@rebasepro/types 0.3.0 → 0.4.0

package/dist/types/entity_views.d.ts

@@ -56,41 +56,32 @@ export type EntityCustomView<M extends Record<string, unknown> = Record<string,
     Builder?: ComponentRef<EntityCustomViewParams<M>>;
     position?: "start" | "end";
 };
-export interface EntityCustomViewParams<M extends Record<string, unknown> = Record<string, unknown>> {
-    collection: EntityCollection<M>;
-    entity?: Entity<M>;
-    modifiedValues?: EntityValues<M>;
-    formContext: FormContext<M>;
-    parentCollectionSlugs?: string[];
-    parentEntityIds?: string[];
-}
 /**
- * Configuration for customizing the read-only detail view of an entity.
- * Only used when `defaultEntityAction` is set to `"view"` on the collection.
+ * Configuration to replace the default entity form with a custom component.
+ * The Builder receives the same props as entity view tabs (entity, formContext, etc.)
+ * and has full control over the UI.
+ *
+ * The form tab still appears in the tab bar but renders your Builder
+ * instead of the auto-generated field form.
+ *
  * @group Models
  */
-export type EntityDetailViewConfig<M extends Record<string, unknown> = Record<string, unknown>> = {
-    /**
-     * Custom component rendered above the property display in the detail view.
-     */
-    Header?: ComponentRef<EntityDetailViewParams<M>>;
+export type FormViewConfig<M extends Record<string, unknown> = Record<string, unknown>> = {
     /**
-     * Custom component rendered below the property display in the detail view.
+     * Custom component that replaces the default form.
      */
-    Footer?: ComponentRef<EntityDetailViewParams<M>>;
+    Builder: ComponentRef<EntityCustomViewParams<M>>;
     /**
-     * Completely replace the default detail view with a custom component.
-     * When set, Header and Footer are ignored.
+     * If true, the save/delete action bar is rendered alongside the custom view.
+     * Defaults to true.
      */
-    Builder?: ComponentRef<EntityDetailViewParams<M>>;
+    includeActions?: boolean;
 };
-/**
- * Props passed to detail view customization components (Header, Footer, Builder).
- * @group Models
- */
-export interface EntityDetailViewParams<M extends Record<string, unknown> = Record<string, unknown>> {
+export interface EntityCustomViewParams<M extends Record<string, unknown> = Record<string, unknown>> {
     collection: EntityCollection<M>;
-    entity: Entity<M>;
-    path: string;
-    onEditClick: () => void;
+    entity?: Entity<M>;
+    modifiedValues?: EntityValues<M>;
+    formContext: FormContext<M>;
+    parentCollectionSlugs?: string[];
+    parentEntityIds?: string[];
 }

package/dist/types/properties.d.ts

@@ -1,6 +1,6 @@
 import type { ComponentRef } from "./component_ref";
-import type { EntityReference, EntityRelation, EntityValues, GeoPoint, Entity, Vector } from "./entities";
-import type { Relation, JoinStep, OnAction } from "./relations";
+import type { Entity, EntityReference, EntityRelation, EntityValues, GeoPoint, Vector } from "./entities";
+import type { JoinStep, OnAction, Relation } from "./relations";
 import type { EntityCollection, FilterValues } from "./collections";
 import type { ColorKey, ColorScheme } from "./chips";
 import type { AuthController } from "../controllers/auth";
@@ -104,8 +104,8 @@ export interface BaseUIConfig<CustomProps = unknown> {
     disabled?: boolean | PropertyDisabledConfig;
     widthPercentage?: number;
     customProps?: CustomProps;
-    Field?: ComponentRef;
-    Preview?: ComponentRef;
+    Field?: ComponentRef<any>;
+    Preview?: ComponentRef<any>;
 }
 export interface BaseProperty<CustomProps = unknown> {
     ui?: BaseUIConfig<CustomProps>;
@@ -185,7 +185,7 @@ export interface StringProperty extends BaseProperty {
      * Optional database column type. If not set, it defaults to `varchar` or `uuid` depending on `isId` configuration.
      * Use `text` for strings with unbound length, `char` for fixed-length strings, or `varchar` for variable-length strings with a limit.
      */
-    columnType?: "varchar" | "text" | "char";
+    columnType?: "varchar" | "text" | "char" | "uuid";
     /**
      * Rules for validating this property
      */
@@ -541,9 +541,11 @@ export interface ArrayProperty extends BaseProperty {
     ui?: ArrayUIConfig;
     type: "array";
     /**
-     * Optional database column type. Defaults to `jsonb`.
+     * Optional database column type. By default, maps to a native Postgres array
+     * (e.g. `text[]`, `integer[]`/`numeric[]`, `boolean[]`) if the element type
+     * is a primitive, otherwise defaults to `jsonb`.
      */
-    columnType?: "json" | "jsonb";
+    columnType?: "json" | "jsonb" | "text[]" | "integer[]" | "boolean[]" | "numeric[]";
     /**
      * The property of this array.
      * You can specify any property (except another Array property)

