Flask Python Best Practices: Cursor Rules for Scalable API Development

- **Core Development Principles**
  - Deliver precise, code-focused replies with practical Python snippets.
  - Embrace functional and declarative styles; limit classes to Flask view handlers.
  - Promote reusability through loops and modules to eliminate repetition.
  - Choose clear names incorporating helper verbs like is_valid or can_access.
  - Adopt snake_case for folders and files, such as blueprints/auth_endpoints.py.
  - Export routes and helpers explicitly by name.
  - Apply Receive Object, Return Object (RORO) for clean data flow.

- **Python and Flask Coding Standards**
  - Define functions with def and add type annotations everywhere feasible.
  - Organize projects into app init, blueprints, models, helpers, and settings folders.
  - Skip braces in simple if blocks; use one-liners like if check: action().

- **Robust Error Management and Input Checks**
  - Tackle exceptions and boundaries first in methods.
  - Employ early exits for failures to flatten code structure.
  - Position success logic at the end for better flow.
  - Ditch redundant else; opt for if-then-return.
  - Leverage guard patterns for quick invalid state rejection.
  - Log issues thoroughly while sending clear user feedback.
  - Standardize errors via custom classes or factories.

- **Essential Libraries**
  - Flask for core framework.
  - Flask-RESTful for API endpoints.
  - Flask-SQLAlchemy for database ORM.
  - Flask-Migrate for schema updates.
  - Marshmallow for data conversion and checks.
  - Flask-JWT-Extended for token-based security.

- **Flask Framework Tips**
  - Build apps via factories for easier testing and scaling.
  - Group endpoints in blueprints for clean separation.
  - Craft REST APIs with Flask-RESTful class views.
  - Set global handlers for exceptions.
  - Hook into request phases with before_request, after_request, teardown_request.
  - Configure via app.config for env-specific setups (dev, test, prod).
  - Log with app.logger.
  - Secure routes using JWT extensions.

- **Speed and Efficiency Boosts**
  - Cache hot data with Flask-Caching.
  - Optimize DB queries: preload relations, add indexes.
  - Pool connections for DB reliability.
  - Manage sessions correctly to prevent leaks.
  - Offload heavy work to async queues like Celery.

- **Standard Practices**
  - Respect Flask contexts for app and requests.
  - Monitor API metrics: speed, delay, capacity.
  - Architect with blueprints, distinct layers (routes, logic, data), and env vars.

- **DB Operations**
  - Handle models and queries via Flask-SQLAlchemy.
  - Migrate schemas safely with Flask-Migrate.
  - Close sessions post-operation.

- **Data Handling**
  - Validate and serialize with Marshmallow schemas per model.

- **Security Features**
  - JWT auth powered by Flask-JWT-Extended.
  - Guard protected paths with auth decorators.

- **Quality Assurance**
  - Unit test with pytest.
  - Integration via Flask test client.
  - Setup reusable fixtures for DB and app.

- **API Specs**
  - Document with Flask-RESTX or Flasgger for OpenAPI.
  - Detail all paths with input/output models.

- **Production Rollout**
  - Serve via Gunicorn or uWSGI.
  - Enable logging and observability.
  - Secure secrets in environment variables.