@supacloud/lite 0.35.2 → 0.36.0

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## [0.36.0](https://github.com/vibeunion/supacloud/compare/supacloud-lite-v0.35.2...supacloud-lite-v0.36.0) (2026-10-31)
+
+
+### ⚠ BREAKING CHANGES
+
+* **lite:** new native databases and default physical snapshot restores target PostgreSQL 18. Existing PostgreSQL 17 state requires an explicitly selected PostgreSQL 17 installation until logical migration.
+
+### Features
+
+* **lite:** upgrade default native PostgreSQL to 18 ([#2313](https://github.com/vibeunion/supacloud/issues/2313)) ([325ff75](https://github.com/vibeunion/supacloud/commit/325ff75bbc81249bc5fb4c1e8cf249185f1e6065))
+* **web-console:** migrate applications page to svadmin ([#2320](https://github.com/vibeunion/supacloud/issues/2320)) ([b643a27](https://github.com/vibeunion/supacloud/commit/b643a279debe862c3feb71e4da10c7d65bdb8769))
+
+
+### Miscellaneous Chores
+
+* **workspace:** replace Nx scheduling with Bun ([#2321](https://github.com/vibeunion/supacloud/issues/2321)) ([c2d5b27](https://github.com/vibeunion/supacloud/commit/c2d5b270ca0d0d8e04e4547f270c9750b44a0096))
+
 ## [0.35.2](https://github.com/vibeunion/supacloud/compare/supacloud-lite-v0.35.1...supacloud-lite-v0.35.2) (2026-10-31)
 
 

package/LICENSES/{POSTGRESQL-17-COPYRIGHT.txt → POSTGRESQL-18-COPYRIGHT.txt}

@@ -1,7 +1,7 @@
 PostgreSQL Database Management System
 (also known as Postgres, formerly known as Postgres95)
 
-Portions Copyright (c) 1996-2025, PostgreSQL Global Development Group
+Portions Copyright (c) 1996-2026, PostgreSQL Global Development Group
 
 Portions Copyright (c) 1994, The Regents of the University of California
 

package/README.md

@@ -13,7 +13,7 @@ V1 的目标不是复刻完整 Supabase 平台控制面，而是让现有应用
 ### 状态
 
 - 运行时：npm 包需要 Bun 1.4.4+；单二进制发行版已内嵌 Bun 和 PGlite 资源
-- 数据库：PGlite 0.5.10，或 native PostgreSQL
+- 数据库：PGlite 0.5.10，或 native PostgreSQL 18（默认下载 Theseus 18.6.1）
 - 项目模型：单进程、单项目，内部 project ref 固定为 `local`
 - 客户端：直接使用官方 `@supabase/supabase-js`
 - 数据目录：`.supacloud-lite/db`
@@ -106,6 +106,7 @@ timeout_ms = 15000                        # limits.timeout_ms
 max_request_body_bytes = 1048576          # limits.max_request_body_bytes
 max_response_body_bytes = 524288          # limits.max_response_body_bytes
 wait_until_timeout_ms = 2000              # limits.wait_until_timeout_ms
+max_heap_bytes = 134217728                # limits.max_heap_bytes（校验，不强制隔离）
 outbound_hosts = ["api.example.com"]      # capabilities.outbound_hosts
 secrets = ["OPENAI_API_KEY"]              # capabilities.secrets
 background = true                         # capabilities.background
@@ -117,6 +118,7 @@ background = true                         # capabilities.background
 | `max_request_body_bytes` | integer | 请求体上限；content-length 超限返回 413，无长度声明的流式 body 超限则中断读取 | `limits.max_request_body_bytes` |
 | `max_response_body_bytes` | integer | 响应体上限；content-length 超限直接替换为 502，流式 body 超限则在传输中截断（状态行已提交，客户端看到流中断） | `limits.max_response_body_bytes` |
 | `wait_until_timeout_ms` | integer | 响应返回后等待 `EdgeRuntime.waitUntil` 后台任务的最长时间；超时不再等待（任务继续运行，记录警告） | `limits.wait_until_timeout_ms` |
+| `max_heap_bytes` | integer | 1 字节到 512 MiB。strict 模式拒绝非法值。Lite 没有 Worker 隔离，不会按该值采样堆或回收进程 | `limits.max_heap_bytes` |
 | `outbound_hosts` | string[] | `fetch` 出站 host 白名单（精确匹配，不含端口）；loopback（localhost/127.0.0.1/::1）始终放行，未声明的 host 直接抛错 | `capabilities.outbound_hosts` |
 | `secrets` | string[] | 函数可见的环境变量白名单：基础三键（`SUPABASE_URL`/`SUPABASE_ANON_KEY`/`SUPABASE_SERVICE_ROLE_KEY`）+ 声明的 key，同时约束 `Deno.env` 与 `ctx.env` | `capabilities.secrets` |
 | `background` | boolean | 是否允许 `EdgeRuntime.waitUntil`；设为 `false` 时调用抛出与生产一致的错误 | `capabilities.background` |
@@ -162,7 +164,7 @@ sso_domains = ["acme.example"]
 