package/dist/types/user_management_delegate.d.ts

@@ -1,4 +1,4 @@
-import { Role, User } from "../users";
+import type { User } from "../users";
 /**
  * Result of creating a new user via admin flow.
  * Contains the created user plus information about how credentials were delivered.
@@ -15,56 +15,46 @@ export interface UserCreationResult<USER extends User = User> {
     temporaryPassword?: string;
 }
 /**
- * Delegate to manage users, roles, and their permissions.
- * This interface allows the CMS to be completely agnostic of the underlying
- * authentication provider or backend.
+ * Delegate to manage auth-specific user operations.
+ *
+ * This interface allows the CMS to be agnostic of the underlying
+ * authentication provider or backend. User/role CRUD is now handled
+ * by the collection system; this delegate only exposes auth-specific
+ * operations (password hashing, invitations, bootstrap).
  *
  * @group Models
  */
 export interface UserManagementDelegate<USER extends User = User> {
     /**
-     * Are the users and roles currently being fetched?
+     * Are auth-related operations currently loading?
      */
     loading: boolean;
     /**
-     * List of users managed by the CMS.
+     * In-memory list of users (used for client-side filtering fallback).
      */
-    users: USER[];
+    users?: USER[];
     /**
-     * Optional error if users failed to load.
+     * Error from fetching the users list, if any.
      */
     usersError?: Error;
     /**
-     * Function to get a user by its uid. This is used to show
-     * user information when assigning ownership of an entity.
-     * @param uid
+     * Look up a single user by UID from the in-memory cache.
      */
-    getUser: (uid: string) => USER | null;
+    getUser?: (uid: string) => USER | null;
     /**
-     * Search users with server-side pagination.
-     * When provided, the CMS will use this for the users table
-     * instead of loading all users into memory.
+     * Server-side user search with pagination.
      */
-    searchUsers?: (options: {
+    searchUsers?: (params: {
         search?: string;
         limit?: number;
         offset?: number;
-        orderBy?: string;
-        orderDir?: "asc" | "desc";
-        roleId?: string;
     }) => Promise<{
         users: USER[];
         total: number;
     }>;
-    /**
-     * Save a user (create or update)
-     * @param user
-     */
-    saveUser?: (user: USER) => Promise<USER>;
     /**
      * Create a new user with invitation/password generation support.
      * Returns additional info about how the credentials were delivered.
-     * Falls back to saveUser if not provided.
      */
     createUser?: (user: USER) => Promise<UserCreationResult<USER>>;
     /**
@@ -73,42 +63,15 @@ export interface UserManagementDelegate<USER extends User = User> {
      * or a flag indicating an email invitation was sent.
      */
     resetPassword?: (user: USER) => Promise<UserCreationResult<USER>>;
-    /**
-     * Delete a user
-     * @param user
-     */
-    deleteUser?: (user: USER) => Promise<void>;
-    /**
-     * List of roles defined in the CMS.
-     */
-    roles?: Role[];
-    /**
-     * Optional error if roles failed to load.
-     */
-    rolesError?: Error;
-    /**
-     * Save a role (create or update)
-     * @param role
-     */
-    saveRole?: (role: Role) => Promise<void>;
-    /**
-     * Delete a role
-     * @param role
-     */
-    deleteRole?: (role: Role) => Promise<void>;
     /**
      * Is the currently logged in user an admin?
      */
     isAdmin?: boolean;
-    /**
-     * If true, the UI will allow the user to create the default roles (admin, editor, viewer).
-     */
-    allowDefaultRolesCreation?: boolean;
     /**
      * Optionally define roles for a given user. This is useful when the roles
      * are coming from a separate provider than the one issuing the tokens.
      */
-    defineRolesFor?: (user: USER) => Promise<Role[] | undefined> | Role[] | undefined;
+    defineRolesFor?: (user: USER) => Promise<string[] | undefined> | string[] | undefined;
     /**
      * Whether any admin users exist. Used by the bootstrap banner to decide
      * whether to prompt.  Populated via a lightweight check (e.g. `limit=1`

