dvcrn Supabase Gen
Row-level security is a pain to write. This tool reads your Prisma schema and generates proper RLS policies for Supabase. You get secure defaults that actually make sense for your data model.
One command. Zero config. Just works.
Quick Start
npx ai-supabase-gen prisma/schema.prisma
What It Does
- Reads your Prisma schema and understands the data model
- Generates RLS policies for SELECT, INSERT, UPDATE, DELETE
- Creates auth.uid() checks for user-owned resources
- Handles multi-tenant patterns with organization scoping
- Outputs SQL ready to run in Supabase SQL editor
Usage Examples
# Generate RLS from your schema
npx ai-supabase-gen prisma/schema.prisma
# Save to migration file
npx ai-supabase-gen prisma/schema.prisma > supabase/migrations/001_rls.sql
# Specify output format
npx ai-supabase-gen prisma/schema.prisma --format sql
Best Practices
- Review every policy - AI gets close but you know your access patterns best
- Test with different users - RLS bugs are sneaky. Test reads and writes as different roles.
- Start restrictive - Better to block legitimate access than leak data. Loosen later.
- Use service role sparingly - Service role bypasses RLS. That's powerful and dangerous.
When to Use This
- Setting up a new Supabase project with existing Prisma schema
- Adding RLS to tables that currently have none
- Auditing your security and want a fresh set of policies to compare
- Learning RLS patterns and want to see how they should look
Part of the LXGIC Dev Toolkit
This is one of 110+ free developer tools built by LXGIC Studios. No paywalls, no sign-ups, no API keys on free tiers. Just tools that work.
Find more:
- GitHub: https://github.com/LXGIC-Studios
- Twitter: https://x.com/lxgicstudios
- Substack: https://lxgicstudios.substack.com
- Website: https://lxgic.dev
Requirements
No install needed. Just run with npx. Node.js 18+ recommended. Requires OPENAI_API_KEY environment variable.
export OPENAI_API_KEY=sk-...
npx ai-supabase-gen --help
How It Works
Parses your Prisma schema to understand models, relations, and field types. Then generates appropriate RLS policies based on common patterns like user ownership, org membership, and public/private access. Uses GPT to handle edge cases intelligently.
License
MIT. Free forever. Use it however you want.