@polymorphism-tech/morph-spec 4.16.0 → 4.18.0

package/framework/standards/backend/database/postgresql/database.md

@@ -1,11 +1,11 @@
-# Supabase Database Standards
+# Neon PostgreSQL Database Standards
 
-> **Scope:** nextjs-supabase
+> **Scope:** nextjs-neon
 > **Layer:** 2 (on keyword)
-> **Keywords:** postgresql, postgres, sql, supabase, database schema
-> **Load When:** supabase or postgresql keywords detected
+> **Keywords:** postgresql, postgres, sql, neon, database schema
+> **Load When:** neon or postgresql keywords detected
 
-Database schema design, migrations, and Row Level Security (RLS) patterns for Supabase.
+Database schema design, migrations, and Row Level Security (RLS) patterns for Neon PostgreSQL.
 
 ---
 
@@ -68,7 +68,7 @@ alter table public.profiles enable row level security;
 ```sql
 create policy "Users can view own profile"
   on public.profiles for select
-  using (auth.uid() = user_id);
+  using (auth.user_id() = user_id);
 ```
 
 #### User can update own profile
@@ -76,8 +76,8 @@ create policy "Users can view own profile"
 ```sql
 create policy "Users can update own profile"
   on public.profiles for update
-  using (auth.uid() = user_id)
-  with check (auth.uid() = user_id);
+  using (auth.user_id() = user_id)
+  with check (auth.user_id() = user_id);
 ```
 
 #### User can insert own profile
@@ -85,7 +85,7 @@ create policy "Users can update own profile"
 ```sql
 create policy "Users can insert own profile"
   on public.profiles for insert
-  with check (auth.uid() = user_id);
+  with check (auth.user_id() = user_id);
 ```
 
 #### Admin can do anything
@@ -96,7 +96,7 @@ create policy "Admins have full access"
   using (
     exists (
       select 1 from public.user_roles
-      where user_id = auth.uid() and role = 'admin'
+      where user_id = auth.user_id() and role = 'admin'
     )
   );
 ```
@@ -113,16 +113,20 @@ create policy "Public profiles are viewable by everyone"
 
 ## Migrations
 
-### Migration File Naming
+### Migration Management (EF Core)
 
-```
-supabase/migrations/
-  20240101000000_create_users_table.sql
-  20240102000000_add_user_roles.sql
-  20240103000000_enable_rls_users.sql
+```bash
+# Create a new migration
+dotnet ef migrations add CreateUsersTable
+
+# Apply migrations to Neon database
+dotnet ef database update
+
+# Generate SQL script for review
+dotnet ef migrations script --idempotent
 ```
 
-### Migration Template
+### Migration Template (SQL for manual migrations)
 
 ```sql
 -- Create table
@@ -250,89 +254,65 @@ create trigger users_soft_delete
 
 ---
 
-## Supabase Client Queries
+## Database Queries (EF Core / SQL)
 
-### Select
+### Select (EF Core)
 
-```typescript
-const { data, error } = await supabase
-  .from('users')
-  .select('id, name, email')
-  .eq('is_active', true)
-  .order('created_at', { ascending: false })
-  .limit(10)
+```csharp
+var users = await db.Users
+    .Where(u => u.IsActive)
+    .OrderByDescending(u => u.CreatedAt)
+    .Take(10)
+    .Select(u => new { u.Id, u.Name, u.Email })
+    .ToListAsync(ct);
 ```
 
-### Insert
+### Insert (EF Core)
 
-```typescript
-const { data, error } = await supabase
-  .from('users')
-  .insert({ name: 'John', email: 'john@example.com' })
-  .select()
-  .single()
+```csharp
+var user = new User { Name = "John", Email = "john@example.com" };
+db.Users.Add(user);
+await db.SaveChangesAsync(ct);
 ```
 
-### Update
+### Update (EF Core)
 
-```typescript
-const { data, error } = await supabase
-  .from('users')
-  .update({ name: 'John Doe' })
-  .eq('id', userId)
-  .select()
-  .single()
+```csharp
+var user = await db.Users.FindAsync([userId], ct);
+if (user is not null)
+{
+    user.Name = "John Doe";
+    await db.SaveChangesAsync(ct);
+}
 ```
 
-### Delete
+### Delete (EF Core)
 
