@protobase/server 0.59.3 → 0.60.0

package/dist/calls/peer/peer-backend.js

@@ -1,131 +1,79 @@
 //#region src/calls/peer/peer-backend.ts
-/** How long a member whose socket was lost stays in the call for the others, waiting for their browser to resume. */
-const awayMs = 3e4;
 /**
-* The peer plugin: no media server. Protobase passes each member's descriptions and candidates to the member they name,
-* and tells every member who else is in the call and which of their tracks they hear; the browsers send their media to
-* each other directly. Members meet only within this process, which keeps who is in each call.
+* The peer plugin: no media server. Protobase passes each member's descriptions and candidates to the member they name
+* in the same call, and tells every member who else is in it and which of their tracks they hear; the browsers send
+* their media to each other directly. Who is in the call, and the tracks each sends, are the call's record.
 */
-const peerBackend = (settings) => {
-	const calls = /* @__PURE__ */ new Map();
-	const membersOf = (call) => [...calls.get(call)?.values() ?? []];
-	const announce = (call) => {
-		const present = membersOf(call);
-		for (const viewer of present) {
-			if (viewer.away) continue;
-			const others = present.filter((other) => other !== viewer);
-			const hears = viewer.member.hears ?? (() => true);
-			viewer.link.send({
+const peerBackend = (settings) => ({ open: (member, link, room) => {
+	const own = /* @__PURE__ */ new Map();
+	const keep = (sid, kind, source) => own.set(sid, {
+		sid,
+		member: member.member,
+		kind,
+		source,
+		muted: false
+	});
+	const share = () => room.tracks([...own.values()]);
+	const receive = async (message) => {
+		switch (message.type) {
+			case "join":
+				link.send({
+					type: "joined",
+					call: room.call,
+					mode: "peer",
+					participant: member.member,
+					iceServers: settings.iceServers ?? []
+				});
+				return;
+			case "resume":
+				for (const track of message.tracks) keep(track.sid, track.kind, track.source);
+				link.send({ type: "resumed" });
+				return;
+			case "publish":
+				for (const track of message.tracks) keep(track.cid, track.kind, track.source);
+				link.send({
+					type: "published",
+					tracks: message.tracks.map((track) => ({
+						cid: track.cid,
+						sid: track.cid
+					}))
+				});
+				return share();
+			case "unpublish":
+				own.delete(message.sid);
+				return share();
+			case "mute": {
+				const track = own.get(message.sid);
+				if (!track) return;
+				track.muted = message.muted;
+				return share();
+			}
+			case "signal": return room.signal(message.to, {
+				...message.description && { description: message.description },
+				...message.candidate && { candidate: message.candidate }
+			});
+			case "leave": return link.close(1e3, "left");
+			case "offer":
+			case "candidate":
+			case "view": return;
+		}
+	};
+	return {
+		receive,
+		end: () => {},
+		roster: (members) => {
+			const others = members.filter((other) => other.member !== member.member);
+			const hears = member.hears ?? (() => true);
+			link.send({
 				type: "peers",
-				members: others.map((other) => other.member.member)
+				members: others.map((other) => other.member)
 			});
-			viewer.link.send({
+			link.send({
 				type: "tracks",
-				tracks: others.flatMap((other) => [...other.tracks.values()]).filter(hears)
+				tracks: others.flatMap((other) => other.tracks).filter(hears)
 			});
 		}
 	};
-	const remove = (self) => {
-		const call = calls.get(self.member.call);
-		if (call?.get(self.member.member) !== self) return;
-		clearTimeout(self.away);
-		call.delete(self.member.member);
-		if (call.size === 0) calls.delete(self.member.call);
-		announce(self.member.call);
-	};
-	const open = (member, link) => {
-		const self = {
-			member,
-			link,
-			tracks: /* @__PURE__ */ new Map()
-		};
-		const enter = () => {
-			const call = calls.get(member.call) ?? /* @__PURE__ */ new Map();
-			calls.set(member.call, call);
-			const before = call.get(member.member);
-			call.set(member.member, self);
-			if (before) {
-				clearTimeout(before.away);
-				if (!before.away) {
-					before.link.send({
-						type: "left",
-						reason: "removed"
-					});
-					before.link.close(1e3, "left");
-				}
-			}
-		};
-		const receive = (message) => {
-			switch (message.type) {
-				case "join":
-				case "resume":
-					if (message.type === "resume") for (const track of message.tracks) self.tracks.set(track.sid, {
-						sid: track.sid,
-						member: member.member,
-						kind: track.kind,
-						source: track.source,
-						muted: false
-					});
-					enter();
-					link.send(message.type === "join" ? {
-						type: "joined",
-						mode: "peer",
-						participant: member.member,
-						iceServers: settings.iceServers ?? []
-					} : { type: "resumed" });
-					return announce(member.call);
-				case "publish":
-					for (const track of message.tracks) self.tracks.set(track.cid, {
-						sid: track.cid,
-						member: member.member,
-						kind: track.kind,
-						source: track.source,
-						muted: false
-					});
-					link.send({
-						type: "published",
-						tracks: message.tracks.map((track) => ({
-							cid: track.cid,
-							sid: track.cid
-						}))
-					});
-					return announce(member.call);
-				case "unpublish":
-					self.tracks.delete(message.sid);
-					return announce(member.call);
-				case "mute": {
-					const track = self.tracks.get(message.sid);
-					if (!track) return;
-					track.muted = message.muted;
-					return announce(member.call);
-				}
-				case "signal": {
-					const to = calls.get(member.call)?.get(message.to);
-					if (!to || to.away || to === self) return;
-					to.link.send({
-						type: "signal",
-						from: member.member,
-						...message.description && { description: message.description },
-						...message.candidate && { candidate: message.candidate }
-					});
-					return;
-				}
-				case "leave": return link.close(1e3, "left");
-				case "offer":
-				case "candidate":
-				case "view": return;
-			}
-		};
-		return {
-			receive,
-			end: (how) => {
-				if (how === "left") return remove(self);
-				if (calls.get(member.call)?.get(member.member) !== self) return;
-				self.away = setTimeout(() => remove(self), awayMs);
-			}
-		};
-	};
-	return { open };
-};
+} });
 //#endregion
 export { peerBackend };

