tinbase 0.10.0 → 0.10.1

package/dist/node/fs-driver.js

@@ -1,11 +1,26 @@
+/**
+ * Filesystem-backed storage driver (Node only). Persists object bytes as files
+ * under a single root directory, with path-traversal protection on every key.
+ */
 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { dirname, join, normalize, sep } from 'node:path';
-/** Node-only driver — object bytes live under a root directory. */
+/**
+ * Node-only {@link StorageDriver} that keeps object bytes as files under a
+ * single root directory. Keys map to relative paths beneath the root.
+ */
 export class FsStorageDriver {
     root;
     constructor(root) {
         this.root = root;
     }
+    /**
+     * Resolve a storage key to an absolute path inside the root.
+     *
+     * SECURITY: rejects keys that escape the root (e.g. `../`); the normalized
+     * path must stay under `root` + separator or the key is refused.
+     *
+     * @throws if the key would resolve outside the root directory.
+     */
     resolve(key) {
         const path = normalize(join(this.root, key));
         if (!path.startsWith(normalize(this.root) + sep)) {
@@ -13,11 +28,13 @@ export class FsStorageDriver {
         }
         return path;
     }
+    /** Write object bytes, creating parent directories as needed. */
     async put(key, data) {
         const path = this.resolve(key);
         await mkdir(dirname(path), { recursive: true });
         await writeFile(path, data);
     }
+    /** Read object bytes, or null if the key does not exist. */
     async get(key) {
         try {
             return new Uint8Array(await readFile(this.resolve(key)));
@@ -28,9 +45,11 @@ export class FsStorageDriver {
             throw e;
         }
     }
+    /** Delete an object; a missing key is not an error. */
     async delete(key) {
         await rm(this.resolve(key), { force: true });
     }
+    /** Delete several objects in sequence. */
     async deleteMany(keys) {
         for (const k of keys)
             await this.delete(k);

package/dist/node/fs-driver.js.map

@@ -1 +1 @@
-{"version":3,"file":"fs-driver.js","sourceRoot":"","sources":["../../src/node/fs-driver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAGzD,mEAAmE;AACnE,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE5B,OAAO,CAAC,GAAW;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAgB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC;YACH,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC/D,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAc;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC;CACF"}
+{"version":3,"file":"fs-driver.js","sourceRoot":"","sources":["../../src/node/fs-driver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAGzD;;;GAGG;AACH,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAEpC;;;;;;;OAOG;IACK,OAAO,CAAC,GAAW;QACzB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAA;QAChD,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAgB;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC;YACH,OAAO,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAA;YAC/D,MAAM,CAAC,CAAA;QACT,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,UAAU,CAAC,IAAc;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC;CACF"}

package/dist/node/index.d.ts

@@ -5,7 +5,7 @@ export { loadSupabaseProject, type SupabaseProject } from './project.js';
 export { acceptWebSocket, type WsConnection } from './ws.js';
 export { createNativeEngine, ensurePostgres, type NativeEngineOptions } from './native/engine.js';
 export { PgWireClient, PgWireError } from './native/wire.js';
-export { loadFunctions, loadFunctionEnv } from './load-functions.js';
+export { loadFunctions, loadFunctionEnv, type LoadFunctionOptions } from './load-functions.js';
 export { bundleFunction, rewriteRemoteSpecifier } from './bundle-function.js';
-export { loadOAuthProviders } from './load-oauth.js';
+export { loadProjectConfig, type ProjectConfig } from './load-config.js';
 export { computeDbDiff, pullSchema, shadowNativeDataDir, type DbDiffOptions, type DbPullOptions, type DbPullResult } from './db-diff.js';

package/dist/node/index.js

@@ -7,6 +7,6 @@ export { createNativeEngine, ensurePostgres } from './native/engine.js';
 export { PgWireClient, PgWireError } from './native/wire.js';
 export { loadFunctions, loadFunctionEnv } from './load-functions.js';
 export { bundleFunction, rewriteRemoteSpecifier } from './bundle-function.js';
-export { loadOAuthProviders } from './load-oauth.js';
+export { loadProjectConfig } from './load-config.js';
 export { computeDbDiff, pullSchema, shadowNativeDataDir } from './db-diff.js';
 //# sourceMappingURL=index.js.map

