fix(supabase): tri-state bucket visibility on update, empty-string param coercion, introspect schema header

- introspect.ts now sends Accept-Profile when a schema param is given,
  matching the convention used by the other DB tools, so schema-scoped
  introspection actually reads from that schema's spec
- storage_update_bucket.ts treats an empty-string param the same as
  "not provided" (e.g. an untouched file size limit input no longer
  coerces to 0)
- the shared "Public Bucket" dropdown always sent an explicit true/false
  for storage_update_bucket (its default masked "not touched"), which
  could still flip a public bucket private; added a dedicated
  "Keep Current / True / False" control for the update operation so
  omitting a choice genuinely omits the isPublic override

Author: waleedlatif1

apps/sim/blocks/blocks/supabase.ts

@@ -923,7 +923,19 @@ Return ONLY the PostgREST filter expression - no explanations, no markdown, no e
         { label: 'True (Public)', id: 'true' },
       ],
       value: () => 'false',
-      condition: { field: 'operation', value: ['storage_create_bucket', 'storage_update_bucket'] },
+      condition: { field: 'operation', value: 'storage_create_bucket' },
+    },
+    {
+      id: 'updateIsPublic',
+      title: 'Public Bucket',
+      type: 'dropdown',
+      options: [
+        { label: 'Keep Current', id: '' },
+        { label: 'False (Private)', id: 'false' },
+        { label: 'True (Public)', id: 'true' },
+      ],
+      value: () => '',
+      condition: { field: 'operation', value: 'storage_update_bucket' },
     },
     {
       id: 'fileSizeLimit',
@@ -1065,6 +1077,7 @@ Return ONLY the PostgREST filter expression - no explanations, no markdown, no e
           functionBody,
           functionHeaders,
           method,
+          updateIsPublic,
           ...rest
         } = params
 
@@ -1237,6 +1250,16 @@ Return ONLY the PostgREST filter expression - no explanations, no markdown, no e
           result.isPublic = parsedIsPublic
         }
 
+        // "Keep Current" (empty string) means the caller didn't choose to
+        // override visibility — omit `isPublic` entirely so the update
+        // tool preserves the bucket's existing public/private setting
+        // instead of defaulting to false.
+        if (operation === 'storage_update_bucket' && updateIsPublic !== undefined) {
+          if (updateIsPublic === 'true' || updateIsPublic === 'false') {
+            result.isPublic = updateIsPublic === 'true'
+          }
+        }
+
         if (normalizedFileData !== undefined) {
           result.fileData = normalizedFileData
         }
@@ -1291,6 +1314,11 @@ Return ONLY the PostgREST filter expression - no explanations, no markdown, no e
     search: { type: 'string', description: 'Search term for filtering' },
     expiresIn: { type: 'number', description: 'Expiration time in seconds for signed URL' },
     isPublic: { type: 'boolean', description: 'Whether bucket should be public' },
+    updateIsPublic: {
+      type: 'string',
+      description:
+        'Visibility override for bucket update: "" keeps the current value, "true"/"false" overrides it',
+    },
     fileSizeLimit: { type: 'number', description: 'Maximum file size in bytes' },
     allowedMimeTypes: { type: 'array', description: 'Array of allowed MIME types' },
   },

apps/sim/tools/supabase/introspect.ts

@@ -57,6 +57,7 @@ export const introspectTool: ToolConfig<SupabaseIntrospectParams, SupabaseIntros
       apikey: params.apiKey,
       Authorization: `Bearer ${params.apiKey}`,
       Accept: 'application/openapi+json',
+      ...(params.schema ? { 'Accept-Profile': params.schema } : {}),
     }),
   },
 

apps/sim/tools/supabase/storage_update_bucket.ts

@@ -107,18 +107,23 @@ export const storageUpdateBucketTool: ToolConfig<
 
       const current = await currentResponse.json()
 
+      // Block subBlocks for a shared field can forward an empty string
+      // (e.g. an untouched short-input) rather than omitting the key
+      // entirely — treat that the same as "not provided" so it falls
+      // back to the bucket's current value instead of coercing to 0/false.
+      const hasValue = (value: unknown): boolean =>
+        value !== undefined && value !== null && value !== ''
+
       const payload: any = {
         id: params.bucket,
         name: params.bucket,
-        public: params.isPublic !== undefined ? params.isPublic : Boolean(current.public),
-        file_size_limit:
-          params.fileSizeLimit !== undefined
-            ? Number(params.fileSizeLimit)
-            : (current.file_size_limit ?? null),
-        allowed_mime_types:
-          params.allowedMimeTypes !== undefined
-            ? params.allowedMimeTypes
-            : (current.allowed_mime_types ?? null),
+        public: hasValue(params.isPublic) ? params.isPublic : Boolean(current.public),
+        file_size_limit: hasValue(params.fileSizeLimit)
+          ? Number(params.fileSizeLimit)
+          : (current.file_size_limit ?? null),
+        allowed_mime_types: hasValue(params.allowedMimeTypes)
+          ? params.allowedMimeTypes
+          : (current.allowed_mime_types ?? null),
       }
 
       const updateResponse = await fetch(`${baseUrl}/storage/v1/bucket/${bucket}`, {