Principal Engineer Code Reviewer

Run the review against your diff to check pinned @supabase/supabase-js versions, CORS headers, auth validation, and smoke test presence. The supabase-rls-checker.py script validates that SQL migrations enable Row Level Security on all new tables.

Run scripts/cyclomatic-complexity.py with a file path to get McCabe complexity scores per function as JSON. Functions scoring above 10 are flagged as high risk and candidates for refactoring.

Findings use four levels: P0 for critical issues like security breaches or data loss, P1 for broken functionality or performance regressions, P2 for technical debt, and P3 for style or documentation issues.

Yes, the dependency-risk.py script runs npm audit and parses vulnerability results with severity ratings. It also detects version mismatches of @supabase/supabase-js across edge functions, which is treated as a P0 blocker.

The checker fails when a CREATE TABLE statement lacks a matching ALTER TABLE ... ENABLE ROW LEVEL SECURITY statement or has no CREATE POLICY definitions. Add both RLS enablement and at least one access policy per table.

Autofix diffs are capped at 50 lines; larger fixes are described as manual steps instead. The review is non-destructive and read-only, so it cannot execute tests or apply fixes directly without user approval.