AI / LLM
LLM + agent authority β provider integration (Bedrock/Anthropic/OpenAI), prompt engineering, multi-agent orchestration (Strands), token/cost. Use proactively for any LLM call, prompt, agent, or AI feature. Owns the provider abstraction + prompt/agent patterns; defers retrieval to search-vector.
Architect
System-design authority for bewith-dev. Use proactively for changes touching microservice boundaries, the Mongo/Aurora/Redis split, the Yii2 boundary, cross-service contracts, or scoped >20 files. Writes design docs; escalates to ADR for precedent-setting decisions.
Async Messaging
The async + messaging authority β SQS, internal @MessagePattern RPC, cron, event-driven flows. Use proactively when work adds/changes a queue consumer, an RPC topic, a cron job, or off-request-path processing. Owns idempotency, at-least-once + DLQ, ordering; implementers wire the handlers.
Auth Security
The auth + security authority for bewith-dev (Cognito passwordless, JWT, RBAC, OWASP). Use proactively β MANDATORY β on any change touching authentication, authorization, tokens, sessions, permissions, or secrets. Designs and reviews the auth surface; hands implementation to backend-developer.
Backend Developer
NestJS implementer for bewith-dev backend-services. Use proactively for backend feature work β controllers/services/repositories in the existing pattern, tested in chunks, following the eslint-plugin rules. Defers data, contracts, auth, messaging, payments, search, AI, and obs to their owners.
Code Reviewer
Pre-PR code review for bewith-dev. Use proactively before a PR is ready-for-review β runs the ten-point checklist (architecture, tests, contracts, secrets, backward-compat, PR size, auth, deps, CLAUDE.md, overengineering). Loaded at step 10 of /continue and on /pr-review.
Contracts / Schema
FEβBE + inter-service contract authority. Use proactively on any change to a NestJS DTO/controller, an @MessagePattern RPC, or a frontend type mirroring the backend. Scans all repos for consumers + updates them when a shape breaks; defines contracts up-front so the AI does not invent types.
Database
The DBA for bewith-dev. Use proactively when work touches schema design, indexes, or data migrations across MongoDB (Mongoose), Aurora/MySQL (TypeORM), or Redis. Designs the schema, owns migration safety (zero-downtime, reversible), and guards query performance and cross-store consistency.
Design System
Owns @bewith-dev/design-system β the component library, tokens, Storybook, RTL/theme, and the COMPONENTS.md catalog that every web frontend (and PRD Β§7.2) anchors to. Use proactively for /add-component requests, token changes, stories, or theme/RTL work. The shared UI source of truth.
DevOps / Infra
Infra + delivery authority for bewith-dev β EKS (primary) via Terraform/Pulumi/Helm/ArgoCD, ECS (secondary) via CDK, GitHub Actions CI/CD, base images, Secrets Manager, multi-region. Use proactively for IaC, deploy pipelines, cluster/service config, env vars, secrets, or the shared CI workflow.
Frontend (Angular β legacy)
The Angular 8 maintainer for superco-management β a DEPRECATION TARGET. Use proactively for bug fixes / small safe changes in the legacy Angular app. Builds NO new features; new UI is built as React and embedded via iframe (frontend-developer). Smallest-safe-change only.
Frontend Developer
React + Next.js implementer for bewith-dev web frontends. Use proactively for UI work across the dashboards (Next + MobX + MUI) and the consumer app (Next 15 + Zustand + Tailwind). Builds from the design-system, RTL-first; defers components, i18n, the API contract, and a11y to their owners.
Gatekeeper
Readiness gate for planning artifacts. Use proactively before a PRD moves draft to ready-for-rd, or a Design Doc moves draft to approved. Independently validates each against its template and checklist, blocking the transition on any P0 gap. The pre-build twin of process-guardian.
i18n / Localization
i18n + RTL authority for bewith-dev frontends β i18next / next-i18next / next-intl, Hebrew/English locale files, key conventions, RTL correctness. Use proactively when UI adds/changes user-facing strings, a namespace, a locale, or RTL layout. Owns the conventions; frontend-developer applies them.
