@rebasepro/cli 0.10.1-canary.18115ba → 0.10.1-canary.262a5be

package/README.md

@@ -20,7 +20,7 @@ The CLI is also bundled with every Rebase project as a local dependency.
 | `rebase start` | Start the backend server (production) |
 | `rebase schema generate` | Generate Drizzle schema from collection definitions |
 | `rebase schema introspect` | Introspect an existing database → Rebase collections |
-| `rebase db push` | Apply schema directly to database (dev) |
+| `rebase db push` | Apply schema directly to database (dev). Previews the plan and refuses destructive changes (e.g. dropped columns) unless confirmed interactively or run with `--allow-destructive`. |
 | `rebase db generate` | Generate SQL migration files |
 | `rebase db migrate` | Run pending migrations |
 | `rebase generate-sdk` | Generate a typed TypeScript SDK from collections |

package/dist/bundle.d.ts

@@ -0,0 +1,111 @@
+import { type NativeDependency, type RebaseBundleManifest, type RebaseBackendAppConfig } from "@rebasepro/types";
+export declare const DEFAULT_BUNDLE_DIR = "dist-bundle";
+export interface BuildBundleOptions {
+    projectRoot: string;
+    appName: string;
+    app: RebaseBackendAppConfig;
+    /** Output directory, absolute or relative to the project root. */
+    outDir?: string;
+    /** Runtime range from the manifest, recorded for compatibility checks. */
+    runtimeRange: string;
+    /** Skip type checking. Faster, and strictly worse — for iteration only. */
+    skipTypeCheck?: boolean;
+    /** Skip regenerating the Drizzle schema from the collections. */
+    skipSchema?: boolean;
+    /** Emit progress. */
+    log?: (message: string) => void;
+}
+export interface BuildBundleResult {
+    outDir: string;
+    manifest: RebaseBundleManifest;
+    collectionCount: number;
+}
+/**
+ * Whether the compiled config package exports a `storageAuthorize` hook.
+ *
+ * Recorded in the manifest so a host can refuse a deploy that would enable file
+ * storage with no access model, rather than let the runtime's boot guard turn it
+ * into a crash loop the developer cannot read.
+ *
+ * Read from the *compiled* index, deliberately: that is the exact module the
+ * runtime imports and reads the export off, so this cannot disagree with what
+ * actually happens at boot. It is a textual check rather than an import because
+ * a freshly built bundle cannot resolve its own dependencies until it is
+ * deployed — the same reason schema hashing reads source.
+ *
+ * Errs toward `false`: a missed detection costs a deploy rejection whose message
+ * says exactly how to proceed, while a false positive would hand back the crash
+ * loop this exists to prevent.
+ */
+export declare function detectStorageAuthorize(compiledConfigDir: string): boolean;
+/**
+ * Detect native code in the dependency closure.
+ *
+ * Walks declared runtime dependencies breadth-first through `node_modules`,
+ * flagging anything with a `binding.gyp`, a prebuilt `.node` binary, or an
+ * install script that builds one. The managed runtime cannot run these: a
+ * binary compiled for one image will not load in another, and finding that out
+ * at deploy time is far better than in a crash loop.
+ *
+ * The walk is bounded. A dependency graph can be enormous, and this is a
+ * heuristic gate whose false negatives are caught at deploy time anyway.
+ */
+export declare function detectNativeDependencies(projectRoot: string, declared: Record<string, string>, limit?: number): NativeDependency[];
+/**
+ * Collect the runtime dependencies a bundle needs installed beside it.
+ *
+ * Packages the runtime image already provides are excluded — reinstalling a
+ * second copy of the server next to the one running the process is at best
+ * wasted space and at worst a version conflict. Workspace packages are excluded
+ * too: they are not on the registry the runtime installs from, and the project's
+ * own config package already travels inside the bundle.
+ */
+export declare function collectDeclaredDependencies(projectRoot: string): Record<string, string>;
+/**
+ * Rewrite relative import specifiers in emitted JavaScript so Node can resolve them.
+ *
+ * TypeScript deliberately does not touch specifiers: `moduleResolution: "bundler"`
+ * lets a project write `from "./posts"` or `from "./collections"`, and TypeScript
+ * emits them unchanged on the assumption that a bundler will finish the job.
+ * Nothing bundles a Rebase bundle — the runtime imports these files directly with
+ * Node's ESM loader, which requires a full path with an extension and refuses
+ * directory imports outright.
+ *
+ * Without this, adopting the bundle would mean asking every project written in
+ * the (extremely common) extensionless style to rewrite all of its imports. The
+ * rewrite is mechanical and verifiable: only relative specifiers are touched, and
+ * only when the target file actually exists on disk.
+ */
+export declare function normalizeEsmSpecifiers(outDir: string): {
+    rewritten: number;
+    unresolved: string[];
+};
+/**
+ * Compile and assemble a bundle.
+ */
+export declare function buildBundle(options: BuildBundleOptions): Promise<BuildBundleResult>;
+/**
+ * Package a built static app (a `static` or bundled-`admin` app) into a bundle.
+ *
+ * A static bundle is the counterpart to a backend bundle: the same shape, the
+ * same runtime image runs it, but its manifest says `mode: "static"` and it
+ * carries only the built assets under `static/`. That is what lets a frontend or
+ * admin app be its own deployable, scalable unit rather than something baked into
+ * the backend container.
+ *
+ * `assetsDir` is the app's built output (e.g. `frontend/dist`), already produced
+ * by its own build command. This copies it into the bundle and writes the
+ * manifest — no compilation, no dependency closure (a static bundle installs
+ * nothing at boot).
+ */
+export declare function buildStaticBundle(options: {
+    projectRoot: string;
+    appName: string;
+    assetsDir: string;
+    outDir: string;
+    runtimeRange: string;
+}): {
+    outDir: string;
+    manifest: RebaseBundleManifest;
+    fileCount: number;
+};

