| name | uw-scan |
| description | Use when starting reverse engineering on an unfamiliar codebase to identify layers, patterns, and structure before detailed analysis |
| allowed-tools | ["Read","Grep","Glob","Bash(git:*, mkdir:*, ls:*)","Bash(node:*)","Bash(pnpm:*)","Bash(source:*)","Read(docs/unwind/.cache/**)","Write(docs/unwind/**)","Edit(docs/unwind/**)"] |
Discovering Architecture
Overview
Run a deterministic scan of the codebase, then dispatch a subagent to add
narrative observations and adjudicate anything the scanner could not classify.
The scanner (@unwind/core) produces a machine-readable scan-manifest.json —
the ground truth for the file inventory, per-file structural symbols, the
import graph, and a first-pass rebuild-layer assignment. The architecture
document is derived from this manifest, so layer counts and entry points are
verifiable rather than guessed.
Output: docs/unwind/architecture.md (derived) + docs/unwind/.cache/scan-manifest.json (ground truth)
Graceful fallback: if Node/pnpm or @unwind/core are unavailable, the
deterministic scan is skipped and discovery falls back to the legacy pure-LLM
Explore flow (Step 1-LEGACY below). The skill always functions; the scan is an
enhancement, not a hard dependency.
When to Use
- Starting work on an unfamiliar codebase
- Onboarding to a new project
- Before planning a migration or major refactor
- Beginning a security audit or code review
The Process
Step 0: Run the Deterministic Scan
Build (first run only) and run the scanner. The helper resolves the plugin root
and lazily builds @unwind/core:
UNWIND_PLUGIN_ROOT="${CLAUDE_PLUGIN_ROOT:-${UNWIND_PLUGIN_ROOT:-}}"
[ -f "$UNWIND_PLUGIN_ROOT/skills/scripts/_resolve-plugin-root.sh" ] || \
UNWIND_PLUGIN_ROOT="$(ls -dt "$HOME"/.claude/plugins/cache/*/unwind/*/ 2>/dev/null | head -1)"
source "${UNWIND_PLUGIN_ROOT%/}/skills/scripts/_resolve-plugin-root.sh"
ensure_unwind_core || { echo "core unavailable — using legacy discovery"; }
node "$UNWIND_PLUGIN_ROOT/skills/scripts/scan.mjs" "$(pwd)"
- On success: writes
docs/unwind/.cache/scan-manifest.json. Proceed to Step 1.
- On non-zero exit (no Node/pnpm, or build failed): skip to Step 1-LEGACY.
The manifest already contains everything the old Step-1 git parsing produced,
plus far more:
| architecture.md field | Manifest source |
|---|
repository block (type/url/branch/link_format) | manifest.repository (note: manifest uses linkFormat; emit it as link_format in YAML) |
| Project name / language / framework | manifest.project |
Per-layer status + entry_points | manifest.stats.byLayer (status) + manifest.layerIndex[layer].files (entry points) |
| Exact file/symbol counts | manifest.stats, manifest.files[].symbols |
Step 1: Derive architecture.md from the Manifest (+ adjudicate)
Read docs/unwind/.cache/scan-manifest.json. Then dispatch an Explore
subagent whose job is now narrower (the inventory is already known):
- Adjudicate the
unassigned bucket. manifest.layerIndex.unassigned.files
lists files the scanner could not confidently place. Inspect them and assign
each to a real layer (or confirm it's genuinely cross-cutting/non-layer).
- Add narrative observations per layer (technology, patterns, notable
aspects) — the facts the scan can't infer.
- Confirm/correct layer boundaries the scanner proposed.
Pass the subagent the manifest's repository, project, stats.byLayer, and
the unassigned file list. It returns the architecture document content (same
format as the Architecture Document Format below); the main agent writes it.
Map the scanner's layers to architecture.md layer keys: database→database,
domain→domain_model, service→service_layer, api→api,
messaging→messaging, frontend→frontend. Tests and infrastructure are
recorded under their own sections. A layer with a non-zero count in
stats.byLayer is status: detected.
