review-code

name	review-code
description	Step-by-step general code review procedure for OpenAEV pull requests. Covers architecture, conventions, code quality, and delegation to specialized agents.

Review Code

Step 1 — Assess PR scope

# Count changed files and lines
git diff --stat HEAD~1

• If >500 lines changed: flag for splitting before detailed review
• If >20 files changed: flag for splitting before detailed review

Step 2 — Check PR metadata

Verify:

• ☐ PR title follows conventional commits ([context] type(scope): description)
• ☐ PR description explains WHAT and WHY
• ☐ Linked issue/ticket exists

Step 3 — Check build

mvn spotless:check -pl openaev-api
mvn compile -pl openaev-api -q

If build fails: stop review, report build failure.

For frontend changes:

cd openaev-front && yarn check-ts && yarn lint

Step 4 — Review architecture alignment

# Check for entity exposure in API layer (should use DTOs)
grep -rn "import io.openaev.database.model" openaev-api/src/main/java/io/openaev/api/ openaev-api/src/main/java/io/openaev/rest/ --include="*.java" | grep -v "Action\|ResourceType\|Capability\|Filters\|Grant"

Flag any direct entity usage in controllers or API responses (should use Output records + Mapper).

# Check for repository injection in controllers (should go through service)
grep -rn "Repository" openaev-api/src/main/java/io/openaev/api/ openaev-api/src/main/java/io/openaev/rest/ --include="*.java" | grep -v "test\|Test"

Step 5 — Review code quality

# System.out.println (should use @Slf4j)
grep -rn "System.out\|System.err\|printStackTrace" --include="*.java" openaev-api/src/main/java/

# jakarta.transaction.Transactional (should use Spring's)
grep -rn "jakarta.transaction.Transactional" --include="*.java" openaev-api/src/main/java/

# New code in deprecated module
git diff --name-only HEAD~1 | grep "openaev-framework"

# New code in legacy rest/ package (should be in api/)
git diff --name-only HEAD~1 | grep "io/openaev/rest/" | grep -v "test"

Step 6 — Check test coverage

# Are there test files for the changed production files?
for f in $(git diff --name-only HEAD~1 | grep "src/main/java" | grep -v "migration"); do
  testfile=$(echo "$f" | sed 's|src/main/java|src/test/java|' | sed 's|\.java$|Test.java|')
  if [ ! -f "$testfile" ]; then
    echo "⚠️ Missing test: $testfile"
  fi
done

Step 7 — Determine delegation

Based on changed files, determine if specialized agents should run:

# Security signals
grep -rn "AccessControl\|@Filter\|Capability\|Permission\|nativeQuery" --include="*.java" $(git diff --name-only HEAD~1) 2>/dev/null | head -10

# Performance signals
grep -rn "OneToMany\|ManyToMany\|FetchType\|findAll\|Pageable" --include="*.java" $(git diff --name-only HEAD~1) 2>/dev/null | head -10

# Tenancy signals
grep -rn "TenantBase\|tenant_id\|TenantContext" --include="*.java" $(git diff --name-only HEAD~1) 2>/dev/null | head -10

# Frontend signals
git diff --name-only HEAD~1 | grep -E "\.tsx$|\.ts$" | head -10

Step 8 — Compile review

Generate the Code Review Summary following the output format defined in code-reviewer.agent.md.