@rebasepro/server 0.25.0-canary.ge06257e → 0.25.0

package/dist/index.es.js

@@ -7,37 +7,37 @@ import { a as MAX_LIST_LIMIT, c as RebaseClientError, l as isUnsupported, n as s
 import { C as isFieldOperation, T as EntityRelation, _ as normalizeOrderBy, b as BATCH_REF_KEY, c as collectAllPages, g as OrderBySpecError, l as paginateFind, m as normalizeInclude, p as mergeIncludeSpecs, r as deserializeFilter, t as RESERVED_QUERY_KEYS, u as resolveFindWindow, v as serializeOrderBy, x as FIELD_OPERATORS, y as withRelationReferencesOnly } from "./filter-dialect-O1HK6Nvr.js";
 import { A as DEFAULT_RESOURCE_KEY, C as declaredSubscriptions, D as setTopicRuntime, E as setQueueRuntime, F as resourceKind, G as DEFAULT_DATA_SOURCE_KEY, H as getDeclaredSubcollections, I as resourceKinds, K as getDataSourceCapabilities, L as RLS_JWT_SQL, M as resolveResourceRefs, N as resourceEnvSuffix, O as DEFAULT_STORAGE_SOURCE_KEY, P as resourceKeyOf, R as RLS_ROLES_SQL, S as declaredQueueConsumers, T as resourceToStorageSource, U as isPostgresCollectionConfig, V as getCollectionDataPath, _ as scopesForRoles, c as intersectScopes, et as sortKeyToString, h as scopeGrantsAny, j as buildResourceGraph, k as storageEnvSuffix, m as scopeGrants, p as parseScope, q as ALL_WHERE_FILTER_OPS, s as hasAdminRole, w as resourceToDataSource, y as summarizeScopes, z as RLS_UID_SQL } from "./src-D5Y3N-S4.js";
 import { a as nestCollectionPatchPaths, c as ADMIN_PROPERTY_KEYS, i as isCollectionPatch, n as collectionPatchProblems, r as diffCollections, s as ADMIN_COLLECTION_KEYS, t as applyCollectionPatch } from "./collection_patch-BRu-BvDv.js";
-import { a as softDeleteFieldOf, c as JUNCTION_PIVOT_KEY, i as restoresSoftDeletedRow, l as hasForeignKeyOnTarget, n as buildCollectionSchema, o as buildTenantSecurityRule, s as INCLUDE_COUNT_KEY, t as buildCollectionInputSchema, u as isManyToMany } from "./openapi-generator-IKwDAQGO.js";
+import { a as softDeleteFieldOf, c as JUNCTION_PIVOT_KEY, i as restoresSoftDeletedRow, l as hasForeignKeyOnTarget, n as buildCollectionSchema, o as buildTenantSecurityRule, s as INCLUDE_COUNT_KEY, t as buildCollectionInputSchema, u as isManyToMany } from "./openapi-generator-BamY6-ga.js";
 import { n as isAnonymousUid, r as policy } from "./policy-PdzX-Opd.js";
 import { n as isSchemaEditingAdmin, t as isSQLAdmin } from "./backend-DTAOsLQc.js";
 import { a as parseEnvBoolean, i as validateCronExpression, t as CronScheduler } from "./cron-scheduler-D1DT0nw5.js";
 import { n as isValidAppHost, r as reservedPrefixFor, t as SCHEMA_VERSION_HEADER } from "./project_manifest-R6y_KHms.js";
 import { n as createContractRoutes, r as computeSchemaVersion } from "./contract-routes-DiFwiLg2.js";
-import { $ as optionalAuth, $t as raw, A as createAuthLimiters, At as setDefaultAccessControl, B as registerDevEmailSink, Bt as resolveEmailLinkBase, C as createPersonalKeyRoutes, Ct as configureAccess, D as configureUserPicking, Dt as processAccessControl, E as createBuiltinAuthAdapter, Et as keyOwnerResolverFor, F as MemoryRateLimitStore, Ft as supportsRlsScoping, G as validatePasswordStrength, Gt as getMagicLinkTemplate, H as createEmailService, Ht as getEmailChangeTemplate, I as activeDevEmailSink, It as isAccessTokenRevoked, J as createAdapterAuthMiddleware, Jt as getWelcomeEmailTemplate, K as verifyPassword, Kt as getPasswordResetTemplate, L as clearActiveDevEmailSink, Lt as completeUserCreation, M as createDataRateLimiter, Mt as safeCompare, N as createRateLimiter, Nt as SERVICE_IDENTITY, O as isBootstrapWindowOpen, Ot as requireScope, P as setSharedRateLimitStore, Pt as scopeDataDriver, Q as fileTokenAuth, Qt as html, R as createDevEmailSink, Rt as generateSecurePassword, S as createApiKeyRoutes, St as callerScopes, T as createJwksRoutes, Tt as hasScope, U