@rebasepro/server-core 0.0.1-canary.bbcb8b4 → 0.0.1-canary.c53f5db

package/dist/index.es.js

@@ -1721,8 +1721,8 @@ var logic = { exports: {} };
     return jsonLogic;
   });
 })(logic);
-var getOwnPropertyNames = Object.getOwnPropertyNames, getOwnPropertySymbols = Object.getOwnPropertySymbols;
-var hasOwnProperty$d = Object.prototype.hasOwnProperty;
+const { getOwnPropertyNames, getOwnPropertySymbols } = Object;
+const { hasOwnProperty: hasOwnProperty$d } = Object.prototype;
 function combineComparators(comparatorA, comparatorB) {
   return function isEqual(a2, b, state) {
     return comparatorA(a2, b, state) && comparatorB(a2, b, state);
@@ -1733,38 +1733,45 @@ function createIsCircular(areItemsEqual) {
     if (!a2 || !b || typeof a2 !== "object" || typeof b !== "object") {
       return areItemsEqual(a2, b, state);
     }
-    var cache2 = state.cache;
-    var cachedA = cache2.get(a2);
-    var cachedB = cache2.get(b);
+    const { cache: cache2 } = state;
+    const cachedA = cache2.get(a2);
+    const cachedB = cache2.get(b);
     if (cachedA && cachedB) {
       return cachedA === b && cachedB === a2;
     }
     cache2.set(a2, b);
     cache2.set(b, a2);
-    var result = areItemsEqual(a2, b, state);
+    const result = areItemsEqual(a2, b, state);
     cache2.delete(a2);
     cache2.delete(b);
     return result;
   };
 }
-function getShortTag(value) {
-  return value != null ? value[Symbol.toStringTag] : void 0;
-}
 function getStrictProperties(object) {
   return getOwnPropertyNames(object).concat(getOwnPropertySymbols(object));
 }
-var hasOwn$1 = Object.hasOwn || function(object, property) {
-  return hasOwnProperty$d.call(object, property);
-};
-function sameValueZeroEqual(a2, b) {
-  return a2 === b || !a2 && !b && a2 !== a2 && b !== b;
+const hasOwn$1 = (
+  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+  Object.hasOwn || ((object, property) => hasOwnProperty$d.call(object, property))
+);
+const PREACT_VNODE = "__v";
+const PREACT_OWNER = "__o";
+const REACT_OWNER = "_owner";
+const { getOwnPropertyDescriptor, keys: keys$5 } = Object;
+const sameValueEqual = (
+  // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition
+  Object.is || function sameValueEqual2(a2, b) {
+    return a2 === b ? a2 !== 0 || 1 / a2 === 1 / b : a2 !== a2 && b !== b;
+  }
+);
+function strictEqual(a2, b) {
+  return a2 === b;
+}
+function areArrayBuffersEqual(a2, b) {
+  return a2.byteLength === b.byteLength && areTypedArraysEqual(new Uint8Array(a2), new Uint8Array(b));
 }
-var PREACT_VNODE = "__v";
-var PREACT_OWNER = "__o";
-var REACT_OWNER = "_owner";
-var getOwnPropertyDescriptor = Object.getOwnPropertyDescriptor, keys$5 = Object.keys;
 function areArraysEqual(a2, b, state) {
-  var index = a2.length;
+  let index = a2.length;
   if (b.length !== index) {
     return false;
   }
@@ -1775,35 +1782,35 @@ function areArraysEqual(a2, b, state) {
   }
   return true;
 }
+function areDataViewsEqual(a2, b) {
+  return a2.byteLength === b.byteLength && areTypedArraysEqual(new Uint8Array(a2.buffer, a2.byteOffset, a2.byteLength), new Uint8Array(b.buffer, b.byteOffset, b.byteLength));
+}
 function areDatesEqual(a2, b) {
-  return sameValueZeroEqual(a2.getTime(), b.getTime());
+  return sameValueEqual(a2.getTime(), b.getTime());
 }
 function areErrorsEqual(a2, b) {
   return a2.name === b.name && a2.message === b.message && a2.cause === b.cause && a2.stack === b.stack;
 }
-function areFunctionsEqual(a2, b) {
-  return a2 === b;
-}
 function areMapsEqual(a2, b, state) {
-  var size = a2.size;
+  const size = a2.size;
   if (size !== b.size) {
     return false;
   }
   if (!size) {
     return true;
   }
-  var matchedIndices = new Array(size);
-  var aIterable = a2.entries();
-  var aResult;
-  var bResult;
-  var index = 0;
+  const matchedIndices = new Array(size);
+  const aIterable = a2.entries();
+  let aResult;
+  let bResult;
+  let index = 0;
   while (aResult = aIterable.next()) {
     if (aResult.done) {
       break;
     }
-    var bIterable = b.entries();
-    var hasMatch = false;
-    var matchIndex = 0;
+    const bIterable = b.entries();
+    let hasMatch = false;
+    let matchIndex = 0;
     while (bResult = bIterable.next()) {
       if (bResult.done) {
         break;
@@ -1812,8 +1819,8 @@ function areMapsEqual(a2, b, state) {
         matchIndex++;
         continue;
       }
-      var aEntry = aResult.value;
-      var bEntry = bResult.value;
+      const aEntry = aResult.value;
+      const bEntry = bResult.value;
       if (state.equals(aEntry[0], bEntry[0], index, matchIndex, a2, b, state) && state.equals(aEntry[1], bEntry[1], aEntry[0], bEntry[0], a2, b, state)) {
         hasMatch = matchedIndices[matchIndex] = true;
         break;
@@ -1827,10 +1834,9 @@ function areMapsEqual(a2, b, state) {
   }
   return true;
 }
-var areNumbersEqual = sameValueZeroEqual;
 function areObjectsEqual(a2, b, state) {
-  var properties = keys$5(a2);
-  var index = properties.length;
+  const properties = keys$5(a2);
+  let index = properties.length;
   if (keys$5(b).length !== index) {
     return false;
   }
@@ -1842,14 +1848,14 @@ function areObjectsEqual(a2, b, state) {
   return true;
 }
 function areObjectsEqualStrict(a2, b, state) {
-  var properties = getStrictProperties(a2);
-  var index = properties.length;
+  const properties = getStrictProperties(a2);
+  let index = properties.length;
   if (getStrictProperties(b).length !== index) {
     return false;
   }
-  var property;
-  var descriptorA;
-  var descriptorB;
+  let property;
+  let descriptorA;
