메뉴
Sessions, sign-in/sign-up flows, OAuth, magic links, or organization context on the session.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Adding or changing routes in `apps/api`. One source of truth (`defineApiEndpoint` + a Zod schema) becomes an HTTP endpoint, an OpenAPI operation, an MCP tool, and a TS SDK method — descriptions and contracts must be written with all four readers in mind.
Layering and boundaries, web vs public API, app layout (clients, routes, logging), ports/adapters, runtime-portable domain/shared/utils code, multi-tenancy, DDD layout, or anti-patterns.
Preparing a production release, pushing a vX.Y.Z release tag, running scripts/release.sh, or updating CHANGELOG.md with the changes that are about to be deployed to production.
Enables or disables Latitude production maintenance mode by redirecting all publicly exposed production services to the Better Stack status page. Use when asked to start, stop, toggle, verify, or prepare a maintenance window.
Adding or reading env vars, updating .env.example, or validating config at startup with parseEnv / parseEnvOptional.
ClickHouse queries, Goose migrations, chdb test schema, or telemetry storage paths.
| name | authentication |
| description | Sessions, sign-in/sign-up flows, OAuth, magic links, or organization context on the session. |
When to use: Sessions, sign-in/sign-up flows, OAuth, magic links, or organization context on the session.
@platform/db-postgres exposes createBetterAuth() in packages/platform/db-postgres/src/create-better-auth.ts, wiring better-auth with the Drizzle adapter against the shared Postgres client.auth.api.getSession({ headers }) → { user, session } with typed fields.User includes id, email, name — use those fields directly (no assertions).apps/web/src/domains/sessions/session.functions.ts (getSession, ensureSession, etc.).customSession plugin (multi-tenant product behavior).@domain/auth composed with Postgres repositories — keep policy in domain, wiring in apps.For HTTP boundary rules (who may call what), see architecture-boundaries.