as resolveAuthHooks, Ut as getEmailOtpTemplate, V as SMTPEmailService, Vt as getEmailChangeNoticeTemplate, W as hashPassword, Wt as getEmailVerificationTemplate, X as createRequireAuth, Xt as RawHtml, Y as createAuthMiddleware, Yt as resolveEmailBranding, Z as extractUserFromToken, Zt as escapeHtml, _ as oauthCodeFlowSchema, _t as isApiKeyToken, a as createBitbucketProvider, an as storageObjectPath, at as userFromToken, b as resolveRateLimitStoreKind, bt as accessModelFromCollections, c as createTwitterProvider, ct as isPublicObjectGrant, d as createMicrosoftProvider, dt as storageRequestWildcard, en as httpMethodToOperation, et as publicObjectAuth, f as tryVerifyOidcIdToken, ft as decideImpersonation, g as createGoogleProvider, gt as createTusScopeGuard, h as createLinkedinProvider, ht as createFunctionScopeGuard, i as createSlackProvider, in as isPublicStoragePath, it as requireAuth, j as createDataRateLimitCheck, jt as extractBearerToken, k as DEFAULT_FUNCTIONS_ANONYMOUS_LIMIT, kt as requireScopeByMethod, l as createFacebookProvider, lt as requestedStorageObject, m as createGitHubProvider, mt as createApiKeyPreAuth, n as createCustomAuthAdapter, nn as PUBLIC_STORAGE_PREFIX, nt as refuse$1, o as createGitLabProvider, ot as PUBLIC_OBJECT_PRINCIPAL, p as verifyOidcIdToken, pt as refuseUnhonouredImpersonation, q as adapterRefusal, qt as getUserInvitationTemplate, r as createSpotifyProvider, rn as isPublicStorageKey, rt as requireAdmin, s as createDiscordProvider, st as isDownloadTokenGrant, tn as securityRuleToConditions, tt as queryTokenAuth, u as createAppleProvider, ut as storageObjectOfPath, v as pkceTokenParams, vt as resolveApiKey, w as createApiKeyStore, wt as getAccessModel, x as createSqlRateLimitStore, xt as accessOf, y as providerVerifiedEmail, yt as validateApiKey, z as extractLinks, zt as assertEmailLinkBases } from "./auth-xk37vrHO.js";
+import { $ as optionalAuth, $t as raw, A as createAuthLimiters, At as setDefaultAccessControl, B as registerDevEmailSink, Bt as resolveEmailLinkBase, C as createPersonalKeyRoutes, Ct as configureAccess, D as configureUserPicking, Dt as processAccessControl, E as createBuiltinAuthAdapter, Et as keyOwnerResolverFor, F as MemoryRateLimitStore, Ft as supportsRlsScoping, G as validatePasswordStrength, Gt as getMagicLinkTemplate, H as createEmailService, Ht as getEmailChangeTemplate, I as activeDevEmailSink, It as isAccessTokenRevoked, J as createAdapterAuthMiddleware, Jt as getWelcomeEmailTemplate, K as verifyPassword, Kt as getPasswordResetTemplate, L as clearActiveDevEmailSink, Lt as completeUserCreation, M as createDataRateLimiter, Mt as safeCompare, N as createRateLimiter, Nt as SERVICE_IDENTITY, O as isBootstrapWindowOpen, Ot as requireScope, P as setSharedRateLimitStore, Pt as scopeDataDriver, Q as fileTokenAuth, Qt as html, R as createDevEmailSink, Rt as generateSecurePassword, S as createApiKeyRoutes, St as callerScopes, T as createJwksRoutes, Tt as hasScope, U as resolveAuthHooks, Ut as getEmailOtpTemplate, V as SMTPEmailService, Vt as getEmailChangeNoticeTemplate, W as hashPassword, Wt as getEmailVerificationTemplate, X as createRequireAuth, Xt as RawHtml, Y as createAuthMiddleware, Yt as resolveEmailBranding, Z as extractUserFromToken, Zt as escapeHtml, _ as oauthCodeFlowSchema, _t as isApiKeyToken, a as createBitbucketProvider, an as storageObjectPath, at as userFromToken, b as resolveRateLimitStoreKind, bt as accessModelFromCollections, c as createTwitterProvider, ct as isPublicObjectGrant, d as createMicrosoftProvider, dt as storageRequestWildcard, en as httpMethodToOperation, et as publicObjectAuth, f as tryVerifyOidcIdToken, ft as decideImpersonation, g as createGoogleProvider, gt as createTusScopeGuard, h as createLinkedinProvider, ht as createFunctionScopeGuard, i