vibes-plug 2.11.0 → 2.14.1

package/skills/design-system-architect/SKILL.md

@@ -215,6 +215,30 @@ import { Dialog, Button, Select } from '@base-ui-components/react';
 </Dialog.Root>
 ```
 
+### The 4 Pillars of UI Components Catalog
+
+#### 1. Input Controls (Buttons, Inputs, Selects)
+- **Visual States**: Explicitly define `default`, `hover`, `active`, `focus`, `disabled`, and `error`.
+- **Validation**: Display inline validation on blur using `aria-invalid` and `aria-describedby` (React Hook Form + Zod).
+- **Touch Targets**: Minimum 44×44px (WCAG 2.5.8), M3 recommends 48×48px.
+- **M3 Integration**: Use M3 button tiers (Filled, Tonal, Elevated, Outlined, Text) and FABs for primary actions.
+
+#### 2. Navigation (Navbars, Tabs, Command Palettes)
+- **Command Palette**: Add `⌘K` command menu via `cmdk`.
+- **Responsive Layout**: Bottom nav (<768px), collapsible rail (tablet), full sidebar (desktop).
+- **Smooth Page Transitions**: In Next.js 15, leverage `<Link viewTransition>` for layout morphing.
+- **Active State**: Clear high-contrast indicator with `role="navigation"` and `aria-current="page"`.
+
+#### 3. Information & Feedback (Toasts, Skeletons, Empty States)
+- **Toasts**: Use **Sonner**; cap at max 3 concurrent visible toasts. Auto-dismiss success, keep errors persistent.
+- **Loading UX**: Use layout-matching Skeletons over spinners to eliminate Cumulative Layout Shift (CLS).
+- **Empty States**: Clear illustration, contextual message, and primary CTA.
+
+#### 4. Containers & Layout (Cards, Modals, Sheets)
+- **Modals & Dialogs**: Radix UI / Base UI Dialog with automatic focus trapping and background scroll lock.
+- **Sheets / Drawers**: Bottom sheet for mobile secondary actions; side sheet on desktop.
+- **Cards**: Flat border or subtle shadow (`shadow-sm`); avoid heavy drop shadows in light mode.
+
 ### WCAG 2.2 Accessibility Checklist
 - [ ] All interactive elements have visible focus indicators (`ring-2`).
 - [ ] Color contrast ≥ 4.5:1 (text), ≥ 3:1 (large text / UI components).
@@ -266,6 +290,12 @@ shadcn/ui v2 memperkenalkan sistem registry — distribusikan komponen Anda seba
 ### Base UI 1.x — Primitif Aksesibilitas Tanpa Gaya
 Base UI (dari tim MUI) adalah alternatif Radix UI untuk 2026 dengan dukungan native React 19. Sepenuhnya tanpa gaya — terapkan className/Tailwind apapun.
 
+### Katalog 4 Pilar Komponen UI
+1. **Input Controls (Tombol, Input, Select)**: Definisikan status visual (`default`, `hover`, `active`, `focus`, `disabled`, `error`). Tampilkan validasi inline on-blur (`aria-invalid`, `aria-describedby` via React Hook Form + Zod). Target sentuh minimal 44x44px.
+2. **Navigasi (Navbar, Tab, Command Palette)**: Sediakan menu perintah `⌘K` dengan `cmdk`. Layout responsif (navigasi bawah di mobile, rail di tablet, sidebar penuh di desktop). Transisi halaman halus via `<Link viewTransition>` di Next.js 15.
+3. **Informasi & Feedback (Toast, Skeleton, Empty State)**: Gunakan **Sonner** untuk toast (maksimal 3 bersamaan). Gunakan Skeleton sesuai tata letak untuk mencegah CLS dibanding spinner.
+4. **Wadah & Layout (Card, Modal, Sheet)**: Dialog/Modal dengan penguncian scroll dan focus trapping otomatis (Base UI/Radix). Gunakan bottom sheet di mobile dan side sheet di desktop.
+
 ### Checklist Aksesibilitas WCAG 2.2
 - Semua elemen interaktif memiliki indikator fokus yang terlihat.
 - Kontras warna ≥ 4.5:1 (teks), ≥ 3:1 (komponen UI).
