@protobase/server 0.41.0 → 0.41.1

package/dist/admin-options.d.ts

@@ -59,6 +59,9 @@ export type AdminOptions = {
    * `writes: true` offers `create_record` and `update_record`, through the REST API's access rules, `validate` and write
    * hooks; the person approves each write in their client, and a client that cannot ask is refused.
    * `writes: { resources: ['tasks'] }` offers them on the listed resources only, and refuses a write to any other.
+   * `writes: { rolesWithoutApproval: ['service'] }` lets a user holding one of those roles, such as a service account
+   * with no person present, write without the approval; any other user is still asked. Each must be a role the app's
+   * users can hold.
    * `false`: the host serves its own MCP endpoint at `auth.mcp.path`, in front of this app. This app then answers 404
    * there and needs no `forAudience`, while the OAuth provider's discovery stays.
    */

package/dist/create-admin.js

@@ -23,7 +23,7 @@ import { realtimePath, restPath, storagePath, supabaseFunctionsPath, supabasePat
 import { goTruePath } from "./gotrue/keys.js";
 import { authBasePath } from "./better-auth/auth-base-path.js";
 import { mcpDiscovery } from "./better-auth/mcp/discovery-routes.js";
-import { checkMcpWrites } from "./mcp/mcp-writes.js";
+import { checkMcpWrites, rolesWithoutApproval } from "./mcp/mcp-writes.js";
 import { mcpAuthenticator } from "./mcp/mcp-authenticator.js";
 import { mcpToolContext } from "./mcp/mcp-context.js";
 import { mcpHandler } from "./mcp/mcp-handler.js";
@@ -128,7 +128,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	checkRoleLimits(registry, options.roles?.limits ?? []);
 	checkOwnerFields(registry, authenticate.userIdType, auth);
 	const mcpAuthenticate = mcpAuthenticator(authenticate, auth?.mcp, options.mcp);
-	if (options.mcp) checkMcpWrites(registry, options.mcp.writes);
+	if (options.mcp) checkMcpWrites(registry, declaredRoles(auth, options.roles), options.mcp.writes);
 	checkPositionAfter(registry);
 	checkParents(registry);
 	checkPages(pageModels, {
@@ -299,10 +299,11 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	const report = options.onUnhandledError ?? ((error) => console.error(error));
 	if (auth?.mcp && options.mcp === false) closedMcpRoutes(app, auth.mcp.path);
 	else if (auth?.mcp && mcpAuthenticate) {
+		const writes = options.mcp !== false && options.mcp?.writes || false;
 		const tools = mcpTools({
 			db,
 			sql: options.mcp !== false && options.mcp?.sql === true,
-			writes: options.mcp !== false && options.mcp?.writes || false
+			writes
 		});
 		const server = (session) => mcpServer({
 			info: {
@@ -311,7 +312,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 			},
 			tools: tools(session),
 			context: mcpToolContext(deps, meta, session),
-			report
+			report,
+			rolesWithoutApproval: rolesWithoutApproval(writes)
 		});
 		mcpRoutes(app, {
 			path: auth.mcp.path,

package/dist/mcp/mcp-approval.js

@@ -18,6 +18,13 @@ const mcpApproval = (inputResponses) => (request) => {
 	if (answer.kind === "elicit" && answer.action === "accept" && answer.content?.approve === true) return Promise.resolve("approved");
 	return Promise.resolve("rejected");
 };
+/**
+* Whether `roles`, the roles the signed-in user holds, include one of `exempt`, whose MCP writes need no approval: an
+* exact match, and none for anything but a list.
+*/
+const writesUnasked = (exempt, roles) => Array.isArray(roles) && roles.some((role) => exempt.includes(role));
+/** `ToolContext.approve` over MCP for a user whose writes need no approval: approved, without asking the client. */
+const approvedUnasked = () => Promise.resolve("approved");
 const asksForms = (capabilities) => {
 	const elicitation = capabilities?.elicitation;
 	return elicitation !== void 0 && (elicitation.form !== void 0 || elicitation.url === void 0);
@@ -54,4 +61,4 @@ const approvalAsked = (request, capabilities) => {
 	}) } });
 };
 //#endregion
-export { ApprovalNeeded, approvalAsked, mcpApproval };
+export { ApprovalNeeded, approvalAsked, approvedUnasked, mcpApproval, writesUnasked };