Step 1-LEGACY: Pure-LLM Discovery (fallback only)
Used only when the deterministic scan was unavailable in Step 0. Gather repo
info and dispatch the Explore subagent to discover layers from scratch:
git remote get-url origin 2>/dev/null
git branch --show-current 2>/dev/null
Parse the remote URL:
- SSH format:
git@github.com:owner/repo.git → https://github.com/owner/repo
- HTTPS format:
https://github.com/owner/repo.git → https://github.com/owner/repo
- If no remote: use
local type with null URL
Build the repository info block:
repository:
type: github|gitlab|bitbucket|local
url: https://github.com/owner/repo
branch: main
link_format: https://github.com/owner/repo/blob/main/{path}#L{start}-L{end}
Then dispatch an Explore subagent (see Subagent Prompt below) to discover
layers and return the architecture document content.
Step 2: Check for Existing Documentation
Check if docs/unwind/architecture.md exists (Glob: docs/unwind/architecture.md):
- If exists: Pass to subagent as "previous analysis" for refresh mode
- If not: Fresh discovery
Step 3: Write the Architecture Document
When the Explore subagent completes with the document content:
-
Create the output directory:
mkdir -p docs/unwind
-
Write the content to docs/unwind/architecture.md using the Write tool
-
Verify the file was created
Step 5: Present Results and Prompt User
After the subagent completes, present the results to the user:
## Architecture Discovery Complete
I've analyzed the codebase and created the architecture document.
**Output:** `docs/unwind/architecture.md`
### Summary
[Include the summary from the subagent - framework, layers detected, etc.]
### Detected Layers
[List layers with their confidence levels]
### Next Steps
**Use AskUserQuestion to let them choose** between:
1. **Open the dashboard now** *(recommended)* — visualize the scanned structure before going deeper
2. **Continue with layer analysis** — dispatch specialist subagents for each layer
3. **Review the architecture document first** — open `docs/unwind/architecture.md` to verify the detection is accurate
Then act on the choice in the same turn — don't just describe it:
- **Dashboard** → immediately invoke the `unwind:uw-dashboard` skill. It generates
`rebuild-graph.json` from the scan manifest and launches the interactive graph
(everything shows as `scanned` this early). When they're done exploring, offer to
continue with `unwind:uw-analyze`.
- **Continue** → invoke `unwind:uw-analyze`.
- **Review** → open `docs/unwind/architecture.md`; afterwards re-offer the same choice.
If they pause, tell them how to resume: *"Run `unwind:uw-analyze` (type `/uw-analyze`) when ready."*
> **Pipeline:** **scan ✓** → analyze → plan → dashboard. Each phase is its own skill
> and ends by asking whether to continue or pause. (`uw-graph` is an optional export;
> the dashboard builds its graph on demand.)
Important: Always give the user the option to review before proceeding. The architecture document drives all subsequent analysis, so accuracy matters.
Subagent Prompt
Use this prompt when dispatching the discovery subagent:
Explore this codebase to identify its architectural layers and structure.
## Your Task
Systematically explore the codebase and return the architecture document content. The main agent will write the file.
**Repository information has already been gathered and will be provided to you.** Use the provided `repository.link_format` for all source links.
## Phase 1: Project Identification
Identify the technology stack by looking for:
**Build System:**
- `package.json` → Node.js/JavaScript
- `pom.xml` / `build.gradle` → Java
- `requirements.txt` / `pyproject.toml` → Python
- `go.mod` → Go
- `Cargo.toml` → Rust
- `*.csproj` → .NET
**Framework:** Check dependencies for Spring Boot, Django, Express, Rails, Next.js, etc.
**Database:** Look for connection strings, ORM config, migration directories.
## Phase 2: Directory Mapping
Scan source directories and map to layers:
| Directory Pattern | Likely Layer |
|-------------------|--------------|
| `repository/`, `dao/`, `data/` | Database |
| `model/`, `entity/`, `domain/` | Domain Model |
| `service/`, `usecase/`, `application/` | Service Layer |
| `controller/`, `api/`, `rest/`, `graphql/` | API Layer |
| `messaging/`, `events/`, `queue/`, `kafka/` | Messaging |
| `components/`, `pages/`, `views/`, `ui/` | Frontend |
## Phase 3: Confidence Assessment
For each layer, assess confidence:
- **High**: Clear directory structure, multiple files, consistent naming
- **Medium**: Some indicators but mixed patterns
- **Low**: Minimal evidence
- **Not Detected**: No evidence found
## Phase 4: Cross-Cutting Concerns
Identify aspects spanning multiple layers:
- Authentication/Authorization
- Logging
- Error Handling
- Caching
- Validation
## Phase 5: Return Architecture Document
**DO NOT attempt to write the file** - you don't have write permissions. Instead, return the complete architecture document content in your response. The main agent will write it to `docs/unwind/architecture.md`.
