Remix

Make your own version of Nexora Global Invest

Get an exact, working copy in your account, then change anything with chat.

Original by Smart Boy

What would you change?

Start free with 40 credits. No card needed.

Start fresh from this prompt

Builds a brand new app from the first prompt only, so later changes to the original are not included.

-- Nexora Global Invest
-- Secure database foundation for real user accounts
-- This does not itself move or invest money.

create table public.profiles (
  id uuid primary key references auth.users(id)
    on delete cascade,
  full_name text not null default '',
  created_at timestamptz not null default now()
);

create table public.transaction_requests (
  id uuid primary key default gen_random_uuid(),
  user_id uuid not null references auth.users(id),
  request_type text not null
    check (request_type in ('deposit', 'withdrawal')),
  amount numeric(18,2) not null
    check (amount > 0 and amount <= 1000000000),
  currency text not null default 'USD'
    check (currency = 'USD'),
  status text not null default 'pending'
    check (status in (
      'pending', 'approved', 'rejected', 'completed'
    )),
  provider_reference text,
  created_at timestamptz not null default now()
);

alter table public.profiles enable row level security;
alter table public.transaction_requests
  enable row level security;

create policy "Users can read their own profile"
on public.profiles for select
to authenticated
using (id = (select auth.uid()));

create policy "Users can create their own profile"
on public.profiles for insert
to authenticated
with check (id = (select auth.uid()));

create policy "Users can update their own profile"
on public.profiles for update
to authenticated
using (id = (select auth.uid()))
with check (id = (select auth.uid()));

create policy "Users can read their own requests"
on public.transaction_requests for select
to authenticated
using (user_id = (select auth.uid()));

create policy "Users can submit their own requests"
on public.transaction_requests for insert
to authenticated
with check (
  user_id = (select auth.uid())
  and status = 'pending'
  and provider_reference is null
);

-- Users cannot change request statuses or delete requests.
-- Process approvals and actual payments through a trusted,
-- authenticated server and verified provider webhooks.
revoke update, delete
on public.transaction_requests
from anon, authenticated;

revoke delete
on public.profiles
from anon, authenticated;

create index transaction_requests_user_created_idx
on public.transaction_requests (user_id, created_at desc);