@rebasepro/types 0.12.1-canary.gf5f1d39 → 0.13.0

package/dist/controllers/client.d.ts

@@ -83,6 +83,20 @@ export interface AuthClient {
      * Manually refresh the session token
      */
     refreshSession(): Promise<RebaseSession>;
+    /**
+     * Whether a session could exist that this client has not loaded yet.
+     *
+     * `false` means the only way this client can hold a session is an explicit
+     * sign-in during this page's lifetime: it neither persists sessions nor
+     * carries an httpOnly auth cookie, so there is nothing on disk or in the
+     * browser to restore from. A caller that would otherwise probe the server
+     * — `getUser()` on mount, say — can skip it, because the answer is already
+     * known and the request can only ever fail.
+     *
+     * Optional so that alternative {@link AuthClient} implementations need not
+     * supply it; treat a missing implementation as "unknown, go ahead and ask".
+     */
+    canRestoreSession?: () => boolean;
 }
 /**
  * User record as returned by the Admin API (`GET /admin/users`, etc.).
@@ -337,6 +351,16 @@ export interface RebaseClient<DB = unknown> {
     apiKeys?: ApiKeysAPI;
     /** Base HTTP URL of the backend server */
     baseUrl?: string;
+    /**
+     * The path every API route is mounted under, appended to {@link baseUrl}.
+     *
+     * `"/api"` unless the backend was configured with a different `basePath`
+     * and the client told to match. Exposed because code that builds a URL by
+     * hand — rather than going through the client's own methods — otherwise has
+     * to guess, and guessing `/api` is wrong for exactly the projects that set
+     * the option.
+     */
+    apiPath?: string;
     /** WebSocket client for realtime subscriptions */
     ws?: RebaseWebSocket;
     /** Set the auth token for subsequent requests */
@@ -366,19 +390,14 @@ export interface RebaseClient<DB = unknown> {
  * the admin-scoped {@link dataAsAdmin} accessor, raw {@link sql}, and the
  * {@link email} service are all present (non-optional).
  *
- * **Trust levels.** Both {@link dataAsAdmin} and the deprecated {@link data}
- * alias point at the same admin-scoped, **RLS-bypassing** driver. Prefer
- * `dataAsAdmin` so the privilege is explicit at every call site. For user-scoped
- * queries inside a request handler use the request-scoped driver
- * (`c.var.driver`) instead — never `dataAsAdmin`/`data`.
+ * **Trust levels.** {@link dataAsAdmin} is the admin-scoped, **RLS-bypassing**
+ * driver, and it is the only name for it here — the `data` alias that used to
+ * sit beside it is deliberately `Omit`ted from {@link RebaseClient} so the
+ * privilege has to be spelled out at every call site. For user-scoped queries
+ * inside a request handler use the request-scoped driver (`c.var.driver`)
+ * instead — never `dataAsAdmin`.
  */
-export interface RebaseServerClient<DB = unknown> extends RebaseClient<DB> {
-    /**
-     * @deprecated On the server, prefer {@link dataAsAdmin} for admin scope or
-     * the request-scoped driver (`c.var.driver`) for user scope. This alias
-     * points at the same admin-scoped, RLS-bypassing accessor as `dataAsAdmin`.
-     */
-    data: RebaseSdkData<DB>;
+export interface RebaseServerClient<DB = unknown> extends Omit<RebaseClient<DB>, "data"> {
     /**
      * Admin-scoped, **RLS-bypassing** data accessor. Always present server-side.
      * See {@link RebaseClient.dataAsAdmin} for the full safety contract.
@@ -435,6 +454,16 @@ export interface RebaseBrowserClient<DB = unknown> {
     apiKeys?: ApiKeysAPI;
     /** Base HTTP URL of the backend server */
     baseUrl?: string;
+    /**
+     * The path every API route is mounted under, appended to {@link baseUrl}.
+     *
+     * `"/api"` unless the backend was configured with a different `basePath`
+     * and the client told to match. Exposed because code that builds a URL by
+     * hand — rather than going through the client's own methods — otherwise has
+     * to guess, and guessing `/api` is wrong for exactly the projects that set
+     * the option.
+     */
+    apiPath?: string;
     /** WebSocket client for realtime subscriptions */
     ws?: RebaseWebSocket;
     /** Set the auth token for subsequent requests */

