@polymorphism-tech/morph-spec 4.16.0 → 4.18.0

package/framework/standards/STANDARDS.json

@@ -183,7 +183,8 @@
       "digest": "Chunk documents with 512 token size and 50 token overlap for RAG. Embed with text-embedding-3-small. Store embedding + metadata (source, chunk index). Retrieve top-k=5 by cosine similarity. Re-rank before injecting into LLM context. Use pgvector HNSW index for performance at scale.",
       "stacks": [
         "dotnet-vsa",
-        "nextjs-supabase"
+        "dotnet-vsa",
+        "nextjs-neon"
       ]
     },
     {
@@ -355,30 +356,34 @@
       ]
     },
     {
-      "id": "backend-integrations-clerk-clerk-auth",
-      "name": "clerk auth",
-      "path": "backend/integrations/clerk/clerk-auth.md",
+      "id": "backend-integrations-neon-auth-neon-auth",
+      "name": "neon auth",
+      "path": "backend/integrations/neon-auth/neon-auth.md",
       "category": "backend",
       "subcategory": "integrations",
       "tags": [
         "backend",
         "integrations",
-        "clerk"
+        "neon-auth",
+        "better-auth"
       ],
       "aliases": [
-        "clerk",
+        "neon auth",
+        "better auth",
         "authentication",
         "OAuth",
         "JWT",
         "session management"
       ],
       "anchors": {
-        "setup": "#clerk-setup",
-        "middleware": "#auth-middleware"
+        "setup": "#installation--setup",
+        "middleware": "#route-protection-middleware",
+        "dotnet": "#net-backend-integration",
+        "rls": "#row-level-security-integration"
       },
-      "digest": "Add ClerkMiddleware to ASP.NET pipeline. Access userId via User.GetClerkUserId(). Configure allowed redirect URLs in Clerk dashboard. Use [Authorize] for protected endpoints. Never store passwords — Clerk manages credentials. Sync Clerk users to local DB on first login.",
+      "digest": "Use @neondatabase/auth SDK for Next.js. Auth data lives in neon_auth schema — no external provider, no webhooks. Server: createNeonAuth() with NEON_AUTH_BASE_URL + NEON_AUTH_COOKIE_SECRET. Client: createAuthClient(). Pages: AuthView component. Protection: auth.middleware(). .NET: JWT Bearer with Neon Auth authority, NameClaimType=sub. RLS: auth.user_id() via pg_session_jwt.",
       "stacks": [
-        "dotnet"
+        "neon"
       ]
     },
     {
@@ -572,6 +577,132 @@
         "*"
       ]
     },
+    {
+      "id": "frontend-nextjs-motion-patterns",
+      "name": "motion patterns",
+      "path": "frontend/nextjs/motion-patterns.md",
+      "category": "frontend",
+      "subcategory": "nextjs",
+      "tags": [
+        "frontend",
+        "nextjs",
+        "framer-motion"
+      ],
+      "aliases": [
+        "framer-motion",
+        "animation variants",
+        "motion design",
+        "page transition",
+        "AnimatePresence"
+      ],
+      "anchors": {
+        "variants": "#core-variants-library",
+        "tokens": "#design-token-bridge",
+        "scroll": "#scroll-animations",
+        "accessibility": "#wcag-accessibility-mandatory"
+      },
+      "digest": "Canonical Framer Motion variants (fadeIn, slideIn, scaleIn, stagger, pageTransition) with design token bridge. Use whileInView for scroll reveals. Respect prefers-reduced-motion via useReducedMotion() — strip transforms, keep opacity.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-gsap-core",
+      "name": "gsap core",
+      "path": "frontend/gsap/gsap-core.md",
+      "category": "frontend",
+      "subcategory": "gsap",
+      "tags": [
+        "frontend",
+        "gsap",
+        "animation",
+        "react"
+      ],
+      "aliases": [
+        "GSAP",
+        "GreenSock",
+        "gsap.to",
+        "gsap.from",
