@protobase/server 0.51.2 → 0.52.0

package/dist/assistant/write-record-tools.js

@@ -1,9 +1,12 @@
+import { forcedJson } from "./result-budget.js";
 import { defineTool } from "./tools.js";
 import { keyOf, keyParameter, refused, resourceOf } from "./record-tool-args.js";
+import { cutRecordNote } from "./budgeted-page.js";
 import { createApproval, updateApproval } from "./write-prompts.js";
 import { approvalTexts, recordBefore } from "./record-before.js";
 import { forbiddenText, notApproved, onlyNote, outside, resourceParameterFor } from "./write-tool-limits.js";
 import { deleteRecordTool } from "./delete-record-tool.js";
+import { echoFieldsOf, fieldsParameter, invalidFields, writeEcho } from "./write-echo.js";
 //#region src/assistant/write-record-tools.ts
 const writes = {
 	readOnlyHint: false,
@@ -18,12 +21,13 @@ const dataOf = (value) => typeof value === "object" && value !== null && !Array.
 /** Creates a record of a resource once the user approves it, under the caller's access rules. */
 const createRecordTool = (input = {}) => defineTool({
 	name: "create_record",
-	description: `Creates a record of a resource and returns it as JSON ({ record, etag }). The user approves each write in their client first; nothing is written without it.${onlyNote(input)}`,
+	description: `Creates a record of a resource and returns its key, new etag and, in record, the fields written and the read-only fields the write changed, as JSON ({ key, etag, record }). The user approves each write in their client first; nothing is written without it.${onlyNote(input)}`,
 	parameters: {
 		type: "object",
 		properties: {
 			resource: resourceParameterFor(input),
-			data: dataParameter
+			data: dataParameter,
+			fields: fieldsParameter
 		},
 		required: ["resource", "data"]
 	},
@@ -32,18 +36,20 @@ const createRecordTool = (input = {}) => defineTool({
 		const resource = resourceOf(args);
 		const data = dataOf(args.data);
 		if (!resource || !data) return "Pass the resource and data as { \"resource\": \"<name>\", \"data\": { \"<field>\": <value> } }.";
+		const fields = echoFieldsOf(args.fields);
+		if (!fields) return invalidFields;
 		const refusal = outside(input, resource);
 		if (refusal) return refusal;
 		const { text, described } = await approvalTexts(context, resource);
 		const answer = await context.approve(createApproval(text, described, data));
 		if (answer !== "approved") return notApproved(answer);
-		return context.records.create(resource, data).then((record) => JSON.stringify(record), refused);
+		return context.records.create(resource, data).then((written) => forcedJson(writeEcho(described.model, written, data, void 0, fields), cutRecordNote), refused);
 	}
 });
 /** Updates one record by its key once the user approves it, under the caller's access rules. */
 const updateRecordTool = (input = {}) => defineTool({
 	name: "update_record",
-	description: `Updates fields of one record of a resource by its key and returns it as JSON ({ record, etag }). Pass the etag get_record gave to fail when someone changed the record since. The user approves each write in their client first; nothing is written without it.${onlyNote(input)}`,
+	description: `Updates fields of one record of a resource by its key and returns its key, new etag and, in record, the fields written and the read-only fields the write changed, as JSON ({ key, etag, record }). Pass the etag get_record gave to fail when someone changed the record since. The user approves each write in their client first; nothing is written without it.${onlyNote(input)}`,
 	parameters: {
 		type: "object",
 		properties: {
@@ -56,7 +62,8 @@ const updateRecordTool = (input = {}) => defineTool({
 			etag: {
 				type: "string",
 				description: "The etag get_record gave, to fail when the record changed since."
-			}
+			},
+			fields: fieldsParameter
 		},
 		required: [
 			"resource",
@@ -70,6 +77,8 @@ const updateRecordTool = (input = {}) => defineTool({
 		const key = keyOf(args.key);
 		const data = dataOf(args.data);
 		if (!resource || key === void 0 || !data) return "Pass the resource, key and data as { \"resource\": \"<name>\", \"key\": \"<key>\", \"data\": { \"<field>\": <value> } }.";
+		const fields = echoFieldsOf(args.fields);
+		if (!fields) return invalidFields;
 		const refusal = outside(input, resource);
 		if (refusal) return refusal;
 		const softDelete = await context.records.softDeleteField(resource).then((field) => ({ field }), refused);
@@ -81,7 +90,7 @@ const updateRecordTool = (input = {}) => defineTool({
 		const { text, described } = await approvalTexts(context, resource);
 		const answer = await context.approve(updateApproval(text, described, key, before?.record ?? {}, data));
 		if (answer !== "approved") return notApproved(answer);
-		return context.records.update(resource, key, data, { etag }).then((record) => JSON.stringify(record), refused);
+		return context.records.update(resource, key, data, { etag }).then((written) => forcedJson(writeEcho(described.model, written, data, before?.record, fields), cutRecordNote), refused);
 	}
 });
 /** `create_record`, `update_record` and `delete_record`, on the resources `input` allows. */

