@rebasepro/server 0.13.1-canary.gcd6689e → 0.13.1-canary.gcef69d4

package/dist/api/errors.d.ts

@@ -55,12 +55,6 @@ export interface RebaseApiError extends Error {
     code?: string;
     details?: unknown;
 }
-/**
- * Type guard for errors that carry optional API metadata (statusCode, code, details).
- * Returns true for any Error instance — the optional properties are then
- * checked via normal property access.
- */
-export declare function isRebaseApiError(error: unknown): error is RebaseApiError;
 /**
  * Hono error-handling middleware (`app.onError`).
  * Converts any error into the canonical `{ error: { message, code } }` shape.

package/dist/api/openapi-generator.d.ts

@@ -12,5 +12,19 @@ export interface OpenApiGeneratorOptions {
     basePath?: string;
     /** Whether auth is enabled on data routes. Defaults to true. */
     requireAuth?: boolean;
+    /**
+     * The list-pagination bounds the REST layer applies, so the spec states the
+     * ones a request will actually meet.
+     *
+     * These were hardcoded as `default: 20, maximum: 100` — neither of which
+     * the server has ever used. The spec drives the API Explorer and is what a
+     * generated client is built from, so an understated ceiling is a request
+     * the client refuses to make, and an overstated one is a 400 nobody
+     * predicted.
+     */
+    listLimits?: {
+        defaultLimit?: number;
+        maxLimit?: number;
+    };
 }
 export declare function generateOpenApiSpec(collections: CollectionConfig[], options?: OpenApiGeneratorOptions): Record<string, unknown>;

package/dist/api/rest/idempotency.d.ts

@@ -1,9 +1,46 @@
 import { DataDriver } from "@rebasepro/types";
+/**
+ * What a caller may do with a key.
+ *
+ * `claimed` is the only outcome that permits the write. Recalling and then
+ * writing was not atomic: two requests carrying one key both missed the recall,
+ * both wrote, and `ON CONFLICT DO NOTHING` protected only the second row in
+ * *this* table — the duplicate row in the caller's collection, which is the
+ * thing the mechanism exists to prevent, was inserted anyway. The offline queue
+ * is shared across tabs, so two tabs reconnecting together is the ordinary case
+ * rather than an exotic one.
+ */
+export type IdempotencyClaim = 
+/** This key has already been answered; serve that answer again. */
+{
+    status: "replay";
+    response: unknown;
+}
+/** Another request holds this key and has not answered yet. */
+ | {
+    status: "in-flight";
+}
+/** The key is ours; do the write, then `complete` or `release` it. */
+ | {
+    status: "claimed";
+};
 export interface IdempotencyStore {
-    /** What this key answered before, or `undefined` if it is new. */
-    recall(key: string, uid: string | undefined): Promise<unknown | undefined>;
-    /** Record what this key answered. Never throws — see {@link createIdempotencyStore}. */
-    remember(key: string, uid: string | undefined, response: unknown): Promise<void>;
+    /**
+     * Take the key if it is free, atomically. Never throws — a store that
+     * cannot answer reports `claimed`, which degrades to no idempotency rather
+     * than to a refused write.
+     */
+    claim(key: string, uid: string | undefined): Promise<IdempotencyClaim>;
+    /** Record what this key answered. Never throws. */
+    complete(key: string, uid: string | undefined, response: unknown): Promise<void>;
+    /**
+     * Give the key back after the write it was claimed for failed.
+     *
+     * Without this a transient failure strands the key: every retry would be
+     * told `in-flight` until the row aged out, turning one failed write into a
+     * day of refusals.
+     */
+    release(key: string, uid: string | undefined): Promise<void>;
 }
 /**
  * Returns `undefined` when the driver cannot run SQL, which disables the whole

package/dist/api/rest/write-validation.d.ts

@@ -33,11 +33,18 @@ export declare function assertKnownWriteFields(values: Record<string, unknown>,
  * This shapes the *response*, which is what the parameter says it does; it is
  * not a column pushdown, so it saves bandwidth rather than database work.
  *
- * `id` always survives. Rows are addressed by it everywhere above this layer —
- * the admin table, realtime reconciliation, the offline cache — and a row that
- * arrives without one is not a smaller row, it is an unusable one. Asking for
- * `fields=title` and being unable to open the record you clicked is a worse
- * answer than one extra key.
+ * The collection's key always survives. Rows are addressed by it everywhere
+ * above this layer — the admin table, realtime reconciliation, the offline
+ * cache — and a row that arrives without one is not a smaller row, it is an
+ * unusable one. Asking for `fields=title` and being unable to open the record
+ * you clicked is a worse answer than one extra key.
+ *
+ * That is a statement about the key, not about the name `id`: a collection
+ * keyed on `slug`, or on `user_id + role_id`, was projected down to the fields
+ * asked for and nothing else, which is the very outcome the paragraph above
+ * describes. `assertKnownWriteFields` one function up already has a dedicated
+ * error for collections with no `id` column, so this layer had no excuse for
+ * assuming one.
  */
 export declare function projectResponseFields<T extends Record<string, unknown>>(rows: T[], fields: readonly string[] | undefined, collection: CollectionConfig, options?: {
     include?: readonly string[];

