@polymorphism-tech/morph-spec 3.2.0 → 4.3.0

package/stacks/nextjs-supabase/.morph/templates/proposal.md

@@ -1,145 +0,0 @@
-# Feature Proposal: {{FEATURE_NAME_TITLE}}
-
-> Proposal for a new feature. This document describes WHAT and WHY.
-> For technical details, see `spec.md`.
-
-## Metadata
-
-| Field | Value |
-|-------|-------|
-| **Proposed** | {{DATE}} |
-| **Author** | {{AUTHOR}} |
-| **Status** | Draft / Under Review / Approved / Rejected |
-| **Priority** | High / Medium / Low |
-| **Stack** | Next.js + Supabase + .NET API |
-
----
-
-## Overview
-
-{Brief 2-3 sentence summary of the feature}
-
----
-
-## Problem Statement
-
-### What is the problem?
-
-{Describe the problem this feature solves. Be specific.}
-
-### Who is affected?
-
-{Who suffers from this problem? End users? Developers? Operations?}
-
-### What is the impact?
-
-{What is the impact of NOT solving this problem?}
-- User productivity loss: {X}
-- Revenue impact: {X}
-- User satisfaction: {X}
-
----
-
-## Proposed Solution
-
-### Key Features
-
-1. **{Feature 1}** - {brief description}
-2. **{Feature 2}** - {brief description}
-3. **{Feature 3}** - {brief description}
-
-### Technical Approach
-
-| Layer | Technology | Role |
-|-------|-----------|------|
-| **Database** | Supabase (PostgreSQL + RLS) | {tables, policies, storage} |
-| **Backend API** | .NET 10 Minimal API | {endpoints, business logic} |
-| **Frontend** | Next.js 15 (App Router) | {pages, components, auth} |
-| **Infra** | EasyPanel + Docker | {deployment, SSL} |
-
-### User Journey
-
-```
-1. User {initial action}
-2. System {response}
-3. User {next action}
-4. System {final result}
-```
-
----
-
-## Cost Estimate
-
-| Resource | Provider | Monthly Cost | Notes |
-|----------|----------|-------------|-------|
-| Supabase | Free / Pro | $0 - $25 | {DB, Auth, Storage, Realtime} |
-| VPS (EasyPanel) | {provider} | ${X} | {API + Web containers} |
-| External APIs | {provider} | ${X} | {if applicable} |
-| **Total** | | **${X}/month** | |
-
----
-
-## Risk Assessment
-
-| Risk | Likelihood | Impact | Mitigation |
-|------|------------|--------|------------|
-| {Risk 1} | High/Med/Low | High/Med/Low | {mitigation strategy} |
-| {Risk 2} | High/Med/Low | High/Med/Low | {mitigation strategy} |
-
----
-
-## Scope
-
-### In Scope
-
-- {Item 1}
-- {Item 2}
-
-### Out of Scope
-
-- {Item 1}
-- {Item 2}
-
----
-
-## Success Metrics
-
-| Metric | Current | Target |
-|--------|---------|--------|
-| {Metric 1} | {X} | {Y} |
-| {Metric 2} | {X} | {Y} |
-
----
-
-## Dependencies
-
-- [ ] {Dependency 1} - {status}
-- [ ] {Dependency 2} - {status}
-
----
-
-## Estimated Effort
-
-| Phase | Estimate |
-|-------|----------|
-| Design & Spec | {X}h |
-| Database & Migrations | {X}h |
-| Backend API | {X}h |
-| Frontend | {X}h |
-| Testing | {X}h |
-| **Total** | **{X}h** |
-
----
-
-## Next Steps
-
-Once approved:
-1. Create detailed `spec.md` with technical design
-2. Define contracts (`contracts.cs` + `contracts.ts`)
-3. Record decisions in `decisions.md`
-4. Break down into `tasks.md`
-5. Begin implementation
-
----
-
-*Created with MORPH Framework*