package/dist/batch/run-batch.js

@@ -1,9 +1,9 @@
 import { HttpProblem, badRequest, notFound } from "../problem.js";
 import { requestAccess } from "../request-access.js";
+import { writeTransaction } from "../transactions.js";
 import { actorSettings, wakeDispatch } from "../changes/actor.js";
 import { problemOf } from "../error-handler.js";
 import { scheduleRemovedFiles } from "../files/attach.js";
-import { writeTransaction } from "../transactions.js";
 import { keyOf } from "../write-shared.js";
 import { checkBeforeWrite, writeIn } from "../write-pipeline.js";
 import { resolveData, resolveKey } from "./refs.js";

package/dist/better-auth/auth-settings.d.ts

@@ -12,8 +12,8 @@ import { OrganizationsOptions, ResolvedOrganizations } from "./organizations/opt
 import { McpAuthOptions } from "./mcp/mcp-plugins.js";
 import "../index.js";
 import { CreateAuthOptions, UserCreatedHook } from "./create-auth.js";
-import { PostgresPool } from "kysely";
 import { Db } from "@protobase/query";
+import { PostgresPool } from "kysely";
 import { OrganizationOptions } from "better-auth/plugins/organization";
 //#region src/better-auth/auth-settings.d.ts
 /** What every hook of the project's own gets as its last argument: the app's database, the one jobs get. */

package/dist/changes/capture-schema.js

@@ -1,6 +1,6 @@
 import { isCaptured, quoteIdent, tableSql } from "./capture-sql.js";
-import { changesSchema } from "./events-options.js";
 import { capturePlan, planSql, uncaptured } from "./capture-plan.js";
+import { changesSchema } from "./events-options.js";
 import { sql } from "kysely";
 //#region src/changes/capture-schema.ts
 /** The command that writes what the config needs as a migration file of the project. */

package/dist/changes/resource-change.d.ts

@@ -24,7 +24,10 @@ export type ResourceChange = {
   /** When the change's transaction started, ISO 8601. */
   at: string;
 };
-/** A captured row by field name, fields without a captured column left out. */
+/**
+ * A captured row by field name, fields without a captured column and sensitive ones left out, whatever the capture
+ * kept: a row captured before a field became sensitive holds its value.
+ */
 export declare const recordOf: (model: ResourceModel, columns: Row) => Row;
 /** A coalesced change of the resource's table, by field name, with deletes and undeletes told apart from updates. */
 export declare const resourceChange: (model: ResourceModel, change: CoalescedChange) => ResourceChange;

