@protobase/server 0.67.3 → 0.67.5

package/dist/better-auth/create-auth.d.ts

@@ -590,7 +590,17 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
               userId: string;
               expiresAt: Date;
               token: string;
-              ipAddress?: string | null | undefined;
+              ipAddress?
+              /**
+               * What the sign-in page leads with: `password`, the email address and a password, with emailing a code below it; or
+               * `emailCode`, the address and "Email me a sign-in code", with the password behind "Use a password", for apps whose
+               * people mostly never set one. Only while the policy leaves both on; default `password`.
+               */
+              /**
+               * What the sign-in page leads with: `password`, the email address and a password, with emailing a code below it; or
+               * `emailCode`, the address and "Email me a sign-in code", with the password behind "Use a password", for apps whose
+               * people mostly never set one. Only while the policy leaves both on; default `password`.
+               */ : string | null | undefined;
               userAgent?: string | null | undefined;
             };
           };
@@ -1666,7 +1676,7 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
               email: string;
               emailVerified: boolean;
               name: string;
-              image? /** Public origin of the API, for example `https://admin.example.com`. Issuer and audience of the tokens; new passkeys are made for its host unless `passkeyDomain` names another. */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];
@@ -2411,9 +2421,7 @@ export declare const createAuth: (options: CreateAuthOptions, plugins?: AuthPlug
               email: string;
               emailVerified: boolean;
               name: string;
-              image?
-              /** The RP ID of new passkeys, from `resolvePasskeyDomain`; default the host of `baseURL`. */
-              /** The RP ID of new passkeys, from `resolvePasskeyDomain`; default the host of `baseURL`. */ : string | null | undefined;
+              image?: string | null | undefined;
             };
           };
         }>>[];

package/dist/better-auth/create-auth.js

@@ -17,7 +17,7 @@ import { jsonOnlyOnMobile, mobileRequests } from "./mobile-requests.js";
 import { passwordLength } from "./new-account-password.js";
 import { platformMailer } from "../mail/platform-mailer.js";
 import { readOperatorSettings, resolveOperator } from "./operator-provider.js";
-import { defaultInvitationUrl } from "./invitations/invitation-link-hook.js";
+import "./invitations/invitation-link-hook.js";
 import { lastAdminGuardPlugin } from "./last-admin-guard.js";
 import { setPasswordPath, setPasswordPlugin } from "./set-password.js";
 import { emailCodeOptions, twoFactorCodeOptions, unusedEmailCodePaths } from "./sign-in-mail.js";
@@ -271,7 +271,7 @@ const betterAuthOptions = (options, { origins = [], passkeyDomain, roles, defini
 				definitions,
 				defaultPolicy: signInPolicy,
 				...mail && { mail },
-				invitationUrl: organizations?.invitationUrl ?? defaultInvitationUrl(options.baseURL),
+				...organizations?.invitationUrl !== void 0 && { invitationUrl: organizations.invitationUrl },
 				invitationSeconds: organizations?.invitationExpiresIn ?? 604800,
 				...organizations && { organizations }
 			}),
@@ -410,7 +410,7 @@ const createAuth = (options, plugins = {}) => {
 	const personalMail = resolvePersonalMail(options.personalMail ?? [], socialProviders, options.encryptOAuthTokens === true);
 	const origins = resolveOrigins(options.baseURL, options.origins ?? platformOrigins());
 	const passkeyDomain = resolvePasskeyDomain(options.passkeyDomain ?? platformPasskeyDomain(), [options.baseURL, ...origins]);
-	const organizations = options.organizations && resolveOrganizations(options.organizations, definitions, options.baseURL);
+	const organizations = options.organizations && resolveOrganizations(options.organizations, definitions);
 	const mcp = options.mcp && resolveMcp(options.baseURL, options.mcp);
 	let instance;
 	const context = () => instance?.$context ?? Promise.reject(/* @__PURE__ */ new Error("The auth instance is not made yet"));

package/dist/better-auth/invitations/invitation-link-hook.js

@@ -1,3 +1,4 @@
+import { requestAppUrl } from "../../request-app-url.js";
 import { invitationLink, invitationToken } from "./invitation-token.js";
 import { createAuthMiddleware } from "better-auth/api";
 //#region src/better-auth/invitations/invitation-link-hook.ts
@@ -9,7 +10,7 @@ import { createAuthMiddleware } from "better-auth/api";
 const invitationLinkHook = (paths, invitationUrl) => ({
 	matcher: (context) => paths.includes(context.path ?? ""),
 	handler: createAuthMiddleware(async (ctx) => {
-		const answer = await withInvitationLink(ctx.context.returned, ctx.context.secret, invitationUrl);
+		const answer = await withInvitationLink(ctx.context.returned, ctx.context.secret, invitationPage(invitationUrl, ctx.context.baseURL));
 		if (answer) ctx.context.returned = answer;
 	})
 });
@@ -26,9 +27,13 @@ const withInvitationLink = async (returned, secret, invitationUrl) => {
 		link: invitationLink(invitationUrl, token)
 	};
 };
-/** The page an invitation link opens, with `?token=`, unless the app names another. */
-const defaultInvitationUrl = (baseURL) => `${baseURL.replace(/\/$/, "")}/-/invitation`;
+/**
+* The page an invitation link opens, with `?token=`: the app's own `invitationUrl`, or `/-/invitation` on the origin
+* the request came to, from Better Auth's `ctx.context.baseURL` (`requestAppUrl`), so a link made on one of the app's
+* origins opens there.
+*/
+const invitationPage = (invitationUrl, requestURL) => invitationUrl ?? requestAppUrl(requestURL, "/-/invitation");
 /** How long an invitation works unless the app says otherwise: 7 days, in seconds. */
 const defaultInvitationSeconds = 604800;
 //#endregion
-export { defaultInvitationSeconds, defaultInvitationUrl, invitationLinkHook, withInvitationLink };
+export { defaultInvitationSeconds, invitationLinkHook, invitationPage, withInvitationLink };