@@ -276,4 +306,4 @@ Base UI (dari tim MUI) adalah alternatif Radix UI untuk 2026 dengan dukungan nat
 
 
 ## Orchestration & Integration
-- Integrates with frontend orchestrators, Tailwind v4, Base UI, and shadcn/ui.
+- Integrates with frontend orchestrators, Tailwind v4, Base UI, and shadcn/ui.

package/skills/email-notification-expert/SKILL.md

@@ -295,6 +295,29 @@ export async function POST(request: Request) {
 
 ---
 
+### 7. Mobile Push Notifications & iOS Live Activities
+
+```typescript
+import * as Notifications from 'expo-notifications';
+
+// Register for push tokens (Expo Push / FCM / APNs)
+export async function registerForPushNotificationsAsync() {
+  const { status: existingStatus } = await Notifications.getPermissionsAsync();
+  let finalStatus = existingStatus;
+  if (existingStatus !== 'granted') {
+    const { status } = await Notifications.requestPermissionsAsync();
+    finalStatus = status;
+  }
+  if (finalStatus !== 'granted') return null;
+  return (await Notifications.getExpoPushTokenAsync()).data;
+}
+```
+- **Expo Push & FCM**: Send batched push notifications with deep links, actions, and custom data payloads.
+- **iOS Live Activities / Dynamic Island**: Update real-time status (orders, deliveries, live events) using ActivityKit.
+- **Push Token Lifecycle**: Save push tokens to database associated with `userId`; handle token rotation and app reinstall events.
+
+---
+
 ### Common Pitfalls to Avoid
 
 | Anti-Pattern | Problem | Correct Approach |
@@ -349,6 +372,11 @@ Aktifkan skill ini ketika:
 
 **Rekomendasi**: Gunakan **Resend** untuk kebanyakan proyek baru (DX terbaik dengan React Email). Gunakan **Postmark** untuk email transaksional misi-kritis. Gunakan **AWS SES** untuk optimasi biaya volume tinggi (10k+/hari).
 
+### Notifikasi Push Mobile & iOS Live Activities
+- **Expo Push & FCM**: Kirim notifikasi push masal dengan payload kustom, aksi tombol, dan deep linking ke rute aplikasi (Expo Router).
+- **iOS Live Activities**: Tampilkan status dinamis secara real-time pada Dynamic Island dan Lock Screen iOS menggunakan ActivityKit.
+- **Siklus Hidup Push Token**: Simpan token push ke database per `userId` dan tangani event rotasi token saat instal ulang aplikasi.
+
 ### Kesalahan Umum yang Harus Dihindari
 
 | Anti-Pola | Masalah | Pendekatan yang Benar |
@@ -361,8 +389,7 @@ Aktifkan skill ini ketika:
 ### Integrasi dengan Skill Lain
 
 - `saas-billing` — Email kuitansi pembayaran, sekuens dunning gagal bayar
-- `saas-transformer` — Email undangan tim, notifikasi workspace
+- `saas-architect` — Email undangan tim, notifikasi workspace
 - `authentication-identity-expert` — Email reset password, verifikasi email, kode MFA
-- `mobile-push-notification-expert` — Strategi notifikasi terpadu (email + push + in-app)
-- `async-queue-temporal-expert` — Worker antrean email dengan BullMQ/Inngest
-- `production-ready-hardener` — Audit deliverabilitas email sebelum peluncuran
+- `async-queue-temporal-expert` — Worker antrean pengiriman email & push dengan BullMQ/Inngest
+- `production-ready-hardener` — Audit deliverabilitas email sebelum peluncuran

package/skills/error-resilience-expert/SKILL.md

@@ -411,6 +411,18 @@ worker.on('failed', async (job, err) => {
 
 ---
 
+### 7. Chaos Engineering & Automated Failure Injection Protocol
+
+1. **Chaos Injection**: Actively test system resilience by simulating network disruptions, killing database connections, and injecting artificial latency (500ms–5000ms) or dropped packets using Toxiproxy or mock network middleware.
+2. **Failure Observation**: Monitor application behavior under duress. Check whether the UI hangs, returns blank screens, or if connections leak.
+3. **Automated Resilience Hardening**:
+   - Implement Circuit Breakers around fragile external API dependencies.
