@rebasepro/cli 0.0.1-canary.2 → 0.0.1-canary.4829d6e

package/templates/template/config/collections/users.ts

@@ -0,0 +1,142 @@
+import type { CollectionConfig } from "@rebasepro/types";
+
+const usersCollection: CollectionConfig = {
+    name: "Users",
+    singularName: "User",
+    slug: "users",
+    auth: { enabled: true },
+    table: "users",
+    schema: "rebase",
+    icon: "Users",
+    group: "Settings",
+    openEntityMode: "dialog",
+    disableDefaultActions: ["copy"],
+    securityRules: [
+        { operation: "select",
+roles: ["admin"] },
+        { operations: ["insert", "update", "delete"],
+roles: ["admin"] }
+    ],
+    sort: ["createdAt", "desc"],
+    properties: {
+        id: {
+            name: "ID",
+            type: "string",
+            isId: "uuid",
+            ui: {
+                readOnly: true
+            }
+        },
+        email: {
+            name: "Email",
+            type: "string",
+            validation: {
+                required: true,
+                unique: true
+            }
+        },
+        displayName: {
+            name: "Name",
+            type: "string",
+            columnName: "display_name"
+        },
+        photoURL: {
+            name: "Photo URL",
+            type: "string",
+            columnName: "photo_url",
+            ui: {
+                url: "image"
+            }
+        },
+        roles: {
+            name: "Roles",
+            type: "array",
+            columnType: "text[]",
+            of: {
+                name: "Role",
+                type: "string",
+                enum: {
+                    admin: "Admin",
+                    editor: "Editor",
+                    viewer: "Viewer"
+                }
+            }
+        },
+        passwordHash: {
+            name: "Password Hash",
+            type: "string",
+            columnName: "password_hash",
+            ui: {
+                hideFromCollection: true,
+                disabled: { hidden: true }
+            }
+        },
+        emailVerified: {
+            name: "Email Verified",
+            type: "boolean",
+            columnName: "email_verified",
+            defaultValue: false,
+            ui: {
+                hideFromCollection: true,
+                disabled: { hidden: true }
+            }
+        },
+        emailVerificationToken: {
+            name: "Email Verification Token",
+            type: "string",
+            columnName: "email_verification_token",
+            ui: {
+                hideFromCollection: true,
+                disabled: { hidden: true }
+            }
+        },
+        emailVerificationSentAt: {
+            name: "Email Verification Sent At",
+            type: "date",
+            columnName: "email_verification_sent_at",
+            ui: {
+                hideFromCollection: true,
+                disabled: { hidden: true }
+            }
+        },
+        metadata: {
+            name: "Metadata",
+            type: "map",
+            keyValue: true,
+            properties: {},
+            defaultValue: {},
+            ui: {
+                hideFromCollection: true,
+                disabled: { hidden: true }
+            }
+        },
+        createdAt: {
+            name: "Created At",
+            type: "date",
+            columnName: "created_at",
+            autoValue: "on_create",
+            ui: {
+                readOnly: true
+            }
+        },
+        updatedAt: {
+            name: "Updated At",
+            type: "date",
+            columnName: "updated_at",
+            autoValue: "on_update",
+            ui: {
+                hideFromCollection: true,
+                disabled: { hidden: true }
+            }
+        }
+    },
+    propertiesOrder: [
+        "id",
+        "email",
+        "displayName",
+        "roles",
+        "createdAt"
+    ]
+};
+
+export default usersCollection;

package/templates/template/{shared → config}/index.ts

@@ -3,4 +3,4 @@
  * Collections defined here are used by both the frontend and backend
  */
 
