tinbase 0.2.2 → 0.6.0

package/dist/log-buffer.d.ts

@@ -0,0 +1,21 @@
+/**
+ * In-memory ring buffer of recent server log lines, surfaced in the Studio
+ * "Logs" pane (and available as backend.logs). Captures request lines and the
+ * internal log() output (migrations, mail, webhooks, cron). Dev convenience —
+ * bounded, never persisted.
+ */
+export type LogLevel = 'info' | 'warn' | 'error';
+export interface LogEntry {
+    ts: string;
+    level: LogLevel;
+    msg: string;
+}
+export declare class LogBuffer {
+    private cap;
+    private entries;
+    constructor(cap?: number);
+    push(msg: string, level?: LogLevel): void;
+    /** Most recent first. */
+    list(limit?: number): LogEntry[];
+    clear(): void;
+}

package/dist/log-buffer.js

@@ -0,0 +1,20 @@
+export class LogBuffer {
+    cap;
+    entries = [];
+    constructor(cap = 500) {
+        this.cap = cap;
+    }
+    push(msg, level = 'info') {
+        this.entries.push({ ts: new Date().toISOString(), level, msg });
+        if (this.entries.length > this.cap)
+            this.entries.splice(0, this.entries.length - this.cap);
+    }
+    /** Most recent first. */
+    list(limit = 200) {
+        return this.entries.slice(-limit).reverse();
+    }
+    clear() {
+        this.entries = [];
+    }
+}
+//# sourceMappingURL=log-buffer.js.map

package/dist/log-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-buffer.js","sourceRoot":"","sources":["../src/log-buffer.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,SAAS;IAEA;IADZ,OAAO,GAAe,EAAE,CAAA;IAChC,YAAoB,MAAM,GAAG;QAAT,QAAG,GAAH,GAAG,CAAM;IAAG,CAAC;IAEjC,IAAI,CAAC,GAAW,EAAE,QAAkB,MAAM;QACxC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5F,CAAC;IAED,yBAAyB;IACzB,IAAI,CAAC,KAAK,GAAG,GAAG;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAA;IAC7C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;IACnB,CAAC;CACF"}

package/dist/node/bundle-function.d.ts

@@ -0,0 +1,7 @@
+/** Map a Deno-style specifier to a fetchable URL. Pure — unit tested. */
+export declare function rewriteRemoteSpecifier(spec: string): string;
+/**
+ * Bundle `entryPath` to a single ESM file and return its path (written under
+ * the OS temp dir). Throws if esbuild is not installed.
+ */
+export declare function bundleFunction(entryPath: string, name: string): Promise<string>;

