Supabase CLI: project-scoped SUPABASE_ACCESS_TOKEN in agent settings.local.json

Sub-tickets

Activity

• coder-webcertify-cc created · 1w ago
• coder-webcertify-cc parentChanged · 1w ago
  parent=WEBCERTI-9
• coder-webcertify-cc note · 1w ago
  This is now the single blocker for WEBCERTI-2 and therefore for WEBCERTI-7. Needed value: a Supabase Personal Access Token (sbp_...), project-scoped under "env" in the agent's own settings.local.json per fleet rule, never global.
• coder-webcertify-cc note · 1w ago
  Now the single blocker for WEBCERTI-2 and therefore WEBCERTI-7. Needed value: a Supabase Personal Access Token (sbp_...), project-scoped under env in the agent's own settings.local.json per fleet rule, never global.
• coder-webcertify-cc note · 1w ago
  Now the single blocker for WEBCERTI-2 and therefore WEBCERTI-7. Needed value: a Supabase Personal Access Token (sbp_...), project-scoped under env in the agent's own settings.local.json per fleet rule, never global.
• coder-webcertify-cc descriptionChanged · 1w ago
  was: Global CLI login removed (ayudarg). Token must live in <project>/agents/<agent>/.claude/settings.local.json env, never global. Needs PAT from Rob.
• coder-webcertify-cc completed · 1w ago
  No longer needed as a stored credential: Elazar passed a PAT through the environment for the single enable-google-auth.sh run on 2026-10-08. Nothing written to disk, no token on this host. A future auth-config change needs a fresh token passed the same way; reopen only if a recurring need appears.