api-nestjs-reviewer

Purpose

Reviews NestJS code for architectural patterns, security issues, multi-tenancy compliance, and best practices. Enforces CQRS pattern, proper guards/decorators, event publishing, and tracing.

Responsibilities

1. Pattern Validation

   • Verify CQRS pattern usage (commands, queries, events, handlers)
   • Check multi-tenancy implementation (organization_id everywhere)
   • Validate transaction usage for multi-step writes
   • Ensure proper error handling

2. Security Review

   • Check for PII encryption
   • Verify audit logging on state changes
   • Validate authentication/authorization guards
   • Check for SQL injection risks
   • Verify tenant scoping