claude-opus-4-8 · d1_storage · rep 2

env | grep -i supabase | sed 's/=.*/=<set>/'

SUPABASE_DB_PASSWORD=<set>
SUPABASE_DB_URL=<set>
SUPABASE_URL=<set>
SUPABASE_SERVICE_ROLE_KEY=<set>
SUPABASE_PROJECT_REF=<set>
SUPABASE_ANON_KEY=<set>

echo "URL=$SUPABASE_URL"; curl -s --version | head -1

URL=https://<ref>.supabase.co
curl 7.88.1 (x86_64-pc-linux-gnu) libcurl/7.88.1 OpenSSL/3.0.20 zlib/1.2.13 brotli/1.0.9 zstd/1.5.4 libidn2/2.3.3 libpsl/0.21.2 (+libidn2/2.3.3) libssh2/1.10.0 nghttp2/1.52.0 librtmp/2.3 OpenLDAP/2.5.13

curl -s -X POST "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"site-assets","id":"site-assets","public":true}'
echo
curl -s -X POST "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name":"contracts","id":"contracts","public":false}'
echo

{"name":"site-assets"}
{"name":"contracts"}

printf 'CARI banner v1' > /tmp/banner.txt
printf 'CARI NDA 007 draft' > /tmp/nda-007.txt
echo "banner bytes: $(wc -c < /tmp/banner.txt)"; xxd /tmp/banner.txt
echo "nda bytes: $(wc -c < /tmp/nda-007.txt)"; xxd /tmp/nda-007.txt

banner bytes: 14
nda bytes: 18

bash: line 3: xxd: command not found
bash: line 4: xxd: command not found

curl -s -X POST "$SUPABASE_URL/storage/v1/object/site-assets/hello/banner.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: text/plain" \
  --data-binary @/tmp/banner.txt
echo
curl -s -X POST "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: text/plain" \
  --data-binary @/tmp/nda-007.txt
echo

{"Key":"site-assets/hello/banner.txt","Id":"f6ddae73-b196-45d3-9206-057e75c11fd5"}
{"Key":"contracts/2026/nda-007.txt","Id":"cc84e0e1-c7c0-4377-822c-6bd8c33c8c58"}

echo "=== 1) Public site-assets via unauthenticated GET (no keys) ==="
echo -n "body: "; curl -s "$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt"
echo; echo -n "http_code: "; curl -s -o /dev/null -w '%{http_code}' "$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt"
echo

echo "=== 2a) contracts via public URL pattern (should FAIL, no keys) ==="
echo -n "http_code: "; curl -s -o /dev/null -w '%{http_code}' "$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt"
echo; echo -n "body: "; curl -s "$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt"
echo

echo "=== 2b) contracts via authorized service-key request (should succeed) ==="
echo -n "http_code: "; curl -s -o /dev/null -w '%{http_code}' "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY"
echo; echo -n "body: "; curl -s "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY"
echo

=== 1) Public site-assets via unauthenticated GET (no keys) ===
body: CARI banner v1
http_code: 200
=== 2a) contracts via public URL pattern (should FAIL, no keys) ===
http_code: 400
body: {"statusCode":"404","error":"Bucket not found","message":"Bucket not found"}
=== 2b) contracts via authorized service-key request (should succeed) ===
http_code: 200
body: CARI NDA 007 draft

echo -n "public banner sha: "; curl -s "$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt" | sha256sum
echo -n "expected  banner sha: "; printf 'CARI banner v1' | sha256sum
echo -n "service nda    sha: "; curl -s "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" -H "apikey: $SUPABASE_SERVICE_ROLE_KEY" | sha256sum
echo -n "expected nda   sha: "; printf 'CARI NDA 007 draft' | sha256sum

public banner sha: c93a088f1f1bf0f75389df803f7c1801cb45749ee5b438df6185e537116f1f74  -
expected  banner sha: c93a088f1f1bf0f75389df803f7c1801cb45749ee5b438df6185e537116f1f74  -
service nda    sha: b22ce9bfc9dd2d0c70a9b0e75bb08306ad097ac9fd5697bae32d94819df3bfeb  -
expected nda   sha: b22ce9bfc9dd2d0c70a9b0e75bb08306ad097ac9fd5697bae32d94819df3bfeb  -