@umacloud/knowledge 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (418) hide show
  1. package/00-governance/governance-capabilities.md +557 -0
  2. package/00-governance/knowledge-map.md +39 -0
  3. package/00-governance/maintenance-policy.md +76 -0
  4. package/00-governance/review-checklist.md +81 -0
  5. package/README.md +13 -0
  6. package/ai/01-standards/agent-development-complete.md +691 -0
  7. package/ai/01-standards/llm-application-complete.md +488 -0
  8. package/ai/01-standards/mlops-complete.md +798 -0
  9. package/ai/01-standards/prompt-engineering-complete.md +646 -0
  10. package/ai/01-standards/rag-architecture-complete.md +649 -0
  11. package/ai/02-playbooks/llm-evaluation-playbook.md +847 -0
  12. package/ai/03-checklists/ai-project-checklist.md +215 -0
  13. package/ai/04-antipatterns/ai-antipatterns.md +661 -0
  14. package/ai/05-cases/case-rag-production.md +147 -0
  15. package/ai/06-glossary/ai-glossary.md +162 -0
  16. package/ai/agent-evaluation-benchmark.md +53 -0
  17. package/ai/ai-agent-memory-context-management.md +41 -0
  18. package/ai/ai-cost-capacity-optimization-playbook.md +42 -0
  19. package/ai/ai-data-security-and-compliance-playbook.md +37 -0
  20. package/ai/ai-domain-index-and-checklist.md +40 -0
  21. package/ai/ai-governance-maturity-model.md +50 -0
  22. package/ai/ai-model-selection-and-routing-strategy.md +47 -0
  23. package/ai/ai-observability-and-oncall-runbook.md +52 -0
  24. package/ai/ai-rag-engineering-playbook.md +42 -0
  25. package/ai/ai-red-team-and-safety-evaluation.md +42 -0
  26. package/ai/ai-release-readiness-and-rollback-gate.md +42 -0
  27. package/ai/llm-agent-engineering-deep-dive.md +57 -0
  28. package/ai/prompt-and-tool-guardrails.md +52 -0
  29. package/api/01-standards/enterprise-api-standards.md +198 -0
  30. package/api/01-standards/rest-api-design-guide.md +63 -0
  31. package/api/02-playbooks/api-pagination-playbook.md +93 -0
  32. package/api/02-playbooks/graphql-production-playbook.md +176 -0
  33. package/api/03-checklists/api-review-checklist.md +55 -0
  34. package/api/04-antipatterns/api-antipatterns.md +112 -0
  35. package/architecture/01-standards/api-gateway-patterns.md +496 -0
  36. package/architecture/01-standards/cloud-native-patterns.md +644 -0
  37. package/architecture/01-standards/distributed-systems-patterns.md +591 -0
  38. package/architecture/01-standards/event-driven-architecture.md +595 -0
  39. package/architecture/01-standards/microservices-patterns-complete.md +968 -0
  40. package/architecture/01-standards/microservices-patterns.md +495 -0
  41. package/architecture/01-standards/system-design-interview.md +664 -0
  42. package/architecture/02-playbooks/microservices-patterns-playbook.md +137 -0
  43. package/architecture/02-playbooks/migration-playbook.md +780 -0
  44. package/architecture/02-playbooks/system-design-playbook.md +779 -0
  45. package/architecture/03-checklists/architecture-decision-checklist.md +297 -0
  46. package/architecture/04-antipatterns/architecture-antipatterns.md +417 -0
  47. package/architecture/05-cases/case-netflix-microservices.md +413 -0
  48. package/architecture/06-glossary/architecture-glossary.md +164 -0
  49. package/architecture/adr-template-and-examples.md +38 -0
  50. package/architecture/api-gateway-deep-dive.md +1291 -0
  51. package/architecture/configuration-management.md +1162 -0
  52. package/architecture/distributed-transactions.md +1220 -0
  53. package/architecture/microservices-complete.md +735 -0
  54. package/architecture/resilience-and-disaster-patterns.md +37 -0
  55. package/architecture/service-governance.md +1198 -0
  56. package/architecture/system-architecture-deep-dive.md +37 -0
  57. package/backend/01-standards/analytics-and-growth.md +65 -0
  58. package/backend/01-standards/api-and-error-conventions.md +120 -0
  59. package/backend/01-standards/application-layering-and-packaging.md +160 -0
  60. package/backend/01-standards/auth-implementation.md +104 -0
  61. package/backend/01-standards/backend-framework-idioms.md +74 -0
  62. package/backend/01-standards/background-jobs-and-async.md +66 -0
  63. package/backend/01-standards/caching-strategies-complete.md +390 -0
  64. package/backend/01-standards/config-and-observability.md +77 -0
  65. package/backend/01-standards/data-modeling-and-persistence.md +94 -0
  66. package/backend/01-standards/django-complete.md +1765 -0
  67. package/backend/01-standards/email-and-notifications.md +64 -0
  68. package/backend/01-standards/fastapi-complete.md +925 -0
  69. package/backend/01-standards/file-upload-and-storage.md +66 -0
  70. package/backend/01-standards/graphql-api-complete.md +416 -0
  71. package/backend/01-standards/llm-application-standard.md +78 -0
  72. package/backend/01-standards/message-queue-patterns.md +379 -0
  73. package/backend/01-standards/microservices-and-distributed.md +78 -0
  74. package/backend/01-standards/nestjs-complete.md +2167 -0
  75. package/backend/01-standards/payment-integration.md +80 -0
  76. package/backend/01-standards/rate-limiting-complete.md +451 -0
  77. package/backend/01-standards/realtime-and-websocket.md +65 -0
  78. package/backend/01-standards/search-and-filtering.md +64 -0
  79. package/backend/01-standards/spring-boot-complete.md +445 -0
  80. package/backend/02-playbooks/api-design-playbook.md +718 -0
