@supacloud/lite 0.9.2 → 0.11.0

package/dist/index.js

@@ -85,7 +85,7 @@ function randomToken(bytes = 32) {
 // package.json
 var package_default = {
   name: "@supacloud/lite",
-  version: "0.9.2",
+  version: "0.11.0",
   description: "Bun-native, single-project Supabase-compatible backend powered by PGlite or native PostgreSQL",
   type: "module",
   license: "Apache-2.0",
@@ -135,11 +135,13 @@ var package_default = {
   },
   dependencies: {
     "@electric-sql/pglite": "0.5.8",
+    "@supacloud/db": "^0.1.0",
     tar: "^7.5.22"
   },
   devDependencies: {
     "@supabase/supabase-js": "^2.112.4",
     "@types/bun": "^1.4.0",
+    elysia: "^1.4.30",
     typescript: "^7.0.2"
   },
   engines: {
@@ -2528,8 +2530,99 @@ function resetCapturedHandler() {
   captured.handler = undefined;
 }
 
-// src/runtime/functions/pgredis.ts
+// src/runtime/functions/edge-runtime-shim.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "async_hooks";
+var scopeStore = new AsyncLocalStorage2;
+var NOT_ENABLED_MESSAGE = "EdgeRuntime.waitUntil is not enabled by the Function capability policy";
+var installed;
+function installEdgeRuntimeShim() {
+  if (installed)
+    return;
+  const runtime = {
+    waitUntil(promise) {
+      const scope = scopeStore.getStore();
+      if (scope && !scope.allowed) {
+        throw new Error(NOT_ENABLED_MESSAGE);
+      }
+      const task = Promise.resolve(promise).catch((error) => {
+        console.error("[EdgeRuntime.waitUntil] background task failed", error);
+      });
+      scope?.tasks.push(task);
+    }
+  };
+  installed = runtime;
+  globalThis.EdgeRuntime = runtime;
+}
+function runWithBackgroundTasks(options, fn) {
+  installEdgeRuntimeShim();
+  const scope = { allowed: options.allowed, tasks: [] };
+  return scopeStore.run(scope, async () => {
+    try {
+      return await fn();
+    } finally {
+      flushBackgroundTasks(scope.tasks, options.timeoutMs);
+    }
+  });
+}
+async function flushBackgroundTasks(tasks, timeoutMs) {
+  if (tasks.length === 0)
+    return;
+  const drain = (async () => {
+    while (tasks.length > 0) {
+      const batch = tasks.splice(0);
+      await Promise.allSettled(batch);
+    }
+  })();
+  if (timeoutMs === undefined) {
+    await drain;
+    return;
+  }
+  const timedOut = await Promise.race([
+    drain.then(() => false),
+    new Promise((resolve) => setTimeout(() => resolve(true), timeoutMs))
+  ]);
+  if (timedOut) {
+    console.warn(`[EdgeRuntime.waitUntil] background tasks did not settle within ${timeoutMs}ms; no longer waiting`);
+  }
+}
+
+// src/runtime/functions/fetch-policy.ts
+import { AsyncLocalStorage as AsyncLocalStorage3 } from "async_hooks";
+var policyStore = new AsyncLocalStorage3;
+var LOOPBACK_HOSTS = new Set(["localhost", "127.0.0.1", "::1"]);
+var installed2 = false;
+function installFetchPolicyShim() {
+  if (installed2)
+    return;
+  installed2 = true;
+  const original = globalThis.fetch;
+  globalThis.fetch = async (input, init) => {
+    const allowed = policyStore.getStore();
+    if (!allowed)
+      return original(input, init);
+    const host = hostOf(input);
+    if (host !== undefined && !LOOPBACK_HOSTS.has(host) && !allowed.has(host)) {
+      throw new Error(`outbound host not allowed: ${host}`);
+    }
+    return original(input, init);
+  };
+}
+function runWithFetchPolicy(allowedHosts, fn) {
+  installFetchPolicyShim();
+  return policyStore.run(new Set(allowedHosts), fn);
+}
+function hostOf(input) {
+  try {
+    const raw = typeof input === "string" ? input : input instanceof URL ? input.href : input.url;
+    const host = new URL(raw).hostname;
+    return host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+  } catch {
+    return;
+  }
+}
+
+// src/runtime/functions/pgredis.ts
+import { AsyncLocalStorage as AsyncLocalStorage4 } from "async_hooks";
 var CACHE_NAMESPACE = "supacloud-edge-runtime";
 var CACHE_TABLE = "public.supacloud_pgredis_kv";
 var MAX_KEY_CHARACTERS = 512;
@@ -2622,7 +2715,7 @@ class PgredisCache {
     });
   }
 }
-var cacheContexts = new AsyncLocalStorage2;
+var cacheContexts = new AsyncLocalStorage4;
 var cacheFacade = Object.freeze({
   get: async (key) => activeCache().get(key),
   set: async (key, cacheValue, ttlMs) => activeCache().set(key, cacheValue, ttlMs),
@@ -2696,6 +2789,51 @@ async function upsertWithoutTtl(query, key, serializedValue) {
 }
 
