@protobase/server 0.41.0 → 0.42.0

package/dist/admin-options.d.ts

@@ -59,6 +59,9 @@ export type AdminOptions = {
    * `writes: true` offers `create_record` and `update_record`, through the REST API's access rules, `validate` and write
    * hooks; the person approves each write in their client, and a client that cannot ask is refused.
    * `writes: { resources: ['tasks'] }` offers them on the listed resources only, and refuses a write to any other.
+   * `writes: { rolesWithoutApproval: ['service'] }` lets a user holding one of those roles, such as a service account
+   * with no person present, write without the approval; any other user is still asked. Each must be a role the app's
+   * users can hold.
    * `false`: the host serves its own MCP endpoint at `auth.mcp.path`, in front of this app. This app then answers 404
    * there and needs no `forAudience`, while the OAuth provider's discovery stays.
    */

package/dist/assistant/delete-record-tool.d.ts

@@ -0,0 +1,6 @@
+import { AssistantTool } from "./tools.js";
+import { WriteRecordToolsInput } from "./write-tool-limits.js";
+//#region src/assistant/delete-record-tool.d.ts
+/** Deletes one record by its key and ETag once the user approves it, under the caller's access rules. */
+export declare const deleteRecordTool: (input?: WriteRecordToolsInput) => AssistantTool;
+//#endregion

package/dist/assistant/delete-record-tool.js

@@ -0,0 +1,76 @@
+import { defineTool } from "./tools.js";
+import { keyOf, keyParameter, refused, resourceOf } from "./record-tool-args.js";
+import { onlyNote, outside, resourceParameterFor } from "./write-tool-limits.js";
+//#region src/assistant/delete-record-tool.ts
+const parameterNames = [
+	"resource",
+	"key",
+	"etag"
+];
+const hiddenCharacters = /[\p{Cc}\p{Cf}\p{Zl}\p{Zp}]/u;
+const keyPartOk = (part) => typeof part === "number" ? Number.isFinite(part) : part !== "" && !hiddenCharacters.test(part);
+const deleteKeyOf = (value) => {
+	const key = keyOf(value);
+	if (key === void 0) return void 0;
+	return (Array.isArray(key) ? key : [key]).every(keyPartOk) ? key : void 0;
+};
+const etagOf = (value) => typeof value === "string" && /^"[\x21\x23-\x2b\x2d-\x7e]+"$/.test(value) ? value : void 0;
+const usage = "Pass only the resource, key and etag as { \"resource\": \"<name>\", \"key\": \"<key>\", \"etag\": \"<the etag get_record gave>\" }; nothing was deleted.";
+const approvalOf = (resource, shownKey, softDelete) => ({
+	title: softDelete ? `Delete this ${resource} record? It can be restored: the record is kept, marked deleted.` : `Delete this ${resource} record for good? This cannot be undone: the record is removed.`,
+	fields: [{
+		label: "Key",
+		value: shownKey
+	}],
+	tone: softDelete ? "warning" : "danger",
+	approveLabel: softDelete ? "Delete" : "Delete for good"
+});
+/** Deletes one record by its key and ETag once the user approves it, under the caller's access rules. */
+const deleteRecordTool = (input = {}) => defineTool({
+	name: "delete_record",
+	description: `Deletes one record of a resource by its key. Pass the etag get_record gave: it fails when someone changed the record since. A resource that soft deletes keeps the record, deleted; any other loses it for good. The user approves each delete in their client first; nothing is deleted without it.${onlyNote(input)}`,
+	parameters: {
+		type: "object",
+		properties: {
+			resource: resourceParameterFor(input),
+			key: keyParameter,
+			etag: {
+				type: "string",
+				description: "The etag get_record gave, to fail when the record changed since."
+			}
+		},
+		required: [
+			"resource",
+			"key",
+			"etag"
+		],
+		additionalProperties: false
+	},
+	annotations: {
+		readOnlyHint: false,
+		destructiveHint: true,
+		openWorldHint: false
+	},
+	run: async (args, context) => {
+		const resource = resourceOf(args);
+		const key = deleteKeyOf(args.key);
+		const etag = etagOf(args.etag);
+		if (!resource || key === void 0 || !etag || Object.keys(args).some((name) => !parameterNames.includes(name))) return usage;
+		const refusal = outside(input, resource);
+		if (refusal) return refusal;
+		const softDelete = await context.records.softDeleteField(resource).then((field) => ({ field }), refused);
+		if (typeof softDelete === "string") return softDelete;
+		const shownKey = Array.isArray(key) ? key.join(",") : String(key);
+		const answer = await context.approve(approvalOf(resource, shownKey, softDelete.field));
+		if (answer !== "approved") return `The user did not approve this delete (${answer}); nothing was deleted.`;
+		const deleted = () => JSON.stringify({
+			deleted: true,
+			resource,
+			key,
+			restorable: softDelete.field !== void 0
+		});
+		return context.records.delete(resource, key, { etag }).then(deleted, refused);
+	}
+});
+//#endregion
+export { deleteRecordTool };

