ag-referencia-supabase

Skill: Supabase Patterns

Referencia de patterns para Supabase, PostgreSQL, RLS, e integracao com TypeScript.

Quando Ativar

• Trabalhando com banco de dados Supabase
• Criando migrations
• Configurando RLS
• Definindo schemas com Zod

Zod Schema Pattern

import { z } from 'zod';

export const userSchema = z.object({
  id: z.string().uuid(),
  email: z.string().email(),
  name: z.string().min(1).max(255),
  role: z.enum(['superadmin', 'core_team', 'external_agent', 'client']),
  created_at: z.string().datetime(),
  updated_at: z.string().datetime(),
});

export type User = z.infer<typeof userSchema>;

export const createUserSchema = userSchema.omit({
  id: true, created_at: true, updated_at: true,
});
export type CreateUser = z.infer<typeof createUserSchema>;

export const updateUserSchema = createUserSchema.partial();
export type UpdateUser = z.infer<typeof updateUserSchema>;

Repository Pattern

export const userRepository = {
  async findById(id: string): Promise<User | null> {
    const { data, error } = await supabase
      .from('users').select('*').eq('id', id).single();
    if (error) throw error;
    return data ? userSchema.parse(data) : null;
  },

  async create(input: CreateUser): Promise<User> {
    const { data, error } = await supabase
      .from('users').insert(input).select().single();
    if (error) throw error;
    return userSchema.parse(data);
  },
};

RLS (Row Level Security)

Patterns Comuns

-- Usuario ve apenas seus dados
CREATE POLICY "users_own_data" ON public.users
  FOR ALL USING (auth.uid() = id);

-- Todos leem, apenas dono edita
CREATE POLICY "posts_read_all" ON public.posts
  FOR SELECT USING (true);
CREATE POLICY "posts_write_own" ON public.posts
  FOR INSERT WITH CHECK (auth.uid() = author_id);

-- Baseado em role
CREATE POLICY "admin_full_access" ON public.users
  FOR ALL USING (
    EXISTS (SELECT 1 FROM public.users WHERE id = auth.uid() AND role = 'superadmin')
  );

-- Baseado em organizacao
CREATE POLICY "org_members_only" ON public.projects
  FOR SELECT USING (
    org_id IN (SELECT org_id FROM public.org_members WHERE user_id = auth.uid())
  );