package/dist/users/index.d.ts

@@ -1,2 +1 @@
 export * from "./user";
-export * from "./roles";

package/dist/users/user.d.ts

@@ -35,7 +35,6 @@ export type User = {
     readonly isAnonymous: boolean;
     /**
      * Role IDs assigned to this user (e.g. ["admin", "editor"]).
-     * These are plain string IDs — use the UserManagementDelegate to look up full Role objects.
      */
     roles?: string[];
     /**

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@rebasepro/types",
   "type": "module",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Rebase type definitions — shared interfaces and controller types",
   "funding": {
     "url": "https://github.com/sponsors/rebaseco"

package/src/controllers/auth.tsx

@@ -1,4 +1,4 @@
-import { Role, User } from "../users";
+import type { User } from "../users";
 
 /**
  * Capabilities advertised by an auth provider.
@@ -77,7 +77,7 @@ export type AuthController<USER extends User = User, ExtraData = unknown> = {
 
     setUser?(user: USER | null): void;
 
-    setUserRoles?(roles: Role[]): void;
+    setUserRoles?(roles: string[]): void;
 
     /**
      * Capabilities advertised by the auth provider.

package/src/controllers/client.ts

@@ -1,6 +1,6 @@
-import { User } from "../users";
-import { RebaseData } from "./data";
-import { EmailService } from "./email";
+import type { User } from "../users";
+import type { RebaseData } from "./data";
+import type { EmailService } from "./email";
 
 /**
  * Event type for authentication state changes
@@ -17,7 +17,7 @@ export interface RebaseSession {
     user: User;
 }
 
-import { StorageSource } from "./storage";
+import type { StorageSource } from "./storage";
 
 /**
  * Unified Authentication Client Interface
@@ -66,20 +66,9 @@ export interface AdminUser {
     updatedAt: string;
 }
 
-/**
- * Role record as returned by the Admin API.
- * @group Admin
- */
-export interface AdminRole {
-    id: string;
-    name: string;
-    isAdmin: boolean;
-    defaultPermissions: Record<string, unknown> | null;
-}
-
 /**
  * Client-side Admin API interface.
- * Provides user and role management operations.
+ * Provides user management operations.
  * @group Admin
  */
 export interface AdminAPI {
@@ -95,11 +84,6 @@ export interface AdminAPI {
     createUser(data: { email: string; displayName?: string; password?: string; roles?: string[]; metadata?: Record<string, any> }): Promise<{ user: AdminUser }>;
     updateUser(userId: string, data: { email?: string; displayName?: string; password?: string; roles?: string[]; metadata?: Record<string, any> }): Promise<{ user: AdminUser }>;
     deleteUser(userId: string): Promise<{ success: boolean }>;
-    listRoles(): Promise<{ roles: AdminRole[] }>;
-    getRole(roleId: string): Promise<{ role: AdminRole }>;
-    createRole(data: { id: string; name: string; isAdmin?: boolean; defaultPermissions?: Record<string, unknown> }): Promise<{ role: AdminRole }>;
-    updateRole(roleId: string, data: { name?: string; isAdmin?: boolean; defaultPermissions?: Record<string, unknown> }): Promise<{ role: AdminRole }>;
-    deleteRole(roleId: string): Promise<{ success: boolean }>;
     bootstrap(): Promise<{ success: boolean; message: string; user: { uid: string; roles: string[] } }>;
 }
 
@@ -128,7 +112,7 @@ export interface RebaseClient<DB = unknown> {
      */
     email?: EmailService;
 
-    /** Admin API for user and role management */
+    /** Admin API for user management */
     admin?: AdminAPI;
 
