@umacloud/knowledge 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/00-governance/governance-capabilities.md +557 -0
  2. package/00-governance/knowledge-map.md +39 -0
  3. package/00-governance/maintenance-policy.md +76 -0
  4. package/00-governance/review-checklist.md +81 -0
  5. package/README.md +13 -0
  6. package/ai/01-standards/agent-development-complete.md +691 -0
  7. package/ai/01-standards/llm-application-complete.md +488 -0
  8. package/ai/01-standards/mlops-complete.md +798 -0
  9. package/ai/01-standards/prompt-engineering-complete.md +646 -0
  10. package/ai/01-standards/rag-architecture-complete.md +649 -0
  11. package/ai/02-playbooks/llm-evaluation-playbook.md +847 -0
  12. package/ai/03-checklists/ai-project-checklist.md +215 -0
  13. package/ai/04-antipatterns/ai-antipatterns.md +661 -0
  14. package/ai/05-cases/case-rag-production.md +147 -0
  15. package/ai/06-glossary/ai-glossary.md +162 -0
  16. package/ai/agent-evaluation-benchmark.md +53 -0
  17. package/ai/ai-agent-memory-context-management.md +41 -0
  18. package/ai/ai-cost-capacity-optimization-playbook.md +42 -0
  19. package/ai/ai-data-security-and-compliance-playbook.md +37 -0
  20. package/ai/ai-domain-index-and-checklist.md +40 -0
  21. package/ai/ai-governance-maturity-model.md +50 -0
  22. package/ai/ai-model-selection-and-routing-strategy.md +47 -0
  23. package/ai/ai-observability-and-oncall-runbook.md +52 -0
  24. package/ai/ai-rag-engineering-playbook.md +42 -0
  25. package/ai/ai-red-team-and-safety-evaluation.md +42 -0
  26. package/ai/ai-release-readiness-and-rollback-gate.md +42 -0
  27. package/ai/llm-agent-engineering-deep-dive.md +57 -0
  28. package/ai/prompt-and-tool-guardrails.md +52 -0
  29. package/api/01-standards/enterprise-api-standards.md +198 -0
  30. package/api/01-standards/rest-api-design-guide.md +63 -0
  31. package/api/02-playbooks/api-pagination-playbook.md +93 -0
  32. package/api/02-playbooks/graphql-production-playbook.md +176 -0
  33. package/api/03-checklists/api-review-checklist.md +55 -0
  34. package/api/04-antipatterns/api-antipatterns.md +112 -0
  35. package/architecture/01-standards/api-gateway-patterns.md +496 -0
  36. package/architecture/01-standards/cloud-native-patterns.md +644 -0
  37. package/architecture/01-standards/distributed-systems-patterns.md +591 -0
  38. package/architecture/01-standards/event-driven-architecture.md +595 -0
  39. package/architecture/01-standards/microservices-patterns-complete.md +968 -0
  40. package/architecture/01-standards/microservices-patterns.md +495 -0
  41. package/architecture/01-standards/system-design-interview.md +664 -0
  42. package/architecture/02-playbooks/microservices-patterns-playbook.md +137 -0
  43. package/architecture/02-playbooks/migration-playbook.md +780 -0
  44. package/architecture/02-playbooks/system-design-playbook.md +779 -0
  45. package/architecture/03-checklists/architecture-decision-checklist.md +297 -0
  46. package/architecture/04-antipatterns/architecture-antipatterns.md +417 -0
  47. package/architecture/05-cases/case-netflix-microservices.md +413 -0
  48. package/architecture/06-glossary/architecture-glossary.md +164 -0
  49. package/architecture/adr-template-and-examples.md +38 -0
  50. package/architecture/api-gateway-deep-dive.md +1291 -0
  51. package/architecture/configuration-management.md +1162 -0
  52. package/architecture/distributed-transactions.md +1220 -0
  53. package/architecture/microservices-complete.md +735 -0
  54. package/architecture/resilience-and-disaster-patterns.md +37 -0
  55. package/architecture/service-governance.md +1198 -0
  56. package/architecture/system-architecture-deep-dive.md +37 -0
  57. package/backend/01-standards/analytics-and-growth.md +65 -0
  58. package/backend/01-standards/api-and-error-conventions.md +120 -0
  59. package/backend/01-standards/application-layering-and-packaging.md +160 -0
  60. package/backend/01-standards/auth-implementation.md +104 -0
  61. package/backend/01-standards/backend-framework-idioms.md +74 -0
  62. package/backend/01-standards/background-jobs-and-async.md +66 -0
  63. package/backend/01-standards/caching-strategies-complete.md +390 -0
  64. package/backend/01-standards/config-and-observability.md +77 -0
  65. package/backend/01-standards/data-modeling-and-persistence.md +94 -0
  66. package/backend/01-standards/django-complete.md +1765 -0
  67. package/backend/01-standards/email-and-notifications.md +64 -0
  68. package/backend/01-standards/fastapi-complete.md +925 -0
  69. package/backend/01-standards/file-upload-and-storage.md +66 -0
  70. package/backend/01-standards/graphql-api-complete.md +416 -0
  71. package/backend/01-standards/llm-application-standard.md +78 -0
  72. package/backend/01-standards/message-queue-patterns.md +379 -0
  73. package/backend/01-standards/microservices-and-distributed.md +78 -0
  74. package/backend/01-standards/nestjs-complete.md +2167 -0
  75. package/backend/01-standards/payment-integration.md +80 -0
  76. package/backend/01-standards/rate-limiting-complete.md +451 -0
  77. package/backend/01-standards/realtime-and-websocket.md +65 -0
  78. package/backend/01-standards/search-and-filtering.md +64 -0
  79. package/backend/01-standards/spring-boot-complete.md +445 -0