+   - Add exponential backoff with full jitter to avoid thundering herds.
+   - Implement graceful degradation: render cached data or contextual fallback states rather than throwing unhandled exceptions.
+4. **Resilience Verification**: Re-run the disruption loop until all failure modes are safely caught, logged to Sentry, and recovered from automatically.
+
+---
+
 ### Common Pitfalls to Avoid
 
 | Anti-Pattern | Problem | Correct Approach |
@@ -466,6 +478,15 @@ Aktifkan skill ini ketika:
 | **Isolasi Kegagalan** | Komponen yang gagal tidak boleh menghancurkan seluruh halaman |
 | **Lacak Semuanya** | Setiap error yang tidak tertangani harus sampai ke sistem monitoring |
 
+### Protokol Chaos Engineering & Injeksi Kegagalan Otomatis
+1. **Injeksi Kekacauan (Chaos Injection)**: Uji ketahanan dengan sengaja memutuskan koneksi database, menyuntikkan latensi jaringan (Toxiproxy), atau membuang paket request ke API eksternal.
+2. **Observasi Kegagalan**: Periksa apakah UI macet, layar menjadi putih kosong, atau connection pool bocor saat dependensi bermasalah.
+3. **Hardening Ketahanan Otomatis**:
+   - Terapkan Circuit Breaker pada panggilan API eksternal yang rentan.
+   - Tambahkan retry dengan exponential backoff dan random jitter.
+   - Terapkan degradasi anggun (*graceful degradation*): sajikan data cache atau UI fallback alternatif.
+4. **Verifikasi Ketahanan**: Ulangi simulasi gangguan hingga sistem bertahan tanpa crash fatal dan seluruh error tercatat di Sentry.
+
 ### Kesalahan Umum yang Harus Dihindari
 
 | Anti-Pola | Masalah | Pendekatan yang Benar |

package/skills/fullstack-expert/SKILL.md

@@ -1,261 +1,184 @@
----
-name: fullstack-expert
-description: "Expert-level fullstack development guide covering multi-language (TypeScript, Python, Go, Rust), multi-framework (Next.js, FastAPI, Gin, Axum), API design, microservices, DevOps, and system design / Panduan fullstack tingkat ahli mencakup multi-bahasa (TypeScript, Python, Go, Rust), multi-framework (Next.js, FastAPI, Gin, Axum), desain API, microservices, DevOps, dan system design."
+---
+name: fullstack-expert
+description: "Expert-level fullstack development guide covering multi-language (TypeScript, Python, Go, Rust), API design (OpenAPI 3.1, gRPC), microservices, system design patterns, and polyglot architecture / Panduan fullstack tingkat ahli mencakup multi-bahasa, desain API, microservices, dan arsitektur polyglot."
 author: "Roedy Rustam"
----
-
-# Fullstack Expert (2026 Multi-Language Edition)
-
-[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
-
----
-
-<a name="english"></a>
-## English
-
-### Orchestration & Integration
-Connects and orchestrates with relevant domain skills like `brainstorming`, `zero-to-prod-orchestrator`, and `project-context-mapper` to ensure cohesive execution.
-
-### Description
-Expert-level fullstack development across multiple languages and frameworks. Covers tech stack selection, API design (REST/gRPC/GraphQL), microservice architecture, DevOps, system design patterns, and AI-native backend integration for 2026.
-
-### Trigger Conditions
-- Choosing the right language and framework for a new service or feature.
-- Designing APIs between services in a multi-language architecture.
-- Planning a microservices decomposition strategy.
-- Implementing system design patterns (event sourcing, CQRS, saga pattern).
-- Integrating AI agents or LLM capabilities into a backend system.