-export { collections } from "./collections";
+export { collections } from "./collections/index.js";

package/templates/template/config/package.json

@@ -0,0 +1,28 @@
+{
+    "name": "{{PROJECT_NAME}}-config",
+    "version": "1.0.0",
+    "description": "Shared collections for frontend and backend",
+    "main": "dist/index.js",
+    "types": "dist/index.d.ts",
+    "type": "module",
+    "private": true,
+    "scripts": {
+        "build": "tsc",
+        "dev": "tsc --watch",
+        "clean": "rm -rf dist"
+    },
+    "dependencies": {
+        "@rebasepro/types": "workspace:*"
+    },
+    "devDependencies": {
+        "typescript": "^5.9.2"
+    },
+    "exports": {
+        ".": {
+            "import": "./dist/index.js",
+            "types": "./dist/index.d.ts",
+            "default": "./dist/index.js"
+        },
+        "./package.json": "./package.json"
+    }
+}

package/templates/template/docker-compose.yml

@@ -1,48 +1,84 @@
-version: '3.8'
+# ─── Rebase — Production Docker Compose ──────────────────────────────
+#
+# Quick start:
+#   cp .env.example .env    # Edit with your secrets
+#   docker compose up -d    # Start everything
+#
+# This runs:
+#   1. PostgreSQL 18 with persistent data
+#   2. Backend (Node.js / Hono) with health checks
+#   3. Frontend (nginx) serving the Vite build
+#
+# For development, use `rebase dev` instead.
+# ─────────────────────────────────────────────────────────────────────
 
 services:
+  # ── PostgreSQL ───────────────────────────────────────────────────────
   db:
     image: postgres:18-alpine
+    restart: unless-stopped
     environment:
       POSTGRES_USER: rebase
-      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_PASSWORD: ${DATABASE_PASSWORD:-changeme}
       POSTGRES_DB: rebase
     ports:
       - "5432:5432"
     volumes:
-      - postgres_data:/var/lib/postgresql/data
+      - postgres_data:/var/lib/postgresql
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U rebase"]
+      test: ["CMD-SHELL", "pg_isready -U rebase -d rebase"]
       interval: 5s
       timeout: 5s
-      retries: 5
+      retries: 10
+      start_period: 10s
+    # Production tuning (adjust for your workload)
+    command:
+      - "postgres"
+      - "-c" 
+      - "shared_buffers=256MB"
+      - "-c"
+      - "max_connections=100"
+      - "-c"
+      - "work_mem=4MB"
+      - "-c"
+      - "effective_cache_size=768MB"
+      - "-c"
+      - "log_min_duration_statement=1000"
 
+  # ── Backend ──────────────────────────────────────────────────────────
   backend:
-    build: 
+    build:
       context: .
       dockerfile: backend/Dockerfile
+    restart: unless-stopped
     ports:
-      - "3001:3001"
+      - "${PORT:-3001}:3001"
+    env_file: .env
     environment:
-      - DATABASE_URL=postgresql://rebase:${POSTGRES_PASSWORD}@db:5432/rebase
-      - JWT_SECRET=${JWT_SECRET}
-      - NODE_ENV=development
+      # Override DATABASE_URL to point to the Docker network service
+      DATABASE_URL: postgresql://rebase:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
+      ADMIN_CONNECTION_STRING: postgresql://rebase:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
+      NODE_ENV: production
+      PORT: "3001"
     depends_on:
       db:
         condition: service_healthy
     volumes:
-      - ./backend/uploads:/app/backend/uploads
+      - uploads:/app/backend/uploads
 
+  # ── Frontend ─────────────────────────────────────────────────────────
   frontend:
     build:
       context: .
       dockerfile: frontend/Dockerfile
+    restart: unless-stopped
     ports:
-      - "5173:5173"
-    environment:
-      - VITE_API_URL=http://localhost:3001
+      - "80:80"
     depends_on:
       - backend
 
 volumes:
   postgres_data:
+    driver: local
+  uploads:
+    driver: local

package/templates/template/frontend/Dockerfile

@@ -1,28 +1,52 @@
-FROM node:24-alpine AS base
+# ─── Multi-stage production Dockerfile for the Rebase frontend ────────
+# Builds the Vite app, then serves via nginx for proper caching/compression.
+#
+# Build context: the project root (where pnpm-workspace.yaml lives)
+# Usage:
+#   docker build -t my-app-frontend -f frontend/Dockerfile .
+
+# ── Stage 1: Install + Build ─────────────────────────────────────────
+FROM node:24-alpine AS builder
+
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
 RUN corepack enable
+
 RUN apk add --no-cache python3 make g++
 
