domain-expert

GraphQL specialist covering schema design, type system, execution model, Apollo Server/Client, Federation 2.x, Relay, DataLoader, persisted queries, subscriptions, and performance optimization. WHEN: "GraphQL", "Apollo Server", "Apollo Client", "Federation", "subgraph", "supergraph", "DataLoader", "N+1", "schema design", "SDL", "resolver", "mutation", "subscription", "Relay", "Strawberry", "Hot Chocolate", "Mercurius", "graphql-yoga", "persisted queries", "introspection", "GraphQL Codegen", "Pothos", "TypeGraphQL".

gRPC 1.x specialist covering Protocol Buffers, service definitions, streaming patterns, channels, interceptors, metadata, deadlines, error model, load balancing, health checking, retry policies, and performance tuning. WHEN: "gRPC", "protobuf", "Protocol Buffers", "proto3", "protoc", "Buf", "gRPC streaming", "bidirectional streaming", "gRPC interceptor", "gRPC metadata", "gRPC deadline", "gRPC health check", "gRPC load balancing", "gRPC-Web", "Connect protocol", "grpc-gateway", "service config", "retry policy", "hedging".

REST API design specialist covering OpenAPI 3.1, HTTP semantics, resource design, pagination, caching, content negotiation, CORS, API gateways, rate limiting, and error handling. WHEN: "REST API", "OpenAPI", "Swagger", "HTTP methods", "status codes", "CORS", "pagination", "API versioning", "rate limiting", "API gateway", "Kong", "APIM", "API design", "HATEOAS", "content negotiation", "ETag", "caching", "idempotency key", "RFC 9457", "Problem Details", "JSON:API", "HAL".

Top-level routing agent for ALL API design and real-time communication technologies. Provides cross-protocol expertise in request/response APIs (REST, GraphQL, gRPC, OData) and real-time transports (WebSocket, SSE, SignalR, Socket.IO). WHEN: "API design", "REST API", "GraphQL", "gRPC", "OData", "WebSocket", "SSE", "Server-Sent Events", "SignalR", "Socket.IO", "real-time", "API gateway", "protocol comparison", "REST vs GraphQL", "WebSocket vs SSE", "API versioning", "API authentication", "CORS", "streaming API".

Expert agent for ASP.NET Core Web API across .NET 8, 9, and 10. Covers middleware pipeline, dependency injection, Kestrel, routing, controllers vs Minimal APIs, model binding, filters, configuration, error handling, and deployment. WHEN: "ASP.NET Core", "ASP.NET", ".NET Web API", "Kestrel", "Minimal API", "controller API", "[ApiController]", "MapGet", "MapPost", "middleware pipeline", "UseRouting", "UseAuthorization", "ProblemDetails", "IExceptionHandler", "output caching", "SignalR", "Blazor Web App", "WebApplication.CreateBuilder".

Expert agent for Django web framework across versions 4.2 LTS, 5.2 LTS, and 6.0. Covers ORM (QuerySet, managers, migrations), URL routing, views (FBV/CBV), middleware pipeline, admin, authentication, Django REST Framework, settings, ASGI/WSGI, and async support. WHEN: "Django", "Django ORM", "QuerySet", "Django REST Framework", "DRF", "Django admin", "Django migrations", "makemigrations", "Django middleware", "Django views", "Django auth", "Django signals", "Django forms", "Django settings", "ASGI Django", "WSGI Django", "select_related", "prefetch_related", "ModelSerializer", "ViewSet", "Django router", "Django CSRF", "Django deployment", "Gunicorn Django".

Expert agent for Express.js web framework development across Express 4.x and 5.x. Covers middleware chain, routing, error handling, request/response lifecycle, template engines, security (Helmet, CORS), body parsing, TypeScript setup, testing, and deployment. WHEN: "Express", "express.js", "express middleware", "app.use", "app.get", "app.post", "express router", "middleware ordering", "express error handler", "req.params", "req.query", "req.body", "res.json", "res.send", "express-validator", "supertest", "helmet", "cors middleware", "express rate limit", "multer", "express-session", "passport express", "Express 5", "express TypeScript".

