| name | awcms-micro-pr-review |
| description | Review pull request AWCMS-Micro terhadap Definition of Done dan kontrak proyek. Gunakan saat diminta review PR/diff AWCMS-Micro. Memeriksa scope atomic, migration/OpenAPI/AsyncAPI sinkron, tenant/ABAC/RLS, idempotency, audit, masking, test, dan docs sesuai doc 09, 10, 12. |
AWCMS-Micro — PR Review
Ikuti docs/awcms-micro/12_generator_prompt.md (Prompt Review PR), docs/awcms-micro/09_roadmap_repository_commit.md (PR checklist), dan docs/awcms-micro/10_template_kode_coding_standard.md.
Fokus review
- Scope sesuai issue; tidak ada unrelated change.
- No secret / data customer asli / dump DB /
.env.
- Schema berubah → ada migration berurutan (
awcms-micro-new-migration).
- API berubah → OpenAPI diperbarui (
awcms-micro-new-endpoint).
- Event berubah → AsyncAPI diperbarui (
awcms-micro-new-event).
- Tenant context + ABAC + RLS untuk data tenant-scoped.
- Idempotency untuk mutation high-risk.
- Audit high-risk + redaction.
- Soft delete policy untuk resource deletable; posted/append-only entity tidak dihapus.
- Input validation lengkap; error response standar.
- Sensitive data masked.
- Test relevan ada & pass; build pass.
- Docs diperbarui; commit mengikuti convention
<type>(<scope>): <summary>.
Konsistensi kontrak
- Migration ↔ ERD (doc 04) ↔ matrix migration (doc 13).
- Endpoint ↔ OpenAPI ↔ tabel error/header (doc 05).
- Event ↔ AsyncAPI ↔
module.ts publishes/subscribes.
- Soft delete ↔ ERD kolom/index ↔ OpenAPI DELETE/restore/includeDeleted ↔ audit event.
Output
Verdict: Approve / Request changes / Comment only
Critical issues:
Security issues:
Functional issues:
Data/migration issues:
API/event contract issues:
Testing gaps:
Documentation gaps:
Suggested patch:
Untuk modul sensitif, jalankan juga awcms-micro-security-review.
