senior-backend

Implement Express and Sequelize APIs for secure superadmin backend operations.

Updated Apr 4, 2026
One-click install
npx skills add https://github.com/Leandelosantos/huevos-point-maestro --skill senior-backend-leandelosantos
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: senior-backend
Source: https://github.com/Leandelosantos/huevos-point-maestro/tree/main/.claude/skills/senior-backend
Command: npx skills add https://github.com/Leandelosantos/huevos-point-maestro --skill senior-backend-leandelosantos

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Streamlines the Dashboard Maestro backend by outlining the Express + Sequelize serverless API surface, JWT superadmin authentication, Neon PostgreSQL connections, tenant metric queries, and cross-app access token flow so you avoid wiring these security-critical pieces manually.

Core Features & Use Cases

  • Secure Authentication and Auditing: Enforces role=superadmin logins, rate limits, and audit logging in superadmin_audit_log while ensuring tenant_id always comes from JWT or route parameters.
  • Tenant Metrics APIs: Provides endpoints for tenant lists with daily metrics, detailed tenant data, today-specific sales and expenses, and access tokens that auto-login into the business app.
  • Automation and Learning Materials: Bundles api_scaffolder, database_migration_tool, and api_load_tester scripts plus comprehensive references on API design, database optimization, and backend security practices for production-ready improvements.

Quick Start

Use python scripts/api_scaffolder.py with your project path to bootstrap the API scaffolding.

Frequently Asked Questions about senior-backend

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build secure Express APIs for multi-tenant metrics?

Secure Express APIs for multi-tenant metrics are built using Sequelize queries and JWT authentication. This enforces role=superadmin logins, rate limits, and audit logging into a superadmin_audit_log table to protect tenant data.

What is the best way to set up JWT superadmin authentication for a dashboard?

JWT superadmin authentication for a dashboard requires setting a JWT_SECRET parity with your business app. This ensures access tokens properly auto-login auditors and ops teams while securely routing tenant_id from JWT claims.

How do I scaffold a serverless API with Express and Sequelize?

Scaffold a serverless API with Express and Sequelize by running the api_scaffolder script. This bootstraps your project path with Vercel serverless endpoints to serve tenant metric lists and detail views.

Can I run database migrations with Sequelize on Neon PostgreSQL?

Database migrations with Sequelize on Neon PostgreSQL are supported using the bundled database_migration_tool script. This allows you to manage schema changes for your multi-tenant metrics tables efficiently.

Does Express rate limiting work with Vercel serverless functions?

Express rate limiting works with Vercel serverless functions to protect superadmin endpoints. Combined with audit logging, it secures operations by tracking actions in the superadmin_audit_log table.

Why do I need audit logging for backend API operations?

Audit logging for backend API operations is needed to track secure superadmin actions. It records events into a superadmin_audit_log table, ensuring accountability for auditors and ops teams accessing tenant metrics.