@protobase/server 0.42.0 → 0.43.0

package/dist/batch/schema.d.ts

@@ -0,0 +1,221 @@
+import { z } from "zod";
+//#region src/batch/schema.d.ts
+/** `{ ops: [...] }`; `{ operations: [...] }` is accepted too, for clients written against that name. */
+export declare const batchBody: z.ZodPipe<z.ZodUnion<readonly [z.ZodObject<{
+  ops: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    op: z.ZodLiteral<"create">;
+    resource: z.ZodString;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    ref: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"update">;
+    resource: z.ZodString;
+    key: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>;
+    etag: z.ZodOptional<z.ZodString>;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"delete">;
+    resource: z.ZodString;
+    key: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>;
+    etag: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"reorder">;
+    resource: z.ZodString;
+    field: z.ZodString;
+    keys: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>;
+    start: z.ZodOptional<z.ZodNumber>;
+    etags: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  }, z.core.$strip>], "op">>;
+}, z.core.$strip>, z.ZodObject<{
+  operations: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    op: z.ZodLiteral<"create">;
+    resource: z.ZodString;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    ref: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"update">;
+    resource: z.ZodString;
+    key: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>;
+    etag: z.ZodOptional<z.ZodString>;
+    data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+  }, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"delete">;
+    resource: z.ZodString;
+    key: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>;
+    etag: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"reorder">;
+    resource: z.ZodString;
+    field: z.ZodString;
+    keys: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>, z.ZodObject<{
+      $ref: z.ZodString;
+      field: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>;
+    start: z.ZodOptional<z.ZodNumber>;
+    etags: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  }, z.core.$strip>], "op">>;
+}, z.core.$strip>]>, z.ZodTransform<{
+  ops: ({
+    op: "create";
+    resource: string;
+    data: Record<string, unknown>;
+    ref?: string | undefined;
+  } | {
+    op: "update";
+    resource: string;
+    key: string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[];
+    data: Record<string, unknown>;
+    etag?: string | undefined;
+  } | {
+    op: "delete";
+    resource: string;
+    key: string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[];
+    etag?: string | undefined;
+  } | {
+    op: "reorder";
+    resource: string;
+    field: string;
+    keys: (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[])[];
+    start?: number | undefined;
+    etags?: Record<string, string> | undefined;
+  })[];
+}, {
+  ops: ({
+    op: "create";
+    resource: string;
+    data: Record<string, unknown>;
+    ref?: string | undefined;
+  } | {
+    op: "update";
+    resource: string;
+    key: string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[];
+    data: Record<string, unknown>;
+    etag?: string | undefined;
+  } | {
+    op: "delete";
+    resource: string;
+    key: string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[];
+    etag?: string | undefined;
+  } | {
+    op: "reorder";
+    resource: string;
+    field: string;
+    keys: (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[])[];
+    start?: number | undefined;
+    etags?: Record<string, string> | undefined;
+  })[];
+} | {
+  operations: ({
+    op: "create";
+    resource: string;
+    data: Record<string, unknown>;
+    ref?: string | undefined;
+  } | {
+    op: "update";
+    resource: string;
+    key: string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[];
+    data: Record<string, unknown>;
+    etag?: string | undefined;
+  } | {
+    op: "delete";
+    resource: string;
+    key: string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[];
+    etag?: string | undefined;
+  } | {
+    op: "reorder";
+    resource: string;
+    field: string;
+    keys: (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    } | (string | number | {
+      $ref: string;
+      field?: string | undefined;
+    })[])[];
+    start?: number | undefined;
+    etags?: Record<string, string> | undefined;
+  })[];
+}>>;
+export type BatchOperation = z.output<typeof batchBody>['ops'][number];
+//#endregion

package/dist/comments/mentionable.js

@@ -1,6 +1,6 @@
 import { notFound } from "../problem.js";
-import { parseParams } from "../params.js";
 import { readTransaction } from "../transactions.js";
+import { parseParams } from "../params.js";
 import { commentAccess, mayRead, readableRecord, requireSignedIn, userSessions } from "./comment-access.js";
 import { z } from "zod";
 //#region src/comments/mentionable.ts

