z-ai/glm-5.2 · d1_storage · rep 1

echo "SUPABASE_URL=$SUPABASE_URL"; echo "SUPABASE_PROJECT_REF=$SUPABASE_PROJECT_REF"; echo "ANON_KEY length: ${#SUPABASE_ANON_KEY}"; echo "SERVICE_ROLE_KEY length: ${#SUPABASE_SERVICE_ROLE_KEY}"; echo "SUPABASE_DB_URL=$SUPABASE_DB_URL"; echo "DB_PASSWORD length: ${#SUPABASE_DB_PASSWORD}"

SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_PROJECT_REF=<ref>
ANON_KEY length: 208
SERVICE_ROLE_KEY length: 219
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
DB_PASSWORD length: 48

which curl python3 jq 2>/dev/null; python3 --version; pip3 list 2>/dev/null | grep -i supabase

/usr/bin/curl
/usr/bin/python3
/usr/bin/jq
Python 3.11.2

pip3 install supabase 2>&1 | tail -5

bash: line 1: pip3: command not found

python3 -m pip install supabase 2>&1 | tail -10

/usr/bin/python3: No module named pip

apt-get update -qq && apt-get install -y -qq python3-pip 2>&1 | tail -5

Setting up build-essential (12.9) ...
Setting up libpython3-dev:amd64 (3.11.2-1+b1) ...
Setting up python3.11-dev (3.11.2-6+deb12u8) ...
Setting up python3-dev (3.11.2-1+b1) ...
Processing triggers for libc-bin (2.36-9+deb12u14) ...

pip3 install supabase 2>&1 | tail -5

    
    See /usr/share/doc/python3.11/README.venv for more information.

note: If you believe this is a mistake, please contact your Python installation or OS distribution provider. You can override this, at the risk of breaking your Python installation or OS, by passing --break-system-packages.
hint: See PEP 668 for the detailed specification.

pip3 install --break-system-packages supabase 2>&1 | tail -5

  Downloading pycparser-3.0-py3-none-any.whl (48 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 48.2/48.2 kB 20.7 MB/s eta 0:00:00
Installing collected packages: strenum, websockets, typing-extensions, pyjwt, pycparser, propcache, packaging, multidict, idna, hyperframe, hpack, h11, certifi, annotated-types, yarl, typing-inspection, pydantic-core, httpcore, h2, deprecation, cffi, anyio, pydantic, httpx, cryptography, realtime, supabase-functions, supabase-auth, storage3, postgrest, supabase
Successfully installed annotated-types-0.8.0 anyio-4.14.2 certifi-2026.7.22 cffi-2.1.0 cryptography-49.0.0 deprecation-2.1.0 h11-0.16.0 h2-4.4.0 hpack-4.2.0 httpcore-1.0.9 httpx-0.28.1 hyperframe-6.1.0 idna-3.18 multidict-6.7.1 packaging-26.2 postgrest-2.31.0 propcache-0.5.2 pycparser-3.0 pydantic-2.13.4 pydantic-core-2.46.4 pyjwt-2.13.0 realtime-2.31.0 storage3-2.31.0 strenum-0.4.15 supabase-2.31.0 supabase-auth-2.31.0 supabase-functions-2.31.0 typing-extensions-4.16.0 typing-inspection-0.4.2 websockets-15.0.1 yarl-1.24.5
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv

cat > /tmp/setup_storage.py << 'PYEOF'
import os
from supabase import create_client

url = os.environ["SUPABASE_URL"]
service_key = os.environ["SUPABASE_SERVICE_ROLE_KEY"]

sb = create_client(url, service_key)

# 1) Create public bucket site-assets
print("Creating site-assets bucket (public=True)...")
try:
    sb.storage.create_bucket(id="site-assets", options={"public": True})
    print("  Created site-assets")
except Exception as e:
    print(f"  site-assets create result: {e}")

# 2) Create private bucket contracts
print("Creating contracts bucket (public=False)...")
try:
    sb.storage.create_bucket(id="contracts", options={"public": False})
    print("  Created contracts")
except Exception as e:
    print(f"  contracts create result: {e}")