package/dist/node/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAyC,MAAM,aAAa,CAAA;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,cAAc,CAAA;AACxE,OAAO,EAAE,eAAe,EAAqB,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAA4B,MAAM,oBAAoB,CAAA;AACjG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAA6D,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAyC,MAAM,aAAa,CAAA;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,cAAc,CAAA;AACxE,OAAO,EAAE,eAAe,EAAqB,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAA4B,MAAM,oBAAoB,CAAA;AACjG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,eAAe,EAA4B,MAAM,qBAAqB,CAAA;AAC9F,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,iBAAiB,EAAsB,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAA6D,MAAM,cAAc,CAAA"}

package/dist/node/load-config.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Read everything tinbase can honor from an existing Supabase project's
+ * supabase/config.toml, so pointing tinbase at that project needs no new config.
+ *
+ * config.toml is one document, so this is one loader: parse once, then project
+ * the tree into a nested `ProjectConfig` that mirrors the file's sections. The
+ * CLI spreads those sections into createBackend. Sections for services tinbase
+ * doesn't run (SMS, analytics, pooler, studio/edge-runtime ports, experimental)
+ * are intentionally ignored.
+ */
+import type { AuthSettings } from '../auth/settings.js';
+import type { OAuthProviderConfig } from '../auth/oauth.js';
+import type { RateLimitRule } from '../auth/rate-limit.js';
+import type { BucketSeed } from '../types.js';
+/** The project's config.toml, projected into the shapes tinbase consumes. */
+export interface ProjectConfig {
+    /** the [auth] slice: settings, redirects, sessions, rate limits, OAuth */
+    auth: AuthConfig;
+    /** the [api] slice: exposed schemas and row cap */
+    api: ApiConfig;
+    /** the [storage] slice: default size limit and buckets to seed */
+    storage: StorageConfig;
+    /** the [db.seed] slice: whether/what to seed */
+    seed: SeedConfig;
+    /** per-function options keyed by function name ([functions.<name>]) */
+    functions: Record<string, FunctionOptions>;
+}
+/** The `[auth]` slice of config.toml, projected into the shapes the backend consumes. */
+export interface AuthConfig {
+    /** whether to run the auth service ([auth].enabled) */
+    enabled?: boolean;
+    /** runtime-toggleable settings, layered under the live auth.config table */
+    settings: Partial<AuthSettings>;
+    /** [auth].site_url */
+    siteUrl?: string;
+    /** [auth].jwt_expiry, seconds */
+    jwtExpiry?: number;
+    /** [auth].additional_redirect_urls */
+    uriAllowList?: string[];
+    /** [auth.rate_limit].* mapped to the auth limiter's rules */
+    rateLimits?: Record<string, RateLimitRule>;
+    /** [auth.sessions].timebox, seconds */
+    sessionTimeboxSeconds?: number;
+    /** [auth.sessions].inactivity_timeout, seconds */
+    sessionInactivitySeconds?: number;
+    /** OAuth providers from [auth.external.*] and env-var fallbacks */
+    oauthProviders: Record<string, OAuthProviderConfig>;
+}
+/** The `[api]` slice of config.toml. */
+export interface ApiConfig {
+    /** [api].schemas: schemas exposed through the Data API (db-schemas) */
+    schemas?: string[];
+    /** [api].max_rows: REST read row cap */
+    maxRows?: number;
+}
+/** The `[storage]` slice of config.toml. */
+export interface StorageConfig {
+    /** [storage].file_size_limit: default per-bucket byte limit */
+    fileSizeLimit?: number;
+    /** [storage.buckets.*]: buckets to create at boot */
+    buckets?: BucketSeed[];
+}
+/** The `[db.seed]` slice of config.toml. */
+export interface SeedConfig {
+    /** [db.seed].enabled */
+    enabled?: boolean;
+    /** [db.seed].sql_paths (files or globs, relative to supabase/) */
+    paths?: string[];
+}
+/** Per-function `[functions.<name>]` options. */
+export interface FunctionOptions {
+    /** [functions.<name>].enabled */
+    enabled?: boolean;
+    /** [functions.<name>].verify_jwt */
+    verifyJwt?: boolean;
+    /** [functions.<name>].entrypoint, relative to the project root */
+    entrypoint?: string;
+}
+/** Parse supabase/config.toml once and project it into a {@link ProjectConfig}. */
+export declare function loadProjectConfig(projectDir: string, env?: NodeJS.ProcessEnv): ProjectConfig;