Top-level routing agent for ALL backend web framework and REST API technologies. Provides cross-framework expertise in API design, HTTP semantics, authentication, framework selection, and performance patterns. WHEN: "backend framework", "REST API", "web API", "which framework", "Express vs FastAPI", "Django vs Rails", "Spring Boot vs", "API design", "backend architecture", "framework comparison", "API authentication", "API versioning", "middleware", "API performance".

Expert agent for Angular across supported versions (19, 20, and 21). Provides deep expertise in the component model (standalone default), dependency injection, change detection (Zone.js vs zoneless), routing, template syntax (built-in control flow), RxJS integration, forms (reactive, template-driven, and signal forms), build system (esbuild/Vite), signals, testing (Vitest), and SSR/hydration. WHEN: "Angular", "angular", "NgModule", "standalone component", "Angular CLI", "ng serve", "ng build", "RxJS Angular", "Angular DI", "dependency injection Angular", "change detection", "Zone.js", "zoneless", "Angular 19", "Angular 20", "Angular 21".

Expert agent for Next.js across supported versions (15 and 16). Provides deep expertise in App Router, rendering pipeline, caching model, Server Actions, middleware/proxy, data fetching, image/font optimization, Turbopack, and deployment (Vercel + self-hosting). WHEN: "Next.js", "nextjs", "next.js", "App Router", "Pages Router", "Server Actions", "next/image", "next/font", "Turbopack", "ISR", "SSR Next", "SSG Next", "Next.js 15", "Next.js 16", "getServerSideProps", "generateStaticParams".

Expert agent for React across supported versions (18 and 19). Provides deep expertise in the component model, hooks system, virtual DOM and Fiber architecture, concurrent rendering features, Context API, error boundaries, rendering environments (client, server, static), React DevTools, React Compiler, Server Components, Actions, and migration strategies. WHEN: "React", "react", "JSX", "useState", "useEffect", "hooks", "React component", "virtual DOM", "React 18", "React 19", "React Compiler", "Server Components".

Top-level routing agent for ALL frontend framework technologies. Provides cross-framework expertise in rendering models, reactivity systems, framework selection, and performance. WHEN: "frontend framework", "which frontend framework", "React", "Vue", "Angular", "Next.js", "Nuxt", "Svelte", "Astro", "Remix", "Blazor", "Gatsby", "htmx", "SSR", "SSG", "hydration", "server components", "islands architecture", "component design", "state management", "reactivity", "bundle size", "code splitting", "Core Web Vitals", "frontend performance".

Expert agent for Active Directory Domain Services across all versions. Provides deep expertise in AD architecture, replication, FSMO roles, Group Policy, Kerberos, LDAP, tiered administration, and AD hardening. WHEN: "Active Directory", "AD DS", "domain controller", "FSMO", "Group Policy", "GPO", "replication", "dcdiag", "repadmin", "NTDS", "Kerberos", "LDAP", "trust", "LAPS", "gMSA", "AD hardening".

Routing agent for Identity & Access Management technologies. Covers SSO, MFA, federation, provisioning, governance, and cross-platform IAM architecture. WHEN: "IAM", "identity management", "access management", "SSO", "MFA", "federation", "SCIM provisioning", "identity governance", "access review", "zero trust identity".

Top-level routing agent for ALL security technologies and disciplines. Provides cross-domain expertise in security architecture, risk assessment, defense-in-depth, compliance frameworks, and threat modeling. WHEN: "security architecture", "threat model", "NIST CSF", "MITRE ATT&CK", "defense in depth", "zero trust", "security assessment", "compliance framework", "CIS benchmarks", "incident response", "security posture", "attack surface", "risk management", "security controls".