  80. package/backend/02-playbooks/api-design-playbook.md +718 -0
  81. package/backend/02-playbooks/email-send-playbook.md +130 -0
  82. package/backend/02-playbooks/file-upload-s3-playbook.md +153 -0
  83. package/backend/02-playbooks/typescript-enterprise-playbook.md +133 -0
  84. package/backend/02-playbooks/websocket-realtime-playbook.md +154 -0
  85. package/backend/03-checklists/api-launch-checklist.md +189 -0
  86. package/backend/04-antipatterns/backend-antipatterns.md +1051 -0
  87. package/blockchain/01-standards/blockchain-basics.md +557 -0
  88. package/blockchain/01-standards/smart-contract-development.md +1315 -0
  89. package/cicd/01-standards/deployment-and-delivery-standard.md +96 -0
  90. package/cicd/01-standards/github-actions-complete.md +473 -0
  91. package/cicd/01-standards/release-and-store-submission.md +75 -0
  92. package/cicd/02-playbooks/cicd-pipeline-playbook.md +144 -0
  93. package/cicd/02-playbooks/release-management-playbook.md +605 -0
  94. package/cicd/03-checklists/pipeline-security-checklist.md +168 -0
  95. package/cicd/04-antipatterns/cicd-antipatterns.md +589 -0
  96. package/cicd/05-cases/case-deployment-automation.md +221 -0
  97. package/cicd/05-cases/case-gitops-transformation.md +212 -0
  98. package/cicd/06-glossary/cicd-glossary.md +114 -0
  99. package/cicd/cicd-blueprint-deep-dive.md +38 -0
  100. package/cicd/release-readiness-gate.md +37 -0
  101. package/cloud-native/01-standards/container-security.md +741 -0
  102. package/cloud-native/01-standards/kubernetes-complete.md +812 -0
  103. package/cloud-native/02-playbooks/api-gateway-playbook.md +155 -0
  104. package/cloud-native/02-playbooks/gitops-with-argocd.md +760 -0
  105. package/cloud-native/02-playbooks/k8s-troubleshooting-playbook.md +1942 -0
  106. package/cloud-native/02-playbooks/message-queue-playbook.md +129 -0
  107. package/cloud-native/02-playbooks/multicloud-governance.md +726 -0
  108. package/cloud-native/02-playbooks/serverless-patterns.md +788 -0
  109. package/cloud-native/02-playbooks/service-mesh-playbook.md +612 -0
  110. package/cloud-native/02-playbooks/terraform-iac-playbook.md +143 -0
  111. package/cloud-native/03-checklists/container-security-checklist.md +431 -0
  112. package/cloud-native/03-checklists/k8s-production-readiness-checklist.md +460 -0
  113. package/cloud-native/04-antipatterns/container-antipatterns.md +660 -0
  114. package/cloud-native/04-antipatterns/k8s-antipatterns.md +743 -0
  115. package/cloud-native/05-cases/case-k8s-migration.md +478 -0
  116. package/cloud-native/05-cases/case-k8s-scaling.md +642 -0
  117. package/cloud-native/05-cases/case-k8s-security-incident.md +397 -0
  118. package/cloud-native/06-glossary/cloud-native-glossary.md +337 -0
  119. package/cross-platform/01-standards/cross-platform-frameworks.md +83 -0
  120. package/cross-platform/01-standards/platform-selection-and-architecture.md +77 -0
  121. package/data/01-standards/elasticsearch-complete.md +2098 -0
  122. package/data/01-standards/postgresql-complete.md +1613 -0
  123. package/data/01-standards/redis-complete.md +1527 -0
  124. package/data/02-playbooks/database-optimization-playbook.md +403 -0
  125. package/data/02-playbooks/elasticsearch-production-playbook.md +132 -0
  126. package/data/03-checklists/database-launch-checklist.md +187 -0
  127. package/data/04-antipatterns/database-antipatterns.md +873 -0
  128. package/data/05-cases/case-database-migration.md +310 -0
  129. package/data/06-glossary/database-glossary.md +440 -0
  130. package/data/data-governance-and-modeling-deep-dive.md +39 -0
  131. package/data-engineering/01-standards/airflow-complete.md +523 -0
  132. package/data-engineering/01-standards/kafka-complete.md +1521 -0
  133. package/data-engineering/02-playbooks/spark-etl-playbook.md +496 -0
  134. package/data-engineering/03-checklists/pipeline-launch-checklist.md +194 -0
  135. package/data-engineering/04-antipatterns/data-pipeline-antipatterns.md +684 -0
  136. package/data-engineering/05-cases/case-real-time-pipeline.md +355 -0
  137. package/data-engineering/06-glossary/data-engineering-glossary.md +429 -0
  138. package/database/01-standards/database-schema-standards.md +147 -0
  139. package/database/02-playbooks/postgresql-optimization-quick.md +52 -0
  140. package/database/02-playbooks/postgresql-performance-optimization.md +58 -0
  141. package/database/02-playbooks/postgresql-production-playbook.md +146 -0
  142. package/database/02-playbooks/redis-caching-playbook.md +117 -0
  143. package/database/03-checklists/database-review-checklist.md +50 -0
  144. package/database/04-antipatterns/database-antipatterns.md +112 -0
  145. package/design/01-standards/ui-design-system-complete.md +423 -0
  146. package/design/02-playbooks/design-handoff-playbook.md +254 -0
  147. package/design/02-playbooks/design-review-playbook.md +388 -0
  148. package/design/03-checklists/design-review-checklist.md +246 -0
  149. package/design/04-antipatterns/design-antipatterns.md +378 -0
  150. package/design/05-cases/case-design-system-adoption.md +328 -0
  151. package/design/06-glossary/design-glossary.md +329 -0
  152. package/design/ui-full-lifecycle-cross-platform-playbook.md +571 -0
  153. package/design/ux-system-deep-dive.md +38 -0
