api-patterns

RLS (Row Level Security) API routes enforce user-scoped data access through context wrappers combined with Zod validation for request schemas. This Skill automates implementing protected endpoints that validate incoming requests, apply RLS context, and return structured error responses with appropriate HTTP status codes.

Use Zod schemas to validate request and response payloads before processing. This Skill applies Zod validation patterns across CRUD endpoints, webhook handlers, and protected routes to catch malformed data early and return consistent validation errors with proper HTTP status codes.

Webhook handling requires validation of incoming payloads, idempotency checks, and structured error responses. This Skill provides webhook patterns that integrate Zod validation and error handling to safely process external event data while maintaining API security and consistency.

Yes. This Skill wraps CRUD operations in RLS context to restrict data access by user or admin role. It combines RLS context wrappers with Zod validation and error handling across create, read, update, and delete operations to enforce access control automatically.

Structured error responses with appropriate HTTP status codes ensure consistent API feedback. This Skill implements error handling that pairs validation failures with 400 responses, RLS violations with 403, and server errors with 500, all with standardized response formats.

RLS context wrappers are essential for user or admin routes to prevent unauthorized data access. This Skill enforces RLS patterns across all protected endpoints, ensuring that user-scoped and admin routes automatically restrict results to appropriate data based on context.