@rebasepro/cli 0.10.1-canary.8650626 → 0.10.1-canary.b1e3dbf

package/dist/bundle.d.ts

@@ -20,6 +20,24 @@ export interface BuildBundleResult {
     manifest: RebaseBundleManifest;
     collectionCount: number;
 }
+/**
+ * Whether the compiled config package exports a `storageAuthorize` hook.
+ *
+ * Recorded in the manifest so a host can refuse a deploy that would enable file
+ * storage with no access model, rather than let the runtime's boot guard turn it
+ * into a crash loop the developer cannot read.
+ *
+ * Read from the *compiled* index, deliberately: that is the exact module the
+ * runtime imports and reads the export off, so this cannot disagree with what
+ * actually happens at boot. It is a textual check rather than an import because
+ * a freshly built bundle cannot resolve its own dependencies until it is
+ * deployed — the same reason schema hashing reads source.
+ *
+ * Errs toward `false`: a missed detection costs a deploy rejection whose message
+ * says exactly how to proceed, while a false positive would hand back the crash
+ * loop this exists to prevent.
+ */
+export declare function detectStorageAuthorize(compiledConfigDir: string): boolean;
 /**
  * Detect native code in the dependency closure.
  *

package/dist/index.es.js

@@ -2981,6 +2981,43 @@ async function writeBundleTsconfig(projectRoot, outDir, includes, skipTypeCheck)
 	return tsconfigPath;
 }
 /**
+* Whether the compiled config package exports a `storageAuthorize` hook.
+*
+* Recorded in the manifest so a host can refuse a deploy that would enable file
+* storage with no access model, rather than let the runtime's boot guard turn it
+* into a crash loop the developer cannot read.
+*
+* Read from the *compiled* index, deliberately: that is the exact module the
+* runtime imports and reads the export off, so this cannot disagree with what
+* actually happens at boot. It is a textual check rather than an import because
+* a freshly built bundle cannot resolve its own dependencies until it is
+* deployed — the same reason schema hashing reads source.
+*
+* Errs toward `false`: a missed detection costs a deploy rejection whose message
+* says exactly how to proceed, while a false positive would hand back the crash
+* loop this exists to prevent.
+*/
+function detectStorageAuthorize(compiledConfigDir) {
+	const indexPath = [
+		".js",
+		".mjs",
+		".ts"
+	].map((ext) => path.join(compiledConfigDir, `index${ext}`)).find((candidate) => fs.existsSync(candidate));
+	if (!indexPath) return false;
+	let source;
+	try {
+		source = fs.readFileSync(indexPath, "utf8");
+	} catch {
+		return false;
+	}
+	if (/\bexport\s+(?:async\s+)?(?:const|let|var|function)\s+storageAuthorize\b/.test(source)) return true;
+	for (const clause of source.matchAll(/\bexport\s*\{([^}]*)\}/g)) if (clause[1].split(",").map((entry) => {
+		const parts = entry.split(/\bas\b/);
+		return parts[parts.length - 1].trim();
+	}).includes("storageAuthorize")) return true;
+	return false;
+}
+/**
 * Detect native code in the dependency closure.
 *
 * Walks declared runtime dependencies breadth-first through `node_modules`,
@@ -3297,6 +3334,7 @@ async function buildBundle(options) {
 	}
 	const declared = collectDeclaredDependencies(projectRoot);
 	const nativeModules = detectNativeDependencies(projectRoot, declared);
+	const declaresStorageAuthorize = detectStorageAuthorize(path.join(outDir, paths.config));
 	const schemaOut = paths.schema.replace(/\.ts$/, ".js");
 	const relative = (target) => fs.existsSync(path.join(outDir, target)) ? target : void 0;
 	const manifest = {
@@ -3322,6 +3360,7 @@ async function buildBundle(options) {
 			native: nativeModules.length > 0,
 			nativeModules: nativeModules.length > 0 ? nativeModules : void 0
 		},
+		storage: { authorize: declaresStorageAuthorize },
 		deps: { declared },
 		build: {
 			cli: resolveCliVersion(),
@@ -8926,6 +8965,6 @@ ${chalk.gray("Documentation: https://rebase.pro/docs")}
 `);
 }
 //#endregion
-export { CURRENT_RUNTIME_RANGE, DEFAULT_BUNDLE_DIR, DEFAULT_CONFIG_DIR, DEFAULT_CRONS_DIR, DEFAULT_FUNCTIONS_DIR, DEFAULT_SCHEMA_FILE, MANIFEST_FILENAME, ManifestError, appsCommand, assessManagedCompatibility, authCommand, buildBundle, buildCommand, buildInitQuestions, buildStaticBundle, buildableApps, cloudCommand, collectDeclaredDependencies, configureEnvFile, createRebaseApp, dbCommand, detectNativeDependencies, detectPackageManager, devCommand, doctorCommand, entry, findBackendApp, findBackendDir, findEnvFile, findFrontendDir, findProjectRoot, formatCdTarget, generateSdkCommand, getActiveBackendPlugin, getPMCommands, isPnpmAvailable, loadManifest, manifestExists, manifestPath, normalizeEsmSpecifiers, pnpmAvailabilityFromProbe, printInitHelp, requireBackendDir, requireProjectRoot, resetPnpmAvailabilityCache, resolveBackendPaths, resolveLocalBin, resolvePluginCliScript, resolveTsx, schemaCommand, startCommand, synthesizeManifest, validateManifest, validateProjectName, validateTsxInstallation, writeManifest };
+export { CURRENT_RUNTIME_RANGE, DEFAULT_BUNDLE_DIR, DEFAULT_CONFIG_DIR, DEFAULT_CRONS_DIR, DEFAULT_FUNCTIONS_DIR, DEFAULT_SCHEMA_FILE, MANIFEST_FILENAME, ManifestError, appsCommand, assessManagedCompatibility, authCommand, buildBundle, buildCommand, buildInitQuestions, buildStaticBundle, buildableApps, cloudCommand, collectDeclaredDependencies, configureEnvFile, createRebaseApp, dbCommand, detectNativeDependencies, detectPackageManager, detectStorageAuthorize, devCommand, doctorCommand, entry, findBackendApp, findBackendDir, findEnvFile, findFrontendDir, findProjectRoot, formatCdTarget, generateSdkCommand, getActiveBackendPlugin, getPMCommands, isPnpmAvailable, loadManifest, manifestExists, manifestPath, normalizeEsmSpecifiers, pnpmAvailabilityFromProbe, printInitHelp, requireBackendDir, requireProjectRoot, resetPnpmAvailabilityCache, resolveBackendPaths, resolveLocalBin, resolvePluginCliScript, resolveTsx, schemaCommand, startCommand, synthesizeManifest, validateManifest, validateProjectName, validateTsxInstallation, writeManifest };
 
 //# sourceMappingURL=index.es.js.map