@polymorphism-tech/morph-spec 4.10.9 → 4.10.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (114) hide show
  1. package/CLAUDE.md +3 -3
  2. package/LICENSE +71 -71
  3. package/README.md +2 -2
  4. package/bin/morph-spec.js +22 -0
  5. package/claude-plugin.json +1 -1
  6. package/docs/CHEATSHEET.md +1 -1
  7. package/docs/QUICKSTART.md +1 -1
  8. package/framework/agents/README.md +14 -14
  9. package/framework/agents/architecture/standards-architect.md +159 -159
  10. package/framework/agents/infrastructure/azure-architect.md +149 -149
  11. package/framework/agents/infrastructure/infra-architect.md +48 -48
  12. package/framework/hooks/README.md +204 -204
  13. package/framework/hooks/shared/phase-utils.js +139 -139
  14. package/framework/rules/csharp-standards.md +13 -13
  15. package/framework/rules/frontend-standards.md +13 -13
  16. package/framework/rules/infrastructure-standards.md +16 -16
  17. package/framework/rules/testing-standards.md +14 -14
  18. package/framework/skills/level-0-meta/morph-code-review-nextjs/references/review-example-nextjs.md +254 -254
  19. package/framework/skills/level-1-workflows/morph-phase-clarify/SKILL.md +1 -1
  20. package/framework/skills/level-1-workflows/morph-phase-codebase-analysis/SKILL.md +1 -1
  21. package/framework/skills/level-1-workflows/morph-phase-design/SKILL.md +1 -1
  22. package/framework/skills/level-1-workflows/morph-phase-implement/.morph/logs/activity.json +38 -0
  23. package/framework/skills/level-1-workflows/morph-phase-implement/SKILL.md +1 -1
  24. package/framework/skills/level-1-workflows/morph-phase-plan/SKILL.md +1 -1
  25. package/framework/skills/level-1-workflows/morph-phase-setup/SKILL.md +1 -1
  26. package/framework/skills/level-1-workflows/morph-phase-tasks/.morph/logs/activity.json +14 -0
  27. package/framework/skills/level-1-workflows/morph-phase-tasks/SKILL.md +1 -1
  28. package/framework/skills/level-1-workflows/morph-phase-uiux/SKILL.md +1 -1
  29. package/framework/skills/level-1-workflows/morph-scope-escalation/SKILL.md +1 -1
  30. package/framework/standards/STANDARDS.json +2338 -2041
  31. package/framework/standards/frontend/nextjs/nextjs-patterns.md +17 -17
  32. package/framework/standards/infrastructure/supabase/supabase-custom-jwt.md +206 -0
  33. package/framework/templates/.idea/morph-templates.xml +92 -0
  34. package/framework/templates/.vscode/morph-templates.code-snippets +186 -0
  35. package/framework/templates/README.md +814 -814
  36. package/framework/templates/code/dotnet/contracts/Commands.cs +74 -74
  37. package/framework/templates/code/dotnet/contracts/Entities.cs +25 -25
  38. package/framework/templates/code/dotnet/contracts/Queries.cs +74 -74
  39. package/framework/templates/code/dotnet/contracts/README.md +74 -74
  40. package/framework/templates/code/dotnet/contracts/api-contracts.cs +173 -173
  41. package/framework/templates/code/dotnet/frontend/component.razor +239 -239
  42. package/framework/templates/code/dotnet/jobs/agent.cs +163 -163
  43. package/framework/templates/code/dotnet/jobs/job.cs +171 -171
  44. package/framework/templates/code/dotnet/test.cs +239 -239
  45. package/framework/templates/code/sql/rls-policy.sql +57 -57
  46. package/framework/templates/code/sql/supabase-migration.sql +100 -100
  47. package/framework/templates/code/sql/supabase-migration.template.sql +113 -113
  48. package/framework/templates/code/typescript/contracts.ts +168 -168
  49. package/framework/templates/context/CONTEXT.md +181 -181
  50. package/framework/templates/docs/proposal.md +182 -182
  51. package/framework/templates/docs/user-stories.md +34 -34
  52. package/framework/templates/examples/design-system-examples.md +357 -357
  53. package/framework/templates/examples/spec-examples.md +90 -90
  54. package/framework/templates/feature/decisions.md +187 -187
  55. package/framework/templates/feature/recap.md +146 -146
  56. package/framework/templates/feature/tasks.md +199 -199
