@rebasepro/cli 0.25.0 → 0.26.0

package/dist/commands/generate_sdk.d.ts

@@ -50,6 +50,21 @@ export declare const REGISTER_FILE = "register.ts";
  * the registration rather than imported from the SDK.
  */
 export declare function registrationDir(collectionsDir: string): string;
+/**
+ * Write the server-side registration from the collection files in
+ * `collectionsDir`, exactly as `rebase generate-sdk` writes it, for a build.
+ *
+ * Only for a project that asked for it: `registerDatabase` in `rebase.json`,
+ * or a registration an earlier `--register` left, which is kept current. The
+ * registration lives in gitignored `config/generated/`, so a fresh clone (a CI
+ * job) has none until something writes it, and a bundle compiled without it
+ * types `context.data` as untyped rows: callbacks that read a typed column
+ * fail to compile there while they compile locally.
+ *
+ * Returns the directory written, or null when there was nothing to do.
+ * Throws when a `register.ts` there is not ours, as `generate-sdk` refuses.
+ */
+export declare function writeRegistrationForBuild(collectionsDir: string, registerDatabase: boolean): Promise<string | null>;
 /**
  * The base URL to show in the printed usage example.
  *
@@ -57,8 +72,10 @@ export declare function registrationDir(collectionsDir: string): string;
  * the one it actually got to `.rebase/state.json`. Printing a hardcoded
  * `localhost:3001` sent people to a port nothing was listening on — or, with
  * several projects on one machine, to a different project's backend. Prefer the
- * port this project last ran on; fall back to the literal only when the project
- * has never been started.
+ * port `rebase dev` says it is starting the backend on (`DEV_BACKEND_URL_ENV`:
+ * it regenerates the SDK before the backend binds), then the port this project
+ * last ran on; fall back to the literal only when the project has never been
+ * started.
  */
 export declare function resolveExampleBaseUrl(cwd: string): string;
 /** Whether a slug can be written as `rebase.data.<slug>` rather than a lookup. */

package/dist/commands/init.d.ts

@@ -247,6 +247,26 @@ export declare function initGitRepository(targetDirectory: string): Promise<bool
  * copied into a project that chose another preset.
  */
 export declare function shippedSchemaPath(preset: TemplatePreset): string;
+/** A scaffold's shape, for the resource graph it ships with: a preset, or headless. */
+export type ScaffoldShape = TemplatePreset | "headless";
+/**
+ * Where each scaffold shape's `rebase.resources.json` ships, beside the template.
+ *
+ * `rebase resources --check` is the CI gate for that file, and a fresh
+ * scaffold failed it before anything had changed: `config/resources.ts`
+ * declares `main = database()`, `backend/functions/hello.ts` is a function,
+ * and nothing had written the graph — `rebase build` does, on its first run.
+ * So `init` writes it, and a fresh project starts consistent with its own
+ * gate, with the file in its first commit.
+ *
+ * It cannot be derived here for the reason the schema cannot (see
+ * `shippedSchemaPath`): deriving evaluates the collection files, which import
+ * `@rebasepro/cms-types`, and the project has none until it is installed. So
+ * each shape's graph is derived in this repository and shipped, and
+ * `init-resource-graph.test.ts` fails the moment one differs from what
+ * `rebase resources --write` writes for that shape.
+ */
+export declare function shippedResourceGraphPath(shape: ScaffoldShape): string;
 /**
  * Whether `port` is free — on the wildcard address *and* on both loopback addresses.
  *

package/dist/commands/skills.d.ts

@@ -21,7 +21,7 @@
  *
  * `homeMarkers` are the directories under `~` that say the assistant is
  * installed on this machine. They answer a different question from
- * `detectDir`: a fresh scaffold has no `.claude/` of its own, so `rebase init`
+ * `detectDir`: a fresh scaffold has no `.claude/skills` of its own, so `rebase init`
  * asks the machine which assistants the developer has and pre-selects those.
  *
  * `mcp` is where the assistant reads a *project-level* MCP server list, and in
@@ -52,7 +52,7 @@ export declare const AGENTS: {
     };
     readonly claude: {
         readonly label: "Claude Code";
-        readonly detectDir: ".claude";
+        readonly detectDir: ".claude/skills";
         readonly homeMarkers: readonly [".claude"];
         readonly targetDir: ".claude/skills";
         readonly flatLayout: false;
@@ -257,10 +257,11 @@ export declare function skillsCommand(subcommand: string | undefined, rawArgs: s
  * given.
  */
 export declare function parseAgentFlags(rawArgs: string[]): AgentKey[] | null;
-/** `rebase skills install`'s whole line: the agents it names, `--mcp` and `--force`. */
+/** `rebase skills install`'s whole line: the agents it names, `--mcp`, `--hooks` and `--force`. */
 export declare function parseSkillsInstallLine(rawArgs: string[]): {
     agents: AgentKey[] | null;
     mcp: boolean;
+    hooks: boolean;
     force: boolean;
 };
 /**

package/dist/commands/start.d.ts

@@ -2,6 +2,16 @@ import { type PMCommands } from "../utils/package-manager.js";
 import type { RebaseBundleStatic } from "@rebasepro/types";
 import type { DevDatabase } from "../dev-db/resolve.js";
 import type { DaemonState } from "../dev-db/state.js";
+/**
+ * The help's line that runs `start` on the database `rebase dev` uses, spelled
+ * as the reader can type it.
+ *
+ * In a project, the project's package manager: a scaffold has `rebase` in
+ * `node_modules/.bin`, not on PATH, so a bare `rebase` is "command not found" —
+ * `pnpm exec rebase …`, as `missingDatabaseUrl` and the CLI's other hints say
+ * it. Outside one, the way this CLI was started (`invokedRebaseCommand`).
+ */
+export declare function startHelpRunLine(projectRoot?: string | null): string;
 /** The NODE_ENV the runtime will see, and where it comes from. */
 export interface StartNodeEnv {
     value: string | undefined;

package/dist/commands/storage.d.ts

@@ -35,6 +35,10 @@ export interface OrphanReport {
         reason: string;
     }[];
 }
+/** How often a running scan is asked about. A setting so the tests need not wait. */
+export declare const orphanScanPolling: {
+    intervalMs: number;
+};
 /** Bytes, as a person reads them. */
 export declare function formatBytes(bytes: number): string;
 /**

package/dist/commands/upgrade.d.ts

@@ -49,3 +49,15 @@ export interface UpgradeIo {
  */
 export declare function npmFailure(err: unknown): string;
 export declare function upgradeCommand(rawArgs: string[], io?: UpgradeIo): Promise<void>;
+/**
+ * What to say about this project's managed database when an older CLI started
+ * it, or nothing.
+ *
+ * The daemon outlives every command and the database proxy runs inside it, so
+ * moving the pins does not move the proxy: the old one, with whatever the
+ * upgrade fixed in it, kept serving until `rebase db stop` or thirty idle
+ * minutes — and under a running `rebase dev` it never idles. The upgraded CLI
+ * restarts it when nothing is connected (`daemonOutdated`); this says so, and
+ * what to do while something is.
+ */
+export declare function runningDatabaseNotice(projectRoot: string, target: string): Promise<string[]>;

package/dist/commands/verify.d.ts

@@ -0,0 +1,96 @@
+/** The flags `rebase verify` takes. */
+export declare const VERIFY_FLAGS: {
+    readonly "--collections": StringConstructor;
+    readonly "-c": "--collections";
+    readonly "--json": BooleanConstructor;
+    readonly "--quiet": BooleanConstructor;
+    readonly "-q": "--quiet";
+    readonly "--live": BooleanConstructor;
+    readonly "--database-url": StringConstructor;
+    readonly "--docker": BooleanConstructor;
+};
+export type VerifyStepId = "config" | "rls" | "migrations" | "live";
+export interface VerifyFinding {
+    step: VerifyStepId;
+    /** Stable, kebab-case: what kind of problem. An agent can branch on it. */
+    check: string;
+    severity: "error" | "warning";
+    message: string;
+    /** What to change, when there is one thing to change. */
+    fix?: string;
+    /** The collection's slug. */
+    collection?: string;
+    /** The file to open, relative to the project root. */
+    file?: string;
+    /** Dotted path into the collection config — `posts.properties.title.widget`. */
+    path?: string;
+}
+export interface VerifyStep {
+    id: VerifyStepId;
+    title: string;
+    status: "passed" | "failed" | "warnings" | "skipped";
+    /** Why a step was skipped, or what it covered. */
+    detail?: string;
+}
+export interface VerifyReport {
+    ok: boolean;
+    /** Relative to the project root. */
+    collectionsDir: string;
+    steps: VerifyStep[];
+    findings: VerifyFinding[];
+    summary: {
+        errors: number;
+        warnings: number;
+    };
+}
+export interface VerifyOptions {
+    projectRoot: string;
+    collectionsDir: string;
+    /** The backend package, where `drizzle/migrations` lives. Null for a project without one. */
+    backendDir: string | null;
+    live: boolean;
+    databaseUrl?: string;
+    /** Why no `databaseUrl` could be resolved for `--live`, when resolving it failed. */
+    databaseUnavailable?: string;
+    /**
+     * Whether the backend refuses a request with no token (`AUTH_REQUIRE`, on
+     * unless set to `false`). Decides how a Rebase-compiled public read reads.
+     * Defaults to true, the runtime's default.
+     */
+    authRequired?: boolean;
+}
+/** One row of `rebase.atlas_schema_revisions`, as far as "applied" needs it. */
+export interface AppliedRevision {
+    version: string;
+    /** Atlas's revision type, a bit set: 1 baseline, 2 executed, 4 resolved (`migrate set`). */
+    type: number;
+}
+/**
+ * The migration files the database has not run, as Atlas's own `migrate status`
+ * counts them.
+ *
+ * A file is applied when its version has a row, or when it is at or behind the
+ * newest *baseline* row: `migrate apply --baseline V` records V alone, and
+ * means "everything up to V is already here". `rebase db migrate --baseline` is
+ * what the CLI prescribes for a booted database, so set membership alone
+ * reported the earlier migrations of every baselined database as not applied —
+ * and prescribed `rebase db migrate`, which answers "No migration files to
+ * execute". That run failed forever.
+ */
+export declare function pendingMigrations(files: readonly string[], revisions: readonly AppliedRevision[], compare: (a: string, b: string) => number, versionOf: (file: string) => string): string[];
+/**
+ * Run every step and return the report. Prints nothing and never exits, so a
+ * caller — the command, a test — decides what to do with it.
+ */
+export declare function runVerify(options: VerifyOptions): Promise<VerifyReport>;
+export declare function printReport(report: VerifyReport, quiet: boolean): void;
+/**
+ * Whether the backend refuses a request with no token: `AUTH_REQUIRE` from the
+ * environment, else `.env`, read as every boolean env var is read
+ * (`parseEnvBoolean`: `false`/`0`/`no`/`off` turn it off). On unless one of
+ * those says otherwise — the runtime's default. Compared raw, `AUTH_REQUIRE=0`
+ * read as "on", and a compiled public read was reported as token-gated on a
+ * backend that serves it to anyone.
+ */
+export declare function authRequiredFrom(environment: Record<string, string | undefined>, envFile: Record<string, string | undefined>): boolean;
+export declare function verifyCommand(rawArgs: string[]): Promise<void>;

package/dist/{consent-ClRHmcxf.js → consent-BD7F29T3.js}

@@ -1,4 +1,4 @@
-import { a as setConsent, c as buildEvent, f as readConfig, o as suppressionReason } from "./telemetry-EMFRVRQi.js";
+import { a as setConsent, c as buildEvent, f as readConfig, o as suppressionReason } from "./telemetry-CgwJPVMO.js";
 import chalk from "chalk";
 import inquirer from "inquirer";
 //#region src/telemetry/consent.ts
@@ -73,4 +73,4 @@ function describeState(env = process.env) {
 //#endregion
 export { promptForConsent as n, renderPreview as r, describeState as t };
 
-//# sourceMappingURL=consent-ClRHmcxf.js.map
+//# sourceMappingURL=consent-BD7F29T3.js.map

package/dist/{consent-ClRHmcxf.js.map → consent-BD7F29T3.js.map}

@@ -1 +1 @@
-{"version":3,"file":"consent-ClRHmcxf.js","names":[],"sources":["../src/telemetry/consent.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport inquirer from \"inquirer\";\n\nimport { buildEvent, TELEMETRY_SCHEMA_VERSION, TelemetryEventName } from \"./payload\";\nimport { readConfig } from \"./identity\";\nimport { setConsent, suppressionReason } from \"./index\";\n\n/**\n * Asking, and what the question looks like.\n *\n * ## Why the prompt comes *after* the work\n *\n * The first `rebase init` on a machine is the event most worth having, and it\n * is the one where no consent exists yet. Asking before scaffolding puts a\n * privacy negotiation in front of someone who has not yet seen the tool do\n * anything — the worst possible moment, and a reliable way to get a reflexive\n * no.\n *\n * So the question is asked once the project exists and the user has seen it\n * work. The event's data is still in memory at that point, so nothing is lost\n * by waiting, and — this is the part that matters — **nothing has been\n * transmitted or written**. Declining leaves no id, no file, no record.\n *\n * ## Why the payload is shown rather than described\n *\n * \"Anonymous usage data\" is a phrase that has been used to mean almost\n * anything. Printing the exact JSON costs four lines of output and replaces a\n * claim the user has to take on faith with something they can read. It is also\n * the same builder the sender uses, so it cannot drift into a comfortable\n * fiction.\n */\n\n/** Where the question is being asked from, which decides how often it may be. */\nexport interface PromptOptions {\n    /**\n     * Ask again even though this machine already declined.\n     *\n     * Set by `rebase init`, and only there. Scaffolding a project is a\n     * deliberate, occasional act with a natural pause in it — not something\n     * anyone does in a loop — so asking each time is an offer rather than\n     * nagging, and it reaches the person whose first answer was a reflex before\n     * they had seen the tool do anything.\n     *\n     * It does **not** re-ask someone who accepted: they are already sharing, so\n     * the only thing another prompt could do is talk them out of it.\n     *\n     * Nothing else changes. `DO_NOT_TRACK`, `REBASE_TELEMETRY_DISABLED`, `CI`\n     * and a project's `\"telemetry\": false` are answers, not questions, and they\n     * still suppress the prompt entirely — a re-ask that could override a\n     * committed repository policy would be exactly the consent-by-proxy the\n     * policy exists to prevent.\n     */\n    reAskDeclined?: boolean;\n}\n\n/** True when we may ask: nothing forbids it, and there is a question to ask. */\nexport function shouldPrompt(\n    env: NodeJS.ProcessEnv = process.env,\n    { reAskDeclined = false }: PromptOptions = {}\n): boolean {\n    if (!process.stdin.isTTY) return false;\n\n    const reason = suppressionReason(env);\n    // `not_asked` is the only reason that is a question rather than an answer.\n    // A user who set DO_NOT_TRACK, or is on CI, has already told us — and so\n    // has one who is already sharing (`null`), whom we never re-ask.\n    if (reason === \"not_asked\") return true;\n    return reAskDeclined && reason === \"declined\";\n}\n\nexport function renderPreview(event: TelemetryEventName, properties: Record<string, unknown>): string {\n    const preview = buildEvent(event, properties, {\n        machineId: \"<random uuid, generated only if you say yes>\",\n        projectId: \"<random uuid, per checkout>\"\n    });\n    return JSON.stringify(preview, null, 2);\n}\n\n/**\n * Ask, record the answer, and report it.\n *\n * Never throws and never blocks a non-interactive run: `rebase init --yes` in\n * CI must behave exactly as it does today, which means not asking and not\n * sending.\n */\nexport async function promptForConsent(options: PromptOptions = {}): Promise<boolean> {\n    if (!shouldPrompt(process.env, options)) return false;\n\n    // Only true when this is a second (or later) asking, which the closing line\n    // needs to know: \"you will not be asked again\" is false at `init`.\n    const askedBefore = suppressionReason(process.env) === \"declined\";\n\n    try {\n        console.log(\"\");\n        console.log(chalk.bold(\"Help improve Rebase?\"));\n        console.log(\"\");\n        console.log(chalk.gray(\"  Rebase is self-hosted, so we only learn what works if you tell us.\"));\n        console.log(chalk.gray(\"  Anonymous: random ids, the CLI version, your OS, and which template and\"));\n        console.log(chalk.gray(\"  package manager you used. Never project names, paths, schemas, URLs or\"));\n        console.log(chalk.gray(\"  error messages.\"));\n        console.log(\"\");\n        console.log(chalk.gray(`  Print the exact payload with ${chalk.cyan(\"rebase telemetry show\")}; change your mind`));\n        console.log(chalk.gray(`  any time with ${chalk.cyan(\"rebase telemetry disable\")}.`));\n        if (askedBefore) {\n            console.log(\"\");\n            console.log(chalk.gray(\"  You declined before; that stands unless you change it here.\"));\n        }\n        console.log(\"\");\n\n        const { accepted } = await inquirer.prompt([\n            {\n                type: \"confirm\",\n                name: \"accepted\",\n                message: \"Share anonymous usage data?\",\n                // Defaults to no. Telemetry is off until somebody says yes, and\n                // a bare Enter is the commonest answer to any prompt — so a\n                // pre-selected yes would make pressing through `init` the\n                // consent. `y` is one keystroke, and `rebase telemetry enable`\n                // is the same answer later.\n                default: false\n            }\n        ] as Parameters<typeof inquirer.prompt>[0]) as { accepted: boolean };\n\n        setConsent(Boolean(accepted));\n\n        console.log(\n            accepted\n                ? chalk.green(\"  Thank you — sharing enabled.\")\n                : chalk.gray(\n                    \"  Nothing will be sent.\"\n                    + (options.reAskDeclined\n                        ? \" You will be asked again the next time you scaffold a project.\"\n                        : \" You will not be asked again.\")\n                )\n        );\n        console.log(\"\");\n        return Boolean(accepted);\n    } catch {\n        // A prompt that fails (piped stdin, a terminal that went away) is a\n        // decline, and specifically a decline we do not persist — the user\n        // never actually saw the question, so they should still get to answer\n        // it another day.\n        return false;\n    }\n}\n\n/** Human-readable current state, for `rebase telemetry status`. */\nexport function describeState(env: NodeJS.ProcessEnv = process.env): string {\n    const reason = suppressionReason(env);\n    const config = readConfig();\n    switch (reason) {\n        case null:\n            return `${chalk.green(\"enabled\")} — schema v${TELEMETRY_SCHEMA_VERSION}, machine id ${chalk.gray(config.machineId ?? \"unset\")}`;\n        case \"not_asked\":\n            return `${chalk.yellow(\"not configured\")} — nothing has been sent, and you have not been asked yet`;\n        case \"declined\":\n            return `${chalk.gray(\"disabled\")} — you declined${config.decidedAt ? ` on ${config.decidedAt.slice(0, 10)}` : \"\"}`;\n        case \"do_not_track\":\n            return `${chalk.gray(\"disabled\")} — the ${chalk.cyan(\"DO_NOT_TRACK\")} environment variable is set`;\n        case \"rebase_telemetry_disabled\":\n            return `${chalk.gray(\"disabled\")} — the ${chalk.cyan(\"REBASE_TELEMETRY_DISABLED\")} environment variable is set`;\n        case \"ci\":\n            return `${chalk.gray(\"disabled\")} — this looks like CI (${chalk.cyan(\"CI\")} is set), which is never counted`;\n        case \"project_opt_out\":\n            return `${chalk.gray(\"disabled\")} — this project's ${chalk.cyan(\"rebase.json\")} sets ${chalk.cyan('\"telemetry\": false')}`;\n    }\n}\n"],"mappings":";;;;;AAwDA,SAAgB,aACZ,MAAyB,QAAQ,KACjC,EAAE,gBAAgB,UAAyB,CAAC,GACrC;CACP,IAAI,CAAC,QAAQ,MAAM,OAAO,OAAO;CAEjC,MAAM,SAAS,kBAAkB,GAAG;CAIpC,IAAI,WAAW,aAAa,OAAO;CACnC,OAAO,iBAAiB,WAAW;AACvC;AAEA,SAAgB,cAAc,OAA2B,YAA6C;CAClG,MAAM,UAAU,WAAW,OAAO,YAAY;EAC1C,WAAW;EACX,WAAW;CACf,CAAC;CACD,OAAO,KAAK,UAAU,SAAS,MAAM,CAAC;AAC1C;;;;;;;;AASA,eAAsB,iBAAiB,UAAyB,CAAC,GAAqB;CAClF,IAAI,CAAC,aAAa,QAAQ,KAAK,OAAO,GAAG,OAAO;CAIhD,MAAM,cAAc,kBAAkB,QAAQ,GAAG,MAAM;CAEvD,IAAI;EACA,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,MAAM,KAAK,sBAAsB,CAAC;EAC9C,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,MAAM,KAAK,sEAAsE,CAAC;EAC9F,QAAQ,IAAI,MAAM,KAAK,2EAA2E,CAAC;EACnG,QAAQ,IAAI,MAAM,KAAK,0EAA0E,CAAC;EAClG,QAAQ,IAAI,MAAM,KAAK,mBAAmB,CAAC;EAC3C,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,MAAM,KAAK,kCAAkC,MAAM,KAAK,uBAAuB,EAAE,mBAAmB,CAAC;EACjH,QAAQ,IAAI,MAAM,KAAK,mBAAmB,MAAM,KAAK,0BAA0B,EAAE,EAAE,CAAC;EACpF,IAAI,aAAa;GACb,QAAQ,IAAI,EAAE;GACd,QAAQ,IAAI,MAAM,KAAK,+DAA+D,CAAC;EAC3F;EACA,QAAQ,IAAI,EAAE;EAEd,MAAM,EAAE,aAAa,MAAM,SAAS,OAAO,CACvC;GACI,MAAM;GACN,MAAM;GACN,SAAS;GAMT,SAAS;EACb,CACJ,CAA0C;EAE1C,WAAW,QAAQ,QAAQ,CAAC;EAE5B,QAAQ,IACJ,WACM,MAAM,MAAM,gCAAgC,IAC5C,MAAM,KACJ,6BACG,QAAQ,gBACL,mEACA,gCACV,CACR;EACA,QAAQ,IAAI,EAAE;EACd,OAAO,QAAQ,QAAQ;CAC3B,QAAQ;EAKJ,OAAO;CACX;AACJ;;AAGA,SAAgB,cAAc,MAAyB,QAAQ,KAAa;CACxE,MAAM,SAAS,kBAAkB,GAAG;CACpC,MAAM,SAAS,WAAW;CAC1B,QAAQ,QAAR;EACI,KAAK,MACD,OAAO,GAAG,MAAM,MAAM,SAAS,EAAE,2BAAqD,MAAM,KAAK,OAAO,aAAa,OAAO;EAChI,KAAK,aACD,OAAO,GAAG,MAAM,OAAO,gBAAgB,EAAE;EAC7C,KAAK,YACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,iBAAiB,OAAO,YAAY,OAAO,OAAO,UAAU,MAAM,GAAG,EAAE,MAAM;EAClH,KAAK,gBACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,SAAS,MAAM,KAAK,cAAc,EAAE;EACzE,KAAK,6BACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,SAAS,MAAM,KAAK,2BAA2B,EAAE;EACtF,KAAK,MACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,yBAAyB,MAAM,KAAK,IAAI,EAAE;EAC/E,KAAK,mBACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,oBAAoB,MAAM,KAAK,aAAa,EAAE,QAAQ,MAAM,KAAK,sBAAoB;CAC9H;AACJ"}
+{"version":3,"file":"consent-BD7F29T3.js","names":[],"sources":["../src/telemetry/consent.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport inquirer from \"inquirer\";\n\nimport { buildEvent, TELEMETRY_SCHEMA_VERSION, TelemetryEventName } from \"./payload\";\nimport { readConfig } from \"./identity\";\nimport { setConsent, suppressionReason } from \"./index\";\n\n/**\n * Asking, and what the question looks like.\n *\n * ## Why the prompt comes *after* the work\n *\n * The first `rebase init` on a machine is the event most worth having, and it\n * is the one where no consent exists yet. Asking before scaffolding puts a\n * privacy negotiation in front of someone who has not yet seen the tool do\n * anything — the worst possible moment, and a reliable way to get a reflexive\n * no.\n *\n * So the question is asked once the project exists and the user has seen it\n * work. The event's data is still in memory at that point, so nothing is lost\n * by waiting, and — this is the part that matters — **nothing has been\n * transmitted or written**. Declining leaves no id, no file, no record.\n *\n * ## Why the payload is shown rather than described\n *\n * \"Anonymous usage data\" is a phrase that has been used to mean almost\n * anything. Printing the exact JSON costs four lines of output and replaces a\n * claim the user has to take on faith with something they can read. It is also\n * the same builder the sender uses, so it cannot drift into a comfortable\n * fiction.\n */\n\n/** Where the question is being asked from, which decides how often it may be. */\nexport interface PromptOptions {\n    /**\n     * Ask again even though this machine already declined.\n     *\n     * Set by `rebase init`, and only there. Scaffolding a project is a\n     * deliberate, occasional act with a natural pause in it — not something\n     * anyone does in a loop — so asking each time is an offer rather than\n     * nagging, and it reaches the person whose first answer was a reflex before\n     * they had seen the tool do anything.\n     *\n     * It does **not** re-ask someone who accepted: they are already sharing, so\n     * the only thing another prompt could do is talk them out of it.\n     *\n     * Nothing else changes. `DO_NOT_TRACK`, `REBASE_TELEMETRY_DISABLED`, `CI`\n     * and a project's `\"telemetry\": false` are answers, not questions, and they\n     * still suppress the prompt entirely — a re-ask that could override a\n     * committed repository policy would be exactly the consent-by-proxy the\n     * policy exists to prevent.\n     */\n    reAskDeclined?: boolean;\n}\n\n/** True when we may ask: nothing forbids it, and there is a question to ask. */\nexport function shouldPrompt(\n    env: NodeJS.ProcessEnv = process.env,\n    { reAskDeclined = false }: PromptOptions = {}\n): boolean {\n    if (!process.stdin.isTTY) return false;\n\n    const reason = suppressionReason(env);\n    // `not_asked` is the only reason that is a question rather than an answer.\n    // A user who set DO_NOT_TRACK, or is on CI, has already told us — and so\n    // has one who is already sharing (`null`), whom we never re-ask.\n    if (reason === \"not_asked\") return true;\n    return reAskDeclined && reason === \"declined\";\n}\n\nexport function renderPreview(event: TelemetryEventName, properties: Record<string, unknown>): string {\n    const preview = buildEvent(event, properties, {\n        machineId: \"<random uuid, generated only if you say yes>\",\n        projectId: \"<random uuid, per checkout>\"\n    });\n    return JSON.stringify(preview, null, 2);\n}\n\n/**\n * Ask, record the answer, and report it.\n *\n * Never throws and never blocks a non-interactive run: `rebase init --yes` in\n * CI must behave exactly as it does today, which means not asking and not\n * sending.\n */\nexport async function promptForConsent(options: PromptOptions = {}): Promise<boolean> {\n    if (!shouldPrompt(process.env, options)) return false;\n\n    // Only true when this is a second (or later) asking, which the closing line\n    // needs to know: \"you will not be asked again\" is false at `init`.\n    const askedBefore = suppressionReason(process.env) === \"declined\";\n\n    try {\n        console.log(\"\");\n        console.log(chalk.bold(\"Help improve Rebase?\"));\n        console.log(\"\");\n        console.log(chalk.gray(\"  Rebase is self-hosted, so we only learn what works if you tell us.\"));\n        console.log(chalk.gray(\"  Anonymous: random ids, the CLI version, your OS, and which template and\"));\n        console.log(chalk.gray(\"  package manager you used. Never project names, paths, schemas, URLs or\"));\n        console.log(chalk.gray(\"  error messages.\"));\n        console.log(\"\");\n        console.log(chalk.gray(`  Print the exact payload with ${chalk.cyan(\"rebase telemetry show\")}; change your mind`));\n        console.log(chalk.gray(`  any time with ${chalk.cyan(\"rebase telemetry disable\")}.`));\n        if (askedBefore) {\n            console.log(\"\");\n            console.log(chalk.gray(\"  You declined before; that stands unless you change it here.\"));\n        }\n        console.log(\"\");\n\n        const { accepted } = await inquirer.prompt([\n            {\n                type: \"confirm\",\n                name: \"accepted\",\n                message: \"Share anonymous usage data?\",\n                // Defaults to no. Telemetry is off until somebody says yes, and\n                // a bare Enter is the commonest answer to any prompt — so a\n                // pre-selected yes would make pressing through `init` the\n                // consent. `y` is one keystroke, and `rebase telemetry enable`\n                // is the same answer later.\n                default: false\n            }\n        ] as Parameters<typeof inquirer.prompt>[0]) as { accepted: boolean };\n\n        setConsent(Boolean(accepted));\n\n        console.log(\n            accepted\n                ? chalk.green(\"  Thank you — sharing enabled.\")\n                : chalk.gray(\n                    \"  Nothing will be sent.\"\n                    + (options.reAskDeclined\n                        ? \" You will be asked again the next time you scaffold a project.\"\n                        : \" You will not be asked again.\")\n                )\n        );\n        console.log(\"\");\n        return Boolean(accepted);\n    } catch {\n        // A prompt that fails (piped stdin, a terminal that went away) is a\n        // decline, and specifically a decline we do not persist — the user\n        // never actually saw the question, so they should still get to answer\n        // it another day.\n        return false;\n    }\n}\n\n/** Human-readable current state, for `rebase telemetry status`. */\nexport function describeState(env: NodeJS.ProcessEnv = process.env): string {\n    const reason = suppressionReason(env);\n    const config = readConfig();\n    switch (reason) {\n        case null:\n            return `${chalk.green(\"enabled\")} — schema v${TELEMETRY_SCHEMA_VERSION}, machine id ${chalk.gray(config.machineId ?? \"unset\")}`;\n        case \"not_asked\":\n            return `${chalk.yellow(\"not configured\")} — nothing has been sent, and you have not been asked yet`;\n        case \"declined\":\n            return `${chalk.gray(\"disabled\")} — you declined${config.decidedAt ? ` on ${config.decidedAt.slice(0, 10)}` : \"\"}`;\n        case \"do_not_track\":\n            return `${chalk.gray(\"disabled\")} — the ${chalk.cyan(\"DO_NOT_TRACK\")} environment variable is set`;\n        case \"rebase_telemetry_disabled\":\n            return `${chalk.gray(\"disabled\")} — the ${chalk.cyan(\"REBASE_TELEMETRY_DISABLED\")} environment variable is set`;\n        case \"ci\":\n            return `${chalk.gray(\"disabled\")} — this looks like CI (${chalk.cyan(\"CI\")} is set), which is never counted`;\n        case \"project_opt_out\":\n            return `${chalk.gray(\"disabled\")} — this project's ${chalk.cyan(\"rebase.json\")} sets ${chalk.cyan('\"telemetry\": false')}`;\n    }\n}\n"],"mappings":";;;;;AAwDA,SAAgB,aACZ,MAAyB,QAAQ,KACjC,EAAE,gBAAgB,UAAyB,CAAC,GACrC;CACP,IAAI,CAAC,QAAQ,MAAM,OAAO,OAAO;CAEjC,MAAM,SAAS,kBAAkB,GAAG;CAIpC,IAAI,WAAW,aAAa,OAAO;CACnC,OAAO,iBAAiB,WAAW;AACvC;AAEA,SAAgB,cAAc,OAA2B,YAA6C;CAClG,MAAM,UAAU,WAAW,OAAO,YAAY;EAC1C,WAAW;EACX,WAAW;CACf,CAAC;CACD,OAAO,KAAK,UAAU,SAAS,MAAM,CAAC;AAC1C;;;;;;;;AASA,eAAsB,iBAAiB,UAAyB,CAAC,GAAqB;CAClF,IAAI,CAAC,aAAa,QAAQ,KAAK,OAAO,GAAG,OAAO;CAIhD,MAAM,cAAc,kBAAkB,QAAQ,GAAG,MAAM;CAEvD,IAAI;EACA,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,MAAM,KAAK,sBAAsB,CAAC;EAC9C,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,MAAM,KAAK,sEAAsE,CAAC;EAC9F,QAAQ,IAAI,MAAM,KAAK,2EAA2E,CAAC;EACnG,QAAQ,IAAI,MAAM,KAAK,0EAA0E,CAAC;EAClG,QAAQ,IAAI,MAAM,KAAK,mBAAmB,CAAC;EAC3C,QAAQ,IAAI,EAAE;EACd,QAAQ,IAAI,MAAM,KAAK,kCAAkC,MAAM,KAAK,uBAAuB,EAAE,mBAAmB,CAAC;EACjH,QAAQ,IAAI,MAAM,KAAK,mBAAmB,MAAM,KAAK,0BAA0B,EAAE,EAAE,CAAC;EACpF,IAAI,aAAa;GACb,QAAQ,IAAI,EAAE;GACd,QAAQ,IAAI,MAAM,KAAK,+DAA+D,CAAC;EAC3F;EACA,QAAQ,IAAI,EAAE;EAEd,MAAM,EAAE,aAAa,MAAM,SAAS,OAAO,CACvC;GACI,MAAM;GACN,MAAM;GACN,SAAS;GAMT,SAAS;EACb,CACJ,CAA0C;EAE1C,WAAW,QAAQ,QAAQ,CAAC;EAE5B,QAAQ,IACJ,WACM,MAAM,MAAM,gCAAgC,IAC5C,MAAM,KACJ,6BACG,QAAQ,gBACL,mEACA,gCACV,CACR;EACA,QAAQ,IAAI,EAAE;EACd,OAAO,QAAQ,QAAQ;CAC3B,QAAQ;EAKJ,OAAO;CACX;AACJ;;AAGA,SAAgB,cAAc,MAAyB,QAAQ,KAAa;CACxE,MAAM,SAAS,kBAAkB,GAAG;CACpC,MAAM,SAAS,WAAW;CAC1B,QAAQ,QAAR;EACI,KAAK,MACD,OAAO,GAAG,MAAM,MAAM,SAAS,EAAE,2BAAqD,MAAM,KAAK,OAAO,aAAa,OAAO;EAChI,KAAK,aACD,OAAO,GAAG,MAAM,OAAO,gBAAgB,EAAE;EAC7C,KAAK,YACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,iBAAiB,OAAO,YAAY,OAAO,OAAO,UAAU,MAAM,GAAG,EAAE,MAAM;EAClH,KAAK,gBACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,SAAS,MAAM,KAAK,cAAc,EAAE;EACzE,KAAK,6BACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,SAAS,MAAM,KAAK,2BAA2B,EAAE;EACtF,KAAK,MACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,yBAAyB,MAAM,KAAK,IAAI,EAAE;EAC/E,KAAK,mBACD,OAAO,GAAG,MAAM,KAAK,UAAU,EAAE,oBAAoB,MAAM,KAAK,aAAa,EAAE,QAAQ,MAAM,KAAK,sBAAoB;CAC9H;AACJ"}

package/dist/{console-CEGm0XNc.js → console-BXB6-8GT.js}

@@ -1,7 +1,8 @@
-import { n as parseCommandArgs, r as wantsHelp } from "./args-BX0YD14a.js";
-import { r as refuseMissingCollectionsPath, t as COLLECTIONS_FLAG_HELP } from "./path-flags-BFgG9V6y.js";
-import { DEV_DATABASE_KIND_ENV, managedNotices, prepareDatabaseEnv } from "./prepare-DdnU70z8.js";
-import { absolutizeLocalPathArgs, ensureDockerDatabase, n as argsFromCommand, resolveDriverCli, spawnDriverCli, t as reportSpawnFailure } from "./db-CRNpA5mH.js";
+import { w as wantsHelp, x as parseCommandArgs } from "./project-CasK56vN.js";
+import { i as refuseMissingCollectionsPath, t as COLLECTIONS_FLAG_HELP } from "./path-flags-DNvtEi2-.js";
+import { collectionsDirArgs } from "./collections-dir-DlvDhime.js";
+import { DEV_DATABASE_KIND_ENV, managedNotices, prepareDatabaseEnv } from "./prepare-CTw9NEkh.js";
+import { absolutizeLocalPathArgs, ensureDockerDatabase, n as argsFromCommand, resolveDriverCli, spawnDriverCli, t as reportSpawnFailure } from "./db-KzlqddGD.js";
 import chalk from "chalk";
 import path from "path";
 //#region src/commands/console.ts
@@ -89,7 +90,12 @@ async function consoleCommand(rawArgs) {
 	Object.assign(resolved.env, prepared.env);
 	resolved.env[DEV_DATABASE_KIND_ENV] = prepared.database.kind;
 	for (const line of managedNotices(prepared)) say(line);
-	const childArgs = [...absolutizeLocalPathArgs(argsFromCommand(rawArgs, "console"), process.cwd()), `--history=${consoleHistoryPath(projectRoot)}`];
+	const typedArgs = absolutizeLocalPathArgs(argsFromCommand(rawArgs, "console"), process.cwd());
+	const childArgs = [
+		...typedArgs,
+		...collectionsDirArgs(projectRoot, typedArgs),
+		`--history=${consoleHistoryPath(projectRoot)}`
+	];
 	try {
 		await spawnDriverCli(resolved, childArgs);
 	} catch (error) {
@@ -100,4 +106,4 @@ async function consoleCommand(rawArgs) {
 //#endregion
 export { consoleCommand };
 
-//# sourceMappingURL=console-CEGm0XNc.js.map
+//# sourceMappingURL=console-BXB6-8GT.js.map

package/dist/console-BXB6-8GT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console-BXB6-8GT.js","names":[],"sources":["../src/commands/console.ts"],"sourcesContent":["/**\n * CLI command: rebase console\n *\n * A Node REPL with the project open — `rebase` (what `openRebase` from\n * `@rebasepro/server-postgres` returns: `dataAsAdmin`, `sql`, `withAuth`) and\n * `collections` in scope — or, with `--eval`, one piece of code run and its\n * result printed as JSON.\n *\n * Resolved like `rebase db push`: the same project and `.env`, the same\n * database (the managed one started if that is what the project uses), the\n * same `--collections` loader — the driver's, spawned in `backend/`. Opening\n * the database changes nothing in it.\n */\nimport chalk from \"chalk\";\nimport path from \"path\";\nimport { parseCommandArgs, wantsHelp } from \"../utils/args\";\nimport { argsFromCommand } from \"../utils/command-words\";\nimport { COLLECTIONS_FLAG_HELP, refuseMissingCollectionsPath } from \"../utils/path-flags\";\nimport { collectionsDirArgs } from \"../utils/collections-dir\";\nimport { reportSpawnFailure } from \"../utils/spawn-error\";\nimport { DEV_DATABASE_KIND_ENV, managedNotices, prepareDatabaseEnv } from \"../dev-db/prepare\";\nimport { absolutizeLocalPathArgs, ensureDockerDatabase, resolveDriverCli, spawnDriverCli } from \"./db\";\n\nexport const CONSOLE_FLAGS = {\n    \"--eval\": String,\n    \"-e\": \"--eval\",\n    \"--collections\": String,\n    \"-c\": \"--collections\",\n    \"--database-url\": String,\n    \"--docker\": Boolean\n} as const;\n\n/** What each long flag above does, for the Options block. */\nconst CONSOLE_FLAG_HELP: Record<string, string> = {\n    \"--eval\": \"Run this code instead of the REPL, print its awaited result as JSON, and exit 1 if it throws\",\n    \"--collections\": COLLECTIONS_FLAG_HELP,\n    \"--database-url\": \"Open this database instead of the project's\",\n    \"--docker\": \"Use the database from docker compose, starting it if needed\"\n};\n\n/** Where the REPL keeps its history: the project's own `.rebase/`, which the scaffold ignores. */\nexport function consoleHistoryPath(projectRoot: string): string {\n    return path.join(projectRoot, \".rebase\", \"console_history\");\n}\n\nfunction flagLabel(flag: string): string {\n    const aliases = Object.entries(CONSOLE_FLAGS)\n        .filter(([, target]) => target === flag)\n        .map(([alias]) => alias);\n    return [flag, ...aliases].join(\", \");\n}\n\nexport function printConsoleHelp(): void {\n    console.log(`\n${chalk.bold(\"rebase console\")} — Explore the project's data from a REPL\n\n${chalk.green.bold(\"Usage\")}\n  rebase console [options]\n\n${chalk.green.bold(\"Options\")}\n${Object.keys(CONSOLE_FLAG_HELP)\n        .map(flag => `  ${chalk.blue(flagLabel(flag).padEnd(22))} ${CONSOLE_FLAG_HELP[flag]}`)\n        .join(\"\\n\")}\n\nIn scope:\n  rebase        dataAsAdmin, sql(query, { params }), withAuth(user) → { data }, close()\n  collections   the project's collections\n\nTop-level await works. Opening the database changes nothing in it: no table,\nrole or trigger is created. withAuth runs as the user under row-level security.\n\n${chalk.green.bold(\"Examples\")}\n  rebase console\n  rebase console -e \"rebase.dataAsAdmin.posts.find({ limit: 5 })\"\n  rebase console -e \"(await rebase.withAuth({ uid: 'u1', roles: ['user'] })).data.posts.find()\"\n  rebase console -e \"rebase.sql('select count(*) from posts')\"\n`);\n}\n\nexport async function consoleCommand(rawArgs: string[]): Promise<void> {\n    if (wantsHelp(rawArgs)) {\n        printConsoleHelp();\n        return;\n    }\n\n    // Strictly, before the line is relayed: the driver would otherwise be the\n    // first to see a mistyped flag, after a database had been started for it.\n    const { flags } = parseCommandArgs({\n        spec: CONSOLE_FLAGS,\n        rawArgs,\n        commandWords: 1,\n        command: \"console\",\n        maxPositionals: 0\n    });\n\n    const resolved = await resolveDriverCli();\n    const { projectRoot, backendDir } = resolved;\n    refuseMissingCollectionsPath(rawArgs, process.cwd(), backendDir, \"console\");\n    await ensureDockerDatabase(projectRoot, rawArgs);\n\n    // With --eval, stdout is the result and nothing else, so it can be piped\n    // into `jq`; piped into the REPL, it is the REPL's answers. Either way what\n    // the database resolution has to say goes to stderr.\n    const say = flags[\"--eval\"] === undefined && process.stdin.isTTY\n        ? (line: string) => console.log(chalk.gray(`  ${line}`))\n        : (line: string) => console.error(chalk.gray(`  ${line}`));\n    const prepared = await prepareDatabaseEnv(projectRoot, {\n        flagUrl: flags[\"--database-url\"] ?? null,\n        flagDocker: flags[\"--docker\"] === true,\n        onProgress: say\n    });\n    Object.assign(resolved.env, prepared.env);\n    // The database this run resolved, flags included, so the driver words a\n    // failure to open it for that one — a managed database that has no free\n    // connection is not \"is your Postgres running?\".\n    resolved.env[DEV_DATABASE_KIND_ENV] = prepared.database.kind;\n    for (const line of managedNotices(prepared)) say(line);\n\n    const typedArgs = absolutizeLocalPathArgs(argsFromCommand(rawArgs, \"console\"), process.cwd());\n    const childArgs = [\n        ...typedArgs,\n        ...collectionsDirArgs(projectRoot, typedArgs),\n        `--history=${consoleHistoryPath(projectRoot)}`\n    ];\n\n    try {\n        await spawnDriverCli(resolved, childArgs);\n    } catch (error) {\n        // A child that exited non-zero has already said why, on the terminal it\n        // shares — an `--eval` that threw, a database that refused.\n        reportSpawnFailure(error);\n        process.exit(1);\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAuBA,IAAa,gBAAgB;CACzB,UAAU;CACV,MAAM;CACN,iBAAiB;CACjB,MAAM;CACN,kBAAkB;CAClB,YAAY;AAChB;;AAGA,IAAM,oBAA4C;CAC9C,UAAU;CACV,iBAAiB;CACjB,kBAAkB;CAClB,YAAY;AAChB;;AAGA,SAAgB,mBAAmB,aAA6B;CAC5D,OAAO,KAAK,KAAK,aAAa,WAAW,iBAAiB;AAC9D;AAEA,SAAS,UAAU,MAAsB;CAIrC,OAAO,CAAC,MAAM,GAHE,OAAO,QAAQ,aAAa,CAAC,CACxC,QAAQ,GAAG,YAAY,WAAW,IAAI,CAAC,CACvC,KAAK,CAAC,WAAW,KACL,CAAO,CAAC,CAAC,KAAK,IAAI;AACvC;AAEA,SAAgB,mBAAyB;CACrC,QAAQ,IAAI;EACd,MAAM,KAAK,gBAAgB,EAAE;;EAE7B,MAAM,MAAM,KAAK,OAAO,EAAE;;;EAG1B,MAAM,MAAM,KAAK,SAAS,EAAE;EAC5B,OAAO,KAAK,iBAAiB,CAAC,CACvB,KAAI,SAAQ,KAAK,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,kBAAkB,OAAO,CAAC,CACrF,KAAK,IAAI,EAAE;;;;;;;;;EASlB,MAAM,MAAM,KAAK,UAAU,EAAE;;;;;CAK9B;AACD;AAEA,eAAsB,eAAe,SAAkC;CACnE,IAAI,UAAU,OAAO,GAAG;EACpB,iBAAiB;EACjB;CACJ;CAIA,MAAM,EAAE,UAAU,iBAAiB;EAC/B,MAAM;EACN;EACA,cAAc;EACd,SAAS;EACT,gBAAgB;CACpB,CAAC;CAED,MAAM,WAAW,MAAM,iBAAiB;CACxC,MAAM,EAAE,aAAa,eAAe;CACpC,6BAA6B,SAAS,QAAQ,IAAI,GAAG,YAAY,SAAS;CAC1E,MAAM,qBAAqB,aAAa,OAAO;CAK/C,MAAM,MAAM,MAAM,cAAc,KAAA,KAAa,QAAQ,MAAM,SACpD,SAAiB,QAAQ,IAAI,MAAM,KAAK,KAAK,MAAM,CAAC,KACpD,SAAiB,QAAQ,MAAM,MAAM,KAAK,KAAK,MAAM,CAAC;CAC7D,MAAM,WAAW,MAAM,mBAAmB,aAAa;EACnD,SAAS,MAAM,qBAAqB;EACpC,YAAY,MAAM,gBAAgB;EAClC,YAAY;CAChB,CAAC;CACD,OAAO,OAAO,SAAS,KAAK,SAAS,GAAG;CAIxC,SAAS,IAAI,yBAAyB,SAAS,SAAS;CACxD,KAAK,MAAM,QAAQ,eAAe,QAAQ,GAAG,IAAI,IAAI;CAErD,MAAM,YAAY,wBAAwB,gBAAgB,SAAS,SAAS,GAAG,QAAQ,IAAI,CAAC;CAC5F,MAAM,YAAY;EACd,GAAG;EACH,GAAG,mBAAmB,aAAa,SAAS;EAC5C,aAAa,mBAAmB,WAAW;CAC/C;CAEA,IAAI;EACA,MAAM,eAAe,UAAU,SAAS;CAC5C,SAAS,OAAO;EAGZ,mBAAmB,KAAK;EACxB,QAAQ,KAAK,CAAC;CAClB;AACJ"}