedRelease, mobileReleaseApp } from "./mobile-release/release-app.js";
+import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/index.js

@@ -95,4 +95,7 @@ import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/p
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readWriteQueryTool, readableResources, realtimeLimits, recordOf, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+import { composeRelease, releaseManifest } from "./mobile-release/release.js";
+import { mobileReleaseApp } from "./mobile-release/release-app.js";
+import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/mcp/mcp-authenticator.js

@@ -1,14 +1,15 @@
+import { isMcpWrites } from "./mcp-writes.js";
 //#region src/mcp/mcp-authenticator.ts
 const hasAudiences = (authenticate) => typeof authenticate.forAudience === "function";
-const isMcpOptions = (options) => options === void 0 || options === false || typeof options === "object" && options !== null && !Array.isArray(options) && Object.entries(options).every(([name, value]) => (name === "sql" || name === "writes") && (value === void 0 || typeof value === "boolean"));
+const isMcpOptions = (options) => options === void 0 || options === false || typeof options === "object" && options !== null && !Array.isArray(options) && Object.entries(options).every(([name, value]) => value === void 0 || name === "sql" && typeof value === "boolean" || name === "writes" && isMcpWrites(value));
 /**
 * The authenticator of the MCP endpoint's tokens, when MCP is on (`createAuth({ mcp })`); none when the host serves its
 * own (`options.mcp: false`). Stops the server at startup when `options.mcp` is neither `false` nor
-* `{ sql?: boolean; writes?: boolean }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
+* `{ sql?: boolean; writes?: boolean | { resources: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
 * another audience.
 */
 const mcpAuthenticator = (authenticate, mcp, options) => {
-	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean }");
+	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources: [<resource>, ...] } }");
 	if (options === false) return void 0;
 	if (options && !mcp) throw new Error("options.mcp needs createAuth({ mcp }) passed as auth");
 	if (!mcp) return void 0;

package/dist/mcp/mcp-tools.d.ts

@@ -1,13 +1,17 @@
 import { Session } from "../types.js";
 import { AssistantTool } from "../assistant/tools.js";
+import { McpWrites } from "./mcp-writes.js";
 import { Db } from "@protobase/query";
 //#region src/mcp/mcp-tools.d.ts
 export type McpToolsInput = {
   db: Db;
   /** Offers `run_read_only_query` to callers who see the assistant (`admin` or `ai`); it reads outside the access rules. */
   sql: boolean;
-  /** Offers `create_record` and `update_record`; each write still needs the caller's role and their approval in the client. */
-  writes: boolean;
+  /**
+   * Offers `create_record` and `update_record`, on the listed resources only when given `{ resources }`; each write still
+   * needs the caller's role and their approval in the client.
+   */
+  writes: McpWrites;
 };
 /**
  * The default MCP tools for a caller: the record tools, the write tools when `writes` is on, and read-only SQL when `sql`

package/dist/mcp/mcp-tools.js

@@ -9,7 +9,7 @@ import { writeRecordTools } from "../assistant/write-record-tools.js";
 */
 const mcpTools = ({ db, sql, writes }) => (session) => [
 	...readRecordTools(),
-	...writes ? writeRecordTools() : [],
+	...writes === false ? [] : writeRecordTools(writes === true ? {} : { resources: writes.resources }),
 	...sql && seesAssistant(session.user.roles) ? [readOnlyQueryTool(db)] : []
 ];
 //#endregion

package/dist/mcp/mcp-writes.d.ts

@@ -0,0 +1,7 @@
+import "../registry.js";
+//#region src/mcp/mcp-writes.d.ts
+/** Which resources the MCP write tools may change: none, every one the caller may write, or the ones named. */
+export type McpWrites = boolean | {
+  resources: string[];
+};
+//#endregion

package/dist/mcp/mcp-writes.js

@@ -0,0 +1,16 @@
+//#region src/mcp/mcp-writes.ts
+const isResourceList = (value) => Array.isArray(value) && value.length > 0 && value.every((name) => typeof name === "string" && name !== "");
+const isMcpWrites = (value) => {
+	if (typeof value === "boolean") return true;
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+	const entries = Object.entries(value);
+	return entries.length === 1 && entries[0][0] === "resources" && isResourceList(entries[0][1]);
+};
+/** Stops startup when `options.mcp.writes` names a resource the app does not have. */
+const checkMcpWrites = (registry, writes) => {
+	if (typeof writes !== "object") return;
+	const unknown = writes.resources.filter((name) => !registry.find(name));
+	if (unknown.length > 0) throw new Error(`options.mcp.writes names resources the app does not have: ${unknown.join(", ")}`);
+};
+//#endregion
+export { checkMcpWrites, isMcpWrites };

