@protobase/server 0.67.12 → 0.68.1

package/dist/batch/run-batch.d.ts

@@ -1,5 +1,6 @@
 import { Row } from "../types.js";
 import "../deps.js";
+import "../idempotency.js";
 import { WriteResult } from "../write-shared.js";
 import "./schema.js";
 //#region src/batch/run-batch.d.ts

package/dist/batch/run-batch.js

@@ -3,6 +3,7 @@ import { requestAccess } from "../request-access.js";
 import { writeTransaction } from "../transactions.js";
 import { actorSettings, wakeDispatch } from "../changes/actor.js";
 import { problemOf } from "../error-handler.js";
+import { once } from "../idempotency.js";
 import { scheduleRemovedFiles } from "../files/attach.js";
 import { keyOf } from "../write-shared.js";
 import { checkBeforeWrite, writeIn } from "../write-pipeline.js";
@@ -27,9 +28,10 @@ const atOperation = (error, index, operation) => {
 /**
 * Runs the operations in order inside ONE transaction, each through the normal write pipeline (validation, access with row
 * filters and record-level rules, tenant, ETags, hooks), after the checks that come before it. Any failure rolls the
-* whole batch back and names the failing operation.
+* whole batch back and names the failing operation. With `idempotency`, a batch repeated with its key writes nothing and
+* returns the results of the one that committed.
 */
-const runBatch = async (deps, session, operations) => {
+const runBatch = async (deps, session, operations, idempotency) => {
 	const refs = operations.flatMap((operation) => operation.op === "create" && operation.ref ? [operation.ref] : []);
 	if (new Set(refs).size !== refs.length) throw badRequest("invalid-parameter", "Each create may use a ref name once");
 	const accesses = /* @__PURE__ */ new Map();
@@ -51,7 +53,7 @@ const runBatch = async (deps, session, operations) => {
 		});
 	}
 	const removed = [];
-	const written = await writeTransaction(deps.db, deps.statementTimeoutMs, async (trx) => {
+	const written = await writeTransaction(deps.db, deps.statementTimeoutMs, (trx) => once(trx, idempotency, async () => {
 		const created = /* @__PURE__ */ new Map();
 		const results = [];
 		for (const [index, operation] of operations.entries()) try {
@@ -114,7 +116,7 @@ const runBatch = async (deps, session, operations) => {
 			throw atOperation(error, index, operation);
 		}
 		return results;
-	}, actorSettings(deps, session));
+	}), actorSettings(deps, session));
 	await scheduleRemovedFiles(deps, removed);
 	wakeDispatch(deps);
 	return written;

package/dist/check-views.js

@@ -69,6 +69,11 @@ const textHintErrors = (view, model) => Object.entries(view.fields).flatMap(([na
 	const format = hints.format !== void 0 && textFormats.has(hints.format) ? [`format('${hints.format}') of "${name}" needs a text field, not ${field.type}`] : [];
 	return [...textHints.filter((hint) => hints[hint]).map((hint) => `${hint} "${name}" needs a text field, not ${field.type}`), ...format];
 });
+const notOnCreateErrors = (view, model) => Object.entries(view.fields).flatMap(([name, hints]) => {
+	const field = model.fields[name];
+	if (!hints.notOnCreate || !field || field.nullable || field.default || field.readOnly) return [];
+	return [`notOnCreate "${name}" is a field a create needs: make it optional or give it a default`];
+});
 const linkErrors = (view, model, models, pages, createPages) => view.actions.flatMap(({ name, label, run }) => {
 	if (run?.kind !== "link") return [];
 	const error = linkActionError(label, run);
@@ -192,6 +197,7 @@ const checkViews = (registry, views, pages = [], fieldTypes = {}) => {
 			...valueLabelErrors(view, model),
 			...valueColorErrors(view, model),
 			...textHintErrors(view, model),
+			...notOnCreateErrors(view, model),
 			...numberHintErrors(view, model),
 			...listEditErrors(view, model),
 			...widgetErrors(view, model, fieldTypes),