     /**
@@ -145,4 +129,21 @@ export interface RebaseClient<DB = unknown> {
      * detection (e.g. `typeof ws.executeSql === "function"`).
      */
     ws?: unknown;
+
+    /**
+     * Execute raw SQL against the database.
+     *
+     * Only available server-side when the backend uses a SQL database
+     * (PostgreSQL, MySQL, etc.). `undefined` for document databases
+     * (MongoDB, Firestore) and on the client-side SDK.
+     *
+     * @example
+     * ```typescript
+     * // In a cron job or custom function:
+     * if (ctx.client.sql) {
+     *     const rows = await ctx.client.sql("SELECT count(*) FROM orders");
+     * }
+     * ```
+     */
+    sql?(query: string, options?: { database?: string; role?: string }): Promise<Record<string, unknown>[]>;
 }

package/src/controllers/data.ts

@@ -22,7 +22,21 @@ export type WhereFieldValue =
     | number
     | boolean
     | null
-    | [WhereFilterOpShort, any];
+    | [WhereFilterOpShort, any]
+    | [WhereFilterOpShort, any][];
+
+export type WhereValue<T> = T | T[] | null;
+
+export interface LogicalCondition {
+    type: "and" | "or";
+    conditions: (FilterCondition | LogicalCondition)[];
+}
+
+export interface FilterCondition {
+    column: string;
+    operator: FilterOperator;
+    value: unknown;
+}
 
 /** Short operator strings accepted in the tuple syntax. */
 export type WhereFilterOpShort =
@@ -63,6 +77,8 @@ export interface FindParams {
      * ```
      */
     where?: Record<string, WhereFieldValue>;
+    /** Logical grouping conditions (AND/OR) */
+    logical?: LogicalCondition;
     /**
      * Sort order. Format: "field:direction".
      * @example "created_at:desc", "name:asc"
@@ -97,7 +113,8 @@ export type FilterOperator = WhereFilterOpShort;
  * @group Data
  */
 export interface QueryBuilderInterface<M extends Record<string, unknown> = Record<string, unknown>> {
-    where(column: keyof M & string, operator: FilterOperator, value: unknown): this;
+    where<K extends keyof M & string>(column: K, operator: FilterOperator, value: WhereValue<M[K]>): this;
+    where(logicalCondition: LogicalCondition): this;
     orderBy(column: keyof M & string, ascending?: "asc" | "desc"): this;
     limit(count: number): this;
     offset(count: number): this;
@@ -146,6 +163,11 @@ export interface CollectionAccessor<M extends Record<string, unknown> = Record<s
      */
     delete(id: string | number): Promise<void>;
 
+    /**
+     * Delete all records in this collection.
+     */
+    deleteAll?(): Promise<void>;
+
     /**
      * Subscribe to a collection for real-time updates.
      * Optional method, may not be supported by all implementations (like stateless HTTP clients).
@@ -164,7 +186,8 @@ export interface CollectionAccessor<M extends Record<string, unknown> = Record<s
     count?(params?: FindParams): Promise<number>;
 
     // Fluent Query Builder
-    where(column: keyof M & string, operator: FilterOperator, value: unknown): QueryBuilderInterface<M>;
+    where<K extends keyof M & string>(column: K, operator: FilterOperator, value: WhereValue<M[K]>): QueryBuilderInterface<M>;
+    where(logicalCondition: LogicalCondition): QueryBuilderInterface<M>;
     orderBy(column: keyof M & string, ascending?: "asc" | "desc"): QueryBuilderInterface<M>;
     limit(count: number): QueryBuilderInterface<M>;
     offset(count: number): QueryBuilderInterface<M>;

package/src/controllers/data_driver.ts

@@ -153,6 +153,12 @@ export interface DataDriver {
      */
     deleteEntity<M extends Record<string, unknown> = Record<string, unknown>>(props: DeleteEntityProps<M>): Promise<void>;
 
+    /**
+     * Delete all entities from a collection.
+     * @param path Collection path
+     */
+    deleteAll?(path: string): Promise<void>;
+
     /**
      * Check if the given property is unique in the given collection
      * @param path Collection path

package/src/controllers/email.ts

@@ -33,4 +33,6 @@ export interface EmailService {
     send(options: EmailSendOptions): Promise<void>;
     /** Returns `true` when the service has valid credentials / is ready to send. */
     isConfigured(): boolean;
+    /** Verify connection/credentials with the email provider. */
+    verifyConnection?(): Promise<boolean>;
 }

package/src/types/auth_adapter.ts

@@ -113,7 +113,7 @@ export interface AuthAdapterCapabilities {
     registrationEnabled?: boolean;
 }
 
