robodev 0.26.0 → 0.28.0

package/templates/auth-chat/apps/fe/package.json

@@ -8,10 +8,10 @@
     "dev": "bunx --bun vite",
     "build": "bun run openapi:gen && bunx --bun vite build",
     "clean": "rimraf dist src/openapi",
-    "lint": "oxlint --type-aware . ../../api ../../database.ts --fix",
-    "lint:check": "oxlint --type-aware . ../../api ../../database.ts --quiet",
-    "format": "oxfmt -c \"../../oxfmt.config.js\" . ../../api ../../database.ts",
-    "format:check": "oxfmt -c \"../../oxfmt.config.js\" --check . ../../api ../../database.ts",
+    "lint": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --fix",
+    "lint:check": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --quiet",
+    "format": "oxfmt -c \"../../oxfmt.config.js\" . ../../robodev/api ../../robodev/database.ts",
+    "format:check": "oxfmt -c \"../../oxfmt.config.js\" --check . ../../robodev/api ../../robodev/database.ts",
     "ts:check": "tsc -b --noEmit",
     "test": "vitest run",
     "check": "bun ts:check && bun lint:check && bun format:check",

package/templates/auth-chat/package.json

@@ -8,10 +8,10 @@
     "rules:gen": "rulesync generate"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.6.0"
+    "@robodev-ai/sdk": "^0.7.0"
   },
   "devDependencies": {
-    "robodev": "^0.26.0",
+    "robodev": "^0.28.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }

package/templates/auth-chat/{api → robodev/api}/invite.ts

@@ -1,4 +1,5 @@
-/** POST /api/invite — signed-in users send a chat invite email. */
+/** POST /api/invite — signed-in users persist an invite, then send email. */
+import { invites } from "../database";
 import { defineApi, z } from "@robodev-ai/sdk";
 
 function headerValue(
@@ -28,16 +29,25 @@ export const post = defineApi({
   auth: "required",
   body: z.object({ to: z.string().email() }),
   response: z.object({ id: z.string(), status: z.literal("sent") }),
-  handler: async ({ email, body, user, env, headers }) => {
+  handler: async ({ db, email, body, user, env, headers }) => {
+    const inviteEmail = body.to.toLowerCase();
+    const [row] = await db
+      .insert(invites)
+      .values({
+        email: inviteEmail,
+        invitedByUserId: user!.id,
+      })
+      .returning();
     const url = resolveProjectUrl(env, headers);
     const who = user?.name?.trim() || user?.email || "Someone";
     const project = url ? ` Project URL: ${url}` : "";
-    return email.send({
-      to: body.to,
+    const sent = await email.send({
+      to: inviteEmail,
       subject: "You're invited to the chat",
       text:
         `${who} invited you to a shared chat on Robodev. ` +
         `Open the App URL and sign in to join.${project}`,
     });
+    return { id: row?.id ?? sent.id, status: "sent" as const };
   },
 });

package/templates/auth-chat/{database.ts → robodev/database.ts}

@@ -1,6 +1,7 @@
 /**
  * Shared chat room. `robodev_auth.users` is platform-owned — store only a
- * snapshot of the author on each message.
+ * snapshot of the author on each message. Invite `userId` columns are text
+ * matching Auth `ctx.user.id`.
  */
 import { defineDatabase, pgTable, text, timestamp, uuid } from "@robodev-ai/sdk";
 
@@ -13,7 +14,16 @@ export const messages = pgTable("messages", {
   createdAt: timestamp("createdAt", { withTimezone: true }).defaultNow(),
 });
 
