From ddeff8d347c0fcbef910618eb627dc01e6780f6a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Barfleur?=
 <39409397+kevinbarfleur@users.noreply.github.com>
Date: Thu, 12 Mar 2026 14:36:04 +0100
Subject: [PATCH 1/6] fix(WW-4788): use privateApiKey (service_role) for
 OpenAPI spec fetch

Supabase is blocking access to the /rest/v1/ OpenAPI spec endpoint
with anon keys starting April 8, 2026. Switch fetchDoc() to use the
privateApiKey (service_role) which remains authorized.
---
 src/wwPlugin.js | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/wwPlugin.js b/src/wwPlugin.js
index 61f86d3..b192df2 100644
--- a/src/wwPlugin.js
+++ b/src/wwPlugin.js
@@ -370,19 +370,19 @@ export default {
             baseProjectRef: config.baseProjectRef,
             branch: config.branch,
             branchSlug: config.branchSlug,
-            hasApiKey: !!config.publicApiKey,
-            apiKeyPreview: maskForLog(config.publicApiKey),
+            hasPrivateApiKey: !!config.privateApiKey,
+            apiKeyPreview: maskForLog(config.privateApiKey),
         };
-        if (!runtimeProjectUrl || !config.publicApiKey) {
+        if (!runtimeProjectUrl || !config.privateApiKey) {
             console.warn('[Supabase plugin] fetchDoc skipped', {
-                reason: 'Missing projectUrl or publicApiKey',
+                reason: 'Missing projectUrl or privateApiKey',
                 ...logContext,
             });
             return;
         }
 
         try {
-            const doc = await getDoc(runtimeProjectUrl, config.publicApiKey, {
+            const doc = await getDoc(runtimeProjectUrl, config.privateApiKey, {
                 branchSlug: config.branchSlug,
             });
             this.doc = doc;

From d2b7f345dc02dfec0ca70b6179b1c1f31feeb378 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Barfleur?=
 <39409397+kevinbarfleur@users.noreply.github.com>
Date: Thu, 12 Mar 2026 16:46:55 +0100
Subject: [PATCH 2/6] Add required

---
 src/components/Configuration/SettingsEdit.vue | 156 +++++++++++++-----
 .../Configuration/SettingsEditMultiEnv.vue    |   4 +-
 2 files changed, 117 insertions(+), 43 deletions(-)

diff --git a/src/components/Configuration/SettingsEdit.vue b/src/components/Configuration/SettingsEdit.vue
index a8b55d5..79fbf75 100644
--- a/src/components/Configuration/SettingsEdit.vue
+++ b/src/components/Configuration/SettingsEdit.vue
@@ -1,59 +1,110 @@
 <template>
     <wwEditorFormRow class="w-100">
-        <wwEditorInputRadio v-if="isConnected" v-model="selectMode" :disabled="isComingUp" :choices="[
-            { label: 'Select a project', value: 'select' },
-            { label: 'Create a project', value: 'create' },
-        ]" />
+        <wwEditorInputRadio
+            v-if="isConnected"
+            v-model="selectMode"
+            :disabled="isComingUp"
+            :choices="[
+                { label: 'Select a project', value: 'select' },
+                { label: 'Create a project', value: 'create' },
+            ]"
+        />
     </wwEditorFormRow>
     <template v-if="selectMode === 'select' || !isConnected">
         <div class="flex items-center" v-if="isConnected">
             <wwEditorFormRow required label="Project URL" class="w-100">
-                <wwEditorInput type="select" placeholder="https://your-project.supabase.co"
-                    :model-value="settings.publicData.projectUrl" :options="projectsOptions"
-                    @update:modelValue="changeProjectUrl" class="-full" />
+                <wwEditorInput
+                    type="select"
+                    placeholder="https://your-project.supabase.co"
+                    :model-value="settings.publicData.projectUrl"
+                    :options="projectsOptions"
+                    @update:modelValue="changeProjectUrl"
+                    class="-full"
+                />
             </wwEditorFormRow>
             <button type="button" class="ww-editor-button -primary -small -icon ml-2 mt-1" @click="refreshProjects">
                 <wwEditorIcon name="refresh" medium />
             </button>
         </div>
-        <button v-if="isConnected" @click="showSettings = !showSettings" class="ww-editor-button -secondary -small mb-2"
-            type="button">
+        <button
+            v-if="isConnected"
+            @click="showSettings = !showSettings"
+            class="ww-editor-button -secondary -small mb-2"
+            type="button"
+        >
             {{ showSettings ? 'Close' : 'Open' }} settings
         </button>
         <template v-if="showSettings || !isConnected">
-            <wwEditorInputRow label="Project URL" type="query" placeholder="https://your-project.supabase.co"
-                :model-value="settings.publicData.projectUrl" @update:modelValue="changeProjectUrl" />
-            <wwEditorInputRow label="Custom Domain (optional)" type="query" placeholder="https://your-custom-domain.com"
-                :model-value="settings.publicData.customDomain" @update:modelValue="changeCustomDomain" />
-            <wwEditorInputRow label="Public API key" required type="query" placeholder="ey********"
-                :model-value="settings.publicData.apiKey" @update:modelValue="changeApiKey" />
-            <wwEditorFormRow label="Service role key">
+            <wwEditorInputRow
+                label="Project URL"
+                type="query"
+                placeholder="https://your-project.supabase.co"
+                :model-value="settings.publicData.projectUrl"
+                @update:modelValue="changeProjectUrl"
+            />
+            <wwEditorInputRow
+                label="Custom Domain (optional)"
+                type="query"
+                placeholder="https://your-custom-domain.com"
+                :model-value="settings.publicData.customDomain"
+                @update:modelValue="changeCustomDomain"
+            />
+            <wwEditorInputRow
+                label="Public API key"
+                required
+                type="query"
+                placeholder="ey********"
+                :model-value="settings.publicData.apiKey"
+                @update:modelValue="changeApiKey"
+            />
+            <wwEditorFormRow label="Service role key" required>
                 <div class="flex items-center">
-                    <wwEditorInputText type="password" placeholder="ey********" large class="w-full"
-                        :style="{ '-webkit-text-security': 'disc' }" :model-value="settings.privateData.apiKey"
-                        @update:modelValue="changePrivateApiKey" />
-                    <wwEditorQuestionMark tooltip-position="top-left"
+                    <wwEditorInputText
+                        type="password"
+                        placeholder="ey********"
+                        large
+                        class="w-full"
+                        :style="{ '-webkit-text-security': 'disc' }"
+                        :model-value="settings.privateData.apiKey"
+                        @update:modelValue="changePrivateApiKey"
+                    />
+                    <wwEditorQuestionMark
+                        tooltip-position="top-left"
                         forced-content="Required if you want to manage your users and roles from the Editor or restrict access to a page for a specific role."
-                        class="ml-2" :class="{ 'text-yellow-500': !settings.privateData.apiKey }" />
+                        class="ml-2"
+                        :class="{ 'text-yellow-500': !settings.privateData.apiKey }"
+                    />
                 </div>
             </wwEditorFormRow>
-            <wwEditorInputRow v-show="false" label="Connection string" type="query"
+            <wwEditorInputRow
+                v-show="false"
+                label="Connection string"
+                type="query"
                 placeholder="postgres://postgres.[YOUR-PROJECT-REF]:[YOUR-PASSWORD]@aws-0-eu-west-3.pooler.supabase.com:6543/postgres"
-                :model-value="settings.privateData.connectionString" @update:modelValue="changeConnectionString" />
+                :model-value="settings.privateData.connectionString"
+                @update:modelValue="changeConnectionString"
+            />
             <wwEditorFormRow label="Database password" v-show="false">
                 <template #append-label>
-                    <a class="ww-editor-link ml-2"
+                    <a
+                        class="ww-editor-link ml-2"
                         :href="`https://supabase.com/dashboard/project/${projectRef}/settings/database`"
-                        target="_blank">
+                        target="_blank"
+                    >
                         Find it here
                     </a>
                 </template>
                 <div class="flex items-center">
-                    <wwEditorInputText type="password" placeholder="Enter your database password"
-                        :style="{ '-webkit-text-security': 'disc' }" large
+                    <wwEditorInputText
+                        type="password"
+                        placeholder="Enter your database password"
+                        :style="{ '-webkit-text-security': 'disc' }"
+                        large
                         :tooltip="`Required if you want Copilot to be able to update your database.`"
-                        :model-value="settings.privateData.databasePassword" @update:modelValue="changeDatabasePassword"
-                        class="w-full" />
+                        :model-value="settings.privateData.databasePassword"
+                        @update:modelValue="changeDatabasePassword"
+                        class="w-full"
+                    />
                 </div>
             </wwEditorFormRow>
         </template>
@@ -64,13 +115,28 @@
             <div>We're now preparing your database. Please wait a few moments, it may take up to 1 minute.</div>
         </div>
         <template v-else>
-            <wwEditorInputRow label="Project name" type="query" placeholder="My new project" required
-                v-model="newProject.name" />
-            <wwEditorInputRow label="Organization" type="select" placeholder="Select an organization" required
+            <wwEditorInputRow
+                label="Project name"
+                type="query"
+                placeholder="My new project"
+                required
+                v-model="newProject.name"
+            />
+            <wwEditorInputRow
+                label="Organization"
+                type="select"
+                placeholder="Select an organization"
+                required
                 v-model="newProject.organizationId"
-                :options="organizations.map(org => ({ label: org.name, value: org.id }))" />
-            <wwEditorInputRow label="Hosting region" type="select" placeholder="us-east-1" required
-                v-model="newProject.region" :options="[
+                :options="organizations.map(org => ({ label: org.name, value: org.id }))"
+            />
+            <wwEditorInputRow
+                label="Hosting region"
+                type="select"
+                placeholder="us-east-1"
+                required
+                v-model="newProject.region"
+                :options="[
                     { label: 'us-east-1', value: 'us-east-1' },
                     { label: 'us-east-2', value: 'us-east-2' },
                     { label: 'us-west-1', value: 'us-west-1' },
@@ -89,15 +155,23 @@
                     { label: 'ca-central-1', value: 'ca-central-1' },
                     { label: 'ap-south-1', value: 'ap-south-1' },
                     { label: 'sa-east-1', value: 'sa-east-1' },
-                ]" />
+                ]"
+            />
             <wwEditorFormRow label="Database password" required>
                 <div class="flex items-center">
-                    <wwEditorInputText :type="showDbPass ? 'text' : 'password'"
+                    <wwEditorInputText
+                        :type="showDbPass ? 'text' : 'password'"
                         placeholder="Enter your database password"
-                        :style="{ '-webkit-text-security': showDbPass ? 'none' : 'disc' }" large
-                        v-model="newProject.dbPass" class="w-full" />
-                    <button type="button" class="ww-editor-button -secondary -small -icon ml-2"
-                        @click="showDbPass = !showDbPass">
+                        :style="{ '-webkit-text-security': showDbPass ? 'none' : 'disc' }"
+                        large
+                        v-model="newProject.dbPass"
+                        class="w-full"
+                    />
+                    <button
+                        type="button"
+                        class="ww-editor-button -secondary -small -icon ml-2"
+                        @click="showDbPass = !showDbPass"
+                    >
                         <wwEditorIcon :name="showDbPass ? '16/eye' : '16/eye-off'" medium />
                     </button>
                 </div>
diff --git a/src/components/Configuration/SettingsEditMultiEnv.vue b/src/components/Configuration/SettingsEditMultiEnv.vue
index 5506157..0cc244c 100644
--- a/src/components/Configuration/SettingsEditMultiEnv.vue
+++ b/src/components/Configuration/SettingsEditMultiEnv.vue
@@ -154,7 +154,7 @@
                             @update:modelValue="val => changeApiKey(val, env)"
                         />
 
-                        <wwEditorFormRow label="Service role key">
+                        <wwEditorFormRow label="Service role key" required>
                             <div class="flex items-center">
                                 <wwEditorInputText
                                     type="password"
@@ -280,7 +280,7 @@
                 @update:modelValue="val => changeApiKey(val, env)"
             />
 
-            <wwEditorFormRow label="Service role key">
+            <wwEditorFormRow label="Service role key" required>
                 <div class="flex items-center">
                     <wwEditorInputText
                         type="password"

From 817053e51aba6db64e4d6c0244452e322b76cbf1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Barfleur?=
 <39409397+kevinbarfleur@users.noreply.github.com>
Date: Thu, 12 Mar 2026 16:48:37 +0100
Subject: [PATCH 3/6] fix

---
 src/components/Configuration/SettingsEditMultiEnv.vue | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/components/Configuration/SettingsEditMultiEnv.vue b/src/components/Configuration/SettingsEditMultiEnv.vue
index 0cc244c..5506157 100644
--- a/src/components/Configuration/SettingsEditMultiEnv.vue
+++ b/src/components/Configuration/SettingsEditMultiEnv.vue
@@ -154,7 +154,7 @@
                             @update:modelValue="val => changeApiKey(val, env)"
                         />
 
-                        <wwEditorFormRow label="Service role key" required>
+                        <wwEditorFormRow label="Service role key">
                             <div class="flex items-center">
                                 <wwEditorInputText
                                     type="password"
@@ -280,7 +280,7 @@
                 @update:modelValue="val => changeApiKey(val, env)"
             />
 
-            <wwEditorFormRow label="Service role key" required>
+            <wwEditorFormRow label="Service role key">
                 <div class="flex items-center">
                     <wwEditorInputText
                         type="password"

From 332fea93a6920d69c6f6df703751466158cc360e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Barfleur?=
 <39409397+kevinbarfleur@users.noreply.github.com>
Date: Thu, 12 Mar 2026 16:50:10 +0100
Subject: [PATCH 4/6] fix: Mark Service Role Key as required in
 SettingsEditMultiEnv component

---
 src/components/Configuration/SettingsEditMultiEnv.vue | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/components/Configuration/SettingsEditMultiEnv.vue b/src/components/Configuration/SettingsEditMultiEnv.vue
index 5506157..bfd15d5 100644
--- a/src/components/Configuration/SettingsEditMultiEnv.vue
+++ b/src/components/Configuration/SettingsEditMultiEnv.vue
@@ -154,7 +154,7 @@
                             @update:modelValue="val => changeApiKey(val, env)"
                         />
 
-                        <wwEditorFormRow label="Service role key">
+                        <wwEditorFormRow label="Service role key" required>
                             <div class="flex items-center">
                                 <wwEditorInputText
                                     type="password"

From 1a5ae3dcfc115b9bf76b9677a1de894f6afdeeaa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Barfleur?=
 <39409397+kevinbarfleur@users.noreply.github.com>
Date: Thu, 12 Mar 2026 16:52:07 +0100
Subject: [PATCH 5/6] fix: Update Service Role Key requirement based on
 environment in SettingsEditMultiEnv component

---
 src/components/Configuration/SettingsEdit.vue         | 1 +
 src/components/Configuration/SettingsEditMultiEnv.vue | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/components/Configuration/SettingsEdit.vue b/src/components/Configuration/SettingsEdit.vue
index 79fbf75..052d472 100644
--- a/src/components/Configuration/SettingsEdit.vue
+++ b/src/components/Configuration/SettingsEdit.vue
@@ -60,6 +60,7 @@
             <wwEditorFormRow label="Service role key" required>
                 <div class="flex items-center">
                     <wwEditorInputText
+                        required
                         type="password"
                         placeholder="ey********"
                         large
diff --git a/src/components/Configuration/SettingsEditMultiEnv.vue b/src/components/Configuration/SettingsEditMultiEnv.vue
index bfd15d5..acd3df1 100644
--- a/src/components/Configuration/SettingsEditMultiEnv.vue
+++ b/src/components/Configuration/SettingsEditMultiEnv.vue
@@ -154,9 +154,10 @@
                             @update:modelValue="val => changeApiKey(val, env)"
                         />
 
-                        <wwEditorFormRow label="Service role key" required>
+                        <wwEditorFormRow label="Service role key" :required="env === 'production'">
                             <div class="flex items-center">
                                 <wwEditorInputText
+                                    :required="env === 'production'"
                                     type="password"
                                     placeholder="Enter your service role key"
                                     large

From 5ba3ffa3084dd2cb1db7698b0b847286c4f2c3bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?K=C3=A9vin=20Barfleur?=
 <39409397+kevinbarfleur@users.noreply.github.com>
Date: Thu, 12 Mar 2026 16:55:13 +0100
Subject: [PATCH 6/6] fix

---
 src/components/Configuration/SettingsEditMultiEnv.vue | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/components/Configuration/SettingsEditMultiEnv.vue b/src/components/Configuration/SettingsEditMultiEnv.vue
index acd3df1..828450c 100644
--- a/src/components/Configuration/SettingsEditMultiEnv.vue
+++ b/src/components/Configuration/SettingsEditMultiEnv.vue
@@ -281,9 +281,10 @@
                 @update:modelValue="val => changeApiKey(val, env)"
             />
 
-            <wwEditorFormRow label="Service role key">
+            <wwEditorFormRow label="Service role key" :required="env === 'production'">
                 <div class="flex items-center">
                     <wwEditorInputText
+                        :required="env === 'production'"
                         type="password"
                         placeholder="Enter your service role key"
                         large