+  let descriptorB;
   while (index-- > 0) {
     property = properties[index];
     if (!isPropertyEqual(a2, b, state, property)) {
@@ -1864,30 +1870,30 @@ function areObjectsEqualStrict(a2, b, state) {
   return true;
 }
 function arePrimitiveWrappersEqual(a2, b) {
-  return sameValueZeroEqual(a2.valueOf(), b.valueOf());
+  return sameValueEqual(a2.valueOf(), b.valueOf());
 }
 function areRegExpsEqual(a2, b) {
   return a2.source === b.source && a2.flags === b.flags;
 }
 function areSetsEqual(a2, b, state) {
-  var size = a2.size;
+  const size = a2.size;
   if (size !== b.size) {
     return false;
   }
   if (!size) {
     return true;
   }
-  var matchedIndices = new Array(size);
-  var aIterable = a2.values();
-  var aResult;
-  var bResult;
+  const matchedIndices = new Array(size);
+  const aIterable = a2.values();
+  let aResult;
+  let bResult;
   while (aResult = aIterable.next()) {
     if (aResult.done) {
       break;
     }
-    var bIterable = b.values();
-    var hasMatch = false;
-    var matchIndex = 0;
+    const bIterable = b.values();
+    let hasMatch = false;
+    let matchIndex = 0;
     while (bResult = bIterable.next()) {
       if (bResult.done) {
         break;
@@ -1905,8 +1911,8 @@ function areSetsEqual(a2, b, state) {
   return true;
 }
 function areTypedArraysEqual(a2, b) {
-  var index = a2.length;
-  if (b.length !== index) {
+  let index = a2.byteLength;
+  if (b.byteLength !== index || a2.byteOffset !== b.byteOffset) {
     return false;
   }
   while (index-- > 0) {
@@ -1925,23 +1931,10 @@ function isPropertyEqual(a2, b, state, property) {
   }
   return hasOwn$1(b, property) && state.equals(a2[property], b[property], property, property, a2, b, state);
 }
-var ARGUMENTS_TAG = "[object Arguments]";
-var BOOLEAN_TAG = "[object Boolean]";
-var DATE_TAG = "[object Date]";
-var ERROR_TAG = "[object Error]";
-var MAP_TAG = "[object Map]";
-var NUMBER_TAG = "[object Number]";
-var OBJECT_TAG = "[object Object]";
-var REG_EXP_TAG = "[object RegExp]";
-var SET_TAG = "[object Set]";
-var STRING_TAG = "[object String]";
-var URL_TAG = "[object URL]";
-var isArray$7 = Array.isArray;
-var isTypedArray$2 = typeof ArrayBuffer === "function" && ArrayBuffer.isView ? ArrayBuffer.isView : null;
-var assign$1 = Object.assign;
-var getTag$4 = Object.prototype.toString.call.bind(Object.prototype.toString);
-function createEqualityComparator(_a2) {
-  var areArraysEqual2 = _a2.areArraysEqual, areDatesEqual2 = _a2.areDatesEqual, areErrorsEqual2 = _a2.areErrorsEqual, areFunctionsEqual2 = _a2.areFunctionsEqual, areMapsEqual2 = _a2.areMapsEqual, areNumbersEqual2 = _a2.areNumbersEqual, areObjectsEqual2 = _a2.areObjectsEqual, arePrimitiveWrappersEqual2 = _a2.arePrimitiveWrappersEqual, areRegExpsEqual2 = _a2.areRegExpsEqual, areSetsEqual2 = _a2.areSetsEqual, areTypedArraysEqual2 = _a2.areTypedArraysEqual, areUrlsEqual2 = _a2.areUrlsEqual, unknownTagComparators = _a2.unknownTagComparators;
+const toString$2 = Object.prototype.toString;
+function createEqualityComparator(config) {
+  const supportedComparatorMap = createSupportedComparatorMap(config);
+  const { areArraysEqual: areArraysEqual2, areDatesEqual: areDatesEqual2, areFunctionsEqual, areMapsEqual: areMapsEqual2, areNumbersEqual, areObjectsEqual: areObjectsEqual2, areRegExpsEqual: areRegExpsEqual2, areSetsEqual: areSetsEqual2, getUnsupportedCustomComparator } = config;
   return function comparator2(a2, b, state) {
     if (a2 === b) {
       return true;
@@ -1949,32 +1942,29 @@ function createEqualityComparator(_a2) {
     if (a2 == null || b == null) {
       return false;
     }
-    var type = typeof a2;
+    const type = typeof a2;
     if (type !== typeof b) {
       return false;
     }
     if (type !== "object") {
-      if (type === "number") {
-        return areNumbersEqual2(a2, b, state);
+      if (type === "number" || type === "bigint") {
+        return areNumbersEqual(a2, b, state);
       }
       if (type === "function") {
-        return areFunctionsEqual2(a2, b, state);
+        return areFunctionsEqual(a2, b, state);
       }
       return false;
     }
-    var constructor = a2.constructor;
+    const constructor = a2.constructor;
     if (constructor !== b.constructor) {
       return false;
     }
     if (constructor === Object) {
       return areObjectsEqual2(a2, b, state);
     }
-    if (isArray$7(a2)) {
+    if (constructor === Array) {
       return areArraysEqual2(a2, b, state);
     }
-    if (isTypedArray$2 != null && isTypedArray$2(a2)) {
-      return areTypedArraysEqual2(a2, b, state);
-    }
     if (constructor === Date) {
       return areDatesEqual2(a2, b, state);
     }
@@ -1987,79 +1977,55 @@ function createEqualityComparator(_a2) {
     if (constructor === Set) {
       return areSetsEqual2(a2, b, state);
     }
-    var tag2 = getTag$4(a2);
-    if (tag2 === DATE_TAG) {
-      return areDatesEqual2(a2, b, state);
-    }
-    if (tag2 === REG_EXP_TAG) {
-      return areRegExpsEqual2(a2, b, state);
-    }
-    if (tag2 === MAP_TAG) {
-      return areMapsEqual2(a2, b, state);
-    }
-    if (tag2 === SET_TAG) {
-      return areSetsEqual2(a2, b, state);
-    }
-    if (tag2 === OBJECT_TAG) {
-      return typeof a2.then !== "function" && typeof b.then !== "function" && areObjectsEqual2(a2, b, state);
+    if (constructor === Promise) {
+      return false;
     }
-    if (tag2 === URL_TAG) {
-      return areUrlsEqual2(a2, b, state);
+    if (Array.isArray(a2)) {
+      return areArraysEqual2(a2, b, state);
     }
-    if (tag2 === ERROR_TAG) {
