@rebasepro/server-mongo 0.22.0 → 0.24.0

package/dist/auth/services.d.ts

@@ -4,15 +4,13 @@ export interface MongoDoc {
     _id?: string;
     [key: string]: any;
 }
-import { UserRepository, RoleRepository, TokenRepository, AuthRepository, UserData, CreateUserData, RoleData, CreateRoleData, RefreshTokenInfo, RefreshTokenSession, PasswordResetTokenInfo, MagicLinkTokenInfo, UserIdentityData, ListUsersOptions, PaginatedUsersResult, MfaFactor, MfaChallengeInfo } from "@rebasepro/server";
-export type Role = RoleData;
+import { UserRepository, TokenRepository, AuthRepository, UserData, CreateUserData, RefreshTokenInfo, RefreshTokenSession, PasswordResetTokenInfo, MagicLinkTokenInfo, UserIdentityData, ListUsersOptions, PaginatedUsersResult, MfaFactor, MfaChallengeInfo } from "@rebasepro/server";
 export declare class MongoUserService implements UserRepository {
     private db;
     constructor(db: Db);
     private get collection();
     private get identitiesCollection();
     private get userRolesCollection();
-    private get rolesCollection();
     createUser(data: CreateUserData): Promise<UserData>;
     getUserById(id: string): Promise<UserData | null>;
     getUserByEmail(email: string): Promise<UserData | null>;
@@ -20,6 +18,14 @@ export declare class MongoUserService implements UserRepository {
     getUserIdentities(uid: string): Promise<UserIdentityData[]>;
     linkUserIdentity(uid: string, provider: string, providerId: string, profileData?: Record<string, unknown>): Promise<void>;
     updateUser(id: string, data: Partial<Omit<CreateUserData, "id">>): Promise<UserData | null>;
+    /**
+     * Everything keyed by the user goes with them. Postgres does this by
+     * foreign-key cascade; Mongo has none, so it is spelled out — and the
+     * refresh tokens are the part that matters: left behind, a deleted user's
+     * session kept minting access tokens for a uid that no longer exists.
+     * Sessions first, so a failure part-way leaves an account that cannot sign
+     * in rather than a session with no account.
+     */
     deleteUser(id: string): Promise<void>;
     listUsers(): Promise<UserData[]>;
     listUsersPaginated(options?: ListUsersOptions): Promise<PaginatedUsersResult>;
@@ -27,25 +33,14 @@ export declare class MongoUserService implements UserRepository {
     setEmailVerified(id: string, verified: boolean): Promise<void>;
     setVerificationToken(id: string, token: string | null): Promise<void>;
     getUserByVerificationToken(token: string): Promise<UserData | null>;
-    getUserRoles(uid: string): Promise<RoleData[]>;
     getUserRoleIds(uid: string): Promise<string[]>;
     setUserRoles(uid: string, roleIds: string[]): Promise<void>;
     assignDefaultRole(uid: string, roleId: string): Promise<void>;
     getUserWithRoles(uid: string): Promise<{
         user: UserData;
-        roles: RoleData[];
+        roles: string[];
     } | null>;
 }
-export declare class MongoRoleService implements RoleRepository {
-    private db;
-    constructor(db: Db);
-    private get collection();
-    getRoleById(id: string): Promise<RoleData | null>;
-    listRoles(): Promise<RoleData[]>;
-    createRole(data: CreateRoleData): Promise<RoleData>;
-    updateRole(id: string, data: Partial<Omit<RoleData, "id">>): Promise<RoleData | null>;
-    deleteRole(id: string): Promise<void>;
-}
 export declare class MongoRefreshTokenService {
     private db;
     constructor(db: Db);
@@ -105,7 +100,6 @@ export declare class MongoTokenRepository implements TokenRepository {
 export declare class MongoAuthRepository implements AuthRepository {
     private db;
     private userService;
-    private roleService;
     private tokenRepository;
     constructor(db: Db);
     createUser(data: CreateUserData): Promise<UserData>;
@@ -122,19 +116,13 @@ export declare class MongoAuthRepository implements AuthRepository {
     setEmailVerified(id: string, verified: boolean): Promise<void>;
     setVerificationToken(id: string, token: string | null): Promise<void>;
     getUserByVerificationToken(token: string): Promise<UserData | null>;
-    getUserRoles(uid: string): Promise<RoleData[]>;
     getUserRoleIds(uid: string): Promise<string[]>;
     setUserRoles(uid: string, roleIds: string[]): Promise<void>;
     assignDefaultRole(uid: string, roleId: string): Promise<void>;
     getUserWithRoles(uid: string): Promise<{
         user: UserData;
-        roles: RoleData[];
+        roles: string[];
     } | null>;
-    getRoleById(id: string): Promise<RoleData | null>;
-    listRoles(): Promise<RoleData[]>;
-    createRole(data: CreateRoleData): Promise<RoleData>;
-    updateRole(id: string, data: Partial<Omit<RoleData, "id">>): Promise<RoleData | null>;
-    deleteRole(id: string): Promise<void>;
     createRefreshToken(uid: string, tokenHash: string, expiresAt: Date, userAgent?: string, ipAddress?: string, session?: RefreshTokenSession): Promise<void>;
     markRefreshTokenRotated(tokenHash: string): Promise<void>;
     revokeRefreshTokenSession(sessionId: string): Promise<void>;