+        "useGSAP",
+        "gsap timeline",
+        "gsap utils",
+        "gsap performance"
+      ],
+      "anchors": {
+        "apis": "#core-animation-apis",
+        "react": "#reactnextjs-integration",
+        "timeline": "#timeline-sequencing",
+        "performance": "#performance",
+        "accessibility": "#accessibility"
+      },
+      "digest": "Use gsap.to/from/fromTo for imperative animations. In React, always use useGSAP() hook from @gsap/react with scope ref for automatic cleanup. Timelines sequence with position parameter. Animate only transforms + opacity for 60fps. Check prefers-reduced-motion. Import durations/easings from design tokens.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-gsap-scrolltrigger",
+      "name": "gsap scrolltrigger",
+      "path": "frontend/gsap/gsap-scrolltrigger.md",
+      "category": "frontend",
+      "subcategory": "gsap",
+      "tags": [
+        "frontend",
+        "gsap",
+        "scrolltrigger",
+        "scroll-animation"
+      ],
+      "aliases": [
+        "ScrollTrigger",
+        "scroll animation",
+        "pinning",
+        "scrubbing",
+        "parallax",
+        "scroll-driven"
+      ],
+      "anchors": {
+        "basic": "#basic-scrolltrigger",
+        "scrub": "#scrubbing",
+        "pin": "#pinning",
+        "batch": "#batch-processing"
+      },
+      "digest": "Register ScrollTrigger plugin client-side only. Use scrub for scroll-linked progress. Pin sections with pin:true. Batch-process list items with ScrollTrigger.batch(). Call ScrollTrigger.refresh() after dynamic content. Kill all triggers in useGSAP cleanup.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
+    {
+      "id": "frontend-gsap-plugins",
+      "name": "gsap plugins",
+      "path": "frontend/gsap/gsap-plugins.md",
+      "category": "frontend",
+      "subcategory": "gsap",
+      "tags": [
+        "frontend",
+        "gsap",
+        "plugins"
+      ],
+      "aliases": [
+        "Flip",
+        "SplitText",
+        "MorphSVG",
+        "DrawSVG",
+        "MotionPath",
+        "Draggable",
+        "Observer",
+        "ScrollToPlugin"
+      ],
+      "anchors": {
+        "flip": "#flip-plugin",
+        "splittext": "#splittext",
+        "morphsvg": "#morphsvg",
+        "drawsvg": "#drawsvg"
+      },
+      "digest": "Flip for layout animations (getState then from). SplitText for char/word/line reveals (always revert on cleanup). MorphSVG for path morphing. DrawSVG for stroke animation. MotionPath for path-following. Draggable for drag with bounds/snap. Observer for gesture detection. Register all plugins before use.",
+      "stacks": [
+        "nextjs"
+      ]
+    },
     {
       "id": "frontend-nextjs-app-router",
       "name": "app router",
@@ -833,161 +964,112 @@
       ]
     },
     {
-      "id": "infrastructure-supabase-local-dev",
-      "name": "local development",
-      "path": "infrastructure/supabase/mcp-setup.md",
+      "id": "infrastructure-neon-setup",
+      "name": "neon setup",
+      "path": "infrastructure/neon/neon-setup.md",
       "category": "infrastructure",
-      "subcategory": "supabase",
+      "subcategory": "neon",
       "tags": [
         "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "supabase CLI",
-        "supabase local",
-        "supabase tools",
-        "supabase configuration",
-        "MCP supabase"
-      ],
-      "anchors": {
-        "setup": "#mcp-configuration",
-        "tools": "#available-tools"
-      },
-      "digest": "Use Supabase CLI (npx supabase ...) targeting local Docker instance for all database operations. Run npx supabase status to get DB URL, npx supabase db dump --local for schema inspection, psql for queries, and npx supabase migration up --local for migrations. Never connect to production — local is the single source of truth during development.",
