antigravity-for-claude-code

Designs and authors Claude Code sub-agents (.claude/agents/*.md files) that integrate with an existing skill-stack. Use when: subagent, sub-agent, agent design, .claude/agents, custom agent, agent frontmatter, verifier agent, planner agent, agent description, agent delegation, Explore, Plan, general-purpose, Agent tool, agent permissions, agent tools field, agent skills preload, agent memory field, isolation worktree, permissionMode, agent decomposition, multi-agent decision, planner SPEC, verifier checklist, agent context isolation, tool-restricted agent, нужен ли мне агент, как сделать сабагента, как настроить .claude/agents. SKIP: building skills (→skill-evaluation), evaluating LLM agents in production (→agent-evaluation), Claude API / Messages SDK outside Claude Code (→claude-api), MCP server authoring (→mcp-server-author), agent-team coordination across separate sessions (→agent-teams), codex-specific agent authoring (use codex own conventions).

Tests and benchmarks LLM agents covering behavioral testing, capability assessment, reliability metrics, and production monitoring. Use when evaluating agent quality, designing eval suites, building regression tests, or measuring real-world reliability beyond benchmark scores.

System architecture discipline from Newman + Khononov + Richards/Ford. Use when: project-architect designs a new system, decomposes a monolith, chooses architecture style, writes ADRs, defines service boundaries. Trigger terms: bounded context, subdomain, architecture quantum, ADR, fitness function, saga, strangler fig. SKIP: single-file refactor, tactical UI design.

Build modern websites with Astro 6.x — Islands Architecture, zero-JS defaults, Server Islands, Actions, Content Layer, View Transitions. Use for static sites, content-heavy sites, marketing pages, blogs, documentation, e-commerce fronts. Trigger terms: astro, astro.build, .astro file, Islands Architecture, content collections, View Transitions, Server Islands, Astro Actions, astro:db, hybrid SSR/SSG.

Better Auth — framework-agnostic TypeScript authentication. Email/password, OAuth/social login, sessions, JWT, 2FA, magic link, email OTP, organizations/teams, RBAC, passkeys. Use when: better-auth, betterAuth, authClient, auth.api, createAuthClient, signUp.email, signIn.email, signIn.social, signIn.magicLink, getSession, useSession, twoFactor, magicLink, emailOTP, organization plugin, trustedOrigins, baseURL, BETTER_AUTH_SECRET, NextAuth alternative, Auth.js migration, Prisma/Drizzle/Kysely auth adapter, cookie sessions, OAuth callback, social provider, sign-in, login, OAuth flow, JWT issuance. SKIP: Auth0/Clerk/Supabase Auth platforms, Lucia (sunset), Passport.js (legacy Express middleware), NextAuth/Auth.js usage (different lib).

Biome 2 — Rust-based lint + format for JS/TS/JSON/CSS. Use when: biome, biome.json, biome.jsonc, biome check, biome format, biome lint, biome ci, ESLint replacement, Prettier replacement, fast formatter, single-file-config, organize imports, recommended rules, suppression comments, VS Code Biome extension, pre-commit hook. SKIP: ESLint-specific flat config (→eslint), Prettier-only formatting questions, dprint.

Requirements gathering before any creative work. Use BEFORE starting a feature/component/fix — explores user intent, scope, success criteria via 1-3 targeted questions, NOT free-form discussion. Replaces superpowers:brainstorming. Use when: новая фича, новая идея, brainstorm, поговорим про X, давай придумаем.

BullMQ 5 — Redis-backed Node.js queue. Jobs, workers, flows, repeating, rate-limit, sandboxed processors, observability. Use when: bullmq, bull mq, taskforcesh, Queue, Worker, QueueEvents, FlowProducer, JobScheduler, repeatable job, cron, delay, backoff, priority, lifo, attempts, removeOnComplete, sandboxed processor, useWorkerThreads, sequentialize, rate limiter, parent-child, child jobs, dependencies, bull-board, bullmq-pro, getJobCounts, drain, obliterate, QueueScheduler (removed), graceful shutdown. SKIP: legacy Bull (→bull-legacy cascade), Agenda, Inngest / Trigger.dev (managed SaaS), Celery (Python), Sidekiq (Ruby).

