Name
Code → PRD
Description
Reverse-engineer any frontend, backend, or fullstack codebase into a complete Product Requirements Document (PRD). Analyzes routes, components, models, APIs, and user interactions to produce business-readable documentation detailed enough for engineers or AI agents to fully reconstruct every page and endpoint.
Code → PRD: Reverse-Engineer Any Codebase into Product Requirements
Features
- 3-phase workflow: global scan → page-by-page analysis → structured document generation
- Frontend support: React, Vue, Angular, Svelte, Next.js (App + Pages Router), Nuxt, SvelteKit, Remix
- Backend support: NestJS, Express, Django, Django REST Framework, FastAPI, Flask
- Fullstack support: Combined frontend + backend analysis with unified PRD output
- Mock detection: Automatically distinguishes real API integrations from mock/fixture data
- Enum extraction: Exhaustively lists all status codes, type mappings, and constants
- Model extraction: Parses Django models, NestJS entities, Pydantic schemas
- Automation scripts:
codebase_analyzer.py for scanning, prd_scaffolder.py for directory generation
- Quality checklist: Validation checklist for completeness, accuracy, readability
Usage
# Analyze a project and generate PRD skeleton
python3 scripts/codebase_analyzer.py /path/to/project -o analysis.json
python3 scripts/prd_scaffolder.py analysis.json -o prd/ -n "My App"
# Or use the slash command
/code-to-prd /path/to/project
Examples
Frontend (React)
/code-to-prd ./src
# → Scans components, routes, API calls, state management
# → Generates prd/ with per-page docs, enum dictionary, API inventory
Backend (Django)
/code-to-prd ./myproject
# → Detects Django via manage.py, scans urls.py, views.py, models.py
# → Documents endpoints, model schemas, admin config, permissions
Fullstack (Next.js)
/code-to-prd .
# → Analyzes both app/ pages and api/ routes
# → Generates unified PRD covering UI pages and API endpoints
Role
You are a senior product analyst and technical architect. Your job is to read a frontend codebase, understand every page's business purpose, and produce a complete PRD in product-manager-friendly language.
Dual Audience
- Product managers / business stakeholders — need to understand what the system does, not how
- Engineers / AI agents — need enough detail to fully reconstruct every page's fields, interactions, and relationships
Your document must describe functionality in non-technical language while omitting zero business details.
Supported Stacks
| Stack |
Frameworks |
| Frontend |
React, Vue, Angular, Svelte, Next.js (App/Pages Router), Nuxt, SvelteKit, Remix, Astro |
| Backend |
NestJS, Express, Fastify, Django, Django REST Framework, FastAPI, Flask |
| Fullstack |
Next.js (API routes + pages), Nuxt (server/ + pages/), Django (views + templates) |
For backend-only projects, the "page" concept maps to API resource groups or admin views. The same 3-phase workflow applies — routes become endpoints, components become controllers/views, and interactions become request/response flows.
Workflow
Phase 1 — Project Global Scan
Build global context before diving into pages.
1. Identify Project Structure
Scan the root directory and understand organization:
Frontend directories:
- Pages/routes (pages/, views/, routes/, app/, src/pages/)
- Components (components/, modules/)
- Route config (router.ts, routes.ts, App.tsx route definitions)
- API/service layer (services/, api/, requests/)
- State management (store/, models/, context/)
- i18n files (locales/, i18n/) — field display names often live here
Backend directories (NestJS):
- Modules (src/modules/, src/*.module.ts)
- Controllers (*.controller.ts) — route handlers
- Services (*.service.ts) — business logic
- DTOs (dto/, *.dto.ts) — request/response shapes
- Entities (entities/, *.entity.ts) — database models
- Guards/pipes/interceptors — auth, validation, transformation
Backend directories (Django):
- Apps (*/apps.py, */views.py, */models.py, */urls.py)
- URL config (urls.py, */urls.py)
- Views (views.py, viewsets.py) — route handlers
- Models (models.py) — database schema
- Serializers (serializers.py) — request/response shapes
- Forms (forms.py) — validation and field definitions
- Templates (templates/) — server-rendered pages
- Admin (admin.py) — admin panel configuration
Identify framework from package.json (Node.js frameworks) or project files (manage.py for Django, requirements.txt/pyproject.toml for Python). Routing, component patterns, and state management differ significantly across frameworks — identification enables accurate parsing.
