@umacloud/knowledge 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/00-governance/governance-capabilities.md +557 -0
  2. package/00-governance/knowledge-map.md +39 -0
  3. package/00-governance/maintenance-policy.md +76 -0
  4. package/00-governance/review-checklist.md +81 -0
  5. package/README.md +13 -0
  6. package/ai/01-standards/agent-development-complete.md +691 -0
  7. package/ai/01-standards/llm-application-complete.md +488 -0
  8. package/ai/01-standards/mlops-complete.md +798 -0
  9. package/ai/01-standards/prompt-engineering-complete.md +646 -0
  10. package/ai/01-standards/rag-architecture-complete.md +649 -0
  11. package/ai/02-playbooks/llm-evaluation-playbook.md +847 -0
  12. package/ai/03-checklists/ai-project-checklist.md +215 -0
  13. package/ai/04-antipatterns/ai-antipatterns.md +661 -0
  14. package/ai/05-cases/case-rag-production.md +147 -0
  15. package/ai/06-glossary/ai-glossary.md +162 -0
  16. package/ai/agent-evaluation-benchmark.md +53 -0
  17. package/ai/ai-agent-memory-context-management.md +41 -0
  18. package/ai/ai-cost-capacity-optimization-playbook.md +42 -0
  19. package/ai/ai-data-security-and-compliance-playbook.md +37 -0
  20. package/ai/ai-domain-index-and-checklist.md +40 -0
  21. package/ai/ai-governance-maturity-model.md +50 -0
  22. package/ai/ai-model-selection-and-routing-strategy.md +47 -0
  23. package/ai/ai-observability-and-oncall-runbook.md +52 -0
  24. package/ai/ai-rag-engineering-playbook.md +42 -0
  25. package/ai/ai-red-team-and-safety-evaluation.md +42 -0
  26. package/ai/ai-release-readiness-and-rollback-gate.md +42 -0
  27. package/ai/llm-agent-engineering-deep-dive.md +57 -0
  28. package/ai/prompt-and-tool-guardrails.md +52 -0
  29. package/api/01-standards/enterprise-api-standards.md +198 -0
  30. package/api/01-standards/rest-api-design-guide.md +63 -0
  31. package/api/02-playbooks/api-pagination-playbook.md +93 -0
  32. package/api/02-playbooks/graphql-production-playbook.md +176 -0
  33. package/api/03-checklists/api-review-checklist.md +55 -0
  34. package/api/04-antipatterns/api-antipatterns.md +112 -0
  35. package/architecture/01-standards/api-gateway-patterns.md +496 -0
  36. package/architecture/01-standards/cloud-native-patterns.md +644 -0
  37. package/architecture/01-standards/distributed-systems-patterns.md +591 -0
  38. package/architecture/01-standards/event-driven-architecture.md +595 -0
  39. package/architecture/01-standards/microservices-patterns-complete.md +968 -0
  40. package/architecture/01-standards/microservices-patterns.md +495 -0
  41. package/architecture/01-standards/system-design-interview.md +664 -0
  42. package/architecture/02-playbooks/microservices-patterns-playbook.md +137 -0
  43. package/architecture/02-playbooks/migration-playbook.md +780 -0
  44. package/architecture/02-playbooks/system-design-playbook.md +779 -0
  45. package/architecture/03-checklists/architecture-decision-checklist.md +297 -0
  46. package/architecture/04-antipatterns/architecture-antipatterns.md +417 -0
  47. package/architecture/05-cases/case-netflix-microservices.md +413 -0
  48. package/architecture/06-glossary/architecture-glossary.md +164 -0
  49. package/architecture/adr-template-and-examples.md +38 -0
  50. package/architecture/api-gateway-deep-dive.md +1291 -0
  51. package/architecture/configuration-management.md +1162 -0
  52. package/architecture/distributed-transactions.md +1220 -0
  53. package/architecture/microservices-complete.md +735 -0
  54. package/architecture/resilience-and-disaster-patterns.md +37 -0
  55. package/architecture/service-governance.md +1198 -0
  56. package/architecture/system-architecture-deep-dive.md +37 -0
  57. package/backend/01-standards/analytics-and-growth.md +65 -0
  58. package/backend/01-standards/api-and-error-conventions.md +120 -0
  59. package/backend/01-standards/application-layering-and-packaging.md +160 -0
  60. package/backend/01-standards/auth-implementation.md +104 -0
  61. package/backend/01-standards/backend-framework-idioms.md +74 -0
  62. package/backend/01-standards/background-jobs-and-async.md +66 -0
  63. package/backend/01-standards/caching-strategies-complete.md +390 -0
  64. package/backend/01-standards/config-and-observability.md +77 -0
  65. package/backend/01-standards/data-modeling-and-persistence.md +94 -0
  66. package/backend/01-standards/django-complete.md +1765 -0
  67. package/backend/01-standards/email-and-notifications.md +64 -0
  68. package/backend/01-standards/fastapi-complete.md +925 -0
  69. package/backend/01-standards/file-upload-and-storage.md +66 -0
  70. package/backend/01-standards/graphql-api-complete.md +416 -0
  71. package/backend/01-standards/llm-application-standard.md +78 -0
  72. package/backend/01-standards/message-queue-patterns.md +379 -0
  73. package/backend/01-standards/microservices-and-distributed.md +78 -0
  74. package/backend/01-standards/nestjs-complete.md +2167 -0
  75. package/backend/01-standards/payment-integration.md +80 -0
  76. package/backend/01-standards/rate-limiting-complete.md +451 -0
  77. package/backend/01-standards/realtime-and-websocket.md +65 -0
  78. package/backend/01-standards/search-and-filtering.md +64 -0
  79. package/backend/01-standards/spring-boot-complete.md +445 -0
  80. package/backend/02-playbooks/api-design-playbook.md +718 -0
  81. package/backend/02-playbooks/email-send-playbook.md +130 -0
  82. package/backend/02-playbooks/file-upload-s3-playbook.md +153 -0
