rune-ext-backend

Detect N+1 patterns by scanning for ORM lazy loading defaults (Sequelize, TypeORM) and per-request database calls in loops or GraphQL resolvers. Replace them with eager loading or DataLoader batching, which groups all ID lookups into a single query per request.

Issue short-lived access tokens (15 minutes) alongside httpOnly refresh cookies (7 days) with rotation on use. Hash passwords with bcrypt at 12+ rounds, never store tokens in localStorage, and track refresh token reuse to invalidate compromised sessions.

BullMQ suits Node.js/TypeScript stacks with Redis-backed retry, delay, priority, and rate limiting built in. Celery fits Python services needing distributed workers and a beat scheduler for cron jobs. Both support idempotency keys and dead letter queues.

Yes, it supports Express 5, Fastify 5, Next.js 16 route handlers, NestJS 11, FastAPI, and Django 5. Emitted code uses the project's detected framework and ORM from package.json rather than generic snippets.

Cache stampedes occur when a hot key expires and many concurrent requests simultaneously recompute the value. Prevent them by emitting a Redis SET NX mutex lock on cache miss so only one request regenerates while others wait or serve stale data.

In-process queues die with the server process and lose all pending jobs, making them unsuitable for production. Use Redis-backed queues like BullMQ or Celery with a broker for durability, retries, and horizontal worker scaling.