package/dist/mobile-release/release-app.d.ts

@@ -0,0 +1,43 @@
+import { MobileRelease } from "./release.js";
+//#region src/mobile-release/release-app.d.ts
+/** The release a server offers: its files, the native fingerprint of the binaries it runs on and the API origin it calls. */
+export type OfferedRelease = MobileRelease & {
+  fingerprint: string;
+  origin: string;
+};
+export type MobileReleaseAppInput = {
+  /** `undefined` when the server serves no release, such as the API alone, whose app files a host serves. */
+  release?: OfferedRelease;
+  /** The server's Protobase version, which the shell a device runs must work with. */
+  serverVersion: string;
+};
+/**
+ * The live updater's routes. `GET /api/mobile/release` tells a device the release it should run: the server's own,
+ * when it runs on the device's binary, and whether the update is required. `GET /api/mobile/releases/<bundle id>?href=`
+ * serves the release's manifest and files, each with its sha256 in `X-Checksum` and, signed, its `X-Signature`, which
+ * the updater checks each file against: it never checks a file against the manifest.
+ */
+export declare const mobileReleaseApp: ({ release, serverVersion }: MobileReleaseAppInput) => import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, {
+  "/api/mobile/release": {
+    $get: {
+      input: {};
+      output: {};
+      outputFormat: string;
+      status: import("hono/utils/http-status").StatusCode;
+    };
+  };
+} & {
+  "/api/mobile/releases/:bundleId": {
+    $get: {
+      input: {
+        param: {
+          bundleId: string;
+        };
+      };
+      output: {};
+      outputFormat: string;
+      status: import("hono/utils/http-status").StatusCode;
+    };
+  };
+}, "/", "/api/mobile/releases/:bundleId">;
+//#endregion

package/dist/mobile-release/release-app.js

@@ -0,0 +1,41 @@
+import { badRequest, notFound, problemResponse } from "../problem.js";
+import { isShellVersion, shellUpdateRequired } from "./shell-update.js";
+import { Hono } from "hono";
+import { mobileReleaseBasePath, mobileReleaseParams, mobileReleasePath, mobileReleasesPath } from "@protobase/schema/internal";
+import { getMimeType } from "hono/utils/mime";
+//#region src/mobile-release/release-app.ts
+/**
+* The live updater's routes. `GET /api/mobile/release` tells a device the release it should run: the server's own,
+* when it runs on the device's binary, and whether the update is required. `GET /api/mobile/releases/<bundle id>?href=`
+* serves the release's manifest and files, each with its sha256 in `X-Checksum` and, signed, its `X-Signature`, which
+* the updater checks each file against: it never checks a file against the manifest.
+*/
+const mobileReleaseApp = ({ release, serverVersion }) => new Hono().get(mobileReleasePath, (c) => {
+	const problem = (error) => problemResponse(error, c.req.path);
+	const fingerprint = c.req.query(mobileReleaseParams.fingerprint);
+	const shellVersion = c.req.query(mobileReleaseParams.shellVersion);
+	if (!fingerprint) return problem(badRequest("invalid-fingerprint", `${mobileReleaseParams.fingerprint} must name the native fingerprint of the app`));
+	if (!shellVersion || !isShellVersion(shellVersion)) return problem(badRequest("invalid-shell-version", `${mobileReleaseParams.shellVersion} must be the x.y.z Protobase version of the shell the app runs`));
+	const offered = release?.fingerprint === fingerprint ? release : void 0;
+	const answer = {
+		bundleId: offered?.bundleId ?? null,
+		url: offered ? `${offered.origin}${mobileReleaseBasePath(offered.bundleId)}` : null,
+		required: shellUpdateRequired(shellVersion, serverVersion)
+	};
+	return c.json(answer, 200, {
+		"cache-control": "no-store",
+		"access-control-allow-origin": "*"
+	});
+}).get(`${mobileReleasesPath}/:bundleId`, (c) => {
+	const href = c.req.query("href") ?? "";
+	const file = release && c.req.param("bundleId") === release.bundleId ? release.files.get(href) : void 0;
+	if (!file) return problemResponse(notFound("The release has no such file, or is no longer served"), c.req.path);
+	return c.body(file.content, 200, {
+		"content-type": getMimeType(href) ?? "application/octet-stream",
+		"cache-control": "public, max-age=31536000, immutable",
+		"x-checksum": file.checksum,
+		...file.signature && { "x-signature": file.signature }
+	});
+});
+//#endregion
+export { mobileReleaseApp };