  83. package/backend/02-playbooks/typescript-enterprise-playbook.md +133 -0
  84. package/backend/02-playbooks/websocket-realtime-playbook.md +154 -0
  85. package/backend/03-checklists/api-launch-checklist.md +189 -0
  86. package/backend/04-antipatterns/backend-antipatterns.md +1051 -0
  87. package/blockchain/01-standards/blockchain-basics.md +557 -0
  88. package/blockchain/01-standards/smart-contract-development.md +1315 -0
  89. package/cicd/01-standards/deployment-and-delivery-standard.md +96 -0
  90. package/cicd/01-standards/github-actions-complete.md +473 -0
  91. package/cicd/01-standards/release-and-store-submission.md +75 -0
  92. package/cicd/02-playbooks/cicd-pipeline-playbook.md +144 -0
  93. package/cicd/02-playbooks/release-management-playbook.md +605 -0
  94. package/cicd/03-checklists/pipeline-security-checklist.md +168 -0
  95. package/cicd/04-antipatterns/cicd-antipatterns.md +589 -0
  96. package/cicd/05-cases/case-deployment-automation.md +221 -0
  97. package/cicd/05-cases/case-gitops-transformation.md +212 -0
  98. package/cicd/06-glossary/cicd-glossary.md +114 -0
  99. package/cicd/cicd-blueprint-deep-dive.md +38 -0
  100. package/cicd/release-readiness-gate.md +37 -0
  101. package/cloud-native/01-standards/container-security.md +741 -0
  102. package/cloud-native/01-standards/kubernetes-complete.md +812 -0
  103. package/cloud-native/02-playbooks/api-gateway-playbook.md +155 -0
  104. package/cloud-native/02-playbooks/gitops-with-argocd.md +760 -0
  105. package/cloud-native/02-playbooks/k8s-troubleshooting-playbook.md +1942 -0
  106. package/cloud-native/02-playbooks/message-queue-playbook.md +129 -0
  107. package/cloud-native/02-playbooks/multicloud-governance.md +726 -0
  108. package/cloud-native/02-playbooks/serverless-patterns.md +788 -0
  109. package/cloud-native/02-playbooks/service-mesh-playbook.md +612 -0
  110. package/cloud-native/02-playbooks/terraform-iac-playbook.md +143 -0
  111. package/cloud-native/03-checklists/container-security-checklist.md +431 -0
  112. package/cloud-native/03-checklists/k8s-production-readiness-checklist.md +460 -0
  113. package/cloud-native/04-antipatterns/container-antipatterns.md +660 -0
  114. package/cloud-native/04-antipatterns/k8s-antipatterns.md +743 -0
  115. package/cloud-native/05-cases/case-k8s-migration.md +478 -0
  116. package/cloud-native/05-cases/case-k8s-scaling.md +642 -0
  117. package/cloud-native/05-cases/case-k8s-security-incident.md +397 -0
  118. package/cloud-native/06-glossary/cloud-native-glossary.md +337 -0
  119. package/cross-platform/01-standards/cross-platform-frameworks.md +83 -0
  120. package/cross-platform/01-standards/platform-selection-and-architecture.md +77 -0
  121. package/data/01-standards/elasticsearch-complete.md +2098 -0
  122. package/data/01-standards/postgresql-complete.md +1613 -0
  123. package/data/01-standards/redis-complete.md +1527 -0
  124. package/data/02-playbooks/database-optimization-playbook.md +403 -0
  125. package/data/02-playbooks/elasticsearch-production-playbook.md +132 -0
  126. package/data/03-checklists/database-launch-checklist.md +187 -0
  127. package/data/04-antipatterns/database-antipatterns.md +873 -0
  128. package/data/05-cases/case-database-migration.md +310 -0
  129. package/data/06-glossary/database-glossary.md +440 -0
  130. package/data/data-governance-and-modeling-deep-dive.md +39 -0
  131. package/data-engineering/01-standards/airflow-complete.md +523 -0
  132. package/data-engineering/01-standards/kafka-complete.md +1521 -0
  133. package/data-engineering/02-playbooks/spark-etl-playbook.md +496 -0
  134. package/data-engineering/03-checklists/pipeline-launch-checklist.md +194 -0
  135. package/data-engineering/04-antipatterns/data-pipeline-antipatterns.md +684 -0
  136. package/data-engineering/05-cases/case-real-time-pipeline.md +355 -0
  137. package/data-engineering/06-glossary/data-engineering-glossary.md +429 -0
  138. package/database/01-standards/database-schema-standards.md +147 -0
  139. package/database/02-playbooks/postgresql-optimization-quick.md +52 -0
  140. package/database/02-playbooks/postgresql-performance-optimization.md +58 -0
  141. package/database/02-playbooks/postgresql-production-playbook.md +146 -0
  142. package/database/02-playbooks/redis-caching-playbook.md +117 -0
  143. package/database/03-checklists/database-review-checklist.md +50 -0
  144. package/database/04-antipatterns/database-antipatterns.md +112 -0
  145. package/design/01-standards/ui-design-system-complete.md +423 -0
  146. package/design/02-playbooks/design-handoff-playbook.md +254 -0
  147. package/design/02-playbooks/design-review-playbook.md +388 -0
  148. package/design/03-checklists/design-review-checklist.md +246 -0
  149. package/design/04-antipatterns/design-antipatterns.md +378 -0
  150. package/design/05-cases/case-design-system-adoption.md +328 -0
  151. package/design/06-glossary/design-glossary.md +329 -0
  152. package/design/ui-full-lifecycle-cross-platform-playbook.md +571 -0
  153. package/design/ux-system-deep-dive.md +38 -0
  154. package/design-systems/00-craft-rules.md +71 -0
  155. package/design-systems/aesthetic-families.md +43 -0
  156. package/design-systems/anti-ai-slop.md +162 -0
  157. package/design-systems/bold-geometric.md +120 -0
  158. package/design-systems/brutalist-bold.md +103 -0
  159. package/design-systems/editorial-clean.md +109 -0
  160. package/design-systems/glass-aurora.md +108 -0