  154. package/design-systems/00-craft-rules.md +71 -0
  155. package/design-systems/aesthetic-families.md +43 -0
  156. package/design-systems/anti-ai-slop.md +162 -0
  157. package/design-systems/bold-geometric.md +120 -0
  158. package/design-systems/brutalist-bold.md +103 -0
  159. package/design-systems/editorial-clean.md +109 -0
  160. package/design-systems/glass-aurora.md +108 -0
  161. package/design-systems/modern-minimal.md +145 -0
  162. package/design-systems/premium-luxury.md +106 -0
  163. package/design-systems/product-type-design-map.md +48 -0
  164. package/design-systems/soft-warm.md +123 -0
  165. package/design-systems/tech-utility.md +113 -0
  166. package/desktop/01-standards/desktop-app-standard.md +72 -0
  167. package/desktop/01-standards/desktop-design.md +71 -0
  168. package/development/00-governance/document-template.md +41 -0
  169. package/development/01-standards/api-versioning-strategies.md +432 -0
  170. package/development/01-standards/authentication-patterns-complete.md +479 -0
  171. package/development/01-standards/css-architecture-complete.md +550 -0
  172. package/development/01-standards/database-migration-strategies.md +484 -0
  173. package/development/01-standards/elasticsearch-complete.md +347 -0
  174. package/development/01-standards/git-complete.md +371 -0
  175. package/development/01-standards/golang-complete.md +1565 -0
  176. package/development/01-standards/graphql-complete.md +298 -0
  177. package/development/01-standards/javascript-bundlers-complete.md +469 -0
  178. package/development/01-standards/javascript-typescript-complete.md +528 -0
  179. package/development/01-standards/jest-complete.md +275 -0
  180. package/development/01-standards/linux-complete.md +234 -0
  181. package/development/01-standards/logging-observability-complete.md +526 -0
  182. package/development/01-standards/microservices-communication.md +502 -0
  183. package/development/01-standards/mongodb-complete.md +406 -0
  184. package/development/01-standards/oauth2-complete.md +285 -0
  185. package/development/01-standards/performance-optimization-complete.md +289 -0
  186. package/development/01-standards/playwright-complete.md +247 -0
  187. package/development/01-standards/postgresql-complete.md +456 -0
  188. package/development/01-standards/pytest-complete.md +340 -0
  189. package/development/01-standards/python-async-programming.md +902 -0
  190. package/development/01-standards/python-complete.md +956 -0
  191. package/development/01-standards/python-decorators-complete.md +799 -0
  192. package/development/01-standards/python-design-patterns.md +2854 -0
  193. package/development/01-standards/python-packaging-distribution.md +420 -0
  194. package/development/01-standards/python-testing-strategies.md +607 -0
  195. package/development/01-standards/python-web-frameworks-comparison.md +471 -0
  196. package/development/01-standards/redis-complete.md +317 -0
  197. package/development/01-standards/rest-api-complete.md +316 -0
  198. package/development/01-standards/rust-complete.md +578 -0
  199. package/development/01-standards/typescript-advanced-types.md +1513 -0
  200. package/development/01-standards/web-security-complete.md +292 -0
  201. package/development/02-playbooks/api-design-playbook.md +810 -0
  202. package/development/02-playbooks/database-migration-playbook.md +580 -0
  203. package/development/02-playbooks/debugging-playbook.md +692 -0
  204. package/development/02-playbooks/feature-delivery-playbook.md +430 -0
  205. package/development/02-playbooks/incident-hotfix-playbook.md +387 -0
  206. package/development/02-playbooks/performance-optimization-playbook.md +531 -0
  207. package/development/02-playbooks/performance-tuning-playbook.md +652 -0
  208. package/development/02-playbooks/refactor-playbook.md +403 -0
  209. package/development/02-playbooks/release-playbook.md +469 -0
  210. package/development/03-checklists/architecture-review-checklist.md +168 -0
  211. package/development/03-checklists/data-migration-checklist.md +157 -0
  212. package/development/03-checklists/oncall-handover-checklist.md +173 -0
  213. package/development/03-checklists/pr-checklist.md +158 -0
  214. package/development/03-checklists/production-readiness-checklist.md +190 -0
  215. package/development/03-checklists/release-readiness-checklist.md +154 -0
  216. package/development/03-checklists/security-review-checklist.md +182 -0
  217. package/development/04-antipatterns/api-antipatterns.md +657 -0
  218. package/development/04-antipatterns/architecture-antipatterns.md +686 -0
  219. package/development/04-antipatterns/backend-antipatterns.md +648 -0
  220. package/development/04-antipatterns/cicd-antipatterns.md +540 -0
  221. package/development/04-antipatterns/code-smell-antipatterns.md +571 -0
  222. package/development/04-antipatterns/data-antipatterns.md +658 -0
  223. package/development/04-antipatterns/database-antipatterns.md +578 -0
  224. package/development/04-antipatterns/frontend-antipatterns.md +635 -0
  225. package/development/04-antipatterns/reliability-antipatterns.md +700 -0
  226. package/development/04-antipatterns/security-antipatterns.md +747 -0
  227. package/development/05-cases/case-api-version-migration.md +428 -0
