Windsurf rules

1<!-- Generated by EEIK generate_adapters.py on 2026-08-10 — do not edit by hand -->
2---
3trigger: always_on
4---
5 
6# Technology & Architecture — this project
7 
8**Type**: greenfield | **Domain**: generic | **Profile**: standard
9 
10## Stack
11 
12- (no manifest — generic enterprise defaults apply)
13 
14## Architecture (hexagonal + DDD)
15 
16- `domain/` — pure business logic, no framework dependencies
17- `application/` — use cases and orchestration
18- `infrastructure/` — adapters for DB, messaging, external services
19- `web/` — HTTP layer, DTOs
20 
21## Repository intelligence
22 
23This repository uses **EEIK**. Regenerate this file with `eeik generate-adapters --apply` after a
24manifest change.
25 
26## Capability packs (engineering intelligence available)
27 
28| Pack | Focus |
29|---|---|
30| `agent-harness` | Generic, enterprise-grade agent runtime conformance |
31| `ai-engineering` | Agentic AI engineering — agent design, LangGraph, RAG, prompt engineering, evaluation |
32| `angular` | Angular engineering capability pack — Angular 17+ standalone components, Signals API, OnPu… |
33| `architecture` | Enterprise architecture capability pack providing solution design, ADR authoring, NFR anal… |
34| `aws` | AWS cloud engineering capability pack — CDK, security, tagging, cost, deployment |
35| `banking` | Banking domain — payments, risk, and PSD2 / Basel III / PCI-DSS compliance |
36| `belgium-insurance` | Belgium insurance domain capability pack — Branch 21/23/26 product rules, FSMA/NBB regulat… |
37| `chaos-engineering` | Chaos & resilience engineering — hypothesis-driven fault-injection experiments, blast-radi… |
38| `containers` | Containerisation — Dockerfiles, ECS Fargate, and container runtime standards |
39| `core` | Foundational capability pack — cross-cutting agents, standards, and workflows for all proj… |
40| `data-engineering` | Data pipeline engineering capability pack |
41| `delivery` | Delivery — sprint planning, release management, and branching / CI-CD standards |
42| `finops` | Cloud FinOps — cost visibility, allocation/tagging, rightsizing, commitment discounts (RI/… |
43| `go` | Go engineering — cloud-native services, standard-library HTTP, table-driven tests, and idi… |
44| `governance` | Enterprise governance — architecture reviews, security reviews, PRR, AI governance, compli… |
45| `healthcare` | Healthcare domain — FHIR / HL7, HIPAA / GDPR health-data compliance, clinical data |
46| `insurance` | Insurance domain — claims, underwriting, and Solvency II / GDPR compliance |
47| `java` | Enterprise Java engineering capability pack for Spring Boot 3.x / Java 21 |
48| `modernization` | Legacy modernization — COBOL / RPG / IBM i analysis and strangler-fig migration |
49| `node` | Node.js / TypeScript backend — NestJS & Fastify services, strict TypeScript, Zod validatio… |
50| `openshift` | Red Hat OpenShift and Kubernetes engineering capability pack |
51| `platform-engineering` | Platform engineering — internal developer platforms (IDP), golden paths / paved roads, sel… |
52| `python` | Python engineering — FastAPI, Pydantic, pytest, and type-annotated services |
53| `react` | React engineering capability pack — Next.js 14 App Router, Server Components, TanStack Que… |
54| `retail` | Retail & e-commerce domain — catalog, cart/checkout, order management, inventory, pricing/… |
55 
56Activate the packs your `project-manifest.yaml` selects with `eeik activate --apply`; each materialises
57its agents and standards into `.claude/`.
58 
59## Standards enforced
60 
61`ai-governance`, `angular`, `api-standard`, `architecture-principles`, `aws`, `branching-standard`, `cicd`, `containers`, `data-engineering`, `estimation-standard`, `event-driven`, `fastapi`, `golden-rules`, `graphql`, `integration-standard`, `java`, `java-standard`, `mainframe`, `modernization-patterns`, `nfr-standard`, `observability-baseline`, `python`, `react-standard`, `security-baseline`, `spring-standard`, `sql`, `testing`
62 
63Standards live in `.claude/standards/` (and `capability-packs/<pack>/standards/`). They define the
64CORRECT/WRONG patterns the golden rules summarise.
65 
66## Approved patterns
67 
68- `agentic-supervisor-pattern`
69- `java-outbox-pattern`
70 
71See `knowledge/patterns/` for the full write-ups and `knowledge/anti-patterns/` for what to avoid.