package/dist/node/bundle-function.js

@@ -0,0 +1,90 @@
+/**
+ * Bundle an edge function with esbuild so it runs under Node like it would on
+ * Supabase's Deno edge runtime. This resolves what a plain `import()` can't:
+ *   - TypeScript and multi-file functions (relative imports)
+ *   - `npm:` / `jsr:` specifiers  → rewritten to esm.sh and fetched
+ *   - `https://` URL imports       → fetched (and their transitive deps)
+ *
+ * Remote modules are fetched at bundle time (first run) and disk-cached, the
+ * same trade Deno makes. esbuild is an optional dependency; when it's missing
+ * the loader falls back to a plain import (Web-API/Deno.serve functions still
+ * work, just not remote/TS imports).
+ */
+import { createHash } from 'node:crypto';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+/** Map a Deno-style specifier to a fetchable URL. Pure — unit tested. */
+export function rewriteRemoteSpecifier(spec) {
+    if (spec.startsWith('npm:'))
+        return `https://esm.sh/${spec.slice(4)}`;
+    if (spec.startsWith('jsr:'))
+        return `https://esm.sh/jsr/${spec.slice(4)}`;
+    return spec; // already an http(s) URL
+}
+const HTTP_CACHE = join(tmpdir(), 'tinbase-fn-http');
+async function fetchModule(url) {
+    const key = createHash('sha256').update(url).digest('hex');
+    const cached = join(HTTP_CACHE, key);
+    if (existsSync(cached))
+        return readFile(cached, 'utf8');
+    const res = await fetch(url, { redirect: 'follow' });
+    if (!res.ok)
+        throw new Error(`failed to fetch ${url}: HTTP ${res.status}`);
+    const body = await res.text();
+    await mkdir(HTTP_CACHE, { recursive: true });
+    await writeFile(cached, body);
+    return body;
+}
+/** esbuild plugin: resolve npm:/jsr:/https imports by fetching from esm.sh. */
+function remotePlugin() {
+    return {
+        name: 'tinbase-remote',
+        setup(build) {
+            build.onResolve({ filter: /^(npm:|jsr:|https?:\/\/)/ }, (args) => ({
+                path: rewriteRemoteSpecifier(args.path),
+                namespace: 'http-url',
+            }));
+            // imports *inside* a fetched module resolve relative to its URL
+            build.onResolve({ filter: /.*/, namespace: 'http-url' }, (args) => ({
+                path: new URL(args.path, args.importer).href,
+                namespace: 'http-url',
+            }));
+            build.onLoad({ filter: /.*/, namespace: 'http-url' }, async (args) => ({
+                contents: await fetchModule(args.path),
+                loader: 'js',
+            }));
+        },
+    };
+}
+/**
+ * Bundle `entryPath` to a single ESM file and return its path (written under
+ * the OS temp dir). Throws if esbuild is not installed.
+ */
+export async function bundleFunction(entryPath, name) {
+    let esbuild;
+    try {
+        esbuild = await import('esbuild');
+    }
+    catch {
+        throw new Error('esbuild-not-available');
+    }
+    const outDir = join(tmpdir(), 'tinbase-fn-bundle');
+    await mkdir(outDir, { recursive: true });
+    const result = await esbuild.build({
+        entryPoints: [entryPath],
+        bundle: true,
+        format: 'esm',
+        platform: 'node',
+        target: 'node18',
+        write: false,
+        logLevel: 'silent',
+        plugins: [remotePlugin()],
+    });
+    const code = result.outputFiles[0].text;
+    const out = join(outDir, `${name}-${createHash('sha256').update(entryPath).digest('hex').slice(0, 8)}.mjs`);
+    await writeFile(out, code);
+    return out;
+}
+//# sourceMappingURL=bundle-function.js.map

package/dist/node/bundle-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-function.js","sourceRoot":"","sources":["../../src/node/bundle-function.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,yEAAyE;AACzE,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACrE,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,sBAAsB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,OAAO,IAAI,CAAA,CAAC,yBAAyB;AACvC,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAA;AAEpD,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IACpC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IACpD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC7B,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC7B,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY;IACnB,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,KAAK,CAAC,KAAU;YACd,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,CAAC,IAAsB,EAAE,EAAE,CAAC,CAAC;gBACnF,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvC,SAAS,EAAE,UAAU;aACtB,CAAC,CAAC,CAAA;YACH,gEAAgE;YAChE,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,IAAwC,EAAE,EAAE,CAAC,CAAC;gBACtG,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI;gBAC5C,SAAS,EAAE,UAAU;aACtB,CAAC,CAAC,CAAA;YACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAsB,EAAE,EAAE,CAAC,CAAC;gBACvF,QAAQ,EAAE,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtC,MAAM,EAAE,IAAI;aACb,CAAC,CAAC,CAAA;QACL,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,IAAY;IAClE,IAAI,OAAiC,CAAA;IACrC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAA;IAClD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC;QACjC,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,CAAC,YAAY,EAAE,CAAC;KAC1B,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;IAC3G,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAC1B,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/node/db-diff.d.ts

