
Product
Introducing Socket Scanning for VS Code Marketplace Extensions
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@staticbot/base44-supabase-shim
Advanced tools
Drop-in shim mimicking @base44/sdk API but routing to a Supabase backend. Vendored into migrated apps by Staticbot's Base44 native migration so the customer's build doesn't need a live npm connection.
Drop-in shim that exposes the same surface as @base44/sdk but routes
every call to a Supabase backend (Postgres + GoTrue + Storage + Edge
Functions). Built so you swap one import in src/api/base44Client.js and
your hundreds of pages keep working.
This is the runtime shim Staticbot's Base44 → Supabase migration vendors into your repo as the final step of the migration. You can also use it standalone if you're doing the migration by hand.
Staticbot's Base44 native migration vendors the prebuilt dist/ directly into
your repo at vendor/base44-supabase-shim/ and patches package.json to point
at it. You don't need to do anything manually — just merge the PR that lands
on the staticbot/base44-switchover-<id> branch.
In each consuming app, vendor the prebuilt tarball or add as a git submodule (so builds don't depend on an npm registry):
# Option A: git submodule (you'll need to build it once locally)
git submodule add https://github.com/staticbot/staticbot-base44-supabase-shim.git vendor/base44-supabase-shim
cd vendor/base44-supabase-shim && npm i && npm run build
# Option B: vendor the prebuilt tarball straight from the npm registry
# (same URL shape staticbot-app's Base44ShimProperties.getDistTarballUrl builds)
curl -L https://registry.npmjs.org/@staticbot/base44-supabase-shim/-/base44-supabase-shim-0.6.1.tgz \
| tar -xz -C vendor/base44-supabase-shim --strip-components=1
In package.json:
{
"dependencies": {
"@staticbot/base44-supabase-shim": "file:./vendor/base44-supabase-shim",
"@supabase/supabase-js": "^2.45.0"
}
}
// src/api/base44Client.js — replace @base44/sdk import
import { createClient } from '@staticbot/base44-supabase-shim';
export const base44 = createClient({
supabaseUrl: import.meta.env.VITE_SUPABASE_URL,
supabaseAnonKey: import.meta.env.VITE_SUPABASE_ANON_KEY,
schemaPrefix: 'propertyflow', // app-specific schema
sharedSchema: 'core', // shared entities live here
// sharedEntities default: ['Customer','Company','User','Role','Department','Notification','AuditLog']
});
// Then everything in your existing pages keeps working:
const customers = await base44.entities.Customer.list('-created_date', 50);
const c = await base44.entities.Customer.get('uuid');
await base44.entities.Customer.update('uuid', { phone: '081...' });
await base44.entities.Unit.create({ unit_no: 'A-101' });
import { createClientFromRequest } from 'npm:@staticbot/base44-supabase-shim/server';
Deno.serve(async (req) => {
const base44 = createClientFromRequest(req, {
supabaseUrl: Deno.env.get('SUPABASE_URL')!,
supabaseAnonKey: Deno.env.get('SUPABASE_ANON_KEY')!,
supabaseServiceRoleKey: Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!,
schemaPrefix: 'propertyflow',
});
const customers = await base44.asServiceRole.entities.Customer.filter(
{},
'-created_date',
50,
);
return new Response(JSON.stringify({ data: customers }));
});
Default rule: PascalCase → snake_case + plural.
Customer → customersChartOfAccount → chart_of_accountsMeetingMinute → meeting_minutesOverride via entityMap if a real table doesn't follow the rule:
createClient({
...,
entityMap: {
Customer: { schema: 'core', table: 'customers' }, // explicit
Job: { schema: 'construction', table: 'project_jobs' }, // non-default name
},
});
// Equality (default)
await base44.entities.Customer.filter({ status: 'active', vip: true });
// IN (pass array)
await base44.entities.Customer.filter({ id: ['a', 'b', 'c'] });
// Operators
await base44.entities.Invoice.filter({
amount: { op: 'gt', value: 1000 },
customer_name: { op: 'ilike', value: '%co.%' },
});
Operators: eq, neq, gt, gte, lt, lte, like, ilike, in.
'name' ascending, '-created_date' descending.{ field: 'name', ascending: false }.Base44 alias names are supported alongside Supabase-idiomatic ones so migrated apps compile unchanged:
auth.signIn({email, password}) / auth.loginViaEmailPassword(email, password)auth.signUp({email, password, metadata?}) / auth.register({email, password, metadata?})auth.loginWithProvider(provider, returnPath?) — Google / Microsoft / Facebook / Apple; builds an absolute redirectTo from window.location.origin.auth.verifyOtp({email, otpCode}) — email OTP after register(). Returns {access_token, session, user}; the Supabase session is installed as a side-effect so a follow-up setToken() is a no-op.auth.resendOtp(email)auth.setToken(accessToken) — kept as a warn-once no-op so migrated code doesn't TypeError; the session is already installed by verifyOtp / signInWithPassword.auth.resetPasswordRequest(email, {redirectTo?}) — Supabase resetPasswordForEmail.auth.resetPassword({resetToken, newPassword}) — resetToken is ignored (Supabase already exchanged the link fragment for a session before you got here).auth.isAuthenticated(): Promise<boolean>auth.logout(returnUrl?) — after signOut resolves, navigates to returnUrl if provided.auth.me() / auth.updateMe(metadata) / auth.getUser() / auth.getSession() / auth.redirectToLogin(returnUrl?) / auth.onAuthStateChange(cb)Base44's hosted agents (WhatsApp / Telegram) have no self-host equivalent. The
agents namespace exposes a stub so base44.agents.getWhatsAppConnectURL(name)
doesn't crash — it returns null by default, which lets <a href={...}> render
as an inert link (feature visibly disabled). Wire your own bridge with:
createClient({
...,
agents: {
whatsappUrls: { SubdomainReviewer: 'https://wa.example.com/connect' },
},
});
integrations.sendEmailFunction.InvokeLLM / GenerateImage — opt-in only. Wire your own endpoint
through an edge function and pass its name via integrations.invokeLlmFunction
/ integrations.generateImageFunction.npm i
npm test # vitest, mocked SupabaseClient
npm run build # tsup → dist/
FAQs
Drop-in shim mimicking @base44/sdk API but routing to a Supabase backend. Vendored into migrated apps by Staticbot's Base44 native migration so the customer's build doesn't need a live npm connection.
The npm package @staticbot/base44-supabase-shim receives a total of 609 weekly downloads. As such, @staticbot/base44-supabase-shim popularity was classified as not popular.
We found that @staticbot/base44-supabase-shim demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket now scans VS Code extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Research
/Security News
Socket uncovered two malicious VS Code themes in a GlassWorm-linked cluster with thousands of installs across VS Code Marketplace and Open VSX.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.