package/dist/assistant/records.d.ts

@@ -46,5 +46,14 @@ export type ToolRecords = {
   update: (resource: string, key: RecordKeyInput, data: Row, options?: {
     etag?: string;
   }) => Promise<ToolRecord>;
+  /**
+   * With `etag`, fails with 412 when the record changed since it was read. A resource with `.softDelete()` keeps the
+   * record, deleted; any other loses it. Resolves to the record as it was.
+   */
+  delete: (resource: string, key: RecordKeyInput, options?: {
+    etag?: string;
+  }) => Promise<ToolRecord>;
+  /** The field a delete sets on a resource with `.softDelete()`, from its config; undefined when a delete removes the record. */
+  softDeleteField: (resource: string) => Promise<string | undefined>;
 };
 //#endregion

package/dist/assistant/records.js

@@ -42,7 +42,16 @@ const assistantRecords = (deps, session) => {
 				body: data,
 				ifMatch: etag ?? "*"
 			});
-		}
+		},
+		delete: async (resource, input, { etag } = {}) => {
+			const { entry, key } = keyOf(resource, input);
+			return runWrite(deps, entry, session, {
+				operation: "delete",
+				key,
+				ifMatch: etag ?? "*"
+			});
+		},
+		softDeleteField: async (resource) => entryOf(resource).model.softDelete
 	};
 };
 const withoutAdmin = () => Promise.reject(/* @__PURE__ */ new Error("This assistant has no records: ToolContext.records works in the built-in assistant"));
@@ -51,7 +60,9 @@ const noRecords = {
 	list: withoutAdmin,
 	get: withoutAdmin,
 	create: withoutAdmin,
-	update: withoutAdmin
+	update: withoutAdmin,
+	delete: withoutAdmin,
+	softDeleteField: withoutAdmin
 };
 //#endregion
 export { assistantRecords, noRecords };

package/dist/assistant/write-record-tools.d.ts

@@ -1,13 +1,11 @@
 import { AssistantTool } from "./tools.js";
+import { WriteRecordToolsInput } from "./write-tool-limits.js";
 //#region src/assistant/write-record-tools.d.ts
-/** The resources the write tools may change: any the caller may write, or only those listed. */
-export type WriteRecordToolsInput = {
-  resources?: string[];
-};
 /** Creates a record of a resource once the user approves it, under the caller's access rules. */
 export declare const createRecordTool: (input?: WriteRecordToolsInput) => AssistantTool;
 /** Updates one record by its key once the user approves it, under the caller's access rules. */
 export declare const updateRecordTool: (input?: WriteRecordToolsInput) => AssistantTool;
-/** `create_record` and `update_record`, on the resources `input` allows. */
+/** `create_record`, `update_record` and `delete_record`, on the resources `input` allows. */
 export declare const writeRecordTools: (input?: WriteRecordToolsInput) => AssistantTool[];
-//#endregion
+//#endregion
+export type { WriteRecordToolsInput };