  228. package/development/05-cases/case-authorization-hardening.md +383 -0
  229. package/development/05-cases/case-bluegreen-rollback.md +466 -0
  230. package/development/05-cases/case-cache-snowball-protection.md +485 -0
  231. package/development/05-cases/case-ci-cd-pipeline.md +544 -0
  232. package/development/05-cases/case-database-scaling.md +500 -0
  233. package/development/05-cases/case-db-hotspot-optimization.md +487 -0
  234. package/development/05-cases/case-incident-mttr-reduction.md +563 -0
  235. package/development/05-cases/case-microservice-migration.md +375 -0
  236. package/development/05-cases/case-performance-optimization.md +406 -0
  237. package/development/05-cases/case-security-incident-response.md +345 -0
  238. package/development/06-glossary/full-stack-glossary.md +166 -0
  239. package/development/09-maturity/quarterly-audit-template.md +35 -0
  240. package/development/11-ui-excellence/ui-aesthetic-system.md +41 -0
  241. package/development/11-ui-excellence/ui-engineering-excellence.md +435 -0
  242. package/development/12-scenarios/development-scenarios-guide.md +565 -0
  243. package/development/13-implementation-assets/implementation-toolkit.md +282 -0
  244. package/development/13-implementation-assets/knowledge-gates-execution.md +43 -0
  245. package/development/14-full-lifecycle/software-lifecycle-gates.md +511 -0
  246. package/development/15-lifecycle-templates/project-templates-collection.md +791 -0
  247. package/development/api-contract-and-versioning-guide.md +36 -0
  248. package/development/api-governance-complete.md +43 -0
  249. package/development/backend-engineering-complete.md +43 -0
  250. package/development/code-review-quality-complete.md +43 -0
  251. package/development/concurrency-reliability-complete.md +43 -0
  252. package/development/database-engineering-complete.md +43 -0
  253. package/development/engineering-effectiveness-complete.md +43 -0
  254. package/development/engineering-standards-deep-dive.md +38 -0
  255. package/development/frontend-engineering-complete.md +43 -0
  256. package/development/performance-capacity-complete.md +43 -0
  257. package/development/refactor-migration-complete.md +42 -0
  258. package/development/refactoring-and-techdebt-playbook.md +37 -0
  259. package/development/security-in-development-complete.md +43 -0
  260. package/devops/01-standards/cicd-pipeline-complete.md +262 -0
  261. package/devops/01-standards/docker-complete.md +1490 -0
  262. package/devops/01-standards/github-actions-complete.md +337 -0
  263. package/devops/01-standards/kubernetes-complete.md +638 -0
  264. package/devops/01-standards/terraform-complete.md +2117 -0
  265. package/devops/02-playbooks/docker-compose-playbook.md +233 -0
  266. package/devops/02-playbooks/docker-k8s-production-playbook.md +186 -0
  267. package/devops/02-playbooks/docker-production-playbook.md +952 -0
  268. package/edge-iot/01-standards/edge-iot-complete.md +473 -0
  269. package/experts/architect/api-design.md +178 -0
  270. package/experts/architect/methodology.md +124 -0
  271. package/experts/architect/security.md +75 -0
  272. package/experts/backend-lead/methodology.md +216 -0
  273. package/experts/devops/methodology.md +160 -0
  274. package/experts/frontend-lead/methodology.md +178 -0
  275. package/experts/product-manager/industry/ecommerce.md +43 -0
  276. package/experts/product-manager/industry/saas.md +40 -0
  277. package/experts/product-manager/methodology.md +97 -0
  278. package/experts/qa-lead/methodology.md +123 -0
  279. package/experts/qa-lead/test-strategy.md +128 -0
  280. package/experts/uiux-designer/methodology.md +125 -0
  281. package/frontend/01-standards/accessibility-complete.md +532 -0
  282. package/frontend/01-standards/accessibility-standard.md +74 -0
  283. package/frontend/01-standards/admin-dashboard-and-crud.md +72 -0
  284. package/frontend/01-standards/design-tokens-complete.md +444 -0
  285. package/frontend/01-standards/forms-and-validation.md +77 -0
  286. package/frontend/01-standards/frontend-architecture-and-layering.md +119 -0
  287. package/frontend/01-standards/i18n-and-localization.md +65 -0
  288. package/frontend/01-standards/nextjs-complete.md +451 -0
  289. package/frontend/01-standards/react-complete.md +713 -0
  290. package/frontend/01-standards/react-hooks-complete-guide.md +1100 -0
  291. package/frontend/01-standards/react-hooks-complete.md +1171 -0
  292. package/frontend/01-standards/seo-and-web-vitals.md +77 -0
  293. package/frontend/01-standards/state-management-complete.md +444 -0
  294. package/frontend/01-standards/vue-complete.md +499 -0
  295. package/frontend/01-standards/vue3-complete.md +2002 -0
  296. package/frontend/01-standards/web-framework-best-practices.md +64 -0
  297. package/frontend/01-standards/web-performance-complete.md +495 -0
  298. package/frontend/02-playbooks/accessibility-a11y-playbook.md +161 -0
  299. package/frontend/02-playbooks/frontend-performance-playbook.md +707 -0
  300. package/frontend/02-playbooks/i18n-internationalization-playbook.md +120 -0
  301. package/frontend/02-playbooks/performance-optimization-playbook.md +163 -0
  302. package/frontend/02-playbooks/react-nextjs-production-playbook.md +167 -0
