@supacloud/lite 0.10.0 → 0.11.0

package/dist/index.js

@@ -85,7 +85,7 @@ function randomToken(bytes = 32) {
 // package.json
 var package_default = {
   name: "@supacloud/lite",
-  version: "0.10.0",
+  version: "0.11.0",
   description: "Bun-native, single-project Supabase-compatible backend powered by PGlite or native PostgreSQL",
   type: "module",
   license: "Apache-2.0",
@@ -135,6 +135,7 @@ var package_default = {
   },
   dependencies: {
     "@electric-sql/pglite": "0.5.8",
+    "@supacloud/db": "^0.1.0",
     tar: "^7.5.22"
   },
   devDependencies: {
@@ -2529,8 +2530,99 @@ function resetCapturedHandler() {
   captured.handler = undefined;
 }
 
-// src/runtime/functions/pgredis.ts
+// src/runtime/functions/edge-runtime-shim.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
+var scopeStore = new AsyncLocalStorage2;
+var NOT_ENABLED_MESSAGE = "EdgeRuntime.waitUntil is not enabled by the Function capability policy";
+var installed;
+function installEdgeRuntimeShim() {
+  if (installed)
+    return;
+  const runtime = {
+    waitUntil(promise) {
+      const scope = scopeStore.getStore();
+      if (scope && !scope.allowed) {
+        throw new Error(NOT_ENABLED_MESSAGE);
+      }
+      const task = Promise.resolve(promise).catch((error) => {
+        console.error("[EdgeRuntime.waitUntil] background task failed", error);
+      });
+      scope?.tasks.push(task);
+    }
+  };
+  installed = runtime;
+  globalThis.EdgeRuntime = runtime;
+}
+function runWithBackgroundTasks(options, fn) {
+  installEdgeRuntimeShim();
+  const scope = { allowed: options.allowed, tasks: [] };
+  return scopeStore.run(scope, async () => {
+    try {
+      return await fn();
+    } finally {
+      flushBackgroundTasks(scope.tasks, options.timeoutMs);
+    }
+  });
+}
+async function flushBackgroundTasks(tasks, timeoutMs) {
+  if (tasks.length === 0)
+    return;
+  const drain = (async () => {
+    while (tasks.length > 0) {
+      const batch = tasks.splice(0);
+      await Promise.allSettled(batch);
+    }
+  })();
+  if (timeoutMs === undefined) {
+    await drain;
+    return;
+  }
+  const timedOut = await Promise.race([
+    drain.then(() => false),
+    new Promise((resolve) => setTimeout(() => resolve(true), timeoutMs))
+  ]);
+  if (timedOut) {
+    console.warn(`[EdgeRuntime.waitUntil] background tasks did not settle within ${timeoutMs}ms; no longer waiting`);
+  }
+}
+
+// src/runtime/functions/fetch-policy.ts
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
+var policyStore = new AsyncLocalStorage3;
+var LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1"]);
+var installed2 = false;
+function installFetchPolicyShim() {
+  if (installed2)
+    return;
+  installed2 = true;
+  const original = globalThis.fetch;
+  globalThis.fetch = async (input, init) => {
+    const allowed = policyStore.getStore();
+    if (!allowed)
+      return original(input, init);
+    const host = hostOf(input);
+    if (host !== undefined && !LOOPBACK_HOSTS.has(host) && !allowed.has(host)) {
+      throw new Error(`outbound host not allowed: ${host}`);
+    }
+    return original(input, init);
+  };
+}
+function runWithFetchPolicy(allowedHosts, fn) {
+  installFetchPolicyShim();
+  return policyStore.run(new Set(allowedHosts), fn);
+}
+function hostOf(input) {
+  try {
+    const raw = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+    const host = new URL(raw).hostname;
+    return host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  } catch {
+    return;
+  }
+}
+
+// src/runtime/functions/pgredis.ts
+import { AsyncLocalStorage as AsyncLocalStorage4 } from "async_hooks";
 var CACHE_NAMESPACE = "supacloud-edge-runtime";
 var CACHE_TABLE = "public.supacloud_pgredis_kv";
 var MAX_KEY_CHARACTERS = 512;
@@ -2623,7 +2715,7 @@ class PgredisCache {
     });
   }
 }
-var cacheContexts = new AsyncLocalStorage2;
+var cacheContexts = new AsyncLocalStorage4;
 var cacheFacade = Object.freeze({
   get: async (key) => activeCache().get(key),
   set: async (key, cacheValue, ttlMs) => activeCache().set(key, cacheValue, ttlMs),
@@ -2697,6 +2789,23 @@ async function upsertWithoutTtl(query, key, serializedValue) {
 }
 