-      "stacks": [
-        "supabase"
-      ]
-    },
-    {
-      "id": "infrastructure-supabase-supabase-auth",
-      "name": "supabase auth",
-      "path": "infrastructure/supabase/supabase-auth.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
+        "neon",
+        "postgresql"
       ],
       "aliases": [
-        "supabase auth",
-        "magic link",
-        "OAuth",
-        "JWT supabase",
-        "row level security auth"
+        "Neon",
+        "neonctl",
+        "serverless postgres",
+        "Neon CLI",
+        "Neon setup"
       ],
       "anchors": {
-        "setup": "#auth-setup",
-        "providers": "#auth-providers"
+        "setup": "#neon-project-setup",
+        "connection": "#connection-strings"
       },
-      "digest": "Use Supabase Auth for magic links, OAuth (Google, GitHub), phone OTP. Configure site URL and redirect URLs in dashboard. Server-side: use supabase.auth.getUser() not getSession(). Enable email confirmations for production. JWT expiry 3600s. RLS policies must reference auth.uid() for user isolation.",
+      "digest": "Use neonctl CLI for project management and connection strings. Two connection strings: pooled (-pooler) for application code, direct for EF Core migrations. Configure connection retry for scale-to-zero cold starts. Use database branches for PR previews.",
       "stacks": [
-        "supabase"
+        "neon"
       ]
     },
     {
-      "id": "infrastructure-supabase-supabase-pgvector",
-      "name": "supabase pgvector",
-      "path": "infrastructure/supabase/supabase-pgvector.md",
+      "id": "infrastructure-neon-pgvector",
+      "name": "neon pgvector",
+      "path": "infrastructure/neon/neon-pgvector.md",
       "category": "infrastructure",
-      "subcategory": "supabase",
+      "subcategory": "neon",
       "tags": [
         "infrastructure",
-        "supabase"
+        "neon",
+        "pgvector"
       ],
       "aliases": [
         "pgvector",
         "vector embeddings",
         "similarity search",
-        "supabase vectors",
+        "Neon vectors",
         "HNSW index"
       ],
       "anchors": {
         "setup": "#pgvector-setup",
         "queries": "#similarity-queries"
       },
-      "digest": "Enable: CREATE EXTENSION vector. Define column as vector(1536) for OpenAI embeddings. Create HNSW index: CREATE INDEX USING hnsw (embedding vector_cosine_ops). Use match_documents() RPC for similarity search. Batch insert embeddings (100 at a time). RLS policies apply to vector queries like all other tables.",
-      "stacks": [
-        "supabase"
-      ]
-    },
-    {
-      "id": "infrastructure-supabase-supabase-rls",
-      "name": "supabase rls",
-      "path": "infrastructure/supabase/supabase-rls.md",
-      "category": "infrastructure",
-      "subcategory": "supabase",
-      "tags": [
-        "infrastructure",
-        "supabase"
-      ],
-      "aliases": [
-        "RLS",
-        "row level security",
-        "postgres policies",
-        "multi-tenant security",
-        "supabase policies"
-      ],
-      "anchors": {
-        "policies": "#rls-policies",
-        "patterns": "#tenant-patterns"
-      },
-      "digest": "Enable RLS on every table: ALTER TABLE ... ENABLE ROW LEVEL SECURITY. User isolation: USING (auth.uid() = user_id). Multi-tenant: USING (tenant_id = (auth.jwt()->>'tenant_id')::uuid). Test policies with SET LOCAL ROLE anon. Service role bypasses RLS — use only server-side. Never rely on application-level security alone.",