 // src/runtime/functions/handler.ts
+var VERIFIED_JWT_SUBJECT_HEADER = "x-supacloud-jwt-sub";
+var UNSAFE_VERIFIED_JWT_SUBJECT = /[\u0000-\u001F\u007F-\u009F\u0100-\u{10FFFF}]/u;
+function verifiedSubject(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 1024)
+    return null;
+  if (value.trim() !== value || UNSAFE_VERIFIED_JWT_SUBJECT.test(value))
+    return null;
+  return value;
+}
+function withVerifiedJwtSubject(request, ctx) {
+  const trustedRequest = request.clone();
+  trustedRequest.headers.delete(VERIFIED_JWT_SUBJECT_HEADER);
+  const subject = verifiedSubject(ctx.claims?.sub);
+  if (subject !== null)
+    trustedRequest.headers.set(VERIFIED_JWT_SUBJECT_HEADER, subject);
+  return trustedRequest;
+}
+function isLoadedFunction(value) {
+  return typeof value === "object" && value !== null && "handler" in value;
+}
+function normalizeEntry(value) {
+  return isLoadedFunction(value) ? value : { handler: value };
+}
+function isFrameworkRouterHandler(handler) {
+  if (!handler || typeof handler !== "object")
+    return false;
+  const candidate = handler;
+  if (candidate.__supacloud?.routeAware === true)
+    return true;
+  return Array.isArray(candidate.routes) && (typeof candidate.handle === "function" || typeof candidate.fetch === "function");
+}
+function toFunctionLocalUrl(requestUrl) {
+  const url = new URL(requestUrl);
+  const publicRoute = url.pathname.match(/^\/functions\/v1\/[^/]+(\/.*)?$/);
+  if (publicRoute) {
+    url.pathname = publicRoute[1] || "/";
+    return url.toString();
+  }
+  const internalRoute = url.pathname.match(/^\/[^/]+(\/.*)?$/);
+  if (internalRoute) {
+    url.pathname = internalRoute[1] || "/";
+  }
+  return url.toString();
+}
+
 class FunctionsHandler {
   functions;
   env;
@@ -2716,22 +2854,130 @@ class FunctionsHandler {
     if (!name) {
       return json2(404, { error: "function name required: /functions/v1/<name>" });
     }
-    const fn = this.functions.get(name);
-    if (!fn) {
+    const value = this.functions.get(name);
+    if (!value) {
       return json2(404, { error: `function "${name}" not found` });
     }
+    const entry = normalizeEntry(value);
+    const limits = entry.limits;
+    const capabilities = entry.capabilities;
+    const maxBody = limits?.maxRequestBodyBytes;
+    let request = req;
+    if (maxBody !== undefined) {
+      const contentLength = req.headers.get("content-length");
+      if (contentLength !== null && Number(contentLength) > maxBody) {
+        return json2(413, { error: `function "${name}" request body exceeded ${maxBody} bytes` });
+      }
+      if (contentLength === null && req.body) {
+        request = withCountedBody(request, maxBody);
+      }
+    }
+    const routeAware = entry.framework !== undefined && entry.framework !== "fetch" || isFrameworkRouterHandler(entry.handler);
+    request = withVerifiedJwtSubject(request, ctx);
+    if (routeAware)
+      request = new Request(toFunctionLocalUrl(request.url), request);
+    const timeoutMs = limits?.timeoutMs;
+    const abort = timeoutMs !== undefined ? new AbortController : undefined;
+    if (abort)
+      request = withSignal(request, abort.signal);
     try {
-      const invoke = () => Promise.resolve(fn(req, { auth: ctx, env: this.env }));
-      const res = await runWithDenoEnv(this.env, () => runWithPgredisCache(this.pgredis, invoke));
+      const env = capabilities?.secrets ? filterSecretsEnv(this.env, capabilities.secrets) : this.env;
+      const invoke = () => this.invoke(entry.handler, request, ctx, env);
+      const inner = () => runWithDenoEnv(env, () => runWithPgredisCache(this.pgredis, invoke));
