xiaomi/mimo-v2.5 · d1_storage · rep 2

echo "SUPABASE_URL: $SUPABASE_URL"
echo "SUPABASE_PROJECT_REF: $SUPABASE_PROJECT_REF"
echo "SUPABASE_ANON_KEY length: ${#SUPABASE_ANON_KEY}"
echo "SUPABASE_SERVICE_ROLE_KEY length: ${#SUPABASE_SERVICE_ROLE_KEY}"
echo "SUPABASE_DB_URL: $SUPABASE_DB_URL"

SUPABASE_URL: https://<ref>.supabase.co
SUPABASE_PROJECT_REF: <ref>
SUPABASE_ANON_KEY length: 208
SUPABASE_SERVICE_ROLE_KEY length: 219
SUPABASE_DB_URL: <redacted:SUPABASE_DB_URL>

# Create the PUBLIC bucket named "site-assets"
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  -X POST "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "id": "site-assets",
    "name": "site-assets",
    "public": true
  }'

{"name":"site-assets"}
HTTP_STATUS:200

# Create the PRIVATE bucket named "contracts"
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  -X POST "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "id": "contracts",
    "name": "contracts",
    "public": false
  }'

{"name":"contracts"}
HTTP_STATUS:200

# Upload banner.txt to site-assets (public)
echo -n "CARI banner v1" > /tmp/banner.txt
cat -A /tmp/banner.txt  # verify content
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  -X POST "$SUPABASE_URL/storage/v1/object/site-assets/hello/banner.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: text/plain" \
  --data-binary @/tmp/banner.txt

CARI banner v1{"Key":"site-assets/hello/banner.txt","Id":"c3bb4e59-36e5-485d-827c-143a941f1f6b"}
HTTP_STATUS:200

# Upload nda-007.txt to contracts (private)
echo -n "CARI NDA 007 draft" > /tmp/nda-007.txt
cat -A /tmp/nda-007.txt  # verify content
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  -X POST "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" \
  -H "Content-Type: text/plain" \
  --data-binary @/tmp/nda-007.txt

CARI NDA 007 draft{"Key":"contracts/2026/nda-007.txt","Id":"7f501263-46b8-49cd-a2b4-e0522059305a"}
HTTP_STATUS:200

# Verify site-assets is publicly downloadable (no auth)
echo "=== Unauthenticated GET to site-assets ==="
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  "$SUPABASE_URL/storage/v1/object/public/site-assets/hello/banner.txt"

=== Unauthenticated GET to site-assets ===
CARI banner v1
HTTP_STATUS:200

# Verify contracts is NOT publicly accessible
echo "=== Unauthenticated GET to contracts ==="
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  "$SUPABASE_URL/storage/v1/object/public/contracts/2026/nda-007.txt"

=== Unauthenticated GET to contracts ===
{"statusCode":"404","error":"Bucket not found","message":"Bucket not found"}
HTTP_STATUS:400

# Verify contracts IS readable with service role key
echo "=== Service-role key GET to contracts ==="
curl -s -w "\nHTTP_STATUS:%{http_code}" \
  "$SUPABASE_URL/storage/v1/object/contracts/2026/nda-007.txt" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY"

=== Service-role key GET to contracts ===
CARI NDA 007 draft
HTTP_STATUS:200

# List both buckets to confirm
curl -s "$SUPABASE_URL/storage/v1/bucket" \
  -H "Authorization: Bearer $SUPABASE_SERVICE_ROLE_KEY" | python3 -m json.tool

[
    {
        "id": "site-assets",
        "name": "site-assets",
        "owner": "",
        "public": true,
        "type": "STANDARD",
        "file_size_limit": null,
        "allowed_mime_types": null,
        "created_at": "2026-07-26T03:23:18.902Z",
        "updated_at": "2026-07-26T03:23:18.902Z"
    },
    {
        "id": "contracts",
        "name": "contracts",
        "owner": "",
        "public": false,
        "type": "STANDARD",
        "file_size_limit": null,
        "allowed_mime_types": null,
        "created_at": "2026-07-26T03:23:19.127Z",
        "updated_at": "2026-07-26T03:23:19.127Z"
    }
]