@kudusov.takhir/ba-toolkit 1.2.5 → 1.3.1

package/CHANGELOG.md

@@ -11,6 +11,60 @@ Versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
+## [1.3.1] — 2026-04-08
+
+### Fixed
+
+- **`/brief` and `/srs` now load all 9 domain references, not just 3.** Both `skills/brief/SKILL.md` and `skills/srs/SKILL.md` hardcoded a check for `igaming`, `fintech`, `saas` only — a stale list from v1.0 that was never updated when v1.1.0 added six new domain references (`ecommerce`, `healthcare`, `logistics`, `on-demand`, `social-media`, `real-estate`). As a result, users on any of those six domains silently got no domain-specific interview questions, mandatory entities, or glossary. The check now covers all nine shipped domain files, matching the supported list advertised in the CLI and README. No other skill files had the same stale list — only `brief` and `srs` did hardcoded domain matching.
+
+### Changed
+
+- **`sprint-template.md` rewritten end-to-end as Nova Analytics (SaaS).** The sprint-plan reference template loaded by `/sprint` was previously a Dragon Fortune iGaming example (slot games, RTP, responsible gambling, bonus wagering, Telegram Mini App). It's now a B2B SaaS product analytics plan — workspace sign-up, data source integration, dashboards with funnel/cohort widgets, metric alerts, SSO, and admin workspace management. Structure (sprint goals, DoD, capacity math, epic labels) is unchanged.
+- **`risk-template.md` rewritten end-to-end as Nova Analytics.** The risk-register reference template loaded by `/risk` had iGaming-specific risks (regulated iGaming jurisdiction, Telegram Mini App API breakage, RTP / bonus wagering knowledge gap). It's now a SaaS analytics risk register: third-party data source rate limits, GDPR DPA, columnar query performance at scale, OIDC/SSO library breaking changes, and columnar analytics storage knowledge gap. Structure (probability × impact scoring, priority tiers, mitigation/contingency sections) is unchanged.
+- **`export-template.md`** — one-line fix: the example Jira label changed from `dragon-fortune` to `nova-analytics`.
+- **iGaming-first ordering removed from user-facing documentation.** README intro, README Domain support table, `docs/FAQ.md`, `docs/USAGE.md`, and `docs/TROUBLESHOOTING.md` all listed iGaming first when enumerating the 9 supported domains. They now follow the SaaS-first order the CLI has used since v1.3.0: `saas → fintech → ecommerce → healthcare → logistics → on-demand → social-media → real-estate → igaming`. The iGaming row in the Domain support table stays — it just moved from position 1 to position 9.
+- **`dragon-fortune` slug example in README.md:186 replaced with `nova-analytics`.** This was the last stray placeholder outside the real `example/dragon-fortune/` project.
+
+### Not changed (deliberately)
+
+- `skills/references/domains/igaming.md` — the domain reference itself. iGaming remains a first-class supported domain.
+- `example/dragon-fortune/` — the real end-to-end example project referenced from README.
+- `bin/ba-toolkit.js` / `init.sh` / `init.ps1` `DOMAINS` array iGaming entry — iGaming remains a menu choice in the CLI and shell initialisers.
+
+---
+
+## [1.3.0] — 2026-04-08
+
+### Changed
+
+- **`ba-toolkit init` is now a one-command setup.** It prompts for project name, slug (auto-derived from the name), domain, and AI agent, then creates `output/{slug}/`, writes `AGENTS.md`, and installs the skills into the chosen agent's directory — in a single interactive flow. Previously this required two commands: `ba-toolkit init` followed by `ba-toolkit install --for <agent>`. The old two-step flow is still available via `ba-toolkit init --no-install` + `ba-toolkit install --for <agent>`.
+- **Domain and agent selection now use numbered menus** instead of free-text input. Domains are listed 1–10 with name and short description; agents are listed 1–5 with their registered id. Users can type either the menu number (`1`, `2`, …) or the id (`saas`, `claude-code`, …).
+- **`DOMAINS` reordered** so general-purpose industries (SaaS, Fintech, E-commerce, Healthcare) appear first; iGaming moved to position 9. The toolkit is no longer iGaming-first in its defaults.
+- **Setup placeholders no longer use "Dragon Fortune"** (the iGaming example project). The CLI, `init.sh`, `init.ps1`, `docs/USAGE.md` AGENTS.md example, and `skills/references/environment.md` file listings now use neutral placeholders (`My App` / `my-app` / `saas`). The actual example project in `example/dragon-fortune/` and the skill templates that reference it are unchanged — they remain a real iGaming walkthrough.
+
+### Added
+
+- `ba-toolkit init --for <agent>` flag — skip the agent menu (e.g. `--for claude-code`). Accepts the same set as `ba-toolkit install --for`.
+- `ba-toolkit init --no-install` flag — create the project structure only; don't install skills. Restores the pre-1.3.0 behavior for CI pipelines that run `init` and `install` as separate steps.
+- `ba-toolkit init --global` / `--project` / `--dry-run` flags — forwarded to the embedded install step.
+- `init.sh` and `init.ps1` shell fallbacks now use the same numbered domain menu and auto-derived slug UX as the CLI, with pointers to `npx @kudusov.takhir/ba-toolkit install --for <agent>` for the skill install step (they remain zero-dependency scripts and don't install skills themselves).
+
+### Migration note
+
+CI scripts that relied on the old behaviour (`init` creates files only, `install` is a separate step) need one of:
+
+- Pass all the new flags to get fully non-interactive behaviour:
+  ```bash
+  npx @kudusov.takhir/ba-toolkit init --name "My App" --domain saas --for claude-code
+  ```
+- Or add `--no-install` to keep the two-step flow:
+  ```bash
+  npx @kudusov.takhir/ba-toolkit init --name "My App" --domain saas --no-install
+  npx @kudusov.takhir/ba-toolkit install --for claude-code
+  ```
+
+---
+
 ## [1.2.5] — 2026-04-08
 