+      const run = capabilities?.outboundHosts ? () => runWithFetchPolicy(capabilities.outboundHosts, inner) : inner;
+      const invokeWithBackground = () => runWithBackgroundTasks({ allowed: capabilities?.background !== false, timeoutMs: limits?.waitUntilTimeoutMs }, run);
+      const res = timeoutMs !== undefined ? await this.withTimeout(name, timeoutMs, invokeWithBackground, abort) : await invokeWithBackground();
       if (!(res instanceof Response)) {
         return json2(500, { error: `function "${name}" did not return a Response` });
       }
-      return res;
+      const maxResponse = limits?.maxResponseBodyBytes;
+      return maxResponse !== undefined ? withResponseLimit(name, res, maxResponse) : res;
     } catch (e) {
       const message = e instanceof Error ? e.message : String(e);
       return json2(500, { error: message });
     }
   }
+  async withTimeout(name, timeoutMs, run, abort) {
+    let timer;
+    const pending = run();
+    try {
+      const winner = await Promise.race([
+        pending.then((res) => ({ timedOut: false, res })),
+        new Promise((resolve) => {
+          timer = setTimeout(() => resolve({ timedOut: true }), timeoutMs);
+        })
+      ]);
+      if (winner.timedOut) {
+        abort.abort();
+        pending.then(() => {}, () => {});
+        return json2(504, { error: `function "${name}" timed out after ${timeoutMs}ms` });
+      }
+      return winner.res;
+    } finally {
+      if (timer)
+        clearTimeout(timer);
+    }
+  }
+  invoke(handler, req, ctx, env) {
+    if (typeof handler === "function") {
+      return Promise.resolve(handler(req, { auth: ctx, env }));
+    }
+    if (typeof handler.handle === "function") {
+      return Promise.resolve(handler.handle.call(handler, req));
+    }
+    if (typeof handler.fetch === "function") {
+      return Promise.resolve(handler.fetch.call(handler, req));
+    }
+    throw new Error("function handler must be a function or an object with handle()/fetch()");
+  }
+}
+var BASE_ENV_KEYS = ["SUPABASE_URL", "SUPABASE_ANON_KEY", "SUPABASE_SERVICE_ROLE_KEY"];
+function filterSecretsEnv(env, secrets) {
+  const out = {};
+  for (const key of BASE_ENV_KEYS)
+    out[key] = env[key];
+  for (const key of secrets) {
+    if (env[key] !== undefined)
+      out[key] = env[key];
+  }
+  return out;
+}
+function withCountedBody(req, limit) {
+  let seen = 0;
+  const counter = new TransformStream({
+    transform(chunk, controller) {
+      seen += chunk.byteLength;
+      if (seen > limit) {
+        controller.error(new Error(`request body exceeded ${limit} bytes`));
+        return;
+      }
+      controller.enqueue(chunk);
+    }
+  });
+  return new Request(req, { body: req.body.pipeThrough(counter), duplex: "half" });
+}
+function withResponseLimit(name, res, limit) {
+  const contentLength = res.headers.get("content-length");
+  if (contentLength !== null && Number(contentLength) > limit) {
+    return json2(502, { error: `function "${name}" response exceeded ${limit} bytes` });
+  }
+  if (!res.body)
+    return res;
+  let seen = 0;
+  const counter = new TransformStream({
+    transform(chunk, controller) {
+      seen += chunk.byteLength;
+      if (seen > limit) {
+        controller.error(new Error(`function "${name}" response exceeded ${limit} bytes`));
+        return;
+      }
+      controller.enqueue(chunk);
+    }
+  });
+  return new Response(res.body.pipeThrough(counter), res);
+}
+function withSignal(req, signal) {
+  return new Request(req, { signal, ...req.body ? { duplex: "half" } : {} });
 }
 function json2(status, body) {
   return new Response(JSON.stringify(body), {
@@ -9968,9 +10214,9 @@ class RetentionService {
 }
 