as createSlackProvider, in as isPublicStoragePath, it as requireAuth, j as createDataRateLimitCheck, jt as extractBearerToken, k as DEFAULT_FUNCTIONS_ANONYMOUS_LIMIT, kt as requireScopeByMethod, l as createFacebookProvider, lt as requestedStorageObject, m as createGitHubProvider, mt as createApiKeyPreAuth, n as createCustomAuthAdapter, nn as PUBLIC_STORAGE_PREFIX, nt as refuse$1, o as createGitLabProvider, ot as PUBLIC_OBJECT_PRINCIPAL, p as verifyOidcIdToken, pt as refuseUnhonouredImpersonation, q as adapterRefusal, qt as getUserInvitationTemplate, r as createSpotifyProvider, rn as isPublicStorageKey, rt as requireAdmin, s as createDiscordProvider, st as isDownloadTokenGrant, tn as securityRuleToConditions, tt as queryTokenAuth, u as createAppleProvider, ut as storageObjectOfPath, v as pkceTokenParams, vt as resolveApiKey, w as createApiKeyStore, wt as getAccessModel, x as createSqlRateLimitStore, xt as accessOf, y as providerVerifiedEmail, yt as validateApiKey, z as extractLinks, zt as assertEmailLinkBases } from "./auth-CteGWxsL.js";
 import { a as redactSensitiveText, i as rawQueryLoggingEnabled, l as hostEnv, n as describeCauseChain, o as setLogLevel, r as logger, s as setLogOutput } from "./logger-Bt32sHFw.js";
-import { a as apiHiddenFieldNames, c as fieldKeyForColumn, d as isJunctionBackedRelation, g as toWireKey, h as resolveRelation, l as findRelation, m as resolveCollectionRelations, n as HARD_DELETE_QUERY_PARAM, p as relationDeclaringProperty, r as parseHardDelete, s as restrictedFieldNames, u as getTableName } from "./soft-delete-params-uHxJoETb.js";
+import { a as apiHiddenFieldNames, c as fieldKeyForColumn, d as isJunctionBackedRelation, g as toWireKey, h as resolveRelation, l as findRelation, m as resolveCollectionRelations, n as HARD_DELETE_QUERY_PARAM, p as relationDeclaringProperty, r as parseHardDelete, s as restrictedFieldNames, u as getTableName } from "./soft-delete-params-BAgpmBvp.js";
 import { c as createTransport, d as parseRebaseJson, h as unref, l as defaultCodeForStatus, m as withETag, o as createCollectionClient, p as etagOf, r as SDKQueryBuilder, u as invalidBulkBody } from "./offline-store-BhYXViha-BW5j1We_.js";
 import "./resumable-upload-threshold-CKv-Ry0l.js";
 import { n as revokeInternalTableSql } from "./internal-tables-L2t39RdT.js";
 import { i as warnDeprecated } from "./load-failure-L5hvfDoG.js";
-import { a as resolveListLimitParam, c as assertReadableFields, d as decodeCursor$1, f as reconcileCursorOrder, i as parseQueryOptions, l as requestViewer, n as parseAggregateSelect, o as assertNoHiddenAggregateNames, r as parseGroupBy, s as assertQueryFieldsReadable, t as orderByEntriesToTuples, u as cursorToStartAfter } from "./query-parser-BnhugNwZ.js";
-import { a as isDataException, i as errorHandler, n as DATABASE_UNAVAILABLE_MESSAGE, o as isDatabaseUnreachable, r as declaredErrorAnswer, s as schemaDriftRemedy, t as ApiError } from "./errors-CHSJYpoy.js";
+import { a as resolveListLimitParam, c as assertReadableFields, d as decodeCursor$1, f as reconcileCursorOrder, i as parseQueryOptions, l as requestViewer, n as parseAggregateSelect, o as assertNoHiddenAggregateNames, r as parseGroupBy, s as assertQueryFieldsReadable, t as orderByEntriesToTuples, u as cursorToStartAfter } from "./query-parser-CGohjyWI.js";
+import { a as isDataException, i as errorHandler, n as DATABASE_UNAVAILABLE_MESSAGE, o as isDatabaseUnreachable, r as declaredErrorAnswer, s as schemaDriftRemedy, t as ApiError } from "./errors-_ytoGi8A.js";
 import { C as randomHex, E as sha256Hex, S as constantTimeEqual, T as sha256Bytes, b as normalizePemFromEnv, d as hasAsymmetricSigningKey, g as setDefaultJwtService, h as processJwtService, l as getJwks, m as jwtOf, n as configureJwt, r as createJwtService, y as verifyJwt } from "./jwt-YhciR93H.js";