 ### Changed
@@ -180,7 +234,9 @@ Versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
 
-[Unreleased]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.5...HEAD
+[Unreleased]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.3.1...HEAD
+[1.3.1]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.3.0...v1.3.1
+[1.3.0]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.5...v1.3.0
 [1.2.5]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.4...v1.2.5
 [1.2.4]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.3...v1.2.4
 [1.2.3]: https://github.com/TakhirKudusov/ba-toolkit/compare/v1.2.2...v1.2.3

package/README.md

@@ -24,7 +24,7 @@ Structured BA pipeline for AI coding agents — brief to handoff, 21 skills, 9 d
 
 BA Toolkit is a set of 21 interconnected skills that run a full business-analysis pipeline inside your AI coding agent. You go from a rough project brief to a development handoff package, and each skill reads the output of the previous ones — maintaining cross-references between artifacts along the chain `FR → US → UC → AC → NFR → Entity → ADR → API → WF → Scenario`.
 
-Unlike one-shot prompting, every artifact is written to disk as Markdown, every ID links back to its source, and `/trace` verifies coverage across the whole pipeline. `/clarify` and `/analyze` catch ambiguities and quality gaps with CRITICAL/HIGH severity ratings. Domain references for 9 industries (iGaming, Fintech, SaaS, E-commerce, Healthcare, Logistics, On-demand, Social/Media, Real Estate) plug in automatically at `/brief`.
+Unlike one-shot prompting, every artifact is written to disk as Markdown, every ID links back to its source, and `/trace` verifies coverage across the whole pipeline. `/clarify` and `/analyze` catch ambiguities and quality gaps with CRITICAL/HIGH severity ratings. Domain references for 9 industries (SaaS, Fintech, E-commerce, Healthcare, Logistics, On-demand, Social/Media, Real Estate, iGaming) plug in automatically at `/brief`.
 
 Artifacts are generated in whatever language you write in — ask in English, get English docs; ask in any other language, the output follows.
 
@@ -33,16 +33,20 @@ Artifacts are generated in whatever language you write in — ask in English, ge
 ## Install
 
 ```bash
-# One-shot project setup — zero install, just run:
+# Full setup in one command — prompts for project name, domain, and
+# AI agent, then creates output/{slug}/, AGENTS.md, and installs the
+# skills into the chosen agent's directory.
 npx @kudusov.takhir/ba-toolkit init
-npx @kudusov.takhir/ba-toolkit install --for claude-code
+
+# Non-interactive (e.g. for CI): pass every choice on the command line.
+npx @kudusov.takhir/ba-toolkit init --name "My App" --domain saas --for claude-code
 
 # Or install globally and reuse across projects:
 npm install -g @kudusov.takhir/ba-toolkit
-ba-toolkit install --for claude-code --global
+ba-toolkit init
 ```
 