package/dist/mcp/mcp-authenticator.js

@@ -5,11 +5,11 @@ const isMcpOptions = (options) => options === void 0 || options === false || typ
 /**
 * The authenticator of the MCP endpoint's tokens, when MCP is on (`createAuth({ mcp })`); none when the host serves its
 * own (`options.mcp: false`). Stops the server at startup when `options.mcp` is neither `false` nor
-* `{ sql?: boolean; writes?: boolean | { resources: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
+* `{ sql?: boolean; writes?: boolean | { resources?: string[]; rolesWithoutApproval?: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
 * another audience.
 */
 const mcpAuthenticator = (authenticate, mcp, options) => {
-	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources: [<resource>, ...] } }");
+	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources?: [<resource>, ...], rolesWithoutApproval?: [<role>, ...] } }");
 	if (options === false) return void 0;
 	if (options && !mcp) throw new Error("options.mcp needs createAuth({ mcp }) passed as auth");
 	if (!mcp) return void 0;

package/dist/mcp/mcp-server.d.ts

@@ -13,10 +13,13 @@ export type McpServerInput = {
   context: Omit<ToolContext, 'approve'>;
   /** Gets the errors a tool throws, which the client only sees as a failure. */
   report: (error: unknown) => void;
+  /** The roles whose calls are approved without asking the client: a user holding one of them is never asked. None by default. */
+  rolesWithoutApproval?: readonly string[];
 };
 /**
  * An MCP server offering `tools` as MCP tools, each with its JSON Schema, its hints, and the text it returns. A tool
- * that asks for approval makes the call ask the client's user, and runs again from the start with their answer.
+ * that asks for approval makes the call ask the client's user, and runs again from the start with their answer; for a
+ * user holding one of `rolesWithoutApproval` it is approved at once, and the client is never asked.
  */
-export declare const mcpServer: ({ info, tools, context, report }: McpServerInput) => McpServer;
+export declare const mcpServer: ({ info, tools, context, report, rolesWithoutApproval }: McpServerInput) => McpServer;
 //#endregion

package/dist/mcp/mcp-server.js

@@ -1,5 +1,5 @@
 import { checkedTools } from "../assistant/checked-tools.js";
-import { ApprovalNeeded, approvalAsked, mcpApproval } from "./mcp-approval.js";
+import { ApprovalNeeded, approvalAsked, approvedUnasked, mcpApproval, writesUnasked } from "./mcp-approval.js";
 import { CLIENT_CAPABILITIES_META_KEY, McpServer, fromJsonSchema } from "@modelcontextprotocol/server";
 //#region src/mcp/mcp-server.ts
 const capabilitiesOf = (envelope) => envelope?.[CLIENT_CAPABILITIES_META_KEY];
@@ -12,10 +12,12 @@ const failed = {
 };
 /**
 * An MCP server offering `tools` as MCP tools, each with its JSON Schema, its hints, and the text it returns. A tool
-* that asks for approval makes the call ask the client's user, and runs again from the start with their answer.
+* that asks for approval makes the call ask the client's user, and runs again from the start with their answer; for a
+* user holding one of `rolesWithoutApproval` it is approved at once, and the client is never asked.
 */
-const mcpServer = ({ info, tools, context, report }) => {
+const mcpServer = ({ info, tools, context, report, rolesWithoutApproval = [] }) => {
 	const server = new McpServer(info);
+	const unasked = writesUnasked(rolesWithoutApproval, context.session.user.roles);
 	for (const tool of checkedTools(tools)) {
 		const config = {
 			description: tool.description,
@@ -28,7 +30,7 @@ const mcpServer = ({ info, tools, context, report }) => {
 					type: "text",
 					text: await tool.run(args, {
 						...context,
-						approve: mcpApproval(ctx.mcpReq.inputResponses)
+						approve: unasked ? approvedUnasked : mcpApproval(ctx.mcpReq.inputResponses)
 					})
 				}] };
 			} catch (error) {

