Bezpečnost, která splňuje normy. Infrastruktura, která funguje.

1// Audit-ready od prvního commitu.
2import { defineConfig } from '@helix/core';
3import { tisax, nis2 } from '@helix/compliance';
4
5export default defineConfig({
6  project: 'erp-integration',
7  compliance: [tisax('AL2'), nis2({ tier: 'essential' })],
8  stack: {
9    runtime: 'node-20',
10    framework: 'next-15',
11    db: 'postgres-16',
12    cache: 'redis-7',
13  },
14  observability: {
15    logs: 'opentelemetry',
16    metrics: 'prometheus',
17    traces: true,
18  },
19  // SLA 24/7 monitoring
20  uptime: 99.99,
21  rto: '15m', rpo: '5m',
22});

1import { Hono } from 'hono';
2import { authGuard, audit } from './middleware';
3import { orderSchema } from './schemas';
4
5const api = new Hono();
6
7api.use('/*', authGuard(), audit());
8
9api.get('/orders/:id', async (c) => {
10  const id = c.req.param('id');
11  const order = await db.order.findUnique({
12    where: { id }, include: { lines: true },
13  });
14  return c.json(order);
15});
16
17api.post('/orders', async (c) => {
18  const data = orderSchema.parse(await c.req.json());
19  const order = await db.order.create({ data });
20  await queue.enqueue('erp.sync', { id: order.id });
21  return c.json(order, 201);
22});
23
24export default api;

1// Type-safe data layer · auto-generated client
2generator client {
3  provider = "prisma-client-js"
4}
5
6datasource db {
7  provider = "postgresql"
8  url      = env("DATABASE_URL")
9}
10
11model Order {
12  id          String      @id @default(cuid())
13  customerId  String
14  status      OrderStatus @default(DRAFT)
15  totalCents  Int
16  lines       OrderLine[]
17  customer    Customer    @relation(fields: [customerId], references: [id])
18  createdAt   DateTime    @default(now())
19  updatedAt   DateTime    @updatedAt
20
21  @@index([customerId, createdAt])
22  @@map("orders")
23}
24
25enum OrderStatus {
26  DRAFT CONFIRMED SHIPPED CANCELLED
27}

1name: CI / Deploy
2on:
3  push:     { branches: [main] }
4  pull_request: { branches: [main] }
5
6jobs:
7  ci:
8    runs-on: ubuntu-24.04
9    steps:
10      - uses: actions/checkout@v4
11      - uses: pnpm/action-setup@v4
12      - run: pnpm install --frozen-lockfile
13      - run: pnpm lint            # eslint + prettier
14      - run: pnpm typecheck       # tsc --noEmit
15      - run: pnpm test --coverage # vitest
16      - run: pnpm build           # turbo build
17      - uses: aquasecurity/trivy-action@master
18      - if: github.ref == 'refs/heads/main'
19        run: pnpm deploy --prod