package/dist/comments/read-comments.js

@@ -1,7 +1,7 @@
 import { notFound } from "../problem.js";
 import { tenantScope } from "../tenant.js";
-import { parseParams } from "../params.js";
 import { readTransaction } from "../transactions.js";
+import { parseParams } from "../params.js";
 import { commentsTable } from "./comments-sql.js";
 import { commentAccess, readableRecord } from "./comment-access.js";
 import { commentColumns, commentItem, namedUsers } from "./comment-item.js";

package/dist/create-admin.js

@@ -2,9 +2,9 @@ import { aiModel } from "./ai/ai-model.js";
 import { hasAiActions, hasAiFields } from "./ai/ai-fields.js";
 import { unauthorized } from "./problem.js";
 import { fillHook } from "./ai/fill-hook.js";
-import { createErrorHandler } from "./error-handler.js";
 import { isCaptured } from "./changes/capture-sql.js";
 import { wakeDispatch } from "./changes/actor.js";
+import { createErrorHandler } from "./error-handler.js";
 import { assistantRecords } from "./assistant/records.js";
 import { fillJob } from "./ai/fill-job.js";
 import { assistantSettings } from "./assistant/assistant-settings.js";

package/dist/error-handler.js

@@ -1,6 +1,6 @@
 import { HttpProblem, problemResponse } from "./problem.js";
-import { QueryError } from "@protobase/query";
 import { HTTPException } from "hono/http-exception";
+import { QueryError } from "@protobase/query";
 //#region src/error-handler.ts
 const titles = {
 	400: "Bad Request",

package/dist/files/download.js

@@ -1,10 +1,10 @@
 import { HttpProblem, forbidden, notFound } from "../problem.js";
-import { decodeKeyText } from "../key.js";
-import { downloadExpiry, readDownloadUrl } from "./download-url.js";
+import { readTransaction } from "../transactions.js";
+import { fetchRecord } from "../records.js";
 import { contentDisposition, downloadName, servedType } from "./media-types.js";
 import { isFilePath, parseUri, tenantSegment, variantPaths } from "./uri.js";
-import { fetchRecord } from "../records.js";
-import { readTransaction } from "../transactions.js";
+import { downloadExpiry, readDownloadUrl } from "./download-url.js";
+import { decodeKeyText } from "../key.js";
 //#region src/files/download.ts
 const gone = () => notFound("There is no such file");
 /** One `bytes=start-end` range, inclusive; `undefined` for none, `false` for one that cannot be served. */

package/dist/files/present.js

@@ -1,7 +1,7 @@
-import { downloadExpiry, signedDownloadUrl } from "./download-url.js";
 import { servedType } from "./media-types.js";
 import { externalFile, parseExternalUrl } from "./external-url.js";
 import { parseUri, variantPaths } from "./uri.js";
+import { downloadExpiry, signedDownloadUrl } from "./download-url.js";
 import { encodeKey } from "@protobase/schema/internal";
 //#region src/files/present.ts
 const linker = async (files, access, row, field, ref, expires) => {

package/dist/functions/records.d.ts

@@ -7,5 +7,5 @@ import { ListParams, RecordPage, ToolRecords } from "../assistant/records.js";
  * in the REST API. A refusal or a missing record rejects with an `HttpProblem`, which becomes the function's response
  * when it is not caught.
  */
-export type FunctionRecords = ToolRecords;
+export type FunctionRecords = Omit<ToolRecords, 'batch'>;
 //#endregion

package/dist/functions/records.js

@@ -1,6 +1,9 @@
 import { assistantRecords } from "../assistant/records.js";
 //#region src/functions/records.ts
-/** `FunctionRecords` over the admin's resources for `session`. */
-const callerRecords = (deps, session) => assistantRecords(deps, session);
+/** `FunctionRecords` over the admin's resources for `session`; the batch is the MCP tools' alone. */
+const callerRecords = (deps, session) => {
+	const { batch: _batch, ...records } = assistantRecords(deps, session);
+	return records;
+};
 //#endregion
 export { callerRecords };