package/dist/node/load-config.js

@@ -0,0 +1,230 @@
+import { loadConfigToml, tableAt, getBool, getInt, getString, getStringArray, getByteSize, getDurationSeconds, } from './config-toml.js';
+/** Parse supabase/config.toml once and project it into a {@link ProjectConfig}. */
+export function loadProjectConfig(projectDir, env = process.env) {
+    const root = loadConfigToml(projectDir, env);
+    return {
+        auth: readAuth(root, env),
+        api: readApi(root),
+        storage: readStorage(root),
+        seed: readSeed(root),
+        functions: readFunctions(root),
+    };
+}
+// ── [auth] ─────────────────────────────────────────────────────────────────
+function readAuth(root, env) {
+    const auth = tableAt(root, 'auth');
+    const out = { settings: readAuthSettings(root), oauthProviders: readOAuthProviders(root, env) };
+    const enabled = getBool(auth, 'enabled');
+    if (enabled !== undefined)
+        out.enabled = enabled;
+    const siteUrl = getString(auth, 'site_url');
+    if (siteUrl !== undefined)
+        out.siteUrl = siteUrl;
+    const jwtExpiry = getInt(auth, 'jwt_expiry');
+    if (jwtExpiry !== undefined && jwtExpiry > 0)
+        out.jwtExpiry = jwtExpiry;
+    const redirects = getStringArray(auth, 'additional_redirect_urls');
+    if (redirects !== undefined)
+        out.uriAllowList = redirects;
+    const rateLimits = readRateLimits(root);
+    if (rateLimits)
+        out.rateLimits = rateLimits;
+    const sessions = tableAt(root, 'auth.sessions');
+    const timebox = getDurationSeconds(sessions, 'timebox');
+    if (timebox !== undefined)
+        out.sessionTimeboxSeconds = timebox;
+    const inactivity = getDurationSeconds(sessions, 'inactivity_timeout');
+    if (inactivity !== undefined)
+        out.sessionInactivitySeconds = inactivity;
+    return out;
+}
+/** The [auth]/[auth.email]/[auth.mfa] keys that become AuthSettings defaults. */
+function readAuthSettings(root) {
+    const auth = tableAt(root, 'auth');
+    const email = tableAt(root, 'auth.email');
+    const mfa = tableAt(root, 'auth.mfa');
+    const mfaTotp = tableAt(root, 'auth.mfa.totp');
+    const out = {};
+    // Signups: [auth].disable_signup (legacy) or enable_signup at [auth]/[auth.email].
+    const disableSignup = getBool(auth, 'disable_signup');
+    if (disableSignup !== undefined)
+        out.disableSignup = disableSignup;
+    const enableSignup = getBool(auth, 'enable_signup') ?? getBool(email, 'enable_signup');
+    if (enableSignup !== undefined)
+        out.disableSignup = !enableSignup;
+    const anon = getBool(auth, 'enable_anonymous_sign_ins');
+    if (anon !== undefined)
+        out.anonymousUsers = anon;
+    // enable_confirmations (require email confirmation) is the inverse of autoconfirm;
+    // [auth.email] is canonical, top-level [auth] is the legacy alias.
+    const confirmations = getBool(email, 'enable_confirmations') ?? getBool(auth, 'enable_confirmations');
+    if (confirmations !== undefined)
+        out.autoconfirm = !confirmations;
+    const minLen = getInt(auth, 'minimum_password_length');
+    if (minLen !== undefined)
+        out.minPasswordLength = minLen;
+    const otpLength = getInt(email, 'otp_length');
+    if (otpLength !== undefined)
+        out.otpLength = otpLength;
+    const otpExpiry = getInt(email, 'otp_expiry');
+    if (otpExpiry !== undefined)
+        out.otpExpirySeconds = otpExpiry;
+    const maxFactors = getInt(mfa, 'max_enrolled_factors');
+    if (maxFactors !== undefined)
+        out.maxEnrolledFactors = maxFactors;
+    const totpEnroll = getBool(mfaTotp, 'enroll_enabled');
+    if (totpEnroll !== undefined)
+        out.totpEnrollEnabled = totpEnroll;
+    const totpVerify = getBool(mfaTotp, 'verify_enabled');
+    if (totpVerify !== undefined)
+        out.totpVerifyEnabled = totpVerify;
+    return out;
+}
+/** Map [auth.rate_limit].* to the auth limiter's rules (GoTrue's windows). */
+function readRateLimits(root) {
+    const rl = tableAt(root, 'auth.rate_limit');
+    if (!rl)
+        return undefined;
+    const out = {};
+    const FIVE_MIN = 5 * 60 * 1000;
+    const ONE_HOUR = 60 * 60 * 1000;
+    const signIn = getInt(rl, 'sign_in_sign_ups');
+    if (signIn !== undefined) {
+        out.token = { limit: signIn, windowMs: FIVE_MIN };
+        out.signup = { limit: signIn, windowMs: FIVE_MIN };
+    }
+    const verify = getInt(rl, 'token_verifications');
+    if (verify !== undefined)
+        out.verify = { limit: verify, windowMs: FIVE_MIN };
+    const email = getInt(rl, 'email_sent');
+    if (email !== undefined) {
+        out.otp = { limit: email, windowMs: ONE_HOUR };
+        out.recover = { limit: email, windowMs: ONE_HOUR };
+    }
+    return Object.keys(out).length ? out : undefined;
+}
+/**
+ * OAuth providers, highest precedence first:
+ *   1. config.toml [auth.external.<provider>]
+ *   2. GOTRUE_EXTERNAL_<PROVIDER>_CLIENT_ID / _SECRET / _ENABLED
+ *   3. TINBASE_OAUTH_<PROVIDER>_CLIENT_ID / _CLIENT_SECRET / _ENABLED
+ * Endpoints come from presets in oauth.ts; only real overrides are passed.
+ */
+function readOAuthProviders(root, env) {
+    const out = {};
+    const external = tableAt(root, 'auth.external');
+    if (external) {
+        for (const [name, t] of external.children) {
+            const enabled = getBool(t, 'enabled') ?? true;
+            const clientId = getString(t, 'client_id');
+            const secret = getString(t, 'secret');
+            if (!enabled || !clientId || !secret)
+                continue;
+            const url = getString(t, 'url');
+            out[name.toLowerCase()] = {
+                clientId,
+                clientSecret: secret,
+                authorizeUrl: getString(t, 'authorize_url') ?? (url ? `${url}/authorize` : undefined),
+                tokenUrl: getString(t, 'token_url') ?? (url ? `${url}/token` : undefined),
+                userInfoUrl: getString(t, 'userinfo_url') ?? (url ? `${url}/userinfo` : undefined),
+                scopes: getString(t, 'scopes'),
+            };
+        }
+    }
+    collectEnvProviders(env, out, 'GOTRUE_EXTERNAL_', 'SECRET');
+    collectEnvProviders(env, out, 'TINBASE_OAUTH_', 'CLIENT_SECRET');
+    return out;
+}
+/** Collect providers declared via `<prefix><NAME>_CLIENT_ID/_<secretKey>/_ENABLED` env vars. */
+function collectEnvProviders(env, out, prefix, secretKey) {
+    const names = new Set();
+    for (const key of Object.keys(env)) {
+        if (key.startsWith(prefix) && key.endsWith('_CLIENT_ID')) {
+            names.add(key.slice(prefix.length, -'_CLIENT_ID'.length));
+        }
+    }
+    for (const upper of names) {
+        const name = upper.toLowerCase();
+        if (out[name])
+            continue; // higher-precedence source already set it
+        const g = (s) => env[`${prefix}${upper}_${s}`];
+        const clientId = g('CLIENT_ID');
+        const clientSecret = g(secretKey);
+        if (!clientId || !clientSecret)
+            continue;
+        if (g('ENABLED') !== undefined && g('ENABLED') !== 'true')
+            continue;
+        out[name] = {
+            clientId,
+            clientSecret,
+            authorizeUrl: g('AUTHORIZE_URL'),
+            tokenUrl: g('TOKEN_URL'),
+            userInfoUrl: g('USERINFO_URL'),
+            scopes: g('SCOPES'),
+        };
+    }
+}
+// ── [api] ────────────────────────────────────────────────────────────────
+function readApi(root) {
+    const api = tableAt(root, 'api');
+    const out = {};
+    const schemas = getStringArray(api, 'schemas');
+    if (schemas !== undefined)
+        out.schemas = schemas;
+    const maxRows = getInt(api, 'max_rows');
+    if (maxRows !== undefined && maxRows > 0)
+        out.maxRows = maxRows;
+    return out;
+}
+// ── [storage] ──────────────────────────────────────────────────────────────
+function readStorage(root) {
+    const storage = tableAt(root, 'storage');
+    const out = {};
+    const limit = getByteSize(storage, 'file_size_limit');
+    if (limit !== undefined)
+        out.fileSizeLimit = limit;
+    const buckets = tableAt(root, 'storage.buckets');
+    if (buckets && buckets.children.size > 0) {
+        out.buckets = [...buckets.children].map(([id, t]) => ({
+            id,
+            public: getBool(t, 'public') ?? false,
+            fileSizeLimit: getByteSize(t, 'file_size_limit') ?? null,
+            allowedMimeTypes: getStringArray(t, 'allowed_mime_types') ?? null,
+        }));
+    }
+    return out;
+}
+// ── [db.seed] ──────────────────────────────────────────────────────────────
+function readSeed(root) {
+    const seed = tableAt(root, 'db.seed');
+    const out = {};
+    const enabled = getBool(seed, 'enabled');
+    if (enabled !== undefined)
+        out.enabled = enabled;
+    const paths = getStringArray(seed, 'sql_paths');
+    if (paths !== undefined)
+        out.paths = paths;
+    return out;
+}
+// ── [functions.<name>] ───────────────────────────────────────────────────
+function readFunctions(root) {
+    const fns = tableAt(root, 'functions');
+    const out = {};
+    if (!fns)
+        return out;
+    for (const [name, t] of fns.children) {
+        const opts = {};
+        const enabled = getBool(t, 'enabled');
+        if (enabled !== undefined)
+            opts.enabled = enabled;
+        const verifyJwt = getBool(t, 'verify_jwt');
+        if (verifyJwt !== undefined)
+            opts.verifyJwt = verifyJwt;
+        const entrypoint = getString(t, 'entrypoint');
+        if (entrypoint !== undefined)
+            opts.entrypoint = entrypoint;
+        out[name] = opts;
+    }
+    return out;
+}
+//# sourceMappingURL=load-config.js.map

