1---2name: architecture-paradigm-client-server-33description: Model system responsibilities across clients, servers, and optional peer-to-peer nodes for traditional distributed applications. Triggers: client-server, web architecture, mobile backend, API design, thin client, thick client, peer-to-peer, P2P, offline-first, synchronization Use when: traditional web/mobile applications with centralized services, clear separation between client and server responsibilities needed DO NOT use when: selecting from multiple paradigms - use architecture-paradigms first. DO NOT use when: peer-to-peer dominates - consider dedicated P2P patterns. Consult this skill when designing client-server systems or API architectures.4---56# The Client-Server and Peer-to-Peer Paradigms78## When to Employ This Paradigm9- For traditional applications that have centralized services, such as web or mobile clients communicating with backend APIs.10- For systems exploring decentralized or "offline-first" capabilities that rely on peer-to-peer synchronization.11- To formally document trust boundaries, client-server version negotiation, and API evolution strategies.1213## Adoption Steps141. **Define Responsibilities**: Clearly delineate which logic and data reside on the client versus the server, with the goal of minimizing duplication.152. **Document the Contracts**: Formally document all APIs, data schemas, authentication flows, and any capability negotiation required for handling different client versions.163. **Plan for Version Skew**: Implement a strategy to manage different client and server versions, such as using feature flags, `Accept` headers for content negotiation, or semantic versioning for APIs.174. **Address Connectivity Issues**: If the application is not purely client-server, design for intermittent connectivity. This may involve implementing offline caching, data synchronization protocols, or peer discovery and membership services.185. **Secure All Communications**: Enforce the use of TLS for all data in transit. Implement authorization policies, rate limiting, and detailed telemetry for every endpoint.1920## Key Deliverables21- An Architecture Decision Record (ADR) that covers the roles of clients, servers, and peers, defines the trust boundaries, and outlines deployment assumptions.22- Formal API or protocol specifications, along with a suite of compatibility tests.23- Runbooks detailing the coordination required for rollouts, such as client release waves, backward-compatibility support, or operational procedures for a peer-to-peer network.2425## Risks & Mitigations26- **"Chatty" Clients**:27 - **Mitigation**: A client making too many small requests can lead to poor performance. Consolidate API calls using patterns like the Façade or Gateway, and implement caching strategies on the client or at the network edge.28- **"Thick" Clients with Duplicated Logic**:29 - **Mitigation**: When clients contain too much business logic, it often becomes duplicated and out-of-sync with the server. Share validation logic by packaging it in a common library or move the rules definitively to the server.30- **Peer-to-Peer Data Conflicts**:31 - **Mitigation**: In a peer-to-peer model, data conflicts are inevitable. Design formal conflict resolution strategies (e.g., CRDTs, last-write-wins) and consensus mechanisms from the beginning.
majiayu000