-Supported agents: `claude-code`, `codex`, `gemini`, `cursor`, `windsurf`. Cursor and Windsurf installs auto-convert `SKILL.md` into the `.mdc` rule format. Use `--dry-run` to preview without writing.
+Supported agents: `claude-code`, `codex`, `gemini`, `cursor`, `windsurf`. Cursor and Windsurf installs auto-convert `SKILL.md` into the `.mdc` rule format. Pass `--dry-run` to preview the install step without writing files, or `--no-install` to create only the project structure and install skills later with `ba-toolkit install --for <agent>`.
 
 `ba-toolkit --help` shows the full CLI reference. Zero runtime dependencies — only Node.js ≥ 18.
 
@@ -179,7 +183,7 @@ Full traceability: FR → US → UC → AC → NFR → Entity → ADR → API
 | — | `/risk` | Risk register — probability × impact matrix, mitigation per risk | `00_risks_{slug}.md` |
 | — | `/sprint` | Sprint plan — stories grouped by velocity and capacity with sprint goals | `00_sprint_{slug}.md` |
 
-The project **slug** (e.g., `dragon-fortune`) is set at `/brief` and reused across all files automatically.
+The project **slug** (e.g., `nova-analytics`) is set at `/brief` and reused across all files automatically.
 
 ---
 
@@ -208,15 +212,15 @@ The pipeline is domain-agnostic by default. At `/brief`, you pick a domain, and
 
 | Domain | Industries covered |
 |--------|-------------------|
-| **iGaming** | Online slots, sports betting, casino lobbies, Telegram Mini Apps, promo mechanics |
-| **Fintech** | Neobanks, payment systems, crypto exchanges, investment platforms, P2P lending |
 | **SaaS** | B2B platforms, CRM, analytics, marketplaces, EdTech, HRTech |
+| **Fintech** | Neobanks, payment systems, crypto exchanges, investment platforms, P2P lending |
 | **E-commerce** | B2C stores, B2B catalogs, multi-vendor marketplaces, D2C brands, digital goods |
 | **Healthcare** | Telemedicine, patient portals, EHR/EMR, clinic management, mental health apps |
 | **Logistics** | Last-mile delivery, courier management, freight tracking, WMS, fleet management |
 | **On-demand** | Ride-hailing, home services, task marketplaces, beauty, tutoring, pet care |
 | **Social / Media** | Social networks, creator platforms, community forums, newsletters, short-video |
 | **Real Estate** | Property portals, agency CRM, rental management, property management, mortgage tools |
+| **iGaming** | Online slots, sports betting, casino lobbies, Telegram Mini Apps, promo mechanics |
 | **Custom** | Any other domain — works with general interview questions |
 
 Adding a new domain = creating one Markdown file in `skills/references/domains/`. See [docs/DOMAINS.md](docs/DOMAINS.md).

package/bin/ba-toolkit.js

@@ -57,16 +57,16 @@ const AGENTS = {
 };
 
 const DOMAINS = [
-  { id: 'igaming', desc: 'iGaming — slots, betting, casino, Telegram Mini Apps' },
-  { id: 'fintech', desc: 'Fintech — neobanks, payments, crypto, P2P lending' },
-  { id: 'saas', desc: 'SaaS — B2B platforms, CRM, analytics, EdTech' },
-  { id: 'ecommerce', desc: 'E-commerce — stores, marketplaces, D2C brands' },
-  { id: 'healthcare', desc: 'Healthcare — telemedicine, EHR, patient portals' },
-  { id: 'logistics', desc: 'Logistics — delivery, courier, WMS, fleet' },
-  { id: 'on-demand', desc: 'On-demand — ride-hailing, home services, marketplace' },
-  { id: 'social-media', desc: 'Social/Media — social networks, creator platforms' },
-  { id: 'real-estate', desc: 'Real Estate — property portals, CRM, rental management' },
-  { id: 'custom', desc: 'Custom — any other domain' },
+  { id: 'saas',         name: 'SaaS',         desc: 'B2B platforms, CRM, analytics, EdTech, HRTech' },
+  { id: 'fintech',      name: 'Fintech',      desc: 'Neobanks, payments, crypto, P2P lending' },
+  { id: 'ecommerce',    name: 'E-commerce',   desc: 'Stores, marketplaces, D2C brands, digital goods' },
+  { id: 'healthcare',   name: 'Healthcare',   desc: 'Telemedicine, EHR, patient portals, clinic management' },
+  { id: 'logistics',    name: 'Logistics',    desc: 'Delivery, courier, WMS, fleet management' },
+  { id: 'on-demand',    name: 'On-demand',    desc: 'Ride-hailing, home services, task marketplaces' },
+  { id: 'social-media', name: 'Social/Media', desc: 'Social networks, creator platforms, community forums' },
+  { id: 'real-estate',  name: 'Real Estate',  desc: 'Property portals, agency CRM, rental management' },
+  { id: 'igaming',      name: 'iGaming',      desc: 'Slots, betting, casino, Telegram Mini Apps' },
+  { id: 'custom',       name: 'Custom',       desc: 'Any other domain — general interview questions' },
 ];
 