  303. package/frontend/02-playbooks/react-state-management-playbook.md +173 -0
  304. package/frontend/03-checklists/component-quality-checklist.md +166 -0
  305. package/frontend/03-checklists/frontend-launch-checklist.md +299 -0
  306. package/frontend/04-antipatterns/frontend-antipatterns.md +886 -0
  307. package/frontend/05-cases/case-performance-optimization.md +274 -0
  308. package/harmony/01-standards/harmonyos-arkts-standard.md +75 -0
  309. package/harmony/01-standards/harmonyos-design.md +65 -0
  310. package/high-quality-engineering-playbook.md +54 -0
  311. package/incident/01-standards/incident-response-complete.md +303 -0
  312. package/incident/02-playbooks/chaos-engineering-playbook.md +883 -0
  313. package/incident/02-playbooks/postmortem-playbook.md +398 -0
  314. package/incident/03-checklists/incident-readiness-checklist.md +181 -0
  315. package/incident/04-antipatterns/incident-antipatterns.md +490 -0
  316. package/incident/05-cases/case-cascade-failure.md +176 -0
  317. package/incident/06-glossary/incident-glossary.md +114 -0
  318. package/incident/postmortem-and-response-deep-dive.md +39 -0
  319. package/industries/ecommerce/ecommerce-complete.md +631 -0
  320. package/industries/education/education-complete.md +555 -0
  321. package/industries/fintech/fintech-complete.md +501 -0
  322. package/industries/gaming/gaming-complete.md +587 -0
  323. package/industries/healthcare/healthcare-complete.md +452 -0
  324. package/low-code/01-standards/low-code-complete.md +944 -0
  325. package/miniprogram/01-standards/ai-common-mistakes.md +61 -0
  326. package/miniprogram/01-standards/miniprogram-custom-navbar-capsule.md +77 -0
  327. package/miniprogram/01-standards/miniprogram-design.md +61 -0
  328. package/miniprogram/01-standards/miniprogram-standard.md +81 -0
  329. package/mobile/01-standards/android-material-design.md +70 -0
  330. package/mobile/01-standards/flutter-complete.md +384 -0
  331. package/mobile/01-standards/ios-design-hig.md +78 -0
  332. package/mobile/01-standards/mobile-app-standard.md +85 -0
  333. package/mobile/01-standards/react-native-complete.md +352 -0
  334. package/mobile/02-playbooks/mobile-cross-platform-playbook.md +175 -0
  335. package/mobile/02-playbooks/mobile-performance.md +473 -0
  336. package/mobile/03-checklists/mobile-release-checklist.md +234 -0
  337. package/mobile/04-antipatterns/mobile-antipatterns.md +798 -0
  338. package/mobile/05-cases/case-app-performance.md +500 -0
  339. package/mobile/05-cases/case-app-startup-optimization.md +218 -0
  340. package/mobile/06-glossary/mobile-glossary.md +484 -0
  341. package/observability/01-standards/observability-standards.md +103 -0
  342. package/observability/02-playbooks/prometheus-grafana-playbook.md +135 -0
  343. package/observability/02-playbooks/structured-logging-playbook.md +73 -0
  344. package/observability/03-checklists/observability-checklist.md +54 -0
  345. package/observability/04-antipatterns/observability-antipatterns.md +106 -0
  346. package/operations/01-standards/prometheus-monitoring-complete.md +1578 -0
  347. package/operations/02-playbooks/capacity-planning-playbook.md +620 -0
  348. package/operations/03-checklists/production-launch-checklist.md +365 -0
  349. package/operations/04-antipatterns/operations-antipatterns.md +664 -0
  350. package/operations/05-cases/case-sre-practices.md +581 -0
  351. package/operations/06-glossary/operations-glossary.md +120 -0
  352. package/operations/aiops-anomaly-detection.md +758 -0
  353. package/operations/capacity-planning.md +1061 -0
  354. package/operations/chaos-engineering.md +659 -0
  355. package/operations/incident-command-system.md +38 -0
  356. package/operations/observability-complete.md +442 -0
  357. package/operations/slo-sli-playbook.md +517 -0
  358. package/operations/sre-operations-deep-dive.md +39 -0
  359. package/package.json +8 -0
  360. package/performance/01-standards/performance-and-scalability.md +80 -0
  361. package/performance/01-standards/performance-standards.md +156 -0
  362. package/performance/02-playbooks/query-optimization-playbook.md +103 -0
  363. package/performance/03-checklists/performance-checklist.md +56 -0
  364. package/performance/04-antipatterns/performance-antipatterns.md +146 -0
  365. package/product/01-standards/product-management-complete.md +285 -0
  366. package/product/02-playbooks/feature-launch-playbook.md +207 -0
  367. package/product/02-playbooks/user-research-playbook.md +532 -0
  368. package/product/03-checklists/feature-launch-checklist.md +275 -0
  369. package/product/04-antipatterns/product-antipatterns.md +355 -0
  370. package/product/05-cases/case-mvp-to-scale.md +384 -0
  371. package/product/06-glossary/product-glossary.md +462 -0
  372. package/product/feature-prioritization-framework.md +40 -0
  373. package/product/kpi-and-metric-tree.md +37 -0
  374. package/product/product-discovery-and-prd-deep-dive.md +41 -0
  375. package/quantum/01-standards/quantum-complete.md +1186 -0
  376. package/security/01-standards/api-security-complete.md +511 -0
  377. package/security/01-standards/container-runtime-security.md +574 -0
  378. package/security/01-standards/data-protection-gdpr.md +543 -0