package/dist/better-auth/organizations/options.d.ts

@@ -22,7 +22,7 @@ export type OrganizationsOptions = {
    * rows in any `.tenant` resource; `'cascade'` leaves it to the project's foreign keys.
    */
   deleteRecords?: 'refuse' | 'cascade';
-  /** The page an invitation link opens, with `?token=`. Default `{baseURL}/-/invitation`. */
+  /** The page an invitation link opens, with `?token=`. Default `/-/invitation` on the origin the request came to. */
   invitationUrl?: string;
   /** Runs after an organization is created, with its owner's membership, for example to add the app's own row for it. */
   onCreated?: (input: {
@@ -42,7 +42,7 @@ export type ResolvedOrganizations = {
   membershipLimit: number;
   generateId: () => string | Promise<string>;
   deleteRecords: 'refuse' | 'cascade';
-  invitationUrl: string;
+  invitationUrl?: string;
   options: OrganizationsOptions;
 };
 //#endregion

package/dist/better-auth/organizations/options.js

@@ -1,7 +1,6 @@
 import { membershipRoles } from "./role-definitions.js";
-import { defaultInvitationUrl } from "../invitations/invitation-link-hook.js";
 //#region src/better-auth/organizations/options.ts
-const resolveOrganizations = (options, definitions, baseURL) => {
+const resolveOrganizations = (options, definitions) => {
 	const holdable = membershipRoles(definitions);
 	const creatorAppRoles = options.creatorAppRoles === void 0 || options.creatorAppRoles === "all" ? holdable : options.creatorAppRoles;
 	const unknown = creatorAppRoles.find((name) => !holdable.includes(name));
@@ -16,7 +15,7 @@ const resolveOrganizations = (options, definitions, baseURL) => {
 		membershipLimit: options.membershipLimit ?? 1e3,
 		generateId: options.generateId ?? (() => crypto.randomUUID()),
 		deleteRecords: options.deleteRecords ?? "refuse",
-		invitationUrl: options.invitationUrl ?? defaultInvitationUrl(baseURL),
+		...options.invitationUrl !== void 0 && { invitationUrl: options.invitationUrl },
 		options
 	};
 };

package/dist/better-auth/organizations/organization-plugin.js

@@ -2,8 +2,10 @@ import "./role-definitions.js";
 import { checkAppRoleChange, effectiveRoles, globalRoles, parseAppRoles } from "./app-roles.js";
 import { findMember } from "./store.js";
 import { invitationLink, invitationToken } from "../invitations/invitation-token.js";
+import { invitationPage } from "../invitations/invitation-link-hook.js";
 import { sendAuthEmail } from "../auth-mail/send-auth-email.js";
 import { APIError } from "better-auth/api";
+import { getCurrentAuthEndpointContext } from "@better-auth/core/context";
 import { organization } from "better-auth/plugins/organization";
 //#region src/better-auth/organizations/organization-plugin.ts
 /** The snake_case names of the organization plugin's tables and columns, with the app roles of members and invitations. */
@@ -112,8 +114,8 @@ const organizationPlugin = ({ resolved, secret, mail, context }) => {
 		cancelPendingInvitationsOnReInvite: true,
 		schema: organizationNames,
 		...mail && { sendInvitationEmail: async ({ invitation, organization, inviter }) => {
-			const token = await invitationToken(secret, invitation);
-			const url = invitationLink(resolved.invitationUrl, token);
+			const page = invitationPage(resolved.invitationUrl, getCurrentAuthEndpointContext().context.baseURL);
+			const url = invitationLink(page, await invitationToken(secret, invitation));
 			await sendAuthEmail(mail, "invitationEmail", invitation.email, {
 				inviter: inviter.user.name || inviter.user.email,
 				organization: organization.name,

