@protobase/server 0.48.0 → 0.49.1

package/dist/index.js

@@ -26,7 +26,7 @@ import { apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { jwtAuthenticator, jwtVerifier } from "./auth/jwt.js";
 import { realtimeLimits } from "./realtime/realtime-limits.js";
 import { objectKey } from "./storage/object-key.js";
-import { defaultAppName, shownAppName } from "./app-name.js";
+import { appNameOver, defaultAppName, shownAppName } from "./app-name.js";
 import { supabasePath } from "./supabase-paths.js";
 import { goTruePath } from "./gotrue/keys.js";
 import { defaultSignInPolicy, signInPolicyMethods } from "./better-auth/sign-in-policy.js";
@@ -34,7 +34,7 @@ import { parseRoles } from "./better-auth/parse-roles.js";
 import { passwordLength } from "./better-auth/new-account-password.js";
 import { readOperatorSettings } from "./better-auth/operator-provider.js";
 import { readPlatformSignIn } from "./better-auth/platform-sign-in.js";
-import { createAuth, normalizeRoles } from "./better-auth/create-auth.js";
+import { normalizeRoles } from "./better-auth/create-auth.js";
 import { mcpApprovals } from "./mcp/mcp-approval-store.js";
 import { mcpToolContext } from "./mcp/mcp-context.js";
 import { mcpGate, sessionOf } from "./mcp/mcp-gate.js";
@@ -75,8 +75,8 @@ import { NotificationSendError, maxMessageBytes, maxRecipients } from "./notific
 import { errorReportingSettings, errorReportingVariable } from "./error-reporting/error-reporting-settings.js";
 import { storageCleanupSchedule } from "./files/cleanup-schedule.js";
 import { limitedFileStore, storeUsage } from "./files/limits.js";
-import { localFileStore, localFiles } from "./files/local-files.js";
-import { s3FileStore, s3Files } from "./files/s3-files.js";
+import { localFileStore } from "./files/local-files.js";
+import { s3FileStore } from "./files/s3-files.js";
 import { storageProvider } from "./files/storage-provider.js";
 import { isBackgroundWork, runInBackground, wantsLongQueries } from "./background-work.js";
 import { capSocketMessages, honorSocketMessageCaps, socketMessageCapOf } from "./functions/socket-message-cap.js";
@@ -89,22 +89,19 @@ import { pngIcons } from "./web-app/app-icons.js";
 import { webManifestPath } from "./web-app/web-manifest-route.js";
 import { createAdmin } from "./create-admin.js";
 import { handleDroppedConnections } from "./dropped-connections.js";
-import { appPool, longQueryPool, poolWaitMs, readDbConnections } from "./app-pool.js";
+import { poolWaitMs, readDbConnections } from "./app-pool.js";
 import { configExports } from "./resource-source.js";
 import { checkViewQueries } from "./check-view-queries.js";
-import { defineConfig, mergeConfig } from "./project-config.js";
 import { withTrustedApps } from "./better-auth/app-tokens.js";
-import { betterAuthAuthenticator, betterAuthTokens } from "./better-auth/authenticator.js";
+import { betterAuthTokens } from "./better-auth/authenticator.js";
 import { issueToken, maxTokenTtlSeconds } from "./better-auth/tokens.js";
 import { authSchemaMigration, checkAuthSchema } from "./better-auth/auth-schema.js";
 import { authSchemaDrift } from "./better-auth/store/drift.js";
 import { authStoreTables } from "./better-auth/auth-tables.js";
 import { checkResourcesOutsideAuthStore } from "./better-auth/store/resources-outside.js";
 import { checkComputed, computedMigration } from "./computed/computed-schema.js";
-import { webhooks } from "./webhooks/table/plugin.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkAi } from "./ai/check-ai.js";
-import { notifications } from "./notifications/plugin.js";
 import { checkNotificationsSchema, notificationsMigration } from "./notifications/schema.js";
 import { sendNotification } from "./notifications/send-notification.js";
 import { maxWidgetPropsBytes, widget } from "./assistant/widget.js";
@@ -119,10 +116,11 @@ import { storeFile } from "./files/store-file.js";
 import { createFileCleanup } from "./files/file-cleanup.js";
 import { createEncryptionTools } from "./encryption/tools.js";
 import { aspectRatio, fileSize, fileType, imageSize, processor } from "./files/processors.js";
+import { enqueueJob } from "./jobs/declared-job.js";
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { composeRelease, releaseManifest } from "./mobile-release/release.js";
 import { mobileReleaseApp } from "./mobile-release/release-app.js";
 import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
-export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MissingCredentials, ModelError, NotificationSendError, PushMessageError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appPool, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthAuthenticator, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createAuth, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineConfig, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, deviceIdParam, deviceStore, devicesPath, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, localFiles, longQueryPool, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, mergeConfig, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notifications, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, s3Files, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooks, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MissingCredentials, ModelError, NotificationSendError, PushMessageError, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/internal.d.ts