 import { a as canonicalStorageId, i as canonicalStorageBucket, n as InvalidStorageBucketError, o as canonicalStorageKey, r as InvalidStorageKeyError, t as InvalidListOptionsError } from "./keys-COzQ2aE8.js";
-import { t as logMiddleware } from "./logs-routes-BM2cDory.js";
-import { a as readStreamFully, c as DOCUMENT_MIME_TYPES, i as fileWebStream, l as IMAGE_MIME_TYPES, r as bytesView, s as DEFAULT_MAX_FILE_SIZE, t as validateUploadedFile } from "./upload-validation-pXcDy_EQ.js";
-import { t as S3StorageController } from "./S3StorageController-Kt-LJpf3.js";
-import { t as GCSStorageController } from "./GCSStorageController-CAKa_EFW.js";
+import { t as logMiddleware } from "./logs-routes-CelTiS7C.js";
+import { a as readStreamFully, c as DOCUMENT_MIME_TYPES, i as fileWebStream, l as IMAGE_MIME_TYPES, r as bytesView, s as DEFAULT_MAX_FILE_SIZE, t as validateUploadedFile } from "./upload-validation-I9cCUBIW.js";
+import { t as S3StorageController } from "./S3StorageController-qevJ0pVE.js";
+import { t as GCSStorageController } from "./GCSStorageController-C7ARrDAp.js";
 import { a as isDuplicateObjectRace, i as isConcurrentDdlRace, n as createDdlBootstrapper, t as CONCURRENT_DDL_SQLSTATES } from "./ddl-bootstrap-BNqi2NZe.js";
 import { t as createCronStore } from "./cron-store-DEpVstUU.js";
 import { i as loadFunctionsWithDiagnostics, n as loadFunctions, r as loadFunctionsFromDirectory } from "./function-loader-DbCSoNJj.js";
-import { a as getDriver, c as getUser, d as identityResolved, f as isAdmin, i as getApiKey, l as getUserId, m as requireDriver, o as getRequestId, p as isAuthenticated, r as requireRole, s as getRoles, t as createFunctionRoutes, u as hasRole } from "./function-routes-C0emkHtX.js";
+import { a as getDriver, c as getUser, d as identityResolved, f as isAdmin, i as getApiKey, l as getUserId, m as requireDriver, o as getRequestId, p as isAuthenticated, r as requireRole, s as getRoles, t as createFunctionRoutes, u as hasRole } from "./function-routes-DNV4RUF0.js";
 import "./proxy-BEKbsil6.js";
-import "./request-timeout-LiGpCCP1.js";
+import "./request-timeout-CRny5KD0.js";
 import { t as FunctionSelectionError } from "./selection-CRpqKUbt.js";
 import { a as loadCrons, i as loadCronJobsWithDiagnostics, n as declareCrons, r as loadCronJobsFromDirectory } from "./cron-loader-NHqRfKF0.js";
-import { t as createCronRoutes } from "./cron-routes-CPIhdasM.js";
-import { a as listBackupObjects, c as readBackupBytes, i as backupStorageFromEnv, n as createBackupLinkRoutes, o as parseBackupDestination, r as createBackupRoutes, s as parseBackupTimestamp } from "./backup-CpaJWXSc.js";
+import { t as createCronRoutes } from "./cron-routes-Dhf82HzT.js";
+import { a as listBackupObjects, c as readBackupBytes, i as backupStorageFromEnv, n as createBackupLinkRoutes, o as parseBackupDestination, r as createBackupRoutes, s as parseBackupTimestamp } from "./backup-Dq0lyJ_D.js";
 import { a as defaultBackoff, i as createJobQueue, n as createJobStore, o as currentAmbientTransaction, r as PermanentJobError } from "./jobs-8G-_agld.js";
 import { t as METRIC_SERIES } from "./history-store-DPofGVDp.js";
 import { createHash, createSign, randomBytes } from "node:crypto";
@@ -92,6 +92,41 @@ import { pipeline as pipeline$1 } from "node:stream/promises";
 */
 var DEFAULT_COMMIT_PATHS = { schemaFile: "backend/src/schema.generated.ts" };
 //#endregion
+//#region ../types/src/types/content_hash.ts
+/**
+* Whether a static build's file name carries a content hash: the files the
+* runtime serves `immutable` for a year, and the ones `rebase build` writes
+* `.br` and `.gz` beside. One rule for both, so a file is never precompressed
+* and revalidated, or cached for a year and compressed on every request.
