robodev 0.47.3 → 0.49.0

package/templates/shadcn/src/components/ui/table.tsx

@@ -0,0 +1,30 @@
+import type { HTMLAttributes, TableHTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+export function Table({ className, ...props }: TableHTMLAttributes<HTMLTableElement>) {
+  return (
+    <div className="table-wrapper">
+      <table className={cn("table", className)} {...props} />
+    </div>
+  );
+}
+
+export function TableHeader(props: HTMLAttributes<HTMLTableSectionElement>) {
+  return <thead {...props} />;
+}
+
+export function TableBody(props: HTMLAttributes<HTMLTableSectionElement>) {
+  return <tbody {...props} />;
+}
+
+export function TableRow(props: HTMLAttributes<HTMLTableRowElement>) {
+  return <tr {...props} />;
+}
+
+export function TableHead(props: HTMLAttributes<HTMLTableCellElement>) {
+  return <th {...props} />;
+}
+
+export function TableCell(props: HTMLAttributes<HTMLTableCellElement>) {
+  return <td {...props} />;
+}

package/templates/shadcn/src/components/ui/textarea.tsx

@@ -0,0 +1,8 @@
+import type { TextareaHTMLAttributes } from "react";
+import { cn } from "@/lib/utils";
+
+export type TextareaProps = TextareaHTMLAttributes<HTMLTextAreaElement>;
+
+export function Textarea({ className, ...props }: TextareaProps) {
+  return <textarea className={cn("input", className)} {...props} />;
+}

package/templates/shadcn/src/lib/auth.tsx

@@ -0,0 +1,72 @@
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useMemo,
+  useState,
+  type ReactNode,
+} from "react";
+import { Navigate, useLocation } from "react-router-dom";
+import type { AuthUser } from "@robodev-ai/client";
+import { client } from "@/lib/client";
+import { Spinner } from "@/components/ui/spinner";
+
+type AuthContextValue = {
+  user: AuthUser | null;
+  loading: boolean;
+  refresh: () => Promise<void>;
+  signOut: () => Promise<void>;
+};
+
+const AuthContext = createContext<AuthContextValue | null>(null);
+
+export function AuthProvider({ children }: { children: ReactNode }) {
+  const [user, setUser] = useState<AuthUser | null>(null);
+  const [loading, setLoading] = useState(true);
+
+  const refresh = useCallback(async () => {
+    const result = await client.auth.getUser();
+    setUser(result.user);
+    setLoading(false);
+  }, []);
+
+  const signOut = useCallback(async () => {
+    await client.auth.signOut();
+    setUser(null);
+  }, []);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  const value = useMemo(
+    () => ({ user, loading, refresh, signOut }),
+    [user, loading, refresh, signOut],
+  );
+
+  return <AuthContext.Provider value={value}>{children}</AuthContext.Provider>;
+}
+
+export function useAuth(): AuthContextValue {
+  const context = useContext(AuthContext);
+  if (!context) throw new Error("useAuth must be used inside <AuthProvider>");
+  return context;
+}
+
+/** Wrap protected routes: <Route element={<AuthGuard><Page /></AuthGuard>} /> */
+export function AuthGuard({ children }: { children: ReactNode }) {
+  const { user, loading } = useAuth();
+  const location = useLocation();
+  if (loading) {
+    return (
+      <div className="auth-page">
+        <Spinner />
+      </div>
+    );
+  }
+  if (!user) {
+    return <Navigate to="/login" replace state={{ from: location.pathname + location.search }} />;
+  }
+  return <>{children}</>;
+}

package/templates/shadcn/src/lib/client.ts

@@ -0,0 +1,8 @@
+import { createClient } from "@robodev-ai/client";
+
+/**
+ * Same-origin Robodev client. Works on the hosted app URL and through the
+ * local Vite proxy. Adds the Authorization header and refreshes tokens on 401.
+ * Call app APIs with client.get/post/put/patch/del("/api/...").
+ */
+export const client = createClient({ url: "" });

package/templates/shadcn/src/pages/Home.tsx

@@ -1,8 +1,11 @@
 import { useEffect, useState } from "react";
+import { Link } from "react-router-dom";
 import { getHealth } from "@/api/generated/endpoints";
+import { useAuth } from "@/lib/auth";
 import { Button } from "@/components/ui/button";
 
 export function Home() {
+  const { user, loading, signOut } = useAuth();
   const [status, setStatus] = useState("Checking health…");
 
   async function loadHealth() {
@@ -26,6 +29,18 @@ export function Home() {
     <main>
       <h1>Welcome</h1>
       <p>Your app is ready.</p>
+      {loading ? null : user ? (
+        <p className="muted">
+          Signed in as {user.email}.{" "}
+          <Button variant="link" size="sm" onClick={() => void signOut()}>
+            Sign out
+          </Button>
+        </p>
+      ) : (
+        <p className="muted">
+          <Link to="/login">Sign in</Link> or <Link to="/register">create an account</Link>.
+        </p>
+      )}
       <Button type="button" onClick={() => void loadHealth()}>
         Check health
       </Button>