@@ -0,0 +1,13 @@
+import { checkNotificationsOptions } from "./notifications/options.js";
+import { isSubscription } from "./webhooks/subscription.js";
+import { appPool, longQueryPool } from "./app-pool.js";
+import { AppAuthInput, appAuthOptions, buildAppAuth } from "./better-auth/auth-settings.js";
+import { betterAuthAuthenticator } from "./better-auth/authenticator.js";
+import { buildAuthenticator } from "./better-auth/authenticate-settings.js";
+import { localFiles } from "./files/local-files.js";
+import { s3Files } from "./files/s3-files.js";
+import { fileProviderOf } from "./files/provider-settings.js";
+import { declaredJob } from "./jobs/declared-job.js";
+import { AuthPlugins, buildAuth, createAuth, loadAuthPlugins } from "./better-auth/create-auth.js";
+import { webhooksModule } from "./webhooks/table/webhooks-module.js";
+export { type AppAuthInput, type AuthPlugins, appAuthOptions, appPool, betterAuthAuthenticator, buildAppAuth, buildAuth, buildAuthenticator, checkNotificationsOptions, createAuth, declaredJob, fileProviderOf, isSubscription, loadAuthPlugins, localFiles, longQueryPool, s3Files, webhooksModule };

package/dist/internal.js

@@ -0,0 +1,13 @@
+import { buildAuth, createAuth, loadAuthPlugins } from "./better-auth/create-auth.js";
+import { isSubscription } from "./webhooks/subscription.js";
+import { checkNotificationsOptions } from "./notifications/options.js";
+import { localFiles } from "./files/local-files.js";
+import { s3Files } from "./files/s3-files.js";
+import { appPool, longQueryPool } from "./app-pool.js";
+import { betterAuthAuthenticator } from "./better-auth/authenticator.js";
+import { declaredJob } from "./jobs/declared-job.js";
+import { appAuthOptions, buildAppAuth } from "./better-auth/auth-settings.js";
+import { buildAuthenticator } from "./better-auth/authenticate-settings.js";
+import { fileProviderOf } from "./files/provider-settings.js";
+import { webhooksModule } from "./webhooks/table/webhooks-module.js";
+export { appAuthOptions, appPool, betterAuthAuthenticator, buildAppAuth, buildAuth, buildAuthenticator, checkNotificationsOptions, createAuth, declaredJob, fileProviderOf, isSubscription, loadAuthPlugins, localFiles, longQueryPool, s3Files, webhooksModule };

package/dist/jobs/declared-job.d.ts

@@ -0,0 +1,24 @@
+import { EnqueueOptions, JobContext, JobDefinition, JobOptions } from "./job-types.js";
+import { ArgumentsSpec } from "@protobase/schema";
+import { Db } from "@protobase/query";
+//#region src/jobs/declared-job.d.ts
+/**
+ * A job as `protobase.config.ts` declares it, by its name: what it does, its arguments and when it runs. Its run is the
+ * default export of `jobs/<name>.ts`, loaded the first time the job runs.
+ */
+export type JobDeclaration = Omit<JobOptions<unknown>, 'name' | 'payload' | 'run'> & {
+  /** What the job does, for the people who read the config and the failed jobs page. */
+  description?: string;
+  /** Its arguments by name, each a field type or a type with options (see `ArgumentSpec`), such as `{ invoiceId: 'bigint' }`. */
+  arguments?: ArgumentsSpec;
+};
+/** The default export of `jobs/<name>.ts`: what the job does with its arguments. */
+export type JobRun<Payload = Record<string, unknown>> = (payload: Payload, context: JobContext) => Promise<void> | void;
+/** The job a config declares, whose run `load` gives on its first run. */
+export declare const declaredJob: (name: string, { description: _, arguments: args, ...options }: JobDeclaration, load: () => Promise<JobRun>) => JobDefinition;
+/**
+ * Enqueues the job named `name`, which the config declares, in `db`'s own transaction when it is one, and returns its
+ * id: what a write hook calls, so the job commits with the write or not at all.
+ */
+export declare const enqueueJob: (db: Db, name: string, payload?: Record<string, unknown>, options?: EnqueueOptions) => Promise<string>;
+//#endregion

package/dist/jobs/declared-job.js

@@ -0,0 +1,26 @@
+import { currentJobs } from "./current.js";
+import { defineJob } from "./define-job.js";
+import { argumentsSchema } from "@protobase/schema";
+//#region src/jobs/declared-job.ts
+/** The job a config declares, whose run `load` gives on its first run. */
+const declaredJob = (name, { description: _, arguments: args, ...options }, load) => {
+	let run;
+	return defineJob({
+		...options,
+		name,
+		...args && { payload: argumentsSchema(name, args) },
+		run: async (payload, context) => (await (run ??= load()))(payload ?? {}, context)
+	});
+};
+/**
+* Enqueues the job named `name`, which the config declares, in `db`'s own transaction when it is one, and returns its
+* id: what a write hook calls, so the job commits with the write or not at all.
+*/
+const enqueueJob = (db, name, payload, options) => {
+	const runtime = currentJobs();
+	const definition = runtime.definition(name);
+	if (!definition) throw new Error(`There is no job "${name}": declare it in protobase.config.ts's jobs`);
+	return runtime.enqueue(definition, db, payload, options);
+};
+//#endregion
+export { declaredJob, enqueueJob };

package/dist/jobs/job-types.d.ts

@@ -19,7 +19,7 @@ export type JobContext = {
   signal: AbortSignal;
   /** Sends mail through the app's SMTP server (`PROTOBASE_SMTP_URL`, `PROTOBASE_MAIL_FROM`); `undefined` when the app has no mail. */
   mail?: Mailer;
-  /** Sends a notification as `sendNotification` does; `undefined` when the app has no `notifications()`. */
+  /** Sends a notification as `sendNotification` does; `undefined` when the app has no `notifications`. */
   sendNotification?: SendNotification;
 };
 export type JobOptions<Payload> = {

package/dist/mcp/mcp-authenticator.js

@@ -3,7 +3,7 @@ import { isMcpWrites } from "./mcp-writes.js";
 const hasAudiences = (authenticate) => typeof authenticate.forAudience === "function";
 const isMcpOptions = (options) => options === void 0 || options === false || typeof options === "object" && options !== null && !Array.isArray(options) && Object.entries(options).every(([name, value]) => value === void 0 || name === "sql" && typeof value === "boolean" || name === "writes" && isMcpWrites(value));
 /**
-* The authenticator of the MCP endpoint's tokens, when MCP is on (`createAuth({ mcp })`); none when the host serves its
+* The authenticator of the MCP endpoint's tokens, when MCP is on (`auth.mcp`); none when the host serves its
 * own (`options.mcp: false`). Stops the server at startup when `options.mcp` is neither `false` nor
 * `{ sql?: boolean; writes?: boolean | { resources?: string[]; rolesWithoutApproval?: string[] } }`, when it is set without MCP, or when `authenticate` cannot verify tokens for
 * another audience.
@@ -11,9 +11,9 @@ const isMcpOptions = (options) => options === void 0 || options === false || typ
 const mcpAuthenticator = (authenticate, mcp, options) => {
 	if (!isMcpOptions(options)) throw new Error("options.mcp takes false or { sql?: boolean, writes?: boolean | { resources?: [<resource>, ...], rolesWithoutApproval?: [<role>, ...] } }");
 	if (options === false) return void 0;
-	if (options && !mcp) throw new Error("options.mcp needs createAuth({ mcp }) passed as auth");
+	if (options && !mcp) throw new Error("mcpEndpoint needs auth.mcp in protobase.config.ts");
 	if (!mcp) return void 0;
-	if (!hasAudiences(authenticate)) throw new Error("MCP needs authenticate from betterAuthAuthenticator, whose forAudience verifies the MCP tokens");
+	if (!hasAudiences(authenticate)) throw new Error("MCP needs the app's own authenticator, whose forAudience verifies the MCP tokens: leave `authenticate` a module of your own out of protobase.config.ts");
 	return authenticate.forAudience(mcp.resource);
 };
 //#endregion

package/dist/notifications/device-store-of.d.ts

@@ -4,7 +4,7 @@ import { AdminAuth } from "../better-auth/create-auth.js";
 import { Db } from "@protobase/query";
 //#region src/notifications/device-store-of.d.ts
 /**
- * The devices' store `notifications()` configures: the app's own `store`, or the devices table in `db`. An app that
+ * The devices' store `notifications` configures: the app's own `store`, or the devices table in `db`. An app that
  * deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
  */
 export declare const deviceStore: (db: Db, options?: NotificationsOptions) => DeviceStore;

package/dist/notifications/device-store-of.js

@@ -1,7 +1,7 @@
 import { postgresDeviceStore } from "./postgres-store.js";
 //#region src/notifications/device-store-of.ts
 /**
-* The devices' store `notifications()` configures: the app's own `store`, or the devices table in `db`. An app that
+* The devices' store `notifications` configures: the app's own `store`, or the devices table in `db`. An app that
 * deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
 */
 const deviceStore = (db, options = {}) => options.store ?? postgresDeviceStore(db, options);

package/dist/notifications/device-store.d.ts

@@ -2,7 +2,7 @@ import { Device, NewDevice } from "./device.js";
 //#region src/notifications/device-store.d.ts
 /**
  * Where each user's devices are kept: the Postgres default (`postgresDeviceStore`), or a store of the app's own passed
- * as `notifications({ store })`. Plain data in and out, so any store can implement it. Every method throws on an empty
+ * as `notifications.store`. Plain data in and out, so any store can implement it. Every method throws on an empty
  * user id, id or token, and none touches every device.
  */
 export type DeviceStore = {

package/dist/notifications/device-store.js

@@ -10,7 +10,7 @@ const methods = [
 /** The store, checked to have every method; a missing one is an error naming it. */
 const checkDeviceStore = (store) => {
 	const missing = methods.find((method) => typeof store[method] !== "function");
-	if (missing !== void 0) throw new Error(`notifications({ store }): the device store has no ${missing} method`);
+	if (missing !== void 0) throw new Error(`notifications.store: the device store has no ${missing} method`);
 	return store;
 };
 /** The value, refused when empty: no store call may be read as "every device". */

package/dist/notifications/history-store-of.d.ts

@@ -4,7 +4,7 @@ import { AdminAuth } from "../better-auth/create-auth.js";
 import { Db } from "@protobase/query";
 //#region src/notifications/history-store-of.d.ts
 /**
- * The history's store `notifications()` configures: the app's own `historyStore`, or the history table in `db`. An app
+ * The history's store `notifications` configures: the app's own `historyStore`, or the history table in `db`. An app
  * that deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
  */
 export declare const historyStore: (db: Db, options?: NotificationsOptions) => HistoryStore;

package/dist/notifications/history-store-of.js

@@ -1,7 +1,7 @@
 import { postgresHistoryStore } from "./postgres-history-store.js";
 //#region src/notifications/history-store-of.ts
 /**
-* The history's store `notifications()` configures: the app's own `historyStore`, or the history table in `db`. An app
+* The history's store `notifications` configures: the app's own `historyStore`, or the history table in `db`. An app
 * that deletes users without Protobase's auth calls its `removeAllForUser` as it deletes one.
 */
 const historyStore = (db, options = {}) => options.historyStore ?? postgresHistoryStore(db, options);

package/dist/notifications/history-store.d.ts

@@ -4,7 +4,7 @@ import { HistoryPosition, NewNotification, StoredNotification } from "./history.
 export declare const maxUnreadCount = 100;
 /**
  * Where each user's inbox notifications are kept: the Postgres default (`postgresHistoryStore`), or a store of the
- * app's own passed as `notifications({ historyStore })`. Plain data in and out, so any store can implement it. Every
+ * app's own passed as `notifications.historyStore`. Plain data in and out, so any store can implement it. Every
  * method takes the user and touches that user's entries alone; each throws on an empty user id or id.
  */
 export type HistoryStore = {

package/dist/notifications/history-store.js

@@ -12,7 +12,7 @@ const methods = [
 /** The store, checked to have every method; a missing one is an error naming it. */
 const checkHistoryStore = (store) => {
 	const missing = methods.find((method) => typeof store[method] !== "function");
-	if (missing !== void 0) throw new Error(`notifications({ historyStore }): the history store has no ${missing} method`);
+	if (missing !== void 0) throw new Error(`notifications.historyStore: the history store has no ${missing} method`);
 	return store;
 };
 /** The most entries `list` gives at once. */

package/dist/notifications/options.d.ts

@@ -8,7 +8,7 @@ export type DeviceColumn = (typeof deviceColumns)[number];
 /** The columns of the history table, by the name Protobase gives them. */
 export declare const historyColumns: readonly ["id", "user_id", "title", "body", "url", "data", "created_at", "read_at"];
 export type HistoryColumn = (typeof historyColumns)[number];
-/** Notifications, turned on with `extends: [notifications()]`. */
+/** Notifications, turned on with `notifications: {}` in `protobase.config.ts`. */
 export type NotificationsOptions = {
   /** The bell in the top bar; default true. `false` keeps only the backend. */
   ui?: boolean;
@@ -34,4 +34,6 @@ export type NotificationsOptions = {
    */
   senders?: PushSender[];
 };
+/** The options, checked as `notifications` takes them: the names, given stores' methods and the senders given. */
+export declare const checkNotificationsOptions: (options: NotificationsOptions) => NotificationsOptions;
 //#endregion

package/dist/notifications/options.js

@@ -51,7 +51,7 @@ const historyNames = (options = {}) => ({
 	table: checkedName("history.table", options.history?.table ?? "history"),
 	columns: columnNames("history", historyColumns, options.history?.columns)
 });
-/** The options, checked as `notifications()` takes them: the names, given stores' methods and the senders given. */
+/** The options, checked as `notifications` takes them: the names, given stores' methods and the senders given. */
 const checkNotificationsOptions = (options) => {
 	if (options.ui !== void 0 && typeof options.ui !== "boolean") throw new Error("notifications ui is true or false");
 	notificationsNames(options);

package/dist/notifications/schema.d.ts

@@ -3,12 +3,12 @@ import { AdminAuth } from "../better-auth/create-auth.js";
 import { Db } from "@protobase/query";
 //#region src/notifications/schema.d.ts
 /**
- * The SQL that adds the tables `notifications()` keeps devices and each user's history in, under the names its options
+ * The SQL that adds the tables `notifications` keeps devices and each user's history in, under the names its options
  * give; with `auth`, their user columns point at auth's users table. Each table is left out when it exists or a store
  * of the app's own replaces it, and an existing devices table without its session column gets that column;
  * `undefined` when nothing is left.
  */
 export declare const notificationsMigration: (db: Db, options?: NotificationsOptions, auth?: AdminAuth) => Promise<string | undefined>;
-/** Refuses to start while the devices or the history table lacks what `notifications()` needs, naming it. */
+/** Refuses to start while the devices or the history table lacks what `notifications` needs, naming it. */
 export declare const checkNotificationsSchema: (db: Db, options?: NotificationsOptions, auth?: AdminAuth) => Promise<void>;
 //#endregion

package/dist/notifications/schema.js

@@ -13,7 +13,7 @@ const authUsersTable = (auth) => ({
 const regclass = async (db, name) => (await sql`select to_regclass(${name})::oid as oid`.execute(db)).rows[0].oid;
 const userIdType = async (db, users) => {
 	const oid = await regclass(db, qualified(users));
-	if (oid === null) throw new Error(`notifications(): auth's users table ${qualified(users)} is not in the app's database, so devices cannot point at it`);
+	if (oid === null) throw new Error(`notifications: auth's users table ${qualified(users)} is not in the app's database, so devices cannot point at it`);
 	const { rows } = await sql`select format_type(atttypid, atttypmod) as type from pg_attribute where attrelid = ${oid} and attname = 'id'`.execute(db);
 	return rows[0].type;
 };
@@ -26,7 +26,7 @@ const lacksSessionColumn = async (db, names) => {
 	return oid !== null && !(await columnsOf(db, oid)).some((row) => row.name === names.columns.session_id);
 };
 /**
-* The SQL that adds the tables `notifications()` keeps devices and each user's history in, under the names its options
+* The SQL that adds the tables `notifications` keeps devices and each user's history in, under the names its options
 * give; with `auth`, their user columns point at auth's users table. Each table is left out when it exists or a store
 * of the app's own replaces it, and an existing devices table without its session column gets that column;
 * `undefined` when nothing is left.
@@ -50,9 +50,9 @@ const notificationsMigration = async (db, options = {}, auth) => {
 	];
 	return `${[...new Set(statements)].join(";\n\n")};`;
 };
-const missingTable = (what, table) => /* @__PURE__ */ new Error(`The ${what} table ${table} of notifications() is missing. Write it as a migration with \`${migrationCommand}\`, apply it with the project's migrations, then start again.`);
+const missingTable = (what, table) => /* @__PURE__ */ new Error(`The ${what} table ${table} of notifications is missing. Write it as a migration with \`${migrationCommand}\`, apply it with the project's migrations, then start again.`);
 /**
-* Refuses to start while the devices table lacks what `notifications()` needs, naming it: the table, each column under
+* Refuses to start while the devices table lacks what `notifications` needs, naming it: the table, each column under
 * its configured name, a unique index on the token alone, which moving a device relies on, and with `auth` a foreign key
 * from the user column that deletes a user's devices with the user. Nothing to check with a store of the app's own.
 */
@@ -65,7 +65,7 @@ const checkDevicesTable = async (db, options, users) => {
 	const found = await columnsOf(db, oid);
 	const numOf = (column) => found.find((row) => row.name === names.columns[column])?.num;
 	const missing = Object.keys(names.columns).find((column) => numOf(column) === void 0);
-	if (missing !== void 0) throw new Error(`The devices table ${devices} has no column "${names.columns[missing]}": add it, or name the table's own with notifications({ devices: { columns: { ${missing}: ... } } })`);
+	if (missing !== void 0) throw new Error(`The devices table ${devices} has no column "${names.columns[missing]}": add it, or name the table's own with notifications: { devices: { columns: { ${missing}: ... } } } in protobase.config.ts`);
 	if (!await uniqueOn(db, oid, numOf("token"))) throw new Error(`The devices table ${devices} needs a unique index on its token column "${names.columns.token}" alone, which moving a device to the user who registers it relies on`);
 	if (users && !await cascadesFrom(db, oid, numOf("user_id"), users)) throw new Error(`The devices table ${devices} needs a foreign key from "${names.columns.user_id}" to ${qualified(users)} with on delete cascade, so a deleted user's devices go with them`);
 };
@@ -79,10 +79,10 @@ const checkHistoryTable = async (db, options, users) => {
 	const found = await columnsOf(db, oid);
 	const numOf = (column) => found.find((row) => row.name === names.columns[column])?.num;
 	const missing = Object.keys(names.columns).find((column) => numOf(column) === void 0);
-	if (missing !== void 0) throw new Error(`The history table ${history} has no column "${names.columns[missing]}": add it, or name the table's own with notifications({ history: { columns: { ${missing}: ... } } })`);
+	if (missing !== void 0) throw new Error(`The history table ${history} has no column "${names.columns[missing]}": add it, or name the table's own with notifications: { history: { columns: { ${missing}: ... } } } in protobase.config.ts`);
 	if (users && !await cascadesFrom(db, oid, numOf("user_id"), users)) throw new Error(`The history table ${history} needs a foreign key from "${names.columns.user_id}" to ${qualified(users)} with on delete cascade, so a deleted user's history goes with them`);
 };
-/** Refuses to start while the devices or the history table lacks what `notifications()` needs, naming it. */
+/** Refuses to start while the devices or the history table lacks what `notifications` needs, naming it. */
 const checkNotificationsSchema = async (db, options = {}, auth) => {
 	const users = auth && authUsersTable(auth);
 	await checkDevicesTable(db, options, users);