  57. package/framework/templates/infrastructure/azure/README.md +286 -286
  58. package/framework/templates/infrastructure/azure/deploy-checklist.md +426 -426
  59. package/framework/templates/infrastructure/azure/parameters.dev.json +29 -29
  60. package/framework/templates/infrastructure/azure/parameters.prod.json +29 -29
  61. package/framework/templates/infrastructure/azure/parameters.staging.json +29 -29
  62. package/framework/templates/infrastructure/docker/docker-compose.template.yml +67 -67
  63. package/framework/templates/infrastructure/docker/dockerfile-api.dockerfile +38 -38
  64. package/framework/templates/infrastructure/docker/dockerfile-web.dockerfile +48 -48
  65. package/framework/templates/infrastructure/docker/easypanel.template.json +54 -54
  66. package/package.json +1 -1
  67. package/src/commands/agents/dispatch-agents.js +17 -0
  68. package/src/commands/agents/index.js +13 -13
  69. package/src/commands/agents/project-metrics.js +74 -0
  70. package/src/commands/project/install-plugin-cmd.js +28 -28
  71. package/src/commands/project/setup-infra-cmd.js +12 -12
  72. package/src/commands/standards/context-budget.js +89 -0
  73. package/src/commands/tasks/index.js +4 -4
  74. package/src/commands/templates/index.js +5 -5
  75. package/src/commands/utils/index.js +3 -3
  76. package/src/commands/validation/index.js +4 -4
  77. package/src/core/state/phase-state-machine.js +217 -217
  78. package/src/lib/agents/metrics-aggregator.js +56 -0
  79. package/src/lib/generators/design-system-generator.js +298 -298
  80. package/src/lib/generators/index.js +10 -10
  81. package/src/lib/generators/metadata-extractor.js +387 -387
  82. package/src/lib/stack-filter.js +65 -65
  83. package/src/lib/standards/digest-builder.js +57 -3
  84. package/src/lib/standards/index.js +7 -7
  85. package/src/lib/standards/standards-context-injector.js +302 -302
  86. package/src/lib/validators/architecture/architecture-validator.js +387 -387
  87. package/src/lib/validators/architecture/index.js +7 -7
  88. package/src/lib/validators/blazor/blazor-concurrency-analyzer.js +316 -316
  89. package/src/lib/validators/blazor/blazor-state-validator.js +279 -279
  90. package/src/lib/validators/blazor/blazor-validator.js +369 -369
  91. package/src/lib/validators/blazor/index.js +9 -9
  92. package/src/lib/validators/content/content-validator.js +287 -287
  93. package/src/lib/validators/content/index.js +7 -7
  94. package/src/lib/validators/contracts/index.js +7 -7
  95. package/src/lib/validators/css/css-validator.js +352 -352
  96. package/src/lib/validators/css/index.js +7 -7
  97. package/src/lib/validators/design-system/design-system-validator.js +231 -231
  98. package/src/lib/validators/design-system/index.js +7 -7
  99. package/src/lib/validators/nextjs/index.js +6 -6
  100. package/src/lib/validators/nextjs/next-component-validator.js +183 -183
  101. package/src/lib/validators/packages/index.js +7 -7
  102. package/src/lib/validators/packages/package-validator.js +360 -360
  103. package/src/lib/validators/shared/index.js +12 -12
  104. package/src/lib/validators/shared/issue-counter.js +18 -18
  105. package/src/lib/validators/shared/result-formatter.js +124 -124
  106. package/src/lib/validators/ui/index.js +7 -7
  107. package/src/lib/validators/ui/ui-contrast-validator.js +422 -422
  108. package/src/scripts/global-install.js +58 -58
  109. package/src/scripts/install-plugin.js +126 -126
  110. package/src/utils/claude-md-injector.js +90 -90
  111. package/src/utils/file-copier.js +200 -200
  112. package/src/utils/logger.js +32 -32
  113. package/src/utils/skills-installer.js +178 -178
  114. package/src/utils/version-checker.js +175 -175
@@ -1,90 +1,90 @@
1
- # Spec Template Reference
2
-
3
- > **Layer:** 3 | **Load:** on-demand | **Keywords:** spec, specification, template
4
-
5
- **Use the stack's `.morph/framework/templates/spec.md` as the canonical template.**
6
-
7
- This file contains extended examples for each spec section.