[RU: интеграция CloudPayments — карты, СБП, рекуррент, 54-ФЗ] CloudPayments Russian payment gateway — REST API, JS widget, webhook handlers (Check/Pay/Fail/Refund/Recurrent), HMAC-SHA256 Content-HMAC verification, токенизация, рекуррентные подписки, СБП, 54-ФЗ CustomerReceipt. Use when: cloudpayments, cp.charge, /payments/cards/charge, /payments/tokens/charge, widget.pay, Content-HMAC, Pay-уведомление, CustomerReceipt. SKIP: YooKassa/Tinkoff/Stripe/Robokassa (use respective skill); 54-ФЗ without CloudPayments (→fiscalization); generic HMAC webhook (→nodejs).

OpenAI Codex CLI — OpenAI's official Rust-based agentic terminal coding tool (NOT the deprecated 2021 Codex completion model). Use when: openai codex, codex CLI, @openai/codex npm, codex exec, codex app-server, AGENTS.md, .codex/config.toml, sandbox_mode read-only/workspace-write/danger-full-access, approval_policy untrusted/on-request/on-failure/never, /permissions, /mcp, codex --full-auto, gpt-5-codex, codex profiles, ChatGPT subscription auth. SKIP: Claude Code CLI (→claude-code), OpenCode CLI (→opencode), OpenAI SDK programmatic (→openai-sdk), GitHub Copilot CLI (different tool), deprecated code-davinci-002 model (discontinued).

GPU compute in Python with NVIDIA's cuda-python bindings, CuPy (drop-in NumPy on GPU), Numba @cuda.jit, and PyCUDA. Specializes in the optional-dependency pattern — runtime CUDA detection with graceful CPU fallback so code runs on machines without GPU. Use when cuda, gpu, nvidia, cupy, numba, @cuda.jit, pycuda, cuda-python, cuBLAS, cuDNN, device detection, GPU/CPU fallback, optional GPU acceleration, torch.cuda.is_available, ImportError cuda, CUDA toolkit version mismatch, illegal memory access, multi-GPU, kernel fusion, RawKernel.

Stack-agnostic vulnerability hunting — OWASP Top 10 2025, OWASP API Top 10, OWASP LLM Top 10, supply-chain via OSV.dev + native scanners, secrets, crypto, web (XSS/CSRF/CORS), SSRF, deserialization/RCE, broken access control, race conditions. Produces categorized findings + remediation plan. Use when: проверь на уязвимости, security audit, найди дыры, аудит безопасности, OWASP, SQL injection, XSS, CSRF, IDOR, SSRF, prompt injection, supply chain, dependency CVE, hardcoded secrets, security review, penetration testing prep. SKIP: secure-coding discipline upfront (→karpathy-guidelines); SOC2/PCI-DSS/HIPAA compliance audits; live exploitation / payload generation (defensive-only).

Data-systems design discipline from Kleppmann (DDIA). Use when: choosing storage engine, designing replication/sharding, picking transaction isolation level, evaluating consistency models. Trigger terms: LSM-tree, B-tree, quorum, linearizability, snapshot isolation, MVCC, write skew, CAP, eventual consistency, partitioning. SKIP: pure frontend, simple CRUD on stock RDBMS defaults.

Universal debugging discipline for failure investigation. Distilled from Agans + Zeller + Spinellis. Use when: a verification command failed, a test went red, an intermittent bug, or worker-doctor is dispatched on retry. Trigger terms: reproduce, minimize, SSCCE, hypothesis, bisection, delta debugging, audit trail. SKIP: feature planning or pure UI aesthetics with no failure.

Design system foundations 2026 — OKLCH color ramps (perceptually-even, APCA/WCAG verified), fluid typography systems + font pairings, layout systems (bento, container queries, fluid space), 3-layer design tokens + DESIGN.md (DTCG/Style Dictionary), visual style taxonomy (Glass 2.0, refined brutalism, spatial, bento...), iconography/illustration direction, and art-direction synthesis per project archetype. Use when: oklch, color ramp, palette, contrast APCA, design tokens, DTCG, style dictionary, tokens studio, DESIGN.md, type scale, fluid clamp, font pairing, variable fonts, bento grid, container queries, subgrid, fluid spacing, visual style, glassmorphism, brutalism, spatial UI, iconography, lucide, art direction, moodboard to system. SKIP: animation/motion (→web-animation-router), vanilla CSS architecture/@layer (→css-architecture-2026 — complements this).