  81. package/backend/02-playbooks/email-send-playbook.md +130 -0
  82. package/backend/02-playbooks/file-upload-s3-playbook.md +153 -0
  83. package/backend/02-playbooks/typescript-enterprise-playbook.md +133 -0
  84. package/backend/02-playbooks/websocket-realtime-playbook.md +154 -0
  85. package/backend/03-checklists/api-launch-checklist.md +189 -0
  86. package/backend/04-antipatterns/backend-antipatterns.md +1051 -0
  87. package/blockchain/01-standards/blockchain-basics.md +557 -0
  88. package/blockchain/01-standards/smart-contract-development.md +1315 -0
  89. package/cicd/01-standards/deployment-and-delivery-standard.md +96 -0
  90. package/cicd/01-standards/github-actions-complete.md +473 -0
  91. package/cicd/01-standards/release-and-store-submission.md +75 -0
  92. package/cicd/02-playbooks/cicd-pipeline-playbook.md +144 -0
  93. package/cicd/02-playbooks/release-management-playbook.md +605 -0
  94. package/cicd/03-checklists/pipeline-security-checklist.md +168 -0
  95. package/cicd/04-antipatterns/cicd-antipatterns.md +589 -0
  96. package/cicd/05-cases/case-deployment-automation.md +221 -0
  97. package/cicd/05-cases/case-gitops-transformation.md +212 -0
  98. package/cicd/06-glossary/cicd-glossary.md +114 -0
  99. package/cicd/cicd-blueprint-deep-dive.md +38 -0
  100. package/cicd/release-readiness-gate.md +37 -0
  101. package/cloud-native/01-standards/container-security.md +741 -0
  102. package/cloud-native/01-standards/kubernetes-complete.md +812 -0
  103. package/cloud-native/02-playbooks/api-gateway-playbook.md +155 -0
  104. package/cloud-native/02-playbooks/gitops-with-argocd.md +760 -0
  105. package/cloud-native/02-playbooks/k8s-troubleshooting-playbook.md +1942 -0
  106. package/cloud-native/02-playbooks/message-queue-playbook.md +129 -0
  107. package/cloud-native/02-playbooks/multicloud-governance.md +726 -0
  108. package/cloud-native/02-playbooks/serverless-patterns.md +788 -0
  109. package/cloud-native/02-playbooks/service-mesh-playbook.md +612 -0
  110. package/cloud-native/02-playbooks/terraform-iac-playbook.md +143 -0
  111. package/cloud-native/03-checklists/container-security-checklist.md +431 -0
  112. package/cloud-native/03-checklists/k8s-production-readiness-checklist.md +460 -0
  113. package/cloud-native/04-antipatterns/container-antipatterns.md +660 -0
  114. package/cloud-native/04-antipatterns/k8s-antipatterns.md +743 -0
  115. package/cloud-native/05-cases/case-k8s-migration.md +478 -0
  116. package/cloud-native/05-cases/case-k8s-scaling.md +642 -0
  117. package/cloud-native/05-cases/case-k8s-security-incident.md +397 -0
  118. package/cloud-native/06-glossary/cloud-native-glossary.md +337 -0
  119. package/cross-platform/01-standards/cross-platform-frameworks.md +83 -0
  120. package/cross-platform/01-standards/platform-selection-and-architecture.md +77 -0
  121. package/data/01-standards/elasticsearch-complete.md +2098 -0
  122. package/data/01-standards/postgresql-complete.md +1613 -0
  123. package/data/01-standards/redis-complete.md +1527 -0
  124. package/data/02-playbooks/database-optimization-playbook.md +403 -0
  125. package/data/02-playbooks/elasticsearch-production-playbook.md +132 -0
  126. package/data/03-checklists/database-launch-checklist.md +187 -0
  127. package/data/04-antipatterns/database-antipatterns.md +873 -0
  128. package/data/05-cases/case-database-migration.md +310 -0
  129. package/data/06-glossary/database-glossary.md +440 -0
  130. package/data/data-governance-and-modeling-deep-dive.md +39 -0
  131. package/data-engineering/01-standards/airflow-complete.md +523 -0
  132. package/data-engineering/01-standards/kafka-complete.md +1521 -0
  133. package/data-engineering/02-playbooks/spark-etl-playbook.md +496 -0
  134. package/data-engineering/03-checklists/pipeline-launch-checklist.md +194 -0
  135. package/data-engineering/04-antipatterns/data-pipeline-antipatterns.md +684 -0
  136. package/data-engineering/05-cases/case-real-time-pipeline.md +355 -0
  137. package/data-engineering/06-glossary/data-engineering-glossary.md +429 -0
  138. package/database/01-standards/database-schema-standards.md +147 -0
  139. package/database/02-playbooks/postgresql-optimization-quick.md +52 -0
  140. package/database/02-playbooks/postgresql-performance-optimization.md +58 -0
  141. package/database/02-playbooks/postgresql-production-playbook.md +146 -0
  142. package/database/02-playbooks/redis-caching-playbook.md +117 -0
  143. package/database/03-checklists/database-review-checklist.md +50 -0
  144. package/database/04-antipatterns/database-antipatterns.md +112 -0
  145. package/design/01-standards/ui-design-system-complete.md +423 -0
  146. package/design/02-playbooks/design-handoff-playbook.md +254 -0
  147. package/design/02-playbooks/design-review-playbook.md +388 -0
  148. package/design/03-checklists/design-review-checklist.md +246 -0
  149. package/design/04-antipatterns/design-antipatterns.md +378 -0
  150. package/design/05-cases/case-design-system-adoption.md +328 -0
  151. package/design/06-glossary/design-glossary.md +329 -0
  152. package/design/ui-full-lifecycle-cross-platform-playbook.md +571 -0
  153. package/design/ux-system-deep-dive.md +38 -0
  154. package/design-systems/00-craft-rules.md +71 -0
  155. package/design-systems/aesthetic-families.md +43 -0
  156. package/design-systems/anti-ai-slop.md +162 -0