 WORKDIR /app
 
-# Copy root configurations
-COPY package.json ./
+# Copy workspace root files
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./
 
-# Copy internal workspaces
+# Copy workspace packages
 COPY frontend ./frontend
-COPY shared ./shared
+COPY config ./config
+
+# Install dependencies (skip scripts to avoid @ariga/atlas binary download,
+# which is a backend-only dependency that may fail on certain platforms)
+RUN pnpm install --frozen-lockfile --ignore-scripts
+RUN pnpm rebuild esbuild
+
+# Build config first, then frontend
+RUN pnpm --filter "*-config" run build
+RUN pnpm --filter "*-frontend" run build
+
+# ── Stage 2: Serve with nginx ────────────────────────────────────────
+FROM nginx:1.27-alpine AS runtime
+
+# Remove default nginx page
+RUN rm -rf /usr/share/nginx/html/*
+
+# Copy built assets
+COPY --from=builder /app/frontend/dist /usr/share/nginx/html
 
-# Install dependencies
-RUN pnpm install
+# Custom nginx config for SPA routing + compression
+COPY frontend/nginx.conf /etc/nginx/conf.d/default.conf
 
-# Build shared and frontend
-RUN pnpm run build:shared
-RUN pnpm run build:frontend
+EXPOSE 80
 
-# Install a simple static server
-RUN npm install -g serve
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
+    CMD wget --no-verbose --tries=1 --spider http://localhost:80/ || exit 1
 
-WORKDIR /app/frontend
-EXPOSE 5173
-CMD ["serve", "-s", "dist", "-l", "5173"]
+CMD ["nginx", "-g", "daemon off;"]

package/templates/template/frontend/nginx.conf

@@ -0,0 +1,40 @@
+server {
+    listen 80;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Gzip compression
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_min_length 256;
+    gzip_types
+        text/plain
+        text/css
+        text/javascript
+        application/javascript
+        application/json
+        application/xml
+        image/svg+xml
+        font/woff2;
+
+    # Cache static assets aggressively (hashed filenames from Vite)
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        try_files $uri =404;
+    }
+
+    # SPA fallback: serve index.html for all non-file routes
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+}

package/templates/template/frontend/package.json

@@ -4,22 +4,21 @@
     "private": true,
     "type": "module",
     "dependencies": {
-        "@rebasepro/auth": "^4.0.0",
-        "@rebasepro/core": "^4.0.0",
-        "@rebasepro/data_enhancement": "^4.0.0",
-        "@rebasepro/data_export": "^4.0.0",
-        "@rebasepro/data_import": "^4.0.0",
-        "@rebasepro/postgresql": "^4.0.0",
-        "@rebasepro/studio": "^4.0.0",
-        "@rebasepro/types": "^4.0.0",
-        "@rebasepro/ui": "^4.0.0",
+        "@rebasepro/app": "workspace:*",
+        "@rebasepro/plugin-ai": "workspace:*",
+        "@rebasepro/client": "workspace:*",
+        "@rebasepro/admin": "workspace:*",
+        "@rebasepro/studio": "workspace:*",
+        "@rebasepro/types": "workspace:*",
+        "@rebasepro/ui": "workspace:*",
         "@fontsource/jetbrains-mono": "^5.2.5",
-        "{{PROJECT_NAME}}-shared": "workspace:*",
+        "{{PROJECT_NAME}}-config": "*",
         "react": "^19.0.0",
         "react-dom": "^19.0.0",
         "react-router": "^7.0.0",
         "react-router-dom": "^7.0.0",
-        "typeface-rubik": "^1.1.13"
+        "react-compiler-runtime": "^1.0.0",
+        "@fontsource/rubik": "^5.2.5"
     },
     "scripts": {
         "dev": "vite --mode development",
@@ -41,12 +40,13 @@
     "devDependencies": {
         "@tailwindcss/typography": "^0.5.16",
         "@tailwindcss/vite": "^4.1.12",
+        "@types/node": "^20.19.41",
         "@types/react": "^19.0.8",
         "@types/react-dom": "^19.0.3",
-        "@vitejs/plugin-react": "^4.3.4",
+        "@vitejs/plugin-react": "^4.4.1",
         "tailwindcss": "^4.1.3",
         "typescript": "^5.9.2",
-        "vite": "^5.4.17",
+        "vite": "^6.4.3",
         "vite-plugin-svgr": "^4.3.0"
     }
 }

