Building Orbelith

Row-level update policy

create policy "tasks_update" on public.tasks for update
  using (
    organization_id = public.my_org_id()
    and (brand_id is null
      or brand_id in (select public.my_brand_ids()))
    and deleted_at is null
    and public.can_manage('tasks')
  )
  with check (
    organization_id = public.my_org_id()
    and public.can_manage('tasks')
  );

Organization-scoped machine route

const auth = await authApiKey(req)
if (!auth) return unauthorized()
if (!(await apiRateAllowed(auth))) return tooManyRequests()

const { data: brand } = await auth.supabase
  .from('brands')
  .select('id')
  .eq('id', body.brand_id)
  .eq('organization_id', auth.orgId)
  .maybeSingle()

const row = {
  organization_id: auth.orgId,
  title: body.title.trim(),
}

Provider contract

export interface PaymentProvider {
  id: ProviderId
  label: string
  region: string
  currencies: string[] | null
  implemented: boolean
  enabled(): boolean
  createLink(
    invoice: InvoiceForPay,
    options: CreateLinkOpts
  ): Promise<PaymentLink>
  parseWebhook(
    raw: string,
    headers: Headers
  ): Promise<WebhookResult>
}