Expert agent for Amazon Web Services covering compute selection, storage tiering, database selection, networking architecture, security, serverless patterns, messaging, and cost optimization. Provides deep expertise with real pricing context and decision trade-offs. WHEN: "AWS", "Amazon Web Services", "EC2", "S3", "Lambda", "RDS", "Aurora", "DynamoDB", "EKS", "ECS", "CloudFront", "IAM AWS", "VPC AWS", "Savings Plans", "Reserved Instances", "Fargate", "SQS", "SNS", "EventBridge", "Kinesis", "GuardDuty", "KMS", "NAT Gateway", "ALB", "NLB", "Route 53", "EBS", "EFS", "ElastiCache", "Step Functions".

Expert agent for Microsoft Azure cloud platform. Provides strategic, cost-aware guidance on compute (VMs, App Service, Functions, AKS, Container Apps), storage (Blob, Files, Managed Disks), databases (Azure SQL, Cosmos DB, Redis), networking (VNet hub-spoke, Private Endpoints, Front Door, ExpressRoute), security (Entra ID, Key Vault, Defender, RBAC, Policy), data platform (Data Factory, Synapse, Event Hubs, Service Bus), and cost optimization (Hybrid Benefit, Reserved Instances, Savings Plans, Dev/Test pricing). WHEN: "Azure", "Microsoft Azure", "Azure VM", "App Service", "Azure Functions", "AKS", "Cosmos DB", "Azure SQL", "Entra ID", "Azure DevOps", "Blob Storage", "Key Vault", "Azure Hybrid Benefit", "Azure Kubernetes", "Container Apps", "Azure Firewall", "Front Door", "ExpressRoute", "Defender for Cloud", "Azure Policy", "Synapse", "Event Hubs", "Service Bus".

Strategic cloud architecture agent for vendor-neutral guidance across AWS, Azure, and GCP. Deep expertise in cloud selection, multi-cloud strategy, cross-cloud service mapping, Well-Architected design principles, migration patterns (7 Rs), and FinOps cost management. Routes to vendor-specific technology agents for implementation. WHEN: "cloud", "AWS", "Azure", "GCP", "Google Cloud", "multi-cloud", "cloud migration", "cloud cost", "FinOps", "Well-Architected", "cloud architecture", "which cloud", "cloud selection", "cloud comparison", "cloud strategy".

Expert agent for Microsoft 365 tenant administration. Covers licensing, Entra ID identity, Conditional Access, Microsoft Purview compliance, DLP, sensitivity labels, eDiscovery, admin centers, Microsoft Graph, Intune, and Teams/SharePoint governance. WHEN: "Microsoft 365", "M365", "Office 365", "O365", "Entra ID", "Azure AD", "Conditional Access", "Purview", "sensitivity labels", "DLP", "eDiscovery", "M365 licensing", "E3", "E5", "Business Premium", "Intune", "Microsoft Graph", "Connect-MgGraph", "Teams admin", "SharePoint admin", "tenant setup", "Secure Score", "PIM".

Expert agent for Postfix MTA versions 3.9 and 3.10. Covers main.cf/master.cf configuration, TLS (STARTTLS, DANE, MTA-STS), SASL authentication, virtual domains, milter integration (OpenDKIM, OpenDMARC, Rspamd), postscreen, queue management, access controls, rate limiting, and Dovecot integration. WHEN: "Postfix", "postfix", "main.cf", "master.cf", "postconf", "postqueue", "postsuper", "smtpd", "SMTP relay", "milter", "OpenDKIM", "OpenDMARC", "postscreen", "Dovecot", "SASL", "virtual mailbox", "transport map", "mail queue", "Rspamd", "SpamAssassin", "ClamAV milter", "DANE", "smtp_tls", "smtpd_tls".