package/dist/better-auth/status-route.js

@@ -17,9 +17,11 @@ import { Hono } from "hono";
 * with their labels, `membership` for those a member can hold, and the roles each one's holders may also give; and
 * `anonymous` when the project's anonymous role reads a resource, so the admin app opens for visitors before anyone signs in; `mcp` when MCP clients can connect, with the `url` of its endpoint, so the account page shows that address and lists the connected clients; `personalMail`, the mail providers people may link their mailbox with, each with the sign-in provider it links through, the scopes and the authorization parameters of the link, so the account page offers "Link Gmail"; and
 * `plugins`, those the app loads before sign-in (see `PluginOption`); and `locale`, the language `options.locale` puts
-* the screens in, so the sign-in screens and public forms, which come before `/meta`, are in it too.
+* the screens in, so the sign-in screens and public forms, which come before `/meta`, are in it too; `appName` and
+* `appIcon`, the app's name and the path of its own icon when it has one, which those screens show as `/meta` names them;
+* and `runsOnNote` when the host has the sign-in page end on the "Runs on Protobase" note (see `readRunsOnNote`).
 */
-const statusRoute = (auth, { anonymous = false, plugins = [], locale, firstAdminUrl } = {}) => {
+const statusRoute = (auth, { anonymous = false, plugins = [], locale, firstAdminUrl, appName, appIcon, runsOnNote = false } = {}) => {
 	const app = new Hono();
 	app.get("/status", async (c) => {
 		const context = await auth.$context;
@@ -60,6 +62,9 @@ const statusRoute = (auth, { anonymous = false, plugins = [], locale, firstAdmin
 			})) },
 			...plugins.length > 0 && { plugins },
 			...locale && { locale },
+			...appName && { appName },
+			...appIcon && { appIcon },
+			...runsOnNote && { runsOnNote },
 			...auth.organizations && { organizations: {
 				create: auth.organizations.create,
 				roles: roleLabels(auth.roleDefinitions)

package/dist/better-auth/users/user-endpoints.js

@@ -1,5 +1,6 @@
 import { adminOnly } from "../admin-only.js";
 import { invitationLink, invitationToken } from "../invitations/invitation-token.js";
+import { invitationPage } from "../invitations/invitation-link-hook.js";
 import { sendAuthEmail } from "../auth-mail/send-auth-email.js";
 import { createAppInvitation, deleteAppInvitation, listAppInvitations } from "./app-invitation-store.js";
 import { roleLabels } from "../roles/role-labels.js";
@@ -46,7 +47,7 @@ const userEndpoints = ({ definitions, mail, invitationUrl, invitationSeconds })
 			inviterId: inviter.id
 		}, invitationSeconds);
 		if (mail) {
-			const url = invitationLink(invitationUrl, await invitationToken(ctx.context.secret, invitation));
+			const url = invitationLink(invitationPage(invitationUrl, ctx.context.baseURL), await invitationToken(ctx.context.secret, invitation));
 			await sendAuthEmail(mail, "invitationEmail", invitation.email, {
 				inviter: inviter.name || inviter.email,
 				url,

package/dist/config-exports.d.ts

@@ -1,6 +1,9 @@
 import { configExports } from "./resource-source.js";
+import { ownedTableNames } from "./user-tables/owned-definitions.js";
 import { definitionsSchema, userTablesSchema } from "./user-tables/names.js";
+import { CheckedDefinition } from "./user-tables/check-definition.js";
+import { maxTextLength } from "./user-tables/definition-resource.js";
 import { userTableResources } from "./user-tables/user-table-resources.js";
 import { builtInResources } from "./built-in-resources.js";
 import { webhooksModule } from "./webhooks/table/webhooks-module.js";
-export { builtInResources, configExports, definitionsSchema, userTableResources, userTablesSchema, webhooksModule };
+export { type CheckedDefinition, builtInResources, configExports, definitionsSchema, maxTextLength, ownedTableNames, userTableResources, userTablesSchema, webhooksModule };

package/dist/config-exports.js

@@ -1,6 +1,8 @@
 import { builtInResources } from "./built-in-resources.js";
 import { definitionsSchema, userTablesSchema } from "./user-tables/names.js";
+import { maxTextLength } from "./user-tables/definition-resource.js";
 import { configExports } from "./resource-source.js";
+import { ownedTableNames } from "./user-tables/owned-definitions.js";
 import { userTableResources } from "./user-tables/user-table-resources.js";
 import { webhooksModule } from "./webhooks/table/webhooks-module.js";
-export { builtInResources, configExports, definitionsSchema, userTableResources, userTablesSchema, webhooksModule };
+export { builtInResources, configExports, definitionsSchema, maxTextLength, ownedTableNames, userTableResources, userTablesSchema, webhooksModule };

