plcode-linux-x64-baseline-musl 2.1.0

package/.plcode/context/development/api-design.md

@@ -0,0 +1,394 @@
+# API Design Patterns
+
+**Category**: development  
+**Purpose**: REST API design principles, GraphQL patterns, and API versioning strategies  
+**Used by**: backend-specialist
+
+---
+
+## Overview
+
+This guide covers best practices for designing robust, scalable, and maintainable APIs, including REST, GraphQL, and versioning strategies.
+
+## REST API Design
+
+### 1. Resource-Based URLs
+
+**Use nouns, not verbs**:
+
+```
+# Bad
+GET  /getUsers
+POST /createUser
+POST /updateUser/123
+
+# Good
+GET    /users
+POST   /users
+PUT    /users/123
+PATCH  /users/123
+DELETE /users/123
+```
+
+### 2. HTTP Methods
+
+**Use appropriate HTTP methods**:
+
+- `GET` - Retrieve resources (idempotent, safe)
+- `POST` - Create new resources
+- `PUT` - Replace entire resource (idempotent)
+- `PATCH` - Partial update (idempotent)
+- `DELETE` - Remove resource (idempotent)
+
+### 3. Status Codes
+
+**Use standard HTTP status codes**:
+
+```
+2xx Success
+  200 OK - Successful GET, PUT, PATCH
+  201 Created - Successful POST
+  204 No Content - Successful DELETE
+
+4xx Client Errors
+  400 Bad Request - Invalid input
+  401 Unauthorized - Missing/invalid auth
+  403 Forbidden - Authenticated but not authorized
+  404 Not Found - Resource doesn't exist
+  409 Conflict - Resource conflict (e.g., duplicate)
+  422 Unprocessable Entity - Validation errors
+
+5xx Server Errors
+  500 Internal Server Error - Unexpected error
+  503 Service Unavailable - Temporary unavailability
+```
+
+### 4. Consistent Response Format
+
+**Standardize response structure**:
+
+```json
+// Success response
+{
+  "data": {
+    "id": "123",
+    "name": "John Doe",
+    "email": "john@example.com"
+  },
+  "meta": {
+    "timestamp": "2024-01-01T00:00:00Z"
+  }
+}
+
+// Error response
+{
+  "error": {
+    "code": "VALIDATION_ERROR",
+    "message": "Invalid input data",
+    "details": [
+      {
+        "field": "email",
+        "message": "Invalid email format"
+      }
+    ]
+  },
+  "meta": {
+    "timestamp": "2024-01-01T00:00:00Z",
+    "requestId": "abc-123"
+  }
+}
+
+// Collection response
+{
+  "data": [...],
+  "meta": {
+    "total": 100,
+    "page": 1,
+    "pageSize": 20,
+    "totalPages": 5
+  },
+  "links": {
+    "self": "/users?page=1",
+    "next": "/users?page=2",
+    "prev": null,
+    "first": "/users?page=1",
+    "last": "/users?page=5"
+  }
+}
+```
+
+### 5. Filtering, Sorting, Pagination
+
+**Support common query operations**:
+
+```
+# Filtering
+GET /users?status=active&role=admin
+
+# Sorting
+GET /users?sort=createdAt:desc,name:asc
+
+# Pagination
+GET /users?page=2&pageSize=20
+
+# Field selection
+GET /users?fields=id,name,email
+
+# Search
+GET /users?q=john
+```
+
+### 6. Nested Resources
+
+**Handle relationships appropriately**:
+
+```
+# Good - Shallow nesting
+GET /users/123/posts
+GET /posts?userId=123
+
+# Avoid - Deep nesting
+GET /users/123/posts/456/comments/789
+# Better
+GET /comments/789
+```
+
+## GraphQL Patterns
+
+### 1. Schema Design
+
+**Design clear, intuitive schemas**:
+
+```graphql
+type User {
+  id: ID!
+  name: String!
+  email: String!
+  posts: [Post!]!
+  createdAt: DateTime!
+}
+
+type Post {
+  id: ID!
+  title: String!
+  content: String!
+  author: User!
+  comments: [Comment!]!
+  publishedAt: DateTime
+}
+
+type Query {
+  user(id: ID!): User
+  users(filter: UserFilter, page: Int, pageSize: Int): UserConnection!
+  post(id: ID!): Post
+}
+
+type Mutation {
+  createUser(input: CreateUserInput!): User!
+  updateUser(id: ID!, input: UpdateUserInput!): User!
+  deleteUser(id: ID!): Boolean!
+}
+
+input CreateUserInput {
+  name: String!
+  email: String!
+}
+
+input UserFilter {
+  status: UserStatus
+  role: UserRole
+  search: String
+}
+```
+
+### 2. Resolver Patterns
+
+**Implement efficient resolvers**:
+
+```javascript
+const resolvers = {
+  Query: {
+    user: async (_, { id }, { dataSources }) => {
+      return dataSources.userAPI.getUser(id)
+    },
+    users: async (_, { filter, page, pageSize }, { dataSources }) => {
+      return dataSources.userAPI.getUsers({ filter, page, pageSize })
+    },
+  },
+
+  User: {
+    posts: async (user, _, { dataSources }) => {