-      return areErrorsEqual2(a2, b, state);
+    const tag2 = toString$2.call(a2);
+    const supportedComparator = supportedComparatorMap[tag2];
+    if (supportedComparator) {
+      return supportedComparator(a2, b, state);
     }
-    if (tag2 === ARGUMENTS_TAG) {
-      return areObjectsEqual2(a2, b, state);
-    }
-    if (tag2 === BOOLEAN_TAG || tag2 === NUMBER_TAG || tag2 === STRING_TAG) {
-      return arePrimitiveWrappersEqual2(a2, b, state);
-    }
-    if (unknownTagComparators) {
-      var unknownTagComparator = unknownTagComparators[tag2];
-      if (!unknownTagComparator) {
-        var shortTag = getShortTag(a2);
-        if (shortTag) {
-          unknownTagComparator = unknownTagComparators[shortTag];
-        }
-      }
-      if (unknownTagComparator) {
-        return unknownTagComparator(a2, b, state);
-      }
+    const unsupportedCustomComparator = getUnsupportedCustomComparator && getUnsupportedCustomComparator(a2, b, state, tag2);
+    if (unsupportedCustomComparator) {
+      return unsupportedCustomComparator(a2, b, state);
     }
     return false;
   };
 }
-function createEqualityComparatorConfig(_a2) {
-  var circular = _a2.circular, createCustomConfig = _a2.createCustomConfig, strict = _a2.strict;
-  var config = {
+function createEqualityComparatorConfig({ circular, createCustomConfig, strict }) {
+  let config = {
+    areArrayBuffersEqual,
     areArraysEqual: strict ? areObjectsEqualStrict : areArraysEqual,
+    areDataViewsEqual,
     areDatesEqual,
     areErrorsEqual,
-    areFunctionsEqual,
+    areFunctionsEqual: strictEqual,
     areMapsEqual: strict ? combineComparators(areMapsEqual, areObjectsEqualStrict) : areMapsEqual,
-    areNumbersEqual,
+    areNumbersEqual: sameValueEqual,
     areObjectsEqual: strict ? areObjectsEqualStrict : areObjectsEqual,
     arePrimitiveWrappersEqual,
     areRegExpsEqual,
     areSetsEqual: strict ? combineComparators(areSetsEqual, areObjectsEqualStrict) : areSetsEqual,
-    areTypedArraysEqual: strict ? areObjectsEqualStrict : areTypedArraysEqual,
+    areTypedArraysEqual: strict ? combineComparators(areTypedArraysEqual, areObjectsEqualStrict) : areTypedArraysEqual,
     areUrlsEqual,
-    unknownTagComparators: void 0
+    getUnsupportedCustomComparator: void 0
   };
   if (createCustomConfig) {
-    config = assign$1({}, config, createCustomConfig(config));
+    config = Object.assign({}, config, createCustomConfig(config));
   }
   if (circular) {
-    var areArraysEqual$1 = createIsCircular(config.areArraysEqual);
-    var areMapsEqual$1 = createIsCircular(config.areMapsEqual);
-    var areObjectsEqual$1 = createIsCircular(config.areObjectsEqual);
-    var areSetsEqual$1 = createIsCircular(config.areSetsEqual);
-    config = assign$1({}, config, {
-      areArraysEqual: areArraysEqual$1,
-      areMapsEqual: areMapsEqual$1,
-      areObjectsEqual: areObjectsEqual$1,
-      areSetsEqual: areSetsEqual$1
+    const areArraysEqual2 = createIsCircular(config.areArraysEqual);
+    const areMapsEqual2 = createIsCircular(config.areMapsEqual);
+    const areObjectsEqual2 = createIsCircular(config.areObjectsEqual);
+    const areSetsEqual2 = createIsCircular(config.areSetsEqual);
+    config = Object.assign({}, config, {
+      areArraysEqual: areArraysEqual2,
+      areMapsEqual: areMapsEqual2,
+      areObjectsEqual: areObjectsEqual2,
+      areSetsEqual: areSetsEqual2
     });
   }
   return config;
@@ -2069,11 +2035,10 @@ function createInternalEqualityComparator(compare2) {
     return compare2(a2, b, state);
   };
 }
-function createIsEqual(_a2) {
-  var circular = _a2.circular, comparator2 = _a2.comparator, createState = _a2.createState, equals = _a2.equals, strict = _a2.strict;
+function createIsEqual({ circular, comparator: comparator2, createState, equals, strict }) {
   if (createState) {
     return function isEqual(a2, b) {
-      var _a3 = createState(), _b2 = _a3.cache, cache2 = _b2 === void 0 ? circular ? /* @__PURE__ */ new WeakMap() : void 0 : _b2, meta = _a3.meta;
+      const { cache: cache2 = circular ? /* @__PURE__ */ new WeakMap() : void 0, meta } = createState();
       return comparator2(a2, b, {
         cache: cache2,
         equals,
@@ -2092,7 +2057,7 @@ function createIsEqual(_a2) {
       });
     };
   }
-  var state = {
+  const state = {
     cache: void 0,
     equals,
     meta: void 0,
@@ -2102,7 +2067,50 @@ function createIsEqual(_a2) {
     return comparator2(a2, b, state);
   };
 }
-var deepEqual = createCustomEqual();
+function createSupportedComparatorMap({ areArrayBuffersEqual: areArrayBuffersEqual2, areArraysEqual: areArraysEqual2, areDataViewsEqual: areDataViewsEqual2, areDatesEqual: areDatesEqual2, areErrorsEqual: areErrorsEqual2, areFunctionsEqual, areMapsEqual: areMapsEqual2, areNumbersEqual, areObjectsEqual: areObjectsEqual2, arePrimitiveWrappersEqual: arePrimitiveWrappersEqual2, areRegExpsEqual: areRegExpsEqual2, areSetsEqual: areSetsEqual2, areTypedArraysEqual: areTypedArraysEqual2, areUrlsEqual: areUrlsEqual2 }) {
+  return {
+    "[object Arguments]": areObjectsEqual2,
+    "[object Array]": areArraysEqual2,
+    "[object ArrayBuffer]": areArrayBuffersEqual2,
+    "[object AsyncGeneratorFunction]": areFunctionsEqual,
+    "[object BigInt]": areNumbersEqual,
+    "[object BigInt64Array]": areTypedArraysEqual2,
+    "[object BigUint64Array]": areTypedArraysEqual2,
+    "[object Boolean]": arePrimitiveWrappersEqual2,
+    "[object DataView]": areDataViewsEqual2,
+    "[object Date]": areDatesEqual2,
+    // If an error tag, it should be tested explicitly. Like RegExp, the properties are not