 // --- Terminal helpers --------------------------------------------------
@@ -134,6 +134,32 @@ function sanitiseSlug(input) {
     .replace(/^-+|-+$/g, '');
 }
 
+// Accepts a 1-based menu index ("3") or a domain id ("fintech"). Returns the
+// resolved id or null if nothing matched.
+function resolveDomain(raw) {
+  const trimmed = String(raw || '').toLowerCase().trim();
+  if (!trimmed) return null;
+  if (/^\d+$/.test(trimmed)) {
+    const n = parseInt(trimmed, 10);
+    return n >= 1 && n <= DOMAINS.length ? DOMAINS[n - 1].id : null;
+  }
+  const match = DOMAINS.find((d) => d.id === trimmed);
+  return match ? match.id : null;
+}
+
+// Accepts a 1-based menu index ("1") or an agent id ("claude-code"). Returns
+// the resolved id or null if nothing matched.
+function resolveAgent(raw) {
+  const trimmed = String(raw || '').toLowerCase().trim();
+  if (!trimmed) return null;
+  const ids = Object.keys(AGENTS);
+  if (/^\d+$/.test(trimmed)) {
+    const n = parseInt(trimmed, 10);
+    return n >= 1 && n <= ids.length ? ids[n - 1] : null;
+  }
+  return AGENTS[trimmed] ? trimmed : null;
+}
+
 function today() {
   return new Date().toISOString().slice(0, 10);
 }
@@ -250,34 +276,93 @@ async function cmdInit(args) {
   log('  ' + cyan('================================'));
   log('');
 
-  let slug = args.flags.slug;
-  if (!slug) slug = await prompt('  Project slug (lowercase, hyphens only, e.g. dragon-fortune): ');
-  slug = sanitiseSlug(slug);
-  if (!slug) {
-    logError('Invalid or empty slug.');
+  // --- 1. Project name (slug derives from it) ---
+  const nameFromFlag = !!(args.flags.name && args.flags.name !== true);
+  let name = nameFromFlag ? args.flags.name : null;
+  if (!name) name = await prompt('  Project name (e.g. My App): ');
+  name = String(name || '').trim();
+  if (!name) {
+    logError('Project name is required.');
     process.exit(1);
   }
 
-  let name = args.flags.name;
-  if (!name) name = await prompt('  Project name (human-readable, e.g. Dragon Fortune): ');
-  if (!name) {
-    logError('Project name is required.');
+  // --- 2. Slug (auto-derived from name; confirmed interactively unless
+  //     both --name and --slug were passed on the command line) ---
+  const slugFromFlag = !!(args.flags.slug && args.flags.slug !== true);
+  let slug = slugFromFlag ? args.flags.slug : null;
+  if (!slug) {
+    const derived = sanitiseSlug(name);
+    if (nameFromFlag) {
+      // Non-interactive path: silently accept the derived slug.
+      slug = derived;
+    } else if (derived) {
+      const custom = await prompt(`  Project slug [${cyan(derived)}]: `);
+      slug = custom || derived;
+    } else {
+      slug = await prompt('  Project slug (lowercase, hyphens only): ');
+    }
+  }
+  slug = sanitiseSlug(slug);
+  if (!slug) {
+    logError('Invalid or empty slug.');
     process.exit(1);
   }
 