package/dist/mcp/mcp-tools.d.ts

@@ -9,7 +9,7 @@ export type McpToolsInput = {
   sql: boolean;
   /**
    * Offers `create_record` and `update_record`, on the listed resources only when given `{ resources }`; each write still
-   * needs the caller's role and their approval in the client.
+   * needs the caller's role, and their approval in the client unless they hold one of `rolesWithoutApproval`.
    */
   writes: McpWrites;
 };

package/dist/mcp/mcp-tools.js

@@ -9,7 +9,7 @@ import { writeRecordTools } from "../assistant/write-record-tools.js";
 */
 const mcpTools = ({ db, sql, writes }) => (session) => [
 	...readRecordTools(),
-	...writes === false ? [] : writeRecordTools(writes === true ? {} : { resources: writes.resources }),
+	...writes === false ? [] : writeRecordTools(writes === true || !writes.resources ? {} : { resources: writes.resources }),
 	...sql && seesAssistant(session.user.roles) ? [readOnlyQueryTool(db)] : []
 ];
 //#endregion

package/dist/mcp/mcp-writes.d.ts

@@ -1,7 +1,11 @@
 import "../registry.js";
 //#region src/mcp/mcp-writes.d.ts
-/** Which resources the MCP write tools may change: none, every one the caller may write, or the ones named. */
+/**
+ * Which resources the MCP write tools may change: none, every one the caller may write, or the ones named; and the
+ * roles whose writes run without the person's approval in the client.
+ */
 export type McpWrites = boolean | {
-  resources: string[];
+  resources?: string[];
+  rolesWithoutApproval?: string[];
 };
 //#endregion

package/dist/mcp/mcp-writes.js

@@ -1,16 +1,25 @@
+import { anonymousRole } from "@protobase/schema";
 //#region src/mcp/mcp-writes.ts
-const isResourceList = (value) => Array.isArray(value) && value.length > 0 && value.every((name) => typeof name === "string" && name !== "");
+const isNameList = (value) => Array.isArray(value) && value.every((name) => typeof name === "string" && name !== "");
+const isWritesEntry = ([name, value]) => name === "resources" && isNameList(value) && value.length > 0 || name === "rolesWithoutApproval" && isNameList(value);
 const isMcpWrites = (value) => {
 	if (typeof value === "boolean") return true;
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
 	const entries = Object.entries(value);
-	return entries.length === 1 && entries[0][0] === "resources" && isResourceList(entries[0][1]);
+	return entries.length > 0 && entries.every(isWritesEntry);
 };
-/** Stops startup when `options.mcp.writes` names a resource the app does not have. */
-const checkMcpWrites = (registry, writes) => {
+/** The roles `writes` lets write without approval; none unless named. */
+const rolesWithoutApproval = (writes) => typeof writes === "object" ? writes.rolesWithoutApproval ?? [] : [];
+/**
+* Stops startup when `options.mcp.writes` names a resource the app does not have, or lets a role write without
+* approval that is not one of `roles`, the roles its users can hold, or is the anonymous role.
+*/
+const checkMcpWrites = (registry, roles, writes) => {
 	if (typeof writes !== "object") return;
-	const unknown = writes.resources.filter((name) => !registry.find(name));
+	const unknown = (writes.resources ?? []).filter((name) => !registry.find(name));
 	if (unknown.length > 0) throw new Error(`options.mcp.writes names resources the app does not have: ${unknown.join(", ")}`);
+	const unheld = rolesWithoutApproval(writes).filter((role) => role === anonymousRole || !(roles ?? []).includes(role));
+	if (unheld.length > 0) throw new Error(`options.mcp.writes.rolesWithoutApproval names roles the app's users cannot hold: ${unheld.join(", ")}`);
 };
 //#endregion
-export { checkMcpWrites, isMcpWrites };
+export { checkMcpWrites, isMcpWrites, rolesWithoutApproval };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.41.0";
+var version = "0.41.1";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.41.0",
+  "version": "0.41.1",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,9 +36,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.41.0",
-    "@protobase/query": "0.41.0",
-    "@protobase/schema": "0.41.0",
+    "@protobase/layout": "0.41.1",
+    "@protobase/query": "0.41.1",
+    "@protobase/schema": "0.41.1",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",