@rebasepro/app 0.21.0 → 0.21.1

package/README.md

@@ -9,10 +9,10 @@ pnpm add @rebasepro/app
 ```
 
 ESM-only: `"type": "module"` with no CommonJS build, so it is loaded with
-`import`. `require()` of it resolves only on Node 22.12+, which supports
-`require(esm)`.
+`import`. It needs Node `>=22.22.0` (its `engines` floor), where `require()`
+of it resolves too: Node has supported `require(esm)` since 22.12.
 
-**Peer dependencies:** `react >= 19.2.7`, `react-dom >= 19.2.7`, `react-router ^8`
+**Peer dependencies:** `react ^19.2.7`, `react-dom ^19.2.7`, `react-router ^8.3.0`, `typescript ^6.0.0`
 
 ## What This Package Does
 
@@ -20,9 +20,9 @@ ESM-only: `"type": "module"` with no CommonJS build, so it is loaded with
 
 - **App bootstrapping** — `Rebase`, `RebaseRouter`, `RebaseRoutes`, `PluginProviderStack`
 - **React contexts** — auth, data driver, storage, snackbar, dialogs, mode, admin mode, role, analytics, customization
-- **Hooks** — data fetching (`useData`, `useCollection`, `useFetch`), data mutation (`save`, `delete`), auth (`useAuthController`), storage, permissions, i18n, and more
-- **UI components** — `LoginView`, `RebaseAuth`, `ConfirmationDialog`, `ErrorView`, `UserSettingsView`, `BootstrapAdminBanner`, etc.
-- **Utilities** — icon system, snapshot caching, storage upload controller, enums, constants
+- **Hooks** — data fetching (`useData`, `useCollection`, `useFetch`), data mutation (`saveEntityWithCallbacks`, `deleteEntityWithCallbacks`), auth (`useAuthController`), storage, permissions, i18n, and more
+- **UI components** — `LoginView`, `RebaseAuth`, `ConfirmationDialog`, `ErrorView`, `UserSettingsView`, etc.
+- **Utilities** — icon system, entity draft cache, storage upload controller, enums, constants
 - **i18n** — built-in English and Spanish locales via `react-i18next`
 - **Studio Bridge** — shared context for optional CMS↔Studio integration
 
@@ -34,7 +34,7 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 
 | Export | Description |
 |---|---|
-| `Rebase` | Root component — accepts collections, auth, data source config and renders the app |
+| `Rebase` | Root component — takes a `client` (plus `authController`, `plugins`, …) and renders its children: `<RebaseCMS>`, `<RebaseStudio>`, `<RebaseShell>` |
 | `RebaseRouter` | Router wrapper for react-router integration |
 | `RebaseRoutes` | Route definitions |
 | `PluginProviderStack` | Wraps children with plugin-provided context providers |
@@ -45,11 +45,10 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 |---|---|
 | `useData` | Access the data driver from context |
 | `useCollection` | Fetch a collection with filters, pagination, and realtime |
-| `useFetch` | Fetch a single snapshot by ID |
+| `useFetch` | Fetch a single entity by ID |
 | `useRelationSelector` | Relation field selector state |
-| `useUserSelector` | User selector state |
-| `save` utilities | Snapshot save helpers |
-| `delete` utilities | Snapshot delete helpers |
+| `saveEntityWithCallbacks` | Save an entity, running the collection's `admin.browserCallbacks` |
+| `deleteEntityWithCallbacks` | Delete an entity, running the collection's `admin.browserCallbacks` |
 
 ### Hooks — Auth & Permissions
 
@@ -83,7 +82,8 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 
 | Export | Description |
 |---|---|
-| `useStudioBridge` | Access bridge context for CMS↔Studio communication |
+| `StudioBridgeProvider` / `StudioBridgeContext` | Bridge context for CMS↔Studio communication |
