@polymorphism-tech/morph-spec 4.10.9 → 4.10.10

package/framework/standards/STANDARDS.json

@@ -1,2041 +1,2338 @@
-{
-  "version": "1.0.0",
-  "standards": [
-    {
-      "id": "ai-agents-blazor-ui",
-      "name": "blazor ui",
-      "path": "ai-agents/blazor-ui.md",
-      "category": "ai-agents",
-      "subcategory": null,
-      "tags": [
-        "ai-agents"
-      ],
-      "aliases": [
-        "Blazor AI",
-        "AI chat UI",
-        "streaming Blazor",
-        "agent UI",
-        "chat component"
-      ],
-      "anchors": {
-        "streaming": "#streaming-responses",
-        "state": "#ui-state-management",
-        "dbcontext": "#dbcontext-in-blazor"
-      },
-      "digest": "Never inject DbContext directly into Blazor components — use a scoped service factory. Stream AI responses via IAsyncEnumerable. Debounce user input. Handle cancellation with CancellationTokenSource per component lifecycle."
-    },
-    {
-      "id": "ai-agents-production",
-      "name": "production",
-      "path": "ai-agents/production.md",
-      "category": "ai-agents",
-      "subcategory": null,
-      "tags": [
-        "ai-agents"
-      ],
-      "aliases": [
-        "AI production",
-        "agent reliability",
-        "production AI",
-        "agent safety",
-        "autonomous systems"
-      ],
-      "anchors": {
-        "reliability": "#reliability-patterns",
-        "safety": "#safety-guardrails",
-        "monitoring": "#monitoring-and-logging"
-      },
-      "digest": "Add rate limiting and retry with exponential backoff. Log all agent decisions and tool calls. Implement circuit breakers for external calls. Validate agent output before acting. Never give agents unaudited write access to production systems."
-    },
-    {
-      "id": "ai-agents-setup",
-      "name": "setup",
-      "path": "ai-agents/setup.md",
-      "category": "ai-agents",
-      "subcategory": null,
-      "tags": [
-        "ai-agents"
-      ],
-      "aliases": [
-        "AI agent setup",
-        "MCP configuration",
-        "tool configuration",
-        "Claude setup",
-        "agent initialization"
-      ],
-      "anchors": {
-        "mcp": "#mcp-configuration",
-        "tools": "#tool-definitions",
-        "spawn": "#spawn-configuration"
-      },
-      "digest": "Initialize agents with explicit tool lists — never allow unlimited tool access. Configure MCP servers before spawning subagents. Define system prompts with role + constraints + output format. Validate tool availability before dispatch."
-    },
-    {
-      "id": "ai-agents-team-orchestration",
-      "name": "team orchestration",
-      "path": "ai-agents/team-orchestration.md",
-      "category": "ai-agents",
-      "subcategory": null,
-      "tags": [
-        "ai-agents"
-      ],
-      "aliases": [
-        "team orchestration",
-        "agent team",
-        "multi-agent coordination",
-        "squad dispatch"
-      ],
-      "anchors": {
-        "patterns": "#orchestration-patterns",
-        "communication": "#inter-agent-communication"
-      },
-      "digest": "Organize agents into squads with a designated leader. Leader decomposes the task and dispatches to specialists. Pass structured briefs between agents — not raw conversation. Each agent outputs a typed result. Leader aggregates into a unified output."
-    },
-    {
-      "id": "ai-agents-workflows",
-      "name": "workflows",
-      "path": "ai-agents/workflows.md",
-      "category": "ai-agents",
-      "subcategory": null,
-      "tags": [
-        "ai-agents"
-      ],
-      "aliases": [
-        "agent workflow",
-        "multi-agent",
-        "orchestration pattern",
-        "agent chain",
-        "parallel agents"
-      ],
-      "anchors": {
-        "orchestration": "#orchestration-patterns",
-        "parallel": "#parallel-execution",
-        "handoff": "#agent-handoff"
-      },
-      "digest": "Use orchestrator→specialist pattern for complex tasks. Parallelize independent subtasks. Pass structured context between agents, not raw conversation. Define explicit success criteria before spawning. Implement timeout and fallback strategies."
-    },
-    {
-      "id": "architecture-ddd-aggregates",
-      "name": "aggregates",
-      "path": "architecture/ddd/aggregates.md",
-      "category": "architecture",
-      "subcategory": "ddd",
-      "tags": [
-        "architecture",
-        "ddd"
-      ],
-      "aliases": [
-        "aggregate root",
-        "DDD aggregate",
-        "domain aggregate",
-        "aggregate pattern"
-      ],
-      "anchors": {
-        "root": "#aggregate-root-design",
-        "invariants": "#enforcing-invariants",
-        "events": "#domain-events"
-      },
-      "digest": "AggregateRoot owns its boundary — never reference internal entities from outside. Enforce invariants in aggregate methods, not services. Raise domain events from within the aggregate. Use ID references across aggregate boundaries."
-    },
-    {
-      "id": "architecture-ddd-bounded-contexts",
-      "name": "bounded contexts",
-      "path": "architecture/ddd/bounded-contexts.md",
-      "category": "architecture",
-      "subcategory": "ddd",
-      "tags": [
-        "architecture",
-        "ddd"
-      ],
-      "aliases": [
-        "bounded context",
-        "BC",
-        "context map",
-        "integration events",
-        "domain boundary"
-      ],
-      "anchors": {
-        "context-map": "#context-map",
-        "integration": "#integration-events",
-        "acl": "#anti-corruption-layer"
-      },
-      "digest": "Each bounded context has its own model, ubiquitous language, and database schema. Communicate between contexts via integration events or anti-corruption layers. Never share domain objects across context boundaries."
-    },
-    {
-      "id": "architecture-ddd-complexity-levels",
-      "name": "complexity levels",
-      "path": "architecture/ddd/complexity-levels.md",
-      "category": "architecture",
-      "subcategory": "ddd",
-      "tags": [
-        "architecture",
-        "ddd"
-      ],
-      "aliases": [
-        "DDD level",
-        "domain complexity",
-        "CRUD vs DDD",
-        "complexity decision tree",
-        "domain model level"
-      ],
-      "anchors": {
-        "decision-tree": "#decision-tree",
-        "level1": "#level-1-crud",
-        "level2": "#level-2-business-logic",
-        "level3": "#level-3-bounded-context"
-      },
-      "digest": "Level 1 CRUD: simple entity + service. Level 2 Business Logic: AggregateRoot, ValueObjects, DomainEvents, CQRS. Level 3 Bounded Context: explicit BC isolation, Integration Events. Use 5-question decision tree to determine level before designing."
-    },
-    {
-      "id": "architecture-ddd-entities",
-      "name": "entities",
-      "path": "architecture/ddd/entities.md",
-      "category": "architecture",
-      "subcategory": "ddd",
-      "tags": [
-        "architecture",
-        "ddd"
-      ],
-      "aliases": [
-        "DDD entity",
-        "domain entity",
-        "entity class",
-        "entity ID",
-        "entity lifecycle"
-      ],
-      "anchors": {
-        "identity": "#entity-identity",
-        "lifecycle": "#entity-lifecycle"
-      },
-      "digest": "Entities have unique identity that persists through state changes. Identity is the only equality criterion. Mutable state belongs inside the entity, not the service. Avoid anemic entities — put domain logic where the data lives."
-    },
-    {
-      "id": "architecture-ddd-ubiquitous-language",
-      "name": "ubiquitous language",
-      "path": "architecture/ddd/ubiquitous-language.md",
-      "category": "architecture",
-      "subcategory": "ddd",
-      "tags": [
-        "architecture",
-        "ddd"
-      ],
-      "aliases": [
-        "ubiquitous language",
-        "domain language",
-        "shared vocabulary",
-        "domain glossary"
-      ],
-      "anchors": {
-        "glossary": "#domain-glossary",
-        "naming": "#naming-from-domain"
-      },
-      "digest": "Use business domain terms directly in code — no translation layer between what the domain expert says and what the code says. If the business says 'Order', the code has Order not SalesTransaction. Maintain a living glossary. Inconsistent naming = inconsistent models."
-    },
-    {
-      "id": "architecture-ddd-value-objects",
-      "name": "value objects",
-      "path": "architecture/ddd/value-objects.md",
-      "category": "architecture",
-      "subcategory": "ddd",
-      "tags": [
-        "architecture",
-        "ddd"
-      ],
-      "aliases": [
-        "value object",
-        "VO",
-        "immutable value",
-        "domain value type",
-        "strongly typed"
-      ],
-      "anchors": {
-        "equality": "#equality-by-value",
-        "validation": "#value-object-validation",
-        "factory": "#static-factory-method"
-      },
-      "digest": "Value objects are immutable and identified by their properties, not ID. Override equality by value. Create via static factory method with validation. Use for Money, Email, Coordinates, DateRange — any domain concept with rules."
-    },
-    {
-      "id": "architecture-vertical-slice-vertical-slice",
-      "name": "vertical slice",
-      "path": "architecture/vertical-slice/vertical-slice.md",
-      "category": "architecture",
-      "subcategory": "vertical-slice",
-      "tags": [
-        "architecture",
-        "vertical-slice"
-      ],
-      "aliases": [
-        "vertical slice",
-        "VSA",
-        "slice architecture",
-        "feature slice",
-        "CQRS slice"
-      ],
-      "anchors": {
-        "structure": "#slice-structure",
-        "rules": "#slice-rules",
-        "cqrs": "#cqrs-in-slices"
-      },
-      "digest": "Organize by feature, not layer. Each slice contains Command/Query, Handler, Validator, Response. No cross-slice dependencies — shared code goes to a dedicated Shared project. Use MediatR for in-process CQRS dispatch."
-    },
-    {
-      "id": "backend-api-minimal-api",
-      "name": "minimal api",
-      "path": "backend/api/minimal-api.md",
-      "category": "backend",
-      "subcategory": "api",
-      "tags": [
-        "backend",
-        "api"
-      ],
-      "aliases": [
-        "minimal api",
-        "minimal APIs",
-        ".NET minimal API",
-        "route handler",
-        "MapGet"
-      ],
-      "anchors": {
-        "endpoints": "#endpoint-registration",
-        "grouping": "#route-groups"
-      },
-      "digest": "Group endpoints by feature with MapGroup. Use typed results (TypedResults.Ok, TypedResults.NotFound) for Swagger accuracy. Register endpoint groups in extension methods, not Program.cs directly. Add [EndpointSummary] for OpenAPI docs. Prefer Minimal API over controllers for new code."
-    },
-    {
-      "id": "backend-api-rest",
-      "name": "rest",
-      "path": "backend/api/rest.md",
-      "category": "backend",
-      "subcategory": "api",
-      "tags": [
-        "backend",
-        "api"
-      ],
-      "aliases": [
-        "REST API",
-        "RESTful",
-        "HTTP API",
-        "resource API",
-        "HTTP methods"
-      ],
-      "anchors": {
-        "resources": "#resource-design",
-        "errors": "#error-responses"
-      },
-      "digest": "Resources are nouns, HTTP verbs are actions. GET /users, POST /users, PUT /users/{id}, DELETE /users/{id}. 201+Location for creation, 204 for deletion. Use RFC 9457 ProblemDetails for all errors. Cursor-based pagination for large collections. API versioning via URL path (/v1/)."
-    },
-    {
-      "id": "backend-api-validation",
-      "name": "validation",
-      "path": "backend/api/validation.md",
-      "category": "backend",
-      "subcategory": "api",
-      "tags": [
-        "backend",
-        "api"
-      ],
-      "aliases": [
-        "FluentValidation",
-        "input validation",
-        "request validation",
-        "API validation",
-        "model validation"
-      ],
-      "anchors": {
-        "fluent": "#fluentvalidation-setup",
-        "rules": "#validation-rules"
-      },
-      "digest": "Use FluentValidation for all request validation. Register validators as scoped services. Return 422 UnprocessableEntity with field-level error messages. Validate at API boundary — not inside domain logic. Never trust client-side validation alone."
-    },
-    {
-      "id": "backend-authentication-passkeys",
-      "name": "passkeys",
-      "path": "backend/authentication/passkeys.md",
-      "category": "backend",
-      "subcategory": "authentication",
-      "tags": [
-        "backend",
-        "authentication"
-      ],
-      "aliases": [
-        "passkeys",
-        "WebAuthn",
-        "FIDO2",
-        "passwordless",
-        "biometric auth"
-      ],
-      "anchors": {
-        "registration": "#passkey-registration",
-        "authentication": "#passkey-authentication"
-      },
-      "digest": "Implement WebAuthn/FIDO2 for passwordless authentication. Registration: generate challenge → verify attestation → store credential. Authentication: generate challenge → verify assertion → issue JWT. Use ASP.NET Core Identity with FIDO2 library. Always store relying party ID as domain, not localhost."
-    },
-    {
-      "id": "backend-database-ef-core",
-      "name": "ef core",
-      "path": "backend/database/ef-core.md",
-      "category": "backend",
-      "subcategory": "database",
-      "tags": [
-        "backend",
-        "database"
-      ],
-      "aliases": [
-        "Entity Framework",
-        "EF Core",
-        "DbContext",
-        "LINQ queries",
-        "ORM"
-      ],
-      "anchors": {
-        "dbcontext": "#dbcontext-patterns",
-        "queries": "#query-optimization",
-        "migrations": "#migration-strategy"
-      },
-      "digest": "Use Scoped DbContext per request. Never expose IQueryable outside repository. Use AsNoTracking for read-only queries. Batch writes with SaveChangesAsync. Avoid N+1 queries — use Include for eager loading. Never use lazy loading in production."
-    },
-    {
-      "id": "backend-database-migrations",
-      "name": "migrations",
-      "path": "backend/database/migrations.md",
-      "category": "backend",
-      "subcategory": "database",
-      "tags": [
-        "backend",
-        "database"
-      ],
-      "aliases": [
-        "EF migrations",
-        "database migration",
-        "schema migration",
-        "dotnet ef",
-        "Add-Migration"
-      ],
-      "anchors": {
-        "workflow": "#migration-workflow",
-        "production": "#production-migrations"
-      },
-      "digest": "Run migrations at app startup via MigrateAsync() only in dev. In production, apply migrations as part of CI/CD, never at runtime. Never modify existing migrations — always create a new one. Use meaningful names (Add-Migration AddUserEmailIndex). Test rollback on every migration."
-    },
-    {
-      "id": "backend-database-postgresql-database",
-      "name": "database",
-      "path": "backend/database/postgresql/database.md",
-      "category": "backend",
-      "subcategory": "database",
-      "tags": [
-        "backend",
-        "database",
-        "postgresql"
-      ],
-      "aliases": [
-        "PostgreSQL",
-        "postgres",
-        "pg",
-        "database design",
-        "SQL schema"
-      ],
-      "anchors": {
-        "schema": "#schema-design",
-        "indexes": "#index-strategy"
-      },
-      "digest": "Use timestamptz for all timestamps (not timestamp). UUID primary keys for public-facing IDs. Add indexes on FK columns and frequently filtered columns. Use GIN indexes for JSON/array columns. JSONB over JSON. Row-level security for multi-tenant. Never store binary in columns — use storage URLs."
-    },
-    {
-      "id": "backend-database-repository-patterns",
-      "name": "repository patterns",
-      "path": "backend/database/repository-patterns.md",
-      "category": "backend",
-      "subcategory": "database",
-      "tags": [
-        "backend",
-        "database"
-      ],
-      "aliases": [
-        "repository",
-        "IRepository",
-        "Unit of Work",
-        "data access",
-        "repository pattern"
-      ],
-      "anchors": {
-        "pattern": "#repository-pattern",
-        "uow": "#unit-of-work"
-      },
-      "digest": "Repository abstracts data access behind an interface. Return domain objects, not IQueryable. Unit of Work coordinates multiple repository operations in one transaction. Avoid generic repositories — domain-specific repositories express intent better. Test repositories with in-memory providers or integration tests."
-    },
-    {
-      "id": "backend-database-vector-search-rag",
-      "name": "vector search rag",
-      "path": "backend/database/vector-search-rag.md",
-      "category": "backend",
-      "subcategory": "database",
-      "tags": [
-        "backend",
-        "database"
-      ],
-      "aliases": [
-        "vector search",
-        "RAG",
-        "embeddings",
-        "pgvector",
-        "semantic search"
-      ],
-      "anchors": {
-        "chunking": "#chunking-strategy",
-        "retrieval": "#retrieval-patterns"
-      },
-      "digest": "Chunk documents with 512 token size and 50 token overlap for RAG. Embed with text-embedding-3-small. Store embedding + metadata (source, chunk index). Retrieve top-k=5 by cosine similarity. Re-rank before injecting into LLM context. Use pgvector HNSW index for performance at scale."
