Phase 06 · Lesson 06

Clean API Client Boundary

≈ 2 min core reading · 504 source/companion words
Learning contract

What you should be able to do after this

  • Explain Clean API Client Boundary without relying on framework buzzwords.
  • Connect the lesson to the phase outcome: Connect Next.js and NestJS through an explicit, debuggable HTTP boundary with environment-safe base URLs and correct CORS behavior.
  • Reproduce the relevant behavior and verify it with evidence.
  • Diagnose at least one representative failure instead of guessing.
Figure 6.6 — TaskFlow boundary map
Next.js component/action
API client
HTTP request
CORS/origin rules
NestJS
HTTP response
UI state
This lesson belongs to Phase 06. Keep the full request/data path visible even when today's code changes only one box.
Instructor workflow: predict first → implement the smallest slice → run it → inspect evidence → break one assumption → diagnose → explain it back. Do not copy the whole code block before understanding the first failing boundary.

FULL_STACK_DEVELOPER_2026_COMPLETE - Phase 06 A Clean API Client Boundary

VOLUME 02 - FRONTEND + BACKEND FOUNDATIONS

A Clean API Client Boundary Centralize transport details without premature abstractions

Phase 06 turns two working applications into one full-stack system.

Browser Next.js NestJS API

http://localhost:3000 apps/web http://localhost:4000

HTTP fetch

Later phases replace in-memory Todos with Prisma + PostgreSQL.

Figure - TaskFlow Phase 06 architecture. The browser sees Next.js on port 3000 while the independent NestJS API listens on port 4000.

Book 6 of Phase 06

FULL_STACK_DEVELOPER_2026_COMPLETE - Phase 06 A Clean API Client Boundary

The first useful frontend boundary: a tiny API client After the first successful fetch, a common mistake is to copy URLs, headers, response.ok checks and JSON parsing into every page. We now have a concrete duplication problem, so a small HTTP-client module has earned its place.

Page / Client Component asks for Todos

lib/api/todos.ts HTTP contract in one place

fetch() Request + Response

NestJS /todos resource API

Figure - A small API-client module prevents URLs and HTTP parsing logic from spreading across UI components. It is not yet a repository abstraction.

What belongs in lib/api/todos.ts ● The Todo response type used by this phase. ● URL construction relative to a supplied base URL. ● HTTP method and headers. ● JSON serialization/deserialization. ● response.ok checks and useful HTTP error messages.

What does not belong there yet ● React state or JSX. ● TanStack Query configuration. ● Repository interfaces. ● MobX stores. ● Prisma or database code. ● Authentication tokens before auth exists. apps/web/src/lib/api/todos.ts - phase-end shape

FULL_STACK_DEVELOPER_2026_COMPLETE - Phase 06 A Clean API Client Boundary

export interface Todo { id: number; title: string; completed: boolean; }

async function expectJson<T>(response: Response): Promise<T> { if (!response.ok) { throw new Error(`HTTP ${response.status} for ${response.url}`); } return response.json() as Promise<T>; }

Code
export async function fetchTodos(baseUrl: string) {
return expectJson<Todo[]>(await fetch(`${baseUrl}/todos`, { cache: 'no-store' }));
}

export async function createTodo(baseUrl: string, title: string) { return expectJson<Todo>(await fetch(`${baseUrl}/todos`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ title }), })); }

Why pass baseUrl instead of reading process.env inside the helper? The same pure HTTP helper can run in a Server Component with API_BASE_URL and in a Client Component with NEXT_PUBLIC_API_BASE_URL. If the helper itself imported a server-only variable, it would become unsafe to reuse from client code. Passing configuration makes the execution boundary explicit.

NOT A REPOSITORY YET

This module is a small transport helper. It does not pretend HTTP is interchangeable with memory/database implementations, and it does not introduce interfaces merely for architecture style. Repository Pattern arrives only after the course has a concrete reason for it.

Official source notes Primary framework references: Next.js App Router Fetching Data and fetch API documentation; Next.js Environment Variables documentation; NestJS CORS documentation. Browser protocol references: MDN CORS, preflight request, and Fetch API documentation.

The course remains version-locked to the versions established in Phase 00. These sources are used to verify concepts and current API behavior, not to silently upgrade the course midstream.