package/dist/create-admin.js

@@ -60,6 +60,7 @@ import { createWebhooks } from "./webhooks/webhooks.js";
 import { webhookTable } from "./webhooks/table/webhook-table.js";
 import { subscriptionUrlCheck, subscriptionWriteCheck } from "./webhooks/table/validate-hook.js";
 import { workflowEngine } from "./workflows/workflow-engine.js";
+import { workflowTypesRoute } from "./workflows/workflow-types-route.js";
 import { callsService } from "./calls/calls-service.js";
 import { ringRoutes } from "./calls/ring-routes.js";
 import { upgradeAuthenticator } from "./functions/upgrade-caller.js";
@@ -119,7 +120,7 @@ import { builtInResources } from "./built-in-resources.js";
 import { adminUserTables } from "./user-tables/admin-user-tables.js";
 import { Hono } from "hono";
 import { accountPage, accountPageName, checkPages, settingsResources, withSettingsFields } from "@protobase/layout";
-import { guestCallsPath, ringsPath, statusPath } from "@protobase/schema/internal";
+import { guestCallsPath, ringsPath, statusPath, workflowTypesPath } from "@protobase/schema/internal";
 import { getIP } from "better-auth/api";
 //#region src/create-admin.ts
 const declaredRoles = (auth, roles) => {
@@ -386,7 +387,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 			sql: options.mcp !== false && options.mcp?.sql === true,
 			writes,
 			commented,
-			workflows: Boolean(engine),
+			...engine && { workflows: engine.types },
 			own: options.mcp !== false && options.mcp?.tools || []
 		});
 		const instructions = engine ? `${mcpInstructions}\n${workflowInstructions}` : mcpInstructions;
@@ -495,6 +496,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 		if (auth) removeHistoryWithUsers(auth, history);
 		app.route(historyPath(systemPath), guarded((routes) => void routes.route("/", historyRoutes(history, auth?.origins ?? []))));
 	}
+	if (engine) app.route(workflowTypesPath(systemPath), guarded((routes) => void routes.route("/", workflowTypesRoute(deps, engine.types.types))));
 	if (statusTables) app.route(statusPath(systemPath), guarded((routes) => void routes.route("/", statusRoutes(db, statusTables))));
 	if (deps.calls) app.route(ringsPath(systemPath), guarded((routes) => void routes.route("/", ringRoutes(deps.calls))));
 	if (deps.calls && auth) {
@@ -565,7 +567,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 		channels,
 		schema: changes,
 		log: (line) => console.log(line),
-		...table && { table }
+		...table && { table },
+		...engine && { onChanges: engine.onChanges }
 	});
 	const prune = () => startRealtimePrune({
 		db,
@@ -580,7 +583,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 		metaPath: `${deps.systemPath}/meta`,
 		jobs: [
 			...webhooks.jobs,
-			...engine ? [engine.job] : [],
+			...engine ? engine.jobs : [],
 			...withHistory && days !== void 0 ? [pruneHistoryJob(changes, days)] : [],
 			...mentions ? [mentions] : [],
 			...fill ? [fill] : [],

package/dist/idempotency.d.ts

@@ -0,0 +1 @@
+import { Db } from "@protobase/query";

package/dist/idempotency.js

@@ -0,0 +1,12 @@
+//#region src/idempotency.ts
+/** Runs `write` in `trx` once per key: a repeat returns the result the first write kept, as JSON keeps it. */
+const once = async (trx, idempotency, write) => {
+	if (!idempotency) return write();
+	const first = await idempotency.store.claim(trx, idempotency.key);
+	if (first) return first.result;
+	const result = await write();
+	await idempotency.store.keep(trx, idempotency.key, result);
+	return result;
+};
+//#endregion
+export { once };