+export const invites = pgTable("invites", {
+  id: uuid("id").primaryKey().defaultRandom(),
+  email: text("email").notNull(),
+  invitedByUserId: text("invitedByUserId").notNull(),
+  createdAt: timestamp("createdAt", { withTimezone: true }).defaultNow(),
+  claimedAt: timestamp("claimedAt", { withTimezone: true }),
+  claimedByUserId: text("claimedByUserId"),
+});
+
 export default defineDatabase({
   name: "chat",
-  tables: { messages },
+  tables: { messages, invites },
 });

package/templates/auth-chat/robodev/hooks/auth.ts

@@ -0,0 +1,17 @@
+import { and, defineAuthHook, eq, isNull } from "@robodev-ai/sdk";
+import { invites } from "../database";
+
+export default defineAuthHook({
+  onUserCreated: async ({ db, event }) => {
+    const email = event.user?.email.toLowerCase();
+    const userId = event.user?.id;
+    if (!email || !userId) return;
+    await db
+      .update(invites)
+      .set({
+        claimedAt: new Date(),
+        claimedByUserId: userId,
+      })
+      .where(and(eq(invites.email, email), isNull(invites.claimedAt)));
+  },
+});

package/templates/auth-chat/robodev/package.json

@@ -0,0 +1,4 @@
+{
+  "private": true,
+  "dependencies": {}
+}

package/templates/auth-chat/tsconfig.json

@@ -7,5 +7,5 @@
     "skipLibCheck": true,
     "noEmit": true
   },
-  "include": ["database.ts", "api/**/*.ts"]
+  "include": ["robodev/**/*.ts"]
 }

package/templates/backend/README.md

@@ -2,7 +2,7 @@
 
 Tiny Template planets, aliens, and media APIs — no Vite UI. For Lovable, Bolt, or v0.
 
-Deploy `database.ts` and `api/` from a real terminal:
+Deploy `robodev/database.ts` and `robodev/api/` from a real terminal:
 
 ```bash
 npx robodev deploy

package/templates/backend/package.json

@@ -7,10 +7,10 @@
     "deploy": "robodev deploy"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.6.0"
+    "@robodev-ai/sdk": "^0.7.0"
   },
   "devDependencies": {
-    "robodev": "^0.26.0",
+    "robodev": "^0.28.0",
     "typescript": "^5.9.2"
   }
 }

package/templates/backend/robodev/package.json

@@ -0,0 +1,4 @@
+{
+  "private": true,
+  "dependencies": {}
+}

package/templates/backend/tsconfig.json

@@ -7,5 +7,5 @@
     "skipLibCheck": true,
     "noEmit": true
   },
-  "include": ["database.ts", "api/**/*.ts"]
+  "include": ["robodev/**/*.ts"]
 }

package/templates/empty/README.md

@@ -1,8 +1,8 @@
 # {{NAME}}
 
-Blank `database.ts` and `GET /api/health` — no sample schema or UI. For Lovable, Bolt, or v0.
+Blank `robodev/database.ts` and `GET /api/health` — no sample schema or UI. For Lovable, Bolt, or v0.
 
-Deploy `database.ts` and `api/` from a real terminal:
+Deploy `robodev/database.ts` and `robodev/api/` from a real terminal:
 
 ```bash
 npx robodev deploy

package/templates/empty/package.json

@@ -7,10 +7,10 @@
     "deploy": "robodev deploy"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.6.0"
+    "@robodev-ai/sdk": "^0.7.0"
   },
   "devDependencies": {
-    "robodev": "^0.26.0",
+    "robodev": "^0.28.0",
     "typescript": "^5.9.2"
   }
 }

package/templates/empty/robodev/package.json

@@ -0,0 +1,4 @@
+{
+  "private": true,
+  "dependencies": {}
+}

package/templates/empty/tsconfig.json

@@ -7,5 +7,5 @@
     "skipLibCheck": true,
     "noEmit": true
   },
-  "include": ["database.ts", "api/**/*.ts"]
+  "include": ["robodev/**/*.ts"]
 }

package/templates/marketplace/.rulesync/rules/frontend-api-boundary.md

@@ -23,7 +23,7 @@ For generated mutations, pass invalidation through the mutation options instead
 
 After mutations, derive follow-up UI state from canonical API response or query state instead of leaving action controls unchanged. Disable duplicate submissions when the API state already represents a pending or completed action, and surface mutation errors through the default generated-client error handler or a feature-specific message.
 