  161. package/design-systems/modern-minimal.md +145 -0
  162. package/design-systems/premium-luxury.md +106 -0
  163. package/design-systems/product-type-design-map.md +48 -0
  164. package/design-systems/soft-warm.md +123 -0
  165. package/design-systems/tech-utility.md +113 -0
  166. package/desktop/01-standards/desktop-app-standard.md +72 -0
  167. package/desktop/01-standards/desktop-design.md +71 -0
  168. package/development/00-governance/document-template.md +41 -0
  169. package/development/01-standards/api-versioning-strategies.md +432 -0
  170. package/development/01-standards/authentication-patterns-complete.md +479 -0
  171. package/development/01-standards/css-architecture-complete.md +550 -0
  172. package/development/01-standards/database-migration-strategies.md +484 -0
  173. package/development/01-standards/elasticsearch-complete.md +347 -0
  174. package/development/01-standards/git-complete.md +371 -0
  175. package/development/01-standards/golang-complete.md +1565 -0
  176. package/development/01-standards/graphql-complete.md +298 -0
  177. package/development/01-standards/javascript-bundlers-complete.md +469 -0
  178. package/development/01-standards/javascript-typescript-complete.md +528 -0
  179. package/development/01-standards/jest-complete.md +275 -0
  180. package/development/01-standards/linux-complete.md +234 -0
  181. package/development/01-standards/logging-observability-complete.md +526 -0
  182. package/development/01-standards/microservices-communication.md +502 -0
  183. package/development/01-standards/mongodb-complete.md +406 -0
  184. package/development/01-standards/oauth2-complete.md +285 -0
  185. package/development/01-standards/performance-optimization-complete.md +289 -0
  186. package/development/01-standards/playwright-complete.md +247 -0
  187. package/development/01-standards/postgresql-complete.md +456 -0
  188. package/development/01-standards/pytest-complete.md +340 -0
  189. package/development/01-standards/python-async-programming.md +902 -0
  190. package/development/01-standards/python-complete.md +956 -0
  191. package/development/01-standards/python-decorators-complete.md +799 -0
  192. package/development/01-standards/python-design-patterns.md +2854 -0
  193. package/development/01-standards/python-packaging-distribution.md +420 -0
  194. package/development/01-standards/python-testing-strategies.md +607 -0
  195. package/development/01-standards/python-web-frameworks-comparison.md +471 -0
  196. package/development/01-standards/redis-complete.md +317 -0
  197. package/development/01-standards/rest-api-complete.md +316 -0
  198. package/development/01-standards/rust-complete.md +578 -0
  199. package/development/01-standards/typescript-advanced-types.md +1513 -0
  200. package/development/01-standards/web-security-complete.md +292 -0
  201. package/development/02-playbooks/api-design-playbook.md +810 -0
  202. package/development/02-playbooks/database-migration-playbook.md +580 -0
  203. package/development/02-playbooks/debugging-playbook.md +692 -0
  204. package/development/02-playbooks/feature-delivery-playbook.md +430 -0
  205. package/development/02-playbooks/incident-hotfix-playbook.md +387 -0
  206. package/development/02-playbooks/performance-optimization-playbook.md +531 -0
  207. package/development/02-playbooks/performance-tuning-playbook.md +652 -0
  208. package/development/02-playbooks/refactor-playbook.md +403 -0
  209. package/development/02-playbooks/release-playbook.md +469 -0
  210. package/development/03-checklists/architecture-review-checklist.md +168 -0
  211. package/development/03-checklists/data-migration-checklist.md +157 -0
  212. package/development/03-checklists/oncall-handover-checklist.md +173 -0
  213. package/development/03-checklists/pr-checklist.md +158 -0
  214. package/development/03-checklists/production-readiness-checklist.md +190 -0
  215. package/development/03-checklists/release-readiness-checklist.md +154 -0
  216. package/development/03-checklists/security-review-checklist.md +182 -0
  217. package/development/04-antipatterns/api-antipatterns.md +657 -0
  218. package/development/04-antipatterns/architecture-antipatterns.md +686 -0
  219. package/development/04-antipatterns/backend-antipatterns.md +648 -0
  220. package/development/04-antipatterns/cicd-antipatterns.md +540 -0
  221. package/development/04-antipatterns/code-smell-antipatterns.md +571 -0
  222. package/development/04-antipatterns/data-antipatterns.md +658 -0
  223. package/development/04-antipatterns/database-antipatterns.md +578 -0
  224. package/development/04-antipatterns/frontend-antipatterns.md +635 -0
  225. package/development/04-antipatterns/reliability-antipatterns.md +700 -0
  226. package/development/04-antipatterns/security-antipatterns.md +747 -0
  227. package/development/05-cases/case-api-version-migration.md +428 -0
  228. package/development/05-cases/case-authorization-hardening.md +383 -0
  229. package/development/05-cases/case-bluegreen-rollback.md +466 -0
  230. package/development/05-cases/case-cache-snowball-protection.md +485 -0
  231. package/development/05-cases/case-ci-cd-pipeline.md +544 -0
  232. package/development/05-cases/case-database-scaling.md +500 -0
  233. package/development/05-cases/case-db-hotspot-optimization.md +487 -0
  234. package/development/05-cases/case-incident-mttr-reduction.md +563 -0
  235. package/development/05-cases/case-microservice-migration.md +375 -0