package/templates/template/frontend/src/App.tsx

@@ -1,132 +1,46 @@
-import React, { useCallback } from "react";
+import React from "react";
 
 import "@fontsource/jetbrains-mono";
-import "typeface-rubik";
-
-import {
-    RebaseLoginView,
-    useBackendUserManagement,
-    useRebaseAuthController
-} from "@rebasepro/auth";
-import {
-    AppBar,
-    CircularProgressCenter,
-    Drawer,
-    Rebase,
-    RebaseRoute,
-    ModeControllerProvider,
-    NotFoundPage,
-    Scaffold,
-    SideDialogs,
-    RebaseRoutes,
-    SnackbarProvider,
-    ContentHomePage,
-    useBackendStorageSource,
-    useBuildCMSUrlController,
-    useBuildCollectionRegistryController,
-    useBuildLocalConfigurationPersistence,
-    useBuildModeController,
-    useBuildNavigationStateController
-} from "@rebasepro/core";
-import { usePostgresClientDataSource } from "@rebasepro/postgresql";
+import "@fontsource/rubik";
+
+import { useRebaseAuthController } from "@rebasepro/app";
+import { Rebase, RebaseAuth } from "@rebasepro/app";
+import { RebaseAdmin, RebaseShell } from "@rebasepro/admin";
+import { ErrorBoundary } from "@rebasepro/ui";
+import { RebaseStudio } from "@rebasepro/studio";
+import { createRebaseClient } from "@rebasepro/client";
 import { collections } from "virtual:rebase-collections";
-import { Route, Outlet } from "react-router-dom";
 
 // Configuration from environment
-const API_URL = import.meta.env.VITE_API_URL || "http://localhost:3001";
+const API_URL = import.meta.env.VITE_API_URL || (import.meta.env.DEV ? "http://localhost:3001" : undefined);
 const GOOGLE_CLIENT_ID = import.meta.env.VITE_GOOGLE_CLIENT_ID;
 
 export function App() {
-    const modeController = useBuildModeController();
-    const userConfigPersistence = useBuildLocalConfigurationPersistence();
+    const rebaseClient = React.useMemo(() => createRebaseClient({
+        baseUrl: API_URL,
+        // Store the refresh token in an httpOnly cookie (XSS-safe) rather than
+        // localStorage. The backend issues it via `auth.cookieAuth`.
+        auth: { authFlowMode: "cookie" }
+    }), []);
 
     const authController = useRebaseAuthController({
-        apiUrl: API_URL,
+        client: rebaseClient,
         googleClientId: GOOGLE_CLIENT_ID
     });
 