package/dist/calls/record-calls.js

@@ -0,0 +1,78 @@
+import { HttpProblem, forbidden, notFound } from "../problem.js";
+import { requestAccess, requireOperation } from "../request-access.js";
+import { readTransaction } from "../transactions.js";
+import { readableRecord } from "../comments/comment-access.js";
+import { encodeKey } from "@protobase/schema/internal";
+import { streamSSE } from "hono/streaming";
+//#region src/calls/record-calls.ts
+/** How often a page that follows a record's calls is checked again: whether its user still reads the record. */
+const recheckMs = 6e4;
+const heartbeatMs = 25e3;
+/**
+* Whether the caller may see the record's calls: signed in, and able to read the record (operation, tenant, row filter
+* and record-level rule, as a get). A record they cannot read is the same 404 as one that does not exist.
+*/
+const requireReader = async (deps, entry, session, key) => {
+	if (session.anonymous || session.user.id === "") throw forbidden("calls-need-user", "Sign in to see the calls");
+	const access = await requestAccess(deps, entry, session);
+	requireOperation(access, "read");
+	if (!await readTransaction(deps.db, deps.statementTimeoutMs, (trx) => readableRecord(trx, access, key, "hide"))) throw notFound(`No ${entry.name} with this key`);
+};
+const callsOf = (deps) => {
+	if (!deps.calls) throw notFound("This app has no calls");
+	return deps.calls;
+};
+/** `GET /{resource}/{key}:calls`: the record's latest calls, newest first, the one going on first. */
+const readRecordCalls = async (deps, entry, session, key) => {
+	const calls = callsOf(deps);
+	await requireReader(deps, entry, session, key);
+	return { items: await (await calls.runtime()).of({
+		resource: entry.name,
+		key: encodeKey(key)
+	}) };
+};
+/**
+* `GET /{resource}/{key}:calls?watch=true`: the same as a `text/event-stream`, each event's data `{ items }`, at once
+* and whenever the calls change. The stream ends once its user can no longer read the record, at the next minute's
+* check, or when the check fails.
+*/
+const watchRecordCalls = async (c, deps, entry, key) => {
+	const calls = callsOf(deps);
+	const session = c.get("session");
+	await requireReader(deps, entry, session, key);
+	const runtime = await calls.runtime();
+	return streamSSE(c, async (stream) => {
+		const queue = [];
+		let wake = () => {};
+		let allowed = true;
+		stream.onAbort(() => wake());
+		const stop = await runtime.watch({
+			resource: entry.name,
+			key: encodeKey(key)
+		}, (items) => {
+			queue.push(items);
+			wake();
+		});
+		const recheck = setInterval(() => {
+			requireReader(deps, entry, session, key).catch((error) => {
+				if (!(error instanceof HttpProblem)) deps.report(error);
+				allowed = false;
+				wake();
+			});
+		}, recheckMs);
+		const heartbeat = setInterval(() => void stream.write(": ping\n\n"), heartbeatMs);
+		try {
+			while (!stream.aborted && allowed) {
+				const items = queue.shift();
+				if (items) await stream.writeSSE({ data: JSON.stringify({ items }) });
+				else await new Promise((resolve) => wake = resolve);
+			}
+		} finally {
+			clearInterval(recheck);
+			clearInterval(heartbeat);
+			stop();
+		}
+	});
+};
+//#endregion
+export { readRecordCalls, watchRecordCalls };