+  // --- 3. Domain (numbered menu) ---
   let domain = args.flags.domain;
-  if (!domain) {
-    log('');
-    log('  ' + yellow('Available domains:'));
-    for (const d of DOMAINS) {
-      log(`    ${d.id.padEnd(14)} ${d.desc}`);
+  if (domain && domain !== true) {
+    domain = resolveDomain(String(domain));
+    if (!domain) {
+      logError(`Unknown domain: ${args.flags.domain}`);
+      log('Valid ids: ' + DOMAINS.map((d) => d.id).join(', '));
+      process.exit(1);
     }
+  } else {
+    log('');
+    log('  ' + yellow('Pick a domain:'));
+    DOMAINS.forEach((d, i) => {
+      const idx = String(i + 1).padStart(2);
+      log(`    ${idx}) ${bold(d.name.padEnd(13))} ${gray('— ' + d.desc)}`);
+    });
     log('');
-    domain = await prompt('  Domain: ');
+    const raw = await prompt(`  Select [1-${DOMAINS.length}]: `);
+    domain = resolveDomain(raw);
+    if (!domain) {
+      logError(`Invalid selection: ${raw || '(empty)'}`);
+      process.exit(1);
+    }
   }
-  domain = String(domain || '').toLowerCase().trim();
-  if (!domain) domain = 'custom';
 
+  // --- 4. Agent (numbered menu), unless --no-install ---
+  const skipInstall = !!args.flags['no-install'];
+  let agentId = args.flags.for;
+  if (!skipInstall) {
+    if (agentId && agentId !== true) {
+      agentId = resolveAgent(String(agentId));
+      if (!agentId) {
+        logError(`Unknown agent: ${args.flags.for}`);
+        log('Supported: ' + Object.keys(AGENTS).join(', '));
+        process.exit(1);
+      }
+    } else {
+      log('');
+      log('  ' + yellow('Pick your AI agent:'));
+      const agentEntries = Object.entries(AGENTS);
+      agentEntries.forEach(([id, a], i) => {
+        const idx = String(i + 1).padStart(2);
+        log(`    ${idx}) ${bold(a.name.padEnd(20))} ${gray('(' + id + ')')}`);
+      });
+      log('');
+      const raw = await prompt(`  Select [1-${agentEntries.length}]: `);
+      agentId = resolveAgent(raw);
+      if (!agentId) {
+        logError(`Invalid selection: ${raw || '(empty)'}`);
+        process.exit(1);
+      }
+    }
+  }
+
+  // --- 5. Create project structure ---
   log('');
   log('  ' + green('Creating project structure...'));
 
@@ -303,27 +388,43 @@ async function cmdInit(args) {
     log('    created  AGENTS.md');
   }
 
+  // --- 6. Install skills for the selected agent ---
+  if (!skipInstall && agentId) {
+    log('');
+    await runInstall({
+      agentId,
+      isGlobal: !!args.flags.global,
+      isProject: !!args.flags.project,
+      dryRun: !!args.flags['dry-run'],
+      showHeader: false,
+    });
+  }
+
+  // --- 7. Final message ---
   log('');
-  log('  ' + cyan(`Project '${name}' (${slug}) initialised.`));
+  log('  ' + cyan(`Project '${name}' (${slug}) is ready.`));
   log('');
   log('  ' + yellow('Next steps:'));
-  log('    1. Install skills for your agent:');
-  log('         ' + gray('ba-toolkit install --for claude-code'));
-  log('    2. Open your AI assistant (Claude, Cursor, etc.)');
-  log('    3. Optional: run /principles to define project-wide conventions');
-  log('    4. Run /brief to start the pipeline');
+  if (!skipInstall && agentId) {
+    log('    1. ' + AGENTS[agentId].restartHint);
+    log('    2. Optional: run /principles to define project-wide conventions');
+    log('    3. Run /brief to start the BA pipeline');
+  } else {
+    log('    1. Install skills for your agent:');
+    log('         ' + gray('ba-toolkit install --for claude-code'));
+    log('    2. Open your AI assistant (Claude, Cursor, etc.)');
+    log('    3. Optional: run /principles to define project-wide conventions');
+    log('    4. Run /brief to start the BA pipeline');
+  }
   log('');
   log('  ' + gray(`Artifacts will be saved to: ${outputDir}/`));
   log('');
 }
 
