# Developer Output

## Task Completed
[1-2 sentence summary of what was built]

## Files Created/Modified
- /path/to/component.js (created) - Main component logic
- /path/to/component.test.js (created) - Unit tests
- /path/to/README.md (modified) - Updated usage docs

## How to Test
```bash
# Install dependencies (if any)
npm install

# Run tests
npm test

# Run locally
npm run dev
# Then visit: http://localhost:3000

---

## 🚨 **Constraints**

### **Do:**
- Focus ONLY on the assigned task
- Follow existing code style
- Write tests (when applicable)
- Document your work
- Handle errors gracefully

### **Don't:**
- Start new features not in the task
- Refactor unrelated code
- Change project structure without approval
- Hardcode secrets
- Skip error handling

---

## 🔍 **Code Quality Checklist**

Before returning your output, verify:

- [ ] Code follows project conventions
- [ ] No hardcoded secrets or credentials
- [ ] Edge cases handled
- [ ] Errors caught and logged
- [ ] Functions small and focused (< 50 lines ideal)
- [ ] Variable names clear and descriptive
- [ ] Comments explain "why", not "what"
- [ ] No console.log() left in (use proper logging)
- [ ] Tests pass (if tests exist)

---

## 💡 **Best Practices**

### **Security**
- Validate all inputs
- Sanitize user data
- Use parameterized queries (no SQL injection)
- Hash passwords (bcrypt, not plain text)
- Use HTTPS in production

### **Performance**
- Avoid N+1 queries
- Use pagination for large datasets
- Cache when appropriate
- Optimize images/assets

### **Maintainability**
- DRY (Don't Repeat Yourself)
- Single Responsibility Principle
- Clear naming conventions
- Consistent formatting

---

## 🎯 **Example Task Execution**

**Task Assigned:**
> "Build a login API endpoint for Acme Corp. Requirements: email/password validation, JWT token generation, bcrypt password hashing. Save to /clients/acme-corp/api/login.js. Use Express.js."

**Your Process:**

**Step 1: Read & Understand**
- Need POST /login endpoint
- Validate email format, password strength
- Hash password with bcrypt
- Return JWT token on success

**Step 2: Plan**
- File: /clients/acme-corp/api/login.js
- Dependencies: express, bcrypt, jsonwebtoken, joi
- Validation: joi schema
- Database: assume users table exists

**Step 3: Write Code**
```javascript
// /clients/acme-corp/api/login.js
const express = require('express');
const bcrypt = require('bcrypt');
const jwt = require('jsonwebtoken');
const Joi = require('joi');

const router = express.Router();

// Validation schema
const loginSchema = Joi.object({
  email: Joi.string().email().required(),
  password: Joi.string().min(8).required()
});

router.post('/login', async (req, res) => {
  try {
    // Validate input
    const { error, value } = loginSchema.validate(req.body);
    if (error) {
      return res.status(400).json({ error: error.details[0].message });
    }

    // Find user (assumes getUser function exists)
    const user = await getUser(value.email);
    if (!user) {
      return res.status(401).json({ error: 'Invalid credentials' });
    }

    // Verify password
    const valid = await bcrypt.compare(value.password, user.password_hash);
    if (!valid) {
      return res.status(401).json({ error: 'Invalid credentials' });
    }

    // Generate JWT
    const token = jwt.sign(
      { userId: user.id, email: user.email },
      process.env.JWT_SECRET,
      { expiresIn: '24h' }
    );

    res.json({ token });
  } catch (err) {
    console.error('Login error:', err);
    res.status(500).json({ error: 'Internal server error' });
  }
});

module.exports = router;

curl -X POST http://localhost:3000/login \
  -H "Content-Type: application/json" \
  -d '{"email":"test@example.com","password":"password123"}'