-```typescript
-const { error } = await supabase
-  .from('users')
-  .delete()
-  .eq('id', userId)
+```csharp
+await db.Users.Where(u => u.Id == userId).ExecuteDeleteAsync(ct);
 ```
 
-### Joins (Foreign Tables)
+### Joins (Navigation Properties)
 
-```typescript
-const { data } = await supabase
-  .from('posts')
-  .select(`
-    id,
-    title,
-    author:users (
-      id,
-      name,
-      avatar_url
-    )
-  `)
+```csharp
+var posts = await db.Posts
+    .Include(p => p.Author)
+    .Select(p => new
+    {
+        p.Id,
+        p.Title,
+        Author = new { p.Author.Id, p.Author.Name, p.Author.AvatarUrl }
+    })
+    .ToListAsync(ct);
 ```
 
----
-
-## Realtime Subscriptions
-
-### Listen to Changes
+### Direct SQL via Npgsql (Next.js / serverless)
 
 ```typescript
-const channel = supabase
-  .channel('posts-changes')
-  .on(
-    'postgres_changes',
-    {
-      event: '*', // or 'INSERT', 'UPDATE', 'DELETE'
-      schema: 'public',
-      table: 'posts'
-    },
-    (payload) => {
-      console.log('Change received!', payload)
-    }
-  )
-  .subscribe()
-
-// Cleanup
-supabase.removeChannel(channel)
+import { neon } from '@neondatabase/serverless';
+
+const sql = neon(process.env.DATABASE_URL!);
+const users = await sql`SELECT id, name, email FROM users WHERE is_active = true ORDER BY created_at DESC LIMIT 10`;
 ```
 
 ---
@@ -349,4 +329,4 @@ supabase.removeChannel(channel)
 
 ---
 
-*Supabase Database Standards - MORPH-SPEC by Polymorphism Tech*
+*Neon PostgreSQL Database Standards - MORPH-SPEC by Polymorphism Tech*

