@protobase/server 0.59.0 → 0.59.2

package/dist/channels/binary-frame.js

@@ -0,0 +1,44 @@
+//#region src/channels/binary-frame.ts
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const lengthBytes = 4;
+/**
+* A binary frame of `/api/channels`: the byte length of a JSON header, the header, then the bytes it carries. A binary
+* broadcast travels as one, its header the message without its payload.
+*/
+const encodeBinaryFrame = (header, bytes) => {
+	const head = encoder.encode(JSON.stringify(header));
+	const frame = new Uint8Array(lengthBytes + head.length + bytes.byteLength);
+	new DataView(frame.buffer).setUint32(0, head.length);
+	frame.set(head, lengthBytes);
+	frame.set(new Uint8Array(bytes), lengthBytes + head.length);
+	return frame.buffer;
+};
+/** The header and bytes of a binary frame, or `undefined` for one cut short or whose header is not a JSON object. */
+const decodeBinaryFrame = (frame) => {
+	if (frame.byteLength < lengthBytes) return;
+	const end = lengthBytes + new DataView(frame).getUint32(0);
+	if (end > frame.byteLength) return;
+	const header = parsed(decoder.decode(new Uint8Array(frame, lengthBytes, end - lengthBytes)));
+	if (typeof header !== "object" || header === null || Array.isArray(header)) return;
+	return {
+		header,
+		bytes: frame.slice(end)
+	};
+};
+const parsed = (text) => {
+	try {
+		return JSON.parse(text);
+	} catch (error) {
+		if (error instanceof SyntaxError) return;
+		throw error;
+	}
+};
+/** The bytes of an `ArrayBuffer` or a typed array, as an `ArrayBuffer` of their own; `undefined` for anything else. */
+const bytesOf = (value) => {
+	if (value instanceof ArrayBuffer) return value;
+	if (!ArrayBuffer.isView(value)) return;
+	return new Uint8Array(value.buffer, value.byteOffset, value.byteLength).slice().buffer;
+};
+//#endregion
+export { bytesOf, decodeBinaryFrame, encodeBinaryFrame };

package/dist/channels/channel-protocol.js

@@ -1,9 +1,22 @@
+import { decodeBinaryFrame } from "./binary-frame.js";
 //#region src/channels/channel-protocol.ts
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const text = (value) => typeof value === "string";
 /** The message a text frame carries, or `undefined` for one that is not JSON or not a message. */
-const decodeClientMessage = (frame) => {
-	const message = parsed(frame);
+const decodeClientMessage = (frame) => messageOf(parsed(frame));
+/**
+* The send of bytes a binary frame carries (`decodeBinaryFrame`): its header a `send` without a payload, its bytes the
+* payload. `undefined` for any other frame.
+*/
+const decodeBinaryMessage = (frame) => {
+	const decoded = decodeBinaryFrame(frame);
+	if (!decoded || decoded.header.type !== "send" || "payload" in decoded.header) return;
+	return messageOf({
+		...decoded.header,
+		payload: decoded.bytes
+	});
+};
+const messageOf = (message) => {
 	if (!isRecord(message)) return;
 	if (message.ref !== void 0 && !text(message.ref)) return;
 	const { type } = message;
@@ -30,4 +43,4 @@ const parsed = (frame) => {
 	}
 };
 //#endregion
-export { decodeClientMessage };
+export { decodeBinaryMessage, decodeClientMessage };

package/dist/channels/channel-refusals.js

@@ -10,7 +10,7 @@ const refusal = (code, message) => ({
 */
 const channelRefusals = {
 	notFound: refusal("not-found", "There is no such record"),
-	invalidMessage: refusal("invalid-message", "Send a JSON text frame of a ping, token, join, leave, track, untrack or send"),
+	invalidMessage: refusal("invalid-message", "Send a JSON text frame of a ping, token, join, leave, track, untrack or send, or a binary frame of a send"),
 	notJoined: refusal("not-joined", "Join the channel first"),
 	alreadyJoined: refusal("already-joined", "This connection has joined the channel already"),
 	nameTooLong: refusal("name-too-long", "A channel name, its resource, a slash and its key, is at most 255 bytes"),