72 
73## Specialist agents
74 
75| Agent | Use for |
76|---|---|
77| `a2a-engineer` | Use for designing and implementing Agent-to-Agent (A2A) communication protocols, multi-agent orchestration sys… |
78| `ai-engineer` | Use for designing and implementing generative AI applications: RAG pipelines, LLM integrations, Bedrock agents… |
79| `ai-governance-officer` | Use for AI governance reviews, model risk assessments, ethical AI audits, and producing model cards, AI risk r… |
80| `angular-coverage-checker` | Use for analysing Angular Istanbul/Karma coverage reports, identifying uncovered branches in components and se… |
81| `angular-developer` | Use for ticket-scoped Angular feature delivery: standalone components, services, reactive forms, lazy routes, … |
82| `angular-tester` | Use for generating Jasmine/TestBed spec files for Angular standalone components and services |
83| `arb-reviewer` | Use for Architecture Review Board (ARB) gate reviews: validating designs against enterprise standards, assessi… |
84| `architect` | Use for system design, architectural pattern validation, ADR authoring, bounded context reviews, API contract … |
85| `autogen-engineer` | Use for designing and implementing multi-agent systems with Microsoft AutoGen: conversation patterns, GroupCha… |
86| `aws-architect` | Use for AWS cloud architecture design, Well-Architected reviews, CDK stack skeletons, cost estimates, and scal… |
87| `aws-deploy-helper` | Use for AWS deployment tasks: ECS Fargate service deployments, Lambda updates, CDK deploy commands, deployment… |
88| `business-analyst` | Use for translating requirements into OpenAPI contracts, Gherkin acceptance criteria, data models, and event s… |
89| `cdk-terraform-helper` | Use for producing AWS CDK TypeScript constructs and Terraform HCL modules |
90| `ci-engineer` | Use for CI/CD pipeline design, GitHub Actions workflow authoring, build optimisation, test parallelisation, an… |
91| `code-reviewer` | Use for structured pull request reviews with severity labels [BLOCKER]/[MAJOR]/ [MINOR]/[NIT] |
92| `containerisation-helper` | Use for Docker and container-related tasks: writing Dockerfiles, docker-compose files, multi-stage builds, con… |
93| `coverage-enforcer` | Use for multi-stack coverage gap analysis (Java + Angular) and generating targeted tests to close gaps |
94| `crewai-engineer` | Use for designing and implementing multi-agent systems with CrewAI: crew composition, agent role definition, t… |
95| `data-engineer` | Use for data pipeline implementation: Kafka producer/consumer setup, Apache Spark jobs, dbt model authoring, A… |
96| `data-scientist` | Use for data science tasks: exploratory data analysis, feature engineering, model training and evaluation, sta… |
97| `dba-advisor` | Use for database design and operational guidance: Flyway/Liquibase migration authoring, query plan analysis, i… |
98| `devsecops-engineer` | Use for DevSecOps pipeline integration: SAST/DAST tooling, secrets scanning, container vulnerability scanning,… |
99| `enterprise-architect` | Use for TOGAF-aligned enterprise architecture artifacts: capability maps, value streams, technology lifecycle … |
100| `estimator` | Use for bottom-up effort estimation: producing P50/P80/P90 estimates for features, epics, and technical tasks |
101| `ibmi-modernization-expert` | Use for IBM i (AS/400) modernisation tasks: analysing RPG IV / RPGLE / CL programs, mapping IBM i business log… |
102| `incident-handler` | Use for incident management: declaring incidents, coordinating response, producing live status updates, and dr… |
103| `jacoco-coverage-tester` | Use for JaCoCo XML/HTML report analysis, identifying uncovered lines and branches in business logic, and gener… |
104| `java-developer` | Use for ticket-scoped Java Spring Boot implementation work: services, controllers, repositories, DTOs, and Map… |
105| `java-tech-lead` | Use for Java PR gating, standards enforcement, tech debt classification, and framework-level decisions on Spri… |
106| `java-tester` | Use for generating complete Java test suites: JUnit 5 unit tests, Spring Boot slice tests (@WebMvcTest, @DataJ… |
107| `kubernetes-engineer` | Use for Kubernetes and Helm workloads: Helm chart authoring, RBAC configuration, NetworkPolicy design, Horizon… |
108| `langraph-engineer` | Use for designing and implementing stateful multi-agent workflows with LangGraph: graph-based agent orchestrat… |
109| `local-deploy-helper` | Use for local development environment setup and troubleshooting: starting services with docker-compose, config… |
110| `mcp-engineer` | Use for designing and implementing Model Context Protocol (MCP) servers and clients: tool definitions, resourc… |
111| `ml-engineer` | Use for ML engineering tasks: building and optimising ML training pipelines, feature stores, model serving inf… |
112| `mlops-engineer` | Use for MLOps platform design and implementation: model registry management, drift monitoring, automated retra… |
113| `modernization-expert` | Use for mainframe and legacy application modernisation: COBOL-to-Java migration strategy, legacy Spring 4/5 to… |
114| `ops-engineer` | Use for operational tasks: CloudWatch dashboard design, runbook authoring, alert configuration, capacity plann… |
115| `performance-engineer` | Use for detecting N+1 queries, unbounded result sets, resource leaks, Angular rendering bottlenecks, and scala… |
116| `project-tracker` | Use for project status tracking, sprint planning support, dependency mapping, and delivery health reporting |
117| `python-developer` | Use for ticket-scoped Python implementation work: FastAPI services, Django applications, data scripts, CLI too… |
118| `rca-agent` | Use for post-incident Root Cause Analysis: conducting 5-Whys analysis, producing RCA reports, identifying syst… |
119| `react-developer` | Activate for React tasks: functional components, hooks, React Query, Zustand/Redux Toolkit state, Next.js App … |
120| `security-auditor` | Use for OWASP Top 10 security reviews, vulnerability analysis, and producing severity-rated findings with reme… |
121| `senior-developer` | Use for full-stack Java and Angular implementation spanning both backend and frontend layers |
122| `spring-security-engineer` | Activate for Spring Security tasks: OAuth2/OIDC configuration, JWT validation, method security (@PreAuthorize)… |
123| `sre-engineer` | Use for SRE practice implementation: SLI/SLO definition, error budget management, toil identification, reliabi… |
124| `technical-writer` | Use for technical documentation tasks: API documentation, architecture guides, onboarding docs, runbooks, ADRs… |
125| `test-quality-enforcer` | Use for auditing test suites for anti-patterns (empty assertions, mocking SUT, Thread.sleep, flaky patterns) a… |
126| `tester` | Use for comprehensive test strategy and generating full test pyramid coverage for any stack |
127