package/dist/controllers/data_driver.d.ts

@@ -1,6 +1,7 @@
 import type { EntityStatus, EntityValues } from "../types/entities";
 import type { CollectionConfig, FilterValues } from "../types/collections";
 import type { RebaseCallContext } from "../call_context";
+import type { LogicalCondition } from "./data";
 /**
  * @internal
  */
@@ -68,6 +69,14 @@ export interface FetchCollectionProps<M extends Record<string, unknown> = Record
     path: string;
     collection?: CollectionConfig<M>;
     filter?: FilterValues<Extract<keyof M, string>>;
+    /**
+     * An `or(...)`/`and(...)` group, applied alongside `filter`.
+     *
+     * The REST layer parsed `?or=` into this and then had nowhere to put it, so
+     * the group was dropped and the read ran unfiltered — returning every row
+     * the caller's policies allowed rather than the ones they asked for.
+     */
+    logical?: LogicalCondition;
     limit?: number;
     offset?: number;
     startAfter?: unknown;
@@ -286,6 +295,8 @@ export interface RestFetchService {
      */
     fetchCollectionForRest(collectionPath: string, options?: {
         filter?: FilterValues<string>;
+        /** An `or(...)`/`and(...)` group, applied alongside `filter`. */
+        logical?: LogicalCondition;
         orderBy?: string;
         order?: "desc" | "asc";
         limit?: number;

