daloyjs-best-practices

What problem does it solve?

Best practices for building, testing, and hardening this DaloyJS REST API on the Deno runtime. This guide is the single source of truth for adding routes, writing tests, ensuring secure defaults, managing permissions, and aligning with quality gates across the project.

Core Features & Use Cases

• Contract-first routing and validation with Zod: ensure request and response schemas are defined at the route level and validated at boundaries.
• Secure-by-default baseline: enforce requestId, secureHeaders, and rateLimit, with explicit permissions in deno.json.
• OpenAPI generation and docs: guidelines to regenerate the API spec and keep docs in sync.
• Testing, typechecking, and governance: recommended testing patterns, test coverage goals, and code-review guardrails to maintain quality gates.

Quick Start

Review this guidance before making substantial changes to routes, tests, or security configurations to ensure compliant, secure deployments.