@@ -0,0 +1,34 @@
+import type { MigrationFile } from '../types.js';
+export interface DbDiffOptions {
+    /** the live project's data dir (wasm) or undefined when a native engine is passed */
+    liveDataDir?: string;
+    liveEngine?: import('../db/engine.js').DbEngine;
+    migrations: MigrationFile[];
+    seedSql?: string;
+    schema?: string;
+    /** factory for the shadow engine (native mode); omit for wasm/in-memory shadow */
+    makeShadowEngine?: () => Promise<import('../db/engine.js').DbEngine>;
+}
+export declare function computeDbDiff(opts: DbDiffOptions): Promise<string[]>;
+export declare function shadowNativeDataDir(): string;
+export interface DbPullOptions extends DbDiffOptions {
+    /** directory to write the migration into (usually supabase/migrations); omit to skip writing */
+    migrationsDir?: string;
+    /** migration name suffix (default 'remote_schema') */
+    name?: string;
+    /** timestamp version prefix; pass for determinism (default: now as YYYYMMDDHHMMSS) */
+    stamp?: string;
+}
+export interface DbPullResult {
+    ddl: string[];
+    version: string | null;
+    path: string | null;
+}
+/**
+ * `tinbase db pull` core: like `db diff`, but writes the delta as a migration
+ * AND records it as already-applied on the live database — the schema is
+ * already there, so a subsequent `tinbase start` must not re-run it. This is
+ * how you bring an out-of-migration (or externally-created) schema under
+ * version control.
+ */
+export declare function pullSchema(opts: DbPullOptions): Promise<DbPullResult>;

package/dist/node/db-diff.js

@@ -0,0 +1,82 @@
+/**
+ * `tinbase db diff` core: diff the live project database (which may contain
+ * changes made outside migrations) against a fresh "shadow" database that has
+ * only the migrations applied. The emitted DDL is the delta you'd save as a
+ * new migration.
+ */
+import { mkdtempSync } from 'node:fs';
+import { mkdir, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { createBackend } from '../index.js';
+import { snapshotSchema, diffSchemas } from '../db/schema-diff.js';
+export async function computeDbDiff(opts) {
+    const schema = opts.schema ?? 'public';
+    // shadow = migrations only, fresh
+    const shadow = await createBackend({
+        engine: opts.makeShadowEngine ? await opts.makeShadowEngine() : undefined,
+        migrations: opts.migrations,
+        // no seed: seed is data, not schema
+    });
+    // live = current project db (createBackend only applies *pending* migrations, so
+    // this reflects the actual current schema including out-of-migration changes)
+    const live = await createBackend({
+        engine: opts.liveEngine,
+        dataDir: opts.liveEngine ? undefined : opts.liveDataDir,
+        migrations: opts.migrations,
+    });
+    try {
+        const shadowSnap = await snapshotSchema(shadow.db, schema);
+        const liveSnap = await snapshotSchema(live.db, schema);
+        return diffSchemas(shadowSnap, liveSnap, schema);
+    }
+    finally {
+        await shadow.close();
+        await live.close();
+    }
+}
+export function shadowNativeDataDir() {
+    return join(mkdtempSync(join(tmpdir(), 'tinbase-shadow-')), 'pg');
+}
+/**
+ * `tinbase db pull` core: like `db diff`, but writes the delta as a migration
+ * AND records it as already-applied on the live database — the schema is
+ * already there, so a subsequent `tinbase start` must not re-run it. This is
+ * how you bring an out-of-migration (or externally-created) schema under
+ * version control.
+ */
+export async function pullSchema(opts) {
+    const schema = opts.schema ?? 'public';
+    const shadow = await createBackend({
+        engine: opts.makeShadowEngine ? await opts.makeShadowEngine() : undefined,
+        migrations: opts.migrations,
+    });
+    const live = await createBackend({
+        engine: opts.liveEngine,
+        dataDir: opts.liveEngine ? undefined : opts.liveDataDir,
+        migrations: opts.migrations,
+    });
+    try {
+        const ddl = diffSchemas(await snapshotSchema(shadow.db, schema), await snapshotSchema(live.db, schema), schema);
+        if (ddl.length === 0)
+            return { ddl, version: null, path: null };
+        const stamp = opts.stamp ?? new Date().toISOString().replace(/[-:T]/g, '').slice(0, 14);
+        const name = opts.name ?? 'remote_schema';
+        const body = ddl.join('\n\n') + '\n';
+        let path = null;
+        if (opts.migrationsDir) {
+            await mkdir(opts.migrationsDir, { recursive: true });
+            path = join(opts.migrationsDir, `${stamp}_${name}.sql`);
+            await writeFile(path, body);
+        }
+        // record as already applied on the live DB so `start` won't re-run it
+        await live.db.query(`insert into supabase_migrations.schema_migrations (version, name, statements)
+       values ($1, $2, $3) on conflict (version) do nothing`, [stamp, `${stamp}_${name}`, [body]]);
+        return { ddl, version: stamp, path };
+    }
+    finally {
+        await shadow.close();
+        await live.close();
+    }
+}
+//# sourceMappingURL=db-diff.js.map

