@protobase/server 0.48.0 → 0.49.0

package/dist/jobs/job-types.d.ts

@@ -19,7 +19,7 @@ export type JobContext = {
   signal: AbortSignal;
   /** Sends mail through the app's SMTP server (`PROTOBASE_SMTP_URL`, `PROTOBASE_MAIL_FROM`); `undefined` when the app has no mail. */
   mail?: Mailer;
-  /** Sends a notification as `sendNotification` does; `undefined` when the app has no `notifications()`. */
+  /** Sends a notification as `sendNotification` does; `undefined` when the app has no `notifications`. */
   sendNotification?: SendNotification;
 };
 export type JobOptions<Payload> = {

package/dist/mcp/mcp-authenticator.js

@@ -3,7 +3,7 @@ import { isMcpWrites } from "./mcp-writes.js";
 const hasAudiences = (authenticate) => typeof authenticate.forAudience === "function";
 const isMcpOptions = (options) => options === void 0 || options === false || typeof options === "object" && options !== null && !Array.isArray(options) && Object.entries(options).every(([name, value]) => value === void 0 || name === "sql" && typeof value === "boolean" || name === "writes" && isMcpWrites(value));
 /**
-* The authenticator of the MCP endpoint's tokens, when MCP is on (`createAuth({ mcp })`); none when the host serves its
+* The authenticator of the MCP endpoint's tokens, when MCP is on (`auth.mcp`); none when the host serves its
 * own (`options.mcp: false`). Stops the server at startup when `options.mcp` is neither `false` nor
 * `{ sql?: boolean; writes?: boolean | { resources?: string[]; rolesWithoutApproval?: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
 * another audience.
@@ -11,9 +11,9 @@ const isMcpOptions = (options) => options === void 0 || options === false || typ
 const mcpAuthenticator = (authenticate, mcp, options) => {
 	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources?: [<resource>, ...], rolesWithoutApproval?: [<role>, ...] } }");
 	if (options === false) return void 0;
-	if (options && !mcp) throw new Error("options.mcp needs createAuth({ mcp }) passed as auth");
+	if (options && !mcp) throw new Error("mcpEndpoint needs auth.mcp in protobase.config.ts");
 	if (!mcp) return void 0;
-	if (!hasAudiences(authenticate)) throw new Error("MCP needs authenticate from betterAuthAuthenticator, whose forAudience verifies the MCP tokens");
+	if (!hasAudiences(authenticate)) throw new Error("MCP needs the app's own authenticator, whose forAudience verifies the MCP tokens: leave `authenticate` a module of your own out of protobase.config.ts");
 	return authenticate.forAudience(mcp.resource);
 };
 //#endregion

package/dist/notifications/device-store-of.d.ts

@@ -4,7 +4,7 @@ import { AdminAuth } from "../better-auth/create-auth.js";
 import { Db } from "@protobase/query";
 //#region src/notifications/device-store-of.d.ts
 /**
- * The devices' store `notifications()` configures: the app's own `store`, or the devices table in `db`. An app that
+ * The devices' store `notifications` configures: the app's own `store`, or the devices table in `db`. An app that
  * deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
  */
 export declare const deviceStore: (db: Db, options?: NotificationsOptions) => DeviceStore;

package/dist/notifications/device-store-of.js

@@ -1,7 +1,7 @@
 import { postgresDeviceStore } from "./postgres-store.js";
 //#region src/notifications/device-store-of.ts
 /**
-* The devices' store `notifications()` configures: the app's own `store`, or the devices table in `db`. An app that
+* The devices' store `notifications` configures: the app's own `store`, or the devices table in `db`. An app that
 * deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
 */
 const deviceStore = (db, options = {}) => options.store ?? postgresDeviceStore(db, options);

package/dist/notifications/device-store.d.ts

@@ -2,7 +2,7 @@ import { Device, NewDevice } from "./device.js";
 //#region src/notifications/device-store.d.ts
 /**
  * Where each user's devices are kept: the Postgres default (`postgresDeviceStore`), or a store of the app's own passed
- * as `notifications({ store })`. Plain data in and out, so any store can implement it. Every method throws on an empty
+ * as `notifications.store`. Plain data in and out, so any store can implement it. Every method throws on an empty
  * user id, id or token, and none touches every device.
  */
 export type DeviceStore = {

package/dist/notifications/device-store.js

@@ -10,7 +10,7 @@ const methods = [
 /** The store, checked to have every method; a missing one is an error naming it. */
 const checkDeviceStore = (store) => {
 	const missing = methods.find((method) => typeof store[method] !== "function");
-	if (missing !== void 0) throw new Error(`notifications({ store }): the device store has no ${missing} method`);
+	if (missing !== void 0) throw new Error(`notifications.store: the device store has no ${missing} method`);
 	return store;
 };
 /** The value, refused when empty: no store call may be read as "every device". */