package/dist/index.d.ts

@@ -151,8 +151,9 @@ import { McpApprovals, mcpApprovals } from "./mcp/mcp-approval-store.js";
 import { McpServerInput, mcpServer } from "./mcp/mcp-server.js";
 import { mcpIcons } from "./web-app/mcp-icons.js";
 import { mcpInstructions } from "./mcp/mcp-instructions.js";
+import { WorkflowCatalog, workflowReadTools } from "./workflows/mcp/workflow-read-tools.js";
 import { McpToolsInput, mcpTools } from "./mcp/mcp-tools.js";
-import { workflowReadTools } from "./workflows/mcp/workflow-read-tools.js";
+import { WorkflowTypes, workflowTypes } from "./workflows/workflow-types.js";
 import { workflowWriteTools } from "./workflows/mcp/workflow-write-tools.js";
 import { workflowInstructions } from "./workflows/mcp/workflow-instructions.js";
 import { McpGateInput, mcpGate, sessionOf } from "./mcp/mcp-gate.js";
@@ -195,4 +196,4 @@ import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/ru
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
 import { AdminAuth, CreateAuthOptions, UserCreatedHook, normalizeRoles } from "./better-auth/create-auth.js";
-export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailAttachment, type MailMessage, MailServerTimeoutError, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PdfComponent, type PdfOptions, type PdfTemplate, PersonalMailError, type PersonalMailErrorCode, type PersonalMailProviderId, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StartWorkflowOptions, type StatusOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type UserTables, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WorkflowsOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, checkWorkflowsSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, ownedDefinitionsMigration, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, startWorkflow, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, workflowInstructions, workflowReadTools, workflowWriteTools, workflowsMigration, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailAttachment, type MailMessage, MailServerTimeoutError, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PdfComponent, type PdfOptions, type PdfTemplate, PersonalMailError, type PersonalMailErrorCode, type PersonalMailProviderId, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StartWorkflowOptions, type StatusOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type UserTables, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WorkflowCatalog, type WorkflowTypes, type WorkflowsOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, checkWorkflowsSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, ownedDefinitionsMigration, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, startWorkflow, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, workflowInstructions, workflowReadTools, workflowTypes, workflowWriteTools, workflowsMigration, writeRecordTools };

package/dist/index.js

@@ -68,6 +68,8 @@ import { recordOf, resourceChange } from "./changes/resource-change.js";
 import { defineFunction } from "./functions/define-function.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { subscription } from "./webhooks/subscription.js";
+import { startWorkflow } from "./workflows/start-workflow.js";
+import { workflowTypes } from "./workflows/workflow-types.js";
 import { historyIdPattern, historyLimits } from "./notifications/history.js";
 import { PushMessageError, maxTtlSeconds, pushMessage, urgencies } from "./notifications/message.js";
 import { NotificationSendError, maxMessageBytes, maxRecipients } from "./notifications/send-input.js";
@@ -117,7 +119,6 @@ import { checkResourcesOutsideAuthStore } from "./better-auth/store/resources-ou
 import { checkComputed, computedMigration } from "./computed/computed-schema.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkWorkflowsSchema, workflowsMigration } from "./workflows/schema.js";
-import { startWorkflow } from "./workflows/start-workflow.js";
 import { checkUserTablesSchema, userTablesMigration } from "./user-tables/schema.js";
 import { ownedDefinitionsMigration } from "./user-tables/owned-definitions.js";
 import { userTableResources } from "./user-tables/user-table-resources.js";
@@ -145,4 +146,4 @@ import { defineEmail } from "./mail/define-email.js";
 import { definePdf } from "./pdf/define-pdf.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MailServerTimeoutError, MissingCredentials, ModelError, NotificationSendError, PersonalMailError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, checkWorkflowsSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, ownedDefinitionsMigration, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, startWorkflow, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, workflowInstructions, workflowReadTools, workflowWriteTools, workflowsMigration, writeRecordTools };
+export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MailServerTimeoutError, MissingCredentials, ModelError, NotificationSendError, PersonalMailError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, checkWorkflowsSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, ownedDefinitionsMigration, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, startWorkflow, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, workflowInstructions, workflowReadTools, workflowTypes, workflowWriteTools, workflowsMigration, writeRecordTools };

package/dist/mcp/mcp-tools.d.ts

@@ -1,6 +1,7 @@
 import { Session } from "../types.js";
 import { AssistantTool } from "../assistant/tools.js";
 import { McpWrites } from "./mcp-writes.js";
+import { WorkflowCatalog } from "../workflows/mcp/workflow-read-tools.js";
 import { Db } from "@protobase/query";
 //#region src/mcp/mcp-tools.d.ts
 export type McpToolsInput = {
@@ -20,9 +21,10 @@ export type McpToolsInput = {
   commented?: string[];
   /**
    * Offers the workflow tools, for an app with `workflows`: reading workflows, their types and runs, and checking
-   * definitions; with writes on, `create_workflow`, `update_workflow` and `run_workflow` too. Off by default.
+   * definitions against the app's types; with writes on, `create_workflow`, `update_workflow` and `run_workflow` too.
+   * Off by default.
    */
-  workflows?: boolean;
+  workflows?: WorkflowCatalog;
   /** The app's own tools, offered to every caller after the built-in ones. */
   own?: AssistantTool[];
 };

