Backend completo. Um binário. Sua VPS.

# Instala a CLI do nelcota
curl -fsSL https://raw.githubusercontent.com/Nelcota/Nelcota/main/scripts/install.sh \
  | NELCOTA_SKIP_DOCKER=1 sh

# Cria uma pasta vazia para o app
mkdir notes-app && cd notes-app

# Sobe o PostgreSQL e a API; deixe rodando
nelcota dev

# Escreve a migration: a tabela notes e as regras de acesso
mkdir -p migrations src
cat > migrations/V1__notes.sql <<'SQL'
-- A tabela: cada nota pertence ao usuário que a escreveu
CREATE TABLE public.notes (
    id    bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
    owner uuid   NOT NULL DEFAULT auth.uid(),
    body  text   NOT NULL
);

-- Liga a row-level security na tabela
ALTER TABLE public.notes ENABLE ROW LEVEL SECURITY;

-- Usuários logados podem ler e escrever na tabela...
GRANT SELECT, INSERT, UPDATE, DELETE
    ON public.notes
    TO authenticated;

-- ...mas só nas linhas que são deles
CREATE POLICY notes_owner
    ON public.notes
    FOR ALL
    TO authenticated
    USING      (owner = auth.uid())
    WITH CHECK (owner = auth.uid());

-- Um bucket privado: cada usuário grava na própria pasta
INSERT INTO storage.buckets (id, public) VALUES ('files', false);

CREATE POLICY notes_files_owner
    ON storage.objects
    FOR ALL
    TO authenticated
    USING (
        bucket_id = 'files'
        AND (storage.foldername(name))[1] = auth.uid()::text
    )
    WITH CHECK (
        bucket_id = 'files'
        AND (storage.foldername(name))[1] = auth.uid()::text
    );
SQL

# Aplica a migration e gera os tipos TypeScript
nelcota migrate
nelcota types -o src/database.ts

# Cria um usuário e guarda o access token dele
TOKEN=$(curl -fsS -X POST http://127.0.0.1:8000/auth/v1/signup \
  -H 'content-type: application/json' \
  -d '{"email":"[email protected]","password":"a-development-password"}' \
  | jq -er '.access_token')

# Espera a API enxergar a nova tabela
for attempt in 1 2 3 4 5 6 7 8 9 10; do
  status=$(curl -s -o /dev/null -w '%{http_code}' \
    -H "authorization: Bearer $TOKEN" \
    http://127.0.0.1:8000/rest/v1/notes)
  [ "$status" = 200 ] && break
  sleep 0.2
done
[ "$status" = 200 ] || echo 'notes is not ready: check the nelcota dev terminal' >&2

# Insere uma nota como esse usuário
curl -fsS -X POST http://127.0.0.1:8000/rest/v1/notes \
  -H "authorization: Bearer $TOKEN" \
  -H 'content-type: application/json' \
  -d '{"body":"My first note"}'

# Lê as notas de volta: a RLS devolve só as dele
curl -fsS 'http://127.0.0.1:8000/rest/v1/notes?order=id.desc' \
  -H "authorization: Bearer $TOKEN"