 ### 新版应用兼容
 
-Lite 支持平铺 SQL 与 `时间戳目录/migration.sql`，执行前检查重复版本和已应用 SQL 的内容漂移；目标绑定复用 `@supacloud/db`，`migrate --json` 可输出不含参数值的校验记录。`--runtime-mode strict` 对齐函数默认限制并拒绝无效配置、缺失函数和未声明的后台任务。
+Lite 支持平铺 SQL 与 `时间戳目录/migration.sql`，执行前检查重复版本和已应用 SQL 的内容漂移；目标绑定复用 `@supacloud/db`，`migrate --json` 可输出不含参数值的校验记录。`--runtime-mode strict` 对齐函数默认限制并拒绝无效配置、缺失函数和未声明的后台任务。`max_heap_bytes` 接受与生产 Edge Runtime 相同的 1 字节到 512 MiB 声明；strict 模式拒绝非法值。Lite 在进程内执行函数，不按该预算采样堆或回收进程。
 
 `/graphql/v1` 使用真正的 `pg_graphql` 扩展和调用者的数据库角色/RLS，不模拟扩展。默认 PGlite 和标准 native 下载包均不包含该扩展；native 可通过 `--postgres-dir` 选择已经安装匹配扩展的 PostgreSQL。配置 `[lite.graphql] enabled = true` 会在运行时启动前验证扩展，`doctor --json` 区分已支持、缺失与尚未验证。
 
@@ -437,6 +439,9 @@ supacloud-lite doctor --json
 
 ### PostgreSQL 扩展生态
 
+默认 native 下载包使用 PostgreSQL 18。已有 PostgreSQL 17 数据目录和物理快照须继续通过 `--postgres-dir` 选择原 17 安装，完成逻辑迁移后才能使用 18；不能直接替换二进制打开旧数据。
+完整步骤见 [PostgreSQL 17 → 18 迁移方案](../../docs/lite-postgres17-to18-migration.md)。
+
 Lite 默认把一组常用扩展打进 PGlite：`uuid-ossp`、`pgcrypto`、`citext`、
 `pg_trgm`、`ltree`、`hstore`、`fuzzystrmatch`、`pgvector`、
 `pg_textsearch`、PostGIS 和官方 `pgmq`。其中 PostGIS 是上游实验性包，
@@ -447,11 +452,11 @@ PostgreSQL 主版本、操作系统、CPU 架构和 ABI 匹配的 PostgreSQL 安
 ```bash
 supacloud-lite migrate \
   --engine native \
-  --postgres-dir /opt/postgresql/17
+  --postgres-dir /opt/postgresql/18
 
 supacloud-lite doctor \
   --engine native \
-  --postgres-dir /opt/postgresql/17 \
+  --postgres-dir /opt/postgresql/18 \
   --json
 ```
 
@@ -607,7 +612,7 @@ The goal of V1 is not to replicate the full Supabase platform control plane, but
 ### Status
 
 - Runtime: the npm package requires Bun 1.4.4+; the single-binary release embeds Bun and PGlite assets
-- Database: PGlite 0.5.10, or native PostgreSQL
+- Database: PGlite 0.5.10, or native PostgreSQL 18 (Theseus 18.6.1 by default)
 - Project model: single process, single project, with an internal project ref fixed as `local`
 - Client: uses the official `@supabase/supabase-js` directly
 - Data directory: `.supacloud-lite/db`
@@ -907,6 +912,9 @@ duplicate versions and applied SQL drift before pending migrations, and reuses
 `@supacloud/db` for reviewed target bindings. `migrate --json` emits a hash-only
 binding attestation. Strict mode enforces bounded function defaults and rejects
 invalid declarations, missing functions and undeclared background work.
+`max_heap_bytes` accepts the production range of 1 byte through 512 MiB and
+is rejected when invalid in strict mode. Lite does not sample or retire on
+that budget, because functions run in-process.
 
 `/graphql/v1` requires real `pg_graphql` and uses the caller's role/RLS. Neither
 bundled PGlite nor stock native downloads include the extension. Native can use
@@ -1007,6 +1015,12 @@ It uses Realtime's `messages` envelope: at most 100 messages per request, each `
 
 ### PostgreSQL extension ecosystem
 
+The default native download uses PostgreSQL 18. Keep selecting the original
+PostgreSQL 17 installation with `--postgres-dir` for existing major 17 data
+directories and physical snapshots until a logical migration to 18 is complete.
+Replacing binaries cannot upgrade an existing data directory.
+See the [PostgreSQL 17 to 18 migration runbook (中文)](../../docs/lite-postgres17-to18-migration.md).
+
 Lite ships a PostgreSQL-shaped default extension set in PGlite. New databases
 install `uuid-ossp`, `pgcrypto`, `citext`, `pg_trgm`, `ltree`, `hstore`,
 `fuzzystrmatch`, `pgvector`, `pg_textsearch`, PostGIS, and the official PGMQ
@@ -1022,11 +1036,11 @@ match the Lite process:
 ```bash
 supacloud-lite migrate \
   --engine native \
-  --postgres-dir /opt/postgresql/17
+  --postgres-dir /opt/postgresql/18
 
 supacloud-lite doctor \
   --engine native \
-  --postgres-dir /opt/postgresql/17 \
+  --postgres-dir /opt/postgresql/18 \
   --json
 ```
 

package/THIRD_PARTY_NOTICES.md

@@ -30,11 +30,11 @@ extension archives are embedded in the standalone binary.
 
