Identifies code patterns, design patterns in use, and coding conventions throughout the codebase.
Identifies design patterns, architectural patterns, and coding conventions throughout the codebase.
/plugin marketplace add avovello/cc-plugins/plugin install audit@cc-pluginsIdentifies code patterns, design patterns in use, and coding conventions throughout the codebase.
✅ DOES:
❌ DOES NOT:
Architectural Pattern Detection
Design Pattern Detection
Creational Patterns:
createX(), XFactory classesStructural Patterns:
Behavioral Patterns:
Coding Convention Detection
Error Handling:
Async Patterns:
Data Validation:
Testing Pattern Detection
Configuration Pattern Detection
# Code Patterns Inventory
## Architectural Patterns
### MVC (Model-View-Controller)
- **Presence**: YES
- **Implementation**: Clear separation with models/, controllers/, views/ directories
- **Consistency**: High (90%+ of code follows pattern)
- **Examples**:
- `src/models/User.js` - Data models
- `src/controllers/UserController.js` - Request handlers
- `src/views/` - Template files
### Service Layer
- **Presence**: YES
- **Implementation**: Business logic separated into services/
- **Consistency**: High
- **Examples**:
- `src/services/UserService.js` - User business logic
- `src/services/AuthService.js` - Authentication logic
### Repository Pattern
- **Presence**: YES
- **Implementation**: Data access abstracted into repository classes
- **Consistency**: Medium (60% of models have repositories)
- **Examples**:
- `src/repositories/UserRepository.js`
- `src/repositories/OrderRepository.js`
## Design Patterns
### Factory Pattern
- **Usage**: Moderate (15 instances)
- **Examples**:
- `src/factories/ResponseFactory.js` - Creates standardized API responses
- `src/factories/ValidatorFactory.js` - Creates validators based on schema type
- **Consistency**: Good
### Singleton Pattern
- **Usage**: Limited (3 instances)
- **Examples**:
- `src/database/Connection.js` - Database connection singleton
- `src/cache/RedisClient.js` - Redis client singleton
- **Note**: All singletons use getInstance() pattern consistently
### Strategy Pattern
- **Usage**: High (8 instances)
- **Examples**:
- `src/strategies/PaymentStrategy.js` - Payment method strategies (Stripe, PayPal, Crypto)
- `src/strategies/AuthStrategy.js` - Auth strategies (JWT, OAuth, API Key)
- **Consistency**: Excellent - all use consistent interface
### Observer Pattern (Pub/Sub)
- **Usage**: High (event-driven architecture)
- **Implementation**: EventEmitter-based
- **Examples**:
- `src/events/UserEvents.js` - User-related events
- `src/listeners/EmailListener.js` - Email notification listener
- `src/listeners/LogListener.js` - Logging listener
## Coding Conventions
### Error Handling
- **Pattern**: Custom Error Classes + Express Error Middleware
- **Consistency**: High (95% of routes use try-catch)
- **Implementation**:
```javascript
// Standard pattern found throughout:
try {
// Operation
} catch (error) {
next(new AppError(error.message, 500));
}
src/validation/userSchema.jssrc/middleware/validate.js - Validation middlewarerouter.post('/users', validate(userSchema), controller.create);
auth middleware on protected routesrouter.get('/profile', auth, controller.getProfile);
describe('UserService', () => {
it('should create user', async () => {
// Arrange
const userData = { name: 'Test', email: 'test@example.com' };
// Act
const user = await UserService.create(userData);
// Assert
expect(user.name).toBe('Test');
});
});
jest.mock('../database/Connection');
jest.mock('../services/EmailService');
src/config/env.js.env.development, .env.test, .env.production{
"success": true,
"data": {},
"message": "Success message"
}
{
"success": false,
"error": "Error message",
"code": "ERROR_CODE"
}
Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks. Masters vulnerability assessment, threat modeling, secure authentication (OAuth2/OIDC), OWASP standards, cloud security, and security automation. Handles DevSecOps integration, compliance (GDPR/HIPAA/SOC2), and incident response. Use PROACTIVELY for security audits, DevSecOps, or compliance implementation.
Elite code review expert specializing in modern AI-powered code analysis, security vulnerabilities, performance optimization, and production reliability. Masters static analysis tools, security scanning, and configuration review with 2024/2025 best practices. Use PROACTIVELY for code quality assurance.
Creates comprehensive technical documentation from existing codebases. Analyzes architecture, design patterns, and implementation details to produce long-form technical manuals and ebooks. Use PROACTIVELY for system documentation, architecture guides, or technical deep-dives.