supabase / supabase / 41911428101

87%

push

github

feat(studio): gate edge functions and vector bucket api-keys consumers on grants (#52962)

Part 2 of 6 in a stack for
[FE-4731](https://linear.app/supabase/issue/FE-4731/grants-rollout-api-keys-consumers-that-only-need-publishable-keys).
Based on #52961.

## Stack
1. #52961 Docs and project API docs consumers
2. 👉 #52962 Edge functions and vector bucket examples
3. #52963 Integrations landing data
4. #52964 Connect sheet and project connection popover; remove the
transitional api-keys hooks
5. #52965 `reveal` refinement for single api-key reads; API key pill
6. #52966 API key create and delete

## Changes
Moves more publishable-key consumers onto the plain `GET
/v1/projects/{ref}/api-keys` grant:
- `Functions/TerminalInstructions`
- `Functions/EdgeFunctionDetails`: only the `api_gateway_keys_read`
check; the `edge_functions_write` check belongs to the edge functions
rollout
- `Storage/VectorBuckets/.../VectorBucketTableExamplesSheet`: still uses
non-revealed keys. When keys can't be read, the note tells the user to
substitute their own secret key.

Each shows `ApiKeysAccessNote` when denied or errored. The old guards
matched the annotation.

## Testing
- `TerminalInstructions.platform.test.tsx`,
`EdgeFunctionDetails.platform.test.tsx`,
`VectorBucketTableExamplesSheet.platform.test.tsx`: granted, denied (no
api-keys request), and permission-check error.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

2043 of 2411 branches covered (84.74%)

Branch coverage included in aggregate %.

2839 of 3198 relevant lines covered (88.77%)

198.75 hits per line