get-shit-done/workflows/discuss-phase/modes/analyze.md
Lazy-loaded overlay. Read this file from
workflows/discuss-phase.mdwhen--analyzeis present in$ARGUMENTS. Combinable with default,--all,--chain,--text,--batch.
Before presenting each question (or question group, in batch mode), provide a brief trade-off analysis for the decision:
**Trade-off analysis: Authentication strategy**
| Approach | Pros | Cons |
|----------|------|------|
| Session cookies | Simple, httpOnly prevents XSS | Requires CSRF protection, sticky sessions |
| JWT (stateless) | Scalable, no server state | Token size, revocation complexity |
| OAuth 2.0 + PKCE | Industry standard for SPAs | More setup, redirect flow UX |
💡 Recommended: OAuth 2.0 + PKCE — your app has social login in requirements (REQ-04) and this aligns with the existing NextAuth setup in `src/lib/auth.ts`.
How should users authenticate?
This gives the user context to make informed decisions without extra prompting.
When --analyze is absent, present questions directly as before (no
trade-off table).
scout_codebase
and any prior decisions surfaced in load_prior_context.<canonical_refs>,
cite it in the recommendation.