package/dist/notifications/history-store-of.d.ts

@@ -4,7 +4,7 @@ import { AdminAuth } from "../better-auth/create-auth.js";
 import { Db } from "@protobase/query";
 //#region src/notifications/history-store-of.d.ts
 /**
- * The history's store `notifications()` configures: the app's own `historyStore`, or the history table in `db`. An app
+ * The history's store `notifications` configures: the app's own `historyStore`, or the history table in `db`. An app
  * that deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
  */
 export declare const historyStore: (db: Db, options?: NotificationsOptions) => HistoryStore;

package/dist/notifications/history-store-of.js

@@ -1,7 +1,7 @@
 import { postgresHistoryStore } from "./postgres-history-store.js";
 //#region src/notifications/history-store-of.ts
 /**
-* The history's store `notifications()` configures: the app's own `historyStore`, or the history table in `db`. An app
+* The history's store `notifications` configures: the app's own `historyStore`, or the history table in `db`. An app
 * that deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
 */
 const historyStore = (db, options = {}) => options.historyStore ?? postgresHistoryStore(db, options);

package/dist/notifications/history-store.d.ts

@@ -4,7 +4,7 @@ import { HistoryPosition, NewNotification, StoredNotification } from "./history.
 export declare const maxUnreadCount = 100;
 /**
  * Where each user's inbox notifications are kept: the Postgres default (`postgresHistoryStore`), or a store of the
- * app's own passed as `notifications({ historyStore })`. Plain data in and out, so any store can implement it. Every
+ * app's own passed as `notifications.historyStore`. Plain data in and out, so any store can implement it. Every
  * method takes the user and touches that user's entries alone; each throws on an empty user id or id.
  */
 export type HistoryStore = {

package/dist/notifications/history-store.js

@@ -12,7 +12,7 @@ const methods = [
 /** The store, checked to have every method; a missing one is an error naming it. */
 const checkHistoryStore = (store) => {
 	const missing = methods.find((method) => typeof store[method] !== "function");
-	if (missing !== void 0) throw new Error(`notifications({ historyStore }): the history store has no ${missing} method`);
+	if (missing !== void 0) throw new Error(`notifications.historyStore: the history store has no ${missing} method`);
 	return store;
 };
 /** The most entries `list` gives at once. */

package/dist/notifications/options.d.ts

@@ -8,7 +8,7 @@ export type DeviceColumn = (typeof deviceColumns)[number];
 /** The columns of the history table, by the name Protobase gives them. */
 export declare const historyColumns: readonly ["id", "user_id", "title", "body", "url", "data", "created_at", "read_at"];
 export type HistoryColumn = (typeof historyColumns)[number];
-/** Notifications, turned on with `extends: [notifications()]`. */
+/** Notifications, turned on with `notifications: {}` in `protobase.config.ts`. */
 export type NotificationsOptions = {
   /** The bell in the top bar; default true. `false` keeps only the backend. */
   ui?: boolean;
@@ -34,4 +34,6 @@ export type NotificationsOptions = {
    */
   senders?: PushSender[];
 };
+/** The options, checked as `notifications` takes them: the names, given stores' methods and the senders given. */
+export declare const checkNotificationsOptions: (options: NotificationsOptions) => NotificationsOptions;
 //#endregion

package/dist/notifications/options.js

@@ -51,7 +51,7 @@ const historyNames = (options = {}) => ({
 	table: checkedName("history.table", options.history?.table ?? "history"),
 	columns: columnNames("history", historyColumns, options.history?.columns)
 });
-/** The options, checked as `notifications()` takes them: the names, given stores' methods and the senders given. */
+/** The options, checked as `notifications` takes them: the names, given stores' methods and the senders given. */
 const checkNotificationsOptions = (options) => {
 	if (options.ui !== void 0 && typeof options.ui !== "boolean") throw new Error("notifications ui is true or false");
 	notificationsNames(options);

