$ the-wire · showcase
Scoped OAuth reconsent in Studio, MCP drops double cost prompts
By RepoJournal · Filed · About Supabase · Composed from the cited sources · methodology
10 people shipped this
djhi
@djhi
1 cited
fsansalvadore
@fsansalvadore
1 cited
Prashansa-K
@Prashansa-K
1 cited
avallete
@avallete
1 cited
barryroodt
@barryroodt
1 cited
supabase-evals-releaser
@supabase-evals-releaser
supabase-evals-releaser[bot]
@supabase-evals-releaser[bot]
Mert YEREKAPAN
@myerekapan
ChloeGarciaMillerand
@ChloeGarciaMillerand
github-actions[bot]
@github-actions[bot]
Studio now shows only the scope differences when an already-authorized app asks for more access, and the MCP server stops making users confirm project and branch costs twice.
feat(studio): scoped oauth apps reconsent UI supabase/supabase
When an app a user already added changes its requested scopes, Studio now defaults to showing only the scope differences rather than the full permission list, so reconsent reads as a diff of what is new. It can be exercised against the authorize flow with mock_scenario=reconsent.
fix(mcp): stop double cost confirmation on create_project and create_branch supabase/mcp
Since the earlier tool-description change told models the user must agree to cost first, form-capable clients like Claude Code asked in chat and then showed the server's cost form, for two confirmations of the same charge. Every client now gets the same description: call the tool without that pre-agreement step.
fix(cli): name the failing engine operation in stack telemetry supabase/cli
Local stack failures caused by a container engine command previously collapsed into one shared engine_command fingerprint, which recent prereleases flagged as the main cause of Docker start failures on Linux without saying which call broke. Telemetry now names the failing step: create, start, inspect, engine target lookup, remove, or wait.
chore(studio): storage versioning override conflict supabase/supabase
Uploading a file whose name already exists used to silently create an incrementally numbered copy; Studio now prompts, with Replace existing file (kept as a version) or Keep both as the two options.
chore(cli): add permission building blocks for shared API calls supabase/cli
The CLI is adding reusable permission building blocks for Management API calls made by shared modules rather than command handlers, groundwork for scoped personal access tokens that declare which permissions each command needs. Also landed: fullscreen is now the only pricing panel presentation after the pricingPanelPlanPresentation experiment concluded, with the control, parity, gaps and fullsc...