-async function cmdInstall(args) {
-  const agentId = args.flags.for;
-  if (!agentId || agentId === true) {
-    logError('--for <agent> is required.');
-    log('Supported agents: ' + Object.keys(AGENTS).join(', '));
-    process.exit(1);
-  }
+// Core install logic. Shared between `cmdInstall` (standalone) and `cmdInit`
+// (full setup). Returns true on success, false if the user declined to
+// overwrite an existing destination.
+async function runInstall({ agentId, isGlobal, isProject, dryRun, showHeader = true }) {
   const agent = AGENTS[agentId];
   if (!agent) {
     logError(`Unknown agent: ${agentId}`);
@@ -331,41 +432,41 @@ async function cmdInstall(args) {
     process.exit(1);
   }
 
-  const requestedGlobal = !!args.flags.global;
-  const requestedProject = !!args.flags.project;
-  let isGlobal = requestedGlobal;
-  if (!requestedGlobal && !requestedProject) {
+  let effectiveGlobal = !!isGlobal;
+  if (!isGlobal && !isProject) {
     // Default: project-level if supported, otherwise global
-    isGlobal = !agent.projectPath;
+    effectiveGlobal = !agent.projectPath;
   }
-  if (isGlobal && !agent.globalPath) {
+  if (effectiveGlobal && !agent.globalPath) {
     logError(`${agent.name} does not support --global install.`);
     process.exit(1);
   }
-  if (!isGlobal && !agent.projectPath) {
+  if (!effectiveGlobal && !agent.projectPath) {
     logError(`${agent.name} does not support project-level install. Use --global.`);
     process.exit(1);
   }
 
-  const destDir = isGlobal ? agent.globalPath : path.resolve(process.cwd(), agent.projectPath);
-  const dryRun = !!args.flags['dry-run'];
+  const destDir = effectiveGlobal ? agent.globalPath : path.resolve(process.cwd(), agent.projectPath);
 
-  log('');
-  log('  ' + cyan(`BA Toolkit — Install for ${agent.name}`));
-  log('  ' + cyan('================================'));
-  log('');
-  log(`  Source:       ${SKILLS_DIR}`);
-  log(`  Destination:  ${destDir}`);
-  log(`  Scope:        ${isGlobal ? 'global (user-wide)' : 'project-level'}`);
-  log(`  Format:       ${agent.format === 'mdc' ? '.mdc (converted from SKILL.md)' : 'SKILL.md (native)'}`);
-  if (dryRun) log('  ' + yellow('Mode:         dry-run (no files will be written)'));
-  log('');
+  if (showHeader) {
+    log('');
+    log('  ' + cyan(`BA Toolkit — Install for ${agent.name}`));
+    log('  ' + cyan('================================'));
+    log('');
+  } else {
+    log('  ' + green(`Installing skills for ${agent.name}...`));
+  }
+  log(`    source:       ${SKILLS_DIR}`);
+  log(`    destination:  ${destDir}`);
+  log(`    scope:        ${effectiveGlobal ? 'global (user-wide)' : 'project-level'}`);
+  log(`    format:       ${agent.format === 'mdc' ? '.mdc (converted from SKILL.md)' : 'SKILL.md (native)'}`);
+  if (dryRun) log('    ' + yellow('mode:         dry-run (no files will be written)'));
 
   if (fs.existsSync(destDir) && !dryRun) {
-    const answer = await prompt(`  ${destDir} already exists. Overwrite? (y/N): `);
+    const answer = await prompt(`    ${destDir} already exists. Overwrite? (y/N): `);
     if (answer.toLowerCase() !== 'y') {
-      log('  Cancelled.');
-      return;
+      log('    cancelled.');
+      return false;
     }
   }
 
@@ -378,14 +479,31 @@ async function cmdInstall(args) {
     process.exit(1);
   }
 