-    },
-    {
-      "id": "backend-dotnet-async",
-      "name": "async",
-      "path": "backend/dotnet/async.md",
-      "category": "backend",
-      "subcategory": "dotnet",
-      "tags": [
-        "backend",
-        "dotnet"
-      ],
-      "aliases": [
-        "async/await",
-        "Task<T>",
-        "CancellationToken",
-        "ValueTask",
-        "async programming"
-      ],
-      "anchors": {
-        "cancellation": "#cancellation-token-pattern",
-        "parallel": "#parallel-execution-patterns"
-      },
-      "digest": "Use CancellationToken in all async signatures. Prefer Task<T> over ValueTask<T> unless hot-path allocation is measured. Never async void except event handlers. Task.WhenAll for independent parallel ops."
-    },
-    {
-      "id": "backend-dotnet-core",
-      "name": "core",
-      "path": "backend/dotnet/core.md",
-      "category": "backend",
-      "subcategory": "dotnet",
-      "tags": [
-        "backend",
-        "dotnet"
-      ],
-      "aliases": [
-        ".NET core",
-        "dotnet core",
-        "C# patterns",
-        "backend core",
-        "dotnet standards"
-      ],
-      "anchors": {
-        "di": "#dependency-injection",
-        "services": "#service-registration",
-        "security": "#security-patterns"
-      },
-      "digest": "Register services in Program.cs with AddScoped/AddSingleton/AddTransient. Use constructor injection only — never service locator. Apply interface segregation. Validate all input at API boundary. Never expose raw exceptions to clients."
-    },
-    {
-      "id": "backend-dotnet-di",
-      "name": "di",
-      "path": "backend/dotnet/di.md",
-      "category": "backend",
-      "subcategory": "dotnet",
-      "tags": [
-        "backend",
-        "dotnet"
-      ],
-      "aliases": [
-        "dependency injection",
-        "IoC",
-        "DI container",
-        "service registration",
-        "inversion of control"
-      ],
-      "anchors": {
-        "patterns": "#di-patterns",
-        "anti-patterns": "#di-anti-patterns"
-      },
-      "digest": "Use constructor injection exclusively. Register concrete types with interfaces. Never use service locator or static factories. Scoped services must not be injected into singletons. Validate dependency graph at startup with ValidateOnBuild."
-    },
-    {
-      "id": "backend-dotnet-program-cs-checklist",
-      "name": "program cs checklist",
-      "path": "backend/dotnet/program-cs-checklist.md",
-      "category": "backend",
-      "subcategory": "dotnet",
-      "tags": [
-        "backend",
-        "dotnet"
-      ],
-      "aliases": [
-        "program.cs",
-        "startup configuration",
-        "NuGet packages",
-        "package setup",
-        "app bootstrap"
-      ],
-      "anchors": {
-        "nuget": "#nuget-packages",
-        "middleware": "#middleware-order"
-      },
-      "digest": "Configure middleware in order: CORS → Auth → Routing → Endpoints. Register all required NuGet packages. Enable Swagger in dev only. Apply global exception handler. Configure HTTPS redirection. Enable CORS before Auth."
-    },
-    {
-      "id": "backend-integrations-asaas-asaas-api",
-      "name": "asaas api",
-      "path": "backend/integrations/asaas/asaas-api.md",
-      "category": "backend",
-      "subcategory": "integrations",
-      "tags": [
-        "backend",
-        "integrations",
-        "asaas"
-      ],
-      "aliases": [
-        "asaas",
-        "payment",
-        "PIX",
-        "boleto",
-        "Brazilian payment"
-      ],
-      "anchors": {
-        "payments": "#payment-types",
-        "webhooks": "#webhook-handling"
-      },
-      "digest": "Use AsaasClient SDK — never call REST API directly. Register as scoped service. Implement webhook signature verification. Map SDK enums to domain enums at integration boundary. Use idempotency keys for retry safety. Test with Asaas sandbox environment."
-    },
-    {
-      "id": "backend-integrations-clerk-clerk-auth",
-      "name": "clerk auth",
-      "path": "backend/integrations/clerk/clerk-auth.md",
-      "category": "backend",
-      "subcategory": "integrations",
-      "tags": [
-        "backend",
-        "integrations",
-        "clerk"
-      ],
-      "aliases": [
-        "clerk",
-        "authentication",
-        "OAuth",
-        "JWT",
-        "session management"
-      ],
-      "anchors": {
-        "setup": "#clerk-setup",
-        "middleware": "#auth-middleware"
-      },
-      "digest": "Add ClerkMiddleware to ASP.NET pipeline. Access userId via User.GetClerkUserId(). Configure allowed redirect URLs in Clerk dashboard. Use [Authorize] for protected endpoints. Never store passwords — Clerk manages credentials. Sync Clerk users to local DB on first login."
-    },
-    {
-      "id": "backend-integrations-hangfire-hangfire-jobs",
-      "name": "hangfire jobs",
-      "path": "backend/integrations/hangfire/hangfire-jobs.md",
-      "category": "backend",
-      "subcategory": "integrations",
-      "tags": [
-        "backend",
-        "integrations",
-        "hangfire"
-      ],
-      "aliases": [
-        "hangfire",
-        "background jobs",
-        "scheduled jobs",
-        "recurring",
-        "cron",
-        "fire and forget"
-      ],
-      "anchors": {
-        "jobs": "#job-types",
-        "retry": "#retry-policies"
-      },
-      "digest": "Use IDbContextFactory for scoped DB operations in jobs — never inject DbContext directly into job classes. BackgroundJob.Enqueue for fire-and-forget, RecurringJob.AddOrUpdate for cron. Add RetryCountAttribute for retries. Secure Hangfire Dashboard with auth in production. Never put long-running work in a single job — decompose."
-    },
-    {
-      "id": "backend-integrations-resend-resend-email",
-      "name": "resend email",
-      "path": "backend/integrations/resend/resend-email.md",
-      "category": "backend",
-      "subcategory": "integrations",
-      "tags": [
-        "backend",
-        "integrations",
-        "resend"
-      ],
-      "aliases": [
-        "resend",
-        "email",
-        "transactional email",
-        "SMTP",
-        "email notification"
-      ],
-      "anchors": {
-        "sending": "#send-email",
-        "templates": "#email-templates"
-      },
-      "digest": "Register ResendClient as singleton. Provide both HTML and plain-text alternatives. Handle bounce/complaint webhooks to maintain sender reputation. Never send from test domains in production. Queue emails via Hangfire for reliability — don't send inline in request handlers."
-    },
-    {
-      "id": "context-analytics",
-      "name": "analytics",
-      "path": "context/analytics.md",
-      "category": "context",
-      "subcategory": null,
-      "tags": [
-        "context"
-      ],
-      "aliases": [
-        "analytics",
-        "GTM",
-        "GA4",
-        "event tracking",
-        "data layer"
-      ],
-      "anchors": {
-        "events": "#event-tracking",
-        "setup": "#analytics-setup"
-      },
-      "digest": "Install GTM via component, not raw script. Track custom events via dataLayer.push. GA4 events follow snake_case naming. Define event schema before implementing. Never log PII in analytics events. Test event firing with GA4 DebugView or GTM Preview before production."
-    },
-    {
-      "id": "context-bundles",
-      "name": "bundles",
-      "path": "context/bundles.md",
-      "category": "context",
-      "subcategory": null,
-      "tags": [
-        "context"
-      ],
-      "aliases": [
-        "context bundles",
-        "bundled context",
-        "spec bundles",
-        "feature bundles"
-      ],
-      "anchors": {
-        "structure": "#bundle-structure",
-        "loading": "#context-loading"
-      },
-      "digest": "Bundle related context files to reduce per-agent injection overhead. Define bundle manifests listing included standards by scope. Agents load their assigned bundle, not the full context. Bundles are versioned — bump version when standards change significantly."
-    },
-    {
-      "id": "context-priming",
-      "name": "priming",
-      "path": "context/priming.md",
-      "category": "context",
-      "subcategory": null,
-      "tags": [
-        "context"
-      ],
-      "aliases": [
-        "context priming",
-        "agent priming",
-        "system prompt",
-        "context injection"
-      ],
-      "anchors": {
-        "patterns": "#priming-patterns",
-        "efficiency": "#context-efficiency"
-      },
-      "digest": "Prime agents with role + constraints + output format in the first message. Keep priming concise — under 200 tokens. Include only relevant standards for the current phase. Re-prime after context compaction. Never include full file contents when a digest suffices."
-    },
-    {
-      "id": "core-architecture",
-      "name": "architecture",
-      "path": "core/architecture.md",
-      "category": "core",
-      "subcategory": null,
-      "tags": [
-        "core"
-      ],
-      "aliases": [
-        "architecture",
-        "clean architecture",
-        "layered architecture",
-        "SOLID",
-        "design principles"
-      ],
-      "anchors": {
-        "layers": "#layer-boundaries",
-        "patterns": "#architectural-patterns"
-      },
-      "digest": "Apply Clean Architecture: dependency rule points inward (Infrastructure → Application → Domain). Domain has no external dependencies. Application orchestrates use cases. Infrastructure implements ports. SOLID principles at every layer. Never skip architecture review for cross-cutting concerns."
-    },
-    {
-      "id": "core-coding",
-      "name": "coding",
-      "path": "core/coding.md",
-      "category": "core",
-      "subcategory": null,
-      "tags": [
-        "core"
-      ],
-      "aliases": [
-        "coding standards",
-        "code style",
-        "clean code",
-        "naming conventions",
-        "code quality"
-      ],
-      "anchors": {
-        "naming": "#naming-conventions",
-        "patterns": "#code-patterns"
-      },
-      "digest": "PascalCase for types/methods, camelCase for fields/locals, UPPER_SNAKE_CASE for constants. Methods are verbs, classes are nouns. Single responsibility per class/method. Max 30 lines per method. Prefer immutability. No magic strings — use constants or enums. Every public API has XML docs."
-    },
-    {
-      "id": "core-git-branching-strategy",
-      "name": "git branching strategy",
-      "path": "core/git-branching-strategy.md",
-      "category": "core",
-      "subcategory": null,
-      "tags": [
-        "core"
-      ],
-      "aliases": [
-        "git flow",
-        "branch strategy",
-        "feature branch",
-        "gitflow",
-        "branch naming"
-      ],
-      "anchors": {
-        "branching": "#branch-naming",
-        "workflow": "#git-workflow"
-      },
-      "digest": "Branch naming: feature/{ticket}-{description}, fix/{ticket}-{description}. main is production-ready, develop is integration branch. PRs require passing CI and at least one review. Squash merge for features. Delete branches after merge. Protect main and develop with required checks."
-    },
-    {
-      "id": "core-git",
-      "name": "git",
-      "path": "core/git.md",
-      "category": "core",
-      "subcategory": null,
-      "tags": [
-        "core"
-      ],
-      "aliases": [
-        "git",
-        "commit messages",
-        "conventional commits",
-        "changelog",
-        "git hooks"
-      ],
-      "anchors": {
-        "commits": "#commit-format",
-        "hooks": "#pre-commit-hooks"
-      },
-      "digest": "Conventional Commits: feat, fix, chore, docs, refactor, test, style. Scope in parentheses: feat(auth): add JWT validation. Breaking changes use BREAKING CHANGE footer. Commits are atomic — one logical change per commit. Pre-commit hooks run build + lint. Never commit .env or secrets."
-    },
-    {
-      "id": "core-testing",
-      "name": "testing",
-      "path": "core/testing.md",
-      "category": "core",
-      "subcategory": null,
-      "tags": [
-        "core"
-      ],
-      "aliases": [
-        "testing",
-        "unit tests",
-        "integration tests",
-        "TDD",
-        "test coverage",
-        "xUnit"
-      ],
-      "anchors": {
-        "patterns": "#test-patterns",
-        "coverage": "#coverage-requirements"
-      },
-      "digest": "Arrange-Act-Assert in every test. Unit tests for domain logic — no DB or HTTP. Integration tests use TestContainers for real dependencies. Minimum 80% coverage on domain layer. Mock external services at system boundaries. Test names: Given_When_Then or MethodName_Scenario_ExpectedResult."
-    },
-    {
-      "id": "data-nosql-blob-storage",
-      "name": "blob storage",
-      "path": "data/nosql/blob-storage.md",
-      "category": "data",
-      "subcategory": "nosql",
-      "tags": [
-        "data",
-        "nosql"
-      ],
-      "aliases": [
-        "blob storage",
-        "Azure Storage",
-        "file storage",
-        "BlobServiceClient",
-        "object storage"
-      ],
-      "anchors": {
-        "upload": "#upload-patterns",
-        "access": "#sas-tokens"
-      },
-      "digest": "Use BlobServiceClient with DefaultAzureCredential — never hardcode connection strings. Organize by container/virtual-path. Generate SAS tokens for client-side access with minimum permissions and short TTL. Set content-type on upload. Use CDN for public assets. Enable versioning + soft delete for business data."
-    },
-    {
-      "id": "data-nosql-cache-redis",
-      "name": "redis",
-      "path": "data/nosql/cache/redis.md",
-      "category": "data",
-      "subcategory": "nosql",
-      "tags": [
-        "data",
-        "nosql",
-        "cache"
-      ],
-      "aliases": [
-        "redis",
-        "cache",
-        "distributed cache",
-        "IDistributedCache",
-        "cache-aside",
-        "StackExchange.Redis"
-      ],
-      "anchors": {
-        "patterns": "#cache-patterns",
-        "invalidation": "#cache-invalidation"
-      },
-      "digest": "IDistributedCache for cache-aside pattern. Set TTL on every entry — never cache without expiry. Serialize with System.Text.Json. Sliding expiration for sessions, absolute for computed results. Invalidate by key prefix. Redis eviction policy must be set (allkeys-lru). Never cache PII without encryption."
-    },
-    {
-      "id": "data-nosql-cosmos-db",
-      "name": "cosmos db",
-      "path": "data/nosql/cosmos-db.md",
-      "category": "data",
-      "subcategory": "nosql",
-      "tags": [
-        "data",
-        "nosql"
-      ],
-      "aliases": [
-        "cosmos",
-        "CosmosDB",
-        "document database",
-        "partition key",
-        "RUs"
-      ],
-      "anchors": {
-        "modeling": "#document-modeling",
-        "queries": "#query-patterns"
-      },
-      "digest": "Choose partition key with high cardinality for even distribution. Design documents for single-partition reads. Enable TTL for ephemeral data. Prefer point reads (O(1)) over cross-partition queries. Set provisioned throughput based on measured RUs. Use change feed for event-driven processing."
-    },
-    {
-      "id": "data-vector-search-azure-ai-search",
-      "name": "azure ai search",
-      "path": "data/vector-search/azure-ai-search.md",
-      "category": "data",
-      "subcategory": "vector-search",
-      "tags": [
-        "data",
-        "vector-search"
-      ],
-      "aliases": [
-        "Azure AI Search",
-        "cognitive search",
-        "vector search",
-        "hybrid search",
-        "semantic ranking"
-      ],
-      "anchors": {
-        "indexing": "#index-setup",
-        "queries": "#search-queries"
-      },
-      "digest": "Create index with semantic configuration for hybrid search (keyword + vector). Batch index uploads (1000 docs/batch). Use OData filters for pre-filtering before vector search. Apply RRF fusion for hybrid ranking. Set up incremental indexing for updates. Add enrichment pipeline for PDFs/images."
-    },
-    {
-      "id": "data-vector-search-rag-chunking",
-      "name": "rag chunking",
-      "path": "data/vector-search/rag-chunking.md",
-      "category": "data",
-      "subcategory": "vector-search",
-      "tags": [
-        "data",
-        "vector-search"
-      ],
-      "aliases": [
-        "RAG chunking",
-        "document chunking",
-        "text splitting",
-        "chunk overlap",
-        "embedding chunks"
-      ],
-      "anchors": {
-        "strategies": "#chunking-strategies",
-        "retrieval": "#retrieval-pipeline"
-      },
-      "digest": "Recursive character splitting: 512 token chunks, 50 token overlap. Embed with text-embedding-3-small (1536 dims). Store chunk + metadata (source, page, section). Retrieve top-k=5 by cosine similarity. Re-rank with cross-encoder before LLM injection. Evaluate retrieval quality with RAGAS."
-    },
-    {
-      "id": "frontend-blazor-design-checklist",
-      "name": "design checklist",
-      "path": "frontend/blazor/design-checklist.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "blazor checklist",
-        "blazor design review",
-        "UI checklist",
-        "component checklist"
-      ],
-      "anchors": {
-        "components": "#component-checklist",
-        "accessibility": "#a11y-checklist"
-      },
-      "digest": "Every Blazor component must: use @inject not constructor injection, define loading and error states, implement IDisposable for event subscriptions, use CancellationToken for async ops. Fluent UI: use DataGrid not custom tables, FluentDialog for modals, FluentTooltip for hints. No hardcoded colors."