-
-### 2026 Technology Matrix
-
-#### Frontend
-| Tool | Version | Notes |
-|---|---|---|
-| React | 19.x | Compiler, Server Actions, `use()` hook |
-| Next.js | 15.x | PPR, RSC, App Router stable |
-| Astro | 5.x | Islands architecture, MDX, SSG |
-| TanStack Router | 1.x | Type-safe SPA routing |
-| TanStack Start | Beta | Full-stack Vite + RSC patterns |
-| Nuxt | 4.x | Vue 3 SSR/SSG, stable |
-| SvelteKit | 2.x | Lightweight, edge-ready |
-
-#### Backend
-| Language | Framework | Best For |
-|---|---|---|
-| TypeScript | Hono, Fastify 5, NestJS | Serverless, edge, type-safe RPC |
-| Python | FastAPI 0.115+, Django 5 | AI/ML workloads, data pipelines |
-| Go | net/http (1.22+), Gin, Echo | High-throughput microservices, CLI |
-| Rust | Axum 0.8, Actix-web 4 | Performance-critical, WASM |
-
-#### AI & Agents
-| Tool | Role |
-|---|---|
-| Vercel AI SDK 5.x | Full-stack AI streaming, RSC |
-| Mastra.ai | TS-first agent framework |
-| LangGraph | Python stateful agent workflows |
-| OpenAI Agents SDK | GPT-5 native agents + handoffs |
-| Google ADK | Gemini-powered agents |
-| Mem0 / MemGPT | Long-term agent memory |
-
-#### Infrastructure
-| Category | Tools |
-|---|---|
-| Container | Docker, Podman |
-| Orchestration | Kubernetes, Railway, Fly.io |
-| CI/CD | GitHub Actions, Turborepo |
-| Observability | OpenTelemetry 1.x, Grafana, Langfuse |
-| Databases | PostgreSQL (primary), ClickHouse (analytics), Redis (cache), Qdrant (vector) |
-
-### API Design Standards
-
-#### REST — OpenAPI 3.1
-```yaml
-# openapi.yaml
-openapi: "3.1.0"
-info:
-  title: "My SaaS API"
-  version: "1.0.0"
-paths:
-  /api/v1/workspaces/{id}:
-    get:
-      summary: "Get workspace by ID"
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema: { type: string, format: uuid }
-      responses:
-        "200":
-          content:
-            application/json:
-              schema: { $ref: "#/components/schemas/Workspace" }
-        "404":
-          content:
-            application/json:
-              schema: { $ref: "#/components/schemas/ProblemDetail" }
-```
-
-#### gRPC — Protocol Buffers
-```protobuf
-syntax = "proto3";
-package user.v1;
-
-service UserService {
-  rpc GetUser (GetUserRequest) returns (User);
-  rpc ListUsers (ListUsersRequest) returns (stream User);  // Server streaming
-  rpc CreateUser (CreateUserRequest) returns (User);
-}
-
-message User {
-  string id = 1;
-  string email = 2;
-  string name = 3;
-  repeated string workspace_ids = 4;
-}
-```
-
-### Microservice Patterns
-
-#### Event-Driven (Saga Pattern)
-```
-Order Service ──publishes──> "order.created" ──> Payment Service
-                                                      │
-                                               ┌──────┴──────┐
-                                          success?       failure?
-                                              │               │
-                                   "payment.succeeded"  "payment.failed"
-                                              │               │
-                                      Inventory Service  Order Service
-                                      (reserve stock)    (cancel order)
-```
-
-#### CQRS (Command Query Responsibility Segregation)
-- **Write side**: Commands update the primary PostgreSQL database.
-- **Read side**: Events are projected into read-optimized views (denormalized tables or ClickHouse).
-- Use when read patterns are very different from write patterns.
-
-### AI-Native Backend Integration (2026)
-```typescript
-// Pattern: AI as a service within existing API
-import { generateObject } from 'ai';
-import { anthropic } from '@ai-sdk/anthropic';
-import { z } from 'zod';
-
-// AI endpoint that returns structured data
-app.post('/api/analyze', async (c) => {
-  const { content } = await c.req.json();
-
-  const { object } = await generateObject({
-    model: anthropic('claude-4-sonnet'),
-    schema: z.object({
-      sentiment: z.enum(['positive', 'neutral', 'negative']),
-      topics: z.array(z.string()),
-      summary: z.string().max(200),
-    }),
-    prompt: `Analyze this content: ${content}`,
-  });
-
-  return c.json(object);
-});
-```
-
-### SPA vs SSR vs Static — Decision Guide
-```
-SEO-critical + mostly read? → Next.js SSR / Astro 5 (static)
-Highly interactive dashboard? → SPA (TanStack Start / Vite + TanStack Router)
-   → see spa-orchestrator skill for architecture details
-Mixed (marketing + app)?    → Next.js 15 with hybrid routing
-Real-time data?             → SSR + WebSocket or SSE streaming
-```
-
-### Monorepo with Shared Types
-```typescript
-// packages/types/src/index.ts — single source of truth
-export interface User {
-  id: string;
-  email: string;
-  name: string;
-  plan: 'free' | 'pro' | 'enterprise';
-  isSuperAdmin: boolean;
-}
-
-// apps/api & apps/web use the same type
-import type { User } from '@myapp/types';
-```
-
-### Security Checklist (Fullstack)
-- [ ] All user inputs validated with Zod on the server.
