API Reference¶

ChefByte uses Supabase for its backend, with custom serverless functions for specialized operations.

Architecture¶

React Frontend → Supabase SDK → PostgreSQL
                    ↓
            Vercel Functions → External APIs

Authentication¶

ChefByte uses Supabase Auth with email/password:

Sign Up¶

const { data, error } = await supabase.auth.signUp({
  email: 'user@example.com',
  password: 'secure-password'
});

Sign In¶

const { data, error } = await supabase.auth.signInWithPassword({
  email: 'user@example.com',
  password: 'secure-password'
});

Session Management¶

Sessions are automatically managed by the Supabase client. Access the current user:

const { data: { user } } = await supabase.auth.getUser();

Database Tables¶

All tables use Row Level Security (RLS) with user_id filtering.

products¶

stock¶

recipes¶

recipe_ingredients¶

meal_plan¶

shopping_list¶

Serverless Functions¶

POST /api/analyze-product¶

AI-enhanced product analysis from barcode.

Authentication: Supabase JWT

Request:

{
  "barcode": "012345678901",
  "openFoodFactsData": { ... }
}

Response:

{
  "name": "Organic Whole Milk",
  "brand": "Horizon",
  "calories": 150,
  "protein": 8,
  "carbs": 12,
  "fat": 8,
  "servingSize": "1 cup",
  "storageInstructions": "Refrigerate after opening",
  "shelfLife": 14
}

POST /api/walmart-scrape¶

Scrape current Walmart prices.

Authentication: Supabase JWT

Request:

{
  "url": "https://www.walmart.com/ip/..."
}

Response:

{
  "price": 4.99,
  "inStock": true,
  "title": "Great Value Milk"
}

POST /api/walmart-update¶

Batch update Walmart prices.

Authentication: Supabase JWT

Request:

{
  "productIds": ["uuid1", "uuid2", "uuid3"]
}

Response:

{
  "updated": 3,
  "failed": 0,
  "results": [...]
}

POST /api/liquidtrack¶

Log scale events (IoT).

Authentication: x-api-key header

Request:

{
  "scale_id": "kitchen-coffee",
  "events": [
    {
      "timestamp": "2024-01-15T08:30:00Z",
      "weight_before": 500,
      "weight_after": 350,
      "is_refill": false
    }
  ]
}

Response:

{
  "success": true,
  "count": 1
}

RPC Functions¶

demo_reset()¶

Reset demo account data.

const { error } = await supabase.rpc('demo_reset');

Only works for the designated demo user.

Row Level Security¶

All tables enforce RLS:

CREATE POLICY "Users can only access own data"
  ON products FOR ALL
  USING (auth.uid() = user_id);

This ensures users can only read/write their own data.

Environment Variables¶

Frontend (VITE_*)¶

VITE_SUPABASE_URL=https://project.supabase.co
VITE_SUPABASE_ANON_KEY=eyJ...

Serverless Functions¶

SUPABASE_SERVICE_ROLE_KEY=eyJ...
OPENAI_API_KEY=sk-...
SERPAPI_KEY=...
SCRAPE_DO_API_KEY=...

Error Handling¶

API responses follow consistent format:

Success:

{
  "data": { ... },
  "error": null
}

Error:

{
  "data": null,
  "error": {
    "message": "Error description",
    "code": "ERROR_CODE"
  }
}

Rate Limits¶

TypeScript Types¶

Generated from database schema:

supabase gen types typescript --project-id your-project > database.types.ts

Import in code:

import { Database } from './database.types';

type Product = Database['public']['Tables']['products']['Row'];
type InsertProduct = Database['public']['Tables']['products']['Insert'];