package/dist/node/db-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-diff.js","sourceRoot":"","sources":["../../src/node/db-diff.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACrC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAclE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAA;IAEtC,kCAAkC;IAClC,MAAM,MAAM,GAAmB,MAAM,aAAa,CAAC;QACjD,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS;QACzE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,oCAAoC;KACrC,CAAC,CAAA;IACF,iFAAiF;IACjF,8EAA8E;IAC9E,MAAM,IAAI,GAAmB,MAAM,aAAa,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;QACvD,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACtD,OAAO,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;IAClD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;AACnE,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAmB;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAA;IACtC,MAAM,MAAM,GAAmB,MAAM,aAAa,CAAC;QACjD,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,SAAS;QACzE,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;IACF,MAAM,IAAI,GAAmB,MAAM,aAAa,CAAC;QAC/C,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;QACvD,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QAC/G,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAE/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,CAAA;QACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;QACpC,IAAI,IAAI,GAAkB,IAAI,CAAA;QAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACpD,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,CAAA;YACvD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC7B,CAAC;QACD,sEAAsE;QACtE,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB;4DACsD,EACtD,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CACpC,CAAA;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC"}

package/dist/node/index.d.ts

@@ -5,4 +5,7 @@ export { loadSupabaseProject, type SupabaseProject } from './project.js';
 export { acceptWebSocket, type WsConnection } from './ws.js';
 export { createNativeEngine, ensurePostgres, type NativeEngineOptions } from './native/engine.js';
 export { PgWireClient, PgWireError } from './native/wire.js';
-export { loadFunctions } from './load-functions.js';
+export { loadFunctions, loadFunctionEnv } from './load-functions.js';
+export { bundleFunction, rewriteRemoteSpecifier } from './bundle-function.js';
+export { loadOAuthProviders } from './load-oauth.js';
+export { computeDbDiff, pullSchema, shadowNativeDataDir, type DbDiffOptions, type DbPullOptions, type DbPullResult } from './db-diff.js';

package/dist/node/index.js

@@ -5,5 +5,8 @@ export { loadSupabaseProject } from './project.js';
 export { acceptWebSocket } from './ws.js';
 export { createNativeEngine, ensurePostgres } from './native/engine.js';
 export { PgWireClient, PgWireError } from './native/wire.js';
-export { loadFunctions } from './load-functions.js';
+export { loadFunctions, loadFunctionEnv } from './load-functions.js';
+export { bundleFunction, rewriteRemoteSpecifier } from './bundle-function.js';
+export { loadOAuthProviders } from './load-oauth.js';
+export { computeDbDiff, pullSchema, shadowNativeDataDir } from './db-diff.js';
 //# sourceMappingURL=index.js.map