-- [ ] JWT secrets rotated every 90 days; use short expiry + refresh tokens.
-- [ ] CSP headers configured (no `unsafe-inline` in production).
-- [ ] All DB queries use parameterized queries.
-- [ ] Rate limiting on all public API endpoints.
-- [ ] Super Admin routes restricted to `admin.domain.com` with `isSuperAdmin` check.
-
-### Code Review Standards
-- Functions < 30 lines; files < 300 lines.
-- No business logic in UI components.
-- Every PR includes relevant tests (unit or E2E).
-- No `any` types in TypeScript production code.
-- Dependencies audited with `pnpm audit` on every PR.
-
----
-
-<a name="bahasa-indonesia"></a>
-## Bahasa Indonesia
-
-### Integrasi Orkestrasi
-Terhubung dan mengorkestrasi skill domain yang relevan seperti `brainstorming`, `zero-to-prod-orchestrator`, dan `project-context-mapper` untuk memastikan eksekusi yang kohesif.
-
-### Deskripsi
-Panduan pengembangan fullstack tingkat ahli di berbagai bahasa dan framework. Mencakup pemilihan tech stack, desain API (REST/gRPC/GraphQL), arsitektur microservice, DevOps, pola desain sistem, dan integrasi backend AI-native untuk 2026.
-
-### Kondisi Pemicu
-- Memilih bahasa dan framework yang tepat untuk layanan atau fitur baru.
-- Merancang API antar layanan dalam arsitektur multi-bahasa.
-- Merencanakan strategi dekomposisi microservice.
-- Mengimplementasikan pola desain sistem (event sourcing, CQRS, saga pattern).
-- Mengintegrasikan agen AI atau kemampuan LLM ke dalam sistem backend.
-
-### Matriks Teknologi 2026
-
-#### Frontend
-React 19 + Next.js 15 (default SaaS), Astro 5 (konten), TanStack Router (SPA), Nuxt 4 (Vue), SvelteKit 2.
-
-#### Backend
-TypeScript/Hono (serverless, edge), Python/FastAPI (AI/ML), Go/net/http (throughput tinggi), Rust/Axum (kritis performa).
-
-#### AI & Agen
-Vercel AI SDK 5.x, Mastra.ai, LangGraph, OpenAI Agents SDK, Google ADK, Mem0/MemGPT untuk memori agen jangka panjang.
-
-#### Infrastruktur
-Docker/Kubernetes, GitHub Actions + Turborepo, OpenTelemetry 1.x, Langfuse. Database: PostgreSQL (utama), ClickHouse (analitik), Redis (cache), Qdrant (vektor).
-
-### Standar Desain API
-- **REST + OpenAPI 3.1**: Untuk API publik dengan beberapa konsumen.
-- **gRPC**: Untuk komunikasi antar layanan internal berkinerja tinggi.
-- **Hono RPC / tRPC**: Untuk komunikasi full-stack TypeScript type-safe tanpa codegen.
-
-### Pola Microservice
-
-#### Event-Driven (Saga Pattern)
-Orkestrasi transaksi terdistribusi melalui event — setiap layanan mempublikasikan event setelah berhasil; kegagalan memicu kompensasi di seluruh rantai.
-
-#### CQRS
-Pisahkan sisi tulis (PostgreSQL) dari sisi baca (view terdenormalisasi atau ClickHouse) ketika pola baca sangat berbeda dari pola tulis.
