690517:1449 204 and 302 refactor #03

.windsurf/workflows/e2e-testing.md

@@ -0,0 +1,13 @@
+---
+auto_execution_mode: 0
+description: Playwright E2E testing patterns, Page Object Model, configuration, CI/CD integration, artifact management, and flaky test strategies for LCBP3-DMS
+---
+
+This workflow invokes the e2e-testing skill to help with Playwright E2E testing patterns for LCBP3-DMS.
+
+Invoke the e2e-testing skill when:
+- Creating new E2E tests for frontend features
+- Debugging flaky Playwright tests
+- Setting up CI/CD integration for E2E tests
+- Optimizing test performance and reliability
+- Implementing Page Object Model (POM) patterns

.windsurf/workflows/review.md

@@ -40,7 +40,7 @@ The following are **CI-blocking issues** that must be caught in code review. The
 
 - **❌ NO SQL Triggers for business logic** — use NestJS Service methods instead
 - **❌ NO `.env` files in production** — use Docker environment variables
-- **❌ NO direct table/column name invention** — verify against `specs/03-Data-and-Storage/lcbp3-v1.8.0-schema-02-tables.sql`
+- **❌ NO direct table/column name invention** — verify against `specs/03-Data-and-Storage/lcbp3-v1.9.0-schema-02-tables.sql`
 
 ### Security (ADR-016)
 

.windsurf/workflows/security-review.md

@@ -0,0 +1,15 @@
+---
+auto_execution_mode: 0
+description: Comprehensive security review for LCBP3-DMS with OWASP Top 10 checklist, ADR compliance, and automated security testing patterns
+---
+
+This workflow invokes the security-review skill to perform comprehensive security review of LCBP3-DMS code changes.
+
+Invoke the security-review skill when:
+- Implementing authentication or authorization
+- Handling user input or file uploads
+- Creating new API endpoints
+- Working with secrets or credentials
+- Integrating AI features (Ollama/Qdrant)
+- Storing or transmitting sensitive data
+- Integrating third-party APIs

.windsurf/workflows/verification-loop.md

@@ -0,0 +1,13 @@
+---
+auto_execution_mode: 0
+description: A comprehensive verification system for LCBP3-DMS development sessions with build, type check, lint, test, security scan, and diff review phases
+---
+
+This workflow invokes the verification-loop skill to perform comprehensive verification of LCBP3-DMS code changes.
+
+Invoke the verification-loop skill when:
+- After completing a feature or significant code change
+- Before creating a PR
+- When you want to ensure quality gates pass
+- After refactoring
+- Before deploying to staging/production