The GitHub AI Reviewer fighting AI Architecture

IonWarp Review — PR #310

3 issues| 3 P1

1Retry charges the same order twicebilling/checkout.ts

2Failed save still returns successapi/preferences.ts

3Reopening the editor clears saved changescomponents/editor.tsx

billing/checkout.ts

42434445

−+++

await payments.charge(order);await payments.charge(order, {  idempotencyKey: order.id,});

A timed-out response can charge the order twice · Code Review

When payment succeeds but the response times out, the caller retries the same order. Both calls charge it. Pass the stable order ID as the payment idempotency key.

IonWarp Review — PR #87

3 issues| 2 P0 1 P1

1Request ID lets a member read another workspaceapi/projects/[id].ts

2Provider secret included in the public client bundleapp/config.ts

3Unsigned webhook can enqueue account actionsapi/webhooks.ts

api/projects/[id].ts

42434445

−+++

const project = await projects.get(params.id);const project = await projects.getForMember({  projectId: params.id, userId: session.user.id,});

A signed-in user can cross the workspace boundary · Security Review

The endpoint authenticates the caller but never binds the requested project to their membership. Changing the URL ID returns another workspace’s private project. Resolve membership before returning it.

IonWarp Review — PR #42

3 issues| 3 P1

1Open mobile menu is hidden from assistive technologycomponents/mobile-nav.tsx

2Pricing cards clip beyond the 375px viewportapp/pricing/page.tsx

3Sticky banner covers the checkout button on mobilecomponents/checkout.tsx

components/mobile-nav.tsx

24252627

<nav aria-hidden="true"><nav aria-hidden={!isOpen} inert={!isOpen}>  <a href="/pricing">Pricing</a></nav>

The menu opens visually, but its links remain inaccessible · UX Review

Example browser check at 375px: open the mobile menu, then navigate its links with the keyboard and accessibility tree. aria-hidden stays true while the menu is open. Match visibility and inert state to isOpen.

IonWarp Review — PR #422

3 issues| 1 P0 2 P1

1N+1 query — one round-trip per idapi/users.ts

2Serial await over independent fetchesapi/teams.ts

3Analytics emit awaited on the hot pathlib/track.ts

api/users.ts

14151617

−−−+

for (const id of ids) {  users.push(await db.user(id))}const users = await db.users({ where: { id: { in: ids } } })

N+1 query in the user listing · API Performance

One round-trip per id on a per-request path — the endpoint pays N database hops where a single WHERE IN serves. Batch it.

IonWarp Review — PR #256

3 issues| 2 P1 1 P2

1Click event missing on pricing CTApricing.tsx

2utm params dropped on signup redirectauth/signup.ts

3Page view fires twice on hash changeapp.tsx

app/pricing.tsx

88899091

<button onClick={upgrade}>Upgrade to Pro</button><button onClick={() => { track("pricing_cta_click"); upgrade(); }}>  Upgrade to Pro</button>

CTA click missing analytics event · Analytics Review

The "Upgrade to Pro" button has no event. You will lose the pricing → signup conversion signal in PostHog.

IonWarp Review — PR #189

3 issues| 2 P0 1 P1

1Public product pages inherit noindexapp/products/layout.tsx

2Removed redirect breaks indexed article URLsnext.config.ts

3Sitemap reports every article as modified todayapp/sitemap.ts

app/products/layout.tsx

1213

robots: { index: false, follow: false },robots: { index: true, follow: true },

The product catalog is telling crawlers not to index it · SEO Review

The changed public layout inherits the private dashboard’s noindex setting. Every product page now sends that directive. Restore indexing on the public layout and keep the dashboard private.

IonWarp Review — PR #480

3 issues| 3 P2

1Breaking auth signature is described as an internal refactorCHANGELOG.md

2Required data backfill has no rollout noteCHANGELOG.md

3New required signing-key variable is absent from release notesCHANGELOG.md

CHANGELOG.md

234

- Refactor auth verification.- BREAKING: auth.verify() requires an algorithms array.- Migration: pass the algorithms allowed by your issuer.