package/dist/notifications/schema.d.ts

@@ -3,12 +3,12 @@ import { AdminAuth } from "../better-auth/create-auth.js";
 import { Db } from "@protobase/query";
 //#region src/notifications/schema.d.ts
 /**
- * The SQL that adds the tables `notifications()` keeps devices and each user's history in, under the names its options
+ * The SQL that adds the tables `notifications` keeps devices and each user's history in, under the names its options
  * give; with `auth`, their user columns point at auth's users table. Each table is left out when it exists or a store
  * of the app's own replaces it, and an existing devices table without its session column gets that column;
  * `undefined` when nothing is left.
  */
 export declare const notificationsMigration: (db: Db, options?: NotificationsOptions, auth?: AdminAuth) => Promise<string | undefined>;
-/** Refuses to start while the devices or the history table lacks what `notifications()` needs, naming it. */
+/** Refuses to start while the devices or the history table lacks what `notifications` needs, naming it. */
 export declare const checkNotificationsSchema: (db: Db, options?: NotificationsOptions, auth?: AdminAuth) => Promise<void>;
 //#endregion

package/dist/notifications/schema.js

@@ -13,7 +13,7 @@ const authUsersTable = (auth) => ({
 const regclass = async (db, name) => (await sql`select to_regclass(${name})::oid as oid`.execute(db)).rows[0].oid;
 const userIdType = async (db, users) => {
 	const oid = await regclass(db, qualified(users));
-	if (oid === null) throw new Error(`notifications(): auth's users table ${qualified(users)} is not in the app's database, so devices cannot point at it`);
+	if (oid === null) throw new Error(`notifications: auth's users table ${qualified(users)} is not in the app's database, so devices cannot point at it`);
 	const { rows } = await sql`select format_type(atttypid, atttypmod) as type from pg_attribute where attrelid = ${oid} and attname = 'id'`.execute(db);
 	return rows[0].type;
 };
@@ -26,7 +26,7 @@ const lacksSessionColumn = async (db, names) => {
 	return oid !== null && !(await columnsOf(db, oid)).some((row) => row.name === names.columns.session_id);
 };
 /**
-* The SQL that adds the tables `notifications()` keeps devices and each user's history in, under the names its options
+* The SQL that adds the tables `notifications` keeps devices and each user's history in, under the names its options
 * give; with `auth`, their user columns point at auth's users table. Each table is left out when it exists or a store
 * of the app's own replaces it, and an existing devices table without its session column gets that column;
 * `undefined` when nothing is left.
@@ -50,9 +50,9 @@ const notificationsMigration = async (db, options = {}, auth) => {
 	];
 	return `${[...new Set(statements)].join(";\n\n")};`;
 };
-const missingTable = (what, table) => /* @__PURE__ */ new Error(`The ${what} table ${table} of notifications() is missing. Write it as a migration with \`${migrationCommand}\`, apply it with the project's migrations, then start again.`);
+const missingTable = (what, table) => /* @__PURE__ */ new Error(`The ${what} table ${table} of notifications is missing. Write it as a migration with \`${migrationCommand}\`, apply it with the project's migrations, then start again.`);
 /**
-* Refuses to start while the devices table lacks what `notifications()` needs, naming it: the table, each column under
+* Refuses to start while the devices table lacks what `notifications` needs, naming it: the table, each column under
 * its configured name, a unique index on the token alone, which moving a device relies on, and with `auth` a foreign key
 * from the user column that deletes a user's devices with the user. Nothing to check with a store of the app's own.
 */
@@ -65,7 +65,7 @@ const checkDevicesTable = async (db, options, users) => {
 	const found = await columnsOf(db, oid);
 	const numOf = (column) => found.find((row) => row.name === names.columns[column])?.num;
 	const missing = Object.keys(names.columns).find((column) => numOf(column) === void 0);
-	if (missing !== void 0) throw new Error(`The devices table ${devices} has no column "${names.columns[missing]}": add it, or name the table's own with notifications({ devices: { columns: { ${missing}: ... } } })`);
+	if (missing !== void 0) throw new Error(`The devices table ${devices} has no column "${names.columns[missing]}": add it, or name the table's own with notifications: { devices: { columns: { ${missing}: ... } } } in protobase.config.ts`);
 	if (!await uniqueOn(db, oid, numOf("token"))) throw new Error(`The devices table ${devices} needs a unique index on its token column "${names.columns.token}" alone, which moving a device to the user who registers it relies on`);
 	if (users && !await cascadesFrom(db, oid, numOf("user_id"), users)) throw new Error(`The devices table ${devices} needs a foreign key from "${names.columns.user_id}" to ${qualified(users)} with on delete cascade, so a deleted user's devices go with them`);
 };
@@ -79,10 +79,10 @@ const checkHistoryTable = async (db, options, users) => {
 	const found = await columnsOf(db, oid);
 	const numOf = (column) => found.find((row) => row.name === names.columns[column])?.num;
 	const missing = Object.keys(names.columns).find((column) => numOf(column) === void 0);
-	if (missing !== void 0) throw new Error(`The history table ${history} has no column "${names.columns[missing]}": add it, or name the table's own with notifications({ history: { columns: { ${missing}: ... } } })`);
+	if (missing !== void 0) throw new Error(`The history table ${history} has no column "${names.columns[missing]}": add it, or name the table's own with notifications: { history: { columns: { ${missing}: ... } } } in protobase.config.ts`);
 	if (users && !await cascadesFrom(db, oid, numOf("user_id"), users)) throw new Error(`The history table ${history} needs a foreign key from "${names.columns.user_id}" to ${qualified(users)} with on delete cascade, so a deleted user's history goes with them`);
 };
-/** Refuses to start while the devices or the history table lacks what `notifications()` needs, naming it. */
+/** Refuses to start while the devices or the history table lacks what `notifications` needs, naming it. */
 const checkNotificationsSchema = async (db, options = {}, auth) => {
 	const users = auth && authUsersTable(auth);
 	await checkDevicesTable(db, options, users);