-Do not import `@robodev-ai/sdk`, `database.ts`, Drizzle tables, or API helper modules into frontend features.
+Do not import `@robodev-ai/sdk`, `robodev/database.ts`, Drizzle tables, or API helper modules into frontend features.
 
 `apps/fe/src/openapi` is generated by `@povio/openapi-codegen-cli` from root `openapi.json` (or a live project `/openapi.json` when `OPENAPI_LIVE=true`). Do not hand-edit generated OpenAPI client files.
 

package/templates/marketplace/.rulesync/rules/frontend-notifications.md

@@ -11,7 +11,7 @@ cursor:
 
 # Frontend Notifications
 
-Use generated `@/openapi` queries, mutations, and models for notification history, preferences, and push-token registration. Do not import `@robodev-ai/sdk` or `database.ts` into frontend feature code.
+Use generated `@/openapi` queries, mutations, and models for notification history, preferences, and push-token registration. Do not import `@robodev-ai/sdk` or `robodev/database.ts` into frontend feature code.
 
 Request push permission only after an explanatory UI and explicit user gesture. Never request it automatically during initial application load. Handle unsupported, default, denied, granted, registered, expired, and failed-registration states.
 

package/templates/marketplace/.rulesync/rules/project-overview.md

@@ -11,7 +11,7 @@ cursor:
 
 # Marketplace starter AI rules
 
-This project is a Vite React frontend in `apps/fe` plus a Robodev backend at the **repository root** (`database.ts` + `api/**/*.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
+This project is a Vite React frontend in `apps/fe` plus a Robodev backend under **`robodev/`** (`robodev/database.ts` + `robodev/api/**/*.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
 
 `robodev deploy` from this root uploads schema and APIs. It does not host the Povio SPA. Run the UI with bun in `apps/fe`.
 
@@ -23,7 +23,7 @@ When an app has multiple user roles with distinct UI or business workflows, use
 
 Use the more specific generated rules for:
 
-- Robodev `defineDatabase` tables in `database.ts`.
+- Robodev `defineDatabase` tables in `robodev/database.ts`.
 - Robodev `defineApi` routes in `api/`.
 - Reserved `/api/user/*` auth contracts (do not implement `api/user/**` in the project).
 - Frontend API boundaries around generated `@/openapi` queries and models.

package/templates/marketplace/.rulesync/rules/robodev-api.md

@@ -2,24 +2,24 @@
 root: false
 targets: ["claudecode", "codexcli", "cursor"]
 description: "Robodev defineApi file routes and handler conventions."
-globs: ["api/**/*.ts"]
+globs: ["robodev/api/**/*.ts"]
 cursor:
   alwaysApply: false
   description: "Apply when editing Starbase API routes."
-  globs: ["api/**/*.ts"]
+  globs: ["robodev/api/**/*.ts"]
 ---
 
 # Robodev API
 
-Project APIs live in `api/`. `api/planets.ts` is served at `/planets` and `/api/planets`. Prefer the `/api/...` path in OpenAPI and frontend clients.
+Project APIs live in `robodev/api/`. `robodev/api/planets.ts` is served at `/planets` and `/api/planets`. Prefer the `/api/...` path in OpenAPI and frontend clients.
 
 ## File layout
 
-- `api/foo.ts` → `/api/foo`
-- `api/foo/[id].ts` → `/api/foo/:id`
+- `robodev/api/foo.ts` → `/api/foo`
+- `robodev/api/foo/[id].ts` → `/api/foo/:id`
 - Export `get` / `post` / `put` / `patch` / `delete` as `defineApi(...)`.
-- Shared helpers belong in `api/_lib.ts`. Do not export `defineApi` from `_lib.ts`.
-- Do not add `api/user/**`. Those paths are reserved for Robodev Auth.
+- Shared helpers belong in `robodev/api/_lib.ts`. Do not export `defineApi` from `_lib.ts`.
+- Do not add `robodev/api/user/**`. Those paths are reserved for Robodev Auth.
 