2. Build Route & Page Inventory
Extract all pages from route config into a complete page inventory:
| Field |
Description |
| Route path |
e.g. /user/list, /order/:id |
| Page title |
From route config, breadcrumbs, or page component |
| Module / menu level |
Where it sits in navigation |
| Component file path |
Source file(s) implementing this page |
For file-system routing (Next.js, Nuxt), infer from directory structure.
For backend projects, the page inventory becomes an endpoint/resource inventory:
| Field |
Description |
| Endpoint path |
e.g. /api/users, /api/orders/:id |
| HTTP method |
GET, POST, PUT, DELETE, PATCH |
| Controller/view |
Source file handling this route |
| Module/app |
Which NestJS module or Django app owns it |
| Auth required |
Whether authentication/permissions are needed |
For NestJS: extract from @Controller + @Get/@Post/@Put/@Delete decorators.
For Django: extract from urls.py → urlpatterns and viewsets.py → router registrations.
3. Map Global Context
Before analyzing individual pages, capture:
- Global state — user info, permissions, feature flags, config
- Shared components — layout, nav, auth guards, error boundaries
- Enums & constants — status codes, type mappings, role definitions
- API base config — base URL, interceptors, auth headers, error handling
- Database models (backend) — entity relationships, field types, constraints
- Middleware (backend) — auth middleware, rate limiting, logging, CORS
- DTOs/Serializers (backend) — request validation shapes, response formats
These will be referenced throughout page/endpoint analysis.
Phase 2 — Page-by-Page Deep Analysis
Analyze every page in the inventory. Each page produces its own Markdown file.
Analysis Dimensions
For each page, answer:
A. Page Overview
- What does this page do? (one sentence)
- Where does it fit in the system?
- What scenario brings a user here?
B. Layout & Regions
- Major regions: search area, table, detail panel, action bar, tabs, etc.
- Spatial arrangement: top/bottom, left/right, nested
C. Field Inventory (core — be exhaustive)
For form pages, list every field:
| Field Name |
Type |
Required |
Default |
Validation |
Business Description |
| Username |
Text input |
Yes |
— |
Max 20 chars |
System login account |
For table/list pages, list:
- Search/filter fields (type, required, enum options)
- Table columns (name, format, sortable, filterable)
- Row action buttons (what each one does)
Field name extraction priority:
- Hardcoded display text in code
- i18n translation values
- Component
placeholder / label / title props
- Variable names (last resort — provide reasonable display name)
D. Interaction Logic
Describe as "user action → system response":
[Action] User clicks "Create"
[Response] Modal opens with form fields: ...
[Validation] Name required, phone format check
[API] POST /api/user/create with form data
[Success] Toast "Created successfully", close modal, refresh list
[Failure] Show API error message
Cover all interaction types:
- Page load / initialization (default queries, preloaded data)
- Search / filter / reset
- CRUD operations (create, read, update, delete)
- Table: pagination, sorting, row selection, bulk actions
- Form submission & validation
- Status transitions (e.g. approval flows: pending → approved → rejected)
- Import / export
- Field interdependencies (selecting value A changes options in field B)
- Permission controls (buttons/fields visible only to certain roles)
- Polling / auto-refresh / real-time updates
E. API Dependencies
Case 1: API is integrated (real HTTP calls in code)
| API Name |
Method |
Path |
Trigger |
Key Params |
Notes |
| Get users |
GET |
/api/user/list |
Load, search |
page, size, keyword |
Paginated |
Case 2: API not integrated (mock/hardcoded data)
When the page uses mock data, hardcoded fixtures, setTimeout simulations, or Promise.resolve() stubs — the API isn't real yet. Reverse-engineer the required API spec from page functionality and data shape.
For each needed API, document:
- Method, suggested path, trigger
- Input params (name, type, required, description)
- Output fields (name, type, description)
- Core business logic description
Detection signals:
setTimeout / Promise.resolve() returning data → mock
- Data defined in component or
*.mock.* files → mock
- Real HTTP calls (
axios, fetch, service layer) with real paths → integrated
__mocks__ directory → mock
F. Page Relationships
- Inbound: Which pages link here? What parameters do they pass?
- Outbound: Where can users navigate from here? What parameters?
- Data coupling: Which pages share data or trigger refreshes in each other?
Phase 3 — Generate Documentation
Output Structure
Create prd/ in project root (or user-specified directory):
prd/
├── README.md # System overview
├── pages/
│ ├── 01-user-mgmt-list.md # One file per page
│ ├── 02-user-mgmt-detail.md
│ ├── 03-order-mgmt-list.md
│ └── ...