  157. package/design-systems/bold-geometric.md +120 -0
  158. package/design-systems/brutalist-bold.md +103 -0
  159. package/design-systems/editorial-clean.md +109 -0
  160. package/design-systems/glass-aurora.md +108 -0
  161. package/design-systems/modern-minimal.md +145 -0
  162. package/design-systems/premium-luxury.md +106 -0
  163. package/design-systems/product-type-design-map.md +48 -0
  164. package/design-systems/soft-warm.md +123 -0
  165. package/design-systems/tech-utility.md +113 -0
  166. package/desktop/01-standards/desktop-app-standard.md +72 -0
  167. package/desktop/01-standards/desktop-design.md +71 -0
  168. package/development/00-governance/document-template.md +41 -0
  169. package/development/01-standards/api-versioning-strategies.md +432 -0
  170. package/development/01-standards/authentication-patterns-complete.md +479 -0
  171. package/development/01-standards/css-architecture-complete.md +550 -0
  172. package/development/01-standards/database-migration-strategies.md +484 -0
  173. package/development/01-standards/elasticsearch-complete.md +347 -0
  174. package/development/01-standards/git-complete.md +371 -0
  175. package/development/01-standards/golang-complete.md +1565 -0
  176. package/development/01-standards/graphql-complete.md +298 -0
  177. package/development/01-standards/javascript-bundlers-complete.md +469 -0
  178. package/development/01-standards/javascript-typescript-complete.md +528 -0
  179. package/development/01-standards/jest-complete.md +275 -0
  180. package/development/01-standards/linux-complete.md +234 -0
  181. package/development/01-standards/logging-observability-complete.md +526 -0
  182. package/development/01-standards/microservices-communication.md +502 -0
  183. package/development/01-standards/mongodb-complete.md +406 -0
  184. package/development/01-standards/oauth2-complete.md +285 -0
  185. package/development/01-standards/performance-optimization-complete.md +289 -0
  186. package/development/01-standards/playwright-complete.md +247 -0
  187. package/development/01-standards/postgresql-complete.md +456 -0
  188. package/development/01-standards/pytest-complete.md +340 -0
  189. package/development/01-standards/python-async-programming.md +902 -0
  190. package/development/01-standards/python-complete.md +956 -0
  191. package/development/01-standards/python-decorators-complete.md +799 -0
  192. package/development/01-standards/python-design-patterns.md +2854 -0
  193. package/development/01-standards/python-packaging-distribution.md +420 -0
  194. package/development/01-standards/python-testing-strategies.md +607 -0
  195. package/development/01-standards/python-web-frameworks-comparison.md +471 -0
  196. package/development/01-standards/redis-complete.md +317 -0
  197. package/development/01-standards/rest-api-complete.md +316 -0
  198. package/development/01-standards/rust-complete.md +578 -0
  199. package/development/01-standards/typescript-advanced-types.md +1513 -0
  200. package/development/01-standards/web-security-complete.md +292 -0
  201. package/development/02-playbooks/api-design-playbook.md +810 -0
  202. package/development/02-playbooks/database-migration-playbook.md +580 -0
  203. package/development/02-playbooks/debugging-playbook.md +692 -0
  204. package/development/02-playbooks/feature-delivery-playbook.md +430 -0
  205. package/development/02-playbooks/incident-hotfix-playbook.md +387 -0
  206. package/development/02-playbooks/performance-optimization-playbook.md +531 -0
  207. package/development/02-playbooks/performance-tuning-playbook.md +652 -0
  208. package/development/02-playbooks/refactor-playbook.md +403 -0
  209. package/development/02-playbooks/release-playbook.md +469 -0
  210. package/development/03-checklists/architecture-review-checklist.md +168 -0
  211. package/development/03-checklists/data-migration-checklist.md +157 -0
  212. package/development/03-checklists/oncall-handover-checklist.md +173 -0
  213. package/development/03-checklists/pr-checklist.md +158 -0
  214. package/development/03-checklists/production-readiness-checklist.md +190 -0
  215. package/development/03-checklists/release-readiness-checklist.md +154 -0
  216. package/development/03-checklists/security-review-checklist.md +182 -0
  217. package/development/04-antipatterns/api-antipatterns.md +657 -0
  218. package/development/04-antipatterns/architecture-antipatterns.md +686 -0
  219. package/development/04-antipatterns/backend-antipatterns.md +648 -0
  220. package/development/04-antipatterns/cicd-antipatterns.md +540 -0
  221. package/development/04-antipatterns/code-smell-antipatterns.md +571 -0
  222. package/development/04-antipatterns/data-antipatterns.md +658 -0
  223. package/development/04-antipatterns/database-antipatterns.md +578 -0
  224. package/development/04-antipatterns/frontend-antipatterns.md +635 -0
  225. package/development/04-antipatterns/reliability-antipatterns.md +700 -0
  226. package/development/04-antipatterns/security-antipatterns.md +747 -0
  227. package/development/05-cases/case-api-version-migration.md +428 -0
  228. package/development/05-cases/case-authorization-hardening.md +383 -0
  229. package/development/05-cases/case-bluegreen-rollback.md +466 -0
  230. package/development/05-cases/case-cache-snowball-protection.md +485 -0
  231. package/development/05-cases/case-ci-cd-pipeline.md +544 -0
