Catalog
affaan-m/tinystruct-patterns

affaan-m

tinystruct-patterns

Expert guidance for developing with the tinystruct Java framework. Use when working on the tinystruct codebase or any project built on tinystruct — including creating Application classes, @Action-mapped routes, unit tests, ActionRegistry, HTTP/CLI dual-mode handling, the built-in HTTP server, the event system, JSON with Builder/Builders, database persistence with AbstractData, POJO generation, Server-Sent Events (SSE), file uploads, and outbound HTTP networking.

New~2.9kUpdated Jul 14, 2026

tinystruct Development Patterns

Architecture and implementation patterns for building modules with the tinystruct Java framework – a lightweight, high-performance framework that treats CLI and HTTP as equal citizens, requiring no main() method and minimal configuration.

Core Principle

CLI and HTTP are equal citizens. Every method annotated with @Action should ideally be runnable from both a terminal and a web browser without modification. This "dual-mode" capability is the core design philosophy of tinystruct.

When to Activate

When to Use

  • Creating new Application modules by extending AbstractApplication.
  • Defining routes and command-line actions using @Action.
  • Handling per-request state via Context.
  • Performing JSON serialization using the native Builder and Builders components.
  • Working with database persistence via AbstractData POJOs.
  • Generating POJOs from database tables using the generate command.
  • Implementing Server-Sent Events (SSE) for real-time push.
  • Handling file uploads via multipart data.
  • Making outbound HTTP requests with URLRequest and HTTPHandler.
  • Configuring database connections or system settings in application.properties.
  • Debugging routing conflicts (Actions) or CLI argument parsing.

How It Works

The tinystruct framework treats any method annotated with @Action as a routable endpoint for both terminal and web environments. Applications are created by extending AbstractApplication, which provides core lifecycle hooks like init() and access to the request Context.

Routing is handled by the ActionRegistry, which automatically maps path segments to method arguments and injects dependencies. For data-only services, the native Builder and Builders components should be used for JSON serialization to maintain a zero-dependency footprint. The database layer uses AbstractData POJOs paired with XML mapping files for CRUD operations without external ORM libraries.

Examples

Basic Application (MyService)

public class MyService extends AbstractApplication {
    @Override
    public void init() {
        this.setTemplateRequired(false); // Disable .view lookup for data/API apps
    }

    @Override public String version() { return "1.0.0"; }

    @Action("greet")
    public String greet() {
        return "Hello from tinystruct!";
    }

    // Path parameter: GET /?q=greet/James  OR  bin/dispatcher greet/James
    @Action("greet")
    public String greet(String name) {
        return "Hello, " + name + "!";
    }
}

HTTP Mode Disambiguation (login)

@Action(value = "login", mode = Mode.HTTP_POST)
public String doLogin(Request<?, ?> request) throws ApplicationException {
    request.getSession().setAttribute("userId", "42");
    return "Logged in";
}

Native JSON Data Handling (Builder + Builders)

import org.tinystruct.data.component.Builder;
import org.tinystruct.data.component.Builders;

@Action("api/data")
public String getData() throws ApplicationException {
    Builders dataList = new Builders();
    Builder item = new Builder();
    item.put("id", 1);
    item.put("name", "James");
    dataList.add(item);

    Builder response = new Builder();
    response.put("status", "success");
    response.put("data", dataList);
    return response.toString(); // {"status":"success","data":[{"id":1,"name":"James"}]}
}

SSE (Server-Sent Events)

import org.tinystruct.http.SSEPushManager;

@Action("sse/connect")
public String connect() {
    return "{\"type\":\"connect\",\"message\":\"Connected to SSE\"}";
}

// Push to a specific client
String sessionId = getContext().getId();
Builder msg = new Builder();
msg.put("text", "Hello, user!");
SSEPushManager.getInstance().push(sessionId, msg);

// Broadcast to all
// Broadcast to all
SSEPushManager.getInstance().broadcast(msg);

File Upload

import org.tinystruct.data.FileEntity;

@Action(value = "upload", mode = Mode.HTTP_POST)
public String upload(Request<?, ?> request) throws ApplicationException {
    List<FileEntity> files = request.getAttachments();
    if (files != null) {
        for (FileEntity file : files) {
            System.out.println("Uploaded: " + file.getFilename());
        }
    }
    return "Upload OK";
}

MCP Server and Tools Integration

tinystruct provides native support for the Model Context Protocol (MCP) starting with SDK version 1.7.26. The MCP APIs (e.g., org.tinystruct.mcp.MCPTool, org.tinystruct.mcp.MCPServer, org.tinystruct.mcp.MCPException) are included directly in the core dependency:

<dependency>
    <groupId>org.tinystruct</groupId>
    <artifactId>tinystruct</artifactId>
    <version>1.7.26</version>
</dependency>

SECURITY WARNING (Prompt Injection): Tool return values are fed directly back into the AI model's context window. You MUST validate and sanitize all caller-supplied arguments before including them in the tool's return string. Failure to sanitize inputs can allow an attacker to inject adversarial instructions (Prompt Injection) that override the model's behavior. Always validate length, character sets, and nullity.

