moonshotai/kimi-k3 · d1_crud · rep 2

env | grep -E '^SUPABASE_' | sed -E 's/(PASSWORD|KEY)=.{8}.*/\1=<redacted>/' ; echo '---' ; which psql || echo 'no psql'; which curl || echo 'no curl'; which python3 || echo 'no python3'

SUPABASE_DB_PASSWORD=<redacted>
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=<redacted>
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY=<redacted>
---
/usr/bin/psql
/usr/bin/curl
/usr/bin/python3

psql "$SUPABASE_DB_URL" -v ON_ERROR_STOP=1 <<'SQL'
CREATE TABLE IF NOT EXISTS public.products (
  sku text PRIMARY KEY,
  name text NOT NULL,
  price_cents integer NOT NULL,
  stock integer NOT NULL DEFAULT 0
);

INSERT INTO public.products (sku, name, price_cents, stock) VALUES
  ('CARI-001', 'Anvil S', 1999, 12),
  ('CARI-002', 'Anvil M', 2999, 7),
  ('CARI-003', 'Anvil L', 4999, 3),
  ('CARI-004', 'Rope 30m', 1250, 40),
  ('CARI-005', 'Pulley', 780, 0)
ON CONFLICT (sku) DO UPDATE
  SET name = EXCLUDED.name,
      price_cents = EXCLUDED.price_cents,
      stock = EXCLUDED.stock;

-- Make the catalog publicly readable via PostgREST
ALTER TABLE public.products ENABLE ROW LEVEL SECURITY;

DROP POLICY IF EXISTS "products_public_read" ON public.products;
CREATE POLICY "products_public_read"
  ON public.products FOR SELECT
  TO anon, authenticated
  USING (true);

-- Ensure the API roles can reach the table
GRANT SELECT ON public.products TO anon, authenticated;

SELECT * FROM public.products ORDER BY sku;
SQL

CREATE TABLE
INSERT 0 5
ALTER TABLE
DROP POLICY
CREATE POLICY
GRANT
   sku    |   name   | price_cents | stock 
----------+----------+-------------+-------
 CARI-001 | Anvil S  |        1999 |    12
 CARI-002 | Anvil M  |        2999 |     7
 CARI-003 | Anvil L  |        4999 |     3
 CARI-004 | Rope 30m |        1250 |    40
 CARI-005 | Pulley   |         780 |     0
(5 rows)

NOTICE:  policy "products_public_read" for relation "public.products" does not exist, skipping

echo "== REST call with anon key only =="; curl -sS -w '\nHTTP %{http_code}\n' \
  "${SUPABASE_URL}/rest/v1/products?select=sku,name,price_cents,stock&order=sku.asc" \
  -H "apikey: ${SUPABASE_ANON_KEY}" \
  -H "Authorization: Bearer ${SUPABASE_ANON_KEY}"
echo "== RLS state check =="
psql "$SUPABASE_DB_URL" -tAc "SELECT relname, relrowsecurity FROM pg_class WHERE oid = 'public.products'::regclass; SELECT policyname, cmd, roles FROM pg_policies WHERE schemaname='public' AND tablename='products';"

== REST call with anon key only ==
[{"sku":"CARI-001","name":"Anvil S","price_cents":1999,"stock":12}, 
 {"sku":"CARI-002","name":"Anvil M","price_cents":2999,"stock":7}, 
 {"sku":"CARI-003","name":"Anvil L","price_cents":4999,"stock":3}, 
 {"sku":"CARI-004","name":"Rope 30m","price_cents":1250,"stock":40}, 
 {"sku":"CARI-005","name":"Pulley","price_cents":780,"stock":0}]
HTTP 200
== RLS state check ==
products|t
products_public_read|SELECT|{anon,authenticated}