+      // Use DataLoader to batch requests
+      return dataSources.postAPI.getPostsByUserId(user.id)
+    },
+  },
+
+  Mutation: {
+    createUser: async (_, { input }, { dataSources, user }) => {
+      // Check authorization
+      if (!user) throw new AuthenticationError("Not authenticated")
+
+      // Validate input
+      const validatedInput = validateUserInput(input)
+
+      // Create user
+      return dataSources.userAPI.createUser(validatedInput)
+    },
+  },
+}
+```
+
+### 3. DataLoader for N+1 Prevention
+
+**Batch and cache database queries**:
+
+```javascript
+import DataLoader from "dataloader"
+
+const userLoader = new DataLoader(async (userIds) => {
+  const users = await db.users.findMany({
+    where: { id: { in: userIds } },
+  })
+
+  // Return in same order as input
+  return userIds.map((id) => users.find((u) => u.id === id))
+})
+
+// Usage in resolver
+const user = await userLoader.load(userId)
+```
+
+## API Versioning
+
+### 1. URL Versioning
+
+**Version in the URL path**:
+
+```
+GET /v1/users
+GET /v2/users
+```
+
+**Pros**: Clear, easy to route  
+**Cons**: URL changes, harder to maintain multiple versions
+
+### 2. Header Versioning
+
+**Version in Accept header**:
+
+```
+GET /users
+Accept: application/vnd.myapi.v2+json
+```
+
+**Pros**: Clean URLs, flexible  
+**Cons**: Less visible, harder to test
+
+### 3. Deprecation Strategy
+
+**Communicate deprecation clearly**:
+
+```javascript
+// Response headers
+Deprecation: true
+Sunset: Sat, 31 Dec 2024 23:59:59 GMT
+Link: <https://api.example.com/v2/users>; rel="successor-version"
+
+// Response body
+{
+  "data": {...},
+  "meta": {
+    "deprecated": true,
+    "deprecationDate": "2024-12-31",
+    "migrationGuide": "https://docs.example.com/migration/v1-to-v2"
+  }
+}
+```
+
+## Authentication & Authorization
+
+### 1. JWT Tokens
+
+**Use JWT for stateless auth**:
+
+```javascript
+// Token structure
+{
+  "sub": "user-123",
+  "email": "user@example.com",
+  "role": "admin",
+  "iat": 1516239022,
+  "exp": 1516242622
+}
+
+// Middleware
+function authenticateToken(req, res, next) {
+  const token = req.headers.authorization?.split(' ')[1];
+
+  if (!token) {
+    return res.status(401).json({ error: 'No token provided' });
+  }
+
+  try {
+    const decoded = jwt.verify(token, process.env.JWT_SECRET);
+    req.user = decoded;
+    next();
+  } catch (error) {
+    return res.status(401).json({ error: 'Invalid token' });
+  }
+}
+```
+
+### 2. Role-Based Access Control
+
+**Implement RBAC**:
+
+```javascript
+function authorize(...roles) {
+  return (req, res, next) => {
+    if (!req.user) {
+      return res.status(401).json({ error: "Not authenticated" })
+    }
+
+    if (!roles.includes(req.user.role)) {
+      return res.status(403).json({ error: "Insufficient permissions" })
+    }
+
+    next()
+  }
+}
+
+// Usage
+app.delete("/users/:id", authenticateToken, authorize("admin"), deleteUser)
+```
+
+## Best Practices
+
+1. **Use HTTPS everywhere** - Encrypt all API traffic
+2. **Implement rate limiting** - Prevent abuse and ensure fair usage
+3. **Validate all inputs** - Never trust client data
+4. **Use proper error handling** - Return meaningful error messages
+5. **Document your API** - Use OpenAPI/Swagger or GraphQL introspection
+6. **Version your API** - Plan for breaking changes
+7. **Implement CORS properly** - Configure allowed origins carefully
+8. **Log requests and errors** - Enable debugging and monitoring
+9. **Use caching** - Implement ETags, Cache-Control headers
+10. **Test thoroughly** - Unit, integration, and contract tests
+
+## Anti-Patterns
+
+- ❌ **Exposing internal IDs** - Use UUIDs or opaque identifiers
+- ❌ **Returning too much data** - Support field selection
+- ❌ **Ignoring idempotency** - PUT/PATCH/DELETE should be idempotent
+- ❌ **Inconsistent naming** - Use camelCase or snake_case consistently
+- ❌ **Missing pagination** - Always paginate collections
+- ❌ **No rate limiting** - Protect against abuse
+- ❌ **Verbose error messages** - Don't leak implementation details
+- ❌ **Synchronous long operations** - Use async jobs for long tasks
+
+## References
+
+- REST API Design Rulebook by Mark Masse
+- GraphQL Best Practices (graphql.org)
+- API Design Patterns by JJ Geewax
+- OpenAPI Specification (swagger.io)