package/dist/mobile-release/release.d.ts

@@ -0,0 +1,33 @@
+import { KeyObject } from "node:crypto";
+//#region src/mobile-release/release.d.ts
+/** A file of a release: its path inside the app's files, such as `assets/index-abc123.js`, and its bytes. */
+export type ReleaseFile = {
+  href: string;
+  content: Uint8Array;
+};
+/** A file as the updater gets it: its bytes, their sha256 in hex and, with a signing key, their signature. */
+export type ServedReleaseFile = {
+  content: Uint8Array;
+  checksum: string;
+  signature?: string;
+};
+/**
+ * A release of the app's files: its bundle id, a hash of its manifest and of the signing key's public key, and every
+ * file by `href`, the manifest included.
+ */
+export type MobileRelease = {
+  bundleId: string;
+  files: Map<string, ServedReleaseFile>;
+};
+/** The updater's manifest of `files`: each one's `href`, sha256 in hex and size, in the order of their hrefs. */
+export declare const releaseManifest: (files: ReleaseFile[]) => {
+  href: string;
+  checksum: string;
+  sizeInBytes: number;
+}[];
+/**
+ * The release of `files`, each hashed and, with `signingKey`, signed once here. Its manifest is served as a file of
+ * its own, so a file of the app may not have the manifest's name.
+ */
+export declare const composeRelease: (files: ReleaseFile[], signingKey?: KeyObject) => MobileRelease;
+//#endregion

package/dist/mobile-release/release.js

@@ -0,0 +1,34 @@
+import { releaseManifestFile } from "@protobase/schema/internal";
+import { createHash, createPublicKey, sign } from "node:crypto";
+//#region src/mobile-release/release.ts
+const sha256 = (content) => createHash("sha256").update(content).digest("hex");
+/** The updater's manifest of `files`: each one's `href`, sha256 in hex and size, in the order of their hrefs. */
+const releaseManifest = (files) => [...files].sort((a, b) => a.href < b.href ? -1 : a.href > b.href ? 1 : 0).map(({ href, content }) => ({
+	href,
+	checksum: sha256(content),
+	sizeInBytes: content.byteLength
+}));
+const signature = (content, key) => sign("sha256", content, key).toString("base64");
+const signer = (signingKey) => signingKey ? createPublicKey(signingKey).export({
+	type: "spki",
+	format: "der"
+}) : /* @__PURE__ */ new Uint8Array();
+/**
+* The release of `files`, each hashed and, with `signingKey`, signed once here. Its manifest is served as a file of
+* its own, so a file of the app may not have the manifest's name.
+*/
+const composeRelease = (files, signingKey) => {
+	if (files.some((file) => file.href === releaseManifestFile)) throw new Error(`The app's files have a ${releaseManifestFile}, the name of the updater's manifest: rename it`);
+	const manifest = new TextEncoder().encode(JSON.stringify(releaseManifest(files)));
+	const served = (content) => ({
+		content,
+		checksum: sha256(content),
+		...signingKey && { signature: signature(content, signingKey) }
+	});
+	return {
+		bundleId: createHash("sha256").update(manifest).update(signer(signingKey)).digest("hex").slice(0, 16),
+		files: new Map([...files.map(({ href, content }) => [href, served(content)]), [releaseManifestFile, served(manifest)]])
+	};
+};
+//#endregion
+export { composeRelease, releaseManifest };

