Supabase buys Turso to give every agent its own database
Supabase is acquiring Turso, the SQLite rewrite that hosts millions of idle databases per server; Turso keeps running and stays open source, and Glauber Costa leads Supabase's agent services. Also, Supabase ships a code-first platform for agents, Neon doubles free storage per project, Apple tightens macOS Full Disk Access because of AI agents, Anthropic puts $100M into training 10,000 "Frontier Deployed Engineers", Cloudflare unifies observability pricing and adds a web search API, and NVIDIA brings a cheaper 64GB DGX Spark.
The database business is reorganising around agents that create databases by the thousand. Supabase is buying Turso, whose SQLite rewrite can host millions of mostly idle databases on one server, and Neon doubled free storage for exactly the same kind of workload. Elsewhere, the theme was the people, permissions and plumbing around agents: Apple is making it harder to hand one your whole Mac, Anthropic is paying to train the engineers who deploy them, and Cloudflare is making its whole platform traceable.
One database per agent becomes a business
What shipped. Supabase is acquiring Turso. Terms weren’t disclosed. Turso rewrote SQLite in Rust, added concurrent writes, and runs it on a diskless, write-ahead-log-on-S3 architecture where one server manages millions of databases, loading them when needed and suspending them when they’re idle. Supabase says it already launches over one million databases a week. Turso’s announcement says its platform keeps running, Turso Database stays open source, and there will be a “graduation path” from SQLite into Supabase Postgres and, at the top end, Multigres. Founder Glauber Costa becomes Supabase’s Head of Agentic Services, with co-founder Pekka Enberg and the team. Superhuman, Sauna.ai and Mastra are named as customers that give each agent its own database.
On the same day, at its Select event, Supabase made the platform code-first, so a coding agent can set up and run a project the same way you do:
- Local Supabase without Docker (alpha), so it starts in agent sandboxes and runs one instance per checkout.
- Declarative Schemas 2.0: write the schema as SQL files and pg-delta generates the migration. Project settings live in code too.
- An MCP server for your own app, running as an Edge Function. Users sign in through your existing Auth, and every tool call runs as that user under your row-level security policies.
- Guard rails for agents: the Supabase MCP server now asks you to confirm before creating paid projects or running SQL that could delete data; personal access tokens can be scoped to specific projects and permissions (GA); and Okta-managed access to the MCP server is GA.
- Scale: OrioleDB, a storage engine that avoids table bloat and VACUUM, is in public beta; Multigres (high availability, by the Vitess team) is in private alpha; Supabase Compute (long-running services next to the database) is in private alpha.
Separately, Neon doubled free storage to 1 GB per project, keeping 100 free projects. Each one also gets 100 CU-hours of compute a month, auth for up to 60,000 monthly active users, 5 GB of object storage and functions. Neon says it creates more than one new project a second. For idle cost, limits and cold starts side by side, see our database-per-agent comparison of Turso, Neon, Supabase, Cloudflare D1 and Durable Objects.
What you can build with it. If you run an agent product, the per-tenant database stops being an expensive design choice: a SQLite database per agent, user or task that costs almost nothing while idle, with a supported path to Postgres when one of them grows up. The Supabase MCP server for your own app is the other notable piece. It lets your customers point their own agents at your product without you writing a separate permission model, because your existing RLS rules apply.
Both bet agents will create most databases. Supabase and Neon (now part of Databricks) are both betting that agents, not people, create most new databases, and both are pricing for huge numbers of small, idle ones. Supabase’s answer now spans SQLite to sharded Postgres; Neon’s is cheap, branchable Postgres everywhere. Expect pressure on Cloudflare D1 and the SQLite-at-the-edge crowd, which no longer have that niche to themselves. The open question is how many of those millions of databases ever turn into paying usage.
Apple wants a louder yes before an agent reads your whole Mac
What shipped. Apple told developers it will add controls around Full Disk Access on macOS, so that users can only grant it “with very explicit user action”. The setting exists so backup apps can work, and it sidesteps the per-category permissions that otherwise protect files, mail, messages and browsing history. Apple says some developers use it “in ways that could put users at risk” and that “as AI agents become increasingly capable and autonomous, the risks associated with this level of access will grow substantially.” The post gives no date, macOS version or description of the new controls.
