All checks were successful
Gitea Actions Demo / build-and-push (push) Successful in 36s
- Added `get_validated_user_id` utility function to validate user authentication across multiple APIs. - Updated image upload, request, and listing endpoints to ensure user ownership and proper error handling. - Enhanced reward management endpoints to include user validation and ownership checks. - Modified task management endpoints to enforce user authentication and ownership verification. - Updated models to include `user_id` for images, rewards, tasks, and children to track ownership. - Implemented frontend changes to ensure UI reflects the ownership of tasks and rewards. - Added a new feature specification to prevent deletion of system tasks and rewards.
3.7 KiB
3.7 KiB
Reward Project: AI Coding Agent Instructions
🏗️ Architecture & Data Flow
- Stack: Flask (Python, backend) + Vue 3 (TypeScript, frontend) + TinyDB (JSON, thread-safe, see
db/). - API: RESTful endpoints in
api/, grouped by entity (child, reward, task, user, image, etc). Each API file maps to a business domain. - Models: Maintain strict 1:1 mapping between Python
@dataclasses (backend/models/) and TypeScript interfaces (frontend/vue-app/src/common/models.ts). - Database: Use TinyDB with
from_dict()/to_dict()for serialization. All logic should operate on model instances, not raw dicts. - Events: Real-time updates via Server-Sent Events (SSE). Every mutation (add/edit/delete/trigger) must call
send_event_for_current_user(seebackend/events/). - Changes: Do not use comments to replace code. All changes must be reflected in both backend and frontend files as needed.
🧩 Key Patterns & Conventions
- Frontend Styling: Use only
:rootCSS variables fromglobal.cssfor all colors, spacing, and tokens. Example:--btn-primary,--list-item-bg-good. - Scoped Styles: All
.vuefiles must use<style scoped>. Reference global variables for theme consistency. - API Error Handling: Backend returns JSON with
errorandcode(seebackend/api/error_codes.py). Frontend extracts{ msg, code }usingparseErrorResponse(res)fromapi.ts. - JWT Auth: Tokens are stored in HttpOnly, Secure, SameSite=Strict cookies.
🚦 Frontend Logic & Event Bus
- SSE Event Management: Register listeners in
onMounted, clean up inonUnmounted. Listen for events likechild_task_triggered,child_reward_request,task_modified, etc. Seefrontend/vue-app/src/common/backendEvents.tsandcomponents/BackendEventsListener.vue. - Layout Hierarchy: Use
ParentLayoutfor admin/management,ChildLayoutfor dashboard/focus views.
⚖️ Business Logic & Safeguards
- Token Expiry: Verification tokens expire in 4 hours; password reset tokens in 10 minutes.
- Image Assets: Models use
image_idfor storage; frontend resolves toimage_urlfor rendering.
🛠️ Developer Workflows
- Backend: Run Flask with
python -m flask run --host=0.0.0.0 --port=5000from thebackend/directory. Main entry:backend/main.py. - Frontend: From
frontend/vue-app/, runnpm installthennpm run dev. - Tests: Run backend tests with
pytestinbackend/tests/. Frontend component tests:npm run testinfrontend/vue-app/components/__tests__/. - Debugging: Use VS Code launch configs or run Flask/Vue dev servers directly. For SSE, use browser dev tools to inspect event streams.
📁 Key Files & Directories
backend/api/— Flask API endpoints (one file per entity)backend/models/— Python dataclasses (business logic, serialization)backend/db/— TinyDB setup and helpersbackend/events/— SSE event types, broadcaster, payloadsfrontend/vue-app/— Vue 3 frontend (seesrc/common/,src/components/,src/layout/)frontend/vue-app/src/common/models.ts— TypeScript interfaces (mirror Python models)frontend/vue-app/src/common/api.ts— API helpers, error parsing, validationfrontend/vue-app/src/common/backendEvents.ts— SSE event types and handlers
🧠 Integration & Cross-Component Patterns
- Every backend mutation must trigger an SSE event for the current user.
- Frontend state is event-driven: always listen for and react to SSE events for real-time updates.
- Model changes require updating both Python and TypeScript definitions to maintain parity.
For any unclear or missing conventions, review the referenced files or ask for clarification. Keep this document concise and actionable for AI agents.