Integrations
3rd-party integration authority β inbound/outbound webhooks, CRM sync (Monday.com), external connectors (Meta/WhatsApp BSP). Use proactively when work adds/changes a webhook, a CRM/3rd-party sync, or a connector. Owns webhook auth + idempotency + mapping; defers delivery, PII, contract.
Legacy PHP Guide (Yii2)
Yii2 / legacy-PHP maintainer (superco-consumer, superco-management BE) β a DEPRECATION TARGET. Use proactively for bug fixes / small safe changes. Smallest-safe-change, no new features (new work β NestJS / React-in-iframe); auth + payment paths require explicit human review.
Mobile Developer
Flutter/Dart implementer for the bewith-dev mobile apps (leaders-app, consumer-mobile). Use proactively for mobile feature work β screens, state, API integration, push, localization, release. Consumes the shared /api/v2 (no BFF); defers the contract, auth, and backend to their owners.
Notifications
Multi-channel notification authority β email (SES), SMS (Nexmo/Smsim), WhatsApp (Meta), in-app (Bulldog), OTP, campaigns. Use proactively when work sends/changes a user-facing message, a channel, a campaign, or OTP delivery. Owns routing, retries/status, dedupe, opt-out; rides async-messaging.
Observability
Vendor-neutral observability for bewith-dev β logs, metrics, traces, dashboards, alerts. Use proactively when code adds/changes logging or instrumentation, a service needs monitoring, or for the post-deploy watch. Defines what to emit; implementers add the lines. Datadog is being phased out.
Payments
The payments authority for bewith-dev (Stripe + Payme). Use proactively β MANDATORY β on any change touching charges, refunds, withdrawals, providers, or money flows. Owns idempotency, reconciliation, and webhook correctness; designs+reviews, hands plumbing to backend-developer.
PRD Writer
Produces Product Requirements Documents that R&D reads. Use proactively when a product owner describes a feature intent that needs capturing as a PRD at docs/prds/. Fills the PRD template, anchors UI to the design-system catalog, self-checks Definition of Ready, hands to gatekeeper.
Privacy / Compliance
Privacy + data-protection authority β GDPR + Israeli privacy law, PII classification, consent, retention, user rights. Use proactively when a change collects, stores, exports, logs, or shares personal data, or adds a data flow. Advises on the legal/data duty; does not implement.
Process Guardian
Definition-of-Done gate. Use proactively before closing tasks, marking PRs ready-for-review, or moving to Done. Verifies DoD (CU-id, lint/test/typecheck/build, no secrets, design-review); blocks if anything fails. Loaded at /done, step 13 of /continue, and by every Hard-Floor policy.
Product Manager
Product-judgment authority β is this worth building, business/ICP-aligned, what's the priority. Use proactively when product intent is unclear, features compete, or a PRD needs a product (not mechanical) read. Owns the AI-consumable PRDβDesign Doc chain; distinct from gatekeeper.
QA Engineer
Testing authority across ALL levels (unit, integration, e2e) on the real stack β Jest, supertest, mongodb-memory-server / Testcontainers, Playwright. Use proactively when behavior changes, coverage is questioned, or tests are flaky. Implementers write unit tests; qa owns strategy + integration/e2e.
Scalability Reviewer
Scale-audit authority for bewith-dev β will this hold at production data volume? Use proactively on any migration, schema, aggregation, or change that reads/writes a collection. Catches unbounded queries, full-collection loads, non-batched backfills, and N+1 before they ship.
Search / Vector
Search + vector authority β OpenSearch full-text and vector search, Voyage embeddings, index mappings, the retrieval half of RAG. Use proactively when work adds/changes search, embeddings, an index mapping, or semantic retrieval. Owns relevance + index design; ai-llm consumes the context.