package/dist/channels/channel-routes.js

@@ -16,11 +16,30 @@ const withBearer = (request, token) => {
 	headers.set("authorization", `Bearer ${token}`);
 	return new Request(request, { headers });
 };
-const invalidBody = () => new HttpProblem(422, "invalid-broadcast", "Unprocessable Content", "Send { \"event\": \"…\", \"payload\": … } as application/json");
+const invalidBody = () => new HttpProblem(422, "invalid-broadcast", "Unprocessable Content", "Send { \"event\": \"…\", \"payload\": … } as application/json, or bytes as application/octet-stream with ?event=…");
+const broadcastOf = async (request) => {
+	if (request.header("content-type")?.split(";")[0].trim().toLowerCase() === "application/octet-stream") {
+		const event = request.query("event");
+		if (event === void 0) throw invalidBody();
+		return {
+			event,
+			payload: await request.arrayBuffer()
+		};
+	}
+	const body = await request.json().catch((error) => {
+		if (error instanceof SyntaxError) throw invalidBody();
+		throw error;
+	});
+	if (!isRecord(body) || typeof body.event !== "string" || !("payload" in body)) throw invalidBody();
+	return {
+		event: body.event,
+		payload: body.payload
+	};
+};
 /**
 * `GET /channels`, a WebSocket of channels named by records (see `channelSocket`), refused before the upgrade like
 * any request its caller cannot make. `POST /channels/:resource/:key/broadcast` sends one broadcast without a socket,
-* as the caller, when they may read the record.
+* as the caller, when they may read the record: JSON, or bytes (`broadcastOf`).
 */
 const channelRoutes = ({ deps, upgradeWebSocket, authenticate, authenticateUpgrade, onError, hubs, follow, report }) => {
 	const app = new Hono();
@@ -72,16 +91,10 @@ const channelRoutes = ({ deps, upgradeWebSocket, authenticate, authenticateUpgra
 			throw new HttpProblem(413, "too-large", "Payload Too Large", `A broadcast request is at most ${realtimeLimits.maxFrameBytes} bytes`);
 		}
 	}), async (c) => {
-		const body = await c.req.json().catch((error) => {
-			if (error instanceof SyntaxError) throw invalidBody();
-			throw error;
-		});
-		if (!isRecord(body) || typeof body.event !== "string" || !("payload" in body)) throw invalidBody();
 		const message = {
 			resource: c.req.param("resource"),
 			key: c.req.param("key"),
-			event: body.event,
-			payload: body.payload
+			...await broadcastOf(c.req)
 		};
 		const record = broadcastRecord(deps.registry, message);
 		const session = c.get("session");

package/dist/channels/channel-sender.d.ts

@@ -1,7 +1,7 @@
 import "../registry.js";
 import "./channel-name.js";
 //#region src/channels/channel-sender.d.ts
-/** A broadcast to the channel of a record, from outside a connection. */
+/** A broadcast to the channel of a record, from outside a connection: a JSON payload, or bytes in an `ArrayBuffer` or typed array. */
 export type ChannelBroadcast = {
   resource: string;
   key: string;

package/dist/channels/channel-sender.js

@@ -2,31 +2,43 @@ import { HttpProblem, notFound } from "../problem.js";
 import { fitsFrame } from "../realtime/broadcast-frame.js";
 import { realtimeLimits } from "../realtime/realtime-limits.js";
 import { channelRecord } from "./channel-name.js";
+import { bytesOf } from "./binary-frame.js";
 import { channelRefusals } from "./channel-refusals.js";
+import { packSent } from "./sent.js";
 import { Buffer } from "node:buffer";
 //#region src/channels/channel-sender.ts
 const invalid = (refusal) => new HttpProblem(422, refusal.code, "Unprocessable Content", refusal.message);
+const invalidPayload = {
+	code: "invalid-payload",
+	message: `A payload is JSON or bytes of at most ${realtimeLimits.maxFrameBytes} bytes`
+};
+const payloadBytes = (payload) => {
+	if (payload instanceof ArrayBuffer || ArrayBuffer.isView(payload)) return payload.byteLength;
+	const json = JSON.stringify(payload);
+	return json === void 0 ? NaN : Buffer.byteLength(json);
+};
 /** The record a broadcast names, its event and payload checked, or a problem. */
 const broadcastRecord = (registry, { resource, key, event, payload }) => {
 	const found = channelRecord(registry, resource, key);
 	if (found === "too-long") throw invalid(channelRefusals.nameTooLong);
 	if (!found) throw notFound(channelRefusals.notFound.message);
 	if (!fitsFrame(event)) throw invalid(channelRefusals.eventTooLong);
-	const json = JSON.stringify(payload);
-	if (json === void 0 || Buffer.byteLength(json) > realtimeLimits.maxFrameBytes) throw invalid({
-		code: "invalid-payload",
-		message: `A payload is JSON of at most ${realtimeLimits.maxFrameBytes} bytes`
-	});
+	if (!(payloadBytes(payload) <= realtimeLimits.maxFrameBytes)) throw invalid(invalidPayload);
 	return found;
 };
+/** A checked broadcast as the hub publishes it; a typed array's bytes go as an `ArrayBuffer` of their own. */
+const publicationTo = (record, event, sent) => ({
+	topic: record.name,
+	event,
+	payload: packSent({
+		...sent,
+		payload: bytesOf(sent.payload) ?? sent.payload
+	}),
+	private: false
+});
 /** Publishes a checked broadcast, refused with 429 when the channel took its broadcasts for this second. */
 const publishTo = async (broadcasts, record, event, sent) => {
-	if (await broadcasts.publish([{
-		topic: record.name,
-		event,
-		payload: sent,
-		private: false
-	}])) return;
+	if (await broadcasts.publish([publicationTo(record, event, sent)])) return;
 	throw new HttpProblem(429, channelRefusals.channelTooBusy.code, "Too Many Requests", channelRefusals.channelTooBusy.message);
 };
 /** The server's own sender over the record channels' hub. */
@@ -36,4 +48,4 @@ const channelSender = (registry, broadcasts) => ({ broadcast: async (message) =>
 	payload: message.payload
 }) });
 //#endregion
-export { broadcastRecord, channelSender, publishTo };
+export { broadcastRecord, channelSender, publicationTo, publishTo };

