@polymorphism-tech/morph-spec 3.2.0 → 4.2.0

package/stacks/nextjs-supabase/.claude/skills/level-2-domains/integrations/supabase-expert.md

@@ -4,166 +4,46 @@
 
 ## Identity
 
-Database and backend-as-a-service specialist for Supabase. Designs PostgreSQL schemas, Row Level Security policies, Auth flows, Storage buckets, Realtime subscriptions, and pgvector embeddings. Ensures all data access goes through RLS-protected paths.
+Supabase platform specialist. Designs PostgreSQL schemas, RLS policies, Auth flows, Storage buckets, pgvector embeddings.
 
-## Domains
+## Knowledge Base (Consult These)
 
-- database-design
-- auth-flows
-- rls-policies
-- storage
-- vector-search
-- realtime
+- `framework/standards/infrastructure/supabase/rls.md` - RLS policies, security patterns
+- `framework/standards/infrastructure/supabase/auth.md` - Auth providers, triggers, profiles
+- `framework/standards/infrastructure/supabase/storage.md` - Buckets, file policies, MIME types
+- `framework/standards/infrastructure/supabase/pgvector.md` - Vector indexes, similarity search
+- `framework/standards/backend/database/postgresql/database.md` - PostgreSQL schema design
 
-## Standards
+## Responsibilities
 
-- coding.md -- C# naming and async patterns for backend consumers
-- architecture.md -- Layer boundaries when Supabase replaces traditional ORM
+- Design schemas following PostgreSQL naming (snake_case per postgresql/database.md)
+- Create RLS policies per security patterns in rls.md
+- Configure Auth triggers per auth.md signup patterns
+- Set up Storage buckets with policies per storage.md
+- Implement pgvector indexes per pgvector.md (HNSW vs IVFFlat)
 
-## Patterns
+## Prompt Template
 
-### RLS Policy Creation
+When working on Supabase tasks:
+1. Consult `rls.md` for all table policies (enable RLS, create policies for SELECT/INSERT/UPDATE/DELETE)
+2. Follow `auth.md` for signup triggers and profile creation
+3. Use `storage.md` for bucket configuration (size limits, MIME types, folder structure)
+4. Apply `pgvector.md` for embedding indexes and similarity search functions
+5. ALWAYS use snake_case for table/column names (PostgreSQL convention)
 
-```sql
--- Enable RLS on table
-alter table public.documents enable row level security;
+## When to Use
 
--- Users can only read their own documents
-create policy "Users read own documents"
-  on public.documents for select
-  using (auth.uid() = user_id);
+- Database schema design
+- RLS policy creation/audit
+- Supabase Auth configuration
+- Vector search implementation
+- PostgreSQL migrations
 
--- Users can insert documents for themselves
-create policy "Users insert own documents"
-  on public.documents for insert
-  with check (auth.uid() = user_id);
+## Collaborates With
 
--- Users can update their own documents
-create policy "Users update own documents"
-  on public.documents for update
-  using (auth.uid() = user_id)
-  with check (auth.uid() = user_id);
-
--- Users can delete their own documents
-create policy "Users delete own documents"
-  on public.documents for delete
-  using (auth.uid() = user_id);
-
--- Service role bypasses RLS (for .NET API with service_role key)
--- No policy needed: service_role key skips RLS automatically
-```
-
-### Supabase Auth Setup
-
-```sql
--- Auth is built-in. Configure providers via Supabase Dashboard or config.toml.
--- Key tables: auth.users (managed), public.profiles (custom)
-
--- Auto-create profile on signup via trigger
-create or replace function public.handle_new_user()
-returns trigger as $$
-begin
-  insert into public.profiles (id, email, display_name, avatar_url)
-  values (
-    new.id,
-    new.email,
-    coalesce(new.raw_user_meta_data ->> 'full_name', split_part(new.email, '@', 1)),
-    new.raw_user_meta_data ->> 'avatar_url'
-  );
-  return new;
-end;
-$$ language plpgsql security definer;
-
-create trigger on_auth_user_created
-  after insert on auth.users
-  for each row execute function public.handle_new_user();
-```
-
-### Storage Bucket Configuration
-
-```sql
--- Create a private bucket (RLS-protected)
-insert into storage.buckets (id, name, public, file_size_limit, allowed_mime_types)
-values (
-  'documents',
-  'documents',
-  false,
-  5242880, -- 5MB
-  array['application/pdf', 'image/png', 'image/jpeg']
-);
-
--- Storage RLS: users access their own folder
-create policy "Users manage own files"
-  on storage.objects for all
-  using (bucket_id = 'documents' and (storage.foldername(name))[1] = auth.uid()::text)
-  with check (bucket_id = 'documents' and (storage.foldername(name))[1] = auth.uid()::text);
-```
-
-### pgvector Queries
-
-```sql
--- Enable extension
-create extension if not exists vector;
-
--- Table with embedding column
-create table public.document_chunks (
-  id bigint generated always as identity primary key,
-  document_id uuid references public.documents(id) on delete cascade,
-  content text not null,
-  embedding vector(1536), -- OpenAI text-embedding-3-small
-  metadata jsonb default '{}'::jsonb,
-  created_at timestamptz default now()
-);
-
--- HNSW index for fast similarity search
-create index on public.document_chunks
-  using hnsw (embedding vector_cosine_ops)
-  with (m = 16, ef_construction = 64);
-
--- Similarity search function
-create or replace function match_documents(
-  query_embedding vector(1536),
-  match_threshold float default 0.78,
-  match_count int default 10
-)
-returns table (id bigint, content text, similarity float)
-language sql stable
-as $$
-  select
-    dc.id,
-    dc.content,
-    1 - (dc.embedding <=> query_embedding) as similarity
-  from public.document_chunks dc
-  where 1 - (dc.embedding <=> query_embedding) > match_threshold
-  order by dc.embedding <=> query_embedding
-  limit match_count;
-$$;
-```
-
-### Migration Management
-
-```bash
-# Supabase CLI migration workflow
-supabase migration new create_documents_table  # creates timestamped SQL file
-supabase db push                                # apply migrations to remote
-supabase db reset                               # reset local DB and replay all migrations
-supabase db diff --schema public                # generate migration from schema diff
-
-# Migration file naming: supabase/migrations/{timestamp}_description.sql
-# Always include: CREATE TABLE, indexes, RLS enable, policies
-# Never include: seed data (use supabase/seed.sql)
-```
-
-## Checklist
-
-- [ ] All tables have RLS enabled
-- [ ] Every table has at least one SELECT policy
-- [ ] service_role key used only in backend (never exposed to client)
-- [ ] Storage buckets have file size limits and MIME type restrictions
-- [ ] Auth trigger creates profile on signup
-- [ ] pgvector index type matches query pattern (HNSW for recall, IVFFlat for speed)
-- [ ] Migrations are idempotent (use IF NOT EXISTS)
-- [ ] Foreign keys have ON DELETE behavior defined
+- nextjs-senior - Frontend integration
+- api-designer - Backend API contracts
+- dotnet-senior - .NET backend integration
 
 ---