@supacloud/lite 0.2.0

package/dist/vendor/tinbase/types.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Public configuration and shared types for the tinbase package. {@link BackendConfig}
+ * is the primary input to {@link import('./index.js').createBackend}; the rest are
+ * the small structural types that config and handlers exchange.
+ */
+import type { JwtClaims } from './jwt.js';
+/** A single SQL migration, in Supabase CLI form (one file under supabase/migrations). */
+export interface MigrationFile {
+    /** e.g. "20240101120000_create_posts" (no extension) */
+    name: string;
+    /** Raw SQL applied in one statement batch. */
+    sql: string;
+}
+/**
+ * Configuration for {@link import('./index.js').createBackend}. Every field is
+ * optional; an empty config boots an in-memory PGlite backend on the Supabase
+ * local-dev defaults. The CLI derives this object from supabase/config.toml plus
+ * the project's migrations/functions/seed.
+ */
+export interface BackendConfig {
+    /**
+     * PGlite data directory. Node: a filesystem path. Browser: "idb://name" or
+     * "opfs-ahp://name". Omit for in-memory. Ignored when `engine` is set.
+     */
+    dataDir?: string;
+    /**
+     * Custom database engine (e.g. the native embedded Postgres engine from
+     * "tinbase/node"). Default: PGlite on `dataDir`.
+     */
+    engine?: import('./db/engine.js').DbEngine;
+    /** Secret used to sign/verify every JWT. Defaults to the Supabase local-dev secret. */
+    jwtSecret?: string;
+    /**
+     * Schemas exposed through the Data API (/rest/v1) for anon/authenticated -
+     * PostgREST's db-schemas. Requests profiling into any other schema get a 406
+     * unless made with the service_role key. Default: ['public'].
+     */
+    dbSchemas?: string[];
+    /**
+     * Auth setting defaults (the committed baseline, e.g. read from
+     * supabase/config.toml's [auth] section). Live studio edits, persisted in the
+     * auth.config table, are layered on top. Any omitted key falls back to the
+     * built-in default.
+     */
+    authSettings?: Partial<import('./auth/settings.js').AuthSettings>;
+    /**
+     * Key used to encrypt Vault secrets at rest (pgcrypto). Held only in a session
+     * GUC, never stored in the database. Defaults to a value derived from
+     * jwtSecret. Required when binding to a network-exposed host (see `host`);
+     * always set a dedicated key in production.
+     */
+    vaultKey?: string;
+    /** Public API URL of this backend, used for JWT issuer, OAuth callbacks, email links, and Edge Function env. */
+    apiUrl?: string;
+    /** Frontend site URL used as the default Auth redirect target. */
+    siteUrl?: string;
+    /**
+     * Host the server is bound to. Used only to decide whether the backend is
+     * network-exposed: a non-loopback host turns the default JWT secret and the
+     * derived vault key from warnings into hard startup errors. Default: treated
+     * as loopback (local dev) when omitted.
+     */
+    host?: string;
+    /** Access token lifetime in seconds (default 3600). */
+    jwtExpiry?: number;
+    /**
+     * Redirect targets allowed beyond the site URL's own origin (GoTrue's
+     * URI_ALLOW_LIST). Entries may use `*`/`**` globs. A `redirect_to` matching
+     * neither the site origin nor an entry falls back to the site URL.