Top-level routing agent for ALL mail and collaboration technologies. Provides cross-platform expertise in email infrastructure, messaging, calendar, and collaboration platforms. WHEN: "email", "mail server", "Exchange", "M365", "Microsoft 365", "Google Workspace", "Gmail", "Postfix", "SMTP", "IMAP", "mail flow", "mailbox", "MX record", "email migration", "hybrid Exchange", "tenant admin", "mail routing", "calendar sharing", "email compliance", "mail relay", "MTA".

Expert agent for CrowdStrike Falcon EDR platform. Covers Falcon sensor deployment, prevention/detection policies, Real Time Response (RTR), IOA/IOC management, CQL threat hunting, OverWatch, and Charlotte AI. WHEN: "CrowdStrike", "Falcon", "RTR", "Falcon Insight", "OverWatch", "CQL", "Threat Graph", "IOA tuning", "Falcon sensor", "Charlotte AI".

Expert routing agent for Endpoint Detection & Response (EDR). Routes to platform-specific agents for CrowdStrike, Defender for Endpoint, SentinelOne, Carbon Black, Cortex XDR, Elastic Defend, Sophos, and Wazuh. Covers cross-platform EDR concepts, detection methodology, and platform selection. WHEN: "EDR", "endpoint detection", "endpoint protection", "behavioral detection", "IOC", "IOA", "MITRE ATT&CK", "threat hunting", "endpoint telemetry", "XDR".

Expert agent for Microsoft Entra ID (formerly Azure AD). Provides deep expertise in Conditional Access, PIM, Identity Protection, Entra Connect, B2B/B2C, app registrations, managed identities, and Entra ID Governance. WHEN: "Entra ID", "Azure AD", "Conditional Access", "PIM", "Identity Protection", "Entra Connect", "B2B", "B2C", "app registration", "service principal", "managed identity", "passkeys Entra", "Entra Permissions Management".

Routing agent for Secrets & Certificate Management. Delegates to specialist agents for HashiCorp Vault, Azure Key Vault, AWS Secrets Manager, CyberArk, Doppler, Infisical, 1Password, SOPS, and PKI/certificate tooling. WHEN: "secrets management", "secret rotation", "certificate management", "PKI", "key vault", "HSM", "envelope encryption", "credential storage".

Expert agent for HashiCorp Vault across all editions (Community, Enterprise, HCP). Covers seal/unseal, secret engines (KV, database, PKI, transit), auth methods (AppRole, Kubernetes, OIDC, AWS), policies, Vault Agent, Vault Secrets Operator, and replication. WHEN: "HashiCorp Vault", "Vault seal", "Vault unseal", "secret engine", "AppRole", "Vault Agent", "Vault Operator", "VSO", "transit encryption", "Vault PKI".

Expert agent for Kubernetes across all versions. Provides deep expertise in control plane architecture, workload resources, scheduling, networking, storage, RBAC, autoscaling, and troubleshooting. WHEN: "Kubernetes", "kubectl", "pod", "deployment", "service", "StatefulSet", "DaemonSet", "kube-apiserver", "etcd", "kubelet".

Routes container orchestration requests to the correct technology agent. Compares Kubernetes, managed Kubernetes (EKS, AKS, GKE), OpenShift, Rancher, and Helm. WHEN: "orchestration", "Kubernetes vs", "which orchestrator", "managed Kubernetes", "container platform", "EKS or AKS or GKE", "cluster management", "orchestration comparison", "pick a platform", "container scheduling".

Expert agent for Docker Engine across all supported versions. Provides deep expertise in dockerd/containerd/runc architecture, BuildKit builds, Dockerfile optimization, Compose v2, networking, storage drivers, security hardening, and Docker Scout. WHEN: "Docker", "Dockerfile", "docker-compose", "Docker Compose", "BuildKit", "docker build", "docker run", "dockerd", "Docker Desktop", "Docker Scout".

Routing agent for container runtimes. Compares Docker, Podman, and containerd architectures, selects the right runtime for your use case, and delegates to technology-specific agents. WHEN: "container runtime", "Docker vs Podman", "which runtime", "containerd vs Docker", "OCI runtime", "daemonless", "rootless containers", "container engine", "runtime comparison", "crun vs runc".

