Cursor code review from an independent AI swarm

IonWarp Review — PR #310

3 issues| 3 P1

1Retry charges the same order twicebilling/checkout.ts

2Failed save still returns successapi/preferences.ts

3Reopening the editor clears saved changescomponents/editor.tsx

billing/checkout.ts

42434445

−+++

await payments.charge(order);await payments.charge(order, {  idempotencyKey: order.id,});

A timed-out response can charge the order twice · Code Review

When payment succeeds but the response times out, the caller retries the same order. Both calls charge it. Pass the stable order ID as the payment idempotency key.

IonWarp Review — PR #87

3 issues| 2 P0 1 P1

1Request ID lets a member read another workspaceapi/projects/[id].ts

2Provider secret included in the public client bundleapp/config.ts

3Unsigned webhook can enqueue account actionsapi/webhooks.ts

api/projects/[id].ts

42434445

−+++

const project = await projects.get(params.id);const project = await projects.getForMember({  projectId: params.id, userId: session.user.id,});

A signed-in user can cross the workspace boundary · Security Review

The endpoint authenticates the caller but never binds the requested project to their membership. Changing the URL ID returns another workspace’s private project. Resolve membership before returning it.

IonWarp Review — PR #42

3 issues| 3 P1

1Open mobile menu is hidden from assistive technologycomponents/mobile-nav.tsx

2Pricing cards clip beyond the 375px viewportapp/pricing/page.tsx

3Sticky banner covers the checkout button on mobilecomponents/checkout.tsx

components/mobile-nav.tsx

24252627

<nav aria-hidden="true"><nav aria-hidden={!isOpen} inert={!isOpen}>  <a href="/pricing">Pricing</a></nav>

The menu opens visually, but its links remain inaccessible · UX Review

Example browser check at 375px: open the mobile menu, then navigate its links with the keyboard and accessibility tree. aria-hidden stays true while the menu is open. Match visibility and inert state to isOpen.

IonWarp Review — PR #422

3 issues| 1 P0 2 P1

1N+1 query — one round-trip per idapi/users.ts

2Serial await over independent fetchesapi/teams.ts

3Analytics emit awaited on the hot pathlib/track.ts

api/users.ts

14151617

−−−+

for (const id of ids) {  users.push(await db.user(id))}const users = await db.users({ where: { id: { in: ids } } })

N+1 query in the user listing · API Performance

One round-trip per id on a per-request path — the endpoint pays N database hops where a single WHERE IN serves. Batch it.

IonWarp Review — PR #256

1Click event missing on pricing CTApricing.tsx

2utm params dropped on signup redirectauth/signup.ts

3Page view fires twice on hash changeapp.tsx

app/pricing.tsx

88899091

<button onClick={upgrade}>Upgrade to Pro</button><button onClick={() => { track("pricing_cta_click"); upgrade(); }}>  Upgrade to Pro</button>

CTA click missing analytics event · Analytics Review

The "Upgrade to Pro" button has no event. You will lose the pricing → signup conversion signal in PostHog.

IonWarp Review — PR #189

3 issues| 2 P0 1 P1

1Public product pages inherit noindexapp/products/layout.tsx

2Removed redirect breaks indexed article URLsnext.config.ts

3Sitemap reports every article as modified todayapp/sitemap.ts

app/products/layout.tsx

1213

robots: { index: false, follow: false },robots: { index: true, follow: true },

The product catalog is telling crawlers not to index it · SEO Review

The changed public layout inherits the private dashboard’s noindex setting. Every product page now sends that directive. Restore indexing on the public layout and keep the dashboard private.

IonWarp Review — PR #480

3 issues| 3 P2

1Breaking auth signature is described as an internal refactorCHANGELOG.md

2Required data backfill has no rollout noteCHANGELOG.md

3New required signing-key variable is absent from release notesCHANGELOG.md

CHANGELOG.md

234

−++

- Refactor auth verification.- BREAKING: auth.verify() requires an algorithms array.- Migration: pass the algorithms allowed by your issuer.

Consumers need the auth migration before they upgrade · Changelog

The diff makes algorithms a required argument, while the release note calls it a refactor. Name the breaking signature and show the migration so existing callers do not fail after upgrading.

IonWarp Review — PR #402

1Rust cache swapped for sccache that never persists.github/workflows/ci.yml

2Cache key hashes lockfiles inside node_modules.github/actions/setup/action.yml

3cancel-in-progress dropped from the PR workflow.github/workflows/pr.yml

.github/workflows/ci.yml

5859

- uses: Swatinem/rust-cache@v2RUSTC_WRAPPER: sccache

Every run now rebuilds the whole dependency graph · CI/CD Performance

The rust-cache step is gone and sccache has no persisted backend on these runners, so nothing is cached between runs. Each job pays the full dependency build. Restore the cache step or give sccache a storage backend.