package/stacks/nextjs-supabase/.morph/templates/recap.md

@@ -1,134 +0,0 @@
-# Feature Recap: {{FEATURE_NAME_TITLE}}
-
-## Summary
-
-| Field | Value |
-|-------|-------|
-| **Feature ID** | {{FEATURE_NAME}} |
-| **Completed** | {{DATE}} |
-| **Total Tasks** | {X} |
-| **Time Spent** | {X}h |
-| **Agents Used** | {list} |
-| **Stack** | Next.js + Supabase + .NET API |
-
----
-
-## Tasks Completed
-
-| ID | Title | Category | Duration |
-|----|-------|----------|----------|
-| T001 | {title} | Database | {X}min |
-| T002 | {title} | Backend | {X}min |
-| T003 | {title} | Frontend | {X}min |
-
----
-
-## Validation Results
-
-| Validator | Status | Details |
-|-----------|--------|---------|
-| contract-compliance | Pass/Fail | {details} |
-| architecture | Pass/Fail | {details} |
-| design-system | Pass/Fail | {details} |
-| coding-standards | Pass/Fail | {details} |
-
----
-
-## What Was Delivered
-
-### Functionality
-- {Functionality 1 delivered}
-- {Functionality 2 delivered}
-- {Functionality 3 delivered}
-
-### Database (Supabase)
-- Tables: {list}
-- RLS Policies: {count} policies
-- Migrations: {count} files
-
-### Backend API (.NET)
-- Endpoints: {count} endpoints
-- Services: {list}
-
-### Frontend (Next.js)
-- Pages: {list}
-- Components: {list}
-
----
-
-## Files Created
-
-```
-supabase/migrations/{files}
-backend/src/{files}
-frontend/src/{files}
-```
-
-## Files Modified
-
-```
-{list of modified files}
-```
-
----
-
-## Architecture Decisions
-
-| Decision | Rationale |
-|----------|-----------|
-| {Decision 1} | {Reason} |
-| {Decision 2} | {Reason} |
-
-See full ADRs in `decisions.md`
-
----
-
-## Test Coverage
-
-| Type | Files | Coverage |
-|------|-------|----------|
-| Backend Unit | {X} | {X}% |
-| Frontend Component | {X} | {X}% |
-
----
-
-## Lessons Learned
-
-### What Went Well
-- {Positive point 1}
-- {Positive point 2}
-
-### What Could Be Improved
-- {Improvement point 1}
-- {Improvement point 2}
-
-### Recommendations for Future
-- {Recommendation 1}
-- {Recommendation 2}
-
----
-
-## Metrics
-
-| Metric | Value |
-|--------|-------|
-| Tasks Completed | {X}/{X} |
-| Checkpoints Passed | {X} |
-| Validation Passes | {X}/{X} |
-| Bugs Found | {X} |
-| Bugs Fixed | {X} |
-
----
-
-## Related Resources
-
-- **Proposal:** `proposal.md`
-- **Spec:** `spec.md`
-- **Contracts (.NET):** `contracts.cs`
-- **Contracts (TS):** `contracts.ts`
-- **Tasks:** `tasks.md`
-- **Decisions:** `decisions.md`
-
----
-
-*Generated by MORPH Framework on {{DATE}}*

