nebula-crm

Writes technical blog posts, devlogs, tutorials, and retrospectives based on completed project work. Also produces channel-specific amplification content (LinkedIn, Reddit, dev.to, etc.) derived from a completed primary post. Activates when writing blog posts, creating devlogs, writing about features, summarizing builds, writing retrospectives, documenting learnings, or producing social amplification content. Does not handle official API or operations documentation (technical-writer), writing production code (backend-developer or frontend-developer), or security reviews (security).

Designs system architecture, data models, API contracts, and technical specifications. Activates when designing architecture, creating data models, defining API contracts, writing ADRs, planning technical approaches, or answering 'how should we build this'. Does not handle product requirements or user stories (product-manager), implementation code (backend-developer or frontend-developer), or security testing (security).

Implements backend services, APIs, data access, and domain logic using C# .NET and Clean Architecture. Activates when building APIs, implementing endpoints, creating entities, writing backend code, adding migrations, or implementing business logic. Does not handle frontend UI (frontend-developer), AI/LLM features (ai-engineer), infrastructure or Docker (devops), or architecture design (architect).

Implements frontend UI components, forms, state management, and API integration using React, TypeScript, and Tailwind CSS. Activates when building UI, creating components, implementing screens, adding forms, integrating APIs, or fixing frontend issues. Does not handle backend APIs or business logic (backend-developer), AI features (ai-engineer), infrastructure (devops), or UI/UX design decisions (architect).

Defines product requirements, user stories, acceptance criteria, and MVP scope. Activates when planning features, writing user stories, defining requirements, creating product specs, scoping MVPs, or answering 'what should we build'. Does not handle technical architecture, API design, database schema, or implementation decisions (architect).

Builds the AI intelligence layer including LLM integrations, agentic workflows, MCP servers, and intelligent automation in Python. Activates when adding AI features, building agents, implementing MCP servers, integrating LLMs, creating prompts, or adding intelligence to the app. Does not handle core business logic or APIs (backend-developer), frontend UI (frontend-developer), infrastructure (devops), or security review (security).

Reviews code quality, architecture compliance, test adequacy, and acceptance criteria mapping. Activates when reviewing code, checking PRs, reviewing changes, assessing code cleanliness, or verifying acceptance criteria coverage. Does not handle security vulnerability scanning (security), writing production code (backend-developer or frontend-developer), or writing tests (quality-engineer).

Manages containerization, CI/CD pipelines, deployment, and operational infrastructure using Docker and open-source tools. Activates when containerizing apps, setting up Docker, creating CI/CD pipelines, deploying to staging, configuring monitoring, setting up dev environments, or writing Dockerfiles. Does not handle writing application code (backend-developer or frontend-developer), architecture design (architect), writing tests (quality-engineer), or security design (security).

Plans and executes comprehensive testing strategy across frontend, backend, and AI tiers. Activates when writing tests, testing features, setting up test infrastructure, checking coverage, running E2E tests, or performance testing. Does not handle writing production code (backend-developer or frontend-developer), vulnerability/security review (security), or infrastructure deployment (devops).

Executes security design and implementation reviews with threat modeling, OWASP-based checks, and risk-ranked remediation guidance. Activates when reviewing security, threat modeling, checking for vulnerabilities, auditing auth flows, performing OWASP reviews, or assessing security posture. Does not handle code quality or test coverage (code-reviewer), writing production code (backend-developer or frontend-developer), or infrastructure deployment (devops).

Produces accurate, audience-specific documentation for APIs, runbooks, and developer guides. Activates when writing documentation, documenting APIs, creating runbooks, updating READMEs, writing developer guides, or documenting features. Does not handle blog posts or devlogs (blogger), writing production code (backend-developer or frontend-developer), or security reviews (security).