8
-
9
- ---
10
-
11
- ## Example: Entity (Pseudo-code)
12
-
13
- ```csharp
14
- class ProcessingJob {
15
- Guid Id
16
- string OriginalPhotoUrl // Azure Blob URL, max 500 chars
17
- string? ProcessedPhotoUrl // Nullable, populated after processing
18
- ProcessingStatus Status // Enum: Pending, Processing, Completed, Failed
19
- DateTime CreatedAt
20
- ICollection<ExecutionLog> Logs // 1:N relationship
21
- }
22
-
23
- enum ProcessingStatus {
24
- Pending = 0, Processing = 1, Completed = 2, // Normal flow
25
- Failed = 100 // Error states (high values)
26
- }
27
- ```
28
-
29
- ## Example: Command (Pseudo-code)
30
-
31
- ```csharp
32
- UploadPhotoCommand {
33
- Input: IFormFile photo, string? email
34
- Output: Guid jobId
35
-
36
- Handler:
37
- 1. Validate file (size <= 10MB, type in [.jpg, .png])
38
- 2. Upload to Azure Blob Storage
39
- 3. Create ProcessingJob entity (status = Pending)
40
- 4. Enqueue Hangfire background job
41
- 5. Return jobId
42
- }
43
- ```
44
-
45
- ## Example: API Endpoints
46
-
47
- ```csharp
48
- PhotoProcessingController {
49
- POST /api/upload → multipart/form-data → { jobId: Guid }
50
- GET /api/status/{id} → jobId → { status, progress, createdAt }
51
- GET /api/download/{id} → jobId → Redirect to Blob URL or 404
52
- }
53
- ```
54
-
55
- ## Example: Flow
56
-
57
- ```
58
- Upload Flow (Actor: User)
59
- 1. User selects photo → System validates (size, type) → If invalid: show error
60
- 2. User sees preview → clicks "Upload"
61
- 3. System creates ProcessingJob → uploads to Blob → enqueues Hangfire job → returns jobId
62
- 4. System navigates to /processing/{jobId} → polls every 5s
63
- End State: User on progress page, job processing in background
64
- ```
65
-
66
- ## Example: ADR
67
-
68
- ### ADR-001: Use Hangfire for Background Jobs
69
- **Status:** Accepted
70
- **Context:** Need background processing for AI photo transformation (30-120s).
71
- **Decision:** Hangfire (self-hosted).
