AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Structure A Shared Backend Lib

skill-kennguyen887-agent-foundation-structure-a-shared-backend-lib · by kennguyen887

Use when organizing a shared backend infrastructure library that many services depend on (e.g. @org/infra-*) — how to split it into focused packages by dependency weight, expose one barrel per package, avoid dependency cycles with peer deps, version/publish it, decide what belongs in the lib vs a service, and the canonical primitives it should provide (a base entity with soft-delete + audit colum…

No reviews yet
0 installs
23 views
0.0% view→install

Install

$ agentstack add skill-kennguyen887-agent-foundation-structure-a-shared-backend-lib

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-kennguyen887-agent-foundation-structure-a-shared-backend-lib)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
24d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Structure A Shared Backend Lib? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Structure a shared backend library

A library of cross-cutting infrastructure (@org/infra-*) that every backend service imports, so the fleet is consistent and DRY. This is the where & how it's packaged; the framework primitives inside it are in write-cross-cutting-code and design-an-error-model. Frontend equivalent: structure-a-shared-ui-lib.

When to use

You're starting or reorganizing the shared lib behind a fleet of services, deciding which package a new primitive goes in, or pulling duplicated infra out of services into one place.

1. Split into focused packages by dependency weight

  • Several small packages, not one mega-package — each owns one concern and pulls only the deps it

needs, so a service that wants typed errors doesn't drag in the whole AWS/cache stack.

  • Order packages from zero-dep core → heavier, and let the light ones be depended on by the heavy

ones (never the reverse), so there are no cycles:

  • infra-exception / infra-typeszero framework deps; the error model + shared types. Anything

can import it.

  • infra-auth — guards/decorators; depends on the error package (peer), nothing heavier.
  • infra-cqrs — base command/query/event classes; orthogonal, used by event-driven services.
  • infra-common — the workhorse (pipes, interceptors, middleware, DTOs, base entity, utils, cache,

messaging clients). Highest reuse; may depend on the lighter packages. `` @org/infra-exception (0 deps) ←─ @org/infra-auth ←─┐ @org/infra-types (0 deps) ←───────────────────┼─ @org/infra-common @org/infra-cqrs (framework only) ←────────────┘ ` ▸ *Other stacks:* a Go internal/` module set, a Python namespace package, a Java multi-module artifact. Principle: partition by concern + dependency direction; the foundational package has the fewest deps and is imported by the rest, never the reverse.

2. One barrel per package; import from the package root

  • Each package exposes a single index.ts (barrel) that re-exports its public surface. Services import

from the package root (@org/infra-common), never deep paths (@org/infra-common/src/...) — so internals can move without breaking consumers. ``ts // infra-common/src/index.ts export * from './typeorm'; export * from './pipes'; export * from './dto'; export * from './utils'; /* … */ // in a service: import { BaseEntity, BaseQueryDto, Nullable } from '@org/infra-common'; // root, not a deep path ` ▸ *Other stacks:* a package's public API file / __init__.py` / exported module list. Principle: one published surface per package; internals are private.

3. Version, publish, and depend on the framework as a peer

  • Publish as versioned packages (a private registry or a workspace monorepo); services pin a

version and upgrade deliberately. A breaking change to a shared contract (error body, base DTO) is a major bump — it ripples to every service.

  • The framework itself is a peerDependency, not a bundled dep — so the lib uses the service's

framework version and you don't ship two copies. Keep the lib's own runtime deps minimal. ▸ Other stacks: semver + a lockfile; peer/provided scope (Maven provided, Go module replace). Principle: explicit versions, framework as peer, treat shared contracts as a public API.

4. What belongs in the lib vs a service

  • In the lib: cross-cutting concerns reused by ≥2 services and stable contracts — the error model,

base entity, pagination/response DTOs, auth guards/decorators, messaging clients, pipes, interceptors, middleware, common utils (decimal/date/PII-mask/chunk), config helpers.

  • In a service: domain entities, feature handlers, domain events, anything that changes per

product. Don't push volatile business logic into the lib — every change there forces a fleet-wide bump. (DRY parallel flows still applies within a service; promote to the lib only once it's stable and genuinely shared.)

5. Canonical primitives the lib should provide

So every service is consistent, the lib ships the building blocks services extend:

  • A base entity — a uuid primary key + createdAt/updatedAt + a soft-delete flag, with audit

columns select: false (excluded from default reads, fetched only when asked). Services extend it and add domain columns; soft-delete and timestamps come for free. ``ts export abstract class IdentityEntity { @PrimaryGeneratedColumn('uuid') id!: string; } export abstract class BaseEntity extends IdentityEntity { @CreateDateColumn({ select: false }) createdAt!: Date; @UpdateDateColumn({ select: false }) updatedAt!: Date; @Column({ type: 'boolean', default: false, select: false }) isDeleted!: boolean; } ``

  • Base pagination + response DTOs — a BaseQueryDto (pageIndex/pageSize with offset/limit

getters) and a PaginationResponse (total/pageIndex/pageSize) so every list endpoint paginates and shapes results identically. An IdUUIDParams for :id routes.

  • Column transformers — decimal (string ↔ number with fixed scale), boolean, and a PII-masking

transformer, applied at the DB boundary so money/flags/secrets are handled the same everywhere.

  • Type helpersNullable = T | null (the agreed "absent" value, see write-service-code §3),

Optional for partial shapes. ▸ Other stacks: a base model/ActiveRecord with timestamps + soft-delete, a shared pagination struct, value-object converters. Principle: the lib provides the canonical base types so services don't reinvent (and drift on) them.

Verification

  • The lib is several concern-focused packages, the foundational one (errors/types) has **zero

framework deps**, and dependencies point one way (no cycles).

  • Each package has one barrel; services import from the package root, not deep paths.
  • The framework is a peer dep; packages are versioned; shared-contract changes are major bumps.
  • Only cross-cutting + stable code lives in the lib; volatile domain logic stays in services.
  • Services extend the lib's base entity + base DTOs rather than redefining timestamps/soft-delete/pagination.

Related

  • write-cross-cutting-code — the pipes/guards/interceptors/decorators that live in the lib.
  • design-an-error-model — the infra-exception package's content (the error contract).
  • structure-a-backend-service — a service that consumes this lib (and its libs/ section).
  • structure-a-shared-ui-lib — the frontend twin (a shared UI/design-system lib).
  • write-service-code (§3 nullability, §5 transformers) · code-conventions (DRY parallel flows).

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.