+| `useStudioCapabilities`, `useStudioSchemaEditing`, … | Read one part of the bridge |
 | `useBridgeRegistration` | Register bridge callbacks (self-assembling) |
 
 ### Components
@@ -99,7 +99,6 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 | `UserSettingsView` | User profile settings page |
 | `UserSelectPopover` / `UserDisplay` | User avatar/name display |
 | `LanguageToggle` | i18n language switcher |
-| `BootstrapAdminBanner` | First-user setup banner |
 | `RebaseLogo` | Rebase branding logo |
 
 ### Contexts
@@ -107,9 +106,9 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 | Export | Description |
 |---|---|
 | `SnackbarProvider` | Snackbar notification context |
-| `ModeController` | Light/dark mode context |
-| `AdminModeController` | Admin mode context |
-| `EffectiveRoleController` | User role context |
+| `ModeControllerContext` / `ModeControllerProvider` | Light/dark mode context |
+| `AdminModeControllerContext` / `AdminModeControllerProvider` | Admin mode context |
+| `EffectiveRoleControllerContext` / `EffectiveRoleControllerProvider` | User role context |
 | `AuthControllerContext` | Auth controller context |
 | `DataDriverContext` | Data driver context |
 | `StorageSourceContext` | Storage source context |
@@ -122,9 +121,9 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 
 | Export | Description |
 |---|---|
-| `iconList` / icon helpers | Full icon set and lookup |
+| `iconsSearch` / `getIcon` | Fuzzy icon search, and an icon element by key |
 | `createFormexStub` | Create a form stub for testing |
-| `snapshotCache` | Snapshot LRU cache |
+| `saveEntityToCache` / `getEntityFromCache` | Local-changes backup of unsaved edits (`sessionStorage`) |
 | `useStorageUploadController` | File upload progress controller |
 | `previews` | Preview rendering utilities |
 | `enums` / `constants` | Shared enums and constant values |
@@ -142,36 +141,46 @@ This package is **framework-agnostic** in the sense that it doesn't depend on an
 Available as a separate entry point:
 
 ```ts
-import { rebaseVitePlugin } from "@rebasepro/app/vitePlugin";
+import { rebaseCollectionsPlugin, rebaseManualChunks, transformCollectionSource } from "@rebasepro/app/vitePlugin";
 ```
 
+`rebaseCollectionsPlugin` serves `virtual:rebase-collections`, lazy-loads the
+components a collection names by path, and keeps the server-only `callbacks`
+bodies out of the admin bundle; `transformCollectionSource` is that transform on
+its own, and `rebaseManualChunks` is the admin's `manualChunks` split.
+
 ## Quick Start
 
 ```tsx
-import { Rebase, useAuthController, useCollection } from "@rebasepro/app";
+import { Rebase, RebaseAuth, useCollection } from "@rebasepro/app";
+import { RebaseCMS, RebaseShell } from "@rebasepro/cms";
 
 function App() {
     return (
-        <Rebase
-            collections={collections}
-            authController={authController}
-            dataSource={dataSource}
-        />
+        <Rebase client={client} authController={authController}>
+            <RebaseAuth />
+            <RebaseCMS collections={collections} />
+            <RebaseShell title="Rebase" />
+        </Rebase>
     );
 }
 
 // Inside any child component:
 function ProductList() {
-    const { data, loading } = useCollection("products", { limit: 20 });
+    const { data, dataLoading } = useCollection({
+        path: "products",
+        collection: productsCollection,
+        itemCount: 20
+    });
     // ...