  379. package/security/01-standards/owasp-top10-complete.md +1890 -0
  380. package/security/01-standards/secure-coding-baseline.md +90 -0
  381. package/security/01-standards/supply-chain-security.md +441 -0
  382. package/security/01-standards/web-security-checklist.md +108 -0
  383. package/security/01-standards/zero-trust-architecture.md +521 -0
  384. package/security/02-playbooks/auth-sso-playbook.md +166 -0
  385. package/security/02-playbooks/incident-response-security-playbook.md +588 -0
  386. package/security/02-playbooks/owasp-api-security-playbook.md +129 -0
  387. package/security/02-playbooks/payment-integration-playbook.md +119 -0
  388. package/security/02-playbooks/penetration-testing-playbook.md +517 -0
  389. package/security/03-checklists/security-audit-checklist.md +356 -0
  390. package/security/04-antipatterns/security-coding-antipatterns.md +580 -0
  391. package/security/05-cases/case-log4shell-incident.md +537 -0
  392. package/security/05-cases/case-major-breaches.md +468 -0
  393. package/security/06-glossary/security-glossary.md +212 -0
  394. package/security/compliance-automation.md +993 -0
  395. package/security/container-security.md +680 -0
  396. package/security/devsecops-complete.md +426 -0
  397. package/security/sast-dast-sca.md +775 -0
  398. package/security/secrets-management.md +594 -0
  399. package/security/security-architecture-deep-dive.md +37 -0
  400. package/security/threat-modeling-stride-playbook.md +40 -0
  401. package/seed-templates/auth-system.md +59 -0
  402. package/seed-templates/blog-content.md +94 -0
  403. package/seed-templates/dashboard.md +89 -0
  404. package/seed-templates/docs-site.md +73 -0
  405. package/seed-templates/e-commerce.md +50 -0
  406. package/seed-templates/saas-landing.md +92 -0
  407. package/seed-templates/settings-page.md +51 -0
  408. package/testing/01-standards/test-strategy-and-layering.md +83 -0
  409. package/testing/01-standards/testing-strategy-complete.md +422 -0
  410. package/testing/01-standards/unit-testing-best-practices.md +118 -0
  411. package/testing/02-playbooks/e2e-testing-playbook.md +988 -0
  412. package/testing/02-playbooks/testing-strategy-playbook.md +126 -0
  413. package/testing/03-checklists/test-strategy-checklist.md +208 -0
  414. package/testing/04-antipatterns/testing-antipatterns.md +718 -0
  415. package/testing/05-cases/case-testing-transformation.md +300 -0
  416. package/testing/06-glossary/testing-glossary.md +110 -0
  417. package/testing/risk-based-test-matrix.md +36 -0
  418. package/testing/testing-strategy-deep-dive.md +37 -0
package/frontend/05-cases/case-performance-optimization.md ADDED
@@ -0,0 +1,274 @@
1
+ ---
2
+ id: case-performance-optimization
3
+ title: 前端性能优化案例：Lighthouse 从 40 到 95 的实战过程
4
+ domain: frontend
5
+ category: 05-cases
6
+ difficulty: intermediate
7
+ tags: [agent, case, checklist, frontend, optimization, performance, 业务影响, 初始状态诊断]
8
+ quality_score: 70
9
+ last_updated: 2026-06-15
10
+ ---
11
+ # 前端性能优化案例：Lighthouse 从 40 到 95 的实战过程
12
+
13
+ ## 概述
14
+
15
+ 本案例记录一个中型 B2C 电商平台前端性能优化的完整过程。项目初始 Lighthouse Performance 得分仅 40 分，经过 6 个迭代周期的系统化优化，最终稳定在 95 分以上。团队规模 5 人，优化周期 8 周。
16
+
17
+ 技术栈：React 18 + Next.js 14 + TypeScript + Tailwind CSS + PostgreSQL API
18
+
19
+ ---
20
+
21
+ ## 初始状态诊断
22
+
23
+ ### Lighthouse 基线报告（优化前）
24
+
25
+ | 指标 | 初始值 | 目标值 |
26
+ |------|--------|--------|
27
+ | Performance Score | 40 | ≥ 90 |
28
+ | FCP (First Contentful Paint) | 4.2s | < 1.8s |
29
+ | LCP (Largest Contentful Paint) | 8.1s | < 2.5s |
30
+ | TBT (Total Blocking Time) | 1800ms | < 200ms |
31
+ | CLS (Cumulative Layout Shift) | 0.35 | < 0.1 |
32
+ | Speed Index | 6.5s | < 3.4s |
33
+
34
+ ### 根因分析
35
+
36
+ 通过 Chrome DevTools Performance 面板和 webpack-bundle-analyzer 定位到以下核心问题：
37
+
38
+ 1. **Bundle 过大**：主包 2.1MB（gzip 后 680KB），包含全量 lodash、moment.js、antd
39
+ 2. **图片未优化**：首页 Hero 图 3.2MB PNG，商品列表图无懒加载
40
+ 3. **阻塞渲染的资源**：12 个同步加载的 CSS 文件，6 个 render-blocking JS
41
+ 4. **无代码分割**：所有页面打进同一个 bundle
42
+ 5. **布局抖动**：图片无预设尺寸，字体加载引起 FOIT
43
+ 6. **第三方脚本**：Google Analytics + Hotjar + Intercom 同步加载
44
+
45
+ ---
46
+
47
+ ## 第一轮：Bundle 瘦身（Score 40 → 55）
48
+
49
+ ### 措施
50
+
51
+ ```
52
+ 1. lodash → lodash-es + babel-plugin-lodash（按需引入）
53
+ - 减少 71KB (gzip)
54
+ 2. moment.js → dayjs（API 兼容，体积 2KB vs 67KB）
55
+ - 减少 65KB (gzip)
56
+ 3. antd 全量引入 → 按需引入 + tree-shaking
57
+ - 减少 120KB (gzip)
58
+ 4. 移除未使用的依赖（5个）
59
+ - 减少 45KB (gzip)
60
+ ```
61
+
62
+ ### 效果
63
+
64
+ - Bundle 大小：680KB → 379KB（-44%）
65
+ - TBT：1800ms → 1200ms
66
+ - Score：40 → 55
67
+
68
+ ### 关键教训
69
+
70
+ 使用 `npx depcheck` 发现 5 个 package.json 中声明但从未 import 的依赖。`webpack-bundle-analyzer` 可视化后，团队对 "哪些库占了多少体积" 有了直观认知。
71
+
72
+ ---
73
+
74
+ ## 第二轮：代码分割与懒加载（Score 55 → 68）
75
+
76
+ ### 措施
77
+
78
+ ```
79
+ 1. 路由级代码分割
80
+ - 使用 Next.js dynamic import
81
+ - 每个页面独立 chunk
82
+
83
+ 2. 组件级懒加载
84
+ - 富文本编辑器（420KB）仅在用户点击时加载
85
+ - 图表组件（recharts 180KB）仅在可视区域加载
86
+ - 模态框内容延迟加载
87
+
88
+ 3. 第三方脚本异步化
89
+ - Google Analytics → async + defer
90
+ - Hotjar → 页面 idle 后加载（requestIdleCallback）
91
+ - Intercom → 用户滚动到页面底部时加载
92
+ ```
93
+
94
+ ### 效果
95
+
96
+ - 首页 JS 大小：379KB → 142KB
97
+ - FCP：3.8s → 2.4s
98
+ - Score：55 → 68
99
+
100
+ ---
101
+
102
+ ## 第三轮：图片优化（Score 68 → 78）
103
+
104
+ ### 措施
105
+
106
+ ```
107
+ 1. 格式转换
