feat: advisor unit tests

Author: gregnr

packages/mcp-server-supabase/src/server.test.ts

@@ -993,6 +993,60 @@ describe('tools', () => {
     }
   });
 
+  test('get security advisors', async () => {
+    const { callTool } = await setup();
+
+    const org = await createOrganization({
+      name: 'My Org',
+      plan: 'free',
+      allowed_release_channels: ['ga'],
+    });
+
+    const project = await createProject({
+      name: 'Project 1',
+      region: 'us-east-1',
+      organization_id: org.id,
+    });
+    project.status = 'ACTIVE_HEALTHY';
+
+    const result = await callTool({
+      name: 'get_advisors',
+      arguments: {
+        project_id: project.id,
+        type: 'security',
+      },
+    });
+
+    expect(result).toEqual({ lints: [] });
+  });
+
+  test('get performance advisors', async () => {
+    const { callTool } = await setup();
+
+    const org = await createOrganization({
+      name: 'My Org',
+      plan: 'free',
+      allowed_release_channels: ['ga'],
+    });
+
+    const project = await createProject({
+      name: 'Project 1',
+      region: 'us-east-1',
+      organization_id: org.id,
+    });
+    project.status = 'ACTIVE_HEALTHY';
+
+    const result = await callTool({
+      name: 'get_advisors',
+      arguments: {
+        project_id: project.id,
+        type: 'performance',
+      },
+    });
+
+    expect(result).toEqual({ lints: [] });
+  });
+
   test('get logs for invalid service type', async () => {
     const { callTool } = await setup();
 

packages/mcp-server-supabase/src/tools/debugging-tools.ts

@@ -50,7 +50,7 @@ export function getDebuggingTools({
     }),
     get_advisors: injectableTool({
       description:
-        "Gets a list of advisory notices for the Supabase project. Use this to check for security vulnerabilities or performance improvements. It's recommended to run this tool regularly, especially after making DDL changes to the database since it will catch things like missing RLS policies.",
+        "Gets a list of advisory notices for the Supabase project. Use this to check for security vulnerabilities or performance improvements. Include the remediation URL as a clickable link so that the user can reference the issue themselves. It's recommended to run this tool regularly, especially after making DDL changes to the database since it will catch things like missing RLS policies.",
       parameters: z.object({
         project_id: z.string(),
         type: z

packages/mcp-server-supabase/test/mocks.ts

@@ -417,7 +417,7 @@ export const mockManagementApi = [
    */
   http.get<{ projectId: string }, { sql: string }>(
     `${API_URL}/v1/projects/:projectId/analytics/endpoints/logs.all`,
-    async ({ params, request }) => {
+    async ({ params }) => {
       const project = mockProjects.get(params.projectId);
       if (!project) {
         return HttpResponse.json(
@@ -430,6 +430,46 @@ export const mockManagementApi = [
     }
   ),
 
+  /**
+   * Get security advisors for a project
+   */
+  http.get<{ projectId: string }, { sql: string }>(
+    `${API_URL}/v1/projects/:projectId/advisors/security`,
+    async ({ params }) => {
+      const project = mockProjects.get(params.projectId);
+      if (!project) {
+        return HttpResponse.json(
+          { message: 'Project not found' },
+          { status: 404 }
+        );
+      }
+
+      return HttpResponse.json({
+        lints: [],
+      });
+    }
+  ),
+
+  /**
+   * Get performance advisors for a project
+   */
+  http.get<{ projectId: string }, { sql: string }>(
+    `${API_URL}/v1/projects/:projectId/advisors/performance`,
+    async ({ params }) => {
+      const project = mockProjects.get(params.projectId);
+      if (!project) {
+        return HttpResponse.json(
+          { message: 'Project not found' },
+          { status: 404 }
+        );
+      }
+
+      return HttpResponse.json({
+        lints: [],
+      });
+    }
+  ),
+
   /**
    * Create a new branch for a project
    */