Supabase Configuration

# Required secrets
supabase secrets set SUPABASE_URL=https://your-project.supabase.co
supabase secrets set SUPABASE_SERVICE_ROLE_KEY=your_service_role_key
supabase secrets set VAPID_PUBLIC_KEY=BG7x...
supabase secrets set VAPID_PRIVATE_KEY=abc123...

# Optional secrets
supabase secrets set VAPID_SUBJECT=mailto:your-email@domain.com
supabase secrets set PUSH_OUTBOX_CRON_SECRET=random_secret_string
supabase secrets set PUSH_OUTBOX_MAX_ATTEMPTS=5
supabase secrets set PUSH_OUTBOX_BACKOFF_BASE_SECONDS=60
supabase secrets set PUSH_OUTBOX_BACKOFF_MAX_SECONDS=3600
supabase secrets set PUSH_OUTBOX_PROCESSING_LEASE_SECONDS=300
supabase secrets set PUSH_OUTBOX_MAX_PARALLEL_SENDS=10

cd supabase/functions
supabase functions deploy send-push-from-outbox --project-ref <project-ref>

supabase functions list

┌─────────────────────────┬────────┬─────────────┐
│ NAME                    │ STATUS │ UPDATED AT  │
├─────────────────────────┼────────┼─────────────┤
│ send-push-from-outbox   │ ACTIVE │ 2 mins ago  │
└─────────────────────────┴────────┴─────────────┘

ALTER DATABASE postgres
SET app.settings.push_outbox_worker_url = 'https://<project-ref>.functions.supabase.co/send-push-from-outbox';

ALTER DATABASE postgres
SET app.settings.push_outbox_service_jwt = '<SUPABASE_SERVICE_ROLE_KEY>';

ALTER DATABASE postgres
SET app.settings.push_outbox_cron_secret = '<PUSH_OUTBOX_CRON_SECRET>';

-- Example policy from 14_storage.sql
CREATE POLICY "Users can upload to ticket-attachments"
ON storage.objects FOR INSERT
TO authenticated
WITH CHECK (bucket_id = 'ticket-attachments');

CREATE POLICY "Users can view ticket-attachments"
ON storage.objects FOR SELECT
TO authenticated
USING (bucket_id = 'ticket-attachments');

import { supabase } from './supabaseClient'

const channel = supabase
  .channel('notifications')
  .on(
    'postgres_changes',
    {
      event: 'INSERT',
      schema: 'public',
      table: 'notification_deliveries',
      filter: `user_id=eq.${userId}`
    },
    (payload) => {
      console.log('New notification:', payload.new)
    }
  )
  .subscribe()

https://your-domain.com
https://www.your-domain.com

SUPABASE_URL=https://your-project.supabase.co \
SUPABASE_SERVICE_ROLE_KEY=your_service_role_key \
TEST_RECIPIENT_USER_ID=user_uuid \
TEST_ACTOR_USER_ID=actor_uuid \
node scripts/notifications-smoke.mjs

-- View outbox status distribution
SELECT status, COUNT(*) as count
FROM public.notification_outbox
GROUP BY status
ORDER BY status;

-- Check for stuck messages
SELECT id, status, attempts, last_error, created_at, next_attempt_at, sent_at
FROM public.notification_outbox
WHERE status IN ('pending', 'processing', 'failed')
ORDER BY created_at DESC
LIMIT 20;

-- Check auth function privileges
SELECT
  has_function_privilege('authenticated', 'public.create_notification_event(text,uuid,text,text,jsonb,uuid[],integer)', 'EXECUTE') 
    AS auth_can_create_event,
  has_function_privilege('service_role', 'public.create_notification_event(text,uuid,text,text,jsonb,uuid[],integer)', 'EXECUTE') 
    AS service_can_create_event;

-- Outbox health (last hour)
SELECT 
  status,
  COUNT(*) as count,
  MIN(created_at) as oldest,
  MAX(created_at) as newest,
  AVG(attempts) as avg_attempts
FROM public.notification_outbox
WHERE created_at > NOW() - INTERVAL '1 hour'
GROUP BY status;

-- Failed notifications requiring attention
SELECT id, attempts, last_error, created_at, next_attempt_at
FROM public.notification_outbox
WHERE status = 'failed'
  AND attempts >= 5
ORDER BY created_at DESC
LIMIT 50;

# Check function logs
supabase functions logs send-push-from-outbox --project-ref <ref>

# Verify secrets are set
supabase secrets list --project-ref <ref>

# Redeploy
supabase functions deploy send-push-from-outbox --project-ref <ref> --no-verify-jwt