Supabase project URL (e.g. "https://<ref>.supabase.co"). Sourced from SUPABASE_URL.
Named publishable keys. Sourced from SUPABASE_PUBLISHABLE_KEYS (JSON object)
or SUPABASE_PUBLISHABLE_KEY (single key, stored as { default: "<value>" }).
Named secret keys. Sourced from SUPABASE_SECRET_KEYS (JSON object)
or SUPABASE_SECRET_KEY (single key, stored as { default: "<value>" }).
JSON Web Key Set used for JWT verification. Sourced from SUPABASE_JWKS.
Accepts both { keys: [...] } and bare [...] array formats.
null when no JWKS is configured (JWT verification will be unavailable).
Resolved Supabase environment configuration.
Holds the project URL, API keys, and JWKS needed by every other primitive. Typically resolved automatically from environment variables by resolveEnv, but can be passed explicitly via the
envoption.See
resolveEnv for how each field maps to environment variables.