export const fixRls = {
    name: "fix-rls",
    description: "Supabase RLS policy audit and generation — ensures every table has proper row-level security",
    content: `Audit and fix Row Level Security policies for every Supabase table.

1. Discover all tables: check supabase/migrations/, seed files, and codebase for supabase.from('table_name') calls.
2. Check existing policies in migrations for CREATE POLICY or ENABLE ROW LEVEL SECURITY.
3. For each table, determine access pattern from codebase usage: who reads, who writes, ownership column.
4. Generate migration files in supabase/migrations/ for:
   - ALTER TABLE ENABLE ROW LEVEL SECURITY on any table missing it
   - SELECT, INSERT, UPDATE, DELETE policies matching the access pattern
5. Flag any service-role key usage from client side (critical security issue).
6. Save migration as supabase/migrations/[timestamp]_rls_hardening.sql
7. Generate RLS-REPORT.md listing every table, its policies, and gaps.
8. Git commit: "security: add RLS policies to all tables"`
};
//# sourceMappingURL=fix-rls.js.map