@rebasepro/server 0.19.2-canary.g9b599d4 → 0.20.0

package/dist/index.es.js

@@ -3949,10 +3949,12 @@ var RestApiGenerator = class {
 			const id = c.req.param("id");
 			const driver = this.getScopedDriver(c);
 			return this.runIdempotent(c, { id: String(id) }, async () => {
+				const hardDelete = parseHardDelete(c.req.query(HARD_DELETE_QUERY_PARAM));
 				const existingEntity = await driver.fetchOne({
 					path: getCollectionDataPath(collection),
 					id: String(id),
-					collection: resolvedCollection
+					collection: resolvedCollection,
+					withDeleted: hardDelete ? true : void 0
 				});
 				if (!existingEntity) throw this.entityNotFound(collection.slug, String(id));
 				const ifMatch = c.req.header(IF_MATCH_HEADER);
@@ -4115,13 +4117,15 @@ var RestApiGenerator = class {
 			if (!parsed || !parsed.id) return next();
 			const driver = this.getScopedDriver(c);
 			this.enforceSubcollectionApiKeyPermission(c, parsed.collectionPath);
+			const hardDelete = parseHardDelete(c.req.query(HARD_DELETE_QUERY_PARAM));
 			const existingEntity = await driver.fetchOne({
 				path: parsed.collectionPath,
-				id: parsed.id
+				id: parsed.id,
+				withDeleted: hardDelete ? true : void 0
 			});
 			if (!existingEntity) throw this.entityNotFound(parsed.collectionPath, parsed.id);
 			await driver.delete({
-				hard: parseHardDelete(c.req.query(HARD_DELETE_QUERY_PARAM)),
+				hard: hardDelete,
 				row: {
 					id: parsed.id,
 					path: parsed.collectionPath,
@@ -16627,6 +16631,7 @@ async function _initializeRebaseBackend(config) {
 			dir: config.collectionsDir
 		});
 	}
+	enforceAuthSecretExclusion(activeCollections);
 	const introspectCollections = activeCollections.length === 0;
 	if (introspectCollections) logger.info("No collections declared — deriving them from the database schema");
 	else logger.debug("Serving declared collections");