└── appendix/
├── enum-dictionary.md # All enums, status codes, type mappings
├── page-relationships.md # Navigation map between pages
└── api-inventory.md # Complete API reference
README.md Template
# [System Name] — Product Requirements Document
## System Overview
[2-3 paragraphs: what the system does, business context, primary users]
## Module Overview
| Module | Pages | Core Functionality |
|--------|-------|--------------------|
| User Management | User list, User detail, Role mgmt | CRUD users, assign roles and permissions |
## Page Inventory
| # | Page Name | Route | Module | Doc Link |
|---|-----------|-------|--------|----------|
| 1 | User List | /user/list | User Mgmt | [→](./pages/01-user-mgmt-list.md) |
## Global Notes
### Permission Model
[Summarize auth/role system if present in code]
### Common Interaction Patterns
[Global rules: all deletes require confirmation, lists default to created_at desc, etc.]
Per-Page Document Template
# [Page Name]
> **Route:** `/xxx/xxx`
> **Module:** [Module name]
> **Generated:** [Date]
## Overview
[2-3 sentences: core function and use case]
## Layout
[Region breakdown — text description or ASCII diagram]
## Fields
### [Region: e.g. "Search Filters"]
| Field | Type | Required | Options / Enum | Default | Notes |
|-------|------|----------|---------------|---------|-------|
### [Region: e.g. "Data Table"]
| Column | Format | Sortable | Filterable | Notes |
|--------|--------|----------|-----------|-------|
### [Region: e.g. "Actions"]
| Button | Visibility Condition | Behavior |
|--------|---------------------|----------|
## Interactions
### Page Load
[What happens on mount]
### [Scenario: e.g. "Search"]
- **Trigger:** [User action]
- **Behavior:** [System response]
- **Special rules:** [If any]
### [Scenario: e.g. "Create"]
- **Trigger:** ...
- **Modal/drawer content:** [Fields and logic inside]
- **Validation:** ...
- **On success:** ...
## API Dependencies
| API | Method | Path | Trigger | Notes |
|-----|--------|------|---------|-------|
| ... | ... | ... | ... | ... |
## Page Relationships
- **From:** [Source pages + params]
- **To:** [Target pages + params]
- **Data coupling:** [Cross-page refresh triggers]
## Business Rules
[Anything that doesn't fit above]
Key Principles
1. Business Language First
Don't write "calls useState to manage loading state." Write "search button shows a spinner to prevent duplicate submissions."
Don't write "useEffect fetches on mount." Write "page automatically loads the first page of results on open."
Include technical details only when they directly affect product behavior: API paths (engineers need them), validation rules (affect UX), permission conditions (affect visibility).
2. Don't Miss Hidden Logic
Code contains logic PMs may not realize exists:
- Field interdependencies (type A shows field X; type B shows field Y)
- Conditional button visibility
- Data formatting (currency with 2 decimals, date formats, status label mappings)
- Default sort order and page size
- Debounce/throttle effects on user input
- Polling / auto-refresh intervals
3. Exhaustively List Enums
When code defines enums (status codes, type codes, role types), list every value and its meaning. These are often scattered across constants files, component valueEnum configs, or API response mappers.
4. Mark Uncertainty — Don't Guess
If a field or logic's business meaning can't be determined from code (e.g. abbreviated variable names, overly complex conditionals), mark it [TBC] and explain what you observed and why you're uncertain. Never fabricate business meaning.
5. Keep Page Files Self-Contained
Each page's Markdown should be standalone — reading just that file gives complete understanding. Use relative links when referencing other pages or appendix entries.
Page Type Strategies
Frontend Pages
| Page Type |
Focus Areas |
| List / Table |
Search conditions, columns, row actions, pagination, bulk ops |
| Form / Create-Edit |
Every field, validation, interdependencies, post-submit behavior |
| Detail / View |
Displayed info, tab/section organization, available actions |
| Modal / Drawer |
Describe as part of triggering page — not a separate file. But fully document content |
| Dashboard |
Data cards, charts, metrics meaning, filter dimensions, refresh frequency |
Backend Endpoints (NestJS / Django / Express)
| Endpoint Type |
Focus Areas |
| CRUD resource |
All fields (from DTO/serializer), validation rules, permissions, pagination, filtering, sorting |
| Auth endpoints |
Login/register flow, token format, refresh logic, password reset, OAuth providers |
| File upload |
Accepted types, size limits, storage destination, processing pipeline |
| Webhook / event |
Trigger conditions, payload shape, retry policy, idempotency |
| Background job |
Trigger, schedule, input/output, failure handling, monitoring |
| Admin views (Django) |
Registered models, list_display, search_fields, filters, inline models, custom actions |
Execution Pacing
Large projects (>15 pages): Work in batches of 3-5 pages per module. Complete system overview + page inventory first. Output each batch for user review before proceeding.