package/dist/node/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,KAAK,EAAyC,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,cAAc,CAAA;AACxE,OAAO,EAAE,eAAe,EAAqB,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAA4B,MAAM,oBAAoB,CAAA;AACjG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,KAAK,EAAyC,MAAM,aAAa,CAAA;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,mBAAmB,EAAwB,MAAM,cAAc,CAAA;AACxE,OAAO,EAAE,eAAe,EAAqB,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAA4B,MAAM,oBAAoB,CAAA;AACjG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAA;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAA6D,MAAM,cAAc,CAAA"}

package/dist/node/load-functions.d.ts

@@ -1,2 +1,8 @@
 import type { EdgeFunction } from '../functions/handler.js';
+/**
+ * Load edge-function secrets from supabase/functions/.env (KEY=VALUE lines,
+ * `#` comments). These are exposed to functions via Deno.env and ctx.env —
+ * the local equivalent of `supabase functions serve --env-file`.
+ */
+export declare function loadFunctionEnv(projectDir: string): Promise<Record<string, string>>;
 export declare function loadFunctions(projectDir: string): Promise<Map<string, EdgeFunction>>;

package/dist/node/load-functions.js

@@ -1,7 +1,40 @@
 /** Loads edge functions from supabase/functions/<name>/index.{ts,js,mjs} (Node only). */
-import { readdir, stat } from 'node:fs/promises';
+import { readdir, readFile, stat } from 'node:fs/promises';
 import { join } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { installDenoShim, resetCapturedHandler, takeCapturedHandler } from '../functions/deno-shim.js';
+import { bundleFunction } from './bundle-function.js';
+/**
+ * Load edge-function secrets from supabase/functions/.env (KEY=VALUE lines,
+ * `#` comments). These are exposed to functions via Deno.env and ctx.env —
+ * the local equivalent of `supabase functions serve --env-file`.
+ */
+export async function loadFunctionEnv(projectDir) {
+    let text;
+    try {
+        text = await readFile(join(projectDir, 'supabase', 'functions', '.env'), 'utf8');
+    }
+    catch {
+        return {};
+    }
+    const env = {};
+    for (const raw of text.split('\n')) {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const eq = line.indexOf('=');
+        if (eq === -1)
+            continue;
+        const key = line.slice(0, eq).trim();
+        let val = line.slice(eq + 1).trim();
+        if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {
+            val = val.slice(1, -1);
+        }
+        if (key)
+            env[key] = val;
+    }
+    return env;
+}
 export async function loadFunctions(projectDir) {
     const functions = new Map();
     const root = join(projectDir, 'supabase', 'functions');
@@ -12,13 +45,15 @@ export async function loadFunctions(projectDir) {
     catch {
         return functions;
     }
+    // so Supabase-style `Deno.serve(handler)` functions run unchanged
+    installDenoShim();
     for (const name of entries) {
         if (name.startsWith('_') || name.startsWith('.'))
             continue;
         const dir = join(root, name);
         if (!(await stat(dir)).isDirectory())
             continue;
-        for (const file of ['index.ts', 'index.js', 'index.mjs']) {
+        for (const file of ['index.ts', 'index.tsx', 'index.js', 'index.mjs']) {
             const path = join(dir, file);
             try {
                 await stat(path);
@@ -27,18 +62,35 @@ export async function loadFunctions(projectDir) {
                 continue;
             }
             try {
-                const mod = (await import(pathToFileURL(path).href));
-                if (typeof mod.default === 'function') {
-                    functions.set(name, mod.default);
+                // Bundle with esbuild so TS, relative imports, and npm:/jsr:/URL
+                // specifiers resolve. If esbuild isn't installed, import the file
+                // directly (Web-API / Deno.serve functions still work).
+                let importUrl;
+                try {
+                    importUrl = pathToFileURL(await bundleFunction(path, name)).href;
+                }
+                catch (e) {
+                    if (e.message !== 'esbuild-not-available')
+                        throw e;
+                    importUrl = pathToFileURL(path).href;
+                }
+                resetCapturedHandler();
+                const mod = (await import(importUrl));
+                // prefer an explicit default export; otherwise use the handler a
+                // Deno.serve() call captured during import
+                const denoHandler = takeCapturedHandler();
+                const handler = typeof mod.default === 'function' ? mod.default : denoHandler ? (req) => denoHandler(req) : undefined;
+                if (handler) {
+                    functions.set(name, handler);
                 }
                 else {
-                    console.warn(`  warning: function "${name}" has no default export, skipped`);
+                    console.warn(`  warning: function "${name}" has no default export or Deno.serve() handler, skipped`);
                 }
             }
             catch (e) {
                 const msg = e instanceof Error ? e.message : String(e);
-                if (file === 'index.ts' && /Unknown file extension|Cannot find module/.test(msg)) {
-                    console.warn(`  warning: function "${name}" is TypeScript — run tinbase with tsx or bun, or compile it to .js`);
+                if (/Unknown file extension|Cannot find module/.test(msg)) {
+                    console.warn(`  warning: function "${name}" needs bundling — install esbuild, or run tinbase with tsx/bun`);
                 }
                 else {
                     console.warn(`  warning: failed to load function "${name}": ${msg}`);