package/dist/assistant/write-record-tools.js

@@ -1,5 +1,7 @@
 import { defineTool } from "./tools.js";
-import { keyOf, keyParameter, refused, resourceOf, resourceParameter } from "./record-tool-args.js";
+import { keyOf, keyParameter, refused, resourceOf } from "./record-tool-args.js";
+import { forbiddenText, notApproved, onlyNote, outside, resourceParameterFor } from "./write-tool-limits.js";
+import { deleteRecordTool } from "./delete-record-tool.js";
 //#region src/assistant/write-record-tools.ts
 const writes = {
 	readOnlyHint: false,
@@ -11,16 +13,6 @@ const dataParameter = {
 	description: "Field names to values, as list_resources gives the fields."
 };
 const dataOf = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
-const resourceParameterFor = ({ resources }) => resources ? {
-	...resourceParameter,
-	description: `The resource's name: one of ${resources.join(", ")}.`
-} : resourceParameter;
-const onlyNote = ({ resources }) => resources ? ` It writes only ${resources.join(", ")}.` : "";
-const outside = ({ resources }, resource) => resources && !resources.includes(resource) ? JSON.stringify({
-	error: "forbidden",
-	message: `Writes over MCP reach only ${resources.join(", ")}, not ${resource}; nothing was written.`
-}) : void 0;
-const notApproved = (answer) => `The user did not approve this change (${answer}); nothing was written.`;
 /** Creates a record of a resource once the user approves it, under the caller's access rules. */
 const createRecordTool = (input = {}) => defineTool({
 	name: "create_record",
@@ -81,6 +73,9 @@ const updateRecordTool = (input = {}) => defineTool({
 		if (!resource || key === void 0 || !data) return "Pass the resource, key and data as { \"resource\": \"<name>\", \"key\": \"<key>\", \"data\": { \"<field>\": <value> } }.";
 		const refusal = outside(input, resource);
 		if (refusal) return refusal;
+		const softDelete = await context.records.softDeleteField(resource).then((field) => ({ field }), refused);
+		if (typeof softDelete === "string") return softDelete;
+		if (softDelete.field && Object.hasOwn(data, softDelete.field)) return forbiddenText(`update_record does not set ${softDelete.field}, which deleting sets; delete with delete_record. Nothing was written.`);
 		const shownKey = Array.isArray(key) ? key.join(",") : String(key);
 		const answer = await context.approve({
 			title: `Update ${resource} ${shownKey}?`,
@@ -92,7 +87,11 @@ const updateRecordTool = (input = {}) => defineTool({
 		return context.records.update(resource, key, data, { etag }).then((record) => JSON.stringify(record), refused);
 	}
 });
-/** `create_record` and `update_record`, on the resources `input` allows. */
-const writeRecordTools = (input = {}) => [createRecordTool(input), updateRecordTool(input)];
+/** `create_record`, `update_record` and `delete_record`, on the resources `input` allows. */
+const writeRecordTools = (input = {}) => [
+	createRecordTool(input),
+	updateRecordTool(input),
+	deleteRecordTool(input)
+];
 //#endregion
 export { createRecordTool, updateRecordTool, writeRecordTools };

package/dist/assistant/write-tool-limits.d.ts

@@ -0,0 +1,6 @@
+//#region src/assistant/write-tool-limits.d.ts
+/** The resources the write tools may change: any the caller may write, or only those listed. */
+export type WriteRecordToolsInput = {
+  resources?: string[];
+};
+//#endregion

package/dist/assistant/write-tool-limits.js

@@ -0,0 +1,15 @@
+import { resourceParameter } from "./record-tool-args.js";
+//#region src/assistant/write-tool-limits.ts
+const resourceParameterFor = ({ resources }) => resources ? {
+	...resourceParameter,
+	description: `The resource's name: one of ${resources.join(", ")}.`
+} : resourceParameter;
+const onlyNote = ({ resources }) => resources ? ` It writes only ${resources.join(", ")}.` : "";
+const forbiddenText = (message) => JSON.stringify({
+	error: "forbidden",
+	message
+});
+const outside = ({ resources }, resource) => resources && !resources.includes(resource) ? forbiddenText(`Writes over MCP reach only ${resources.join(", ")}, not ${resource}; nothing was written.`) : void 0;
+const notApproved = (answer) => `The user did not approve this change (${answer}); nothing was written.`;
+//#endregion
+export { forbiddenText, notApproved, onlyNote, outside, resourceParameterFor };