Small projects (≤15 pages): Complete all analysis in one pass.
Common Pitfalls
| Pitfall |
Fix |
| Using component names as page names |
UserManagementTable → "User Management List" |
| Skipping modals and drawers |
They contain critical business logic — document fully |
| Missing i18n field names |
Check translation files, not just component JSX |
| Ignoring dynamic route params |
/order/:id = page requires an order ID to load |
| Forgetting permission controls |
Document which roles see which buttons/pages |
| Assuming all APIs are real |
Check for mock data patterns before documenting endpoints |
| Skipping Django admin customization |
admin.py often contains critical business rules (list filters, custom actions, inlines) |
| Missing NestJS guards/pipes |
@UseGuards, @UsePipes contain auth and validation logic that affects behavior |
| Ignoring database constraints |
Model field constraints (unique, max_length, choices) are validation rules for the PRD |
| Overlooking middleware |
Auth middleware, rate limiters, and CORS config define system-wide behavior |
Tooling
Scripts
| Script |
Purpose |
Usage |
scripts/codebase_analyzer.py |
Scan codebase → extract routes, APIs, models, enums, structure |
python3 codebase_analyzer.py /path/to/project |
scripts/prd_scaffolder.py |
Generate PRD directory skeleton from analysis JSON |
python3 prd_scaffolder.py analysis.json |
Recommended workflow:
# 1. Analyze the project (JSON output — works for frontend, backend, or fullstack)
python3 scripts/codebase_analyzer.py /path/to/project -o analysis.json
# 2. Review the analysis (markdown summary)
python3 scripts/codebase_analyzer.py /path/to/project -f markdown
# 3. Scaffold the PRD directory with stubs
python3 scripts/prd_scaffolder.py analysis.json -o prd/ -n "My App"
# 4. Fill in TODO sections page-by-page using the SKILL.md workflow
Both scripts are stdlib-only — no pip install needed.
References
| File |
Contents |
references/prd-quality-checklist.md |
Validation checklist for completeness, accuracy, readability |
references/framework-patterns.md |
Framework-specific patterns for routes, state, APIs, forms, permissions |
Attribution
This skill was inspired by code-to-prd by @lihanglogan, who proposed the original concept and methodology in PR #368. The core three-phase workflow (global scan → page-by-page analysis → structured document generation) originated from that work. This version was rebuilt from scratch in English with added tooling (analysis scripts, scaffolder, framework reference, quality checklist).
1---2name: code-to-prd-23description: Reverse-engineer any codebase into a complete Product Requirements Document (PRD). Analyzes routes, components, state management, API integrations, and user interactions to produce business-readable documentation detailed enough for engineers or A...4license: MIT5---6
7## Name
8
9Code → PRD
10
11## Description
12
13Reverse-engineer any frontend, backend, or fullstack codebase into a complete Product Requirements Document (PRD). Analyzes routes, components, models, APIs, and user interactions to produce business-readable documentation detailed enough for engineers or AI agents to fully reconstruct every page and endpoint.
14
15# Code → PRD: Reverse-Engineer Any Codebase into Product Requirements
16
17## Features
18
19- **3-phase workflow**: global scan → page-by-page analysis → structured document generation
20- **Frontend support**: React, Vue, Angular, Svelte, Next.js (App + Pages Router), Nuxt, SvelteKit, Remix
21- **Backend support**: NestJS, Express, Django, Django REST Framework, FastAPI, Flask
22- **Fullstack support**: Combined frontend + backend analysis with unified PRD output
23- **Mock detection**: Automatically distinguishes real API integrations from mock/fixture data
24- **Enum extraction**: Exhaustively lists all status codes, type mappings, and constants
25- **Model extraction**: Parses Django models, NestJS entities, Pydantic schemas
26- **Automation scripts**: `codebase_analyzer.py` for scanning, `prd_scaffolder.py` for directory generation
27- **Quality checklist**: Validation checklist for completeness, accuracy, readability
28
29## Usage
30
31```bash
32# Analyze a project and generate PRD skeleton
33python3 scripts/codebase_analyzer.py /path/to/project -o analysis.json
34python3 scripts/prd_scaffolder.py analysis.json -o prd/ -n "My App"
35
36# Or use the slash command
37/code-to-prd /path/to/project
38```
39
40## Examples
41
42### Frontend (React)
43```bash
44/code-to-prd ./src
45# → Scans components, routes, API calls, state management
46# → Generates prd/ with per-page docs, enum dictionary, API inventory
47```
48
49### Backend (Django)
50```bash
51/code-to-prd ./myproject
52# → Detects Django via manage.py, scans urls.py, views.py, models.py
53# → Documents endpoints, model schemas, admin config, permissions
54```
55
56### Fullstack (Next.js)
57```bash
58/code-to-prd .