 // src/runtime/security.ts
-var LOOPBACK_HOSTS = new Set(["127.0.0.1", "localhost", "::1", "", undefined]);
+var LOOPBACK_HOSTS2 = new Set(["127.0.0.1", "localhost", "::1", "", undefined]);
 function isNetworkExposed(host) {
-  return !LOOPBACK_HOSTS.has(host);
+  return !LOOPBACK_HOSTS2.has(host);
 }
 function assertSecretsSafe(input) {
   const { host, jwtSecret, vaultKeyDerived, warn } = input;
@@ -12404,6 +12650,35 @@ function readFunctions(root) {
     const entrypoint = getString(t, "entrypoint");
     if (entrypoint !== undefined)
       opts.entrypoint = entrypoint;
+    const framework = getString(t, "framework");
+    if (framework !== undefined) {
+      if (framework === "fetch" || framework === "elysia" || framework === "hono") {
+        opts.framework = framework;
+      } else {
+        console.warn(`  warning: [functions.${name}] framework "${framework}" is not one of fetch/elysia/hono; falling back to fetch`);
+      }
+    }
+    const timeoutMs = getInt(t, "timeout_ms");
+    if (timeoutMs !== undefined && timeoutMs > 0)
+      opts.timeoutMs = timeoutMs;
+    const maxRequestBodyBytes = getInt(t, "max_request_body_bytes");
+    if (maxRequestBodyBytes !== undefined && maxRequestBodyBytes > 0)
+      opts.maxRequestBodyBytes = maxRequestBodyBytes;
+    const maxResponseBodyBytes = getInt(t, "max_response_body_bytes");
+    if (maxResponseBodyBytes !== undefined && maxResponseBodyBytes > 0)
+      opts.maxResponseBodyBytes = maxResponseBodyBytes;
+    const waitUntilTimeoutMs = getInt(t, "wait_until_timeout_ms");
+    if (waitUntilTimeoutMs !== undefined && waitUntilTimeoutMs > 0)
+      opts.waitUntilTimeoutMs = waitUntilTimeoutMs;
+    const outboundHosts = getStringArray(t, "outbound_hosts");
+    if (outboundHosts !== undefined)
+      opts.outboundHosts = outboundHosts;
+    const secrets = getStringArray(t, "secrets");
+    if (secrets !== undefined)
+      opts.secrets = secrets;
+    const background = getBool(t, "background");
+    if (background !== undefined)
+      opts.background = background;
     out[name] = opts;
   }
   return out;
@@ -12514,6 +12789,15 @@ async function loadFunctionEnv(projectDir) {
   }
   return env;
 }
+var FUNCTION_FRAMEWORKS = new Set(["fetch", "elysia", "hono"]);
+function resolveFramework(name, value) {
+  if (value === undefined)
+    return;
+  if (FUNCTION_FRAMEWORKS.has(value))
+    return value;
+  console.warn(`  warning: function "${name}" has unsupported framework "${value}", expected one of fetch/elysia/hono; falling back to fetch`);
+  return;
+}
 var loadQueue = Promise.resolve();
 async function loadFunctions2(projectDir, options = {}) {
   let releaseQueue;
@@ -12568,11 +12852,28 @@ async function loadFunctionsUnlocked(projectDir, options) {
         const mod = await import(importUrl);
         const denoHandler = takeCapturedHandler();
         const defaultExport = mod.default;
-        const handler = typeof defaultExport === "function" ? defaultExport : defaultExport && typeof defaultExport.fetch === "function" ? defaultExport.fetch.bind(defaultExport) : denoHandler ? (req) => denoHandler(req) : undefined;
+        const handler = typeof defaultExport === "function" ? defaultExport : defaultExport && (typeof defaultExport.handle === "function" || typeof defaultExport.fetch === "function") ? defaultExport : denoHandler ? (req) => denoHandler(req) : undefined;
         if (handler) {
-          functions.set(name, handler);
+          const opts = options[name];
+          const limits = opts && (opts.timeoutMs !== undefined || opts.maxRequestBodyBytes !== undefined || opts.maxResponseBodyBytes !== undefined || opts.waitUntilTimeoutMs !== undefined) ? {
+            ...opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {},
+            ...opts.maxRequestBodyBytes !== undefined ? { maxRequestBodyBytes: opts.maxRequestBodyBytes } : {},
+            ...opts.maxResponseBodyBytes !== undefined ? { maxResponseBodyBytes: opts.maxResponseBodyBytes } : {},
+            ...opts.waitUntilTimeoutMs !== undefined ? { waitUntilTimeoutMs: opts.waitUntilTimeoutMs } : {}
+          } : undefined;
+          const capabilities = opts && (opts.outboundHosts !== undefined || opts.secrets !== undefined || opts.background !== undefined) ? {
+            ...opts.outboundHosts !== undefined ? { outboundHosts: opts.outboundHosts } : {},
+            ...opts.secrets !== undefined ? { secrets: opts.secrets } : {},
+            ...opts.background !== undefined ? { background: opts.background } : {}
+          } : undefined;
+          functions.set(name, {
+            handler,
+            framework: resolveFramework(name, opts?.framework),
+            ...limits ? { limits } : {},
+            ...capabilities ? { capabilities } : {}
+          });
         } else {
-          console.warn(`  warning: function "${name}" has no default function, fetch object, or Deno.serve() handler, skipped`);
+          console.warn(`  warning: function "${name}" has no default function, handle/fetch object, or Deno.serve() handler, skipped`);
         }
       } catch (e) {
         const msg = e instanceof Error ? e.message : String(e);

