第十三章：一个最小完整示例 —— 开一座“项目协作码头”

create table public.projects (
  id uuid primary key default gen_random_uuid(),
  owner_id uuid not null references auth.users(id) on delete cascade,
  name text not null,
  status text not null default 'draft',
  created_at timestamptz not null default now()
);

alter table public.projects enable row level security;

create policy "Own projects only"
on public.projects
for all
to authenticated
using ((select auth.uid()) = owner_id)
with check ((select auth.uid()) = owner_id);

import { createClient } from "@supabase/supabase-js";

const supabase = createClient(
  process.env.NEXT_PUBLIC_SUPABASE_URL!,
  process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!
);

export async function createProject(name: string, ownerId: string) {
  const { data, error } = await supabase
    .from("projects")
    .insert({ name, owner_id: ownerId })
    .select()
    .single();

  if (error) throw error;
  return data;
}

export async function listProjects() {
  const { data, error } = await supabase
    .from("projects")
    .select("*")
    .order("created_at", { ascending: false });

  if (error) throw error;
  return data;
}

export function watchProjects() {
  return supabase
    .channel("projects-room")
    .on(
      "postgres_changes",
      { event: "*", schema: "public", table: "projects" },
      (payload) => console.log("变化:", payload)
    )
    .subscribe();
}

export async function uploadProjectFile(file: File, userId: string) {
  const path = `${userId}/${Date.now()}-${file.name}`;
  const { data, error } = await supabase.storage
    .from("project-files")
    .upload(path, file);

  if (error) throw error;
  return data?.path;
}

用户通过海关登录
   ↓
前端通过标准码头口读写 projects
   ↓
RLS 只放行自己的货物
   ↓
大文件进港口仓库
   ↓
表变更通过航运广播推送
   ↓
特殊调度逻辑走 Edge Functions