package/dist/{auth-ByFdJcuM.js → auth-DU4ShERo.js}

@@ -2,38 +2,16 @@ import { createRequire as __createRequire } from "module";
 import process from "process";
 __createRequire(import.meta.url);
 import { i as __toESM, n as __exportAll } from "./rolldown-runtime-DSJWtz9O.js";
-import { _ as ANONYMOUS_USER_ID, v as isAnonymousUid } from "./src-Cum9kox5.js";
+import { S as isAnonymousUid, b as resolveClientListLimit, x as ANONYMOUS_USER_ID } from "./src-CKOZBpeJ.js";
 import "./src-_qQ3RNCK.js";
 import { t as isSQLAdmin } from "./backend-CIxN4FVm.js";
 import { t as logger } from "./logger-BYU66ENZ.js";
-import { n as errorHandler, t as ApiError } from "./errors-CgkCzoj7.js";
+import { n as errorHandler, t as ApiError } from "./errors-BpudWAVU.js";
 import { a as generateRefreshToken, c as getRefreshTokenTtlMs, f as verifyAccessToken, i as generateDownloadToken, l as hashRefreshToken, m as require_jsonwebtoken, n as configureJwt, o as getAccessTokenExpiry, p as verifyDownloadToken, r as generateAccessToken, s as getRefreshTokenExpiry, t as MAX_COOKIE_AGE_MS, u as isJwtConfigured } from "./jwt-CzeviDcB.js";
 import { createHash, randomBytes, randomInt } from "node:crypto";
 import { Hono } from "hono";
 import { promisify } from "util";
 import { createCipheriv, createDecipheriv, createHash as createHash$1, createHmac, randomBytes as randomBytes$1, randomUUID as randomUUID$1, scrypt, timingSafeEqual } from "crypto";
-/** Hard ceiling clamped onto any client-supplied `limit`, on every surface. */
-var MAX_LIST_LIMIT = 1e3;
-/**
-* Resolve a client-supplied list `limit` into a safe, always-defined value.
-*
-* - A provided limit is coerced to an integer and clamped to `[1, maxLimit]`,
-*   so `0`, negatives, and absurd values can never bypass the cap.
-* - An absent / blank / non-numeric limit falls back to the mode default:
-*   `vectorDefaultLimit` for a vector search, otherwise `defaultLimit`.
-*
-* The return is never `undefined` — no ingress that routes its client limit
-* through this can produce an unbounded read.
-*/
-function resolveClientListLimit(rawLimit, opts = {}) {
-	const maxLimit = opts.maxLimit ?? 1e3;
-	if (rawLimit != null && String(rawLimit).trim() !== "") {
-		const parsed = typeof rawLimit === "number" ? rawLimit : parseInt(String(rawLimit), 10);
-		if (Number.isFinite(parsed)) return Math.min(Math.max(1, Math.floor(parsed)), maxLimit);
-	}
-	return opts.vectorSearch ? opts.vectorDefaultLimit ?? 10 : opts.defaultLimit ?? 50;
-}
-//#endregion
 //#region ../types/src/controllers/storage.ts
 /**
 * Path prefix that marks an object as **public**. Files stored under this
@@ -1492,6 +1470,11 @@ async function finalizeAdminUserCreation(entity, clearPassword, ctx) {
 var scryptAsync = promisify(scrypt);
 var SALT_LENGTH = 32;
 var KEY_LENGTH = 64;
+var SCRYPT_PARAMS = {
+	N: 16384,
+	r: 8,
+	p: 1
+};
 /**
 * Password requirements:
 * - Minimum 8 characters
@@ -1516,7 +1499,7 @@ function validatePasswordStrength(password) {
 */
 async function hashPassword(password) {
 	const salt = randomBytes$1(SALT_LENGTH);
-	const derivedKey = await scryptAsync(password, salt, KEY_LENGTH);
+	const derivedKey = await scryptAsync(password, salt, KEY_LENGTH, SCRYPT_PARAMS);
 	return `${salt.toString("hex")}:${derivedKey.toString("hex")}`;
 }
 /**
@@ -1528,7 +1511,7 @@ async function verifyPassword(password, storedHash) {
 	if (!saltHex || !hashHex) return false;
 	const salt = Buffer.from(saltHex, "hex");
 	const storedKey = Buffer.from(hashHex, "hex");
-	return timingSafeEqual(await scryptAsync(password, salt, KEY_LENGTH), storedKey);
+	return timingSafeEqual(await scryptAsync(password, salt, KEY_LENGTH, SCRYPT_PARAMS), storedKey);