package/dist/create-admin.js

@@ -59,6 +59,7 @@ import { toApiFunction } from "./functions/define-function.js";
 import { createWebhooks } from "./webhooks/webhooks.js";
 import { webhookTable } from "./webhooks/table/webhook-table.js";
 import { subscriptionUrlCheck, subscriptionWriteCheck } from "./webhooks/table/validate-hook.js";
+import { callsService } from "./calls/calls-service.js";
 import { deviceStore, removeDevicesWithUsers } from "./notifications/device-store-of.js";
 import { historyStore, removeHistoryWithUsers } from "./notifications/history-store-of.js";
 import { devicesPath, historyPath } from "./notifications/paths.js";
@@ -263,7 +264,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		...withAi && { ai: {
 			...model && { model },
 			...options.onUnhandledError && { report: options.onUnhandledError }
-		} }
+		} },
+		...calls && { calls: callsService(() => deps, calls) }
 	};
 	const appName = shownAppName(auth, globalThis.process?.env ?? {});
 	const meta = createMeta(deps, appName, icons?.favicon ? faviconPath : void 0);
@@ -409,7 +411,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], pages = []
 		wake: () => wakeDispatch(deps),
 		upgradeWebSocket,
 		upgradeAuthenticate,
-		...calls && { calls },
+		...deps.calls && { calls: deps.calls },
 		report
 	}));
 	if (upgradeWebSocket) {

package/dist/deps.d.ts

@@ -1,5 +1,6 @@
 import { AuditQueue, PipelineHook, WriteCheck } from "./types.js";
 import { CommentUsers } from "./comments/comment-users.js";
+import { CallsService } from "./calls/calls-service-type.js";
 import { Registry } from "./registry.js";
 import { ErrorReportingSettings } from "./error-reporting/error-reporting-settings.js";
 import { mentionJob } from "./comments/mention-job.js";
@@ -91,5 +92,7 @@ export type Deps = {
     model?: ModelSettings;
     report?: (error: unknown) => void;
   };
+  /** With `calls`: the app's calls, which functions admit members to and the records' readers follow. */
+  calls?: CallsService;
 };
 //#endregion

package/dist/functions/function-socket.d.ts

@@ -13,6 +13,7 @@ export type SocketEvents = {
   onOpen?: (socket: FunctionSocket) => void | Promise<void>;
   /** Text arrives as a string, binary as an ArrayBuffer. The next message waits until a returned promise settles. */
   onMessage?: (data: string | ArrayBuffer, socket: FunctionSocket) => void | Promise<void>;
+  /** With the code the server closed the socket with, such as 1008 after a refused check, else the browser's. */
   onClose?: (code: number, reason: string) => void | Promise<void>;
   /**
    * Checked every minute after the framework's own check, while the socket is open; what it returns is ignored. Throw

