@rebasepro/studio 0.23.0 → 0.24.0

package/dist/{JSEditor-qiuwmcvk.js → JSEditor-B59pwg4c.js}

@@ -1,4 +1,4 @@
-import { t as AuthSimulationSelector } from "./AuthSimulationSelector-BewmhMBw.js";
+import { n as AuthSimulationSelector, t as useRunAsUsers } from "./useRunAsUsers-CLaAtXt6.js";
 import { ErrorView, IconForView, useApiConfig, useModeController, useRebaseClient, useRebaseContext, useSnackbarController, useStudioCollectionRegistry, useStudioSidePanelController, useTranslation } from "@rebasepro/app";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Button, Chip, CircularProgress, Dialog, DialogActions, DialogContent, DialogTitle, DownloadIcon, IconButton, Menu, MenuItem, MoreVerticalIcon, PencilIcon, PlayIcon, PlusIcon, ResizablePanels, SaveIcon, Tab, Tabs, TerminalIcon, TextField, Tooltip, Trash2Icon, Typography, VirtualTable, XIcon, cls, defaultBorderMixin, iconSize } from "@rebasepro/ui";
@@ -6,7 +6,7 @@ import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { ALL_WHERE_FILTER_OPS } from "@rebasepro/types";
 import { toSnakeCase } from "@rebasepro/utils";
 import { Highlight, themes } from "prism-react-renderer";
-import { createRebaseClient } from "@rebasepro/client";
+import { createMemoryStorage, createRebaseClient } from "@rebasepro/client";
 import Editor from "@monaco-editor/react";
 //#region src/components/JSEditor/JSMonacoEditor.tsx
 /**
@@ -138,8 +138,27 @@ interface AdminUser {
     updatedAt: string;
 }
 
+interface ListUsersOptions {
+    search?: string;
+    /** Page size. The server's default is 25. */
+    limit?: number;
+    offset?: number;
+    orderBy?: string;
+    orderDir?: "asc" | "desc";
+}
+
+/** One page of users, and \`total\`: how many match in all. */
+interface UsersPage {
+    users: AdminUser[];
+    total: number;
+    limit: number;
+    offset: number;
+}
+
 interface RebaseCMS {
-    listUsers(): Promise<{ users: AdminUser[] }>;
+    /** One page of users (25 unless \`limit\` says otherwise) and the total. */
+    listUsers(options?: ListUsersOptions): Promise<UsersPage>;
+    listUsersPaginated(options?: ListUsersOptions): Promise<UsersPage>;
     getUser(userId: string): Promise<{ user: AdminUser }>;
     createUser(data: { email: string; displayName?: string; password?: string; roles?: string[] }): Promise<{ user: AdminUser }>;
     updateUser(userId: string, data: { email?: string; displayName?: string; password?: string; roles?: string[] }): Promise<{ user: AdminUser }>;
@@ -200,8 +219,8 @@ type RebaseData = {
  * // Auth
  * const session = client.auth.getSession();
  *
- * // Admin
- * const { users } = await client.admin.listUsers();
+ * // Admin: one page of users, and how many there are
+ * const { users, total } = await client.admin.listUsers({ limit: 50 });
  *
  * // Custom endpoint
  * const result = await client.call("/my-endpoint", { myData: 123 });
@@ -221,12 +240,16 @@ interface RebaseClient {
     [collectionSlug: string]: unknown;
 }
 
-/** The pre-configured client instance. Already authenticated with the current user session. */
+/**
+ * The client for this run: your own, one that runs every request as the user
+ * picked in "Run as" (it holds no session, so \`client.auth.getSession()\` is null),
+ * or an unauthenticated one under "No Auth".
+ */
 declare const client: RebaseClient;
 