+    // enumerable, and therefore will give false positives if tested like a standard object.
+    "[object Error]": areErrorsEqual2,
+    "[object Float16Array]": areTypedArraysEqual2,
+    "[object Float32Array]": areTypedArraysEqual2,
+    "[object Float64Array]": areTypedArraysEqual2,
+    "[object Function]": areFunctionsEqual,
+    "[object GeneratorFunction]": areFunctionsEqual,
+    "[object Int8Array]": areTypedArraysEqual2,
+    "[object Int16Array]": areTypedArraysEqual2,
+    "[object Int32Array]": areTypedArraysEqual2,
+    "[object Map]": areMapsEqual2,
+    "[object Number]": arePrimitiveWrappersEqual2,
+    "[object Object]": (a2, b, state) => (
+      // The exception for value comparison is custom `Promise`-like class instances. These should
+      // be treated the same as standard `Promise` objects, which means strict equality, and if
+      // it reaches this point then that strict equality comparison has already failed.
+      typeof a2.then !== "function" && typeof b.then !== "function" && areObjectsEqual2(a2, b, state)
+    ),
+    // For RegExp, the properties are not enumerable, and therefore will give false positives if
+    // tested like a standard object.
+    "[object RegExp]": areRegExpsEqual2,
+    "[object Set]": areSetsEqual2,
+    "[object String]": arePrimitiveWrappersEqual2,
+    "[object URL]": areUrlsEqual2,
+    "[object Uint8Array]": areTypedArraysEqual2,
+    "[object Uint8ClampedArray]": areTypedArraysEqual2,
+    "[object Uint16Array]": areTypedArraysEqual2,
+    "[object Uint32Array]": areTypedArraysEqual2
+  };
+}
+const deepEqual = createCustomEqual();
 createCustomEqual({ strict: true });
 createCustomEqual({ circular: true });
 createCustomEqual({
@@ -2110,37 +2118,26 @@ createCustomEqual({
   strict: true
 });
 createCustomEqual({
-  createInternalComparator: function() {
-    return sameValueZeroEqual;
-  }
+  createInternalComparator: () => sameValueEqual
 });
 createCustomEqual({
   strict: true,
-  createInternalComparator: function() {
-    return sameValueZeroEqual;
-  }
+  createInternalComparator: () => sameValueEqual
 });
 createCustomEqual({
   circular: true,
-  createInternalComparator: function() {
-    return sameValueZeroEqual;
-  }
+  createInternalComparator: () => sameValueEqual
 });
 createCustomEqual({
   circular: true,
-  createInternalComparator: function() {
-    return sameValueZeroEqual;
-  },
+  createInternalComparator: () => sameValueEqual,
   strict: true
 });
-function createCustomEqual(options2) {
-  if (options2 === void 0) {
-    options2 = {};
-  }
-  var _a2 = options2.circular, circular = _a2 === void 0 ? false : _a2, createCustomInternalComparator = options2.createInternalComparator, createState = options2.createState, _b2 = options2.strict, strict = _b2 === void 0 ? false : _b2;
-  var config = createEqualityComparatorConfig(options2);
-  var comparator2 = createEqualityComparator(config);
-  var equals = createCustomInternalComparator ? createCustomInternalComparator(comparator2) : createInternalEqualityComparator(comparator2);
+function createCustomEqual(options2 = {}) {
+  const { circular = false, createInternalComparator: createCustomInternalComparator, createState, strict = false } = options2;
+  const config = createEqualityComparatorConfig(options2);
+  const comparator2 = createEqualityComparator(config);
+  const equals = createCustomInternalComparator ? createCustomInternalComparator(comparator2) : createInternalEqualityComparator(comparator2);
   return createIsEqual({ circular, comparator: comparator2, createState, equals, strict });
 }
 function listCacheClear$1() {
@@ -3390,7 +3387,10 @@ class CollectionRegistry {
       if (!relation) {
         throw new Error(`Relation '${relationKey}' not found in collection '${currentCollection.slug}'`);
       }
-      currentCollection = relation.target();
+      const target = relation.target();
+      const targetRelationKey = relation.relationName || target.slug;
+      const targetSlug = relation.overrides?.slug ?? targetRelationKey;
+      currentCollection = this.get(targetSlug) || this.normalizeCollection(target);
       if (i + 1 < pathSegments.length) ;
     }
     return currentCollection;
@@ -3439,7 +3439,7 @@ class CollectionRegistry {
         if (!subcollection) {
           throw new Error(`Subcollection '${subcollectionSlug}' not found in ${currentCollection.slug}`);
         }
-        currentCollection = subcollection;
+        currentCollection = this.get(subcollection.slug) || this.normalizeCollection(subcollection);
         collections.push(currentCollection);
       }
     }
@@ -3806,11 +3806,24 @@ class RestApiGenerator {
   collections;
   router;
   driver;
-  constructor(collections, driver) {
+  dataHooks;
+  constructor(collections, driver, dataHooks) {
     this.collections = collections;
     this.driver = driver;
+    this.dataHooks = dataHooks;
     this.router = new Hono();
   }
+  /** Build a BackendHookContext from a Hono context */
+  buildHookContext(c, method) {
+    const user = c.get("user");
+    return {
+      requestUser: user ? {
+        userId: user.userId,
+        roles: user.roles ?? []
+      } : void 0,
+      method
+    };
+  }
   /**
    * Generate REST routes using existing DataDriver
    */
@@ -3822,16 +3835,10 @@ class RestApiGenerator {
     return this.router;
   }
   /**
-   * Get the EntityFetchService from a driver if it exposes one (for include support)
+   * Get the typed RestFetchService from a driver if it exposes one (for include support).