  232. package/development/05-cases/case-database-scaling.md +500 -0
  233. package/development/05-cases/case-db-hotspot-optimization.md +487 -0
  234. package/development/05-cases/case-incident-mttr-reduction.md +563 -0
  235. package/development/05-cases/case-microservice-migration.md +375 -0
  236. package/development/05-cases/case-performance-optimization.md +406 -0
  237. package/development/05-cases/case-security-incident-response.md +345 -0
  238. package/development/06-glossary/full-stack-glossary.md +166 -0
  239. package/development/09-maturity/quarterly-audit-template.md +35 -0
  240. package/development/11-ui-excellence/ui-aesthetic-system.md +41 -0
  241. package/development/11-ui-excellence/ui-engineering-excellence.md +435 -0
  242. package/development/12-scenarios/development-scenarios-guide.md +565 -0
  243. package/development/13-implementation-assets/implementation-toolkit.md +282 -0
  244. package/development/13-implementation-assets/knowledge-gates-execution.md +43 -0
  245. package/development/14-full-lifecycle/software-lifecycle-gates.md +511 -0
  246. package/development/15-lifecycle-templates/project-templates-collection.md +791 -0
  247. package/development/api-contract-and-versioning-guide.md +36 -0
  248. package/development/api-governance-complete.md +43 -0
  249. package/development/backend-engineering-complete.md +43 -0
  250. package/development/code-review-quality-complete.md +43 -0
  251. package/development/concurrency-reliability-complete.md +43 -0
  252. package/development/database-engineering-complete.md +43 -0
  253. package/development/engineering-effectiveness-complete.md +43 -0
  254. package/development/engineering-standards-deep-dive.md +38 -0
  255. package/development/frontend-engineering-complete.md +43 -0
  256. package/development/performance-capacity-complete.md +43 -0
  257. package/development/refactor-migration-complete.md +42 -0
  258. package/development/refactoring-and-techdebt-playbook.md +37 -0
  259. package/development/security-in-development-complete.md +43 -0
  260. package/devops/01-standards/cicd-pipeline-complete.md +262 -0
  261. package/devops/01-standards/docker-complete.md +1490 -0
  262. package/devops/01-standards/github-actions-complete.md +337 -0
  263. package/devops/01-standards/kubernetes-complete.md +638 -0
  264. package/devops/01-standards/terraform-complete.md +2117 -0
  265. package/devops/02-playbooks/docker-compose-playbook.md +233 -0
  266. package/devops/02-playbooks/docker-k8s-production-playbook.md +186 -0
  267. package/devops/02-playbooks/docker-production-playbook.md +952 -0
  268. package/edge-iot/01-standards/edge-iot-complete.md +473 -0
  269. package/experts/architect/api-design.md +178 -0
  270. package/experts/architect/methodology.md +124 -0
  271. package/experts/architect/security.md +75 -0
  272. package/experts/backend-lead/methodology.md +216 -0
  273. package/experts/devops/methodology.md +160 -0
  274. package/experts/frontend-lead/methodology.md +178 -0
  275. package/experts/product-manager/industry/ecommerce.md +43 -0
  276. package/experts/product-manager/industry/saas.md +40 -0
  277. package/experts/product-manager/methodology.md +97 -0
  278. package/experts/qa-lead/methodology.md +123 -0
  279. package/experts/qa-lead/test-strategy.md +128 -0
  280. package/experts/uiux-designer/methodology.md +125 -0
  281. package/frontend/01-standards/accessibility-complete.md +532 -0
  282. package/frontend/01-standards/accessibility-standard.md +74 -0
  283. package/frontend/01-standards/admin-dashboard-and-crud.md +72 -0
  284. package/frontend/01-standards/design-tokens-complete.md +444 -0
  285. package/frontend/01-standards/forms-and-validation.md +77 -0
  286. package/frontend/01-standards/frontend-architecture-and-layering.md +119 -0
  287. package/frontend/01-standards/i18n-and-localization.md +65 -0
  288. package/frontend/01-standards/nextjs-complete.md +451 -0
  289. package/frontend/01-standards/react-complete.md +713 -0
  290. package/frontend/01-standards/react-hooks-complete-guide.md +1100 -0
  291. package/frontend/01-standards/react-hooks-complete.md +1171 -0
  292. package/frontend/01-standards/seo-and-web-vitals.md +77 -0
  293. package/frontend/01-standards/state-management-complete.md +444 -0
  294. package/frontend/01-standards/vue-complete.md +499 -0
  295. package/frontend/01-standards/vue3-complete.md +2002 -0
  296. package/frontend/01-standards/web-framework-best-practices.md +64 -0
  297. package/frontend/01-standards/web-performance-complete.md +495 -0
  298. package/frontend/02-playbooks/accessibility-a11y-playbook.md +161 -0
  299. package/frontend/02-playbooks/frontend-performance-playbook.md +707 -0
  300. package/frontend/02-playbooks/i18n-internationalization-playbook.md +120 -0
  301. package/frontend/02-playbooks/performance-optimization-playbook.md +163 -0
  302. package/frontend/02-playbooks/react-nextjs-production-playbook.md +167 -0
  303. package/frontend/02-playbooks/react-state-management-playbook.md +173 -0
  304. package/frontend/03-checklists/component-quality-checklist.md +166 -0
  305. package/frontend/03-checklists/frontend-launch-checklist.md +299 -0
  306. package/frontend/04-antipatterns/frontend-antipatterns.md +886 -0
  307. package/frontend/05-cases/case-performance-optimization.md +274 -0
