Two containers,not fifteen.

import { createClient } from '@baselyra/client';

const bl = createClient('https://api.example.com', ANON_KEY);

// A session that renews itself; the refresh token rotates on every use.
await bl.auth.signInWithPassword({ email, password });

// Errors arrive next to the data. No call here ever rejects for an HTTP status.
const { data, error } = await bl
  .from('posts')
  .select('id, title, author:profiles(name)')
  .eq('published', true)
  .order('created_at', { ascending: false })
  .limit(20);

// The row is re-read as your role before it is delivered, so this feed
// can only ever carry rows your policies already let you SELECT.
const channel = bl.channel('public:posts');
channel.on('postgres_changes',
  { event: 'INSERT', schema: 'public', table: 'posts' },
  ({ new: row }) => render(row));
await channel.subscribe();

await bl.storage.from('avatars').upload('me.png', file);

Runs unchanged in browsers, Node 22, Deno, Bun and React Native. fetch and WebSocket are the only platform features it needs. Client reference

final baselyra = BaselyraClient(
  url: 'https://api.example.com',
  anonKey: const String.fromEnvironment('BASELYRA_ANON_KEY'),
  tokenStore: PrefsTokenStore(),
);

await baselyra.auth.restore();
await baselyra.auth.signInWithPassword(email: email, password: password);

// Failures throw BaselyraException — Dart's error channel is exceptions,
// so a widget's call site does not have to carry a branch it never wanted.
final posts = await baselyra
    .from('posts')
    .select('id,title,author:profiles(name)')
    .eq('published', true)
    .order('created_at', ascending: false)
    .limit(20)
    .get();

final channel = baselyra.channel('public:posts');
channel.changes.listen((change) => render(change.newRow));
await channel.subscribe();

await baselyra.storage.from('avatars').upload('me.png', bytes);

There is no published Dart package. This is one file — examples/flutter/lib/baselyra.dart — needing only http and web_socket_channel. Flutter guide

require __DIR__ . '/baselyra.php';
use Baselyra\Client;

// The anon key alone: every query runs as the `anon` Postgres role.
$baselyra = new Client('https://api.example.com', $_ENV['BASELYRA_ANON_KEY']);

// Act as the signed-in user. RLS applies exactly as it would in a browser.
$session = $baselyra->signIn($email, $password);
$ada     = $baselyra->withToken($session['access_token']);

$posts = $ada->from('posts')
    ->select('id,title,author:profiles(name)')
    ->eq('published', true)
    ->order('created_at', ascending: false)
    ->limit(20)
    ->get();

$baselyra->upload('avatars', 'me.png', $bytes, 'image/png');

PHP 8.1+, ext-curl and ext-json, nothing else. The client is immutable, so a request handler cannot leave a shared instance authenticated as the last visitor. examples/php/baselyra.php

# The anon key is public and belongs in your frontend. It names a Postgres
# role; the policies decide what that role may read and write.
curl 'https://api.example.com/rest/v1/posts?select=id,title,author:profiles(name)&published=eq.true&order=created_at.desc&limit=20' \
  -H "apikey: $ANON_KEY" \
  -H "authorization: Bearer $ACCESS_TOKEN"

# Sign in
curl -X POST 'https://api.example.com/auth/v1/token?grant_type=password' \
  -H "apikey: $ANON_KEY" -H 'content-type: application/json' \
  -d '{"email":"ada@example.com","password":"…"}'

# Upsert, and ask for the rows back rather than a 204
curl -X POST 'https://api.example.com/rest/v1/posts' \
  -H "apikey: $ANON_KEY" -H "authorization: Bearer $ACCESS_TOKEN" \
  -H 'content-type: application/json' \
  -H 'Prefer: resolution=merge-duplicates,return=representation' \
  -d '{"id":1,"title":"Hello"}'

Errors are always { "error": { "code", "message", "details" } }, with the HTTP status matching. REST reference