    */
   getFetchService(driver) {
-    if ("entityService" in driver && typeof driver.entityService === "object" && driver.entityService) {
-      const es = driver.entityService;
-      if (typeof es.getFetchService === "function") {
-        return es.getFetchService();
-      }
-    }
-    return null;
+    return driver.restFetchService;
   }
   /**
    * Create REST routes for a collection using existing Rebase patterns
@@ -3839,15 +3846,26 @@ class RestApiGenerator {
   createCollectionRoutes(collection) {
     const basePath = `/${collection.slug}`;
     const resolvedCollection = collection;
+    this.router.get(`${basePath}/count`, async (c) => {
+      const queryDict = c.req.query();
+      const queryOptions = parseQueryOptions(queryDict);
+      const searchString = queryDict.searchString;
+      const driver = c.get("driver") || this.driver;
+      const total = await this.countRawEntities(driver, resolvedCollection, queryOptions, searchString);
+      return c.json({
+        count: total
+      });
+    });
     this.router.get(basePath, async (c) => {
       const queryDict = c.req.query();
       const queryOptions = parseQueryOptions(queryDict);
       const searchString = queryDict.searchString;
       const driver = c.get("driver") || this.driver;
       const fetchService = this.getFetchService(driver);
+      const hookCtx = this.buildHookContext(c, "GET");
       if (fetchService) {
         const collectionPath = collection.slug;
-        const entities2 = await fetchService.fetchCollectionForRest(collectionPath, {
+        let entities2 = await fetchService.fetchCollectionForRest(collectionPath, {
           filter: queryOptions.where,
           limit: queryOptions.limit,
           offset: queryOptions.offset,
@@ -3855,6 +3873,7 @@ class RestApiGenerator {
           order: queryOptions.orderBy?.[0]?.direction === "desc" ? "desc" : "asc",
           searchString
         }, queryOptions.include);
+        entities2 = await this.applyAfterReadBatch(collection.slug, entities2, hookCtx);
         const total2 = await this.countRawEntities(driver, resolvedCollection, queryOptions, searchString);
         return c.json({
           data: entities2,
@@ -3866,7 +3885,8 @@ class RestApiGenerator {
           }
         });
       }
-      const entities = await this.fetchRawCollection(driver, resolvedCollection, queryOptions, searchString);
+      let entities = await this.fetchRawCollection(driver, resolvedCollection, queryOptions, searchString);
+      entities = await this.applyAfterReadBatch(collection.slug, entities, hookCtx);
       const total = await this.countRawEntities(driver, resolvedCollection, queryOptions, searchString);
       return c.json({
         data: entities,
@@ -3884,15 +3904,24 @@ class RestApiGenerator {
       const queryOptions = parseQueryOptions(queryDict);
       const driver = c.get("driver") || this.driver;
       const fetchService = this.getFetchService(driver);
+      const hookCtx = this.buildHookContext(c, "GET");
       if (fetchService) {
         const collectionPath = collection.slug;
-        const entity2 = await fetchService.fetchEntityForRest(collectionPath, String(id), queryOptions.include);
+        let entity2 = await fetchService.fetchEntityForRest(collectionPath, String(id), queryOptions.include);
+        if (!entity2) {
+          throw ApiError.notFound("Entity not found");
+        }
+        entity2 = await this.applyAfterRead(collection.slug, entity2, hookCtx);
         if (!entity2) {
           throw ApiError.notFound("Entity not found");
         }
         return c.json(entity2);
       }
-      const entity = await this.fetchRawEntity(driver, resolvedCollection, String(id));
+      let entity = await this.fetchRawEntity(driver, resolvedCollection, String(id));
+      if (!entity) {
+        throw ApiError.notFound("Entity not found");
+      }
+      entity = await this.applyAfterRead(collection.slug, entity, hookCtx);
       if (!entity) {
         throw ApiError.notFound("Entity not found");
       }
@@ -3902,14 +3931,24 @@ class RestApiGenerator {
       try {
         const driver = c.get("driver") || this.driver;
         const path2 = collection.slug;
-        const body = await c.req.json().catch(() => ({}));
+        const hookCtx = this.buildHookContext(c, "POST");
+        let body = await c.req.json().catch(() => ({}));
+        if (this.dataHooks?.beforeSave) {
+          body = await this.dataHooks.beforeSave(path2, body, void 0, hookCtx);
+        }
         const entity = await driver.saveEntity({