package/dist/node/load-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-config.js","sourceRoot":"","sources":["../../src/node/load-config.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACN,SAAS,EACT,cAAc,EACd,WAAW,EACX,kBAAkB,GAEnB,MAAM,kBAAkB,CAAA;AAwEzB,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACxF,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC5C,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC;QACzB,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC;QAC1B,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QACpB,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC;KAC/B,CAAA;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,IAAiB,EAAE,GAAsB;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,MAAM,GAAG,GAAe,EAAE,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAA;IAE3G,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACxC,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IAChD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IAC5C,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC;QAAE,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;IACvE,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAA;IAClE,IAAI,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,YAAY,GAAG,SAAS,CAAA;IAEzD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;IAE3C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACvD,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,qBAAqB,GAAG,OAAO,CAAA;IAC9D,MAAM,UAAU,GAAG,kBAAkB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAA;IACrE,IAAI,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,wBAAwB,GAAG,UAAU,CAAA;IAEvE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,IAAiB;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAA;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IAC9C,MAAM,GAAG,GAA0B,EAAE,CAAA;IAErC,mFAAmF;IACnF,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IACrD,IAAI,aAAa,KAAK,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,aAAa,CAAA;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAA;IACtF,IAAI,YAAY,KAAK,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,YAAY,CAAA;IAEjE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAA;IACvD,IAAI,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,IAAI,CAAA;IAEjD,mFAAmF;IACnF,mEAAmE;IACnE,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,sBAAsB,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAA;IACrG,IAAI,aAAa,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,aAAa,CAAA;IAEjE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;IACtD,IAAI,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAA;IAExD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAC7C,IAAI,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAC7C,IAAI,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAA;IAE7D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAA;IACtD,IAAI,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,kBAAkB,GAAG,UAAU,CAAA;IACjE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACrD,IAAI,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,iBAAiB,GAAG,UAAU,CAAA;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACrD,IAAI,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,iBAAiB,GAAG,UAAU,CAAA;IAEhE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc,CAAC,IAAiB;IACvC,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAC3C,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IACzB,MAAM,GAAG,GAAkC,EAAE,CAAA;IAC7C,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;IAC9B,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,kBAAkB,CAAC,CAAA;IAC7C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;QACjD,GAAG,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,qBAAqB,CAAC,CAAA;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;QAC9C,GAAG,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;IACpD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,IAAiB,EAAE,GAAsB;IACnE,MAAM,GAAG,GAAwC,EAAE,CAAA;IAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,IAAI,CAAA;YAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;YAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;YACrC,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM;gBAAE,SAAQ;YAC9C,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;YAC/B,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG;gBACxB,QAAQ;gBACR,YAAY,EAAE,MAAM;gBACpB,YAAY,EAAE,SAAS,CAAC,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrF,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClF,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC;aAC/B,CAAA;QACH,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAA;IAC3D,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAA;IAChE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,gGAAgG;AAChG,SAAS,mBAAmB,CAC1B,GAAsB,EACtB,GAAwC,EACxC,MAAc,EACd,SAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACzD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QAChC,IAAI,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ,CAAC,0CAA0C;QAClE,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,WAAW,CAAC,CAAA;QAC/B,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC,CAAA;QACjC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,SAAQ;QACxC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,MAAM;YAAE,SAAQ;QACnE,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,QAAQ;YACR,YAAY;YACZ,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC;YAChC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;YACxB,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;SACpB,CAAA;IACH,CAAC;AACH,CAAC;AAED,4EAA4E;AAE5E,SAAS,OAAO,CAAC,IAAiB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAChC,MAAM,GAAG,GAAc,EAAE,CAAA;IACzB,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC9C,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;IACvC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IAC/D,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAE9E,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACxC,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;IACrD,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,aAAa,GAAG,KAAK,CAAA;IAElD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IAChD,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpD,EAAE;YACF,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,KAAK;YACrC,aAAa,EAAE,WAAW,CAAC,CAAC,EAAE,iBAAiB,CAAC,IAAI,IAAI;YACxD,gBAAgB,EAAE,cAAc,CAAC,CAAC,EAAE,oBAAoB,CAAC,IAAI,IAAI;SAClE,CAAC,CAAC,CAAA;IACL,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,IAAiB;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACrC,MAAM,GAAG,GAAe,EAAE,CAAA;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IACxC,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAA;IAC1C,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,4EAA4E;AAE5E,SAAS,aAAa,CAAC,IAAiB;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IACtC,MAAM,GAAG,GAAoC,EAAE,CAAA;IAC/C,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAA;IACpB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACjD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;QAC1C,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QACvD,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;QAC7C,IAAI,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAClB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/node/load-functions.d.ts