package/dist/runtime/functions/edge-runtime-shim.d.ts

@@ -0,0 +1,15 @@
+/** Install globalThis.EdgeRuntime.waitUntil once per process (idempotent). */
+export declare function installEdgeRuntimeShim(): void;
+/**
+ * Run `fn` with an EdgeRuntime.waitUntil scope. When `fn` settles, its
+ * background tasks are flushed without blocking the returned value: the flush
+ * waits for allSettled up to `timeoutMs` (wait_until_timeout_ms), after which
+ * it stops waiting and warns - like production, abandoned tasks keep running.
+ * Lite backend close() does not wait for in-flight background tasks; tasks
+ * still drifting at shutdown are dropped with the process.
+ */
+export declare function runWithBackgroundTasks<T>(options: {
+    allowed: boolean;
+    timeoutMs?: number;
+}, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=edge-runtime-shim.d.ts.map

package/dist/runtime/functions/edge-runtime-shim.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"edge-runtime-shim.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/edge-runtime-shim.ts"],"names":[],"mappings":"AA2CA,8EAA8E;AAC9E,wBAAgB,sBAAsB,IAAI,IAAI,CAiB7C;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EACjD,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAWZ"}

package/dist/runtime/functions/fetch-policy.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Run `fn` with fetch restricted to `allowedHosts` (plus loopback). The
+ * binding lives in an async-context store, so it stays correct across awaits
+ * and never leaks into other invocations - there is nothing to restore.
+ */
+export declare function runWithFetchPolicy<T>(allowedHosts: string[], fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=fetch-policy.d.ts.map

package/dist/runtime/functions/fetch-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-policy.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/fetch-policy.ts"],"names":[],"mappings":"AAsCA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAG9F"}

