AGENTS.md para TMF

# tmf-services

## Architecture
- Multi-tenant: EVERY query MUST .eq("tenant_id", tenantId)
- Tenant context from x-tenant-id header, extracted by middleware
- Services communicate via internal HTTP, propagating x-tenant-id
- If called service fails, log but don't fail the request (graceful degradation)

## Service structure
- src/index.ts Express app | src/config.ts Zod env | src/routes/ public + internal
- Config: always Zod parsing process.env. No dotenv, vars come from Docker
- Public routes: /api/{resource} | Internal: /internal/{resource}
- Every service MUST have openapi.yaml. Run generate:skills after API changes

## Rules
- NEVER query without tenant_id filter
- NEVER use Supabase anon key -- service role only
- /health always excluded from auth middleware
- CREATE: always { ...req.body, tenant_id: req.tenantId }
- Response format: { data, count, limit, offset }

# Creating a new service

1. Copy patients-svc/ as template to tmf-{domain}-svc/
2. Update config.ts with PORT + dependent service URLs
3. Create routes/{resource}.ts with CRUD + tenant filtering
4. Create routes/internal.ts for service-to-service endpoints
5. Write openapi.yaml
6. Add to docker-compose
7. Run npm run generate:skills

Validation: Zod schemas on POST/PATCH, return error.flatten() on 400
Pagination: query params limit (default 20) + offset (default 0)