108
+ - PNG/JPG → WebP（回退 JPG）
109
+ - 使用 next/image 自动格式协商
110
+
111
+ 2. 尺寸适配
112
+ - srcset 提供 640/1024/1920 三档
113
+ - 移动端不加载桌面尺寸图片
114
+
115
+ 3. 懒加载
116
+ - 首屏以下图片全部 loading="lazy"
117
+ - 首屏图片使用 priority 属性预加载
118
+
119
+ 4. 占位策略
120
+ - LQIP（低质量图片占位）使用 plaiceholder 生成
121
+ - 图片容器预设宽高比，消除 CLS
122
+
123
+ 5. CDN 配置
124
+ - 图片通过 Cloudflare Images 分发
125
+ - 启用自动压缩和格式转换
126
+ ```
127
+
128
+ ### 效果
129
+
130
+ - 首页图片总大小：4.8MB → 320KB
131
+ - LCP：6.2s → 3.1s
132
+ - CLS：0.35 → 0.08
133
+ - Score：68 → 78
134
+
135
+ ---
136
+
137
+ ## 第四轮：渲染优化（Score 78 → 85）
138
+
139
+ ### 措施
140
+
141
+ ```
142
+ 1. 关键 CSS 内联
143
+ - 使用 critters 提取首屏关键 CSS 内联到 <head>
144
+ - 非关键 CSS 异步加载
145
+
146
+ 2. 字体优化
147
+ - font-display: swap → font-display: optional
148
+ - 字体文件 subset（仅保留中文常用 6763 字 + ASCII）
149
+ - 使用 woff2 格式，预加载主字体
150
+
151
+ 3. React 渲染优化
152
+ - 商品列表使用 React.memo + useMemo
153
+ - 搜索输入 debounce 300ms
154
+ - 虚拟滚动处理 2000+ 商品列表（react-window）
155
+
156
+ 4. SSR / SSG 策略
157
+ - 首页 + 商品分类页 → SSG（构建时生成）
158
+ - 商品详情页 → ISR（增量静态生成，60s 刷新）
159
+ - 购物车 / 结算页 → CSR（纯客户端）
160
+ ```
161
+
162
+ ### 效果
163
+
164
+ - FCP：2.4s → 1.4s
165
+ - TBT：800ms → 280ms
166
+ - Score：78 → 85
167
+
168
+ ---
169
+
170
+ ## 第五轮：网络与缓存优化（Score 85 → 92）
171
+
172
+ ### 措施
173
+
174
+ ```
175
+ 1. HTTP/2 Push
176
+ - 关键资源服务端推送（主 CSS + 主 JS）
177
+
178
+ 2. 缓存策略
179
+ - 静态资源：Cache-Control: public, max-age=31536000, immutable
180
+ - HTML：Cache-Control: no-cache（配合 ETag）
181
+ - API 响应：stale-while-revalidate
182
+
183
+ 3. Service Worker
184
+ - 静态资源缓存优先策略
185
+ - API 请求网络优先 + 离线回退
186
+ - 预缓存核心路由的 JS chunk
187
+
188
+ 4. DNS 预解析 + 预连接
189
+ - <link rel="dns-prefetch"> 第三方域名
190
+ - <link rel="preconnect"> CDN 和 API 域名
191
+
192
+ 5. 接口优化
193
+ - 首页数据从 3 个串行请求合并为 1 个聚合接口
194
+ - GraphQL 替代部分 REST 接口（减少 over-fetching）
195
+ ```
196
+
197
+ ### 效果
198
+
199
+ - TTFB：420ms → 180ms
200
+ - Speed Index：3.8s → 2.1s
201
+ - Score：85 → 92
202
+
203
+ ---
204
+
205
+ ## 第六轮：精细化调优（Score 92 → 95+）
206
+
207
+ ### 措施
208
+
209
+ ```
210
+ 1. Core Web Vitals 微调
211
+ - INP（Interaction to Next Paint）优化：长任务拆分为微任务
212
+ - 使用 scheduler.yield() 让出主线程
213
+
214
+ 2. 预加载策略
215
+ - 鼠标 hover 链接时预加载目标页面
216
+ - prefetch 下一页数据
217
+
218
+ 3. 监控体系建立
219
+ - 接入 Web Vitals 库实时上报
220
+ - Grafana 仪表板监控 P75 指标
221
+ - 性能预算 CI 检查（超标则阻止合并）
222
+
223
+ 4. 持续防劣化
224
+ - Lighthouse CI 集成到 GitHub Actions
225
+ - 每次 PR 自动跑 Lighthouse，低于 90 分阻止合并
226
+ - 每周性能报告自动发送
227
+ ```
228
+
229
+ ### 最终效果
230
+
231
+ | 指标 | 初始值 | 最终值 | 改善幅度 |
232
+ |------|--------|--------|---------|
233
+ | Performance Score | 40 | 95+ | +137% |
234
+ | FCP | 4.2s | 1.1s | -74% |
235
+ | LCP | 8.1s | 1.8s | -78% |
236
+ | TBT | 1800ms | 120ms | -93% |
237
+ | CLS | 0.35 | 0.02 | -94% |
238
+ | Speed Index | 6.5s | 1.6s | -75% |
239
+
240
+ ---
241
+
242
+ ## 业务影响
243
+
244
+ - 跳出率从 58% 降至 32%（-45%）
245
+ - 平均页面停留时间从 1.2 分钟增至 3.4 分钟
246
+ - 移动端转化率提升 23%
247
+ - SEO 排名首页关键词增加 40%
248
+
249
+ ---
250
+
251
+ ## 经验总结
252
+
253
+ 1. **先测量后优化** - 不要凭直觉，用数据定位瓶颈
254
+ 2. **投入产出比递减** - 前三轮（40→78）用了 3 周，后三轮（78→95）也用了 5 周
255
+ 3. **防劣化比优化更重要** - 没有 CI 卡点，分数会在 2 个月内回退
256
+ 4. **移动端是真正的战场** - 桌面端 90 分不代表移动端也是 90 分
257
+ 5. **团队意识比工具重要** - 每个开发者都应关注自己代码的性能影响
258
+
259
+ ---
260
+
261
+ ## Agent Checklist
262
+
263
+ 以下为 AI Agent 在执行性能优化任务时必须遵循的检查项：
264
+
265
+ - [ ] 优化前运行 `npx lighthouse <url> --output=json` 记录基线数据
266
+ - [ ] 使用 `npx webpack-bundle-analyzer` 分析 bundle 组成
267
+ - [ ] 检查所有图片是否使用 WebP/AVIF 格式及懒加载
268
+ - [ ] 确认路由级代码分割已启用
269
+ - [ ] 确认第三方脚本不阻塞首屏渲染
270
+ - [ ] 确认 CSS 关键路径已内联
271
+ - [ ] 确认字体使用 `font-display: swap` 或 `optional`
272
+ - [ ] 确认 Cache-Control 头正确设置
273
+ - [ ] 优化后运行 Lighthouse 确认得分提升且无指标劣化
274
+ - [ ] 将 Lighthouse CI 配置写入 CI pipeline 防止回退
package/harmony/01-standards/harmonyos-arkts-standard.md ADDED
@@ -0,0 +1,75 @@
1
+ ---
2
+ id: harmonyos-arkts-standard
3
+ title: 鸿蒙 HarmonyOS 开发标准（ArkTS/ArkUI/Stage · 商业级）
4
+ domain: harmony
5
+ category: 01-standards
6
+ difficulty: advanced
7
+ tags: [鸿蒙, harmonyos, harmonyos-next, arkts, arkui, stage模型, uiability, 声明式, 状态管理, 一次开发多端, 商业级]
8
+ quality_score: 94
9
+ last_updated: 2026-06-19
10
+ ---
11
+
12
+ # 鸿蒙 HarmonyOS 开发标准（ArkTS/ArkUI/Stage · 商业级）
13
+
14
+ > HarmonyOS NEXT（纯血鸿蒙）**不兼容安卓 apk**，必须用 ArkTS/ArkUI 单独开发。国内面向 C 端的商业 App 应把鸿蒙作为一等端。本标准给出鸿蒙工程规范。
15
+
16
+ ## 1. Stage 模型（应用架构基座）
17
+
18
+ - 用 **Stage 模型**（API 9+ 官方长期演进模型），不要用旧 FA 模型。
19
+ - 核心组件：
20
+ - **UIAbility**：承载 UI 的应用组件，有明确生命周期（`onCreate / onWindowStageCreate / onForeground / onBackground / onDestroy`）——正确处理，别在错误时机做重活。
21
+ - **AbilityStage**：HAP 的运行时容器；**WindowStage**：窗口管理。
22
+ - **ExtensionAbility**：特定场景（卡片、输入法、后台服务等）。
23
+ - 模块化：HAP（入口/特性）/ HAR（静态共享库）/ HSP（动态共享包）合理拆分，按 feature 组织。
24
+ - `module.json5` / `app.json5` 配置规范；权限在配置声明 + 运行时申请。
25
+
26
+ ## 2. ArkTS（语言规范）
27
+
28
+ - ArkTS 是 TS 超集但**更严格**：开启 strict、禁用部分动态特性；遵循官方命名与编码规范。
29
+ - 遵循官方**高性能编码规则**：优先 `const`、用 TypedArray/HashMap/HashSet 等高效容器、按需 `lazy import`、避免不必要的对象创建与深拷贝、减少跨线程序列化。
30
+ - 并发用 **TaskPool / Worker** 把耗时计算放后台，别阻塞 UI 线程。
31
+
32
+ ## 3. ArkUI（声明式 UI）
33
+
34
+ - **声明式开发范式**：`@Entry @Component struct` + `build()`，数据驱动 UI 自动刷新。
35
+ - **状态管理**：用状态装饰器（V1 的 `@State/@Prop/@Link/@Provide/@Consume/@Observed/@ObjectLink`，或 V2 的 `@ComponentV2/@Local/@Param/@Event/@Monitor`）；状态最小化、就近管理、避免大对象触发全量刷新。