  308. package/harmony/01-standards/harmonyos-arkts-standard.md +75 -0
  309. package/harmony/01-standards/harmonyos-design.md +65 -0
  310. package/high-quality-engineering-playbook.md +54 -0
  311. package/incident/01-standards/incident-response-complete.md +303 -0
  312. package/incident/02-playbooks/chaos-engineering-playbook.md +883 -0
  313. package/incident/02-playbooks/postmortem-playbook.md +398 -0
  314. package/incident/03-checklists/incident-readiness-checklist.md +181 -0
  315. package/incident/04-antipatterns/incident-antipatterns.md +490 -0
  316. package/incident/05-cases/case-cascade-failure.md +176 -0
  317. package/incident/06-glossary/incident-glossary.md +114 -0
  318. package/incident/postmortem-and-response-deep-dive.md +39 -0
  319. package/industries/ecommerce/ecommerce-complete.md +631 -0
  320. package/industries/education/education-complete.md +555 -0
  321. package/industries/fintech/fintech-complete.md +501 -0
  322. package/industries/gaming/gaming-complete.md +587 -0
  323. package/industries/healthcare/healthcare-complete.md +452 -0
  324. package/low-code/01-standards/low-code-complete.md +944 -0
  325. package/miniprogram/01-standards/ai-common-mistakes.md +61 -0
  326. package/miniprogram/01-standards/miniprogram-custom-navbar-capsule.md +77 -0
  327. package/miniprogram/01-standards/miniprogram-design.md +61 -0
  328. package/miniprogram/01-standards/miniprogram-standard.md +81 -0
  329. package/mobile/01-standards/android-material-design.md +70 -0
  330. package/mobile/01-standards/flutter-complete.md +384 -0
  331. package/mobile/01-standards/ios-design-hig.md +78 -0
  332. package/mobile/01-standards/mobile-app-standard.md +85 -0
  333. package/mobile/01-standards/react-native-complete.md +352 -0
  334. package/mobile/02-playbooks/mobile-cross-platform-playbook.md +175 -0
  335. package/mobile/02-playbooks/mobile-performance.md +473 -0
  336. package/mobile/03-checklists/mobile-release-checklist.md +234 -0
  337. package/mobile/04-antipatterns/mobile-antipatterns.md +798 -0
  338. package/mobile/05-cases/case-app-performance.md +500 -0
  339. package/mobile/05-cases/case-app-startup-optimization.md +218 -0
  340. package/mobile/06-glossary/mobile-glossary.md +484 -0
  341. package/observability/01-standards/observability-standards.md +103 -0
  342. package/observability/02-playbooks/prometheus-grafana-playbook.md +135 -0
  343. package/observability/02-playbooks/structured-logging-playbook.md +73 -0
  344. package/observability/03-checklists/observability-checklist.md +54 -0
  345. package/observability/04-antipatterns/observability-antipatterns.md +106 -0
  346. package/operations/01-standards/prometheus-monitoring-complete.md +1578 -0
  347. package/operations/02-playbooks/capacity-planning-playbook.md +620 -0
  348. package/operations/03-checklists/production-launch-checklist.md +365 -0
  349. package/operations/04-antipatterns/operations-antipatterns.md +664 -0
  350. package/operations/05-cases/case-sre-practices.md +581 -0
  351. package/operations/06-glossary/operations-glossary.md +120 -0
  352. package/operations/aiops-anomaly-detection.md +758 -0
  353. package/operations/capacity-planning.md +1061 -0
  354. package/operations/chaos-engineering.md +659 -0
  355. package/operations/incident-command-system.md +38 -0
  356. package/operations/observability-complete.md +442 -0
  357. package/operations/slo-sli-playbook.md +517 -0
  358. package/operations/sre-operations-deep-dive.md +39 -0
  359. package/package.json +8 -0
  360. package/performance/01-standards/performance-and-scalability.md +80 -0
  361. package/performance/01-standards/performance-standards.md +156 -0
  362. package/performance/02-playbooks/query-optimization-playbook.md +103 -0
  363. package/performance/03-checklists/performance-checklist.md +56 -0
  364. package/performance/04-antipatterns/performance-antipatterns.md +146 -0
  365. package/product/01-standards/product-management-complete.md +285 -0
  366. package/product/02-playbooks/feature-launch-playbook.md +207 -0
  367. package/product/02-playbooks/user-research-playbook.md +532 -0
  368. package/product/03-checklists/feature-launch-checklist.md +275 -0
  369. package/product/04-antipatterns/product-antipatterns.md +355 -0
  370. package/product/05-cases/case-mvp-to-scale.md +384 -0
  371. package/product/06-glossary/product-glossary.md +462 -0
  372. package/product/feature-prioritization-framework.md +40 -0
  373. package/product/kpi-and-metric-tree.md +37 -0
  374. package/product/product-discovery-and-prd-deep-dive.md +41 -0
  375. package/quantum/01-standards/quantum-complete.md +1186 -0
  376. package/security/01-standards/api-security-complete.md +511 -0
  377. package/security/01-standards/container-runtime-security.md +574 -0
  378. package/security/01-standards/data-protection-gdpr.md +543 -0
  379. package/security/01-standards/owasp-top10-complete.md +1890 -0
  380. package/security/01-standards/secure-coding-baseline.md +90 -0
  381. package/security/01-standards/supply-chain-security.md +441 -0
  382. package/security/01-standards/web-security-checklist.md +108 -0
  383. package/security/01-standards/zero-trust-architecture.md +521 -0
  384. package/security/02-playbooks/auth-sso-playbook.md +166 -0
  385. package/security/02-playbooks/incident-response-security-playbook.md +588 -0