package/dist/create-admin.js

@@ -108,6 +108,7 @@ import { metaRoutes } from "./routes/meta.js";
 import { faviconPath } from "./web-app/web-manifest.js";
 import { webManifestRoute } from "./web-app/web-manifest-route.js";
 import { mcpIcons } from "./web-app/mcp-icons.js";
+import { readRunsOnNote } from "./runs-on-note.js";
 import { recordRoutes } from "./routes/record.js";
 import { firstAdminUrl } from "./better-auth/first-admin-url.js";
 import { createScanGuard } from "./scan-guard.js";
@@ -187,6 +188,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 	const assistant = assistantSettings(options.assistant, globalThis.process?.env ?? {});
 	const runtime = runtimeUrl(options.runtime, globalThis.process?.env ?? {});
 	const firstAdmin = firstAdminUrl(globalThis.process?.env ?? {});
+	const runsOnNote = readRunsOnNote(globalThis.process?.env ?? {});
 	const errorReporting = errorReportingSettings(options.errorReporting, globalThis.process?.env ?? {});
 	const maps = mapSettings(options.maps, globalThis.process?.env ?? {});
 	const senders = notifications ? notificationSenders(notifications) : [];
@@ -287,7 +289,8 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 		}) }
 	};
 	const appName = shownAppName(auth, globalThis.process?.env ?? {});
-	const meta = createMeta(deps, appName, icons?.favicon ? faviconPath : void 0);
+	const appIcon = icons?.favicon ? faviconPath : void 0;
+	const meta = createMeta(deps, appName, appIcon);
 	const onError = createErrorHandler(options.onUnhandledError, deps.statementTimeoutMs);
 	const guarded = (routes, caller = authenticate) => {
 		const app = new Hono();
@@ -308,7 +311,7 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 		app.route("/", recordRoutes(deps));
 	}, withAnonymous(authenticate, options.roles));
 	const system = guarded((app) => {
-		app.route("/", docsRoutes(deps));
+		app.route("/", docsRoutes(deps, appName));
 	});
 	const metaApp = guarded((app) => {
 		app.route("/", metaRoutes(meta));
@@ -337,7 +340,10 @@ const createAdmin = ({ resources: appResources, views: appViews = [], userTables
 			anonymous: visitorsBrowse(options.roles),
 			plugins: pluginsBeforeSignIn(plugins),
 			...locale && { locale },
-			...firstAdmin && { firstAdminUrl: firstAdmin }
+			...firstAdmin && { firstAdminUrl: firstAdmin },
+			appName,
+			...appIcon && { appIcon },
+			runsOnNote
 		}));
 		if (auth.organizations) app.route(authBasePath, organizationRoutes({
 			auth,

package/dist/index.d.ts

@@ -102,6 +102,7 @@ import { parseColumns, readOutbox } from "./changes/outbox.js";
 import { newWebhookSecret } from "./webhooks/standard-webhooks.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkUserTablesSchema, userTablesMigration } from "./user-tables/schema.js";
+import { ownedDefinitionsMigration } from "./user-tables/owned-definitions.js";
 import { UserTables, userTableResources } from "./user-tables/user-table-resources.js";
 import { readDefinitionsVersion } from "./user-tables/definitions-version.js";
 import { reloadingAdmin } from "./user-tables/reloading-admin.js";
@@ -188,4 +189,4 @@ import { DrainResult, JobsRuntime, StartJobsOptions, startJobs } from "./jobs/ru
 import { jobsDrainApp } from "./jobs/drain-route.js";
 import { checkJobsSchema, jobsSchema, jobsSchemaMigration } from "./jobs/schema.js";
 import { AdminAuth, CreateAuthOptions, UserCreatedHook, normalizeRoles } from "./better-auth/create-auth.js";
-export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailAttachment, type MailMessage, MailServerTimeoutError, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PdfComponent, type PdfOptions, type PdfTemplate, PersonalMailError, type PersonalMailErrorCode, type PersonalMailProviderId, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StatusOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type UserTables, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { type Admin, type AdminAuth, type AdminOptions, type AggregateParams, type ApiFunction, type ApiKeys, type ApiKeysOptions, type ApnsEnvironment, type AppIcons, type AppIdentity, type AppPoolConfig, type ApplyOptions, type ApplyResult, type ApprovalAnswer, type ApprovalRequest, type ArgumentsPayload, type AssistantBackend, type AssistantOptions, type AssistantSettings, type AssistantTool, type AuditEvent, type AuditQueue, type AuthHooks, type AuthSettings, type AuthenticateSettings, type Authenticator, type BaseToolContext, type BatchOperation, type BatchResult, type BetterAuthAuthenticator, type BetterAuthAuthenticatorOptions, type CallBackend, type CallMember, type Caller, type CallerOptions, type CallsAccess, type CallsOptions, type CapturedRow, type CascadingKey, type ChannelBroadcast, type ChannelSender, type ChatMessage, type ChatTextPart, type CheckAiInput, type CleanupEntry, type CleanupReport, type CleanupSchedule, type CoalescedChange, type CommentItem, type CommentToolsInput, type CommentUsers, type Completion, type CompletionOptions, ConnectionsBusy, type Conversation, type ConversationRecord, type ConversationStore, type ConversationsOptions, type CorsOptions, type CorsOrigins, type CreateAdminInput, type CreateAuthOptions, type DecryptField, type Device, type DeviceColumn, type DeviceKind, type DeviceStore, DeviceStoreError, type DrainResult, type EmailComponent, type EmailOptions, type EmailTemplate, type EncryptionStatus, type EncryptionTools, type EncryptionToolsInput, type EnqueueJob, type EnqueueOptions, type ErrorReporter, type ErrorReportingOptions, type ErrorReportingSettings, type EventData, type EventsOptions, FatalJobError, type FieldApplied, type FieldDecrypter, type FieldReader, type FieldStatus, type FileCleanupInput, type FileLimits, type FileObject, type FileProvider, type FileProviderSettings, type FileRef, type FileStore, type FileVariantObject, type FilesOptions, type FunctionApp, type FunctionCaller, type FunctionContext, type FunctionEnv, type FunctionHandler, type FunctionOptions, type FunctionRecords, type FunctionSocket, type FunctionSource, type HistoryColumn, type HistoryOptions, type HistoryPosition, type HistoryStore, HistoryStoreError, type HookContext, HttpProblem, type IssueTokenOptions, type JobContext, type JobDeclaration, type JobDefinition, type JobName, type JobOptions, type JobPayload, type JobRun, type JobsRuntime, type JsonObject, type JsonValue, type JwtOptions, type JwtVerifyOptions, type KeyFunctionContext, type LinkedAccount, type ListParams, type LiveKitBackend, type LocalFilesOptions, type MailAttachment, type MailMessage, MailServerTimeoutError, type Mailer, type MapLayer, type MapOptions, type MapSettings, type McpApprovals, type McpGateInput, type McpHandlerInput, type McpRoutesInput, type McpServerInput, type McpToolsInput, type McpWrites, type MemberInput, type Membership, MissingCredentials, type MobileConfig, ModelError, type ModelSettings, type NewDevice, type NewNotification, type NewOrganization, type NewUser, type NotificationRecipients, NotificationSendError, type NotificationsOptions, type OperatorProvider, type OrganizationRole, type OrganizationsOptions, type PdfComponent, type PdfOptions, type PdfTemplate, PersonalMailError, type PersonalMailErrorCode, type PersonalMailProviderId, type PgModule, type PipelineHook, type PlatformSignIn, type PluginOption, type PluginRef, type PngIcon, type ProtectedFunctionOptions, type PublicFunctionContext, type PublicFunctionEnv, type PublicFunctionHandler, type PublicFunctionOptions, type PushAnswer, type PushMessage, PushMessageError, type PushSender, type QueryOptions, type QueryResult, type ReadableResources, type RealtimeOptions, type RealtimePrune, type ReasoningDetail, type ReasoningEffort, type RebindOption, type RecordGroups, type RecordKey, type RecordKeyInput, type RecordPage, type RenderedEmail, type ResourceChange, type ResourceSource, type RoleDefinition, type RolesInput, type RunContext, type RuntimeOptions, type S3Bucket, type S3FilesOptions, type S3ListPage, type S3Object, type ScanGuardMode, type ScheduledDelete, type SendNotification, type Session, type SessionOrganization, type Sharp, type SignInPolicy, type SignInRule, type SignatureOptions, type SocketEvents, type SourceOption, type SourceRef, type StaffAccessRule, type StaffSignIn, type StandardSchema, type StandardWebhookOptions, type StartJobsOptions, type StatusOptions, type StoreFileInput, type StoredMember, type StoredNotification, type StoredObject, type StoredOrganization, type StoredUser, type StrayValues, type SubscriptionDefinition, type SubscriptionEvent, type SubscriptionOptions, type TenantValue, type ToolAnnotations, type ToolCall, type ToolComment, type ToolCommentPage, type ToolComments, type ToolContext, type ToolRecord, type ToolRecords, type ToolSpec, type TrustedApp, type TurnOptions, type UnreadableEntry, type Urgency, type User, type UserCreatedHook, type UserTables, type VapidSettings, type ViewSource, type WebPushFields, type WebPushOptions, type WebhooksOptions, type WidgetOptions, type WriteEvent, type WriteOperation, type WriteRecordToolsInput, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, ownedDefinitionsMigration, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/index.js