36
+ - 组件化复用 + 自定义组件；用 `@Builder/@BuilderParam` 抽公共 UI；`@Styles/@Extend` 复用样式。
37
+ - 长列表用 **LazyForEach + 数据懒加载**（不要 ForEach 渲染全部），配合组件复用、缓存。
38
+ - 遵循 **HarmonyOS Design** 设计规范（鸿蒙视觉/交互/动效语言），用系统组件与设计 token，不要硬套安卓/iOS 范式。
39
+
40
+ ## 4. 一次开发多端部署（如需）
41
+
42
+ - 用**自适应/响应式布局**（栅格、断点、`@ohos.mediaquery`）适配手机/折叠屏/平板/PC/车机。
43
+ - 分层 + 一多能力，UI 随设备形态自适应；公共逻辑共享。
44
+
45
+ ## 5. 数据、网络与存储
46
+
47
+ - 网络用 `@ohos.net.http` / RCP；统一封装 + 超时重试 + 弱网处理。
48
+ - 本地存储：首选项 `Preferences`(轻量)、关系型 `RelationalStore`(结构化)、分布式数据(跨设备)。敏感数据用加密能力，**不明文存密钥/token**。
49
+ - 分布式特性（流转、跨设备协同）是鸿蒙差异化能力，按场景使用。
50
+
51
+ ## 6. 性能与发布
52
+
53
+ - 启动优化、首帧优化；避免主线程耗时；用 DevEco Profiler 定位卡顿/丢帧。
54
+ - 包体优化（HSP 动态共享、资源压缩、按需加载）。
55
+ - 上架华为应用市场：遵守审核规范、隐私清单、权限说明、个保法合规；崩溃监控(AppGallery Connect)。
56
+
57
+ ## 7. 反模式（出现即不合格）
58
+
59
+ - 用旧 FA 模型；UIAbility 生命周期乱用（前台做重活、不释放资源）。
60
+ - ArkTS 写成松散 JS（用动态特性、不遵循高性能规则）；耗时计算阻塞 UI 线程。
61
+ - 状态管理用大对象全量刷新；长列表 ForEach 渲染全部不复用。
62
+ - 套用安卓/iOS UI 范式而非 HarmonyOS Design。
63
+ - 明文存敏感数据；权限不声明/不说明。
64
+
65
+ ## 8. 最低交付 checklist
66
+
67
+ - [ ] Stage 模型 + UIAbility 生命周期正确 + HAP/HAR/HSP 模块化。
68
+ - [ ] ArkTS strict + 高性能编码规则 + TaskPool/Worker 后台并发。
69
+ - [ ] ArkUI 声明式 + 状态最小化就近管理 + LazyForEach 长列表 + 组件/样式复用。
70
+ - [ ] 遵循 HarmonyOS Design；需多端则自适应布局一多部署。
71
+ - [ ] 网络统一封装+弱网处理；本地/敏感数据安全存储。
72
+ - [ ] 性能 Profiler 调优 + 包体优化 + 应用市场合规 + 崩溃监控。
73
+
74
+ ---
75
+ **参考**：HarmonyOS NEXT 官方文档、Stage 模型、ArkTS 高性能编码规范、ArkUI 状态管理(V1/V2)、HarmonyOS Design、一次开发多端部署。
package/harmony/01-standards/harmonyos-design.md ADDED
@@ -0,0 +1,65 @@
1
+ ---
2
+ id: harmonyos-design
3
+ title: 鸿蒙设计规范（HarmonyOS Design · 官方）
4
+ domain: harmony
5
+ category: 01-standards
6
+ difficulty: intermediate
7
+ tags: [鸿蒙, harmonyos, harmonyos-design, 设计规范, 鸿蒙sans, 色彩, 栅格, 自适应, 一次开发多端, 折叠屏, 交互, 商业级]
8
+ quality_score: 93
9
+ last_updated: 2026-06-19
10
+ ---
11
+
12
+ # 鸿蒙设计规范（HarmonyOS Design · 官方）
13
+
14
+ > 鸿蒙 App 不能套安卓/iOS 的视觉与交互。HarmonyOS Design 是华为官方设计语言，遵循它才像"纯血鸿蒙"。设计鸿蒙应用前必读。
15
+
16
+ ## 1. 设计语言与原则
17
+
18
+ - HarmonyOS Design 强调**视觉连续、界面关联、一致体验**；系统色调受"鸿蒙宇宙"世界观启发（宇宙蓝、雪域灰为基础）。
19
+ - 规范的按钮位置、菜单布局、操作手势，降低用户学习成本；交互符合鸿蒙用户习惯。
20
+ - 简洁、聚焦内容、层次清晰。
21
+
22
+ ## 2. 字体与排版
23
+
24
+ - 用官方 **鸿蒙 Sans (HarmonyOS Sans)** 字体（华为开发者联盟提供下载）；清晰字阶层级。
25
+ - 字号/行高按规范，支持系统字体大小调节（无障碍）。
26
+
27
+ ## 3. 色彩
28
+
29
+ - 用**系统色彩体系 + 品牌色**，注意品牌色与系统色对比，保证视觉连续与可读性。
30
+ - 支持深浅色模式；语义化用色而非硬编码。
31
+
32
+ ## 4. 栅格与自适应布局（鸿蒙强项：一次开发多端）
33
+
34
+ - 用**自适应栅格布局**（栅格系统 + 比例缩放 + 断点）适配手机/折叠屏/平板/PC/车机等多设备形态。
35
+ - **一次开发多端部署**：同一套设计随设备形态自适应（响应式断点、`mediaquery`），针对**折叠屏**做展开/折叠态适配。
36
+ - 不写死像素；用逻辑栅格与弹性布局。
37
+
38
+ ## 5. 组件与资源（用官方资源）
39
+
40
+ - 用 **ArkUI 系统组件**与官方组件规范，自带正确外观/交互/无障碍。
41
+ - 用官方**图标库**（HarmonyOS 在线图标资源）与**音效库**，不要用 emoji 当功能图标。
42
+ - 导航/Tab/列表/弹窗等遵循鸿蒙交互范式。
43
+
44
+ ## 6. 交互与动效
45
+
46
+ - 操作手势、转场动效遵循 HarmonyOS Design（自然、有层次、表达关联）。
47
+ - 即时反馈、加载/空/错误三态、触感反馈。
48
+
49
+ ## 7. 反模式（出现即不合格 / "不像鸿蒙"）
50
+
51
+ - 套用安卓 Material 或 iOS HIG 的视觉/交互范式而非 HarmonyOS Design。
52
+ - 不用鸿蒙 Sans/官方图标；emoji 当图标。
53
+ - 不做多设备/折叠屏自适应（写死手机尺寸）；硬编码颜色不适配深色。
54
+ - 不支持系统字号调节；忽略无障碍。
55
+
56
+ ## 8. 最低交付 checklist
57
+
58
+ - [ ] 遵循 HarmonyOS Design 视觉/交互语言（宇宙蓝/雪域灰基调、视觉连续）。
59
+ - [ ] 鸿蒙 Sans 字体 + 清晰字阶 + 支持系统字号；语义色彩 + 深色适配。
60
+ - [ ] 自适应栅格 + 一次开发多端 + 折叠屏展开/折叠态适配，不写死像素。
61
+ - [ ] ArkUI 系统组件 + 官方图标库(无 emoji) + 鸿蒙交互范式。
62
+ - [ ] 自然动效 + 三态 + 触感反馈 + 无障碍。
63
+
64
+ ---
65
+ **参考（官方）**：华为开发者联盟 HarmonyOS Design 设计资源 (developer.huawei.com/consumer/cn/design)、鸿蒙 Sans 字体、一次开发多端部署、自适应布局。
package/high-quality-engineering-playbook.md ADDED
@@ -0,0 +1,54 @@
1
+ ---
2
+ id: high-quality-engineering-playbook
3
+ title: high-quality-engineering-playbook
4
+ domain: high-quality-engineering-playbook.md
5
+ difficulty: intermediate
6
+ tags: [engineering, high, high-quality-engineering-playbook.md, playbook, quality, 全栈版]
7
+ quality_score: 70
8
+ last_updated: 2026-06-15
9
+ ---
10
+ # 开发：Excellent（11964948@qq.com）
11
+
12
+ ## 高质量工程知识库（Web 全栈版）
13
+
14
+ ### 1. 目标与范围
15
+ - 本知识库面向商业级 Web 应用，覆盖需求澄清、架构设计、交互体验、工程质量、上线运维与复盘。
16
+ - 适用对象包含产品经理、架构师、前端、后端、测试、运维与安全角色，强调跨角色协同。
17
+ - 输出导向为“可交付、可观测、可回滚、可审计”，而非仅完成页面或接口。
18
+
19
+ ### 2. 需求澄清基线
20
+ - 明确核心业务闭环：用户是谁、关键任务是什么、成功标准是什么、失败边界是什么。
21
+ - 给出可量化验收指标：转化率、响应时间、稳定性、错误率、可用性（SLA/SLO）。
22
+ - 定义角色与权限矩阵：管理员、运营、普通用户、只读角色，避免后期权限返工。
23
+ - 对高风险能力增加约束：支付、账号、内容发布、导出下载、外部回调。
24
+
25
+ ### 3. 架构与数据基线
26
+ - 前后端契约优先：接口字段、状态码、错误码、分页与排序规则先冻结再开发。
27
+ - 数据模型先做主干：主实体、关联关系、唯一约束、索引策略、审计字段（created_by / updated_by）。
28
+ - 关键路径必须可追踪：请求 ID、用户 ID、租户 ID、操作动作、结果状态统一落日志。
29
+ - 缓存设计有失效策略：写后删缓存、TTL、热点保护、防穿透与降级兜底。
30
+
31
+ ### 4. 交互体验基线
32
+ - 页面必须具备四态：加载态、空态、错误态、权限态，不允许只有“正常态”。
33
+ - 复杂流程必须可回退：步骤条、草稿保存、取消确认、关键操作二次确认。
34
+ - 表单强调“即时报错 + 提交兜底校验”，避免用户在最后一步集中踩坑。
35
+ - 列表页必须有高频能力：检索、筛选、排序、批量操作、导入导出与操作反馈。
36
+
37
+ ### 5. 安全与合规基线
38
+ - 鉴权采用最小权限原则，敏感接口必须鉴权、鉴租户、鉴资源归属。
39
+ - 输入输出全链路校验：参数白名单、长度限制、类型校验、敏感字段脱敏。
40
+ - 关键操作保留审计：谁在什么时间对什么资源做了什么动作、结果如何。
41
+ - 对外依赖设置隔离：超时、重试、熔断、回退策略，防止单点故障放大。
42
+
43
+ ### 6. 测试与发布基线
44
+ - 单测覆盖核心业务分支，集成测试覆盖关键业务闭环，E2E 覆盖主路径。
45
+ - 合并前门禁至少包含：lint、类型检查、测试、构建与关键安全检查。
46
+ - 发布采用可回滚策略：灰度、分批、监控对齐、异常自动告警与回退预案。
47
+ - 变更后必须做复盘：问题原因、影响范围、修复动作、预防机制、负责人。
48
+
49
+ ### 7. 交付清单（最小可用）
50
+ - PRD：目标、范围、流程、边界、验收标准。
51
+ - Architecture：模块划分、数据流、接口契约、非功能指标。
52
+ - UIUX：信息架构、组件状态矩阵、关键页面流程稿。
53
+ - Spec：用户故事、接口定义、测试场景与验收项。
54
+ - Runbook：部署步骤、监控看板、故障处置、回滚方案。