-    },
-    {
-      "id": "frontend-blazor-fluent-ui-setup",
-      "name": "fluent ui setup",
-      "path": "frontend/blazor/fluent-ui-setup.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "fluent ui setup",
-        "blazor fluent",
-        "Microsoft Fluent UI",
-        "FluentUI install"
-      ],
-      "anchors": {
-        "setup": "#package-setup",
-        "theme": "#theme-configuration"
-      },
-      "digest": "Install Microsoft.FluentUI.AspNetCore.Components. Register: builder.Services.AddFluentUIComponents(). Add <FluentDesignTheme> to MainLayout.razor. Install FluentIcons package separately. Set CachingEnabled=true for icons in production. Configure theme via --accent-color CSS variable in app.css."
-    },
-    {
-      "id": "frontend-blazor-fluent-ui",
-      "name": "fluent ui",
-      "path": "frontend/blazor/fluent-ui.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "fluent ui components",
-        "FluentDataGrid",
-        "FluentDialog",
-        "FluentButton",
-        "FluentCombobox"
-      ],
-      "anchors": {
-        "grid": "#data-grid",
-        "forms": "#form-components"
-      },
-      "digest": "Use FluentDataGrid with virtualization for >100 rows. FluentDialog requires DialogService injection. FluentTextField uses @bind-Value. FluentCombobox with @bind-Value and TOption type param. Never mix FluentUI and MudBlazor in the same project. Use Appearance enum for button variants."
-    },
-    {
-      "id": "frontend-blazor-html-conversion",
-      "name": "html conversion",
-      "path": "frontend/blazor/html-conversion.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "html to blazor",
-        "blazor migration",
-        "html conversion",
-        "razor conversion"
-      ],
-      "anchors": {
-        "mapping": "#html-to-blazor-mapping",
-        "components": "#component-patterns"
-      },
-      "digest": "Convert <div> containers to <FluentStack> or <FluentGrid>. Replace <input> with FluentTextField/FluentCheckbox/FluentSelect. Convert <table> to FluentDataGrid. Replace class= with Class=. Event handlers: onclick → @onclick. Use CascadingValue for theme propagation. Blazor-specific: @ref, @key, @bind."
-    },
-    {
-      "id": "frontend-blazor-lifecycle",
-      "name": "lifecycle",
-      "path": "frontend/blazor/lifecycle.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "blazor lifecycle",
-        "OnInitialized",
-        "OnAfterRender",
-        "StateHasChanged",
-        "component lifecycle"
-      ],
-      "anchors": {
-        "hooks": "#lifecycle-hooks",
-        "async": "#async-patterns"
-      },
-      "digest": "OnInitializedAsync for data loading (not constructor or OnInitialized). JSInterop only in OnAfterRenderAsync(firstRender:true). Dispose event subscriptions in IDisposable.Dispose(). Call StateHasChanged() after async state changes from non-UI threads. Cancel background work with CancellationTokenSource in Dispose()."
-    },
-    {
-      "id": "frontend-blazor-pitfalls",
-      "name": "pitfalls",
-      "path": "frontend/blazor/pitfalls.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "blazor anti-patterns",
-        "blazor mistakes",
-        "blazor gotchas",
-        "blazor bugs",
-        "common errors"
-      ],
-      "anchors": {
-        "concurrency": "#concurrency-pitfalls",
-        "memory": "#memory-leaks"
-      },
-      "digest": "Never inject DbContext directly — use IDbContextFactory. Avoid async void event handlers (use async Task). Route parameters need [Parameter] attribute. Use EventCallback<T> not Action<T> for parent-child callbacks. Dispose HttpClient connections, SignalR connections, and timers in IDisposable."
-    },
-    {
-      "id": "frontend-blazor-state",
-      "name": "state",
-      "path": "frontend/blazor/state.md",
-      "category": "frontend",
-      "subcategory": "blazor",
-      "tags": [
-        "frontend",
-        "blazor"
-      ],
-      "aliases": [
-        "blazor state",
-        "cascading value",
-        "state container",
-        "component state",
-        "Fluxor"
-      ],
-      "anchors": {
-        "patterns": "#state-patterns",
-        "sharing": "#state-sharing"
-      },
-      "digest": "CascadingParameter for app-wide state (auth, theme). Scoped services as state containers for per-user state. Local component state with private fields + StateHasChanged. Never store state in static fields — use DI. localStorage via IJSRuntime for persistence. Fluxor for complex state with multiple consumers."
-    },
-    {
-      "id": "frontend-design-system-aesthetic-direction",
-      "name": "aesthetic direction",
-      "path": "frontend/design-system/aesthetic-direction.md",
-      "category": "frontend",
-      "subcategory": "design-system",
-      "tags": [
-        "frontend",
-        "design-system"
-      ],
-      "aliases": [
-        "aesthetic direction",
-        "visual design",
-        "brand identity",
-        "design language",
-        "design tone"
-      ],
-      "anchors": {
-        "principles": "#design-principles",
-        "tokens": "#design-tokens"
-      },
-      "digest": "Define aesthetic direction before generating mockups: tone (professional/playful), density (compact/spacious), brand colors (primary, secondary, accent). Document in design-system.md. All UI decisions derive from aesthetic direction — never use arbitrary colors or spacing values."
-    },
-    {
-      "id": "frontend-design-system-animations",
-      "name": "animations",
-      "path": "frontend/design-system/animations.md",
-      "category": "frontend",
-      "subcategory": "design-system",
-      "tags": [
-        "frontend",
-        "design-system"
-      ],
-      "aliases": [
-        "animations",
-        "transitions",
-        "motion",
-        "CSS animations",
-        "keyframes",
-        "prefers-reduced-motion"
-      ],
-      "anchors": {
-        "tokens": "#animation-tokens",
-        "principles": "#motion-principles"
-      },
-      "digest": "Use CSS custom properties for durations: --duration-fast (100ms), --duration-normal (200ms), --duration-slow (300ms). Prefer transform/opacity for GPU-accelerated animations. Always respect prefers-reduced-motion. No decorative animations over 300ms. Ease-out for entrances, ease-in for exits."
-    },
-    {
-      "id": "frontend-design-system-naming",
-      "name": "naming",
-      "path": "frontend/design-system/naming.md",
-      "category": "frontend",
-      "subcategory": "design-system",
-      "tags": [
-        "frontend",
-        "design-system"
-      ],
-      "aliases": [
-        "BEM",
-        "CSS naming",
-        "class naming",
-        "design token naming",
-        "component naming"
-      ],
-      "anchors": {
-        "blocks": "#bem-blocks",
-        "tokens": "#token-naming"
-      },
-      "digest": "BEM for CSS: .block__element--modifier. Design tokens: --color-primary-500, --spacing-4, --font-size-base. Component names PascalCase (Blazor) / kebab-case (CSS). No generic names (blue, big). Semantic names only: --color-action, --spacing-page-gutter. Tokens are the single source of truth."
-    },
-    {
-      "id": "frontend-nextjs-app-router",
-      "name": "app router",
-      "path": "frontend/nextjs/app-router.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "app router",
-        "Next.js 14",
-        "server components",
-        "app directory",
-        "RSC"
-      ],
-      "anchors": {
-        "layout": "#layout-patterns",
-        "routing": "#routing-patterns"
-      },
-      "digest": "Server Components by default — only add 'use client' when needed (interactivity, browser APIs, hooks). Layouts persist across navigations. Parallel Routes with @folder for simultaneous views. Route Groups with (folder) to organize without affecting URL. Use generateMetadata() for dynamic SEO metadata."
-    },
-    {
-      "id": "frontend-nextjs-components",
-      "name": "components",
-      "path": "frontend/nextjs/components.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "react components",
-        "server component",
-        "client component",
-        "shadcn/ui",
-        "UI components"
-      ],
-      "anchors": {
-        "patterns": "#component-patterns",
-        "shadcn": "#shadcn-usage"
-      },
-      "digest": "Server Components for data fetching and static content. Client Components for interactivity. shadcn/ui components are copy-paste — customize in src/components/ui/. Never use index.tsx for named exports. One component per file. Avoid prop drilling — use composition or Context API."
-    },
-    {
-      "id": "frontend-nextjs-data-fetching",
-      "name": "data fetching",
-      "path": "frontend/nextjs/data-fetching.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "TanStack Query",
-        "react-query",
-        "server actions",
-        "data fetching",
-        "useQuery"
-      ],
-      "anchors": {
-        "server": "#server-fetching",
-        "client": "#client-fetching"
-      },
-      "digest": "Server Components: fetch() with caching tags for static/ISR. Client Components: TanStack Query useQuery/useMutation for client-side state. Server Actions for mutations from Client Components. Never fetch in useEffect — use TanStack Query. Set revalidate intervals for ISR. Use React Suspense for loading states."
-    },
-    {
-      "id": "frontend-nextjs-forms",
-      "name": "forms",
-      "path": "frontend/nextjs/forms.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "react-hook-form",
-        "Zod",
-        "form validation",
-        "Server Actions forms",
-        "useFormState"
-      ],
-      "anchors": {
-        "validation": "#zod-schemas",
-        "submission": "#form-submission"
-      },
-      "digest": "react-hook-form with Zod resolver for client forms. Define Zod schema before component. Server Actions for mutations: 'use server' directive. Use useFormState/useActionState for Server Action feedback. Never submit to API routes — use Server Actions or React Query mutations. Display field-level errors from Zod."
-    },
-    {
-      "id": "frontend-nextjs-naming-conventions",
-      "name": "naming conventions",
-      "path": "frontend/nextjs/naming-conventions.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "naming conventions",
-        "file naming",
-        "component naming",
-        "Next.js naming",
-        "TypeScript naming"
-      ],
-      "anchors": {
-        "files": "#file-naming",
-        "components": "#component-naming"
-      },
-      "digest": "Pages: lowercase kebab-case (user-profile/page.tsx). Components: PascalCase (UserProfile.tsx). Hooks: camelCase with 'use' prefix (useUserProfile.ts). API routes: kebab-case. Types: PascalCase. No default exports except page.tsx and layout.tsx. Feature-based co-location preferred."
-    },
-    {
-      "id": "frontend-nextjs-nextjs-patterns",
-      "name": "nextjs patterns",
-      "path": "frontend/nextjs/nextjs-patterns.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "Next.js patterns",
-        "middleware",
-        "auth patterns",
-        "caching patterns",
-        "image optimization"
-      ],
-      "anchors": {
-        "auth": "#auth-patterns",
-        "caching": "#caching-patterns"
-      },
-      "digest": "Middleware for auth redirects (use matcher config). next/image for all images (auto-optimization). next/link for navigation (prefetching). loading.tsx for Suspense boundaries per route. error.tsx for error boundaries. Use unstable_cache for expensive server computations with tag-based revalidation."
-    },
-    {
-      "id": "frontend-nextjs-project-structure",
-      "name": "project structure",
-      "path": "frontend/nextjs/project-structure.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "project structure",
-        "folder structure",
-        "src directory",
-        "app directory organization"
-      ],
-      "anchors": {
-        "structure": "#directory-structure",
-        "organization": "#feature-organization"
-      },
-      "digest": "src/app/ for routes, src/components/ for shared UI, src/lib/ for utilities, src/hooks/ for custom hooks, src/types/ for TypeScript types. Co-locate feature components near their routes. Public API via components/index.ts. Avoid barrel files in app/ directory. Keep pages thin — logic in hooks and utilities."
-    },
-    {
-      "id": "frontend-nextjs-state-management",
-      "name": "state management",
-      "path": "frontend/nextjs/state-management.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "zustand",
-        "React context",
-        "global state",
-        "state management",
-        "client state"
-      ],
-      "anchors": {
-        "patterns": "#state-patterns",
-        "server": "#server-state"
-      },
-      "digest": "TanStack Query for server state (caching, background sync, optimistic updates). Zustand for global client state (auth, theme, user preferences). URL params for shareable UI state (filters, pagination). useState for local component state. Avoid Redux — Zustand is sufficient for most Next.js use cases."
-    },
-    {
-      "id": "frontend-nextjs-testing",
-      "name": "testing",
-      "path": "frontend/nextjs/testing.md",
-      "category": "frontend",
-      "subcategory": "nextjs",
-      "tags": [
-        "frontend",
-        "nextjs"
-      ],
-      "aliases": [
-        "vitest",
-        "jest",
-        "testing-library",
-        "Playwright",
-        "Next.js testing",
-        "component tests"
-      ],
-      "anchors": {
-        "unit": "#unit-tests",
-        "e2e": "#e2e-tests"
-      },
-      "digest": "Vitest for unit tests, React Testing Library for component tests. Mock next/navigation with vi.mock. Test Server Actions with direct function calls. Use MSW for API mocking in component tests. Playwright for E2E tests against running app. Never test implementation details — test user behavior and output."
-    },
-    {
-      "id": "infrastructure-azure-azure",
-      "name": "azure",
-      "path": "infrastructure/azure/azure.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure"
-      ],
-      "aliases": [
-        "azure",
-        "Azure setup",
-        "resource group",
-        "subscription",
-        "azure baseline"
-      ],
-      "anchors": {
-        "resources": "#core-resources",
-        "security": "#security-baseline"
-      },
-      "digest": "Organize resources by resource groups per environment (dev/staging/prod). Use managed identities for service-to-service auth — never service principals or keys in code. Tag all resources (env, project, owner). Enable diagnostic settings for all services. All secrets in Key Vault. Apply Azure Policy for compliance guardrails."
-    },
-    {
-      "id": "infrastructure-azure-bicep-bicep-patterns",
-      "name": "bicep patterns",
-      "path": "infrastructure/azure/bicep/bicep-patterns.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure",
-        "bicep"
-      ],
-      "aliases": [
-        "bicep",
-        "ARM template",
-        "IaC",
-        "infrastructure as code",
-        "resource deployment"
-      ],
-      "anchors": {
-        "modules": "#module-patterns",
-        "parameters": "#parameter-files"
-      },
-      "digest": "Structure as main.bicep + modules/. Parameters in parameters.{env}.bicepparams. Use @secure() for secrets — never hardcode. Run What-If before apply. Use existing keyword for cross-RG references. Modules are reusable units — never duplicate resource blocks. Deploy via CI/CD pipeline, not ad hoc."
-    },
-    {
-      "id": "infrastructure-azure-devops-azure-devops-setup",
-      "name": "azure devops setup",
-      "path": "infrastructure/azure/devops/azure-devops-setup.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure",
-        "devops"
-      ],
-      "aliases": [
-        "azure devops",
-        "ADO",
-        "pipelines",
-        "YAML pipeline",
-        "azure-pipelines.yml"
-      ],
-      "anchors": {
-        "setup": "#organization-setup",
-        "pipelines": "#pipeline-setup"
-      },
-      "digest": "YAML pipelines checked into repo — no classic editor. Separate environments: dev, staging, prod with approval gates. Service connections use managed identity (no service principals). Variable groups for per-env config. Artifacts feed for private NuGet packages. Branch policies require PR + CI for main/develop."
-    },
-    {
-      "id": "infrastructure-azure-devops-local-development",
-      "name": "local development",
-      "path": "infrastructure/azure/devops/local-development.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure",
-        "devops"
-      ],
-      "aliases": [
-        "local dev",
-        "azurite",
-        "local azure",
-        "dev container",
-        "local secrets",
-        "dotnet user-secrets"
-      ],
-      "anchors": {
-        "emulators": "#local-emulators",
-        "secrets": "#local-secrets"
-      },
-      "digest": "Use Azurite for local Blob/Queue/Table storage emulation. dotnet user-secrets for local credentials — never .env files committed to git. Use Connection String for local, Managed Identity for deployed. Dev containers for reproducible environments. Local HTTPS with ASP.NET dev certificates."
-    },
-    {
-      "id": "infrastructure-azure-services-functions",
-      "name": "functions",
-      "path": "infrastructure/azure/services/functions.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure",
-        "services"
-      ],
-      "aliases": [
-        "Azure Functions",
-        "serverless",
-        "function app",
-        "timer trigger",
-        "HTTP trigger",
-        "Durable Functions"
-      ],
-      "anchors": {
-        "triggers": "#trigger-types",
-        "bindings": "#input-output-bindings"
-      },
-      "digest": "Use isolated worker model (.NET 8+). HTTP triggers for API endpoints, Timer triggers for scheduled work, Service Bus triggers for event processing. Configure scale-out limits to prevent runaway costs. Durable Functions for long-running orchestrations. Deploy with deployment slots for zero-downtime."
-    },
-    {
-      "id": "infrastructure-azure-services-service-bus",
-      "name": "service bus",
-      "path": "infrastructure/azure/services/service-bus.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure",
-        "services"
-      ],
-      "aliases": [
-        "service bus",
-        "message queue",
-        "topics",
-        "subscriptions",
-        "dead letter queue"
-      ],
-      "anchors": {
-        "setup": "#namespace-setup",
-        "patterns": "#messaging-patterns"
-      },
-      "digest": "Topics+subscriptions for pub/sub, queues for point-to-point. Set MaxDeliveryCount=10 for retry limit. Monitor dead letter queue. Use message sessions for ordered processing. Implement idempotent handlers (check processed message IDs). Use managed identity for authentication. Prefetch for high-throughput consumers."