59# → Analyzes both app/ pages and api/ routes
60# → Generates unified PRD covering UI pages and API endpoints
61```
62
63---
64
65## Role
66
67You are a senior product analyst and technical architect. Your job is to read a frontend codebase, understand every page's business purpose, and produce a complete PRD in **product-manager-friendly language**.
68
69### Dual Audience
70
711. **Product managers / business stakeholders** — need to understand *what* the system does, not *how*
722. **Engineers / AI agents** — need enough detail to **fully reconstruct** every page's fields, interactions, and relationships
73
74Your document must describe functionality in non-technical language while omitting zero business details.
75
76### Supported Stacks
77
78| Stack | Frameworks |
79|-------|-----------|
80| **Frontend** | React, Vue, Angular, Svelte, Next.js (App/Pages Router), Nuxt, SvelteKit, Remix, Astro |
81| **Backend** | NestJS, Express, Fastify, Django, Django REST Framework, FastAPI, Flask |
82| **Fullstack** | Next.js (API routes + pages), Nuxt (server/ + pages/), Django (views + templates) |
83
84For **backend-only** projects, the "page" concept maps to **API resource groups** or **admin views**. The same 3-phase workflow applies — routes become endpoints, components become controllers/views, and interactions become request/response flows.
85
86---
87
88## Workflow
89
90### Phase 1 — Project Global Scan
91
92Build global context before diving into pages.
93
94#### 1. Identify Project Structure
95
96Scan the root directory and understand organization:
97
98```
99Frontend directories:
100- Pages/routes (pages/, views/, routes/, app/, src/pages/)
101- Components (components/, modules/)
102- Route config (router.ts, routes.ts, App.tsx route definitions)
103- API/service layer (services/, api/, requests/)
104- State management (store/, models/, context/)
105- i18n files (locales/, i18n/) — field display names often live here
106
107Backend directories (NestJS):
108- Modules (src/modules/, src/*.module.ts)
109- Controllers (*.controller.ts) — route handlers
110- Services (*.service.ts) — business logic
111- DTOs (dto/, *.dto.ts) — request/response shapes
112- Entities (entities/, *.entity.ts) — database models
113- Guards/pipes/interceptors — auth, validation, transformation
114
115Backend directories (Django):
116- Apps (*/apps.py, */views.py, */models.py, */urls.py)
117- URL config (urls.py, */urls.py)
118- Views (views.py, viewsets.py) — route handlers
119- Models (models.py) — database schema
120- Serializers (serializers.py) — request/response shapes
121- Forms (forms.py) — validation and field definitions
122- Templates (templates/) — server-rendered pages
123- Admin (admin.py) — admin panel configuration
124```
125
126**Identify framework** from `package.json` (Node.js frameworks) or project files (`manage.py` for Django, `requirements.txt`/`pyproject.toml` for Python). Routing, component patterns, and state management differ significantly across frameworks — identification enables accurate parsing.
127
128#### 2. Build Route & Page Inventory
129
130Extract all pages from route config into a complete **page inventory**:
131
132| Field | Description |
133|-------|-------------|
134| Route path | e.g. `/user/list`, `/order/:id` |
135| Page title | From route config, breadcrumbs, or page component |
136| Module / menu level | Where it sits in navigation |
137| Component file path | Source file(s) implementing this page |
138
139For file-system routing (Next.js, Nuxt), infer from directory structure.
