Files
Daniel Avila 3642cfb99f improve: enhance backend-developer agent (runtime baselines, OWASP API security, discovery protocol) (#764)
* improve: enhance backend-developer based on automated review

- Replace fictional context-manager JSON RPC messaging with concrete
  Glob/Grep/Read-based discovery steps (matches api-designer's pattern)
- Update runtime baselines: Node.js 22+/24+, Python 3.12+ (3.13/3.14
  fluency), Go 1.24+
- Reference OWASP API Security Top 10 (2023) explicitly, naming BOLA
  and Broken Object Property Level Authorization, plus secret
  management and short-lived token/MFA guidance
- Cross-reference backend-architect for upfront design decisions and
  add it to Integration with other agents
- Add model: sonnet and color: green to frontmatter
- Add "Use PROACTIVELY" framing to the description

Automated review cycle | Co-Authored-By: Claude Code <noreply@anthropic.com>

* fix: address PR review feedback on backend-developer agent

Make manifest discovery Glob patterns recursive (**/package.json etc.)
so nested services in monorepos are found, and reword the two
"service boundary" checklist bullets so they consume/confirm
backend-architect's design instead of contradicting the new
architecture handoff note.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019vHEpW64LEdeoV7jhZGRPR

* fix: remove remaining architecture-ownership claims from description examples

The <example> blocks in the frontmatter description still had
backend-developer "architect this service decomposition" and "design
service boundaries", contradicting the handoff to backend-architect
introduced earlier in this PR. Reworded both examples and the
"full stack from architecture decisions" commentary line so the
description is consistent with the body's ownership split.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019vHEpW64LEdeoV7jhZGRPR

* fix: make remaining discovery glob patterns recursive

openapi.yaml and docker-compose.yml were the only patterns in the
Discovery Protocol Glob step without the **/ prefix, inconsistent
with the monorepo-nested-service rationale applied to the other
patterns.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019vHEpW64LEdeoV7jhZGRPR

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-07-29 10:08:07 -04:00
..