-    },
-    {
-      "id": "infrastructure-azure-services-storage",
-      "name": "storage",
-      "path": "infrastructure/azure/services/storage.md",
-      "category": "infrastructure",
-      "subcategory": "azure",
-      "tags": [
-        "infrastructure",
-        "azure",
-        "services"
-      ],
-      "aliases": [
-        "azure storage",
-        "blob",
-        "table storage",
-        "queue storage",
-        "storage account tiers"
-      ],
-      "anchors": {
-        "tiers": "#storage-tiers",
-        "security": "#access-control"
-      },
-      "digest": "Hot tier for frequently accessed, cool for infrequent, archive for compliance. Always use managed identity — not storage keys. Enable versioning + soft delete for business data. Lifecycle management rules for cost optimization. Private endpoints for secure access from VNet. CDN for public static assets."
-    },
-    {
-      "id": "infrastructure-docker-easypanel-deploy",
-      "name": "easypanel deploy",
-      "path": "infrastructure/docker/easypanel-deploy.md",
-      "category": "infrastructure",
-      "subcategory": "docker",
-      "tags": [
-        "infrastructure",
-        "docker"
-      ],
-      "aliases": [
-        "easypanel",
-        "docker deploy",
-        "self-hosted",
-        "VPS deployment",
-        "docker compose"
-      ],
-      "anchors": {
-        "setup": "#easypanel-setup",
-        "deployment": "#deployment-flow"
-      },
-      "digest": "Create app in EasyPanel from container registry image. Configure environment variables in EasyPanel UI — not in Dockerfile. Use EasyPanel's managed Postgres/Redis for databases. Configure /health endpoint for health checks. Enable HTTPS via Let's Encrypt automatically. Use EasyPanel volumes for persistent storage."
-    },
-    {
-      "id": "infrastructure-supabase-mcp-setup",
-      "name": "mcp setup",
-      "path": "infrastructure/supabase/mcp-setup.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "supabase MCP",
-        "supabase tools",
-        "supabase configuration",
-        "MCP supabase"
-      ],
-      "anchors": {
-        "setup": "#mcp-configuration",
-        "tools": "#available-tools"
-      },
-      "digest": "Configure Supabase MCP server with project URL and service_role key in .claude/settings.json. Use MCP tools for schema inspection, query execution, and migration management. Never expose service_role key client-side. Set up anon key for client SDK. Enable in Claude settings for database introspection during design phase."
-    },
-    {
-      "id": "infrastructure-supabase-supabase-auth",
-      "name": "supabase auth",
-      "path": "infrastructure/supabase/supabase-auth.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "supabase auth",
-        "magic link",
-        "OAuth",
-        "JWT supabase",
-        "row level security auth"
-      ],
-      "anchors": {
-        "setup": "#auth-setup",
-        "providers": "#auth-providers"
-      },
-      "digest": "Use Supabase Auth for magic links, OAuth (Google, GitHub), phone OTP. Configure site URL and redirect URLs in dashboard. Server-side: use supabase.auth.getUser() not getSession(). Enable email confirmations for production. JWT expiry 3600s. RLS policies must reference auth.uid() for user isolation."
-    },
-    {
-      "id": "infrastructure-supabase-supabase-pgvector",
-      "name": "supabase pgvector",
-      "path": "infrastructure/supabase/supabase-pgvector.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "pgvector",
-        "vector embeddings",
-        "similarity search",
-        "supabase vectors",
-        "HNSW index"
-      ],
-      "anchors": {
-        "setup": "#pgvector-setup",
-        "queries": "#similarity-queries"
-      },
-      "digest": "Enable: CREATE EXTENSION vector. Define column as vector(1536) for OpenAI embeddings. Create HNSW index: CREATE INDEX USING hnsw (embedding vector_cosine_ops). Use match_documents() RPC for similarity search. Batch insert embeddings (100 at a time). RLS policies apply to vector queries like all other tables."
-    },
-    {
-      "id": "infrastructure-supabase-supabase-rls",
-      "name": "supabase rls",
-      "path": "infrastructure/supabase/supabase-rls.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "RLS",
-        "row level security",
-        "postgres policies",
-        "multi-tenant security",
-        "supabase policies"
-      ],
-      "anchors": {
-        "policies": "#rls-policies",
-        "patterns": "#tenant-patterns"
-      },
-      "digest": "Enable RLS on every table: ALTER TABLE ... ENABLE ROW LEVEL SECURITY. User isolation: USING (auth.uid() = user_id). Multi-tenant: USING (tenant_id = (auth.jwt()->>'tenant_id')::uuid). Test policies with SET LOCAL ROLE anon. Service role bypasses RLS — use only server-side. Never rely on application-level security alone."
-    },
-    {
-      "id": "infrastructure-supabase-supabase-storage",
-      "name": "supabase storage",
-      "path": "infrastructure/supabase/supabase-storage.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "supabase storage",
-        "file uploads",
-        "storage buckets",
-        "storage policies",
-        "signed URLs"
-      ],
-      "anchors": {
-        "buckets": "#bucket-setup",
-        "policies": "#storage-policies"
-      },
-      "digest": "Public buckets for CDN-served assets, private for user files (signed URLs). Storage policies use same RLS syntax as tables. Upload: supabase.storage.from('bucket').upload(path, file). Signed URLs: createSignedUrl(path, 3600). Set content-type on upload. Enable image transformations for on-the-fly resizing."
-    },
-    {
-      "id": "integration-api-graphql",
-      "name": "graphql",
-      "path": "integration/api/graphql.md",
-      "category": "integration",
-      "subcategory": "api",
-      "tags": [
-        "integration",
-        "api"
-      ],
-      "aliases": [
-        "graphql",
-        "Hot Chocolate",
-        "GraphQL schema",
-        "query",
-        "mutation",
-        "subscription"
-      ],
-      "anchors": {
-        "setup": "#hot-chocolate-setup",
-        "patterns": "#schema-patterns"
-      },
-      "digest": "Use Hot Chocolate for .NET GraphQL. Define types with [GraphQLType], mutations with [UseMutationConvention]. Enable pagination with [UsePaging]. Use DataLoader to prevent N+1 queries. Add [Authorize] for field-level security. Never expose internal exceptions — use custom error types. Enable introspection only in dev."
-    },
-    {
-      "id": "integration-api-grpc",
-      "name": "grpc",
-      "path": "integration/api/grpc.md",
-      "category": "integration",
-      "subcategory": "api",
-      "tags": [
-        "integration",
-        "api"
-      ],
-      "aliases": [
-        "grpc",
-        "protobuf",
-        ".proto files",
-        "gRPC service",
-        "server streaming"
-      ],
-      "anchors": {
-        "proto": "#proto-design",
-        "patterns": "#service-patterns"
-      },
-      "digest": "Define .proto files first, generate C# stubs. Use proto3 syntax. Unary for request-response, server streaming for real-time data. GrpcChannel with managed credentials. Add grpc-health-probe for health checks. Prefer REST for external APIs, gRPC for internal service-to-service. Use Buf for proto linting and schema registry."
-    },
-    {
-      "id": "integration-api-rest-design",
-      "name": "rest design",
-      "path": "integration/api/rest-design.md",
-      "category": "integration",
-      "subcategory": "api",
-      "tags": [
-        "integration",
-        "api"
-      ],
-      "aliases": [
-        "REST design",
-        "RESTful API",
-        "HTTP API design",
-        "resource naming",
-        "API versioning"
-      ],
-      "anchors": {
-        "resources": "#resource-naming",
-        "errors": "#error-handling"
-      },
-      "digest": "Resources are nouns, HTTP verbs are actions: GET /users, POST /users, PUT /users/{id}, DELETE /users/{id}. 201+Location for creation, 204 for deletion. RFC 9457 ProblemDetails for errors. Cursor-based pagination for large collections. URL versioning (/api/v1/). HATEOAS links for discoverable APIs."
-    },
-    {
-      "id": "integration-event-driven-cqrs",
-      "name": "cqrs",
-      "path": "integration/event-driven/cqrs.md",
-      "category": "integration",
-      "subcategory": "event-driven",
-      "tags": [
-        "integration",
-        "event-driven"
-      ],
-      "aliases": [
-        "CQRS",
-        "command query separation",
-        "MediatR",
-        "read model",
-        "write model"
-      ],
-      "anchors": {
-        "commands": "#command-patterns",
-        "queries": "#query-patterns"
-      },
-      "digest": "Commands mutate state, queries read state — never mix. Commands return void or Result (not data). Queries return DTOs (not domain entities). Use MediatR for in-process CQRS. Validate commands at API boundary before handler. Read models can be denormalized for query performance."
-    },
-    {
-      "id": "integration-event-driven-event-sourcing",
-      "name": "event sourcing",
-      "path": "integration/event-driven/event-sourcing.md",
-      "category": "integration",
-      "subcategory": "event-driven",
-      "tags": [
-        "integration",
-        "event-driven"
-      ],
-      "aliases": [
-        "event sourcing",
-        "event store",
-        "event replay",
-        "aggregate events",
-        "append-only log"
-      ],
-      "anchors": {
-        "events": "#domain-events",
-        "replay": "#event-replay"
-      },
-      "digest": "Store events as immutable past-tense facts: OrderCreated, PaymentProcessed. Aggregate rebuilds state from event stream. Take snapshots for aggregates with >100 events. Use EventStoreDB or CosmosDB change feed for storage. Projections build read models from events. Never delete events — use correction events."
-    },
-    {
-      "id": "integration-event-driven-service-bus",
-      "name": "service bus",
-      "path": "integration/event-driven/service-bus.md",
-      "category": "integration",
-      "subcategory": "event-driven",
-      "tags": [
-        "integration",
-        "event-driven"
-      ],
-      "aliases": [
-        "service bus integration",
-        "message broker",
-        "event bus",
-        "publisher",
-        "consumer"
-      ],
-      "anchors": {
-        "topics": "#topic-subscription",
-        "patterns": "#integration-patterns"
-      },
-      "digest": "Publish domain events to Service Bus after aggregate persistence (transactional outbox). Consumers must be idempotent — check processed message IDs. Use correlation IDs for distributed tracing. Message envelope includes schema version. Consumer groups enable event replay. Monitor dead letter queue in production."
-    },
-    {
-      "id": "integration-mcp-mcp-tools",
-      "name": "mcp tools",
-      "path": "integration/mcp/mcp-tools.md",
-      "category": "integration",
-      "subcategory": "mcp",
-      "tags": [
-        "integration",
-        "mcp"
-      ],
-      "aliases": [
-        "MCP",
-        "Model Context Protocol",
-        "Claude tools",
-        "MCP server",
-        "MCP client"
-      ],
-      "anchors": {
-        "tools": "#tool-definitions",
-        "setup": "#server-setup"
-      },
-      "digest": "MCP tools extend Claude with external data and actions. Tools are synchronous request-response with typed inputSchema. Resources provide read-only data access. Prompts are reusable templates. Register MCP servers in .claude/settings.json. Prefer @context7 for live library docs. Test tools with MCP Inspector before integrating."
-    },
-    {
-      "id": "observability-logging",
-      "name": "logging",
-      "path": "observability/logging.md",
-      "category": "observability",
-      "subcategory": null,
-      "tags": [
-        "observability"
-      ],
-      "aliases": [
-        "logging",
-        "serilog",
-        "ILogger",
-        "structured logging",
-        "log levels",
-        "Application Insights"
-      ],
-      "anchors": {
-        "setup": "#serilog-setup",
-        "patterns": "#logging-patterns"
-      },
-      "digest": "Use Serilog with structured logging. Sinks: Console (dev), Application Insights (prod). Inject ILogger<T> — never static Logger. Log levels: Debug for trace, Information for business events, Warning for recoverable, Error for failures. Include correlation IDs in all logs. Never log PII or credentials."
-    },
-    {
-      "id": "observability-metrics",
-      "name": "metrics",
-      "path": "observability/metrics.md",
-      "category": "observability",
-      "subcategory": null,
-      "tags": [
-        "observability"
-      ],
-      "aliases": [
-        "metrics",
-        "prometheus",
-        "OpenTelemetry metrics",
-        "custom metrics",
-        "counters",
-        "histograms"
-      ],
-      "anchors": {
-        "setup": "#metrics-setup",
-        "instruments": "#metric-types"
-      },
-      "digest": "System.Diagnostics.Metrics API for .NET. Register meters: builder.Services.AddMetrics(). Types: Counter (total count), Histogram (latency distribution), Gauge (current value). Export to Prometheus or Azure Monitor. Tag dimensions: environment, service, version. Define SLIs from business metrics, not technical ones."
-    },
-    {
-      "id": "observability-monitoring",
-      "name": "monitoring",
-      "path": "observability/monitoring.md",
-      "category": "observability",
-      "subcategory": null,
-      "tags": [
-        "observability"
-      ],
-      "aliases": [
-        "monitoring",
-        "alerts",
-        "dashboards",
-        "Application Insights",
-        "health checks",
-        "SLA"
-      ],
-      "anchors": {
-        "alerts": "#alert-rules",
-        "dashboards": "#dashboard-setup"
-      },
-      "digest": "Health checks: /health for liveness, /health/ready for readiness. Application Insights for distributed tracing. SLA-based alerts: p99 latency, error rate >1%, availability <99.9%. Azure Workbooks dashboards per feature. Availability tests for external endpoints. Each alert has an on-call runbook."
-    },
-    {
-      "id": "observability-tracing",
-      "name": "tracing",
-      "path": "observability/tracing.md",
-      "category": "observability",
-      "subcategory": null,
-      "tags": [
-        "observability"
-      ],
-      "aliases": [
-        "tracing",
-        "OpenTelemetry",
-        "distributed trace",
-        "spans",
-        "W3C TraceContext"
-      ],
-      "anchors": {
-        "setup": "#otel-setup",
-        "propagation": "#context-propagation"
-      },
-      "digest": "Add OpenTelemetry SDK. Auto-instrument HTTP, SQL, Service Bus. Propagate W3C TraceContext across services. Custom spans for business operations: using var span = tracer.StartActiveSpan('operation'). Export to Azure Monitor or Jaeger. Sampling: 10% in prod, 100% for errors. Correlate traces with logs via trace ID."
-    },
-    {
-      "id": "workflows-parallel-execution",
-      "name": "parallel execution",
-      "path": "workflows/parallel-execution.md",
-      "category": "workflows",
-      "subcategory": null,
-      "tags": [
-        "workflows"
-      ],
-      "aliases": [
-        "parallel",
-        "Task.WhenAll",
-        "concurrent",
-        "parallelism",
-        "async parallel",
-        "Parallel.ForEachAsync"
-      ],
-      "anchors": {
-        "patterns": "#parallel-patterns",
-        "throttling": "#concurrency-limits"
-      },
-      "digest": "Task.WhenAll for I/O-bound independent parallel ops. Parallel.ForEachAsync with CancellationToken for CPU-bound batches. SemaphoreSlim for concurrency limiting. Channel<T> for producer-consumer. Never Task.WhenAll with DbContext — use separate factory-created instances per task. Measure actual benefit before adding parallelism."
-    },
-    {
-      "id": "workflows-thread-management",
-      "name": "thread management",
-      "path": "workflows/thread-management.md",
-      "category": "workflows",
-      "subcategory": null,
-      "tags": [
-        "workflows"
-      ],
-      "aliases": [
-        "threads",
-        "ThreadPool",
-        "ConfigureAwait",
-        "deadlock prevention",
-        "async void",
-        "synchronization"
-      ],
-      "anchors": {
-        "patterns": "#thread-patterns",
-        "deadlocks": "#deadlock-prevention"
-      },
-      "digest": "Use async/await throughout — never mix blocking calls (.Result, .Wait()). ConfigureAwait(false) in library code. Never Thread.Sleep — use Task.Delay with CancellationToken. Lock-free with Interlocked for counters, ConcurrentDictionary for shared state. ThreadPool.QueueUserWorkItem only for truly detached background work."
-    },
-    {
-      "id": "infrastructure-vercel-database",
-      "name": "vercel database",
-      "path": "infrastructure/vercel/vercel-database.md",
-      "category": "infrastructure",
-      "subcategory": "vercel",
-      "tags": [
-        "infrastructure",
-        "vercel",
-        "nextjs",
-        "database"
-      ],
-      "aliases": [
-        "Vercel deploy",
-        "serverless database",
-        "Neon",
-        "PlanetScale",
-        "Vercel Postgres",
-        "serverless postgres"
-      ],
-      "anchors": {
-        "decision": "#decision-tree-choose-your-db-tier",
-        "neon": "#implementation-neon-recommended",
-        "supabase": "#implementation-supabase--pgbouncer-transaction-mode"
-      },
-      "digest": "NEVER use a traditional TCP connection pool (plain pg/Npgsql) when deploying to Vercel — ephemeral functions exhaust connections instantly. ALWAYS use a serverless-compatible database: Neon (first choice for SQL), Supabase with PgBouncer on port 6543 (transaction mode), PlanetScale, or Turso. Set connection_limit=1 when using ORMs with PgBouncer."