Consumers need the auth migration before they upgrade · Changelog

The diff makes algorithms a required argument, while the release note calls it a refactor. Name the breaking signature and show the migration so existing callers do not fail after upgrading.

IonWarp Review — PR #528

2 issues| 2 P1

1Token scope check removed inside generated churnapi/export.ts

2Billing migration drops the price column still read at checkoutdb/migrations/0042.sql

api/export.ts

181920

return exportProject(projectId);await assertTokenProjectScope(token, projectId);return exportProject(projectId);

A one-line authorization regression is buried in lockfile churn · PR Metrics

The PR is described as a dependency update, but api/export.ts also removes the token’s project-scope check. A project-scoped token can now request another project’s export. Review this changed line first.

IonWarp Review — PR #264

3 issues| 3 P2

1Audit logs expire before the planned evidence windowdocs/plans/soc2-readiness.md

2Offboarding plan leaves access active after departuredocs/plans/soc2-readiness.md

3Privileged access review has no owner or evidence stepdocs/plans/soc2-readiness.md

docs/plans/soc2-readiness.md

313233

Delete audit logs after 7 days.Retain audit logs for the planned 90-day evidence window.Owner: Security. Verify retention before collection starts.

The SOC2 readiness plan deletes its own audit evidence · Plan Review

Section 2 plans a 90-day evidence window, but section 5 deletes audit logs after 7 days. Align retention with the team's stated evidence window and assign an owner to verify it before collection starts.

IonWarp Review — PR #337

3 issues| 2 P1 1 P2

1Bare catch reintroduced — 4th recurrencesync/worker.ts

2Fix shipped as opt-in flag on stored statelib/rollout.ts

3Per-instance patch; sibling sites keep the bugqueue/drain.ts

sync/worker.ts

545556

try { await push(row); } catch (error) { /* dropped */ }try { await push(row); } catch (error) {  throw new PushFailed(row.id, error); // learning: swallowed-sync-error

Reintroduced a learning the team fixed three times · Repeat-Failure Learnings

This exact swallowed-sync-error shape was re-patched in #212, #260 and #291. The cached learning says: rethrow named, never drop.

IonWarp Review — PR #144

3 issues| 1 P1 2 P2

1README still invokes the removed --legacy flagREADME.md

2API example reads status from a response that now returns statedocs/api.md

3Agent instructions still prescribe the deleted write helperAGENTS.md

README.md

8889

ionwarp review --legacy --pr 42ionwarp review --pr 42

The documented command now exits with an unknown-flag error · Docs Freshness

This PR removes --legacy from the command parser but keeps it in the edited README. Replace the stale invocation so a reader following the guide can still run a review.

IonWarp Review — PR #412

3 issues| 2 P1 1 P2

1Second timeout parser duplicates the platform contractlib/review-timeout.ts

2Import still points to the helper deleted by this PRlib/tasks.ts

3Narration comments restate the next statementapi/teams.ts

lib/review-timeout.ts

717273

const timeoutMs = parseReviewTimeout(value);const timeoutMs = parseDurationMs(value);// shared parser owns supported units and validation

A second parser creates a second timeout contract · AI Architecture

The new review-only parser duplicates the platform duration parser but treats a bare number as seconds instead of milliseconds. Use the shared parser and delete the duplicate.

IonWarp Review — PR #213

3 issues| 1 P0 1 P1 1 P2

1D1 write failure swallowed, returns okapi/save.ts

2Liveness probe error read as "dead"cron/sweep.ts

3Timeout fires with no distinct log linelib/client.ts

api/save.ts

88899091

−+++

} catch (error) { /* swallowed */ }} catch (error) {  log.warn({ error_code: "save_write_failed", run_id, error });  throw new SaveWriteFailed(error);

Swallowed write failure returns success · Log & Errors

The catch drops a D1 write failure and returns { ok: true } — a lost write is indistinguishable from a saved one. Log it keyed and rethrow.