  236. package/development/05-cases/case-performance-optimization.md +406 -0
  237. package/development/05-cases/case-security-incident-response.md +345 -0
  238. package/development/06-glossary/full-stack-glossary.md +166 -0
  239. package/development/09-maturity/quarterly-audit-template.md +35 -0
  240. package/development/11-ui-excellence/ui-aesthetic-system.md +41 -0
  241. package/development/11-ui-excellence/ui-engineering-excellence.md +435 -0
  242. package/development/12-scenarios/development-scenarios-guide.md +565 -0
  243. package/development/13-implementation-assets/implementation-toolkit.md +282 -0
  244. package/development/13-implementation-assets/knowledge-gates-execution.md +43 -0
  245. package/development/14-full-lifecycle/software-lifecycle-gates.md +511 -0
  246. package/development/15-lifecycle-templates/project-templates-collection.md +791 -0
  247. package/development/api-contract-and-versioning-guide.md +36 -0
  248. package/development/api-governance-complete.md +43 -0
  249. package/development/backend-engineering-complete.md +43 -0
  250. package/development/code-review-quality-complete.md +43 -0
  251. package/development/concurrency-reliability-complete.md +43 -0
  252. package/development/database-engineering-complete.md +43 -0
  253. package/development/engineering-effectiveness-complete.md +43 -0
  254. package/development/engineering-standards-deep-dive.md +38 -0
  255. package/development/frontend-engineering-complete.md +43 -0
  256. package/development/performance-capacity-complete.md +43 -0
  257. package/development/refactor-migration-complete.md +42 -0
  258. package/development/refactoring-and-techdebt-playbook.md +37 -0
  259. package/development/security-in-development-complete.md +43 -0
  260. package/devops/01-standards/cicd-pipeline-complete.md +262 -0
  261. package/devops/01-standards/docker-complete.md +1490 -0
  262. package/devops/01-standards/github-actions-complete.md +337 -0
  263. package/devops/01-standards/kubernetes-complete.md +638 -0
  264. package/devops/01-standards/terraform-complete.md +2117 -0
  265. package/devops/02-playbooks/docker-compose-playbook.md +233 -0
  266. package/devops/02-playbooks/docker-k8s-production-playbook.md +186 -0
  267. package/devops/02-playbooks/docker-production-playbook.md +952 -0
  268. package/edge-iot/01-standards/edge-iot-complete.md +473 -0
  269. package/experts/architect/api-design.md +178 -0
  270. package/experts/architect/methodology.md +124 -0
  271. package/experts/architect/security.md +75 -0
  272. package/experts/backend-lead/methodology.md +216 -0
  273. package/experts/devops/methodology.md +160 -0
  274. package/experts/frontend-lead/methodology.md +178 -0
  275. package/experts/product-manager/industry/ecommerce.md +43 -0
  276. package/experts/product-manager/industry/saas.md +40 -0
  277. package/experts/product-manager/methodology.md +97 -0
  278. package/experts/qa-lead/methodology.md +123 -0
  279. package/experts/qa-lead/test-strategy.md +128 -0
  280. package/experts/uiux-designer/methodology.md +125 -0
  281. package/frontend/01-standards/accessibility-complete.md +532 -0
  282. package/frontend/01-standards/accessibility-standard.md +74 -0
  283. package/frontend/01-standards/admin-dashboard-and-crud.md +72 -0
  284. package/frontend/01-standards/design-tokens-complete.md +444 -0
  285. package/frontend/01-standards/forms-and-validation.md +77 -0
  286. package/frontend/01-standards/frontend-architecture-and-layering.md +119 -0
  287. package/frontend/01-standards/i18n-and-localization.md +65 -0
  288. package/frontend/01-standards/nextjs-complete.md +451 -0
  289. package/frontend/01-standards/react-complete.md +713 -0
  290. package/frontend/01-standards/react-hooks-complete-guide.md +1100 -0
  291. package/frontend/01-standards/react-hooks-complete.md +1171 -0
  292. package/frontend/01-standards/seo-and-web-vitals.md +77 -0
  293. package/frontend/01-standards/state-management-complete.md +444 -0
  294. package/frontend/01-standards/vue-complete.md +499 -0
  295. package/frontend/01-standards/vue3-complete.md +2002 -0
  296. package/frontend/01-standards/web-framework-best-practices.md +64 -0
  297. package/frontend/01-standards/web-performance-complete.md +495 -0
  298. package/frontend/02-playbooks/accessibility-a11y-playbook.md +161 -0
  299. package/frontend/02-playbooks/frontend-performance-playbook.md +707 -0
  300. package/frontend/02-playbooks/i18n-internationalization-playbook.md +120 -0
  301. package/frontend/02-playbooks/performance-optimization-playbook.md +163 -0
  302. package/frontend/02-playbooks/react-nextjs-production-playbook.md +167 -0
  303. package/frontend/02-playbooks/react-state-management-playbook.md +173 -0
  304. package/frontend/03-checklists/component-quality-checklist.md +166 -0
  305. package/frontend/03-checklists/frontend-launch-checklist.md +299 -0
  306. package/frontend/04-antipatterns/frontend-antipatterns.md +886 -0
  307. package/frontend/05-cases/case-performance-optimization.md +274 -0
  308. package/harmony/01-standards/harmonyos-arkts-standard.md +75 -0
  309. package/harmony/01-standards/harmonyos-design.md +65 -0
  310. package/high-quality-engineering-playbook.md +54 -0
  311. package/incident/01-standards/incident-response-complete.md +303 -0
  312. package/incident/02-playbooks/chaos-engineering-playbook.md +883 -0
  313. package/incident/02-playbooks/postmortem-playbook.md +398 -0
  314. package/incident/03-checklists/incident-readiness-checklist.md +181 -0
