القائمة
Implement a new backend API endpoint using the full chain (model, serializer, service, view, url, tests). Use when adding a new resource or action to an existing or new Django app.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
| name | add-backend-endpoint |
| description | Implement a new backend API endpoint using the full chain (model, serializer, service, view, url, tests). Use when adding a new resource or action to an existing or new Django app. |
backend/<app>/models.py. Run python manage.py makemigrations <app> and migrate.backend/<app>/serializers.py. Validation and serialization only; no business logic.backend/<app>/services.py (or create it). Use transaction.atomic() for multi-write flows.backend/<app>/views.py. Parse input, check permissions, call the service (or serializer for simple CRUD), return DRF Response. Keep the view thin.backend/<app>/urls.py. If the app is new, add it to backend/backend/settings.py (INSTALLED_APPS) and backend/backend/urls.py with the desired api/... prefix.backend/<app>/tests/test_views.py (and test_services.py if needed). Follow test file conventions in AGENTS.md (Testing section).For the complete walkthrough and file conventions, see .cursor/AGENTS.md.
Implement a new frontend page and wire it to the backend API (API client, types, route, components, navigation, tests). Use when adding a new screen or feature that talks to the API.
Run a code review against MediaJira standards (thin views/pages, API layer placement, no secrets, error handling, permissions, tests). Use before requesting review or merging.
Prepare a well-structured pull request with Conventional Commits, Jira key support, clear description, and pre-merge checks. Use when changes are ready for review.
Run the full test suite (backend pytest and frontend lint/test), then systematically fix any failures. Use when verifying changes or after pulling updates.
Perform a security pass aligned with MediaJira standards (no secrets, auth/CORS, input validation, least privilege, credential handling). Use for pre-release checks or when touching auth/sensitive code.