 ## Handlers
 

package/templates/marketplace/.rulesync/rules/robodev-auth.md

@@ -8,8 +8,8 @@ cursor:
   description: "Apply when touching auth, login, register, or /api/user clients."
   globs:
     [
-      "database.ts",
-      "api/**/*.ts",
+      "robodev/database.ts",
+      "robodev/api/**/*.ts",
       "apps/fe/src/components/features/auth/**/*.{ts,tsx}",
       "apps/fe/src/clients/**/*.ts",
     ]

package/templates/marketplace/.rulesync/rules/robodev-database.md

@@ -2,21 +2,21 @@
 root: false
 targets: ["claudecode", "codexcli", "cursor"]
 description: "Robodev database.ts Drizzle schema and deploy sync."
-globs: ["database.ts"]
+globs: ["robodev/database.ts"]
 cursor:
   alwaysApply: false
   description: "Apply when editing the Starbase database schema."
-  globs: ["database.ts"]
+  globs: ["robodev/database.ts"]
 ---
 
 # Robodev Database
 
-The backend schema lives in `database.ts` at the project root. Default-export `defineDatabase` with Drizzle `pgTable` definitions. `robodev deploy` from this root creates or syncs the named Postgres database. There are no migration files.
+The backend schema lives in `robodev/database.ts`. Default-export `defineDatabase` with Drizzle `pgTable` definitions. `robodev deploy` from this root creates or syncs the named Postgres database. There are no migration files.
 
 ## Rules
 
 - Import table helpers from `@robodev-ai/sdk` (`pgTable`, `uuid`, `text`, `timestamp`, `integer`, and query helpers).
 - Do not recreate User or auth tables. End users live in platform `robodev_auth`. Store `userId` as `text` matching `ctx.user.id`.
 - Prefer scalar columns and foreign keys. Destructive drops need deploy confirmation or `--force`.
-- Export named tables so API files can import them from `../database` or `api/_lib.ts`.
-- Seed demo rows in API handlers on first read (see `api/_lib.ts` `ensureSeed`), not with a separate seed runner.
+- Export named tables so API files can import them from `../database` or `robodev/api/_lib.ts`.
+- Seed demo rows in API handlers on first read (see `robodev/api/_lib.ts` `ensureSeed`), not with a separate seed runner.

package/templates/marketplace/.rulesync/rules/role-based-app-structure.md

@@ -2,11 +2,11 @@
 root: false
 targets: ["claudecode", "codexcli", "cursor"]
 description: "Conditional role-based frontend and API structure for apps with distinct user roles."
-globs: ["apps/fe/src/**/*.{ts,tsx}", "api/**/*.ts"]
+globs: ["apps/fe/src/**/*.{ts,tsx}", "robodev/api/**/*.ts"]
 cursor:
   alwaysApply: false
   description: "Apply only when an app has multiple user roles with distinct UI surfaces or business workflows."
-  globs: ["apps/fe/src/**/*.{ts,tsx}", "api/**/*.ts"]
+  globs: ["apps/fe/src/**/*.{ts,tsx}", "robodev/api/**/*.ts"]
 ---
 
 # Role-Based App Structure

package/templates/marketplace/.rulesync/skills/media-feature/SKILL.md

@@ -18,4 +18,4 @@ Preserve the upload contract:
 
 Never use a standalone files API. File bytes stay on the device until submit.
 