72
- **Alternatives:**
73
- 1. Azure Functions — serverless, auto-scaling, but cold start + $10/mo for 50k jobs
74
- 2. Hangfire — zero cost, simpler, but scales with app
75
- 3. Quartz.NET — more features, but steeper learning curve
76
- **Trade-offs:** Simplicity vs Features (Hangfire sufficient for MVP)
77
-
78
- ## Example: Cost Estimate
79
-
80
- | Resource | SKU | Monthly | Justification |
81
- |----------|-----|---------|---------------|
82
- | Blob Storage | LRS | $0.02 | Store photos, low redundancy OK |
83
- | Azure SQL | Basic | $4.99 | < 100k jobs/month |
84
- | Container App | Consumption | $0.49 | Scale to zero |
85
- | Hangfire | Self-hosted | $0.00 | In-process |
86
- | **Total** | | **~$5.50** | |
87
-
88
- ---
89
-
90
- *MORPH-SPEC by Polymorphism Tech*
1
+ # Spec Template Reference
2
+
3
+ > **Layer:** 3 | **Load:** on-demand | **Keywords:** spec, specification, template
4
+
5
+ **Use the stack's `.morph/framework/templates/spec.md` as the canonical template.**
6
+
7
+ This file contains extended examples for each spec section.
8
+
9
+ ---
10
+
11
+ ## Example: Entity (Pseudo-code)
12
+
13
+ ```csharp
14
+ class ProcessingJob {
15
+ Guid Id
16
+ string OriginalPhotoUrl // Azure Blob URL, max 500 chars
17
+ string? ProcessedPhotoUrl // Nullable, populated after processing
18
+ ProcessingStatus Status // Enum: Pending, Processing, Completed, Failed
19
+ DateTime CreatedAt
20
+ ICollection<ExecutionLog> Logs // 1:N relationship
21
+ }
22
+
23
+ enum ProcessingStatus {
24
+ Pending = 0, Processing = 1, Completed = 2, // Normal flow
25
+ Failed = 100 // Error states (high values)
26
+ }
27
+ ```
28
+
29
+ ## Example: Command (Pseudo-code)
30
+
31
+ ```csharp
32
+ UploadPhotoCommand {
33
+ Input: IFormFile photo, string? email
34
+ Output: Guid jobId
35
+
36
+ Handler:
37
+ 1. Validate file (size <= 10MB, type in [.jpg, .png])
38
+ 2. Upload to Azure Blob Storage
39
+ 3. Create ProcessingJob entity (status = Pending)
40
+ 4. Enqueue Hangfire background job
41
+ 5. Return jobId
42
+ }
43
+ ```
44
+
45
+ ## Example: API Endpoints
46
+
47
+ ```csharp
48
+ PhotoProcessingController {
49
+ POST /api/upload → multipart/form-data → { jobId: Guid }
50
+ GET /api/status/{id} → jobId → { status, progress, createdAt }
51
+ GET /api/download/{id} → jobId → Redirect to Blob URL or 404
52
+ }
53
+ ```
54
+
55
+ ## Example: Flow
56
+
57
+ ```
58
+ Upload Flow (Actor: User)
59
+ 1. User selects photo → System validates (size, type) → If invalid: show error
60
+ 2. User sees preview → clicks "Upload"
61
+ 3. System creates ProcessingJob → uploads to Blob → enqueues Hangfire job → returns jobId
62
+ 4. System navigates to /processing/{jobId} → polls every 5s
63
+ End State: User on progress page, job processing in background
64
+ ```
65
+
66
+ ## Example: ADR
67
+
68
+ ### ADR-001: Use Hangfire for Background Jobs
69
+ **Status:** Accepted
70
+ **Context:** Need background processing for AI photo transformation (30-120s).
71
+ **Decision:** Hangfire (self-hosted).