  315. package/incident/04-antipatterns/incident-antipatterns.md +490 -0
  316. package/incident/05-cases/case-cascade-failure.md +176 -0
  317. package/incident/06-glossary/incident-glossary.md +114 -0
  318. package/incident/postmortem-and-response-deep-dive.md +39 -0
  319. package/industries/ecommerce/ecommerce-complete.md +631 -0
  320. package/industries/education/education-complete.md +555 -0
  321. package/industries/fintech/fintech-complete.md +501 -0
  322. package/industries/gaming/gaming-complete.md +587 -0
  323. package/industries/healthcare/healthcare-complete.md +452 -0
  324. package/low-code/01-standards/low-code-complete.md +944 -0
  325. package/miniprogram/01-standards/ai-common-mistakes.md +61 -0
  326. package/miniprogram/01-standards/miniprogram-custom-navbar-capsule.md +77 -0
  327. package/miniprogram/01-standards/miniprogram-design.md +61 -0
  328. package/miniprogram/01-standards/miniprogram-standard.md +81 -0
  329. package/mobile/01-standards/android-material-design.md +70 -0
  330. package/mobile/01-standards/flutter-complete.md +384 -0
  331. package/mobile/01-standards/ios-design-hig.md +78 -0
  332. package/mobile/01-standards/mobile-app-standard.md +85 -0
  333. package/mobile/01-standards/react-native-complete.md +352 -0
  334. package/mobile/02-playbooks/mobile-cross-platform-playbook.md +175 -0
  335. package/mobile/02-playbooks/mobile-performance.md +473 -0
  336. package/mobile/03-checklists/mobile-release-checklist.md +234 -0
  337. package/mobile/04-antipatterns/mobile-antipatterns.md +798 -0
  338. package/mobile/05-cases/case-app-performance.md +500 -0
  339. package/mobile/05-cases/case-app-startup-optimization.md +218 -0
  340. package/mobile/06-glossary/mobile-glossary.md +484 -0
  341. package/observability/01-standards/observability-standards.md +103 -0
  342. package/observability/02-playbooks/prometheus-grafana-playbook.md +135 -0
  343. package/observability/02-playbooks/structured-logging-playbook.md +73 -0
  344. package/observability/03-checklists/observability-checklist.md +54 -0
  345. package/observability/04-antipatterns/observability-antipatterns.md +106 -0
  346. package/operations/01-standards/prometheus-monitoring-complete.md +1578 -0
  347. package/operations/02-playbooks/capacity-planning-playbook.md +620 -0
  348. package/operations/03-checklists/production-launch-checklist.md +365 -0
  349. package/operations/04-antipatterns/operations-antipatterns.md +664 -0
  350. package/operations/05-cases/case-sre-practices.md +581 -0
  351. package/operations/06-glossary/operations-glossary.md +120 -0
  352. package/operations/aiops-anomaly-detection.md +758 -0
  353. package/operations/capacity-planning.md +1061 -0
  354. package/operations/chaos-engineering.md +659 -0
  355. package/operations/incident-command-system.md +38 -0
  356. package/operations/observability-complete.md +442 -0
  357. package/operations/slo-sli-playbook.md +517 -0
  358. package/operations/sre-operations-deep-dive.md +39 -0
  359. package/package.json +8 -0
  360. package/performance/01-standards/performance-and-scalability.md +80 -0
  361. package/performance/01-standards/performance-standards.md +156 -0
  362. package/performance/02-playbooks/query-optimization-playbook.md +103 -0
  363. package/performance/03-checklists/performance-checklist.md +56 -0
  364. package/performance/04-antipatterns/performance-antipatterns.md +146 -0
  365. package/product/01-standards/product-management-complete.md +285 -0
  366. package/product/02-playbooks/feature-launch-playbook.md +207 -0
  367. package/product/02-playbooks/user-research-playbook.md +532 -0
  368. package/product/03-checklists/feature-launch-checklist.md +275 -0
  369. package/product/04-antipatterns/product-antipatterns.md +355 -0
  370. package/product/05-cases/case-mvp-to-scale.md +384 -0
  371. package/product/06-glossary/product-glossary.md +462 -0
  372. package/product/feature-prioritization-framework.md +40 -0
  373. package/product/kpi-and-metric-tree.md +37 -0
  374. package/product/product-discovery-and-prd-deep-dive.md +41 -0
  375. package/quantum/01-standards/quantum-complete.md +1186 -0
  376. package/security/01-standards/api-security-complete.md +511 -0
  377. package/security/01-standards/container-runtime-security.md +574 -0
  378. package/security/01-standards/data-protection-gdpr.md +543 -0
  379. package/security/01-standards/owasp-top10-complete.md +1890 -0
  380. package/security/01-standards/secure-coding-baseline.md +90 -0
  381. package/security/01-standards/supply-chain-security.md +441 -0
  382. package/security/01-standards/web-security-checklist.md +108 -0
  383. package/security/01-standards/zero-trust-architecture.md +521 -0
  384. package/security/02-playbooks/auth-sso-playbook.md +166 -0
  385. package/security/02-playbooks/incident-response-security-playbook.md +588 -0
  386. package/security/02-playbooks/owasp-api-security-playbook.md +129 -0
  387. package/security/02-playbooks/payment-integration-playbook.md +119 -0
  388. package/security/02-playbooks/penetration-testing-playbook.md +517 -0
  389. package/security/03-checklists/security-audit-checklist.md +356 -0
  390. package/security/04-antipatterns/security-coding-antipatterns.md +580 -0
  391. package/security/05-cases/case-log4shell-incident.md +537 -0
  392. package/security/05-cases/case-major-breaches.md +468 -0
  393. package/security/06-glossary/security-glossary.md +212 -0