package/dist/index.es.js

@@ -222,7 +222,7 @@ var REST_TO_CANONICAL = {
 * Operators that test for null/not-null and therefore ignore their value.
 * Codecs normalize the value of these conditions to `null`.
 */
-var NULL_OPS = new Set(["is-null", "is-not-null"]);
+var NULL_OPS = /* @__PURE__ */ new Set(["is-null", "is-not-null"]);
 /**
 * Every canonical operator, in a stable order. Useful for engine capability
 * declarations ({@link DataSourceCapabilities.filterOperators}) and for
@@ -313,6 +313,7 @@ var ADMIN_COLLECTION_KEYS = [
 	"exportable",
 	"filterPresets",
 	"fixedFilter",
+	"form",
 	"formAutoSave",
 	"formView",
 	"group",
@@ -375,10 +376,10 @@ var ADMIN_PROPERTY_KEYS = [
 	"previewProperties",
 	"readOnly",
 	"sortable",
+	"span",
 	"spreadChildren",
 	"urlPreview",
-	"widget",
-	"widthPercentage"
+	"widget"
 ];
 //#endregion
 //#region src/types/data_source.ts
@@ -602,12 +603,46 @@ function isToMany(relation) {
 *
 * The consequence for policy authors is that **`auth.uid() IS NOT NULL` is a
 * tautology on the user path** — it is true for anonymous visitors too. Use
-* {@link policy.authenticated} (or `auth.uid() <> 'anonymous'`) to mean "signed
-* in", and {@link policy.serverContext} to mean "the trusted server context".
+* {@link policy.authenticated} to mean "signed in", and
+* {@link policy.serverContext} to mean "the trusted server context". Do not
+* hand-write the comparison: see {@link ANONYMOUS_USER_IDS} for why one
+* literal is not enough.
 *
 * @group Models
 */
 var ANONYMOUS_USER_ID = "anonymous";
+/**
+* Every uid that has ever meant "nobody is signed in" — newest first.
+*
+* There are two because there were two. The types, the policy compiler, the
+* JavaScript evaluator and the linter were all built on
+* {@link ANONYMOUS_USER_ID}, while the request path scoped unauthenticated
+* callers as `'anon'` — so `policy.authenticated()`, which compiled to
+* `auth.uid() <> 'anonymous'`, was *true* for an anonymous visitor. The
+* sanctioned way to write "signed in" granted to everyone, and the linter
+* flagged the spelling that actually worked as a foreign convention.
+*
+* The request path now reports {@link ANONYMOUS_USER_ID}. `'anon'` stays here
+* because policies outlive the server that generated them: a database still
+* holding policies from before the fix, or a project whose server has not been
+* upgraded yet, must not become a grant in either direction. Compile against
+* this list, not against a single literal.
+*
+* No real user id is ever one of these, so a match is always "not signed in".
+*
+* @group Models
+*/
+var ANONYMOUS_USER_IDS = [ANONYMOUS_USER_ID, "anon"];
+/**
+* Whether a uid stands for "no one is signed in", in any spelling rebase has
+* used. `null`/`undefined` is the trusted server context, not an anonymous
+* caller, and is therefore **not** anonymous — see {@link ANONYMOUS_USER_ID}.
+*
+* @group Models
+*/
+function isAnonymousUid(uid) {
+	return typeof uid === "string" && ANONYMOUS_USER_IDS.includes(uid);
+}
 /** @group Models */
 var policy = {
 	true: () => ({ kind: "true" }),
@@ -1145,6 +1180,6 @@ function isPublicStoragePath(path) {
 	return p.startsWith("public/") || p.startsWith(`default/public/`);
 }
 //#endregion
-export { ADMIN_COLLECTION_KEYS, ADMIN_PROPERTY_KEYS, ALL_WHERE_FILTER_OPS, ANONYMOUS_USER_ID, BUNDLE_FORMAT_VERSION, CANONICAL_TO_REST, DEFAULT_CAPABILITIES, DEFAULT_DATA_SOURCE_KEY, DEFAULT_FILTERABLE_RELATION_KINDS, DEFAULT_LIST_LIMIT, DEFAULT_STORAGE_SOURCE_KEY, DEFAULT_VECTOR_LIST_LIMIT, EntityReference, EntityRelation, FIREBASE_CAPABILITIES, GeoPoint, MAX_LIST_LIMIT, MONGODB_CAPABILITIES, NULL_OPS, POSTGRES_CAPABILITIES, PUBLIC_STORAGE_PREFIX, REST_TO_CANONICAL, RUNTIME_CONTRACT_VERSION, RebaseApiError, RebaseClientError, SCHEMA_VERSION_HEADER, Vector, canonicalSchemaPayload, computeSchemaVersion, deserializeCollections, findStorageSuffixCollision, getCollectionDataPath, getDataSourceCapabilities, getDeclaredSubcollections, hasForeignKeyOnTarget, isBranchAdmin, isChannelBusInstance, isDocumentAdmin, isFirebaseCollectionConfig, isLazyComponentRef, isManyToMany, isMongoDBCollectionConfig, isPostgresCollectionConfig, isPublicStoragePath, isRelationalCollectionConfig, isSQLAdmin, isSchemaAdmin, isSerializedCollectionRef, isToMany, normalizeStorageSources, policy, registerDataSourceCapabilities, resolveClientListLimit, serializeCollections, storageEnvSuffix, toCanonicalOp };
+export { ADMIN_COLLECTION_KEYS, ADMIN_PROPERTY_KEYS, ALL_WHERE_FILTER_OPS, ANONYMOUS_USER_ID, ANONYMOUS_USER_IDS, BUNDLE_FORMAT_VERSION, CANONICAL_TO_REST, DEFAULT_CAPABILITIES, DEFAULT_DATA_SOURCE_KEY, DEFAULT_FILTERABLE_RELATION_KINDS, DEFAULT_LIST_LIMIT, DEFAULT_STORAGE_SOURCE_KEY, DEFAULT_VECTOR_LIST_LIMIT, EntityReference, EntityRelation, FIREBASE_CAPABILITIES, GeoPoint, MAX_LIST_LIMIT, MONGODB_CAPABILITIES, NULL_OPS, POSTGRES_CAPABILITIES, PUBLIC_STORAGE_PREFIX, REST_TO_CANONICAL, RUNTIME_CONTRACT_VERSION, RebaseApiError, RebaseClientError, SCHEMA_VERSION_HEADER, Vector, canonicalSchemaPayload, computeSchemaVersion, deserializeCollections, findStorageSuffixCollision, getCollectionDataPath, getDataSourceCapabilities, getDeclaredSubcollections, hasForeignKeyOnTarget, isAnonymousUid, isBranchAdmin, isChannelBusInstance, isDocumentAdmin, isFirebaseCollectionConfig, isLazyComponentRef, isManyToMany, isMongoDBCollectionConfig, isPostgresCollectionConfig, isPublicStoragePath, isRelationalCollectionConfig, isSQLAdmin, isSchemaAdmin, isSerializedCollectionRef, isToMany, normalizeStorageSources, policy, registerDataSourceCapabilities, resolveClientListLimit, serializeCollections, storageEnvSuffix, toCanonicalOp };
 
 //# sourceMappingURL=index.es.js.map