package/dist/runtime/functions/handler.d.ts

@@ -2,14 +2,82 @@
  * Edge Functions (/functions/v1/*) - supabase.functions.invoke() support.
  *
  * A "function" is any fetch handler: (Request) => Response | Promise<Response>.
+ * Framework router objects (Elysia `app.handle()`, Hono `app.fetch()`) are
+ * supported too, aligned with the SupaCloud Edge Runtime contract: route-aware
+ * handlers receive a function-local URL (`/functions/v1/<name>/a/b` -> `/a/b`).
  * The core takes a name → handler map (portable, works in the browser); the
  * Node CLI populates it from supabase/functions/<name>/index.{ts,js,mjs}
- * modules that `export default` a fetch handler.
+ * modules that `export default` a handler.
  */
 import type { RequestContext } from '../types.js';
 import { type PgredisCache } from './pgredis.js';
 /** An edge function: a fetch handler invoked with the resolved request context. */
 export type EdgeFunction = (req: Request, ctx: FunctionContext) => Response | Promise<Response>;
+/** Frameworks whose router objects own the path below /functions/v1/<name>. */
+export type FunctionFramework = 'fetch' | 'elysia' | 'hono';
+/**
+ * A framework router export, e.g. an Elysia instance (`handle()`) or a Hono /
+ * Itty router (`fetch()`). Object handlers receive only the Request.
+ */
+export interface FrameworkObjectHandler {
+    handle?: (req: Request) => Response | Promise<Response>;
+    fetch?: (req: Request) => Response | Promise<Response>;
+    /** Router route table (Elysia exposes one); marks the handler route-aware. */
+    routes?: unknown;
+    /** Explicit marker emitted by framework adapters. */
+    __supacloud?: {
+        routeAware?: boolean;
+    };
+}
+/** Anything registerable as a function: plain fetch handler or router object. */
+export type FunctionHandler = EdgeFunction | FrameworkObjectHandler;
+/**
+ * Per-invocation resource limits, aligned with the Edge Runtime Manifest v2
+ * `limits` block (timeout_ms / max_request_body_bytes /
+ * max_response_body_bytes / wait_until_timeout_ms). Lite defaults to no
+ * limit when undeclared; production caps at 900s / 30MB.
+ */
+export interface FunctionLimits {
+    /** limits.timeout_ms: max wall time per invocation; on expiry the request is aborted and a 504 returned. */
+    timeoutMs?: number;
+    /** limits.max_request_body_bytes: max inbound body size; oversized bodies get a 413. */
+    maxRequestBodyBytes?: number;
+    /** limits.max_response_body_bytes: max outbound body size; oversized responses get a 502 / cut stream. */
+    maxResponseBodyBytes?: number;
+    /** limits.wait_until_timeout_ms: max time to wait for EdgeRuntime.waitUntil tasks after the response. */
+    waitUntilTimeoutMs?: number;
+}
+/**
+ * Declared capabilities, aligned with the Edge Runtime Manifest v2
+ * `capabilities` block (secrets / outbound_hosts / background). Undeclared
+ * means unrestricted (back-compat).
+ */
+export interface FunctionCapabilities {
+    /** capabilities.secrets: env keys (beyond the SUPABASE_* base trio) visible to the function. */
+    secrets?: string[];
+    /** capabilities.outbound_hosts: exact fetch host allowlist (no port); loopback is always allowed. */
+    outboundHosts?: string[];
+    /**
+     * capabilities.background: whether EdgeRuntime.waitUntil is enabled. Lite
+     * defaults to allowed (local back-compat); only an explicit `false` takes
+     * the production error path.
+     */
+    background?: boolean;
+}
+/** A loaded function plus its declared framework profile, limits, and capabilities. */
+export interface LoadedFunction {
+    handler: FunctionHandler;
+    /** config.toml [functions.<name>].framework; `fetch` keeps legacy routing. */
+    framework?: FunctionFramework;
+    /** config.toml [functions.<name>] timeout_ms / max_request_body_bytes / max_response_body_bytes / wait_until_timeout_ms. */
+    limits?: FunctionLimits;
+    /** config.toml [functions.<name>] secrets / outbound_hosts / background. */
+    capabilities?: FunctionCapabilities;
+}
+/** Registry value: a bare handler or a {@link LoadedFunction} entry. */
+export type FunctionRegistryValue = FunctionHandler | LoadedFunction;
+/** Header written only after Lite has verified the request JWT. */
+export declare const VERIFIED_JWT_SUBJECT_HEADER = "x-supacloud-jwt-sub";
 /** Second argument passed to every {@link EdgeFunction} invocation. */
 export interface FunctionContext {
     /** verified request context (role + JWT claims) resolved by the router */
@@ -22,17 +90,34 @@ export interface FunctionContext {
         [key: string]: string;
     };
 }
+/** Mirrors the Edge Runtime: router objects and marked handlers own sub-paths. */
+export declare function isFrameworkRouterHandler(handler: unknown): boolean;
+/**
+ * Strip the function prefix so framework routers see their own route table:
+ * /functions/v1/<name>/a/b -> /a/b (and /functions/v1/<name> -> /).
+ * Matches the Edge Runtime's toFunctionLocalUrl().
+ */
+export declare function toFunctionLocalUrl(requestUrl: string): string;
 /** Registry and dispatcher for edge functions, backing supabase.functions.invoke(). */
 export declare class FunctionsHandler {
     private functions;
     private env;
     private pgredis;
-    constructor(functions: Map<string, EdgeFunction>, env: FunctionContext['env'], pgredis: PgredisCache);
+    constructor(functions: Map<string, FunctionRegistryValue>, env: FunctionContext['env'], pgredis: PgredisCache);
     /** Register (or replace) a function under `name`, served at /functions/v1/<name>. */
-    register(name: string, fn: EdgeFunction): void;
+    register(name: string, fn: FunctionRegistryValue): void;
     /** Names of all registered functions. */
     list(): string[];
-    /** Dispatch a /functions/v1/<name> request to its handler, returning a 404 when unknown and a 500 when the handler throws or returns a non-Response. */
+    /**
+     * Dispatch a /functions/v1/<name> request to its handler, returning a 404 when
+     * unknown and a 500 when the handler throws or returns a non-Response.
+     * Declared limits/capabilities are enforced in order: request body size (413),
+     * invocation timeout (504), outbound host allowlist, secrets allowlist,
+     * EdgeRuntime.waitUntil background scope, response body size (502).
+     */
     handle(req: Request, ctx: RequestContext, url: URL): Promise<Response>;
+    /** Race the invocation against `timeoutMs`; on timeout abort the request and answer 504. */
+    private withTimeout;
+    private invoke;
 }
 //# sourceMappingURL=handler.d.ts.map