To create an MCP Tool:

  1. Extend org.tinystruct.mcp.MCPTool.
  2. Annotate operations with @Action and declare parameters using @Argument within the arguments array.
  3. Accept parameters as explicit method arguments matching the keys in @Argument. (Do not use getContext().getAttribute(...) for tool arguments).
import org.tinystruct.mcp.MCPTool;
import org.tinystruct.mcp.MCPException;
import org.tinystruct.system.annotation.Action;
import org.tinystruct.system.annotation.Argument;

public class MyCustomTool extends MCPTool {
    public MyCustomTool() {
        super("custom", "A custom tool for demonstrating MCP");
    }

    @Action(
        value = "custom/hello",
        description = "Say hello to someone",
        arguments = {
            @Argument(key = "name", description = "The name to greet", type = "string", optional = false)
        }
    )
    public String hello(String name) throws MCPException {
        // SECURITY: Validate/sanitize tool inputs before returning to the model
        // to prevent prompt injection vulnerabilities.
        if (name == null || name.length() > 50 || !name.matches("^[a-zA-Z0-9 ]+$")) {
            throw new MCPException("Invalid name provided");
        }
        return "Hello, " + name + "!";
    }
}

To deploy an MCP Server:

  1. Extend org.tinystruct.mcp.MCPServer.
  2. Override init() and register your tools using this.registerTool(). The framework automatically scans and maps the @Action methods.
import org.tinystruct.mcp.MCPServer;

public class MyMCPServer extends MCPServer {
    @Override
    public void init() {
        super.init();
        this.registerTool(new MyCustomTool());
    }

    @Override
    public String version() {
        return "1.0.0";
    }
}

Run the server via the dispatcher:

bin/dispatcher start --import org.tinystruct.system.HttpServer --import com.example.MyMCPServer

Configuration

Settings are managed in src/main/resources/application.properties.

# Database
driver=org.h2.Driver
database.url=jdbc:h2:~/mydb
database.user=sa
database.password=

# Server
default.home.page=hello
server.port=8080

# Locale
default.language=en_US

# Session (Redis for clustered environments)
# default.session.repository=org.tinystruct.http.RedisSessionRepository
# redis.host=127.0.0.1
# redis.port=6379

Access config values in your application:

String port = this.getConfiguration("server.port");

Red Flags & Anti-patterns

Symptom Correct Pattern
Importing com.google.gson or com.fasterxml.jackson Use org.tinystruct.data.component.Builder / Builders.
Using List<Builder> for JSON arrays Use Builders to avoid generic type erasure issues.
ApplicationRuntimeException: template not found Call setTemplateRequired(false) in init() for API-only apps.
Annotating private methods with @Action Actions must be public to be registered by the framework.
Hardcoding main(String[] args) in apps Use bin/dispatcher as the entry point for all modules.
Manual ActionRegistry registration Prefer the @Action annotation for automatic discovery.
Action not found at runtime Ensure class is imported via --import or listed in application.properties.
CLI arg not visible Pass with --key value; access via getContext().getAttribute("--key").
Two methods same path, wrong one fires Set explicit mode (e.g., HTTP_GET vs HTTP_POST) to disambiguate.

Best Practices

  1. Granular Applications: Break logic into smaller, focused applications rather than one monolithic class.
  2. Setup in init(): Leverage init() for setup (config, DB) rather than the constructor. Do NOT call setAction() — use @Action annotation.
  3. Mode Awareness: Use the Mode parameter in @Action to restrict sensitive operations to CLI only or specific HTTP methods.
  4. Context over Params: For optional CLI flags, use getContext().getAttribute("--flag") rather than adding parameters to the method signature.
  5. Asynchronous Events: For heavy tasks triggered by events, use CompletableFuture.runAsync() inside the event handler.