-// ─── User & Role Management ─────────────────────────────────────────────────
+// ─── User Management ────────────────────────────────────────────────────────
 
 /**
  * Options for paginated user listing.
@@ -166,40 +166,6 @@ export interface AuthCreateUserData {
     metadata?: Record<string, unknown>;
 }
 
-/**
- * Role data exposed by the auth adapter.
- * @group Auth
- */
-export interface AuthRoleData {
-    id: string;
-    name: string;
-    isAdmin: boolean;
-    defaultPermissions?: {
-        read?: boolean;
-        create?: boolean;
-        edit?: boolean;
-        delete?: boolean;
-    } | null;
-    collectionPermissions?: Record<string, {
-        read?: boolean;
-        create?: boolean;
-        edit?: boolean;
-        delete?: boolean;
-    }> | null;
-}
-
-/**
- * Data for creating a role.
- * @group Auth
- */
-export interface AuthCreateRoleData {
-    id: string;
-    name: string;
-    isAdmin?: boolean;
-    defaultPermissions?: AuthRoleData["defaultPermissions"];
-    collectionPermissions?: AuthRoleData["collectionPermissions"];
-}
-
 /**
  * User management operations for the admin panel.
  *
@@ -213,25 +179,10 @@ export interface UserManagementAdapter {
     createUser(data: AuthCreateUserData): Promise<AuthUserData>;
     updateUser(id: string, data: Partial<AuthCreateUserData>): Promise<AuthUserData | null>;
     deleteUser(id: string): Promise<void>;
-    getUserRoles(userId: string): Promise<AuthRoleData[]>;
+    getUserRoles(userId: string): Promise<string[]>;
     setUserRoles(userId: string, roleIds: string[]): Promise<void>;
 }
 
-/**
- * Role management operations for the admin panel.
- *
- * Optional — if not provided by the adapter, role management is disabled.
- *
- * @group Auth
- */
-export interface RoleManagementAdapter {
-    listRoles(): Promise<AuthRoleData[]>;
-    getRoleById(id: string): Promise<AuthRoleData | null>;
-    createRole(data: AuthCreateRoleData): Promise<AuthRoleData>;
-    updateRole(id: string, data: Partial<AuthRoleData>): Promise<AuthRoleData | null>;
-    deleteRole(id: string): Promise<void>;
-}
-
 // ─── Auth Adapter ────────────────────────────────────────────────────────────
 
 /**
@@ -241,7 +192,7 @@ export interface RoleManagementAdapter {
  * database layer. Each auth adapter knows how to:
  *
  * 1. Verify incoming HTTP requests (`verifyRequest`)
- * 2. Optionally manage users and roles (for the admin panel)
+ * 2. Optionally manage users (for the admin panel)
  * 3. Optionally mount auth-specific routes (login, register, etc.)
  * 4. Advertise its capabilities so the frontend can adapt
  *
@@ -293,7 +244,7 @@ export interface AuthAdapter {
      */
     verifyToken?(token: string): Promise<AuthenticatedUser | null>;
 
-    // ── User & Role Management (for admin panel) ────────────────────────
+    // ── User Management (for admin panel) ────────────────────────────
 
     /**
      * User CRUD for the admin panel's user management UI.
@@ -301,12 +252,6 @@ export interface AuthAdapter {
      */
     userManagement?: UserManagementAdapter;
 
-    /**
-     * Role CRUD for the admin panel.
-     * Optional — if not provided, role management is disabled.
-     */
-    roleManagement?: RoleManagementAdapter;
-
     // ── Auth Routes ─────────────────────────────────────────────────────
 
     /**
@@ -325,7 +270,7 @@ export interface AuthAdapter {
     createAuthRoutes?(): Hono<any, any, any> | undefined;
 