72
+ **Alternatives:**
73
+ 1. Azure Functions — serverless, auto-scaling, but cold start + $10/mo for 50k jobs
74
+ 2. Hangfire — zero cost, simpler, but scales with app
75
+ 3. Quartz.NET — more features, but steeper learning curve
76
+ **Trade-offs:** Simplicity vs Features (Hangfire sufficient for MVP)
77
+
78
+ ## Example: Cost Estimate
79
+
80
+ | Resource | SKU | Monthly | Justification |
81
+ |----------|-----|---------|---------------|
82
+ | Blob Storage | LRS | $0.02 | Store photos, low redundancy OK |
83
+ | Azure SQL | Basic | $4.99 | < 100k jobs/month |
84
+ | Container App | Consumption | $0.49 | Scale to zero |
85
+ | Hangfire | Self-hosted | $0.00 | In-process |
86
+ | **Total** | | **~$5.50** | |
87
+
88
+ ---
89
+
90
+ *MORPH-SPEC by Polymorphism Tech*
@@ -1,187 +1,187 @@
1
- # Architecture Decision Records - {{titleCase FEATURE_NAME}}
2
-
3
- ## ADR-001: {Decision Title}
4
-
5
- **Date:** {{DATE}}
6
- **Status:** Proposed | Accepted | Deprecated | Superseded
7
- **Deciders:** MORPH Agents, Developer
8
-
9
- ### Context
10
-
11
- {Describe the context and problem that led to this decision}
12
-
13
- ### Decision
14
-
15
- {Describe the decision made}
16
-
17
- ### Consequences
18
-
19
- **Pros:**
20
- - {Positive consequence 1}
21
- - {Positive consequence 2}
22
-
23
- **Cons:**
24
- - {Negative consequence 1}
25
-
26
- **Risks:**
27
- - {Identified risk}
28
-
29
- ### Alternatives Considered
30
-
31
- #### Option A: {Name}
32
- - Pros: {advantages}
33
- - Cons: {disadvantages}
34
- - **Rejected because:** {reason}
35
-
36
- #### Option B: {Name}
37
- - Pros: {advantages}
38
- - Cons: {disadvantages}
39
- - **Rejected because:** {reason}
40
-
41
- {{#if (eq STACK "blazor-azure")}}
42
- ### Affected Flows
43
- - **Main flow:** {ex: Upload -> Payment -> Generation -> Email}
44
- - **Alternative flow:** {ex: Upload -> Generation -> Payment -> Email}
45
- - **Free flow:** {ex: Upload -> Generation -> Download}
46
-
47
- ### Impacted State Validations
48
-
49
- > **Reference:** `framework/standards/status-validation.md`
50
-
51
- | Service | Method | Accepted States |
52
- |---------|--------|-----------------|
53
- | {ServiceName} | {MethodName} | {ex: PendingPayment, Completed} |
54
-
55
- ### UI Components with Special Behavior
56
- - {ex: FluentDialog requires initial Hidden="true"}
57
- - {ex: Modal needs @ref for programmatic control}
58
- {{/if}}
59
-
60
- ---
61
-
62
- {{#if (eq STACK "blazor-azure")}}
63
- ## ADR-002: Database Model
64
-
65
- **Date:** {{DATE}}
66
- **Status:** Accepted
67
-
68
- ### Context
69
-
70
- Need to define how {Feature} data will be stored.
71
-
72
- ### Decision
73
-
74
- Use Azure SQL with the following model:
75
- - {Entity} table with {columns}
76
- - JSON columns for {flexible data}
77
-
78
- ### Consequences
79
-
80
- **Pros:**
81
- - Fits within free tier (32GB)
82
- - Good query performance
83
-
84
- ---
85
-
86
- ## ADR-003: AI Integration
87
-
88
- **Date:** {{DATE}}
89
- **Status:** Accepted
90
-
91
- ### Context
92
-
93
- Feature requires AI capabilities for {purpose}.
94
-
95
- ### Decision
96
-
97
- Use MS Agent Framework with gpt-4o-mini model.
98
-
99
- ### Consequences
100
-
101
- **Pros:**
102
- - Cost effective (~$0.15/1M input tokens)
103
- - Good enough quality for this use case
104
-
105
- **Cons:**
106
- - Slightly less capable than gpt-4o
107
- {{/if}}
108
-
109
- {{#if (eq STACK "nextjs-supabase")}}
110
- ## ADR-002: Database Access Strategy
111
-
112
- **Date:** {{DATE}}
113
- **Status:** Accepted
114
-
115
- ### Context
116
-
117
- Need to decide how the .NET API accesses Supabase PostgreSQL.