@@ -1,8 +1,23 @@
 import type { EdgeFunction } from '../functions/handler.js';
 /**
  * Load edge-function secrets from supabase/functions/.env (KEY=VALUE lines,
- * `#` comments). These are exposed to functions via Deno.env and ctx.env —
+ * `#` comments). These are exposed to functions via Deno.env and ctx.env -
  * the local equivalent of `supabase functions serve --env-file`.
  */
 export declare function loadFunctionEnv(projectDir: string): Promise<Record<string, string>>;
-export declare function loadFunctions(projectDir: string): Promise<Map<string, EdgeFunction>>;
+/** Per-function options from config.toml [functions.<name>]. */
+export interface LoadFunctionOptions {
+    /** Skip loading when explicitly disabled. */
+    enabled?: boolean;
+    /** Custom entrypoint path, relative to the project root. */
+    entrypoint?: string;
+}
+/**
+ * Discover and load every edge function under supabase/functions/, keyed by
+ * directory name. Dirs starting with `_` or `.` are skipped (shared code), as
+ * are functions disabled in config.toml. Each function is bundled with esbuild
+ * when available (falling back to a plain import), then its handler is taken
+ * from a default export or a captured `Deno.serve()` call. Load failures warn
+ * and skip rather than throwing, so one broken function can't block startup.
+ */
+export declare function loadFunctions(projectDir: string, options?: Record<string, LoadFunctionOptions>): Promise<Map<string, EdgeFunction>>;