package/templates/shadcn/src/pages/Login.tsx

@@ -0,0 +1,70 @@
+import { useState, type FormEvent } from "react";
+import { Link, useLocation, useNavigate } from "react-router-dom";
+import { client } from "@/lib/client";
+import { useAuth } from "@/lib/auth";
+import { AuthCard } from "@/components/auth/AuthCard";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+
+export function Login() {
+  const navigate = useNavigate();
+  const location = useLocation();
+  const { refresh } = useAuth();
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [error, setError] = useState<string | null>(null);
+  const [submitting, setSubmitting] = useState(false);
+
+  async function onSubmit(event: FormEvent) {
+    event.preventDefault();
+    setError(null);
+    setSubmitting(true);
+    try {
+      await client.auth.signIn.email({ email, password });
+      await refresh();
+      const from = (location.state as { from?: string } | null)?.from;
+      navigate(from ?? "/", { replace: true });
+    } catch (cause) {
+      setError(cause instanceof Error ? cause.message : "Sign in failed");
+    } finally {
+      setSubmitting(false);
+    }
+  }
+
+  return (
+    <AuthCard title="Sign in" description="Enter your email and password.">
+      <form className="stack" onSubmit={(event) => void onSubmit(event)}>
+        <div className="field">
+          <Label htmlFor="email">Email</Label>
+          <Input
+            id="email"
+            type="email"
+            autoComplete="email"
+            required
+            value={email}
+            onChange={(event) => setEmail(event.target.value)}
+          />
+        </div>
+        <div className="field">
+          <Label htmlFor="password">Password</Label>
+          <Input
+            id="password"
+            type="password"
+            autoComplete="current-password"
+            required
+            value={password}
+            onChange={(event) => setPassword(event.target.value)}
+          />
+          {error ? <p className="field-error">{error}</p> : null}
+        </div>
+        <Button type="submit" disabled={submitting}>
+          {submitting ? "Signing in…" : "Sign in"}
+        </Button>
+        <p className="muted">
+          No account? <Link to="/register" state={location.state}>Create one</Link>
+        </p>
+      </form>
+    </AuthCard>
+  );
+}

package/templates/shadcn/src/pages/NotFound.tsx

@@ -0,0 +1,14 @@
+import { Link } from "react-router-dom";
+import { EmptyState } from "@/components/ui/empty-state";
+
+export function NotFound() {
+  return (
+    <div className="page">
+      <EmptyState
+        title="Page not found"
+        description="The page you are looking for does not exist."
+        action={<Link to="/">Go home</Link>}
+      />
+    </div>
+  );
+}

package/templates/shadcn/src/pages/Register.tsx

@@ -0,0 +1,82 @@
+import { useState, type FormEvent } from "react";
+import { Link, useLocation, useNavigate } from "react-router-dom";
+import { client } from "@/lib/client";
+import { useAuth } from "@/lib/auth";
+import { AuthCard } from "@/components/auth/AuthCard";
+import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+
+export function Register() {
+  const navigate = useNavigate();
+  const location = useLocation();
+  const { refresh } = useAuth();
+  const [name, setName] = useState("");
+  const [email, setEmail] = useState("");
+  const [password, setPassword] = useState("");
+  const [error, setError] = useState<string | null>(null);
+  const [submitting, setSubmitting] = useState(false);
+
+  async function onSubmit(event: FormEvent) {
+    event.preventDefault();
+    setError(null);
+    setSubmitting(true);
+    try {
+      await client.auth.signUp({ name, email, password });
+      await refresh();
+      const from = (location.state as { from?: string } | null)?.from;
+      navigate(from ?? "/", { replace: true });
+    } catch (cause) {
+      setError(cause instanceof Error ? cause.message : "Registration failed");
+    } finally {
+      setSubmitting(false);
+    }
+  }
+
+  return (
+    <AuthCard title="Create account" description="Passwords need at least 12 characters.">
+      <form className="stack" onSubmit={(event) => void onSubmit(event)}>
+        <div className="field">
+          <Label htmlFor="name">Name</Label>
+          <Input
+            id="name"
+            autoComplete="name"
+            required
+            value={name}
+            onChange={(event) => setName(event.target.value)}
+          />
+        </div>
+        <div className="field">
+          <Label htmlFor="email">Email</Label>
+          <Input
+            id="email"
+            type="email"
+            autoComplete="email"
+            required
+            value={email}
+            onChange={(event) => setEmail(event.target.value)}
+          />
+        </div>
+        <div className="field">
+          <Label htmlFor="password">Password</Label>
+          <Input
+            id="password"
+            type="password"
+            autoComplete="new-password"
+            required
+            minLength={12}
+            value={password}
+            onChange={(event) => setPassword(event.target.value)}
+          />
+          {error ? <p className="field-error">{error}</p> : null}
+        </div>
+        <Button type="submit" disabled={submitting}>
+          {submitting ? "Creating account…" : "Create account"}
+        </Button>
+        <p className="muted">
+          Already have an account? <Link to="/login" state={location.state}>Sign in</Link>
+        </p>
+      </form>
+    </AuthCard>
+  );
+}