140
141**For backend projects**, the page inventory becomes an **endpoint/resource inventory**:
142
143| Field | Description |
144|-------|-------------|
145| Endpoint path | e.g. `/api/users`, `/api/orders/:id` |
146| HTTP method | GET, POST, PUT, DELETE, PATCH |
147| Controller/view | Source file handling this route |
148| Module/app | Which NestJS module or Django app owns it |
149| Auth required | Whether authentication/permissions are needed |
150
151For NestJS: extract from `@Controller` + `@Get/@Post/@Put/@Delete` decorators.
152For Django: extract from `urls.py` → `urlpatterns` and `viewsets.py` → router registrations.
153
154#### 3. Map Global Context
155
156Before analyzing individual pages, capture:
157
158- **Global state** — user info, permissions, feature flags, config
159- **Shared components** — layout, nav, auth guards, error boundaries
160- **Enums & constants** — status codes, type mappings, role definitions
161- **API base config** — base URL, interceptors, auth headers, error handling
162- **Database models** (backend) — entity relationships, field types, constraints
163- **Middleware** (backend) — auth middleware, rate limiting, logging, CORS
164- **DTOs/Serializers** (backend) — request validation shapes, response formats
165
166These will be referenced throughout page/endpoint analysis.
167
168---
169
170### Phase 2 — Page-by-Page Deep Analysis
171
172Analyze every page in the inventory. **Each page produces its own Markdown file.**
173
174#### Analysis Dimensions
175
176For each page, answer:
177
178##### A. Page Overview
179- What does this page do? (one sentence)
180- Where does it fit in the system?
181- What scenario brings a user here?
182
183##### B. Layout & Regions
184- Major regions: search area, table, detail panel, action bar, tabs, etc.
185- Spatial arrangement: top/bottom, left/right, nested
186
187##### C. Field Inventory (core — be exhaustive)
188
189**For form pages**, list every field:
190
191| Field Name | Type | Required | Default | Validation | Business Description |
192|-----------|------|----------|---------|------------|---------------------|
193| Username | Text input | Yes | — | Max 20 chars | System login account |
194
195**For table/list pages**, list:
196- Search/filter fields (type, required, enum options)
197- Table columns (name, format, sortable, filterable)
198- Row action buttons (what each one does)
199
200**Field name extraction priority:**
2011. Hardcoded display text in code
2022. i18n translation values
2033. Component `placeholder` / `label` / `title` props
2044. Variable names (last resort — provide reasonable display name)
205
206##### D. Interaction Logic
207
208Describe as **"user action → system response"**:
209
210```
211[Action] User clicks "Create"
212[Response] Modal opens with form fields: ...
213[Validation] Name required, phone format check
214[API] POST /api/user/create with form data
215[Success] Toast "Created successfully", close modal, refresh list
216[Failure] Show API error message
217```
218
219**Cover all interaction types:**
220- Page load / initialization (default queries, preloaded data)
221- Search / filter / reset
222- CRUD operations (create, read, update, delete)
223- Table: pagination, sorting, row selection, bulk actions
224- Form submission & validation
225- Status transitions (e.g. approval flows: pending → approved → rejected)
226- Import / export
227- Field interdependencies (selecting value A changes options in field B)
228- Permission controls (buttons/fields visible only to certain roles)
229- Polling / auto-refresh / real-time updates
230
231##### E. API Dependencies
232
233**Case 1: API is integrated** (real HTTP calls in code)
234
235| API Name | Method | Path | Trigger | Key Params | Notes |
236|----------|--------|------|---------|-----------|-------|
237| Get users | GET | /api/user/list | Load, search | page, size, keyword | Paginated |
238
239**Case 2: API not integrated** (mock/hardcoded data)
240
241When the page uses mock data, hardcoded fixtures, `setTimeout` simulations, or `Promise.resolve()` stubs — the API isn't real yet. **Reverse-engineer the required API spec** from page functionality and data shape.
242
243For each needed API, document:
244- Method, suggested path, trigger
245- Input params (name, type, required, description)
246- Output fields (name, type, description)
247- Core business logic description
248
249**Detection signals:**
250- `setTimeout` / `Promise.resolve()` returning data → mock
251- Data defined in component or `*.mock.*` files → mock
252- Real HTTP calls (`axios`, `fetch`, service layer) with real paths → integrated
253- `__mocks__` directory → mock
254
255##### F. Page Relationships
256
257- **Inbound**: Which pages link here? What parameters do they pass?
258- **Outbound**: Where can users navigate from here? What parameters?
259- **Data coupling**: Which pages share data or trigger refreshes in each other?
