/motherduck-build-cfa-app

name: motherduck-build-cfa-app
description: Design a MotherDuck-backed customer-facing analytics app. Use for embedded analytics, multi-tenant SaaS reporting, or product analytics for external users -- whenever the decision depends on per-customer isolation, backend routing, service-account boundaries, read scaling, or Hypertenancy-style patterns.
license: MIT

Build a Customer-Facing Analytics App

Use this skill when the user is embedding analytics into a product for external users and needs a concrete serving architecture, not just a dashboard.

This is a use-case skill. It orchestrates `motherduck-connect`, `motherduck-explore`, `motherduck-model-data`, `motherduck-query`, and `motherduck-load-data`.

Start Here: Is a MotherDuck Server Active?

• If a **remote MotherDuck MCP server** or **local MotherDuck server** is active, use it.
• Discover the target database or workspace from the active context. Ask only when multiple plausible targets remain and the choice would materially change the design or execution.
• Then inspect the live data model:
• databases and schemas
• tables and views
• columns and types
• join keys
• time dimensions
• core serving metrics
• Use that discovery to shape the serving pattern, tenant boundaries, and example code.

Do not jump straight to an architecture diagram if live data discovery is available.

If no server is active, use any supplied schema or table context. For planning work, proceed with explicit assumptions when safe; ask for missing schema details only when they block a reliable result.

Default Serving Choices

• **3-tier CFA** is the default:
• browser -> backend API -> MotherDuck
• Keep customer routing, connection selection, service-account usage, and embed-session creation on the backend.
• **Embedded Dives** are acceptable when:
• the requirement is read-only
• the product needs a live Dive surface shipped into an app
• app-side policy and UX control are limited
• a backend can create embed sessions and keep admin tokens server-side
• **DuckDB-Wasm** is acceptable only for small, browser-side, read-only workloads.
• **Single shared tenant_id filtering** is the fallback, not the recommendation.

Workflow

1. Inspect the available MotherDuck server or supplied schema context. 2. Explore the actual data model that will back the app. 3. Choose the serving pattern:

• 3-tier app
• embedded Dive
• browser-only prototype

4. Design the isolation model:

• per customer database
• per workload or service-account boundary

5. Define the API contract with allowlisted metrics, dimensions, filters, and customer boundaries. 6. Choose the connection path and read-scaling posture. 7. Produce the implementation plan, API contract, and rollout sequence.

Match execution to the request: answer, review, or planning work returns the requested architecture artifacts; build or change work creates the requested in-scope files or services and validates them. Ask before destructive actions, external writes not already requested, or a material expansion of scope.

When this skill produces a native DuckDB (`md:`) connection, watermark it with `custom_user_agent=agent-skills/2.5.0(harness-<harness>;llm-<llm>)`. If metadata is missing, fall back to `harness-unknown` and `llm-unknown`.

Output

The output of this skill should be:

• a recommended serving architecture
• the isolation model
• the connection strategy
• the first implementation slice
• the validation and rollout plan

If the caller explicitly asks for structured JSON, return raw JSON only with no Markdown fences or prose before/after it. This is mainly for automated tests, regression checks, or downstream tooling that needs a stable machine-readable shape. Normal human-facing use of the skill can stay in prose unless JSON is explicitly requested.

Use this exact top-level shape when JSON is requested:

{
  "summary": {},
  "assumptions": [],
  "implementation_plan": [],
  "validation_plan": [],
  "risks": []
}

References

• `references/CFA_IMPLEMENTATION_GUIDE.md` -- preserved detailed implementation content that used to live in this skill
• `references/CFA_ARCHITECTURE.md` -- architecture comparison, isolation model, and connection-path detail

Runnable Artifact

• `artifacts/customer_routing_example.py` -- MotherDuck-backed Python example showing per-customer routing with separate database namespaces
• `artifacts/customer_routing_example.ts` -- TypeScript companion artifact with the same routing contract and output shape

Run it with:

uv run --with duckdb python skills/motherduck-build-cfa-app/artifacts/customer_routing_example.py

Run the same artifact against temporary MotherDuck databases:

MOTHERDUCK_ARTIFACT_USE_MOTHERDUCK=1 \
uv run --with duckdb python skills/motherduck-build-cfa-app/artifacts/customer_routing_example.py

Validate the TypeScript companion artifact:

uv run scripts/test_typescript_artifacts.py

Related Skills

• `motherduck-connect` -- choose the correct PG endpoint or native DuckDB path
• `motherduck-explore` -- inspect the live database and schema before choosing an architecture
• `motherduck-model-data` -- design analytics-ready per-customer tables
• `motherduck-query` -- validate serving queries and latency-sensitive aggregations
• `motherduck-load-data` -- build ingestion paths for customer-facing data refresh