+     */
+    uriAllowList?: string[];
+    /** Migrations to apply on boot (Supabase CLI convention: sorted by name). */
+    migrations?: MigrationFile[];
+    /** SQL from supabase/seed.sql, applied once after the first migration run. */
+    seedSql?: string;
+    /** Where object storage bytes live. Default: in-memory. Node CLI passes a fs driver. */
+    storageDriver?: StorageDriver;
+    /** Edge functions: name → fetch handler, served at /functions/v1/<name>. */
+    functions?: Map<string, import('./functions/handler.js').EdgeFunction> | Record<string, import('./functions/handler.js').EdgeFunction>;
+    /** Per-function JWT verification setting from config.toml; false makes the function public. */
+    functionVerifyJwt?: Record<string, boolean>;
+    /** Extra env/secrets exposed to functions via Deno.env and ctx.env (e.g. from supabase/functions/.env). */
+    functionEnv?: Record<string, string>;
+    /** Mail transport for OTP/magic-link/recovery emails. Default: console logger. */
+    mailer?: Mailer;
+    /** OAuth providers, e.g. { google: { clientId, clientSecret } }. Served at /auth/v1/authorize. */
+    oauthProviders?: Record<string, import('./auth/oauth.js').OAuthProviderConfig>;
+    /** Injectable fetch for OAuth provider calls (tests point this at a mock provider). */
+    oauthFetch?: typeof fetch;
+    /** Database webhooks: fire HTTP requests on table changes. */
+    webhooks?: import('./webhooks/service.js').WebhookConfig[];
+    /** Injectable fetch for webhook delivery (tests capture calls). */
+    webhookFetch?: typeof fetch;
+    /** Injectable fetch for net.http_* (pg_net emulation) delivery (tests capture calls). */
+    netFetch?: typeof fetch;
+    /** Print startup/debug logs. */
+    log?: (msg: string) => void;
+    /**
+     * Log the full body of auth emails (OTP codes, magic links) to the server log.
+     * Off by default so secrets don't land in log files; the /inbox dev UI still
+     * shows the full body regardless. Enable only for local debugging.
+     */
+    logMailBody?: boolean;
+    /** Data-retention windows for the background cleanup sweep. */
+    retention?: import('./retention/service.js').RetentionConfig;
+    /** Max rows a single REST read returns (PostgREST db-max-rows; config.toml api.max_rows). Unlimited if unset. */
+    maxRows?: number;
+    /** Default per-bucket file size limit in bytes (config.toml storage.file_size_limit). */
+    storageFileSizeLimit?: number;
+    /** Buckets to create at boot if absent (config.toml storage.buckets.*). */
+    buckets?: BucketSeed[];
+    /** Force sign-out after this many seconds regardless of activity (config.toml auth.sessions.timebox). */
+    sessionTimeboxSeconds?: number;
+    /** Sign out after this many seconds of inactivity (config.toml auth.sessions.inactivity_timeout). */
+    sessionInactivitySeconds?: number;
+    /** Per-endpoint auth rate-limit rules (config.toml auth.rate_limit.*). Defaults applied when unset. */
+    authRateLimits?: Record<string, import('./auth/rate-limit.js').RateLimitRule>;
+    /** Mount the auth service. Default true; config.toml auth.enabled = false turns /auth/v1 off. */
+    authEnabled?: boolean;
+}
+/** A rendered outbound email (OTP code, magic link, recovery, etc.). */
+export interface MailMessage {
+    to: string;
+    subject: string;
+    /** Plain-text body. Carries OTP codes / magic links, so it is not logged by default. */
+    text: string;
+}
+/** Pluggable mail transport. Default implementation logs to the console. */
+export interface Mailer {
+    send(msg: MailMessage): Promise<void>;
+}
+/**
+ * The public Supabase local-dev JWT secret. Used when no `jwtSecret` is set so
+ * default keys match a stock `supabase start`.
+ *
+ * SECURITY: forgeable by anyone (it is public). Startup refuses to bind to a
+ * network-exposed host while still using it - see {@link import('./security.js').assertSecretsSafe}.