Token architecture, component specifications, and slide generation. Three-layer tokens (primitive→semantic→component), CSS variables, spacing/typography scales, component specs, strategic slide creation. Use for design tokens, systematic design, brand-compliant presentations.

Django — batteries-included Python web framework. Models + ORM, admin, forms, auth, templates, async views, ASGI deployment. Use when: django, django 6, Model, QuerySet, manage.py, settings.py, makemigrations, migrate, runserver, django admin, ModelForm, ModelAdmin, generic views, async view, async ORM (aget/afilter/asave), drf, django rest framework, django ninja, CONN_MAX_AGE, select_related, prefetch_related, AUTH_USER_MODEL, csrf, ASGI, gunicorn UvicornWorker, whitenoise, collectstatic, ALLOWED_HOSTS, CSRF_TRUSTED_ORIGINS, AsyncPaginator, template partials, background tasks framework. SKIP: FastAPI async-first APIs (→fastapi), Flask micro (→flask cascade), Node frameworks (→fastify/hono), pure SQLAlchemy ORM (→sqlalchemy cascade), DRF deep customization in isolation (→djangorestframework cascade).

ESLint 10 — JS/TS linter with flat config, typescript-eslint, framework plugins, Prettier/Biome coexistence. Use when: eslint, eslint.config.js, eslint.config.ts, flat config, typescript-eslint, eslint-plugin-react, eslint-plugin-vue, next/core-web-vitals, @nuxt/eslint, eslint-config-prettier, .eslintrc migration, custom rules, eslint --fix, --cache, lint-staged. SKIP: Biome-only projects (→biome), Prettier-only formatting, Standard JS, dprint.

Expo SDK 55 + React Native 0.85 — build, ship, and update iOS/Android apps. Expo Router file-based navigation, EAS Build/Submit/Update, config plugins, Expo Modules API, push notifications, deep links, New Architecture (Fabric + TurboModules + bridgeless) on by default. Use when: react native, expo, ios app, android app, mobile app, expo router, eas build, eas update, eas submit, ota updates, push notifications, expo-notifications, expo-auth-session, expo-linking, config plugin, prebuild, expo modules api, dev client, app.json, app.config.ts, eas.json, fabric, turbomodules, hermes, bridgeless. SKIP: pure web React (→react), Next.js (→nextjs), Flutter, Cordova/Ionic, native Swift/Kotlin without RN.

FastAPI — modern async Python web framework on Starlette + Pydantic v2 with auto-generated OpenAPI 3.1. Use when: fastapi, fast api, FastAPI, async python api, python rest api, pydantic-backed api, async/await python web, path operation, APIRouter, include_router, Depends, sub-dependencies, dependencies with yield, BaseModel response, response_model, OAuth2PasswordBearer, OAuth2PasswordRequestForm, SecurityScopes, JWT python-jose PyJWT, passlib bcrypt argon2, CORSMiddleware, TrustedHostMiddleware, GZipMiddleware, lifespan asynccontextmanager, BackgroundTasks, StreamingResponse, EventSourceResponse, WebSocket, TestClient, AsyncClient httpx, dependency_overrides, uvicorn, gunicorn UvicornWorker, openapi auto-doc, Swagger UI, ReDoc. SKIP: Django (→django cascade), Flask (→flask cascade), Node frameworks (→fastify/hono), pure Pydantic schemas (→pydantic), SQLAlchemy ORM specifics (→sqlalchemy cascade).

Fastify 5 — Node-native production HTTP framework. Schema-based validation, plugin encapsulation, hooks pipeline, TS type providers. Use when: fastify, FastifyInstance, fastify.register, fastify-plugin, withTypeProvider, TypeBoxTypeProvider, fastify-type-provider-zod, @fastify/jwt, @fastify/cors, @fastify/helmet, @fastify/rate-limit, @fastify/swagger, @fastify/multipart, addContentTypeParser, setErrorHandler, preHandler, keepAliveTimeout, trustProxy, fastify.inject, graceful shutdown. SKIP: Hono/edge (→hono), Express (→express), NestJS (→nestjs cascade), pure node:http (→nodejs).

