Authentication included
Application users, rotating refresh sessions, short-lived access tokens, service accounts and personal tokens have distinct authority boundaries.
Open source · self-hosted · release candidate
Your backend platform, on foundations you can inspect.
Trestle is a self-hosted backend platform for typed collections, application authentication, access rules, files, realtime events and durable automation - one Go service, first-class SQLite or PostgreSQL, and a language-neutral HTTP API.
SQLite or PostgreSQL
Choose an embedded database or an externally operated PostgreSQL 16-18 service. The same typed collections, transactions, rules, queries and API contracts run on either provider.
One executable
The Nift-built dashboard, durable jobs, webhooks, backups and recovery tools ship with the Go service.
Use it from anything
Web, mobile, servers and agents share one contract.
HTTP, JSON, OpenAPI and Server-Sent Events are the public boundary. Browser apps can authenticate as users; trusted services use scoped credentials; automation consumes committed events.
Explore example stacks →Complete reference application
See the contracts working together.
Incident Desk is a separate, runnable product built on the same public APIs available to your application. It combines user authentication, rules, typed records, live events and record-bound files without importing Trestle internals.
Current status
Release candidate.
CP00-CP23 are complete, including the full retained hardening matrix and six-platform packaging. No stable version has been published yet.