Agent Claude Code
OAuth 2.1 and authentication expert for QAuth. Implements and reviews auth flows, token handling, PKCE, and security controls per RFC 9700 and 2025–2026 best practices. Use proactively when implementing or changing OAuth endpoints, login/token flows, or auth-related security.
Agent Claude Code
Expert code review specialist for QAuth. Proactively reviews code for quality, security (OWASP, CVEs), and project standards. Use immediately after writing or modifying code, before opening PRs, or when the user asks for a review.
Agent Claude Code
Debugging specialist for errors, test failures, CI failures, and unexpected behavior in QAuth. Use proactively when encountering any issues, failing tests, or runtime errors.
Agent Claude Code
Pull request specialist for QAuth. Creates and opens PRs following project conventions, Conventional Commits, and 2026 best practices. Use proactively when preparing to open a PR, after completing a feature/fix, or when the user asks to create a pull request.
Agent Claude Code
Product manager for QAuth. Clarifies project scope, current vs future features, phases, and task breakdown. Use proactively when starting work, planning features, writing issues, or splitting work into implementable parts.
Settings file Claude Code
Agent settings configuring extraKnownMarketplaces, enabledPlugins.
Skill Claude CodeCodex
Link GitHub issues in parent-child (sub-issue) relationships using GraphQL.
Skill Claude CodeCodex
Add a GitHub issue to a project board using gh project item-add.
Skill Claude CodeCodex
Designs and reviews HTTP APIs with resource-oriented REST, schema validation, and consistent error responses. Use when adding or changing auth-server routes, request/response schemas, or when the user asks about API design, versioning, or OpenAPI.
Skill Claude CodeCodex
Auth engine rules for QAuth. Use when working with CredentialProvider implementations, token claim generation, the provider registry, or the federation layer. Enforces the pluggable provider pattern and correct token claim behaviour.
Skill Claude CodeCodex
Implements and reviews OAuth 2.0/2.1 flows following RFC 6749, RFC 9700 (BCP), and PKCE (RFC 7636). Use when implementing authorization code flow, token handling, client registration, or securing OAuth endpoints.
Skill Claude CodeCodex
Create a new GitHub issue following QAuth project conventions using gh issue create.
Skill Claude CodeCodex
Create a pull request following QAuth conventions with gh pr create.
Skill Claude CodeCodex
Error handling for QAuth — domain errors from @qauth-labs/shared-errors, consistent error response shape, and security (no enumeration, no production stack traces). Use when throwing or handling errors, writing the global error handler, or working in apps/auth-server or libs/shared/errors.
Skill Claude CodeCodex
Fastify usage for QAuth — plugin authoring (encapsulation, decorators, lifecycle), route schemas with the Zod type provider, production/reverse-proxy setup, and the Fastify version/CVE requirement. Use when adding or modifying @qauth-labs/fastify-plugin- libraries, auth-server routes, or deployment config.
Skill Claude CodeCodex
Shared GitHub conventions for QAuth — repo, gh CLI usage, branch naming, Conventional Commits, issue/PR body templates, labels, and milestones. Use when creating or editing issues, PRs, branches, or commits. The focused github skills (create-issue, create-pr, add-sub-issue, add-to-project, investigate-issue…
Skill Claude CodeCodex
Gather context and requirements for a GitHub issue using gh issue view and related commands.
Skill Claude CodeCodex
CI/CD workflows with Nx affected commands. Use when setting up pipelines, debugging CI failures, or optimizing builds.
Skill Claude CodeCodex
Nx command reference for common tasks. Use when running builds, tests, linting, or any Nx workspace operations.
Skill Claude CodeCodex
Database management with Drizzle ORM. Use when modifying schemas, running migrations, or working with database operations.
Skill Claude CodeCodex
Docker and containerization for Nx projects. Use when building images, managing containers, or working with docker-compose.
Skill Claude CodeCodex
Create and manage Nx projects (libraries and applications). Use when creating new libs, organizing projects, or setting up project tags and dependencies.
Skill Claude CodeCodex
Testing workflows with Vitest in Nx monorepo. Use when writing tests, running test suites, or debugging test failures.
Skill Claude CodeCodex
OAuth 2.1 / OIDC rules for QAuth. Use when working with authorization endpoints, token flows, PKCE, JWKS, OIDC discovery, or spec compliance (RFC 9700, OIDC Core 1.0). Covers endpoint behaviour, email claim rules, and token security.