package/dist/db/MongoConditionBuilder.d.ts

@@ -4,6 +4,7 @@
  * Translates Rebase filter conditions to MongoDB query operators.
  */
 import { CollectionConfig, FilterValues, LogicalCondition, OrderByTuple } from "@rebasepro/types";
+import { type FieldViewer } from "@rebasepro/common";
 import { Filter, Document } from "mongodb";
 /**
  * MongoDB Condition Builder
@@ -29,16 +30,32 @@ export declare class MongoConditionBuilder {
      *
      * Always returns a condition or throws: there is no operator this can be
      * given that legitimately means "no condition".
+     *
+     * `negated` asks for the documents where the condition is *false* — not
+     * merely not true. The two differ by the documents where it is unknown,
+     * which in SQL is a comparison against NULL: `NOT (status = 'draft')` does
+     * not return a row whose status is NULL, and the Postgres driver is the
+     * reference every caller of this API writes against. So a comparison is
+     * false only where the field holds a value and the comparison fails on it.
+     * The null tests are never unknown, and negate to each other.
      */
     private static buildCondition;
     /**
-     * Translate an `or(...)` / `and(...)` group, nesting included.
+     * Translate an `or(...)` / `and(...)` / `not(...)` group, nesting included.
+     *
+     * `not` negates the conjunction of its conditions — the rule stated on
+     * `LogicalCondition`. It used to fall through to the `and` branch, so
+     * `not(status = 'draft')` returned exactly the drafts. It is compiled by
+     * pushing the negation down to the leaves (De Morgan), each of which knows
+     * which documents make it false rather than merely not true — see
+     * {@link buildCondition}. A `$nor` around the group would be shorter and
+     * wrong: it also matches every document where the condition is unknown.
      *
      * Returns `undefined` for a group with nothing in it. `$or: []` is an error
      * in Mongo and `$and: []` matches every document, so neither is a
      * defensible reading of "no conditions".
      */
-    static buildLogicalConditions(logical: LogicalCondition | undefined): Filter<Document> | undefined;
+    static buildLogicalConditions(logical: LogicalCondition | undefined, negated?: boolean): Filter<Document> | undefined;
     /**
      * Build search conditions for text search.
      *
@@ -50,10 +67,16 @@ export declare class MongoConditionBuilder {
      *
      * @param searchString - Text to search for
      * @param properties - The collection's properties, searched for string fields
+     * @param viewer - Who the search is for. A field they cannot read is not
+     *   one they may search: the strip keeps its value out of the response, and
+     *   without this the value is still recoverable a substring at a time by
+     *   watching which searches return the row. Absent is the trusted server
+     *   plane, which still does not search an `excludeFromApi` field — the same
+     *   answer the Postgres builder gives.
      * @returns At most one MongoDB filter — callers OR what they get back, which
      *   is right across fields and wrong across terms, so the AND is built here
      */
-    static buildSearchConditions(searchString: string, properties: CollectionConfig["properties"]): Filter<Document>[];
+    static buildSearchConditions(searchString: string, properties: CollectionConfig["properties"], viewer?: FieldViewer): Filter<Document>[];
     /**
      * Combine multiple conditions with AND operator
      *
@@ -85,6 +108,8 @@ export declare class MongoConditionBuilder {
         logical?: LogicalCondition;
         searchString?: string;
         properties?: CollectionConfig["properties"];
+        /** Who the query is for — see {@link buildSearchConditions}. */
+        viewer?: FieldViewer;
     }): Filter<Document>;
     /**
      * The primary key's name in a stored document.

package/dist/db/MongoDataService.d.ts

@@ -96,8 +96,39 @@ export declare class MongoDataService implements DataRepository {
      * partial row everywhere it went: the REST response, `afterSave`, the
      * history entry a revert restores from, and the row pushed to realtime
      * subscribers. Postgres returns the whole row here (`RETURNING *`).
+     *
+     * `mode` is which write the caller means when it names an `id`:
+     *
+     * - `"create"` inserts under that id, and a taken id is a 409. The driver
+     *   authorizes a create as an insert, against the values sent — so a
+     *   create that could land on an existing row is an update no update rule
+     *   ever saw. It was one: an upsert with `$set`, which let a caller name
+     *   another user's id with `status: "new"` and rewrite their row.
+     * - `"update"` updates that row and nothing else, and a missing one is a
+     *   404 — never a row conjured under an id nobody created.
+     * - absent, the repository's own "create or update": an upsert. Only the
+     *   repository's direct callers reach it; the driver always says which.
+     *
+     * `values` may carry field operations (`{ views: { $inc: 1 } }`), which
+     * change the stored value in the same write rather than replace it — see
+     * {@link compileFieldOp}. They were written into the document as literal
+     * objects, so a counter became `{ "$inc": 1 }` behind a 200. Only an
+     * update can carry one: there is no stored value for an insert to act on,
+     * and an upsert may be an insert.
+     */
+    save<M extends Record<string, any>>(collectionPath: string, values: Partial<M>, id?: string | number, _databaseId?: string, mode?: "create" | "update"): Promise<Record<string, unknown>>;
+    /**
+     * The aggregation expression one field operation compiles to, in an update
+     * pipeline's `$set`.
+     *
+     * The same meaning the Postgres compiler gives each one, NULL-safety
+     * included: an unset or null counter increments from zero and an absent
+     * array is pushed onto as an empty one, rather than the write failing on
+     * the first use of a field. `$push` and `$pull` take a value or a list of
+     * values, `$pull` removes every occurrence, and `$merge` is shallow — a
+     * nested object replaces, it is not merged into.
      */
-    save<M extends Record<string, any>>(collectionPath: string, values: Partial<M>, id?: string | number, _databaseId?: string): Promise<Record<string, unknown>>;
+    private compileFieldOp;
     /**
      * Read the document back after a write, falling back to the caller's own
      * values if it has already been removed by a concurrent delete.
@@ -115,9 +146,21 @@ export declare class MongoDataService implements DataRepository {
      */
     delete(collectionPath: string, id: string | number, _databaseId?: string): Promise<void>;
     /**
-     * Check if a field value is unique in a collection
+     * Check if a field value is unique in a collection.
+     *
+     * An equality test on one field, and nothing else a query can express. The
+     * name and the value arrive from a socket frame, and this used to be
+     * `countDocuments({ [name]: value })`: a value of `{ $regex: "^123" }`
+     * answered, one prefix at a time, what a field of a row the caller cannot
+     * see begins with, and a name of `$expr` evaluated an aggregation
+     * expression. So an operator name is refused, the value must be a scalar,
+     * and it is compared with `$eq` — which reads an object as a literal even
+     * if one got this far.
+     *
+     * An absent value is unique, as it is on Postgres: an empty optional field
+     * is not "taken" by every row that also left it empty.
      */
-    checkUniqueField(collectionPath: string, fieldName: string, value: any, excludeEntityId?: string, _databaseId?: string): Promise<boolean>;
+    checkUniqueField(collectionPath: string, fieldName: string, value: unknown, excludeEntityId?: string, _databaseId?: string): Promise<boolean>;
     /**
      * Generate a new row ID
      */

package/dist/{ensure-collections-Bl12bSwO.js → ensure-collections-DHTVMlxf.js}

@@ -1,50 +1,6 @@
 import { logger } from "@rebasepro/server";
 //#region src/auth/ensure-collections.ts
 /**
-* Default roles to seed on first run
-*/
-var DEFAULT_ROLES = [
-	{
-		_id: "admin",
-		id: "admin",
-		name: "Admin",
-		isAdmin: true,
-		defaultPermissions: {
-			read: true,
-			create: true,
-			edit: true,
-			delete: true
-		},
-		createdAt: /* @__PURE__ */ new Date()
-	},
-	{
-		_id: "editor",
-		id: "editor",
-		name: "Editor",
-		isAdmin: false,
-		defaultPermissions: {
-			read: true,
-			create: true,
-			edit: true,
-			delete: true
-		},
-		createdAt: /* @__PURE__ */ new Date()
-	},
-	{
-		_id: "viewer",
-		id: "viewer",
-		name: "Viewer",
-		isAdmin: false,
-		defaultPermissions: {
-			read: true,
-			create: false,
-			edit: false,
-			delete: false
-		},
-		createdAt: /* @__PURE__ */ new Date()
-	}
-];
-/**
 * Indexes created by releases up to 0.13.0, on snake_case field names the auth
 * services never wrote.
 *
@@ -96,7 +52,6 @@ async function ensureAuthCollectionsExist(db) {
 		const resetTokens = db.collection("rebase_password_reset_tokens");
 		await resetTokens.createIndex({ tokenHash: 1 }, { unique: true });
 		await resetTokens.createIndex({ uid: 1 });
-		await seedDefaultRoles(db);
 		logger.info("✅ MongoDB Auth collections ready");
 	} catch (error) {
 		logger.error("❌ Failed to set up MongoDB auth collections", { error });
@@ -113,18 +68,7 @@ async function dropLegacyIndexes(db) {
 		} catch {}
 	}
 }
-async function seedDefaultRoles(db) {
-	const roles = db.collection("rebase_roles");
-	const count = await roles.countDocuments();
-	if (count > 0) {
-		logger.info(`📋 Found ${count} existing roles`);
-		return;
-	}
-	logger.info("🌱 Seeding default roles...");
-	for (const role of DEFAULT_ROLES) await roles.updateOne({ id: role.id }, { $setOnInsert: role }, { upsert: true });
-	logger.info("✅ Default roles created: admin, editor, viewer");
-}
 //#endregion
 export { ensureAuthCollectionsExist };
 
-//# sourceMappingURL=ensure-collections-Bl12bSwO.js.map
+//# sourceMappingURL=ensure-collections-DHTVMlxf.js.map

package/dist/ensure-collections-DHTVMlxf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-collections-DHTVMlxf.js","names":[],"sources":["../src/auth/ensure-collections.ts"],"sourcesContent":["import { Db } from \"mongodb\";\nimport { logger } from \"@rebasepro/server\";\n\n/**\n * Indexes created by releases up to 0.13.0, on snake_case field names the auth\n * services never wrote.\n *\n * MongoDB indexes an absent field as `null`, so a unique index whose every key\n * component is always missing admits exactly **one** document per collection:\n * the second login on the whole deployment failed with `E11000`, as did the\n * second role assignment and the second outstanding password-reset token.\n * Dropping them is therefore part of the fix, not tidying — creating the\n * correct index alongside a broken one leaves the deployment just as broken.\n *\n * `{user_id, user_agent, ip_address}` has a second reason to go: it is the\n * reverted Postgres constraint. `MongoRefreshTokenService.createToken` explains\n * why evicting by that triple signs a second browser out; the unique index\n * expressing the same rule was left behind here.\n */\nconst LEGACY_INDEX_NAMES: Record<string, string[]> = {\n    rebase_user_identities: [\"provider_1_provider_id_1\", \"user_id_1\"],\n    rebase_user_roles: [\"user_id_1_role_id_1\", \"user_id_1\"],\n    rebase_refresh_tokens: [\"token_hash_1\", \"user_id_1_user_agent_1_ip_address_1\", \"user_id_1\"],\n    rebase_password_reset_tokens: [\"token_hash_1\", \"user_id_1\"]\n};\n\nexport async function ensureAuthCollectionsExist(db: Db): Promise<void> {\n    logger.info(\"🔍 Checking MongoDB auth collections and indexes...\");\n\n    try {\n        await dropLegacyIndexes(db);\n\n        // Every key below is a field `auth/services.ts` actually writes —\n        // camelCase, matching the documents. Verified by\n        // `test/MongoAuthServices.test.ts`, which now runs this function.\n\n        // Users\n        const users = db.collection(\"rebase_users\");\n        await users.createIndex({ email: 1 }, { unique: true });\n        await users.createIndex({ id: 1 });\n\n        // User Identities\n        const identities = db.collection(\"rebase_user_identities\");\n        await identities.createIndex({ provider: 1,\nproviderId: 1 }, { unique: true });\n        await identities.createIndex({ uid: 1 });\n\n        // User Roles (junction collection)\n        const userRoles = db.collection(\"rebase_user_roles\");\n        await userRoles.createIndex({ uid: 1,\nroleId: 1 }, { unique: true });\n        await userRoles.createIndex({ roleId: 1 });\n\n        // Refresh Tokens. No unique index on (uid, userAgent, ipAddress):\n        // tokens of one sign-in accumulate under a shared sessionId.\n        const refreshTokens = db.collection(\"rebase_refresh_tokens\");\n        await refreshTokens.createIndex({ tokenHash: 1 }, { unique: true });\n        await refreshTokens.createIndex({ uid: 1 });\n        await refreshTokens.createIndex({ sessionId: 1 });\n\n        // Password Reset Tokens\n        const resetTokens = db.collection(\"rebase_password_reset_tokens\");\n        await resetTokens.createIndex({ tokenHash: 1 }, { unique: true });\n        await resetTokens.createIndex({ uid: 1 });\n\n        logger.info(\"✅ MongoDB Auth collections ready\");\n    } catch (error) {\n        // Not swallowed. Every index here is load-bearing for auth — a boot\n        // that logs this and carries on is a deployment whose second login\n        // fails, with a green boot log to say nothing is wrong.\n        logger.error(\"❌ Failed to set up MongoDB auth collections\", { error: error });\n        throw error;\n    }\n}\n\n/** Drop the indexes of {@link LEGACY_INDEX_NAMES} that this database still has. */\nasync function dropLegacyIndexes(db: Db): Promise<void> {\n    for (const [collectionName, indexNames] of Object.entries(LEGACY_INDEX_NAMES)) {\n        const collection = db.collection(collectionName);\n        for (const indexName of indexNames) {\n            try {\n                await collection.dropIndex(indexName);\n                logger.info(`🧹 Dropped stale auth index ${collectionName}.${indexName}`);\n            } catch {\n                // NamespaceNotFound / IndexNotFound — nothing to drop here.\n            }\n        }\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmBA,IAAM,qBAA+C;CACjD,wBAAwB,CAAC,4BAA4B,WAAW;CAChE,mBAAmB,CAAC,uBAAuB,WAAW;CACtD,uBAAuB;EAAC;EAAgB;EAAuC;CAAW;CAC1F,8BAA8B,CAAC,gBAAgB,WAAW;AAC9D;AAEA,eAAsB,2BAA2B,IAAuB;CACpE,OAAO,KAAK,qDAAqD;CAEjE,IAAI;EACA,MAAM,kBAAkB,EAAE;EAO1B,MAAM,QAAQ,GAAG,WAAW,cAAc;EAC1C,MAAM,MAAM,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EACtD,MAAM,MAAM,YAAY,EAAE,IAAI,EAAE,CAAC;EAGjC,MAAM,aAAa,GAAG,WAAW,wBAAwB;EACzD,MAAM,WAAW,YAAY;GAAE,UAAU;GACjD,YAAY;EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EACzB,MAAM,WAAW,YAAY,EAAE,KAAK,EAAE,CAAC;EAGvC,MAAM,YAAY,GAAG,WAAW,mBAAmB;EACnD,MAAM,UAAU,YAAY;GAAE,KAAK;GAC3C,QAAQ;EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EACrB,MAAM,UAAU,YAAY,EAAE,QAAQ,EAAE,CAAC;EAIzC,MAAM,gBAAgB,GAAG,WAAW,uBAAuB;EAC3D,MAAM,cAAc,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EAClE,MAAM,cAAc,YAAY,EAAE,KAAK,EAAE,CAAC;EAC1C,MAAM,cAAc,YAAY,EAAE,WAAW,EAAE,CAAC;EAGhD,MAAM,cAAc,GAAG,WAAW,8BAA8B;EAChE,MAAM,YAAY,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,KAAK,CAAC;EAChE,MAAM,YAAY,YAAY,EAAE,KAAK,EAAE,CAAC;EAExC,OAAO,KAAK,kCAAkC;CAClD,SAAS,OAAO;EAIZ,OAAO,MAAM,+CAA+C,EAAS,MAAM,CAAC;EAC5E,MAAM;CACV;AACJ;;AAGA,eAAe,kBAAkB,IAAuB;CACpD,KAAK,MAAM,CAAC,gBAAgB,eAAe,OAAO,QAAQ,kBAAkB,GAAG;EAC3E,MAAM,aAAa,GAAG,WAAW,cAAc;EAC/C,KAAK,MAAM,aAAa,YACpB,IAAI;GACA,MAAM,WAAW,UAAU,SAAS;GACpC,OAAO,KAAK,+BAA+B,eAAe,GAAG,WAAW;EAC5E,QAAQ,CAER;CAER;AACJ"}