package/stacks/nextjs-supabase/.morph/templates/rls-policy.sql

@@ -1,57 +0,0 @@
--- ============================================================
--- RLS Policy: {{FEATURE_NAME_TITLE}}
--- Stack: Next.js + Supabase
--- Generated by MORPH Framework
--- Date: {{DATE}}
--- ============================================================
-
--- Enable RLS on table
-alter table public.{{TABLE_NAME}} enable row level security;
-
--- Force RLS for table owner (prevents bypassing)
-alter table public.{{TABLE_NAME}} force row level security;
-
--- Policy: {{POLICY_NAME}}
--- Operation: {{OPERATION}} (SELECT | INSERT | UPDATE | DELETE | ALL)
-
--- SELECT policy: users can read their own rows
-create policy "{{POLICY_NAME}}_select"
-  on public.{{TABLE_NAME}}
-  for select
-  using ({{USING_EXPRESSION}});
-
--- INSERT policy: users can insert rows for themselves
-create policy "{{POLICY_NAME}}_insert"
-  on public.{{TABLE_NAME}}
-  for insert
-  with check ({{WITH_CHECK_EXPRESSION}});
-
--- UPDATE policy: users can update their own rows
-create policy "{{POLICY_NAME}}_update"
-  on public.{{TABLE_NAME}}
-  for update
-  using ({{USING_EXPRESSION}})
-  with check ({{WITH_CHECK_EXPRESSION}});
-
--- DELETE policy: users can delete their own rows
-create policy "{{POLICY_NAME}}_delete"
-  on public.{{TABLE_NAME}}
-  for delete
-  using ({{USING_EXPRESSION}});
-
--- ============================================================
--- Common USING / WITH CHECK expressions:
---
--- Owner-based:
---   auth.uid() = user_id
---
--- Role-based:
---   auth.jwt() ->> 'role' = 'admin'
---
--- Organization-based:
---   org_id in (select org_id from public.org_members where user_id = auth.uid())
---
--- Public read, owner write:
---   SELECT using (true)
---   INSERT/UPDATE/DELETE using (auth.uid() = user_id)
--- ============================================================