260
261---
262
263### Phase 3 — Generate Documentation
264
265#### Output Structure
266
267Create `prd/` in project root (or user-specified directory):
268
269```
270prd/
271├── README.md # System overview
272├── pages/
273│ ├── 01-user-mgmt-list.md # One file per page
274│ ├── 02-user-mgmt-detail.md
275│ ├── 03-order-mgmt-list.md
276│ └── ...
277└── appendix/
278 ├── enum-dictionary.md # All enums, status codes, type mappings
279 ├── page-relationships.md # Navigation map between pages
280 └── api-inventory.md # Complete API reference
281```
282
283#### README.md Template
284
285```markdown
286# [System Name] — Product Requirements Document
287
288## System Overview
289[2-3 paragraphs: what the system does, business context, primary users]
290
291## Module Overview
292
293| Module | Pages | Core Functionality |
294|--------|-------|--------------------|
295| User Management | User list, User detail, Role mgmt | CRUD users, assign roles and permissions |
296
297## Page Inventory
298
299| # | Page Name | Route | Module | Doc Link |
300|---|-----------|-------|--------|----------|
301| 1 | User List | /user/list | User Mgmt | [→](./pages/01-user-mgmt-list.md) |
302
303## Global Notes
304
305### Permission Model
306[Summarize auth/role system if present in code]
307
308### Common Interaction Patterns
309[Global rules: all deletes require confirmation, lists default to created_at desc, etc.]
310```
311
312#### Per-Page Document Template
313
314```markdown
315# [Page Name]
316
317> **Route:** `/xxx/xxx`
318> **Module:** [Module name]
319> **Generated:** [Date]
320
321## Overview
322[2-3 sentences: core function and use case]
323
324## Layout
325[Region breakdown — text description or ASCII diagram]
326
327## Fields
328
329### [Region: e.g. "Search Filters"]
330| Field | Type | Required | Options / Enum | Default | Notes |
331|-------|------|----------|---------------|---------|-------|
332
333### [Region: e.g. "Data Table"]
334| Column | Format | Sortable | Filterable | Notes |
335|--------|--------|----------|-----------|-------|
336
337### [Region: e.g. "Actions"]
338| Button | Visibility Condition | Behavior |
339|--------|---------------------|----------|
340
341## Interactions
342
343### Page Load
344[What happens on mount]
345
346### [Scenario: e.g. "Search"]
347- **Trigger:** [User action]
348- **Behavior:** [System response]
349- **Special rules:** [If any]
350
351### [Scenario: e.g. "Create"]
352- **Trigger:** ...
353- **Modal/drawer content:** [Fields and logic inside]
354- **Validation:** ...
355- **On success:** ...
356
357## API Dependencies
358
359| API | Method | Path | Trigger | Notes |
360|-----|--------|------|---------|-------|
361| ... | ... | ... | ... | ... |
362
363## Page Relationships
364- **From:** [Source pages + params]
365- **To:** [Target pages + params]
366- **Data coupling:** [Cross-page refresh triggers]
367
368## Business Rules
369[Anything that doesn't fit above]
370```
371
372---
373
374## Key Principles
375
376### 1. Business Language First
377Don't write "calls `useState` to manage loading state." Write "search button shows a spinner to prevent duplicate submissions."
378
379Don't write "useEffect fetches on mount." Write "page automatically loads the first page of results on open."
380
381Include technical details only when they **directly affect product behavior**: API paths (engineers need them), validation rules (affect UX), permission conditions (affect visibility).
382
383### 2. Don't Miss Hidden Logic
384Code contains logic PMs may not realize exists:
385- Field interdependencies (type A shows field X; type B shows field Y)
386- Conditional button visibility
387- Data formatting (currency with 2 decimals, date formats, status label mappings)
388- Default sort order and page size
389- Debounce/throttle effects on user input
390- Polling / auto-refresh intervals
391
392### 3. Exhaustively List Enums
393When code defines enums (status codes, type codes, role types), list **every value and its meaning**. These are often scattered across constants files, component `valueEnum` configs, or API response mappers.
394
395### 4. Mark Uncertainty — Don't Guess
396If a field or logic's business meaning can't be determined from code (e.g. abbreviated variable names, overly complex conditionals), mark it `[TBC]` and explain what you observed and why you're uncertain. Never fabricate business meaning.
397
398### 5. Keep Page Files Self-Contained
399Each page's Markdown should be **standalone** — reading just that file gives complete understanding. Use relative links when referencing other pages or appendix entries.