 /** Execution context with user and collection information. */
 interface JSEditorContext {
-    /** The user the script is running as. */
+    /** The user the script runs as: the one picked in "Run as", or you. \`null\` under "No Auth". */
     user: {
         uid: string;
         displayName: string | null;
@@ -359,15 +382,20 @@ var QUICK_REFERENCE = [
 		code: "const result = await client.data.collection(\"COLLECTION\")\n  .where(\"field\", \">\", value)\n  .orderBy(\"field\", \"desc\")\n  .limit(10)\n  .find();\nreturn result;",
 		description: "Chained query builder"
 	},
+	{
+		label: "Who am I",
+		code: "return context.user;",
+		description: "The user this script runs as, or null under No Auth"
+	},
 	{
 		label: "Auth: Current session",
 		code: "const session = client.auth.getSession();\nreturn session;",
-		description: "Get current auth session"
+		description: "The session this client holds: yours, or none under Run as and No Auth"
 	},
 	{
 		label: "Admin: List users",
-		code: "const { users } = await client.admin.listUsers();\nreturn users;",
-		description: "List all registered users"
+		code: "// One page: raise limit or page with offset while users.length < total\nconst { users, total } = await client.admin.listUsers({ limit: 50, offset: 0 });\nreturn { users, total };",
+		description: "A page of users, and how many there are in all"
 	},
 	{
 		label: "Custom endpoint",
@@ -618,6 +646,7 @@ function CollectionItem({ collection, onInsertCode }) {
 			/* @__PURE__ */ jsx(Tooltip, {
 				title: "Insert find() snippet",
 				children: /* @__PURE__ */ jsx(IconButton, {
+					"aria-label": "Insert find() snippet",
 					size: "smallest",
 					className: "opacity-0 group-hover:opacity-100 text-text-disabled hover:text-primary transition-all",
 					onClick: (e) => {
@@ -690,12 +719,12 @@ var STORAGE_PREFIX = "rebase_js_";
 * new user did be a 404 — a placeholder presented as working code. `slug` is
 * the project's first collection when one is known.
 */
-var makeDefaultCode = (slug) => `// Available: client (RebaseClient)
+var makeDefaultCode = (slug) => `// Available: client (RebaseClient), context
 // Press Cmd+Enter (Ctrl+Enter) to run
 //
 // Examples:
-//   const users = await client.admin.listUsers();
-//   const session = client.auth.getSession();
+//   const { users, total } = await client.admin.listUsers({ limit: 50, offset: 0 }); // one page of total
+//   const me = context.user; // who this script runs as ("Run as"), null under No Auth
 ${slug ? `
 const result = await client.data.collection(${JSON.stringify(slug)}).find({ limit: 10 });
 return result;
@@ -704,9 +733,24 @@ return result;
 //   const result = await client.data.collection("posts").find({ limit: 10 });
 //   return result;
 