package/framework/standards/backend/dotnet/scalar-ui.md

@@ -1,172 +1,172 @@
-# Scalar.AspNetCore — API Documentation UI
-
-> **Scope:** dotnet-vsa
-> **Layer:** 0 (always load)
-> **Keywords:** scalar, openapi, swagger, api-docs, documentation
-> **Load When:** dotnet VSA projects
-
-## Overview
-
-Scalar replaces Swagger UI as the API documentation frontend. It provides a modern UI with built-in request testing, client code generation, and dark themes. Works with ASP.NET Core's native OpenAPI support (`Microsoft.AspNetCore.OpenApi`).
-
----
-
-## Package Setup
-
-```xml
-<!-- .csproj -->
-<PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.0" />
-<PackageReference Include="Scalar.AspNetCore" Version="2.12.40" />
-```
-
-No Swashbuckle needed. ASP.NET Core 9+ has built-in OpenAPI document generation.
-
----
-
-## Program.cs Configuration
-
-```csharp
-using Scalar.AspNetCore;
-
-var builder = WebApplication.CreateBuilder(args);
-
-// Enable OpenAPI document generation
-builder.Services.AddOpenApi();
-
-var app = builder.Build();
-
-// Map the OpenAPI JSON endpoint (dev only)
-if (app.Environment.IsDevelopment())
-{
-    app.MapOpenApi();
-}
-
-// Map Scalar UI at /scalar/v1
-app.MapScalarApiReference(options =>
-{
-    options.WithTheme(ScalarTheme.DeepSpace);
-
-    // Enable Developer Tools (request + client code panel)
-    options.WithDefaultHttpClient(
-        ScalarTarget.CSharp,
-        ScalarClient.HttpClient);
-});
-```
-
-**Access URL:** `https://localhost:{port}/scalar/v1`
-
----
-
-## Available Themes
-
-| Theme | Description |
-|-------|-------------|
-| `ScalarTheme.Default` | Light theme |
-| `ScalarTheme.DeepSpace` | Dark blue (recommended) |
-| `ScalarTheme.Purple` | Purple accent |
-| `ScalarTheme.Moon` | Dark grey |
-| `ScalarTheme.Saturn` | Warm dark |
-| `ScalarTheme.Mars` | Red accent |
-
----
-
-## ApiTags Organization
-
-Group endpoints by feature using a constants class and `.WithTags()`:
-
-```csharp
-// Constants/ApiTags.cs
-public static class ApiTags
-{
-    public const string Books = "books";
-    public const string Authors = "authors";
-    public const string Orders = "orders";
-}
-```
-
-Apply tags in endpoints:
-
-```csharp
-internal sealed class CreateBookEndpoint : IApiEndpoint
-{
-    public void MapEndpoint(WebApplication app)
-    {
-        app.MapPost("books", async (
-            IHandler<CreateBookRequest, Result<CreateBookResponse>> handler,
-            CreateBookRequest command,
-            CancellationToken cancellationToken) =>
-        {
-            var result = await handler.HandleAsync(command, cancellationToken);
-            return result.Match(
-                onSuccess: () => Results.Ok(result.Value),
-                onFailure: error => Results.BadRequest(error));
-        })
-        .WithTags(ApiTags.Books)
-        .Produces<CreateBookResponse>(StatusCodes.Status200OK)
-        .Produces(StatusCodes.Status400BadRequest);
-    }
-}
-```
-
----
-
-## Endpoint Metadata
-
-Use `.Produces<T>()` to document response types for OpenAPI:
-
-```csharp
-app.MapGet("books/{id:guid}", async (...) => { ... })
-    .WithTags(ApiTags.Books)
-    .WithName("GetBookById")
-    .WithSummary("Get a book by its unique identifier")
-    .Produces<GetBookResponse>(StatusCodes.Status200OK)
-    .Produces(StatusCodes.Status404NotFound);
-
-app.MapDelete("books/{id:guid}", async (...) => { ... })
-    .WithTags(ApiTags.Books)
-    .Produces(StatusCodes.Status204NoContent)
-    .Produces(StatusCodes.Status404NotFound);
-```
-
-### Common Metadata Methods
-
-| Method | Purpose |
-|--------|---------|
-| `.WithTags("tag")` | Group in Scalar sidebar |
-| `.WithName("OperationId")` | Unique operation identifier |
-| `.WithSummary("...")` | Short description in endpoint list |
-| `.WithDescription("...")` | Long description in detail panel |
-| `.Produces<T>(statusCode)` | Document success response type |
-| `.Produces(statusCode)` | Document error response (no body) |
-| `.ProducesProblem(statusCode)` | Document ProblemDetails response |
-| `.RequireAuthorization()` | Marks as requiring auth in docs |
-
----
-
-## Client Code Generation
-
-Scalar auto-generates client code for API calls. The `WithDefaultHttpClient` option selects the default language:
-
-| Target | Client | Description |
-|--------|--------|-------------|
-| `ScalarTarget.CSharp` | `ScalarClient.HttpClient` | .NET HttpClient |
-| `ScalarTarget.JavaScript` | `ScalarClient.Fetch` | Browser fetch() |
-| `ScalarTarget.Python` | `ScalarClient.Requests` | Python requests |
-| `ScalarTarget.Shell` | `ScalarClient.Curl` | cURL command |
-
----
-
-## Anti-Patterns
-
-| Do NOT | Do Instead |
-|--------|------------|
-| Install Swashbuckle | Use `Microsoft.AspNetCore.OpenApi` + `Scalar.AspNetCore` |
-| Expose OpenAPI in production | Guard with `IsDevelopment()` check |
-| Skip `.WithTags()` on endpoints | Every endpoint needs a tag for organized docs |
-| Skip `.Produces<T>()` | Always document response types for accurate API docs |
-| Use magic strings for tags | Define tags in `Constants/ApiTags.cs` |
-| Map Scalar before `MapOpenApi()` | `MapOpenApi()` first, then `MapScalarApiReference()` |
-
----
-