package/dist/channels/channel-socket.js

@@ -1,11 +1,12 @@
 import { fitsFrame } from "../realtime/broadcast-frame.js";
 import { realtimeLimits } from "../realtime/realtime-limits.js";
 import { fixedWindow, fixedWindows } from "../realtime/fixed-window.js";
+import { encodeBinaryFrame } from "./binary-frame.js";
 import { channelRefusals } from "./channel-refusals.js";
+import { packSent, senderOf, unpackSent } from "./sent.js";
 import { channelBounds } from "./channel-bounds.js";
-import { decodeClientMessage } from "./channel-protocol.js";
+import { decodeBinaryMessage, decodeClientMessage } from "./channel-protocol.js";
 import { entriesOf, entryDiff } from "./presence-entries.js";
-import { senderOf } from "./sent.js";
 import { randomUUID } from "node:crypto";
 import { Buffer } from "node:buffer";
 //#region src/channels/channel-socket.ts
@@ -56,6 +57,10 @@ const channelSocket = ({ send, buffered, close, session: first, reauthenticate,
 	const push = (message) => {
 		if (!open) return;
 		if (!(buffered() <= realtimeLimits.maxUnsentBytes)) return shut(policyViolation);
+		if (message.type === "broadcast" && message.payload instanceof ArrayBuffer) {
+			const { payload, ...header } = message;
+			return send(encodeBinaryFrame(header, payload));
+		}
 		send(JSON.stringify(message));
 	};
 	const ok = (ref, channel) => {
@@ -105,7 +110,7 @@ const channelSocket = ({ send, buffered, close, session: first, reauthenticate,
 		const member = {
 			self: false,
 			private: false,
-			receive: (event, payload) => hear(name, event, payload)
+			receive: (event, payload) => hear(name, event, unpackSent(payload))
 		};
 		const seat = presences.join(name, {
 			key: randomUUID(),
@@ -161,7 +166,7 @@ const channelSocket = ({ send, buffered, close, session: first, reauthenticate,
 			user: userOf(session),
 			payload: message.payload
 		};
-		if (!await broadcasts.send(message.channel, channel.member, message.event, sent)) return refuse(message.ref, channelRefusals.channelTooBusy);
+		if (!await broadcasts.send(message.channel, channel.member, message.event, packSent(sent))) return refuse(message.ref, channelRefusals.channelTooBusy);
 		if (message.self === true) hear(message.channel, message.event, sent);
 		if (message.ack === true) ok(message.ref);
 	};
@@ -224,15 +229,15 @@ const channelSocket = ({ send, buffered, close, session: first, reauthenticate,
 	};
 	return {
 		/**
-		* Handles a text frame after those before it; a binary one, or one that is not a message, gets an error. A frame
-		* over the size cap, or of a kind whose size is unknown, closes the socket.
+		* Handles a frame after those before it: a text one, or a binary `ArrayBuffer` of a send of bytes; one that is not
+		* a message gets an error. A frame over the size cap, or of a kind whose size is unknown, closes the socket.
 		*/
 		message: (frame) => {
 			if (!open) return;
 			const size = frameBytes(frame);
 			if (!(size <= realtimeLimits.maxFrameBytes)) return shut(messageTooBig);
 			stayAwake();
-			const message = typeof frame === "string" ? decodeClientMessage(frame) : void 0;
+			const message = typeof frame === "string" ? decodeClientMessage(frame) : frame instanceof ArrayBuffer ? decodeBinaryMessage(frame) : void 0;
 			if (!message) return push({
 				type: "error",
 				error: channelRefusals.invalidMessage