-return client.auth.getSession();
+return context.user;
 `}`;
 var DEFAULT_CODE = makeDefaultCode();
+/**
+* The auth of a client built for one run: its own, in memory, and empty.
+*
+* The SDK's default auth restores the session the app saved in `localStorage`,
+* sends its token on every request and keeps refreshing it. A run under "No
+* Auth" or as another user must do none of that: it would go out as the
+* signed-in user, and `client.auth` would describe the wrong person.
+*/
+function runOnlyAuth() {
+	return {
+		storage: createMemoryStorage(),
+		persistSession: false,
+		autoRefresh: false
+	};
+}
 function loadFromStorage(key, fallback) {
 	try {
 		const raw = localStorage.getItem(STORAGE_PREFIX + key);
@@ -727,14 +771,22 @@ function formatJSON(value) {
 		return String(value);
 	}
 }
+/** The script without its comments: a collection named in one is not where rows came from. */
+function withoutComments(code) {
+	return code.replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/[^\n]*/g, "");
+}
 /**
-* Given the raw SDK result, try to detect which collections are present.
+* Given the raw SDK result, try to detect which collection its rows belong to.
 * JS SDK results typically come back as `{ data: [{ id, values }] }` or plain arrays.
-* The heuristic: if the executed code contains `collection("<slug>")` or `client.data.<slug>`,
-* and the result has rows with an "id" column, we match those slugs.
+* The heuristic: the executed code, outside its comments, names exactly one
+* collection — `collection("<slug>")` or `client.data.<slug>` — and the result has
+* rows with an "id" column. A script naming two could have returned either's
+* rows, and an action on a row would open the other collection's row with the
+* same id, so it gets none.
 */
-function detectCollectionsInResult(code, resultValue, collections) {
+function detectCollectionsInResult(executedCode, resultValue, collections) {
 	if (!resultValue || !collections?.length) return [];
+	const code = withoutComments(executedCode);
 	const mentionedSlugs = /* @__PURE__ */ new Set();
 	const collectionCallRegex = /\.collection\(["']([^"']+)["']\)/g;
 	let m;
@@ -748,7 +800,7 @@ function detectCollectionsInResult(code, resultValue, collections) {
 		"update",
 		"delete"
 	].includes(m[1])) mentionedSlugs.add(m[1]);
-	if (mentionedSlugs.size === 0) return [];
+	if (mentionedSlugs.size !== 1) return [];
 	let rows = [];
 	const rv = resultValue;
 	if (rv?.data && Array.isArray(rv.data)) rows = rv.data;
@@ -839,27 +891,7 @@ function JSEditor() {
 			} : tab);
 		});
 	}, [firstSlug]);
-	const users = useMemo(() => {
-		const managed = [];
-		if (currentUser) managed.push({
-			uid: currentUser.uid,
-			displayName: currentUser.displayName,
-			email: currentUser.email,
-			photoURL: currentUser.photoURL,
-			roles: currentUser.roles
-		});
-		return managed;
-	}, [currentUser]);
-	const currentSelectableUser = useMemo(() => {
-		if (!currentUser) return null;
-		return {
-			uid: currentUser.uid,
-			displayName: currentUser.displayName,
-			email: currentUser.email,
-			photoURL: currentUser.photoURL,
-			roles: currentUser.roles
-		};
-	}, [currentUser]);
+	const { users, currentUser: currentSelectableUser, loading: usersLoading, onSearchTextChange: onUserSearchTextChange, totalCount: userTotalCount } = useRunAsUsers();
 	useEffect(() => {
 		saveToStorage("tabs", tabs);
 	}, [tabs]);
@@ -918,29 +950,32 @@ function JSEditor() {
 		const apiUrl = apiConfig?.apiUrl;
 		const getAuthToken = apiConfig?.getAuthToken;
 		if (!apiUrl) throw new Error("API URL not configured. Make sure apiUrl is set.");
-		if (authMode === "none") return {
-			client: createRebaseClient({
+		if (authMode === "none") {
+			const client = createRebaseClient({
 				baseUrl: apiUrl,
-				token: void 0
-			}),
-			isScoped: true
-		};
-		if (!selectedUser || currentUser && selectedUser.uid === currentUser.uid) {
-			if (!rebaseClient) throw new Error("Application client is not initialized.");
+				auth: runOnlyAuth()
+			});
 			return {
-				client: rebaseClient,
-				isScoped: false
+				client,
+				release: () => client.close()
 			};
 		}
-		let token;
-		if (getAuthToken) token = await getAuthToken() ?? void 0;
-		if (!token) throw new Error("No auth token available. Please sign in first.");
+		if (!selectedUser || currentUser && selectedUser.uid === currentUser.uid) {
+			if (!rebaseClient) throw new Error("Application client is not initialized.");
+			return { client: rebaseClient };
+		}
+		const token = getAuthToken ? await getAuthToken() ?? void 0 : void 0;
+		if (!getAuthToken || !token) throw new Error("No auth token available. Please sign in first.");
+		const client = createRebaseClient({
+			baseUrl: apiUrl,
+			token,
+			impersonate: selectedUser.uid,
