robodev 0.47.2 → 0.48.0

package/templates/shadcn/ROBODEV.md

@@ -22,6 +22,12 @@ export const get = defineApi({
 });
 ```
 
+Method exports: one export per method — `get` / `post` / `put` / `patch` / `delete`. `delete` is a reserved word — write `export const del = ...` or `export { remove as delete }`; both serve DELETE.
+
+`ctx.user.id` is a string like `usr_abc123`, not a UUID. Type user id columns as `text`, never `uuid`.
+
+Throw an Error with an integer `statusCode` (400-599) to answer with that status: `throw Object.assign(new Error("Not found"), { statusCode: 404 })`. Any other throw is a generic 500.
+
 ## Hard rules
 
 - Do not run npm, pnpm, or yarn install.
@@ -34,7 +40,7 @@ export const get = defineApi({
 
 ## Auth and product data
 
-Persist primary product data with `defineApi` and `robodev-publish be`. Do not use localStorage as the product store unless the user asked for a public, static, or no-account page. Auth is on by default: add login and register and protect routes unless the product is public or unauthenticated. Use `auth: "required"` and `ctx.user.id`. Call reserved `/api/user/auth/*` — do not implement `api/user/**`. Tiny: reuse seed login/register and AuthGuard. Shadcn, Empty, and legacy: create login/register with `@robodev-ai/client` tokens. A missing `.rulesync` skill is not a reason to skip APIs. Do not require `robodev-auth set` every run.
+Persist primary product data with `defineApi` and `robodev-publish be`. Do not use localStorage as the product store unless the user asked for a public, static, or no-account page. Auth is on by default: add login and register and protect routes unless the product is public or unauthenticated. Use `auth: "required"` and `ctx.user.id`. Call reserved `/api/user/auth/*` — do not implement `api/user/**`. Tiny and Shadcn: reuse seed login/register and AuthGuard. Empty and legacy: create login/register with `@robodev-ai/client` tokens. A missing `.rulesync` skill is not a reason to skip APIs. Do not require `robodev-auth set` every run.
 
 ## Backend
 
@@ -69,14 +75,16 @@ This is the hosted Shadcn layout. Keep it. Do not convert this tree to Tiny (`pa
 - Schema: `robodev/database.ts` (`defineDatabase` from `@robodev-ai/sdk`)
 - HTTP handlers: `robodev/api/**/*.ts` (`defineApi` from `@robodev-ai/sdk`)
 - Optional jobs: `robodev/jobs/**/*.ts`. Optional sockets: `robodev/sockets/**/*.ts` (`defineSocket`). Optional runtime packages go in `robodev/package.json` (allowlisted exact semver only). Do not npm install in this runner — Starbase installs on publish.
-- Frontend: root `index.html` + `src/**` (React, React Router, shadcn, generated orval client)
+- Frontend: root `index.html` + `src/**` (React + React Router, hosted UI kit, `@robodev-ai/client`)
 - Auth is reserved at `/api/user/*`. Do not add `robodev/api/user/**`.
+- AI rules and skills live in `.rulesync/` — read `.rulesync/rules/project-overview.md` first; `.rulesync/skills/robodev-crud-page/SKILL.md` is the CRUD recipe.
 
 Do not write a `frontend` block in `robodev/.robodev` — that block is for Tiny `apps/fe`. Root `index.html` + `src/` deploy as hosted React.
 
-- Route with React Router in `src/`. `src/pages/Home.tsx` is `/`. Add a page by adding a component and a `<Route>` in `src/App.tsx`.
-- Call APIs through the committed orval client under `src/api/generated`. After API changes, update `src/api/openapi.json` and regenerate.
-- UI: shadcn under `src/components/ui`. Hosted compile does not run Tailwind. Keep hosted CSS in `src/app.css`. `tailwind.config.ts` and `postcss.config.js` are for local `shadcn add` / Vite only.
+- Route with React Router in `src/`. `src/pages/Home.tsx` is `/`. Add a page by adding a component and a `<Route>` in `src/App.tsx`. `src/pages/NotFound.tsx` is the `*` catch-all.
+- Auth is seeded: `src/lib/client.ts`, `src/lib/auth.tsx` (`AuthProvider`, `useAuth`, `AuthGuard`), `src/pages/Login.tsx`, `src/pages/Register.tsx`. Reuse them; protect routes with `AuthGuard`. Never reimplement token handling.
+- Call app APIs through `client` from `@/lib/client` (`client.get/post/put/patch/del`) — it sends the auth header and refreshes on 401. The committed orval client under `src/api/generated/` serves the seed `getHealth` only; it does not send auth headers, and this runner cannot regenerate it (no node_modules).