  386. package/security/02-playbooks/owasp-api-security-playbook.md +129 -0
  387. package/security/02-playbooks/payment-integration-playbook.md +119 -0
  388. package/security/02-playbooks/penetration-testing-playbook.md +517 -0
  389. package/security/03-checklists/security-audit-checklist.md +356 -0
  390. package/security/04-antipatterns/security-coding-antipatterns.md +580 -0
  391. package/security/05-cases/case-log4shell-incident.md +537 -0
  392. package/security/05-cases/case-major-breaches.md +468 -0
  393. package/security/06-glossary/security-glossary.md +212 -0
  394. package/security/compliance-automation.md +993 -0
  395. package/security/container-security.md +680 -0
  396. package/security/devsecops-complete.md +426 -0
  397. package/security/sast-dast-sca.md +775 -0
  398. package/security/secrets-management.md +594 -0
  399. package/security/security-architecture-deep-dive.md +37 -0
  400. package/security/threat-modeling-stride-playbook.md +40 -0
  401. package/seed-templates/auth-system.md +59 -0
  402. package/seed-templates/blog-content.md +94 -0
  403. package/seed-templates/dashboard.md +89 -0
  404. package/seed-templates/docs-site.md +73 -0
  405. package/seed-templates/e-commerce.md +50 -0
  406. package/seed-templates/saas-landing.md +92 -0
  407. package/seed-templates/settings-page.md +51 -0
  408. package/testing/01-standards/test-strategy-and-layering.md +83 -0
  409. package/testing/01-standards/testing-strategy-complete.md +422 -0
  410. package/testing/01-standards/unit-testing-best-practices.md +118 -0
  411. package/testing/02-playbooks/e2e-testing-playbook.md +988 -0
  412. package/testing/02-playbooks/testing-strategy-playbook.md +126 -0
  413. package/testing/03-checklists/test-strategy-checklist.md +208 -0
  414. package/testing/04-antipatterns/testing-antipatterns.md +718 -0
  415. package/testing/05-cases/case-testing-transformation.md +300 -0
  416. package/testing/06-glossary/testing-glossary.md +110 -0
  417. package/testing/risk-based-test-matrix.md +36 -0
  418. package/testing/testing-strategy-deep-dive.md +37 -0
@@ -0,0 +1,156 @@
1
+ ---
2
+ id: performance-standards
3
+ title: 性能优化标准(前后端)
4
+ domain: performance
5
+ category: 01-standards
6
+ difficulty: advanced
7
+ tags: [performance, optimization, database, query, index, cache, frontend, lcp, bundle, cdn, lazy-loading]
8
+ quality_score: 92
9
+ maintainer: platform-team@umadev.com
10
+ last_updated: 2026-06-14
11
+ ---
12
+
13
+ # 性能优化标准
14
+
15
+ ## 数据库性能
16
+
17
+ ### 索引策略
18
+ ```sql
19
+ -- B-tree(默认):等值查询、范围查询、排序
20
+ CREATE INDEX idx_orders_user_id ON orders(user_id);
21
+ CREATE INDEX idx_orders_created_at ON orders(created_at DESC);
22
+
23
+ -- 复合索引:多列查询(顺序很重要!最左前缀)
24
+ CREATE INDEX idx_orders_user_status ON orders(user_id, status, created_at);
25
+
26
+ -- GIN:JSONB / 全文搜索 / 数组
27
+ CREATE INDEX idx_products_attrs ON products USING GIN(attrs);
28
+
29
+ -- 部分索引:只索引活跃数据
30
+ CREATE INDEX idx_active_orders ON orders(user_id) WHERE status != 'cancelled';
31
+ ```
32
+
33
+ ### 查询优化
34
+ ```sql
35
+ -- ❌ SELECT * 返回不需要的列
36
+ SELECT * FROM users WHERE team_id = 123;
37
+
38
+ -- ✅ 只选需要的列
39
+ SELECT id, name, email FROM users WHERE team_id = 123;
40
+
41
+ -- ❌ COUNT(*) 做分页 total(大表慢)
42
+ SELECT COUNT(*) FROM orders WHERE user_id = 123;
43
+
44
+ -- ✅ 估算总数(大表)
45
+ SELECT reltuples::bigint FROM pg_class WHERE relname = 'orders';
46
+
47
+ -- ❌ N+1:循环内查子资源
48
+ -- ✅ JOIN 或批量 IN
49
+ SELECT o.*, u.name FROM orders o JOIN users u ON o.user_id = u.id WHERE o.status = 'pending';
50
+ ```
51
+
52
+ ### 连接池
53
+ ```
54
+ # PostgreSQL 连接池配置
55
+ max_connections: 100
56
+ pool_size: 20 # 应用连接池
57
+ pool_max_overflow: 10
58
+ pool_recycle: 3600 # 1小时回收防泄漏
59
+ statement_timeout: 30000 # 30s 超时
60
+ ```
61
+
62
+ ## 缓存策略
63
+
64
+ ### 多层缓存
65
+ ```
66
+ 浏览器缓存 → CDN → 应用缓存(Redis) → 数据库缓存 → 数据库
67
+ ```
68
+
69
+ ### Redis 缓存模式
70
+ ```python
71
+ # Cache-Aside(最常用)
72
+ def get_user(user_id):
73
+ # 1. 查缓存
74
+ cached = redis.get(f"user:{user_id}")
75
+ if cached:
76
+ return json.loads(cached)
77
+ # 2. 查数据库
78
+ user = db.query(User).get(user_id)
79
+ # 3. 写缓存(带 TTL)
80
+ redis.setex(f"user:{user_id}", 300, json.dumps(user.to_dict()))
81
+ return user
82
+
83
+ # Write-Through(写时更新缓存)
84
+ def update_user(user_id, data):
85
+ user = db.update(User, user_id, data)
86
+ redis.setex(f"user:{user_id}", 300, json.dumps(user.to_dict()))
87
+ ```
88
+
89
+ ### 缓存失效
90
+ - TTL 失效(5-60 分钟)
91
+ - 主动失效(数据变更时删除缓存键)
92
+ - LRU 淘汰(内存不足时)
93
+
94
+ ## 前端性能
95
+
96
+ ### Core Web Vitals 目标
97
+ | 指标 | 目标 | 测量 |
98
+ |------|------|------|
99
+ | LCP(最大内容绘制) | < 2.5s | 首屏最大元素渲染时间 |
100
+ | INP(交互延迟) | < 200ms | 用户交互到响应时间 |
101
+ | CLS(布局偏移) | < 0.1 | 视觉稳定性 |
102
+
103
+ ### Bundle 优化
104
+ ```javascript
105
+ // ❌ 全量导入
106
+ import _ from 'lodash';
107
+
108
+ // ✅ 按需导入
109
+ import debounce from 'lodash/debounce';
110
+
111
+ // ✅ 动态导入(代码分割)
112
+ const Chart = lazy(() => import('./Chart'));
113
+
114
+ // ✅ 路由级分割
115
+ const Dashboard = lazy(() => import('./pages/Dashboard'));
116
+ ```
117
+
118
+ ### 图片优化
119
+ ```html
120
+ <!-- ❌ 不优化的原图 -->
121
+ <img src="/photos/big.jpg">
122
+
123
+ <!-- ✅ 响应式 + 懒加载 + 现代格式 -->
124
+ <img
125
+ src="/photos/medium.avif"
126
+ srcset="/photos/small.avif 480w, /photos/medium.avif 800w, /photos/large.avif 1200w"
127
+ sizes="(max-width: 600px) 480px, 800px"
128
+ loading="lazy"
129
