Patterns

Database connection pooling for serverless and edge environments. Prevents connection exhaustion and handles cold starts gracefully.

Configure Prisma for edge runtime with Accelerate connection pooling.

Type-safe Drizzle ORM setup with migrations for PostgreSQL.

Production-ready OAuth authentication with Auth.js (NextAuth v5). Includes GitHub and Google providers with database session storage.

Secure session handling with database storage and automatic cleanup.

Role-based access control with permissions, roles, and middleware.

API rate limiting with sliding window algorithm using Upstash Redis.

Type-safe request/response validation with Zod schemas.

Consistent error handling with custom error classes and structured responses.

Unit and integration testing with Vitest and React Testing Library.

End-to-end testing with Playwright and page object patterns.

API mocking with Mock Service Worker for tests and development.

React component testing with Testing Library, user events, and accessibility testing.

Redis caching with Upstash. Includes cache utilities, automatic serialization, and cache invalidation patterns.

Next.js built-in caching with unstable_cache, revalidatePath, and revalidateTag.

Simple LRU in-memory caching for serverless. No external dependencies.

Transactional email with Resend and React Email templates.

Free email sending with Nodemailer. Supports SMTP, Gmail, and other providers.

Cost-effective email at scale with AWS Simple Email Service.

Stripe integration with checkout sessions, webhook handling, and subscription management.

Payment integration with LemonSqueezy. Includes checkout, webhooks, and subscriptions with built-in tax handling.

Metered billing with Stripe. Track usage, report to Stripe, and charge customers based on consumption.

Error tracking and performance monitoring with Sentry. Includes source maps and custom context.

Open standard observability with OpenTelemetry. Works with Jaeger, Zipkin, and commercial backends.

Structured JSON logging with Pino. Fast, low-overhead logging with log levels and context.

Runtime-validated environment variables with Zod and TypeScript.

Secure secrets handling with encryption at rest across environments.

Multi-stage Docker builds optimized for Next.js.

CI/CD pipelines for testing, building, and deploying.

Vercel deployment configuration with edge functions, environment setup, and build optimizations.

Type-safe feature flags with gradual rollouts. Supports percentage-based rollouts, user targeting, and A/B testing using Vercel Edge Config or Upstash.

Privacy-friendly analytics with PostHog. Includes event tracking, user identification, and feature flag integration.

Full-text search with typo tolerance, filters, and facets using Meilisearch. Includes indexing utilities and React hooks.

Type-safe internationalization with next-intl. Includes locale detection, server components support, and message formatting.

AI-powered content moderation for user-generated content. Uses OpenAI's free moderation API for text.

Serverless file uploads with presigned URLs. Supports AWS S3 and Vercel Blob with file validation.

Serverless background job processing with Inngest. Event-driven workflows with automatic retries.

Cron jobs and scheduled tasks for serverless. Use Inngest for complex workflows or Vercel Cron for simple endpoints.

Receive webhooks securely with signature verification. Includes Stripe and GitHub verification utilities.

Real-time pub/sub updates using Pusher. Includes React hooks for subscribing to channels and events.

Production-ready AI chat with streaming responses, conversation history, and provider abstraction supporting OpenAI and Anthropic.

Vector embeddings for semantic search and RAG applications using Upstash Vector.

Function/tool calling pattern for agentic AI workflows with type-safe tool definitions.

Token-aware rate limiting for AI endpoints with per-user quotas and cost tracking.

React components for streaming AI responses with typing indicators and message lists.

Structured audit trail for compliance and debugging with immutable logs.

Field-level encryption for sensitive data using AES-256-GCM.

Cross-Site Request Forgery protection for form submissions using Web Crypto API.

Configurable CORS setup for API routes with origin validation and preflight handling.

Multi-factor authentication with TOTP, QR code generation, and backup codes.