package/dist/changes/resource-change.js

@@ -6,8 +6,11 @@ const fieldValue = (type, value) => {
 	if (type === "integer") return Number(value);
 	return value;
 };
-/** A captured row by field name, fields without a captured column left out. */
-const recordOf = (model, columns) => Object.fromEntries(Object.values(model.fields).filter((field) => Object.hasOwn(columns, field.column)).map((field) => [field.name, fieldValue(field.type, columns[field.column])]));
+/**
+* A captured row by field name, fields without a captured column and sensitive ones left out, whatever the capture
+* kept: a row captured before a field became sensitive holds its value.
+*/
+const recordOf = (model, columns) => Object.fromEntries(Object.values(model.fields).filter((field) => !field.sensitive && Object.hasOwn(columns, field.column)).map((field) => [field.name, fieldValue(field.type, columns[field.column])]));
 const operationOf = (model, before, after) => {
 	if (!before) return "create";
 	if (!after) return "delete";
@@ -41,5 +44,26 @@ const resourceChange = (model, change) => {
 		at: change.at
 	};
 };
+/** A record by field name with only the fields the model has now and that are not sensitive. */
+const currentRecord = (model, record) => Object.fromEntries(Object.entries(record).filter(([name]) => Object.hasOwn(model.fields, name) && !model.fields[name].sensitive));
+/**
+* A change kept by an earlier dispatch, as the model has it now: a record kept before a field became sensitive, or was
+* removed, holds it. Built from the change's known properties, so one an earlier release kept is dropped too.
+*/
+const currentChange = (model, change) => ({
+	resource: change.resource,
+	key: change.key,
+	operation: change.operation,
+	...change.before && { before: currentRecord(model, change.before) },
+	...change.after && { after: currentRecord(model, change.after) },
+	changed: change.changed,
+	actor: change.actor,
+	source: change.source,
+	databaseRole: change.databaseRole,
+	...change.tenant !== void 0 && { tenant: change.tenant },
+	transaction: change.transaction,
+	sequence: change.sequence,
+	at: change.at
+});
 //#endregion
-export { recordOf, resourceChange };
+export { currentChange, currentRecord, recordOf, resourceChange };

package/dist/comments/post-comment.js

@@ -1,10 +1,10 @@
 import { badRequest, notFound } from "../problem.js";
 import { tenantScope } from "../tenant.js";
 import { writeTransaction } from "../transactions.js";
-import { commentsTable } from "./comments-sql.js";
 import { commentAccess, mayRead, readableRecord, requireSignedIn, userSessions } from "./comment-access.js";
 import { parseCommentInput } from "./comment-input.js";
 import { commentColumns, commentItem, namedUsers } from "./comment-item.js";
+import { commentsTable } from "./comments-sql.js";
 import { readableTitle, recordLabel } from "./record-label.js";
 import { encodeKey } from "@protobase/schema/internal";
 import { appPath } from "@protobase/schema";

package/dist/comments/read-comments.js

@@ -2,9 +2,9 @@ import { notFound } from "../problem.js";
 import { tenantScope } from "../tenant.js";
 import { readTransaction } from "../transactions.js";
 import { parseParams } from "../params.js";
-import { commentsTable } from "./comments-sql.js";
 import { commentAccess, readableRecord } from "./comment-access.js";
 import { commentColumns, commentItem, namedUsers } from "./comment-item.js";
+import { commentsTable } from "./comments-sql.js";
 import { encodeKey } from "@protobase/schema/internal";
 import { z } from "zod";
 import { sql } from "kysely";

package/dist/comments/tool-comment-types.d.ts

@@ -0,0 +1,28 @@
+import { RecordKeyInput } from "../assistant/records.js";
+//#region src/comments/tool-comment-types.d.ts
+/** A comment as a tool gives it: who wrote it, when, and what it says. */
+export type ToolComment = {
+  author: {
+    id: string;
+    name?: string;
+  };
+  created_at: string;
+  text: string;
+};
+/** A page of a record's comments, newest first, and the token of the next page, empty on the last. */
+export type ToolCommentPage = {
+  items: ToolComment[];
+  next_page_token: string;
+};
+/**
+ * A record's comments as the session's user, through the REST API's comments (`GET` and `POST
+ * /{resource}/{key}:comments`): the same access rules, tenant and refusals, which reject with an `HttpProblem`.
+ */
+export type ToolComments = {
+  list: (resource: string, key: RecordKeyInput, params?: {
+    page_size?: number;
+    page_token?: string;
+  }) => Promise<ToolCommentPage>;
+  add: (resource: string, key: RecordKeyInput, text: string) => Promise<ToolComment>;
+};
+//#endregion