package/dist/history/read-history.js

@@ -1,10 +1,10 @@
 import { notFound } from "../problem.js";
 import { tenantScope } from "../tenant.js";
 import { requestAccess, requireOperation } from "../request-access.js";
-import { parseParams } from "../params.js";
-import { fetchReadable } from "../fetch-readable.js";
-import { readTransaction } from "../transactions.js";
 import { quoteIdent } from "../changes/capture-sql.js";
+import { readTransaction } from "../transactions.js";
+import { fetchReadable } from "../fetch-readable.js";
+import { parseParams } from "../params.js";
 import { encodeKey } from "@protobase/schema/internal";
 import { z } from "zod";
 import { sql } from "kysely";

package/dist/index.d.ts

@@ -34,6 +34,9 @@ import { MapOptions, MapSettings, mapSettings, mapStyleUrl, mapStyleVariable } f
 import { PluginOption, PluginRef, beforeSignInPluginsVariable, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable } from "./plugins/plugin-settings.js";
 import { ResourceSource, configExports } from "./resource-source.js";
 import { SourceOption, SourceRef, checkSourceNames, sourceOptions, sourcesFor, sourcesVariable } from "./sources/source-settings.js";
+import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
+import { BatchOperation } from "./batch/schema.js";
+import { BatchResult } from "./batch/run-batch.js";
 import { ListParams, RecordKeyInput, RecordPage, ToolRecord, ToolRecords } from "./assistant/records.js";
 import { FunctionRecords } from "./functions/records.js";
 import { ApiFunction, CorsOptions, FunctionApp, FunctionCaller, FunctionContext, FunctionHandler, FunctionOptions, FunctionSource, KeyFunctionContext, ProtectedFunctionOptions, PublicFunctionContext, PublicFunctionHandler, PublicFunctionOptions, defineFunction } from "./functions/define-function.js";
@@ -53,7 +56,6 @@ import { checkViewQueries } from "./check-view-queries.js";
 import { ProjectConfig, defineConfig, mergeConfig } from "./project-config.js";
 import { consoleAuditQueue } from "./audit/console-queue.js";
 import { JwtOptions, JwtVerifyOptions, jwtAuthenticator, jwtVerifier } from "./auth/jwt.js";
-import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
 import { TrustedApp, withTrustedApps } from "./better-auth/app-tokens.js";
 import { BetterAuthAuthenticator, BetterAuthAuthenticatorOptions, betterAuthAuthenticator, betterAuthTokens } from "./better-auth/authenticator.js";
 import { parseRoles } from "./better-auth/parse-roles.js";
@@ -93,6 +95,7 @@ import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } fr
 import { WriteRecordToolsInput } from "./assistant/write-tool-limits.js";
 import { createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
 import { deleteRecordTool } from "./assistant/delete-record-tool.js";
+import { batchWriteTool } from "./assistant/batch-write-tool.js";
 import { McpServerInput, mcpServer } from "./mcp/mcp-server.js";
 import { McpToolsInput, mcpTools } from "./mcp/mcp-tools.js";
 import { McpGateInput, mcpGate, sessionOf } from "./mcp/mcp-gate.js";
@@ -130,4 +133,4 @@ import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.
 import { MobileRelease, ReleaseFile, ServedReleaseFile, composeRelease, releaseManifest } from "./mobile-release/release.js";
 import { MobileReleaseAppInput, OfferedRelease, mobileReleaseApp } from "./mobile-release/release-app.js";
 import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type AppIcons, type AppIdentity, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type Authenticator, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryOptions, HttpProblem, type IssueTokenOptions, type JobContext, type JobDefinition, type JobOptions, type JobsRuntime, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewOrganization, type NewUser, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProjectConfig, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type User, type UserCreatedHook, type ViewSource, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/index.js