-    }
-  ]
-}
+{
+  "version": "1.0.0",
+  "standards": [
+    {
+      "id": "ai-agents-blazor-ui",
+      "name": "blazor ui",
+      "path": "ai-agents/blazor-ui.md",
+      "category": "ai-agents",
+      "subcategory": null,
+      "tags": [
+        "ai-agents"
+      ],
+      "aliases": [
+        "Blazor AI",
+        "AI chat UI",
+        "streaming Blazor",
+        "agent UI",
+        "chat component"
+      ],
+      "anchors": {
+        "streaming": "#streaming-responses",
+        "state": "#ui-state-management",
+        "dbcontext": "#dbcontext-in-blazor"
+      },
+      "digest": "Never inject DbContext directly into Blazor components — use a scoped service factory. Stream AI responses via IAsyncEnumerable. Debounce user input. Handle cancellation with CancellationTokenSource per component lifecycle.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "ai-agents-production",
+      "name": "production",
+      "path": "ai-agents/production.md",
+      "category": "ai-agents",
+      "subcategory": null,
+      "tags": [
+        "ai-agents"
+      ],
+      "aliases": [
+        "AI production",
+        "agent reliability",
+        "production AI",
+        "agent safety",
+        "autonomous systems"
+      ],
+      "anchors": {
+        "reliability": "#reliability-patterns",
+        "safety": "#safety-guardrails",
+        "monitoring": "#monitoring-and-logging"
+      },
+      "digest": "Add rate limiting and retry with exponential backoff. Log all agent decisions and tool calls. Implement circuit breakers for external calls. Validate agent output before acting. Never give agents unaudited write access to production systems.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "ai-agents-setup",
+      "name": "setup",
+      "path": "ai-agents/setup.md",
+      "category": "ai-agents",
+      "subcategory": null,
+      "tags": [
+        "ai-agents"
+      ],
+      "aliases": [
+        "AI agent setup",
+        "MCP configuration",
+        "tool configuration",
+        "Claude setup",
+        "agent initialization"
+      ],
+      "anchors": {
+        "mcp": "#mcp-configuration",
+        "tools": "#tool-definitions",
+        "spawn": "#spawn-configuration"
+      },
+      "digest": "Initialize agents with explicit tool lists — never allow unlimited tool access. Configure MCP servers before spawning subagents. Define system prompts with role + constraints + output format. Validate tool availability before dispatch.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "ai-agents-team-orchestration",
+      "name": "team orchestration",
+      "path": "ai-agents/team-orchestration.md",
+      "category": "ai-agents",
+      "subcategory": null,
+      "tags": [
+        "ai-agents"
+      ],
+      "aliases": [
+        "team orchestration",
+        "agent team",
+        "multi-agent coordination",
+        "squad dispatch"
+      ],
+      "anchors": {
+        "patterns": "#orchestration-patterns",
+        "communication": "#inter-agent-communication"
+      },
+      "digest": "Organize agents into squads with a designated leader. Leader decomposes the task and dispatches to specialists. Pass structured briefs between agents — not raw conversation. Each agent outputs a typed result. Leader aggregates into a unified output.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "ai-agents-workflows",
+      "name": "workflows",
+      "path": "ai-agents/workflows.md",
+      "category": "ai-agents",
+      "subcategory": null,
+      "tags": [
+        "ai-agents"
+      ],
+      "aliases": [
+        "agent workflow",
+        "multi-agent",
+        "orchestration pattern",
+        "agent chain",
+        "parallel agents"
+      ],
+      "anchors": {
+        "orchestration": "#orchestration-patterns",
+        "parallel": "#parallel-execution",
+        "handoff": "#agent-handoff"
+      },
+      "digest": "Use orchestrator→specialist pattern for complex tasks. Parallelize independent subtasks. Pass structured context between agents, not raw conversation. Define explicit success criteria before spawning. Implement timeout and fallback strategies.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "architecture-ddd-aggregates",
+      "name": "aggregates",
+      "path": "architecture/ddd/aggregates.md",
+      "category": "architecture",
+      "subcategory": "ddd",
+      "tags": [
+        "architecture",
+        "ddd"
+      ],
+      "aliases": [
+        "aggregate root",
+        "DDD aggregate",
+        "domain aggregate",
+        "aggregate pattern"
+      ],
+      "anchors": {
+        "root": "#aggregate-root-design",
+        "invariants": "#enforcing-invariants",
+        "events": "#domain-events"
+      },
+      "digest": "AggregateRoot owns its boundary — never reference internal entities from outside. Enforce invariants in aggregate methods, not services. Raise domain events from within the aggregate. Use ID references across aggregate boundaries.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "architecture-ddd-bounded-contexts",
+      "name": "bounded contexts",
+      "path": "architecture/ddd/bounded-contexts.md",
+      "category": "architecture",
+      "subcategory": "ddd",
+      "tags": [
+        "architecture",
+        "ddd"
+      ],
+      "aliases": [
+        "bounded context",
+        "BC",
+        "context map",
+        "integration events",
+        "domain boundary"
+      ],
+      "anchors": {
+        "context-map": "#context-map",
+        "integration": "#integration-events",
+        "acl": "#anti-corruption-layer"
+      },
+      "digest": "Each bounded context has its own model, ubiquitous language, and database schema. Communicate between contexts via integration events or anti-corruption layers. Never share domain objects across context boundaries.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "architecture-ddd-complexity-levels",
+      "name": "complexity levels",
+      "path": "architecture/ddd/complexity-levels.md",
+      "category": "architecture",
+      "subcategory": "ddd",
+      "tags": [
+        "architecture",
+        "ddd"
+      ],
+      "aliases": [
+        "DDD level",
+        "domain complexity",
+        "CRUD vs DDD",
+        "complexity decision tree",
+        "domain model level"
+      ],
+      "anchors": {
+        "decision-tree": "#decision-tree",
+        "level1": "#level-1-crud",
+        "level2": "#level-2-business-logic",
+        "level3": "#level-3-bounded-context"
+      },
+      "digest": "Level 1 CRUD: simple entity + service. Level 2 Business Logic: AggregateRoot, ValueObjects, DomainEvents, CQRS. Level 3 Bounded Context: explicit BC isolation, Integration Events. Use 5-question decision tree to determine level before designing.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "architecture-ddd-entities",
+      "name": "entities",
+      "path": "architecture/ddd/entities.md",
+      "category": "architecture",
+      "subcategory": "ddd",
+      "tags": [
+        "architecture",
+        "ddd"
+      ],
+      "aliases": [
+        "DDD entity",
+        "domain entity",
+        "entity class",
+        "entity ID",
+        "entity lifecycle"
+      ],
+      "anchors": {
+        "identity": "#entity-identity",
+        "lifecycle": "#entity-lifecycle"
+      },
+      "digest": "Entities have unique identity that persists through state changes. Identity is the only equality criterion. Mutable state belongs inside the entity, not the service. Avoid anemic entities — put domain logic where the data lives.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "architecture-ddd-ubiquitous-language",
+      "name": "ubiquitous language",
+      "path": "architecture/ddd/ubiquitous-language.md",
+      "category": "architecture",
+      "subcategory": "ddd",
+      "tags": [
+        "architecture",
+        "ddd"
+      ],
+      "aliases": [
+        "ubiquitous language",
+        "domain language",
+        "shared vocabulary",
+        "domain glossary"
+      ],
+      "anchors": {
+        "glossary": "#domain-glossary",
+        "naming": "#naming-from-domain"
+      },
+      "digest": "Use business domain terms directly in code — no translation layer between what the domain expert says and what the code says. If the business says 'Order', the code has Order not SalesTransaction. Maintain a living glossary. Inconsistent naming = inconsistent models.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "architecture-ddd-value-objects",
+      "name": "value objects",
+      "path": "architecture/ddd/value-objects.md",
+      "category": "architecture",
+      "subcategory": "ddd",
+      "tags": [
+        "architecture",
+        "ddd"
+      ],
+      "aliases": [
+        "value object",
+        "VO",
+        "immutable value",
+        "domain value type",
+        "strongly typed"
+      ],
+      "anchors": {
+        "equality": "#equality-by-value",
+        "validation": "#value-object-validation",
+        "factory": "#static-factory-method"
+      },
+      "digest": "Value objects are immutable and identified by their properties, not ID. Override equality by value. Create via static factory method with validation. Use for Money, Email, Coordinates, DateRange — any domain concept with rules.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "architecture-vertical-slice-vertical-slice",
+      "name": "vertical slice",
+      "path": "architecture/vertical-slice/vertical-slice.md",
+      "category": "architecture",
+      "subcategory": "vertical-slice",
+      "tags": [
+        "architecture",
+        "vertical-slice"
+      ],
+      "aliases": [
+        "vertical slice",
+        "VSA",
+        "slice architecture",
+        "feature slice",
+        "CQRS slice"
+      ],
+      "anchors": {
+        "structure": "#slice-structure",
+        "rules": "#slice-rules",
+        "cqrs": "#cqrs-in-slices"
+      },
+      "digest": "Organize by feature, not layer. Each slice contains Command/Query, Handler, Validator, Response. No cross-slice dependencies — shared code goes to a dedicated Shared project. Use MediatR for in-process CQRS dispatch.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-api-minimal-api",
+      "name": "minimal api",
+      "path": "backend/api/minimal-api.md",
+      "category": "backend",
+      "subcategory": "api",
+      "tags": [
+        "backend",
+        "api"
+      ],
+      "aliases": [
+        "minimal api",
+        "minimal APIs",
+        ".NET minimal API",
+        "route handler",
+        "MapGet"
+      ],
+      "anchors": {
+        "endpoints": "#endpoint-registration",
+        "grouping": "#route-groups"
+      },
+      "digest": "Group endpoints by feature with MapGroup. Use typed results (TypedResults.Ok, TypedResults.NotFound) for Swagger accuracy. Register endpoint groups in extension methods, not Program.cs directly. Add [EndpointSummary] for OpenAPI docs. Prefer Minimal API over controllers for new code.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-api-rest",
+      "name": "rest",
+      "path": "backend/api/rest.md",
+      "category": "backend",
+      "subcategory": "api",
+      "tags": [
+        "backend",
+        "api"
+      ],
+      "aliases": [
+        "REST API",
+        "RESTful",
+        "HTTP API",
+        "resource API",
+        "HTTP methods"
+      ],
+      "anchors": {
+        "resources": "#resource-design",
+        "errors": "#error-responses"
+      },
+      "digest": "Resources are nouns, HTTP verbs are actions. GET /users, POST /users, PUT /users/{id}, DELETE /users/{id}. 201+Location for creation, 204 for deletion. Use RFC 9457 ProblemDetails for all errors. Cursor-based pagination for large collections. API versioning via URL path (/v1/).",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-api-validation",
+      "name": "validation",
+      "path": "backend/api/validation.md",
+      "category": "backend",
+      "subcategory": "api",
+      "tags": [
+        "backend",
+        "api"
+      ],
+      "aliases": [
+        "FluentValidation",
+        "input validation",
+        "request validation",
+        "API validation",
+        "model validation"
+      ],
+      "anchors": {
+        "fluent": "#fluentvalidation-setup",
+        "rules": "#validation-rules"
+      },
+      "digest": "Use FluentValidation for all request validation. Register validators as scoped services. Return 422 UnprocessableEntity with field-level error messages. Validate at API boundary — not inside domain logic. Never trust client-side validation alone.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-authentication-passkeys",
+      "name": "passkeys",
+      "path": "backend/authentication/passkeys.md",
+      "category": "backend",
+      "subcategory": "authentication",
+      "tags": [
+        "backend",
+        "authentication"
+      ],
+      "aliases": [
+        "passkeys",
+        "WebAuthn",
+        "FIDO2",
+        "passwordless",
+        "biometric auth"
+      ],
+      "anchors": {
+        "registration": "#passkey-registration",
+        "authentication": "#passkey-authentication"
+      },
+      "digest": "Implement WebAuthn/FIDO2 for passwordless authentication. Registration: generate challenge → verify attestation → store credential. Authentication: generate challenge → verify assertion → issue JWT. Use ASP.NET Core Identity with FIDO2 library. Always store relying party ID as domain, not localhost.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-database-ef-core",
+      "name": "ef core",
+      "path": "backend/database/ef-core.md",
+      "category": "backend",
+      "subcategory": "database",
+      "tags": [
+        "backend",
+        "database"
+      ],
+      "aliases": [
+        "Entity Framework",
+        "EF Core",
+        "DbContext",
+        "LINQ queries",
+        "ORM"
+      ],
+      "anchors": {
+        "dbcontext": "#dbcontext-patterns",
+        "queries": "#query-optimization",
+        "migrations": "#migration-strategy"
+      },
+      "digest": "Use Scoped DbContext per request. Never expose IQueryable outside repository. Use AsNoTracking for read-only queries. Batch writes with SaveChangesAsync. Avoid N+1 queries — use Include for eager loading. Never use lazy loading in production.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-database-migrations",
+      "name": "migrations",
+      "path": "backend/database/migrations.md",
+      "category": "backend",
+      "subcategory": "database",
+      "tags": [
+        "backend",
+        "database"
+      ],
+      "aliases": [
+        "EF migrations",
+        "database migration",
+        "schema migration",
+        "dotnet ef",
+        "Add-Migration"
+      ],
+      "anchors": {
+        "workflow": "#migration-workflow",
+        "production": "#production-migrations"
+      },
+      "digest": "Run migrations at app startup via MigrateAsync() only in dev. In production, apply migrations as part of CI/CD, never at runtime. Never modify existing migrations — always create a new one. Use meaningful names (Add-Migration AddUserEmailIndex). Test rollback on every migration.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-database-postgresql-database",
+      "name": "database",
+      "path": "backend/database/postgresql/database.md",
+      "category": "backend",
+      "subcategory": "database",
+      "tags": [
+        "backend",
+        "database",
+        "postgresql"
+      ],
+      "aliases": [
+        "PostgreSQL",
+        "postgres",
+        "pg",
+        "database design",
+        "SQL schema"
+      ],
+      "anchors": {
+        "schema": "#schema-design",
+        "indexes": "#index-strategy"
+      },
+      "digest": "Use timestamptz for all timestamps (not timestamp). UUID primary keys for public-facing IDs. Add indexes on FK columns and frequently filtered columns. Use GIN indexes for JSON/array columns. JSONB over JSON. Row-level security for multi-tenant. Never store binary in columns — use storage URLs.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-database-repository-patterns",
+      "name": "repository patterns",
+      "path": "backend/database/repository-patterns.md",
+      "category": "backend",
+      "subcategory": "database",
+      "tags": [
+        "backend",
+        "database"
+      ],
+      "aliases": [
+        "repository",
+        "IRepository",
+        "Unit of Work",
+        "data access",
+        "repository pattern"
+      ],
+      "anchors": {
+        "pattern": "#repository-pattern",
+        "uow": "#unit-of-work"
+      },
+      "digest": "Repository abstracts data access behind an interface. Return domain objects, not IQueryable. Unit of Work coordinates multiple repository operations in one transaction. Avoid generic repositories — domain-specific repositories express intent better. Test repositories with in-memory providers or integration tests.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-database-vector-search-rag",
+      "name": "vector search rag",
+      "path": "backend/database/vector-search-rag.md",
+      "category": "backend",
+      "subcategory": "database",
+      "tags": [
+        "backend",
+        "database"
+      ],
+      "aliases": [
+        "vector search",
+        "RAG",
+        "embeddings",
+        "pgvector",
+        "semantic search"
+      ],
+      "anchors": {
+        "chunking": "#chunking-strategy",
+        "retrieval": "#retrieval-patterns"
+      },
+      "digest": "Chunk documents with 512 token size and 50 token overlap for RAG. Embed with text-embedding-3-small. Store embedding + metadata (source, chunk index). Retrieve top-k=5 by cosine similarity. Re-rank before injecting into LLM context. Use pgvector HNSW index for performance at scale.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-dotnet-async",
+      "name": "async",
+      "path": "backend/dotnet/async.md",
+      "category": "backend",
+      "subcategory": "dotnet",
+      "tags": [
+        "backend",
+        "dotnet"
+      ],
+      "aliases": [
+        "async/await",
+        "Task<T>",
+        "CancellationToken",
+        "ValueTask",
+        "async programming"
+      ],
+      "anchors": {
+        "cancellation": "#cancellation-token-pattern",
+        "parallel": "#parallel-execution-patterns"
+      },
+      "digest": "Use CancellationToken in all async signatures. Prefer Task<T> over ValueTask<T> unless hot-path allocation is measured. Never async void except event handlers. Task.WhenAll for independent parallel ops.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-dotnet-core",
+      "name": "core",
+      "path": "backend/dotnet/core.md",
+      "category": "backend",
+      "subcategory": "dotnet",
+      "tags": [
+        "backend",
+        "dotnet"
+      ],
+      "aliases": [
+        ".NET core",
+        "dotnet core",