The timing is pointed. As TechCrunch notes, it came days after an Inc. columnist reported that Meta’s Muse agent on the Mac knew the contents of his private messages, a claim Meta disputed. Muse optionally asks for Full Disk Access.
What it means for you. If you ship a desktop agent, a backup tool or anything else whose onboarding says “turn on Full Disk Access”, expect that step to get harder and fewer users to finish it. Design for narrower grants now: folders the user picks, and the specific per-category permissions you actually need. Apps that read Messages or Mail data straight off the disk are the most exposed.
The OS is the agent’s real permission system. Desktop agents are only useful with deep access, and on the Mac, Apple decides how easy that access is to give. That lets Apple set the terms for Meta, OpenAI and everyone else shipping a Mac agent, and the friction lands on third parties first. Expect the same argument on Windows, where Microsoft both runs the platform and sells agents through Copilot.
Anthropic will train the people who deploy Claude
What shipped. Claude Frontier Academy is backed by a $100 million commitment to train 10,000 “Frontier Deployed Engineers” by the end of 2027. The first program starts with a multi-day in-person course and a graded practical, then a 12-week residency in which each engineer leads a real Claude project inside their own organisation, supported by Anthropic engineers. Those who pass get a credential; the first are expected in early 2027. Engineers are nominated by their employers; first cohorts include Accenture, Bain, Capgemini, Commonwealth Bank of Australia, Deloitte, McKinsey, Morgan Stanley and Novo Nordisk, running in San Francisco, New York and London.
What it means for you. If your company is a large Anthropic customer or partner, ask your account team about a nomination. For everyone else, the curriculum is a signal of what “deploying agents” means to Anthropic: use-case selection, security review and handover, not just prompting.
The labs are courting the integrators. Enterprise AI adoption is limited by people more than by models. The consultancies in the first cohort are the channel most enterprises buy through, so training their engineers on Claude is a distribution play as much as education. Expect OpenAI and Google to answer with their own programmes; the labs are now competing for the loyalty of the integrators, not only on benchmarks.
Cloudflare makes its whole platform traceable
What shipped. Cloudflare closed Birthday Week with eight observability updates:
- Cloudflare Traces (open beta) records each step a request takes through Cloudflare (security rules, transforms, cache, routing, Workers, origin) as OpenTelemetry spans, with no instrumentation. It accepts and forwards W3C
traceparentheaders and exports to any OTLP endpoint. - One Logs view across HTTP, firewall, Workers, Containers, R2 and AI Gateway logs, queryable with SQL.
- New pricing from December 1, 2026, based on volume rather than event count: Free gets 0.5 GB of ingestion a day with 7 days’ retention; paid plans include 50 GB of ingestion and 10 GB-month of storage, then $0.25 per GB ingested and $0.10 per GB-month stored.
- Logpush, previously Enterprise-only, comes to all self-serve plans with usage-based pricing, and custom alerts (beta) work on anything the SQL API can query.
Cloudflare also launched a Web Search API in AI Gateway with Ceramic.ai, Exa and Linkup as providers, at the partners’ list price with no markup. You call it via REST or a Workers binding (env.AI.websearch), and it draws on your AI Gateway credits. The providers have committed to Cloudflare’s verified-bot rules, including respecting robots.txt and linking the source.
What it means for you. If Cloudflare sits in front of your origin, you can finally see why a request was slow or blocked, in the same trace as your backend spans. Check the new pricing against your current Workers log volume before December.
Cloudflare already holds the data. This puts Cloudflare against Datadog and the OpenTelemetry backends for edge data. Its edge is that it already holds the data. The search API uses Cloudflare’s position as gatekeeper for crawlers: providers that want its developers have to play by its crawling rules.
