bitso-java

RFC-39 compliant API best practices for Java services. Covers request/response patterns, error handling, pagination, versioning, and authentication standards. Use when designing or reviewing REST APIs in Java services.

RFC-29 compliant changelog management with Common Changelog format and Unreleased section extension. Validates changelog on commits, generates from git history, and ensures all merged PRs are documented. Use when setting up changelog workflows or retrofitting existing repositories.

Systematic workflow for CodeRabbit reviews - local CLI, PR threads, and commit attribution

Enforces consistent coding standards across the codebase including naming conventions, code organization, and documentation requirements. Use when writing new code, reviewing pull requests, or refactoring existing code.

Database integration patterns for Java services using jOOQ and Flyway. Covers code generation, read/write splitting, migration guidelines, and version compatibility. Use when setting up or maintaining PostgreSQL integration.

Version catalog strategy, dependency management, BOMs, and version constraints for Java/Gradle projects. Covers version centralization, never-downgrade policy, bundle patterns, resolution strategies, and compatibility matrices.

RFC-44 compliant distributed locking patterns for Java services. Covers PostgreSQL advisory locks and Redis-based locking, migration workflows, and common patterns. Use when implementing or migrating distributed locking mechanisms.

Guide users through a structured workflow for co-authoring documentation, proposals, technical specs, decision docs, RFCs, or ADRs. Use when user wants to write documentation, create proposals, draft specs, write up decisions, or similar structured content. Trigger when user mentions writing docs, creating proposals, drafting specs, RFCs, ADRs, or any substantial documentation task.

Generate and update AI-friendly documentation for services following RFC-37 templates. Produces concepts/, features/, getting-started/ content with Mermaid diagrams and C4 architecture. Use when generating or updating service documentation.

Validate documentation structure, freshness, and RFC-37 compliance using bitso-documentation-linter. Ensures docs/ folder structure (api, decisions, concepts, how-tos, runbooks) and Confluence mirroring metadata. Use when validating documentation or checking for sync issues.

RFC-27 compliant runtime log level control for Java services. Covers proper log level usage, enabling dynamic log levels in estate-catalog, and changing levels via Developer Portal or Bitso CLI. Use when debugging production issues or configuring logging for services.

Enable mise and hk quality gates in a repository. Detects project type, generates configuration files, and migrates existing hooks. Use when onboarding a repository to the Bitso quality gate infrastructure.

SonarQube integration via MCP for Java projects. Fix issues, check coverage, review security hotspots, and analyze code duplications using the SonarQube MCP Server (v1.10+). No local setup required.

Fix Dependabot security vulnerabilities in Java/Gradle projects using severity-based processing, dependency substitution strategies, and dependency graph verification. Use when Dependabot alerts need resolution with proper CI validation.

Set up, validate, and maintain Git hooks (pre-commit, pre-push, etc.) following best practices. Ensures hooks are version-controlled, automatically installed, and follow consistent patterns across the team. Use when creating new hooks, debugging hook issues, or ensuring hook compliance.

Gradle build configuration standards for Java projects. Covers version catalogs, dependency bundles, multi-module setup, BOM management, and common troubleshooting. Use when configuring Gradle builds or reviewing dependency management.

Manage Dependabot PRs efficiently during Greenflag KTLO weeks. Covers squad-level grouping, catalog search for library ownership, and routine dependency updates. Use for non-security dependency updates; for CVE fixes, use fix-vulnerabilities skill.

Initial compliance assessment for gRPC migration. Identifies proto modules and services requiring migration.

Migrate proto modules to proper contract distribution. Split into proto-only and -generated modules.

Migrate from Failure entity to standard gRPC Status error handling. Create next-version services with proper error codes.

Orchestrator for migrating CustomRPC to standard gRPC. Coordinates assessment, contract distribution, and error handling migrations.

RFC-33 compliant gRPC service standards for Java services. Covers protobuf contracts, service implementation, resilience patterns (retry, bulkhead, circuit breaker), and linting. Use when creating or maintaining gRPC services and clients.

JaCoCo code coverage configuration for Java/Gradle projects. Covers report generation, coverage thresholds, multi-module aggregation, and SonarQube integration. Use when setting up or troubleshooting code coverage.

Integration testing patterns for Java/Spring Boot services with Spock. Covers BaseIntegrationSpec setup, Testcontainers, mock frameworks, gRPC testing, REST controller testing, Kafka consumers, and GrpcMock for external services.

Java service standards for Bitso projects. Covers tech stack requirements, project organization, code review guidelines, MapStruct usage, and build verification practices. Use when creating new Java services or reviewing existing code.

Java testing guidelines using Spock Framework and Groovy. Covers test structure, mocking patterns, persistence testing with Testcontainers, gRPC testing, and Spring Boot test configurations. Use when writing or reviewing tests.

Create and manage Jira tickets with severity-based processing. Includes project discovery, ticket search, and branch naming.

RFC-27 compliant static Logback configuration for Java services. Covers logback.xml structure, appenders, encoders, and deployment-specific configuration. Use when setting up or reviewing logging configuration in Java services.

Configure MCP (Model Context Protocol) servers for various IDEs. Includes setup, troubleshooting, and discovery management.

Use PIT (Pitest) mutation testing to identify weak tests and improve test quality in Java projects. Finds tests that pass but don't actually verify behavior correctly. Use when improving test suite quality beyond line coverage metrics.

Java null safety using NullAway and JSpecify annotations. Covers Gradle setup, package-info.java creation with @NullMarked, annotation patterns, and migration from legacy annotations using OpenRewrite.

Create, update, and manage pull requests using GitHub CLI. Includes branch protection, auto-assignment, and commit formats. For stacked PRs, see the stacked-prs skill.

Orchestrate quality checks at lifecycle points (pre-edit, post-edit, on-stop). Coordinates test, doc, style, and security checks to ensure consistent code quality. Use when making significant code changes or before completing a task.

REST API standards for Java Spring services. Covers Bitso API guidelines, authentication integration, OpenAPI documentation, and RFC-37 service documentation. Use when creating or maintaining REST endpoints.

Performs security analysis on code changes including credential scanning, input validation, authentication checks, and dependency vulnerability assessment. Use when reviewing code for security issues or before completing security-sensitive changes.

Local development workflow connecting your machine to the stage Kubernetes cluster using Bitso CLI and Signadot Local. Use when running services locally against cluster dependencies, setting up inbound/outbound connectivity, replacing Telepresence, or troubleshooting local-to-cluster networking.

Use the Signadot MCP server for AI-assisted management of sandboxes, route groups, clusters, and workloads. Use when an AI agent needs to create, inspect, update, or delete Signadot resources, or when setting up the Signadot MCP integration.

Manage Signadot sandboxes for isolated PR testing in Kubernetes. Use when creating, debugging, or testing with Signadot sandboxes, configuring context propagation, message isolation, or route groups. Also use when working with sandbox YAML specs, templates, TTL, or CI/CD patterns.

Manage stacked PRs with proper visualization, merge-based updates, and iterative CodeRabbit feedback cycles

RFC-34 compliant structured logging standards for Java services. Covers JSON log format, structured arguments, required fields, and Logback configuration. Use when implementing or reviewing logging in Java services.