  394. package/security/compliance-automation.md +993 -0
  395. package/security/container-security.md +680 -0
  396. package/security/devsecops-complete.md +426 -0
  397. package/security/sast-dast-sca.md +775 -0
  398. package/security/secrets-management.md +594 -0
  399. package/security/security-architecture-deep-dive.md +37 -0
  400. package/security/threat-modeling-stride-playbook.md +40 -0
  401. package/seed-templates/auth-system.md +59 -0
  402. package/seed-templates/blog-content.md +94 -0
  403. package/seed-templates/dashboard.md +89 -0
  404. package/seed-templates/docs-site.md +73 -0
  405. package/seed-templates/e-commerce.md +50 -0
  406. package/seed-templates/saas-landing.md +92 -0
  407. package/seed-templates/settings-page.md +51 -0
  408. package/testing/01-standards/test-strategy-and-layering.md +83 -0
  409. package/testing/01-standards/testing-strategy-complete.md +422 -0
  410. package/testing/01-standards/unit-testing-best-practices.md +118 -0
  411. package/testing/02-playbooks/e2e-testing-playbook.md +988 -0
  412. package/testing/02-playbooks/testing-strategy-playbook.md +126 -0
  413. package/testing/03-checklists/test-strategy-checklist.md +208 -0
  414. package/testing/04-antipatterns/testing-antipatterns.md +718 -0
  415. package/testing/05-cases/case-testing-transformation.md +300 -0
  416. package/testing/06-glossary/testing-glossary.md +110 -0
  417. package/testing/risk-based-test-matrix.md +36 -0
  418. package/testing/testing-strategy-deep-dive.md +37 -0
@@ -0,0 +1,403 @@
1
+ ---
2
+ id: refactor-playbook
3
+ title: 重构作战手册 (Refactoring Playbook)
4
+ domain: development
5
+ category: 02-playbooks
6
+ difficulty: intermediate
7
+ tags: [agent, checklist, development, playbook, refactor, 前置条件, 回滚方案, 概述]
8
+ quality_score: 70
9
+ last_updated: 2026-06-15
10
+ ---
11
+ # 重构作战手册 (Refactoring Playbook)
12
+
13
+ ## 概述
14
+
15
+ 重构是在不改变外部行为的前提下改善代码内部结构的系统化过程。本手册覆盖从债务识别、风险评估、安全重构到验证上线的全流程,适用于遗留系统改造、架构升级和持续改善场景。
16
+
17
+ ## 前置条件
18
+
19
+ ### 必须满足
20
+
21
+ - [ ] 目标模块有 >= 60% 的自动化测试覆盖率(核心路径 >= 80%)
22
+ - [ ] 建立了可观测基线:关键 API 响应时间、错误率、吞吐量
23
+ - [ ] CI/CD 流水线正常运行且包含回归测试
24
+ - [ ] 已获得技术负责人或架构师的重构方案审批
25
+ - [ ] 团队有明确的回滚策略和回滚触发条件
26
+
27
+ ### 建议满足
28
+
29
+ - [ ] 有代码复杂度分析报告(如 radon、SonarQube)
30
+ - [ ] 有最近 6 个月的缺陷密度和变更频率数据
31
+ - [ ] 相关依赖方已知晓重构计划
32
+
33
+ ---
34
+
35
+ ## 步骤一:债务识别与优先级排序
36
+
37
+ ### 1.1 收集指标
38
+
39
+ ```bash
40
+ # Python 项目 - 圈复杂度分析
41
+ radon cc src/ -a -nc -s -j > reports/complexity.json
42
+ radon mi src/ -s -j > reports/maintainability.json
43
+
44
+ # 重复代码检测
45
+ pylint --disable=all --enable=duplicate-code src/ > reports/duplicates.txt
46
+
47
+ # Git 变更热点分析 - 找出变更最频繁的文件
48
+ git log --since="6 months ago" --pretty=format: --name-only | \
49
+ sort | uniq -c | sort -rg | head -30 > reports/churn.txt
50
+
51
+ # 缺陷关联分析 - 哪些文件关联最多的 bug fix
52
+ git log --since="6 months ago" --grep="fix" --pretty=format: --name-only | \
53
+ sort | uniq -c | sort -rg | head -20 > reports/bug-hotspots.txt
54
+ ```
55
+
56
+ ### 1.2 债务分类矩阵
57
+
58
+ | 类型 | 识别信号 | 影响维度 | 优先级权重 |
59
+ |------|----------|----------|-----------|
60
+ | 结构性债务 | 循环依赖、上帝类、深层嵌套 | 可维护性、扩展性 | 高 |
61
+ | 认知性债务 | 命名混乱、魔数、缺少注释 | 开发效率、新人上手 | 中 |
62
+ | 测试性债务 | 难以测试、测试脆弱 | 质量、发布速度 | 高 |
63
+ | 性能性债务 | N+1 查询、内存泄漏 | 用户体验、成本 | 视影响 |
64
+ | 安全性债务 | 过时依赖、硬编码凭证 | 安全合规 | 最高 |
65
+
66
+ ### 1.3 优先级评分
67
+
68
+ ```
69
+ 重构优先级 = (变更频率 × 0.3) + (缺陷密度 × 0.3) + (复杂度 × 0.2) + (业务影响 × 0.2)
70
+ ```
71
+
72
+ 输出物:`refactor-backlog.md`,按优先级排列的重构清单。
73
+
74
+ ---
75
+
76
+ ## 步骤二:建立安全护栏
77
+
78
+ ### 2.1 补充测试
79
+
80
+ ```python
81
+ # 对即将重构的模块补充特征化测试 (Characterization Tests)
82
+ # 目的:捕获当前行为作为基线,而非验证正确性
83
+
84
+ import pytest
85
+ from your_module import LegacyProcessor
86
+
87
+ class TestLegacyProcessorCharacterization:
88
+ """记录现有行为,确保重构不改变外部表现"""
89
+
90
+ def test_normal_input_output(self):
91
+ processor = LegacyProcessor()
92
+ result = processor.process({"type": "order", "amount": 100})
93
+ # 记录当前实际输出,不判断对错
94
+ assert result == {"status": "ok", "total": 100.0, "tax": 13.0}
95
+
96
+ def test_edge_case_empty_input(self):
97
+ processor = LegacyProcessor()
98
+ result = processor.process({})
99
+ assert result == {"status": "error", "code": "INVALID_INPUT"}
100
+
101
+ def test_boundary_values(self):
102
+ processor = LegacyProcessor()
103
+ # 记录边界行为
104
+ assert processor.process({"amount": 0}) == {"status": "ok", "total": 0.0, "tax": 0.0}
105
+ assert processor.process({"amount": -1}) == {"status": "error", "code": "NEGATIVE_AMOUNT"}
106
+ ```
107
+
108
+ ### 2.2 建立可观测基线
109
+
110
+ ```bash
111
+ # 记录重构前的性能基线
112
+ wrk -t12 -c400 -d30s http://localhost:8080/api/target-endpoint > baseline_perf.txt
113
+
114
+ # 记录内存和 CPU 基线
115
+ python -c "
116
+ import psutil, json, time
117
+ metrics = []
118
+ for _ in range(60):
119
+ metrics.append({
120
+ 'cpu': psutil.cpu_percent(),
121
+ 'memory': psutil.virtual_memory().percent,
122
+ 'timestamp': time.time()
123
+ })
124
+ time.sleep(1)
125
+ with open('baseline_resources.json', 'w') as f:
126
+ json.dump(metrics, f)
127
+ "
128
+ ```
129
+
130
+ ### 2.3 特性开关
131
+
132
+ ```python
133
+ # 使用特性开关实现渐进式切换
134
+ from feature_flags import FeatureFlag
135
+
136
+ class OrderService:
137
+ def calculate_total(self, order):
138
+ if FeatureFlag.is_enabled("use_new_calculator", default=False):
139
+ return self._new_calculate(order)
140
+ return self._legacy_calculate(order)
141
+
142
+ def _legacy_calculate(self, order):
143
+ # 旧逻辑保留
144
+ ...