package/stacks/nextjs-supabase/.morph/templates/spec.md

@@ -1,231 +0,0 @@
-# Feature Specification: {{FEATURE_NAME_TITLE}}
-
-| Field | Value |
-|-------|-------|
-| **ID** | {{FEATURE_NAME}} |
-| **Status** | Draft / In Review / Approved / In Progress / Done |
-| **Created** | {{DATE}} |
-| **Stack** | Next.js + Supabase + .NET API |
-| **Complexity** | Low / Medium / High |
-| **Estimated Cost** | $X/month |
-| **Agents** | Core: All / Specialists: {list} |
-
----
-
-## Overview
-
-**Problem:** {What problem this feature solves}
-
-**Solution:** {High-level solution}
-
-**Success Criteria:**
-- [ ] {Criterion 1}
-- [ ] {Criterion 2}
-
----
-
-## Requirements
-
-### Functional Requirements
-
-| ID | Description | Priority |
-|----|-------------|----------|
-| FR1 | {requirement} | Must |
-| FR2 | {requirement} | Must |
-| FR3 | {requirement} | Should |
-
-### Non-Functional Requirements
-
-| ID | Category | Target |
-|----|----------|--------|
-| NFR1 | Performance | {e.g., API response < 200ms p95} |
-| NFR2 | Reliability | {e.g., 99.9% uptime} |
-| NFR3 | Security | {e.g., All data access via RLS} |
-
----
-
-## Technical Architecture
-
-### Stack
-
-| Component | Technology | Purpose |
-|-----------|-----------|---------|
-| Database | Supabase PostgreSQL | Data storage, RLS, Auth |
-| Storage | Supabase Storage | File uploads |
-| Realtime | Supabase Realtime | Live updates |
-| Backend API | .NET 10 Minimal API | Business logic, integrations |
-| Frontend | Next.js 15 (App Router) | SSR, UI, client interactions |
-| Auth | Supabase Auth (@supabase/ssr) | Authentication, JWT |
-| UI | shadcn/ui + Tailwind CSS | Components, styling |
-| Deployment | EasyPanel + Docker | Hosting, SSL |
-
-### Architecture Diagram
-
-```
-[Browser] --HTTPS--> [Next.js (SSR)]
-                         |
-                    [Supabase Client] --RLS--> [Supabase PostgreSQL]
-                         |                          |
-                    [.NET API] ---service_role----> [Supabase]
-                         |
-                    [External Services]
-```
-
----
-
-## Data Model (Supabase)
-
-### {TableName}
-
-| Column | Type | Constraints | Default |
-|--------|------|-------------|---------|
-| id | uuid | PK | gen_random_uuid() |
-| user_id | uuid | FK -> auth.users(id), NOT NULL | |
-| {column} | {type} | {constraints} | {default} |
-| created_at | timestamptz | NOT NULL | now() |
-| updated_at | timestamptz | | |
-
-### RLS Policies
-
-| Table | Policy | Operation | Rule |
-|-------|--------|-----------|------|
-| {table} | Users read own | SELECT | auth.uid() = user_id |
-| {table} | Users insert own | INSERT | auth.uid() = user_id |
-| {table} | Users update own | UPDATE | auth.uid() = user_id |
-
-### Indexes
-
-| Table | Columns | Type | Purpose |
-|-------|---------|------|---------|
-| {table} | user_id | btree | Filter by owner |
-| {table} | created_at | btree | Sort by date |
-
----
-
-## API Design (.NET Minimal API)
-
-### Endpoints
-
-| Method | Path | Description | Auth |
-|--------|------|-------------|------|
-| GET | /api/{{FEATURE_NAME}}/{id} | Get by ID | Required |
-| GET | /api/{{FEATURE_NAME}} | List (paginated) | Required |
-| POST | /api/{{FEATURE_NAME}} | Create | Required |
-| PUT | /api/{{FEATURE_NAME}}/{id} | Update | Required |
-| DELETE | /api/{{FEATURE_NAME}}/{id} | Delete | Required |
-
-### Request/Response Examples
-
-```json
-// POST /api/{{FEATURE_NAME}}
-// Request
-{
-  "name": "Example",
-  "description": "Example description"
-}
-
-// Response 201
-{
-  "id": "uuid",
-  "name": "Example",
-  "description": "Example description",
-  "createdAt": "2026-01-01T00:00:00Z"
-}
-```
-
----
-
-## Frontend Design (Next.js)
-
-### Pages
-
-| Route | Type | Description |
-|-------|------|-------------|
-| /{{FEATURE_NAME}} | Server | List page with SSR |
-| /{{FEATURE_NAME}}/[id] | Server | Detail page |
-| /{{FEATURE_NAME}}/new | Client | Create form |
-
-### Components
-
-| Component | Type | Props |
-|-----------|------|-------|
-| {{FEATURE_NAME_PASCAL}}List | Client | initialData, pagination |
-| {{FEATURE_NAME_PASCAL}}Form | Client | onSuccess, defaultValues? |
-| {{FEATURE_NAME_PASCAL}}Card | Server | item |
-
-### State Management
-
-| State | Location | Strategy |
-|-------|----------|----------|
-| Server data | React Query | Cache + invalidation |
-| Form state | react-hook-form | Local |
-| Auth state | Supabase client | Cookie-based session |
-| Realtime | Supabase channel | Invalidate query on change |
-
----
-
-## Infrastructure (EasyPanel)
-
-### Services
-
-| Service | Image | Port | Resources |
-|---------|-------|------|-----------|
-| api | Custom (.NET) | 8080 | 256MB / 0.25 CPU |
-| web | Custom (Next.js) | 3000 | 256MB / 0.25 CPU |
-
-### Environment Variables
-
-| Variable | Service | Source |
-|----------|---------|--------|
-| SUPABASE_URL | api, web | EasyPanel secrets |
-| SUPABASE_ANON_KEY | web | EasyPanel secrets |
-| SUPABASE_SERVICE_KEY | api | EasyPanel secrets |
-| SUPABASE_JWT_SECRET | api | EasyPanel secrets |
-
----
-
-## Packages
-
-### Backend (.NET)
-
-| Package | Version | Purpose |
-|---------|---------|---------|
-| Npgsql | latest | PostgreSQL driver |
-| Dapper | latest | Micro-ORM |
-| Microsoft.AspNetCore.Authentication.JwtBearer | 10.0.x | JWT auth |
-
-### Frontend (npm)
-
-| Package | Version | Purpose |
-|---------|---------|---------|
-| @supabase/ssr | latest | Supabase SSR client |
-| @tanstack/react-query | ^5 | Data fetching |
-| react-hook-form | ^7 | Form management |
-| zod | ^3 | Validation |
-| @hookform/resolvers | latest | Zod integration |
-
----
-
-## Security
-
-| Action | Required Policy |
-|--------|-----------------|
-| View | RLS: auth.uid() = user_id |
-| Create | RLS: auth.uid() = user_id |
-| Update | RLS: auth.uid() = user_id |
-| Delete | RLS: auth.uid() = user_id |
-| Admin | .NET API with service_role key |
-
----
-
-## Definition of Done
-
-- [ ] Database migrations applied
-- [ ] RLS policies tested
-- [ ] API endpoints implemented and tested
-- [ ] Frontend pages and components built
-- [ ] Auth flow working (login, signup, protected routes)
-- [ ] Tests > 80% coverage
-- [ ] Docker images building successfully
-- [ ] Deploy to EasyPanel verified
-- [ ] Recap.md generated