 ## Native PostgreSQL binaries
 
-Linux/macOS 上的可选 native 引擎会按需下载 Theseus 发布的 PostgreSQL 17.7.0 预编译包；该二进制不会内嵌到 npm 包或 Lite 单文件发布物中。
+Linux/macOS 上的可选 native 引擎会按需下载 Theseus 发布的 PostgreSQL 18.6.1 预编译包（PostgreSQL 18.6 的打包修订，包含传递运行库）；该二进制不会内嵌到 npm 包或 Lite 单文件发布物中。
 
 - PostgreSQL license: PostgreSQL License
 - Binary source: `https://github.com/theseus-rs/postgresql-binaries`
-- PostgreSQL copyright copy: `LICENSES/POSTGRESQL-17-COPYRIGHT.txt`
+- PostgreSQL copyright copy: `LICENSES/POSTGRESQL-18-COPYRIGHT.txt`
 - Theseus distribution license copy: `LICENSES/THESEUS-POSTGRESQL-LICENSE.txt`
 - Integrity: Lite 对默认版本的四个平台归档使用内置 SHA-256 固定校验和
 

package/dist/cli.js

@@ -8,7 +8,7 @@ import { dirname as dirname8, join as join10, resolve as resolve7 } from "path";
 // package.json
 var package_default = {
   name: "@supacloud/lite",
-  version: "0.35.2",
+  version: "0.36.0",
   description: "Bun-native, single-project Supabase-compatible backend powered by PGlite or native PostgreSQL",
   type: "module",
   license: "Apache-2.0",
@@ -68,17 +68,17 @@ var package_default = {
     "@electric-sql/pglite-pgmq": "0.0.8",
     "@electric-sql/pglite-pgvector": "0.0.11",
     "@electric-sql/pglite-postgis": "0.2.10",
-    "@supacloud/db": "0.20.2",
+    "@supacloud/db": "0.20.3",
     "exact-mirror": "1.2.6",
     "fast-xml-parser": "5.11.2",
     tar: "^7.5.22",
     typebox: "1.4.3"
   },
   devDependencies: {
-    "@supacloud/app": "0.34.1",
+    "@supacloud/app": "0.35.0",
     "@supacloud/contracts": "0.15.2",
-    "@supacloud/compiler": "0.52.1",
-    "@supacloud/elysia": "0.36.3",
+    "@supacloud/compiler": "0.52.2",
+    "@supacloud/elysia": "0.37.0",
     "@supabase/supabase-js": "^2.118.0",
     "@types/bun": "^1.4.4",
     effect: "4.0.5",
@@ -87,10 +87,10 @@ var package_default = {
     typescript: "^7.0.2"
   },
   overrides: {
-    "@supacloud/db": "0.20.2",
-    "@supacloud/app": "0.34.1",
-    "@supacloud/compiler": "0.52.1",
-    "@supacloud/elysia": "0.36.3",
+    "@supacloud/db": "0.20.3",
+    "@supacloud/app": "0.35.0",
+    "@supacloud/compiler": "0.52.2",
+    "@supacloud/elysia": "0.37.0",
     "@supacloud/contracts": "0.15.2",
     "@supacloud/commands": "0.11.2",
     "@supacloud/delivery": "0.23.1",
@@ -5304,6 +5304,7 @@ async function upsertWithoutTtl(query, key, serializedValue) {
 }
 
 // src/runtime/functions/profile.ts
+var MAX_DECLARED_FUNCTION_HEAP_BYTES = 512 * 1024 * 1024;
 function runtimeMode(value) {
   if (value === undefined)
     return "development";
@@ -5312,14 +5313,23 @@ function runtimeMode(value) {
   return value;
 }
 function strictFunction(entry) {
+  const declaredHeap = entry.limits?.maxHeapBytes;
+  if (declaredHeap !== undefined && (!Number.isSafeInteger(declaredHeap) || declaredHeap < 1 || declaredHeap > MAX_DECLARED_FUNCTION_HEAP_BYTES)) {
+    throw new Error("invalid strict function limit: maxHeapBytes");
+  }
+  const declaredLimits = { ...entry.limits };
+  delete declaredLimits.maxHeapBytes;
   const limits = {
     timeoutMs: 900000,
     maxRequestBodyBytes: 30 * 1024 * 1024,
     maxResponseBodyBytes: 30 * 1024 * 1024,
     waitUntilTimeoutMs: 300000,
-    ...entry.limits
+    ...declaredLimits,
+    ...declaredHeap !== undefined ? { maxHeapBytes: declaredHeap } : {}
   };
   for (const [name, value] of Object.entries(limits)) {
+    if (name === "maxHeapBytes")
+      continue;
     const maximum = name.includes("Body") ? 30 * 1024 * 1024 : name === "waitUntilTimeoutMs" ? 300000 : 900000;
     if (!Number.isSafeInteger(value) || value <= 0 || value > maximum) {
       throw new Error(`invalid strict function limit: ${name}`);
@@ -19870,9 +19880,9 @@ function toPgArrayLiteral(array) {
 }
 