 // src/runtime/functions/handler.ts
+var VERIFIED_JWT_SUBJECT_HEADER = "x-supacloud-jwt-sub";
+var UNSAFE_VERIFIED_JWT_SUBJECT = /[\u0000-\u001F\u007F-\u009F\u0100-\u{10FFFF}]/u;
+function verifiedSubject(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 1024)
+    return null;
+  if (value.trim() !== value || UNSAFE_VERIFIED_JWT_SUBJECT.test(value))
+    return null;
+  return value;
+}
+function withVerifiedJwtSubject(request, ctx) {
+  const trustedRequest = request.clone();
+  trustedRequest.headers.delete(VERIFIED_JWT_SUBJECT_HEADER);
+  const subject = verifiedSubject(ctx.claims?.sub);
+  if (subject !== null)
+    trustedRequest.headers.set(VERIFIED_JWT_SUBJECT_HEADER, subject);
+  return trustedRequest;
+}
 function isLoadedFunction(value) {
   return typeof value === "object" && value !== null && "handler" in value;
 }
@@ -2709,9 +2818,7 @@ function isFrameworkRouterHandler(handler) {
   const candidate = handler;
   if (candidate.__supacloud?.routeAware === true)
     return true;
-  if (typeof candidate.handle === "function")
-    return true;
-  return Array.isArray(candidate.routes) && typeof candidate.fetch === "function";
+  return Array.isArray(candidate.routes) && (typeof candidate.handle === "function" || typeof candidate.fetch === "function");
 }
 function toFunctionLocalUrl(requestUrl) {
   const url = new URL(requestUrl);
@@ -2752,23 +2859,68 @@ class FunctionsHandler {
       return json2(404, { error: `function "${name}" not found` });
     }
     const entry = normalizeEntry(value);
+    const limits = entry.limits;
+    const capabilities = entry.capabilities;
+    const maxBody = limits?.maxRequestBodyBytes;
+    let request = req;
+    if (maxBody !== undefined) {
+      const contentLength = req.headers.get("content-length");
+      if (contentLength !== null && Number(contentLength) > maxBody) {
+        return json2(413, { error: `function "${name}" request body exceeded ${maxBody} bytes` });
+      }
+      if (contentLength === null && req.body) {
+        request = withCountedBody(request, maxBody);
+      }
+    }
     const routeAware = entry.framework !== undefined && entry.framework !== "fetch" || isFrameworkRouterHandler(entry.handler);
-    const target = routeAware ? new Request(toFunctionLocalUrl(req.url), req) : req;
+    request = withVerifiedJwtSubject(request, ctx);
+    if (routeAware)
+      request = new Request(toFunctionLocalUrl(request.url), request);
+    const timeoutMs = limits?.timeoutMs;
+    const abort = timeoutMs !== undefined ? new AbortController : undefined;
+    if (abort)
+      request = withSignal(request, abort.signal);
     try {
-      const invoke = () => this.invoke(entry.handler, target, ctx);
-      const res = await runWithDenoEnv(this.env, () => runWithPgredisCache(this.pgredis, invoke));
+      const env = capabilities?.secrets ? filterSecretsEnv(this.env, capabilities.secrets) : this.env;
+      const invoke = () => this.invoke(entry.handler, request, ctx, env);
+      const inner = () => runWithDenoEnv(env, () => runWithPgredisCache(this.pgredis, invoke));
+      const run = capabilities?.outboundHosts ? () => runWithFetchPolicy(capabilities.outboundHosts, inner) : inner;
+      const invokeWithBackground = () => runWithBackgroundTasks({ allowed: capabilities?.background !== false, timeoutMs: limits?.waitUntilTimeoutMs }, run);