package/dist/functions/function-socket.js

@@ -18,9 +18,14 @@ const socketEvents = (events, { report, recheck }) => {
 	let waiting = 0;
 	let paused = false;
 	let ended = false;
+	let closedWith;
 	let stopRecheck = () => {};
 	const end = (code, reason) => {
 		ended = true;
+		closedWith ??= {
+			code,
+			reason
+		};
 		stopRecheck();
 		raw.close(code, reason);
 	};
@@ -56,7 +61,13 @@ const socketEvents = (events, { report, recheck }) => {
 					if (raw.readyState !== openState) return resolve();
 					raw.send(data, () => resolve());
 				}),
-				close: (code, reason) => raw.close(code, reason),
+				close: (code, reason) => {
+					closedWith ??= {
+						code: code ?? 1e3,
+						reason: reason ?? ""
+					};
+					raw.close(code, reason);
+				},
 				get bufferedAmount() {
 					return raw.bufferedAmount;
 				}
@@ -77,7 +88,8 @@ const socketEvents = (events, { report, recheck }) => {
 		},
 		onClose: (event) => {
 			stopRecheck();
-			enqueue(() => events.onClose?.(event.code, event.reason), true);
+			const { code, reason } = closedWith ?? event;
+			enqueue(() => events.onClose?.(code, reason), true);
 		}
 	};
 };

package/dist/functions/routes.js

@@ -24,8 +24,7 @@ const isUpgrade = (request) => request.headers.get("upgrade")?.toLowerCase() ===
 * A function may answer an upgrade with a socket, only once it returned. While it is open, its caller is checked again
 * every minute: a protected function's always, a public one's once `caller()` resolved.
 */
-const functionRoutes = ({ basePath, functions, authenticate, access, db, records, channels, decryptField, onError, wake, upgradeWebSocket, upgradeAuthenticate = authenticate, calls: callsOptions, report }) => {
-	const calls = callsAccess(callsOptions);
+const functionRoutes = ({ basePath, functions, authenticate, access, db, records, channels, decryptField, onError, wake, upgradeWebSocket, upgradeAuthenticate = authenticate, calls, report }) => {
 	const app = new Hono().basePath(basePath);
 	app.onError(onError);
 	const sessionOf = (request) => isUpgrade(request) ? upgradeAuthenticate(request) : authenticate(request);
@@ -71,7 +70,7 @@ const functionRoutes = ({ basePath, functions, authenticate, access, db, records
 					channels,
 					caller: resolveCaller,
 					acceptWebSocket: acceptor.accept,
-					calls
+					calls: callsAccess(calls, resolveCaller)
 				};
 				return acceptor.answer(name, await invokeFunction(name, fn, request, context));
 			}
@@ -101,7 +100,7 @@ const functionRoutes = ({ basePath, functions, authenticate, access, db, records
 				caller: async () => caller,
 				decryptField: decryptField(reader),
 				acceptWebSocket: acceptor.accept,
-				calls
+				calls: callsAccess(calls, async () => caller)
 			};
 			return acceptor.answer(name, await invokeFunction(name, fn, request, context));
 		}));

package/dist/index.d.ts

@@ -104,6 +104,7 @@ import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.
 import { checkRealtimeRelay, realtimeRelayMigration } from "./realtime/relay/relay-schema.js";
 import { channelSendsMigration, checkChannelSends } from "./channels/sends-schema.js";
 import { checkComments, commentsMigration } from "./comments/comments-sql.js";
+import { callsMigration, checkCalls } from "./calls/calls-sql.js";
 import { CheckAiInput, checkAi } from "./ai/check-ai.js";
 import { CommentItem } from "./comments/comment-item.js";
 import { checkNotificationsSchema, notificationsMigration } from "./notifications/schema.js";
@@ -179,4 +180,4 @@ import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/ru
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
 import { AdminAuth, CreateAuthOptions, UserCreatedHook, normalizeRoles } from "./better-auth/create-auth.js";
-export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StatusOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailMessage, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StatusOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/index.js