package/dist/mcp/mcp-tools.js

@@ -14,7 +14,13 @@ const builtInNames = (db) => new Set([
 	...writeTools({}),
 	...commentTools({ commented: ["comments"] }, {}),
 	readOnlyQueryTool(db),
-	...workflowReadTools(),
+	...workflowReadTools({
+		types: [],
+		checkWith: () => ({
+			resources: [],
+			triggers: {}
+		})
+	}),
 	...workflowWriteTools()
 ].map((tool) => tool.name));
 /** The app's own tools; one whose name is taken twice, or by a built-in tool, stops the server at startup. */
@@ -31,13 +37,13 @@ const checkedOwnTools = (db, own) => {
 * tools are built once and only chosen per session: the MCP server compiles each tool's schema, and a schema object made
 * per request would be compiled again.
 */
-const mcpTools = ({ db, sql, writes, commented = [], workflows = false, own = [] }) => {
+const mcpTools = ({ db, sql, writes, commented = [], workflows, own = [] }) => {
 	const ownTools = checkedOwnTools(db, own);
 	const read = readRecordTools();
 	const limits = writes === false ? false : writes === true || !writes.resources ? {} : { resources: writes.resources };
 	const write = limits === false ? [] : writeTools(limits);
 	const comments = commentTools({ commented }, limits);
-	const flows = workflows ? [...workflowReadTools(), ...limits === false ? [] : workflowWriteTools(limits)] : [];
+	const flows = workflows ? [...workflowReadTools(workflows), ...limits === false ? [] : workflowWriteTools(limits)] : [];
 	const query = sql ? [readOnlyQueryTool(db)] : [];
 	return (session) => [
 		...read,

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.67.12";
+var version = "0.68.1";
 //#endregion
 export { version };

package/dist/user-tables/admin-user-tables.js

@@ -1,12 +1,13 @@
 import { definitionsResources, fieldsResourceName, tablesResourceName } from "./definitions-resources.js";
 import { definitionsHook } from "./definitions-hook.js";
+import { fieldsView, tablesView } from "./definitions-views.js";
 import { servedUserTables } from "./served-user-tables.js";
 //#region src/user-tables/admin-user-tables.ts
 /**
 * What the tables users add bring to the admin, with `userTables` on: the resources over their definitions, through
-* which they are created, each user table a name in code (`codeNames`, the app's and Protobase's) does not take, and the
-* hook that creates their tables and columns. Without `tables`, nothing. With `organizations`, each definition belongs
-* to the organization it was made in (`definitionsResources`).
+* which they are created, with the views the admin app makes them in, each user table a name in code (`codeNames`, the
+* app's and Protobase's) does not take, and the hook that creates their tables and columns. Without `tables`, nothing.
+* With `organizations`, each definition belongs to the organization it was made in (`definitionsResources`).
 */
 const adminUserTables = (tables, codeNames, roles, organizations = false) => {
 	if (!tables) return {
@@ -31,7 +32,11 @@ const adminUserTables = (tables, codeNames, roles, organizations = false) => {
 			definitions.fields,
 			...served.resources
 		],
-		views: served.views,
+		views: [
+			tablesView,
+			fieldsView,
+			...served.views
+		],
 		hooks: [definitionsHook(codeNames)],
 		warnings: served.warnings
 	};