+      const res = timeoutMs !== undefined ? await this.withTimeout(name, timeoutMs, invokeWithBackground, abort) : await invokeWithBackground();
       if (!(res instanceof Response)) {
         return json2(500, { error: `function "${name}" did not return a Response` });
       }
-      return res;
+      const maxResponse = limits?.maxResponseBodyBytes;
+      return maxResponse !== undefined ? withResponseLimit(name, res, maxResponse) : res;
     } catch (e) {
       const message = e instanceof Error ? e.message : String(e);
       return json2(500, { error: message });
     }
   }
-  invoke(handler, req, ctx) {
+  async withTimeout(name, timeoutMs, run, abort) {
+    let timer;
+    const pending = run();
+    try {
+      const winner = await Promise.race([
+        pending.then((res) => ({ timedOut: false, res })),
+        new Promise((resolve) => {
+          timer = setTimeout(() => resolve({ timedOut: true }), timeoutMs);
+        })
+      ]);
+      if (winner.timedOut) {
+        abort.abort();
+        pending.then(() => {}, () => {});
+        return json2(504, { error: `function "${name}" timed out after ${timeoutMs}ms` });
+      }
+      return winner.res;
+    } finally {
+      if (timer)
+        clearTimeout(timer);
+    }
+  }
+  invoke(handler, req, ctx, env) {
     if (typeof handler === "function") {
-      return Promise.resolve(handler(req, { auth: ctx, env: this.env }));
+      return Promise.resolve(handler(req, { auth: ctx, env }));
     }
     if (typeof handler.handle === "function") {
       return Promise.resolve(handler.handle.call(handler, req));
@@ -2779,6 +2931,54 @@ class FunctionsHandler {
     throw new Error("function handler must be a function or an object with handle()/fetch()");
   }
 }
+var BASE_ENV_KEYS = ["SUPABASE_URL", "SUPABASE_ANON_KEY", "SUPABASE_SERVICE_ROLE_KEY"];
+function filterSecretsEnv(env, secrets) {
+  const out = {};
+  for (const key of BASE_ENV_KEYS)
+    out[key] = env[key];
+  for (const key of secrets) {
+    if (env[key] !== undefined)
+      out[key] = env[key];
+  }
+  return out;
+}
+function withCountedBody(req, limit) {
+  let seen = 0;
+  const counter = new TransformStream({
+    transform(chunk, controller) {
+      seen += chunk.byteLength;
+      if (seen > limit) {
+        controller.error(new Error(`request body exceeded ${limit} bytes`));
+        return;
+      }
+      controller.enqueue(chunk);
+    }
+  });
+  return new Request(req, { body: req.body.pipeThrough(counter), duplex: "half" });
+}
+function withResponseLimit(name, res, limit) {
+  const contentLength = res.headers.get("content-length");
+  if (contentLength !== null && Number(contentLength) > limit) {
+    return json2(502, { error: `function "${name}" response exceeded ${limit} bytes` });
+  }
+  if (!res.body)
+    return res;
+  let seen = 0;
+  const counter = new TransformStream({
+    transform(chunk, controller) {
+      seen += chunk.byteLength;
+      if (seen > limit) {
+        controller.error(new Error(`function "${name}" response exceeded ${limit} bytes`));
+        return;
+      }
+      controller.enqueue(chunk);
+    }
+  });
+  return new Response(res.body.pipeThrough(counter), res);
+}
+function withSignal(req, signal) {
+  return new Request(req, { signal, ...req.body ? { duplex: "half" } : {} });
+}
 function json2(status, body) {
   return new Response(JSON.stringify(body), {
     status,
@@ -10014,9 +10214,9 @@ class RetentionService {
 }
 