+      "digest": "Enable: CREATE EXTENSION vector. Define column as vector(1536) for OpenAI embeddings. Create HNSW index with tuned maintenance_work_mem. Use direct SQL for similarity search. Batch insert embeddings (100 at a time). RLS policies apply to vector queries.",
       "stacks": [
-        "supabase"
+        "neon"
       ]
     },
     {
-      "id": "infrastructure-supabase-supabase-storage",
-      "name": "supabase storage",
-      "path": "infrastructure/supabase/supabase-storage.md",
+      "id": "infrastructure-neon-pgrag",
+      "name": "neon pgrag",
+      "path": "infrastructure/neon/neon-pgrag.md",
       "category": "infrastructure",
-      "subcategory": "supabase",
+      "subcategory": "neon",
       "tags": [
         "infrastructure",
-        "supabase"
+        "neon",
+        "pgrag"
       ],
       "aliases": [
-        "supabase storage",
-        "file uploads",
-        "storage buckets",
-        "storage policies",
-        "signed URLs"
+        "pgrag",
+        "RAG in SQL",
+        "embedding pipeline",
+        "Neon RAG",
+        "in-database RAG"
       ],
       "anchors": {
-        "buckets": "#bucket-setup",
-        "policies": "#storage-policies"
+        "setup": "#pgrag-setup",
+        "pipeline": "#rag-pipeline"
       },
-      "digest": "Public buckets for CDN-served assets, private for user files (signed URLs). Storage policies use same RLS syntax as tables. Upload: supabase.storage.from('bucket').upload(path, file). Signed URLs: createSignedUrl(path, 3600). Set content-type on upload. Enable image transformations for on-the-fly resizing.",
+      "digest": "Use pgrag extensions (rag, rag_bge_small_en_v15, rag_jina_reranker_v1_tiny_en) for chunking, embedding, search, and reranking entirely in SQL. No external embedding service needed for basic RAG. Combine with pgvector HNSW indexes for production performance.",
       "stacks": [
-        "supabase"
+        "neon"
       ]
     },
     {
-      "id": "infrastructure-supabase-supabase-custom-jwt",
-      "name": "supabase custom jwt",
-      "path": "infrastructure/supabase/supabase-custom-jwt.md",
+      "id": "infrastructure-neon-semantic-kernel",
+      "name": "neon semantic kernel",
+      "path": "infrastructure/neon/neon-semantic-kernel.md",
       "category": "infrastructure",
-      "subcategory": "supabase",
+      "subcategory": "neon",
       "tags": [
         "infrastructure",
-        "supabase",
-        "jwt"
+        "neon",
+        "semantic-kernel"
       ],
       "aliases": [
-        "custom JWT",
-        "JWT signing",
-        "token creation",
-        "JWT claims"
+        "Semantic Kernel",
+        "vector store",
+        "Neon Semantic Kernel",
+        "SK vector store",
+        "AI memory"
       ],
       "anchors": {
-        "creation": "#jwt-token-creation",
-        "claims": "#custom-claims-structure",
-        "refresh": "#jwt-refresh-patterns"
+        "setup": "#semantic-kernel-setup",
+        "store": "#vector-store-integration"
       },
-      "digest": "Create custom JWTs with jose (Node.js) or System.IdentityModel.Tokens.Jwt (.NET). Always set expiry, use HS256/RS256, include tenant_id in app_metadata for RLS. Refresh tokens via rotation. Store JWT secret in env vars only.",
+      "digest": "Use Neon as Semantic Kernel vector store via Npgsql connector. Register IVectorStore with NpgsqlDataSource pointing to pooled Neon endpoint. Store and retrieve embeddings using SK memory abstractions. Combine with pgvector HNSW indexes.",
       "stacks": [
-        "dotnet",
-        "nextjs"
+        "neon",
+        "semantic-kernel"
       ]
     },
     {
@@ -1016,6 +1098,5 @@
         "*"
       ]
     }
-  ],
-  "total": 67
+  ]
 }

