@rebasepro/cli 0.13.0 → 0.13.1-canary.g18cfeb7

package/dist/telemetry/payload.d.ts

@@ -31,7 +31,7 @@
  */
 export declare const TELEMETRY_SCHEMA_VERSION = 1;
 /** The events the CLI reports. Closed set — a name not listed cannot be sent. */
-export type TelemetryEventName = "cli.init" | "cli.dev" | "cli.deploy" | "cli.schema_generate" | "cli.db_push" | "cli.error";
+export type TelemetryEventName = "cli.init" | "cli.dev" | "cli.deploy" | "cli.schema" | "cli.db" | "cli.error";
 /** A single non-free-text value. */
 export type TelemetryValue = string | number | boolean;
 export type TelemetryEvent = {

package/dist/utils/collection-drift.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Would `loadCollectionsFromDirectory` load this file?
+ *
+ * Mirrors that loader's own `isCollectionFile` plus its flat (non-recursive)
+ * scan. `relativePath` is relative to the collections directory, as `fs.watch`
+ * reports it.
+ */
+export declare function isLoadedCollectionFile(relativePath: string): boolean;
+/**
+ * Does this collection source declare anything a SQL toolchain would own?
+ *
+ * The fallback order matches `resolveDataSource`: an explicit `engine` wins,
+ * and a collection that only names a `dataSource` is resolved as if the key
+ * were the engine — which is what that function does when no registry is
+ * available, and the CLI has none. An engine nobody recognises counts as
+ * relational, for the reason `isRelationalCollection` gives.
+ *
+ * A file declaring several collections is SQL-affecting if *any* of them is.
+ */
+export declare function declaresRelationalCollection(rawSource: string): boolean;
+/**
+ * Can this edit have changed the generated SQL schema?
+ *
+ * Answers `true` when it cannot tell — an unreadable file is a reason to warn,
+ * not a reason to go quiet.
+ */
+export declare function affectsSqlSchema(collectionsDir: string, relativePath: string): boolean;

package/dist/utils/project.d.ts

@@ -34,6 +34,26 @@ export declare function findFrontendDir(projectRoot: string): string | null;
  * Find the .env file. Checks the project root first, then backend.
  */
 export declare function findEnvFile(projectRoot: string): string | null;
+/**
+ * Read the project's `.env` into a plain object.
+ *
+ * One reader, because there were four: `dotenv` in `start`, a hand-rolled
+ * `indexOf("=")` loop in `api-keys`, a single-key regex in `auth`, and its own
+ * splitting in `cloud env`. `dotenv` is a declared dependency of this package,
+ * so the other three existed for no reason and disagreed with the correct one
+ * on the two things people actually write in a `.env`:
+ *
+ *   - `export KEY=value`, which the hand-rolled parser keyed as
+ *     `export KEY` — so the command reported the key as unset while it was
+ *     right there in the file;
+ *   - `KEY=value # comment`, whose comment travelled into the value and then
+ *     into an `Authorization` header, coming back as a 401 with nothing
+ *     pointing at the cause.
+ *
+ * Returns `{}` when the project has no `.env`, so callers can treat "absent"
+ * and "empty" alike.
+ */
+export declare function readEnvFile(projectRoot: string): Record<string, string>;
 /**
  * Resolve a binary from the project's node_modules/.bin.
  * Checks backend, root, parent monorepo root, then falls back to PATH.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rebasepro/cli",
-  "version": "0.13.0",
+  "version": "0.13.1-canary.g18cfeb7",
   "description": "Developer tools for Rebase projects",
   "main": "./dist/index.es.js",
   "module": "./dist/index.es.js",
@@ -31,12 +31,12 @@
     "execa": "^9.6.1",
     "inquirer": "14.0.2",
     "jiti": "^2.7.0",
-    "@rebasepro/agent-skills": "0.13.0",
-    "@rebasepro/client": "0.13.0",
-    "@rebasepro/codegen": "0.13.0",
-    "@rebasepro/types": "0.13.0",
-    "@rebasepro/server": "0.13.0",
-    "@rebasepro/server-postgres": "0.13.0"
+    "@rebasepro/agent-skills": "0.13.1-canary.g18cfeb7",
+    "@rebasepro/client": "0.13.1-canary.g18cfeb7",
+    "@rebasepro/server": "0.13.1-canary.g18cfeb7",
+    "@rebasepro/server-postgres": "0.13.1-canary.g18cfeb7",
+    "@rebasepro/codegen": "0.13.1-canary.g18cfeb7",
+    "@rebasepro/types": "0.13.1-canary.g18cfeb7"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",

package/templates/eject/docker-compose.custom.yml

@@ -25,7 +25,7 @@ services:
     image: postgres:18-alpine
     restart: unless-stopped
     environment:
-      POSTGRES_USER: rebase
+      POSTGRES_USER: rebase_app
       POSTGRES_PASSWORD: ${DATABASE_PASSWORD:-changeme}
       POSTGRES_DB: rebase
     ports:
@@ -33,7 +33,7 @@ services:
     volumes:
       - postgres_data:/var/lib/postgresql
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U rebase -d rebase"]
+      test: ["CMD-SHELL", "pg_isready -U rebase_app -d rebase"]
       interval: 5s
       timeout: 5s
       retries: 10
@@ -48,8 +48,8 @@ services:
       - "${PORT:-3001}:3001"
     env_file: .env
     environment:
-      DATABASE_URL: postgresql://rebase:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
-      ADMIN_CONNECTION_STRING: postgresql://rebase:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
+      DATABASE_URL: postgresql://rebase_app:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
+      ADMIN_CONNECTION_STRING: postgresql://rebase_app:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
       NODE_ENV: production
       PORT: "3001"
       # Your entrypoint serves the built frontend itself (see the `serveSPA`

package/templates/template/.env.example

@@ -10,7 +10,7 @@
 # sslmode=disable matches the local docker-compose database, which has no TLS;
 # schema tooling (atlas) would otherwise default to requiring SSL. Remove it
 # when pointing at a managed/cloud database.
-DATABASE_URL=postgresql://rebase:changeme@localhost:5432/rebase?options=-c%20search_path=public&sslmode=disable
+DATABASE_URL=postgresql://rebase_app:changeme@localhost:5432/rebase?options=-c%20search_path=public&sslmode=disable
 # DATABASE_URL=mongodb://localhost:27017/rebase
 #
 # Seeing "SSL is not enabled on the server"? Something in your environment
@@ -22,7 +22,7 @@ DATABASE_URL=postgresql://rebase:changeme@localhost:5432/rebase?options=-c%20sea
 # downgrade SSL for you when you have asked for it, not even on localhost:
 # quietly ignoring a security setting is worse than a clear failure. To opt out
 # explicitly for a local database, say so:
-#   DATABASE_URL=postgresql://rebase:changeme@localhost:5432/rebase?options=-c%20search_path=public&sslmode=disable
+#   DATABASE_URL=postgresql://rebase_app:changeme@localhost:5432/rebase?options=-c%20search_path=public&sslmode=disable
 
 # Separate admin connection string for migrations and schema operations (optional)
 # Falls back to DATABASE_URL if not set

package/templates/template/config/package.json

@@ -16,6 +16,7 @@
     "@rebasepro/types": "workspace:*"
   },
   "devDependencies": {
+    "@types/node": "^20.19.41",
     "typescript": "^5.9.2"
   },
   "exports": {

package/templates/template/docker-compose.yml

@@ -33,7 +33,7 @@ services:
     image: postgres:18-alpine
     restart: unless-stopped
     environment:
-      POSTGRES_USER: rebase
+      POSTGRES_USER: rebase_app
       POSTGRES_PASSWORD: ${DATABASE_PASSWORD:-changeme}
       POSTGRES_DB: rebase
     # Published so `rebase db push` can reach it from the host. Remove this
@@ -47,7 +47,7 @@ services:
       # The runtime must not start before the database can answer, or its first
       # boot fails on a connection refused and the container restarts for no
       # reason a reader would understand.
-      test: ["CMD-SHELL", "pg_isready -U rebase -d rebase"]
+      test: ["CMD-SHELL", "pg_isready -U rebase_app -d rebase"]
       interval: 5s
       timeout: 5s
       retries: 10
@@ -75,8 +75,8 @@ services:
     ports:
       - "${PORT:-3001}:3001"
     environment:
-      DATABASE_URL: postgresql://rebase:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
-      ADMIN_CONNECTION_STRING: postgresql://rebase:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
+      DATABASE_URL: postgresql://rebase_app:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
+      ADMIN_CONNECTION_STRING: postgresql://rebase_app:${DATABASE_PASSWORD:-changeme}@db:5432/rebase?options=-c%20search_path=public
       JWT_SECRET: ${JWT_SECRET:?set JWT_SECRET in .env — `rebase init` generates one}
       REBASE_SERVICE_KEY: ${REBASE_SERVICE_KEY:?set REBASE_SERVICE_KEY in .env — `rebase init` generates one}
       NODE_ENV: production