 }
 ```
 
 ## Related Packages
 
-- [`@rebasepro/cms`](../admin) — CMS views, forms, and routing (built on top of core)
+- [`@rebasepro/cms`](../cms) — CMS views, forms, and routing (built on top of this package)
 - [`@rebasepro/ui`](../ui) — Design system components
 - [`@rebasepro/common`](../common) — Shared utilities and collection registry
 - [`@rebasepro/types`](../types) — TypeScript type definitions
-- [`@rebasepro/forms`](../formex) — Form state management
+- [`@rebasepro/forms`](../forms) — Form state management
 - [`@rebasepro/client`](../client) — HTTP client SDK

package/dist/debug.js

@@ -3868,8 +3868,8 @@ function UIReferenceView() {
           /* @__PURE__ */ jsx16("code", { className: "font-mono text-xs", children: "FieldBlock" }),
           ": 13px, primary ink, muted type icon) and the control is",
           " ",
-          /* @__PURE__ */ jsx16("code", { className: "font-mono text-xs", children: "small" }),
-          ", 32px. A dialog or a standalone control carries its label",
+          /* @__PURE__ */ jsx16("code", { className: "font-mono text-xs", children: "large" }),
+          ", 48px. A dialog or a standalone control carries its label",
           " ",
           /* @__PURE__ */ jsx16("em", { children: "inside" }),
           " as the floating ",
@@ -3881,7 +3881,7 @@ function UIReferenceView() {
         ] }),
         /* @__PURE__ */ jsxs16("div", { className: "grid grid-cols-12 gap-4", children: [
           /* @__PURE__ */ jsxs16("div", { className: "col-span-12 sm:col-span-6", children: [
-            /* @__PURE__ */ jsx16(Typography14, { variant: "caption", color: "secondary", className: "block mb-2 font-mono", children: 'record form \xB7 size="small", label above' }),
+            /* @__PURE__ */ jsx16(Typography14, { variant: "caption", color: "secondary", className: "block mb-2 font-mono", children: 'record form \xB7 size="large", label above' }),
             /* @__PURE__ */ jsx16("div", { className: "flex flex-col gap-5 mb-6", children: [
               ["Product name", "Italian coffee maker", "Shown on the storefront and in receipts.", false, false],
               ["SKU", "SKU-57032", "Stock keeping unit \u2014 unique product identifier", true, false],
@@ -3892,7 +3892,7 @@ function UIReferenceView() {
                 /* @__PURE__ */ jsx16("span", { className: "truncate", children: label }),
                 required && /* @__PURE__ */ jsx16("span", { className: "text-red-500 dark:text-red-500 -ml-1", children: "*" })
               ] }),
-              /* @__PURE__ */ jsx16(TextField3, { size: "small", value, disabled, onChange: () => {
+              /* @__PURE__ */ jsx16(TextField3, { size: "large", value, disabled, onChange: () => {
               } }),
               help && /* @__PURE__ */ jsx16(Typography14, { variant: "caption", color: "disabled", className: "mt-1.5 ml-0.5 leading-snug", children: help })
             ] }, label)) }),
@@ -3908,7 +3908,7 @@ function UIReferenceView() {
               /* @__PURE__ */ jsx16(TextField3, { size: "small", label: "Small", placeholder: "Placeholder under the label" }),
               /* @__PURE__ */ jsx16(TextField3, { size: "smallest", label: "Smallest", value: "Filled value", onChange: () => {
               } }),
-              /* @__PURE__ */ jsx16(TextField3, { size: "large", label: "Large", placeholder: "The login screen only" })
+              /* @__PURE__ */ jsx16(TextField3, { size: "large", label: "Large", placeholder: "The login screen" })
             ] })
           ] }),
           /* @__PURE__ */ jsxs16("div", { className: "col-span-12 sm:col-span-6 flex flex-col gap-4", children: [

package/dist/index.es.js

@@ -6412,6 +6412,10 @@ var en = {
 	studio_backups_denied_hint: "Nothing is wrong with the project. Listing backups needs an admin connection, and the signed-in account was refused.",
 	studio_backups_read_failed: "Could not read this project's backups",
 	studio_backups_downloading: "Downloading…",
+	studio_backups_roles_file: "Roles file",