package/dist/mobile-release/shell-update.js

@@ -0,0 +1,25 @@
+//#region src/mobile-release/shell-update.ts
+const versionPattern = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+const parseVersion = (value) => {
+	const match = versionPattern.exec(value);
+	return match ? {
+		major: Number(match[1]),
+		minor: Number(match[2])
+	} : void 0;
+};
+/** Whether `value` is an x.y.z version, as a shell's Protobase version is. */
+const isShellVersion = (value) => parseVersion(value) !== void 0;
+/**
+* Whether a device running a shell of Protobase `shell` must update before it goes on: its shell no longer works with
+* the API of a server of Protobase `server`. It works on the same major, and below 1.0, where a minor may break, on the
+* same minor, as a bundle does on a runtime.
+*/
+const shellUpdateRequired = (shell, server) => {
+	const own = parseVersion(server);
+	if (!own) throw new Error(`The server's own Protobase version ${JSON.stringify(server)} is no x.y.z version`);
+	const running = parseVersion(shell);
+	if (!running) throw new Error(`The shell's Protobase version ${JSON.stringify(shell)} is no x.y.z version`);
+	return running.major !== own.major || own.major === 0 && running.minor !== own.minor;
+};
+//#endregion
+export { isShellVersion, shellUpdateRequired };

package/dist/mobile-release/signing-key.d.ts

@@ -0,0 +1,14 @@
+import { KeyObject } from "node:crypto";
+//#region src/mobile-release/signing-key.d.ts
+/**
+ * The environment variable holding the RSA private key, PEM, that signs every file of the mobile release, for an app
+ * whose updater has the matching public key. The key is whoever deploys the app's: the signature guards the way from
+ * the server to the device (proxies, a CDN, a router), not a server that is broken into.
+ */
+export declare const mobileSigningKeyVariable = "PROTOBASE_MOBILE_SIGNING_KEY";
+/**
+ * The signing key in `PROTOBASE_MOBILE_SIGNING_KEY`, `undefined` when it is unset. Its newlines may be written `\n`, as
+ * in an env file that holds one line per value. A key that is not PEM, not RSA or under 2048 bits stops startup.
+ */
+export declare const readSigningKey: (env: Record<string, string | undefined>) => KeyObject | undefined;
+//#endregion

package/dist/mobile-release/signing-key.js

@@ -0,0 +1,32 @@
+import { createPrivateKey } from "node:crypto";
+//#region src/mobile-release/signing-key.ts
+/**
+* The environment variable holding the RSA private key, PEM, that signs every file of the mobile release, for an app
+* whose updater has the matching public key. The key is whoever deploys the app's: the signature guards the way from
+* the server to the device (proxies, a CDN, a router), not a server that is broken into.
+*/
+const mobileSigningKeyVariable = "PROTOBASE_MOBILE_SIGNING_KEY";
+const minimumBits = 2048;
+/**
+* The signing key in `PROTOBASE_MOBILE_SIGNING_KEY`, `undefined` when it is unset. Its newlines may be written `\n`, as
+* in an env file that holds one line per value. A key that is not PEM, not RSA or under 2048 bits stops startup.
+*/
+const readSigningKey = (env) => {
+	const value = env[mobileSigningKeyVariable]?.trim();
+	if (!value) return void 0;
+	const key = parsePrivateKey(value.replace(/\\n/g, "\n"));
+	if (key.asymmetricKeyType !== "rsa") throw new Error(`${mobileSigningKeyVariable} must be an RSA private key, which the app's updater verifies, not ${key.asymmetricKeyType ?? "another kind of key"}`);
+	const bits = key.asymmetricKeyDetails?.modulusLength ?? 0;
+	if (bits < minimumBits) throw new Error(`${mobileSigningKeyVariable} must be an RSA key of at least ${minimumBits} bits, not ${bits}`);
+	return key;
+};
+const parsePrivateKey = (pem) => {
+	try {
+		return createPrivateKey(pem);
+	} catch (error) {
+		if (error instanceof Error && String(error.code).startsWith("ERR_OSSL_")) throw new Error(`${mobileSigningKeyVariable} is no PEM private key: give the whole key, from -----BEGIN PRIVATE KEY----- to its END line`);
+		throw error;
+	}
+};
+//#endregion
+export { mobileSigningKeyVariable, readSigningKey };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.40.9";
+var version = "0.41.0";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.40.9",
+  "version": "0.41.0",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,9 +36,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.40.9",
-    "@protobase/query": "0.40.9",
-    "@protobase/schema": "0.40.9",
+    "@protobase/layout": "0.41.0",
+    "@protobase/query": "0.41.0",
+    "@protobase/schema": "0.41.0",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",