package/dist/node/load-functions.js.map

@@ -1 +1 @@
-{"version":3,"file":"load-functions.js","sourceRoot":"","sources":["../../src/node/load-functions.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAGxC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAA;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IAEtD,IAAI,OAAO,GAAa,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAA+B,CAAA;gBAClF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;oBACtC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;gBAClC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,kCAAkC,CAAC,CAAA;gBAC9E,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtD,IAAI,IAAI,KAAK,UAAU,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjF,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,qEAAqE,CAAC,CAAA;gBACjH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;YACD,MAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}
+{"version":3,"file":"load-functions.js","sourceRoot":"","sources":["../../src/node/load-functions.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AACtG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAErD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB;IACtD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;QACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC5B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAQ;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACpC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QACD,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACzB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwB,CAAA;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IAEtD,IAAI,OAAO,GAAa,EAAE,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,kEAAkE;IAClE,eAAe,EAAE,CAAA;IAEjB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAC9C,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC;gBACH,iEAAiE;gBACjE,kEAAkE;gBAClE,wDAAwD;gBACxD,IAAI,SAAiB,CAAA;gBACrB,IAAI,CAAC;oBACH,SAAS,GAAG,aAAa,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;gBAClE,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,IAAK,CAAW,CAAC,OAAO,KAAK,uBAAuB;wBAAE,MAAM,CAAC,CAAA;oBAC7D,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAA;gBACtC,CAAC;gBACD,oBAAoB,EAAE,CAAA;gBACtB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAA+B,CAAA;gBACnE,iEAAiE;gBACjE,2CAA2C;gBAC3C,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAA;gBACzC,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC9H,IAAI,OAAO,EAAE,CAAC;oBACZ,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,OAAuB,CAAC,CAAA;gBAC9C,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,0DAA0D,CAAC,CAAA;gBACtG,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACtD,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,OAAO,CAAC,IAAI,CAAC,wBAAwB,IAAI,iEAAiE,CAAC,CAAA;gBAC7G,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,uCAAuC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAA;gBACtE,CAAC;YACH,CAAC;YACD,MAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/node/load-oauth.d.ts

