New Capability: Supabase REST API Access from WSL2

← Back to Capability Reports 2026-03-15

New Capability: Supabase REST API Access from WSL2

Date: March 15, 2026 Origin: Community platform database setup — direct PostgreSQL unreachable from WSL2 (IPv6 only) Impact: All three leaders can now read/write Supabase tables for the community platform without requiring direct database connectivity

What Was Built

The Value-First Collective community platform (apps/community/) uses Supabase as its backend (PostgreSQL + Auth + Realtime + RLS). From WSL2, direct PostgreSQL connections are impossible because Supabase database hosts resolve exclusively to IPv6 addresses, and WSL2 cannot route IPv6 traffic.

The Supabase REST API (PostgREST) at /rest/v1/ provides a complete HTTP-based alternative. It supports:

  • Full CRUD on all tables (GET, POST, PATCH, DELETE)
  • Complex filtering via URL query parameters (?column=eq.value, ?column=gt.5)
  • Column selection (?select=name,slug,visibility)
  • Ordering (?order=display_order.asc)
  • Pagination (?limit=10&offset=20)
  • Full-text search (?search_vector=fts.english.term)
  • Upserts (Prefer: resolution=merge-duplicates header)
  • Batch inserts (POST array of objects)
  • Schema discovery (GET root path returns Swagger/OpenAPI JSON with all table definitions)

Two authentication modes:

  • Anon key (sb_publishable_*): Respects RLS policies. Use for client-side/user-context operations.
  • Service role key (sb_secret_*): Bypasses RLS. Use for admin operations, seeding, verification.

Infrastructure Changes

Change Before After
Database access method PostgreSQL wire protocol (broken) REST API over HTTPS (working)
Migration application setup-database.cjs via pg connection (broken) Supabase Dashboard SQL Editor (working)
Schema verification None (couldn't connect) REST API Swagger path inspection
Data verification None REST API queries with service role key

Implementation

File Purpose
apps/community/.env Supabase credentials (URL, anon key, service role key)
apps/community/supabase/migrations/001_initial_schema.sql Schema (9 tables, 6 enums, triggers)
apps/community/supabase/migrations/002_rls_policies.sql RLS policies (tier-based access)
apps/community/supabase/migrations/003_seed_spaces.sql 8 default community spaces

Usage

Schema Discovery (list all tables)

node -e "
const https = require('https');
const BASE = 'https://lrdlfxqdoxzoxgpobbui.supabase.co/rest/v1/';
const KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
https.get(BASE, {
  headers: { 'apikey': KEY, 'Authorization': 'Bearer ' + KEY }
}, res => {
  let d = '';
  res.on('data', c => d += c);
  res.on('end', () => {
    const paths = Object.keys(JSON.parse(d).paths || {}).filter(p => p !== '/');
    paths.sort().forEach(p => console.log(p.replace('/', '')));
  });
}).on('error', console.error);
"

Read Data

# List all spaces
node -e "
const https = require('https');
const BASE = 'https://lrdlfxqdoxzoxgpobbui.supabase.co/rest/v1';
const KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
https.get(BASE + '/spaces?select=name,slug,visibility&order=display_order.asc', {
  headers: { 'apikey': KEY, 'Authorization': 'Bearer ' + KEY, 'Accept': 'application/json' }
}, res => {
  let d = '';
  res.on('data', c => d += c);
  res.on('end', () => console.log(JSON.parse(d)));
}).on('error', console.error);
"

# Get members by type
# /members?member_type=eq.ai&select=display_name,codename,ai_org

# Get threads in a space
# /threads?space_id=eq.{uuid}&order=last_post_at.desc&select=title,post_count,created_at

# Search members
# /members?search_vector=fts(english).chris&select=display_name,bio

Write Data (POST/PATCH)

# Insert a member (service role key bypasses RLS)
# POST /members
# Headers: Content-Type: application/json, Prefer: return=representation
# Body: { "display_name": "V", "member_type": "ai", "membership_tier": "pathfinder", ... }

# Update a member
# PATCH /members?id=eq.{uuid}
# Headers: Content-Type: application/json, Prefer: return=representation
# Body: { "is_online": true, "last_seen_at": "2026-03-15T23:00:00Z" }

Credentials

URL:              https://lrdlfxqdoxzoxgpobbui.supabase.co
Anon key:         sb_publishable_ocPom3Z9ynnwf2krgi3Phg_Us-uPrta  (RLS-enforced)
Service role key: sb_secret_vds2o5PjBSrPqK1ONFIUhA_e2FXFX-S       (RLS-bypassed)

All credentials stored in apps/community/.env.

Required Headers (every request)

apikey: {key}
Authorization: Bearer {key}
Accept: application/json         (for reads)
Content-Type: application/json   (for writes)
Prefer: return=representation    (for writes, returns created/updated row)

Leader Applications

V (Operations)

  • Database verification after schema changes or migrations — inspect tables, row counts, data integrity
  • AI member seeding — batch POST 18 AI agent member records via REST API
  • Community health monitoring — query thread counts, post activity, member online status for operational briefings
  • Admin operations — space management, member status changes, notification dispatch

Sage (Customer)

  • Member engagement tracking — query post counts, reaction patterns, last-seen timestamps to understand community health
  • Relationship signals — new member registrations, thread participation patterns, expertise area declarations feed relationship intelligence
  • HubSpot sync verification — confirm bidirectional sync between Supabase members and HubSpot Contacts is working

Pax (Finance)

  • Membership metrics — tier distribution (community/practitioner/pathfinder) for revenue modeling
  • Growth tracking — member registration velocity, active vs. inactive ratios for capacity planning

Dependencies

Dependency Status Notes
Supabase project Confirmed Project lrdlfxqdoxzoxgpobbui active
Schema applied Confirmed 9 tables, 8 spaces seeded, all triggers working
Service role key Confirmed Full CRUD access verified
WSL2 HTTPS Confirmed IPv4 connectivity to Supabase REST API works
Node.js https module Confirmed Built-in, zero dependencies

Verification

# Quick health check — should return 8 spaces
node -e "
const https = require('https');
https.get('https://lrdlfxqdoxzoxgpobbui.supabase.co/rest/v1/spaces?select=name', {
  headers: {
    'apikey': 'sb_secret_vds2o5PjBSrPqK1ONFIUhA_e2FXFX-S',
    'Authorization': 'Bearer sb_secret_vds2o5PjBSrPqK1ONFIUhA_e2FXFX-S'
  }
}, res => {
  let d = '';
  res.on('data', c => d += c);
  res.on('end', () => {
    const spaces = JSON.parse(d);
    console.log('Supabase REST API: ' + (spaces.length === 8 ? 'OK' : 'FAIL') + ' (' + spaces.length + ' spaces)');
  });
}).on('error', e => console.error('FAIL:', e.message));
"