create-claude-workspace 1.1.64 → 1.1.65
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -84,7 +84,7 @@ Always prefer `@cibule/*` packages over custom implementations:
|
|
|
84
84
|
- `moduleResolution: "bundler"` — NEVER add `.js` extensions to imports (write `'./foo'`, not `'./foo.js'`)
|
|
85
85
|
- `readonly` on all fields that don't need reassignment
|
|
86
86
|
- Custom error classes for domain-specific errors
|
|
87
|
-
- Input validation at system boundaries (
|
|
87
|
+
- Input validation at system boundaries — **TypeBox** preferred (compile-time types + runtime validation from one schema, no duplication). Use `@sinclair/typebox` and `@sinclair/typebox/compiler` for `TypeCompiler`.
|
|
88
88
|
- Async/await patterns (no callback hell)
|
|
89
89
|
- Separation of concerns (routes, services, repositories)
|
|
90
90
|
- File size limit: MAX 200 lines per TypeScript file
|
|
@@ -75,7 +75,7 @@ Read `.claude/profiles/frontend.md` for the framework-specific review checklist.
|
|
|
75
75
|
- **Backend API security** (for API routes / endpoints):
|
|
76
76
|
- Authentication check on protected routes (middleware or per-route guard)
|
|
77
77
|
- Authorization: does the user have permission for this resource?
|
|
78
|
-
- Input validation at API boundary (
|
|
78
|
+
- Input validation at API boundary (TypeBox schema, not manual checks)
|
|
79
79
|
- No SQL injection — all queries use parameterized statements (never string interpolation)
|
|
80
80
|
- Rate limiting on sensitive endpoints (login, registration, password reset)
|
|
81
81
|
- CORS configuration — no wildcard `*` in production
|
|
@@ -281,7 +281,7 @@ Key rules enforced (do NOT weaken):
|
|
|
281
281
|
|
|
282
282
|
[Include only if the project has a backend]
|
|
283
283
|
|
|
284
|
-
- Hono routes with validation (
|
|
284
|
+
- Hono routes with validation (**TypeBox** — `@sinclair/typebox` for schema + type inference, `TypeCompiler` for runtime validation)
|
|
285
285
|
- `@cibule/di` for dependency injection (see @cibule/* Ecosystem section above)
|
|
286
286
|
- `@cibule/db` + driver for database access, UnitOfWork for atomic writes
|
|
287
287
|
- `@cibule/storage` + driver for file storage, `@cibule/image` + driver for image processing
|