+			auth: runOnlyAuth()
+		});
+		client.setAuthTokenGetter(getAuthToken);
 		return {
-			client: createRebaseClient({
-				baseUrl: apiUrl,
-				token
-			}),
-			isScoped: true
+			client,
+			release: () => client.close()
 		};
 	}, [
 		apiConfig,
@@ -959,7 +994,8 @@ function JSEditor() {
 		});
 		const consoleEntries = [];
 		const startTime = performance.now();
-		let scopedClientToCleanUp = null;
+		let release;
+		const ranAsSignedInUser = authMode !== "none" && (!selectedUser || selectedUser.uid === currentUser?.uid);
 		const originalConsole = {
 			log: console.log,
 			warn: console.warn,
@@ -979,10 +1015,11 @@ function JSEditor() {
 			console.warn = captureConsole("warn");
 			console.error = captureConsole("error");
 			console.info = captureConsole("info");
-			const { client, isScoped } = await buildClient();
-			if (isScoped) scopedClientToCleanUp = client;
+			const built = await buildClient();
+			release = built.release;
+			const client = built.client;
 			const context = {
-				user: selectedUser ?? (currentUser ? {
+				user: authMode === "none" ? null : selectedUser ?? (currentUser ? {
 					uid: currentUser.uid,
 					displayName: currentUser.displayName,
 					email: currentUser.email,
@@ -997,7 +1034,9 @@ function JSEditor() {
 				value,
 				console: consoleEntries,
 				duration,
-				timestamp: Date.now()
+				timestamp: Date.now(),
+				code,
+				ranAsSignedInUser
 			});
 			const resultObj = value;
 			if (resultObj?.data && Array.isArray(resultObj.data)) setResultView("table");
@@ -1010,7 +1049,9 @@ function JSEditor() {
 				console: consoleEntries,
 				duration,
 				error: err instanceof Error ? err.message : String(err),
-				timestamp: Date.now()
+				timestamp: Date.now(),
+				code,
+				ranAsSignedInUser
 			});
 			setResultView("json");
 		} finally {
@@ -1019,11 +1060,12 @@ function JSEditor() {
 			console.error = originalConsole.error;
 			console.info = originalConsole.info;
 			setIsRunning(false);
-			if (scopedClientToCleanUp) scopedClientToCleanUp.ws?.disconnect();
+			release?.();
 		}
 	}, [
 		activeTab?.code,
 		buildClient,
+		authMode,
 		selectedUser,
 		currentUser,
 		collectionInfos
@@ -1092,13 +1134,9 @@ function JSEditor() {
 		};
 	}, [result]);
 	const matchedCollections = useMemo(() => {
-		if (!result?.value || result.error) return [];
-		return detectCollectionsInResult(activeTab?.code ?? "", result.value, collectionRegistry?.collections ?? []);
-	}, [
-		result,
-		activeTab?.code,
-		collectionRegistry?.collections
-	]);
+		if (!result?.value || result.error || !result.ranAsSignedInUser) return [];
+		return detectCollectionsInResult(result.code, result.value, collectionRegistry?.collections ?? []);
+	}, [result, collectionRegistry?.collections]);
 	const getRowEntityActions = useCallback((rowData) => {
 		if (!rowData || matchedCollections.length === 0) return [];
 		return matchedCollections.filter((mc) => rowData[mc.pkColumn] != null).map((mc) => ({
@@ -1216,6 +1254,7 @@ function JSEditor() {
 								/* @__PURE__ */ jsx(Tooltip, {
 									title: "Save as snippet",
 									children: /* @__PURE__ */ jsx(IconButton, {
+										"aria-label": "Save as snippet",
 										size: "small",
 										onClick: () => {
 											setSnippetName("");
@@ -1228,6 +1267,7 @@ function JSEditor() {
 								result?.value != null && /* @__PURE__ */ jsx(Tooltip, {
 									title: "Export result as JSON",
 									children: /* @__PURE__ */ jsx(IconButton, {
+										"aria-label": "Export result as JSON",
 										size: "small",
 										onClick: exportResult,
 										children: /* @__PURE__ */ jsx(DownloadIcon, { size: iconSize.smallest })
@@ -1265,7 +1305,9 @@ function JSEditor() {
 										selectedUser,
 										setSelectedUser,
 										users,
-										loading: false,
+										loading: usersLoading,
+										onUserSearchTextChange,
+										userTotalCount,
 										currentUser: currentSelectableUser
 									})
 								}), /* @__PURE__ */ jsx("div", {
@@ -1429,6 +1471,10 @@ function JSEditor() {
 																				id: String(ra.entityId)
 																			}),
 																			children: /* @__PURE__ */ jsx(IconButton, {
+																				"aria-label": t("studio_sql_edit_entity", {
+																					name: ra.collection.collection.name,
+																					id: String(ra.entityId)
+																				}),
 																				size: "small",
 																				className: "text-surface-400 dark:text-surface-500 hover:text-surface-600 dark:hover:text-surface-300",
 																				onClick: (e) => {
@@ -1627,4 +1673,4 @@ function JSONHighlight({ value }) {
 //#endregion
 export { JSEditor };
 
-//# sourceMappingURL=JSEditor-qiuwmcvk.js.map
+//# sourceMappingURL=JSEditor-B59pwg4c.js.map