package/dist/runtime/functions/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,cAAc,CAAA;AAErE,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,cAAc,CAAA;IACpB,4HAA4H;IAC5H,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAA;QACpB,iBAAiB,EAAE,MAAM,CAAA;QACzB,yBAAyB,EAAE,MAAM,CAAA;QACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KACtB,CAAA;CACF;AAED,uFAAuF;AACvF,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,OAAO;IAHjB,YACU,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EACpC,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,EAC3B,OAAO,EAAE,YAAY,EAC3B;IAEJ,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,GAAG,IAAI,CAE7C;IAED,yCAAyC;IACzC,IAAI,IAAI,MAAM,EAAE,CAEf;IAED,wJAAwJ;IAClJ,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuB3E;CACF"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/runtime/functions/handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,OAAO,EAAE,KAAK,YAAY,EAAuB,MAAM,cAAc,CAAA;AAErE,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;AAE/F,+EAA+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAA;AAE3D;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACvD,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtD,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,qDAAqD;IACrD,WAAW,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACvC;AAED,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,sBAAsB,CAAA;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,0GAA0G;IAC1G,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,yGAAyG;IACzG,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,eAAe,CAAA;IACxB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,iBAAiB,CAAA;IAC7B,4HAA4H;IAC5H,MAAM,CAAC,EAAE,cAAc,CAAA;IACvB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,oBAAoB,CAAA;CACpC;AAED,wEAAwE;AACxE,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,cAAc,CAAA;AAEpE,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,wBAAwB,CAAA;AAsBhE,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,IAAI,EAAE,cAAc,CAAA;IACpB,4HAA4H;IAC5H,GAAG,EAAE;QACH,YAAY,EAAE,MAAM,CAAA;QACpB,iBAAiB,EAAE,MAAM,CAAA;QACzB,yBAAyB,EAAE,MAAM,CAAA;QACjC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KACtB,CAAA;CACF;AAUD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAQlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAY7D;AAED,uFAAuF;AACvF,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,OAAO;IAHjB,YACU,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC7C,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,EAC3B,OAAO,EAAE,YAAY,EAC3B;IAEJ,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,qBAAqB,GAAG,IAAI,CAEtD;IAED,yCAAyC;IACzC,IAAI,IAAI,MAAM,EAAE,CAEf;IAED;;;;;;OAMG;IACG,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CA2E3E;IAED,4FAA4F;YAC9E,WAAW;IA4BzB,OAAO,CAAC,MAAM;CAiBf"}

package/dist/runtime/index.d.ts

@@ -18,10 +18,11 @@ export { SmsInbox, type SmsInboxEntry } from './auth/sms-inbox.js';
 export { LogBuffer, type LogEntry, type LogLevel } from './log-buffer.js';
 export { RealtimeEngine, type RealtimeSocketLike } from './realtime/engine.js';
 export { signJwt, verifyJwt, decodeJwt } from './jwt.js';
-export { FunctionsHandler, type EdgeFunction, type FunctionContext } from './functions/handler.js';
+export { FunctionsHandler, VERIFIED_JWT_SUBJECT_HEADER, isFrameworkRouterHandler, toFunctionLocalUrl, type EdgeFunction, type FrameworkObjectHandler, type FunctionCapabilities, type FunctionContext, type FunctionFramework, type FunctionHandler, type FunctionLimits, type FunctionRegistryValue, type LoadedFunction, } from './functions/handler.js';
 export { type PgredisCacheBinding } from './functions/pgredis.js';
 export { generateTypes } from './gen-types.js';
 export { installDenoShim } from './functions/deno-shim.js';
+export { installEdgeRuntimeShim } from './functions/edge-runtime-shim.js';
 export { WebhooksService, type WebhookConfig, type WebhookDelivery } from './webhooks/service.js';
 export { CronService, cronMatches } from './cron/service.js';
 export { NetService, type NetDelivery } from './net/service.js';