package/dist/notifications/send-notification.js

@@ -12,7 +12,7 @@ import { pushJobName } from "./push-job-name.js";
 const sendNotification = async (db, to, message) => {
 	const send = checkedSend(to, message);
 	const job = currentJobs().definition(pushJobName);
-	if (!job) throw new Error("Notifications are off: add extends: [notifications()] to protobase.config.ts to send them");
+	if (!job) throw new Error("Notifications are off: add notifications: {} to protobase.config.ts to send them");
 	await job.enqueue(db, send);
 };
 //#endregion

package/dist/notifications/sender.d.ts

@@ -14,7 +14,7 @@ export type PushAnswer = {
 };
 /**
  * Delivers notifications to the devices of its `kinds`, through their push service: the built-in Web Push sender, or
- * one of the app's own passed as `notifications({ senders })`, typically from a package. `send` takes a message and a
+ * one of the app's own passed as `notifications.senders`, typically from a package. `send` takes a message and a
  * batch of devices of those kinds only, and answers each device by its id. A sender for `web` devices names the VAPID
  * `publicKey` browsers subscribe with, which every client may read.
  */

package/dist/notifications/sender.js

@@ -2,7 +2,7 @@ import { deviceKinds } from "./device.js";
 import { isPublicKey } from "./web-push/keys.js";
 //#region src/notifications/sender.ts
 const checkSender = (sender, index, claimed) => {
-	const name = `notifications({ senders }): sender ${index}`;
+	const name = `notifications.senders: sender ${index}`;
 	if (typeof sender !== "object" || sender === null || typeof sender.send !== "function") throw new Error(`${name} has no send method`);
 	if (!Array.isArray(sender.kinds) || sender.kinds.length === 0) throw new Error(`${name} names no kinds: ${deviceKinds.join(", ")}`);
 	for (const kind of sender.kinds) {
@@ -14,7 +14,7 @@ const checkSender = (sender, index, claimed) => {
 };
 /** The senders, checked: each with a send method and kinds, no kind delivered by two, and a public key when one is named. */
 const checkSenders = (senders) => {
-	if (!Array.isArray(senders)) throw new Error("notifications({ senders }) is a list of senders");
+	if (!Array.isArray(senders)) throw new Error("notifications.senders is a list of senders");
 	const claimed = /* @__PURE__ */ new Set();
 	senders.forEach((sender, index) => checkSender(sender, index, claimed));
 	return senders;

package/dist/notifications/senders-of.d.ts

@@ -2,7 +2,7 @@ import { PushSender } from "./sender.js";
 import { NotificationsOptions } from "./options.js";
 //#region src/notifications/senders-of.d.ts
 /**
- * The senders `notifications()` delivers with: the app's own `senders`, which replace the built-in ones, or the
+ * The senders `notifications` delivers with: the app's own `senders`, which replace the built-in ones, or the
  * built-in ones whose environment is set. Each comes guarded (see `guardedSender`): the code that sends calls them only
  * through what this returns. A VAPID variable that is wrong stops startup.
  */

package/dist/notifications/senders-of.js

@@ -8,7 +8,7 @@ const builtInSenders = (env) => {
 	return vapid ? [webPushSender(vapid)] : [];
 };
 /**
-* The senders `notifications()` delivers with: the app's own `senders`, which replace the built-in ones, or the
+* The senders `notifications` delivers with: the app's own `senders`, which replace the built-in ones, or the
 * built-in ones whose environment is set. Each comes guarded (see `guardedSender`): the code that sends calls them only
 * through what this returns. A VAPID variable that is wrong stops startup.
 */