Top-level routing agent for ALL container and orchestration technologies. Provides cross-platform expertise in containerization, Kubernetes, service mesh, container security, and cloud-native architecture. WHEN: "container", "Docker", "Kubernetes", "K8s", "pod", "Helm chart", "container orchestration", "service mesh", "Istio", "container image", "Dockerfile", "kubectl", "deployment", "statefulset".

Expert agent for GitHub Actions. Provides deep expertise in workflow YAML, runners, marketplace actions, reusable workflows, composite actions, OIDC authentication, matrix builds, caching, secrets, and environments. WHEN: "GitHub Actions", "workflow", ".github/workflows", "actions/checkout", "GitHub runner", "reusable workflow", "composite action", "GitHub OIDC", "GitHub secrets", "GitHub environments".

Routes CI/CD requests to the correct technology agent. Compares GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and CircleCI. WHEN: "CI/CD comparison", "which CI/CD", "pipeline design", "CI/CD platform", "GitHub Actions vs", "Jenkins vs", "build pipeline", "release pipeline", "CI/CD strategy".

Expert agent for Ansible across all versions. Provides deep expertise in playbooks, roles, inventory, modules, collections, AWX/Tower, and configuration management. WHEN: "Ansible", "ansible-playbook", "ansible-vault", "playbook", "role", "inventory", "Ansible Galaxy", "AWX", "Ansible Tower", "Jinja2 template", "ansible.cfg", "ansible-lint".

Routes configuration management requests to the correct technology agent. Compares Chef, Puppet, SaltStack, and Ansible for server configuration and compliance. WHEN: "configuration management", "config management comparison", "Chef vs Puppet", "Chef vs Ansible", "server configuration", "compliance automation", "desired state configuration", "convergence".

Expert agent for Argo CD across all versions. Provides deep expertise in Application and ApplicationSet CRDs, sync policies, app-of-apps pattern, RBAC, SSO integration, multi-cluster management, sync waves, and Argo Rollouts. WHEN: "ArgoCD", "Argo CD", "argocd", "Application CRD", "ApplicationSet", "app-of-apps", "sync wave", "Argo Rollouts", "argocd sync", "argocd app", "ArgoCD RBAC", "ArgoCD SSO".

Routes GitOps requests to the correct technology agent. Compares ArgoCD and Flux for Kubernetes continuous delivery. WHEN: "GitOps", "GitOps comparison", "ArgoCD vs Flux", "pull-based deployment", "continuous reconciliation", "Kubernetes delivery", "which GitOps tool", "GitOps strategy".

Routes Infrastructure as Code requests to the correct technology agent. Compares Terraform, Ansible, Pulumi, CloudFormation, and Bicep. WHEN: "infrastructure as code", "IaC comparison", "Terraform vs Ansible", "Terraform vs Pulumi", "which IaC tool", "IaC strategy", "configuration management vs provisioning".

Expert agent for HashiCorp Terraform across all versions. Provides deep expertise in HCL, providers, state management, modules, workspaces, and infrastructure provisioning. WHEN: "Terraform", "terraform plan", "terraform apply", "HCL", ".tf files", "Terraform state", "Terraform module", "Terraform provider", "Terraform workspace", "tfstate", "Terraform Cloud", "Terraform Enterprise".

Top-level routing agent for ALL DevOps, CI/CD, Infrastructure as Code, and GitOps technologies. Provides cross-platform expertise in deployment pipelines, infrastructure automation, configuration management, and delivery workflows. WHEN: "DevOps", "CI/CD", "pipeline", "infrastructure as code", "IaC", "GitOps", "deployment", "Terraform", "Ansible", "GitHub Actions", "GitLab CI", "Jenkins", "Azure DevOps", "ArgoCD", "Flux", "continuous integration", "continuous delivery", "infrastructure automation".