@@ -1,7 +1,7 @@
 import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
-import { formatUri, variantPath } from "./files/uri.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
 import { isCaptured } from "./changes/capture-sql.js";
+import { formatUri, variantPath } from "./files/uri.js";
 import { isSchedule } from "./jobs/schedule.js";
 import { defineJob, isJobDefinition, jobDefinitions } from "./jobs/define-job.js";
 import { FatalJobError } from "./jobs/run-job.js";
@@ -41,6 +41,7 @@ import { mcpServer } from "./mcp/mcp-server.js";
 import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
 import { deleteRecordTool } from "./assistant/delete-record-tool.js";
 import { createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
+import { batchWriteTool } from "./assistant/batch-write-tool.js";
 import { mcpTools } from "./mcp/mcp-tools.js";
 import { addAppRoleToOwners, addMember, createOrganization, listOrganizations, removeMember, setMemberRoles } from "./better-auth/organizations/host.js";
 import { createUser, deleteUser, hasUsers, listUsers, roleChoices, setUserBanned, setUserRole } from "./better-auth/users.js";
@@ -99,4 +100,4 @@ import { jobsDrainApp } from "./jobs/drain-route.js";
 import { composeRelease, releaseManifest } from "./mobile-release/release.js";
 import { mobileReleaseApp } from "./mobile-release/release-app.js";
 import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
-export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { FatalJobError, HttpProblem, MissingCredentials, ModelError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkQueryRunner, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, mapSettings, mapStyleUrl, mapStyleVariable, maxTokenTtlSeconds, maxWidgetPropsBytes, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, processor, queryRunnerMigration, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sessionOf, setMemberRoles, setUserBanned, setUserRole, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, variantPath, verifySignature, verifyStandardWebhook, waitUntil, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/jobs/run-job.d.ts

@@ -1,6 +1,6 @@
 import "./job-types.js";
-import { Db } from "@protobase/query";
 import "pg-boss";
+import { Db } from "@protobase/query";
 //#region src/jobs/run-job.d.ts
 /** Thrown from a job's `run`, it fails the job now: the attempts it has left are not used. */
 export declare class FatalJobError extends Error {

package/dist/list-photos.js

@@ -1,9 +1,9 @@
 import { badRequest } from "./problem.js";
 import { checkedSort } from "./filter-input.js";
 import { readScope, requestAccess } from "./request-access.js";
-import { presentFiles } from "./files/present.js";
-import { exposeRow } from "./rows.js";
 import { readTransaction } from "./transactions.js";
+import { exposeRow } from "./rows.js";
+import { presentFiles } from "./files/present.js";
 import { cardPhotosErrors } from "./view-card-photos.js";
 import { cardPhotoLimit } from "@protobase/schema/internal";
 import { checkFilter, createWhere } from "@protobase/schema";

package/dist/list-service.js

@@ -1,13 +1,13 @@
 import { checkedFilter, checkedSort } from "./filter-input.js";
 import { readScope, requestAccess, requireOperation } from "./request-access.js";
-import { deletedRows, listParams, pageSizeOf, parseParams, seekParams, selectedFields } from "./params.js";
+import { readTransaction } from "./transactions.js";
 import { etagAlias } from "./sql-parts.js";
 import { etagOf } from "./etag.js";
-import { presentFiles } from "./files/present.js";
 import { exposeRow, pickFields } from "./rows.js";
+import { presentFiles } from "./files/present.js";
+import { deletedRows, listParams, pageSizeOf, parseParams, seekParams, selectedFields } from "./params.js";
 import { rowPermissions } from "./row-permissions.js";
 import { labelRequests, relatedLabels } from "./related-labels.js";
-import { readTransaction } from "./transactions.js";
 import { photosRequest, recordPhotos } from "./list-photos.js";
 import { countUpTo, estimateCount, listQuery, seekToPosition } from "@protobase/query";
 //#region src/list-service.ts

package/dist/map-service.js

@@ -1,8 +1,8 @@
 import { checkedFilter } from "./filter-input.js";
 import { readScope, requestAccess, requireOperation } from "./request-access.js";
+import { readTransaction } from "./transactions.js";
 import { parseParams, selectedFields } from "./params.js";
 import { labelRequests } from "./related-labels.js";
-import { readTransaction } from "./transactions.js";
 import { photosRequest } from "./list-photos.js";
 import { listRecords } from "./list-service.js";
 import { z } from "zod";