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.48.0";
+var version = "0.49.0";
 //#endregion
 export { version };

package/dist/webhooks/subscription.d.ts

@@ -89,4 +89,5 @@ export type SubscriptionDefinition = {
  * empty.
  */
 export declare const subscription: (name: string, options: SubscriptionOptions) => SubscriptionDefinition;
+export declare const isSubscription: (value: unknown) => value is SubscriptionDefinition;
 //#endregion

package/dist/webhooks/table/options.d.ts

@@ -1,6 +1,6 @@
 import { TenantValue } from "../../types.js";
 //#region src/webhooks/table/options.d.ts
-/** Webhook subscriptions made in the admin app (`extends: [webhooks()]`), kept in a table of the app's database. */
+/** Webhook subscriptions made in the admin app (`webhooks: {}`), kept in a table of the app's database. */
 export type WebhooksOptions = {
   /** The schema of the subscriptions table and the deliveries view; default `webhooks`. */
   schema?: string;

package/dist/webhooks/table/schema.d.ts

@@ -3,11 +3,11 @@ import { WebhooksOptions } from "./options.js";
 import { Db } from "@protobase/query";
 //#region src/webhooks/table/schema.d.ts
 /**
- * The SQL that brings the `webhooks` schema to what `webhooks()` needs: the subscriptions table, its commands, the
+ * The SQL that brings the `webhooks` schema to what `webhooks` needs: the subscriptions table, its commands, the
  * deliveries view and, with `deliveryLog`, the log table. `undefined` when current. Needs the jobs schema, which the
  * deliveries view reads. Tables are never dropped.
  */
 export declare const webhooksMigration: (db: Db, options?: WebhooksOptions, events?: EventsOptions) => Promise<string | undefined>;
-/** Refuses to go on while the `webhooks` schema lacks what `webhooks()` needs; the project's migrations add it. */
+/** Refuses to go on while the `webhooks` schema lacks what `webhooks` needs; the project's migrations add it. */
 export declare const checkWebhooksSchema: (db: Db, options?: WebhooksOptions) => Promise<void>;
 //#endregion

package/dist/webhooks/table/schema.js

@@ -17,7 +17,7 @@ const readWebhooksSchema = async (db, schema) => {
 	};
 };
 /**
-* The SQL that brings the `webhooks` schema to what `webhooks()` needs: the subscriptions table, its commands, the
+* The SQL that brings the `webhooks` schema to what `webhooks` needs: the subscriptions table, its commands, the
 * deliveries view and, with `deliveryLog`, the log table. `undefined` when current. Needs the jobs schema, which the
 * deliveries view reads. Tables are never dropped.
 */
@@ -33,7 +33,7 @@ const webhooksMigration = async (db, options = {}, events) => {
 		...needsLog ? [deliveryLogSql(schema)] : []
 	].join(";\n\n")};`;
 };
-/** Refuses to go on while the `webhooks` schema lacks what `webhooks()` needs; the project's migrations add it. */
+/** Refuses to go on while the `webhooks` schema lacks what `webhooks` needs; the project's migrations add it. */
 const checkWebhooksSchema = async (db, options = {}) => {
 	const schema = webhooksSchema(options);
 	const found = await readWebhooksSchema(db, schema);

package/dist/webhooks/table/webhook-table.js

@@ -4,12 +4,12 @@ import { checkWebhookUrl } from "./address-check.js";
 import { tableSubscriptions } from "./table-subscriptions.js";
 //#region src/webhooks/table/webhook-table.ts
 /**
-* What `createAdmin` needs for the subscriptions of `webhooks()`: the table, the owners' current roles (from Better Auth
+* What `createAdmin` needs for the subscriptions of `webhooks`: the table, the owners' current roles (from Better Auth
 * unless the options say otherwise) and, unless allowed, the check that keeps URLs off private addresses.
 */
 const webhookTable = (options, auth) => {
 	const ownerRoles = options.ownerRoles ?? (auth && betterAuthOwnerRoles(auth));
-	if (!ownerRoles) throw new Error("webhooks() delivers as each subscription's owner, with their current roles: pass `auth` (Better Auth) or `ownerRoles` to webhooks()");
+	if (!ownerRoles) throw new Error("webhooks deliver as each subscription's owner, with their current roles: give the config `auth` (Better Auth), or `webhooks.ownerRoles`");
 	return {
 		subscriptions: tableSubscriptions({
 			schema: webhooksSchema(options),