400
401---
402
403## Page Type Strategies
404
405### Frontend Pages
406
407| Page Type | Focus Areas |
408|-----------|------------|
409| **List / Table** | Search conditions, columns, row actions, pagination, bulk ops |
410| **Form / Create-Edit** | Every field, validation, interdependencies, post-submit behavior |
411| **Detail / View** | Displayed info, tab/section organization, available actions |
412| **Modal / Drawer** | Describe as part of triggering page — not a separate file. But fully document content |
413| **Dashboard** | Data cards, charts, metrics meaning, filter dimensions, refresh frequency |
414
415### Backend Endpoints (NestJS / Django / Express)
416
417| Endpoint Type | Focus Areas |
418|---------------|------------|
419| **CRUD resource** | All fields (from DTO/serializer), validation rules, permissions, pagination, filtering, sorting |
420| **Auth endpoints** | Login/register flow, token format, refresh logic, password reset, OAuth providers |
421| **File upload** | Accepted types, size limits, storage destination, processing pipeline |
422| **Webhook / event** | Trigger conditions, payload shape, retry policy, idempotency |
423| **Background job** | Trigger, schedule, input/output, failure handling, monitoring |
424| **Admin views** (Django) | Registered models, list_display, search_fields, filters, inline models, custom actions |
425
426---
427
428## Execution Pacing
429
430**Large projects (>15 pages):** Work in batches of 3-5 pages per module. Complete system overview + page inventory first. Output each batch for user review before proceeding.
431
432**Small projects (≤15 pages):** Complete all analysis in one pass.
433
434---
435
436## Common Pitfalls
437
438| Pitfall | Fix |
439|---------|-----|
440| Using component names as page names | `UserManagementTable` → "User Management List" |
441| Skipping modals and drawers | They contain critical business logic — document fully |
442| Missing i18n field names | Check translation files, not just component JSX |
443| Ignoring dynamic route params | `/order/:id` = page requires an order ID to load |
444| Forgetting permission controls | Document which roles see which buttons/pages |
445| Assuming all APIs are real | Check for mock data patterns before documenting endpoints |
446| Skipping Django admin customization | `admin.py` often contains critical business rules (list filters, custom actions, inlines) |
447| Missing NestJS guards/pipes | `@UseGuards`, `@UsePipes` contain auth and validation logic that affects behavior |
448| Ignoring database constraints | Model field constraints (unique, max_length, choices) are validation rules for the PRD |
449| Overlooking middleware | Auth middleware, rate limiters, and CORS config define system-wide behavior |
450
451---
452
453## Tooling
454
455### Scripts
456
457| Script | Purpose | Usage |
458|--------|---------|-------|
459| `scripts/codebase_analyzer.py` | Scan codebase → extract routes, APIs, models, enums, structure | `python3 codebase_analyzer.py /path/to/project` |
460| `scripts/prd_scaffolder.py` | Generate PRD directory skeleton from analysis JSON | `python3 prd_scaffolder.py analysis.json` |
461
462**Recommended workflow:**
463```bash
464# 1. Analyze the project (JSON output — works for frontend, backend, or fullstack)
465python3 scripts/codebase_analyzer.py /path/to/project -o analysis.json
466
467# 2. Review the analysis (markdown summary)
468python3 scripts/codebase_analyzer.py /path/to/project -f markdown
469
470# 3. Scaffold the PRD directory with stubs
471python3 scripts/prd_scaffolder.py analysis.json -o prd/ -n "My App"
472
473# 4. Fill in TODO sections page-by-page using the SKILL.md workflow
474```
475
476Both scripts are **stdlib-only** — no pip install needed.
477
478### References
479
480| File | Contents |
481|------|----------|
482| `references/prd-quality-checklist.md` | Validation checklist for completeness, accuracy, readability |
483| `references/framework-patterns.md` | Framework-specific patterns for routes, state, APIs, forms, permissions |
484
485---
486
487## Attribution
488
489This skill was inspired by [code-to-prd](https://github.com/lihanglogan/code-to-prd) by [@lihanglogan](https://github.com/lihanglogan), who proposed the original concept and methodology in [PR #368](https://github.com/alirezarezvani/claude-skills/pull/368). The core three-phase workflow (global scan → page-by-page analysis → structured document generation) originated from that work. This version was rebuilt from scratch in English with added tooling (analysis scripts, scaffolder, framework reference, quality checklist).