@@ -114,6 +114,7 @@ import { checkResourcesOutsideAuthStore } from "./better-auth/store/resources-ou
 import { checkComputed, computedMigration } from "./computed/computed-schema.js";
 import { checkWebhooksSchema, webhooksMigration } from "./webhooks/table/schema.js";
 import { checkUserTablesSchema, userTablesMigration } from "./user-tables/schema.js";
+import { ownedDefinitionsMigration } from "./user-tables/owned-definitions.js";
 import { userTableResources } from "./user-tables/user-table-resources.js";
 import { readDefinitionsVersion } from "./user-tables/definitions-version.js";
 import { reloadingAdmin } from "./user-tables/reloading-admin.js";
@@ -139,4 +140,4 @@ import { defineEmail } from "./mail/define-email.js";
 import { definePdf } from "./pdf/define-pdf.js";
 import { startJobs } from "./jobs/runtime.js";
 import { jobsDrainApp } from "./jobs/drain-route.js";
-export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MailServerTimeoutError, MissingCredentials, ModelError, NotificationSendError, PersonalMailError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };
+export { ConnectionsBusy, DeviceStoreError, FatalJobError, HistoryStoreError, HttpProblem, MailServerTimeoutError, MissingCredentials, ModelError, NotificationSendError, PersonalMailError, PushMessageError, addAppRoleToOwners, addCommentTool, addMember, apiKeyCaller, apiKeySettings, apiKeyVariables, appNameOver, aspectRatio, assistantProtocolRoutes, assistantRoles, assistantSettings, assistantVariables, authSchemaDrift, authSchemaMigration, authStoreTables, backgroundSettled, badRequest, batchWriteTool, beforeSignInPluginsVariable, betterAuthTokens, callsMigration, capSocketMessages, changesMigration, channelSendsMigration, checkAi, checkAuthSchema, checkCalls, checkChanges, checkChannelSends, checkComments, checkComputed, checkJobsSchema, checkNotificationsSchema, checkQueryRunner, checkRealtimeRelay, checkResourcesOutsideAuthStore, checkSourceNames, checkStatusSchema, checkUserTablesSchema, checkViewQueries, checkWebhooksSchema, coalesce, commentTools, commentsMigration, computedMigration, configExports, consoleAuditQueue, conversationKey, countRecordsTool, createAdmin, createConversations, createEncryptionTools, createFileCleanup, createOrganization, createRecordTool, createUser, defaultAppName, defaultHistoryPage, defaultSignInPolicy, defineEmail, defineFunction, defineJob, definePdf, defineTool, deleteRecordTool, deleteUser, describeResourceTool, deviceIdParam, deviceStore, devicesPath, enqueueJob, errorReportingSettings, errorReportingVariable, eventMatcher, fileConversationStore, fileSize, fileType, forbidden, formatUri, functionApp, generateVapidKeys, getRecordTool, goTruePath, handleDroppedConnections, hasUsers, historyIdParam, historyIdPattern, historyLimits, historyPath, historyStore, honorSocketMessageCaps, imageSize, isBackgroundWork, isCaptured, isJobDefinition, isOAuthWellKnownPath, isSchedule, issueToken, jobDefinitions, jobsDrainApp, jobsSchema, jobsSchemaMigration, jwtAuthenticator, jwtVerifier, limitedFileStore, listCommentsTool, listOrganizations, listRecordsTool, listResourcesTool, listUsers, localFileStore, longQueryTimeoutMs, mapSettings, mapStyleUrl, mapStyleVariable, maxDevicesPerUser, maxHistoryPage, maxMessageBytes, maxRecipients, maxTokenTtlSeconds, maxTtlSeconds, maxUnreadCount, maxWidgetPropsBytes, mcpApprovals, mcpGate, mcpHandler, mcpIcons, mcpInstructions, mcpRoutes, mcpServer, mcpToolContext, mcpTools, migrationCommand, newWebhookSecret, normalizeRoles, notFound, notificationSenders, notificationsMigration, oauthWellKnownPaths, objectKey, onDoNotDisturb, ownedDefinitionsMigration, parseColumns, parseRoles, passwordLength, pluginOptions, pluginsBeforeSignIn, pluginsFor, pluginsVariable, pngIcons, poolWaitMs, postgresDeviceStore, postgresHistoryStore, processor, pushMessage, queryRunnerMigration, readDbConnections, readDefinitionsVersion, readJson, readOnlyQueryTool, readOperatorSettings, readOutbox, readPlatformSignIn, readRecordTools, readVapidSettings, readWriteQueryTool, readableResources, realtimeLimits, realtimeRelayMigration, recordOf, refusalOf, refused, relayed, reloadingAdmin, removeDevicesWithUsers, removeHistoryWithUsers, removeMember, renderVariant, requestApproval, requireEnv, resourceChange, roleChoices, runInBackground, runReadOnlyQuery, runReadWriteQuery, runTurn, runtimeUrl, runtimeVariable, s3FileStore, seesAssistant, seesRuntime, sendNotification, sessionOf, setMemberRoles, setUserBanned, setUserRole, shownAppName, signInPolicyMethods, socketMessageCapOf, sourceOptions, sourcesFor, sourcesVariable, sqlSends, startErrorReporting, startJobs, statusMigration, statusNames, storageCleanupSchedule, storageProvider, storeFile, storeUsage, streamChatCompletion, subscription, supabasePath, thumbHash, unauthorized, updateRecordTool, urgencies, userTableResources, userTablesMigration, vapidPrivateKeyVariable, vapidPublicKeyVariable, vapidSubjectVariable, variantPath, verifySignature, verifyStandardWebhook, waitUntil, wantsLongQueries, webManifestPath, webPushSender, webauthnPath, webhooksMigration, widget, withCacheBreakpoints, withTrustedApps, writeRecordTools };

