orpc

name	orpc
description	Type-safe API endpoints with oRPC framework. Use when creating or modifying procedures, middleware composition, validation, and error handling.

oRPC Procedures

Type-safe API endpoint patterns with oRPC (Object-oriented RPC).

1. Use authProcedure for authenticated endpoints; add middleware for authorization
2. Always use NOT_FOUND (never FORBIDDEN) to prevent resource enumeration
3. Set createdAt/updatedAt on insert; update only updatedAt on update
4. Use .returning() and check for null after insert/update/delete
5. Filter queries by tenant even after middleware checks (defense in depth)
6. Use consistent ID generation across procedures (UUID, ULID, nanoid)
7. Validate tenant context in procedures requiring tenant scope
8. Include pagination (limit, offset) on list procedures
9. Use Zod for input validation; keep schemas near procedure definitions
10. Stack middleware in logical order: auth → authorization → business logic