@robodev-ai/sdk 0.2.0 → 0.3.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@robodev-ai/sdk",
-  "version": "0.2.0",
-  "description": "Robodev SDK — defineDatabase, defineApi, and the injected Drizzle db",
+  "version": "0.3.0",
+  "description": "Robodev server SDK — defineDatabase, defineApi, auth, and the injected Drizzle db",
   "type": "module",
   "license": "MIT",
   "repository": {

package/src/api.ts

@@ -1,15 +1,17 @@
 import { z } from "zod";
+import type { ApiAuth, AuthUser } from "./auth.js";
 import type { RobodevDb } from "./db.js";
 
 /** Marker written onto every `defineApi(...)` result so Starbase can register the handler. */
 export const API_KIND = "robodevApi";
 
-/** Injected into every handler: tenant `db`, parsed query/body, and request headers. */
+/** Injected into every handler: tenant `db`, parsed query/body, headers, and optional `user`. */
 export type ApiHandlerContext<TQuery, TBody> = {
   db: RobodevDb;
   query: TQuery;
   body: TBody;
   headers: Record<string, string | string[] | undefined>;
+  user: AuthUser | null;
 };
 
 export type ApiDefinition<TQuery = unknown, TBody = unknown, TResponse = unknown> = {
@@ -17,12 +19,16 @@ export type ApiDefinition<TQuery = unknown, TBody = unknown, TResponse = unknown
   query?: z.ZodType<TQuery>;
   body?: z.ZodType<TBody>;
   response?: z.ZodType<TResponse>;
+  auth: ApiAuth;
   handler: (ctx: ApiHandlerContext<TQuery, TBody>) => Promise<TResponse> | TResponse;
 };
 
 /**
  * Defines one HTTP handler. Export as `get` / `post` / `put` / `patch` / `delete`
  * from `api/<name>.ts` to serve that method at `/<name>`.
+ *
+ * `auth` defaults to `false` (public). Use `"required"` for Robodev Auth, or a
+ * custom verifier that returns `{ id, email }` from request headers.
  */
 export function defineApi<
   TQuery extends z.ZodTypeAny | undefined = undefined,
@@ -32,6 +38,7 @@ export function defineApi<
   query?: TQuery;
   body?: TBody;
   response?: TResponse;
+  auth?: ApiAuth;
   handler: (
     ctx: ApiHandlerContext<
       TQuery extends z.ZodTypeAny ? z.infer<TQuery> : Record<string, never>,
@@ -50,6 +57,7 @@ export function defineApi<
     query: config.query,
     body: config.body,
     response: config.response,
+    auth: config.auth ?? false,
     handler: config.handler,
   } as ApiDefinition<
     TQuery extends z.ZodTypeAny ? z.infer<TQuery> : Record<string, never>,

package/src/auth.ts

@@ -0,0 +1,13 @@
+/** End-user on a project host. Distinct from Starbase control-plane accounts. */
+export type AuthUser = {
+  id: string;
+  email: string;
+  name?: string | null;
+};
+
+/** Custom header verifier. Return the same user shape, or null to 401. */
+export type AuthVerifier = (input: {
+  headers: Record<string, string | string[] | undefined>;
+}) => AuthUser | null | Promise<AuthUser | null>;
+
+export type ApiAuth = false | "required" | "optional" | AuthVerifier;

package/src/index.ts

@@ -10,6 +10,7 @@ export {
   type ApiHandlerContext,
   type HttpMethod,
 } from "./api.js";
+export { type ApiAuth, type AuthUser, type AuthVerifier } from "./auth.js";
 export { createDb, type RobodevDb } from "./db.js";
 export {
   and,