 // src/runtime/security.ts
-var LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1", "", undefined]);
+var LOOPBACK_HOSTS2 = new Set(["127.0.0.1", "localhost", "::1", "", undefined]);
 function isNetworkExposed(host) {
-  return !LOOPBACK_HOSTS.has(host);
+  return !LOOPBACK_HOSTS2.has(host);
 }
 function assertSecretsSafe(input) {
   const { host, jwtSecret, vaultKeyDerived, warn } = input;
@@ -12458,6 +12658,27 @@ function readFunctions(root) {
         console.warn(`  warning: [functions.${name}] framework "${framework}" is not one of fetch/elysia/hono; falling back to fetch`);
       }
     }
+    const timeoutMs = getInt(t, "timeout_ms");
+    if (timeoutMs !== undefined && timeoutMs > 0)
+      opts.timeoutMs = timeoutMs;
+    const maxRequestBodyBytes = getInt(t, "max_request_body_bytes");
+    if (maxRequestBodyBytes !== undefined && maxRequestBodyBytes > 0)
+      opts.maxRequestBodyBytes = maxRequestBodyBytes;
+    const maxResponseBodyBytes = getInt(t, "max_response_body_bytes");
+    if (maxResponseBodyBytes !== undefined && maxResponseBodyBytes > 0)
+      opts.maxResponseBodyBytes = maxResponseBodyBytes;
+    const waitUntilTimeoutMs = getInt(t, "wait_until_timeout_ms");
+    if (waitUntilTimeoutMs !== undefined && waitUntilTimeoutMs > 0)
+      opts.waitUntilTimeoutMs = waitUntilTimeoutMs;
+    const outboundHosts = getStringArray(t, "outbound_hosts");
+    if (outboundHosts !== undefined)
+      opts.outboundHosts = outboundHosts;
+    const secrets = getStringArray(t, "secrets");
+    if (secrets !== undefined)
+      opts.secrets = secrets;
+    const background = getBool(t, "background");
+    if (background !== undefined)
+      opts.background = background;
     out[name] = opts;
   }
   return out;
@@ -12633,9 +12854,23 @@ async function loadFunctionsUnlocked(projectDir, options) {
         const defaultExport = mod.default;
         const handler = typeof defaultExport === "function" ? defaultExport : defaultExport && (typeof defaultExport.handle === "function" || typeof defaultExport.fetch === "function") ? defaultExport : denoHandler ? (req) => denoHandler(req) : undefined;
         if (handler) {
+          const opts = options[name];
+          const limits = opts && (opts.timeoutMs !== undefined || opts.maxRequestBodyBytes !== undefined || opts.maxResponseBodyBytes !== undefined || opts.waitUntilTimeoutMs !== undefined) ? {
+            ...opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {},
+            ...opts.maxRequestBodyBytes !== undefined ? { maxRequestBodyBytes: opts.maxRequestBodyBytes } : {},
+            ...opts.maxResponseBodyBytes !== undefined ? { maxResponseBodyBytes: opts.maxResponseBodyBytes } : {},
+            ...opts.waitUntilTimeoutMs !== undefined ? { waitUntilTimeoutMs: opts.waitUntilTimeoutMs } : {}
+          } : undefined;
+          const capabilities = opts && (opts.outboundHosts !== undefined || opts.secrets !== undefined || opts.background !== undefined) ? {
+            ...opts.outboundHosts !== undefined ? { outboundHosts: opts.outboundHosts } : {},
+            ...opts.secrets !== undefined ? { secrets: opts.secrets } : {},
+            ...opts.background !== undefined ? { background: opts.background } : {}
+          } : undefined;
           functions.set(name, {
             handler,
-            framework: resolveFramework(name, options[name]?.framework)
+            framework: resolveFramework(name, opts?.framework),
+            ...limits ? { limits } : {},
+            ...capabilities ? { capabilities } : {}
           });
         } else {
           console.warn(`  warning: function "${name}" has no default function, handle/fetch object, or Deno.serve() handler, skipped`);

package/dist/runtime/functions/edge-runtime-shim.d.ts

@@ -0,0 +1,15 @@
+/** Install globalThis.EdgeRuntime.waitUntil once per process (idempotent). */
+export declare function installEdgeRuntimeShim(): void;
+/**
+ * Run `fn` with an EdgeRuntime.waitUntil scope. When `fn` settles, its
+ * background tasks are flushed without blocking the returned value: the flush
+ * waits for allSettled up to `timeoutMs` (wait_until_timeout_ms), after which
+ * it stops waiting and warns - like production, abandoned tasks keep running.
+ * Lite backend close() does not wait for in-flight background tasks; tasks
+ * still drifting at shutdown are dropped with the process.
+ */
+export declare function runWithBackgroundTasks<T>(options: {
+    allowed: boolean;
+    timeoutMs?: number;
+}, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=edge-runtime-shim.d.ts.map

package/dist/runtime/functions/edge-runtime-shim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-runtime-shim.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/edge-runtime-shim.ts"],"names":[],"mappings":"AA2CA,8EAA8E;AAC9E,wBAAgB,sBAAsB,IAAI,IAAI,CAiB7C;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EACjD,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAWZ"}

package/dist/runtime/functions/fetch-policy.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Run `fn` with fetch restricted to `allowedHosts` (plus loopback). The
+ * binding lives in an async-context store, so it stays correct across awaits
+ * and never leaks into other invocations - there is nothing to restore.
+ */
+export declare function runWithFetchPolicy<T>(allowedHosts: string[], fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=fetch-policy.d.ts.map

package/dist/runtime/functions/fetch-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-policy.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/fetch-policy.ts"],"names":[],"mappings":"AAsCA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAG9F"}

package/dist/runtime/functions/handler.d.ts

@@ -31,14 +31,53 @@ export interface FrameworkObjectHandler {
 }
 /** Anything registerable as a function: plain fetch handler or router object. */
 export type FunctionHandler = EdgeFunction | FrameworkObjectHandler;
-/** A loaded function plus its declared framework profile. */
+/**
+ * Per-invocation resource limits, aligned with the Edge Runtime Manifest v2
+ * `limits` block (timeout_ms / max_request_body_bytes /
+ * max_response_body_bytes / wait_until_timeout_ms). Lite defaults to no
+ * limit when undeclared; production caps at 900s / 30MB.
+ */
+export interface FunctionLimits {
+    /** limits.timeout_ms: max wall time per invocation; on expiry the request is aborted and a 504 returned. */
+    timeoutMs?: number;
+    /** limits.max_request_body_bytes: max inbound body size; oversized bodies get a 413. */
+    maxRequestBodyBytes?: number;
+    /** limits.max_response_body_bytes: max outbound body size; oversized responses get a 502 / cut stream. */
+    maxResponseBodyBytes?: number;
+    /** limits.wait_until_timeout_ms: max time to wait for EdgeRuntime.waitUntil tasks after the response. */
+    waitUntilTimeoutMs?: number;
+}
+/**
+ * Declared capabilities, aligned with the Edge Runtime Manifest v2
+ * `capabilities` block (secrets / outbound_hosts / background). Undeclared
+ * means unrestricted (back-compat).
+ */
+export interface FunctionCapabilities {
+    /** capabilities.secrets: env keys (beyond the SUPABASE_* base trio) visible to the function. */
+    secrets?: string[];
+    /** capabilities.outbound_hosts: exact fetch host allowlist (no port); loopback is always allowed. */
+    outboundHosts?: string[];
+    /**
+     * capabilities.background: whether EdgeRuntime.waitUntil is enabled. Lite
+     * defaults to allowed (local back-compat); only an explicit `false` takes
+     * the production error path.
+     */
+    background?: boolean;
+}
+/** A loaded function plus its declared framework profile, limits, and capabilities. */
 export interface LoadedFunction {
     handler: FunctionHandler;
     /** config.toml [functions.<name>].framework; `fetch` keeps legacy routing. */
     framework?: FunctionFramework;
+    /** config.toml [functions.<name>] timeout_ms / max_request_body_bytes / max_response_body_bytes / wait_until_timeout_ms. */
+    limits?: FunctionLimits;
+    /** config.toml [functions.<name>] secrets / outbound_hosts / background. */
+    capabilities?: FunctionCapabilities;
 }
 /** Registry value: a bare handler or a {@link LoadedFunction} entry. */
 export type FunctionRegistryValue = FunctionHandler | LoadedFunction;
+/** Header written only after Lite has verified the request JWT. */
+export declare const VERIFIED_JWT_SUBJECT_HEADER = "x-supacloud-jwt-sub";
 /** Second argument passed to every {@link EdgeFunction} invocation. */
 export interface FunctionContext {
     /** verified request context (role + JWT claims) resolved by the router */
@@ -69,8 +108,16 @@ export declare class FunctionsHandler {
     register(name: string, fn: FunctionRegistryValue): void;
     /** Names of all registered functions. */
     list(): string[];
-    /** Dispatch a /functions/v1/<name> request to its handler, returning a 404 when unknown and a 500 when the handler throws or returns a non-Response. */
+    /**
+     * Dispatch a /functions/v1/<name> request to its handler, returning a 404 when
+     * unknown and a 500 when the handler throws or returns a non-Response.
+     * Declared limits/capabilities are enforced in order: request body size (413),
+     * invocation timeout (504), outbound host allowlist, secrets allowlist,
+     * EdgeRuntime.waitUntil background scope, response body size (502).
+     */
     handle(req: Request, ctx: RequestContext, url: URL): Promise<Response>;
+    /** Race the invocation against `timeoutMs`; on timeout abort the request and answer 504. */
+    private withTimeout;
     private invoke;
 }
 //# sourceMappingURL=handler.d.ts.map

package/dist/runtime/functions/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,cAAc,CAAA;AAErE,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE3D;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvD,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACvC;AAED,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,sBAAsB,CAAA;AAEnE,6DAA6D;AAC7D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAA;IACxB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAA;CAC9B;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,cAAc,CAAA;AAEpE,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,cAAc,CAAA;IACpB,4HAA4H;IAC5H,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAA;QACpB,iBAAiB,EAAE,MAAM,CAAA;QACzB,yBAAyB,EAAE,MAAM,CAAA;QACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KACtB,CAAA;CACF;AAUD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAMlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,uFAAuF;AACvF,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,OAAO;IAHjB,YACU,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC7C,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,EAC3B,OAAO,EAAE,YAAY,EAC3B;IAEJ,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,qBAAqB,GAAG,IAAI,CAEtD;IAED,yCAAyC;IACzC,IAAI,IAAI,MAAM,EAAE,CAEf;IAED,wJAAwJ;IAClJ,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA4B3E;IAED,OAAO,CAAC,MAAM;CAYf"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,cAAc,CAAA;AAErE,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE3D;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvD,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACvC;AAED,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,sBAAsB,CAAA;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,0GAA0G;IAC1G,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAA;IACxB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,4HAA4H;IAC5H,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,oBAAoB,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,cAAc,CAAA;AAEpE,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,wBAAwB,CAAA;AAsBhE,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,cAAc,CAAA;IACpB,4HAA4H;IAC5H,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAA;QACpB,iBAAiB,EAAE,MAAM,CAAA;QACzB,yBAAyB,EAAE,MAAM,CAAA;QACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KACtB,CAAA;CACF;AAUD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAQlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,uFAAuF;AACvF,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,OAAO;IAHjB,YACU,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC7C,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,EAC3B,OAAO,EAAE,YAAY,EAC3B;IAEJ,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,qBAAqB,GAAG,IAAI,CAEtD;IAED,yCAAyC;IACzC,IAAI,IAAI,MAAM,EAAE,CAEf;IAED;;;;;;OAMG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2E3E;IAED,4FAA4F;YAC9E,WAAW;IA4BzB,OAAO,CAAC,MAAM;CAiBf"}

package/dist/runtime/index.d.ts

@@ -18,10 +18,11 @@ export { SmsInbox, type SmsInboxEntry } from './auth/sms-inbox.js';
 export { LogBuffer, type LogEntry, type LogLevel } from './log-buffer.js';
 export { RealtimeEngine, type RealtimeSocketLike } from './realtime/engine.js';
 export { signJwt, verifyJwt, decodeJwt } from './jwt.js';
-export { FunctionsHandler, isFrameworkRouterHandler, toFunctionLocalUrl, type EdgeFunction, type FrameworkObjectHandler, type FunctionContext, type FunctionFramework, type FunctionHandler, type FunctionRegistryValue, type LoadedFunction, } from './functions/handler.js';
+export { FunctionsHandler, VERIFIED_JWT_SUBJECT_HEADER, isFrameworkRouterHandler, toFunctionLocalUrl, type EdgeFunction, type FrameworkObjectHandler, type FunctionCapabilities, type FunctionContext, type FunctionFramework, type FunctionHandler, type FunctionLimits, type FunctionRegistryValue, type LoadedFunction, } from './functions/handler.js';
 export { type PgredisCacheBinding } from './functions/pgredis.js';
 export { generateTypes } from './gen-types.js';
 export { installDenoShim } from './functions/deno-shim.js';
+export { installEdgeRuntimeShim } from './functions/edge-runtime-shim.js';
 export { WebhooksService, type WebhookConfig, type WebhookDelivery } from './webhooks/service.js';
 export { CronService, cronMatches } from './cron/service.js';
 export { NetService, type NetDelivery } from './net/service.js';

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAA8B,MAAM,wBAAwB,CAAA;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrD,OAAO,EAAE,eAAe,EAAwB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAU,aAAa,EAA6B,MAAM,YAAY,CAAA;AAGjG,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjG,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,mFAAmF;IACnF,EAAE,EAAE,QAAQ,CAAA;IACZ,6EAA6E;IAC7E,QAAQ,EAAE,cAAc,CAAA;IACxB,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,eAAe,CAAA;IACzB,mCAAmC;IACnC,IAAI,EAAE,WAAW,CAAA;IACjB,wDAAwD;IACxD,GAAG,EAAE,UAAU,CAAA;IACf,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,IAAI,EAAE,SAAS,CAAA;IACf,4FAA4F;IAC5F,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,gHAAgH;IAChH,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,gGAAgG;IAChG,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+W7F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAA8B,MAAM,wBAAwB,CAAA;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrD,OAAO,EAAE,eAAe,EAAwB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAU,aAAa,EAA6B,MAAM,YAAY,CAAA;AAGjG,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjG,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,mFAAmF;IACnF,EAAE,EAAE,QAAQ,CAAA;IACZ,6EAA6E;IAC7E,QAAQ,EAAE,cAAc,CAAA;IACxB,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,eAAe,CAAA;IACzB,mCAAmC;IACnC,IAAI,EAAE,WAAW,CAAA;IACjB,wDAAwD;IACxD,GAAG,EAAE,UAAU,CAAA;IACf,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,IAAI,EAAE,SAAS,CAAA;IACf,4FAA4F;IAC5F,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,gHAAgH;IAChH,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,gGAAgG;IAChG,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+W7F"}