package/dist/mcp/mcp-tools.d.ts

@@ -8,14 +8,11 @@ export type McpToolsInput = {
   /** Offers `run_read_only_query` to callers who see the assistant (`admin` or `ai`); it reads outside the access rules. */
   sql: boolean;
   /**
-   * Offers `create_record`, `update_record` and `delete_record`, on the listed resources only when given `{ resources }`; each write
-   * still needs the caller's role, and their approval in the client unless they hold one of `rolesWithoutApproval`.
+   * Offers `create_record`, `update_record`, `delete_record` and `batch_write`, on the listed resources only when given
+   * `{ resources }`; each write still needs the caller's role, and their approval in the client unless they hold one of
+   * `rolesWithoutApproval`.
    */
   writes: McpWrites;
 };
-/**
- * The default MCP tools for a caller: the record tools, the write tools when `writes` is on, and read-only SQL when `sql`
- * is on and the caller sees the assistant.
- */
 export declare const mcpTools: ({ db, sql, writes }: McpToolsInput) => (session: Session) => AssistantTool[];
 //#endregion

package/dist/mcp/mcp-tools.js

@@ -2,14 +2,16 @@ import { seesAssistant } from "../assistant/assistant-settings.js";
 import { readOnlyQueryTool } from "../assistant/query-tools.js";
 import { readRecordTools } from "../assistant/record-tools.js";
 import { writeRecordTools } from "../assistant/write-record-tools.js";
+import { batchWriteTool } from "../assistant/batch-write-tool.js";
 //#region src/mcp/mcp-tools.ts
 /**
 * The default MCP tools for a caller: the record tools, the write tools when `writes` is on, and read-only SQL when `sql`
 * is on and the caller sees the assistant.
 */
+const writeTools = (input) => [...writeRecordTools(input), batchWriteTool(input)];
 const mcpTools = ({ db, sql, writes }) => (session) => [
 	...readRecordTools(),
-	...writes === false ? [] : writeRecordTools(writes === true || !writes.resources ? {} : { resources: writes.resources }),
+	...writes === false ? [] : writeTools(writes === true || !writes.resources ? {} : { resources: writes.resources }),
 	...sql && seesAssistant(session.user.roles) ? [readOnlyQueryTool(db)] : []
 ];
 //#endregion

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.42.0";
+var version = "0.43.0";
 //#endregion
 export { version };

package/dist/read-service.js

@@ -1,10 +1,11 @@
 import { notFound } from "./problem.js";
 import { requestAccess, requireOperation, visibleFields, writableFields } from "./request-access.js";
-import { presentFiles } from "./files/present.js";
+import { readTransaction } from "./transactions.js";
 import { pickFields } from "./rows.js";
 import { fetchReadable } from "./fetch-readable.js";
+import { presentFiles } from "./files/present.js";
+import { deletedRows } from "./params.js";
 import { rowPermissions } from "./row-permissions.js";
-import { readTransaction } from "./transactions.js";
 //#region src/read-service.ts
 /**
 * `edit` for fields the caller may change on this record, `read` for the rest (sensitive ones included); hidden fields
@@ -18,11 +19,13 @@ const fieldModes = (access, canUpdate) => {
 };
 /**
 * The record with this key as the caller may see it: readable fields only, inside the caller's tenant and row filter.
-* A key outside the tenant, outside the row filter, or failing a record-level read rule is a plain 404.
+* A key outside the tenant, outside the row filter, or failing a record-level read rule is a plain 404. `showDeleted`
+* also finds a soft-deleted record, and is refused on a resource without a soft delete once the caller may read it.
 */
-const readRecord = async (deps, entry, session, key, deleted = "hide") => {
+const readRecord = async (deps, entry, session, key, showDeleted = false) => {
 	const access = await requestAccess(deps, entry, session);
 	requireOperation(access, "read");
+	const deleted = deletedRows(access.full, showDeleted);
 	const names = Object.keys(access.model.fields);
 	const found = await readTransaction(deps.db, deps.statementTimeoutMs, async (trx) => {
 		const current = await fetchReadable(trx, access, key, deleted, {

package/dist/realtime/change-checker.js

@@ -1,5 +1,5 @@
-import { readTransaction } from "../transactions.js";
 import { quoteIdent, tableSql } from "../changes/capture-sql.js";
+import { readTransaction } from "../transactions.js";
 import { callerSettings } from "../rest/caller-settings.js";
 import { filterSql } from "./change-filter.js";
 import { decodeKey, encodeKey } from "@protobase/schema/internal";

package/dist/records.d.ts

@@ -0,0 +1,5 @@
+import "./types.js";
+import "./registry.js";
+import "./sql-parts.js";
+import { FieldModel } from "@protobase/schema";
+import { Db } from "@protobase/query";

