@rebasepro/server-postgresql 0.6.1 → 0.8.0

package/dist/schema/auth-default-policies.d.ts

@@ -0,0 +1,12 @@
+import { EntityCollection, SecurityRule } from "@rebasepro/types";
+/**
+ * Returns the security rules that should be applied to a collection: the
+ * author's explicit `securityRules`, plus, for auth collections, an
+ * auto-injected restrictive admin gate and permissive admin grant on every
+ * write operation. Together these guarantee only admins (or the trusted server
+ * context) can write the row.
+ *
+ * Non-auth collections, and auth collections that opt out via
+ * `disableDefaultAuthPolicies`, are returned unchanged.
+ */
+export declare function getEffectiveSecurityRules(collection: EntityCollection): SecurityRule[];

package/dist/schema/auth-schema.d.ts

@@ -1056,6 +1056,117 @@ export declare function createAuthSchema(usersSchemaName?: string): {
         };
         dialect: "pg";
     }>;
+    magicLinkTokens: import("drizzle-orm/pg-core").PgTableWithColumns<{
+        name: "magic_link_tokens";
+        schema: undefined;
+        columns: {
+            id: import("drizzle-orm/pg-core").PgColumn<{
+                name: "id";
+                tableName: "magic_link_tokens";
+                dataType: "string";
+                columnType: "PgUUID";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: true;
+                isPrimaryKey: true;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            userId: import("drizzle-orm/pg-core").PgColumn<{
+                name: "user_id";
+                tableName: "magic_link_tokens";
+                dataType: "string";
+                columnType: "PgUUID";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            tokenHash: import("drizzle-orm/pg-core").PgColumn<{
+                name: "token_hash";
+                tableName: "magic_link_tokens";
+                dataType: "string";
+                columnType: "PgVarchar";
+                data: string;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: [string, ...string[]];
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {
+                length: 255;
+            }>;
+            expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+                name: "expires_at";
+                tableName: "magic_link_tokens";
+                dataType: "date";
+                columnType: "PgTimestamp";
+                data: Date;
+                driverParam: string;
+                notNull: true;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            usedAt: import("drizzle-orm/pg-core").PgColumn<{
+                name: "used_at";
+                tableName: "magic_link_tokens";
+                dataType: "date";
+                columnType: "PgTimestamp";
+                data: Date;
+                driverParam: string;
+                notNull: false;
+                hasDefault: false;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+            createdAt: import("drizzle-orm/pg-core").PgColumn<{
+                name: "created_at";
+                tableName: "magic_link_tokens";
+                dataType: "date";
+                columnType: "PgTimestamp";
+                data: Date;
+                driverParam: string;
+                notNull: true;
+                hasDefault: true;
+                isPrimaryKey: false;
+                isAutoincrement: false;
+                hasRuntimeDefault: false;
+                enumValues: undefined;
+                baseColumn: never;
+                identity: undefined;
+                generated: undefined;
+            }, {}, {}>;
+        };
+        dialect: "pg";
+    }>;
 };
 export declare const usersSchema: import("drizzle-orm/pg-core").PgSchema<string> | null;
 export declare const users: import("drizzle-orm/pg-core").PgTableWithColumns<{
@@ -2111,12 +2222,124 @@ export declare const recoveryCodes: import("drizzle-orm/pg-core").PgTableWithCol
     };
     dialect: "pg";
 }>;
+export declare const magicLinkTokens: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "magic_link_tokens";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "magic_link_tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        userId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "user_id";
+            tableName: "magic_link_tokens";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        tokenHash: import("drizzle-orm/pg-core").PgColumn<{
+            name: "token_hash";
+            tableName: "magic_link_tokens";
+            dataType: "string";
+            columnType: "PgVarchar";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            length: 255;
+        }>;
+        expiresAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "expires_at";
+            tableName: "magic_link_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        usedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "used_at";
+            tableName: "magic_link_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "magic_link_tokens";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
 export declare const usersRelations: import("drizzle-orm").Relations<"users", {
     refreshTokens: import("drizzle-orm").Many<"refresh_tokens">;
     passwordResetTokens: import("drizzle-orm").Many<"password_reset_tokens">;
     userIdentities: import("drizzle-orm").Many<"user_identities">;
     mfaFactors: import("drizzle-orm").Many<"mfa_factors">;
     recoveryCodes: import("drizzle-orm").Many<"recovery_codes">;
+    magicLinkTokens: import("drizzle-orm").Many<"magic_link_tokens">;
 }>;
 export declare const refreshTokensRelations: import("drizzle-orm").Relations<"refresh_tokens", {
     user: import("drizzle-orm").One<"users", true>;
@@ -2137,6 +2360,9 @@ export declare const mfaChallengesRelations: import("drizzle-orm").Relations<"mf
 export declare const recoveryCodesRelations: import("drizzle-orm").Relations<"recovery_codes", {
     user: import("drizzle-orm").One<"users", true>;
 }>;
+export declare const magicLinkTokensRelations: import("drizzle-orm").Relations<"magic_link_tokens", {
+    user: import("drizzle-orm").One<"users", true>;
+}>;
 export type User = typeof users.$inferSelect;
 export type NewUser = typeof users.$inferInsert;
 export type RefreshToken = typeof refreshTokens.$inferSelect;
@@ -2147,3 +2373,4 @@ export type NewUserIdentity = typeof userIdentities.$inferInsert;
 export type MfaFactorRow = typeof mfaFactors.$inferSelect;
 export type MfaChallengeRow = typeof mfaChallenges.$inferSelect;
 export type RecoveryCodeRow = typeof recoveryCodes.$inferSelect;
+export type MagicLinkToken = typeof magicLinkTokens.$inferSelect;

package/dist/schema/generate-postgres-ddl-logic.d.ts

@@ -0,0 +1,5 @@
+import { EntityCollection } from "@rebasepro/types";
+export declare const generatePostgresDdl: (collections: EntityCollection[], options?: {
+    includePolicies?: boolean;
+}) => Promise<string>;
+export declare const generatePostgresPoliciesDdl: (collections: EntityCollection[]) => string;

package/dist/schema/generate-postgres-ddl.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/services/entityService.d.ts

@@ -94,7 +94,7 @@ export declare class EntityService implements EntityRepository {
     /**
      * Execute raw SQL
      */
-    executeSql(sqlText: string): Promise<Record<string, unknown>[]>;
+    executeSql(sqlText: string, params?: unknown[]): Promise<Record<string, unknown>[]>;
     /**
      * Get the underlying EntityFetchService for advanced use
      */

package/dist/utils/pg-error-utils.d.ts

@@ -28,6 +28,16 @@ export declare function extractPgError(error: unknown): PostgresError | null;
  * Walk the error cause chain and return the deepest meaningful message.
  */
 export declare function extractCauseMessage(error: unknown): string | null;
+/**
+ * Detect whether an error is specifically a role-switching permission failure
+ * (e.g. "permission denied to set role" or "must be member of role"),
+ * as opposed to a table-level permission denial.
+ *
+ * This is used by the backend driver to auto-disable role switching when the
+ * connection user lacks SET ROLE privileges, rather than surfacing a confusing
+ * error to the Studio SQL Editor user.
+ */
+export declare function isRoleSwitchingPermissionError(error: unknown): boolean;
 /**
  * Translate a raw PostgreSQL error into a user-friendly message.
  *

package/dist/utils/table-classification.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Table Classification Utility
+ *
+ * Re-exports shared classification logic from @rebasepro/common.
+ * This module exists for backward compatibility — prefer importing directly
+ * from @rebasepro/common in new code.
+ */
+export { type TableCategory, REBASE_INTERNAL_SCHEMAS, REBASE_INTERNAL_PREFIXES, classifyTable, isRebaseInternalTable, detectJunctionTables, JUNCTION_TABLES_SQL, } from "@rebasepro/common";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rebasepro/server-postgresql",
   "type": "module",
-  "version": "0.6.1",
+  "version": "0.8.0",
   "description": "PostgreSQL data source backend implementation for Rebase with Drizzle ORM",
   "funding": {
     "url": "https://github.com/sponsors/rebaseco"
@@ -34,6 +34,10 @@
       "^.+\\.tsx?$": "ts-jest"
     },
     "testRegex": "(/__tests__/.*|(\\.|/)(test|spec))\\.tsx?$",
+    "testPathIgnorePatterns": [
+      "/node_modules/",
+      "test/e2e/"
+    ],
     "moduleFileExtensions": [
       "ts",
       "tsx",
@@ -62,8 +66,9 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
+    "@ariga/atlas": "^1.2.2",
     "arg": "^5.0.2",
-    "chalk": "^5.6.2",
+    "chalk": "^4.1.2",
     "chokidar": "5.0.0",
     "dotenv": "^17.4.2",
     "drizzle-orm": "^0.45.2",
@@ -71,11 +76,11 @@
     "hono": "^4.12.25",
     "pg": "^8.21.0",
     "ws": "^8.21.0",
-    "@rebasepro/types": "0.6.1",
-    "@rebasepro/server-core": "0.6.1",
-    "@rebasepro/sdk-generator": "0.6.1",
-    "@rebasepro/common": "0.6.1",
-    "@rebasepro/utils": "0.6.1"
+    "@rebasepro/sdk-generator": "0.8.0",
+    "@rebasepro/common": "0.8.0",
+    "@rebasepro/server-core": "0.8.0",
+    "@rebasepro/utils": "0.8.0",
+    "@rebasepro/types": "0.8.0"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
@@ -83,11 +88,11 @@
     "@types/pg": "^8.20.0",
     "@types/ws": "^8.18.1",
     "@vitejs/plugin-react": "^6.0.2",
-    "drizzle-kit": "^0.31.10",
     "jest": "^30.4.2",
     "ts-jest": "^29.4.11",
     "typescript": "^6.0.3",
-    "vite": "^8.0.16"
+    "vite": "^8.0.16",
+    "vitest": "^4.1.9"
   },
   "gitHead": "d935eefa5aa8d1009a2398cfac2c1e4ee9aeb6b6",
   "publishConfig": {
@@ -98,6 +103,7 @@
     "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.prod.json",
     "test:lint": "eslint \"src/**\" --quiet",
     "test": "jest --passWithNoTests",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
     "clean": "rm -rf dist && find ./src -name '*.js' -type f | xargs rm -f"
   }
 }