package/framework/standards/ai-agents/production.md

@@ -118,6 +118,7 @@ Expose agents as interoperable web services using the standardized A2A protocol.
 ### Packages
 
 ```xml
+<!-- ⚠️ MAF packages are in PREVIEW — API surface may change before GA -->
 <PackageReference Include="Microsoft.Agents.AI.Hosting.A2A.AspNetCore" Version="1.0.0-preview.*" />
 ```
 

package/framework/standards/ai-agents/setup.md

@@ -14,6 +14,7 @@ Semantic Kernel is superseded. Do NOT use `Kernel`, `KernelFunction`, or `Invoke
 
 ```xml
 <!-- .csproj -->
+<!-- ⚠️ MAF packages are in PREVIEW — API surface may change before GA -->
 <PackageReference Include="Microsoft.Agents.AI" Version="1.0.0-preview.*" />
 <PackageReference Include="Microsoft.Agents.AI.Abstractions" Version="1.0.0-preview.*" />
 <PackageReference Include="Microsoft.Agents.AI.OpenAI" Version="1.0.0-preview.*" />
@@ -25,8 +26,8 @@ Semantic Kernel is superseded. Do NOT use `Kernel`, `KernelFunction`, or `Invoke
 <PackageReference Include="Azure.AI.OpenAI" Version="2.*" />
 <PackageReference Include="Azure.Identity" Version="1.*" />
 
-<!-- For Microsoft.Extensions.AI abstractions -->
-<PackageReference Include="Microsoft.Extensions.AI" Version="10.2.0" />
+<!-- For Microsoft.Extensions.AI abstractions (STABLE — use as fallback when MAF preview breaks) -->
+<PackageReference Include="Microsoft.Extensions.AI" Version="9.5.0" />
 <PackageReference Include="Microsoft.Extensions.AI.OpenAI" Version="9.3.0-preview.*" />
 ```
 

package/framework/standards/ai-agents/workflows.md

@@ -23,6 +23,7 @@ Workflows compose multiple agents and executors into coordinated pipelines using
 ### Packages
 
 ```xml
+<!-- ⚠️ MAF packages are in PREVIEW — API surface may change before GA -->
 <PackageReference Include="Microsoft.Agents.AI" Version="1.0.0-preview.*" />
 <PackageReference Include="Microsoft.Agents.AI.Workflows" Version="1.0.0-preview.*" />
 ```

package/framework/standards/architecture/vertical-slice/vertical-slice.md

@@ -16,7 +16,7 @@ Sem MediatR, sem AggregateRoot, sem Domain Events, sem CQRS formal.
 {ProjectName}/
 ├── Abstractions/
 │   ├── IHandler.cs              # Interface central: IHandler<TRequest, TResponse>
-│   ├── IApiEndpoint.cs          # Interface de endpoint: void MapEndpoint(WebApplication app)
+│   ├── IApiEndpoint.cs          # Interface de endpoint: void MapEndpoint(IEndpointRouteBuilder app)
 │   ├── Result.cs                # Result<T> / Result (non-generic)
 │   └── Errors/
 │       ├── Error.cs             # record Error com factory methods + ErrorType enum
@@ -81,7 +81,7 @@ namespace {ProjectName}.Abstractions
 {
     public interface IApiEndpoint
     {
-        void MapEndpoint(WebApplication app);
+        void MapEndpoint(IEndpointRouteBuilder app);
     }
 }
 ```
@@ -239,7 +239,7 @@ namespace {ProjectName}.Features.BookFeature.CreateBook;
 
 internal sealed class CreateBookEndpoint : IApiEndpoint
 {
-    public void MapEndpoint(WebApplication app)
+    public void MapEndpoint(IEndpointRouteBuilder app)
     {
         app.MapPost("books", async (
             IHandler<CreateBookRequest, Result<CreateBookResponse>> handler,
@@ -403,7 +403,7 @@ app.MapApiEndpoints();
 <PackageReference Include="Microsoft.EntityFrameworkCore" Version="10.0.3" />
 <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.3" />
 <PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.3" />
-<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.0" />
+<PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.*" /> <!-- use wildcard — Npgsql releases lag behind EF Core -->
 <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.3" />
 <PackageReference Include="Scalar.AspNetCore" Version="2.12.40" />
 <PackageReference Include="Scrutor" Version="7.0.0" />