145
+
146
+ def _new_calculate(self, order):
147
+ # 重构后逻辑
148
+ ...
149
+ ```
150
+
151
+ ---
152
+
153
+ ## 步骤三:安全重构执行
154
+
155
+ ### 3.1 重构模式库
156
+
157
+ #### 提取方法 (Extract Method)
158
+
159
+ ```python
160
+ # 重构前 - 方法过长
161
+ class ReportGenerator:
162
+ def generate(self, data):
163
+ # 30 行数据清洗逻辑
164
+ cleaned = ...
165
+ # 20 行聚合逻辑
166
+ aggregated = ...
167
+ # 25 行格式化逻辑
168
+ formatted = ...
169
+ return formatted
170
+
171
+ # 重构后 - 职责清晰
172
+ class ReportGenerator:
173
+ def generate(self, data):
174
+ cleaned = self._clean_data(data)
175
+ aggregated = self._aggregate(cleaned)
176
+ return self._format_report(aggregated)
177
+
178
+ def _clean_data(self, data):
179
+ ...
180
+
181
+ def _aggregate(self, cleaned_data):
182
+ ...
183
+
184
+ def _format_report(self, aggregated_data):
185
+ ...
186
+ ```
187
+
188
+ #### 替换条件为多态 (Replace Conditional with Polymorphism)
189
+
190
+ ```python
191
+ # 重构前 - 大量 if/elif
192
+ def calculate_price(product_type, base_price):
193
+ if product_type == "standard":
194
+ return base_price
195
+ elif product_type == "premium":
196
+ return base_price * 1.5
197
+ elif product_type == "enterprise":
198
+ return base_price * 2.0 + 500
199
+ # ... 更多分支
200
+
201
+ # 重构后 - 策略模式
202
+ from abc import ABC, abstractmethod
203
+
204
+ class PricingStrategy(ABC):
205
+ @abstractmethod
206
+ def calculate(self, base_price: float) -> float: ...
207
+
208
+ class StandardPricing(PricingStrategy):
209
+ def calculate(self, base_price: float) -> float:
210
+ return base_price
211
+
212
+ class PremiumPricing(PricingStrategy):
213
+ def calculate(self, base_price: float) -> float:
214
+ return base_price * 1.5
215
+
216
+ PRICING_STRATEGIES = {
217
+ "standard": StandardPricing(),
218
+ "premium": PremiumPricing(),
219
+ }
220
+
221
+ def calculate_price(product_type: str, base_price: float) -> float:
222
+ strategy = PRICING_STRATEGIES.get(product_type)
223
+ if not strategy:
224
+ raise ValueError(f"Unknown product type: {product_type}")
225
+ return strategy.calculate(base_price)
226
+ ```
227
+
228
+ #### 引入中间层消除循环依赖
229
+
230
+ ```python
231
+ # 重构前 - A 和 B 循环依赖
232
+ # module_a.py: from module_b import B
233
+ # module_b.py: from module_a import A
234
+
235
+ # 重构后 - 引入接口层
236
+ # interfaces.py
237
+ from abc import ABC, abstractmethod
238
+
239
+ class Notifier(ABC):
240
+ @abstractmethod
241
+ def notify(self, event: dict) -> None: ...
242
+
243
+ # module_a.py - 依赖接口而非具体实现
244
+ class A:
245
+ def __init__(self, notifier: Notifier):
246
+ self.notifier = notifier
247
+
248
+ # module_b.py - 实现接口
249
+ class B(Notifier):
250
+ def notify(self, event: dict) -> None:
251
+ ...