Git distributed VCS workflows. Use when: git, rebase, interactive rebase, autosquash, fixup, worktree, conventional commits, branching, GitHub Flow, trunk-based, GitFlow, signing, GPG, SSH signing, sigstore, hooks, husky, lefthook, commitlint, .gitignore, git lfs, rerere, autostash, force-with-lease, cherry-pick, bisect, reflog. SKIP: GitHub UI/PRs (→github), SVN/Mercurial migration, monorepo tooling (nx/turbo).

Use when the user needs to run GitNexus CLI commands like analyze/index a repo, check status, clean the index, generate a wiki, or list indexed repos. Examples: "Index this repo", "Reanalyze the codebase", "Generate a wiki"

Use when the user is debugging a bug, tracing an error, or asking why something fails. Examples: "Why is X failing?", "Where does this error come from?", "Trace this bug"

Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: "How does X work?", "What calls this function?", "Show me the auth flow"

Documents GitNexus itself — available tools, knowledge graph queries, MCP resources, graph schema, and workflow reference. Activated by GitNexus-related questions about tooling, usage, and capabilities.

Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: "Is it safe to change X?", "What depends on this?", "What will break?"

Use when the user wants to review a pull request, understand what a PR changes, assess risk of merging, or check for missing test coverage. Examples: "Review this PR", "What does PR #42 change?", "Is this PR safe to merge?"

Use when the user wants to rename, extract, split, move, or restructure code safely. Examples: "Rename this function", "Extract this into a module", "Refactor this class", "Move this to a separate file"

[RU: oauth google, авторизация гугл, service account, sa key, refresh token, invalid_grant, adc, google cloud auth] Google auth for all Google APIs — OAuth 2.0, Service Account JWT, ADC. Use when: auth setup, invalid_grant, SA key, refresh token, PKCE, gcloud ADC. SKIP: GA4 (→ga4-data-api); GSC (→google-search-console); GTM (→gtm).

Hono 4 — small ultrafast multi-runtime web framework on Web Standards. Use when: hono, honojs, Cloudflare Workers, Bun, Deno, Vercel Edge, AWS Lambda, hono Context (c.req, c.json, c.env, c.var), hc<AppType>() RPC client, zValidator, @hono/zod-validator, hono/jwt, hono/cors, hono/cookie, hono/etag, hono/secure-headers, hono/body-limit, hono/compress, RegExpRouter, TrieRouter, LinearRouter, hono/tiny, @hono/node-server, KVNamespace, D1Database, R2Bucket, DurableObjectNamespace. SKIP: Fastify / Node-native (→fastify), Express (→express), NestJS (→nestjs cascade), itty-router (niche).

httpx — modern Python HTTP client with sync + async APIs, HTTP/2, strict timeouts, and a broadly requests-compatible surface. Use when: httpx, python httpx, AsyncClient, Client, httpx.get, async http client, requests replacement, HTTP/2 python, follow_redirects, raise_for_status, MockTransport, respx, pytest-httpx, ASGITransport, requests migration, async aiohttp alternative, BasicAuth, DigestAuth, custom Auth flow, streaming download, http2=True, connection pool. SKIP: requests (legacy sync-only, →requests-legacy); aiohttp (different ecosystem); urllib3 low-level; Node fetch (→nodejs).

Web app internationalization — next-intl (Next.js/React) and vue-i18n (Nuxt/Vue). Use when: i18n, internationalization, translation, locale, next-intl, vue-i18n, i18next, multilingual, language switcher, ICU, hreflang, plural, getTranslations, useTranslations, useI18n, createI18n, locale routing, Crowdin, Lokalise, Tolgee. SKIP: single-locale app, raw Intl.* without library, simple lang toggle.