package/dist/channels/database-sends.js

@@ -0,0 +1,57 @@
+import { HttpProblem } from "../problem.js";
+import { writeTransaction } from "../transactions.js";
+import { followedPoll } from "../realtime/followed-poll.js";
+import { broadcastRecord, publicationTo } from "./channel-sender.js";
+import { sendsSchema } from "./sends-schema-sql.js";
+import { sql } from "kysely";
+//#region src/channels/database-sends.ts
+/** Sends taken in one transaction at most. */
+const batchSize = 1e3;
+/**
+* The broadcast a row sends, as the server, under the checks of `channels.broadcast` in API functions; `undefined` for
+* one they refuse, such as for a record the app does not have or a payload over a frame, which is dropped.
+*/
+const publicationOfSend = (registry, row) => {
+	try {
+		const record = broadcastRecord(registry, row);
+		return publicationTo(record, row.event, {
+			user: null,
+			server: true,
+			payload: row.payload
+		});
+	} catch (error) {
+		if (error instanceof HttpProblem) return;
+		throw error;
+	}
+};
+const takeSends = (db, statementTimeoutMs) => writeTransaction(db, statementTimeoutMs, async (trx) => {
+	const { rows } = await sql`with taken as (
+        delete from ${sql.id(sendsSchema, "sends")} where id in (
+          select id from ${sql.id(sendsSchema, "sends")} order by id limit ${batchSize} for update skip locked
+        ) returning id, resource, key, event, payload
+      )
+      select id::text as id, resource, key, event, payload from taken order by id`.execute(trx);
+	return rows;
+});
+/**
+* SQL's broadcasts to the record channels: `channels.send()` inserts a row in the caller's transaction, so only a
+* committed one is seen, and while a record channel's socket of this process is open the table is read every
+* `intervalMs`, its rows taken out of it and sent to the channels of their records, as the server, under the channel's
+* broadcast rate. A send nobody hears is dropped, as is one the checks refuse. With several processes, one takes a row
+* and the relay carries it to the others.
+*/
+const databaseSends = ({ db, statementTimeoutMs, registry, broadcasts, intervalMs = 1e3, report }) => {
+	const read = async () => {
+		for (;;) {
+			const rows = await takeSends(db, statementTimeoutMs);
+			for (const row of rows) {
+				const publication = publicationOfSend(registry, row);
+				if (publication) await broadcasts.publish([publication]);
+			}
+			if (rows.length < batchSize) return;
+		}
+	};
+	return followedPoll(read, intervalMs, report);
+};
+//#endregion
+export { databaseSends, publicationOfSend };

package/dist/channels/sends-prune.js

@@ -0,0 +1,15 @@
+import { writeTransaction } from "../transactions.js";
+import { sendsSchema } from "./sends-schema-sql.js";
+import { inBatches, pruneBatchSize } from "../realtime/broadcast-prune.js";
+import { sql } from "kysely";
+//#region src/channels/sends-prune.ts
+const deleteOldSends = (db, statementTimeoutMs, limit) => writeTransaction(db, statementTimeoutMs, async (trx) => {
+	const { numAffectedRows } = await sql`delete from ${sql.id(sendsSchema, "sends")} where id in (
+        select id from ${sql.id(sendsSchema, "sends")} where sent_at < now() - interval '48 hours' limit ${limit} for update skip locked
+      )`.execute(trx);
+	return Number(numAffectedRows ?? 0n);
+});
+/** Deletes the sends of `channels.sends` more than 48 hours old, which no reader took because no socket was open, in batches. */
+const pruneSends = (db, statementTimeoutMs) => inBatches(pruneBatchSize, (limit) => deleteOldSends(db, statementTimeoutMs, limit));
+//#endregion
+export { pruneSends };