package/dist/user-tables/definitions-views.js

@@ -0,0 +1,93 @@
+import { fieldsResourceName, tablesResourceName } from "./definitions-resources.js";
+import { l, view } from "@protobase/schema";
+//#region src/user-tables/definitions-views.ts
+/** What each field type is called in the admin app; the UI's locale files translate them. */
+const fieldTypeLabels = {
+	text: "Text",
+	long_text: "Long text",
+	integer: "Whole number",
+	decimal: "Decimal number",
+	boolean: "Yes or no",
+	date: "Date",
+	timestamp: "Date and time",
+	json: "JSON"
+};
+/**
+* The tables list of the admin app, for whoever may make tables: a table's page has its fields, a link to add one and a
+* link to the table's own list, which shows once the app serves it. The title field is set once its field exists.
+*/
+const tablesView = view(tablesResourceName).names({
+	singular: "Table",
+	plural: "Tables"
+}).title((r) => r.plural_label).help("The tables people add to the app. Open one to give it fields or to go to its records.").nav({
+	creatorsOnly: true,
+	order: 0
+}).fields((r) => ({
+	name: r.name.label("Name").format("code").help("Its address and the name of its database table: lowercase letters, digits and _, starting with a letter. It cannot change later."),
+	plural_label: r.plural_label.label("Plural label").help("Its name in the sidebar and above its list, such as Notes."),
+	singular_label: r.singular_label.label("Singular label").help("What one record is called, such as Note."),
+	title_field: r.title_field.label("Title field").notOnCreate().help("The name of the text field that titles each record and that search looks in.")
+})).list((r) => ({
+	columns: [r.plural_label, r.name],
+	sort: [[r.name, "asc"]]
+})).layout((r) => [l.section("Table", [
+	r.plural_label,
+	r.singular_label,
+	r.name,
+	r.title_field
+]), l.related("Fields", {
+	resource: fieldsResourceName,
+	field: "table_id",
+	columns: [
+		"label",
+		"name",
+		"type"
+	],
+	sort: "position",
+	empty: "No fields yet."
+})]).actions((a) => [a.link("open_table", {
+	label: "Open table",
+	icon: "table",
+	to: {
+		kind: "list",
+		resource: "{table_name}"
+	}
+}), a.link("add_field", {
+	label: "Add field",
+	icon: "plus",
+	to: {
+		kind: "create",
+		resource: fieldsResourceName,
+		values: { table_id: "{id}" }
+	}
+})]);
+/** A table's fields, reached from its page; a field users add is always optional, so its form leaves that out. */
+const fieldsView = view(fieldsResourceName).names({
+	singular: "Field",
+	plural: "Fields"
+}).title((r) => r.label).nav({ hidden: true }).fields((r) => ({
+	table_id: r.table_id.label("Table"),
+	label: r.label.label("Label").help("What the field is called on screen."),
+	name: r.name.label("Name").format("code").help("Its name in the API and its database column: lowercase letters, digits and _, starting with a letter. It cannot change later."),
+	type: r.type.label("Type").valueLabels(fieldTypeLabels).help("What it holds. It cannot change later."),
+	position: r.position.label("Position").help("Where it sits among the fields of its table, 1 the first."),
+	precision: r.precision.label("Digits").help("For a decimal number only: how many digits it holds in all, from 1 to 1000."),
+	scale: r.scale.label("Decimals").help("For a decimal number only: how many of those digits come after the decimal point."),
+	required: r.required.notOnCreate()
+})).list((r) => ({
+	columns: [
+		r.label,
+		r.name,
+		r.type,
+		r.position
+	],
+	sort: [[r.position, "asc"]]
+})).layout((r) => [l.section("Field", [
+	r.table_id,
+	r.label,
+	r.name,
+	r.type,
+	r.position
+]), l.section("Decimal number", [r.precision, r.scale])]);
+//#endregion
+export { fieldTypeLabels, fieldsView, tablesView };

package/dist/view-access.js

@@ -306,6 +306,7 @@ const actionShape = (model, models, createPages) => shapes.object({
 const viewShape = (resource, model, models, prompted, createPages, writeOnly) => {
 	const nav = shapes.object({
 		hidden: shapes.data,
+		creatorsOnly: shapes.data,
 		group: shapes.data,
 		order: shapes.data,
 		tenant: shapes.data,

package/dist/webhooks/attempt.js

@@ -1,9 +1,9 @@
-import { AddressRefusedError, pinnedRequest } from "./table/pinned-request.js";
-import { readLimited } from "./table/read-limited.js";
 import { invokeFunction } from "../functions/define-function.js";
 import { retryAfterMs } from "./retry-schedule.js";
 import { standardWebhookHeaders } from "./standard-webhooks.js";
 import { subscriberSession } from "./subscriber-view.js";
+import { AddressRefusedError, pinnedRequest } from "./table/pinned-request.js";
+import { readLimited } from "./table/read-limited.js";
 //#region src/webhooks/attempt.ts
 /** How long a receiver has to answer. */
 const attemptTimeoutMs = 15e3;

