architect-review

Reviews technical proposals against modulith boundaries, multi-tenant schemas, and approved stack constraints.

Updated Apr 4, 2026
One-click install
npx skills add https://github.com/SleyiW/iWana-neXt --skill architect-review-sleyiw
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: architect-review
Source: https://github.com/SleyiW/iWana-neXt/tree/main/.agents/skills/architect-review
Command: npx skills add https://github.com/SleyiW/iWana-neXt --skill architect-review-sleyiw

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Teams working on the iWana neXt platform need consistent architectural review of code changes and design proposals to prevent boundary violations, tenant data leaks, and unauthorized stack deviations before they reach production. ## Core Features & Use Cases - Boundary and Coupling Review: Detects cross-module table access, circular imports, and ad-hoc calls that break the modulith structure. - Multi-Tenancy Validation: Verifies per-request tenant resolution, schema isolation, and absence of hardcoded tenant identifiers in PostgreSQL setups. - Stack and Security Compliance: Checks proposals against the approved stack (NestJS, Next.js App Router, TypeORM, Turborepo, BullMQ, OpenAPI) and audits security, PII exposure, and audit-trail requirements. - Use Case: Before merging a pull request that adds a new billing endpoint, run this review to confirm it respects module boundaries, resolves the tenant per request, updates the OpenAPI contract, and includes an adequate testing strategy. ## Quick Start Review this proposed change to the billing module and tell me whether it respects the modulith boundaries, multi-tenant schema isolation, and the approved NestJS stack.

Frequently Asked Questions about architect-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a code change for modulith boundary violations?

Check whether services in one module access repositories or tables of another module, whether imports cross bounded contexts without a stable interface, and whether calls skip application or domain layers. Any of these signals a boundary violation requiring adjustment or blocking.

How to validate multi-tenant schema isolation in PostgreSQL?

Verify the tenant is resolved per authenticated request, the data context uses the correct schema, and no tenant, schema, or identifier values are hardcoded. Also confirm queries and migrations remain compatible with the per-schema multi-tenant model.

When should an architectural decision require an ADR?

An ADR is required when a proposal introduces technology outside the approved stack, breaks API compatibility without versioning, or makes large cross-cutting changes. Security exceptions escalate directly to the CTO instead.

Does this review approach recommend migrating to microservices?

No. The review explicitly treats the modular monolith as the baseline architecture and flags recommending microservices by default as an anti-pattern. Proposals are evaluated against boundary discipline within the modulith, not against a microservices target.

What security checks are included in an architecture review?

The review checks input validation at external boundaries, absence of PII, secrets, or tokens in code and logs, authentication and authorization rules, and audit trails for sensitive operations. Regulatory impact is assessed for CRM, billing, PQR, and personal data flows.