 // src/runtime/node/native/engine.ts
-var DEFAULT_PG_VERSION = "17.7.0";
+var DEFAULT_PG_VERSION = "18.6.1";
 var POSTGRES_MIRROR_URL_ERROR = "SUPACLOUD_LITE_POSTGRES_MIRROR must be an absolute HTTPS URL or a loopback HTTP URL";
-var NATIVE_POSTGRES_MAJOR = DEFAULT_PG_VERSION.split(".")[0] ?? "17";
+var NATIVE_POSTGRES_MAJOR = DEFAULT_PG_VERSION.split(".")[0] ?? "18";
 function nativePostgresMajor(installDir = process.env.SUPACLOUD_LITE_POSTGRES_DIR) {
   if (!installDir)
     return NATIVE_POSTGRES_MAJOR;
@@ -19935,10 +19945,10 @@ function isCompleteInstall(dir) {
   return existsSync2(join(dir, "bin", "postgres")) && existsSync2(join(dir, "share", "postgres.bki"));
 }
 var PINNED_SHA256 = {
-  "postgresql-17.7.0-x86_64-unknown-linux-gnu": "66ad03281a43624f955c8e16ac975cb0ab751e7edf8ba35308e3b08dd7d065c3",
-  "postgresql-17.7.0-aarch64-unknown-linux-gnu": "89cc2f089880cc8e5e6b7a29387829ec4e4779427855bc0b9fa187c8fce33c8b",
-  "postgresql-17.7.0-x86_64-apple-darwin": "0dd8c25173524bad4ae8ef6b970da1ac40f4c1f231150c416ccb8cd06feff8f2",
-  "postgresql-17.7.0-aarch64-apple-darwin": "727ac08d20a704014a0d51eb3300aa0c8e292c1cf0a1c99d4f4b1002e1420220"
+  "postgresql-18.6.1-x86_64-unknown-linux-gnu": "e84b02dd8d0ce5879fb697330a789231c8b8f8d958dae3ad4d90fecc710b1315",
+  "postgresql-18.6.1-aarch64-unknown-linux-gnu": "1ab47fa2f06ff70454309ad02e5d89c46488300d43977231481fd6b160b9d556",
+  "postgresql-18.6.1-x86_64-apple-darwin": "4229812543e19c91864ebdf5d8f78883c5816d51d4cc5d065298260c1f64d37e",
+  "postgresql-18.6.1-aarch64-apple-darwin": "89e91cc80650a43d22c018b95ca356a0c9e15838a1182fed2880bfb5d7d9c9a6"
 };
 async function verifyTarball(tarball, key, upstreamUrl, downloadMirror) {
   const actual = createHash2("sha256").update(readFileSync(tarball)).digest("hex");
@@ -21937,7 +21947,7 @@ function readFunctions(root, mode) {
       }
     }
     if (mode === "strict") {
-      for (const key of ["timeout_ms", "max_request_body_bytes", "max_response_body_bytes", "wait_until_timeout_ms"]) {
+      for (const key of ["timeout_ms", "max_request_body_bytes", "max_response_body_bytes", "wait_until_timeout_ms", "max_heap_bytes"]) {
         if (t.values.has(key)) {
           const value = t.values.get(key);
           if (typeof value !== "string" || !/^\d+$/.test(value) || !Number.isSafeInteger(Number(value)) || Number(value) <= 0) {
@@ -21966,6 +21976,9 @@ function readFunctions(root, mode) {
     const waitUntilTimeoutMs = getInt(t, "wait_until_timeout_ms");
     if (waitUntilTimeoutMs !== undefined && waitUntilTimeoutMs > 0)
       opts.waitUntilTimeoutMs = waitUntilTimeoutMs;
+    const maxHeapBytes = getInt(t, "max_heap_bytes");
+    if (maxHeapBytes !== undefined && maxHeapBytes > 0)
+      opts.maxHeapBytes = maxHeapBytes;
     const outboundHosts = getStringArray(t, "outbound_hosts");
     if (outboundHosts !== undefined)
       opts.outboundHosts = outboundHosts;
@@ -22369,11 +22382,12 @@ async function loadFunctionsUnlocked(projectDir, options, mode) {
         const handler = typeof defaultExport === "function" ? defaultExport : defaultExport && (typeof defaultExport.handle === "function" || typeof defaultExport.fetch === "function") ? defaultExport : denoHandler ? (req) => denoHandler(req) : undefined;
         if (handler) {
           const opts = options[name];
-          const limits = opts && (opts.timeoutMs !== undefined || opts.maxRequestBodyBytes !== undefined || opts.maxResponseBodyBytes !== undefined || opts.waitUntilTimeoutMs !== undefined) ? {
+          const limits = opts && (opts.timeoutMs !== undefined || opts.maxRequestBodyBytes !== undefined || opts.maxResponseBodyBytes !== undefined || opts.waitUntilTimeoutMs !== undefined || opts.maxHeapBytes !== undefined) ? {
             ...opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {},
             ...opts.maxRequestBodyBytes !== undefined ? { maxRequestBodyBytes: opts.maxRequestBodyBytes } : {},
             ...opts.maxResponseBodyBytes !== undefined ? { maxResponseBodyBytes: opts.maxResponseBodyBytes } : {},
-            ...opts.waitUntilTimeoutMs !== undefined ? { waitUntilTimeoutMs: opts.waitUntilTimeoutMs } : {}
+            ...opts.waitUntilTimeoutMs !== undefined ? { waitUntilTimeoutMs: opts.waitUntilTimeoutMs } : {},
+            ...opts.maxHeapBytes !== undefined ? { maxHeapBytes: opts.maxHeapBytes } : {}
           } : undefined;
           const capabilities = opts && (opts.outboundHosts !== undefined || opts.secrets !== undefined || opts.background !== undefined) ? {
             ...opts.outboundHosts !== undefined ? { outboundHosts: opts.outboundHosts } : {},

