@rebasepro/server 0.10.1-canary.b1e3dbf → 0.10.1-canary.d8d45b2

package/dist/index.es.js

@@ -14580,7 +14580,7 @@ function buildAdapterAuthMiddleware(adapter, requireAuth, publicRead) {
 function createStorageRoutes(config) {
 	const router = new Hono();
 	router.onError(errorHandler);
-	const { controller, registry, sources: declaredSources, requireAuth: requireAuth$1 = true, publicRead = false, authAdapter, authorize } = config;
+	const { controller, registry, sources: declaredSources, requireAuth: requireAuth$1 = true, publicRead = false, authAdapter, authorize, authorizeData } = config;
 	/**
 	* Run the per-object authorization hook, if one is configured.
 	*
@@ -14601,7 +14601,8 @@ function createStorageRoutes(config) {
 				bucket,
 				operation,
 				user,
-				storageId: storageId ?? void 0
+				storageId: storageId ?? void 0,
+				data: authorizeData?.()
 			});
 		} catch {
 			allowed = false;
@@ -20963,6 +20964,7 @@ async function _initializeRebaseBackend(config) {
 			logger.info("Schema Editor mounted", { path: `${basePath}/schema-editor` });
 		}
 	}
+	const storageAuthorizeData = {};
 	if (storageController) {
 		const storageMaxSize = (config.storage && typeof config.storage === "object" && "type" in config.storage ? config.storage.maxFileSize : void 0) ?? 50 * 1024 * 1024;
 		assertStorageAccessControlConfigured({
@@ -20977,7 +20979,8 @@ async function _initializeRebaseBackend(config) {
 			requireAuth: resolveRequireAuth(config.auth),
 			publicRead: config.storagePublicRead === true,
 			authAdapter,
-			authorize: config.storageAuthorize
+			authorize: config.storageAuthorize,
+			authorizeData: () => storageAuthorizeData.current
 		});
 		const storageRouter = new Hono();
 		if (apiKeyPreAuth) storageRouter.use("/*", apiKeyPreAuth, createStorageApiKeyGuard());
@@ -21056,6 +21059,7 @@ async function _initializeRebaseBackend(config) {
 		roles: ["admin"]
 	};
 	const defaultData = buildSdkData(await scopeDataDriver(defaultDriver, serviceIdentity));
+	storageAuthorizeData.current = defaultData;
 	const dataSourcesByKey = {};
 	for (const driverKey of driverRegistry.list()) {
 		if (driverKey === "(default)") continue;
@@ -23744,6 +23748,7 @@ async function bootFromBundle(options = {}) {
 	const server = createServer(getRequestListener(app.fetch));
 	const usersCollection = await loadUsersCollection(bundle);
 	const storage = resolveStorageSources(process.env, storageSourceDefs, path.join(bundle.dir, "uploads"));
+	await ensureCollectionSchema(bundle, dataSources, env);
 	const backend = await initializeRebaseBackend({
 		server,
 		app,
@@ -23953,6 +23958,32 @@ async function runFromBundle(options = {}) {
 		process.exit(1);
 	}
 }
+/**
+* Bring the database's collection tables up to date before serving.
+*
+* Delegates to whichever driver bootstrapped the default data source; a driver
+* without `ensureCollectionSchema` (a schemaless one, or an older build) simply
+* skips, which is why this cannot break an existing deployment.
+*
+* Failure is fatal on purpose. Booting anyway would produce exactly the state
+* this exists to prevent — an app that answers sign-in and 500s every data
+* request — and a crash-looping pod with the DDL error in its logs is a far
+* better signal than a running one that silently cannot serve.
+*/
+async function ensureCollectionSchema(bundle, dataSources, env) {
+	if ((env.REBASE_MIGRATE_ON_BOOT || "ensure") === "none") {
+		logger.info("REBASE_MIGRATE_ON_BOOT=none — leaving the database schema untouched.");
+		return;
+	}
+	if ((bundle.manifest.mode ?? "cms") !== "cms") return;
+	if (!bundle.collectionsDir) return;
+	const primary = dataSources[0];
+	if (!primary?.bootstrapper.ensureCollectionSchema) return;
+	const collections = await loadCollectionsFromDirectory(bundle.collectionsDir);
+	if (collections.length === 0) return;
+	const { applied } = await primary.bootstrapper.ensureCollectionSchema(collections, primary.connection, (message) => logger.info(`schema: ${message}`));
+	logger.info(applied > 0 ? `Applied ${applied} additive schema change(s) before boot.` : "Collection schema is up to date.");
+}
 //#endregion
 //#region src/api/contract-routes.ts
 var contract_routes_exports = /* @__PURE__ */ __exportAll({ createContractRoutes: () => createContractRoutes });