Files
supabase/apps/studio/components/interfaces/ConnectSheet/connect.schema.ts
Ali Waseem cedc4c8187 feat: Add Server lib to connect w/ ability to copy env (#47056)
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md)
file.

YES

## What kind of change does this PR introduce?

Introduced a new library called Superbase/Server. To help developers
using third party API frameworks, we want to make it easier than ever to
install and use as needed.
- One click copy
- Custom prompt to get started
- Validated API key permissions to ensure we don't leak secrets to other
users in your org/project

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

## New Features
- Added a **Server** connection mode end-to-end, including mode-specific
prompting and steps for installing **`@supabase/server`** and setting
required variables.
- Added a server **.env** panel with per-variable copy, **“Copy all
variables”**, and permission-aware secret reveal/copy.

## Improvements
- Updated connection UI layouts (mode selector grid and conditional
config section).
- Improved prompt copying to use mode-specific prompt text when
available.

## Tests
- Added UI tests for server env rendering, secret reveal/copy,
**copy-all** behavior, and permission-restricted scenarios.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2026-06-18 08:41:11 -06:00

456 lines
15 KiB
TypeScript

import type { ConnectSchema, StepDefinition } from './Connect.types'
/**
* Base install commands for each library.
*/
export const INSTALL_COMMANDS: Record<string, string> = {
supabasejs: 'npm install @supabase/supabase-js',
supabasepy: 'pip install supabase',
supabaseflutter: 'flutter pub add supabase_flutter',
supabaseswift:
'swift package add-dependency https://github.com/supabase-community/supabase-swift',
supabasekt: 'implementation("io.github.jan-tennert.supabase:supabase-kt:VERSION")',
}
/**
* Extra packages required by specific frameworks on top of the base library.
* Keyed by library, then by framework (or framework/variant for more specificity).
* The install step checks the most specific key first (e.g. "nextjs/app"),
* then falls back to the framework key (e.g. "nextjs").
*/
export const EXTRA_PACKAGES: Record<string, Record<string, string[]>> = {
supabasejs: {
'nextjs/app': ['@supabase/ssr'],
remix: ['@supabase/ssr'],
},
}
// ============================================================================
// Step Definitions (reusable)
// All content paths use template syntax: {{stateKey}} is replaced with state values
// ============================================================================
const frameworkInstallStep: StepDefinition = {
id: 'install',
title: 'Install package',
description: 'Run this command to install the required dependencies.',
content: 'steps/install',
}
const frameworkInstallPackagesStep: StepDefinition = {
id: 'install',
title: 'Install packages',
description: 'Run this command to install the required dependencies.',
content: 'steps/install',
}
const frameworkConfigureStep: StepDefinition = {
id: 'configure',
title: 'Add files',
description: 'Copy the following code into your project.',
content: '{{framework}}/{{frameworkVariant}}/{{library}}',
}
const frameworkNextJsFilesStep: StepDefinition = {
id: 'configure-nextjs',
title: 'Add files',
description:
'Add env variables, create Supabase client helpers, and set up middleware to keep sessions refreshed.',
content: '{{framework}}/{{frameworkVariant}}/{{library}}',
}
const frameworkReactFilesStep: StepDefinition = {
id: 'configure-react',
title: 'Add files',
description: 'Add env variables, create a Supabase client, and use it in your app to query data.',
content: '{{framework}}/{{frameworkVariant}}/{{library}}',
}
const frameworkShadcnStep: StepDefinition = {
id: 'shadcn-add',
title: 'Add Supabase UI components',
description: 'Run this command to install the Supabase shadcn components.',
content: 'steps/shadcn/command',
}
const frameworkShadcnEnvStep: StepDefinition = {
id: 'shadcn-env',
title: 'Set env variables',
description: 'Add the following values to your env file.',
content: 'steps/shadcn/env',
}
const frameworkShadcnExploreStep: StepDefinition = {
id: 'shadcn-explore',
title: 'Check out more UI components',
description: 'Add auth, realtime and storage functionality to your project',
content: 'steps/shadcn/explore',
}
const directConnectionStep: StepDefinition = {
id: 'connection',
title: 'Connection string',
description: 'Copy the connection details for your database.',
content: 'steps/direct-connection',
}
const directInstallStep: StepDefinition = {
id: 'direct-install',
title: 'Install dependencies',
description: 'Run this command to install the required dependencies.',
content: 'steps/direct-install',
}
const directFilesStep: StepDefinition = {
id: 'direct-files',
title: 'Add files',
description: 'Add the following files to your project.',
