What problem does it solve? Testing Row Level Security policies requires seeing the database exactly as a specific authenticated user does, which is difficult without logging in as that user. This Skill sets session-local JWT claims in PostgreSQL so you can run queries under any user's identity and verify RLS isolation directly. ## Core Features & Use Cases - Session Claim Injection: Sets request.jwt.claims, request.jwt.claim.sub, and role via set_config so auth.uid() returns the impersonated user. - Positive and Negative RLS Tests: Provides query patterns to confirm users can access their own data and cannot access other users' data. - Multi-Tenant and Debugging Workflows: Supports org_id claims for org-based isolation and troubleshooting steps for NULL auth.uid(), missing policies, and service-role bypass issues. - Use Case: After creating a new RLS policy on a fragments table, impersonate user A to confirm they see only their rows, then impersonate user B to verify tenant isolation before deploying the migration. ## Quick Start Ask the agent to impersonate a specific user ID so you can run test queries against your Supabase database and verify the RLS policies behave correctly.
