Supabase AI Agent Grants Prompt Pack

Generate copy-paste instructions and a CI guard for Lovable, Cursor, Claude Code, Codex, Bolt, v0, and other AI builders before the May 30, 2026 Supabase Data API grants default breaks generated migrations.

Generate prompt pack Run grants checker

Build the guard

App context Redacted tables or flows Symptoms or deadline pressure

Agent promptFor Lovable/Cursor/Codex task setup. CI guardFor a GitHub Actions smoke check. Review packetFor a redacted second pass.

Explicit grants beside generated tables. RLS and negative-test matrix. Local replay evidence. RPC/function/view reachability. Storage upsert and path policy evidence. Broad-grant rollback label.

Use only redacted notes. Do not paste service-role values, connection strings, customer rows, private screenshots, account records, payment data, cookies, credentials, or private handles.

Ready.

Generated output

Next step

Run the free grants checker or grant migration builder with the generated output. If the packet still shows missing grants, broad fixes, untested replay, or unclear Storage/RPC reachability, use the fixed-scope report for one redacted Supabase packet.

Open grants checker Open grant builder Scoped checkout

Source-backed problem set

Supabase grants rolloutExplicit grants become required for new public-schema Data API reachability. Database API 42501 docsGrant errors are separate from RLS policy behavior. Storage access controlObject policies decide upload, upsert, list, download, and delete paths. Lovable backend ownershipConfirm which system owns the production data layer before changing migrations.