package/dist/webhooks/table/webhooks-module.d.ts

@@ -0,0 +1,108 @@
+import { WebhooksOptions } from "./options.js";
+//#region src/webhooks/table/webhooks-module.d.ts
+/**
+ * What `webhooks` in `protobase.config.ts` adds to the app's resources: the Webhook subscriptions and Webhook deliveries
+ * pages, over a `webhooks` schema that `protobase migration` writes, and the delivery log with `deliveryLog`. Who may
+ * create subscriptions is the resources' access (`webhook_subscriptions.create`, ...); each delivers as its owner.
+ */
+export declare const webhooksModule: (options?: WebhooksOptions) => {
+  webhookDeliveryLog?: import("@protobase/schema").ResourceBuilder<{
+    readonly id: import("@protobase/schema").Field<string>;
+    readonly subscription_id: import("@protobase/schema").Field<string | number>;
+    readonly tenant_id: import("@protobase/schema").Field<string | null>;
+    readonly event_id: import("@protobase/schema").Field<string>;
+    readonly event_type: import("@protobase/schema").Field<string>;
+    readonly status: import("@protobase/schema").Field<"failed" | "delivered">;
+    readonly attempt: import("@protobase/schema").Field<number>;
+    readonly status_code: import("@protobase/schema").Field<number | null>;
+    readonly response: import("@protobase/schema").Field<string | null>;
+    readonly duration_ms: import("@protobase/schema").Field<number>;
+    readonly at: import("@protobase/schema").Field<string>;
+  }, import("@protobase/schema").Ref<"id", string>> | undefined;
+  webhookDeliveryLogView?: import("@protobase/schema").ViewBuilder<import("@protobase/schema").ResourceBuilder<{
+    readonly id: import("@protobase/schema").Field<string>;
+    readonly subscription_id: import("@protobase/schema").Field<string | number>;
+    readonly tenant_id: import("@protobase/schema").Field<string | null>;
+    readonly event_id: import("@protobase/schema").Field<string>;
+    readonly event_type: import("@protobase/schema").Field<string>;
+    readonly status: import("@protobase/schema").Field<"failed" | "delivered">;
+    readonly attempt: import("@protobase/schema").Field<number>;
+    readonly status_code: import("@protobase/schema").Field<number | null>;
+    readonly response: import("@protobase/schema").Field<string | null>;
+    readonly duration_ms: import("@protobase/schema").Field<number>;
+    readonly at: import("@protobase/schema").Field<string>;
+  }, import("@protobase/schema").Ref<"id", string>>> | undefined;
+  webhookSubscriptions: import("@protobase/schema").ResourceBuilder<{
+    readonly id: import("@protobase/schema").Field<string>;
+    readonly name: import("@protobase/schema").Field<string>;
+    readonly events: import("@protobase/schema").Field<string>;
+    readonly url: import("@protobase/schema").Field<string>;
+    readonly filter: import("@protobase/schema").Field<string | null>;
+    readonly headers: import("@protobase/schema").Field<import("zod").JSONType>;
+    readonly payload: import("@protobase/schema").Field<"full" | "thin">;
+    readonly enabled: import("@protobase/schema").Field<boolean>;
+    readonly secret: import("@protobase/schema").Field<string>;
+    readonly previous_secret: null;
+    readonly previous_secret_until: null;
+    readonly tenant_id: import("@protobase/schema").Field<string | null>;
+    readonly owner_id: import("@protobase/schema").Field<string | null>;
+    readonly disabled_reason: import("@protobase/schema").Field<string | null>;
+    readonly last_success_at: import("@protobase/schema").Field<string | null>;
+    readonly failing_since: import("@protobase/schema").Field<string | null>;
+    readonly created_at: import("@protobase/schema").Field<string>;
+    readonly updated_at: import("@protobase/schema").Field<string>;
+    readonly rotate_secret: import("@protobase/schema").Field<boolean>;
+    readonly send_test: import("@protobase/schema").Field<boolean>;
+    readonly resend_failed: import("@protobase/schema").Field<boolean>;
+  }, import("@protobase/schema").Ref<"id", string>>;
+  webhookSubscriptionsView: import("@protobase/schema").ViewBuilder<import("@protobase/schema").ResourceBuilder<{
+    readonly id: import("@protobase/schema").Field<string>;
+    readonly name: import("@protobase/schema").Field<string>;
+    readonly events: import("@protobase/schema").Field<string>;
+    readonly url: import("@protobase/schema").Field<string>;
+    readonly filter: import("@protobase/schema").Field<string | null>;
+    readonly headers: import("@protobase/schema").Field<import("zod").JSONType>;
+    readonly payload: import("@protobase/schema").Field<"full" | "thin">;
+    readonly enabled: import("@protobase/schema").Field<boolean>;
+    readonly secret: import("@protobase/schema").Field<string>;
+    readonly previous_secret: null;
+    readonly previous_secret_until: null;
+    readonly tenant_id: import("@protobase/schema").Field<string | null>;
+    readonly owner_id: import("@protobase/schema").Field<string | null>;
+    readonly disabled_reason: import("@protobase/schema").Field<string | null>;
+    readonly last_success_at: import("@protobase/schema").Field<string | null>;
+    readonly failing_since: import("@protobase/schema").Field<string | null>;
+    readonly created_at: import("@protobase/schema").Field<string>;
+    readonly updated_at: import("@protobase/schema").Field<string>;
+    readonly rotate_secret: import("@protobase/schema").Field<boolean>;
+    readonly send_test: import("@protobase/schema").Field<boolean>;
+    readonly resend_failed: import("@protobase/schema").Field<boolean>;
+  }, import("@protobase/schema").Ref<"id", string>>>;
+  webhookDeliveries: import("@protobase/schema").ResourceBuilder<{
+    readonly id: import("@protobase/schema").Field<string>;
+    readonly subscription_id: import("@protobase/schema").Field<string | number>;
+    readonly tenant_id: import("@protobase/schema").Field<string | null>;
+    readonly event_type: import("@protobase/schema").Field<string>;
+    readonly event_id: import("@protobase/schema").Field<string>;
+    readonly status: import("@protobase/schema").Field<"waiting" | "failed">;
+    readonly attempt: import("@protobase/schema").Field<number>;
+    readonly next_attempt: import("@protobase/schema").Field<string | null>;
+    readonly last_error: import("@protobase/schema").Field<string | null>;
+    readonly created_at: import("@protobase/schema").Field<string>;
+    readonly resend: import("@protobase/schema").Field<boolean>;
+  }, import("@protobase/schema").Ref<"id", string>>;
+  webhookDeliveriesView: import("@protobase/schema").ViewBuilder<import("@protobase/schema").ResourceBuilder<{
+    readonly id: import("@protobase/schema").Field<string>;
+    readonly subscription_id: import("@protobase/schema").Field<string | number>;
+    readonly tenant_id: import("@protobase/schema").Field<string | null>;
+    readonly event_type: import("@protobase/schema").Field<string>;
+    readonly event_id: import("@protobase/schema").Field<string>;
+    readonly status: import("@protobase/schema").Field<"waiting" | "failed">;
+    readonly attempt: import("@protobase/schema").Field<number>;
+    readonly next_attempt: import("@protobase/schema").Field<string | null>;
+    readonly last_error: import("@protobase/schema").Field<string | null>;
+    readonly created_at: import("@protobase/schema").Field<string>;
+    readonly resend: import("@protobase/schema").Field<boolean>;
+  }, import("@protobase/schema").Ref<"id", string>>>;
+};
+//#endregion