package/templates/space/ROBODEV.md

@@ -22,6 +22,12 @@ export const get = defineApi({
 });
 ```
 
+Method exports: one export per method — `get` / `post` / `put` / `patch` / `delete`. `delete` is a reserved word — write `export const del = ...` or `export { remove as delete }`; both serve DELETE.
+
+`ctx.user.id` is a string like `usr_abc123`, not a UUID. Type user id columns as `text`, never `uuid`.
+
+Throw an Error with an integer `statusCode` (400-599) to answer with that status: `throw Object.assign(new Error("Not found"), { statusCode: 404 })`. Any other throw is a generic 500.
+
 ## Hard rules
 
 - Do not run npm, pnpm, or yarn install.
@@ -34,7 +40,7 @@ export const get = defineApi({
 
 ## Auth and product data
 
-Persist primary product data with `defineApi` and `robodev-publish be`. Do not use localStorage as the product store unless the user asked for a public, static, or no-account page. Auth is on by default: add login and register and protect routes unless the product is public or unauthenticated. Use `auth: "required"` and `ctx.user.id`. Call reserved `/api/user/auth/*` — do not implement `api/user/**`. Tiny: reuse seed login/register and AuthGuard. Shadcn, Empty, and legacy: create login/register with `@robodev-ai/client` tokens. A missing `.rulesync` skill is not a reason to skip APIs. Do not require `robodev-auth set` every run.
+Persist primary product data with `defineApi` and `robodev-publish be`. Do not use localStorage as the product store unless the user asked for a public, static, or no-account page. Auth is on by default: add login and register and protect routes unless the product is public or unauthenticated. Use `auth: "required"` and `ctx.user.id`. Call reserved `/api/user/auth/*` — do not implement `api/user/**`. Tiny and Shadcn: reuse seed login/register and AuthGuard. Empty and legacy: create login/register with `@robodev-ai/client` tokens. A missing `.rulesync` skill is not a reason to skip APIs. Do not require `robodev-auth set` every run.
 
 ## Backend
 

package/templates/space/package.json

@@ -9,10 +9,10 @@
     "rules:gen": "rulesync generate"
   },
   "dependencies": {
-    "@robodev-ai/sdk": "^0.13.0"
+    "@robodev-ai/sdk": "^0.15.0"
   },
   "devDependencies": {
-    "robodev": "^0.47.3",
+    "robodev": "^0.49.0",
     "rulesync": "^8.18.0",
     "typescript": "^5.9.2"
   }

package/templates/shadcn/components.json

@@ -1,21 +0,0 @@
-{
-  "$schema": "https://ui.shadcn.com/schema.json",
-  "style": "new-york",
-  "rsc": false,
-  "tsx": true,
-  "tailwind": {
-    "config": "tailwind.config.ts",
-    "css": "src/app.css",
-    "baseColor": "neutral",
-    "cssVariables": true,
-    "prefix": ""
-  },
-  "aliases": {
-    "components": "@/components",
-    "utils": "@/lib/utils",
-    "ui": "@/components/ui",
-    "lib": "@/lib",
-    "hooks": "@/hooks"
-  },
-  "iconLibrary": "lucide"
-}

package/templates/shadcn/postcss.config.js

@@ -1,6 +0,0 @@
-export default {
-  plugins: {
-    tailwindcss: {},
-    autoprefixer: {},
-  },
-};

package/templates/shadcn/tailwind.config.ts

@@ -1,42 +0,0 @@
-import type { Config } from "tailwindcss";
-
-export default {
-  darkMode: ["class"],
-  content: ["./index.html", "./src/**/*.{ts,tsx}"],
-  theme: {
-    extend: {
-      borderRadius: {
-        lg: "var(--radius)",
-        md: "calc(var(--radius) - 2px)",
-        sm: "calc(var(--radius) - 4px)",
-      },
-      colors: {
-        background: "hsl(var(--background))",
-        foreground: "hsl(var(--foreground))",
-        primary: {
-          DEFAULT: "hsl(var(--primary))",
-          foreground: "hsl(var(--primary-foreground))",
-        },
-        secondary: {
-          DEFAULT: "hsl(var(--secondary))",
-          foreground: "hsl(var(--secondary-foreground))",
-        },
-        muted: {
-          DEFAULT: "hsl(var(--muted))",
-          foreground: "hsl(var(--muted-foreground))",
-        },
-        accent: {
-          DEFAULT: "hsl(var(--accent))",
-          foreground: "hsl(var(--accent-foreground))",
-        },
-        destructive: {
-          DEFAULT: "hsl(var(--destructive))",
-          foreground: "hsl(var(--destructive-foreground))",
-        },
-        border: "hsl(var(--border))",
-        ring: "hsl(var(--ring))",
-      },
-    },
-  },
-  plugins: [],
-} satisfies Config;