+        "C# patterns",
+        "backend core",
+        "dotnet standards"
+      ],
+      "anchors": {
+        "di": "#dependency-injection",
+        "services": "#service-registration",
+        "security": "#security-patterns"
+      },
+      "digest": "Register services in Program.cs with AddScoped/AddSingleton/AddTransient. Use constructor injection only — never service locator. Apply interface segregation. Validate all input at API boundary. Never expose raw exceptions to clients.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-dotnet-di",
+      "name": "di",
+      "path": "backend/dotnet/di.md",
+      "category": "backend",
+      "subcategory": "dotnet",
+      "tags": [
+        "backend",
+        "dotnet"
+      ],
+      "aliases": [
+        "dependency injection",
+        "IoC",
+        "DI container",
+        "service registration",
+        "inversion of control"
+      ],
+      "anchors": {
+        "patterns": "#di-patterns",
+        "anti-patterns": "#di-anti-patterns"
+      },
+      "digest": "Use constructor injection exclusively. Register concrete types with interfaces. Never use service locator or static factories. Scoped services must not be injected into singletons. Validate dependency graph at startup with ValidateOnBuild.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-dotnet-program-cs-checklist",
+      "name": "program cs checklist",
+      "path": "backend/dotnet/program-cs-checklist.md",
+      "category": "backend",
+      "subcategory": "dotnet",
+      "tags": [
+        "backend",
+        "dotnet"
+      ],
+      "aliases": [
+        "program.cs",
+        "startup configuration",
+        "NuGet packages",
+        "package setup",
+        "app bootstrap"
+      ],
+      "anchors": {
+        "nuget": "#nuget-packages",
+        "middleware": "#middleware-order"
+      },
+      "digest": "Configure middleware in order: CORS → Auth → Routing → Endpoints. Register all required NuGet packages. Enable Swagger in dev only. Apply global exception handler. Configure HTTPS redirection. Enable CORS before Auth.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-integrations-asaas-asaas-api",
+      "name": "asaas api",
+      "path": "backend/integrations/asaas/asaas-api.md",
+      "category": "backend",
+      "subcategory": "integrations",
+      "tags": [
+        "backend",
+        "integrations",
+        "asaas"
+      ],
+      "aliases": [
+        "asaas",
+        "payment",
+        "PIX",
+        "boleto",
+        "Brazilian payment"
+      ],
+      "anchors": {
+        "payments": "#payment-types",
+        "webhooks": "#webhook-handling"
+      },
+      "digest": "Use AsaasClient SDK — never call REST API directly. Register as scoped service. Implement webhook signature verification. Map SDK enums to domain enums at integration boundary. Use idempotency keys for retry safety. Test with Asaas sandbox environment.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-integrations-clerk-clerk-auth",
+      "name": "clerk auth",
+      "path": "backend/integrations/clerk/clerk-auth.md",
+      "category": "backend",
+      "subcategory": "integrations",
+      "tags": [
+        "backend",
+        "integrations",
+        "clerk"
+      ],
+      "aliases": [
+        "clerk",
+        "authentication",
+        "OAuth",
+        "JWT",
+        "session management"
+      ],
+      "anchors": {
+        "setup": "#clerk-setup",
+        "middleware": "#auth-middleware"
+      },
+      "digest": "Add ClerkMiddleware to ASP.NET pipeline. Access userId via User.GetClerkUserId(). Configure allowed redirect URLs in Clerk dashboard. Use [Authorize] for protected endpoints. Never store passwords — Clerk manages credentials. Sync Clerk users to local DB on first login.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-integrations-hangfire-hangfire-jobs",
+      "name": "hangfire jobs",
+      "path": "backend/integrations/hangfire/hangfire-jobs.md",
+      "category": "backend",
+      "subcategory": "integrations",
+      "tags": [
+        "backend",
+        "integrations",
+        "hangfire"
+      ],
+      "aliases": [
+        "hangfire",
+        "background jobs",
+        "scheduled jobs",
+        "recurring",
+        "cron",
+        "fire and forget"
+      ],
+      "anchors": {
+        "jobs": "#job-types",
+        "retry": "#retry-policies"
+      },
+      "digest": "Use IDbContextFactory for scoped DB operations in jobs — never inject DbContext directly into job classes. BackgroundJob.Enqueue for fire-and-forget, RecurringJob.AddOrUpdate for cron. Add RetryCountAttribute for retries. Secure Hangfire Dashboard with auth in production. Never put long-running work in a single job — decompose.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "backend-integrations-resend-resend-email",
+      "name": "resend email",
+      "path": "backend/integrations/resend/resend-email.md",
+      "category": "backend",
+      "subcategory": "integrations",
+      "tags": [
+        "backend",
+        "integrations",
+        "resend"
+      ],
+      "aliases": [
+        "resend",
+        "email",
+        "transactional email",
+        "SMTP",
+        "email notification"
+      ],
+      "anchors": {
+        "sending": "#send-email",
+        "templates": "#email-templates"
+      },
+      "digest": "Register ResendClient as singleton. Provide both HTML and plain-text alternatives. Handle bounce/complaint webhooks to maintain sender reputation. Never send from test domains in production. Queue emails via Hangfire for reliability — don't send inline in request handlers.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "context-analytics",
+      "name": "analytics",
+      "path": "context/analytics.md",
+      "category": "context",
+      "subcategory": null,
+      "tags": [
+        "context"
+      ],
+      "aliases": [
+        "analytics",
+        "GTM",
+        "GA4",
+        "event tracking",
+        "data layer"
+      ],
+      "anchors": {
+        "events": "#event-tracking",
+        "setup": "#analytics-setup"
+      },
+      "digest": "Install GTM via component, not raw script. Track custom events via dataLayer.push. GA4 events follow snake_case naming. Define event schema before implementing. Never log PII in analytics events. Test event firing with GA4 DebugView or GTM Preview before production.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "context-bundles",
+      "name": "bundles",
+      "path": "context/bundles.md",
+      "category": "context",
+      "subcategory": null,
+      "tags": [
+        "context"
+      ],
+      "aliases": [
+        "context bundles",
+        "bundled context",
+        "spec bundles",
+        "feature bundles"
+      ],
+      "anchors": {
+        "structure": "#bundle-structure",
+        "loading": "#context-loading"
+      },
+      "digest": "Bundle related context files to reduce per-agent injection overhead. Define bundle manifests listing included standards by scope. Agents load their assigned bundle, not the full context. Bundles are versioned — bump version when standards change significantly.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "context-priming",
+      "name": "priming",
+      "path": "context/priming.md",
+      "category": "context",
+      "subcategory": null,
+      "tags": [
+        "context"
+      ],
+      "aliases": [
+        "context priming",
+        "agent priming",
+        "system prompt",
+        "context injection"
+      ],
+      "anchors": {
+        "patterns": "#priming-patterns",
+        "efficiency": "#context-efficiency"
+      },
+      "digest": "Prime agents with role + constraints + output format in the first message. Keep priming concise — under 200 tokens. Include only relevant standards for the current phase. Re-prime after context compaction. Never include full file contents when a digest suffices.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "core-architecture",
+      "name": "architecture",
+      "path": "core/architecture.md",
+      "category": "core",
+      "subcategory": null,
+      "tags": [
+        "core"
+      ],
+      "aliases": [
+        "architecture",
+        "clean architecture",
+        "layered architecture",
+        "SOLID",
+        "design principles"
+      ],
+      "anchors": {
+        "layers": "#layer-boundaries",
+        "patterns": "#architectural-patterns"
+      },
+      "digest": "Apply Clean Architecture: dependency rule points inward (Infrastructure → Application → Domain). Domain has no external dependencies. Application orchestrates use cases. Infrastructure implements ports. SOLID principles at every layer. Never skip architecture review for cross-cutting concerns.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "core-coding",
+      "name": "coding",
+      "path": "core/coding.md",
+      "category": "core",
+      "subcategory": null,
+      "tags": [
+        "core"
+      ],
+      "aliases": [
+        "coding standards",
+        "code style",
+        "clean code",
+        "naming conventions",
+        "code quality"
+      ],
+      "anchors": {
+        "naming": "#naming-conventions",
+        "patterns": "#code-patterns"
+      },
+      "digest": "PascalCase for types/methods, camelCase for fields/locals, UPPER_SNAKE_CASE for constants. Methods are verbs, classes are nouns. Single responsibility per class/method. Max 30 lines per method. Prefer immutability. No magic strings — use constants or enums. Every public API has XML docs.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "core-git-branching-strategy",
+      "name": "git branching strategy",
+      "path": "core/git-branching-strategy.md",
+      "category": "core",
+      "subcategory": null,
+      "tags": [
+        "core"
+      ],
+      "aliases": [
+        "git flow",
+        "branch strategy",
+        "feature branch",
+        "gitflow",
+        "branch naming"
+      ],
+      "anchors": {
+        "branching": "#branch-naming",
+        "workflow": "#git-workflow"
+      },
+      "digest": "Branch naming: feature/{ticket}-{description}, fix/{ticket}-{description}. main is production-ready, develop is integration branch. PRs require passing CI and at least one review. Squash merge for features. Delete branches after merge. Protect main and develop with required checks.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "core-git",
+      "name": "git",
+      "path": "core/git.md",
+      "category": "core",
+      "subcategory": null,
+      "tags": [
+        "core"
+      ],
+      "aliases": [
+        "git",
+        "commit messages",
+        "conventional commits",
+        "changelog",
+        "git hooks"
+      ],
+      "anchors": {
+        "commits": "#commit-format",
+        "hooks": "#pre-commit-hooks"
+      },
+      "digest": "Conventional Commits: feat, fix, chore, docs, refactor, test, style. Scope in parentheses: feat(auth): add JWT validation. Breaking changes use BREAKING CHANGE footer. Commits are atomic — one logical change per commit. Pre-commit hooks run build + lint. Never commit .env or secrets.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "core-testing",
+      "name": "testing",
+      "path": "core/testing.md",
+      "category": "core",
+      "subcategory": null,
+      "tags": [
+        "core"
+      ],
+      "aliases": [
+        "testing",
+        "unit tests",
+        "integration tests",
+        "TDD",
+        "test coverage",
+        "xUnit"
+      ],
+      "anchors": {
+        "patterns": "#test-patterns",
+        "coverage": "#coverage-requirements"
+      },
+      "digest": "Arrange-Act-Assert in every test. Unit tests for domain logic — no DB or HTTP. Integration tests use TestContainers for real dependencies. Minimum 80% coverage on domain layer. Mock external services at system boundaries. Test names: Given_When_Then or MethodName_Scenario_ExpectedResult.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "data-nosql-blob-storage",
+      "name": "blob storage",
+      "path": "data/nosql/blob-storage.md",
+      "category": "data",
+      "subcategory": "nosql",
+      "tags": [
+        "data",
+        "nosql"
+      ],
+      "aliases": [
+        "blob storage",
+        "Azure Storage",
+        "file storage",
+        "BlobServiceClient",
+        "object storage"
+      ],
+      "anchors": {
+        "upload": "#upload-patterns",
+        "access": "#sas-tokens"
+      },
+      "digest": "Use BlobServiceClient with DefaultAzureCredential — never hardcode connection strings. Organize by container/virtual-path. Generate SAS tokens for client-side access with minimum permissions and short TTL. Set content-type on upload. Use CDN for public assets. Enable versioning + soft delete for business data.",
+      "stacks": [
+        "dotnet",
+        "azure"
+      ]
+    },
+    {
+      "id": "data-nosql-cache-redis",
+      "name": "redis",
+      "path": "data/nosql/cache/redis.md",
+      "category": "data",
+      "subcategory": "nosql",
+      "tags": [
+        "data",
+        "nosql",
+        "cache"
+      ],
+      "aliases": [
+        "redis",
+        "cache",
+        "distributed cache",
+        "IDistributedCache",
+        "cache-aside",
+        "StackExchange.Redis"
+      ],
+      "anchors": {
+        "patterns": "#cache-patterns",
+        "invalidation": "#cache-invalidation"
+      },
+      "digest": "IDistributedCache for cache-aside pattern. Set TTL on every entry — never cache without expiry. Serialize with System.Text.Json. Sliding expiration for sessions, absolute for computed results. Invalidate by key prefix. Redis eviction policy must be set (allkeys-lru). Never cache PII without encryption.",
+      "stacks": [
+        "dotnet",
+        "azure"
+      ]
+    },
+    {
+      "id": "data-nosql-cosmos-db",
+      "name": "cosmos db",
+      "path": "data/nosql/cosmos-db.md",
+      "category": "data",
+      "subcategory": "nosql",
+      "tags": [
+        "data",
+        "nosql"
+      ],
+      "aliases": [
+        "cosmos",
+        "CosmosDB",
+        "document database",
+        "partition key",
+        "RUs"
+      ],
+      "anchors": {
+        "modeling": "#document-modeling",
+        "queries": "#query-patterns"
+      },
+      "digest": "Choose partition key with high cardinality for even distribution. Design documents for single-partition reads. Enable TTL for ephemeral data. Prefer point reads (O(1)) over cross-partition queries. Set provisioned throughput based on measured RUs. Use change feed for event-driven processing.",
+      "stacks": [
+        "dotnet",
+        "azure"
+      ]
+    },
+    {
+      "id": "data-vector-search-azure-ai-search",
+      "name": "azure ai search",
+      "path": "data/vector-search/azure-ai-search.md",
+      "category": "data",
+      "subcategory": "vector-search",
+      "tags": [
+        "data",
+        "vector-search"
+      ],
+      "aliases": [
+        "Azure AI Search",
+        "cognitive search",
+        "vector search",
+        "hybrid search",
+        "semantic ranking"
+      ],
+      "anchors": {
+        "indexing": "#index-setup",
+        "queries": "#search-queries"
+      },
+      "digest": "Create index with semantic configuration for hybrid search (keyword + vector). Batch index uploads (1000 docs/batch). Use OData filters for pre-filtering before vector search. Apply RRF fusion for hybrid ranking. Set up incremental indexing for updates. Add enrichment pipeline for PDFs/images.",
+      "stacks": [
+        "dotnet",
+        "azure"
+      ]
+    },
+    {
+      "id": "data-vector-search-rag-chunking",
+      "name": "rag chunking",
+      "path": "data/vector-search/rag-chunking.md",
+      "category": "data",
+      "subcategory": "vector-search",
+      "tags": [
+        "data",
+        "vector-search"
+      ],
+      "aliases": [
+        "RAG chunking",
+        "document chunking",
+        "text splitting",
+        "chunk overlap",
+        "embedding chunks"
+      ],
+      "anchors": {
+        "strategies": "#chunking-strategies",
+        "retrieval": "#retrieval-pipeline"
+      },
+      "digest": "Recursive character splitting: 512 token chunks, 50 token overlap. Embed with text-embedding-3-small (1536 dims). Store chunk + metadata (source, page, section). Retrieve top-k=5 by cosine similarity. Re-rank with cross-encoder before LLM injection. Evaluate retrieval quality with RAGAS.",
+      "stacks": [
+        "dotnet",
+        "azure"
+      ]
+    },
+    {
+      "id": "frontend-blazor-design-checklist",
+      "name": "design checklist",
+      "path": "frontend/blazor/design-checklist.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "blazor checklist",
+        "blazor design review",
+        "UI checklist",
+        "component checklist"
+      ],
+      "anchors": {
+        "components": "#component-checklist",
+        "accessibility": "#a11y-checklist"
+      },
+      "digest": "Every Blazor component must: use @inject not constructor injection, define loading and error states, implement IDisposable for event subscriptions, use CancellationToken for async ops. Fluent UI: use DataGrid not custom tables, FluentDialog for modals, FluentTooltip for hints. No hardcoded colors.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-blazor-fluent-ui-setup",
+      "name": "fluent ui setup",
+      "path": "frontend/blazor/fluent-ui-setup.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "fluent ui setup",
+        "blazor fluent",
+        "Microsoft Fluent UI",
+        "FluentUI install"
+      ],
+      "anchors": {
+        "setup": "#package-setup",
+        "theme": "#theme-configuration"
+      },
+      "digest": "Install Microsoft.FluentUI.AspNetCore.Components. Register: builder.Services.AddFluentUIComponents(). Add <FluentDesignTheme> to MainLayout.razor. Install FluentIcons package separately. Set CachingEnabled=true for icons in production. Configure theme via --accent-color CSS variable in app.css.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-blazor-fluent-ui",
+      "name": "fluent ui",
+      "path": "frontend/blazor/fluent-ui.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "fluent ui components",
+        "FluentDataGrid",
+        "FluentDialog",
+        "FluentButton",
+        "FluentCombobox"
+      ],
+      "anchors": {
+        "grid": "#data-grid",
+        "forms": "#form-components"
+      },
+      "digest": "Use FluentDataGrid with virtualization for >100 rows. FluentDialog requires DialogService injection. FluentTextField uses @bind-Value. FluentCombobox with @bind-Value and TOption type param. Never mix FluentUI and MudBlazor in the same project. Use Appearance enum for button variants.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-blazor-html-conversion",
+      "name": "html conversion",