-Media metadata lives in the `media` table in `database.ts`. Bytes live in Robodev storage. Listing images use resource name `listing-image`.
+Media metadata lives in the `media` table in `robodev/database.ts`. Bytes live in Robodev storage. Listing images use resource name `listing-image`.

package/templates/marketplace/.rulesync/skills/robodev-api-route/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: robodev-api-route
-description: Add a defineApi route under api/.
+description: Add a defineApi route under robodev/api/.
 ---
 
 # Add a Robodev API route
 
-1. Create `api/<path>.ts` or `api/<path>/[id].ts`.
+1. Create `robodev/api/<path>.ts` or `robodev/api/<path>/[id].ts`.
 2. Export HTTP methods with `defineApi` from `@robodev-ai/sdk`.
 3. Use `auth: "required"` unless the route is public.
 4. Keep JSON shapes aligned with `openapi.json`.
-5. Do not create `api/user/**` files.
+5. Do not create `robodev/api/user/**` files.
 6. Deploy from the project root (`robodev deploy`), then `bun openapi:gen` in `apps/fe` if the contract changed.

package/templates/marketplace/.rulesync/skills/robodev-table/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: robodev-table
-description: Add a Drizzle table to database.ts and wire it into defineApi handlers.
+description: Add a Drizzle table to robodev/database.ts and wire it into defineApi handlers.
 ---
 
 # Add a Robodev table
 
-1. Add a `pgTable` to `database.ts` and include it in `defineDatabase({ tables })`.
+1. Add a `pgTable` to `robodev/database.ts` and include it in `defineDatabase({ tables })`.
 2. Do not add a User table. Auth users are platform-managed; store `userId` as text.
 3. Import the table in `api/_lib.ts` or the route file that needs it.
 4. Deploy from the project root with `robodev deploy`. Destructive drops need confirmation or `--force`.

package/templates/marketplace/README.md

@@ -1,6 +1,6 @@
 # {{NAME}}
 
-Starter from `robodev create --starter marketplace`: Marketplace C2C marketplace schema (`categories`, `listings`, `cart_items`, `orders`, `watches`, `reviews`, `media`), file-based APIs in `api/`, and a Povio UI in `apps/fe`.
+Starter from `robodev create --starter marketplace`: Marketplace C2C marketplace schema (`categories`, `listings`, `cart_items`, `orders`, `watches`, `reviews`, `media`), file-based APIs in `robodev/api/`, and a Povio UI in `apps/fe`.
 
 After a CLI create or deploy with `.robodev` `frontend` set (the default for this starter), the project host serves the built Marketplace SPA at `GET /`. APIs and Swagger still win over static files.
 
@@ -29,7 +29,7 @@ npx robodev deploy
 
 Dashboard create deploys schema + APIs only. The Marketplace FE tree is copied by `robodev create`; a later CLI deploy hosts the SPA.
 
-Auth stays reserved at `/api/user/*`. Do not add `api/user/**`.
+Auth stays reserved at `/api/user/*`. Do not add `robodev/api/user/**`.
 
 Regenerate AI rules after editing `.rulesync/`:
 

package/templates/marketplace/apps/fe/package.json

@@ -8,10 +8,10 @@
     "dev": "bunx --bun vite",
     "build": "bun run openapi:gen && bunx --bun vite build",
     "clean": "rimraf dist src/openapi",
-    "lint": "oxlint --type-aware . ../../api ../../database.ts --fix",
-    "lint:check": "oxlint --type-aware . ../../api ../../database.ts --quiet",
-    "format": "oxfmt -c \"../../oxfmt.config.js\" . ../../api ../../database.ts",
-    "format:check": "oxfmt -c \"../../oxfmt.config.js\" --check . ../../api ../../database.ts",
+    "lint": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --fix",
+    "lint:check": "oxlint --type-aware . ../../robodev/api ../../robodev/database.ts --quiet",
+    "format": "oxfmt -c \"../../oxfmt.config.js\" . ../../robodev/api ../../robodev/database.ts",
+    "format:check": "oxfmt -c \"../../oxfmt.config.js\" --check . ../../robodev/api ../../robodev/database.ts",
     "ts:check": "tsc -b --noEmit",
     "test": "vitest run",
     "check": "bun ts:check && bun lint:check && bun format:check",