package/dist/index.js

@@ -88,7 +88,7 @@ function randomToken(bytes = 32) {
 // package.json
 var package_default = {
   name: "@supacloud/lite",
-  version: "0.35.2",
+  version: "0.36.0",
   description: "Bun-native, single-project Supabase-compatible backend powered by PGlite or native PostgreSQL",
   type: "module",
   license: "Apache-2.0",
@@ -148,17 +148,17 @@ var package_default = {
     "@electric-sql/pglite-pgmq": "0.0.8",
     "@electric-sql/pglite-pgvector": "0.0.11",
     "@electric-sql/pglite-postgis": "0.2.10",
-    "@supacloud/db": "0.20.2",
+    "@supacloud/db": "0.20.3",
     "exact-mirror": "1.2.6",
     "fast-xml-parser": "5.11.2",
     tar: "^7.5.22",
     typebox: "1.4.3"
   },
   devDependencies: {
-    "@supacloud/app": "0.34.1",
+    "@supacloud/app": "0.35.0",
     "@supacloud/contracts": "0.15.2",
-    "@supacloud/compiler": "0.52.1",
-    "@supacloud/elysia": "0.36.3",
+    "@supacloud/compiler": "0.52.2",
+    "@supacloud/elysia": "0.37.0",
     "@supabase/supabase-js": "^2.118.0",
     "@types/bun": "^1.4.4",
     effect: "4.0.5",
@@ -167,10 +167,10 @@ var package_default = {
     typescript: "^7.0.2"
   },
   overrides: {
-    "@supacloud/db": "0.20.2",
-    "@supacloud/app": "0.34.1",
-    "@supacloud/compiler": "0.52.1",
-    "@supacloud/elysia": "0.36.3",
+    "@supacloud/db": "0.20.3",
+    "@supacloud/app": "0.35.0",
+    "@supacloud/compiler": "0.52.2",
+    "@supacloud/elysia": "0.37.0",
     "@supacloud/contracts": "0.15.2",
     "@supacloud/commands": "0.11.2",
     "@supacloud/delivery": "0.23.1",
@@ -5310,6 +5310,7 @@ async function upsertWithoutTtl(query, key, serializedValue) {
 }
 
 // src/runtime/functions/profile.ts
+var MAX_DECLARED_FUNCTION_HEAP_BYTES = 512 * 1024 * 1024;
 function runtimeMode(value) {
   if (value === undefined)
     return "development";
@@ -5318,14 +5319,23 @@ function runtimeMode(value) {
   return value;
 }
 function strictFunction(entry) {
+  const declaredHeap = entry.limits?.maxHeapBytes;
+  if (declaredHeap !== undefined && (!Number.isSafeInteger(declaredHeap) || declaredHeap < 1 || declaredHeap > MAX_DECLARED_FUNCTION_HEAP_BYTES)) {
+    throw new Error("invalid strict function limit: maxHeapBytes");
+  }
+  const declaredLimits = { ...entry.limits };
+  delete declaredLimits.maxHeapBytes;
   const limits = {
     timeoutMs: 900000,
     maxRequestBodyBytes: 30 * 1024 * 1024,
     maxResponseBodyBytes: 30 * 1024 * 1024,
     waitUntilTimeoutMs: 300000,
-    ...entry.limits
+    ...declaredLimits,
+    ...declaredHeap !== undefined ? { maxHeapBytes: declaredHeap } : {}
   };
   for (const [name, value] of Object.entries(limits)) {
+    if (name === "maxHeapBytes")
+      continue;
     const maximum = name.includes("Body") ? 30 * 1024 * 1024 : name === "waitUntilTimeoutMs" ? 300000 : 900000;
     if (!Number.isSafeInteger(value) || value <= 0 || value > maximum) {
       throw new Error(`invalid strict function limit: ${name}`);
@@ -19914,9 +19924,9 @@ function toPgArrayLiteral(array) {
 }
 
