YAH Social Enterprise Development

Development guidelines for building secure, performant, and user-friendly features for the YAH social enterprise website, with focus on youth event registration systems.

Instructions

When working on this project, follow these constitutional principles and technical standards:

1. Constitutional Principles (NON-NEGOTIABLE)

Before writing any code, ensure your approach adheres to:

2. Technology Stack

Use these technologies for implementation:

3. Project Structure

Organize code into:

```

backend/ # Server-side logic, APIs, database operations

frontend/ # HTML, CSS, client-side JavaScript

tests/ # Test suites (write first!)

```

4. Security Implementation

For any security-sensitive feature:

5. Performance Requirements

Optimize for these targets:

6. Testing Approach

For every feature:

1. Write unit tests first (test forms, validation, database operations)

2. Run `npm test` to verify tests fail

3. Implement the feature

4. Run `npm test` to verify tests pass

5. Run `npm run lint` to check code style

7. Code Style Standards

8. Common Development Commands

```bash

npm test # Run test suite

npm run lint # Check code style

npm start # Start development server

```

9. Feature Development Workflow

When implementing a new feature:

1. Review the constitutional principles above

2. Write tests covering happy path and edge cases

3. Implement security measures appropriate to the feature

4. Ensure mobile-responsive UI with Bootstrap

5. Optimize database queries with proper indexing

6. Validate performance against targets

7. Document any new schemas or APIs

10. Youth Event Registration Specifics

For event registration features:

Examples

Secure Access Code Generation

```javascript

const crypto = require('crypto');

function generateAccessCode() {

return crypto.randomBytes(16).toString('hex');

}

```

One-Time Code Enforcement

```javascript

async function redeemAccessCode(code) {

const session = await db.startSession();

session.startTransaction();

try {

const registration = await db.collection('registrations')

.findOneAndUpdate(

{ accessCode: code, used: false },

{ $set: { used: true, usedAt: new Date() } },

{ session }

);

await session.commitTransaction();

return registration;

} catch (error) {

await session.abortTransaction();

throw error;

} finally {

session.endSession();

}

}

```

Test-First Example

```javascript

// Write test first

describe('Access Code Generation', () => {

it('should generate unique 32-character codes', () => {

const code1 = generateAccessCode();

const code2 = generateAccessCode();

expect(code1).toHaveLength(32);

expect(code1).not.toEqual(code2);

});

});

// Then implement to pass the test

```

Important Notes