package/templates/marketplace/package.json

@@ -8,10 +8,10 @@
     "rules:gen": "rulesync generate"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.6.0"
+    "@robodev-ai/sdk": "^0.7.0"
   },
   "devDependencies": {
-    "robodev": "^0.26.0",
+    "robodev": "^0.28.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }

package/templates/marketplace/robodev/package.json

@@ -0,0 +1,4 @@
+{
+  "private": true,
+  "dependencies": {}
+}

package/templates/marketplace/tsconfig.json

@@ -7,5 +7,5 @@
     "skipLibCheck": true,
     "noEmit": true
   },
-  "include": ["database.ts", "api/**/*.ts"]
+  "include": ["robodev/**/*.ts"]
 }

package/templates/space/.rulesync/rules/frontend-api-boundary.md

@@ -23,7 +23,7 @@ For generated mutations, pass invalidation through the mutation options instead
 
 After mutations, derive follow-up UI state from canonical API response or query state instead of leaving action controls unchanged. Disable duplicate submissions when the API state already represents a pending or completed action, and surface mutation errors through the default generated-client error handler or a feature-specific message.
 
-Do not import `@robodev-ai/sdk`, `database.ts`, Drizzle tables, or API helper modules into frontend features.
+Do not import `@robodev-ai/sdk`, `robodev/database.ts`, Drizzle tables, or API helper modules into frontend features.
 
 `apps/fe/src/openapi` is generated by `@povio/openapi-codegen-cli` from root `openapi.json` (or a live project `/openapi.json` when `OPENAPI_LIVE=true`). Do not hand-edit generated OpenAPI client files.
 

package/templates/space/.rulesync/rules/frontend-notifications.md

@@ -11,7 +11,7 @@ cursor:
 
 # Frontend Notifications
 
-Use generated `@/openapi` queries, mutations, and models for notification history, preferences, and push-token registration. Do not import `@robodev-ai/sdk` or `database.ts` into frontend feature code.
+Use generated `@/openapi` queries, mutations, and models for notification history, preferences, and push-token registration. Do not import `@robodev-ai/sdk` or `robodev/database.ts` into frontend feature code.
 
 Request push permission only after an explanatory UI and explicit user gesture. Never request it automatically during initial application load. Handle unsupported, default, denied, granted, registered, expired, and failed-registration states.
 

package/templates/space/.rulesync/rules/project-overview.md

@@ -11,7 +11,7 @@ cursor:
 
 # Space starter AI rules
 
-This project is a Vite React frontend in `apps/fe` plus a Robodev backend at the **repository root** (`database.ts` + `api/**/*.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
+This project is a Vite React frontend in `apps/fe` plus a Robodev backend under **`robodev/`** (`robodev/database.ts` + `robodev/api/**/*.ts` using `@robodev-ai/sdk`). There is no Expo / mobile app in this starter. End-user auth is reserved on the project host at `/api/user/*`. There is no in-browser fake backend.
 
 `robodev deploy` from this root uploads schema and APIs. It does not host the Povio SPA. Run the UI with bun in `apps/fe`.
 
@@ -23,7 +23,7 @@ When an app has multiple user roles with distinct UI or business workflows, use
 
 Use the more specific generated rules for:
 
-- Robodev `defineDatabase` tables in `database.ts`.
+- Robodev `defineDatabase` tables in `robodev/database.ts`.
 - Robodev `defineApi` routes in `api/`.
 - Reserved `/api/user/*` auth contracts (do not implement `api/user/**` in the project).
 - Frontend API boundaries around generated `@/openapi` queries and models.