package/dist/webhooks/table/address-check.js

@@ -4,7 +4,7 @@ import { isIP } from "node:net";
 const v4 = (address) => address.split(".").map(Number);
 const privateV4 = (address) => {
 	const [a, b] = v4(address);
-	return a === 0 || a === 10 || a === 127 || a >= 224 || a === 100 && b >= 64 && b < 128 || a === 169 && b === 254 || a === 172 && b >= 16 && b < 32 || a === 192 && b === 168;
+	return a === 0 || a === 10 || a === 127 || a >= 224 || a === 100 && b >= 64 && b < 128 || a === 169 && b === 254 || a === 172 && b >= 16 && b < 32 || a === 192 && b === 168 || a === 198 && (b === 18 || b === 19);
 };
 const v6Groups = (address) => {
 	const halves = address.toLowerCase().replace(/%.*$/, "").replace(/(\d+)\.(\d+)\.(\d+)\.(\d+)$/, (_, a, b, c, d) => `${(+a << 8 | +b).toString(16)}:${(+c << 8 | +d).toString(16)}`).split("::");

package/dist/webhooks/table/webhook-table.js

@@ -1,5 +1,5 @@
-import { checkWebhookUrl } from "./address-check.js";
 import { betterAuthOwnerRoles } from "./owner-roles.js";
+import { checkWebhookUrl } from "./address-check.js";
 import { webhooksSchema } from "./options.js";
 import { tableSubscriptions } from "./table-subscriptions.js";
 //#region src/webhooks/table/webhook-table.ts

package/dist/webhooks/webhooks.js

@@ -60,7 +60,7 @@ const deliveryGroup = ({ subscription, change }) => `${subscription.name}:${chan
 *
 * No jobs without a resource with events or history; the subscriptions must name declared events.
 */
-const createWebhooks = ({ deps, subscriptions, functions, channels, schema, log, table }) => {
+const createWebhooks = ({ deps, subscriptions, functions, channels, schema, log, table, onChanges }) => {
 	const entries = deps.registry.entries;
 	const models = entries.map((entry) => entry.model);
 	const problems = subscriptionProblems(subscriptions, models, Object.keys(functions));
@@ -292,6 +292,7 @@ const createWebhooks = ({ deps, subscriptions, functions, channels, schema, log,
 			});
 			await writeHistory(trx, schema, changes.filter((change) => deps.registry.find(change.resource)?.model.history));
 			await writeNotices(trx, schema, changes.filter((change) => deps.registry.find(change.resource)?.model.live));
+			await onChanges?.(trx, changes);
 			await deleteOutbox(trx, schema, rows.map((row) => row.id));
 		});
 		for (const [index, { subscription, event }] of now.entries()) report(subscription.name, event, 1, results[index]);

package/dist/workflows/effects-store.js

@@ -0,0 +1,18 @@
+import { sql } from "kysely";
+//#region src/workflows/effects-store.ts
+/** The idempotency keys of one run's steps, in the `effects` table of the `workflows` schema. */
+const effectsStore = (schema, runId) => {
+	const effects = sql.id(schema, "effects");
+	return {
+		claim: async (trx, key) => {
+			if ((await sql`insert into ${effects} (run_id, key) values (${runId}, ${key}) on conflict do nothing returning key`.execute(trx)).rows.length > 0) return;
+			const { rows } = await sql`select result from ${effects} where run_id = ${runId} and key = ${key}`.execute(trx);
+			return { result: rows[0].result };
+		},
+		keep: async (trx, key, result) => {
+			await sql`update ${effects} set result = ${JSON.stringify(result)}::jsonb where run_id = ${runId} and key = ${key}`.execute(trx);
+		}
+	};
+};
+//#endregion
+export { effectsStore };