+ decoding="async"
130
+ width="800" height="600"
131
+ />
132
+ ```
133
+
134
+ ### API 响应优化
135
+ ```http
136
+ # 启用 gzip/brotli 压缩
137
+ Content-Encoding: br
138
+
139
+ # 条件请求(304 Not Modified)
140
+ ETag: "abc123"
141
+ Cache-Control: public, max-age=300
142
+
143
+ # 字段过滤
144
+ GET /api/users?fields=id,name,email
145
+ ```
146
+
147
+ ## 性能预算
148
+
149
+ | 资源 | 预算 |
150
+ |------|------|
151
+ | JS bundle | < 150KB (gzip) |
152
+ | CSS | < 30KB (gzip) |
153
+ | 图片 | < 200KB (首屏) |
154
+ | 字体 | < 50KB |
155
+ | API 响应 | p95 < 200ms |
156
+ | 数据库查询 | p95 < 50ms |
@@ -0,0 +1,103 @@
1
+ ---
2
+ id: query-optimization-playbook
3
+ title: 数据库查询优化实战手册
4
+ domain: performance
5
+ category: 02-playbooks
6
+ difficulty: advanced
7
+ tags: [performance, database, postgresql, query, optimization, index, explain, analyze, n-plus-1, pagination, cache]
8
+ quality_score: 92
9
+ maintainer: platform-team@umadev.com
10
+ last_updated: 2024-06-14
11
+ ---
12
+
13
+ # 数据库查询优化实战手册
14
+
15
+ ## 诊断工具:EXPLAIN ANALYZE
16
+
17
+ ```sql
18
+ -- 查看真实执行计划(实际跑一遍)
19
+ EXPLAIN ANALYZE
20
+ SELECT * FROM orders WHERE user_id = 123 ORDER BY created_at DESC LIMIT 20;
21
+
22
+ -- 关键看:
23
+ -- Seq Scan(全表扫描)→ 需要索引
24
+ -- Index Scan(索引扫描)→ 好
25
+ -- Bitmap Heap Scan(批量索引)→ 还行
26
+ -- Sort(内存排序)→ 可能需要索引
27
+ -- Nested Loop(JOIN)→ 大表可能慢
28
+ ```
29
+
30
+ ## 常见优化模式
31
+
32
+ ### 1. 全表扫描 → 加索引
33
+ ```sql
34
+ -- EXPLAIN 显示 Seq Scan
35
+ EXPLAIN ANALYZE SELECT * FROM orders WHERE status = 'pending';
36
+ -- → 加索引
37
+ CREATE INDEX idx_orders_status ON orders(status);
38
+ ```
39
+
40
+ ### 2. 大 OFFSET 分页 → cursor 分页
41
+ ```sql
42
+ -- ❌ OFFSET 10000 扫 10020 行
43
+ SELECT * FROM products ORDER BY id OFFSET 10000 LIMIT 20;
44
+
45
+ -- ✅ WHERE 直接定位(扫 20 行)
46
+ SELECT * FROM products WHERE id > 5000 ORDER BY id LIMIT 20;
47
+ ```
48
+
49
+ ### 3. N+1 → 批量查询
50
+ ```python
51
+ # ❌ 100 用户 = 101 次 DB 查询
52
+ for u in users:
53
+ u.profile = db.query("SELECT * FROM profiles WHERE user_id=?", u.id)
54
+
55
+ # ✅ 1 次查全部
56
+ profiles = db.query("SELECT * FROM profiles WHERE user_id IN %s", user_ids)
57
+ ```
58
+
59
+ ### 4. COUNT(*) 慢 → 估算
60
+ ```sql
61
+ -- ❌ 精确 COUNT(大表几秒)
62
+ SELECT COUNT(*) FROM orders WHERE status = 'pending';
63
+
64
+ -- ✅ 统计信息估算(毫秒)
65
+ SELECT reltuples::bigint FROM pg_class WHERE relname='orders';
66
+
67
+ -- ✅ 或维护一个计数器表
68
+ UPDATE counters SET count = count + 1 WHERE table_name = 'orders' AND status = 'pending';
69
+ ```
70
+
71
+ ### 5. 慢 JOIN → 物化视图 / 缓存
72
+ ```sql
73
+ -- ❌ 复杂 JOIN 每次都算
74
+ SELECT o.*, u.name, p.title FROM orders o
75
+ JOIN users u ON o.user_id = u.id
76
+ JOIN products p ON o.product_id = p.id
77
+ WHERE o.status = 'pending';
78
+
79
+ -- ✅ 物化视图定期刷新
80
+ CREATE MATERIALIZED VIEW order_summary AS
81
+ SELECT o.*, u.name, p.title FROM ...;
82
+ REFRESH MATERIALIZED VIEW CONCURRENTLY order_summary;
83
+ ```
84
+
85
+ ## 连接池配置
86
+
87
+ ```python
88
+ # SQLAlchemy 示例
89
+ engine = create_engine(url,
90
+ pool_size=20, # 常驻连接数
91
+ max_overflow=10, # 突发连接
92
+ pool_pre_ping=True, # 使用前检查连接活性
93
+ pool_recycle=3600, # 1 小时回收(防 "server closed the connection")
94
+ )
95
+ ```
96
+
97
+ ## 查询超时
98
+
99
+ ```sql
100
+ -- PostgreSQL 语句级超时
101
+ SET statement_timeout = '30s';
102
+ SELECT ...; -- 超过 30s 自动取消
103
+ ```
@@ -0,0 +1,56 @@
1
+ ---
2
+ id: performance-checklist
3
+ title: 性能审查清单
4
+ domain: performance
5
+ category: 03-checklists
6
+ difficulty: intermediate
7
+ tags: [performance, checklist, database, frontend, cache, index, bundle, lcp, lazy-loading, query, redis]
8
+ quality_score: 88
9
+ maintainer: platform-team@umadev.com
10
+ last_updated: 2024-06-14
11
+ ---
12
+
13
+ # 性能审查清单
14
+
15
+ ## 数据库
16
+ - [ ] 没有 Seq Scan(全表扫描)→ 所有查询命中索引
17
+ - [ ] 没有 N+1 查询 → 用 JOIN / eager loading / batch
18
+ - [ ] list 端点有 LIMIT + 分页
19
+ - [ ] COUNT(*) 大表用估算
20
+ - [ ] 连接池大小合理(20 基础 + 10 突发)
21
+ - [ ] 查询有超时(statement_timeout 30s)
22
+ - [ ] 慢查询日志已启用
23
+
24
+ ## 缓存
25
+ - [ ] 热点数据有缓存(Redis / 内存)
26
+ - [ ] 缓存有 TTL(不永久缓存)
27
+ - [ ] 写操作更新缓存(cache-aside 或 write-through)
28
+ - [ ] 缓存击穿防护(singleflight 或互斥锁)
29
+ - [ ] 缓存有降级策略(Redis 挂了仍能服务)
30
+
31
+ ## 前端
32
+ - [ ] JS bundle < 150KB(gzip)
33
+ - [ ] 路由级代码分割(lazy import)
34
+ - [ ] 图片用 AVIF/WebP + 响应式 srcset
35
+ - [ ] 图片懒加载(loading="lazy")
36
+ - [ ] 字体用 font-display: swap
37
+ - [ ] 关键 CSS 内联(首屏不阻塞)
38
+
39
+ ## API 响应
40
+ - [ ] 启用 gzip/brotli 压缩
41
+ - [ ] 响应有 ETag + Cache-Control
42
+ - [ ] 大响应支持字段过滤(?fields=id,name)
43
+ - [ ] p95 < 200ms
44
+ - [ ] 无阻塞调用(重操作走异步队列)
45
+
46
+ ## Core Web Vitals
47
+ - [ ] LCP < 2.5s
48
+ - [ ] INP < 200ms
49
+ - [ ] CLS < 0.1
50
+ - [ ] TTFB < 600ms
51
+
52
+ ## 资源使用
53
+ - [ ] CPU 使用率 < 70%(常态)
54
+ - [ ] 内存使用率 < 80%(常态)
55
+ - [ ] 数据库连接池 < 80%
56
+ - [ ] 磁盘 IOPS 在预算内
@@ -0,0 +1,146 @@
1
+ ---
2
+ id: performance-antipatterns
3
+ title: 性能反模式(避坑指南)
4
+ domain: performance
5
+ category: 04-antipatterns
6
+ difficulty: intermediate
7
+ tags: [performance, antipattern, frontend, backend, database, cache, bundle, waterfall, debounce, memoization, lazy-loading]
8
+ quality_score: 88
9
+ maintainer: platform-team@umadev.com
10
+ last_updated: 2024-06-14
11
+ ---
12
+
13
+ # 性能反模式(避坑指南)
14
+
15
+ ## 前端
16
+
17
+ ### 1. 巨型 bundle(不分割)
18
+ ```javascript
19
+ // ❌ 全量导入 + 单 chunk
20
+ import _ from 'lodash'; // 70KB
21
+ import moment from 'moment'; // 70KB
22
+ import * as Icons from 'lucide'; // 全部图标!