           path: path2,
           values: body,
           collection: resolvedCollection,
           status: "new"
         });
-        return c.json(this.formatResponse(entity), 201);
+        const response = this.formatResponse(entity);
+        if (this.dataHooks?.afterSave) {
+          Promise.resolve(this.dataHooks.afterSave(path2, response, hookCtx)).catch((err) => {
+            console.error("[BackendHooks] data.afterSave error:", err instanceof Error ? err.message : err);
+          });
+        }
+        return c.json(response, 201);
       } catch (error2) {
         const err = error2;
         err.code = err.code || "BAD_REQUEST";
@@ -3920,6 +3959,7 @@ class RestApiGenerator {
       try {
         const id = c.req.param("id");
         const driver = c.get("driver") || this.driver;
+        const hookCtx = this.buildHookContext(c, "PUT");
         const existingEntity = await driver.fetchEntity({
           path: collection.slug,
           entityId: String(id),
@@ -3928,7 +3968,10 @@ class RestApiGenerator {
         if (!existingEntity) {
           throw ApiError.notFound("Entity not found");
         }
-        const body = await c.req.json().catch(() => ({}));
+        let body = await c.req.json().catch(() => ({}));
+        if (this.dataHooks?.beforeSave) {
+          body = await this.dataHooks.beforeSave(collection.slug, body, String(id), hookCtx);
+        }
         const entity = await driver.saveEntity({
           path: collection.slug,
           entityId: String(id),
@@ -3936,7 +3979,13 @@ class RestApiGenerator {
           collection: resolvedCollection,
           status: "existing"
         });
-        return c.json(this.formatResponse(entity));
+        const response = this.formatResponse(entity);
+        if (this.dataHooks?.afterSave) {
+          Promise.resolve(this.dataHooks.afterSave(collection.slug, response, hookCtx)).catch((err) => {
+            console.error("[BackendHooks] data.afterSave error:", err instanceof Error ? err.message : err);
+          });
+        }
+        return c.json(response);
       } catch (error2) {
         const err = error2;
         err.code = err.code || "BAD_REQUEST";
@@ -3946,6 +3995,7 @@ class RestApiGenerator {
     this.router.delete(`${basePath}/:id`, async (c) => {
       const id = c.req.param("id");
       const driver = c.get("driver") || this.driver;
+      const hookCtx = this.buildHookContext(c, "DELETE");
       const existingEntity = await driver.fetchEntity({
         path: collection.slug,
         entityId: String(id),
@@ -3954,10 +4004,18 @@ class RestApiGenerator {
       if (!existingEntity) {
         throw ApiError.notFound("Entity not found");
       }
+      if (this.dataHooks?.beforeDelete) {
+        await this.dataHooks.beforeDelete(collection.slug, String(id), hookCtx);
+      }
       await driver.deleteEntity({
         entity: existingEntity,
         collection: resolvedCollection
       });
+      if (this.dataHooks?.afterDelete) {
+        Promise.resolve(this.dataHooks.afterDelete(collection.slug, String(id), hookCtx)).catch((err) => {
+          console.error("[BackendHooks] data.afterDelete error:", err instanceof Error ? err.message : err);
+        });
+      }
       return new Response(null, {
         status: 204
       });
@@ -4006,7 +4064,18 @@ class RestApiGenerator {
       const parsed = parseSubPath(rawPath);
       if (!parsed) return next();
       const driver = c.get("driver") || this.driver;
-      if (parsed.entityId) {
+      if (parsed.entityId === "count") {
+        const queryDict = c.req.query();
+        const queryOptions = parseQueryOptions(queryDict);
+        const total = driver.countEntities ? await driver.countEntities({
+          path: parsed.collectionPath,
+          filter: queryOptions.where,
+          searchString: queryDict.searchString
+        }) : 0;
+        return c.json({
+          count: total
+        });
+      } else if (parsed.entityId) {
         const entity = await driver.fetchEntity({
           path: parsed.collectionPath,
           entityId: parsed.entityId
@@ -4164,6 +4233,22 @@ class RestApiGenerator {
     });
     return entity ? this.flattenEntity(entity) : null;
   }
+  /**
+   * Apply data.afterRead hook to a single entity.
+   * Returns the transformed entity, or null to filter it out.
+   */
+  async applyAfterRead(slug, entity, ctx) {
+    if (!this.dataHooks?.afterRead) return entity;
+    return this.dataHooks.afterRead(slug, entity, ctx);
+  }
+  /**
+   * Apply data.afterRead hook to an array of entities, filtering out nulls.
