@rebasepro/server-postgres 0.14.2-canary.gf913b76 → 0.15.1-canary.g869ace1

package/dist/PostgresBackendDriver.d.ts

@@ -168,7 +168,7 @@ export declare class PostgresBackendDriver implements DataDriver {
      * PostgreSQL roles from `pg_roles` (`postgres`, `rebase_user`, …). Those
      * are the roles the SQL editor can `SET ROLE` to. *These* are the strings
      * held in the users table's `roles` column, injected per-transaction as
-     * `auth.roles()` and matched by `SecurityRule.roles`. Feeding the pg roles
+     * `rebase.roles()` and matched by `SecurityRule.roles`. Feeding the pg roles
      * into a `SecurityRule.roles` field produces a condition no user can ever
      * satisfy, so the two must not be conflated.
      *

package/dist/PostgresBootstrapper.d.ts

@@ -134,15 +134,4 @@ export declare function describeSchemaDriftCause(provisioning: {
  * ships `NODE_ENV=development` and some deployments inherit it.
  */
 export declare function isScaffoldedLocalDatabase(connectionString: string | undefined): boolean;
-/**
- * Default PostgreSQL bootstrapper.
- *
- * Use it to register Postgres with `initializeRebaseBackend()`:
- * ```typescript
- * initializeRebaseBackend({
- *   ...config,
- *   bootstrappers: [postgresBootstrapper()]
- * });
- * ```
- */
 export declare function createPostgresBootstrapper(pgConfig: PostgresDriverConfig): BackendBootstrapper;

package/dist/auth/services.d.ts

@@ -44,7 +44,7 @@ export declare class UserService implements UserRepository {
      * Run a privileged auth write with an explicitly cleared RLS context.
      *
      * The auth services run on the base/owner connection, which by design
-     * carries a NULL `app.uid` so the `auth.uid() IS NULL` server-escape
+     * carries a NULL `app.uid` so the `rebase.uid() IS NULL` server-escape
      * in the default policies applies. That NULL is normally guaranteed by
      * `set_config(..., is_local = true)` resetting at transaction end — but a
      * GUC that survives on a pooled connection (or a connection role that
@@ -52,7 +52,7 @@ export declare class UserService implements UserRepository {
      * turns the trusted write into an RLS-scoped one and denies it with
      * SQLSTATE 42501. Clearing the GUCs here, transaction-locally at the
      * single chokepoint, makes the server context deterministic instead of
-     * trusting whatever state the pool hands us. `auth.uid()` reads '' as
+     * trusting whatever state the pool hands us. `rebase.uid()` reads '' as
      * NULL via NULLIF, so '' is the server context.
      */
     private withServerContext;

package/dist/{auth-users-columns-DLwxDqYb.js → auth-users-columns-CgyPWQ18.js}

@@ -3,7 +3,7 @@ import "process";
 __createRequire(import.meta.url);
 import { l as __require, s as __commonJSMin } from "./connection-BuZ97wsr.js";
 import { a as policy, i as ANONYMOUS_USER_IDS, r as ANONYMOUS_USER_ID } from "./data_driver-ULAyJEi9.js";
-import { a as rewriteLegacyRlsFunctions, c as isPostgresCollectionConfig, d as getDataSourceCapabilities, f as ALL_WHERE_FILTER_OPS, g as toCanonicalOp, h as REST_TO_CANONICAL, i as RLS_UID_SQL, l as isRelationalCollectionConfig, m as NULL_OPS, p as CANONICAL_TO_REST, r as RLS_ROLES_SQL, s as getDeclaredSubcollections } from "./src-DCdn3Val.js";
+import { _ as isRelationAggregateSort, a as rewriteLegacyRlsFunctions, b as toCanonicalOp, c as isPostgresCollectionConfig, d as getDataSourceCapabilities, f as ALL_WHERE_FILTER_OPS, h as REST_TO_CANONICAL, i as RLS_UID_SQL, l as isRelationalCollectionConfig, m as NULL_OPS, p as CANONICAL_TO_REST, r as RLS_ROLES_SQL, s as getDeclaredSubcollections, y as sortKeyToString } from "./src-BBFsDaeA.js";
 import { createHash } from "node:crypto";
 //#region ../types/src/types/entities.ts
 /**
@@ -2719,7 +2719,7 @@ function rolesArraySql(roles) {
 * rows").
 *
 * **For auth collections additionally**
-*  3. A permissive **self SELECT** grant (`id = auth.uid()`), so users can read
+*  3. A permissive **self SELECT** grant (`id = rebase.uid()`), so users can read
 *     their own row (profile, session bootstrap) without every app re-declaring
 *     it.
 *  4. A **restrictive** admin write gate. Restrictive policies are AND'd with
@@ -2728,7 +2728,7 @@ function rolesArraySql(roles) {
 *     such as "a user may edit their own row". Without this, a permissive owner
 *     rule would let a user change their own `roles`.
 *
-* The server context is recognised as `auth.uid() IS NULL` (`policy.serverContext()`)
+* The server context is recognised as `rebase.uid() IS NULL` (`policy.serverContext()`)
 * — the built-in flows that run without a user (signup, migrations) set no user
 * GUC — which also lets the owner connection satisfy these policies even under
 * FORCE RLS. A *user* request never reaches that state: an anonymous one carries
@@ -4058,6 +4058,13 @@ var CollectionRegistry = class {
 * the same value; the two are told apart by whether the first element is
 * itself an array, which no field name ever is.
 *
+* This is also where a {@link RelationAggregateSort} object stops being an
+* object. Above this function a sort key may be either spelling; below it,
+* every key is a string — which is what `OrderByTuple`, the REST parameter, the
+* driver contract and the cursor all already were. Doing it here means the one
+* place that already collapses the two *shapes* of a sort also collapses the
+* two *spellings* of a key, rather than every consumer learning about both.
+*
 * @returns The keys in order of significance, or `undefined` for no sort. An
 *   empty list also returns `undefined` — "sort by nothing" is no sort, and
 *   letting `[]` through would have every layer below re-deciding what it meant.
@@ -4065,7 +4072,8 @@ var CollectionRegistry = class {
 function normalizeOrderBy(orderBy) {
 	if (!orderBy || orderBy.length === 0) return void 0;
 	const list = Array.isArray(orderBy[0]) ? orderBy : [orderBy];
-	return list.length > 0 ? list : void 0;
+	if (list.length === 0) return void 0;
+	return list.map(([key, direction]) => [sortKeyToString(key), direction]);
 }
 /**
 * Collapse the driver-level `{orderBy, order}` pair into the list form.
@@ -4112,14 +4120,16 @@ function parseOrderBySpecStrict(raw, order) {
 	if (raw === void 0 || raw === null || raw === "") return void 0;
 	if (typeof raw === "string") return normalizeDriverOrderBy(raw, order);
 	if (!Array.isArray(raw) || raw.length === 0) throw new OrderBySpecError(`${typeof raw} is not a field name or a list of sort keys`);
-	if (typeof raw[0] === "string") return [toStrictTuple(raw, 0)];
+	if (typeof raw[0] === "string" || isRelationAggregateSort(raw[0])) return [toStrictTuple(raw, 0)];
 	return raw.map(toStrictTuple);
 }
 function toStrictTuple(raw, index) {
-	if (!Array.isArray(raw) || typeof raw[0] !== "string" || raw[0].trim() === "") throw new OrderBySpecError(`entry ${index} has no field name`);
+	if (!Array.isArray(raw)) throw new OrderBySpecError(`entry ${index} has no field name`);
+	const key = isRelationAggregateSort(raw[0]) ? sortKeyToString(raw[0]) : raw[0];
+	if (typeof key !== "string" || key.trim() === "") throw new OrderBySpecError(`entry ${index} has no field name`);
 	const direction = raw[1];
 	if (direction !== void 0 && direction !== "asc" && direction !== "desc") throw new OrderBySpecError(`entry ${index} has direction '${String(direction)}'`);
-	return [raw[0], direction ?? "asc"];
+	return [key, direction ?? "asc"];
 }
 //#endregion
 //#region ../common/src/data/query_builder.ts
@@ -5694,4 +5704,4 @@ function isAuthCollection(collection) {
 //#endregion
 export { mergeDeep as $, fieldKeyForColumn as A, parseIdValues as B, getJunctionCollectionConfig as C, policyToPostgres as D, getEffectiveSecurityRules as E, getTableVarName as F, updateDateAutoValues as G, createRelationRef as H, resolveCollectionRelations as I, legacyForeignKeyName as J, firstFreeKey as K, buildCompositeId as L, getColumnName as M, getEnumVarName as N, securityRuleToConditions as O, getTableName as P, isPrototypePollutingKey as Q, getDeclaredPrimaryKeys as R, resolveStringColumnLength as S, resolveJunctionSpecs as T, createRelationRefWithData as U, sortCollectionsBySlug as V, normalizeToEntityRelation as W, toWireKey as X, toPostgresIdentifier as Y, getPolicyNamesForRule as Z, OrderBySpecError as _, SEARCH_STAMP_PREFIX as a, isManyToMany as at, CollectionRegistry as b, assertSearchIsPostgresOnly as c, searchColumnStamps as d, camelCase as et, searchExtensionStatements as f, buildSdkData as g, visibleColumnProjection as h, isAuthCollection as i, hasForeignKeyOnTarget as it, findRelation as j, findAnonymousGrants as k, buildSearchColumnSpec as l, searchIndexStatements as m, authUsersColumnDefinition as n, DEFAULT_ONE_OF_TYPE as nt, SEARCH_TEXT_FN as o, Vector as ot, searchHelperFunctions as p, generateForeignKeyName as q, authUsersColumnSql as r, DEFAULT_ONE_OF_VALUE as rt, SEARCH_UNACCENT_FN as s, AUTH_USERS_COLUMNS as t, toSnakeCase as tt, hiddenColumnsOption as u, normalizeDriverOrderBy as v, getJunctionSecurityRules as w, relationalCollections as x, parseOrderBySpecStrict as y, isAddressableId as z };
 
-//# sourceMappingURL=auth-users-columns-DLwxDqYb.js.map
+//# sourceMappingURL=auth-users-columns-CgyPWQ18.js.map