     /**
-     * Mount admin routes for user/role management.
+     * Mount admin routes for user management.
      *
      * Same typing rationale as `createAuthRoutes` — the sub-app env is
      * unconstrained to support arbitrary adapter implementations.
@@ -397,9 +342,6 @@ export interface CustomAuthAdapterOptions {
     /** Optional user management for the admin panel. */
     userManagement?: UserManagementAdapter;
 
-    /** Optional role management for the admin panel. */
-    roleManagement?: RoleManagementAdapter;
-
     /** Static service key for server-to-server auth. */
     serviceKey?: string;
 

package/src/types/backend.ts

@@ -711,8 +711,8 @@ export interface InitializedDriver {
 export interface BootstrappedAuth {
     /** User management service. */
     userService: unknown;
-    /** Role management service. */
-    roleService: unknown;
+    /** Role management service (optional, roles are now simple strings). */
+    roleService?: unknown;
     /** Email service (optional). */
     emailService?: unknown;
     /** Combined Auth Repository for unified token and user management. */

package/src/types/backend_hooks.ts

@@ -1,4 +1,4 @@
-import type { AdminUser, AdminRole } from "../controllers/client";
+import type { AdminUser } from "../controllers/client";
 
 /**
  * Context passed to every backend hook.
@@ -56,20 +56,6 @@ export interface UserHooks {
     afterDelete?(userId: string, context: BackendHookContext): void | Promise<void>;
 }
 
-/**
- * Hooks for intercepting Admin Role data at the API boundary.
- * @group Backend Hooks
- */
-export interface RoleHooks {
-    /**
-     * Transform a role record after it's read from the database,
-     * before it's returned to the client.
-     *
-     * Return the modified role, or `null` to filter it out entirely.
-     */
-    afterRead?(role: AdminRole, context: BackendHookContext): AdminRole | null | Promise<AdminRole | null>;
-}
-
 /**
  * Hooks for intercepting collection entity data at the REST API boundary.
  *
@@ -144,7 +130,7 @@ export interface DataHooks {
  * These hooks run server-side after database operations complete and before
  * API responses are sent.
  *
- * - `users` / `roles` — intercept admin user and role management endpoints
+ * - `users` — intercept admin user management endpoints
  * - `data` — intercept ALL collection entity data flowing through the REST API
  *
  * `data` hooks complement per-collection `EntityCallbacks`. Entity callbacks
@@ -178,8 +164,6 @@ export interface DataHooks {
 export interface BackendHooks {
     /** Hooks for intercepting user management data */
     users?: UserHooks;
-    /** Hooks for intercepting role management data */
-    roles?: RoleHooks;
     /** Hooks for intercepting ALL collection entity data via the REST API */
     data?: DataHooks;
 }

package/src/types/collections.ts

@@ -8,7 +8,7 @@ import type { EntityOverrides } from "./entity_overrides";
 import type { User } from "../users";
 import type { RebaseContext } from "../rebase_context";
 import type { Relation } from "./relations";
-import type { EntityCustomView, EntityDetailViewConfig } from "./entity_views";
+import type { EntityCustomView, FormViewConfig } from "./entity_views";
 import type { EntityAction } from "./entity_actions";
 import type { ComponentRef } from "./component_ref";
 
@@ -144,10 +144,14 @@ export interface BaseEntityCollection<M extends Record<string, unknown> = Record
     defaultEntityAction?: "view" | "edit";
 
     /**
-     * Customization options for the read-only detail view.
-     * Only used when `defaultEntityAction` is `"view"`.
+     * Replace the default entity form with a custom component.
+     * The Builder receives the same props as entity view tabs
+     * (entity, formContext, collection, etc.) and has full control over the UI.
+     *
+     * Works in both edit mode and read-only mode (when `defaultEntityAction`
+     * is `"view"`). In read-only mode, `formContext.readOnly` will be `true`.
      */
-    detailView?: EntityDetailViewConfig;
+    formView?: FormViewConfig;
 
     /**
      * Prevent default actions from being displayed or executed on this collection.
@@ -689,7 +693,7 @@ export type WhereFilterOp =
  * @group Models
  */
 export type FilterValues<Key extends string> =
-    Partial<Record<Key, [WhereFilterOp, unknown]>>;
+    Partial<Record<Key, [WhereFilterOp, unknown] | [WhereFilterOp, unknown][]>>;
 
 /**
  * A pre-defined filter preset for quick access in the collection toolbar.