ThamJiaHe/claude-code-handbook

API Development enforces REST API practices like proper status codes, RFC 7807 error responses, input validation, and centralized error handling. Use it when building routes, handling failures, or shaping consistent JSON responses.

API Security Hardening helps secure REST and GraphQL APIs against common attack vectors. Use it when adding authentication, validating input, rate limiting, handling uploads, or exposing endpoints to outside consumers.

AWS Cloud Infrastructure deploys Node.js apps on AWS with EC2, RDS, IAM, security groups, and monitoring. Use it when setting up cloud infrastructure, databases, secrets, or cost-conscious production hosting.

Build Error Resolver fixes build failures, TypeScript errors, and lint issues with minimal diffs. Use it when CI breaks or a build needs to be made green quickly.

Cybersecurity Threat Modeling applies STRIDE to application architecture to identify spoofing, tampering, disclosure, DoS, and privilege risks. Use it when designing systems, reviewing architecture, or assessing security posture.

Docker Containerization provides patterns for multi-stage Dockerfiles, compose setups, and container security hardening. Use it when building, optimizing, or deploying containerized apps.

Git Workflow enforces Conventional Commits, branch naming, PR standards, and conflict resolution for everyday Git operations. Use it when committing code, managing branches, opening PRs, or resolving merge conflicts.

Google Cloud Platform & APIs deploys Node.js apps on Cloud Run and uses Firestore, Realtime Database, OAuth 2.0, and Google APIs. Use it when building serverless apps or integrating with Google services on GCP.

Incident Response provides a structured workflow for detecting, containing, resolving, and documenting production incidents. Use it when systems are down, degraded, or behaving unexpectedly.

Monitoring & Logging implements structured logging, CloudWatch, Sentry, metrics, and alerts for production apps. Use it when setting up observability, tracking errors, or debugging production issues.

Neon Serverless PostgreSQL configures Neon databases for serverless apps with pooling, branching, env vars, and Edge Function integration. Use it when setting up Neon, managing database branches, or connecting from Vercel, Netlify, or Cloudflare.

Next.js App Router & Server Components guides building Next.js 15 apps with server and client components, routing, data fetching, Server Actions, and streaming. Use it when creating pages, routes, mutations, or improving performance.

NextAuth.js Authentication implements NextAuth.js v5 with Google OAuth, credentials login, JWT sessions, protected routes, and RBAC. Use it when building sign-in flows, session handling, or route protection in Next.js apps.

OWASP Security Audit checks security-sensitive code against the OWASP Top 10:2025. Use it when reviewing authentication, input handling, APIs, data storage, or outbound requests.

Penetration Testing Checklist provides a structured workflow for authorized web application security testing, including recon, scanning, exploitation validation, and reporting. Use it for pentests, bug bounties, or pre-deployment security checks.

Performance Optimization improves Next.js load times by splitting code, tree shaking unused imports, and analyzing bundle size. Use it when reducing bundle size, tuning images, caching, or adjusting build settings.

Playwright E2E Testing builds end-to-end tests for critical user flows, regression coverage, and integration checks. It uses Feature Object patterns, cross-browser runs, visual regression, and network mocking.

Prisma ORM Database designs Prisma schemas, migrations, and type-safe data models for PostgreSQL apps. Use it when defining relationships, generating Prisma Client, or deploying schema changes safely.

SEO Optimization implements Next.js metadata, Open Graph tags, JSON-LD, sitemaps, and canonical tags for search visibility. Use it when optimizing pages for search engines, social sharing, or discoverability.

Session Management saves, resumes, and compacts Claude Code sessions when work spans multiple context windows. Use it when context is getting full, switching tasks, or continuing a long-running task later.

Strategic Compact helps you compact Claude Code sessions without losing important decisions, progress, or debugging state. Use it when context usage reaches about 60-80% to save state and preserve what matters.

TDD Workflow enforces red-green-refactor development with tests written before implementation. Use it for new features, bug fixes, and refactors when you want behavior verified by failing tests first.

Tailwind CSS Design System helps build consistent, accessible UI components with Tailwind, shadcn/ui, and design tokens. Use it when styling components, creating design systems, or implementing responsive layouts.

Testing Strategy applies RED-GREEN-REFACTOR TDD, separates unit and integration tests, and sets coverage targets for different feature types. Use it when writing tests, reviewing coverage, or testing database and admin flows.

Vercel Deployment sets up Next.js apps on Vercel with environment variables, preview deployments, and GitHub Actions workflows. Use it when deploying to Vercel or configuring production and preview CI/CD.