@@ -0,0 +1,4 @@
+import type { OAuthProviderConfig } from '../auth/oauth.js';
+type Providers = Record<string, OAuthProviderConfig>;
+export declare function loadOAuthProviders(projectDir: string, env?: NodeJS.ProcessEnv): Providers;
+export {};

package/dist/node/load-oauth.js

@@ -0,0 +1,126 @@
+/**
+ * Resolve OAuth providers the way an existing Supabase project already declares
+ * them, so no new config is needed:
+ *
+ *   1. supabase/config.toml  [auth.external.<provider>]  (enabled/client_id/secret/url/redirect_uri),
+ *      resolving `env(VAR)` references — this is a real Supabase project's source of truth.
+ *   2. GOTRUE_EXTERNAL_<PROVIDER>_CLIENT_ID / _SECRET / _ENABLED  (what GoTrue runs on).
+ *   3. TINBASE_OAUTH_<PROVIDER>_CLIENT_ID / _SECRET  (alias, lowest precedence).
+ */
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+export function loadOAuthProviders(projectDir, env = process.env) {
+    const providers = {};
+    fromConfigToml(projectDir, env, providers);
+    fromGotrueEnv(env, providers);
+    fromTinbaseEnv(env, providers);
+    return providers;
+}
+/** Resolve a config.toml value: strip quotes, expand `env(VAR)`. */
+function resolveValue(raw, env) {
+    let v = raw.trim().replace(/^["']|["']$/g, '');
+    const m = v.match(/^env\(\s*"?([A-Za-z0-9_]+)"?\s*\)$/);
+    if (m)
+        return env[m[1]];
+    return v;
+}
+function fromConfigToml(projectDir, env, out) {
+    let text;
+    try {
+        text = readFileSync(join(projectDir, 'supabase', 'config.toml'), 'utf8');
+    }
+    catch {
+        return;
+    }
+    // minimal TOML section scan: [auth.external.<provider>] key = value
+    const lines = text.split('\n');
+    let provider = null;
+    let acc = {};
+    const flush = () => {
+        if (!provider)
+            return;
+        const enabled = acc.enabled === undefined ? true : acc.enabled === 'true';
+        const clientId = acc.client_id;
+        const secret = acc.secret;
+        if (enabled && clientId && secret) {
+            // google/github get endpoints from presets; `url` (custom OIDC) or explicit
+            // *_url keys override. Only pass overrides we actually have.
+            out[provider] = {
+                clientId,
+                clientSecret: secret,
+                authorizeUrl: acc.authorize_url ?? (acc.url ? `${acc.url}/authorize` : undefined),
+                tokenUrl: acc.token_url ?? (acc.url ? `${acc.url}/token` : undefined),
+                userInfoUrl: acc.userinfo_url ?? (acc.url ? `${acc.url}/userinfo` : undefined),
+                scopes: acc.scopes,
+            };
+        }
+        provider = null;
+        acc = {};
+    };
+    for (const line of lines) {
+        const trimmed = line.trim();
+        const section = trimmed.match(/^\[auth\.external\.([a-z0-9_]+)\]$/i);
+        if (section) {
+            flush();
+            provider = section[1].toLowerCase();
+            continue;
+        }
+        if (trimmed.startsWith('[')) {
+            flush();
+            continue;
+        }
+        if (!provider)
+            continue;
+        const kv = trimmed.match(/^([a-z_]+)\s*=\s*(.+)$/i);
+        if (kv) {
+            const val = resolveValue(kv[2], env);
+            if (val !== undefined)
+                acc[kv[1]] = val;
+        }
+    }
+    flush();
+}
+function fromGotrueEnv(env, out) {
+    collectEnv(env, out, 'GOTRUE_EXTERNAL_', {
+        id: 'CLIENT_ID',
+        secret: 'SECRET',
+        enabled: 'ENABLED',
+    });
+}
+function fromTinbaseEnv(env, out) {
+    collectEnv(env, out, 'TINBASE_OAUTH_', {
+        id: 'CLIENT_ID',
+        secret: 'CLIENT_SECRET',
+        enabled: 'ENABLED',
+    });
+}
+function collectEnv(env, out, prefix, keys) {
+    const names = new Set();
+    for (const key of Object.keys(env)) {
+        if (key.startsWith(prefix) && key.endsWith(`_${keys.id}`)) {
+            names.add(key.slice(prefix.length, -`_${keys.id}`.length));
+        }
+    }
+    for (const upper of names) {
+        const name = upper.toLowerCase();
+        if (out[name])
+            continue; // higher-precedence source already set it
+        const g = (s) => env[`${prefix}${upper}_${s}`];
+        const clientId = g(keys.id);
+        const clientSecret = g(keys.secret);
+        const enabled = g(keys.enabled);
+        if (!clientId || !clientSecret)
+            continue;
+        if (enabled !== undefined && enabled !== 'true')
+            continue;
+        out[name] = {
+            clientId,
+            clientSecret,
+            authorizeUrl: g('AUTHORIZE_URL'),
+            tokenUrl: g('TOKEN_URL'),
+            userInfoUrl: g('USERINFO_URL'),
+            scopes: g('SCOPES'),
+        };
+    }
+}
+//# sourceMappingURL=load-oauth.js.map