LangChain Python v1 — LLM app framework. Composable chains (LCEL/Runnable), typed structured outputs, tool calling, RAG, agents (via langgraph), streaming, LangSmith. Use when: langchain, langchain python, langchain v1, init_chat_model, with_structured_output, LCEL, Runnable, RunnablePassthrough, RunnableParallel, @tool, bind_tools, ChatPromptTemplate, MessagesPlaceholder, retriever, vectorstore, embeddings, RAG, astream_events, create_agent, AgentExecutor migration, RunnableWithMessageHistory, LangSmith, set_llm_cache. SKIP: pure Anthropic/OpenAI SDK (→claude-api / openai-sdk), graph-only orchestration (→langgraph), HTTP serving (→fastapi).

Linux sysadmin for Ubuntu 24.04 production — Angie (Nginx fork), PM2, PostgreSQL 18, Redis 8, Docker 29, PHP 8.5, UFW. Use when: server health, nginx, angie, reverse proxy, SSL, certbot, ACME, firewall, ufw, fail2ban, backup, disk space, OOM, load average, pm2, ecosystem.config.js, docker, journalctl, logrotate, systemd, systemctl, cron, sysctl, SIGTERM, fd exhaustion, conntrack. Also: site down, 502, 504, disk full, service crash, OOM-killed, SSL expired. SKIP: app code (→ app skill), Kubernetes, cloud-managed (ECS/GKE), non-Ubuntu.

Production logging standards — structured JSON logs, correlation IDs, OpenTelemetry, log levels (TRACE/DEBUG/INFO/WARN/ERROR/FATAL) per environment, what-to-log vs what-NEVER-to-log (secrets/PII/req.body), Pino/structlog/loguru recipes, Sentry/Bugsnag error tracking, Grafana Loki aggregation, performance + cost discipline. Use when: настрой логирование, добавь логи, sensible logging, structured logging, correlation ID, request ID, trace ID, pino, structlog, loguru, sentry, observability, logs design, как залогировать, что логировать, что не логировать. SKIP: writing the application code itself (→stack skills); finding secrets that already leaked (→cybersecurity-audit); debugging via reading existing logs (→systematic-debugging).

[RU: интеграция MAX мессенджера (VK Tech) — Mini Apps Bridge, валидация initData, HMAC] MAX Bridge SDK для мини-приложений мессенджера МАХ (VK Tech, RU-альтернатива Telegram). window.WebApp API, initData/initDataUnsafe, серверная HMAC-SHA256 валидация WebAppData с двойным HMAC через bot token, DeviceStorage/SecureStorage, BiometricManager, HapticFeedback, NfcManager, BackButton, shareMaxContent, openCodeReader. Use when: MAX мессенджер, MAX Mini App, MAX webapp, MAX Bridge, dev.max.ru, max-web-app.js, window.WebApp, WebAppData, мини-приложение МАХ, MAX bot, VK Tech messenger, validation, launch data, initData HMAC, RU Telegram alternative. SKIP: Telegram Mini App (→telegram-bot), VK Mini App (→vk-bridge), generic OAuth flow (→nodejs/better-auth).

Design, build, and validate MCP (Model Context Protocol) servers for Claude Code, Codex CLI, OpenCode and other MCP hosts. Use when: mcp server, model context protocol, build mcp, design mcp, stdio transport, streamable http, tool schema, mcp host config, json-rpc tools. SKIP: using existing MCP tools as a consumer (→host's own MCP config), authoring SKILL.md (→skill-evaluation).

Next.js 16 App Router — Server Components, Server Actions, 'use cache', PPR, Turbopack, async params/cookies/headers. Use when: nextjs, next.js, app router, RSC, server actions, 'use cache', cacheLife, cacheTag, PPR, Turbopack, proxy.ts, middleware, generateMetadata, generateStaticParams, parallel routes, intercepting routes, route handlers, next/image, next/dynamic. SKIP: React without Next (→react), Vercel deploy (→vercel).

Node.js 24 production — type stripping, native APIs, framework selection, graceful shutdown, security, observability. Use when: node, nodejs, node 24, --experimental-strip-types, ts-node alternative, AbortController, AbortSignal, AsyncLocalStorage, worker_threads, Piscina, SIGTERM, PM2, AppError, error.cause, argon2, node:sqlite, node:test, ESM, CJS interop, OpenTelemetry, Pino. SKIP: Fastify deep-dive (→fastify), Hono (→hono), BullMQ (→bullmq), TS type system (→typescript), Prisma (→prisma), Next.js (→nextjs).