package/dist/channels/sends-schema-sql.js

@@ -0,0 +1,30 @@
+//#region src/channels/sends-schema-sql.ts
+/** The schema of SQL's broadcasts to the record channels. */
+const sendsSchema = "channels";
+/**
+* - `sends`: each broadcast SQL sent, inserted in the sender's transaction, taken out by a serving process once
+*   committed, or pruned after 48 hours when none read it.
+* - `send(resource, key, event, payload)`: inserts one. It runs as its owner, the app's role, which alone may call it,
+*   so that no other role, such as one of `/api/sb/rest/v1`'s, sends as the server; a trigger function that sends for
+*   them is `security definer`.
+*/
+const sendsSchemaSql = `create schema if not exists ${sendsSchema};
+
+create table if not exists ${sendsSchema}.sends (
+  id bigint generated always as identity primary key,
+  resource text not null,
+  key text not null,
+  event text not null,
+  payload jsonb not null,
+  sent_at timestamptz not null default now()
+);
+
+create index if not exists sends_sent_at on ${sendsSchema}.sends (sent_at);
+
+create or replace function ${sendsSchema}.send(resource text, key text, event text, payload jsonb) returns void
+  language sql security definer set search_path = ''
+  as $$ insert into ${sendsSchema}.sends (resource, key, event, payload) values (send.resource, send.key, send.event, send.payload) $$;
+
+revoke execute on function ${sendsSchema}.send(text, text, text, jsonb) from public;`;
+//#endregion
+export { sendsSchema, sendsSchemaSql };

package/dist/channels/sends-schema.d.ts

@@ -0,0 +1,7 @@
+import { Db } from "@protobase/query";
+//#region src/channels/sends-schema.d.ts
+/** The SQL that adds the `channels` schema `realtime: { sqlSends: true }` needs; `undefined` when it is there. */
+export declare const channelSendsMigration: (db: Db) => Promise<"create schema if not exists channels;\n\ncreate table if not exists channels.sends (\n  id bigint generated always as identity primary key,\n  resource text not null,\n  key text not null,\n  event text not null,\n  payload jsonb not null,\n  sent_at timestamptz not null default now()\n);\n\ncreate index if not exists sends_sent_at on channels.sends (sent_at);\n\ncreate or replace function channels.send(resource text, key text, event text, payload jsonb) returns void\n  language sql security definer set search_path = ''\n  as $$ insert into channels.sends (resource, key, event, payload) values (send.resource, send.key, send.event, send.payload) $$;\n\nrevoke execute on function channels.send(text, text, text, jsonb) from public;" | undefined>;
+/** Refuses to go on while the `channels` schema is missing; the project's migrations add it. */
+export declare const checkChannelSends: (db: Db) => Promise<void>;
+//#endregion

package/dist/channels/sends-schema.js

@@ -0,0 +1,18 @@
+import { sendsSchema, sendsSchemaSql } from "./sends-schema-sql.js";
+import { migrationCommand } from "../changes/capture-schema.js";
+import { sql } from "kysely";
+//#region src/channels/sends-schema.ts
+const sendsCurrent = async (db) => {
+	const { rows } = await sql`select to_regclass(${`${sendsSchema}.sends`}) is not null
+    and to_regprocedure(${`${sendsSchema}.send(text, text, text, jsonb)`}) is not null as found`.execute(db);
+	return rows[0].found;
+};
+/** The SQL that adds the `channels` schema `realtime: { sqlSends: true }` needs; `undefined` when it is there. */
+const channelSendsMigration = async (db) => await sendsCurrent(db) ? void 0 : sendsSchemaSql;
+/** Refuses to go on while the `channels` schema is missing; the project's migrations add it. */
+const checkChannelSends = async (db) => {
+	if (await sendsCurrent(db)) return;
+	throw new Error(`The ${sendsSchema} schema that realtime.sqlSends needs is missing. Write it as a migration with \`${migrationCommand}\`, apply it with the project's migrations, then start again.`);
+};
+//#endregion
+export { channelSendsMigration, checkChannelSends };

package/dist/channels/sent.js

@@ -1,8 +1,24 @@
+import { decodeBinaryFrame, encodeBinaryFrame } from "./binary-frame.js";
 //#region src/channels/sent.ts
 /** The sender as a broadcast message names it. */
 const senderOf = (sent) => ({
 	user: sent.user,
 	...sent.server && { server: true }
 });
+/**
+* A broadcast as the hub's payload. One of bytes goes as one binary frame, its sender the header, since the relay
+* carries a payload of bytes as they are and any other as JSON, which has no bytes.
+*/
+const packSent = (sent) => sent.payload instanceof ArrayBuffer ? encodeBinaryFrame(senderOf(sent), sent.payload) : sent;
+/** The broadcast a hub's payload carries (`packSent`). */
+const unpackSent = (packed) => {
+	if (!(packed instanceof ArrayBuffer)) return packed;
+	const { header, bytes } = decodeBinaryFrame(packed);
+	return {
+		user: header.user,
+		...header.server === true && { server: true },
+		payload: bytes
+	};
+};
 //#endregion
-export { senderOf };
+export { packSent, senderOf, unpackSent };