package/dist/node/load-functions.js

@@ -6,7 +6,7 @@ import { installDenoShim, resetCapturedHandler, takeCapturedHandler } from '../f
 import { bundleFunction } from './bundle-function.js';
 /**
  * Load edge-function secrets from supabase/functions/.env (KEY=VALUE lines,
- * `#` comments). These are exposed to functions via Deno.env and ctx.env —
+ * `#` comments). These are exposed to functions via Deno.env and ctx.env -
  * the local equivalent of `supabase functions serve --env-file`.
  */
 export async function loadFunctionEnv(projectDir) {
@@ -35,7 +35,15 @@ export async function loadFunctionEnv(projectDir) {
     }
     return env;
 }
-export async function loadFunctions(projectDir) {
+/**
+ * Discover and load every edge function under supabase/functions/, keyed by
+ * directory name. Dirs starting with `_` or `.` are skipped (shared code), as
+ * are functions disabled in config.toml. Each function is bundled with esbuild
+ * when available (falling back to a plain import), then its handler is taken
+ * from a default export or a captured `Deno.serve()` call. Load failures warn
+ * and skip rather than throwing, so one broken function can't block startup.
+ */
+export async function loadFunctions(projectDir, options = {}) {
     const functions = new Map();
     const root = join(projectDir, 'supabase', 'functions');
     let entries = [];
@@ -50,11 +58,16 @@ export async function loadFunctions(projectDir) {
     for (const name of entries) {
         if (name.startsWith('_') || name.startsWith('.'))
             continue;
+        if (options[name]?.enabled === false)
+            continue; // disabled in config.toml
         const dir = join(root, name);
         if (!(await stat(dir)).isDirectory())
             continue;
-        for (const file of ['index.ts', 'index.tsx', 'index.js', 'index.mjs']) {
-            const path = join(dir, file);
+        // A config.toml entrypoint overrides the default index.* discovery.
+        const candidates = options[name]?.entrypoint
+            ? [join(projectDir, options[name].entrypoint)]
+            : ['index.ts', 'index.tsx', 'index.js', 'index.mjs'].map((f) => join(dir, f));
+        for (const path of candidates) {
             try {
                 await stat(path);
             }