+- UI: hosted kit under `src/components/ui` (button, input, textarea, label, card, badge, table, dialog, skeleton, spinner, empty-state). Hosted compile does not run Tailwind — there is no Tailwind in this tree. Every class must be defined in `src/app.css` (tokens + `.page`, `.stack`, `.row`, `.field`, and component classes). See `.rulesync/rules/frontend-hosted-ui.md`.
 - Hosted FE packages: `react`, `react-dom`, `react-router-dom`, `@robodev-ai/client`. Do not import other npm packages in `src/` — hosted compile will fail.
 
-Allowed paths: `robodev/database.ts`, `robodev/api/**/*.ts`, `robodev/jobs/**/*.ts`, `robodev/sockets/**/*.ts`, `robodev/hooks/**/*.ts`, `robodev/package.json`, `index.html`, `src/**`, `package.json`, `README.md`, `ROBODEV.md`, `.gitignore`.
+Allowed paths: `robodev/database.ts`, `robodev/api/**/*.ts`, `robodev/jobs/**/*.ts`, `robodev/sockets/**/*.ts`, `robodev/hooks/**/*.ts`, `robodev/package.json`, `index.html`, `src/**`, `.rulesync/**`, `package.json`, `README.md`, `ROBODEV.md`, `.gitignore`.

package/templates/shadcn/package.json

@@ -11,19 +11,17 @@
     "generate:api": "orval"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.13.0",
+    "@robodev-ai/sdk": "^0.14.0",
     "@robodev-ai/client": "^0.5.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "react-router-dom": "^6.30.1"
   },
   "devDependencies": {
-    "autoprefixer": "^10.4.21",
+    "@types/react": "^18.3.12",
+    "@types/react-dom": "^18.3.1",
     "orval": "^7.11.2",
-    "postcss": "^8.5.6",
-    "robodev": "^0.47.2",
-    "shadcn": "^2.10.0",
-    "tailwindcss": "^3.4.17",
+    "robodev": "^0.48.0",
     "typescript": "^5.9.2",
     "vite": "^6.0.0"
   }

package/templates/shadcn/rulesync.jsonc

@@ -0,0 +1,18 @@
+{
+  "$schema": "https://github.com/dyoshikawa/rulesync/releases/latest/download/config-schema.json",
+  "targets": {
+    "cursor": ["rules", "skills"],
+    "claudecode": ["rules", "skills"],
+    "codexcli": ["rules", "skills"],
+  },
+  "outputRoots": ["."],
+  // Clean stale outputs when source rules are removed. All sources live under .rulesync/.
+  "delete": true,
+  "verbose": false,
+  "silent": false,
+  "global": false,
+  "simulateCommands": false,
+  "simulateSubagents": false,
+  "simulateSkills": false,
+  "gitignoreTargetsOnly": true,
+}

package/templates/shadcn/src/App.tsx

@@ -1,10 +1,19 @@
 import { Route, Routes } from "react-router-dom";
+import { AuthProvider } from "./lib/auth";
 import { Home } from "./pages/Home";
+import { Login } from "./pages/Login";
+import { NotFound } from "./pages/NotFound";
+import { Register } from "./pages/Register";
 
 export function App() {
   return (
-    <Routes>
-      <Route path="/" element={<Home />} />
-    </Routes>
+    <AuthProvider>
+      <Routes>
+        <Route path="/" element={<Home />} />
+        <Route path="/login" element={<Login />} />
+        <Route path="/register" element={<Register />} />
+        <Route path="*" element={<NotFound />} />
+      </Routes>
+    </AuthProvider>
   );
 }

package/templates/shadcn/src/app.css

@@ -1,6 +1,10 @@
 :root {
   --background: 0 0% 100%;
   --foreground: 240 10% 3.9%;
+  --card: 0 0% 100%;
+  --card-foreground: 240 10% 3.9%;
+  --popover: 0 0% 100%;
+  --popover-foreground: 240 10% 3.9%;
   --primary: 240 5.9% 10%;
   --primary-foreground: 0 0% 98%;
   --secondary: 240 4.8% 95.9%;
@@ -12,12 +16,36 @@
   --destructive: 0 84.2% 60.2%;
   --destructive-foreground: 0 0% 98%;
   --border: 240 5.9% 90%;
+  --input: 240 5.9% 90%;
   --ring: 240 5.9% 10%;
   --radius: 0.5rem;
   color: hsl(var(--foreground));
   font-family: system-ui, sans-serif;
 }
 
+.dark {
+  --background: 240 10% 3.9%;
+  --foreground: 0 0% 98%;
+  --card: 240 10% 3.9%;
+  --card-foreground: 0 0% 98%;
+  --popover: 240 10% 3.9%;
+  --popover-foreground: 0 0% 98%;
+  --primary: 0 0% 98%;
+  --primary-foreground: 240 5.9% 10%;
+  --secondary: 240 3.7% 15.9%;