package/dist/workflows/mcp/workflow-instructions.js

@@ -5,7 +5,7 @@ import { limits } from "@protobase/workflows";
 */
 const workflowInstructions = [
 	"Workflows: list_workflow_types names the step types and triggers with their arguments and inputs; list_workflows and get_workflow read workflows; validate_workflow checks a definition without saving it; create_workflow and update_workflow save one; run_workflow starts a run with an input, and get_workflow_run reads it with each step's input, output, logs and error. A run goes on in the background: read it again until its status is succeeded or failed, then fix the step that failed with update_workflow and run it again.",
-	"A definition is one JSON document: { \"trigger\": <exactly one trigger>, \"stateMachine\": { \"QueryLanguage\": \"JSONata\", \"StartAt\": \"<state>\", \"States\": { \"<state>\": <state>, ... } } }, the States Language with JSONata expressions, in a profile where every value is read by name. It holds no layout.",
+	"A definition is one JSON document: { \"trigger\": <trigger>, \"stateMachine\": { \"QueryLanguage\": \"JSONata\", \"StartAt\": \"<state>\", \"States\": { \"<state>\": <state>, ... } } }, the States Language with JSONata expressions, in a profile where every value is read by name. It holds no layout. <trigger> is an object with one key: { \"<trigger id>\": <its input> } for a trigger list_workflow_types names, or { \"manual\": {} } for a workflow that runs only when someone starts it.",
 	"States: Task { Resource: <step type>, Arguments, TimeoutSeconds, Retry, Catch }; Pass { Output, Assign }; Choice { Choices: [{ Condition, Next, Output?, Assign? }], Default }; Map { Items, ItemProcessor: { StartAt, States }, MaxConcurrency }; Wait { Seconds | Timestamp }; Succeed { Output }; Fail { Error, Cause }. Every state may have Comment, Output and Assign. Task, Pass, Map and Wait have exactly one of Next (a state name) and End: true. State names are unique across the document, Maps included, and every state must be reachable from StartAt. InputPath, Parameters, ResultPath and the other JSONPath fields, and Parallel, are not part of the profile.",
 	"Expressions: a string that is whole \"{% ... %}\" is a JSONata expression whose value, of any type, the field takes; any other string is literal text. Build text inside one expression with &: \"{% 'Order ' & $order.id %}\". Expressions sit at any depth in Arguments, Output and Assign, and in Items, Condition, Seconds, Timestamp, Error and Cause.",
 	"Reading values by name, the only reads allowed: $states.context.Execution.Input (the run's input, in every state), $states.context.Execution.StartTime, $states.context.Secrets.<NAME> (a secret the app lists), $<variable> (assigned by a state that runs before), $states.result (a Task's or Map's result, in its Output and Assign), $states.errorOutput ({ Error, Cause }, in a Catch rule's Output and Assign), $states.input (the item, only in the first state of a Map's ItemProcessor). Never a bare field name, $ or $$ on its own, or $eval. Keep a result for later states with \"Assign\": { \"order\": \"{% $states.result %}\" }, read as $order from the next state on; a state inside a Map may not assign a name an outer state assigns.",

package/dist/workflows/mcp/workflow-read-tools.d.ts

@@ -1,6 +1,16 @@
 import { AssistantTool, ToolContext } from "../../assistant/tools.js";
 import "../../index.js";
+import { ResourceModel } from "@protobase/schema";
+import { CheckOptions, TypeEntry } from "@protobase/workflows";
 //#region src/workflows/mcp/workflow-read-tools.d.ts
+/**
+ * The app's types, which the tools list and check definitions against: `checkWith` checks against the resources it is
+ * given, so a check names only what its caller may read.
+ */
+export type WorkflowCatalog = {
+  types: readonly TypeEntry[];
+  checkWith: (models: (name: string) => ResourceModel | undefined) => CheckOptions;
+};
 /** The tools that read workflows, their types and runs, and check definitions. */
-export declare const workflowReadTools: () => AssistantTool<ToolContext>[];
+export declare const workflowReadTools: (catalog: WorkflowCatalog) => AssistantTool<ToolContext>[];
 //#endregion