package/dist/mail/mailing-app.js

@@ -1,3 +1,4 @@
+import { requestAppUrl } from "../request-app-url.js";
 //#region src/mail/mailing-app.ts
 /**
 * The app as an auth email names it: `appName`, and the home page on the origin of `requestURL`, a URL on the origin
@@ -5,7 +6,7 @@
 */
 const mailingApp = ({ appName, baseURL }, requestURL) => ({
 	name: appName,
-	url: new URL("/", requestURL ?? baseURL).href
+	url: requestAppUrl(requestURL ?? baseURL, "/")
 });
 //#endregion
 export { mailingApp };

package/dist/openapi/document.js

@@ -4,11 +4,13 @@ import { resourceSchemas } from "./schemas.js";
 //#region src/openapi/document.ts
 const resourcesServer = (basePath) => basePath.slice(basePath.lastIndexOf("/") + 1);
 const systemServer = ".";
+/** The title of the app's API reference and OpenAPI document, such as "Shop & Co API". */
+const apiTitle = (appName) => `${appName} API`;
 /** The OpenAPI 3.1 document for one caller, generated from the resource models they may see and their zod record schemas. */
-const openApiDocument = (accesses, basePath) => ({
+const openApiDocument = (accesses, basePath, appName) => ({
 	openapi: "3.1.0",
 	info: {
-		title: "Protobase API",
+		title: apiTitle(appName),
 		version: "1.0.0",
 		description: "Admin API for an existing Postgres database. Follows Google's API design conventions ([AIP](https://google.aip.dev)) and reports errors as RFC 9457 `application/problem+json`."
 	},
@@ -73,4 +75,4 @@ const openApiDocument = (accesses, basePath) => ({
 	}
 });
 //#endregion
-export { openApiDocument };
+export { apiTitle, openApiDocument };

