AI
NativeExpress includes three AI features: a streaming chat, an image generation studio, and an object scanner. All three talk to OpenRouter through Supabase Edge Functions, using the Vercel AI SDK .
Prerequisites
Complete the Supabase project setup, set your edge function secrets, and deploy the functions.
Set OPENROUTER_API_KEY as a Supabase function secret before using AI features.
A missing key returns provider_not_configured when a request reaches the provider setup.
How it works
Every AI feature is built the same way:
The provider key is kept only in Supabase function secrets, never in your app bundle or on the device. The client sends a Supabase access token, and the function derives the user from it rather than trusting a user id in the request body.
| Feature | Function | Client entry point |
|---|---|---|
| Chat | supabase/functions/chat | src/features/chat/chatTransport.ts |
| Image generation | supabase/functions/generate | src/features/create/generateImage.ts |
| Scan | supabase/functions/identify | src/features/scan/hooks/scans.ts |
Each feature is an independent directory under src/features/, with its own screens,
components, hooks and repository. Remove the ones your app does not need with
yarn remove:feature; see
Removing features and integrations.
Where data is stored
| Table | Holds |
|---|---|
threads | One row per conversation: owner, model, title, updated_at |
messages | One row per message: thread_id, role, and parts as JSON |
generations | One row per generated image: prompt, model, style, aspect ratio, image_path |
scans | One row per scan: image_path and the structured result JSON |
All four have owner-scoped row-level security: a user can only read and write their own rows.
Images are stored in a private Supabase Storage bucket called chat-media, under {userId}/…, and its policies scope each signed-in user to objects under their own prefix. Rows store the stable object path rather than a signed URL, because signed URLs expire, and the app signs the path on demand for display.
Configuration
config.js and the edge functions read model definitions, style presets, aspect ratios
and the default free-message allowance from supabase/functions/_utils/ai.config.json:
ai: require('./supabase/functions/_utils/ai.config.json'),Redeploy the affected functions after editing this file. The AI_FREE_MESSAGES
secret overrides its allowance on the server, so keep that value in sync with
the app. See Models and Quota and paywall.