package/dist/workflows/mcp/workflow-read-tools.js

@@ -1,10 +1,8 @@
 import { defineTool } from "../../assistant/tools.js";
 import { refused } from "../../assistant/record-tool-args.js";
-import { stepTypeNames } from "../step-types.js";
 import { mergePatch } from "./merge-patch.js";
-import { stepTypeCatalog, triggerCatalog, triggerNote } from "./type-catalog.js";
 import { definitionParameter, editParameter, idOf, idParameter, objectOf, pageSizeOf, textOf } from "./workflow-tool-args.js";
-import { checkDefinition } from "@protobase/workflows";
+import { checkDefinition, typeCatalog } from "@protobase/workflows";
 //#region src/workflows/mcp/workflow-read-tools.ts
 const reads = {
 	readOnlyHint: true,
@@ -18,19 +16,15 @@ const listed = [
 	"updated_at"
 ];
 /** The step types and triggers a definition may name, with their arguments, results, errors and run inputs. */
-const listWorkflowTypesTool = defineTool({
+const listWorkflowTypesTool = (catalog) => defineTool({
 	name: "list_workflow_types",
-	description: "Lists what a workflow definition may name, as JSON ({ step_types, triggers }): each step type a Task names as its Resource, with its Arguments (required or not, and what each takes), its result and the errors it fails with; and each trigger, how the definition holds it and the input a run gets from it.",
+	description: "Lists what a workflow definition may name, as JSON ({ step_types, triggers }): each step type a Task names as its Resource and each trigger, by id, with its label, description, input (the Task's Arguments, or the trigger's input) and output as JSON Schema, the errors a step fails with, the connection it signs in with, and whether this app can run it.",
 	parameters: {
 		type: "object",
 		properties: {}
 	},
 	annotations: reads,
-	run: async () => JSON.stringify({
-		step_types: stepTypeCatalog,
-		triggers: triggerCatalog,
-		note: triggerNote
-	})
+	run: async () => JSON.stringify(typeCatalog(catalog.types))
 });
 /** The workflows the caller may read, a page at a time, without their definitions. */
 const listWorkflowsTool = defineTool({
@@ -89,15 +83,16 @@ const getWorkflowTool = defineTool({
 		}), refused);
 	}
 });
-const checked = (definition) => {
-	const problems = checkDefinition(definition, { resources: stepTypeNames });
+const checked = async (definition, catalog, context) => {
+	const { models } = await context.resources();
+	const problems = checkDefinition(definition, catalog.checkWith((name) => models.find((model) => model.name === name)));
 	return JSON.stringify(problems.length > 0 ? {
 		valid: false,
 		problems
 	} : { valid: true });
 };
 /** Checks a definition, or a saved one with an edit, without saving anything. */
-const validateWorkflowTool = defineTool({
+const validateWorkflowTool = (catalog) => defineTool({
 	name: "validate_workflow",
 	description: "Checks a definition as a save checks it, and saves nothing: pass a whole definition, or a workflow's id with an edit to check that edit of its saved definition. Returns JSON { valid: true }, or { valid: false, problems }, each problem { state, field, message } naming the state, the field and what was expected.",
 	parameters: {
@@ -112,8 +107,8 @@ const validateWorkflowTool = defineTool({
 	run: async (args, context) => {
 		const id = idOf(args);
 		const edit = objectOf(args.edit);
-		if (args.definition !== void 0 && id === void 0 && edit === void 0) return checked(args.definition);
-		if (args.definition === void 0 && id && edit) return context.records.get("workflows", id).then(({ record }) => checked(mergePatch(record.definition, edit)), refused);
+		if (args.definition !== void 0 && id === void 0 && edit === void 0) return checked(args.definition, catalog, context);
+		if (args.definition === void 0 && id && edit) return context.records.get("workflows", id).then(({ record }) => checked(mergePatch(record.definition, edit), catalog, context), refused);
 		return "Pass either { \"definition\": { ... } } or { \"id\": \"<id>\", \"edit\": { ... } }.";
 	}
 });
@@ -200,12 +195,12 @@ const getWorkflowRunTool = defineTool({
 	}
 });
 /** The tools that read workflows, their types and runs, and check definitions. */
-const workflowReadTools = () => [
-	listWorkflowTypesTool,
+const workflowReadTools = (catalog) => [
+	listWorkflowTypesTool(catalog),
 	listWorkflowsTool,
 	getWorkflowTool,
-	validateWorkflowTool,
+	validateWorkflowTool(catalog),
 	getWorkflowRunTool
 ];
 //#endregion
-export { getWorkflowRunTool, getWorkflowTool, listWorkflowTypesTool, listWorkflowsTool, validateWorkflowTool, workflowReadTools };
+export { getWorkflowRunTool, getWorkflowTool, listWorkflowsTool, workflowReadTools };