package/dist/comments/tool-comments.js

@@ -0,0 +1,30 @@
+import { toolKey } from "../assistant/records.js";
+import { postComment } from "./post-comment.js";
+import { readComments } from "./read-comments.js";
+//#region src/comments/tool-comments.ts
+const compact = ({ author, created_at, body }) => ({
+	author,
+	created_at,
+	text: body
+});
+/** `ToolComments` over the admin's resources for `session`; `requestURL` is the request's, as `postComment` takes it. */
+const toolComments = (deps, session, requestURL) => ({
+	list: async (resource, input, { page_size, page_token } = {}) => {
+		const { entry, key } = toolKey(deps, resource, input);
+		const query = {
+			...page_size !== void 0 && { page_size: String(page_size) },
+			...page_token !== void 0 && { page_token }
+		};
+		const page = await readComments(deps, entry, session, key, query);
+		return {
+			items: page.items.map(compact),
+			next_page_token: page.next_page_token
+		};
+	},
+	add: async (resource, input, text) => {
+		const { entry, key } = toolKey(deps, resource, input);
+		return compact(await postComment(deps, entry, session, key, { body: text }, requestURL));
+	}
+});
+//#endregion
+export { toolComments };

package/dist/create-admin.d.ts

@@ -1,6 +1,7 @@
 import { MobileConfig } from "./mobile-config.js";
 import { AppIdentity } from "./app-identity.js";
 import { AppIcons } from "./web-app/app-icons.js";
+import { RealtimeOptions } from "./realtime/relay/realtime-options.js";
 import { EventsOptions } from "./changes/events-options.js";
 import { JobDefinition } from "./jobs/job-types.js";
 import { Admin, Authenticator, PageSource, ViewSource } from "./types.js";
@@ -49,6 +50,8 @@ export type CreateAdminInput = {
   subscriptions?: SubscriptionDefinition[];
   /** Webhook subscriptions made in the admin app, from `webhooks: {}` (see `WebhooksOptions`). */
   webhooks?: WebhooksOptions;
+  /** How `/api/sb/realtime/v1` is served: by one process or several (see `RealtimeOptions`). */
+  realtime?: RealtimeOptions;
   /** Each user's devices and the endpoints that register them, from `notifications: {}` (see `NotificationsOptions`). */
   notifications?: NotificationsOptions;
   /**
@@ -60,7 +63,7 @@ export type CreateAdminInput = {
   app?: AppIdentity;
   /**
    * The icons the project has of its own, as `protobase build` and `protobase dev` find them beside its favicon: the
-   * web manifest names its PNGs, and `/meta` the favicon when it is the project's, which the sidebar's logo draws.
+   * web manifest and the MCP server name its PNGs, and `/meta` the favicon when it is the project's, which the sidebar's logo draws.
    */
   icons?: AppIcons;
   /**
@@ -90,5 +93,5 @@ export type CreateAdminInput = {
   upgradeWebSocket?: UpgradeWebSocket;
 };
 /** The admin REST API as a Hono app. It uses only Web APIs, so it runs on Node, Workers and anywhere else Hono does. */
-export declare const createAdmin: ({ resources: appResources, views: appViews, pages, userMenu, bottomBars, db, authenticate, auth, functions, secret, files: filesOptions, events, history: historyOptions, jobs, subscriptions, webhooks: webhooksOptions, notifications, mobile, app: identity, icons, bundlePlugins, fieldTypes, options, formsDifficulty, commentUsers: givenCommentUsers, verifyToken, upgradeWebSocket }: CreateAdminInput) => Admin;
+export declare const createAdmin: ({ resources: appResources, views: appViews, pages, userMenu, bottomBars, db, authenticate, auth, functions, secret, files: filesOptions, events, history: historyOptions, jobs, subscriptions, webhooks: webhooksOptions, realtime, notifications, mobile, app: identity, icons, bundlePlugins, fieldTypes, options, formsDifficulty, commentUsers: givenCommentUsers, verifyToken, upgradeWebSocket }: CreateAdminInput) => Admin;
 //#endregion