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.67.3";
+var version = "0.67.5";
 //#endregion
 export { version };

package/dist/request-app-url.js

@@ -0,0 +1,9 @@
+//#region src/request-app-url.ts
+/**
+* The app's page at `path`, which starts with `/`, on the origin of `requestURL`: a URL Better Auth resolved for the
+* request (`ctx.context.baseURL`), on the request's host when that is one of the app's origins and on `baseURL`'s
+* otherwise. Only its origin counts, so Better Auth's base path, such as `/api/auth`, never reaches the page.
+*/
+const requestAppUrl = (requestURL, path) => new URL(path, requestURL).href;
+//#endregion
+export { requestAppUrl };

package/dist/routes/docs.js

@@ -1,18 +1,21 @@
 import { requestAccess } from "../request-access.js";
-import { openApiDocument } from "../openapi/document.js";
+import { apiTitle, openApiDocument } from "../openapi/document.js";
 import { Hono } from "hono";
 import { Scalar } from "@scalar/hono-api-reference";
 //#region src/routes/docs.ts
-/** The OpenAPI document and the Scalar reference. Both need a token: the document lists what the caller may see and do. */
-const docsRoutes = (deps) => {
+/**
+* The OpenAPI document and the Scalar reference, both titled with the app's name. Both need a token: the document lists
+* what the caller may see and do.
+*/
+const docsRoutes = (deps, appName) => {
 	const app = new Hono();
 	app.get("/openapi.json", async (c) => {
 		const visible = (await Promise.all(deps.registry.entries.map((entry) => requestAccess(deps, entry, c.get("session"))))).filter((access) => Object.values(access.resolved.operations).some(Boolean));
-		return c.json(openApiDocument(visible, deps.basePath));
+		return c.json(openApiDocument(visible, deps.basePath, appName));
 	});
 	app.get("/docs", Scalar({
 		url: "openapi.json",
-		pageTitle: "Protobase API"
+		pageTitle: apiTitle(appName)
 	}));
 	return app;
 };

package/dist/runs-on-note.js

@@ -0,0 +1,15 @@
+//#region src/runs-on-note.ts
+const runsOnNoteVariable = "PROTOBASE_RUNS_ON_NOTE";
+/**
+* Whether the sign-in page ends on the "Runs on Protobase" note: the host turns it on with `PROTOBASE_RUNS_ON_NOTE=true`,
+* so an app's repository cannot turn it off. Unset or empty, there is no note; any value but `true` or `false` stops the
+* server at startup.
+*/
+const readRunsOnNote = (env) => {
+	const value = env[runsOnNoteVariable];
+	if (!value) return false;
+	if (value !== "true" && value !== "false") throw new Error(`${runsOnNoteVariable} must be true or false, not "${value}"`);
+	return value === "true";
+};
+//#endregion
+export { readRunsOnNote, runsOnNoteVariable };

package/dist/user-tables/definition-resource.d.ts

@@ -1,6 +1,8 @@
 import { CheckedDefinition } from "./check-definition.js";
 import { TableIndexes } from "@protobase/query";
 //#region src/user-tables/definition-resource.d.ts
+/** The most characters a text field takes: four bytes each at most, it always fits the entry of its btree index. */
+export declare const maxTextLength = 500;
 /**
  * The resource and view of a checked definition over `user_tables.<name>`, with the indexes its table has (none before
  * they are read): built with the schema builders, so it is checked, accessed and guarded as a resource of the config.

package/dist/user-tables/definition-resource.js

@@ -3,6 +3,8 @@ import { f, resource, view } from "@protobase/schema";
 import { indexServes } from "@protobase/query";
 //#region src/user-tables/definition-resource.ts
 const admins = ({ user }) => user?.roles?.includes("admin") ?? false;
+/** The most characters a text field takes: four bytes each at most, it always fits the entry of its btree index. */
+const maxTextLength = 500;
 const builders = {
 	text: () => f.text().max(500),
 	long_text: () => f.text(),
@@ -59,4 +61,4 @@ const definitionResource = (definition, indexes = {
 	};
 };
 //#endregion
-export { definitionResource };
+export { definitionResource, maxTextLength };