package/dist/create-admin.js

@@ -23,7 +23,7 @@ import { realtimePath, restPath, storagePath, supabaseFunctionsPath, supabasePat
 import { goTruePath } from "./gotrue/keys.js";
 import { authBasePath } from "./better-auth/auth-base-path.js";
 import { mcpDiscovery } from "./better-auth/mcp/discovery-routes.js";
-import { checkMcpWrites } from "./mcp/mcp-writes.js";
+import { checkMcpWrites, rolesWithoutApproval } from "./mcp/mcp-writes.js";
 import { mcpAuthenticator } from "./mcp/mcp-authenticator.js";
 import { mcpToolContext } from "./mcp/mcp-context.js";
 import { mcpHandler } from "./mcp/mcp-handler.js";
@@ -128,7 +128,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	checkRoleLimits(registry, options.roles?.limits ?? []);
 	checkOwnerFields(registry, authenticate.userIdType, auth);
 	const mcpAuthenticate = mcpAuthenticator(authenticate, auth?.mcp, options.mcp);
-	if (options.mcp) checkMcpWrites(registry, options.mcp.writes);
+	if (options.mcp) checkMcpWrites(registry, declaredRoles(auth, options.roles), options.mcp.writes);
 	checkPositionAfter(registry);
 	checkParents(registry);
 	checkPages(pageModels, {
@@ -299,10 +299,11 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	const report = options.onUnhandledError ?? ((error) => console.error(error));
 	if (auth?.mcp && options.mcp === false) closedMcpRoutes(app, auth.mcp.path);
 	else if (auth?.mcp && mcpAuthenticate) {
+		const writes = options.mcp !== false && options.mcp?.writes || false;
 		const tools = mcpTools({
 			db,
 			sql: options.mcp !== false && options.mcp?.sql === true,
-			writes: options.mcp !== false && options.mcp?.writes || false
+			writes
 		});
 		const server = (session) => mcpServer({
 			info: {
@@ -311,7 +312,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 			},
 			tools: tools(session),
 			context: mcpToolContext(deps, meta, session),
-			report
+			report,
+			rolesWithoutApproval: rolesWithoutApproval(writes)
 		});
 		mcpRoutes(app, {
 			path: auth.mcp.path,

package/dist/functions/records.d.ts

@@ -1,16 +1,11 @@
 import "../types.js";
 import "../deps.js";
-import { ListParams, RecordKeyInput, RecordPage, ToolRecord, ToolRecords } from "../assistant/records.js";
+import { ListParams, RecordPage, ToolRecords } from "../assistant/records.js";
 //#region src/functions/records.d.ts
 /**
  * The app's resources as the caller: their access rules, row filters, tenant scope, validation and write hooks apply as
  * in the REST API. A refusal or a missing record rejects with an `HttpProblem`, which becomes the function's response
  * when it is not caught.
  */
-export type FunctionRecords = ToolRecords & {
-  /** With `etag`, fails with 412 when the record changed since it was read. Resolves to the record as it was. */
-  delete: (resource: string, key: RecordKeyInput, options?: {
-    etag?: string;
-  }) => Promise<ToolRecord>;
-};
+export type FunctionRecords = ToolRecords;
 //#endregion