 // src/runtime/node/native/engine.ts
-var DEFAULT_PG_VERSION = "17.7.0";
+var DEFAULT_PG_VERSION = "18.6.1";
 var POSTGRES_MIRROR_URL_ERROR = "SUPACLOUD_LITE_POSTGRES_MIRROR must be an absolute HTTPS URL or a loopback HTTP URL";
-var NATIVE_POSTGRES_MAJOR = DEFAULT_PG_VERSION.split(".")[0] ?? "17";
+var NATIVE_POSTGRES_MAJOR = DEFAULT_PG_VERSION.split(".")[0] ?? "18";
 function nativePostgresMajor(installDir = process.env.SUPACLOUD_LITE_POSTGRES_DIR) {
   if (!installDir)
     return NATIVE_POSTGRES_MAJOR;
@@ -19979,10 +19989,10 @@ function isCompleteInstall(dir) {
   return existsSync2(join2(dir, "bin", "postgres")) && existsSync2(join2(dir, "share", "postgres.bki"));
 }
 var PINNED_SHA256 = {
-  "postgresql-17.7.0-x86_64-unknown-linux-gnu": "66ad03281a43624f955c8e16ac975cb0ab751e7edf8ba35308e3b08dd7d065c3",
-  "postgresql-17.7.0-aarch64-unknown-linux-gnu": "89cc2f089880cc8e5e6b7a29387829ec4e4779427855bc0b9fa187c8fce33c8b",
-  "postgresql-17.7.0-x86_64-apple-darwin": "0dd8c25173524bad4ae8ef6b970da1ac40f4c1f231150c416ccb8cd06feff8f2",
-  "postgresql-17.7.0-aarch64-apple-darwin": "727ac08d20a704014a0d51eb3300aa0c8e292c1cf0a1c99d4f4b1002e1420220"
+  "postgresql-18.6.1-x86_64-unknown-linux-gnu": "e84b02dd8d0ce5879fb697330a789231c8b8f8d958dae3ad4d90fecc710b1315",
+  "postgresql-18.6.1-aarch64-unknown-linux-gnu": "1ab47fa2f06ff70454309ad02e5d89c46488300d43977231481fd6b160b9d556",
+  "postgresql-18.6.1-x86_64-apple-darwin": "4229812543e19c91864ebdf5d8f78883c5816d51d4cc5d065298260c1f64d37e",
+  "postgresql-18.6.1-aarch64-apple-darwin": "89e91cc80650a43d22c018b95ca356a0c9e15838a1182fed2880bfb5d7d9c9a6"
 };
 async function verifyTarball(tarball, key, upstreamUrl, downloadMirror) {
   const actual = createHash2("sha256").update(readFileSync(tarball)).digest("hex");
@@ -21055,7 +21065,7 @@ function readFunctions(root, mode) {
       }
     }
     if (mode === "strict") {
-      for (const key of ["timeout_ms", "max_request_body_bytes", "max_response_body_bytes", "wait_until_timeout_ms"]) {
+      for (const key of ["timeout_ms", "max_request_body_bytes", "max_response_body_bytes", "wait_until_timeout_ms", "max_heap_bytes"]) {
         if (t.values.has(key)) {
           const value = t.values.get(key);
           if (typeof value !== "string" || !/^\d+$/.test(value) || !Number.isSafeInteger(Number(value)) || Number(value) <= 0) {
@@ -21084,6 +21094,9 @@ function readFunctions(root, mode) {
     const waitUntilTimeoutMs = getInt(t, "wait_until_timeout_ms");
     if (waitUntilTimeoutMs !== undefined && waitUntilTimeoutMs > 0)
       opts.waitUntilTimeoutMs = waitUntilTimeoutMs;
+    const maxHeapBytes = getInt(t, "max_heap_bytes");
+    if (maxHeapBytes !== undefined && maxHeapBytes > 0)
+      opts.maxHeapBytes = maxHeapBytes;
     const outboundHosts = getStringArray(t, "outbound_hosts");
     if (outboundHosts !== undefined)
       opts.outboundHosts = outboundHosts;
@@ -21293,11 +21306,12 @@ async function loadFunctionsUnlocked(projectDir, options, mode) {
         const handler = typeof defaultExport === "function" ? defaultExport : defaultExport && (typeof defaultExport.handle === "function" || typeof defaultExport.fetch === "function") ? defaultExport : denoHandler ? (req) => denoHandler(req) : undefined;
         if (handler) {
           const opts = options[name];
-          const limits = opts && (opts.timeoutMs !== undefined || opts.maxRequestBodyBytes !== undefined || opts.maxResponseBodyBytes !== undefined || opts.waitUntilTimeoutMs !== undefined) ? {
+          const limits = opts && (opts.timeoutMs !== undefined || opts.maxRequestBodyBytes !== undefined || opts.maxResponseBodyBytes !== undefined || opts.waitUntilTimeoutMs !== undefined || opts.maxHeapBytes !== undefined) ? {
             ...opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {},
             ...opts.maxRequestBodyBytes !== undefined ? { maxRequestBodyBytes: opts.maxRequestBodyBytes } : {},
             ...opts.maxResponseBodyBytes !== undefined ? { maxResponseBodyBytes: opts.maxResponseBodyBytes } : {},
-            ...opts.waitUntilTimeoutMs !== undefined ? { waitUntilTimeoutMs: opts.waitUntilTimeoutMs } : {}
+            ...opts.waitUntilTimeoutMs !== undefined ? { waitUntilTimeoutMs: opts.waitUntilTimeoutMs } : {},
+            ...opts.maxHeapBytes !== undefined ? { maxHeapBytes: opts.maxHeapBytes } : {}
           } : undefined;
           const capabilities = opts && (opts.outboundHosts !== undefined || opts.secrets !== undefined || opts.background !== undefined) ? {
             ...opts.outboundHosts !== undefined ? { outboundHosts: opts.outboundHosts } : {},