+	studio_backups_roles_file_hint: "The .globals.sql saved with this backup. It recreates the database roles that the dump's grants and row-level security refer to, and `rebase db restore` reads it from next to the .dump, so keep the two files together.",
+	studio_backups_no_roles_file: "No roles file",
+	studio_backups_no_roles_file_hint: "No .globals.sql was saved with this backup. Restoring it into a new Postgres stops at the first grant to a database role that does not exist there.",
 	studio_cron_denied_title: "You cannot list this project's cron jobs",
 	studio_cron_denied_hint: "Nothing is wrong with the project. The cron API is admin-only, and the signed-in account was refused.",
 	studio_cron_read_failed: "Could not read this project's cron jobs",
@@ -7424,6 +7428,10 @@ var es = {
 	studio_backups_denied_hint: "El proyecto está bien. Listar copias de seguridad requiere una conexión de administrador, y la cuenta con la sesión iniciada fue rechazada.",
 	studio_backups_read_failed: "No se han podido leer las copias de seguridad de este proyecto",
 	studio_backups_downloading: "Descargando…",
+	studio_backups_roles_file: "Archivo de roles",
+	studio_backups_roles_file_hint: "El .globals.sql guardado con esta copia. Recrea los roles de base de datos a los que se refieren los permisos y la seguridad a nivel de fila del volcado, y `rebase db restore` lo lee junto al .dump, así que guarda los dos archivos juntos.",
+	studio_backups_no_roles_file: "Sin archivo de roles",
+	studio_backups_no_roles_file_hint: "Esta copia no tiene ningún .globals.sql. Al restaurarla en un Postgres nuevo, se detiene en el primer permiso concedido a un rol de base de datos que allí no existe.",
 	studio_cron_denied_title: "No puedes listar las tareas cron de este proyecto",
 	studio_cron_denied_hint: "El proyecto está bien. La API de cron es solo para administradores, y la cuenta con la sesión iniciada fue rechazada.",
 	studio_cron_read_failed: "No se han podido leer las tareas cron de este proyecto",
@@ -8428,6 +8436,10 @@ var de = {
 	studio_backups_denied_hint: "Mit dem Projekt ist alles in Ordnung. Das Auflisten von Sicherungen erfordert eine Admin-Verbindung, und das angemeldete Konto wurde abgelehnt.",
 	studio_backups_read_failed: "Die Sicherungen dieses Projekts konnten nicht gelesen werden",
 	studio_backups_downloading: "Wird heruntergeladen…",
+	studio_backups_roles_file: "Rollendatei",
+	studio_backups_roles_file_hint: "Die .globals.sql, die mit dieser Sicherung gespeichert wurde. Sie legt die Datenbankrollen neu an, auf die sich die Berechtigungen und die Sicherheit auf Zeilenebene des Dumps beziehen, und `rebase db restore` liest sie neben der .dump – bewahre beide Dateien zusammen auf.",
+	studio_backups_no_roles_file: "Keine Rollendatei",
+	studio_backups_no_roles_file_hint: "Zu dieser Sicherung wurde keine .globals.sql gespeichert. Eine Wiederherstellung in ein neues Postgres bricht bei der ersten Berechtigung für eine Datenbankrolle ab, die dort nicht existiert.",
 	studio_cron_denied_title: "Du darfst die Cron-Jobs dieses Projekts nicht auflisten",
 	studio_cron_denied_hint: "Mit dem Projekt ist alles in Ordnung. Die Cron-API ist nur für Admins, und das angemeldete Konto wurde abgelehnt.",
 	studio_cron_read_failed: "Die Cron-Jobs dieses Projekts konnten nicht gelesen werden",
@@ -9432,6 +9444,10 @@ var fr = {
 	studio_backups_denied_hint: "Le projet n'a rien d'anormal. Lister les sauvegardes nécessite une connexion administrateur, et le compte connecté a été refusé.",
 	studio_backups_read_failed: "Impossible de lire les sauvegardes de ce projet",
 	studio_backups_downloading: "Téléchargement…",
+	studio_backups_roles_file: "Fichier des rôles",
+	studio_backups_roles_file_hint: "Le .globals.sql enregistré avec cette sauvegarde. Il recrée les rôles de base de données auxquels se réfèrent les autorisations et la sécurité au niveau des lignes du dump, et `rebase db restore` le lit à côté du .dump : gardez les deux fichiers ensemble.",
+	studio_backups_no_roles_file: "Aucun fichier des rôles",
+	studio_backups_no_roles_file_hint: "Aucun .globals.sql n'a été enregistré avec cette sauvegarde. Une restauration dans un nouveau Postgres s'arrête à la première autorisation accordée à un rôle de base de données qui n'y existe pas.",
