Backend

Auto-use when: API, route, endpoint, database, Supabase, schema, migration, webhook, server action

Works with: frontend for UI, security for auth patterns

Auto-Apply Rules

1. Every Endpoint Must Have

export async function POST(request: Request) {
  // 1. AUTH (required)
  const { userId } = await auth()
  if (!userId) return Response.json({ error: 'Unauthorized' }, { status: 401 })