package/dist/create-admin.js

@@ -27,6 +27,8 @@ import { mcpDiscovery } from "./better-auth/mcp/discovery-routes.js";
 import { mcpApprovals } from "./mcp/mcp-approval-store.js";
 import { checkMcpWrites, rolesWithoutApproval } from "./mcp/mcp-writes.js";
 import { mcpAuthenticator } from "./mcp/mcp-authenticator.js";
+import { visitorsBrowse, withAnonymous } from "./anonymous.js";
+import { changesSchema } from "./changes/events-options.js";
 import { mcpToolContext } from "./mcp/mcp-context.js";
 import { mcpHandler } from "./mcp/mcp-handler.js";
 import { closedMcpRoutes, mcpRoutes } from "./mcp/mcp-routes.js";
@@ -38,7 +40,6 @@ import { statusRoute } from "./better-auth/status-route.js";
 import { betterAuthSessionToken } from "./better-auth/session-token.js";
 import { goTrueTokens } from "./gotrue/access-tokens.js";
 import { goTrueRoutes } from "./gotrue/routes.js";
-import { changesSchema } from "./changes/events-options.js";
 import { appOrigin } from "./comments/app-origin.js";
 import { betterAuthActorNames } from "./history/actor-names.js";
 import { betterAuthCommentUsers } from "./comments/comment-users.js";
@@ -60,7 +61,6 @@ import { deviceRoutes } from "./notifications/routes.js";
 import { notificationSenders, webPushKey } from "./notifications/senders-of.js";
 import { pushJob } from "./notifications/push-job.js";
 import { liveSessions } from "./better-auth/live-sessions.js";
-import { visitorsBrowse, withAnonymous } from "./anonymous.js";
 import { checkBottomBars, checkShell } from "./check-shell.js";
 import { checkOwnerFields } from "./check-owners.js";
 import { checkRoleLimits } from "./check-roles.js";
@@ -93,6 +93,7 @@ import { docsRoutes } from "./routes/docs.js";
 import { metaRoutes } from "./routes/meta.js";
 import { faviconPath } from "./web-app/web-manifest.js";
 import { webManifestRoute } from "./web-app/web-manifest-route.js";
+import { mcpIcons } from "./web-app/mcp-icons.js";
 import { recordRoutes } from "./routes/record.js";
 import { createScanGuard } from "./scan-guard.js";
 import { failedJobs, failedJobsView } from "./jobs/failed-jobs.js";
@@ -104,7 +105,7 @@ const declaredRoles = (auth, roles) => {
 	return names.length > 0 ? [...new Set(names)] : void 0;
 };
 /** The admin REST API as a Hono app. It uses only Web APIs, so it runs on Node, Workers and anywhere else Hono does. */
-const createAdmin = ({ resources: appResources, views: appViews = [], pages = [], userMenu, bottomBars = [], db, authenticate, auth, functions = {}, secret, files: filesOptions, events, history: historyOptions, jobs = [], subscriptions = [], webhooks: webhooksOptions, notifications, mobile, app: identity, icons, bundlePlugins = [], fieldTypes = {}, options = {}, formsDifficulty, commentUsers: givenCommentUsers, verifyToken, upgradeWebSocket }) => {
+const createAdmin = ({ resources: appResources, views: appViews = [], pages = [], userMenu, bottomBars = [], db, authenticate, auth, functions = {}, secret, files: filesOptions, events, history: historyOptions, jobs = [], subscriptions = [], webhooks: webhooksOptions, realtime, notifications, mobile, app: identity, icons, bundlePlugins = [], fieldTypes = {}, options = {}, formsDifficulty, commentUsers: givenCommentUsers, verifyToken, upgradeWebSocket }) => {
 	const basePath = options.basePath ?? "/api/v1";
 	const appModels = appResources.map((resource) => resource.toModel());
 	const withComments = appModels.some((model) => model.comments);
@@ -324,19 +325,27 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	if (auth?.mcp && options.mcp === false) closedMcpRoutes(app, auth.mcp.path);
 	else if (auth?.mcp && mcpAuthenticate) {
 		const writes = options.mcp !== false && options.mcp?.writes || false;
+		const commented = registry.entries.filter((entry) => entry.model.comments).map((entry) => entry.name);
 		const tools = mcpTools({
 			db,
 			sql: options.mcp !== false && options.mcp?.sql === true,
-			writes
+			writes,
+			commented
 		});
 		const approvals = mcpApprovals();
+		const { resource } = auth.mcp;
+		const info = {
+			name: appName,
+			version: "1.0.0",
+			icons: mcpIcons(resource, icons)
+		};
 		const server = (session, request) => {
-			const context = mcpToolContext(deps, meta, session, request ? requestLocale(locale, request) : locale);
+			const context = mcpToolContext(deps, meta, session, {
+				locale: request ? requestLocale(locale, request) : locale,
+				requestURL: request?.url ?? resource
+			});
 			return mcpServer({
-				info: {
-					name: appName,
-					version: "1.0.0"
-				},
+				info,
 				tools: tools(session),
 				context,
 				report,
@@ -417,7 +426,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 			feed,
 			upgradeWebSocket,
 			caller,
-			report
+			report,
+			...realtime && { options: realtime }
 		}));
 		if (files?.storage) {
 			const storage = {

