Skip to content

v1.0.0

v1.0.0: MCP server release, standard/deep audit modes, grant-aware Q1
@Farenhytee Farenhytee tagged this 30 Sep 06:58 
  - Standard audit (single prompt + anon-probe verify) is the default; --deep runs the ReAct agent
  - Q1 reports anon/authenticated table access: RLS off without API grants is not EXPOSED
  - Audit prompt: grant rule for RLS_DISABLED; SECURITY INVOKER functions only have the caller's rights
  - Dev case 026 (RLS off, grants revoked; invoker vs definer RPC); R0 CI baseline for 16 dev cases
  - MCP guide: session-pooler connection steps, hosted Supabase verified, accuracy section, version pinning;
    linked at the top of the README; Cursor deeplink and plugin prompt use the pooler format
  - tests/test_modes.py; version 1.0.0 in pyproject.toml and plugin.json
Assets 2
Loading