replica-backend

1# replica-backend
2 
3Reads `replica/architecture.md`. Writes migrations and server code, and keeps
4`replica/backend.md` (checklist below) up to date.
5 
6## The rules
7 
8- **Official, public APIs only, with the user's own keys.** Never call the
9  original app's private endpoints, never reuse its OAuth client, never proxy
10  through it.
11- **The user creates accounts and keys.** Claude never signs up for services,
12  never types a password, card or live key. The user creates the Stripe,
13  Supabase, Resend or Google Cloud project and puts keys in `.env.local`.
14  Claude writes `.env.example` with every variable name and no values.
15- **Test mode first.** Stripe test keys and test cards until replica-deploy.
16 
17## Auth
18 
19- Email sign up with verification, password reset, magic link if the original
20  has it. OAuth (Google, Apple) with the user's own developer apps.
21- Sessions: http-only secure cookies. Sign out everywhere.
22- Roles and teams if the recon map has them: owner, admin, member, with one
23  function that answers "can this user do this to this record".
24- Account deletion that actually deletes. Apple requires it for apps with
25  sign up.
26 
27## Database
28 
29- Migrations from `architecture.md`, checked in, run by a script.
30- Access rules on every table: row level security policies on Supabase, or
31  the authorisation function called in every query. Test it: a second user
32  must get nothing back.
33- Seed script with realistic fake data (no real people).
34…