IonWarp Review — PR #264

3 issues| 3 P2

1Audit logs expire before the planned evidence windowdocs/plans/soc2-readiness.md

2Offboarding plan leaves access active after departuredocs/plans/soc2-readiness.md

3Access review reads a roster export no earlier phase producesdocs/plans/soc2-readiness.md

docs/plans/soc2-readiness.md

3132

Delete audit logs after 7 days.Retain audit logs for the planned 90-day evidence window.

The SOC2 readiness plan deletes its own audit evidence · Plan Review

Section 2 plans a 90-day evidence window, but section 5 deletes audit logs after 7 days, so the evidence the audit needs is gone before collection starts. Align retention with the stated evidence window.

IonWarp Review — PR #337

2 issues| 1 P1 1 P2

1A failed run consumes the day's slot again — fix #291 undonedigest/refresh.ts

2Second write door skips the veto #260 addedapi/batch.ts

digest/refresh.ts

5455

if (latest && latest.status !== "failed") return latest;if (latest) return latest; // one run per day

Brings back the failure fix #291 repaired · Repeat-Failure Learnings

#291 made a failed run release the day's slot. This gate is blind to run status again, so one failed run blocks the refresh for the rest of the day.

IonWarp Review — PR #144

3 issues| 1 P1 2 P2

1README still invokes the removed --legacy flagREADME.md

2API example reads status from a response that now returns statedocs/api.md

3Agent instructions still prescribe the deleted write helperAGENTS.md

README.md

8889

ionwarp review --legacy --pr 42ionwarp review --pr 42

The documented command now exits with an unknown-flag error · Docs Freshness

This PR removes --legacy from the command parser but keeps it in the edited README. Replace the stale invocation so a reader following the guide can still run a review.

IonWarp Review — PR #412

1Second timeout parser duplicates the platform contractlib/review-timeout.ts

2Import still points to the helper deleted by this PRlib/tasks.ts

3Retry fallback patches one caller; the shared client still drops the errorapi/teams.ts

lib/review-timeout.ts

717273

const timeoutMs = parseReviewTimeout(value);const timeoutMs = parseDurationMs(value);// shared parser owns supported units and validation

A second parser creates a second timeout contract · AI Architecture

The new review-only parser duplicates the platform duration parser but treats a bare number as seconds instead of milliseconds. Use the shared parser and delete the duplicate.

IonWarp Review — PR #213

3 issues| 1 P0 1 P1 1 P2

1D1 write failure swallowed, returns okapi/save.ts

2Liveness probe error read as "dead"cron/sweep.ts

3Timeout fires with no distinct log linelib/client.ts

api/save.ts

88899091

−+++

} catch (error) { /* swallowed */ }} catch (error) {  log.warn({ error_code: "save_write_failed", run_id, error });  throw new SaveWriteFailed(error);

Swallowed write failure returns success · Log & Errors

The catch drops a D1 write failure and returns { ok: true } — a lost write is indistinguishable from a saved one. Log it keyed and rethrow.

IonWarp Review — PR #412

1Streamed turns record zero tokenslib/ai/chat.ts

2Ledger prices the requested model, not the served onelib/ai/ledger.ts

3Cache-read tokens not carried into usage rowlib/ai/usage.ts

lib/ai/chat.ts

575859

−++

const res = await client.chat.completions.create({ model, messages });const stream = await client.chat.completions.create({ model, messages, stream: true });for await (const chunk of stream) yield chunk.choices[0]?.delta?.content ?? "";

Streaming turned usage off · Cost Review

The switch to streaming never asks for usage (`stream_options: { include_usage: true }`), so every chat turn now writes 0 tokens and $0 to the ledger the budget reads. Request usage and record the final chunk's usage with the served model.

IonWarp Review — PR #311

3 issues| 1 P0 2 P1

1Decrypted client secret returned by GETapi/sso/settings.ts

2Role grant writes no audit eventapi/admin/roles.ts

3Required e2e gate set to continue-on-error.github/workflows/ci.yml

api/admin/roles.ts

4142

await audit.record({ actor, action: "role.grant", target: userId, role });// audit handled by the new bulk path

[CC7] A role grant no longer leaves an audit record · SOC 2 Review

The single-grant path dropped its audit write, and the bulk path it points to is never called here. An admin can now grant a role with no actor, target or time on record. Restore the write on this path.