+ */
+export declare const DEFAULT_JWT_SECRET = "";
+/** Per-request execution context derived from apikey/Authorization headers. */
+export interface RequestContext {
+    /** Postgres role to SET LOCAL: anon | authenticated | service_role */
+    role: string;
+    /** Verified JWT claims (published to request.jwt.claims for RLS). */
+    claims: JwtClaims | null;
+}
+/** A bucket to create at boot (from config.toml [storage.buckets.<id>]). */
+export interface BucketSeed {
+    id: string;
+    public: boolean;
+    /** Per-bucket byte limit, or null for none. */
+    fileSizeLimit: number | null;
+    /** Allowed MIME types, or null for any. */
+    allowedMimeTypes: string[] | null;
+}
+/** Pluggable object-storage backend for bucket bytes (in-memory, fs, etc.). */
+export interface StorageDriver {
+    put(key: string, data: Uint8Array): Promise<void>;
+    get(key: string): Promise<Uint8Array | null>;
+    delete(key: string): Promise<void>;
+    deleteMany(keys: string[]): Promise<void>;
+    /** Remote drivers can require cleanup failures to reach the API caller. */
+    cleanupFailureMode?: 'ignore' | 'propagate';
+}
+/** Error carrying an HTTP status + JSON body, thrown by handlers and rendered as-is to the client. */
+export declare class ApiError extends Error {
+    status: number;
+    body: Record<string, unknown>;
+    constructor(status: number, body: Record<string, unknown>);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/vendor/tinbase/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/vendor/tinbase/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAA;IACZ,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAA;CACZ;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,gBAAgB,EAAE,QAAQ,CAAA;IAC1C,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC,OAAO,oBAAoB,EAAE,YAAY,CAAC,CAAA;IACjE;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gHAAgH;IAChH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,wFAAwF;IACxF,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,wBAAwB,EAAE,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,wBAAwB,EAAE,YAAY,CAAC,CAAA;IACtI,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,2GAA2G;IAC3G,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpC,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,kGAAkG;IAClG,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,iBAAiB,EAAE,mBAAmB,CAAC,CAAA;IAC9E,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,KAAK,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,uBAAuB,EAAE,aAAa,EAAE,CAAA;IAC1D,mEAAmE;IACnE,YAAY,CAAC,EAAE,OAAO,KAAK,CAAA;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,EAAE,OAAO,KAAK,CAAA;IACvB,gCAAgC;IAChC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IAC3B;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,wBAAwB,EAAE,eAAe,CAAA;IAC5D,iHAAiH;IACjH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yFAAyF;IACzF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,yGAAyG;IACzG,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,qGAAqG;IACrG,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,uGAAuG;IACvG,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,sBAAsB,EAAE,aAAa,CAAC,CAAA;IAC7E,iGAAiG;IACjG,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,wFAAwF;IACxF,IAAI,EAAE,MAAM,CAAA;CACb;AAED,4EAA4E;AAC5E,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACtC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,qEAAqE;IACrE,MAAM,EAAE,SAAS,GAAG,IAAI,CAAA;CACzB;AAED,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,OAAO,CAAA;IACf,+CAA+C;IAC/C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;CAClC;AAED,+EAA+E;AAC/E,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAA;CAC5C;AAED,sGAAsG;AACtG,qBAAa,QAAS,SAAQ,KAAK;IAExB,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAD7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAIvC"}

package/dist/vendor/tinbase/webhooks/service.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Database webhooks - fire an HTTP request when rows change, the tinbase
+ * equivalent of Supabase Database Webhooks (which use pg_net under the hood).
+ * Built on the existing CDC pipeline (triggers + pg_notify), so it needs no C
+ * extension and works on both engines. The POST body matches Supabase's
+ * webhook payload exactly: { type, table, schema, record, old_record }.
+ */
+import type { CdcEvent, Database } from '../db/database.js';
+/** A registered database webhook: which changes to watch and where to POST them. */
+export interface WebhookConfig {
+    /** table to watch */
+    table: string;
+    /** schema of the watched table; defaults to 'public' */
+    schema?: string;
+    /** which events fire the hook; default all */
+    events?: ('INSERT' | 'UPDATE' | 'DELETE')[];
+    /** destination URL */
+    url: string;
+    /** HTTP method (default POST) */
+    method?: string;
+    /** extra headers (e.g. an auth token) */
+    headers?: Record<string, string>;
+    /** request timeout ms (default 5000) */
+    timeoutMs?: number;
+}
+/** Result of one webhook delivery attempt, passed to the optional `onDelivery` callback. */
+export interface WebhookDelivery {
+    webhook: WebhookConfig;
+    /** the CDC event that triggered this delivery */
+    event: CdcEvent;
+    /** HTTP response status; null when the request never got a reply (error/blocked) */
+    status: number | null;
+    /** true when the response was 2xx */
+    ok: boolean;
+    /** failure reason (network error, blocked SSRF target); undefined on success */
+    error?: string;
+}
+/** Watches the CDC stream and POSTs matching row changes to registered webhooks. */
+export declare class WebhooksService {
+    private db;
+    private fetchImpl;
+    private onDelivery?;
+    /**
+     * Block delivery to loopback/private/link-local targets (SSRF guard). Off by
+     * default so local dev can point a webhook at a local edge function, as
+     * `supabase start` does; the backend turns it on when network-exposed.
+     */
+    private restrictTargets;
+    private hooks;
+    private stop;
+    private started;
+    constructor(db: Database, fetchImpl?: typeof fetch, onDelivery?: ((d: WebhookDelivery) => void) | undefined, 
+    /**
+     * Block delivery to loopback/private/link-local targets (SSRF guard). Off by
+     * default so local dev can point a webhook at a local edge function, as
+     * `supabase start` does; the backend turns it on when network-exposed.
+     */
+    restrictTargets?: boolean);
+    /** All currently registered webhooks. */
+    list(): WebhookConfig[];
+    /** Register a webhook (ensures the CDC trigger + subscription are live). */
+    register(hook: WebhookConfig): Promise<void>;
+    /** Register an initial set of webhooks and start dispatching if any exist. */
+    start(initial?: WebhookConfig[]): Promise<void>;
+    private ensureStarted;
+    /** Unsubscribe from the CDC stream; registered hooks are retained. */
+    stopService(): void;
+    private dispatch;
+    private deliver;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/vendor/tinbase/webhooks/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/vendor/tinbase/webhooks/service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG3D,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAA;IACb,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8CAA8C;IAC9C,MAAM,CAAC,EAAE,CAAC,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAA;IAC3C,sBAAsB;IACtB,GAAG,EAAE,MAAM,CAAA;IACX,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,aAAa,CAAA;IACtB,iDAAiD;IACjD,KAAK,EAAE,QAAQ,CAAA;IACf,oFAAoF;IACpF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,qCAAqC;IACrC,EAAE,EAAE,OAAO,CAAA;IACX,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,oFAAoF;AACpF,qBAAa,eAAe;IAMxB,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,UAAU,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAbzB,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,OAAO,CAAQ;gBAGb,EAAE,EAAE,QAAQ,EACZ,SAAS,GAAE,OAAO,KAAa,EAC/B,UAAU,CAAC,GAAE,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,aAAA;IACjD;;;;OAIG;IACK,eAAe,UAAQ;IAGjC,yCAAyC;IACzC,IAAI,IAAI,aAAa,EAAE;IAIvB,4EAA4E;IACtE,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlD,8EAA8E;IACxE,KAAK,CAAC,OAAO,GAAE,aAAa,EAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAQ3C,aAAa;IAM3B,sEAAsE;IACtE,WAAW,IAAI,IAAI;IAMnB,OAAO,CAAC,QAAQ;YAUF,OAAO;CAmCtB"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const SUPACLOUD_LITE_VERSION: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,QAAsB,CAAA"}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@supacloud/lite",
+  "version": "0.2.0",
+  "description": "Bun-native, single-project Supabase-compatible backend powered by PGlite",
+  "type": "module",
+  "license": "Apache-2.0",
+  "bin": {
+    "supacloud-lite": "dist/cli.js"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "RELEASING.md",
+    "THIRD_PARTY_NOTICES.md",
+    "LICENSES"
+  ],
+  "scripts": {
+    "build": "bun run build:js && bun run build:types",
+    "build:js": "bun build src/index.ts --target=bun --format=esm --outdir=dist --external @electric-sql/pglite && bun build src/cli.ts --target=bun --format=esm --outdir=dist --external @electric-sql/pglite",
+    "build:types": "bun x tsc --emitDeclarationOnly -p tsconfig.build.json",
+    "check": "bun run typecheck && bun run test && bun run build && bun run test:package",
+    "dev": "bun run src/cli.ts start",
+    "start": "bun run src/cli.ts start",
+    "test": "bun test --timeout 20000",
+    "test:package": "bun run scripts/package-smoke.ts",
+    "prepack": "bun run build",
+    "typecheck": "bun x tsc --noEmit -p tsconfig.json"
+  },
+  "dependencies": {
+    "@electric-sql/pglite": "0.5.4"
+  },
+  "devDependencies": {
+    "@supabase/supabase-js": "^2.57.4",
+    "@types/bun": "^1.3.14",
+    "typescript": "^5.9.3"
+  },
+  "engines": {
+    "bun": ">=1.3.14"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zuohuadong/supacloud.git",
+    "directory": "packages/supacloud-lite"
+  },
+  "keywords": [
+    "supabase",
+    "pglite",
+    "bun",
+    "postgres",
+    "local-first"
+  ]
+}