-
-### Integrasi Backend AI-Native (2026)
-Gunakan Vercel AI SDK `generateObject()` dengan skema Zod untuk mengintegrasikan kemampuan AI ke endpoint API yang ada — mengembalikan output terstruktur yang dijamin sesuai tipe.
-
-### SPA vs SSR vs Static
-Gunakan SSR/Astro untuk situs kritis SEO dan banyak baca. Gunakan SPA (TanStack Start) untuk dashboard yang sangat interaktif. Gunakan Next.js 15 dengan routing hybrid untuk aplikasi campuran (marketing + app).
-
-### Monorepo dengan Shared Types
-Definisikan interface dan tipe bersama di `packages/types` — digunakan oleh semua app (web, admin, api, mobile) sebagai single source of truth.
-
-### Checklist Keamanan & Code Review
-- Input pengguna divalidasi Zod di server.
-- Header CSP dikonfigurasi & parameterized query untuk DB.
-- Rate limiting di semua endpoint publik.
-- Rute Super Admin dibatasi di subdomain dengan cek `isSuperAdmin`.
-- Tidak ada logika bisnis di komponen UI; wajib ada unit/E2E test pada PR.
-- Tidak ada tipe `any` pada kode TypeScript produksi.
+---
+
+# Fullstack Expert (2026 Polyglot & Systems Edition)
+
+[English](#english) | [Bahasa Indonesia](#bahasa-indonesia)
+
+---
+
+<a name="english"></a>
+## English
+
+### Orchestration & Integration
+Connects and orchestrates with domain skills like `brainstorming`, `zero-to-prod-orchestrator`, `senior-frontend`, `js-backend-expert`, `go-programming-expert`, `python-programming-expert`, and `rust-programming-expert`.
+
+### Description
+Expert-level fullstack development across multiple languages and frameworks. Focuses on polyglot backend architectures, system design patterns (Event-Driven Saga, CQRS), API contracts (OpenAPI 3.1, gRPC), and monorepo shared types.
+
+### Trigger Conditions
+- Choosing the right language and framework for a multi-service architecture.
+- Designing API contracts (REST, gRPC, Hono RPC) between heterogeneous services.
+- Implementing distributed system design patterns (Saga, CQRS).
+- Setting up a polyglot monorepo with shared types across frontend and backend.
+
+---
+
+### 2026 Polyglot Architecture Matrix
+
+> For comprehensive frontend UI architecture, see `senior-frontend` and `nextjs-app-router-expert`.
+> For dedicated AI agent workflows and LLM integrations, see `ai-llm-integration-expert` and `multi-agent-orchestration`.
+
+| Language | Primary Frameworks | Ideal Workloads |
+|---|---|---|
+| **TypeScript** | Hono, Fastify 5, NestJS | Serverless, Edge APIs, type-safe RPC |
+| **Python** | FastAPI 0.115+, Django 5 | Data science, LLM orchestration, async queues |
+| **Go** | net/http (Go 1.25+), Gin, Echo | Ultra-high throughput microservices, networking, CLIs |
+| **Rust** | Axum 0.8, Actix-web 4 | High-performance compute, memory safety, WASM |
+
+#### Infrastructure & Multi-Service Storage
+- **Primary OLTP**: PostgreSQL with connection pooling (PgBouncer / Supavisor).
+- **Analytics OLAP**: ClickHouse / DuckDB for high-speed aggregations.
+- **Cache & Ephemeral State**: Redis / Upstash with TTL.
+- **Vector Search**: pgvector or Qdrant for semantic search.
+
+---
+
+### API Design Standards
+
+#### REST — OpenAPI 3.1
+```yaml
+openapi: "3.1.0"
+info:
+  title: "SaaS Multi-Service API"
+  version: "1.0.0"
+paths:
+  /api/v1/workspaces/{id}:
+    get:
+      summary: "Get workspace by ID"
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema: { type: string, format: uuid }
+      responses:
+        "200":
+          content:
+            application/json:
+              schema: { $ref: "#/components/schemas/Workspace" }
+        "404":
+          content:
+            application/json:
+              schema: { $ref: "#/components/schemas/ProblemDetail" }
+```
+
+#### gRPC — Protocol Buffers (`proto3`)
+```protobuf
+syntax = "proto3";
+package user.v1;
+
+service UserService {
+  rpc GetUser (GetUserRequest) returns (User);
+  rpc ListUsers (ListUsersRequest) returns (stream User);
+  rpc CreateUser (CreateUserRequest) returns (User);
+}
+
+message User {
+  string id = 1;
+  string email = 2;
+  string name = 3;
+  repeated string workspace_ids = 4;
+}
+```
+
+---
+
+### Microservice Patterns
+
+#### Event-Driven (Saga Pattern with Compensations)
+```
+Order Service ──publishes──> "order.created" ──> Payment Service
+                                                      │
+                                               ┌──────┴──────┐
+                                          success?       failure?
