@rebasepro/server-postgresql 0.6.1 → 0.8.0

package/dist/PostgresBackendDriver.d.ts

@@ -19,6 +19,13 @@ export declare class PostgresBackendDriver implements DataDriver {
     user?: User;
     data: RebaseData;
     client?: RebaseClient;
+    /**
+     * Auto-set to `true` when a SET LOCAL ROLE fails with insufficient
+     * privileges, so subsequent queries skip the doomed attempt.
+     * Mirrors the static `DISABLE_DB_ROLE_SWITCHING` env var but is
+     * learned at runtime.
+     */
+    private _roleSwitchingDisabled;
     /**
      * When true, realtime notifications are deferred until after the
      * wrapping transaction commits.  Set by `withAuth` → `withTransaction`.
@@ -58,6 +65,7 @@ export declare class PostgresBackendDriver implements DataDriver {
     executeSql(sqlText: string, options?: {
         database?: string;
         role?: string;
+        params?: unknown[];
     }): Promise<Record<string, unknown>[]>;
     fetchAvailableDatabases(): Promise<string[]>;
     fetchAvailableRoles(): Promise<string[]>;

package/dist/auth/services.d.ts

@@ -1,6 +1,6 @@
 import { NodePgDatabase } from "drizzle-orm/node-postgres";
 import type { RebasePgTable } from "../types";
-import { UserRepository, TokenRepository, MfaRepository, AuthRepository, UserData, CreateUserData, RoleData, CreateRoleData, RefreshTokenInfo, PasswordResetTokenInfo, UserIdentityData, ListUsersOptions, PaginatedUsersResult, MfaFactor, MfaChallengeInfo, RoleData as Role } from "@rebasepro/server-core";
+import { UserRepository, TokenRepository, MfaRepository, AuthRepository, UserData, CreateUserData, RoleData, CreateRoleData, RefreshTokenInfo, PasswordResetTokenInfo, MagicLinkTokenInfo, UserIdentityData, ListUsersOptions, PaginatedUsersResult, MfaFactor, MfaChallengeInfo, RoleData as Role } from "@rebasepro/server-core";
 export type { Role };
 export interface AuthSchemaTables {
     users: RebasePgTable;
@@ -115,6 +115,19 @@ export declare class PasswordResetTokenService {
      */
     deleteExpired(): Promise<void>;
 }
+/**
+ * Magic link token service.
+ * Handles magic link token storage for passwordless email login.
+ */
+export declare class MagicLinkTokenService {
+    private db;
+    private magicLinkTokensTable;
+    constructor(db: NodePgDatabase, tableOrTables?: RebasePgTable | Partial<AuthSchemaTables>);
+    private getQualifiedTableName;
+    createToken(userId: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findValidByHash(tokenHash: string): Promise<MagicLinkTokenInfo | null>;
+    markAsUsed(tokenHash: string): Promise<void>;
+}
 /**
  * PostgreSQL implementation of TokenRepository.
  * Combines refresh token and password reset token operations.
@@ -123,6 +136,7 @@ export declare class PostgresTokenRepository implements TokenRepository {
     private db;
     private refreshTokenService;
     private passwordResetTokenService;
+    private magicLinkTokenService;
     constructor(db: NodePgDatabase, tableOrTables?: RebasePgTable | Partial<AuthSchemaTables>);
     createRefreshToken(userId: string, tokenHash: string, expiresAt: Date, userAgent?: string, ipAddress?: string): Promise<void>;
     findRefreshTokenByHash(tokenHash: string): Promise<RefreshTokenInfo | null>;
@@ -135,6 +149,9 @@ export declare class PostgresTokenRepository implements TokenRepository {
     markPasswordResetTokenUsed(tokenHash: string): Promise<void>;
     deleteAllPasswordResetTokensForUser(userId: string): Promise<void>;
     deleteExpiredTokens(): Promise<void>;
+    createMagicLinkToken(userId: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findValidMagicLinkToken(tokenHash: string): Promise<MagicLinkTokenInfo | null>;
+    markMagicLinkTokenUsed(tokenHash: string): Promise<void>;
 }
 /**
  * PostgreSQL implementation of AuthRepository.
@@ -184,6 +201,9 @@ export declare class PostgresAuthRepository implements AuthRepository {
     markPasswordResetTokenUsed(tokenHash: string): Promise<void>;
     deleteAllPasswordResetTokensForUser(userId: string): Promise<void>;
     deleteExpiredTokens(): Promise<void>;
+    createMagicLinkToken(userId: string, tokenHash: string, expiresAt: Date): Promise<void>;
+    findValidMagicLinkToken(tokenHash: string): Promise<MagicLinkTokenInfo | null>;
+    markMagicLinkTokenUsed(tokenHash: string): Promise<void>;
     private _mfaService;
     private getMfaService;
     createMfaFactor(userId: string, factorType: "totp", secretEncrypted: string, friendlyName?: string): Promise<MfaFactor>;

package/dist/cli-errors.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Detect whether an error (or AggregateError wrapping multiple attempts)
+ * represents an ECONNREFUSED — i.e. the database is simply not running.
+ *
+ * Handles:
+ * - Direct `{ code: "ECONNREFUSED" }` errors from Node `net`
+ * - `AggregateError` from dual-stack IPv4+IPv6 connection attempts
+ * - Drizzle's `cause`-wrapped pg errors
+ */
+export declare function isEconnrefused(err: unknown): boolean;
+/**
+ * Detect PostgreSQL authentication failures.
+ * PG error codes: 28P01 (invalid_password), 28000 (invalid_authorization_specification)
+ */
+export declare function isAuthFailure(err: unknown): boolean;
+/**
+ * Pre-flight check: verify that the database is reachable before running
+ * a heavy subprocess (Atlas, migrations, etc.).
+ *
+ * Exits with code 1 and a friendly banner on known failure modes.
+ * On unknown errors, logs a warning and allows the caller to proceed.
+ */
+export declare function checkDatabaseConnectivity(databaseUrl: string): Promise<void>;
+/**
+ * Post-hoc error diagnosis for direct database operations (e.g. applyPolicies).
+ * Returns a formatted diagnostic string if the error matches a known pattern,
+ * or null if unrecognized.
+ */
+export declare function diagnoseDbError(err: unknown, databaseUrl?: string): string | null;

package/dist/cli-helpers.d.ts

@@ -0,0 +1,7 @@
+import type { EntityCollection } from "@rebasepro/types";
+export declare function resolveLocalBin(binName: string): string | null;
+export declare function getTableIncludesFromCollections(collections: EntityCollection[]): Promise<string[]>;
+export declare function getTableIncludes(collectionsPath: string): Promise<string[]>;
+export declare function getDevDatabaseUrl(databaseUrl: string): string;
+export declare function ensureDevDatabaseExists(databaseUrl: string, devDatabaseUrl: string): Promise<void>;
+export declare function getTableExcludes(databaseUrl: string, collectionsPath: string): Promise<string[]>;

package/dist/collections/PostgresCollectionRegistry.d.ts

@@ -24,9 +24,9 @@ export declare class PostgresCollectionRegistry extends CollectionRegistry imple
      */
     getTableNames(): string[];
     /**
-     * Finds collections assigned to a specific driver that do not have a registered table.
+     * Finds collections assigned to a specific data source that do not have a registered table.
      */
-    getCollectionsWithoutTables(driverId?: string): EntityCollection[];
+    getCollectionsWithoutTables(dataSourceKey?: string): EntityCollection[];
     registerEnums(enums: Record<string, PgEnum<[string, ...string[]]>>): void;
     registerRelations(relations: Record<string, Relations>): void;
     getEnum(name: string): PgEnum<[string, ...string[]]> | undefined;