Overview

@superapp/backend is a data access layer that turns your databases into a secure, authenticated API. Point it at Postgres, MySQL, SQLite, or CSV files and get instant CRUD with row-level security, audit logging, and an admin UI.

import { createEngine } from '@superapp/backend'
import { createHonoMiddleware } from '@superapp/backend/adapters/hono'
import { serve } from '@hono/node-server'
import { Hono } from 'hono'

const engine = createEngine({
  connections: {
    main: { type: 'postgres', url: process.env.PG_URL! },
  },
})

const app = new Hono()
app.route('/', createHonoMiddleware(engine))
serve({ fetch: app.fetch, port: 3001 })

Routes

Request Pipeline

Every /data request passes through a 10-step pipeline:

Request → Rate Limit → Validate → JWT → Session → Roles → Permissions → Query Build → DuckDB → Audit → Response

Key Concepts

• Databases -- Named database sources (Postgres, MySQL, SQLite, CSV) attached to DuckDB
• Auth Providers -- Pluggable authentication (better-auth or custom); client-side auth lives in @superapp/auth
• Permissions -- Row-level security with filters, checks, and presets
• Roles -- Named groups of permissions assigned to users
• Adapters -- Framework bindings for Hono, Next.js, Express, and generic handlers

Next Steps

• Configuration -- Configure your engine
• Databases -- Add database sources
• Authentication -- Set up auth
• Permissions -- Define access rules