118
-
119
- ### Decision
120
-
121
- Use Dapper with Npgsql for direct SQL queries. No EF Core.
122
-
123
- ### Consequences
124
-
125
- **Pros:**
126
- - Full control over SQL queries
127
- - Better performance (no ORM overhead)
128
- - Direct access to PostgreSQL features (jsonb, pgvector, functions)
129
- - RLS policies apply naturally through connection
130
-
131
- **Cons:**
132
- - No automatic migrations (use Supabase CLI instead)
133
- - Manual SQL query writing
134
- - No change tracking
135
-
136
- ---
137
-
138
- ## ADR-003: Auth Strategy
139
-
140
- **Date:** {{DATE}}
141
- **Status:** Accepted
142
-
143
- ### Context
144
-
145
- Need authentication for both Next.js frontend and .NET API.
146
-
147
- ### Decision
148
-
149
- Use Supabase Auth with @supabase/ssr on frontend. Validate JWT tokens in .NET API middleware.
150
-
151
- ### Consequences
152
-
153
- **Pros:**
154
- - Single auth provider for both layers
155
- - RLS policies work automatically with auth.uid()
156
- - Built-in social login, magic links, email/password
157
- - No separate auth service to maintain
158
-
159
- **Cons:**
160
- - Coupled to Supabase ecosystem
161
- - JWT secret must be shared with .NET API
162
- {{/if}}
163
-
164
- ---
165
-
166
- ## Template for New ADRs
167
-
168
- ```markdown
169
- ## ADR-XXX: {Title}
170
-
171
- **Date:**
172
- **Status:** Proposed | Accepted | Deprecated | Superseded
173
-
174
- ### Context
175
- {Why is this decision needed?}
176
-
177
- ### Decision
178
- {What was decided?}
179
-
180
- ### Consequences
181
- **Pros:** {list}
182
- **Cons:** {list}
183
- ```
184
-
185
- ---
186
-
187
- *Generated by MORPH Framework*
1
+ # Architecture Decision Records - {{titleCase FEATURE_NAME}}
2
+
3
+ ## ADR-001: {Decision Title}
4
+
5
+ **Date:** {{DATE}}
6
+ **Status:** Proposed | Accepted | Deprecated | Superseded
7
+ **Deciders:** MORPH Agents, Developer
8
+
9
+ ### Context
10
+
11
+ {Describe the context and problem that led to this decision}
12
+
13
+ ### Decision
14
+
15
+ {Describe the decision made}
16
+
17
+ ### Consequences
18
+
19
+ **Pros:**
20
+ - {Positive consequence 1}
21
+ - {Positive consequence 2}
22
+
23
+ **Cons:**
24
+ - {Negative consequence 1}
25
+
26
+ **Risks:**
27
+ - {Identified risk}
28
+
29
+ ### Alternatives Considered
30
+
31
+ #### Option A: {Name}
32
+ - Pros: {advantages}
33
+ - Cons: {disadvantages}
34
+ - **Rejected because:** {reason}
35
+
36
+ #### Option B: {Name}
37
+ - Pros: {advantages}
38
+ - Cons: {disadvantages}
39
+ - **Rejected because:** {reason}
40
+
41
+ {{#if (eq STACK "blazor-azure")}}
42
+ ### Affected Flows
43
+ - **Main flow:** {ex: Upload -> Payment -> Generation -> Email}
44
+ - **Alternative flow:** {ex: Upload -> Generation -> Payment -> Email}
45
+ - **Free flow:** {ex: Upload -> Generation -> Download}
46
+
47
+ ### Impacted State Validations
48
+
49
+ > **Reference:** `framework/standards/status-validation.md`
50
+
51
+ | Service | Method | Accepted States |
52
+ |---------|--------|-----------------|
53
+ | {ServiceName} | {MethodName} | {ex: PendingPayment, Completed} |
54
+
55
+ ### UI Components with Special Behavior
56
+ - {ex: FluentDialog requires initial Hidden="true"}
57
+ - {ex: Modal needs @ref for programmatic control}
58
+ {{/if}}
59
+
60
+ ---
61
+
62
+ {{#if (eq STACK "blazor-azure")}}
63
+ ## ADR-002: Database Model
64
+
65
+ **Date:** {{DATE}}
66
+ **Status:** Accepted
67
+
68
+ ### Context
69
+
70
+ Need to define how {Feature} data will be stored.
