Evidence row 772128

What was observed

{
  "count": 5,
  "tools": [
    {
      "description": "Review Supabase migration changes for missing RLS or policies, unrestricted read/write policies, exposed security definer functions and Data API grant gaps. Pass file contents: sql contains one migration's SQL text; files contains path and content for each file. Runs the VibeRaven 1.6.12 SQL rules and returns finding id, severity, file, line, a suggested fix and a guide link. For missing Data API grants, include the migration revoking default privileges or supabase/config.toml, plus browser files using supabase.from(...) (a \"use client\" file, or src files with package.json for Vite).\nLimits: supplied text only, up to 200 KB/50 files; cannot access your repository or database, does not execute SQL, and does not store or log file contents.",
      "inputSchema": {
        "additionalProperties": false,
        "oneOf": [
          {
            "required": [
              "sql"
            ]
          },
          {
            "required": [
              "files"
            ]
          }
        ],
        "properties": {
          "files": {
            "description": "Several files: .sql migrations, and optionally supabase/config.toml, package.json and browser code files.",
            "items": {
              "additionalProperties": false,
              "properties": {
                "content": {
                  "description": "The full text of the file.",
                  "type": "string"
                },
                "path": {
                  "description": "The file path in the repo, for example supabase/migrations/20260101000000_init.sql. Migrations run in file name order.",
                  "maxLength": 300,
                  "minLength": 1,
                  "type": "string"
                }
              },
              "required": [
                "path",
                "content"
              ],
              "type": "object"
            },
            "maxItems": 50,
            "minItems": 1,
            "type": "array"
          },
          "sql": {
            "description": "The SQL text of one migration file.",
            "minLength": 1,
            "type": "string"
          }
        },
        "type": "object"
      },
      "name": "check_supabase_migrations"
    },
    {
      "description": "Understand and fix a finding from a VibeRaven 1.6.12 report, such as rls_disabled or env_var_drift. Returns detection scope, impact, fix guidance and coverage limits quoted from viberaven.dev with source links. Known ids: rls_disabled, rls_no_policies, rls_policy_allows_all_read, rls_policy_allows_all_write, security_definer_function_executable, pooler_port_mismatch, service_role_key_in_client_code, env_var_drift. Unknown ids return found: false and known ids.\nLimits: explains published rules only; does not read your repo, database or Vercel project.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "gap_id": {
            "description": "The finding id as printed by VibeRaven, for example rls_disabled.",
            "maxLength": 100,
            "minLength": 1,
            "type": "string"
          }
        },
        "required": [
          "gap_id"
        ],
        "type": "object"
      },
      "name": "explain_finding"
    },
    {
      "description": "Prepare a Lovable + Supabase app or a Next.js + Supabase app on Vercel for launch. Returns a published manual checklist with sources and an optional local repo check (`npx -y viberaven@1.6.12 check`).\nLimits: checklist guidance only; does not run checks or verify dashboards, code or launch readiness.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "stack": {
            "description": "lovable-supabase for a Lovable app with Supabase, nextjs-supabase-vercel for a Next.js app with Supabase deployed on Vercel.",
            "enum": [
              "lovable-supabase",
              "nextjs-supabase-vercel"
            ],
            "type": "string"
          }
        },
        "required": [
          "stack"
        ],
        "type": "object"
      },
      "name": "launch_checklist"
    },
    {
      "description": "Plan setup and integration before implementing a feature that touches a provider. Returns versioned setup guidance, gotchas, dated changes, integration seams, existing repo checks and planned live checks with official sources. Available packs: supabase.\nLimits: guidance only; does not connect to providers, read your project, run checks or verify that a feature works.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "provider": {
            "description": "Provider id, for example supabase. Unsupported ids return the available packs.",
            "maxLength": 40,
            "minLength": 1,
            "pattern": "^[a-z][a-z0-9-]*$",
            "type": "string"
          }
        },
        "required": [
          "provider"
        ],
        "type": "object"
      },
      "name": "provider_playbook"
    },
    {
      "description": "Find troubleshooting steps for Supabase RLS, Realtime and auth callbacks, Vercel environment variables and deployment errors, or Stripe webhooks after deploy. Search published viberaven.dev guides by keyword; returns up to 5 titles, URLs and short answers. Also covers Lovable + Supabase launch checks and client handoff. No match returns an empty list.\nLimits: searches the indexed published guides only; does not browse the web or read your project.",
      "inputSchema": {
        "additionalProperties": false,
        "properties": {
          "query": {
            "description": "A few keywords from the question, for example \"supabase tables missing rls\".",
            "maxLength": 200,
            "minLength": 1,
            "type": "string"
          }
        },
        "required": [
          "query"
        ],
        "type": "object"
      },
      "name": "search_guides"
    }
  ]
}

What the leaf hashes

{"body":"fc77b8590e6f645e4aaf03eff0bbd9b35b971ce1266015e47ba0fdf0ac339c6e","id":772128,"kind":"mcp.tools","method":"probe.mcp/1","observed_us":1793192873965996,"prev":265091,"subject":"21966bf7-635e-427a-9bc0-af25858c8736","subject_kind":"endpoint"}

Proof

Its day has not closed yet. A day closes ten minutes after midnight UTC; the proof appears here then.