package/dist/functions/records.js

@@ -1,22 +1,6 @@
-import { notFound } from "../problem.js";
-import { decodeKeyText } from "../key.js";
-import { runWrite } from "../write-pipeline.js";
 import { assistantRecords } from "../assistant/records.js";
-import { encodeKey } from "@protobase/schema/internal";
 //#region src/functions/records.ts
 /** `FunctionRecords` over the admin's resources for `session`. */
-const callerRecords = (deps, session) => ({
-	...assistantRecords(deps, session),
-	delete: async (resource, input, { etag } = {}) => {
-		const entry = deps.registry.find(resource);
-		if (!entry) throw notFound(`There is no resource "${resource}"`);
-		const key = decodeKeyText(entry, Array.isArray(input) ? encodeKey(input) : String(input));
-		return runWrite(deps, entry, session, {
-			operation: "delete",
-			key,
-			ifMatch: etag ?? "*"
-		});
-	}
-});
+const callerRecords = (deps, session) => assistantRecords(deps, session);
 //#endregion
 export { callerRecords };

package/dist/index.d.ts

@@ -90,7 +90,9 @@ import { WidgetOptions, maxWidgetPropsBytes, widget } from "./assistant/widget.j
 import { QueryOptions, QueryResult, runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
 import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
-import { WriteRecordToolsInput, createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
+import { WriteRecordToolsInput } from "./assistant/write-tool-limits.js";
+import { createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
+import { deleteRecordTool } from "./assistant/delete-record-tool.js";
 import { McpServerInput, mcpServer } from "./mcp/mcp-server.js";
 import { McpToolsInput, mcpTools } from "./mcp/mcp-tools.js";
 import { McpGateInput, mcpGate, sessionOf } from "./mcp/mcp-gate.js";
@@ -128,4 +130,4 @@ import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.
 import { MobileRelease, ReleaseFile, ServedReleaseFile, composeRelease, releaseManifest } from "./mobile-release/release.js";
 import { MobileReleaseAppInput, OfferedRelease, mobileReleaseApp } from "./mobile-release/release-app.js";
 import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/index.js

@@ -39,6 +39,7 @@ import { mcpHandler } from "./mcp/mcp-handler.js";
 import { mcpRoutes } from "./mcp/mcp-routes.js";
 import { mcpServer } from "./mcp/mcp-server.js";
 import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
+import { deleteRecordTool } from "./assistant/delete-record-tool.js";
 import { createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
 import { mcpTools } from "./mcp/mcp-tools.js";
 import { addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
@@ -98,4 +99,4 @@ import { jobsDrainApp } from "./jobs/drain-route.js";
 import { composeRelease, releaseManifest } from "./mobile-release/release.js";
 import { mobileReleaseApp } from "./mobile-release/release-app.js";
 import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/mcp/mcp-approval.js

@@ -18,6 +18,13 @@ const mcpApproval = (inputResponses) => (request) => {
 	if (answer.kind === "elicit" && answer.action === "accept" && answer.content?.approve === true) return Promise.resolve("approved");
 	return Promise.resolve("rejected");
 };
+/**
+* Whether `roles`, the roles the signed-in user holds, include one of `exempt`, whose MCP writes need no approval: an
+* exact match, and none for anything but a list.
+*/
+const writesUnasked = (exempt, roles) => Array.isArray(roles) && roles.some((role) => exempt.includes(role));
+/** `ToolContext.approve` over MCP for a user whose writes need no approval: approved, without asking the client. */
+const approvedUnasked = () => Promise.resolve("approved");
 const asksForms = (capabilities) => {
 	const elicitation = capabilities?.elicitation;
 	return elicitation !== void 0 && (elicitation.form !== void 0 || elicitation.url === void 0);
@@ -54,4 +61,4 @@ const approvalAsked = (request, capabilities) => {
 	}) } });
 };
 //#endregion
-export { ApprovalNeeded, approvalAsked, mcpApproval };
+export { ApprovalNeeded, approvalAsked, approvedUnasked, mcpApproval, writesUnasked };

