claude-opus-5 · d1_storage · rep 1

env | grep -i supabase | sed 's/\(KEY=.\{12\}\).*/\1.../' 

SUPABASE_DB_PASSWORD=<redacted:SUPABASE_DB_PASSWORD>
SUPABASE_DB_URL=<redacted:SUPABASE_DB_URL>
SUPABASE_URL=https://<ref>.supabase.co
SUPABASE_SERVICE_ROLE_KEY=eyJhbGciOiJI...
SUPABASE_PROJECT_REF=<ref>
SUPABASE_ANON_KEY=eyJhbGciOiJI...

which curl jq psql python3; curl --version | head -1

/usr/bin/curl
/usr/bin/jq
/usr/bin/psql
/usr/bin/python3
curl 7.88.1 (x86_64-pc-linux-gnu) libcurl/7.88.1 OpenSSL/3.0.20 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 (+libidn2/2.3.3) libssh2/1.10.0 nghttp2/1.52.0 librtmp/2.3 OpenLDAP/2.5.13

curl -s -X POST "$SUPABASE_URL/storage/v1/bucket" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" -H "Content-Type: application/json" -d '{"name":"site-assets","id":"site-assets","public":true}'; echo; curl -s -X POST "$SUPABASE_URL/storage/v1/bucket" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" -H "Content-Type: application/json" -d '{"name":"contracts","id":"contracts","public":false}'; echo

{"name":"site-assets"}
{"name":"contracts"}

cd /tmp && printf 'CARI banner v1' > banner.txt && printf 'CARI NDA 007 draft' > nda-007.txt && wc -c banner.txt nda-007.txt && xxd banner.txt | tail -2

14 banner.txt
18 nda-007.txt
32 total

bash: line 1: xxd: command not found

cd /tmp && curl -s -X POST "$SUPABASE_URL/storage/v1/object/site-assets/hello/banner.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" -H "Content-Type: text/plain" -H "x-upsert: true" --data-binary @banner.txt; echo; curl -s -X POST "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" -H "Content-Type: text/plain" -H "x-upsert: true" --data-binary @nda-007.txt; echo

{"Key":"site-assets/hello/banner.txt","Id":"915e4a32-770e-4827-a085-a6ced87f497a"}
{"Key":"contracts/2026/nda-007.txt","Id":"052a02dd-6cd0-4709-a81e-67123f77c340"}

cd /tmp && URL="$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt" && env -i /usr/bin/curl -s -o pub.out -w "HTTP=%{http_code}\n" "$URL" && echo "--- body ---" && cat pub.out && echo && echo "--- bytes ---" && wc -c pub.out && cmp pub.out banner.txt && echo "EXACT MATCH"

HTTP=200
--- body ---
CARI banner v1
--- bytes ---
14 pub.out
EXACT MATCH

cd /tmp && env -i /usr/bin/curl -s -o priv.out -w "HTTP=%{http_code}\n" "$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt" 2>/dev/null; echo "(needs URL expansion, rerunning)"; PUB="$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt"; env -i /usr/bin/curl -s -o priv.out -w "HTTP=%{http_code}\n" "$PUB"; echo "--- body ---"; cat priv.out; echo

HTTP=400
(needs URL expansion, rerunning)
HTTP=400
--- body ---
{"statusCode":"404","error":"Bucket not found","message":"Bucket not found"}

cd /tmp && curl -s -o svc.out -w "service-key HTTP=%{http_code}\n" "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY"; echo "--- body ---"; cat svc.out; echo; wc -c svc.out; cmp svc.out nda-007.txt && echo "EXACT MATCH"

service-key HTTP=200
--- body ---
CARI NDA 007 draft
18 svc.out
EXACT MATCH

cd /tmp && curl -s -o anon.out -w "anon-key-authenticated-path HTTP=%{http_code}\n" "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_ANON_KEY" -H "apikey: $SUPABASE_ANON_KEY"; cat anon.out; echo; P="$SUPABASE_URL/storage/v1/object/authenticated/contracts/2026/nda-007.txt"; env -i /usr/bin/curl -s -w "\nno-cred-authenticated-path HTTP=%{http_code}\n" "$P"

anon-key-authenticated-path HTTP=400
{"statusCode":"404","error":"not_found","message":"Object not found"}
{"statusCode":"400","error":"Error","message":"headers must have required property 'authorization'"}
no-cred-authenticated-path HTTP=400

psql "$SUPABASE_DB_URL" -A -F' | ' -c "select b.id, b.public, o.name, octet_length(convert_from(decode('','base64'),'UTF8')) is null as _ from storage.buckets b left join storage.objects o on o.bucket_id=b.id where b.id in ('site-assets','contracts') order by b.id, o.name;" 2>&1 | head -20

id | public | name | _
contracts | f | 2026/nda-007.txt | f
site-assets | t | hello/banner.txt | f
(2 rows)

psql "$SUPABASE_DB_URL" -A -F' | ' -c "select id, public, created_at from storage.buckets where id in ('site-assets','contracts') order by id;" -c "select bucket_id, name, (metadata->>'size') as size, metadata->>'mimetype' as mime from storage.objects where bucket_id in ('site-assets','contracts') order by bucket_id, name;"

id | public | created_at
contracts | f | 2026-07-25 05:51:59.290885+00
site-assets | t | 2026-07-25 05:51:58.943602+00
(2 rows)
bucket_id | name | size | mime
contracts | 2026/nda-007.txt | 18 | text/plain
site-assets | hello/banner.txt | 14 | text/plain
(2 rows)

cd /tmp && echo "=== PUBLIC (no keys) ===" && A="$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt" && env -i /usr/bin/curl -s -w " [HTTP=%{http_code}]\n" "$A" && echo "=== PRIVATE via public URL (no keys) ===" && B="$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt" && env -i /usr/bin/curl -s -w " [HTTP=%{http_code}]\n" "$B" && echo "=== PRIVATE via service key ===" && curl -s -w " [HTTP=%{http_code}]\n" "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY"

=== PUBLIC (no keys) ===
CARI banner v1 [HTTP=200]
=== PRIVATE via public URL (no keys) ===
{"statusCode":"404","error":"Bucket not found","message":"Bucket not found"} [HTTP=400]
=== PRIVATE via service key ===
CARI NDA 007 draft [HTTP=200]