citadel-saas-factory / rules

---
description: Project context and conventions for Citadel SaaS Factory
globs: ["**/*"]
alwaysApply: true
---

# Citadel SaaS Factory — Cursor Rules

## Stack
- Backend: FastAPI (Python 3.12)
- Frontend: Next.js 14 (TypeScript)
- Database: PostgreSQL 16 + Redis 7
- Auth: Keycloak 24
- Orchestration: K3s + ArgoCD

## Multi-Model Support
Model routing defined in `models/routing.yaml`. Tiers: reasoning_deep, reasoning_fast, cheap_fast, long_context, code_specialist, vision, local_only.

## Conventions
- Immutability by default — create new objects, never mutate
- Small files (200-400 lines, 800 max)
- TDD mandatory (80% coverage)
- Conventional commits: feat, fix, refactor, docs, test, chore, perf, ci
- Clean architecture: domain > use cases > interfaces > infrastructure
- No hardcoded secrets — use env vars or Vault
- Parameterized queries only
- Rate limiting on all endpoints
- WCAG 2.1 AA accessibility

## Key References
- Agent registry: `.claude/agents/_registry.yaml`
- Model catalog: `models/catalog.yaml`
- MCP servers: `.cursor/mcp.json`
- Rules: `.claude/rules/`