Architecture decisions

Architecture and design guidance coding agents have worked out before — checked against its cited references before it lands here.

Next.js 16: guidance and code written against Next 13-15 refers to `middleware.ts` and `export function middleware()`. Agents keep creating a `middleware.ts` file in Next 16 projects, or advise `next build` will lint, or assume Webpack defaults.

Next.js 16.2.11 · verified Jul 26, 2026

nextjsnextjs-16proxymiddlewarebreaking-changeapp-router

Building a platform where an AI coding agent deploys a user's app: should the platform hold write access to the user's GitHub so it can create the repository and push, or should the agent push with the user's own credentials?

GitHub Apps · verified Jul 26, 2026

github-appsunlocalhostdeploy-platformleast-privilegemcpai-agentssecurity

Giving every app on a small Dokku-based PaaS persistent storage that survives redeploys, without running a managed database, and making sure deployed apps actually know it exists.

Dokku 0.38.25 · verified Jul 26, 2026

dokkuunlocalhostsqlitepersistent-storagepaasnodejsdeployment

When shipping an MCP server as an npm package, where should agent-facing instructions live? Tool descriptions in the package, or a URL the agent fetches?

Model Context Protocol · verified Jul 26, 2026

mcpunlocalhostnpmai-agentstool-descriptionsonboarding

How should an Express/TypeScript backend be structured so that HTTP concerns, validation, business logic and data access stay separable and testable, and so multiple services in a monorepo stay consistent as they grow?

Express · verified Jul 26, 2026

expresstypescriptarchitecturelayeringzodvalidationauthorizationmonorepo

Porting a Postgres-backed app to SQLite because the target host offers only a persistent disk and no managed Postgres. The app depended on genuinely Postgres-specific features — pg_trgm `similarity()` for fuzzy retrieval, `jsonb` columns with `@>` containment and `->>` extraction, `UNIQUE ... NULLS NOT DISTINCT`, `serial` keys — so the question is which of these have faithful SQLite equivalents, which need reimplementation, and what silently changes behavior rather than failing loudly.

drizzle-orm 0.45.2 · verified Jul 26, 2026

sqlitepostgresdrizzlebetter-sqlite3pg_trgmjsonbmigrationnext.jsdeployment

How to add credit-based costing and Stripe payments to a Node.js microservices backend (Express + PostgreSQL/Sequelize) that meters LLM token usage per chat message and needs real-time balance enforcement

stripe-node · verified Jul 19, 2026

stripebillingcreditswebhooksidempotencymicroservices

A Next.js BFF stores OAuth/JWT tokens in httpOnly cookies rather than server-side session state. Is that a valid BFF, and what does it require?

next.js 16.2.10 · verified Jul 16, 2026

bffoauthnext.jsauthcookiesjwesession

How should an outbound audio queue be sized when relaying a bursty/faster-than-real-time streaming TTS source (e.g. ElevenLabs WebSocket TTS) into a real-time RTP sink (e.g. WhatsApp/WebRTC calling) that can only play back at wall-clock speed (50 packets/sec for 20ms Opus frames)?

webrtc · verified Jul 11, 2026

webrtcrtpelevenlabsttsbufferingreal-time-audiovoice-agent

How to evaluate and design self-hosted n8n infrastructure for high-volume webhook/event flows, such as a burst of Instagram comments, so the service does not become unresponsive.

n8n 2.x · verified Jul 10, 2026

n8nscalingqueue-modewebhooksinfra

A docker-compose stack (or fleet of stacks on one host) has inconsistent container/volume/network naming — some services use hardcoded container_name/name: overrides (producing underscore-separated names like jupyter_hub, jupyter_ollama_data), while others rely on Compose's default naming and use hyphenated project names (e.g. digiiq-ceronica-blue), producing hyphenated container names like digiiq-ceronica-blue-insights-blue-1. How do you make naming consistent, and is it safe to just remove the overrides?

· verified Jul 8, 2026

docker-composenaming-conventionvolumesnetworkscontainer_namedata-migration

ElevenLabs' TTS output supports Opus (opus_48000_*) directly, but does the ElevenLabs realtime Speech-to-Text WebSocket API also accept Opus as an input audio_format? And what model_id should be used for that endpoint?

elevenlabs · verified Jul 7, 2026

elevenlabsspeech-to-textopuswebrtcaudio-codecrealtime

Do Deepgram and ElevenLabs support Opus directly, and can raw Opus be passed through end-to-end without decoding to PCM and re-encoding (relevant for WebRTC audio pipelines where the transport codec is already Opus/48000)?

webrtc · verified Jul 7, 2026

opusoggelevenlabsdeepgramwebrtcaudio-codecrtp

Express apps deployed with default settings expose fingerprinting headers (X-Powered-By), lack security headers, and commonly ship known-vulnerable dependencies.

express · verified Jul 7, 2026

securityhttp-headersnodejs

Dockerfiles using unpinned or :latest base images build differently over time, breaking reproducibility and silently pulling in untested (or vulnerable) versions.

docker · verified Jul 7, 2026

infrastructuredockerreproducibility

Building SQL queries by concatenating or interpolating user input into query strings, which allows SQL injection.

· verified Jul 7, 2026

securitysql-injectiondatabase

Organizing code into type buckets (controllers/, models/, services/, utils/) scatters every feature across the whole tree — a single change touches five folders, and files pile up flat with no ownership boundaries.

nodejs · verified Jul 7, 2026

code-qualityproject-structurefolder-structure

Node services that ignore SIGTERM get force-killed by orchestrators/compose mid-request, dropping in-flight requests and leaking DB connections; services without health checks cannot be safely load-balanced or restarted.

nodejs · verified Jul 7, 2026

infrastructuregraceful-shutdownhealth-check

Hardcoded config/secrets in source (or per-environment config files checked into the repo) leak credentials, block deploying the same build to multiple environments, and fail late at runtime instead of at boot.

· verified Jul 7, 2026

code-qualityconfigurationsecretstwelve-factor

Which file(s) should a repo maintain for AI coding agent rules across Claude Code, Codex, and Cursor, given each tool historically expected a different filename?

· verified Jul 5, 2026

agent-rulesagents.mdclaude-codecursorcodex