23
+
24
+ // ✅ 按需导入 + 路由分割
25
+ import debounce from 'lodash/debounce'; // 1KB
26
+ import { format } from 'date-fns'; // 7KB
27
+ import { Search } from 'lucide-react'; // 单图标
28
+ const Settings = lazy(() => import('./Settings')); // 路由分割
29
+ ```
30
+
31
+ ### 2. 渲染瀑布(阻塞渲染的 CSS/JS)
32
+ ```html
33
+ <!-- ❌ CSS 阻塞渲染 + JS 阻塞解析 -->
34
+ <head>
35
+ <link rel="stylesheet" href="/all.css"> <!-- 200KB,渲染阻塞 -->
36
+ <script src="/analytics.js"></script> <!-- 解析阻塞 -->
37
+ </head>
38
+
39
+ <!-- ✅ 关键 CSS 内联 + JS 异步 -->
40
+ <head>
41
+ <style>/* 关键 CSS 内联 */</style>
42
+ <link rel="preload" href="/rest.css" as="style" onload="this.rel='stylesheet'">
43
+ <script src="/analytics.js" defer></script>
44
+ </head>
45
+ ```
46
+
47
+ ### 3. 不用 key 的列表渲染
48
+ ```jsx
49
+ // ❌ 无 key → React 每次全量 diff(慢)
50
+ {items.map(item => <Row data={item} />)}
51
+
52
+ // ✅ 稳定 key → React 精准 diff(快)
53
+ {items.map(item => <Row key={item.id} data={item} />)}
54
+ ```
55
+
56
+ ### 4. 不防抖的高频事件
57
+ ```jsx
58
+ // ❌ 每次按键都发请求(打字 10 字 = 10 次请求)
59
+ <input onChange={e => search(e.target.value)} />
60
+
61
+ // ✅ 防抖(停止输入 300ms 后才请求)
62
+ <input onChange={e => debouncedSearch(e.target.value)} />
63
+ const debouncedSearch = useMemo(() => debounce(search, 300), []);
64
+ ```
65
+
66
+ ## 后端
67
+
68
+ ### 5. 同步阻塞做重操作
69
+ ```python
70
+ # ❌ 请求内发邮件 / 处理图片(用户等 10s)
71
+ @app.post("/register")
72
+ def register(data):
73
+ user = create_user(data)
74
+ send_welcome_email(user) # 阻塞 5s
75
+ resize_avatar(user) # 阻塞 5s
76
+ return user # 用户等了 10s
77
+
78
+ # ✅ 异步队列(用户立刻拿到响应)
79
+ @app.post("/register")
80
+ def register(data):
81
+ user = create_user(data)
82
+ enqueue_job("send_welcome_email", user.id) # 毫秒
83
+ enqueue_job("resize_avatar", user.id) # 毫秒
84
+ return user # 用户等了 200ms
85
+ ```
86
+
87
+ ### 6. 无缓存的重复计算
88
+ ```python
89
+ # ❌ 每次请求都算排行榜(重查询)
90
+ @app.get("/leaderboard")
91
+ def leaderboard():
92
+ return db.query("SELECT ... ORDER BY score DESC LIMIT 100") # 2s
93
+
94
+ # ✅ 缓存 + 后台刷新
95
+ @app.get("/leaderboard")
96
+ @cache(ttl=300) # 缓存 5 分钟
97
+ def leaderboard():
98
+ return db.query("...")
99
+ ```
100
+
101
+ ### 7. 无连接池
102
+ ```python
103
+ # ❌ 每次请求新建数据库连接(TCP 握手 + 认证 ~50ms)
104
+ def query(sql):
105
+ conn = psycopg2.connect(url) # 50ms 开销
106
+ result = conn.execute(sql)
107
+ conn.close()
108
+ return result
109
+
110
+ # ✅ 连接池复用(~1ms 获取已建连接)
111
+ pool = create_connection_pool(url, size=20)
112
+ def query(sql):
113
+ with pool.get_conn() as conn:
114
+ return conn.execute(sql)
115
+ ```
116
+
117
+ ### 8. 未设置查询超时
118
+ ```python
119
+ # ❌ 慢查询无限等待(连接池耗尽)
120
+ db.execute("SELECT * FROM big_table") # 可能跑 10 分钟
121
+
122
+ # ✅ 语句级超时(30s 自动取消)
123
+ db.execute("SET statement_timeout = 30000")
124
+ db.execute("SELECT * FROM big_table") # 超 30s 取消
125
+ ```
126
+
127
+ ## 数据库
128
+
129
+ ### 9. SELECT * 返回不需要的列
130
+ ```sql
131
+ -- ❌ 传输 + 序列化不需要的列(BLOB/JSONB 很大)
132
+ SELECT * FROM products WHERE category = 'electronics';
133
+
134
+ -- ✅ 只查需要的列
135
+ SELECT id, name, price_cents FROM products WHERE category = 'electronics';
136
+ ```
137
+
138
+ ### 10. 应用层排序(不在 SQL 里排)
139
+ ```python
140
+ # ❌ 查全部 → Python 排序(内存爆炸 + 慢)
141
+ products = db.query("SELECT * FROM products")
142
+ sorted_products = sorted(products, key=lambda p: p.price, reverse=True)
143
+
144
+ # ✅ SQL 排序(利用索引,快)
145
+ products = db.query("SELECT * FROM products ORDER BY price DESC")
146
+ ```