awesome-mobile-backend-agent-skills

When and how to use a Backend-for-Frontend (BFF) for mobile -- scoping, ownership, and anti-patterns. Use when deciding whether a BFF is justified or designing one.

GraphQL server design tuned for mobile -- persisted queries, batching, N+1 mitigation, and Apollo client integration. Use when building or reviewing a GraphQL API for mobile apps.

Design mobile-friendly HTTP APIs with predictable pagination, filtering, sorting, sparse/partial responses, and a consistent error envelope. Use when specifying new endpoints or reviewing existing ones for mobile use.

REST conventions tuned for mobile clients -- resources, HTTP caching, idempotency, and versioning. Use when designing or reviewing RESTful endpoints.

Server-side OAuth 2.1 + PKCE for native mobile apps -- authorization endpoint, token endpoint, refresh rotation, and device binding. Use when implementing or reviewing the auth server for mobile clients.

Model multi-device sessions on the backend with sliding vs absolute expiry, device listing, and remote logout. Use when building the session model or a "Your devices" screen.

Choose between access+refresh tokens and opaque server sessions for mobile; design revocation and device binding. Use when deciding the token model for a new mobile backend or hardening an existing one.

Baseline infrastructure for a mobile backend -- edge caching, feature flags, and multi-region strategy. Use when planning or auditing the deployment shape of a mobile backend.

Rate-limit a mobile backend with token-bucket algorithms, per-user/device scoping, and abuse signals. Use when designing or tuning rate limits across API, auth, and push endpoints.

Serve right-sized image variants to mobile via URL-based transforms and a CDN. Use when designing the image delivery path for a mobile app.

Design resilient mobile media upload pipelines with signed URLs, resumable uploads (tus, S3 multipart), and post-upload processing. Use when implementing or reviewing user-generated media ingestion.

Stream video to mobile with HLS/DASH adaptive bitrate and optional DRM. Use when building or integrating a video delivery pipeline for a mobile app.

Send push to mobile via FCM HTTP v1 and APNs over HTTP/2 with JWT, handle payload limits and token invalidation. Use when building or operating the push delivery service.

Design topic- and segment-based push targeting with unsubscribe management. Use when planning broadcast vs targeted notification delivery for a mobile app.

Deliver background (silent) pushes to mobile reliably within OS budgets, and design fallbacks. Use when you need data-only pushes for sync or state invalidation.

Scale a realtime backend horizontally with pub/sub fanout and presence tracking. Use when moving past a single-node WebSocket/SSE server.

Choose between Server-Sent Events (SSE) and WebSockets for mobile realtime; implement SSE correctly. Use when considering unidirectional streaming from server to app.

Design WebSocket servers and clients for mobile -- reconnection, heartbeats, backoff, and horizontal scale-out. Use when building realtime features over WebSockets.

Resolve concurrent writes from multiple mobile devices -- last-write-wins, 3-way merge, and vector clocks. Use when designing server-side merge semantics for offline-capable apps.

When CRDTs help mobile apps, which libraries to use, and what to watch out for. Use when evaluating CRDTs for collaborative or offline-first features.

Design delta-sync protocols for mobile with cursor-based pagination and durable checkpoints. Use when building server-to-client data sync for offline-capable apps.