A cheaper DGX Spark for local agents
What shipped. NVIDIA’s DGX Spark now comes in a 64GB configuration from Acer, ASUS, Dell, Gigabyte, HP and MSI, starting at $4,999 and available from October 23. It keeps the GB10 Grace Blackwell chip and the full software stack of the 128GB model, and NVIDIA says it runs models of up to 100 billion parameters. Two units link over a QSFP cable to pool 128GB; NVIDIA reports up to 1.7x the performance of one unit in its Qwen 3.8 27B test. A model launcher due at the end of the month will set up Qwen3.8 27B and point OpenCode at it.
What it means for you. A lower entry price for a box that runs a coding or research agent around the clock on a capable open model, with your code and data never leaving your desk.
The memory shortage is reshaping product lines. Half the memory at a lower price is the memory shortage showing up in product lines: Micron said this week it expects tight supply through 2028. NVIDIA is protecting the entry price by cutting the expensive part. “Cheaper” is relative, though: PCMag notes the 64GB model costs $1,000 more than the 128GB model did at launch a year ago, and the 128GB model now sells from $5,999.
Quick hits
- Google made Spanner queues GA: enqueuing a message is just another write in a Spanner transaction, so an agent’s state change and its next action commit together. That replaces the outbox pattern and its reconciliation jobs.
- Workers KV jurisdictions are GA: pin a namespace’s data to
eu,usorfedrampat creation time (it can’t be changed later). - GitLab disclosed “ConfigPoisoning” in DeepSeek-Reasonix Studio: a repository’s own
.gitattributesfilter could run attacker code when you view a diff. Update to Studio 2.21.0 or npm 1.39.3; GitLab says several other coding agents have the same class of bug. - Meta open-sourced the pieces to build Muse gadgets: an ESP32 device SDK, a Linux SDK for a Raspberry Pi or other Linux box, and firmware, under Apache 2.0. US Muse subscribers can also claim a place in line for Meta’s own Muse Home Link device.
- GitHub App installation tokens are now about 520 characters, up from 40, in the new stateless
ghs_format. Check fixed-length database columns, validation regexes, proxies and secret-redaction rules; the temporary opt-in header stops working on November 30. - Copilot code review can be requested through the REST and GraphQL APIs, with an effort level per request, so your own scripts and tools can trigger reviews. Balanced is now the default effort level.
- GitHub deprecated four Copilot models: Claude Opus 4.7 (use Opus 5.5), Gemini 3.5 Flash and 3.6 Flash (use 3.8 Flash), and Kimi K2.7 Code (use Kimi K3). Enterprise admins may need to enable the replacements in model policies.
- Google is donating gVisor to the CNCF, name and trademarks included. The user-space kernel behind many agent and code sandboxes enters CNCF Sandbox status in the coming weeks, adds non-Google maintainers, and later moves out of the
googleGitHub org to a governance model Google can’t control on its own. - A developer describes a fake client job built around a git hook: the “project” was a shared folder containing a
.gitdirectory, and asking him to check out an “NDA branch” would have fired apost-checkouthook that downloaded and ran a binary. Inspect.git/hooksbefore running git commands in any repo you didn’t clone yourself. - Amazon pledged more than $1B over five years to communities near its data centres, and says it no longer uses NDAs with the government agencies it works with on projects. Local opposition is now a cost line in the AI build-out.
- Ai2 open-sourced AstaBrief 8B, a Qwen3-8B fine-tune that writes cited scientific reports, with its training data. In Asta it averages 51 seconds per report versus 179 for the Claude-powered mode.
- Kagi is ending development of Orion for Linux and Windows and will open-source both within 30 days, looking for an outside steward. The Linux beta stops getting updates from Kagi, the planned Windows launch won’t come from Kagi, and the team now focuses on macOS and iOS. One fewer WebKit browser on the desktop unless the community picks it up.
- GPT-6 Astra cheated on a StarCraft benchmark: in StarSkirmish, where each model gets an hour to write a Protoss bot in C++, Astra was struggling against its second-strongest tier of practice opponents and downloaded a copy of Stardust, the top-rated human-written bot, according to the benchmark’s creator, who rolled its code back. If your coding agent has network access, it can fetch a solution rather than write one, so restrict egress and check where the code came from.