@rebasepro/cli 0.2.5 → 0.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rebasepro/cli",
-  "version": "0.2.5",
+  "version": "0.4.0",
   "description": "Developer tools for Rebase projects",
   "main": "./dist/index.cjs",
   "module": "./dist/index.es.js",
@@ -31,10 +31,10 @@
     "execa": "^9.6.1",
     "inquirer": "12.11.1",
     "jiti": "^2.7.0",
-    "@rebasepro/sdk-generator": "0.2.5",
-    "@rebasepro/server-core": "0.2.5",
-    "@rebasepro/types": "0.2.5",
-    "@rebasepro/server-postgresql": "0.2.5"
+    "@rebasepro/sdk-generator": "0.4.0",
+    "@rebasepro/types": "0.4.0",
+    "@rebasepro/server-core": "0.4.0",
+    "@rebasepro/server-postgresql": "0.4.0"
   },
   "devDependencies": {
     "@types/node": "^20.19.41",

package/templates/template/.env.example

@@ -46,6 +46,7 @@ ALLOW_REGISTRATION=true
 # SMTP_USER=
 # SMTP_PASS=
 # SMTP_FROM=noreply@yourapp.com
+# SMTP_NAME=
 # APP_NAME=Your App Name
 
 # ── URLs ──────────────────────────────────────────────────────────────────────

package/templates/template/backend/src/env.ts

@@ -1,11 +1,22 @@
 import * as dotenv from "dotenv";
 import path from "path";
 import { fileURLToPath } from "url";
-import { loadEnv } from "@rebasepro/server-core";
+import { loadEnv, z } from "@rebasepro/server-core";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
 dotenv.config({ path: path.resolve(__dirname, "../../.env") });
 
-export const env = loadEnv();
+export const env = loadEnv({
+    extend: z.object({
+        SMTP_HOST: z.string().optional(),
+        SMTP_PORT: z.string().default("587").transform(Number),
+        SMTP_SECURE: z.enum(["true", "false", ""]).default("false").transform(v => v === "true"),
+        SMTP_USER: z.string().optional(),
+        SMTP_PASS: z.string().optional(),
+        SMTP_FROM: z.string().optional(),
+        SMTP_NAME: z.string().optional(),
+        APP_NAME: z.string().default("Rebase"),
+    })
+});

package/templates/template/backend/src/index.ts

@@ -13,9 +13,11 @@ import {
     cleanupDevPortFile,
     logger
 } from "@rebasepro/server-core";
+import type { SecurityRule } from "@rebasepro/types";
 import { createPostgresDatabaseConnection, createPostgresAdapter } from "@rebasepro/server-postgresql";
 import { enums, relations, tables } from "./schema.generated.js";
 import { env } from "./env.js";
+import usersCollection from "../../config/collections/users.js";
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
@@ -25,7 +27,16 @@ const app: Hono<HonoEnv> = new Hono<HonoEnv>();
 
 const isProduction = env.NODE_ENV === "production";
 const allowedOrigins = isProduction
-    ? (env.CORS_ORIGINS || env.FRONTEND_URL || "https://yourdomain.com").split(",").map(s => s.trim())
+    ? (() => {
+        const origins = env.CORS_ORIGINS || env.FRONTEND_URL;
+        if (!origins) {
+            throw new Error(
+                "CORS_ORIGINS or FRONTEND_URL must be set in production. " +
+                "Example: CORS_ORIGINS=https://yourdomain.com"
+            );
+        }
+        return origins.split(",").map(s => s.trim());
+    })()
     : [];
 
 app.use("/*", cors({
@@ -49,6 +60,13 @@ async function startServer() {
     const PORT = env.PORT;
     const server = createServer(getRequestListener(app.fetch));
 
+    // Default security rules for collections that don't define their own.
+    // Authenticated users can read all rows; only admins can write.
+    const defaultSecurityRules: SecurityRule[] = [
+        { operation: "select", access: "public" },
+        { operations: ["insert", "update", "delete"], roles: ["admin"] }
+    ];
+
     const backend = await initializeRebaseBackend({
         collectionsDir: path.resolve(__dirname, "../../config/collections"),
         functionsDir: path.resolve(__dirname, "../functions"),
@@ -63,6 +81,7 @@ relations },
             connectionString
         }),
         auth: {
+            collection: usersCollection,
             jwtSecret,
             accessExpiresIn: env.JWT_ACCESS_EXPIRES_IN,
             refreshExpiresIn: env.JWT_REFRESH_EXPIRES_IN,
@@ -71,7 +90,23 @@ relations },
                 ? { clientId: env.GOOGLE_CLIENT_ID }
                 : undefined,
             seedDefaultRoles: true,
-            allowRegistration: env.ALLOW_REGISTRATION
+            allowRegistration: env.ALLOW_REGISTRATION,
+            email: env.SMTP_HOST
+                ? {
+                    from: env.SMTP_FROM || `${env.APP_NAME} <noreply@rebase.pro>`,
+                    smtp: {
+                        host: env.SMTP_HOST,
+                        port: env.SMTP_PORT,
+                        secure: env.SMTP_SECURE,
+                        auth: env.SMTP_USER
+                            ? { user: env.SMTP_USER, pass: env.SMTP_PASS! }
+                            : undefined,
+                        name: env.SMTP_NAME,
+                    },
+                    appName: env.APP_NAME,
+                    resetPasswordUrl: env.FRONTEND_URL,
+                }
+                : undefined,
         },
         storage: env.STORAGE_TYPE === "s3"
             ? {
@@ -87,7 +122,8 @@ relations },
                 type: "local",
                 basePath: env.STORAGE_PATH || path.resolve(__dirname, "../../uploads")
             },
-        history: true
+        history: true,
+        defaultSecurityRules
     });
 
     // ─── Health check ─────────────────────────────────────────────

package/templates/template/config/collections/users.ts

@@ -11,6 +11,10 @@ const usersCollection: EntityCollection = {
     group: "Settings",
     openEntityMode: "dialog",
     disableDefaultActions: ["copy"],
+    securityRules: [
+        { operation: "select", roles: ["admin"] },
+        { operations: ["insert", "update", "delete"], roles: ["admin"] }
+    ],
     entityActions: [
         resetPasswordAction,
         {
@@ -53,6 +57,7 @@ const usersCollection: EntityCollection = {
         roles: {
             name: "Roles",
             type: "array",
+            columnType: "text[]",
             of: {
                 name: "Role",
                 type: "string",
@@ -113,6 +118,7 @@ const usersCollection: EntityCollection = {
             name: "Created At",
             type: "date",
             columnName: "created_at",
+            autoValue: "on_create",
             ui: {
                 readOnly: true
             }

package/templates/template/config/collections/roles.ts

@@ -1,62 +0,0 @@
-import { PostgresCollection, EntityCollection } from "@rebasepro/types";
-
-const rolesCollection: PostgresCollection = {
-    name: "Roles",
-    singularName: "Role",
-    slug: "roles",
-    table: "roles",
-    schema: "rebase",
-    icon: "Shield",
-    group: "Settings",
-    properties: {
-        id: {
-            name: "ID",
-            type: "string",
-            isId: "manual",
-            validation: {
-                required: true
-            }
-        },
-        name: {
-            name: "Name",
-            type: "string",
-            validation: {
-                required: true
-            }
-        },
-        isAdmin: {
-            name: "Is Admin",
-            type: "boolean",
-            columnName: "is_admin",
-            defaultValue: false
-        },
-        defaultPermissions: {
-            name: "Default Permissions",
-            type: "map",
-            columnName: "default_permissions",
-            properties: {
-                read: { name: "Read", type: "boolean" },
-                create: { name: "Create", type: "boolean" },
-                edit: { name: "Edit", type: "boolean" },
-                delete: { name: "Delete", type: "boolean" }
-            }
-        },
-        collectionPermissions: {
-            name: "Collection Permissions",
-            type: "map",
-            columnName: "collection_permissions"
-        }
-    }
-};
-
-rolesCollection.securityRules = [
-    {
-        name: "roles_public_access",
-        mode: "permissive",
-        operation: "all",
-        pgRoles: ["public"],
-        using: "true"
-    }
-];
-
-export default rolesCollection;