package/dist/create-admin.d.ts

@@ -51,7 +51,7 @@ export type CreateAdminInput = {
   subscriptions?: SubscriptionDefinition[];
   /** Webhook subscriptions made in the admin app, from `webhooks: {}` (see `WebhooksOptions`). */
   webhooks?: WebhooksOptions;
-  /** How `/api/sb/realtime/v1` is served: by one process or several (see `RealtimeOptions`). */
+  /** How `/api/sb/realtime/v1` and `/api/channels` are served: by one process or several, and whether SQL sends to channels (see `RealtimeOptions`). */
   realtime?: RealtimeOptions;
   /** Each user's devices and the endpoints that register them, from `notifications: {}` (see `NotificationsOptions`). */
   notifications?: NotificationsOptions;

package/dist/create-admin.js

@@ -17,10 +17,11 @@ import { apiKeySettings } from "./api-keys/api-key-settings.js";
 import { apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { jwtVerifier } from "./auth/jwt.js";
 import { realtimeApp } from "./realtime/realtime-app.js";
-import { relayed } from "./realtime/relay/realtime-options.js";
+import { relayed, sqlSends } from "./realtime/relay/realtime-options.js";
 import { realtimeHubs } from "./realtime/realtime-hubs.js";
 import { channelSender } from "./channels/channel-sender.js";
 import { channelRoutes } from "./channels/channel-routes.js";
+import { databaseSends } from "./channels/database-sends.js";
 import { startRealtimePrune } from "./realtime/realtime-prune.js";
 import { restRoutes } from "./rest/rest-routes.js";
 import { storageRoutes } from "./storage/storage-routes.js";
@@ -399,6 +400,18 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 	}));
 	if (upgradeWebSocket) {
 		const visitors = (caller) => withAnonymous(caller, options.roles);
+		const sends = sqlSends(realtime) ? databaseSends({
+			db,
+			statementTimeoutMs: deps.statementTimeoutMs,
+			registry,
+			broadcasts: hubs.records.broadcasts,
+			report
+		}) : void 0;
+		const follow = () => {
+			const unrelay = hubs.follow();
+			const unsend = sends?.follow();
+			return () => (unsend?.(), unrelay());
+		};
 		app.route(systemPath || "/", channelRoutes({
 			deps,
 			upgradeWebSocket,
@@ -406,7 +419,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 			authenticateUpgrade: visitors(upgradeAuthenticate),
 			onError,
 			hubs: hubs.records,
-			follow: hubs.follow,
+			follow,
 			report
 		}));
 	}
@@ -490,6 +503,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		db,
 		statementTimeoutMs: deps.statementTimeoutMs,
 		relayed: relayed(realtime),
+		sqlSends: sqlSends(realtime),
 		report
 	});
 	return Object.assign(app, {

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { MobileConfig } from "./mobile-config.js";
 import { AppIdentity } from "./app-identity.js";
 import { AppIcons, PngIcon, pngIcons } from "./web-app/app-icons.js";
-import { RealtimeOptions, relayed } from "./realtime/relay/realtime-options.js";
+import { RealtimeOptions, relayed, sqlSends } from "./realtime/relay/realtime-options.js";
 import { EventsOptions } from "./changes/events-options.js";
 import { DecryptField, FieldDecrypter, FieldReader, RecordKey } from "./encryption/decrypt-field-types.js";
 import { StandardSchema, readJson } from "./functions/read-json.js";
@@ -101,6 +101,7 @@ import { parseColumns, readOutbox } from "./changes/outbox.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkRealtimeRelay, realtimeRelayMigration } from "./realtime/relay/relay-schema.js";
+import { channelSendsMigration, checkChannelSends } from "./channels/sends-schema.js";
 import { checkComments, commentsMigration } from "./comments/comments-sql.js";
 import { CheckAiInput, checkAi } from "./ai/check-ai.js";
 import { CommentItem } from "./comments/comment-item.js";
@@ -175,4 +176,4 @@ import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/ru
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
 import { AdminAuth, CreateAuthOptions, UserCreatedHook, normalizeRoles } from "./better-auth/create-auth.js";
-export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/index.js

