> spring-boot-architecture
Structure Spring Boot 3+ projects with feature packaging and clean layering. Use when structuring Spring Boot 3 projects, defining layers, or applying architecture patterns. (triggers: pom.xml, build.gradle, structure, layering, dto, controller, @RestController, @Service, @Repository, @Entity, @Bean, @Configuration)
curl "https://skillshub.wtf/HoangNguyen0403/agent-skills-standard/spring-boot-architecture?format=md"Spring Boot Architecture Standards
Priority: P0 (CRITICAL)
Organize by Feature
- Package by Feature: Prefer
com.app.feature(e.g.,user,order) over technical layers (controllers) for scalability. - Dependency Rule: Outer layers (Web) depend on Inner (Service). Inner layers MUST NOT depend on Outer.
- DTO Pattern: ALWAYS use DTOs for API inputs/outputs. NEVER return
@Entitydirectly. - Java Records: Use
recordfor DTOs to ensure immutability (Java 17+).
See implementation examples for Java Record DTOs, controller patterns, and global exception handling.
Define Layer Responsibilities
- Controller (Web): Handle HTTP, Validation (
@Valid), DTO mapping. Delegate logic to Service. - Service (Business): Transaction boundaries, orchestration. Returns Domain/DTOs.
- Repository (Data): Database interactions only. Returns Entities/Projections.
Design API Layer
- Global Error Handling: Use
@RestControllerAdvicewithProblemDetails(RFC 7807). - Validation: Use Jakarta Bean Validation (
@NotNull,@Size) on DTOs. - Response: Use
ResponseEntityfor explicit status orResponseStatusException.
Verification Checklist (Mandatory)
- No Entities in API: Are all API responses using DTOs/Records instead of JPA Entities?
- Validation: Are
@Validand Jakarta Bean Validation constraints present on all input DTOs? - Layer coupling: Do Services depend on Controllers? (Prohibited)
- Transactionality: Are business transactions correctly bounded with
@Transactionalin the Service layer? - Error Details: Is
ProblemDetailsused for consistent error responses?
Anti-Patterns
- No Fat Controllers: Move business logic to Services.
- No Leaking Entities: Use DTOs instead of JPA Entities in APIs.
- No Circular Dependencies: Use Events or refactor to decouple services.
- No God Classes: Split large services into single-responsibility components.
References
> related_skills --same-repo
> common-store-changelog
Generate user-facing release notes for the Apple App Store and Google Play Store by collecting git history, triaging user-impacting changes, and drafting store-compliant changelogs. Enforces character limits (App Store ≤4000, Google Play ≤500), tone, and bullet format. Use when generating release notes, app store changelog, play store release, what's new, or version release notes for any mobile app. (triggers: generate changelog, app store notes, play store release, what's new, release notes, ve
> golang-tooling
Go developer toolchain — gopls LSP diagnostics, linting, formatting, and vet. Use when setting up Go tooling, running linters, or integrating gopls with Claude Code. (triggers: gopls, golangci-lint, golangci.yml, go vet, goimports, staticcheck, go tooling, go lint)
> common-ui-design
Design distinctive, production-grade frontend UI with bold aesthetic choices. Use when building web components, pages, interfaces, dashboards, or applications in any framework (React, Next.js, Angular, Vue, HTML/CSS). (triggers: build a page, create a component, design a dashboard, landing page, UI for, build a layout, make it look good, improve the design, build UI, create interface, design screen)
> common-owasp
OWASP Top 10 audit checklist for Web Applications (2021) and APIs (2023). Load during any security review, PR review, or codebase audit touching web, mobile backend, or API code. (triggers: security review, OWASP, broken access control, IDOR, BOLA, injection, broken auth, API review, authorization, access control)