Technical Reference

Detailed guides are available in the references/ directory:

Reference Source Files (Internal)

  • src/main/java/org/tinystruct/AbstractApplication.java — Core base class with lifecycle hooks
  • src/main/java/org/tinystruct/system/annotation/Action.java — Annotation & Modes
  • src/main/java/org/tinystruct/application/ActionRegistry.java — Routing Engine
  • src/main/java/org/tinystruct/data/component/Builder.java — JSON object serializer
  • src/main/java/org/tinystruct/data/component/Builders.java — JSON array serializer
  • src/main/java/org/tinystruct/data/component/AbstractData.java — Base POJO class with CRUD
  • src/main/java/org/tinystruct/data/Mapping.java — Mapping XML parser
  • src/main/java/org/tinystruct/data/tools/MySQLGenerator.java — POJO generator reference
  • src/main/java/org/tinystruct/data/component/FieldType.java — SQL-to-Java type mappings
  • src/main/java/org/tinystruct/data/component/Condition.java — Fluent SQL query builder
  • src/main/java/org/tinystruct/http/SSEPushManager.java — SSE connection management
  • src/test/java/org/tinystruct/application/ActionRegistryTest.java — Registry test examples
  • src/test/java/org/tinystruct/system/HttpServerHttpModeTest.java — HTTP integration test patterns
Files7
7 files · 16.6 KB

Select a file to preview

Overall Score

87/100

Grade

A

Excellent

Safety

88

Quality

87

Clarity

88

Completeness

84

Summary

The tinystruct-patterns skill provides comprehensive guidance for developing Java applications using the tinystruct lightweight framework. It covers core concepts (dual-mode CLI/HTTP routing), practical examples (Applications, @Action annotation, JSON serialization with Builder/Builders), advanced features (SSE, file uploads, MCP Server integration), and reference documentation. The skill includes security warnings for prompt injection in MCP tools and database configuration patterns.

Detected Capabilities

code examples and patternsframework architecture guidanceannotation-based routingdatabase ORM alternativesevent-driven programmingsession managementoutbound HTTP requestsMCP server integrationprompt injection prevention guidance

Trigger Keywords

Phrases that MCP clients use to match this skill to user intent.

tinystruct application developmentjava framework routingdual-mode cli httpbuilder json serializationabstractdata persistencemcp server integrationaction annotation routingserver-sent events sselightweight java frameworkzero-dependency json

Risk Signals

WARNING

MCP Tool return values fed directly into AI model context window without sanitization

SKILL.md, MCP Server and Tools Integration section
INFO

Security warning explicitly documents prompt injection risk in tool return values

SKILL.md, line ~220 (SECURITY WARNING block)
INFO

Example demonstrates input validation (length, charset, nullity checks) for MCP tool arguments

SKILL.md, hello() method example with name validation
INFO

Referenced external domain api.example.com in system-usage.md example

references/system-usage.md, Outbound HTTP section

Referenced Domains

External domains referenced in skill content, detected by static analysis.

api.example.com

Use Cases

  • Build tinystruct Applications with @Action routing
  • Implement dual-mode CLI and HTTP endpoints
  • Serialize JSON using Builder and Builders without external dependencies
  • Persist data with AbstractData POJOs and XML mapping
  • Deploy Server-Sent Events (SSE) for real-time push notifications
  • Create MCP Tools and Servers for agent integration
  • Handle file uploads and multipart form data
  • Make outbound HTTP requests with URLRequest
  • Configure database connections and application properties
  • Debug routing conflicts and CLI argument parsing

Quality Notes

  • Excellent documentation structure with clear hierarchy (When to Use, How It Works, Examples, Best Practices)
  • Comprehensive reference directory with 6 focused guides covering specific domains (routing, database, testing, etc.)
  • Security warning for prompt injection in MCP is explicitly highlighted with validation example
  • Well-organized examples progressing from basic to advanced (single objects → arrays → parsing → SSE)
  • Anti-patterns table with corrective guidance helps developers avoid common mistakes
  • All reference files present and properly organized; supporting content is complete
  • MCP integration section includes both tool creation and server deployment patterns
  • Code examples are practical, runnable, and demonstrate both CLI and HTTP modes
  • Configuration examples show property-based setup for database, server, and session management
  • Testing patterns reference actual framework test files (ActionRegistryTest, HttpServerHttpModeTest)
  • Some concepts (like the distinction between Mode values) could benefit from a quick-reference table
  • Error handling guidance is present but could emphasize exception types (ApplicationException vs ApplicationRuntimeException) more clearly
Model: claude-haiku-4-5-20251001Analyzed: Jul 14, 2026

Reviews

Add this skill to your library to leave a review.

No reviews yet

Be the first to share your experience.

Version History

  1. v1.1

    Content updated

    ✦ AIAdds MCP Server and Tools Integration guide with prompt injection security guidance for tool argument validation.

    2026-07-14

    Latest
  2. v1.0

    2026-05-15

    View This VersionInitial version

Use affaan-m/tinystruct-patterns in your dev environment

Command Palette

Search for a command to run...

affaan-m/tinystruct-patterns | SkillRepo