package/dist/mcp/mcp-authenticator.js

@@ -5,11 +5,11 @@ const isMcpOptions = (options) => options === void 0 || options === false || typ
 /**
 * The authenticator of the MCP endpoint's tokens, when MCP is on (`createAuth({ mcp })`); none when the host serves its
 * own (`options.mcp: false`). Stops the server at startup when `options.mcp` is neither `false` nor
-* `{ sql?: boolean; writes?: boolean | { resources: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
+* `{ sql?: boolean; writes?: boolean | { resources?: string[]; rolesWithoutApproval?: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
 * another audience.
 */
 const mcpAuthenticator = (authenticate, mcp, options) => {
-	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources: [<resource>, ...] } }");
+	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources?: [<resource>, ...], rolesWithoutApproval?: [<role>, ...] } }");
 	if (options === false) return void 0;
 	if (options && !mcp) throw new Error("options.mcp needs createAuth({ mcp }) passed as auth");
 	if (!mcp) return void 0;

package/dist/mcp/mcp-server.d.ts

@@ -13,10 +13,13 @@ export type McpServerInput = {
   context: Omit<ToolContext, 'approve'>;
   /** Gets the errors a tool throws, which the client only sees as a failure. */
   report: (error: unknown) => void;
+  /** The roles whose calls are approved without asking the client: a user holding one of them is never asked. None by default. */
+  rolesWithoutApproval?: readonly string[];
 };
 /**
  * An MCP server offering `tools` as MCP tools, each with its JSON Schema, its hints, and the text it returns. A tool
- * that asks for approval makes the call ask the client's user, and runs again from the start with their answer.
+ * that asks for approval makes the call ask the client's user, and runs again from the start with their answer; for a
+ * user holding one of `rolesWithoutApproval` it is approved at once, and the client is never asked.
  */
-export declare const mcpServer: ({ info, tools, context, report }: McpServerInput) => McpServer;
+export declare const mcpServer: ({ info, tools, context, report, rolesWithoutApproval }: McpServerInput) => McpServer;
 //#endregion

package/dist/mcp/mcp-server.js

@@ -1,5 +1,5 @@
 import { checkedTools } from "../assistant/checked-tools.js";
-import { ApprovalNeeded, approvalAsked, mcpApproval } from "./mcp-approval.js";
+import { ApprovalNeeded, approvalAsked, approvedUnasked, mcpApproval, writesUnasked } from "./mcp-approval.js";
 import { CLIENT_CAPABILITIES_META_KEY, McpServer, fromJsonSchema } from "@modelcontextprotocol/server";
 //#region src/mcp/mcp-server.ts
 const capabilitiesOf = (envelope) => envelope?.[CLIENT_CAPABILITIES_META_KEY];
@@ -12,10 +12,12 @@ const failed = {
 };
 /**
 * An MCP server offering `tools` as MCP tools, each with its JSON Schema, its hints, and the text it returns. A tool
-* that asks for approval makes the call ask the client's user, and runs again from the start with their answer.
+* that asks for approval makes the call ask the client's user, and runs again from the start with their answer; for a
+* user holding one of `rolesWithoutApproval` it is approved at once, and the client is never asked.
 */
-const mcpServer = ({ info, tools, context, report }) => {
+const mcpServer = ({ info, tools, context, report, rolesWithoutApproval = [] }) => {
 	const server = new McpServer(info);
+	const unasked = writesUnasked(rolesWithoutApproval, context.session.user.roles);
 	for (const tool of checkedTools(tools)) {
 		const config = {
 			description: tool.description,
@@ -28,7 +30,7 @@ const mcpServer = ({ info, tools, context, report }) => {
 					type: "text",
 					text: await tool.run(args, {
 						...context,
-						approve: mcpApproval(ctx.mcpReq.inputResponses)
+						approve: unasked ? approvedUnasked : mcpApproval(ctx.mcpReq.inputResponses)
 					})
 				}] };
 			} catch (error) {

package/dist/mcp/mcp-tools.d.ts

@@ -8,8 +8,8 @@ export type McpToolsInput = {
   /** Offers `run_read_only_query` to callers who see the assistant (`admin` or `ai`); it reads outside the access rules. */
   sql: boolean;
   /**
-   * Offers `create_record` and `update_record`, on the listed resources only when given `{ resources }`; each write still
-   * needs the caller's role and their approval in the client.
+   * Offers `create_record`, `update_record` and `delete_record`, on the listed resources only when given `{ resources }`; each write
+   * still needs the caller's role, and their approval in the client unless they hold one of `rolesWithoutApproval`.
    */
   writes: McpWrites;
 };

