@enterpriseai/cli 3.19.0 → 3.19.2

package/resources/gofer/templates/spec-template.md

@@ -141,7 +141,45 @@ _Example of marking unclear requirements:_
 - **App stack policy**: [EAI Platform including app template first, Azure second
   | approved non-EAI exception | not applicable]
 
-## UI Preview & Approval Gate _(application delivery only)_
+## Authentication Access Decision _(when authentication enters scope)_
+
+Use `.specify/references/platform/eai-auth-access.md`. Ask the business owner
+who may use the app before changing auth code.
+
+- **Access scope**: [workspace-only (default) | platform-authenticated with
+  explicit approval | not applicable yet]
+- **Owner confirmation and rationale**: [answer and date; unanswered must not
+  widen access]
+- **Target workspace**: [safe reference; not the shared CIAM directory ID]
+- **App permissions and data isolation**: [server-side rules; wider sign-in does
+  not grant workspace data access]
+- **Sign-in method**: [EAI sign-in | client SSO through EAI; confirmed
+  separately]
+- **SSO readiness**: [verified setup route and entitlement | blocked | not
+  applicable]
+- **Account continuity and recovery**: [membership preservation, rollback,
+  emergency sign-in; no secrets]
+- **Acceptance evidence**: [member, non-member, anonymous, cross-workspace,
+  revoked, and unavailable membership checks]
+
+## Capability Maturity & Validation Scope
+
+Record only capabilities that matter to this feature. Use one state:
+`not_applicable`, `planned`, `implemented`, `verified`, or `blocked`.
+
+| Capability               | State   | Why it applies now | Evidence required now                                                | Trigger to re-open |
+| ------------------------ | ------- | ------------------ | -------------------------------------------------------------------- | ------------------ |
+| Local user journey       | [state] | [reason]           | [test or review]                                                     | [change]           |
+| Browser preview          | [state] | [reason]           | [HTTP check and screenshot]                                          | [change]           |
+| Authentication           | [state] | [reason]           | [provider, callback, sign-in, session, protected API, denied access] | [change]           |
+| EAI Platform integration | [state] | [reason]           | [preflight and template evidence]                                    | [change]           |
+| Deployment               | [state] | [reason]           | [deployment and smoke evidence]                                      | [change]           |
+
+Do not mark a planned capability as failed. When a user changes scope, update
+this table, `plan.md`, `tasks.md`, `traceability.md`, and validation scope
+before work continues. Explain the effect in plain language.
+
+## UI Preview & Show-And-Tell Loop _(application delivery only)_
 
 - **First MVP preview**: [what must be shown first]
 - **Profile choice**: [external / internal / hybrid]
@@ -149,13 +187,13 @@ _Example of marking unclear requirements:_
 - **Coupling status**: [source-platform-coupled / source-platform-decoupled /
   hybrid-adapter]
 - **Public-readiness target**: [required / deferred / not applicable]
-- **EAI App Template constraints**: [which approved blocks/patterns must be
+- **EAI App Template constraints**: [which selected blocks/patterns must be
   reused]
 - **Block catalog evidence**: [`eai blocks list`, `eai blocks describe <id>`,
   selected block IDs, and any custom-block exception]
 - **Resource bindings**: [`eai resources schema` fields/actions/events used by
   selected blocks]
-- **Storybook story IDs**: [story IDs for reusable/ported blocks, or approved
+- **Storybook story IDs**: [story IDs for reusable/ported blocks, or reviewed
   exception]
 - **Theme override points**: [tokens, slots, CSS variables, data/action hooks]
 - **Block porting and source-platform decoupling**: [reuse/port/custom decision
@@ -163,12 +201,13 @@ _Example of marking unclear requirements:_
 - **Branding scope**: [logos/styling in scope or not]
 - **Preview validation requirement**: [screenshot, local render proof,
   Playwright-style checks]
-- **Approval requirement**: [who approves and what artifact records it]
+- **Show-and-tell requirement**: [what must be shown, how quickly, and what
+  artifact records user feedback]
 
 ## EnterpriseAI Service Fit _(application delivery only)_
 
-- **Capability selection must happen**: after UI approval and before plan/tasks
-  are considered complete
+- **Capability selection must happen**: after the first visible UI direction and
+  before plan/tasks are considered complete
 - **Evidence sources**: [`eai --describe`, `eai whoami`, `eai workspace select`,
   `eai resources schema`, `eai verify calls --format json`, or approved
   equivalent]

package/resources/gofer/templates/tasks-template.md

@@ -21,6 +21,14 @@ pipeline.
 **Tests**: The examples below include test tasks. Tests are OPTIONAL - only
 include them if explicitly requested in the feature specification.
 
+**Priority protection**: Maintain `priority-plan.json` from its template. Record
+the latest approved direction in `decisions.md`, the ordered critical path,
+dependencies and `allowedEditScope` per task. Place the first outcome proof
+after its minimum runtime prerequisites. Record approval for independent
+parallel work. Use `.specify/references/priority-outcome-protection.md`; retain
+all later release checks and do not add future auth or deployment requirements
+to local MVP work.
+
 **Organization**: Tasks are grouped by user story to enable independent
 implementation and testing of each story.
 
@@ -32,13 +40,14 @@ implementation:
 
 - `goal-ledger.json` exists and records goals, metrics, delivery states, and
   re-loop triggers
-- `ui-approval.md` exists and is approved
+- `ui-show-and-tell.md` exists and records what was shown to the user, where it
+  opened, feedback received, and unresolved UX issues
 - `service-fit-matrix.md` exists and distinguishes accessible now, purchasable,
   and unavailable platform capabilities
 - normal build tasks use the EAI app template, EAI platform services, and
   Azure-compatible support services before any custom or third-party app
   substrate
-- preview work stays inside approved EAI App Template blocks unless an exception
+- preview work stays inside selected EAI App Template blocks unless an exception
   task is recorded
 - package lane, coupling status, Storybook story IDs, theme override points,
   custom-block exceptions, and external/internal/hybrid profile choice are
@@ -49,7 +58,7 @@ block-porting, and source-platform decoupling tasks before user-story
 implementation.
 
 For explicit non-app work, mark this section "Not applicable" and continue with
-the shared stages without app-only gates.
+the shared stages without app-only show-and-tell/service-fit prerequisites.
 
 ## Format: `[ID] [P?] [Story] Description`
 

package/resources/gofer/templates/ui-preview-brief-template.md

@@ -21,6 +21,52 @@ status: draft
 | Must-have interactions                    | {{interactions}} |
 | Explicitly out of scope for first preview | {{out-of-scope}} |
 
+## Fast Preview Runtime
+
+- **Preview command**:
+  {{preview-command-or-url, prefer ./run.sh dev 3001 or run.bat dev 3001}}
+- **Primary preview URL**: {{preview-url}}
+- **Browser target**: integrated browser when the host app supports it;
+  otherwise open the system browser.
+- **Runner rule**: use the repo runner when it exists. Do not use direct
+  `npm run dev`, `next dev`, or package-manager preview commands when `run.sh`,
+  `run.bat`, or `run.ps1` exists.
+- **macOS / Linux / Codespaces runner**:
+
+  ```bash
+  ./run.sh dev 3001
+  ```
+
+- **Windows runner**:
+
+  ```bat
+  run.bat dev 3001
+  ```
+
+- **Change trigger**: after every UI-facing change to page layout, component
+  choice, theme, copy, data binding, or interaction behavior, run:
+
+  ```bash
+  node .specify/scripts/node/gofer-ui-preview.mjs --feature-dir {{feature-dir}} --command "./run.sh dev 3001" --open auto --screenshot --change "{{change-summary}}"
+  ```
+
+- **Windows change trigger**:
+
+  ```bat
+  node .specify/scripts/node/gofer-ui-preview.mjs --feature-dir {{feature-dir}} --command "run.bat dev 3001" --open auto --screenshot --change "{{change-summary}}"
+  ```
+
+- **Existing server fallback**:
+
+  ```bash
+  node .specify/scripts/node/gofer-ui-preview.mjs --feature-dir {{feature-dir}} --url {{preview-url}} --open auto --screenshot --change "{{change-summary}}"
+  ```
+
+- **Ready-to-show definition**: local URL opened, screenshot captured or a clear
+  Playwright/browser limitation recorded, self-review notes appended to
+  `ui-review-log.md`, and known visual risks called out before asking the user
+  for feedback.
+
 ## Package Profile
 
 | Field                   | Decision                                                             |
@@ -34,19 +80,19 @@ status: draft
 
 | Constraint                    | Decision                                          |
 | ----------------------------- | ------------------------------------------------- |
-| Default layout / blocks       | {{approved-template-blocks}}                      |
+| Default layout / blocks       | {{selected-template-blocks}}                      |
 | Block catalog evidence        | {{eai-blocks-list-and-describe-evidence}}         |
 | Resource bindings             | {{eai-resources-schema-bindings}}                 |
 | Storybook story IDs           | {{storybook-story-ids-or-exceptions}}             |
 | Theme override points         | {{theme-presentation-copy-data-action-overrides}} |
-| Allowed create-new exceptions | {{approved-exceptions-or-none}}                   |
+| Allowed create-new exceptions | {{shown-exceptions-or-none}}                      |
 | Accessibility baseline        | {{expectation}}                                   |
 
 ## Block Porting And source platform Decoupling
 
-| Block ID     | Package Lane | Storybook Story ID | Coupling Status | Porting Decision                | Theme Override Points     | Custom-Block Exception    |
-| ------------ | ------------ | ------------------ | --------------- | ------------------------------- | ------------------------- | ------------------------- |
-| {{block-id}} | {{lane}}     | {{story-id-or-na}} | {{status}}      | Reuse / Port / Custom Exception | {{tokens-slots-css-vars}} | {{none-or-approval-path}} |
+| Block ID     | Package Lane | Storybook Story ID | Coupling Status | Porting Decision                | Theme Override Points     | Custom-Block Exception  |
+| ------------ | ------------ | ------------------ | --------------- | ------------------------------- | ------------------------- | ----------------------- |
+| {{block-id}} | {{lane}}     | {{story-id-or-na}} | {{status}}      | Reuse / Port / Custom Exception | {{tokens-slots-css-vars}} | {{none-or-review-path}} |
 
 ## Branding Inputs
 
@@ -61,5 +107,9 @@ status: draft
 
 - [ ] Local render proof captured
 - [ ] Screenshot or Playwright-style self-review captured
+- [ ] Preview opened in an integrated or external browser with
+      `gofer-ui-preview.mjs`
+- [ ] `ui-review-log.md` records every UI-facing change since the previous user
+      review
 - [ ] Brief-to-preview mismatch list recorded
 - [ ] Open visual risks called out before stakeholder review

package/resources/gofer/templates/ui-review-log-template.md

@@ -6,6 +6,24 @@ workflowProfile: enterpriseai
 
 # UI Review Log: {{feature-name}}
 
-| Round | Preview Ref | Evidence | Package Lane | Coupling Status | Storybook Story IDs | Theme Override Points | Stakeholder Feedback | Changes Accepted | Open Issues |
-| ----- | ----------- | -------- | ------------ | --------------- | ------------------- | --------------------- | -------------------- | ---------------- | ----------- |
-| 1 | {{preview-ref}} | {{screenshot-or-playwright}} | {{lane}} | {{coupling-status}} | {{story-ids}} | {{theme-overrides}} | {{feedback}} | {{accepted}} | {{open}} |
+## Fast Preview Contract
+
+Every UI-facing change must add a row here before the agent reports the change
+as complete. Prefer the repo-owned helper and repo runner:
+
+```bash
+node .specify/scripts/node/gofer-ui-preview.mjs --feature-dir {{feature-dir}} --command "./run.sh dev 3001" --open auto --screenshot --change "{{change-summary}}"
+```
+
+On Windows:
+
+```bat
+node .specify/scripts/node/gofer-ui-preview.mjs --feature-dir {{feature-dir}} --command "run.bat dev 3001" --open auto --screenshot --change "{{change-summary}}"
+```
+
+Use `--url {{preview-url}}` only when a server is already running. Do not use
+direct `npm run dev` commands when `run.sh`, `run.bat`, or `run.ps1` exists.
+
+| Time              | Change Trigger     | Command             | URL             | Browser Target        | Screenshot                   | Package Lane | Coupling Status     | Storybook Story IDs | Theme Override Points | Self-Review     | Stakeholder Feedback | User Feedback Applied | Open Issues |
+| ----------------- | ------------------ | ------------------- | --------------- | --------------------- | ---------------------------- | ------------ | ------------------- | ------------------- | --------------------- | --------------- | -------------------- | --------------------- | ----------- |
+| {{ISO-timestamp}} | {{change-summary}} | {{preview-command}} | {{preview-url}} | Integrated / External | {{screenshot-or-playwright}} | {{lane}}     | {{coupling-status}} | {{story-ids}}       | {{theme-overrides}}   | {{self-review}} | {{feedback}}         | {{applied}}           | {{open}}    |

package/resources/gofer/templates/ui-show-and-tell-template.md

@@ -0,0 +1,46 @@
+---
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
+workflowProfile: enterpriseai
+status: active
+---
+
+# UI Show-and-Tell: {{feature-name}}
+
+## Purpose
+
+This file records what Gofer showed the user, how quickly it was shown, what
+feedback came back, and what changed next. It is not release approval.
+
+## Latest Preview
+
+- **Preview reference**: {{preview-ref}}
+- **Latest opened preview URL**: {{preview-url}}
+- **Latest `gofer-ui-preview.mjs` run**: {{preview-helper-run-or-log-row}}
+- **Screenshot / browser evidence**: {{screenshot-or-browser-evidence}}
+- **Shown at**: {{timestamp}}
+- **Shown by**: {{agent-or-user}}
+
+## Show-and-Tell Loop
+
+| Time              | Change Shown       | URL             | Screenshot / Browser Evidence | User Feedback           | Change Made Next        | Open UX Issues  |
+| ----------------- | ------------------ | --------------- | ----------------------------- | ----------------------- | ----------------------- | --------------- |
+| {{ISO-timestamp}} | {{change-summary}} | {{preview-url}} | {{evidence-path-or-note}}     | {{feedback-or-pending}} | {{next-change-or-none}} | {{open-issues}} |
+
+## Design Constraints Being Preserved
+
+- **EAI App Template baseline preserved**: {{yes-no}}
+- **Selected profile choice**: {{external-internal-hybrid}}
+- **Selected package lane**:
+  {{public-package-internal-app-hybrid-adapter-app-local}}
+- **Selected coupling status**:
+  {{source-platform-coupled-source-platform-decoupled-hybrid-adapter}}
+- **Storybook story IDs**: {{storybook-story-ids-or-exceptions}}
+- **Theme override points**: {{theme-override-points}}
+- **Create-new exceptions shown to user**: {{exceptions-or-none}}
+- **Branding/logo scope shown**: {{branding-scope}}
+- **Public-readiness target**: {{required-deferred-not-applicable}}
+
+## Notes
+
+- {{note}}

package/resources/gofer/templates/visuals/capability-heatmap-template.md

@@ -30,9 +30,9 @@ quadrantChart
     x-axis Low Maturity --> High Maturity
     y-axis Low Value --> High Value
     quadrant-1 Strategic Investment
-    quadrant-2 Quick Wins
+    quadrant-2 Optimize
     quadrant-3 Deprecate
-    quadrant-4 Optimize
+    quadrant-4 Quick Wins
     {{CAPABILITY_1}}: [{{X1}}, {{Y1}}]
     {{CAPABILITY_2}}: [{{X2}}, {{Y2}}]
     {{CAPABILITY_3}}: [{{X3}}, {{Y3}}]

package/resources/gofer/templates/working-backwards-prfaq-template.md

@@ -1,11 +1,11 @@
 ---
-feature: "{{feature-name}}"
-created: "{{ISO-timestamp}}"
-updated: "{{ISO-timestamp}}"
+feature: '{{feature-name}}'
+created: '{{ISO-timestamp}}'
+updated: '{{ISO-timestamp}}'
 status: draft
-stage: "{{gofer-stage}}"
-primary_customer: "{{primary-customer-or-persona}}"
-business_owner: "{{business-owner}}"
+stage: '{{gofer-stage}}'
+primary_customer: '{{primary-customer-or-persona}}'
+business_owner: '{{business-owner}}'
 source_inputs:
   - problem-brief.md
   - discovery.md
@@ -112,12 +112,13 @@ hide uncertainty or change scope.
 - **Architecture direction**: {{architecture-summary}}
 - **EAI Platform fit**: {{eai-platform-components-and-template-use}}
 - **Azure fit**: {{azure-services-and-why}}
-- **Auth, workspace, data, integration**: {{auth-tenant-data-contract-summary}}
+- **Auth, workspace boundaries, data, integration**:
+  {{auth-tenant-data-contract-summary}}
 
 ### CISO / Risk
 
 - **Data handled**: {{data-classification-and-sensitive-data}}
-- **Identity and access controls**: {{authn-authz-tenant-controls}}
+- **Identity and workspace access controls**: {{authn-authz-tenant-controls}}
 - **Residual risks**: {{residual-risk-and-open-security-questions}}
 - **Evidence**: {{security-validation-evidence-links}}
 

package/resources/linked-sources.json

@@ -2,13 +2,13 @@
   "schemaVersion": 1,
   "gofer": {
     "repo": "https://github.com/eai-support/eai-gofer.git",
-    "commit": "7601cf2011c3f91509c647c6818afa292935c2d0",
-    "describe": "v3.7.1"
+    "commit": "965833ad06c5bed1c76b2e493891036449e67561",
+    "describe": "v3.14.3"
   },
   "appTemplate": {
     "repo": "https://github.com/eai-support/eai-app-template.git",
-    "version": "v1.0.7",
-    "commit": "3af817f688d374b6260dcffcecb53c4bb94675ef",
+    "version": "v1.0.10",
+    "commit": "3a117e2cd12ef2375a80ebdc6031927b2da2be78",
     "packageLockSha256": "5b04e0be44ef93a817e4dc5076914d0f0684712b41155ee2934ce42f184df415",
     "enterpriseRegistry": "https://enterpriseaigroup.github.io/enterpriseai-packages/registry",
     "enterprisePackageFingerprint": "3286fdf91d6a25a55a4d84de21bf5c592bcf11abffb96dc2be90e93414eeb646",