package/stacks/nextjs-supabase/.morph/templates/supabase-migration.sql

@@ -1,100 +0,0 @@
--- ============================================================
--- Migration: {{FEATURE_NAME_TITLE}}
--- Stack: Next.js + Supabase
--- Generated by MORPH Framework
--- Date: {{DATE}}
--- Run: supabase db push
--- ============================================================
-
--- ============================================================
--- 1. TABLE CREATION
--- ============================================================
-
-create table if not exists public.{{TABLE_NAME}} (
-  id uuid primary key default gen_random_uuid(),
-  user_id uuid not null references auth.users(id) on delete cascade,
-  name text not null,
-  status text not null default 'draft'
-    check (status in ('draft', 'active', 'completed', 'archived', 'failed', 'cancelled')),
-  -- Add feature-specific columns here
-  metadata jsonb default '{}'::jsonb,
-  created_at timestamptz not null default now(),
-  updated_at timestamptz
-);
-
--- Comment on table
-comment on table public.{{TABLE_NAME}} is '{{FEATURE_NAME_TITLE}} - managed by MORPH Framework';
-
--- ============================================================
--- 2. INDEXES
--- ============================================================
-
--- Index for filtering by owner
-create index if not exists idx_{{TABLE_NAME}}_user_id
-  on public.{{TABLE_NAME}} (user_id);
-
--- Index for filtering by status
-create index if not exists idx_{{TABLE_NAME}}_status
-  on public.{{TABLE_NAME}} (status);
-
--- Index for sorting by creation date
-create index if not exists idx_{{TABLE_NAME}}_created_at
-  on public.{{TABLE_NAME}} (created_at desc);
-
--- ============================================================
--- 3. UPDATED_AT TRIGGER
--- ============================================================
-
--- Function to auto-update updated_at
-create or replace function public.update_updated_at_column()
-returns trigger as $$
-begin
-  new.updated_at = now();
-  return new;
-end;
-$$ language plpgsql;
-
--- Trigger for auto-updating updated_at
-create trigger set_{{TABLE_NAME}}_updated_at
-  before update on public.{{TABLE_NAME}}
-  for each row execute function public.update_updated_at_column();
-
--- ============================================================
--- 4. ROW LEVEL SECURITY
--- ============================================================
-
--- Enable RLS
-alter table public.{{TABLE_NAME}} enable row level security;
-
--- Users can read their own rows
-create policy "Users can read own {{TABLE_NAME}}"
-  on public.{{TABLE_NAME}}
-  for select
-  using (auth.uid() = user_id);
-
--- Users can insert rows for themselves
-create policy "Users can insert own {{TABLE_NAME}}"
-  on public.{{TABLE_NAME}}
-  for insert
-  with check (auth.uid() = user_id);
-
--- Users can update their own rows
-create policy "Users can update own {{TABLE_NAME}}"
-  on public.{{TABLE_NAME}}
-  for update
-  using (auth.uid() = user_id)
-  with check (auth.uid() = user_id);
-
--- Users can delete their own rows
-create policy "Users can delete own {{TABLE_NAME}}"
-  on public.{{TABLE_NAME}}
-  for delete
-  using (auth.uid() = user_id);
-
--- ============================================================
--- 5. GRANTS
--- ============================================================
-
--- Grant access to authenticated users (via Supabase API)
-grant select, insert, update, delete on public.{{TABLE_NAME}} to authenticated;
-grant usage on schema public to authenticated;