package/dist/webhooks/table/webhooks-module.js

@@ -0,0 +1,11 @@
+import { webhooksSchema } from "./options.js";
+import { webhookResources } from "@protobase/schema/internal";
+//#region src/webhooks/table/webhooks-module.ts
+/**
+* What `webhooks` in `protobase.config.ts` adds to the app's resources: the Webhook subscriptions and Webhook deliveries
+* pages, over a `webhooks` schema that `protobase migration` writes, and the delivery log with `deliveryLog`. Who may
+* create subscriptions is the resources' access (`webhook_subscriptions.create`, ...); each delivers as its owner.
+*/
+const webhooksModule = (options = {}) => webhookResources(webhooksSchema(options), { deliveryLog: Boolean(options.deliveryLog) });
+//#endregion
+export { webhooksModule };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.48.0",
+  "version": "0.49.0",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -19,7 +19,8 @@
     "./auth-store": "./dist/auth-store.js",
     "./config-exports": "./dist/config-exports.js",
     "./email": "./dist/email.js",
-    "./vapid": "./dist/vapid.js"
+    "./vapid": "./dist/vapid.js",
+    "./internal": "./dist/internal.js"
   },
   "types": "./dist/index.d.ts",
   "files": [
@@ -39,9 +40,9 @@
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.48.0",
-    "@protobase/query": "0.48.0",
-    "@protobase/schema": "0.48.0",
+    "@protobase/layout": "0.49.0",
+    "@protobase/query": "0.49.0",
+    "@protobase/schema": "0.49.0",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",

package/dist/notifications/plugin.d.ts

@@ -1,13 +0,0 @@
-import { NotificationsOptions } from "./options.js";
-import { ProjectConfig } from "../project-config.js";
-//#region src/notifications/plugin.d.ts
-/**
- * Notifications: `extends: [notifications()]` in `protobase.config.ts`. It keeps each user's devices, in the
- * `notifications.devices` table that `protobase migration` writes or in the `store` given, and serves the endpoints
- * through which a signed-in user registers and removes their own (`devicesPath`). It keeps each user's inbox
- * notifications in the `notifications.history` table or the `historyStore` given, and serves the endpoints through which
- * a signed-in user lists theirs and marks them read (`historyPath`). It delivers through `senders`, by default the
- * built-in ones whose environment is set (see `notificationSenders`).
- */
-export declare const notifications: (options?: NotificationsOptions) => ProjectConfig;
-//#endregion

package/dist/notifications/plugin.js

@@ -1,16 +0,0 @@
-import { checkNotificationsOptions } from "./options.js";
-//#region src/notifications/plugin.ts
-/**
-* Notifications: `extends: [notifications()]` in `protobase.config.ts`. It keeps each user's devices, in the
-* `notifications.devices` table that `protobase migration` writes or in the `store` given, and serves the endpoints
-* through which a signed-in user registers and removes their own (`devicesPath`). It keeps each user's inbox
-* notifications in the `notifications.history` table or the `historyStore` given, and serves the endpoints through which
-* a signed-in user lists theirs and marks them read (`historyPath`). It delivers through `senders`, by default the
-* built-in ones whose environment is set (see `notificationSenders`).
-*/
-const notifications = (options = {}) => ({
-	name: "protobase-notifications",
-	notifications: checkNotificationsOptions(options)
-});
-//#endregion
-export { notifications };

package/dist/project-config.d.ts

@@ -1,54 +0,0 @@
-import { MobileConfig } from "./mobile-config.js";
-import { AppIdentity } from "./app-identity.js";
-import { EventsOptions } from "./changes/events-options.js";
-import { Authenticator } from "./types.js";
-import { HistoryOptions } from "./history/options.js";
-import { WebhooksOptions } from "./webhooks/table/options.js";
-import { NotificationsOptions } from "./notifications/options.js";
-import { FilesOptions } from "./files/options.js";
-import { FunctionSource } from "./functions/define-function.js";
-import { AdminOptions } from "./admin-options.js";
-import { AdminAuth } from "./better-auth/create-auth.js";
-import { Db } from "@protobase/query";
-//#region src/project-config.d.ts
-/** What `protobase.config.ts` may default-export. Everything is optional. */
-export type ProjectConfig = {
-  /** Names the config in errors, such as two configs defining the same tool; an extension should set it. */
-  name?: string;
-  /** Configs this one extends: merged in order before it (see `mergeConfig`). */
-  extends?: ProjectConfig[];
-  /** The config module, e.g. `import * as config from './config'`; default: ./config/index.ts and ./config/*\/ui.ts. */
-  config?: Record<string, unknown>;
-  db?: Db;
-  authenticate?: Authenticator;
-  /** A Better Auth instance; createAdmin mounts its routes under /api/auth. */
-  auth?: AdminAuth;
-  /** The API functions, each served at `/api/functions/<name>`; default: one per file in ./functions. */
-  functions?: Record<string, FunctionSource>;
-  /** Where file fields keep their bytes: providers by name, retention and the signing secret (see `FilesOptions`). */
-  files?: FilesOptions;
-  /** Where the changes that resources' events are raised from are captured (see `EventsOptions`). */
-  events?: EventsOptions;
-  /** How long the history of resources with `.history()` is kept (see `HistoryOptions`). */
-  history?: HistoryOptions;
-  /** Webhook subscriptions made in the admin app; set by `extends: [webhooks()]` (see `WebhooksOptions`). */
-  webhooks?: WebhooksOptions;
-  /** Notifications and each user's devices; set by `extends: [notifications()]` (see `NotificationsOptions`). */
-  notifications?: NotificationsOptions;
-  /** The module of the app's jobs, e.g. `import * as jobs from './config/jobs'`: every `defineJob` it exports. */
-  jobs?: Record<string, unknown>;
-  /** The app's iOS and Android build (see `MobileConfig`): `protobase mobile` needs it, and the API answers the app's origins. */
-  mobile?: MobileConfig;
-  /** The installed app's colours (see `AppIdentity`), which its web manifest carries. */
-  app?: AppIdentity;
-  options?: AdminOptions;
-};
-/** Typed identity, for `export default defineConfig({ extends: [...], config, auth, ... })` in `protobase.config.ts`. */
-export declare const defineConfig: (config: ProjectConfig) => ProjectConfig;
-/**
- * One config from several, each after the ones it `extends`, the last being the app's own. Named things are all kept:
- * resources, views and pages of the config modules, functions, jobs, assistant tools, file providers; one name defined by two configs is an error naming
- * both. Write hooks run in the same order. Every other value is the last config's that sets it, so the app's own wins.
- */
-export declare const mergeConfig: (...configs: ProjectConfig[]) => ProjectConfig;
-//#endregion