rzyfront/vendix-backend-domain
skills/vendix-backend-domain/SKILL.md
Backend domain architecture for Vendix: domains/* organization, flat namespaced controllers, scoped Prisma services, global guards/interceptors, and shared-service module ownership. Trigger: When working on backend domains.
$ install --global
skillsauthnpx skillsauth add rzyfront/vendix vendix-backend-domainInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 16, 2026, 5:03 AM107.7s1 file scanned
SKILL.md
- name:
- vendix-backend-domain
- description:
- >
- Backend domain architecture for Vendix:
- domains/* organization, flat namespaced
- module ownership. Trigger:
- When working on backend domains.
- license:
- MIT
- author:
- rzyfront
- version:
- 2.0
- scope:
- [root]
- auto_invoke:
- Working on backend domains
Vendix Backend Domain
Source of Truth
apps/backend/src/domains/apps/backend/src/app.module.tsapps/backend/src/prisma/services/
Current Architecture
Vendix backend is organized by domain folders such as auth, organization, store, ecommerce, superadmin, and public.
Controllers use flat namespaced routes like store/..., organization/..., superadmin/..., and public/...; current tenancy does not depend on route params like domains/:domain_id/....
Cross-Cutting Runtime
Domain services run under:
- global
JwtAuthGuard - global
StoreOperationsGuard RequestContextInterceptor- scoped Prisma services and AsyncLocalStorage request context
Understand these layers before adding manual tenant/auth logic.
Shared Service Ownership Rule
If a shared service is exported by another module, import the owning module instead of duplicating the provider in your module. This avoids dependency drift when shared services gain new dependencies.
Related Skills
vendix-backendvendix-backend-apivendix-prisma-scopesvendix-backend-middleware
Related Skills
rzyfront/mobile-dev
development
VerifiedTrustedCommunity
Mobile app development rules for Vendix Expo/React Native project. Trigger: When editing, creating, or modifying any file under apps/mobile, or when developing mobile-specific features.
5SKILL.mdUpdated May 29, 2026
rzyfront/vendix-subscription-gate
development
VerifiedTrustedCommunity
Feature gating by store subscription state: global store write guard, AI feature gate, Redis feature resolution, quota consumption, frontend paywall interceptor, banner, and subscription UI states. Trigger: When adding feature gates, paywalls, subscription-based access control, protecting store write operations, AI feature gates, or rollout flags.
5SKILL.mdUpdated May 16, 2026
rzyfront/vendix-saas-billing
testing
VerifiedTrustedCommunity
SaaS subscription billing for Vendix stores: plan pricing, invoices, Wompi platform payments, manual payments, partner commissions, payouts, proration, and dunning. Trigger: When creating SaaS invoices, working with partner rev-share, margin/surcharge pricing, invoice sequence allocation, partner payout batches, subscription payments, manual payments, or dunning flows.
5SKILL.mdUpdated May 16, 2026
rzyfront/vendix-redis-quota
development
VerifiedTrustedCommunity
Periodic quota counters with Redis, UTC period keys, Lua-based idempotent AI quota consumption, request-id deduplication, and post-success consumption. Trigger: When building quota counters, enforcing monthly/daily feature caps, or reusing AI quota patterns for uploads, emails, exports, or rate-limited features.
5SKILL.mdUpdated May 16, 2026