Executable lesson studio · architecture

Now turn the explanation into engineering skill.

Clean API Client Boundary matters because it changes a real boundary in TaskFlow. The goal is to understand the inputs, owner, observable output, and failure modes before adding more abstraction.

By the end, you should be able to

  • Explain Clean API Client Boundary in terms of concrete inputs, ownership, outputs, and evidence.
  • Implement or reproduce the smallest TaskFlow slice that demonstrates this architecture concept.
  • Diagnose one representative architecture failure using observable evidence instead of trial-and-error.
Figure 6.6B — Mental model
User intent
UI boundary
API contract
business rule
persistence
observable result
Read left-to-right while implementing. When debugging, walk right-to-left until the first observed fact differs from your prediction.
Code-along sequence

One coherent change at a time

  1. 01

    Restate the goal of “Clean API Client Boundary” as one observable behavior. Write the success signal before touching code.

  2. 02

    Trace the boundary map: User intent → UI boundary → API contract → business rule → persistence → observable result. Mark the one boundary this lesson changes.

  3. 03

    Inspect the current repository state and record the exact files, route, table, or runtime involved. Avoid creating an abstraction before you can name the existing owner.

  4. 04

    Implement the smallest vertical slice. Add one coherent change, run the narrowest verification command, and read the output before continuing.

  5. 05

    Connect the slice to TaskFlow’s phase artifact: A typed API client boundary that can call the NestJS health/tasks endpoints from the appropriate Next.js execution context.. Verify behavior from the outside as a user or API client would.

  6. 06

    Create one controlled failure that is safe to reproduce. Predict the symptom first, capture evidence, locate the earliest broken boundary, then fix only that cause.

  7. 07

    Close the reference and rebuild or explain the core change from memory. Record what you would monitor or test before trusting the same change in production.

txtBoundary trace
Input -> owner -> transformation -> observable output -> failure evidence

Do not copy this as a finished answer. Predict what each boundary does, type the smallest useful slice, run it, then compare the result with your prediction.

Verification

Prove the happy path

  1. Run the narrowest relevant command or request and require a clean exit/status.
  2. Inspect the boundary-specific evidence: terminal output, Network panel, database row/query plan, test report, container health, or deployment logs.
  3. Repeat the behavior once after the change so a one-off cached or stale result cannot masquerade as success.
Break it on purpose

Build debugging memory

  1. Wildcard CORS with credentials
  2. Change one assumption in the architecture example—identity, input, configuration, ordering, connectivity, or state—and predict the exact symptom before running it.
SymptomInvestigation path
Expected result does not appear

Return to the nearest observable boundary: input, network, process log, database, or rendered UI. Compare actual evidence with the predicted path.

A shortcut appears to fix it

Change one variable at a time and reproduce the original failure after the fix; otherwise you have correlation, not diagnosis.

Closed-reference challenge

Can you transfer the idea?

Without copying the final source, create a second small scenario that applies “Clean API Client Boundary” to a different TaskFlow resource or input. Write the acceptance criteria first, implement it, and provide the evidence that each criterion is satisfied.

Explain-back

Answer these without reopening the solution

  1. What problem does Clean API Client Boundary solve in TaskFlow, and what would be observably wrong without it?
  2. Which part of the architecture boundary owns the decision, and which neighboring layer must not own it?
  3. What evidence proves the happy path instead of merely suggesting it worked?
  4. Name one realistic failure or abuse case and the first place you would inspect.
  5. If requirements doubled tomorrow, which part of this design should stay stable and which part is allowed to change?
Lesson studio

Turn the reading into skill

01

Do it

Use Network tab plus API logs to trace one failing request end-to-end.

Use the smallest change that demonstrates this lesson. Stop after it works and capture evidence.
02

Break it safely

Wildcard CORS with credentials

Predict the symptom before causing the failure. Then locate the earliest boundary where reality diverges from expectation.
03

Explain it back

Why does this responsibility live here, what input does it trust, what output proves success, and what would go wrong if another layer owned it?

If your explanation is vague, repeat the boundary trace before moving on.
Exit ticket

Before marking complete

Close the reference. Reproduce the core idea from memory or explain the exact request/data flow aloud. Then check your diff or notes for accidental shortcuts that bypass validation, authorization, error handling, or verification earned in earlier phases.