package/dist/user-tables/owned-definitions.d.ts

@@ -0,0 +1,12 @@
+import { ResourceModel } from "@protobase/schema";
+import { Db } from "@protobase/query";
+//#region src/user-tables/owned-definitions.d.ts
+/** The user tables a resource in code owns, as `protobase eject` writes one: over `user_tables.<name>`, with that name. */
+export declare const ownedTableNames: (models: readonly ResourceModel[]) => string[];
+/**
+ * The delete of the definitions of the user tables a resource in code owns, with their fields; their tables and rows
+ * stay. `undefined` when no such definition is left. `protobase migration` writes it once the code that owns them has
+ * deployed, so a definition goes in a later deploy than the one that stopped reading it.
+ */
+export declare const ownedDefinitionsMigration: (db: Db, models: readonly ResourceModel[]) => Promise<string | undefined>;
+//#endregion

package/dist/user-tables/owned-definitions.js

@@ -0,0 +1,22 @@
+import { definitionsSchema } from "./names.js";
+import { sql } from "kysely";
+//#region src/user-tables/owned-definitions.ts
+/** The user tables a resource in code owns, as `protobase eject` writes one: over `user_tables.<name>`, with that name. */
+const ownedTableNames = (models) => models.filter((model) => model.table.schema === "user_tables" && model.table.name === model.name).map((model) => model.name);
+const literal = (text) => `'${text.replaceAll("'", "''")}'`;
+/**
+* The delete of the definitions of the user tables a resource in code owns, with their fields; their tables and rows
+* stay. `undefined` when no such definition is left. `protobase migration` writes it once the code that owns them has
+* deployed, so a definition goes in a later deploy than the one that stopped reading it.
+*/
+const ownedDefinitionsMigration = async (db, models) => {
+	const owned = ownedTableNames(models);
+	if (owned.length === 0) return;
+	const { rows: found } = await sql`select to_regclass(${`${definitionsSchema}.tables`}) is not null as found`.execute(db);
+	if (!found[0].found) return;
+	const { rows } = await sql`select name from ${sql.table(`${definitionsSchema}.tables`)} where name = any(${owned}) order by name`.execute(db);
+	if (rows.length === 0) return;
+	return `delete from ${definitionsSchema}.tables where name in (${rows.map((row) => literal(row.name)).join(", ")});`;
+};
+//#endregion
+export { ownedDefinitionsMigration, ownedTableNames };

package/dist/user-tables/user-table-resources.d.ts

@@ -1,10 +1,15 @@
+import { CheckedDefinition } from "./check-definition.js";
 import { definitionResource } from "./definition-resource.js";
 import { Db } from "@protobase/query";
 //#region src/user-tables/user-table-resources.d.ts
-/** What the stored definitions serve: a resource and view for each that fits the database, and why each other one is left out. */
+/**
+ * What the stored definitions serve: a resource and view for each that fits the database, the definitions they are
+ * built from, as `protobase eject` writes them into code, and why each other one is left out.
+ */
 export type UserTables = {
   resources: Array<ReturnType<typeof definitionResource>['resource']>;
   views: Array<ReturnType<typeof definitionResource>['view']>;
+  definitions: CheckedDefinition[];
   problems: string[];
 };
 /**

package/dist/user-tables/user-table-resources.js

@@ -13,6 +13,7 @@ const userTableResources = async (db) => {
 	const tables = {
 		resources: [],
 		views: [],
+		definitions: [],
 		problems: []
 	};
 	for (const stored of definitions) {
@@ -25,6 +26,7 @@ const userTableResources = async (db) => {
 		const { resource, view } = definitionResource(checked.definition, indexes);
 		tables.resources.push(resource);
 		tables.views.push(view);
+		tables.definitions.push(checked.definition);
 	}
 	return tables;
 };

package/dist/web-app/app-icons.d.ts

@@ -1,7 +1,7 @@
 import { pngIcons } from "@protobase/schema/png-icons";
 //#region src/web-app/app-icons.d.ts
 export type PngIcon = keyof typeof pngIcons;
-/** The icons a project has of its own: `favicon` when the favicon is its own rather than Protobase's, and its PNGs. */
+/** The icons a project has of its own: `favicon` when the favicon is its own rather than the neutral mark, and its PNGs. */
 export type AppIcons = {
   favicon: boolean;
   png: PngIcon[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@protobase/server",
-  "version": "0.67.3",
+  "version": "0.67.5",
   "description": "The Protobase REST API as a Hono app, with Better Auth sign-in.",
   "license": "Apache-2.0",
   "repository": {
@@ -37,15 +37,16 @@
   },
   "dependencies": {
     "@better-auth/cimd": "^1.7.12",
+    "@better-auth/core": "^1.7.12",
     "@better-auth/mcp": "^1.7.12",
     "@better-auth/oauth-provider": "^1.7.12",
     "@better-auth/passkey": "^1.7.12",
     "@better-auth/sso": "^1.7.12",
     "@livekit/protocol": "1.53.1",
     "@modelcontextprotocol/server": "^2.3.1",
-    "@protobase/layout": "0.67.3",
-    "@protobase/query": "0.67.3",
-    "@protobase/schema": "0.67.3",
+    "@protobase/layout": "0.67.5",
+    "@protobase/query": "0.67.5",
+    "@protobase/schema": "0.67.5",
     "@react-email/render": "^2.1.0",
     "@react-pdf/primitives": "^4.4.0",
     "@react-pdf/renderer": "^4.9.0",