+      "path": "frontend/blazor/html-conversion.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "html to blazor",
+        "blazor migration",
+        "html conversion",
+        "razor conversion"
+      ],
+      "anchors": {
+        "mapping": "#html-to-blazor-mapping",
+        "components": "#component-patterns"
+      },
+      "digest": "Convert <div> containers to <FluentStack> or <FluentGrid>. Replace <input> with FluentTextField/FluentCheckbox/FluentSelect. Convert <table> to FluentDataGrid. Replace class= with Class=. Event handlers: onclick → @onclick. Use CascadingValue for theme propagation. Blazor-specific: @ref, @key, @bind.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-blazor-lifecycle",
+      "name": "lifecycle",
+      "path": "frontend/blazor/lifecycle.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "blazor lifecycle",
+        "OnInitialized",
+        "OnAfterRender",
+        "StateHasChanged",
+        "component lifecycle"
+      ],
+      "anchors": {
+        "hooks": "#lifecycle-hooks",
+        "async": "#async-patterns"
+      },
+      "digest": "OnInitializedAsync for data loading (not constructor or OnInitialized). JSInterop only in OnAfterRenderAsync(firstRender:true). Dispose event subscriptions in IDisposable.Dispose(). Call StateHasChanged() after async state changes from non-UI threads. Cancel background work with CancellationTokenSource in Dispose().",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-blazor-pitfalls",
+      "name": "pitfalls",
+      "path": "frontend/blazor/pitfalls.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "blazor anti-patterns",
+        "blazor mistakes",
+        "blazor gotchas",
+        "blazor bugs",
+        "common errors"
+      ],
+      "anchors": {
+        "concurrency": "#concurrency-pitfalls",
+        "memory": "#memory-leaks"
+      },
+      "digest": "Never inject DbContext directly — use IDbContextFactory. Avoid async void event handlers (use async Task). Route parameters need [Parameter] attribute. Use EventCallback<T> not Action<T> for parent-child callbacks. Dispose HttpClient connections, SignalR connections, and timers in IDisposable.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-blazor-state",
+      "name": "state",
+      "path": "frontend/blazor/state.md",
+      "category": "frontend",
+      "subcategory": "blazor",
+      "tags": [
+        "frontend",
+        "blazor"
+      ],
+      "aliases": [
+        "blazor state",
+        "cascading value",
+        "state container",
+        "component state",
+        "Fluxor"
+      ],
+      "anchors": {
+        "patterns": "#state-patterns",
+        "sharing": "#state-sharing"
+      },
+      "digest": "CascadingParameter for app-wide state (auth, theme). Scoped services as state containers for per-user state. Local component state with private fields + StateHasChanged. Never store state in static fields — use DI. localStorage via IJSRuntime for persistence. Fluxor for complex state with multiple consumers.",
+      "stacks": [
+        "blazor"
+      ]
+    },
+    {
+      "id": "frontend-design-system-aesthetic-direction",
+      "name": "aesthetic direction",
+      "path": "frontend/design-system/aesthetic-direction.md",
+      "category": "frontend",
+      "subcategory": "design-system",
+      "tags": [
+        "frontend",
+        "design-system"
+      ],
+      "aliases": [
+        "aesthetic direction",
+        "visual design",
+        "brand identity",
+        "design language",
+        "design tone"
+      ],
+      "anchors": {
+        "principles": "#design-principles",
+        "tokens": "#design-tokens"
+      },
+      "digest": "Define aesthetic direction before generating mockups: tone (professional/playful), density (compact/spacious), brand colors (primary, secondary, accent). Document in design-system.md. All UI decisions derive from aesthetic direction — never use arbitrary colors or spacing values.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "frontend-design-system-animations",
+      "name": "animations",
+      "path": "frontend/design-system/animations.md",
+      "category": "frontend",
+      "subcategory": "design-system",
+      "tags": [
+        "frontend",
+        "design-system"
+      ],
+      "aliases": [
+        "animations",
+        "transitions",
+        "motion",
+        "CSS animations",
+        "keyframes",
+        "prefers-reduced-motion"
+      ],
+      "anchors": {
+        "tokens": "#animation-tokens",
+        "principles": "#motion-principles"
+      },
+      "digest": "Use CSS custom properties for durations: --duration-fast (100ms), --duration-normal (200ms), --duration-slow (300ms). Prefer transform/opacity for GPU-accelerated animations. Always respect prefers-reduced-motion. No decorative animations over 300ms. Ease-out for entrances, ease-in for exits.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "frontend-design-system-naming",
+      "name": "naming",
+      "path": "frontend/design-system/naming.md",
+      "category": "frontend",
+      "subcategory": "design-system",
+      "tags": [
+        "frontend",
+        "design-system"
+      ],
+      "aliases": [
+        "BEM",
+        "CSS naming",
+        "class naming",
+        "design token naming",
+        "component naming"
+      ],
+      "anchors": {
+        "blocks": "#bem-blocks",
+        "tokens": "#token-naming"
+      },
+      "digest": "BEM for CSS: .block__element--modifier. Design tokens: --color-primary-500, --spacing-4, --font-size-base. Component names PascalCase (Blazor) / kebab-case (CSS). No generic names (blue, big). Semantic names only: --color-action, --spacing-page-gutter. Tokens are the single source of truth.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-app-router",
+      "name": "app router",
+      "path": "frontend/nextjs/app-router.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "app router",
+        "Next.js 14",
+        "server components",
+        "app directory",
+        "RSC"
+      ],
+      "anchors": {
+        "layout": "#layout-patterns",
+        "routing": "#routing-patterns"
+      },
+      "digest": "Server Components by default — only add 'use client' when needed (interactivity, browser APIs, hooks). Layouts persist across navigations. Parallel Routes with @folder for simultaneous views. Route Groups with (folder) to organize without affecting URL. Use generateMetadata() for dynamic SEO metadata.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-components",
+      "name": "components",
+      "path": "frontend/nextjs/components.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "react components",
+        "server component",
+        "client component",
+        "shadcn/ui",
+        "UI components"
+      ],
+      "anchors": {
+        "patterns": "#component-patterns",
+        "shadcn": "#shadcn-usage"
+      },
+      "digest": "Server Components for data fetching and static content. Client Components for interactivity. shadcn/ui components are copy-paste — customize in src/components/ui/. Never use index.tsx for named exports. One component per file. Avoid prop drilling — use composition or Context API.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-data-fetching",
+      "name": "data fetching",
+      "path": "frontend/nextjs/data-fetching.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "TanStack Query",
+        "react-query",
+        "server actions",
+        "data fetching",
+        "useQuery"
+      ],
+      "anchors": {
+        "server": "#server-fetching",
+        "client": "#client-fetching"
+      },
+      "digest": "Server Components: fetch() with caching tags for static/ISR. Client Components: TanStack Query useQuery/useMutation for client-side state. Server Actions for mutations from Client Components. Never fetch in useEffect — use TanStack Query. Set revalidate intervals for ISR. Use React Suspense for loading states.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-forms",
+      "name": "forms",
+      "path": "frontend/nextjs/forms.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "react-hook-form",
+        "Zod",
+        "form validation",
+        "Server Actions forms",
+        "useFormState"
+      ],
+      "anchors": {
+        "validation": "#zod-schemas",
+        "submission": "#form-submission"
+      },
+      "digest": "react-hook-form with Zod resolver for client forms. Define Zod schema before component. Server Actions for mutations: 'use server' directive. Use useFormState/useActionState for Server Action feedback. Never submit to API routes — use Server Actions or React Query mutations. Display field-level errors from Zod.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-naming-conventions",
+      "name": "naming conventions",
+      "path": "frontend/nextjs/naming-conventions.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "naming conventions",
+        "file naming",
+        "component naming",
+        "Next.js naming",
+        "TypeScript naming"
+      ],
+      "anchors": {
+        "files": "#file-naming",
+        "components": "#component-naming"
+      },
+      "digest": "Pages: lowercase kebab-case (user-profile/page.tsx). Components: PascalCase (UserProfile.tsx). Hooks: camelCase with 'use' prefix (useUserProfile.ts). API routes: kebab-case. Types: PascalCase. No default exports except page.tsx and layout.tsx. Feature-based co-location preferred.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-nextjs-patterns",
+      "name": "nextjs patterns",
+      "path": "frontend/nextjs/nextjs-patterns.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "Next.js patterns",
+        "middleware",
+        "auth patterns",
+        "caching patterns",
+        "image optimization"
+      ],
+      "anchors": {
+        "auth": "#auth-patterns",
+        "caching": "#caching-patterns"
+      },
+      "digest": "Middleware for auth redirects (use matcher config). next/image for all images (auto-optimization). next/link for navigation (prefetching). loading.tsx for Suspense boundaries per route. error.tsx for error boundaries. Use unstable_cache for expensive server computations with tag-based revalidation.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-project-structure",
+      "name": "project structure",
+      "path": "frontend/nextjs/project-structure.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "project structure",
+        "folder structure",
+        "src directory",
+        "app directory organization"
+      ],
+      "anchors": {
+        "structure": "#directory-structure",
+        "organization": "#feature-organization"
+      },
+      "digest": "src/app/ for routes, src/components/ for shared UI, src/lib/ for utilities, src/hooks/ for custom hooks, src/types/ for TypeScript types. Co-locate feature components near their routes. Public API via components/index.ts. Avoid barrel files in app/ directory. Keep pages thin — logic in hooks and utilities.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-state-management",
+      "name": "state management",
+      "path": "frontend/nextjs/state-management.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "zustand",
+        "React context",
+        "global state",
+        "state management",
+        "client state"
+      ],
+      "anchors": {
+        "patterns": "#state-patterns",
+        "server": "#server-state"
+      },
+      "digest": "TanStack Query for server state (caching, background sync, optimistic updates). Zustand for global client state (auth, theme, user preferences). URL params for shareable UI state (filters, pagination). useState for local component state. Avoid Redux — Zustand is sufficient for most Next.js use cases.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-nextjs-testing",
+      "name": "testing",
+      "path": "frontend/nextjs/testing.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs"
+      ],
+      "aliases": [
+        "vitest",
+        "jest",
+        "testing-library",
+        "Playwright",
+        "Next.js testing",
+        "component tests"
+      ],
+      "anchors": {
+        "unit": "#unit-tests",
+        "e2e": "#e2e-tests"
+      },
+      "digest": "Vitest for unit tests, React Testing Library for component tests. Mock next/navigation with vi.mock. Test Server Actions with direct function calls. Use MSW for API mocking in component tests. Playwright for E2E tests against running app. Never test implementation details — test user behavior and output.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-azure",
+      "name": "azure",
+      "path": "infrastructure/azure/azure.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure"
+      ],
+      "aliases": [
+        "azure",
+        "Azure setup",
+        "resource group",
+        "subscription",
+        "azure baseline"
+      ],
+      "anchors": {
+        "resources": "#core-resources",
+        "security": "#security-baseline"
+      },
+      "digest": "Organize resources by resource groups per environment (dev/staging/prod). Use managed identities for service-to-service auth — never service principals or keys in code. Tag all resources (env, project, owner). Enable diagnostic settings for all services. All secrets in Key Vault. Apply Azure Policy for compliance guardrails.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-bicep-bicep-patterns",
+      "name": "bicep patterns",
+      "path": "infrastructure/azure/bicep/bicep-patterns.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure",
+        "bicep"
+      ],
+      "aliases": [
+        "bicep",
+        "ARM template",
+        "IaC",
+        "infrastructure as code",
+        "resource deployment"
+      ],
+      "anchors": {
+        "modules": "#module-patterns",
+        "parameters": "#parameter-files"
+      },
+      "digest": "Structure as main.bicep + modules/. Parameters in parameters.{env}.bicepparams. Use @secure() for secrets — never hardcode. Run What-If before apply. Use existing keyword for cross-RG references. Modules are reusable units — never duplicate resource blocks. Deploy via CI/CD pipeline, not ad hoc.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-devops-azure-devops-setup",
+      "name": "azure devops setup",
+      "path": "infrastructure/azure/devops/azure-devops-setup.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure",
+        "devops"
+      ],
+      "aliases": [
+        "azure devops",
+        "ADO",
+        "pipelines",
+        "YAML pipeline",
+        "azure-pipelines.yml"
+      ],
+      "anchors": {
+        "setup": "#organization-setup",
+        "pipelines": "#pipeline-setup"
+      },
+      "digest": "YAML pipelines checked into repo — no classic editor. Separate environments: dev, staging, prod with approval gates. Service connections use managed identity (no service principals). Variable groups for per-env config. Artifacts feed for private NuGet packages. Branch policies require PR + CI for main/develop.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-devops-local-development",
+      "name": "local development",
+      "path": "infrastructure/azure/devops/local-development.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure",
+        "devops"
+      ],
+      "aliases": [
+        "local dev",
+        "azurite",
+        "local azure",
+        "dev container",
+        "local secrets",
+        "dotnet user-secrets"
+      ],
+      "anchors": {
+        "emulators": "#local-emulators",
+        "secrets": "#local-secrets"
+      },
+      "digest": "Use Azurite for local Blob/Queue/Table storage emulation. dotnet user-secrets for local credentials — never .env files committed to git. Use Connection String for local, Managed Identity for deployed. Dev containers for reproducible environments. Local HTTPS with ASP.NET dev certificates.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-services-functions",
+      "name": "functions",
+      "path": "infrastructure/azure/services/functions.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure",
+        "services"
+      ],
+      "aliases": [
+        "Azure Functions",
+        "serverless",
+        "function app",
+        "timer trigger",
+        "HTTP trigger",
+        "Durable Functions"
+      ],
+      "anchors": {
+        "triggers": "#trigger-types",
+        "bindings": "#input-output-bindings"
+      },
+      "digest": "Use isolated worker model (.NET 8+). HTTP triggers for API endpoints, Timer triggers for scheduled work, Service Bus triggers for event processing. Configure scale-out limits to prevent runaway costs. Durable Functions for long-running orchestrations. Deploy with deployment slots for zero-downtime.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-services-service-bus",
+      "name": "service bus",
+      "path": "infrastructure/azure/services/service-bus.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure",
+        "services"
+      ],
+      "aliases": [
+        "service bus",
+        "message queue",
+        "topics",
+        "subscriptions",
+        "dead letter queue"
+      ],
+      "anchors": {
+        "setup": "#namespace-setup",
+        "patterns": "#messaging-patterns"
+      },
+      "digest": "Topics+subscriptions for pub/sub, queues for point-to-point. Set MaxDeliveryCount=10 for retry limit. Monitor dead letter queue. Use message sessions for ordered processing. Implement idempotent handlers (check processed message IDs). Use managed identity for authentication. Prefetch for high-throughput consumers.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-azure-services-storage",
+      "name": "storage",
+      "path": "infrastructure/azure/services/storage.md",
+      "category": "infrastructure",
+      "subcategory": "azure",
+      "tags": [
+        "infrastructure",
+        "azure",
+        "services"
+      ],
+      "aliases": [
+        "azure storage",
+        "blob",
+        "table storage",
+        "queue storage",
+        "storage account tiers"
+      ],
+      "anchors": {
+        "tiers": "#storage-tiers",
+        "security": "#access-control"
+      },
+      "digest": "Hot tier for frequently accessed, cool for infrequent, archive for compliance. Always use managed identity — not storage keys. Enable versioning + soft delete for business data. Lifecycle management rules for cost optimization. Private endpoints for secure access from VNet. CDN for public static assets.",
+      "stacks": [
+        "azure"
+      ]
+    },
+    {
+      "id": "infrastructure-docker-easypanel-deploy",
+      "name": "easypanel deploy",
+      "path": "infrastructure/docker/easypanel-deploy.md",
+      "category": "infrastructure",
+      "subcategory": "docker",
+      "tags": [
+        "infrastructure",
+        "docker"
+      ],
+      "aliases": [
+        "easypanel",
+        "docker deploy",
+        "self-hosted",