package/dist/runtime/node/load-config.d.ts

@@ -78,6 +78,20 @@ export interface FunctionOptions {
     entrypoint?: string;
     /** [functions.<name>].framework: fetch (default), elysia, or hono */
     framework?: import('../functions/handler.js').FunctionFramework;
+    /** [functions.<name>].timeout_ms: invocation timeout (Edge Runtime limits.timeout_ms) */
+    timeoutMs?: number;
+    /** [functions.<name>].max_request_body_bytes (Edge Runtime limits.max_request_body_bytes) */
+    maxRequestBodyBytes?: number;
+    /** [functions.<name>].max_response_body_bytes (Edge Runtime limits.max_response_body_bytes) */
+    maxResponseBodyBytes?: number;
+    /** [functions.<name>].wait_until_timeout_ms (Edge Runtime limits.wait_until_timeout_ms) */
+    waitUntilTimeoutMs?: number;
+    /** [functions.<name>].outbound_hosts: fetch host allowlist (Edge Runtime capabilities.outbound_hosts) */
+    outboundHosts?: string[];
+    /** [functions.<name>].secrets: env keys exposed to the function (Edge Runtime capabilities.secrets) */
+    secrets?: string[];
+    /** [functions.<name>].background: EdgeRuntime.waitUntil gate (Edge Runtime capabilities.background); lite defaults to true */
+    background?: boolean;
 }
 /** Parse supabase/config.toml once and project it into a {@link ProjectConfig}. */
 export declare function loadProjectConfig(projectDir: string, env?: Environment): ProjectConfig;

package/dist/runtime/node/load-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAUL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAA;IAChB,mDAAmD;IACnD,GAAG,EAAE,SAAS,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,aAAa,CAAA;IACtB,gDAAgD;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC1C,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACpD;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,yBAAyB,EAAE,iBAAiB,CAAA;CAChE;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,WAAyB,GAAG,aAAa,CASnG"}
+{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAUL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAA;IAChB,mDAAmD;IACnD,GAAG,EAAE,SAAS,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,aAAa,CAAA;IACtB,gDAAgD;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC1C,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACpD;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,yBAAyB,EAAE,iBAAiB,CAAA;IAC/D,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+FAA+F;IAC/F,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,8HAA8H;IAC9H,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,WAAyB,GAAG,aAAa,CASnG"}

package/dist/runtime/node/load-functions.d.ts

@@ -13,6 +13,20 @@ export interface LoadFunctionOptions {
     entrypoint?: string;
     /** Framework profile: fetch (default, legacy routing), elysia, or hono. */
     framework?: FunctionFramework;
+    /** Invocation timeout in ms (Edge Runtime limits.timeout_ms). */
+    timeoutMs?: number;
+    /** Max inbound request body bytes (Edge Runtime limits.max_request_body_bytes). */
+    maxRequestBodyBytes?: number;
+    /** Max outbound response body bytes (Edge Runtime limits.max_response_body_bytes). */
+    maxResponseBodyBytes?: number;
+    /** Max wait for EdgeRuntime.waitUntil tasks after the response (Edge Runtime limits.wait_until_timeout_ms). */
+    waitUntilTimeoutMs?: number;
+    /** Outbound fetch host allowlist (Edge Runtime capabilities.outbound_hosts). */
+    outboundHosts?: string[];
+    /** Env keys exposed to the function beyond the SUPABASE_* base trio (Edge Runtime capabilities.secrets). */
+    secrets?: string[];
+    /** EdgeRuntime.waitUntil gate (Edge Runtime capabilities.background); lite defaults to allowed. */
+    background?: boolean;
 }
 /**
  * Discover and load every edge function under supabase/functions/, keyed by

package/dist/runtime/node/load-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-functions.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-functions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAwC,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAItH;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBzF;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,iBAAiB,CAAA;CAC9B;AAaD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAM,GAChD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAYtC"}
+{"version":3,"file":"load-functions.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-functions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAwC,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAItH;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBzF;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,sFAAsF;IACtF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,+GAA+G;IAC/G,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,mGAAmG;IACnG,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAaD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAM,GAChD,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAYtC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/lite",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Bun-native, single-project Supabase-compatible backend powered by PGlite or native PostgreSQL",
   "type": "module",
   "license": "Apache-2.0",
@@ -50,6 +50,7 @@
   },
   "dependencies": {
     "@electric-sql/pglite": "0.5.8",
+    "@supacloud/db": "^0.1.0",
     "tar": "^7.5.22"
   },
   "devDependencies": {