Validating Request Body, Typing API Routes, and Middleware Authentication in TanStack Start API

import { json } from "@tanstack/start";
import { createAPIFileRoute } from "@tanstack/start/api";
import { z } from "zod";

const CreatedBonusSchema = z.object({
  name: z.string().min(1).max(125),
  code: z.string().cuid2(),
});

export const APIRoute = createAPIFileRoute("/api/bonus")({
  POST: ({ params, request }) => {
    console.log("🚀 ~ APIRoute ~ request, params:", request, params);

    const result = CreatedBonusSchema.safeParse(request.body);

    if (!result.success) {
      return json({ message: result.error.message }, { status: 400 });
    }
    console.log("🚀 ~ APIRoute ~ result:");

    return json({ message: "Created bonus!", body: result.data });
  }
}

   (property) POST?: StartAPIMethodCallback<"/api/bonus"> | undefined

   const { sessionClaims, userId } = await getAuth(request);
   if (!userId) return new Response("Unauthorized", { status: 401 });