package/dist/deps.d.ts

@@ -1,5 +1,6 @@
 import { AuditQueue, PipelineHook, WriteCheck } from "./types.js";
 import { CommentUsers } from "./comments/comment-users.js";
+import { Registry } from "./registry.js";
 import { ErrorReportingSettings } from "./error-reporting/error-reporting-settings.js";
 import { mentionJob } from "./comments/mention-job.js";
 import { ModelSettings } from "./assistant/chat-completions.js";
@@ -7,7 +8,6 @@ import { EncryptionRuntime } from "./encryption/runtime.js";
 import { FilesRuntime } from "./files/runtime.js";
 import { MapSettings } from "./maps/map-settings.js";
 import { PluginOption } from "./plugins/plugin-settings.js";
-import { Registry } from "./registry.js";
 import { SourceOption } from "./sources/source-settings.js";
 import { ScanGuard } from "./scan-guard.js";
 import { PageModel } from "@protobase/layout";

package/dist/encryption/scan.js

@@ -1,5 +1,5 @@
-import { aliasedColumn, columnId, tableId } from "../sql-parts.js";
 import { exposeRow } from "../rows.js";
+import { aliasedColumn, columnId, tableId } from "../sql-parts.js";
 import { sql } from "kysely";
 //#region src/encryption/scan.ts
 const batchSize = 500;

package/dist/error-handler.js

@@ -1,8 +1,8 @@
 import { HttpProblem, problemResponse } from "./problem.js";
 import { ConnectionsBusy, connectionsBusyProblem } from "./connections-busy.js";
 import { StatementTimeout } from "./statement-timeout.js";
-import { HTTPException } from "hono/http-exception";
 import { QueryError } from "@protobase/query";
+import { HTTPException } from "hono/http-exception";
 //#region src/error-handler.ts
 const titles = {
 	400: "Bad Request",
@@ -20,6 +20,7 @@ const queryStatus = {
 	no_statistics: 409,
 	missing_extension: 501
 };
+/** The problem a query-layer refusal, such as an unknown field or an out-of-range option, stands for. */
 const queryProblem = (error) => {
 	const status = queryStatus[error.code] ?? 400;
 	return new HttpProblem(status, error.code.replaceAll("_", "-"), titles[status] ?? "Not Implemented", error.message);
@@ -64,4 +65,4 @@ const createErrorHandler = (onUnhandledError, statementTimeoutMs) => (error, c)
 	return problemResponse(new HttpProblem(500, "internal-error", titles[500], "The server failed to handle the request"), c.req.path);
 };
 //#endregion
-export { createErrorHandler, isDatabaseError, problemOf };
+export { createErrorHandler, isDatabaseError, problemOf, queryProblem };

package/dist/etag.js

@@ -1,5 +1,5 @@
-import { sha256Hex, stableJson } from "./hash.js";
 import { etagAlias } from "./sql-parts.js";
+import { sha256Hex, stableJson } from "./hash.js";
 //#region src/etag.ts
 /**
 * The version of a row. With a version or `updated_at` column it is a hash of that column's exact text (so a hidden column's

package/dist/files/download.js

@@ -1,7 +1,7 @@
 import { HttpProblem, forbidden, notFound } from "../problem.js";
+import { readTransaction } from "../transactions.js";
 import { contentDisposition, downloadName, servedType } from "./media-types.js";
 import { isFilePath, parseUri, tenantSegment, variantPaths } from "./uri.js";
-import { readTransaction } from "../transactions.js";
 import { fetchRecord } from "../records.js";
 import { downloadExpiry, readDownloadUrl } from "./download-url.js";
 import { decodeKeyText } from "../key.js";

package/dist/files/file-cleanup.d.ts

@@ -1,6 +1,6 @@
 import { FilesOptions } from "./options.js";
-import { CleanupReport } from "./cleanup-runner.js";
 import { ResourceSource } from "../resource-source.js";
+import { CleanupReport } from "./cleanup-runner.js";
 import { Db } from "@protobase/query";
 //#region src/files/file-cleanup.d.ts
 export type FileCleanupInput = {

package/dist/functions/records.d.ts

@@ -7,5 +7,5 @@ import { ListParams, RecordPage, ToolRecords } from "../assistant/records.js";
  * in the REST API. A refusal or a missing record rejects with an `HttpProblem`, which becomes the function's response
  * when it is not caught.
  */
-export type FunctionRecords = Omit<ToolRecords, 'batch'>;
+export type FunctionRecords = Omit<ToolRecords, 'batch' | 'aggregate'>;
 //#endregion

package/dist/functions/records.js

@@ -1,8 +1,8 @@
 import { assistantRecords } from "../assistant/records.js";
 //#region src/functions/records.ts
-/** `FunctionRecords` over the admin's resources for `session`; the batch is the MCP tools' alone. */
+/** `FunctionRecords` over the admin's resources for `session`; the batch and the aggregate are the tools' alone. */
 const callerRecords = (deps, session) => {
-	const { batch: _batch, ...records } = assistantRecords(deps, session);
+	const { batch: _batch, aggregate: _aggregate, ...records } = assistantRecords(deps, session);
 	return records;
 };
 //#endregion

package/dist/history/read-history.js

@@ -1,10 +1,10 @@
 import { notFound } from "../problem.js";
 import { tenantScope } from "../tenant.js";
 import { requestAccess, requireOperation } from "../request-access.js";
-import { quoteIdent } from "../changes/capture-sql.js";
 import { readTransaction } from "../transactions.js";
-import { fetchReadable } from "../fetch-readable.js";
 import { parseParams } from "../params.js";
+import { quoteIdent } from "../changes/capture-sql.js";
+import { fetchReadable } from "../fetch-readable.js";
 import { encodeKey } from "@protobase/schema/internal";
 import { z } from "zod";
 import { sql } from "kysely";