+*
+* Two shapes count:
+*
+* - **Vite's own**, `[name]-[hash]`: the last eight characters of the name,
+*   after a `-`. They are base64url, an alphabet with `-` and `_` in it, so
+*   about one hash in eight holds a `-` (`index-C-WpENHZ.js`,
+*   `page10-D6Dq--fD.js`), and the last `-` is not where it starts.
+* - **A longer one** with no `-` in it, eight characters or more after the last
+*   `-` (`[hash:12]`, another bundler's names).
+*
+* Either must hold a digit or a capital. That is the evidence of a hash: a
+* hand-written `vendor-analytics.js` is not taken for one, and gets revalidated
+* rather than pinned in every visitor's cache with no way to recall it.
+*/
+function isContentHashedFileName(fileName) {
+	const dot = fileName.lastIndexOf(".");
+	if (dot <= 0) return false;
+	const stem = fileName.slice(0, dot);
+	if (stem.length > 9 && stem[stem.length - 9] === "-" && looksLikeHash(stem.slice(-8))) return true;
+	const dash = stem.lastIndexOf("-");
+	if (dash < 0) return false;
+	const suffix = stem.slice(dash + 1);
+	return suffix.length >= 8 && looksLikeHash(suffix);
+}
+/** Base64url throughout, with a digit or a capital somewhere in it. */
+function looksLikeHash(text) {
+	return /^[A-Za-z0-9_-]+$/.test(text) && /[0-9A-Z]/.test(text);
+}
+//#endregion
 //#region ../types/src/controllers/storage-references.ts
 /**
 * The scheme of a **storage reference**: a stored object named inside text.
@@ -18407,11 +18442,11 @@ async function createStorageController(config) {
 	switch (config.type) {
 		case "local": return new LocalStorageController(config);
 		case "s3": {
-			const { S3StorageController } = await import("./S3StorageController-Kt-LJpf3.js").then((n) => n.n);
+			const { S3StorageController } = await import("./S3StorageController-qevJ0pVE.js").then((n) => n.n);
 			return new S3StorageController(config);
 		}
 		case "gcs": {
-			const { GCSStorageController } = await import("./GCSStorageController-CAKa_EFW.js").then((n) => n.n);
+			const { GCSStorageController } = await import("./GCSStorageController-C7ARrDAp.js").then((n) => n.n);
 			return new GCSStorageController(config);
 		}
 		default: throw new Error(`Unknown storage type: ${config.type}. Built-in types: local, s3, gcs. For other providers, implement the StorageController interface directly.`);
@@ -18650,7 +18685,7 @@ function noCollectionsCause(unprotected) {
 * routes wherever and as often as the application asks.