+                                               │               │
+                                    "payment.succeeded"  "payment.failed"
+                                               │               │
+                                       Inventory Service  Order Service
+                                       (reserve stock)    (cancel order)
+```
+
+#### CQRS (Command Query Responsibility Segregation)
+- **Write side**: Commands validate and update the primary relational database.
+- **Read side**: Events project into read-optimized denormalized views or ClickHouse tables for high-frequency queries.
+
+---
+
+### AI-Native Backend Integration
+```typescript
+import { generateObject } from 'ai';
+import { anthropic } from '@ai-sdk/anthropic';
+import { z } from 'zod';
+
+app.post('/api/analyze', async (c) => {
+  const { content } = await c.req.json();
+  const { object } = await generateObject({
+    model: anthropic('claude-3-7-sonnet-20250219'),
+    schema: z.object({
+      sentiment: z.enum(['positive', 'neutral', 'negative']),
+      topics: z.array(z.string()),
+      summary: z.string().max(200),
+    }),
+    prompt: `Analyze: ${content}`,
+  });
+  return c.json(object);
+});
+```
+
+---
+
+### Monorepo with Shared Types
+```typescript
+// packages/types/src/index.ts — single source of truth
+export interface User {
+  id: string;
+  email: string;
+  name: string;
+  plan: 'free' | 'pro' | 'enterprise';
+  isSuperAdmin: boolean;
+}
+```
+
+### Production Security Checklist
+- [ ] User inputs validated with Zod / Pydantic on the server.
+- [ ] Parameterized queries enforced across all database layers.
+- [ ] Rate limiting on all public endpoints (`rate-limit-abuse-prevention`).
+- [ ] Super Admin routes strictly isolated to dedicated subdomain.
+
+## Orchestration & Integration
+- Integrates with: `js-backend-expert`, `go-programming-expert`, `python-programming-expert`, `rust-programming-expert`, `nextjs-app-router-expert`, `api-design-expert`.
+
+---
+
+<a name="bahasa-indonesia"></a>
+## Bahasa Indonesia
+
+### Deskripsi
+Panduan pengembangan fullstack tingkat ahli multi-bahasa (TypeScript, Python, Go, Rust), desain kontrak API (OpenAPI 3.1, gRPC), pola arsitektur microservices (Saga, CQRS), dan monorepo shared types.
+
+### Matriks Arsitektur Polyglot 2026
+- **TypeScript**: Hono, Fastify 5, NestJS (Serverless, Cloudflare Edge, Hono RPC).
+- **Python**: FastAPI 0.115+, Django 5 (AI/ML, orkestrasi LLM, pipeline asinkron).
+- **Go**: net/http (Go 1.25+), Gin (Microservices throughput tinggi, CLI).
+- **Rust**: Axum 0.8, Actix-web 4 (Performa ekstrem, komputasi berat, WASM).
+
+### Pola Sistem Terdistribusi
+1. **Saga Pattern**: Kompensasi rollback bertahap saat transaksi multi-layanan mengalami kegagalan.
+2. **CQRS**: Memisahkan database tulis (PostgreSQL) dari view proyeksi baca (ClickHouse/Redis) untuk beban baca tinggi.
+3. **Monorepo Shared Types**: Simpan definisi tipe bersama di `packages/types` sebagai single source of truth antara frontend dan backend.
+
+## Integrasi Orkestrasi
+- Terintegrasi dengan: `js-backend-expert`, `go-programming-expert`, `python-programming-expert`, `rust-programming-expert`, `nextjs-app-router-expert`, `api-design-expert`.