+  --secondary-foreground: 0 0% 98%;
+  --muted: 240 3.7% 15.9%;
+  --muted-foreground: 240 5% 64.9%;
+  --accent: 240 3.7% 15.9%;
+  --accent-foreground: 0 0% 98%;
+  --destructive: 0 62.8% 30.6%;
+  --destructive-foreground: 0 0% 98%;
+  --border: 240 3.7% 15.9%;
+  --input: 240 3.7% 15.9%;
+  --ring: 240 4.9% 83.9%;
+  color: hsl(var(--foreground));
+}
+
 body {
   margin: 0;
   background: hsl(var(--background));
@@ -31,6 +59,50 @@ main {
   padding: 2rem;
 }
 
+/* Layout */
+
+.page {
+  width: 100%;
+  max-width: 64rem;
+  margin: 0 auto;
+  padding: 2rem 1.5rem;
+  box-sizing: border-box;
+}
+
+.page-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+  margin-bottom: 1.5rem;
+}
+
+.page-title {
+  margin: 0;
+  font-size: 1.5rem;
+  font-weight: 600;
+  letter-spacing: -0.025em;
+}
+
+.stack {
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.row {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+.muted {
+  color: hsl(var(--muted-foreground));
+  font-size: 0.875rem;
+}
+
+/* Buttons */
+
 .btn {
   display: inline-flex;
   align-items: center;
@@ -78,6 +150,11 @@ main {
   color: hsl(var(--foreground));
 }
 
+.btn-outline:hover {
+  background: hsl(var(--accent));
+  color: hsl(var(--accent-foreground));
+}
+
 .btn-secondary {
   background: hsl(var(--secondary));
   color: hsl(var(--secondary-foreground));
@@ -88,6 +165,11 @@ main {
   color: hsl(var(--foreground));
 }
 
+.btn-ghost:hover {
+  background: hsl(var(--accent));
+  color: hsl(var(--accent-foreground));
+}
+
 .btn-link {
   background: transparent;
   color: hsl(var(--primary));
@@ -115,3 +197,280 @@ main {
   width: 2.25rem;
   padding: 0;
 }
+
+/* Forms */
+
+.input {
+  display: flex;
+  width: 100%;
+  height: 2.25rem;
+  box-sizing: border-box;
+  border-radius: calc(var(--radius) - 2px);
+  border: 1px solid hsl(var(--input));
+  background: transparent;
+  padding: 0 0.75rem;
+  font-size: 0.875rem;
+  font-family: inherit;
+  color: hsl(var(--foreground));
+  transition: border-color 0.15s ease;
+}
+
+textarea.input {
+  height: auto;
+  min-height: 4.5rem;
+  padding: 0.5rem 0.75rem;
+  resize: vertical;
+}
+
+.input::placeholder {
+  color: hsl(var(--muted-foreground));
+}
+
+.input:focus-visible {
+  outline: 2px solid hsl(var(--ring));
+  outline-offset: 1px;
+}
+
+.input:disabled {
+  cursor: not-allowed;
+  opacity: 0.5;
+}
+
+.label {
+  font-size: 0.875rem;
+  font-weight: 500;
+  line-height: 1;
+}
+
+.field {
+  display: flex;
+  flex-direction: column;
+  gap: 0.5rem;
+  width: 100%;
+}
+
+.field-error {
+  color: hsl(var(--destructive));
+  font-size: 0.8125rem;
+  margin: 0;
+}
+
+/* Card */
+
+.card {
+  border-radius: var(--radius);
+  border: 1px solid hsl(var(--border));
+  background: hsl(var(--card));
+  color: hsl(var(--card-foreground));
+}
+
+.card-header {
+  display: flex;
+  flex-direction: column;
+  gap: 0.375rem;
+  padding: 1.5rem 1.5rem 0;
+}
+
+.card-title {
+  margin: 0;
+  font-size: 1rem;
+  font-weight: 600;
+  letter-spacing: -0.025em;
+}
+
+.card-description {
+  margin: 0;
+  color: hsl(var(--muted-foreground));
+  font-size: 0.875rem;
+}
+
+.card-content {
+  padding: 1.5rem;
+}
+
+.card-footer {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0 1.5rem 1.5rem;
+}
+
+/* Badge */
+
+.badge {
+  display: inline-flex;
+  align-items: center;
+  border-radius: 9999px;
+  border: 1px solid transparent;
+  background: hsl(var(--primary));
+  color: hsl(var(--primary-foreground));
+  padding: 0.125rem 0.625rem;
+  font-size: 0.75rem;
+  font-weight: 600;
+}
+
+.badge-secondary {
+  background: hsl(var(--secondary));
+  color: hsl(var(--secondary-foreground));
+}
+
+.badge-destructive {
+  background: hsl(var(--destructive));
+  color: hsl(var(--destructive-foreground));
+}
+
+.badge-outline {
+  background: transparent;
+  border-color: hsl(var(--border));
+  color: hsl(var(--foreground));
+}
+
+/* Table */
+
+.table-wrapper {