+        "VPS deployment",
+        "docker compose"
+      ],
+      "anchors": {
+        "setup": "#easypanel-setup",
+        "deployment": "#deployment-flow"
+      },
+      "digest": "Create app in EasyPanel from container registry image. Configure environment variables in EasyPanel UI — not in Dockerfile. Use EasyPanel's managed Postgres/Redis for databases. Configure /health endpoint for health checks. Enable HTTPS via Let's Encrypt automatically. Use EasyPanel volumes for persistent storage.",
+      "stacks": [
+        "docker"
+      ]
+    },
+    {
+      "id": "infrastructure-supabase-mcp-setup",
+      "name": "mcp setup",
+      "path": "infrastructure/supabase/mcp-setup.md",
+      "category": "infrastructure",
+      "subcategory": "supabase",
+      "tags": [
+        "infrastructure",
+        "supabase"
+      ],
+      "aliases": [
+        "supabase MCP",
+        "supabase tools",
+        "supabase configuration",
+        "MCP supabase"
+      ],
+      "anchors": {
+        "setup": "#mcp-configuration",
+        "tools": "#available-tools"
+      },
+      "digest": "Configure Supabase MCP server with project URL and service_role key in .claude/settings.json. Use MCP tools for schema inspection, query execution, and migration management. Never expose service_role key client-side. Set up anon key for client SDK. Enable in Claude settings for database introspection during design phase.",
+      "stacks": [
+        "supabase"
+      ]
+    },
+    {
+      "id": "infrastructure-supabase-supabase-auth",
+      "name": "supabase auth",
+      "path": "infrastructure/supabase/supabase-auth.md",
+      "category": "infrastructure",
+      "subcategory": "supabase",
+      "tags": [
+        "infrastructure",
+        "supabase"
+      ],
+      "aliases": [
+        "supabase auth",
+        "magic link",
+        "OAuth",
+        "JWT supabase",
+        "row level security auth"
+      ],
+      "anchors": {
+        "setup": "#auth-setup",
+        "providers": "#auth-providers"
+      },
+      "digest": "Use Supabase Auth for magic links, OAuth (Google, GitHub), phone OTP. Configure site URL and redirect URLs in dashboard. Server-side: use supabase.auth.getUser() not getSession(). Enable email confirmations for production. JWT expiry 3600s. RLS policies must reference auth.uid() for user isolation.",
+      "stacks": [
+        "supabase"
+      ]
+    },
+    {
+      "id": "infrastructure-supabase-supabase-pgvector",
+      "name": "supabase pgvector",
+      "path": "infrastructure/supabase/supabase-pgvector.md",
+      "category": "infrastructure",
+      "subcategory": "supabase",
+      "tags": [
+        "infrastructure",
+        "supabase"
+      ],
+      "aliases": [
+        "pgvector",
+        "vector embeddings",
+        "similarity search",
+        "supabase vectors",
+        "HNSW index"
+      ],
+      "anchors": {
+        "setup": "#pgvector-setup",
+        "queries": "#similarity-queries"
+      },
+      "digest": "Enable: CREATE EXTENSION vector. Define column as vector(1536) for OpenAI embeddings. Create HNSW index: CREATE INDEX USING hnsw (embedding vector_cosine_ops). Use match_documents() RPC for similarity search. Batch insert embeddings (100 at a time). RLS policies apply to vector queries like all other tables.",
+      "stacks": [
+        "supabase"
+      ]
+    },
+    {
+      "id": "infrastructure-supabase-supabase-rls",
+      "name": "supabase rls",
+      "path": "infrastructure/supabase/supabase-rls.md",
+      "category": "infrastructure",
+      "subcategory": "supabase",
+      "tags": [
+        "infrastructure",
+        "supabase"
+      ],
+      "aliases": [
+        "RLS",
+        "row level security",
+        "postgres policies",
+        "multi-tenant security",
+        "supabase policies"
+      ],
+      "anchors": {
+        "policies": "#rls-policies",
+        "patterns": "#tenant-patterns"
+      },
+      "digest": "Enable RLS on every table: ALTER TABLE ... ENABLE ROW LEVEL SECURITY. User isolation: USING (auth.uid() = user_id). Multi-tenant: USING (tenant_id = (auth.jwt()->>'tenant_id')::uuid). Test policies with SET LOCAL ROLE anon. Service role bypasses RLS — use only server-side. Never rely on application-level security alone.",
+      "stacks": [
+        "supabase"
+      ]
+    },
+    {
+      "id": "infrastructure-supabase-supabase-storage",
+      "name": "supabase storage",
+      "path": "infrastructure/supabase/supabase-storage.md",
+      "category": "infrastructure",
+      "subcategory": "supabase",
+      "tags": [
+        "infrastructure",
+        "supabase"
+      ],
+      "aliases": [
+        "supabase storage",
+        "file uploads",
+        "storage buckets",
+        "storage policies",
+        "signed URLs"
+      ],
+      "anchors": {
+        "buckets": "#bucket-setup",
+        "policies": "#storage-policies"
+      },
+      "digest": "Public buckets for CDN-served assets, private for user files (signed URLs). Storage policies use same RLS syntax as tables. Upload: supabase.storage.from('bucket').upload(path, file). Signed URLs: createSignedUrl(path, 3600). Set content-type on upload. Enable image transformations for on-the-fly resizing.",
+      "stacks": [
+        "supabase"
+      ]
+    },
+    {
+      "id": "infrastructure-supabase-supabase-custom-jwt",
+      "name": "supabase custom jwt",
+      "path": "infrastructure/supabase/supabase-custom-jwt.md",
+      "category": "infrastructure",
+      "subcategory": "supabase",
+      "tags": [
+        "infrastructure",
+        "supabase",
+        "jwt"
+      ],
+      "aliases": [
+        "custom JWT",
+        "JWT signing",
+        "token creation",
+        "JWT claims"
+      ],
+      "anchors": {
+        "creation": "#jwt-token-creation",
+        "claims": "#custom-claims-structure",
+        "refresh": "#jwt-refresh-patterns"
+      },
+      "digest": "Create custom JWTs with jose (Node.js) or System.IdentityModel.Tokens.Jwt (.NET). Always set expiry, use HS256/RS256, include tenant_id in app_metadata for RLS. Refresh tokens via rotation. Store JWT secret in env vars only.",
+      "stacks": [
+        "dotnet",
+        "nextjs"
+      ]
+    },
+    {
+      "id": "integration-api-graphql",
+      "name": "graphql",
+      "path": "integration/api/graphql.md",
+      "category": "integration",
+      "subcategory": "api",
+      "tags": [
+        "integration",
+        "api"
+      ],
+      "aliases": [
+        "graphql",
+        "Hot Chocolate",
+        "GraphQL schema",
+        "query",
+        "mutation",
+        "subscription"
+      ],
+      "anchors": {
+        "setup": "#hot-chocolate-setup",
+        "patterns": "#schema-patterns"
+      },
+      "digest": "Use Hot Chocolate for .NET GraphQL. Define types with [GraphQLType], mutations with [UseMutationConvention]. Enable pagination with [UsePaging]. Use DataLoader to prevent N+1 queries. Add [Authorize] for field-level security. Never expose internal exceptions — use custom error types. Enable introspection only in dev.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "integration-api-grpc",
+      "name": "grpc",
+      "path": "integration/api/grpc.md",
+      "category": "integration",
+      "subcategory": "api",
+      "tags": [
+        "integration",
+        "api"
+      ],
+      "aliases": [
+        "grpc",
+        "protobuf",
+        ".proto files",
+        "gRPC service",
+        "server streaming"
+      ],
+      "anchors": {
+        "proto": "#proto-design",
+        "patterns": "#service-patterns"
+      },
+      "digest": "Define .proto files first, generate C# stubs. Use proto3 syntax. Unary for request-response, server streaming for real-time data. GrpcChannel with managed credentials. Add grpc-health-probe for health checks. Prefer REST for external APIs, gRPC for internal service-to-service. Use Buf for proto linting and schema registry.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "integration-api-rest-design",
+      "name": "rest design",
+      "path": "integration/api/rest-design.md",
+      "category": "integration",
+      "subcategory": "api",
+      "tags": [
+        "integration",
+        "api"
+      ],
+      "aliases": [
+        "REST design",
+        "RESTful API",
+        "HTTP API design",
+        "resource naming",
+        "API versioning"
+      ],
+      "anchors": {
+        "resources": "#resource-naming",
+        "errors": "#error-handling"
+      },
+      "digest": "Resources are nouns, HTTP verbs are actions: GET /users, POST /users, PUT /users/{id}, DELETE /users/{id}. 201+Location for creation, 204 for deletion. RFC 9457 ProblemDetails for errors. Cursor-based pagination for large collections. URL versioning (/api/v1/). HATEOAS links for discoverable APIs.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "integration-event-driven-cqrs",
+      "name": "cqrs",
+      "path": "integration/event-driven/cqrs.md",
+      "category": "integration",
+      "subcategory": "event-driven",
+      "tags": [
+        "integration",
+        "event-driven"
+      ],
+      "aliases": [
+        "CQRS",
+        "command query separation",
+        "MediatR",
+        "read model",
+        "write model"
+      ],
+      "anchors": {
+        "commands": "#command-patterns",
+        "queries": "#query-patterns"
+      },
+      "digest": "Commands mutate state, queries read state — never mix. Commands return void or Result (not data). Queries return DTOs (not domain entities). Use MediatR for in-process CQRS. Validate commands at API boundary before handler. Read models can be denormalized for query performance.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "integration-event-driven-event-sourcing",
+      "name": "event sourcing",
+      "path": "integration/event-driven/event-sourcing.md",
+      "category": "integration",
+      "subcategory": "event-driven",
+      "tags": [
+        "integration",
+        "event-driven"
+      ],
+      "aliases": [
+        "event sourcing",
+        "event store",
+        "event replay",
+        "aggregate events",
+        "append-only log"
+      ],
+      "anchors": {
+        "events": "#domain-events",
+        "replay": "#event-replay"
+      },
+      "digest": "Store events as immutable past-tense facts: OrderCreated, PaymentProcessed. Aggregate rebuilds state from event stream. Take snapshots for aggregates with >100 events. Use EventStoreDB or CosmosDB change feed for storage. Projections build read models from events. Never delete events — use correction events.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "integration-event-driven-service-bus",
+      "name": "service bus",
+      "path": "integration/event-driven/service-bus.md",
+      "category": "integration",
+      "subcategory": "event-driven",
+      "tags": [
+        "integration",
+        "event-driven"
+      ],
+      "aliases": [
+        "service bus integration",
+        "message broker",
+        "event bus",
+        "publisher",
+        "consumer"
+      ],
+      "anchors": {
+        "topics": "#topic-subscription",
+        "patterns": "#integration-patterns"
+      },
+      "digest": "Publish domain events to Service Bus after aggregate persistence (transactional outbox). Consumers must be idempotent — check processed message IDs. Use correlation IDs for distributed tracing. Message envelope includes schema version. Consumer groups enable event replay. Monitor dead letter queue in production.",
+      "stacks": [
+        "dotnet"
+      ]
+    },
+    {
+      "id": "integration-mcp-mcp-tools",
+      "name": "mcp tools",
+      "path": "integration/mcp/mcp-tools.md",
+      "category": "integration",
+      "subcategory": "mcp",
+      "tags": [
+        "integration",
+        "mcp"
+      ],
+      "aliases": [
+        "MCP",
+        "Model Context Protocol",
+        "Claude tools",
+        "MCP server",
+        "MCP client"
+      ],
+      "anchors": {
+        "tools": "#tool-definitions",
+        "setup": "#server-setup"
+      },
+      "digest": "MCP tools extend Claude with external data and actions. Tools are synchronous request-response with typed inputSchema. Resources provide read-only data access. Prompts are reusable templates. Register MCP servers in .claude/settings.json. Prefer @context7 for live library docs. Test tools with MCP Inspector before integrating.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "observability-logging",
+      "name": "logging",
+      "path": "observability/logging.md",
+      "category": "observability",
+      "subcategory": null,
+      "tags": [
+        "observability"
+      ],
+      "aliases": [
+        "logging",
+        "serilog",
+        "ILogger",
+        "structured logging",
+        "log levels",
+        "Application Insights"
+      ],
+      "anchors": {
+        "setup": "#serilog-setup",
+        "patterns": "#logging-patterns"
+      },
+      "digest": "Use Serilog with structured logging. Sinks: Console (dev), Application Insights (prod). Inject ILogger<T> — never static Logger. Log levels: Debug for trace, Information for business events, Warning for recoverable, Error for failures. Include correlation IDs in all logs. Never log PII or credentials.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "observability-metrics",
+      "name": "metrics",
+      "path": "observability/metrics.md",
+      "category": "observability",
+      "subcategory": null,
+      "tags": [
+        "observability"
+      ],
+      "aliases": [
+        "metrics",
+        "prometheus",
+        "OpenTelemetry metrics",
+        "custom metrics",
+        "counters",
+        "histograms"
+      ],
+      "anchors": {
+        "setup": "#metrics-setup",
+        "instruments": "#metric-types"
+      },
+      "digest": "System.Diagnostics.Metrics API for .NET. Register meters: builder.Services.AddMetrics(). Types: Counter (total count), Histogram (latency distribution), Gauge (current value). Export to Prometheus or Azure Monitor. Tag dimensions: environment, service, version. Define SLIs from business metrics, not technical ones.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "observability-monitoring",
+      "name": "monitoring",
+      "path": "observability/monitoring.md",
+      "category": "observability",
+      "subcategory": null,
+      "tags": [
+        "observability"
+      ],
+      "aliases": [
+        "monitoring",
+        "alerts",
+        "dashboards",
+        "Application Insights",
+        "health checks",
+        "SLA"
+      ],
+      "anchors": {
+        "alerts": "#alert-rules",
+        "dashboards": "#dashboard-setup"
+      },
+      "digest": "Health checks: /health for liveness, /health/ready for readiness. Application Insights for distributed tracing. SLA-based alerts: p99 latency, error rate >1%, availability <99.9%. Azure Workbooks dashboards per feature. Availability tests for external endpoints. Each alert has an on-call runbook.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "observability-tracing",
+      "name": "tracing",
+      "path": "observability/tracing.md",
+      "category": "observability",
+      "subcategory": null,
+      "tags": [
+        "observability"
+      ],
+      "aliases": [
+        "tracing",
+        "OpenTelemetry",
+        "distributed trace",
+        "spans",
+        "W3C TraceContext"
+      ],
+      "anchors": {
+        "setup": "#otel-setup",
+        "propagation": "#context-propagation"
+      },
+      "digest": "Add OpenTelemetry SDK. Auto-instrument HTTP, SQL, Service Bus. Propagate W3C TraceContext across services. Custom spans for business operations: using var span = tracer.StartActiveSpan('operation'). Export to Azure Monitor or Jaeger. Sampling: 10% in prod, 100% for errors. Correlate traces with logs via trace ID.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "workflows-parallel-execution",
+      "name": "parallel execution",
+      "path": "workflows/parallel-execution.md",
+      "category": "workflows",
+      "subcategory": null,
+      "tags": [
+        "workflows"
+      ],
+      "aliases": [
+        "parallel",
+        "Task.WhenAll",
+        "concurrent",
+        "parallelism",
+        "async parallel",
+        "Parallel.ForEachAsync"
+      ],
+      "anchors": {
+        "patterns": "#parallel-patterns",
+        "throttling": "#concurrency-limits"
+      },
+      "digest": "Task.WhenAll for I/O-bound independent parallel ops. Parallel.ForEachAsync with CancellationToken for CPU-bound batches. SemaphoreSlim for concurrency limiting. Channel<T> for producer-consumer. Never Task.WhenAll with DbContext — use separate factory-created instances per task. Measure actual benefit before adding parallelism.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "workflows-thread-management",
+      "name": "thread management",
+      "path": "workflows/thread-management.md",
+      "category": "workflows",
+      "subcategory": null,
+      "tags": [
+        "workflows"
+      ],
+      "aliases": [
+        "threads",
+        "ThreadPool",
+        "ConfigureAwait",
+        "deadlock prevention",
+        "async void",
+        "synchronization"
+      ],
+      "anchors": {
+        "patterns": "#thread-patterns",
+        "deadlocks": "#deadlock-prevention"
+      },
+      "digest": "Use async/await throughout — never mix blocking calls (.Result, .Wait()). ConfigureAwait(false) in library code. Never Thread.Sleep — use Task.Delay with CancellationToken. Lock-free with Interlocked for counters, ConcurrentDictionary for shared state. ThreadPool.QueueUserWorkItem only for truly detached background work.",
+      "stacks": [
+        "*"
+      ]
+    },
+    {
+      "id": "infrastructure-vercel-database",
+      "name": "vercel database",
+      "path": "infrastructure/vercel/vercel-database.md",
+      "category": "infrastructure",
+      "subcategory": "vercel",
+      "tags": [
+        "infrastructure",
+        "vercel",
+        "nextjs",
+        "database"
+      ],
+      "aliases": [
+        "Vercel deploy",
+        "serverless database",
+        "Neon",
+        "PlanetScale",
+        "Vercel Postgres",
+        "serverless postgres"
+      ],
+      "anchors": {
+        "decision": "#decision-tree-choose-your-db-tier",
+        "neon": "#implementation-neon-recommended",
+        "supabase": "#implementation-supabase--pgbouncer-transaction-mode"
+      },
+      "digest": "NEVER use a traditional TCP connection pool (plain pg/Npgsql) when deploying to Vercel — ephemeral functions exhaust connections instantly. ALWAYS use a serverless-compatible database: Neon (first choice for SQL), Supabase with PgBouncer on port 6543 (transaction mode), PlanetScale, or Turso. Set connection_limit=1 when using ORMs with PgBouncer.",
+      "stacks": [
+        "vercel"
+      ]
+    }
+  ]
+}