package/templates/space/.rulesync/rules/robodev-api.md

@@ -2,24 +2,24 @@
 root: false
 targets: ["claudecode", "codexcli", "cursor"]
 description: "Robodev defineApi file routes and handler conventions."
-globs: ["api/**/*.ts"]
+globs: ["robodev/api/**/*.ts"]
 cursor:
   alwaysApply: false
   description: "Apply when editing Starbase API routes."
-  globs: ["api/**/*.ts"]
+  globs: ["robodev/api/**/*.ts"]
 ---
 
 # Robodev API
 
-Project APIs live in `api/`. `api/planets.ts` is served at `/planets` and `/api/planets`. Prefer the `/api/...` path in OpenAPI and frontend clients.
+Project APIs live in `robodev/api/`. `robodev/api/planets.ts` is served at `/planets` and `/api/planets`. Prefer the `/api/...` path in OpenAPI and frontend clients.
 
 ## File layout
 
-- `api/foo.ts` → `/api/foo`
-- `api/foo/[id].ts` → `/api/foo/:id`
+- `robodev/api/foo.ts` → `/api/foo`
+- `robodev/api/foo/[id].ts` → `/api/foo/:id`
 - Export `get` / `post` / `put` / `patch` / `delete` as `defineApi(...)`.
-- Shared helpers belong in `api/_lib.ts`. Do not export `defineApi` from `_lib.ts`.
-- Do not add `api/user/**`. Those paths are reserved for Robodev Auth.
+- Shared helpers belong in `robodev/api/_lib.ts`. Do not export `defineApi` from `_lib.ts`.
+- Do not add `robodev/api/user/**`. Those paths are reserved for Robodev Auth.
 
 ## Handlers
 

package/templates/space/.rulesync/rules/robodev-auth.md

@@ -8,8 +8,8 @@ cursor:
   description: "Apply when touching auth, login, register, or /api/user clients."
   globs:
     [
-      "database.ts",
-      "api/**/*.ts",
+      "robodev/database.ts",
+      "robodev/api/**/*.ts",
       "apps/fe/src/components/features/auth/**/*.{ts,tsx}",
       "apps/fe/src/clients/**/*.ts",
     ]

package/templates/space/.rulesync/rules/robodev-database.md

@@ -2,21 +2,21 @@
 root: false
 targets: ["claudecode", "codexcli", "cursor"]
 description: "Robodev database.ts Drizzle schema and deploy sync."
-globs: ["database.ts"]
+globs: ["robodev/database.ts"]
 cursor:
   alwaysApply: false
   description: "Apply when editing the Starbase database schema."
-  globs: ["database.ts"]
+  globs: ["robodev/database.ts"]
 ---
 
 # Robodev Database
 
-The backend schema lives in `database.ts` at the project root. Default-export `defineDatabase` with Drizzle `pgTable` definitions. `robodev deploy` from this root creates or syncs the named Postgres database. There are no migration files.
+The backend schema lives in `robodev/database.ts`. Default-export `defineDatabase` with Drizzle `pgTable` definitions. `robodev deploy` from this root creates or syncs the named Postgres database. There are no migration files.
 
 ## Rules
 
 - Import table helpers from `@robodev-ai/sdk` (`pgTable`, `uuid`, `text`, `timestamp`, `integer`, and query helpers).
 - Do not recreate User or auth tables. End users live in platform `robodev_auth`. Store `userId` as `text` matching `ctx.user.id`.
 - Prefer scalar columns and foreign keys. Destructive drops need deploy confirmation or `--force`.
-- Export named tables so API files can import them from `../database` or `api/_lib.ts`.
-- Seed demo rows in API handlers on first read (see `api/_lib.ts` `ensureSeed`), not with a separate seed runner.
+- Export named tables so API files can import them from `../database` or `robodev/api/_lib.ts`.
+- Seed demo rows in API handlers on first read (see `robodev/api/_lib.ts` `ensureSeed`), not with a separate seed runner.