+  width: 100%;
+  overflow-x: auto;
+  border: 1px solid hsl(var(--border));
+  border-radius: var(--radius);
+}
+
+.table {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: 0.875rem;
+  text-align: left;
+}
+
+.table th {
+  height: 2.5rem;
+  padding: 0 1rem;
+  vertical-align: middle;
+  font-weight: 500;
+  color: hsl(var(--muted-foreground));
+  border-bottom: 1px solid hsl(var(--border));
+}
+
+.table td {
+  padding: 0.75rem 1rem;
+  vertical-align: middle;
+  border-bottom: 1px solid hsl(var(--border));
+}
+
+.table tbody tr:last-child td {
+  border-bottom: none;
+}
+
+.table tbody tr:hover {
+  background: hsl(var(--muted) / 0.5);
+}
+
+/* Dialog */
+
+.dialog-overlay {
+  position: fixed;
+  inset: 0;
+  z-index: 50;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  background: hsl(var(--foreground) / 0.4);
+  padding: 1rem;
+}
+
+.dialog {
+  width: 100%;
+  max-width: 28rem;
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+  border-radius: var(--radius);
+  border: 1px solid hsl(var(--border));
+  background: hsl(var(--popover));
+  color: hsl(var(--popover-foreground));
+  padding: 1.5rem;
+  box-shadow: 0 10px 30px hsl(var(--foreground) / 0.15);
+}
+
+.dialog-title {
+  margin: 0;
+  font-size: 1rem;
+  font-weight: 600;
+}
+
+.dialog-footer {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.5rem;
+}
+
+/* Feedback */
+
+.skeleton {
+  border-radius: calc(var(--radius) - 2px);
+  background: hsl(var(--muted));
+  animation: skeleton-pulse 1.5s ease-in-out infinite;
+  min-height: 1rem;
+}
+
+@keyframes skeleton-pulse {
+  50% {
+    opacity: 0.5;
+  }
+}
+
+.spinner {
+  width: 1.25rem;
+  height: 1.25rem;
+  border-radius: 9999px;
+  border: 2px solid hsl(var(--muted));
+  border-top-color: hsl(var(--foreground));
+  animation: spinner-spin 0.8s linear infinite;
+}
+
+@keyframes spinner-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+.empty-state {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: 0.5rem;
+  text-align: center;
+  border: 1px dashed hsl(var(--border));
+  border-radius: var(--radius);
+  padding: 3rem 1.5rem;
+  width: 100%;
+  box-sizing: border-box;
+}
+
+.empty-state-title {
+  margin: 0;
+  font-size: 1rem;
+  font-weight: 600;
+}
+
+.empty-state-description {
+  margin: 0;
+  color: hsl(var(--muted-foreground));
+  font-size: 0.875rem;
+}
+
+/* Auth pages */
+
+.auth-page {
+  min-height: 100vh;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 1.5rem;
+  box-sizing: border-box;
+}
+
+.auth-card {
+  width: 100%;
+  max-width: 24rem;
+}

package/templates/shadcn/src/components/auth/AuthCard.tsx

@@ -0,0 +1,29 @@
+import type { ReactNode } from "react";
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from "@/components/ui/card";
+
+export type AuthCardProps = {
+  title: string;
+  description: string;
+  children: ReactNode;
+};
+
+/** Centered card shell shared by the auth pages. */
+export function AuthCard({ title, description, children }: AuthCardProps) {
+  return (
+    <div className="auth-page">
+      <Card className="auth-card">
+        <CardHeader>
+          <CardTitle>{title}</CardTitle>
+          <CardDescription>{description}</CardDescription>
+        </CardHeader>
+        <CardContent>{children}</CardContent>
+      </Card>
+    </div>
+  );
+}

package/templates/shadcn/src/components/ui/badge.tsx

@@ -0,0 +1,17 @@
+import type { HTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+const variantClasses = {
+  default: "badge",
+  secondary: "badge badge-secondary",
+  destructive: "badge badge-destructive",
+  outline: "badge badge-outline",
+} as const;
+
+export type BadgeProps = HTMLAttributes<HTMLSpanElement> & {
+  variant?: keyof typeof variantClasses;
+};
+
+export function Badge({ className, variant = "default", ...props }: BadgeProps) {
+  return <span className={cn(variantClasses[variant], className)} {...props} />;
+}

package/templates/shadcn/src/components/ui/card.tsx