content: 'steps/direct-files',
}
const mcpConfigureStep: StepDefinition = {
id: 'configure-mcp',
title: 'Configure MCP',
description: 'Set up your MCP client.',
content: 'steps/mcp/cursor',
}
// Codex-specific MCP steps
const codexAddServerStep: StepDefinition = {
id: 'codex-add-server',
title: 'Add the Supabase MCP server to Codex',
description: 'Run this command to add the server.',
content: 'steps/mcp/codex/add-server',
}
const codexAuthenticateStep: StepDefinition = {
id: 'codex-authenticate',
title: 'Authenticate',
description: 'Run the authentication command.',
content: 'steps/mcp/codex/authenticate',
}
const codexVerifyStep: StepDefinition = {
id: 'codex-verify',
title: 'Verify authentication',
description: 'Run /mcp inside Codex to verify.',
content: 'steps/mcp/codex/verify',
}
const claudeAddServerStep: StepDefinition = {
id: 'claude-add-server',
title: 'Add MCP server',
description: 'Add the MCP server to your project config using the command line.',
content: 'steps/mcp/claude-code/add-server',
}
const claudeAuthenticateStep: StepDefinition = {
id: 'claude-authenticate',
title: 'Authenticate',
description:
'After configuring the MCP server, you need to authenticate. In a regular terminal (not the IDE extension) run:',
content: 'steps/mcp/claude-code/authenticate',
}
const ormInstallStep: StepDefinition = {
id: 'install',
title: 'Install ORM',
description: 'Add the ORM to your project.',
content: 'steps/orm-install',
}
const ormConfigureStep: StepDefinition = {
id: 'configure',
title: 'Configure ORM',
description: 'Set up your ORM configuration.',
content: '{{orm}}',
}
const serverInstallStep: StepDefinition = {
id: 'server-install',
title: 'Install package',
description:
'Add @supabase/server to your backend or API framework of choice. On Supabase Edge Functions you can import it directly, no install needed.',
content: 'server/install',
}
const serverEnvStep: StepDefinition = {
id: 'server-env',
title: 'Set environment variables',
description:
'Copy these into your environment so you can verify users and use the client/admin supabase-js library from the context of your handler. On Supabase Edge Functions they are injected automatically.',
content: 'server/env',
}
const skillsInstallStep: StepDefinition = {
id: 'install-skills',
title: 'Install Agent Skills (Optional)',
description:
'Agent Skills give AI coding tools ready-made instructions, scripts, and resources for working with Supabase more accurately and efficiently.',
content: 'steps/skills-install',
}
const serverSkillsInstallStep: StepDefinition = {
id: 'install-skills',
title: 'Install the Supabase Server skill (Optional)',
description:
'Gives AI coding tools ready-made instructions for building APIs with @supabase/server.',
content: 'steps/skills-install',
}
// ============================================================================
// Mode Prompts
// ============================================================================
// Agent-ready prompt for the Server mode. Intentionally omits the project's
// actual keys — the secret should never be pasted into an LLM prompt; users
// copy the real values from the env step.
const serverConnectPrompt = `Set up the @supabase/server SDK in this project.
Install it:
npm install @supabase/server
It reads these environment variables (copy the real values from the Supabase dashboard's Connect dialog — never commit the secret key):
- SUPABASE_URL
- SUPABASE_PUBLISHABLE_KEY
- SUPABASE_SECRET_KEY
- SUPABASE_JWKS_URL (used to verify user JWTs)
Create request handlers with \`withSupabase\` from "@supabase/server". It validates auth and provides an RLS-scoped client (\`ctx.supabase\`) and an admin client that bypasses RLS (\`ctx.supabaseAdmin\`). Example:
import { withSupabase } from "@supabase/server"
export default {
fetch: withSupabase({ auth: "user" }, async (_req, ctx) => {
const { data } = await ctx.supabase.from("todos").select()
return Response.json(data)
}),
}
Auth modes: "user" (valid JWT), "publishable" (publishable key), "secret" (secret key), "none". On Supabase Edge Functions these env vars are injected automatically; for non-"user" auth modes, set \`verify_jwt = false\` for the function in supabase/config.toml.`
// ============================================================================
// Main Schema
// ============================================================================
export const connectSchema: ConnectSchema = {
// -------------------------------------------------------------------------
// Mode Definitions
// -------------------------------------------------------------------------
modes: [
{
id: 'framework',
label: 'Framework',
description: 'Use a client library',
fields: ['framework', 'frameworkVariant', 'library', 'frameworkUi'],
},
{
id: 'server',
label: 'Server',
description: 'Build APIs',
fields: [],
prompt: serverConnectPrompt,
},
{
id: 'direct',
label: 'Direct',
description: 'Connection string',
fields: ['connectionSource', 'connectionMethod', 'useSharedPooler', 'connectionType'],
},
{
id: 'orm',
label: 'ORM',
description: 'Third-party library',
fields: ['orm'],
},
{
id: 'mcp',
label: 'MCP',
description: 'Connect your agent',
fields: ['mcpClient', 'mcpReadonly', 'mcpFeatures'],
},
],
// -------------------------------------------------------------------------
// Field Definitions
// -------------------------------------------------------------------------
fields: {
// Framework fields
framework: {
id: 'framework',
type: 'select',
label: 'Framework',
options: { source: 'frameworks' },
defaultValue: 'nextjs',
},
frameworkVariant: {
id: 'frameworkVariant',
type: 'select',
label: 'Variant',
options: { source: 'frameworkVariants' },
defaultValue: 'app',
dependsOn: { framework: ['nextjs', 'react'] }, // Only show for frameworks with multiple variants
},
library: {
id: 'library',
type: 'select',
label: 'Library',
options: { source: 'libraries' },
defaultValue: 'supabasejs',
},
frameworkUi: {
id: 'frameworkUi',
type: 'switch',
label: 'Shadcn',
description: 'Install components via the Supabase shadcn registry.',
defaultValue: false,
dependsOn: { framework: ['nextjs', 'react'] },
},
// Direct connection fields
connectionSource: {
id: 'connectionSource',
type: 'select',
label: 'Source',
options: { source: 'connectionSources' },
defaultValue: undefined,
},
connectionMethod: {
id: 'connectionMethod',
type: 'radio-list',
label: 'Connection Method',
options: { source: 'connectionMethods' },
// Default is set per deployment mode by useConnectState.setMode('direct'):
// platform/CLI → 'direct', self-hosted → 'session'.
},
useSharedPooler: {
id: 'useSharedPooler',
type: 'switch',
label: 'Use IPv4 connection (Shared Pooler)',
description: 'Recommended when your network does not support IPv6',
defaultValue: false,
dependsOn: { connectionMethod: ['transaction'] },
},
connectionType: {
id: 'connectionType',
type: 'select',
label: 'Type',
options: { source: 'connectionTypes' },
defaultValue: 'uri',
},
// ORM fields
orm: {
id: 'orm',
type: 'radio-list',
label: 'ORM',
options: { source: 'orms' },
defaultValue: 'prisma',
},
// MCP fields
mcpClient: {
id: 'mcpClient',
type: 'select',
label: 'Client',
description: 'Choose the MCP client you are using.',
options: { source: 'mcpClients' },
defaultValue: 'claude-code',
},
mcpReadonly: {
id: 'mcpReadonly',
type: 'switch',
label: 'Read-only',
description: 'Only allow read operations on your database',
defaultValue: false,
},
mcpFeatures: {
id: 'mcpFeatures',
type: 'multi-select',
label: 'Feature groups',
description:
'Only enable a subset of features. Helps keep the number of tools within MCP client limits.',
options: { source: 'mcpFeatures' },
},
},
// -------------------------------------------------------------------------
// Steps - Conditional based on mode and nested selections
// -------------------------------------------------------------------------
steps: {
// Keys are field IDs; each field maps state values to step trees.
mode: {
framework: {
framework: {
nextjs: {
frameworkVariant: {
app: {
frameworkUi: {
true: [
frameworkInstallPackagesStep,
frameworkShadcnStep,
frameworkShadcnEnvStep,
frameworkShadcnExploreStep,
skillsInstallStep,
],
DEFAULT: [
frameworkInstallPackagesStep,
frameworkNextJsFilesStep,
skillsInstallStep,
],
},
},
DEFAULT: {
frameworkUi: {
true: [
frameworkInstallStep,
frameworkShadcnStep,
frameworkShadcnEnvStep,
frameworkShadcnExploreStep,
skillsInstallStep,
],
DEFAULT: [frameworkInstallStep, frameworkNextJsFilesStep, skillsInstallStep],
},
},
},
},
react: {
frameworkUi: {
true: [
frameworkInstallStep,
frameworkShadcnStep,
frameworkShadcnEnvStep,
frameworkShadcnExploreStep,
skillsInstallStep,
],
DEFAULT: [frameworkInstallStep, frameworkReactFilesStep, skillsInstallStep],
},
},
remix: [frameworkInstallPackagesStep, frameworkConfigureStep, skillsInstallStep],
DEFAULT: [frameworkInstallStep, frameworkConfigureStep, skillsInstallStep],
},
},
direct: {
connectionType: {
nodejs: [directInstallStep, directFilesStep, skillsInstallStep],
golang: [directInstallStep, directFilesStep, skillsInstallStep],
dotnet: [directInstallStep, directFilesStep, skillsInstallStep],
python: [directInstallStep, directFilesStep, skillsInstallStep],
sqlalchemy: [directInstallStep, directFilesStep, skillsInstallStep],
DEFAULT: [directConnectionStep, skillsInstallStep],
},
},
orm: [ormInstallStep, ormConfigureStep, skillsInstallStep],
mcp: {
mcpClient: {
codex: [codexAddServerStep, codexAuthenticateStep, codexVerifyStep, skillsInstallStep],
'claude-code': [claudeAddServerStep, claudeAuthenticateStep, skillsInstallStep],
DEFAULT: [mcpConfigureStep, skillsInstallStep],
},
},
server: [serverInstallStep, serverEnvStep, serverSkillsInstallStep],
DEFAULT: [skillsInstallStep],
},
},
}