package/dist/mcp/mcp-tools.js

@@ -9,7 +9,7 @@ import { writeRecordTools } from "../assistant/write-record-tools.js";
 */
 const mcpTools = ({ db, sql, writes }) => (session) => [
 	...readRecordTools(),
-	...writes === false ? [] : writeRecordTools(writes === true ? {} : { resources: writes.resources }),
+	...writes === false ? [] : writeRecordTools(writes === true || !writes.resources ? {} : { resources: writes.resources }),
 	...sql && seesAssistant(session.user.roles) ? [readOnlyQueryTool(db)] : []
 ];
 //#endregion

package/dist/mcp/mcp-writes.d.ts

@@ -1,7 +1,11 @@
 import "../registry.js";
 //#region src/mcp/mcp-writes.d.ts
-/** Which resources the MCP write tools may change: none, every one the caller may write, or the ones named. */
+/**
+ * Which resources the MCP write tools may change: none, every one the caller may write, or the ones named; and the
+ * roles whose writes run without the person's approval in the client.
+ */
 export type McpWrites = boolean | {
-  resources: string[];
+  resources?: string[];
+  rolesWithoutApproval?: string[];
 };
 //#endregion

package/dist/mcp/mcp-writes.js

@@ -1,16 +1,25 @@
+import { anonymousRole } from "@protobase/schema";
 //#region src/mcp/mcp-writes.ts
-const isResourceList = (value) => Array.isArray(value) && value.length > 0 && value.every((name) => typeof name === "string" && name !== "");
+const isNameList = (value) => Array.isArray(value) && value.every((name) => typeof name === "string" && name !== "");
+const isWritesEntry = ([name, value]) => name === "resources" && isNameList(value) && value.length > 0 || name === "rolesWithoutApproval" && isNameList(value);
 const isMcpWrites = (value) => {
 	if (typeof value === "boolean") return true;
 	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
 	const entries = Object.entries(value);
-	return entries.length === 1 && entries[0][0] === "resources" && isResourceList(entries[0][1]);
+	return entries.length > 0 && entries.every(isWritesEntry);
 };
-/** Stops startup when `options.mcp.writes` names a resource the app does not have. */
-const checkMcpWrites = (registry, writes) => {
+/** The roles `writes` lets write without approval; none unless named. */
+const rolesWithoutApproval = (writes) => typeof writes === "object" ? writes.rolesWithoutApproval ?? [] : [];
+/**
+* Stops startup when `options.mcp.writes` names a resource the app does not have, or lets a role write without
+* approval that is not one of `roles`, the roles its users can hold, or is the anonymous role.
+*/
+const checkMcpWrites = (registry, roles, writes) => {
 	if (typeof writes !== "object") return;
-	const unknown = writes.resources.filter((name) => !registry.find(name));
+	const unknown = (writes.resources ?? []).filter((name) => !registry.find(name));
 	if (unknown.length > 0) throw new Error(`options.mcp.writes names resources the app does not have: ${unknown.join(", ")}`);
+	const unheld = rolesWithoutApproval(writes).filter((role) => role === anonymousRole || !(roles ?? []).includes(role));
+	if (unheld.length > 0) throw new Error(`options.mcp.writes.rolesWithoutApproval names roles the app's users cannot hold: ${unheld.join(", ")}`);
 };
 //#endregion
-export { checkMcpWrites, isMcpWrites };
+export { checkMcpWrites, isMcpWrites, rolesWithoutApproval };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.41.0";
+var version = "0.42.0";
 //#endregion
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.41.0",
+  "version": "0.42.0",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -36,9 +36,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.41.0",
-    "@protobase/query": "0.41.0",
-    "@protobase/schema": "0.41.0",
+    "@protobase/layout": "0.42.0",
+    "@protobase/query": "0.42.0",
+    "@protobase/schema": "0.42.0",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",