 	studio_cron_denied_title: "Vous ne pouvez pas lister les tâches cron de ce projet",
 	studio_cron_denied_hint: "Le projet n'a rien d'anormal. L'API cron est réservée aux administrateurs, et le compte connecté a été refusé.",
 	studio_cron_read_failed: "Impossible de lire les tâches cron de ce projet",
@@ -10436,6 +10452,10 @@ var it = {
 	studio_backups_denied_hint: "Il progetto non ha nulla che non va. Elencare i backup richiede una connessione da amministratore, e l'account connesso è stato rifiutato.",
 	studio_backups_read_failed: "Non è stato possibile leggere i backup di questo progetto",
 	studio_backups_downloading: "Download in corso…",
+	studio_backups_roles_file: "File dei ruoli",
+	studio_backups_roles_file_hint: "Il .globals.sql salvato con questo backup. Ricrea i ruoli del database a cui fanno riferimento i permessi e la sicurezza a livello di riga del dump, e `rebase db restore` lo legge accanto al .dump, quindi tieni insieme i due file.",
+	studio_backups_no_roles_file: "Nessun file dei ruoli",
+	studio_backups_no_roles_file_hint: "Con questo backup non è stato salvato nessun .globals.sql. Ripristinarlo in un nuovo Postgres si ferma al primo permesso concesso a un ruolo del database che lì non esiste.",
 	studio_cron_denied_title: "Non puoi elencare i processi cron di questo progetto",
 	studio_cron_denied_hint: "Il progetto non ha nulla che non va. L'API cron è riservata agli amministratori, e l'account connesso è stato rifiutato.",
 	studio_cron_read_failed: "Non è stato possibile leggere i processi cron di questo progetto",
@@ -11440,6 +11460,10 @@ var hi = {
 	studio_backups_denied_hint: "प्रोजेक्ट में कोई गड़बड़ी नहीं है। बैकअप सूचीबद्ध करने के लिए एडमिन कनेक्शन चाहिए, और साइन-इन किए गए खाते को मना कर दिया गया।",
 	studio_backups_read_failed: "इस प्रोजेक्ट के बैकअप नहीं पढ़े जा सके",
 	studio_backups_downloading: "डाउनलोड हो रहा है…",
+	studio_backups_roles_file: "रोल फ़ाइल",
+	studio_backups_roles_file_hint: "इस बैकअप के साथ सहेजी गई .globals.sql। यह वे डेटाबेस रोल फिर से बनाती है जिनका ज़िक्र डंप की अनुमतियाँ और पंक्ति-स्तरीय सुरक्षा करती हैं, और `rebase db restore` इसे .dump के पास से पढ़ता है, इसलिए दोनों फ़ाइलें साथ रखें।",
+	studio_backups_no_roles_file: "कोई रोल फ़ाइल नहीं",
+	studio_backups_no_roles_file_hint: "इस बैकअप के साथ कोई .globals.sql सहेजी नहीं गई। इसे किसी नए Postgres में रिस्टोर करने पर यह पहली ऐसी अनुमति पर रुक जाता है जो किसी ऐसे डेटाबेस रोल को दी गई हो जो वहाँ मौजूद नहीं है।",
 	studio_cron_denied_title: "आप इस प्रोजेक्ट के क्रॉन जॉब सूचीबद्ध नहीं कर सकते",
 	studio_cron_denied_hint: "प्रोजेक्ट में कोई गड़बड़ी नहीं है। क्रॉन API केवल एडमिन के लिए है, और साइन-इन किए गए खाते को मना कर दिया गया।",
 	studio_cron_read_failed: "इस प्रोजेक्ट के क्रॉन जॉब नहीं पढ़े जा सके",
@@ -12449,6 +12473,10 @@ var pt = {
 	studio_backups_denied_hint: "O projeto não tem nada de errado. Listar cópias de segurança exige uma ligação de administrador, e a conta com sessão iniciada foi recusada.",
 	studio_backups_read_failed: "Não foi possível ler as cópias de segurança deste projeto",
 	studio_backups_downloading: "A descarregar…",
+	studio_backups_roles_file: "Ficheiro de funções",
+	studio_backups_roles_file_hint: "O .globals.sql guardado com esta cópia. Recria as funções da base de dados a que se referem as permissões e a segurança ao nível da linha do dump, e o `rebase db restore` lê-o ao lado do .dump, por isso mantenha os dois ficheiros juntos.",
+	studio_backups_no_roles_file: "Sem ficheiro de funções",
+	studio_backups_no_roles_file_hint: "Esta cópia não tem nenhum .globals.sql. Restaurá-la num Postgres novo para na primeira permissão concedida a uma função da base de dados que lá não existe.",
 	studio_cron_denied_title: "Não pode listar as tarefas cron deste projeto",
 	studio_cron_denied_hint: "O projeto não tem nada de errado. A API de cron é apenas para administradores, e a conta com sessão iniciada foi recusada.",
 	studio_cron_read_failed: "Não foi possível ler as tarefas cron deste projeto",