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { MobileConfig } from "./mobile-config.js";
 import { AppIdentity } from "./app-identity.js";
 import { AppIcons, PngIcon, pngIcons } from "./web-app/app-icons.js";
+import { RealtimeOptions, relayed } from "./realtime/relay/realtime-options.js";
 import { EventsOptions } from "./changes/events-options.js";
 import { StandardSchema, readJson } from "./functions/read-json.js";
 import { MailMessage, Mailer } from "./mail/smtp-mailer.js";
@@ -25,6 +26,7 @@ import { FilesOptions } from "./files/options.js";
 import { ApiKeys, ApiKeysOptions, apiKeySettings, apiKeyVariables } from "./api-keys/api-key-settings.js";
 import { Caller, CallerOptions, apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { FunctionSocket, SocketEvents } from "./functions/function-socket.js";
+import { ResourceSource, configExports } from "./resource-source.js";
 import { ErrorReportingOptions, ErrorReportingSettings, errorReportingSettings, errorReportingVariable } from "./error-reporting/error-reporting-settings.js";
 import { ChatMessage, ChatTextPart, Completion, CompletionOptions, ModelError, ModelSettings, ReasoningDetail, ReasoningEffort, ToolCall, ToolSpec, streamChatCompletion } from "./assistant/chat-completions.js";
 import { CleanupEntry, CleanupSchedule, ScheduledDelete, storageCleanupSchedule } from "./files/cleanup-schedule.js";
@@ -32,15 +34,15 @@ import { CleanupReport } from "./files/cleanup-runner.js";
 import { MapLayer } from "./maps/map-layers.js";
 import { MapOptions, MapSettings, mapSettings, mapStyleUrl, mapStyleVariable } from "./maps/map-settings.js";
 import { PluginOption, PluginRef, beforeSignInPluginsVariable, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable } from "./plugins/plugin-settings.js";
-import { ResourceSource, configExports } from "./resource-source.js";
 import { SourceOption, SourceRef, checkSourceNames, sourceOptions, sourcesFor, sourcesVariable } from "./sources/source-settings.js";
 import { HttpProblem, MissingCredentials, badRequest, forbidden, notFound, unauthorized } from "./problem.js";
 import { BatchOperation } from "./batch/schema.js";
 import { BatchResult } from "./batch/run-batch.js";
-import { ListParams, RecordKeyInput, RecordPage, ToolRecord, ToolRecords } from "./assistant/records.js";
+import { AggregateParams, ListParams, RecordGroups, RecordKeyInput, RecordPage, ToolRecord, ToolRecords } from "./assistant/records.js";
 import { FunctionRecords } from "./functions/records.js";
 import { ApiFunction, CorsOptions, FunctionApp, FunctionCaller, FunctionContext, FunctionHandler, FunctionOptions, FunctionSource, KeyFunctionContext, ProtectedFunctionOptions, PublicFunctionContext, PublicFunctionHandler, PublicFunctionOptions, defineFunction } from "./functions/define-function.js";
 import { CorsOrigins } from "./api-cors.js";
+import { ToolComment, ToolCommentPage, ToolComments } from "./comments/tool-comment-types.js";
 import { ConversationRecord, ConversationStore } from "./assistant/conversation-store.js";
 import { Conversation, ConversationsOptions, conversationKey, createConversations } from "./assistant/conversations.js";
 import { ApprovalAnswer, ApprovalRequest, requestApproval } from "./assistant/approval.js";
@@ -92,6 +94,7 @@ import { eventMatcher } from "./changes/match-events.js";
 import { parseColumns, readOutbox } from "./changes/outbox.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
+import { checkRealtimeRelay, realtimeRelayMigration } from "./realtime/relay/relay-schema.js";
 import { checkComments, commentsMigration } from "./comments/comments-sql.js";
 import { CheckAiInput, checkAi } from "./ai/check-ai.js";
 import { CommentItem } from "./comments/comment-item.js";
@@ -118,12 +121,15 @@ import { WidgetOptions, maxWidgetPropsBytes, widget } from "./assistant/widget.j
 import { QueryOptions, QueryResult, runReadOnlyQuery, runReadWriteQuery } from "./assistant/run-query.js";
 import { readOnlyQueryTool, readWriteQueryTool } from "./assistant/query-tools.js";
 import { getRecordTool, listRecordsTool, listResourcesTool, readRecordTools } from "./assistant/record-tools.js";
+import { countRecordsTool } from "./assistant/count-records-tool.js";
 import { WriteRecordToolsInput } from "./assistant/write-tool-limits.js";
 import { createRecordTool, updateRecordTool, writeRecordTools } from "./assistant/write-record-tools.js";
 import { deleteRecordTool } from "./assistant/delete-record-tool.js";
 import { batchWriteTool } from "./assistant/batch-write-tool.js";
+import { CommentToolsInput, addCommentTool, commentTools, listCommentsTool } from "./assistant/comment-tools.js";
 import { McpApprovals, mcpApprovals } from "./mcp/mcp-approval-store.js";
 import { McpServerInput, mcpServer } from "./mcp/mcp-server.js";
+import { mcpIcons } from "./web-app/mcp-icons.js";
 import { McpToolsInput, mcpTools } from "./mcp/mcp-tools.js";
 import { McpGateInput, mcpGate, sessionOf } from "./mcp/mcp-gate.js";
 import { McpHandlerInput, mcpHandler } from "./mcp/mcp-handler.js";
@@ -164,4 +170,4 @@ import { MobileRelease, ReleaseFile, ServedReleaseFile, composeRelease, releaseM
 import { MobileReleaseAppInput, OfferedRelease, mobileReleaseApp } from "./mobile-release/release-app.js";
 import { mobileSigningKeyVariable, readSigningKey } from "./mobile-release/signing-key.js";
 import { AdminAuth, CreateAuthOptions, UserCreatedHook, normalizeRoles } from "./better-auth/create-auth.js";
-export { type Admin, type AdminAuth, type AdminOptions, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, recordOf, releaseManifest, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type Caller, type CallerOptions, type CapturedRow, type CascadingKey, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, type MobileRelease, type MobileReleaseAppInput, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OfferedRelease, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKeyInput, type RecordPage, type ReleaseFile, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type ServedReleaseFile, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, composeRelease, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, mobileReleaseApp, mobileSigningKeyVariable, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readSigningKey, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, relayed, releaseManifest, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };