@rebasepro/client 0.6.1 → 0.7.0

package/dist/admin.d.ts

@@ -42,6 +42,19 @@ export declare function createAdmin(transport: Transport, options?: CreateAdminO
     deleteUser: (userId: string) => Promise<{
         success: boolean;
     }>;
+    resetPassword: (userId: string, options?: {
+        password?: string;
+    }) => Promise<{
+        user: AdminUser;
+        temporaryPassword?: string;
+        invitationSent?: boolean;
+    }>;
+    listRoles: () => Promise<{
+        roles: Array<{
+            id: string;
+            name: string;
+        }>;
+    }>;
     bootstrap: () => Promise<{
         success: boolean;
         message: string;

package/dist/api-keys.d.ts

@@ -0,0 +1,65 @@
+import type { Transport } from "./transport";
+/** A single permission entry scoping an API key to a collection and its allowed operations. */
+export interface ApiKeyPermission {
+    collection: string;
+    operations: ("read" | "write" | "delete")[];
+}
+/** An API key with the secret portion masked (returned by list / get / update). */
+export interface ApiKeyMasked {
+    id: string;
+    name: string;
+    key_prefix: string;
+    permissions: ApiKeyPermission[];
+    rate_limit: number | null;
+    created_by: string;
+    created_at: string;
+    updated_at: string;
+    last_used_at: string | null;
+    expires_at: string | null;
+    revoked_at: string | null;
+}
+/** An API key including the full secret (returned only on creation). */
+export interface ApiKeyWithSecret extends ApiKeyMasked {
+    key: string;
+}
+/** Payload for creating a new API key. */
+export interface CreateApiKeyRequest {
+    name: string;
+    permissions: ApiKeyPermission[];
+    rate_limit?: number | null;
+    expires_at?: string | null;
+}
+/** Payload for updating an existing API key. */
+export interface UpdateApiKeyRequest {
+    name?: string;
+    permissions?: ApiKeyPermission[];
+    rate_limit?: number | null;
+    expires_at?: string | null;
+}
+/** Options for the `createApiKeys` factory. */
+export interface CreateApiKeysOptions {
+    apiKeysPath?: string;
+}
+/**
+ * Creates a client for managing API keys via the admin routes.
+ *
+ * @param transport - The shared HTTP transport created by `createTransport`.
+ * @param options   - Optional overrides (e.g. a custom base path).
+ */
+export declare function createApiKeys(transport: Transport, options?: CreateApiKeysOptions): {
+    listKeys: () => Promise<{
+        keys: ApiKeyMasked[];
+    }>;
+    getKey: (id: string) => Promise<{
+        key: ApiKeyMasked;
+    }>;
+    createKey: (data: CreateApiKeyRequest) => Promise<{
+        key: ApiKeyWithSecret;
+    }>;
+    updateKey: (id: string, data: UpdateApiKeyRequest) => Promise<{
+        key: ApiKeyMasked;
+    }>;
+    revokeKey: (id: string) => Promise<{
+        success: boolean;
+    }>;
+};

package/dist/auth.d.ts

@@ -28,6 +28,7 @@ export interface AuthConfig {
     emailServiceEnabled?: boolean;
     passwordReset?: boolean;
     emailVerification?: boolean;
+    magicLink?: boolean;
     enabledProviders: string[];
 }
 export interface AuthStorage {
@@ -158,6 +159,15 @@ export declare function createAuth(transport: Transport, options?: CreateAuthOpt
         success: boolean;
         message: string;
     }>;
+    sendMagicLink: (email: string) => Promise<{
+        success: boolean;
+        message: string;
+    }>;
+    verifyMagicLink: (token: string) => Promise<{
+        user: RebaseUser;
+        accessToken: string;
+        refreshToken: string;
+    }>;
     getSessions: () => Promise<Record<string, unknown>[]>;
     revokeSession: (sessionId: string) => Promise<{
         success: boolean;

package/dist/index.d.ts

@@ -2,6 +2,7 @@ import { RebaseClientConfig } from "./transport";
 import { createAuth, CreateAuthOptions } from "./auth";
 import { createAdmin, CreateAdminOptions } from "./admin";
 import { createCron, CreateCronOptions } from "./cron";
+import { createApiKeys, CreateApiKeysOptions } from "./api-keys";
 import { CollectionClient } from "./collection";
 import { createFunctionsClient } from "./functions";
 import { RebaseWebSocketClient } from "./websocket";
@@ -10,6 +11,7 @@ export * from "./transport";
 export * from "./auth";
 export * from "./admin";
 export * from "./cron";
+export * from "./api-keys";
 export * from "./collection";
 export * from "./query_builder";
 export * from "./websocket";
@@ -21,6 +23,7 @@ export interface CreateRebaseClientOptions extends RebaseClientConfig {
     auth?: CreateAuthOptions;
     admin?: CreateAdminOptions;
     cron?: CreateCronOptions;
+    apiKeys?: CreateApiKeysOptions;
 }
 type KebabToCamelCase<S extends string> = S extends `${infer T}-${infer U}` ? `${T}${Capitalize<KebabToCamelCase<U>>}` : S;
 type TypedDataLayer<DB> = {
@@ -47,6 +50,7 @@ export type CreateRebaseClientResult<DB = Record<string, unknown>> = Omit<Rebase
     auth: ReturnType<typeof createAuth>;
     admin: ReturnType<typeof createAdmin>;
     cron: ReturnType<typeof createCron>;
+    apiKeys: ReturnType<typeof createApiKeys>;
     functions: ReturnType<typeof createFunctionsClient>;
     ws?: RebaseWebSocketClient;
     storage: StorageSource;