-*MORPH-SPEC by Polymorphism Tech*
+# Scalar.AspNetCore — API Documentation UI
+
+> **Scope:** dotnet-vsa
+> **Layer:** 0 (always load)
+> **Keywords:** scalar, openapi, swagger, api-docs, documentation
+> **Load When:** dotnet VSA projects
+
+## Overview
+
+Scalar replaces Swagger UI as the API documentation frontend. It provides a modern UI with built-in request testing, client code generation, and dark themes. Works with ASP.NET Core's native OpenAPI support (`Microsoft.AspNetCore.OpenApi`).
+
+---
+
+## Package Setup
+
+```xml
+<!-- .csproj -->
+<PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.0" />
+<PackageReference Include="Scalar.AspNetCore" Version="2.12.40" />
+```
+
+No Swashbuckle needed. ASP.NET Core 9+ has built-in OpenAPI document generation.
+
+---
+
+## Program.cs Configuration
+
+```csharp
+using Scalar.AspNetCore;
+
+var builder = WebApplication.CreateBuilder(args);
+
+// Enable OpenAPI document generation
+builder.Services.AddOpenApi();
+
+var app = builder.Build();
+
+// Map the OpenAPI JSON endpoint (dev only)
+if (app.Environment.IsDevelopment())
+{
+    app.MapOpenApi();
+}
+
+// Map Scalar UI at /scalar/v1
+app.MapScalarApiReference(options =>
+{
+    options.WithTheme(ScalarTheme.DeepSpace);
+
+    // Enable Developer Tools (request + client code panel)
+    options.WithDefaultHttpClient(
+        ScalarTarget.CSharp,
+        ScalarClient.HttpClient);
+});
+```
+
+**Access URL:** `https://localhost:{port}/scalar/v1`
+
+---
+
+## Available Themes
+
+| Theme | Description |
+|-------|-------------|
+| `ScalarTheme.Default` | Light theme |
+| `ScalarTheme.DeepSpace` | Dark blue (recommended) |
+| `ScalarTheme.Purple` | Purple accent |
+| `ScalarTheme.Moon` | Dark grey |
+| `ScalarTheme.Saturn` | Warm dark |
+| `ScalarTheme.Mars` | Red accent |
+
+---
+
+## ApiTags Organization
+
+Group endpoints by feature using a constants class and `.WithTags()`:
+
+```csharp
+// Constants/ApiTags.cs
+public static class ApiTags
+{
+    public const string Books = "books";
+    public const string Authors = "authors";
+    public const string Orders = "orders";
+}
+```
+
+Apply tags in endpoints:
+
+```csharp
+internal sealed class CreateBookEndpoint : IApiEndpoint
+{
+    public void MapEndpoint(IEndpointRouteBuilder app)
+    {
+        app.MapPost("books", async (
+            IHandler<CreateBookRequest, Result<CreateBookResponse>> handler,
+            CreateBookRequest command,
+            CancellationToken cancellationToken) =>
+        {
+            var result = await handler.HandleAsync(command, cancellationToken);
+            return result.Match(
+                onSuccess: () => Results.Ok(result.Value),
+                onFailure: error => Results.BadRequest(error));
+        })
+        .WithTags(ApiTags.Books)
+        .Produces<CreateBookResponse>(StatusCodes.Status200OK)
+        .Produces(StatusCodes.Status400BadRequest);
+    }
+}
+```
+
+---
+
+## Endpoint Metadata
+
+Use `.Produces<T>()` to document response types for OpenAPI:
+
+```csharp
+app.MapGet("books/{id:guid}", async (...) => { ... })
+    .WithTags(ApiTags.Books)
+    .WithName("GetBookById")
+    .WithSummary("Get a book by its unique identifier")
+    .Produces<GetBookResponse>(StatusCodes.Status200OK)
+    .Produces(StatusCodes.Status404NotFound);
+
+app.MapDelete("books/{id:guid}", async (...) => { ... })
+    .WithTags(ApiTags.Books)
+    .Produces(StatusCodes.Status204NoContent)
+    .Produces(StatusCodes.Status404NotFound);
+```
+
+### Common Metadata Methods
+
+| Method | Purpose |
+|--------|---------|
+| `.WithTags("tag")` | Group in Scalar sidebar |
+| `.WithName("OperationId")` | Unique operation identifier |
+| `.WithSummary("...")` | Short description in endpoint list |
+| `.WithDescription("...")` | Long description in detail panel |
+| `.Produces<T>(statusCode)` | Document success response type |
+| `.Produces(statusCode)` | Document error response (no body) |
+| `.ProducesProblem(statusCode)` | Document ProblemDetails response |
+| `.RequireAuthorization()` | Marks as requiring auth in docs |
+
+---
+
+## Client Code Generation
+
+Scalar auto-generates client code for API calls. The `WithDefaultHttpClient` option selects the default language:
+
+| Target | Client | Description |
+|--------|--------|-------------|
+| `ScalarTarget.CSharp` | `ScalarClient.HttpClient` | .NET HttpClient |
+| `ScalarTarget.JavaScript` | `ScalarClient.Fetch` | Browser fetch() |
+| `ScalarTarget.Python` | `ScalarClient.Requests` | Python requests |
+| `ScalarTarget.Shell` | `ScalarClient.Curl` | cURL command |
+
+---
+
+## Anti-Patterns
+
+| Do NOT | Do Instead |
+|--------|------------|
+| Install Swashbuckle | Use `Microsoft.AspNetCore.OpenApi` + `Scalar.AspNetCore` |
+| Expose OpenAPI in production | Guard with `IsDevelopment()` check |
+| Skip `.WithTags()` on endpoints | Every endpoint needs a tag for organized docs |
+| Skip `.Produces<T>()` | Always document response types for accurate API docs |
+| Use magic strings for tags | Define tags in `Constants/ApiTags.cs` |
+| Map Scalar before `MapOpenApi()` | `MapOpenApi()` first, then `MapScalarApiReference()` |
+
+---
+
+*MORPH-SPEC by Polymorphism Tech*