package/dist/commands/apps.d.ts

@@ -0,0 +1 @@
+export declare function appsCommand(subcommand: string | undefined, rawArgs?: string[]): Promise<void>;

package/dist/commands/build.d.ts

@@ -1 +1 @@
-export declare function buildCommand(): Promise<void>;
+export declare function buildCommand(rawArgs?: string[]): Promise<void>;

package/dist/commands/cloud/bundle-deploy.d.ts

@@ -0,0 +1,28 @@
+import type { RebaseBundleManifest } from "@rebasepro/types";
+/** Read and shallow-validate a built bundle's manifest. */
+export declare function readBundleManifest(bundleDir: string): RebaseBundleManifest;
+/**
+ * Tar a built bundle into a gzipped archive.
+ *
+ * `node_modules` is excluded on purpose: the bundle ships a `package.json`, and
+ * the managed runtime installs the declared dependencies at boot. Uploading an
+ * installed `node_modules` would bloat the archive and could carry a
+ * platform-specific build that will not run on the runtime image.
+ */
+export declare function packBundle(bundleDir: string, outPath: string): Promise<void>;
+/**
+ * Assemble the deploy-trigger body for a bundle deploy.
+ *
+ * The manifest travels with the trigger so the control plane can validate intake
+ * without unpacking the uploaded archive first — a rejection (native deps, no
+ * matching runtime) is then a fast, cheap answer.
+ */
+export declare function bundleDeployBody(input: {
+    projectId: string;
+    bundleId: string;
+    manifest: RebaseBundleManifest;
+    app?: string;
+    message?: string;
+}): Record<string, unknown>;
+/** Upload a bundle archive; returns the control-plane bundle id. */
+export declare function uploadBundle(url: string, token: string, projectId: string, tarPath: string): Promise<string>;

package/dist/commands/cloud/context.d.ts

@@ -62,6 +62,24 @@ export interface ProjectLink {
     slug?: string;
     projectName?: string;
     orgId?: string;
+    /**
+     * Base URL of the project's own API.
+     *
+     * For a cloud project this is a convenience derived from the subdomain. For
+     * a **self-hosted** project it is the entire link: there is no control plane
+     * to look anything up in, so `projectId` is empty and this is what commands
+     * resolve against.
+     *
+     * Keeping both kinds of link in one file is deliberate. A second link file
+     * for self-hosting would fork every command that reads one, and the tooling
+     * would drift into being cloud-only by accident.
+     */
+    apiUrl?: string;
+    /**
+     * How this checkout is linked. Absent means `cloud` — which is every link
+     * written before this field existed.
+     */
+    mode?: "cloud" | "direct";
 }
 export declare function readLink(cwd?: string): ProjectLink | null;
 export declare function writeLink(link: ProjectLink, cwd?: string): void;

package/dist/commands/generate_sdk.d.ts

@@ -10,6 +10,18 @@ interface GenerateSDKArgs {
     collectionsDir: string;
     output: string;
     cwd: string;
+    /**
+     * Where to read the schema from instead of local source.
+     *
+     * `link` uses this checkout's linked project; anything else is treated as
+     * the base URL of a Rebase backend. This is what lets a repository that
+     * contains no collections — a separate frontend, a second web app — generate
+     * a typed client from the project it talks to.
+     */
+    from?: string;
+    /** Bearer token for the contract endpoint. Falls back to REBASE_SERVICE_KEY. */
+    token?: string;
+    help?: boolean;
 }
 /**
  * Main entry point for the generate-sdk command.

package/dist/commands/start.d.ts

@@ -1 +1 @@
-export declare function startCommand(): Promise<void>;
+export declare function startCommand(rawArgs?: string[]): Promise<void>;

package/dist/index.d.ts

@@ -9,5 +9,8 @@ export * from "./commands/auth";
 export * from "./commands/doctor";
 export * from "./commands/generate_sdk";
 export * from "./commands/cloud";
+export * from "./commands/apps";
 export * from "./utils/project";
 export * from "./utils/package-manager";
+export * from "./manifest";
+export * from "./bundle";