package/dist/rest/rest-context.js

@@ -1,5 +1,5 @@
-import { readTransaction, writeTransaction } from "../transactions.js";
 import { wakeDispatch } from "../changes/actor.js";
+import { readTransaction, writeTransaction } from "../transactions.js";
 import { callerSettings } from "./caller-settings.js";
 import { restError } from "./rest-error.js";
 //#region src/rest/rest-context.ts

package/dist/reveal-service.js

@@ -1,9 +1,9 @@
 import { badRequest, notFound } from "./problem.js";
 import { tenantScope } from "./tenant.js";
 import { requestAccess, requireOperation } from "./request-access.js";
+import { readTransaction } from "./transactions.js";
 import { bindingOf } from "./encryption/binding.js";
 import { fetchReadable } from "./fetch-readable.js";
-import { readTransaction } from "./transactions.js";
 import { openText } from "./encryption/envelope-open.js";
 import { encodeKey } from "@protobase/schema/internal";
 //#region src/reveal-service.ts

package/dist/routes/batch.js

@@ -1,6 +1,6 @@
+import { runBatch } from "../batch/run-batch.js";
 import { parseParams } from "../params.js";
 import { batchBody } from "../batch/schema.js";
-import { runBatch } from "../batch/run-batch.js";
 import { Hono } from "hono";
 //#region src/routes/batch.ts
 /**

package/dist/routes/collection.js

@@ -1,5 +1,5 @@
-import { listRecords } from "../list-service.js";
 import { runWrite } from "../write-pipeline.js";
+import { listRecords } from "../list-service.js";
 import { facets, numericHistogram, timeSeries } from "../aggregate-service.js";
 import { aggregate } from "../aggregate-groups.js";
 import { mapRecords } from "../map-service.js";

package/dist/routes/record.js

@@ -1,9 +1,9 @@
 import { notFound } from "../problem.js";
-import { keyFromPath } from "../key.js";
-import { deletedRows, selectedFields } from "../params.js";
 import { pickFields } from "../rows.js";
-import { readRecord } from "../read-service.js";
 import { runWrite } from "../write-pipeline.js";
+import { keyFromPath } from "../key.js";
+import { selectedFields } from "../params.js";
+import { readRecord } from "../read-service.js";
 import { auditOrigin } from "../audit/origin.js";
 import { returnPreference } from "./preferences.js";
 import { resolveTarget } from "./target.js";
@@ -22,8 +22,7 @@ const recordRoutes = (deps) => {
 		if (c.req.param("key").endsWith(":history")) return c.json(await readHistory(deps, entry, c.get("session"), keyFromPath(c, entry, ":history"), c.req.query()));
 		if (c.req.param("key").endsWith(":comments")) return c.json(await readComments(deps, entry, c.get("session"), keyFromPath(c, entry, ":comments"), c.req.query()));
 		if (c.req.param("key").endsWith(":mentionable")) return c.json(await mentionable(deps, entry, c.get("session"), keyFromPath(c, entry, ":mentionable"), c.req.query()));
-		const deleted = deletedRows(entry.model, c.req.query("show_deleted") === "true");
-		const found = await readRecord(deps, entry, c.get("session"), keyFromPath(c, entry), deleted);
+		const found = await readRecord(deps, entry, c.get("session"), keyFromPath(c, entry), c.req.query("show_deleted") === "true");
 		const columns = selectedFields({
 			...entry.model,
 			fields: Object.fromEntries(Object.keys(found.record).map((name) => [name, entry.model.fields[name]]))

package/dist/row-permissions.js

@@ -3,8 +3,8 @@ import { recordDecision } from "./request-access.js";
 import { aliasedColumn, columnId, scopeConditions, tableId, whereClause } from "./sql-parts.js";
 import { fetchRecord } from "./records.js";
 import { parentGuard } from "./parent-access.js";
-import { compileFilter } from "@protobase/query";
 import { sql } from "kysely";
+import { compileFilter } from "@protobase/query";
 //#region src/row-permissions.ts
 const keyOf = (access, row) => JSON.stringify(access.full.primaryKey.map((name) => String(row[name])));
 const matching = async (trx, access, rows, filter) => {