+   */
+  async applyAfterReadBatch(slug, entities, ctx) {
+    if (!this.dataHooks?.afterRead) return entities;
+    const results = await Promise.all(entities.map((e) => this.applyAfterRead(slug, e, ctx)));
+    return results.filter((e) => e !== null);
+  }
 }
 var jws$5 = {};
 var safeBuffer = { exports: {} };
@@ -23614,7 +23699,12 @@ function createRateLimiter(options2 = {}) {
   };
 }
 function defaultKeyGenerator(c) {
-  return c.req.header("x-forwarded-for")?.split(",")[0]?.trim() || c.req.header("x-real-ip") || "unknown";
+  const forwardedFor = c.req.header("x-forwarded-for");
+  if (forwardedFor) {
+    const ips = forwardedFor.split(",");
+    return ips[ips.length - 1].trim();
+  }
+  return c.req.header("x-real-ip") || "unknown";
 }
 const defaultAuthLimiter = createRateLimiter({
   windowMs: 15 * 60 * 1e3,
@@ -24182,8 +24272,45 @@ function createAdminRoutes(config) {
   const authRepo = config.authRepo;
   const {
     emailService,
-    emailConfig
+    emailConfig,
+    hooks
   } = config;
+  function buildHookContext(c, method) {
+    const user = c.get("user");
+    return {
+      requestUser: user ? {
+        userId: user.userId,
+        roles: user.roles ?? []
+      } : void 0,
+      method
+    };
+  }
+  async function applyUserAfterRead(user, ctx) {
+    if (!hooks?.users?.afterRead) return user;
+    return hooks.users.afterRead(user, ctx);
+  }
+  async function applyUserAfterReadBatch(users, ctx) {
+    if (!hooks?.users?.afterRead) return users;
+    const results = await Promise.all(users.map((u) => applyUserAfterRead(u, ctx)));
+    return results.filter((u) => u !== null);
+  }
+  async function applyRoleAfterReadBatch(roles, ctx) {
+    if (!hooks?.roles?.afterRead) return roles;
+    const results = await Promise.all(roles.map((r) => hooks.roles.afterRead(r, ctx)));
+    return results.filter((r) => r !== null);
+  }
+  function toAdminUser(u, roles) {
+    return {
+      uid: u.id,
+      email: u.email,
+      displayName: u.displayName ?? null,
+      photoURL: u.photoUrl ?? null,
+      provider: "custom",
+      roles,
+      createdAt: u.createdAt instanceof Date ? u.createdAt.toISOString() : u.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+      updatedAt: u.updatedAt instanceof Date ? u.updatedAt.toISOString() : u.updatedAt ?? (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
   router.onError(errorHandler);
   router.use("/*", createRequireAuth({
     serviceKey: config.serviceKey
@@ -24234,6 +24361,7 @@ function createAdminRoutes(config) {
     const search = c.req.query("search");
     const orderBy = c.req.query("orderBy");
     const orderDir = c.req.query("orderDir");
+    const hookCtx = buildHookContext(c, "GET");
     if (limitParam !== void 0 || search) {
       const limit = limitParam ? parseInt(limitParam, 10) : 25;
       const offset = offsetParam ? parseInt(offsetParam, 10) : 0;
@@ -24245,18 +24373,11 @@ function createAdminRoutes(config) {
         orderDir: orderDir || void 0,
         roleId: c.req.query("role") || void 0
       });
-      const usersWithRoles2 = await Promise.all(result.users.map(async (u) => {
+      let usersWithRoles2 = await Promise.all(result.users.map(async (u) => {
         const roles = await authRepo.getUserRoleIds(u.id);
-        return {
-          uid: u.id,
-          email: u.email,
-          displayName: u.displayName,
-          photoURL: u.photoUrl,
-          roles,
-          createdAt: u.createdAt,
-          updatedAt: u.updatedAt
-        };
+        return toAdminUser(u, roles);
       }));
+      usersWithRoles2 = await applyUserAfterReadBatch(usersWithRoles2, hookCtx);
       return c.json({
         users: usersWithRoles2,
         total: result.total,
@@ -24265,18 +24386,11 @@ function createAdminRoutes(config) {
       });
     }
     const users = await authRepo.listUsers();
-    const usersWithRoles = await Promise.all(users.map(async (u) => {
+    let usersWithRoles = await Promise.all(users.map(async (u) => {
       const roles = await authRepo.getUserRoleIds(u.id);
-      return {
-        uid: u.id,
-        email: u.email,
-        displayName: u.displayName,
-        photoURL: u.photoUrl,
-        roles,
-        createdAt: u.createdAt,
-        updatedAt: u.updatedAt
-      };
+      return toAdminUser(u, roles);
     }));
+    usersWithRoles = await applyUserAfterReadBatch(usersWithRoles, hookCtx);
     return c.json({
       users: usersWithRoles
     });
@@ -24287,21 +24401,19 @@ function createAdminRoutes(config) {
     if (!result) {
       throw ApiError.notFound("User not found");
     }
+    const hookCtx = buildHookContext(c, "GET");
+    let adminUser = toAdminUser(result.user, result.roles.map((r) => r.id));
+    adminUser = await applyUserAfterRead(adminUser, hookCtx);
+    if (!adminUser) {
+      throw ApiError.notFound("User not found");
+    }
     return c.json({
-      user: {
-        uid: result.user.id,
-        email: result.user.email,
-        displayName: result.user.displayName,
-        photoURL: result.user.photoUrl,
-        roles: result.roles.map((r) => r.id),
-        createdAt: result.user.createdAt,
-        updatedAt: result.user.updatedAt
-      }
+      user: adminUser
     });
   });
   router.post("/users", requireAdmin, async (c) => {
     const body = await c.req.json();
-    const {
+    let {
       email,
       displayName,
       password,
@@ -24310,6 +24422,17 @@ function createAdminRoutes(config) {
     if (!email) {
       throw ApiError.badRequest("Email is required", "INVALID_INPUT");
     }
+    const hookCtx = buildHookContext(c, "POST");
+    if (hooks?.users?.beforeSave) {
+      const hooked = await hooks.users.beforeSave({
+        email,
+        displayName,
+        roles
+      }, hookCtx);
+      email = hooked.email ?? email;
+      displayName = hooked.displayName ?? displayName;
+      roles = hooked.roles ?? roles;
+    }
     const existing = await authRepo.getUserByEmail(email);
     if (existing) {
       throw ApiError.conflict("Email already exists", "EMAIL_EXISTS");
@@ -24365,13 +24488,14 @@ function createAdminRoutes(config) {
     } else if (!password) {
       temporaryPassword = clearPassword;
     }
+    const createdAdminUser = toAdminUser(user, userRoles);
+    if (hooks?.users?.afterSave) {
+      Promise.resolve(hooks.users.afterSave(createdAdminUser, hookCtx)).catch((err) => {