package/dist/notifications/send-notification.js

@@ -12,7 +12,7 @@ import { pushJobName } from "./push-job-name.js";
 const sendNotification = async (db, to, message) => {
 	const send = checkedSend(to, message);
 	const job = currentJobs().definition(pushJobName);
-	if (!job) throw new Error("Notifications are off: add extends: [notifications()] to protobase.config.ts to send them");
+	if (!job) throw new Error("Notifications are off: add notifications: {} to protobase.config.ts to send them");
 	await job.enqueue(db, send);
 };
 //#endregion

package/dist/notifications/sender.d.ts

@@ -14,7 +14,7 @@ export type PushAnswer = {
 };
 /**
  * Delivers notifications to the devices of its `kinds`, through their push service: the built-in Web Push sender, or
- * one of the app's own passed as `notifications({ senders })`, typically from a package. `send` takes a message and a
+ * one of the app's own passed as `notifications.senders`, typically from a package. `send` takes a message and a
  * batch of devices of those kinds only, and answers each device by its id. A sender for `web` devices names the VAPID
  * `publicKey` browsers subscribe with, which every client may read.
  */

package/dist/notifications/sender.js

@@ -2,7 +2,7 @@ import { deviceKinds } from "./device.js";
 import { isPublicKey } from "./web-push/keys.js";
 //#region src/notifications/sender.ts
 const checkSender = (sender, index, claimed) => {
-	const name = `notifications({ senders }): sender ${index}`;
+	const name = `notifications.senders: sender ${index}`;
 	if (typeof sender !== "object" || sender === null || typeof sender.send !== "function") throw new Error(`${name} has no send method`);
 	if (!Array.isArray(sender.kinds) || sender.kinds.length === 0) throw new Error(`${name} names no kinds: ${deviceKinds.join(", ")}`);
 	for (const kind of sender.kinds) {
@@ -14,7 +14,7 @@ const checkSender = (sender, index, claimed) => {
 };
 /** The senders, checked: each with a send method and kinds, no kind delivered by two, and a public key when one is named. */
 const checkSenders = (senders) => {
-	if (!Array.isArray(senders)) throw new Error("notifications({ senders }) is a list of senders");
+	if (!Array.isArray(senders)) throw new Error("notifications.senders is a list of senders");
 	const claimed = /* @__PURE__ */ new Set();
 	senders.forEach((sender, index) => checkSender(sender, index, claimed));
 	return senders;

package/dist/notifications/senders-of.d.ts

@@ -2,7 +2,7 @@ import { PushSender } from "./sender.js";
 import { NotificationsOptions } from "./options.js";
 //#region src/notifications/senders-of.d.ts
 /**
- * The senders `notifications()` delivers with: the app's own `senders`, which replace the built-in ones, or the
+ * The senders `notifications` delivers with: the app's own `senders`, which replace the built-in ones, or the
  * built-in ones whose environment is set. Each comes guarded (see `guardedSender`): the code that sends calls them only
  * through what this returns. A VAPID variable that is wrong stops startup.
  */

package/dist/notifications/senders-of.js

@@ -8,7 +8,7 @@ const builtInSenders = (env) => {
 	return vapid ? [webPushSender(vapid)] : [];
 };
 /**
-* The senders `notifications()` delivers with: the app's own `senders`, which replace the built-in ones, or the
+* The senders `notifications` delivers with: the app's own `senders`, which replace the built-in ones, or the
 * built-in ones whose environment is set. Each comes guarded (see `guardedSender`): the code that sends calls them only
 * through what this returns. A VAPID variable that is wrong stops startup.
 */

