backend▌

Comprehensive security middleware for REST APIs covering authentication, rate limiting, input validation, and attack prevention. \n \n Implements multiple security layers: helmet for HTTP headers, rate limiting, CORS configuration, input sanitization, and XSS/HPP protection \n Supports Node.js/Express and Python FastAPI with reference implementations for each framework \n Includes JWT-based authentication, input validation with sanitization, and security event logging \n Provides best practices

Contract testing verifies that APIs honor their contracts between consumers and providers. It ensures that service changes don't break dependent consumers without requiring full integration tests. Contract tests validate request/response formats, data types, and API behavior independently.

Standardized MCP server implementation patterns with LangChain4j for extending AI capabilities. \n \n Provides tool providers, resource providers, and prompt template patterns to expose custom capabilities through the Model Context Protocol \n Supports multiple transport mechanisms including stdio for local processes and HTTP for remote servers \n Includes Spring Boot integration, multi-server configuration, and dynamic tool discovery with context-aware filtering \n Implements security patterns

Expert guidance for Godot Engine scene creation, node management, GDScript scripting, and project architecture. \n \n Covers 2D and 3D node types, scene tree hierarchy, physics bodies, collision systems, cameras, UI controls, and animation \n Includes GDScript patterns for node references, lifecycle methods (_ready, _process, _physics_process), and input handling \n Provides project structure best practices and common workflows like character setup, camera configuration, and input management \n

Visualize Rust function call graphs with configurable depth and direction using LSP. \n \n Supports three query directions: incoming calls (who calls this), outgoing calls (what this calls), and bidirectional analysis \n Configurable traversal depth (default 3 levels) to control graph scope and complexity \n Generates ASCII tree visualizations with entry points, leaf functions, and hot path analysis \n Includes complexity insights and potential issues flagging (high fan-out, multiple callers) \n

WordPress Abilities API registration, REST exposure, and client-side consumption for WordPress 6.9+. \n \n Register abilities and categories in PHP using wp_register_ability() and wp_register_ability_category() with stable IDs, labels, and metadata \n Expose abilities to clients via the /wp-json/wp-abilities/v1/ REST endpoints by setting meta.show_in_rest: true \n Consume abilities in JavaScript using the @wordpress/abilities package for client-side access and permission checks \n Requires WordP

Navigate Rust code using Language Server Protocol for definitions, references, and symbol information. \n \n Supports three core LSP operations: go to definition, find references, and hover information for type/documentation lookup \n Handles workspace symbol search with disambiguation when multiple results exist, plus file-specific navigation with line numbers \n Includes error handling for missing rust-analyzer, typos, and generics/macros that produce multiple definitions \n Output formatted a

Connect AI agents to GraphQL APIs through the Model Context Protocol with built-in introspection and operation tools. \n \n Exposes GraphQL operations as MCP tools; supports three operation sources: local files, GraphOS Studio collections, and persisted query manifests \n Provides four introspection tools (introspect, search, validate, execute) for schema exploration and ad-hoc query testing; minification mode reduces token usage with compact notation \n Configurable authentication via static he

Negotiate job offers and compensation using strategies from product leaders. \n \n Focuses on identifying success factors beyond salary (tech debt, headcount, budget) and negotiating for those before discussing compensation \n Emphasizes collaborative language (\"Are you open to...?\") and live conversations with hiring managers over email negotiations \n Helps distinguish whether salary is the real goal or a proxy for respect, learning, autonomy, or growth \n Suggests alternative arrangements l

Structured logging, metrics, and distributed tracing patterns for Python production systems. \n \n Covers four core observability areas: structured JSON logging with structlog, Prometheus metrics for the four golden signals (latency, traffic, errors, saturation), correlation ID propagation across service boundaries, and OpenTelemetry distributed tracing \n Includes semantic log level guidance, bounded cardinality rules for metrics to prevent storage explosion, and context manager patterns for co