supabase

Supabase

Purpose

Build production backends on Supabase — PostgreSQL schema design, Row Level Security policies, Auth providers, Realtime subscriptions, Storage buckets, and Edge Functions for serverless compute.

Agent Protocol

Trigger

User request includes: Supabase, Supabase database, RLS, Row Level Security, Supabase Auth, Supabase Realtime, Supabase Storage, Supabase Edge Functions, Supabase CLI, Supabase client, Supabase , pgvector, Supabase migration, Supabase project.

Input Context

• Required Supabase features (DB, Auth, Realtime, Storage, Edge Functions)
• PostgreSQL schema requirements (tables, relations, indexes)
• Auth providers needed (email, OAuth, magic link, phone)
• Estimated scale (concurrent users, data volume)

Output Artifact

Supabase project config, SQL schema + RLS policies, client setup, edge function code, storage bucket config.

Response Format

Produce artifact directly. No preamble, no postamble, no explanations. No filler, no hedging, no transitions. Strip articles a/an/the where unambiguous. Compress output — why use many token when few do trick.

Completion Criteria

• PostgreSQL schema defined with proper types, indexes, and relations
• RLS policies applied to every table (select, insert, update, delete)
• Auth providers configured with proper redirect URLs
• Realtime channels designed with proper filters
• Storage buckets with public/private policies
• Edge Functions with proper CORS and error handling
• Client SDK configured (supabase-js)

Max Response Length

4096 tokens

Workflow

Step 1: Project Setup

npm install @supabase/supabase-js @supabase/ssr
npm install -g supabase

# Login and init
supabase login
supabase init

# Link to existing project
supabase link --project-ref <ref>

# Start local dev
supabase start

// src/lib/supabase-client.ts
import { createClient } from '@supabase/supabase-js';

const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL!;
const supabaseAnonKey = process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!;

export const supabase = createClient(supabaseUrl, supabaseAnonKey);

// Server-side (service role — bypasses RLS)
export const supabaseAdmin = createClient(
  supabaseUrl,
  process.env.SUPABASE_SERVICE_ROLE_KEY!,
  { auth: { autoRefreshToken: false, persistSession: false } }
);