package/dist/node/load-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load-oauth.js","sourceRoot":"","sources":["../../src/node/load-oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAKhC,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG;IACtE,MAAM,SAAS,GAAc,EAAE,CAAA;IAC/B,cAAc,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;IAC1C,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC7B,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC9B,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,oEAAoE;AACpE,SAAS,YAAY,CAAC,GAAW,EAAE,GAAsB;IACvD,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvB,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,GAAsB,EAAE,GAAc;IAChF,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAA;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;IACD,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,QAAQ,GAAkB,IAAI,CAAA;IAClC,IAAI,GAAG,GAA2B,EAAE,CAAA;IACpC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,QAAQ;YAAE,OAAM;QACrB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAA;QACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAA;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QACzB,IAAI,OAAO,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAClC,4EAA4E;YAC5E,6DAA6D;YAC7D,GAAG,CAAC,QAAQ,CAAC,GAAG;gBACd,QAAQ;gBACR,YAAY,EAAE,MAAM;gBACpB,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjF,QAAQ,EAAE,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrE,WAAW,EAAE,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9E,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAA;QACH,CAAC;QACD,QAAQ,GAAG,IAAI,CAAA;QACf,GAAG,GAAG,EAAE,CAAA;IACV,CAAC,CAAA;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACpE,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,EAAE,CAAA;YACP,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;YACnC,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,EAAE,CAAA;YACP,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,SAAQ;QACvB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;QACnD,IAAI,EAAE,EAAE,CAAC;YACP,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACpC,IAAI,GAAG,KAAK,SAAS;gBAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAA;QACzC,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAA;AACT,CAAC;AAED,SAAS,aAAa,CAAC,GAAsB,EAAE,GAAc;IAC3D,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,EAAE;QACvC,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,SAAS;KACnB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB,EAAE,GAAc;IAC5D,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE;QACrC,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,SAAS;KACnB,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,GAAsB,EACtB,GAAc,EACd,MAAc,EACd,IAAqD;IAErD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;QAChC,IAAI,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ,CAAC,0CAA0C;QAClE,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAA;QACtD,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3B,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACnC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC/B,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,SAAQ;QACxC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,MAAM;YAAE,SAAQ;QACzD,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,QAAQ;YACR,YAAY;YACZ,YAAY,EAAE,CAAC,CAAC,eAAe,CAAC;YAChC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;YACxB,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC;YAC9B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;SACpB,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/node/native/engine.d.ts

@@ -8,6 +8,6 @@ export interface NativeEngineOptions {
     cacheDir?: string;
     log?: (msg: string) => void;
 }
-/** Download + unpack Postgres binaries if not already cached. Returns the install dir. */
+/** Download + unpack Postgres binaries if not already cached (concurrency-safe). Returns the install dir. */
 export declare function ensurePostgres(version?: string, cacheDir?: string, log?: (m: string) => void): Promise<string>;
 export declare function createNativeEngine(opts: NativeEngineOptions): Promise<DbEngine>;