@@ -25,7 +25,7 @@ import { apiKeySettings, apiKeyVariables } from "./api-keys/api-key-settings.js"
 import { apiKeyCaller } from "./api-keys/resolve-caller.js";
 import { jwtAuthenticator, jwtVerifier } from "./auth/jwt.js";
 import { realtimeLimits } from "./realtime/realtime-limits.js";
-import { relayed } from "./realtime/relay/realtime-options.js";
+import { relayed, sqlSends } from "./realtime/relay/realtime-options.js";
 import { backgroundSettled, waitUntil } from "./functions/wait-until.js";
 import { objectKey } from "./storage/object-key.js";
 import { appNameOver, defaultAppName, shownAppName } from "./app-name.js";
@@ -109,6 +109,7 @@ import { checkResourcesOutsideAuthStore } from "./better-auth/store/resources-ou
 import { checkComputed, computedMigration } from "./computed/computed-schema.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkRealtimeRelay, realtimeRelayMigration } from "./realtime/relay/relay-schema.js";
+import { channelSendsMigration, checkChannelSends } from "./channels/sends-schema.js";
 import { checkAi } from "./ai/check-ai.js";
 import { checkNotificationsSchema, notificationsMigration } from "./notifications/schema.js";
 import { sendNotification } from "./notifications/send-notification.js";
@@ -127,4 +128,4 @@ import { enqueueJob } from "./jobs/declared-job.js";
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MissingCredentials, ModelError, NotificationSendError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, checkAi, checkAuthSchema, checkChanges, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MissingCredentials, ModelError, NotificationSendError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.59.0";
+var version = "0.59.2";
 //#endregion
 export { version };

package/dist/realtime/database-broadcasts.js

@@ -1,5 +1,6 @@
 import { writeTransaction } from "../transactions.js";
 import { fitsFrame } from "./broadcast-frame.js";
+import { followedPoll } from "./followed-poll.js";
 import { realtimeLimits } from "./realtime-limits.js";
 import { sql } from "kysely";
 import { Buffer } from "node:buffer";
@@ -43,8 +44,6 @@ const messagesTableExists = async (db) => (await sql`select to_regclass('realtim
 * `realtime.messages` sends nothing, and is checked again at each read.
 */
 const databaseBroadcasts = ({ db, statementTimeoutMs, broadcasts, intervalMs = 1e3, report }) => {
-	let followers = 0;
-	let running = false;
 	const read = async () => {
 		if (!await messagesTableExists(db)) return;
 		for (;;) {
@@ -56,29 +55,7 @@ const databaseBroadcasts = ({ db, statementTimeoutMs, broadcasts, intervalMs = 1
 			if (rows.length < batchSize) return;
 		}
 	};
-	const tick = async () => {
-		if (followers === 0) {
-			running = false;
-			return;
-		}
-		await read().catch(report);
-		setTimeout(() => void tick(), intervalMs);
-	};
-	return { 
-	/** Reads the table from now on, until the returned function is called; once for each call, however often. */
-follow: () => {
-		followers += 1;
-		if (!running) {
-			running = true;
-			tick();
-		}
-		let followed = true;
-		return () => {
-			if (!followed) return;
-			followed = false;
-			followers -= 1;
-		};
-	} };
+	return followedPoll(read, intervalMs, report);
 };
 //#endregion
 export { databaseBroadcasts, messagesTableExists, publicationOfRow };

package/dist/realtime/followed-poll.js

@@ -0,0 +1,34 @@
+//#region src/realtime/followed-poll.ts
+/**
+* Runs `read` every `intervalMs` while anyone follows, starting at once with the first follower; a failed read goes to
+* `report`, and the next one tries again.
+*/
+const followedPoll = (read, intervalMs, report) => {
+	let followers = 0;
+	let running = false;
+	const tick = async () => {
+		if (followers === 0) {
+			running = false;
+			return;
+		}
+		await read().catch(report);
+		setTimeout(() => void tick(), intervalMs);
+	};
+	return { 
+	/** Reads from now on, until the returned function is called; once for each call, however often. */
+follow: () => {
+		followers += 1;
+		if (!running) {
+			running = true;
+			tick();
+		}
+		let followed = true;
+		return () => {
+			if (!followed) return;
+			followed = false;
+			followers -= 1;
+		};
+	} };
+};
+//#endregion
+export { followedPoll };

