@rebasepro/server 0.9.1-canary.fd3754b → 0.10.0

package/dist/storage/types.d.ts

@@ -78,6 +78,39 @@ export interface GCSStorageConfig {
  * interface and pass the instance directly to the `storage` config.
  */
 export type BackendStorageConfig = LocalStorageConfig | S3StorageConfig | GCSStorageConfig;
+/** What a storage request is trying to do to an object. */
+export type StorageOperation = "read" | "write" | "delete" | "list";
+/** The caller, as resolved by whichever auth middleware ran. */
+export interface StorageAuthorizeUser {
+    uid: string;
+    email?: string;
+    roles?: string[];
+}
+export interface StorageAuthorizeContext {
+    /** Object key, bucket prefix stripped and traversal already sanitized. */
+    key: string;
+    bucket: string;
+    operation: StorageOperation;
+    /** Null when the route allows unauthenticated access. */
+    user: StorageAuthorizeUser | null;
+    /** Named backend the request targeted, when one was given. */
+    storageId?: string;
+}
+/**
+ * Per-object access control for storage, the analogue of an RLS policy on a
+ * collection.
+ *
+ * Without it, storage routes authenticate but do not authorize: `requireAuth`
+ * and `publicRead` are global switches, so any signed-in user could read any
+ * key they could name. That is fine for a single-tenant app and useless for a
+ * multi-tenant one, where the only thing separating two tenants' files would be
+ * key unguessability — not an access-control model. Multi-tenant apps were
+ * left to route every byte through a custom function to get an ownership check
+ * in, and each of them had to invent it.
+ *
+ * Return false (or throw) to deny. Denials surface as 403.
+ */
+export type StorageAuthorize = (ctx: StorageAuthorizeContext) => boolean | Promise<boolean>;
 /**
  * Storage controller interface for backend implementations
  */

package/dist/utils/compression.d.ts

@@ -0,0 +1,16 @@
+import type { MiddlewareHandler } from "hono";
+/**
+ * Response compression (gzip/deflate), negotiated from `Accept-Encoding`.
+ *
+ * Wraps Hono's `compress` with two corrections it does not make itself:
+ *
+ * - **`Vary: Accept-Encoding`** on every response it guards. Without it a shared
+ *   cache may hand a gzipped body to a client that asked for identity.
+ * - **Range responses are left alone.** `Content-Range` describes offsets into
+ *   the identity body, so compressing a 206 desyncs the framing from the bytes
+ *   actually sent.
+ *
+ * No brotli: `CompressionStream` has no "br", so a br-only client would fall
+ * back to identity — every real client sends gzip too.
+ */
+export declare function responseCompression(): MiddlewareHandler;

package/dist/utils/sql.d.ts

@@ -2,10 +2,10 @@ import { SQL } from "drizzle-orm";
 /**
  * Returns a SQL chunk calling `auth.uid()` — the current user's ID.
  * This is a PostgreSQL RLS helper function created in the `auth` schema
- * that reads `app.user_id` set per-transaction by `withAuth()`.
+ * that reads `app.uid` set per-transaction by `withAuth()`.
  *
  * @example
- * sql`${table.user_id} = ${authUid()}`
+ * sql`${table.uid} = ${authUid()}`
  */
 export declare const authUid: () => SQL;
 /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rebasepro/server",
   "type": "module",
-  "version": "0.9.1-canary.fd3754b",
+  "version": "0.10.0",
   "description": "Database-Agnostic Backend Core for Rebase",
   "funding": {
     "url": "https://github.com/sponsors/rebaseco"
@@ -13,12 +13,12 @@
     "url": "https://github.com/rebasepro/rebase.git",
     "directory": "packages/server"
   },
-  "main": "./dist/index.umd.js",
+  "main": "./dist/index.es.js",
   "module": "./dist/index.es.js",
   "types": "./dist/index.d.ts",
   "source": "src/index.ts",
   "engines": {
-    "node": ">=14"
+    "node": ">=20"
   },
   "keywords": [
     "rebase",
@@ -34,24 +34,23 @@
     ".": {
       "types": "./dist/index.d.ts",
       "development": "./dist/index.es.js",
-      "import": "./dist/index.es.js",
-      "require": "./dist/index.umd.js"
+      "import": "./dist/index.es.js"
     },
     "./package.json": "./package.json"
   },
   "dependencies": {
     "@hono/node-server": "2.0.4",
     "drizzle-orm": "^0.45.2",
-    "hono": "^4.12.25",
     "jsonwebtoken": "^9.0.3",
     "ws": "^8.21.0",
     "zod": "^4.4.3",
-    "@rebasepro/client": "0.9.1-canary.fd3754b",
-    "@rebasepro/common": "0.9.1-canary.fd3754b",
-    "@rebasepro/utils": "0.9.1-canary.fd3754b",
-    "@rebasepro/types": "0.9.1-canary.fd3754b"
+    "@rebasepro/types": "0.10.0",
+    "@rebasepro/common": "0.10.0",
+    "@rebasepro/client": "0.10.0",
+    "@rebasepro/utils": "0.10.0"
   },
   "devDependencies": {
+    "@jest/globals": "^30.4.1",
     "@types/jest": "^30.0.0",
     "@types/jsonwebtoken": "^9.0.10",
     "@types/node": "^25.9.3",
@@ -61,6 +60,7 @@
     "@types/ws": "^8.18.1",
     "@vitejs/plugin-react": "^6.0.2",
     "cross-env": "^10.1.0",
+    "hono": "^4.12.25",
     "jest": "^30.4.2",
     "ts-jest": "29.4.11",
     "typescript": "^6.0.3",
@@ -71,6 +71,7 @@
     "@aws-sdk/s3-request-presigner": "^3.1068.0",
     "@google-cloud/storage": "^7.0.0",
     "google-auth-library": "^10.7.0",
+    "hono": "^4.12.25",
     "nodemailer": "^9.0.0",
     "sharp": "^0.35.1",
     "ts-morph": "28.0.0"
@@ -107,7 +108,7 @@
   ],
   "scripts": {
     "watch": "vite build --watch",
-    "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.prod.json",
+    "build": "vite build && tsc --emitDeclarationOnly -p tsconfig.prod.json && node ../../scripts/assert-build-output.mjs",
     "test:lint": "eslint \"src/**\" --quiet",
     "test": "cross-env NODE_OPTIONS=\"--experimental-vm-modules\" jest --passWithNoTests --forceExit",
     "clean": "rm -rf dist && find ./src -name '*.js' -type f | xargs rm -f"