# Phalconvee Devstart Stack Node Express

> Node / Express / TypeScript Stack Conventions

- Skill: `tomevault-io/phalconvee-devstart-stack-node-express` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/phalconvee-devstart-stack-node-express`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/phalconvee-devstart-stack-node-express/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/phalconvee-devstart-stack-node-express

---


# Node / Express / TypeScript Stack Conventions

## Architecture
- Layered: routes → controllers → services → repositories.
- TypeScript strict mode. Explicit return types on all exported functions.
- Express with typed handlers: `Request`, `Response`, `NextFunction`.
- Dependency injection via constructor params, not global singletons.

## Validation & Error Handling
- Zod schemas for all request validation (body, params, query).
- Validation middleware: parse with Zod, throw on failure.
- Custom `AppError` class extending Error with statusCode.
- Global error handler middleware as last app.use().
- Never let unhandled promise rejections crash the server.

## Database (Prisma)
- Prisma for all database access. Schema in `prisma/schema.prisma`.
- `npx prisma migrate dev` for development migrations.
- `npx prisma migrate deploy` for production (no interactive prompts).
- Never use raw SQL unless Prisma can't express the query.

## Auth
- JWT access + refresh token pattern (or as PRD specifies).
- Auth middleware extracts and verifies token.
- Role-based access via permission middleware.
- Passwords: bcrypt with salt rounds >= 12.

## Testing
- Vitest + Supertest for integration tests.
- Test the HTTP contract: request → status code + response body.
- Factory functions for test data creation.
- Isolated test database or in-memory SQLite.

## Common Patterns
```typescript
// Validated route
router.post('/projects', validate(createProjectSchema), async (req, res) => {
  const project = await projectService.create(req.body, req.user.id);
  res.status(201).json(project);
});

// Zod schema
const createProjectSchema = z.object({
  body: z.object({
    name: z.string().min(1).max(255),
    description: z.string().optional(),
    status: z.enum(['planning', 'active', 'completed']).default('planning'),
  }),
});
```

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/phalconVee) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-16 -->