package/dist/node/load-functions.js.map

@@ -1 +1 @@
-{"version":3,"file":"load-functions.js","sourceRoot":"","sources":["../../src/node/load-functions.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACzB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAA;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IAEtD,IAAI,OAAO,GAAa,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,kEAAkE;IAClE,eAAe,EAAE,CAAA;IAEjB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,iEAAiE;gBACjE,kEAAkE;gBAClE,wDAAwD;gBACxD,IAAI,SAAiB,CAAA;gBACrB,IAAI,CAAC;oBACH,SAAS,GAAG,aAAa,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;gBAClE,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAK,CAAW,CAAC,OAAO,KAAK,uBAAuB;wBAAE,MAAM,CAAC,CAAA;oBAC7D,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAA;gBACtC,CAAC;gBACD,oBAAoB,EAAE,CAAA;gBACtB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAA+B,CAAA;gBACnE,iEAAiE;gBACjE,2CAA2C;gBAC3C,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAA;gBACzC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC9H,IAAI,OAAO,EAAE,CAAC;oBACZ,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAuB,CAAC,CAAA;gBAC9C,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,0DAA0D,CAAC,CAAA;gBACtG,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtD,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,iEAAiE,CAAC,CAAA;gBAC7G,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;YACD,MAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}
+{"version":3,"file":"load-functions.js","sourceRoot":"","sources":["../../src/node/load-functions.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACzB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,UAA+C,EAAE;IAEjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAA;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IAEtD,IAAI,OAAO,GAAa,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,kEAAkE;IAClE,eAAe,EAAE,CAAA;IAEjB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK;YAAE,SAAQ,CAAC,0BAA0B;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC9C,oEAAoE;QACpE,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU;YAC1C,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,UAAW,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QAC/E,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,iEAAiE;gBACjE,kEAAkE;gBAClE,wDAAwD;gBACxD,IAAI,SAAiB,CAAA;gBACrB,IAAI,CAAC;oBACH,SAAS,GAAG,aAAa,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;gBAClE,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAK,CAAW,CAAC,OAAO,KAAK,uBAAuB;wBAAE,MAAM,CAAC,CAAA;oBAC7D,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAA;gBACtC,CAAC;gBACD,oBAAoB,EAAE,CAAA;gBACtB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAA+B,CAAA;gBACnE,iEAAiE;gBACjE,2CAA2C;gBAC3C,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAA;gBACzC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC9H,IAAI,OAAO,EAAE,CAAC;oBACZ,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAuB,CAAC,CAAA;gBAC9C,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,0DAA0D,CAAC,CAAA;gBACtG,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtD,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,iEAAiE,CAAC,CAAA;gBAC7G,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;YACD,MAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/node/native/engine.d.ts

@@ -1,4 +1,5 @@
 import type { DbEngine } from '../../db/engine.js';
+/** Options for {@link createNativeEngine}. */
 export interface NativeEngineOptions {
     /** Postgres data directory (created + initdb'd if missing). */
     dataDir: string;
@@ -6,8 +7,14 @@ export interface NativeEngineOptions {
     version?: string;
     /** Where downloaded binaries are cached. Default ~/.cache/tinbase */
     cacheDir?: string;
+    /** sink for progress lines (download, install); no-op when omitted */
     log?: (msg: string) => void;
 }
 /** Download + unpack Postgres binaries if not already cached (concurrency-safe). Returns the install dir. */
 export declare function ensurePostgres(version?: string, cacheDir?: string, log?: (m: string) => void): Promise<string>;
+/**
+ * Boot the embedded Postgres child (initdb on first run) and return a {@link DbEngine}
+ * backed by two wire connections: one for queries/transactions (serialized by a mutex),
+ * one dedicated to LISTEN/NOTIFY.
+ */
 export declare function createNativeEngine(opts: NativeEngineOptions): Promise<DbEngine>;