package/dist/realtime/realtime-prune.d.ts

@@ -5,15 +5,17 @@ export type RealtimePruneOptions = {
   statementTimeoutMs: number;
   /** Whether the app's processes relay through `realtime_relay`, whose frames and counts are pruned too. */
   relayed: boolean;
+  /** Whether SQL sends to the record channels through `channels.sends`, whose old rows are pruned too. */
+  sqlSends: boolean;
   /** Where a failed prune goes; the next one tries again. */
   report: (error: unknown) => void;
 };
 /**
  * Prunes what the realtime tables keep whether or not a socket is open, as on an app that never opens one: the old
- * broadcast rows of `realtime.messages` and, relayed, the relay's old frames and counts, on `pruneSchedule`. It runs
- * only while the process does, so it never wakes a sleeping app.
+ * broadcast rows of `realtime.messages`, relayed, the relay's old frames and counts and, with `sqlSends`, the old
+ * rows of `channels.sends`, on `pruneSchedule`. It runs only while the process does, so it never wakes a sleeping app.
  */
-export declare const startRealtimePrune: ({ db, statementTimeoutMs, relayed, report }: RealtimePruneOptions) => {
+export declare const startRealtimePrune: ({ db, statementTimeoutMs, relayed, sqlSends, report }: RealtimePruneOptions) => {
   stop: () => Promise<void>;
 };
 export type RealtimePrune = ReturnType<typeof startRealtimePrune>;

package/dist/realtime/realtime-prune.js

@@ -1,12 +1,17 @@
 import { pruneFrames } from "./relay/relay-frame-sql.js";
 import { pruneBroadcasts } from "./broadcast-prune.js";
+import { pruneSends } from "../channels/sends-prune.js";
 import { pruneSchedule } from "./prune-schedule.js";
 //#region src/realtime/realtime-prune.ts
 /**
 * Prunes what the realtime tables keep whether or not a socket is open, as on an app that never opens one: the old
-* broadcast rows of `realtime.messages` and, relayed, the relay's old frames and counts, on `pruneSchedule`. It runs
-* only while the process does, so it never wakes a sleeping app.
+* broadcast rows of `realtime.messages`, relayed, the relay's old frames and counts and, with `sqlSends`, the old
+* rows of `channels.sends`, on `pruneSchedule`. It runs only while the process does, so it never wakes a sleeping app.
 */
-const startRealtimePrune = ({ db, statementTimeoutMs, relayed, report }) => pruneSchedule([() => pruneBroadcasts(db, statementTimeoutMs), ...relayed ? [() => pruneFrames(db)] : []], report);
+const startRealtimePrune = ({ db, statementTimeoutMs, relayed, sqlSends, report }) => pruneSchedule([
+	() => pruneBroadcasts(db, statementTimeoutMs),
+	...relayed ? [() => pruneFrames(db)] : [],
+	...sqlSends ? [() => pruneSends(db, statementTimeoutMs)] : []
+], report);
 //#endregion
 export { startRealtimePrune };

package/dist/realtime/relay/realtime-options.d.ts

@@ -7,7 +7,14 @@ export type RealtimeOptions = {
    * `realtime_relay` schema of the app's database, which `protobase migration` writes.
    */
   processes?: 'one' | 'many';
+  /**
+   * `true` lets SQL in the app's database broadcast to the record channels with `channels.send()`, from the `channels`
+   * schema `protobase migration` writes.
+   */
+  sqlSends?: boolean;
 };
 /** Whether the options share broadcasts and presence between processes. */
 export declare const relayed: (options?: RealtimeOptions) => boolean;
+/** Whether the options let SQL broadcast to the record channels. */
+export declare const sqlSends: (options?: RealtimeOptions) => boolean;
 //#endregion

package/dist/realtime/relay/realtime-options.js

@@ -5,5 +5,11 @@ const relayed = (options = {}) => {
 	if (options.processes === "many") return true;
 	throw new Error(`Invalid realtime.processes "${String(options.processes)}": use "one" or "many"`);
 };
+/** Whether the options let SQL broadcast to the record channels. */
+const sqlSends = (options = {}) => {
+	if (options.sqlSends === void 0) return false;
+	if (typeof options.sqlSends === "boolean") return options.sqlSends;
+	throw new Error(`Invalid realtime.sqlSends "${String(options.sqlSends)}": use true or false`);
+};
 //#endregion
-export { relayed };
+export { relayed, sqlSends };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.59.0",
+  "version": "0.59.2",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -42,9 +42,9 @@
     "@better-auth/sso": "^1.7.12",
     "@livekit/protocol": "1.53.1",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.59.0",
-    "@protobase/query": "0.59.0",
-    "@protobase/schema": "0.59.0",
+    "@protobase/layout": "0.59.2",
+    "@protobase/query": "0.59.2",
+    "@protobase/schema": "0.59.2",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",