-    const storageSource = useBackendStorageSource({
-        apiUrl: API_URL,
-        getAuthToken: authController.getAuthToken
-    });
-
-    const userManagement = useBackendUserManagement({
-        apiUrl: API_URL,
-        getAuthToken: authController.getAuthToken,
-        currentUser: authController.user
-    });
-
-    const postgresDelegate = usePostgresClientDataSource({
-        websocketUrl: API_URL.replace(/^http/, "ws"),
-        getAuthToken: authController.initialLoading ? undefined : authController.getAuthToken
-    });
-
-    const collectionsBuilder = useCallback(() => {
-        return [...collections];
-    }, []);
-
-    const collectionRegistryController = useBuildCollectionRegistryController({ userConfigPersistence });
-    const cmsUrlController = useBuildCMSUrlController({
-        basePath: "/",
-        baseCollectionPath: "/c",
-        collectionRegistryController
-    });
-
-    const navigationStateController = useBuildNavigationStateController({
-        collections: collectionsBuilder,
-        authController,
-        dataSource: postgresDelegate,
-        collectionRegistryController,
-        cmsUrlController,
-        userManagement
-    });
-
     return (
-        <SnackbarProvider>
-            <ModeControllerProvider value={modeController}>
-                <Rebase
-                    collectionRegistryController={collectionRegistryController}
-                    cmsUrlController={cmsUrlController}
-                    navigationStateController={navigationStateController}
-                    authController={authController}
-                    userConfigPersistence={userConfigPersistence}
-                    dataSource={postgresDelegate}
-                    storageSource={storageSource}
-                >
-                    {({ loading }) => {
-                        if (loading || authController.initialLoading) {
-                            return <CircularProgressCenter />;
-                        }
-
-                        if (!authController.user) {
-                            return (
-                                <RebaseLoginView
-                                    authController={authController}
-                                    googleEnabled={!!GOOGLE_CLIENT_ID}
-                                    googleClientId={GOOGLE_CLIENT_ID}
-                                />
-                            );
-                        }
-
-                        return (
-                            <RebaseRoutes>
-                                <Route element={
-                                    <Scaffold autoOpenDrawer={false}>
-                                        <AppBar />
-                                        <Drawer />
-                                        <Outlet />
-                                        <SideDialogs />
-                                    </Scaffold>
-                                }>
-                                    <Route path={"/"} element={<ContentHomePage />} />
-                                    <Route path={"/c/*"} element={<RebaseRoute />} />
-                                    <Route path={"*"} element={<NotFoundPage />} />
-                                </Route>
-                            </RebaseRoutes>
-                        );
-                    }}
-                </Rebase>
-            </ModeControllerProvider>
-        </SnackbarProvider>
+        <ErrorBoundary fullPage>
+            <Rebase
+                client={rebaseClient}
+                authController={authController}
+            >
+                <RebaseAuth />
+                <RebaseAdmin
+                    collections={collections}
+                />
+                <RebaseStudio/>
+                <RebaseShell title="Rebase"/>
+            </Rebase>
+        </ErrorBoundary>
     );
 }

package/templates/template/frontend/src/index.css

@@ -1,2 +1,16 @@
 @import "tailwindcss";
-@import "@rebasepro/ui/index.css";
+@import "@rebasepro/ui/index.css" layer(base);
+
+@source "../node_modules/@rebasepro";
+
+@custom-variant dark (&:where(.dark, .dark *));
+
+@layer utilities {
+    body {
+        @apply w-full min-h-screen bg-surface-50 dark:bg-surface-900 flex flex-col items-center justify-center;
+    }
+
+    a {
+        @apply text-primary dark:text-primary;
+    }
+}

package/templates/template/frontend/src/main.tsx

@@ -4,15 +4,19 @@ import { createBrowserRouter, RouterProvider } from "react-router-dom";
 import { App } from "./App";
 import "./index.css";
 
+window.addEventListener("unhandledrejection", (event: PromiseRejectionEvent) => {
+    console.error("[Rebase] Unhandled promise rejection:", event.reason);
+});
+
 const router = createBrowserRouter([
     {
         path: "/*",
-        element: <App />
+        element: <App/>
     }
 ]);
 
 ReactDOM.createRoot(document.getElementById("root") as HTMLElement).render(
     <React.StrictMode>
-        <RouterProvider router={router} />
+        <RouterProvider router={router}/>
     </React.StrictMode>
 );

package/templates/template/frontend/src/virtual.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="vite/client" />
+/// <reference types="vite-plugin-svgr/client" />
+
+declare module "virtual:rebase-collections" {
+    export const collections: any[];
+}

package/templates/template/frontend/tsconfig.json

@@ -14,7 +14,8 @@
     "resolveJsonModule": true,
     "isolatedModules": true,
     "noEmit": true,
-    "jsx": "react-jsx"
+    "jsx": "react-jsx",
+    "types": ["vite/client", "node"]
   },
-  "include": ["./src", "./vite.config.ts"]
+  "include": ["src/**/*", "vite.config.ts"]
 }