 */
 async function loadOpenApiGenerator() {
-	const { generateOpenApiSpec } = await import("./openapi-generator-IKwDAQGO.js").then((n) => n.r);
+	const { generateOpenApiSpec } = await import("./openapi-generator-BamY6-ga.js").then((n) => n.r);
 	return generateOpenApiSpec;
 }
 /**
@@ -25207,8 +25242,14 @@ function assertNoSharedLocation(resolved, env, options) {
 		if (other) {
 			const [moved, kept] = key === "(default)" ? [other.key, key] : [key, other.key];
 			const movedLocation = moved === key ? location : other.location;
+			const keptLocation = moved === key ? other.location : location;
 			const variable = `${movedLocation.variable}${envSuffixForKey(moved, DEFAULT_STORAGE_SOURCE_KEY)}`;
-			throw new BundleError(`Storage sources "${moved}" and "${kept}" would both store files in ${movedLocation.describe}, so each would list, serve and delete the other's files.`, `Give "${moved}" a ${movedLocation.local !== void 0 ? "directory" : "bucket"} of its own with ${variable}.` + (kept === "(default)" ? ` If uploads that name no \`storageSource\` belong in "${moved}", mark it instead — bucket("${moved}", { default: true }).` : ""));
+			const alias = kept === "(default)" ? ` If uploads that name no \`storageSource\` belong in "${moved}", mark it instead — bucket("${moved}", { default: true }).` : "";
+			if (movedLocation.local !== void 0 && keptLocation.local !== void 0 && movedLocation.local !== keptLocation.local) {
+				const inside = movedLocation.local.startsWith(keptLocation.local + path$1.sep);
+				throw new BundleError(`Storage source "${moved}" would store its files in ${movedLocation.local}, which ${inside ? "is inside" : "holds"} ${keptLocation.local}, where "${kept}" stores its own, so each would list, serve and delete the other's files.`, `Give "${moved}" a directory ${inside ? "outside" : "apart from"} ${keptLocation.local} with ${variable} (it is ${movedLocation.local} now).${alias}`);
+			}
+			throw new BundleError(`Storage sources "${moved}" and "${kept}" would both store files in ${movedLocation.describe}, so each would list, serve and delete the other's files.`, `Give "${moved}" a ${movedLocation.local !== void 0 ? "directory" : "bucket"} of its own with ${variable}.${alias}`);
 		}
 		seen.push({
 			key,
@@ -26229,7 +26270,7 @@ async function createRebaseBackend(options) {
 	const platformTokenPreAuth = createPlatformTokenPreAuth(await platformTokensFromEnv(process.env));
 	let backupLinkRouter;
 	if (surfaces.admin) {
-		const { createBackupLinkRoutes, backupDestinationFromEnv } = await import("./backup-CpaJWXSc.js").then((n) => n.t);
+		const { createBackupLinkRoutes, backupDestinationFromEnv } = await import("./backup-Dq0lyJ_D.js").then((n) => n.t);
 		backupLinkRouter = createBackupLinkRoutes({ getDestination: () => backupDestinationFromEnv(process.env) });
 	}
 	const apiKeyRouter = apiKeyStore && surfaces.admin ? createApiKeyRoutes({
@@ -26374,7 +26415,7 @@ async function createRebaseBackend(options) {
 			]) {
 				const providerConfig = safeAuthConfig[key];
 				if (providerConfig && requiredFields.every((f) => Boolean(providerConfig[f]))) {
-					const createFn = (await import("./auth-xk37vrHO.js").then((n) => n.t))[factory];
+					const createFn = (await import("./auth-CteGWxsL.js").then((n) => n.t))[factory];
 					oauthProviders.push(createFn(providerConfig));
 				}
 			}
@@ -26550,7 +26591,7 @@ async function createRebaseBackend(options) {
 	let schemaEditorRoutes;
 	let schemaSourceEditor;
 	if (!schemaEditorOff && config.collectionsDir) try {
-		const editorModule = await import("./schema-editor-routes-zjVKreVQ.js");
+		const editorModule = await import("./schema-editor-routes-CnNGCayU.js");
 		schemaSourceEditor = editorModule.createSchemaSourceEditor(config.collectionsDir);
 		schemaEditorRoutes = editorModule.createSchemaEditorRoutes(schemaSourceEditor);
 	} catch (err) {
@@ -26890,8 +26931,8 @@ async function createRebaseBackend(options) {
 	let functionsSurface;
 	if ((config.functionsDir || config.functions) && surfaces.functions) {
 		const { functionList, readFunctionsDirectory } = await import("./function-loader-DbCSoNJj.js").then((n) => n.t);