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.48.0";
+var version = "0.49.1";
 //#endregion
 export { version };

package/dist/webhooks/subscription.d.ts

@@ -89,4 +89,5 @@ export type SubscriptionDefinition = {
  * empty.
  */
 export declare const subscription: (name: string, options: SubscriptionOptions) => SubscriptionDefinition;
+export declare const isSubscription: (value: unknown) => value is SubscriptionDefinition;
 //#endregion

package/dist/webhooks/table/options.d.ts

@@ -1,6 +1,6 @@
 import { TenantValue } from "../../types.js";
 //#region src/webhooks/table/options.d.ts
-/** Webhook subscriptions made in the admin app (`extends: [webhooks()]`), kept in a table of the app's database. */
+/** Webhook subscriptions made in the admin app (`webhooks: {}`), kept in a table of the app's database. */
 export type WebhooksOptions = {
   /** The schema of the subscriptions table and the deliveries view; default `webhooks`. */
   schema?: string;

package/dist/webhooks/table/schema.d.ts

@@ -3,11 +3,11 @@ import { WebhooksOptions } from "./options.js";
 import { Db } from "@protobase/query";
 //#region src/webhooks/table/schema.d.ts
 /**
- * The SQL that brings the `webhooks` schema to what `webhooks()` needs: the subscriptions table, its commands, the
+ * The SQL that brings the `webhooks` schema to what `webhooks` needs: the subscriptions table, its commands, the
  * deliveries view and, with `deliveryLog`, the log table. `undefined` when current. Needs the jobs schema, which the
  * deliveries view reads. Tables are never dropped.
  */
 export declare const webhooksMigration: (db: Db, options?: WebhooksOptions, events?: EventsOptions) => Promise<string | undefined>;
-/** Refuses to go on while the `webhooks` schema lacks what `webhooks()` needs; the project's migrations add it. */
+/** Refuses to go on while the `webhooks` schema lacks what `webhooks` needs; the project's migrations add it. */
 export declare const checkWebhooksSchema: (db: Db, options?: WebhooksOptions) => Promise<void>;
 //#endregion

package/dist/webhooks/table/schema.js

@@ -17,7 +17,7 @@ const readWebhooksSchema = async (db, schema) => {
 	};
 };
 /**
-* The SQL that brings the `webhooks` schema to what `webhooks()` needs: the subscriptions table, its commands, the
+* The SQL that brings the `webhooks` schema to what `webhooks` needs: the subscriptions table, its commands, the
 * deliveries view and, with `deliveryLog`, the log table. `undefined` when current. Needs the jobs schema, which the
 * deliveries view reads. Tables are never dropped.
 */
@@ -33,7 +33,7 @@ const webhooksMigration = async (db, options = {}, events) => {
 		...needsLog ? [deliveryLogSql(schema)] : []
 	].join(";\n\n")};`;
 };
-/** Refuses to go on while the `webhooks` schema lacks what `webhooks()` needs; the project's migrations add it. */
+/** Refuses to go on while the `webhooks` schema lacks what `webhooks` needs; the project's migrations add it. */
 const checkWebhooksSchema = async (db, options = {}) => {
 	const schema = webhooksSchema(options);
 	const found = await readWebhooksSchema(db, schema);

package/dist/webhooks/table/webhook-table.js

@@ -4,12 +4,12 @@ import { checkWebhookUrl } from "./address-check.js";
 import { tableSubscriptions } from "./table-subscriptions.js";
 //#region src/webhooks/table/webhook-table.ts
 /**
-* What `createAdmin` needs for the subscriptions of `webhooks()`: the table, the owners' current roles (from Better Auth
+* What `createAdmin` needs for the subscriptions of `webhooks`: the table, the owners' current roles (from Better Auth
 * unless the options say otherwise) and, unless allowed, the check that keeps URLs off private addresses.
 */
 const webhookTable = (options, auth) => {
 	const ownerRoles = options.ownerRoles ?? (auth && betterAuthOwnerRoles(auth));
-	if (!ownerRoles) throw new Error("webhooks() delivers as each subscription's owner, with their current roles: pass `auth` (Better Auth) or `ownerRoles` to webhooks()");
+	if (!ownerRoles) throw new Error("webhooks deliver as each subscription's owner, with their current roles: give the config `auth` (Better Auth), or `webhooks.ownerRoles`");
 	return {
 		subscriptions: tableSubscriptions({
 			schema: webhooksSchema(options),