API Developer Skill

Read api/README.md first for setup, commands, and configuration.

ILOS Framework (IoC)

The API uses a custom IoC framework (ILOS) with Inversify for dependency injection.

Key Decorators

Key Components

• Kernel (api/src/pdc/proxy/Kernel.ts): Registers all service providers, connections, and commands
• Service Providers: Each domain module is a service provider that registers actions and repositories
• Actions: Extend Action class, implement handle(params, context) method
• Repositories: Database access layer using PostgreSQL

Service Provider Structure

Each service follows this pattern:

services/<name>/
├── <Name>ServiceProvider.ts   # Registers all components
├── actions/                   # Action handlers
├── repositories/              # Database access
├── contracts/                 # TypeScript interfaces
├── commands/                  # CLI commands (optional)
└── config/                    # Service configuration

Action Pattern

typescript
1@handler({
2  service: "acquisition",
3  method: "create",
4  middlewares: [
5    ["validate", CreateJourneyParamsValidator],
6    "scopeToSelf",
7  ],
8  apiRoute: {
9    path: "/v3/journeys",
10    method: "POST",
11    rateLimiter: { max: 2000 },
12  },
13})
14export class CreateJourneyAction extends Action {
15  async handle(params: ParamsType, context: ContextType): Promise<ResultType> {
16    // Implementation
17  }
18}

Repository Pattern

Always use the sql template literal for parameterized queries:

typescript
1import { sql } from "@/lib/pg/sql.ts";
2
3const result = await this.connection.getClient().query(sql`
4  SELECT * FROM carpools WHERE id = ${id}
5`);

No ORM is used. DenoPostgresConnection.ts is the current provider (replaces LegacyPostgresConnection.ts).

API Routing

• External REST: GET/POST/PUT/DELETE /v3/{service}/{action}
• Internal RPC: POST /rpc with { "method": "service:action", "params": {...} }

Routes defined in api/src/pdc/proxy/HttpTransport.ts. External routes should be defined in the Action decorator. Internal RPC calls are being migrated to shared providers in api/src/pdc/providers.

Service Modules

Located in api/src/pdc/services/:

Shared Types

Domain interfaces in shared/ directory — import with @pdc/shared/{domain}. Being deprecated as the older frontend was removed in favor of app-partners.

Docker Compose Overlays

• docker-compose.base.yml - Service definitions (no exposed ports)
• docker-compose.dev.yml - Exposes ports for localhost development (default just dc)
• docker-compose.proxy.yml - Adds Traefik for *.covoiturage.test domains
• docker-compose.e2e.yml - E2E test configuration (just dc_e2e)

Run just add-hosts to add domain aliases to /etc/hosts.

Deno Configuration

api/deno.jsonc:

• Import aliases: @/ maps to ./src/ (use Deno's Organise Imports LSP feature)
• Legacy decorators enabled for Inversify
• Line width: 120 for formatting

Development Notes

• NixOS users: Add DOCKER_SOCK=/run/user/1000/docker.sock to api/.env
• Use just seed-local-users for test accounts (requires APP_ENV=local)
• Keep test databases with APP_POSTGRES_KEEP_TEST_DATABASES=true, then clean with just drop_test_databases
• Pre-commit: Talisman for secret detection configured in .talismanrc. Run pre-commit install when hook not found.