package/.plcode/context/development/backend/navigation.md

@@ -0,0 +1,55 @@
+# Backend Development Navigation
+
+**Purpose**: Server-side development patterns
+
+**Status**: 🚧 Placeholder - Content coming soon
+
+---
+
+## Planned Structure
+
+```
+backend/
+├── navigation.md
+│
+├── api-patterns/              # Approach-based
+│   ├── rest-design.md
+│   ├── graphql-design.md
+│   ├── grpc-patterns.md
+│   └── trpc-patterns.md
+│
+├── nodejs/                    # Tech-specific
+│   ├── express-patterns.md
+│   ├── fastify-patterns.md
+│   └── nextjs-api-routes.md
+│
+├── python/
+│   ├── fastapi-patterns.md
+│   └── django-patterns.md
+│
+├── authentication/            # Functional concern
+│   ├── jwt-patterns.md
+│   ├── oauth-patterns.md
+│   └── session-management.md
+│
+└── middleware/
+    ├── logging.md
+    ├── rate-limiting.md
+    └── cors.md
+```
+
+---
+
+## For Now
+
+Use specialized navigation: `../backend-navigation.md`
+
+Also see: `../principles/api-design.md`
+
+---
+
+## Related Context
+
+- **Backend Navigation** → `../backend-navigation.md`
+- **API Design Principles** → `../principles/api-design.md`
+- **Core Standards** → `../../core/standards/code-quality.md`

package/.plcode/context/development/backend-navigation.md

@@ -0,0 +1,77 @@
+# Backend Development Navigation
+
+**Scope**: Server-side, APIs, databases, auth
+
+---
+
+## Structure
+
+```
+development/backend/           # [future]
+├── navigation.md
+│
+├── api-patterns/              # Approach-based
+│   ├── rest-design.md
+│   ├── graphql-design.md
+│   ├── grpc-patterns.md
+│   └── websocket-patterns.md
+│
+├── nodejs/                    # Tech-specific
+│   ├── express-patterns.md
+│   ├── fastify-patterns.md
+│   └── error-handling.md
+│
+├── python/
+│   ├── fastapi-patterns.md
+│   └── django-patterns.md
+│
+├── authentication/            # Functional concern
+│   ├── jwt-patterns.md
+│   ├── oauth-patterns.md
+│   └── session-management.md
+│
+└── middleware/
+    ├── logging.md
+    ├── rate-limiting.md
+    └── cors.md
+```
+
+---
+
+## Quick Routes
+
+| Task                      | Path                                              |
+| ------------------------- | ------------------------------------------------- |
+| **REST API**              | `backend/api-patterns/rest-design.md` [future]    |
+| **GraphQL**               | `backend/api-patterns/graphql-design.md` [future] |
+| **API design principles** | `principles/api-design.md`                        |
+| **Node.js**               | `backend/nodejs/express-patterns.md` [future]     |
+| **Python**                | `backend/python/fastapi-patterns.md` [future]     |
+| **Auth (JWT)**            | `backend/authentication/jwt-patterns.md` [future] |
+
+---
+
+## By Approach
+
+**REST** → `backend/api-patterns/rest-design.md` [future]
+**GraphQL** → `backend/api-patterns/graphql-design.md` [future]
+**gRPC** → `backend/api-patterns/grpc-patterns.md` [future]
+
+## By Language
+
+**Node.js** → `backend/nodejs/` [future]
+**Python** → `backend/python/` [future]
+
+## By Concern
+
+**Authentication** → `backend/authentication/` [future]
+**Middleware** → `backend/middleware/` [future]
+**Data layer** → `data/` [future]
+
+---
+
+## Related Context
+
+- **API Design Principles** → `principles/api-design.md`
+- **Core Standards** → `../core/standards/code-quality.md`
+- **Data Patterns** → `data/navigation.md` [future]