+        console.error("[BackendHooks] users.afterSave error:", err instanceof Error ? err.message : err);
+      });
+    }
     return c.json({
-      user: {
-        uid: user.id,
-        email: user.email,
-        displayName: user.displayName,
-        roles: userRoles
-      },
+      user: createdAdminUser,
       invitationSent,
       ...temporaryPassword ? {
         temporaryPassword
@@ -24441,7 +24565,7 @@ function createAdminRoutes(config) {
   router.put("/users/:userId", requireAdmin, async (c) => {
     const userId = c.req.param("userId");
     const body = await c.req.json();
-    const {
+    let {
       email,
       displayName,
       password,
@@ -24451,6 +24575,17 @@ function createAdminRoutes(config) {
     if (!existing) {
       throw ApiError.notFound("User not found");
     }
+    const hookCtx = buildHookContext(c, "PUT");
+    if (hooks?.users?.beforeSave) {
+      const hooked = await hooks.users.beforeSave({
+        email,
+        displayName,
+        roles
+      }, hookCtx);
+      email = hooked.email ?? email;
+      displayName = hooked.displayName ?? displayName;
+      roles = hooked.roles ?? roles;
+    }
     const updates = {};
     if (email !== void 0) updates.email = email.toLowerCase();
     if (displayName !== void 0) updates.displayName = displayName;
@@ -24468,13 +24603,14 @@ function createAdminRoutes(config) {
       await authRepo.setUserRoles(userId, roles);
     }
     const result = await authRepo.getUserWithRoles(userId);
+    const updatedAdminUser = toAdminUser(result.user, result.roles.map((r) => r.id));
+    if (hooks?.users?.afterSave) {
+      Promise.resolve(hooks.users.afterSave(updatedAdminUser, hookCtx)).catch((err) => {
+        console.error("[BackendHooks] users.afterSave error:", err instanceof Error ? err.message : err);
+      });
+    }
     return c.json({
-      user: {
-        uid: result.user.id,
-        email: result.user.email,
-        displayName: result.user.displayName,
-        roles: result.roles.map((r) => r.id)
-      }
+      user: updatedAdminUser
     });
   });
   router.delete("/users/:userId", requireAdmin, async (c) => {
@@ -24488,21 +24624,33 @@ function createAdminRoutes(config) {
     if (!existing) {
       throw ApiError.notFound("User not found");
     }
+    const hookCtx = buildHookContext(c, "DELETE");
+    if (hooks?.users?.beforeDelete) {
+      await hooks.users.beforeDelete(userId, hookCtx);
+    }
     await authRepo.deleteUser(userId);
+    if (hooks?.users?.afterDelete) {
+      Promise.resolve(hooks.users.afterDelete(userId, hookCtx)).catch((err) => {
+        console.error("[BackendHooks] users.afterDelete error:", err instanceof Error ? err.message : err);
+      });
+    }
     return c.json({
       success: true
     });
   });
   router.get("/roles", requireAdmin, async (c) => {
     const roles = await authRepo.listRoles();
+    const hookCtx = buildHookContext(c, "GET");
+    let adminRoles = roles.map((r) => ({
+      id: r.id,
+      name: r.name,
+      isAdmin: r.isAdmin,
+      defaultPermissions: r.defaultPermissions,
+      config: r.config
+    }));
+    adminRoles = await applyRoleAfterReadBatch(adminRoles, hookCtx);
     return c.json({
-      roles: roles.map((r) => ({
-        id: r.id,
-        name: r.name,
-        isAdmin: r.isAdmin,
-        defaultPermissions: r.defaultPermissions,
-        config: r.config
-      }))
+      roles: adminRoles
     });
   });
   router.get("/roles/:roleId", requireAdmin, async (c) => {
@@ -24630,10 +24778,10 @@ class LocalStorageController {
    * Includes a path traversal guard to prevent escaping the base directory.
    */
   getFullPath(storagePath, bucket) {
-    const parts = bucket ? [this.basePath, bucket, storagePath] : [this.basePath, storagePath];
-    const resolved = path$3.resolve(path$3.join(...parts));
-    if (!resolved.startsWith(this.basePath + path$3.sep) && resolved !== this.basePath) {
-      throw new Error("Path traversal detected: resolved storage path is outside the base directory.");
+    const bucketPath = bucket ? path$3.join(this.basePath, bucket) : this.basePath;
+    const resolved = path$3.resolve(path$3.join(bucketPath, storagePath));
+    if (!resolved.startsWith(bucketPath + path$3.sep) && resolved !== bucketPath) {
+      throw new Error("Path traversal detected: resolved storage path is outside the bucket directory.");
     }
     return resolved;
   }
@@ -26343,6 +26491,18 @@ function createCollectionClient(transport, slug, ws) {
         method: "DELETE"
       });
     },
+    async count(params) {
+      const countParams = {
+        ...params,
+        limit: void 0,
+        offset: void 0
+      };
+      const qs = buildQueryString(countParams);
+      const raw = await transport.request(basePath + "/count" + qs, {
+        method: "GET"
+      });
+      return raw.count ?? 0;
+    },
     // Fluent builder instantiation
     where(column, operator, value) {
       return new QueryBuilder(client).where(column, operator, value);
@@ -37944,7 +38104,8 @@ async function _initializeRebaseBackend(config) {
       authRepo: authConfigResult.authRepository ?? authConfigResult.userService,
       emailService: authConfigResult.emailService,
       emailConfig: config.auth.email,
-      serviceKey
+      serviceKey,
+      hooks: config.hooks
     });
     config.app.route(`${basePath}/admin`, adminRoutes);
   }
@@ -38002,7 +38163,7 @@ async function _initializeRebaseBackend(config) {
       });
       dataRouter.route("/", historyRoutes);
     }
-    const restGenerator = new RestApiGenerator(activeCollections, defaultDriver);
+    const restGenerator = new RestApiGenerator(activeCollections, defaultDriver, config.hooks?.data);
     dataRouter.route("/", restGenerator.generateRoutes());
     config.app.route(`${basePath}/data`, dataRouter);
   }
@@ -49020,9 +49181,9 @@ class RebaseApiServer {
       if (process.env.NODE_ENV === "production") {
         console.warn("[RebaseApiServer] Schema Editor is disabled in production environments for security.");
       } else {
+        this.router.use(`${basePath}/schema-editor/*`, requireAuth, requireAdmin);
         const schemaEditorRoutes2 = createSchemaEditorRoutes(this.config.collectionsDir);
         this.router.route(`${basePath}/schema-editor`, schemaEditorRoutes2);
-        this.router.use(`${basePath}/schema-editor/*`, requireAuth, requireAdmin);
       }
     }
     this.router.get(`${basePath}/docs`, (c) => {