252
+ ```
253
+
254
+ ### 3.2 小步提交策略
255
+
256
+ ```bash
257
+ # 每个重构步骤单独提交,便于定位问题和回滚
258
+ git commit -m "refactor: extract data cleaning into _clean_data method"
259
+ git commit -m "refactor: extract aggregation into _aggregate method"
260
+ git commit -m "refactor: extract formatting into _format_report method"
261
+ # 不要把多个重构步骤合并到一个提交
262
+ ```
263
+
264
+ ### 3.3 并行验证 (Shadow Mode)
265
+
266
+ ```python
267
+ import logging
268
+ import json
269
+
270
+ logger = logging.getLogger("refactor.shadow")
271
+
272
+ class ShadowComparator:
273
+ """并行运行新旧逻辑并比较结果"""
274
+
275
+ def execute_with_shadow(self, legacy_fn, new_fn, *args, **kwargs):
276
+ legacy_result = legacy_fn(*args, **kwargs)
277
+ try:
278
+ new_result = new_fn(*args, **kwargs)
279
+ if legacy_result != new_result:
280
+ logger.warning(
281
+ "Shadow mismatch: legacy=%s, new=%s, args=%s",
282
+ json.dumps(legacy_result, default=str),
283
+ json.dumps(new_result, default=str),
284
+ json.dumps(args, default=str),
285
+ )
286
+ except Exception as e:
287
+ logger.error("Shadow execution failed: %s", e)
288
+ # 始终返回旧逻辑结果
289
+ return legacy_result
290
+ ```
291
+
292
+ ---
293
+
294
+ ## 步骤四:渐进式上线
295
+
296
+ ### 4.1 灰度放量策略
297
+
298
+ ```yaml
299
+ # 灰度放量阶段
300
+ phase_1:
301
+ traffic_percentage: 1%
302
+ duration: 24h
303
+ rollback_trigger: error_rate > 0.1%
304
+ phase_2:
305
+ traffic_percentage: 10%
306
+ duration: 48h
307
+ rollback_trigger: error_rate > 0.05%
308
+ phase_3:
309
+ traffic_percentage: 50%
310
+ duration: 72h
311
+ rollback_trigger: p99_latency > baseline * 1.2
312
+ phase_4:
313
+ traffic_percentage: 100%
314
+ duration: 168h # 7 天观察期
315
+ rollback_trigger: any_anomaly
316
+ ```
317
+
318
+ ### 4.2 监控核查清单
319
+
320
+ ```bash
321
+ # 核心指标检查脚本
322
+ #!/bin/bash
323
+ echo "=== 重构后健康检查 ==="
324
+ echo "1. 错误率变化:"
325
+ curl -s 'http://prometheus:9090/api/v1/query?query=rate(http_errors_total[5m])' | jq '.data.result[0].value[1]'
326
+
327
+ echo "2. P99 延迟变化:"
328
+ curl -s 'http://prometheus:9090/api/v1/query?query=histogram_quantile(0.99,rate(http_duration_seconds_bucket[5m]))' | jq '.data.result[0].value[1]'
329
+
330
+ echo "3. 吞吐量变化:"
331
+ curl -s 'http://prometheus:9090/api/v1/query?query=rate(http_requests_total[5m])' | jq '.data.result[0].value[1]'
332
+ ```
333
+
334
+ ---
335
+
336
+ ## 步骤五:沉淀与收尾
337
+
338
+ ### 5.1 更新文档
339
+
340
+ - 更新架构图(如果模块边界变化)
341
+ - 更新 API 文档(如果接口签名变化)
342
+ - 在 ADR (Architecture Decision Record) 中记录重构决策和理由
343
+
344
+ ### 5.2 清理工作
345
+
346
+ ```bash
347
+ # 移除特性开关(重构稳定后)
348
+ # 移除旧代码路径
349
+ # 移除 Shadow Mode 比较逻辑
350
+ # 更新监控告警阈值
351
+ ```
352
+
353
+ ### 5.3 知识回写
354
+
355
+ - 总结遇到的反模式,补充到 `04-antipatterns/`
356
+ - 总结有效的重构模式,补充到本手册
357
+ - 更新编码规范(如果发现新的约束)
358
+
359
+ ---
360
+
361
+ ## 回滚方案
362
+
363
+ ### 快速回滚
364
+
365
+ ```bash
366
+ # 通过特性开关即时回滚
367
+ curl -X PUT http://feature-flags/api/flags/use_new_calculator \
368
+ -H "Content-Type: application/json" \
369
+ -d '{"enabled": false}'
370
+
371
+ # 通过 Git 回滚(如果没有特性开关)
372
+ git revert <refactor-commit-hash>
373
+ git push origin main
374
+ ```
375
+
376
+ ### 回滚触发条件
377
+
378
+ | 指标 | 阈值 | 动作 |
379
+ |------|------|------|
380
+ | 错误率 | > 基线 2 倍 | 立即回滚 |
381
+ | P99 延迟 | > 基线 1.5 倍 | 立即回滚 |
382
+ | 核心测试失败 | 任意失败 | 阻断发布 |
383
+ | Shadow 不一致率 | > 1% | 暂停放量,排查 |
384
+
385
+ ---
386
+
387
+ ## Agent Checklist
388
+
389
+ AI 编码 Agent 在执行重构任务时必须逐项确认:
390
+
391
+ - [ ] **债务识别完成**:已运行复杂度分析和变更热点分析,明确重构目标
392
+ - [ ] **测试护栏就绪**:目标模块测试覆盖率 >= 60%,核心路径 >= 80%
393
+ - [ ] **基线已记录**:性能基线和行为基线均有数据存档
394
+ - [ ] **方案已审批**:重构方案经技术负责人确认
395
+ - [ ] **特性开关就绪**:涉及行为变更的重构已配置特性开关
396
+ - [ ] **小步提交**:每个提交仅包含一个逻辑步骤的重构
397
+ - [ ] **测试持续通过**:每次提交后所有测试绿色
398
+ - [ ] **Shadow 验证**:新旧逻辑并行比较无不一致
399
+ - [ ] **灰度放量**:按 1% -> 10% -> 50% -> 100% 阶段放量
400
+ - [ ] **监控确认**:错误率、延迟、吞吐量均在基线范围内
401
+ - [ ] **旧代码清理**:重构稳定后移除旧路径和特性开关
402
+ - [ ] **文档更新**:架构图、API 文档、ADR 已同步更新
403
+ - [ ] **知识沉淀**:经验回写到标准和清单