package/templates/space/.rulesync/rules/role-based-app-structure.md

@@ -2,11 +2,11 @@
 root: false
 targets: ["claudecode", "codexcli", "cursor"]
 description: "Conditional role-based frontend and API structure for apps with distinct user roles."
-globs: ["apps/fe/src/**/*.{ts,tsx}", "api/**/*.ts"]
+globs: ["apps/fe/src/**/*.{ts,tsx}", "robodev/api/**/*.ts"]
 cursor:
   alwaysApply: false
   description: "Apply only when an app has multiple user roles with distinct UI surfaces or business workflows."
-  globs: ["apps/fe/src/**/*.{ts,tsx}", "api/**/*.ts"]
+  globs: ["apps/fe/src/**/*.{ts,tsx}", "robodev/api/**/*.ts"]
 ---
 
 # Role-Based App Structure

package/templates/space/.rulesync/skills/media-feature/SKILL.md

@@ -18,4 +18,4 @@ Preserve the upload contract:
 
 Never use a standalone files API. File bytes stay on the device until submit.
 
-Media metadata lives in the `media` table in `database.ts`. Bytes live in Robodev storage. Planet images use resource name `planet-image`.
+Media metadata lives in the `media` table in `robodev/database.ts`. Bytes live in Robodev storage. Planet images use resource name `planet-image`.

package/templates/space/.rulesync/skills/robodev-api-route/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: robodev-api-route
-description: Add a defineApi route under api/.
+description: Add a defineApi route under robodev/api/.
 ---
 
 # Add a Robodev API route
 
-1. Create `api/<path>.ts` or `api/<path>/[id].ts`.
+1. Create `robodev/api/<path>.ts` or `robodev/api/<path>/[id].ts`.
 2. Export HTTP methods with `defineApi` from `@robodev-ai/sdk`.
 3. Use `auth: "required"` unless the route is public.
 4. Keep JSON shapes aligned with `openapi.json`.
-5. Do not create `api/user/**` files.
+5. Do not create `robodev/api/user/**` files.
 6. Deploy from the project root (`robodev deploy`), then `bun openapi:gen` in `apps/fe` if the contract changed.

package/templates/space/.rulesync/skills/robodev-table/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: robodev-table
-description: Add a Drizzle table to database.ts and wire it into defineApi handlers.
+description: Add a Drizzle table to robodev/database.ts and wire it into defineApi handlers.
 ---
 
 # Add a Robodev table
 
-1. Add a `pgTable` to `database.ts` and include it in `defineDatabase({ tables })`.
+1. Add a `pgTable` to `robodev/database.ts` and include it in `defineDatabase({ tables })`.
 2. Do not add a User table. Auth users are platform-managed; store `userId` as text.
 3. Import the table in `api/_lib.ts` or the route file that needs it.
 4. Deploy from the project root with `robodev deploy`. Destructive drops need confirmation or `--force`.

package/templates/space/README.md

@@ -1,6 +1,6 @@
 # {{NAME}}
 
-Starter from `robodev create`: Tiny Template schema (`planets`, `aliens`, `media`, `planet_likes`), file-based APIs in `api/`, and a Povio UI in `apps/fe`.
+Starter from `robodev create`: Tiny Template schema (`planets`, `aliens`, `media`, `planet_likes`), file-based APIs in `robodev/api/`, and a Povio UI in `apps/fe`.
 
 After a CLI create or deploy with `.robodev` `frontend` set (the default for this starter), the project host serves the built Tiny SPA at `GET /`. APIs and Swagger still win over static files.
 
@@ -29,7 +29,7 @@ npx robodev deploy
 
 Dashboard create deploys schema + APIs only. The Tiny FE tree is copied by `robodev create`; a later CLI deploy hosts the SPA.
 
-Auth stays reserved at `/api/user/*`. Do not add `api/user/**`.
+Auth stays reserved at `/api/user/*`. Do not add `robodev/api/user/**`.
 
 Regenerate AI rules after editing `.rulesync/`: