@ai-sdlc/orchestrator 0.9.0 → 0.10.0

package/dist/cli/commands/init.js

@@ -12,6 +12,20 @@
  *    orchestrator version that ran init, with an inline opt-out hint.
  *  - Skip `.cursor/mcp.json` unless Cursor is detected (project-local
  *    `.cursor/`, user-global `~/.cursor/`) or `--cursor` is passed.
+ *
+ * AISDLC-143 enhancements (Q4(b) of the quality-gate redesign):
+ *  - Default invocation is now an interactive WIZARD (DoR / attestation /
+ *    classifier / branch-protection prompts) so adopters get a guided
+ *    bootstrap instead of having to read the docs to discover features.
+ *  - `--yes` short-circuits all prompts to "accept defaults" (CI/scripts).
+ *  - `--with-X` flags opt into individual features without prompting.
+ *  - `--add <feature>` extends an already-initialized repo with a single
+ *    feature, idempotently — re-running on an initialized repo is safe.
+ *  - `.github/workflows/ai-sdlc-gate.yml` is scaffolded UNCONDITIONALLY
+ *    so every adopter gets the `ai-sdlc/pr-ready` rollup check on day one
+ *    (Q1: prescriptive default).
+ *  - A "next steps" summary closes the run with operator action items
+ *    conditional on which features were chosen.
  */
 import { Command } from 'commander';
 import { existsSync, mkdirSync, writeFileSync, readFileSync, appendFileSync } from 'node:fs';
@@ -20,7 +34,8 @@ import { detectAgentsDetailed, installMcpServer } from './mcp-setup.js';
 import { detectWorkspace, generateWorkspaceYaml } from './workspace-detect.js';
 import { detectGitRemote, applyRemoteToPipelineYaml } from './git-remote.js';
 import { resolveVersions, formatVersionBlock } from '../versions.js';
-const PIPELINE_YAML = `apiVersion: ai-sdlc.io/v1alpha1
+import { applyFeatureSelection, buildProductionAdapters, ensureClaudeMdPointer, renderNextSteps, resolveFeatureSelection, } from './init-features.js';
+export const PIPELINE_YAML = `apiVersion: ai-sdlc.io/v1alpha1
 kind: Pipeline
 metadata:
   name: default
@@ -48,6 +63,23 @@ spec:
     - name: review
       qualityGates:
         - default-gates
+  # backlog: holds settings specific to the backlog-task (/ai-sdlc execute)
+  # workflow. These were formerly in a separate pipeline-backlog.yaml file
+  # (deprecated by AISDLC-245.5). Slash commands + pipeline-cli readers
+  # prefer this canonical location.
+  backlog:
+    branching:
+      pattern: 'ai-sdlc/{issueIdLower}-{slug}'
+      targetBranch: main
+      cleanup: on-merge
+    pullRequest:
+      titleTemplate: 'feat: {issueTitle} ({issueId})'
+      descriptionSections:
+        - summary
+        - changes
+        - closes
+      includeProvenance: true
+      closeKeyword: References
 `;
 export const AGENT_ROLE_TIERS = ['coding', 'research', 'meta'];
 const AGENT_ROLE_YAML_CODING = `apiVersion: ai-sdlc.io/v1alpha1
@@ -301,6 +333,45 @@ function initWorkspaceRoot(workspacePath, repos, configDirName, dryRun) {
         console.log(`  created workspace.yaml`);
     }
 }
+/**
+ * Build the WizardFlags struct from Commander's parsed options. Pulled
+ * out into a function so tests can drive the wizard pipeline directly
+ * without going through Commander's stateful option store.
+ */
+export function buildWizardFlags(opts) {
+    const addRaw = typeof opts.add === 'string' ? opts.add : undefined;
+    let add;
+    if (addRaw === 'dor' ||
+        addRaw === 'attestation' ||
+        addRaw === 'classifier' ||
+        addRaw === 'branch-protection') {
+        add = addRaw;
+    }
+    return {
+        yes: !!opts.yes,
+        withDor: !!opts.withDor,
+        withAttestation: !!opts.withAttestation,
+        withClassifier: !!opts.withClassifier,
+        withBranchProtection: !!opts.withBranchProtection,
+        add,
+        dryRun: !!opts.dryRun,
+    };
+}
+/** Validate a `--add` arg and return either the normalized value or null+error. */
+function validateAddArg(addRaw) {
+    if (addRaw === undefined || addRaw === null || addRaw === false)
+        return { ok: true };
+    if (typeof addRaw !== 'string')
+        return { ok: false, error: `--add must be a string` };
+    const allowed = ['dor', 'attestation', 'classifier', 'branch-protection'];
+    if (!allowed.includes(addRaw)) {
+        return {
+            ok: false,
+            error: `--add: unknown feature '${addRaw}'. Expected one of: ${allowed.join(', ')}.`,
+        };
+    }
+    return { ok: true, value: addRaw };
+}
 export const initCommand = new Command('init')
     .description('Initialize AI-SDLC configuration in the current project')
     .option('--dry-run', 'Show what would be created without writing files')
@@ -308,6 +379,13 @@ export const initCommand = new Command('init')
     .option('--cursor', 'Force-install Cursor MCP config even if Cursor is not detected')
     .option('-d, --dir <path>', 'Config directory name', '.ai-sdlc')
     .option('--role <tier>', `Agent-role tool tier: ${AGENT_ROLE_TIERS.join(' | ')} (default: coding)`, 'coding')
+    // ── AISDLC-143 wizard flags ─────────────────────────────────────────
+    .option('-y, --yes', 'Accept all defaults (non-interactive; CI/scripts)')
+    .option('--with-dor', 'Scaffold Definition-of-Ready gate config + workflow')
+    .option('--with-attestation', 'Scaffold attestation infrastructure (audit-only)')
+    .option('--with-classifier', 'Scaffold review classifier config stub')
+    .option('--with-branch-protection', 'Apply recommended branch-protection rule to main (requires gh)')
+    .option('--add <feature>', 'Extend an already-initialized repo with a single feature: dor | attestation | classifier | branch-protection')
     .action(async (opts) => {
     const projectDir = process.cwd();
     const configDirName = opts.dir ?? '.ai-sdlc';
@@ -320,6 +398,41 @@ export const initCommand = new Command('init')
     }
     const tier = tierInput;
     const cursorOptIn = !!opts.cursor;
+    // ── Validate --add early so we error before doing any work. ────────
+    const addCheck = validateAddArg(opts.add);
+    if (!addCheck.ok) {
+        console.error(`Error: ${addCheck.error}`);
+        process.exitCode = 1;
+        return;
+    }
+    const flags = buildWizardFlags(opts);
+    // ── --add path: extend an already-initialized repo ────────────────
+    // AC #7: skip the "always-scaffold-baseline" path entirely; the
+    // wizard dispatcher's `--add` branch knows to write only the chosen
+    // feature's templates (no pipeline.yaml, no MCP setup, no workspace
+    // detection). This is the safe re-run path on a repo that already
+    // ran `ai-sdlc init` once.
+    if (flags.add) {
+        const adapters = buildProductionAdapters();
+        const selection = await resolveFeatureSelection(flags, adapters);
+        console.log(`Extending AI-SDLC config with --add ${flags.add}:`);
+        console.log('');
+        const result = await applyFeatureSelection(projectDir, selection, flags, adapters);
+        renderNextSteps(selection, result, adapters);
+        // Reviewer feedback (round 2, suggestion #5): when the operator
+        // explicitly requested branch-protection via a non-interactive flag
+        // (--add branch-protection here; --yes / --with-branch-protection
+        // in runWizardStage) and the apply failed (gh missing, not
+        // authenticated, etc.), surface a non-zero exit so CI scripts can
+        // detect failure instead of seeing the silent log line.
+        if (flags.add === 'branch-protection' &&
+            result.branchProtection &&
+            !result.branchProtection.applied &&
+            result.branchProtection.error) {
+            process.exitCode = 1;
+        }
+        return;
+    }
     // ── version provenance (AC #1) ────────────────────────────────────
     const versions = resolveVersions({ workDir: projectDir });
     console.log(formatVersionBlock(versions));
@@ -377,6 +490,12 @@ export const initCommand = new Command('init')
             }
         }
         console.log(`\nAI-SDLC workspace initialized in ${projectDir}/`);
+        // ── AISDLC-143 wizard (workspace root) ────────────────────────
+        // The wizard runs ONCE at the workspace root: the baseline gate
+        // workflow + per-feature workflows live at `<workspace-root>/.github/`,
+        // not in each child repo. Children share the same CI from the
+        // root since GHA workflows always live at the repo root anyway.
+        await runWizardStage(projectDir, flags);
         console.log(`Run 'ai-sdlc health' to verify your configuration.`);
     }
     else {
@@ -399,7 +518,45 @@ export const initCommand = new Command('init')
             }
         }
         console.log(`\nAI-SDLC config initialized in ${join(projectDir, configDirName)}/`);
+        // ── AISDLC-143 wizard (single-repo) ──────────────────────────
+        await runWizardStage(projectDir, flags);
         console.log(`Run 'ai-sdlc health' to verify your configuration.`);
     }
 });
+/**
+ * Run the AISDLC-143 wizard stage: prompt the user (or short-circuit on
+ * --yes / --with-X), apply the chosen feature templates, append the
+ * CLAUDE.md pointer, and render the "next steps" summary.
+ *
+ * Pulled out of the inline action body so both the single-repo and
+ * workspace-root branches share the same wiring. Adapters are built
+ * once here (production = real disk writes; tests inject stubs by
+ * calling `applyFeatureSelection`/`renderNextSteps` directly).
+ */
+async function runWizardStage(projectDir, flags) {
+    const adapters = buildProductionAdapters();
+    console.log('');
+    console.log('━━━ Feature wizard ━━━');
+    console.log('');
+    const selection = await resolveFeatureSelection(flags, adapters);
+    console.log('');
+    console.log('Scaffolding selected features:');
+    const result = await applyFeatureSelection(projectDir, selection, flags, adapters);
+    ensureClaudeMdPointer(projectDir, adapters, flags.dryRun);
+    renderNextSteps(selection, result, adapters);
+    // Reviewer feedback (round 2, suggestion #5): when branch-protection
+    // was non-interactively requested (--with-branch-protection or --yes,
+    // both used by CI scripts) and the apply failed (gh missing, not
+    // authenticated, etc.), surface a non-zero exit so CI can detect
+    // failure instead of seeing the silent log line. Interactive prompt
+    // answers don't trip this — the human already saw the error and can
+    // re-run `ai-sdlc init --add branch-protection` themselves.
+    const branchProtectionRequestedNonInteractively = flags.yes || flags.withBranchProtection;
+    if (branchProtectionRequestedNonInteractively &&
+        result.branchProtection &&
+        !result.branchProtection.applied &&
+        result.branchProtection.error) {
+        process.exitCode = 1;
+    }
+}
 //# sourceMappingURL=init.js.map

package/dist/design-authority.d.ts

@@ -5,6 +5,19 @@
  * `designAuthority` principal on the resolved DesignSystemBinding, and
  * parses the explicit signal type from issue labels (preferred) or
  * structured comment markers.
+ *
+ * AISDLC-171 / RFC-0009 §13 OQ-8 anchor:
+ *   HC_design fires ONLY when one of the issue's participants (author or
+ *   commenter) is a principal listed in
+ *   `DesignSystemBinding.spec.stewardship.designAuthority.principals`.
+ *   Per RFC-0008 §14.2, non-principal participants' design opinions are
+ *   routed through HC_consensus (not HC_design) — this prevents anyone
+ *   from emitting full-weight HC_design signals just by labeling an
+ *   issue. To distinguish "no DSB at all" from "DSB exists but no
+ *   principal participated" at the breakdown surface, see
+ *   `principalsDeclared` on `DesignAuthoritySignal` (set by
+ *   `buildDesignAuthoritySignal` in `admission-enrichment.ts`) and
+ *   `pillarBreakdown.shared.hcComposite.designAuthorityConfigured`.
  */
 import type { DesignSystemBinding } from '@ai-sdlc/reference';
 import type { DesignAuthoritySignalType } from './admission-score.js';

package/dist/design-authority.js

@@ -5,6 +5,19 @@
  * `designAuthority` principal on the resolved DesignSystemBinding, and
  * parses the explicit signal type from issue labels (preferred) or
  * structured comment markers.
+ *
+ * AISDLC-171 / RFC-0009 §13 OQ-8 anchor:
+ *   HC_design fires ONLY when one of the issue's participants (author or
+ *   commenter) is a principal listed in
+ *   `DesignSystemBinding.spec.stewardship.designAuthority.principals`.
+ *   Per RFC-0008 §14.2, non-principal participants' design opinions are
+ *   routed through HC_consensus (not HC_design) — this prevents anyone
+ *   from emitting full-weight HC_design signals just by labeling an
+ *   issue. To distinguish "no DSB at all" from "DSB exists but no
+ *   principal participated" at the breakdown surface, see
+ *   `principalsDeclared` on `DesignAuthoritySignal` (set by
+ *   `buildDesignAuthoritySignal` in `admission-enrichment.ts`) and
+ *   `pillarBreakdown.shared.hcComposite.designAuthorityConfigured`.
  */
 /**
  * Label-encoded design signal types. Short, stable slugs keep GitHub

package/dist/execute.js

@@ -45,11 +45,14 @@ export async function executePipeline(issueId, options = {}) {
         (options.useStructuredLogger ? createStructuredConsoleLogger() : createLogger());
     const auditLog = options.auditLog ?? createDefaultAuditLog(workDir);
     const metricStore = options.metricStore;
-    // RFC-0010 §6/§7 Phase 2: parallelism opt-in. When AI_SDLC_PARALLELISM is unset (default),
-    // execution proceeds serially exactly as today. When set to 'experimental' or 'on', a
-    // WorktreePoolManager is instantiated for the worker-pool dispatcher landing in Phase 3
-    // (RFC-0010 §9). For now the manager is constructed but not yet routed through — Phase 2
-    // ships the wire-in surface; Phase 3 wires the worker pool to consume it.
+    // RFC-0010 §6/§7 Phase 2: parallelism. Per AISDLC-116 (maintainer directive 2026-05-01),
+    // AI_SDLC_PARALLELISM now defaults to 'on' — corpus-driven (no parallelism-related incidents
+    // in the trailing observation window) rather than calendar-driven. Explicit
+    // 'experimental' is preserved for callers pinning the pre-promotion mode; explicit
+    // 'off' / 'disabled' / 'false' / '0' is the opt-out path. When the resolved mode is
+    // not 'off', a WorktreePoolManager is instantiated for the worker-pool dispatcher
+    // (RFC-0010 §9). The manager is constructed but not yet routed through — Phase 2
+    // shipped the wire-in surface; Phase 3 wires the worker pool to consume it.
     const parallelismMode = readParallelismMode();
     let worktreePool;
     if (parallelismMode !== 'off') {

package/dist/models/classifier.d.ts

@@ -51,7 +51,9 @@ export interface DiffSummary {
  * Apply the default classifier ruleset from RFC §12.3 to a diff summary. Used as the
  * fallback when no LLM classifier is configured, and as the seed prompt for LLM-based
  * classifiers. Always returns confident: true with confidence: 1.0 because these are
- * deterministic rules.
+ * deterministic rules. AISDLC-145 added the docs denylist + widened
+ * auth/lockfile/CI predicates to close downgrade vectors flagged by the
+ * AISDLC-141 security reviewer.
  */
 export declare function defaultRulesetDecision(diff: DiffSummary): ClassifierOutput;
 export interface CalibrationLogEntry {

package/dist/models/classifier.js

@@ -146,11 +146,52 @@ export function validateClassifierOutput(value) {
     }
     return { ok: true, value: obj };
 }
+// ── AISDLC-145 path-classification helpers ─────────────────────────────────────────────
+//
+// These predicates are duplicated verbatim in the pipeline-cli copy
+// (`pipeline-cli/src/classifier/classifier.ts`). Keep them in sync — drift
+// here silently shifts which reviewers fire between callers. A future
+// consolidation task should extract a single `@ai-sdlc/classifier-ruleset`
+// package both sides import; tracked as a follow-up to AISDLC-145.
+/** Renderable-docs / image extensions allowed in the docs-only branch. */
+const DOCS_EXTENSIONS_RE = /\.(md|rst|txt|png|jpe?g|svg|gif|ico|pdf)$/i;
+/**
+ * Filenames that look secret-y or executable-y and must NEVER be classified
+ * as docs even if they sit under `docs/`. Hits include `.env`, `.env.local`,
+ * `private-key.pem`, `signing.key`, `install.sh`, `Dockerfile`, `Dockerfile.prod`,
+ * `package-lock.json`, etc. Anchored on the basename so path-prefix doesn't
+ * matter.
+ */
+const DOCS_DENYLIST_RE = /(?:^|\/)(\.env(?:\..+)?|.+\.pem|.+\.key|.+\.sh|Dockerfile.*|.+\.lock)$/i;
+/** True iff the path is safe to treat as documentation-only (no security review). */
+function isDocsLikePath(p) {
+    if (DOCS_DENYLIST_RE.test(p))
+        return false;
+    return DOCS_EXTENSIONS_RE.test(p);
+}
+/** Auth-tier secret files (env vars, private keys) — treated as auth-touching. */
+function isSecretFilePath(p) {
+    return /(?:^|\/)(\.env(?:\..+)?|.+\.pem|.+\.key)$/i.test(p);
+}
+/** Supply-chain lockfile detection (widened in AISDLC-145). */
+function isLockfilePath(p) {
+    return /(?:^|\/)(package(-lock)?\.json|requirements\.txt|pnpm-lock\.yaml|yarn\.lock|Cargo\.lock|poetry\.lock|Pipfile\.lock|Gemfile\.lock|composer\.lock|go\.sum|bun\.lockb)$/i.test(p);
+}
+/** CI-config detection (widened beyond GitHub Actions in AISDLC-145). */
+function isCiPath(p) {
+    if (p.startsWith('.github/workflows/'))
+        return true;
+    if (p.startsWith('.circleci/'))
+        return true;
+    return /(?:^|\/)(\.gitlab-ci\.yml|Jenkinsfile|azure-pipelines\.yml)$/i.test(p);
+}
 /**
  * Apply the default classifier ruleset from RFC §12.3 to a diff summary. Used as the
  * fallback when no LLM classifier is configured, and as the seed prompt for LLM-based
  * classifiers. Always returns confident: true with confidence: 1.0 because these are
- * deterministic rules.
+ * deterministic rules. AISDLC-145 added the docs denylist + widened
+ * auth/lockfile/CI predicates to close downgrade vectors flagged by the
+ * AISDLC-141 security reviewer.
  */
 export function defaultRulesetDecision(diff) {
     if (diff.filesChanged === 0) {
@@ -161,7 +202,15 @@ export function defaultRulesetDecision(diff) {
             confidence: 1,
         };
     }
-    const allDocs = diff.paths.every((p) => /\.(md|rst|txt)$/i.test(p) || p.startsWith('docs/'));
+    // AISDLC-145 hardening: the docs branch is a security DOWNGRADE — it skips
+    // both `testing` and `security` reviewers. So the predicate must be
+    // conservative: a docs-like file is one whose extension is in the safe set
+    // (renderable docs / images) AND is NOT on the unconditional denylist of
+    // executable-or-secret-looking filenames. Pre-145 the rule was just
+    // `p.startsWith('docs/')`, which let `docs/install.sh`, `docs/.env`,
+    // `docs/private-key.pem`, `docs/Dockerfile`, etc. silently bypass the
+    // security reviewer. See the AISDLC-141 reviewer findings.
+    const allDocs = diff.paths.every((p) => isDocsLikePath(p));
     if (allDocs) {
         return {
             reviewers: ['critic'],
@@ -170,9 +219,16 @@ export function defaultRulesetDecision(diff) {
             confidence: 0.95,
         };
     }
-    const touchesAuth = diff.paths.some((p) => /(?:^|\/)(auth|crypto|secrets?)\b/i.test(p));
-    const touchesLockfiles = diff.paths.some((p) => /(?:^|\/)(package(-lock)?\.json|requirements\.txt|pnpm-lock\.yaml|yarn\.lock|Cargo\.lock|poetry\.lock|Pipfile\.lock)$/i.test(p));
-    const touchesCi = diff.paths.some((p) => p.startsWith('.github/workflows/'));
+    // AISDLC-145: widen auth/secret detection. The pre-145 regex
+    // `(auth|crypto|secrets?)` missed common identity/authn paths
+    // (`oauth/`, `iam/`, `jwt/`, `session/`, `login.ts`, `rbac/`, `tokens.ts`,
+    // `credentials.ts`, `password.ts`, `signin/`, `signup/`). Those still ran 3
+    // reviewers via the default branch but never got the opus model bump.
+    // Also: `.env*`, `*.pem`, `*.key` files are treated as auth-tier — they
+    // contain or directly grant credentials.
+    const touchesAuth = diff.paths.some((p) => /(?:^|\/)(auth|oauth|crypto|secrets?|iam|jwt|session|login|rbac|tokens?|credentials?|password|signin|signup)\b/i.test(p) || isSecretFilePath(p));
+    const touchesLockfiles = diff.paths.some((p) => isLockfilePath(p));
+    const touchesCi = diff.paths.some((p) => isCiPath(p));
     if (touchesAuth) {
         return {
             reviewers: ['testing', 'critic', 'security'],

package/dist/pillar-breakdown.d.ts

@@ -36,9 +36,31 @@ export interface SharedDimensions {
      * populates this once the SA-1/SA-2/SA-3 decomposition lands.
      */
     saAlpha3?: number;
-    /** Per-channel HC breakdown with the tanh composite for reference. */
+    /**
+     * Per-channel HC breakdown with the tanh composite for reference.
+     *
+     * `designAuthorityConfigured` (AISDLC-171) — diagnostic flag set when
+     * the resolved DSB declares any `stewardship.designAuthority.principals`
+     * entries, regardless of whether one of them participated in the issue.
+     * Lets operators distinguish three pillarBreakdown states for the design
+     * channel:
+     *   - `design = 0` and `configured === undefined` → no DSB resolved
+     *     (preDesignSystem). HC_design intentionally inert.
+     *   - `design = 0` and `configured === true`     → DSB declares design
+     *     authority but no principal participated as author/commenter.
+     *     HC_design intentionally 0 per RFC-0008 §14.2 (only principals
+     *     emit full-weight HC_design signals; non-principal opinions route
+     *     through HC_consensus, not HC_design).
+     *   - `design ≠ 0` and `configured === true`     → a principal
+     *     participated; signal weight reflects label-derived signalType.
+     *
+     * The `false` case (DSB exists but `principals` is empty) is also
+     * surfaced for completeness — a DSB without designAuthority principals
+     * cannot ever fire HC_design and operators should know.
+     */
     hcComposite: HcChannelBreakdown & {
         value: number;
+        designAuthorityConfigured?: boolean;
     };
 }
 export interface TensionFlag {

package/dist/pillar-breakdown.js

@@ -70,6 +70,15 @@ export function computePillarBreakdown(composite) {
             decision: b.humanCurve.hcDecision,
             design: b.humanCurve.hcDesign,
             value: b.humanCurve.hcComposite,
+            // AISDLC-171: only include the flag when the underlying signal
+            // populated it (i.e., a DSB was resolved). Leaving it `undefined`
+            // when no DSB was supplied keeps the preDesignSystem state
+            // distinct from the "configured but inactive" state at the API
+            // surface — operators inspecting `pillarBreakdown.shared` can
+            // tell the three states apart without reading the DSB themselves.
+            ...(b.humanCurve.designAuthorityConfigured !== undefined
+                ? { designAuthorityConfigured: b.humanCurve.designAuthorityConfigured }
+                : {}),
         },
     };
     const tensions = detectTensions({ product, design, engineering, shared, tensions: [] });