@@ -0,0 +1,28 @@
+import type { HTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+type DivProps = HTMLAttributes<HTMLDivElement>;
+
+export function Card({ className, ...props }: DivProps) {
+  return <div className={cn("card", className)} {...props} />;
+}
+
+export function CardHeader({ className, ...props }: DivProps) {
+  return <div className={cn("card-header", className)} {...props} />;
+}
+
+export function CardTitle({ className, ...props }: HTMLAttributes<HTMLHeadingElement>) {
+  return <h3 className={cn("card-title", className)} {...props} />;
+}
+
+export function CardDescription({ className, ...props }: HTMLAttributes<HTMLParagraphElement>) {
+  return <p className={cn("card-description", className)} {...props} />;
+}
+
+export function CardContent({ className, ...props }: DivProps) {
+  return <div className={cn("card-content", className)} {...props} />;
+}
+
+export function CardFooter({ className, ...props }: DivProps) {
+  return <div className={cn("card-footer", className)} {...props} />;
+}

package/templates/shadcn/src/components/ui/dialog.tsx

@@ -0,0 +1,38 @@
+import { useEffect, type ReactNode } from "react";
+
+export type DialogProps = {
+  open: boolean;
+  onClose: () => void;
+  title?: string;
+  children: ReactNode;
+  footer?: ReactNode;
+};
+
+/** Controlled modal. Closes on overlay click and Escape. */
+export function Dialog({ open, onClose, title, children, footer }: DialogProps) {
+  useEffect(() => {
+    if (!open) return;
+    function onKeyDown(event: KeyboardEvent) {
+      if (event.key === "Escape") onClose();
+    }
+    document.addEventListener("keydown", onKeyDown);
+    return () => document.removeEventListener("keydown", onKeyDown);
+  }, [open, onClose]);
+
+  if (!open) return null;
+  return (
+    <div className="dialog-overlay" onClick={onClose}>
+      <div
+        className="dialog"
+        role="dialog"
+        aria-modal="true"
+        aria-label={title}
+        onClick={(event) => event.stopPropagation()}
+      >
+        {title ? <h2 className="dialog-title">{title}</h2> : null}
+        {children}
+        {footer ? <div className="dialog-footer">{footer}</div> : null}
+      </div>
+    </div>
+  );
+}

package/templates/shadcn/src/components/ui/empty-state.tsx

@@ -0,0 +1,17 @@
+import type { ReactNode } from "react";
+
+export type EmptyStateProps = {
+  title: string;
+  description?: string;
+  action?: ReactNode;
+};
+
+export function EmptyState({ title, description, action }: EmptyStateProps) {
+  return (
+    <div className="empty-state">
+      <p className="empty-state-title">{title}</p>
+      {description ? <p className="empty-state-description">{description}</p> : null}
+      {action}
+    </div>
+  );
+}

package/templates/shadcn/src/components/ui/input.tsx

@@ -0,0 +1,8 @@
+import type { InputHTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+export type InputProps = InputHTMLAttributes<HTMLInputElement>;
+
+export function Input({ className, ...props }: InputProps) {
+  return <input className={cn("input", className)} {...props} />;
+}

package/templates/shadcn/src/components/ui/label.tsx

@@ -0,0 +1,8 @@
+import type { LabelHTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+export type LabelProps = LabelHTMLAttributes<HTMLLabelElement>;
+
+export function Label({ className, ...props }: LabelProps) {
+  return <label className={cn("label", className)} {...props} />;
+}

package/templates/shadcn/src/components/ui/skeleton.tsx

@@ -0,0 +1,6 @@
+import type { HTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+export function Skeleton({ className, ...props }: HTMLAttributes<HTMLDivElement>) {
+  return <div className={cn("skeleton", className)} {...props} />;
+}

package/templates/shadcn/src/components/ui/spinner.tsx

@@ -0,0 +1,3 @@
+export function Spinner() {
+  return <div className="spinner" role="status" aria-label="Loading" />;
+}