package/dist/runtime/functions/handler.d.ts

@@ -35,8 +35,10 @@ export type FunctionHandler = EdgeFunction | FrameworkObjectHandler;
 /**
  * Per-invocation resource limits, aligned with the Edge Runtime Manifest v2
  * `limits` block (timeout_ms / max_request_body_bytes /
- * max_response_body_bytes / wait_until_timeout_ms). Lite defaults to no
- * limit when undeclared; production caps at 900s / 30MB.
+ * max_response_body_bytes / wait_until_timeout_ms / max_heap_bytes). Lite
+ * defaults to no limit when undeclared; production caps wall time and body
+ * size at 900s / 30MB. `maxHeapBytes` is accepted for the same declaration
+ * range as Edge Runtime and is not a process heap sandbox.
  */
 export interface FunctionLimits {
     /** limits.timeout_ms: max wall time per invocation; on expiry the request is aborted and a 504 returned. */
@@ -47,6 +49,11 @@ export interface FunctionLimits {
     maxResponseBodyBytes?: number;
     /** limits.wait_until_timeout_ms: max time to wait for EdgeRuntime.waitUntil tasks after the response. */
     waitUntilTimeoutMs?: number;
+    /**
+     * limits.max_heap_bytes: declared Worker heap budget (1 byte through 512 MiB).
+     * Strict mode rejects an invalid value. Lite runs functions in-process and does not sample or retire on this budget.
+     */
+    maxHeapBytes?: number;
 }
 /**
  * Declared capabilities, aligned with the Edge Runtime Manifest v2

package/dist/runtime/functions/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,cAAc,CAAA;AACrE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAE/D,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE3D;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvD,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACvC;AAED,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,sBAAsB,CAAA;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,0GAA0G;IAC1G,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAA;IACxB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,4HAA4H;IAC5H,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,oBAAoB,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,cAAc,CAAA;AAEpE,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,wBAAwB,CAAA;AAsBhE,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,cAAc,CAAA;IACpB,4HAA4H;IAC5H,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAA;QACpB,iBAAiB,EAAE,MAAM,CAAA;QACzB,yBAAyB,EAAE,MAAM,CAAA;QACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KACtB,CAAA;CACF;AAUD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAQlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,uFAAuF;AACvF,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,IAAI;IAJd,YACU,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC7C,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,EAC3B,OAAO,EAAE,YAAY,EACrB,IAAI,GAAE,WAA2B,EAG1C;IAED,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,qBAAqB,GAAG,IAAI,CAGtD;IAED,yCAAyC;IACzC,IAAI,IAAI,MAAM,EAAE,CAEf;IAED;;;;;;OAMG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+E3E;IAED,4FAA4F;YAC9E,WAAW;IA4BzB,OAAO,CAAC,MAAM;CAiBf"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,cAAc,CAAA;AACrE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAE/D,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE3D;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvD,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACvC;AAED,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,sBAAsB,CAAA;AAEnE;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,0GAA0G;IAC1G,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAA;IACxB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,4HAA4H;IAC5H,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,oBAAoB,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,cAAc,CAAA;AAEpE,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,wBAAwB,CAAA;AAsBhE,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,cAAc,CAAA;IACpB,4HAA4H;IAC5H,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAA;QACpB,iBAAiB,EAAE,MAAM,CAAA;QACzB,yBAAyB,EAAE,MAAM,CAAA;QACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KACtB,CAAA;CACF;AAUD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAQlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,uFAAuF;AACvF,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,IAAI;IAJd,YACU,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC7C,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,EAC3B,OAAO,EAAE,YAAY,EACrB,IAAI,GAAE,WAA2B,EAG1C;IAED,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,qBAAqB,GAAG,IAAI,CAGtD;IAED,yCAAyC;IACzC,IAAI,IAAI,MAAM,EAAE,CAEf;IAED;;;;;;OAMG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA+E3E;IAED,4FAA4F;YAC9E,WAAW;IA4BzB,OAAO,CAAC,MAAM;CAiBf"}

package/dist/runtime/functions/profile.d.ts

@@ -1,5 +1,7 @@
 import type { LoadedFunction } from './handler.js';
 export type RuntimeMode = 'development' | 'strict';
+/** Same declaration cap as Edge Runtime `limits.max_heap_bytes`. Lite validates it and does not enforce a Worker heap. */
+export declare const MAX_DECLARED_FUNCTION_HEAP_BYTES: number;
 export declare function runtimeMode(value: unknown): RuntimeMode;
 export declare function strictFunction(entry: LoadedFunction): LoadedFunction;
 //# sourceMappingURL=profile.d.ts.map

package/dist/runtime/functions/profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAA;AAElD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAIvD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAqBpE"}
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/profile.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAElD,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,QAAQ,CAAA;AAElD,0HAA0H;AAC1H,eAAO,MAAM,gCAAgC,QAAoB,CAAA;AAEjE,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAIvD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,cAAc,CAgCpE"}

package/dist/runtime/node/load-config.d.ts

@@ -101,6 +101,11 @@ export interface FunctionOptions {
     maxResponseBodyBytes?: number;
     /** [functions.<name>].wait_until_timeout_ms (Edge Runtime limits.wait_until_timeout_ms) */
     waitUntilTimeoutMs?: number;
+    /**
+     * [functions.<name>].max_heap_bytes (Edge Runtime limits.max_heap_bytes).
+     * Recorded for contract compatibility. Lite does not enforce a Worker heap.
+     */
+    maxHeapBytes?: number;
     /** [functions.<name>].outbound_hosts: fetch host allowlist (Edge Runtime capabilities.outbound_hosts) */
     outboundHosts?: string[];
     /** [functions.<name>].secrets: env keys exposed to the function (Edge Runtime capabilities.secrets) */