71
+
72
+ ### Decision
73
+
74
+ Use Azure SQL with the following model:
75
+ - {Entity} table with {columns}
76
+ - JSON columns for {flexible data}
77
+
78
+ ### Consequences
79
+
80
+ **Pros:**
81
+ - Fits within free tier (32GB)
82
+ - Good query performance
83
+
84
+ ---
85
+
86
+ ## ADR-003: AI Integration
87
+
88
+ **Date:** {{DATE}}
89
+ **Status:** Accepted
90
+
91
+ ### Context
92
+
93
+ Feature requires AI capabilities for {purpose}.
94
+
95
+ ### Decision
96
+
97
+ Use MS Agent Framework with gpt-4o-mini model.
98
+
99
+ ### Consequences
100
+
101
+ **Pros:**
102
+ - Cost effective (~$0.15/1M input tokens)
103
+ - Good enough quality for this use case
104
+
105
+ **Cons:**
106
+ - Slightly less capable than gpt-4o
107
+ {{/if}}
108
+
109
+ {{#if (eq STACK "nextjs-supabase")}}
110
+ ## ADR-002: Database Access Strategy
111
+
112
+ **Date:** {{DATE}}
113
+ **Status:** Accepted
114
+
115
+ ### Context
116
+
117
+ Need to decide how the .NET API accesses Supabase PostgreSQL.
118
+
119
+ ### Decision
120
+
121
+ Use Dapper with Npgsql for direct SQL queries. No EF Core.
122
+
123
+ ### Consequences
124
+
125
+ **Pros:**
126
+ - Full control over SQL queries
127
+ - Better performance (no ORM overhead)
128
+ - Direct access to PostgreSQL features (jsonb, pgvector, functions)
129
+ - RLS policies apply naturally through connection
130
+
131
+ **Cons:**
132
+ - No automatic migrations (use Supabase CLI instead)
133
+ - Manual SQL query writing
134
+ - No change tracking
135
+
136
+ ---
137
+
138
+ ## ADR-003: Auth Strategy
139
+
140
+ **Date:** {{DATE}}
141
+ **Status:** Accepted
142
+
143
+ ### Context
144
+
145
+ Need authentication for both Next.js frontend and .NET API.
146
+
147
+ ### Decision
148
+
149
+ Use Supabase Auth with @supabase/ssr on frontend. Validate JWT tokens in .NET API middleware.
150
+
151
+ ### Consequences
152
+
153
+ **Pros:**
154
+ - Single auth provider for both layers
155
+ - RLS policies work automatically with auth.uid()
156
+ - Built-in social login, magic links, email/password
157
+ - No separate auth service to maintain
158
+
159
+ **Cons:**
160
+ - Coupled to Supabase ecosystem
161
+ - JWT secret must be shared with .NET API
162
+ {{/if}}
163
+
164
+ ---
165
+
166
+ ## Template for New ADRs
167
+
168
+ ```markdown
169
+ ## ADR-XXX: {Title}
170
+
171
+ **Date:**
172
+ **Status:** Proposed | Accepted | Deprecated | Superseded
173
+
174
+ ### Context
175
+ {Why is this decision needed?}
176
+
177
+ ### Decision
178
+ {What was decided?}
179
+
180
+ ### Consequences
181
+ **Pros:** {list}
182
+ **Cons:** {list}
183
+ ```
184
+
185
+ ---
186
+
187
+ *Generated by MORPH Framework*