I make AI-built software dependable

-- only the owner can read their rows
alter table orders enable row level security;

create policy "own_orders"
  on orders for select
  using ( auth.uid() = user_id );

-- writes go through a checked function
revoke insert on orders
  from anon, authenticated;

// edge function: authenticated, validated, typed
Deno.serve(async (req) => {
  const user = await requireUser(req);
  const body = OrderInput.parse(await req.json());

  const { data, error } = await db
    .from("orders")
    .insert({ ...body, user_id: user.id })
    .select().single();

  if (error) return json({ error: error.message }, 400);
  return json(data, 201);
});

// scheduled job: runs nightly, no manual steps
export default {
  async scheduled(_evt, env) {
    const items = await fetchPrices(env.SOURCE_URL);
    await upsertSnapshots(env.DB, items);
    await notifyOnChange(env, items);
  },
};