package/dist/index.es.js

@@ -583,6 +583,31 @@ function createAuth(transport, options) {
 		if (!res.ok) throwApiError(res.status, body, res.statusText);
 		return body;
 	}
+	async function sendMagicLink(email) {
+		const res = await getFetch()(authUrl("/magic-link"), {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({ email })
+		});
+		const body = await res.json().catch(() => ({}));
+		if (!res.ok) throwApiError(res.status, body, res.statusText);
+		return body;
+	}
+	async function verifyMagicLink(token) {
+		const res = await getFetch()(authUrl("/magic-link/verify"), {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({ token })
+		});
+		const body = await res.json().catch(() => ({}));
+		if (!res.ok) throwApiError(res.status, body, res.statusText);
+		const session = handleAuthResponse(body, "SIGNED_IN");
+		return {
+			user: session.user,
+			accessToken: session.accessToken,
+			refreshToken: session.refreshToken
+		};
+	}
 	async function getSessions() {
 		return (await transport.request(authPath + "/sessions", { method: "GET" })).sessions;
 	}
@@ -659,6 +684,8 @@ function createAuth(transport, options) {
 		changePassword,
 		sendVerificationEmail,
 		verifyEmail,
+		sendMagicLink,
+		verifyMagicLink,
 		getSessions,
 		revokeSession,
 		revokeAllSessions,
@@ -739,6 +766,15 @@ function createAdmin(transport, options) {
 	async function deleteUser(userId) {
 		return transport.request(adminPath + "/users/" + encodeURIComponent(userId), { method: "DELETE" });
 	}
+	async function resetPassword(userId, options) {
+		return transport.request(adminPath + "/users/" + encodeURIComponent(userId) + "/reset-password", {
+			method: "POST",
+			...options?.password ? { body: JSON.stringify({ password: options.password }) } : {}
+		});
+	}
+	async function listRoles() {
+		return transport.request(adminPath + "/roles", { method: "GET" });
+	}
 	async function bootstrap() {
 		return transport.request(adminPath + "/bootstrap", { method: "POST" });
 	}
@@ -749,6 +785,8 @@ function createAdmin(transport, options) {
 		createUser,
 		updateUser,
 		deleteUser,
+		resetPassword,
+		listRoles,
 		bootstrap
 	};
 }
@@ -786,6 +824,50 @@ function createCron(transport, options) {
 	};
 }
 //#endregion
+//#region src/api-keys.ts
+/**
+* Creates a client for managing API keys via the admin routes.
+*
+* @param transport - The shared HTTP transport created by `createTransport`.
+* @param options   - Optional overrides (e.g. a custom base path).
+*/
+function createApiKeys(transport, options) {
+	const apiKeysPath = options?.apiKeysPath || "/admin/api-keys";
+	/** List all API keys (masked). */
+	async function listKeys() {
+		return transport.request(apiKeysPath, { method: "GET" });
+	}
+	/** Get a single API key by ID (masked). */
+	async function getKey(id) {
+		return transport.request(apiKeysPath + "/" + encodeURIComponent(id), { method: "GET" });
+	}
+	/** Create a new API key. The full secret is included in the response. */
+	async function createKey(data) {
+		return transport.request(apiKeysPath, {
+			method: "POST",
+			body: JSON.stringify(data)
+		});
+	}
+	/** Update an existing API key. */
+	async function updateKey(id, data) {
+		return transport.request(apiKeysPath + "/" + encodeURIComponent(id), {
+			method: "PUT",
+			body: JSON.stringify(data)
+		});
+	}
+	/** Revoke (soft-delete) an API key. */
+	async function revokeKey(id) {
+		return transport.request(apiKeysPath + "/" + encodeURIComponent(id), { method: "DELETE" });
+	}
+	return {
+		listKeys,
+		getKey,
+		createKey,
+		updateKey,
+		revokeKey
+	};
+}
+//#endregion
 //#region src/collection.ts
 function parseWhereFilter(where) {
 	if (!where) return void 0;
@@ -2037,6 +2119,7 @@ function createRebaseClient(options) {
 	const auth = createAuth(transport, options.auth);
 	const admin = createAdmin(transport, options.admin);
 	const cron = createCron(transport, options.cron);
+	const apiKeys = createApiKeys(transport, options.apiKeys);
 	const storage = createStorage(transport);
 	const functions = createFunctionsClient(transport);
 	const resolvedWsUrl = options.websocketUrl ?? deriveWebSocketUrl(options.baseUrl);
@@ -2090,6 +2173,7 @@ function createRebaseClient(options) {
 		auth,
 		admin,
 		cron,
+		apiKeys,
 		functions,
 		storage,
 		ws,
@@ -2112,6 +2196,6 @@ function createRebaseClient(options) {
 	};
 }
 //#endregion
-export { ApiError, QueryBuilder, RebaseApiError, RebaseWebSocketClient, and, buildQueryString, cond, createAdmin, createAuth, createCollectionClient, createCookieStorage, createCron, createFunctionsClient, createMemoryStorage, createRebaseClient, createStorage, createTransport, or, rebaseReviver };
+export { ApiError, QueryBuilder, RebaseApiError, RebaseWebSocketClient, and, buildQueryString, cond, createAdmin, createApiKeys, createAuth, createCollectionClient, createCookieStorage, createCron, createFunctionsClient, createMemoryStorage, createRebaseClient, createStorage, createTransport, or, rebaseReviver };
 
 //# sourceMappingURL=index.es.js.map