Return the document in this exact format:
```markdown
# Architecture Discovery: [Project Name]
> **For Claude:** REQUIRED SUB-SKILL: Use unwind:uw-analyze to analyze each layer.
## Discovery Metadata
- **Generated:** [ISO timestamp]
- **Project Root:** [path]
- **Framework:** [detected framework]
- **Language:** [primary language]
## Repository Information
```yaml
repository:
type: github|gitlab|bitbucket|local
url: https://github.com/owner/repo # or null if local
branch: main # or null if local
link_format: https://github.com/owner/repo/blob/main/{path}#L{start}-L{end}
For all downstream agents: Use link_format to create source links. Replace {path}, {start}, {end} with actual values.
Layer Configuration
layers:
database:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/data/layer/
dependencies: []
domain_model:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/domain/
dependencies: [database]
service_layer:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/services/
dependencies: [domain_model]
api:
status: detected|not_detected
confidence: high|medium|low
entry_points:
- path/to/controllers/
dependencies: [service_layer]
messaging:
status: detected|not_detected
confidence: high|medium|low
entry_points: []
dependencies: [service_layer]
frontend:
status: detected|not_detected
confidence: high|medium|low
entry_points: []
dependencies: [api]
cross_cutting:
authentication:
touches: [api, service_layer]
entry_points:
- path/to/security/
Database Layer
Status: [Detected/Not Detected] | Confidence: [High/Medium/Low]
Entry Points:
Initial Observations:
- [What you found - technology, patterns, notable aspects]
[Repeat for each layer with status != not_detected]
Cross-Cutting Concerns
Authentication
Touches: [layers]
[Observations]
[Other concerns...]
Discovery Notes
- [Unknowns, questions, areas needing clarification]
{REFRESH_CONTEXT}
## Output
After creating the architecture document, provide a brief summary:
- Project type and framework
- Which layers were detected (with confidence)
- Any notable findings or concerns
Refresh Mode Context
If previous architecture.md exists, add this to the subagent prompt:
## Previous Analysis
A previous architecture analysis exists. Compare the current codebase state to this previous analysis and:
1. Note any changes in the `## Changes Since Last Discovery` section
2. Update layer status/confidence if changed
3. Add new entry points discovered
4. Remove entry points that no longer exist
5. Update the `last_analyzed` timestamp
Previous analysis:
[CONTENTS OF EXISTING architecture.md]
Layer Detection Reference
Database Layer Indicators
- Directories:
repository/, dao/, data/, persistence/
- Files:
*Repository.java, *_repository.py, *.repo.ts
- ORM: Hibernate, SQLAlchemy, Prisma, TypeORM, Sequelize
- Migrations: Flyway, Liquibase, Alembic, Prisma migrations
Domain Model Indicators
- Directories:
domain/, model/, entity/, entities/
- Files:
*Entity.java, models.py, *.entity.ts
- Patterns:
@Entity, class Model, aggregates, value objects
Service Layer Indicators
- Directories:
service/, services/, usecase/, application/
- Files:
*Service.java, *_service.py, *.service.ts
- Patterns:
@Service, @Transactional, business logic methods
API Layer Indicators
- Directories:
controller/, api/, rest/, routes/, graphql/
- Files:
*Controller.java, views.py, *.controller.ts
- Patterns:
@RestController, @router, route definitions
Messaging Layer Indicators
- Directories:
messaging/, events/, queue/, kafka/, rabbitmq/
- Files:
*Listener.java, *Consumer.py, *.handler.ts
- Configs: Kafka, RabbitMQ, SQS configuration
Frontend Layer Indicators
- Directories:
components/, pages/, views/, ui/, src/app/
- Files:
*.tsx, *.vue, *.component.ts
- Configs: React, Vue, Angular, Next.js, Nuxt