package/dist/runtime/node/load-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAA+B,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACtG,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAUL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE;QACJ,WAAW,EAAE,WAAW,CAAA;QACxB,OAAO,EAAE,cAAc,CAAA;QACvB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,iBAAiB,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAClF,CAAA;IACD,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAA;IAChB,mDAAmD;IACnD,GAAG,EAAE,SAAS,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,aAAa,CAAA;IACtB,gDAAgD;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC1C,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACpD;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C,qDAAqD;IACrD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,yBAAyB,EAAE,iBAAiB,CAAA;IAC/D,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+FAA+F;IAC/F,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,8HAA8H;IAC9H,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,WAAyB,EAAE,YAAY,CAAC,EAAE,WAAW,GAAG,aAAa,CAW/H"}
+{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAA+B,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AACtG,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAUL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE;QACJ,WAAW,EAAE,WAAW,CAAA;QACxB,OAAO,EAAE,cAAc,CAAA;QACvB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,iBAAiB,CAAC,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;KAClF,CAAA;IACD,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAA;IAChB,mDAAmD;IACnD,GAAG,EAAE,SAAS,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,aAAa,CAAA;IACtB,gDAAgD;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC1C,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACpD;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C,qDAAqD;IACrD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,yBAAyB,EAAE,iBAAiB,CAAA;IAC/D,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+FAA+F;IAC/F,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,8HAA8H;IAC9H,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,WAAyB,EAAE,YAAY,CAAC,EAAE,WAAW,GAAG,aAAa,CAW/H"}

package/dist/runtime/node/load-functions.d.ts

@@ -22,6 +22,8 @@ export interface LoadFunctionOptions {
     maxResponseBodyBytes?: number;
     /** Max wait for EdgeRuntime.waitUntil tasks after the response (Edge Runtime limits.wait_until_timeout_ms). */
     waitUntilTimeoutMs?: number;
+    /** Declared Worker heap budget (Edge Runtime limits.max_heap_bytes). Validated in strict mode and not enforced in-process. */
+    maxHeapBytes?: number;
     /** Outbound fetch host allowlist (Edge Runtime capabilities.outbound_hosts). */
     outboundHosts?: string[];
     /** Env keys exposed to the function beyond the SUPABASE_* base trio (Edge Runtime capabilities.secrets). */

package/dist/runtime/node/load-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-functions.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-functions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAwC,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGtH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAG1D;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBzF;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,sFAAsF;IACtF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,+GAA+G;IAC/G,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,mGAAmG;IACnG,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAcD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAM,EACjD,IAAI,GAAE,WAA2B,GAChC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAYtC"}
+{"version":3,"file":"load-functions.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-functions.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAwC,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAGtH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAG1D;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAqBzF;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4DAA4D;IAC5D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,iEAAiE;IACjE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,mFAAmF;IACnF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,sFAAsF;IACtF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,+GAA+G;IAC/G,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,8HAA8H;IAC9H,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,mGAAmG;IACnG,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAcD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAM,EACjD,IAAI,GAAE,WAA2B,GAChC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAYtC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supacloud/lite",
-  "version": "0.35.2",
+  "version": "0.36.0",
   "description": "Bun-native, single-project Supabase-compatible backend powered by PGlite or native PostgreSQL",
   "type": "module",
   "license": "Apache-2.0",
@@ -60,17 +60,17 @@
     "@electric-sql/pglite-pgmq": "0.0.8",
     "@electric-sql/pglite-pgvector": "0.0.11",
     "@electric-sql/pglite-postgis": "0.2.10",
-    "@supacloud/db": "0.20.2",
+    "@supacloud/db": "0.20.3",
     "exact-mirror": "1.2.6",
     "fast-xml-parser": "5.11.2",
     "tar": "^7.5.22",
     "typebox": "1.4.3"
   },
   "devDependencies": {
-    "@supacloud/app": "0.34.1",
+    "@supacloud/app": "0.35.0",
     "@supacloud/contracts": "0.15.2",
-    "@supacloud/compiler": "0.52.1",
-    "@supacloud/elysia": "0.36.3",
+    "@supacloud/compiler": "0.52.2",
+    "@supacloud/elysia": "0.37.0",
     "@supabase/supabase-js": "^2.118.0",
     "@types/bun": "^1.4.4",
     "effect": "4.0.5",
@@ -79,10 +79,10 @@
     "typescript": "^7.0.2"
   },
   "overrides": {
-    "@supacloud/db": "0.20.2",
-    "@supacloud/app": "0.34.1",
-    "@supacloud/compiler": "0.52.1",
-    "@supacloud/elysia": "0.36.3",
+    "@supacloud/db": "0.20.3",
+    "@supacloud/app": "0.35.0",
+    "@supacloud/compiler": "0.52.2",
+    "@supacloud/elysia": "0.37.0",
     "@supacloud/contracts": "0.15.2",
     "@supacloud/commands": "0.11.2",
     "@supacloud/delivery": "0.23.1",