 }
 //#endregion
 //#region src/auth/auth-hooks.ts
@@ -6550,11 +6533,6 @@ function createAuthRoutes(config) {
 		newPassword: string().min(1, "New password is required").max(128)
 	});
 	const refreshSchema = object({ refreshToken: string().min(1).optional() });
-	object({ refreshToken: string().optional() });
-	object({
-		displayName: string().max(255).optional(),
-		photoURL: string().url().max(2048).optional()
-	});
 	/** Parse a Zod schema against the request body, throwing ApiError on failure */
 	function parseBody(schema, body) {
 		const result = schema.safeParse(body);
@@ -8958,6 +8936,6 @@ var auth_exports = /* @__PURE__ */ __exportAll({
 	verifyPassword: () => verifyPassword
 });
 //#endregion
-export { httpMethodToOperation as $, getEmailVerificationTemplate as A, optionalAuth as B, createDataRateLimiter as C, validatePasswordStrength as D, hashPassword as E, createAdapterAuthMiddleware as F, createApiKeyPreAuth as G, queryTokenAuth as H, createAuthMiddleware as I, isApiKeyToken as J, createFunctionApiKeyGuard as K, createRequireAuth as L, getPasswordResetTemplate as M, getUserInvitationTemplate as N, verifyPassword as O, getWelcomeEmailTemplate as P, scopeDataDriver as Q, extractUserFromToken as R, _coercedNumber as S, resolveAuthHooks as T, requireAdmin as U, publicObjectAuth as V, requireAuth as W, extractBearerToken as X, validateApiKey as Y, safeCompare as Z, createBuiltinAuthAdapter as _, createSpotifyProvider as a, object as b, createGitLabProvider as c, createFacebookProvider as d, isOperationAllowed as et, createAppleProvider as f, createGoogleProvider as g, createLinkedinProvider as h, createApiKeyStore as i, resolveClientListLimit as it, getMagicLinkTemplate as j, generateSecurePassword as k, createDiscordProvider as l, createGitHubProvider as m, createCustomAuthAdapter as n, isPublicStoragePath as nt, createSlackProvider as o, createMicrosoftProvider as p, createStorageApiKeyGuard as q, createApiKeyRoutes as r, MAX_LIST_LIMIT as rt, createBitbucketProvider as s, auth_exports as t, PUBLIC_STORAGE_PREFIX as tt, createTwitterProvider as u, ZodNumber as v, MemoryRateLimitStore as w, string as x, _enum as y, fileTokenAuth as z };
+export { httpMethodToOperation as $, getEmailVerificationTemplate as A, optionalAuth as B, createDataRateLimiter as C, validatePasswordStrength as D, hashPassword as E, createAdapterAuthMiddleware as F, createApiKeyPreAuth as G, queryTokenAuth as H, createAuthMiddleware as I, isApiKeyToken as J, createFunctionApiKeyGuard as K, createRequireAuth as L, getPasswordResetTemplate as M, getUserInvitationTemplate as N, verifyPassword as O, getWelcomeEmailTemplate as P, scopeDataDriver as Q, extractUserFromToken as R, _coercedNumber as S, resolveAuthHooks as T, requireAdmin as U, publicObjectAuth as V, requireAuth as W, extractBearerToken as X, validateApiKey as Y, safeCompare as Z, createBuiltinAuthAdapter as _, createSpotifyProvider as a, object as b, createGitLabProvider as c, createFacebookProvider as d, isOperationAllowed as et, createAppleProvider as f, createGoogleProvider as g, createLinkedinProvider as h, createApiKeyStore as i, getMagicLinkTemplate as j, generateSecurePassword as k, createDiscordProvider as l, createGitHubProvider as m, createCustomAuthAdapter as n, isPublicStoragePath as nt, createSlackProvider as o, createMicrosoftProvider as p, createStorageApiKeyGuard as q, createApiKeyRoutes as r, createBitbucketProvider as s, auth_exports as t, PUBLIC_STORAGE_PREFIX as tt, createTwitterProvider as u, ZodNumber as v, MemoryRateLimitStore as w, string as x, _enum as y, fileTokenAuth as z };
 
-//# sourceMappingURL=auth-ByFdJcuM.js.map
+//# sourceMappingURL=auth-DU4ShERo.js.map