package/.plcode/context/development/clean-code.md

@@ -0,0 +1,189 @@
+# Clean Code Principles
+
+**Category**: development  
+**Purpose**: Core coding standards and best practices for writing clean, maintainable code  
+**Used by**: frontend-specialist, backend-specialist, devops-specialist, codebase-agent
+
+---
+
+## Overview
+
+Clean code is code that is easy to read, understand, and maintain. It follows consistent patterns, uses meaningful names, and is well-organized. This guide provides principles and patterns for writing clean code across all languages.
+
+## Core Principles
+
+### 1. Meaningful Names
+
+**Use intention-revealing names**:
+
+- Variable names should reveal intent
+- Function names should describe what they do
+- Class names should describe what they represent
+
+**Examples**:
+
+```javascript
+// Bad
+const d = new Date()
+const x = getUserData()
+
+// Good
+const currentDate = new Date()
+const activeUserProfile = getUserData()
+```
+
+### 2. Functions Should Do One Thing
+
+**Single Responsibility**:
+
+- Each function should have one clear purpose
+- Functions should be small (ideally < 20 lines)
+- Extract complex logic into separate functions
+
+**Example**:
+
+```javascript
+// Bad
+function processUser(user) {
+  validateUser(user)
+  saveToDatabase(user)
+  sendEmail(user)
+  logActivity(user)
+}
+
+// Good
+function processUser(user) {
+  const validatedUser = validateUser(user)
+  const savedUser = saveUserToDatabase(validatedUser)
+  notifyUser(savedUser)
+  return savedUser
+}
+```
+
+### 3. Avoid Deep Nesting
+
+**Keep nesting shallow**:
+
+- Use early returns
+- Extract nested logic into functions
+- Prefer guard clauses
+
+**Example**:
+
+```javascript
+// Bad
+function processOrder(order) {
+  if (order) {
+    if (order.items.length > 0) {
+      if (order.total > 0) {
+        // process order
+      }
+    }
+  }
+}
+
+// Good
+function processOrder(order) {
+  if (!order) return
+  if (order.items.length === 0) return
+  if (order.total <= 0) return
+
+  // process order
+}
+```
+
+### 4. DRY (Don't Repeat Yourself)
+
+**Eliminate duplication**:
+
+- Extract common logic into reusable functions
+- Use composition over inheritance
+- Create utility functions for repeated patterns
+
+### 5. Error Handling
+
+**Handle errors explicitly**:
+
+- Use try-catch for expected errors
+- Provide meaningful error messages
+- Don't ignore errors silently
+
+**Example**:
+
+```javascript
+// Bad
+function fetchData() {
+  try {
+    return api.getData()
+  } catch (e) {
+    return null
+  }
+}
+
+// Good
+async function fetchData() {
+  try {
+    return await api.getData()
+  } catch (error) {
+    logger.error("Failed to fetch data", { error })
+    throw new DataFetchError("Unable to retrieve data", { cause: error })
+  }
+}
+```
+
+## Best Practices
+
+1. **Write self-documenting code** - Code should explain itself through clear naming and structure
+2. **Keep functions pure when possible** - Avoid side effects, return new values instead of mutating
+3. **Use consistent formatting** - Follow language-specific style guides (Prettier, ESLint, etc.)
+4. **Write tests first** - TDD helps design better APIs and catch issues early
+5. **Refactor regularly** - Improve code structure as you learn more about the domain
+6. **Comment why, not what** - Code shows what, comments explain why
+7. **Use type systems** - TypeScript, type hints, or static analysis tools
+8. **Favor composition** - Build complex behavior from simple, reusable pieces
+
+## Anti-Patterns
+
+- ❌ **Magic numbers** - Use named constants instead of hardcoded values
+- ❌ **God objects** - Classes that do too much or know too much
+- ❌ **Premature optimization** - Optimize for readability first, performance second
+- ❌ **Clever code** - Simple and clear beats clever and complex
+- ❌ **Long parameter lists** - Use objects or configuration patterns instead
+- ❌ **Boolean flags** - Often indicate a function doing multiple things
+- ❌ **Mutable global state** - Leads to unpredictable behavior and bugs
+
+## Language-Specific Guidelines
+
+### JavaScript/TypeScript
+
+- Use `const` by default, `let` when needed, never `var`
+- Prefer arrow functions for callbacks
+- Use async/await over raw promises
+- Destructure objects and arrays for clarity
+
+### Python
+
+- Follow PEP 8 style guide
+- Use list comprehensions for simple transformations
+- Prefer context managers (`with` statements)
+- Use type hints for function signatures
+
+### Go
+
+- Follow effective Go guidelines
+- Use defer for cleanup
+- Handle errors explicitly
+- Keep interfaces small
+
+### Rust
+
+- Embrace ownership and borrowing
+- Use pattern matching
+- Prefer iterators over loops
+- Handle errors with Result types
+
+## References
+
+- Clean Code by Robert C. Martin
+- The Pragmatic Programmer by Hunt & Thomas
+- Refactoring by Martin Fowler