package/dist/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAqB,MAAM,wBAAwB,CAAA;AAG5E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrD,OAAO,EAAE,eAAe,EAAwB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAU,aAAa,EAA6B,MAAM,YAAY,CAAA;AAGjG,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACxD,OAAO,EAAE,gBAAgB,EAAE,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAClG,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjG,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,mFAAmF;IACnF,EAAE,EAAE,QAAQ,CAAA;IACZ,6EAA6E;IAC7E,QAAQ,EAAE,cAAc,CAAA;IACxB,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,eAAe,CAAA;IACzB,mCAAmC;IACnC,IAAI,EAAE,WAAW,CAAA;IACjB,wDAAwD;IACxD,GAAG,EAAE,UAAU,CAAA;IACf,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,IAAI,EAAE,SAAS,CAAA;IACf,4FAA4F;IAC5F,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,gHAAgH;IAChH,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,gGAAgG;IAChG,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+W7F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAA8B,MAAM,wBAAwB,CAAA;AAGrF,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAIrD,OAAO,EAAE,eAAe,EAAwB,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,KAAK,EAAE,aAAa,EAAU,aAAa,EAA6B,MAAM,YAAY,CAAA;AAGjG,cAAc,YAAY,CAAA;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,SAAS,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AACzE,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACxD,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjG,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,SAAS,EAAE,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,oGAAoG;IACpG,KAAK,EAAE,OAAO,KAAK,CAAA;IACnB,mFAAmF;IACnF,EAAE,EAAE,QAAQ,CAAA;IACZ,6EAA6E;IAC7E,QAAQ,EAAE,cAAc,CAAA;IACxB,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,eAAe,CAAA;IACzB,mCAAmC;IACnC,IAAI,EAAE,WAAW,CAAA;IACjB,wDAAwD;IACxD,GAAG,EAAE,UAAU,CAAA;IACf,6EAA6E;IAC7E,SAAS,EAAE,gBAAgB,CAAA;IAC3B,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,+CAA+C;IAC/C,cAAc,EAAE,MAAM,CAAA;IACtB,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAA;IACjB,kEAAkE;IAClE,IAAI,EAAE,SAAS,CAAA;IACf,4FAA4F;IAC5F,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,gHAAgH;IAChH,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,8CAA8C;IAC9C,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,gGAAgG;IAChG,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B;AAWD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CAAC,MAAM,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA+W7F"}

package/dist/runtime/node/load-config.d.ts

@@ -76,6 +76,22 @@ export interface FunctionOptions {
     verifyJwt?: boolean;
     /** [functions.<name>].entrypoint, relative to the project root */
     entrypoint?: string;
+    /** [functions.<name>].framework: fetch (default), elysia, or hono */
+    framework?: import('../functions/handler.js').FunctionFramework;
+    /** [functions.<name>].timeout_ms: invocation timeout (Edge Runtime limits.timeout_ms) */
+    timeoutMs?: number;
+    /** [functions.<name>].max_request_body_bytes (Edge Runtime limits.max_request_body_bytes) */
+    maxRequestBodyBytes?: number;
+    /** [functions.<name>].max_response_body_bytes (Edge Runtime limits.max_response_body_bytes) */
+    maxResponseBodyBytes?: number;
+    /** [functions.<name>].wait_until_timeout_ms (Edge Runtime limits.wait_until_timeout_ms) */
+    waitUntilTimeoutMs?: number;
+    /** [functions.<name>].outbound_hosts: fetch host allowlist (Edge Runtime capabilities.outbound_hosts) */
+    outboundHosts?: string[];
+    /** [functions.<name>].secrets: env keys exposed to the function (Edge Runtime capabilities.secrets) */
+    secrets?: string[];
+    /** [functions.<name>].background: EdgeRuntime.waitUntil gate (Edge Runtime capabilities.background); lite defaults to true */
+    background?: boolean;
 }
 /** Parse supabase/config.toml once and project it into a {@link ProjectConfig}. */
 export declare function loadProjectConfig(projectDir: string, env?: Environment): ProjectConfig;

package/dist/runtime/node/load-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAUL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAA;IAChB,mDAAmD;IACnD,GAAG,EAAE,SAAS,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,aAAa,CAAA;IACtB,gDAAgD;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC1C,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACpD;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,WAAyB,GAAG,aAAa,CASnG"}
+{"version":3,"file":"load-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/node/load-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAUL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,IAAI,EAAE,UAAU,CAAA;IAChB,mDAAmD;IACnD,GAAG,EAAE,SAAS,CAAA;IACd,kEAAkE;IAClE,OAAO,EAAE,aAAa,CAAA;IACtB,gDAAgD;IAChD,IAAI,EAAE,UAAU,CAAA;IAChB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;CAC3C;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/B,sBAAsB;IACtB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;IAC1C,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,mEAAmE;IACnE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CACpD;AAED,wCAAwC;AACxC,MAAM,WAAW,SAAS;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,qDAAqD;IACrD,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;CACvB;AAED,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,wBAAwB;IACxB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,iDAAiD;AACjD,MAAM,WAAW,eAAe;IAC9B,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,oCAAoC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,SAAS,CAAC,EAAE,OAAO,yBAAyB,EAAE,iBAAiB,CAAA;IAC/D,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6FAA6F;IAC7F,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+FAA+F;IAC/F,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,2FAA2F;IAC3F,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,uGAAuG;IACvG,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,8HAA8H;IAC9H,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,WAAyB,GAAG,aAAa,CASnG"}