# Upload hello/banner.txt to site-assets
print("Uploading site-assets/hello/banner.txt ...")
banner_content = b"CARI banner v1"
try:
    res = sb.storage.from_("site-assets").upload(
        path="hello/banner.txt",
        file=banner_content,
        file_options={"content-type": "text/plain", "upsert": "true"}
    )
    print(f"  Upload result: {res}")
except Exception as e:
    print(f"  Upload error: {e}")

# Upload 2026/nda-007.txt to contracts
print("Uploading contracts/2026/nda-007.txt ...")
nda_content = b"CARI NDA 007 draft"
try:
    res = sb.storage.from_("contracts").upload(
        path="2026/nda-007.txt",
        file=nda_content,
        file_options={"content-type": "text/plain", "upsert": "true"}
    )
    print(f"  Upload result: {res}")
except Exception as e:
    print(f"  Upload error: {e}")

# List buckets to verify
print("\nBuckets:")
try:
    buckets = sb.storage.list_buckets()
    for b in buckets:
        print(f"  {b.id} public={b.public}")
except Exception as e:
    print(f"  list_buckets error: {e}")

# Get public URL for site-assets object
print("\nPublic URL for site-assets/hello/banner.txt:")
pub_url = sb.storage.from_("site-assets").get_public_url("hello/banner.txt")
print(f"  {pub_url}")

# Get public URL for contracts object (should not work for private)
print("Public URL for contracts/2026/nda-007.txt:")
pub_url_c = sb.storage.from_("contracts").get_public_url("2026/nda-007.txt")
print(f"  {pub_url_c}")

PYEOF
python3 /tmp/setup_storage.py

Creating site-assets bucket (public=True)...
  Created site-assets
Creating contracts bucket (public=False)...
  Created contracts
Uploading site-assets/hello/banner.txt ...
  Upload result: UploadResponse(path='hello/banner.txt', full_path='site-assets/hello/banner.txt', fullPath='site-assets/hello/banner.txt')
Uploading contracts/2026/nda-007.txt ...
  Upload result: UploadResponse(path='2026/nda-007.txt', full_path='contracts/2026/nda-007.txt', fullPath='contracts/2026/nda-007.txt')

Buckets:
  site-assets public=True
  contracts public=False

Public URL for site-assets/hello/banner.txt:
  https://<ref>.supabase.co/storage/v1/object/public/site-assets/hello/banner.txt
Public URL for contracts/2026/nda-007.txt:
  https://<ref>.supabase.co/storage/v1/object/public/contracts/2026/nda-007.txt

# Test 1: Unauthenticated GET for public site-assets object
echo "=== Test 1: Unauthenticated GET site-assets/hello/banner.txt ==="
curl -s -w "\nHTTP_STATUS: %{http_code}\n" "https://<ref>.supabase.co/storage/v1/object/public/site-assets/hello/banner.txt"

echo ""
echo "=== Test 2: Unauthenticated GET contracts/2026/nda-007.txt (should FAIL) ==="
curl -s -w "\nHTTP_STATUS: %{http_code}\n" "https://<ref>.supabase.co/storage/v1/object/public/contracts/2026/nda-007.txt"

echo ""
echo "=== Test 3: Authenticated GET contracts/2026/nda-007.txt with service key ==="
curl -s -w "\nHTTP_STATUS: %{http_code}\n" -H "authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" "https://<ref>.supabase.co/storage/v1/object/authenticated/contracts/2026/nda-007.txt"

=== Test 1: Unauthenticated GET site-assets/hello/banner.txt ===
CARI banner v1
HTTP_STATUS: 200

=== Test 2: Unauthenticated GET contracts/2026/nda-007.txt (should FAIL) ===
{"statusCode":"404","error":"Bucket not found","message":"Bucket not found"}
HTTP_STATUS: 400

=== Test 3: Authenticated GET contracts/2026/nda-007.txt with service key ===
CARI NDA 007 draft
HTTP_STATUS: 200