-		const { createFunctionRoutes } = await import("./function-routes-C0emkHtX.js").then((n) => n.n);
-		const { createFunctionsRequestTimeout, resolveFunctionsTimeoutMs } = await import("./request-timeout-LiGpCCP1.js").then((n) => n.t);
+		const { createFunctionRoutes } = await import("./function-routes-DNV4RUF0.js").then((n) => n.n);
+		const { createFunctionsRequestTimeout, resolveFunctionsTimeoutMs } = await import("./request-timeout-CRny5KD0.js").then((n) => n.t);
 		const { functions: functionRecord, problems } = config.functions ? {
 			functions: config.functions,
 			problems: []
@@ -26952,7 +26993,7 @@ async function createRebaseBackend(options) {
 	if (surfaces.cron || (config.cronsDir || config.crons) && ownership.cronScheduler) {
 		const { cronJobsFrom, readCronsDirectory } = await import("./cron-loader-NHqRfKF0.js").then((n) => n.t);
 		const { CronScheduler } = await import("./cron-scheduler-D1DT0nw5.js").then((n) => n.n);
-		const { createCronRoutes } = await import("./cron-routes-CPIhdasM.js").then((n) => n.n);
+		const { createCronRoutes } = await import("./cron-routes-Dhf82HzT.js").then((n) => n.n);
 		const { createCronStore } = await import("./cron-store-DEpVstUU.js").then((n) => n.n);
 		const { crons: cronRecord, problems: cronProblems } = config.crons ? {
 			crons: config.crons,
@@ -27063,7 +27104,7 @@ Use a driver that supports the job queue, or remove the declarations. Refusing t
 	let logsSurface;
 	let metaSurface;
 	if (surfaces.admin) {
-		const { createBackupRoutes, backupDestinationFromEnv, readBackupSchedule } = await import("./backup-CpaJWXSc.js").then((n) => n.t);
+		const { createBackupRoutes, backupDestinationFromEnv, readBackupSchedule } = await import("./backup-Dq0lyJ_D.js").then((n) => n.t);
 		const backupRouter = new Hono();
 		applyAdminGate(backupRouter, "Backup", "backups:read");
 		const scheduler = cronScheduler;
@@ -27084,7 +27125,7 @@ Use a driver that supports the job queue, or remove the declarations. Refusing t
 		rlsAuditSurface = rlsAuditRouter;
 	}
 	if (surfaces.admin) {
-		const { createSqlExportRoutes } = await import("./sql-export-routes-D86u7N9i.js");
+		const { createSqlExportRoutes } = await import("./sql-export-routes-BgTJ7K3S.js");
 		const sqlExportRouter = new Hono();
 		applyAdminGate(sqlExportRouter, "SQL export", "database:write");
 		sqlExportRouter.route("/", createSqlExportRoutes({ getAdmin: () => defaultDriver.admin }));
@@ -27114,7 +27155,7 @@ Use a driver that supports the job queue, or remove the declarations. Refusing t
 		devMailSurface = devMailRouter;
 	}
 	if (surfaces.admin) {
-		const { createLogsRoutes } = await import("./logs-routes-BM2cDory.js").then((n) => n.n);
+		const { createLogsRoutes } = await import("./logs-routes-CelTiS7C.js").then((n) => n.n);
 		const logsRouter = new Hono();
 		applyAdminGate(logsRouter, "Logs", "logs:read");
 		logsRouter.route("/", createLogsRoutes({}, { closeSignal: longLivedResponses.signal }));
@@ -29587,26 +29628,17 @@ function isAssetRequest(requestPath, destination) {
 * Erring toward "not hashed" is therefore the safe direction: the cost is a
 * revalidation that usually answers 304, against serving a year-stale file with
 * no way to recall it. So this demands positive evidence of a hash rather than
-* assuming one — a segment of 8+ characters after the last `-` that is not
-* ordinary lowercase prose. Vite and Rollup emit base64url digests, which
-* essentially always carry a digit or a capital; a hand-written
-* `vendor-analytics.js` does not, and gets revalidated.
+* assuming one, by the rule `rebase build` precompresses with
+* (`isContentHashedFileName`): Vite's eight base64url characters after a `-`,
+* or 8+ after the last `-`, with a digit or a capital in them. A hand-written
+* `vendor-analytics.js` has neither, and gets revalidated.
 *
 * Deliberately not "everything under /assets/": that is a Vite convention, not a
 * guarantee, and a build that drops an unhashed file there would have it pinned
 * in every visitor's cache for a year with no way to correct it.
 */
 function isContentHashed(requestPath) {
-	const lastSegment = requestPath.slice(requestPath.lastIndexOf("/") + 1);
-	const dot = lastSegment.lastIndexOf(".");
-	if (dot <= 0) return false;
-	const stem = lastSegment.slice(0, dot);
-	const dash = stem.lastIndexOf("-");
-	if (dash < 0) return false;
-	const suffix = stem.slice(dash + 1);
-	if (suffix.length < 8) return false;
-	if (!/^[A-Za-z0-9_-]+$/.test(suffix)) return false;
-	return /[0-9A-Z]/.test(suffix);
+	return isContentHashedFileName(requestPath.slice(requestPath.lastIndexOf("/") + 1));
 }
 /** A year, and never revalidated: the URL changes when the bytes do. */
 var IMMUTABLE_CACHE = "public, max-age=31536000, immutable";
@@ -32134,7 +32166,7 @@ async function bootFromBundle(options = {}) {
 	}
 	const server = createRuntimeHttpServer(getRequestListener(app.fetch));
 	const usersCollection = await loadUsersCollection(bundle);
-	const storage = resolveStorageSources(process.env, storageSourceDefs, path$1.join(bundle.dir, "uploads"), { production: isProduction });
+	const storage = resolveBootStorage(bundle, process.env, storageSourceDefs, isProduction);
 	warnOnUnusableBundleShape(bundle);
 	installUnhandledRejectionHandler();
 	const createdBackend = await createRebaseBackend({
@@ -32524,6 +32556,61 @@ function warnOnDriverSkew(dataSources, runtimeVersion) {
 	}
 }
 /**
+* The storage step of {@link bootFromBundle}: every storage source this process
+* serves, from the declarations and the environment.
+*
+* Local storage that `STORAGE_PATH` does not place keeps its files in
+* {@link defaultStorageDirectory}.
+*/
+function resolveBootStorage(bundle, env, definitions, production) {
+	const directory = defaultStorageDirectory(bundle);
+	const storage = resolveStorageSources(env, definitions, directory, { production });
+	if (!env.STORAGE_PATH?.trim()) warnOnUploadsLeftInBundle(bundle, directory);
+	return storage;
+}
+/**
+* Where local storage keeps its files when `STORAGE_PATH` names no directory:
+* `<project>/uploads`, where `rebase dev` and the server `rebase eject` writes
+* keep them too.
+*
+* A built bundle that sits inside a project — `rebase start` boots
+* `<project>/dist-bundle` — stores there too, found by the project's
+* `rebase.json`, so `rebase start` serves what `rebase dev` stored. Not inside
+* the bundle: the next `rebase build` deletes that directory and writes it
+* again, and every file in it would go while the rows naming them stay.
+*
+* A bundle with no project around it stores inside the bundle: the runtime
+* image's `/bundle`, a bundle the runtime fetched. A container names its volume
+* with `STORAGE_PATH`, which wins over this either way.
+*/
+function defaultStorageDirectory(bundle) {
+	const root = bundle.isSource ? bundle.dir : findProjectRoot(path$1.dirname(bundle.dir)) ?? bundle.dir;
+	return path$1.join(root, "uploads");
+}
+/**
+* Name the uploads inside a bundle whose local storage is in the project:
+* nothing serves them, and the next `rebase build` deletes them. Silent for a
+* bundle that stores inside itself, and for one that holds none.
+*/
+function warnOnUploadsLeftInBundle(bundle, directory) {
+	if (path$1.dirname(directory) === bundle.dir) return;
+	let entries;
+	try {
+		entries = fs.readdirSync(bundle.dir, { withFileTypes: true });
+	} catch {
+		return;
+	}
+	const left = entries.filter((entry) => entry.isDirectory() && /^uploads(__.+)?$/.test(entry.name)).map((entry) => path$1.join(bundle.dir, entry.name)).filter((dir) => {
+		try {
+			return fs.readdirSync(dir).length > 0;
+		} catch {
+			return false;
+		}
+	});
+	if (left.length === 0) return;
+	logger.warn(`Uploads an earlier version stored inside the bundle are no longer served: ${left.join(", ")}. Local storage keeps its files in ${directory} now, where \`rebase dev\` keeps them, and the next \`rebase build\` deletes the bundle's copy. Move them there (a named bucket's \`uploads__<key>\` goes beside it), or set STORAGE_PATH=${path$1.join(bundle.dir, "uploads")} to keep serving them where they are.`);
+}
+/**
 * Warn about a bundle whose shape makes provisioning impossible.
 *
 * `createRebaseBackend` provisions the collection schema for every boot