Databases and API servers. Default to Postgres for app data and SQLite for local or single-writer cases. Reach for ChromaDB when the workload is small-scale vector retrieval.

Postgres

  • postgres: Postgres 18 defaults, key choices, pooling, and where each topic lives.
  • postgres-indexes: B-tree, GIN, GiST, BRIN, partial, expression, and covering indexes; CONCURRENTLY.
  • postgres-jsonb: JSONB operators, GIN classes, SQL/JSON, and promoting keys to columns.
  • postgres-explain: Reading EXPLAIN ANALYZE plans and the pg_stat_statements loop.
  • postgres-vacuum: Autovacuum tuning, bloat, pg_repack, and transaction ID wraparound.
  • postgres-replication: Streaming and logical replication, slots, lag, and sync modes.
  • postgres-partitioning: Range, list, and hash partitioning with pg_partman.
  • postgres-full-text-search: tsvector, tsquery, GIN, pg_trgm, and when to switch engines.
  • migrations: Forward-only migrations, lock_timeout, and zero-downtime patterns.

Prisma

FastAPI

ChromaDB

  • chromadb: Chroma 1.x clients, retrieval defaults, and when to leave.
  • chromadb-collections: Collection design, distance settings, metadata, and embedding ownership.
  • chromadb-filters: where, where_document, and application-side hybrid retrieval.
  • chromadb-persistence: PersistentClient, server mode, Docker, auth, CVE-2026-45829, and backups.
  • chromadb-scale-limits: Single-node sizing and migration to pgvector, Qdrant, or Cloud.

Other databases and services

  • sqlite: When SQLite fits, WAL pragmas, the WAL-reset bug, and backups.
  • supabase: Publishable and secret keys, explicit Data API grants, CLI, and pooling modes.
  • supabase-rls: Grants plus RLS policies, USING and WITH CHECK, and wrapped auth.uid().

Auth, payments, and operations

  • auth-sessions: Session cookies, rotation, refresh tokens, CSRF, and revocation.
  • payments-stripe: Stripe webhook verification, API versions, idempotency, and fulfillment.
  • webhooks: Inbound webhook HMAC, dedupe, fast 2xx, and replay protection.
  • email-deliverability: SPF, DKIM, DMARC, and Gmail and Yahoo bulk-sender rules.
  • observability: OpenTelemetry, structured logs, metrics, and stable semantic conventions.

36 items under this folder.