@@ -112,6 +112,7 @@ import { checkComputed, computedMigration } from "./computed/computed-schema.js"
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkRealtimeRelay, realtimeRelayMigration } from "./realtime/relay/relay-schema.js";
 import { channelSendsMigration, checkChannelSends } from "./channels/sends-schema.js";
+import { callsMigration, checkCalls } from "./calls/calls-sql.js";
 import { checkAi } from "./ai/check-ai.js";
 import { checkNotificationsSchema, notificationsMigration } from "./notifications/schema.js";
 import { sendNotification } from "./notifications/send-notification.js";
@@ -131,4 +132,4 @@ import { enqueueJob } from "./jobs/declared-job.js";
 import { defineEmail } from "./mail/define-email.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MissingCredentials, ModelError, NotificationSendError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MissingCredentials, ModelError, NotificationSendError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.59.3";
+var version = "0.60.0";
 //#endregion
 export { version };

package/dist/routes/record.js

@@ -13,6 +13,7 @@ import { revealField } from "../reveal-service.js";
 import { readHistory } from "../history/read-history.js";
 import { mentionable } from "../comments/mentionable.js";
 import { generateField } from "../ai/generate-route.js";
+import { readRecordCalls, watchRecordCalls } from "../calls/record-calls.js";
 import { Hono } from "hono";
 //#region src/routes/record.ts
 const recordRoutes = (deps) => {
@@ -21,6 +22,11 @@ const recordRoutes = (deps) => {
 		const { entry } = resolveTarget(deps, c.req.param("resource"));
 		if (c.req.param("key").endsWith(":history")) return c.json(await readHistory(deps, entry, c.get("session"), keyFromPath(c, entry, ":history"), c.req.query()));
 		if (c.req.param("key").endsWith(":comments")) return c.json(await readComments(deps, entry, c.get("session"), keyFromPath(c, entry, ":comments"), c.req.query()));
+		if (c.req.param("key").endsWith(":calls")) {
+			const key = keyFromPath(c, entry, ":calls");
+			if (c.req.query("watch") === "true") return watchRecordCalls(c, deps, entry, key);
+			return c.json(await readRecordCalls(deps, entry, c.get("session"), key));
+		}
 		if (c.req.param("key").endsWith(":mentionable")) return c.json(await mentionable(deps, entry, c.get("session"), keyFromPath(c, entry, ":mentionable"), c.req.query()));
 		const found = await readRecord(deps, entry, c.get("session"), keyFromPath(c, entry), c.req.query("show_deleted") === "true");
 		const columns = selectedFields({

package/dist/webhooks/attempt.js

@@ -47,6 +47,7 @@ const callFunction = async (name, subscription, event, options, context, signal)
 		session,
 		records: context.records(session)
 	};
+	const noCalls = () => Promise.reject(/* @__PURE__ */ new Error(`The function "${name}" reached calls, which a webhook delivery has none of`));
 	const acceptWebSocket = () => {
 		throw new Error(`The function "${name}" accepted a WebSocket, but a webhook delivery is no upgrade`);
 	};
@@ -56,7 +57,11 @@ const callFunction = async (name, subscription, event, options, context, signal)
 		channels: context.channels,
 		caller: async () => caller,
 		acceptWebSocket,
-		calls: { join: async () => acceptWebSocket() }
+		calls: {
+			join: async () => acceptWebSocket(),
+			remove: noCalls,
+			of: noCalls
+		}
 	};
 	return invokeFunction(name, fn, await request("http://protobase.internal/", event, options, signal), fn.options.public ? functionContext : {
 		...functionContext,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.59.3",
+  "version": "0.60.0",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -42,9 +42,9 @@
     "@better-auth/sso": "^1.7.12",
     "@livekit/protocol": "1.53.1",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.59.3",
-    "@protobase/query": "0.59.3",
-    "@protobase/schema": "0.59.3",
+    "@protobase/layout": "0.60.0",
+    "@protobase/query": "0.60.0",
+    "@protobase/schema": "0.60.0",
     "@react-email/render": "^2.1.0",
     "@scalar/hono-api-reference": "^0.12.10",
     "@sentry/core": "^11.7.0",