-  log('  ' + green(`${dryRun ? 'Would copy' : 'Copied'} ${copied.length} files.`));
+  log('    ' + green(`${dryRun ? 'would copy' : 'copied'} ${copied.length} files.`));
+  if (!dryRun && agent.format === 'mdc') {
+    log('    ' + gray('SKILL.md files converted to .mdc rule format.'));
+  }
+  return true;
+}
+
+async function cmdInstall(args) {
+  const agentId = args.flags.for;
+  if (!agentId || agentId === true) {
+    logError('--for <agent> is required.');
+    log('Supported agents: ' + Object.keys(AGENTS).join(', '));
+    process.exit(1);
+  }
+  const ok = await runInstall({
+    agentId,
+    isGlobal: !!args.flags.global,
+    isProject: !!args.flags.project,
+    dryRun: !!args.flags['dry-run'],
+    showHeader: true,
+  });
   log('');
-  if (!dryRun) {
+  if (ok && !args.flags['dry-run']) {
     log('  ' + cyan('Install complete.'));
-    if (agent.format === 'mdc') {
-      log('  ' + gray('SKILL.md files converted to .mdc rule format.'));
-    }
-    log('  ' + yellow(agent.restartHint));
+    log('  ' + yellow(AGENTS[agentId].restartHint));
   }
   log('');
 }
@@ -397,9 +515,25 @@ ${bold('USAGE')}
   ba-toolkit <command> [options]
 
 ${bold('COMMANDS')}
-  init                           Interactive project initialiser. Creates
-                                 output/{slug}/ and a starter AGENTS.md.
-  install --for <agent>          Install skills into an agent's directory.
+  init                           One-command project setup: prompts for name,
+                                 slug, domain, and AI agent, then creates
+                                 output/{slug}/, AGENTS.md, and installs the
+                                 skills into the chosen agent's directory.
+  install --for <agent>          Install (or re-install) skills into an
+                                 agent's directory without creating a project.
+
+${bold('INIT OPTIONS')}
+  --name <name>                  Skip the project name prompt
+  --slug <slug>                  Skip the slug prompt (auto-derived from name)
+  --domain <id>                  Skip the domain menu (e.g. saas, fintech)
+  --for <agent>                  Skip the agent menu (e.g. claude-code)
+  --no-install                   Create the project structure only; don't
+                                 install skills. Useful for CI or when you
+                                 want to pick the agent later.
+  --global                       Install agent skills user-wide
+  --project                      Install agent skills project-level (default
+                                 when the agent supports it)
+  --dry-run                      Preview the install step without writing
 
 ${bold('INSTALL OPTIONS')}
   --for <agent>                  One of: ${Object.keys(AGENTS).join(', ')}
@@ -407,22 +541,23 @@ ${bold('INSTALL OPTIONS')}
   --project                      Project-level install (default when supported)
   --dry-run                      Preview without writing files
 
-${bold('INIT OPTIONS')}
-  --slug <slug>                  Skip the slug prompt
-  --name <name>                  Skip the project name prompt
-  --domain <domain>              Skip the domain prompt
-
 ${bold('GENERAL OPTIONS')}
   --version, -v                  Print version and exit
   --help, -h                     Print this help and exit
 
 ${bold('EXAMPLES')}
+  # Full interactive setup — one command does everything.
   ba-toolkit init
-  ba-toolkit init --slug dragon-fortune --name "Dragon Fortune" --domain igaming
+
+  # Non-interactive: all choices on the command line.
+  ba-toolkit init --name "My App" --domain saas --for claude-code
+
+  # Create the project structure now, pick the agent later.
+  ba-toolkit init --name "My App" --domain saas --no-install
+
+  # Re-install skills after a toolkit update (no project changes).
   ba-toolkit install --for claude-code
-  ba-toolkit install --for claude-code --global
-  ba-toolkit install --for cursor
-  ba-toolkit install --for gemini --dry-run
+  ba-toolkit install --for cursor --dry-run
 
 ${bold('LEARN MORE')}
   https://github.com/TakhirKudusov/ba-toolkit

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kudusov.takhir/ba-toolkit",
-  "version": "1.2.5",
+  "version": "1.3.1",
   "description": "AI-powered Business Analyst pipeline — 21 skills from project brief to development handoff. Works with Claude Code, Codex CLI, Gemini CLI, Cursor, and Windsurf.",
   "keywords": [
     "business-analyst",

package/skills/brief/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: ba-brief
 description: >
-  Generate a high-level Project Brief for projects in any domain (iGaming, Fintech, SaaS, and others). Use this skill when the user enters /brief, or asks to "create a project brief", "describe the project", "start a new project", "project brief", or mentions the starting stage of the analytical pipeline. Also triggers on requests like "begin with a brief", "describe the product", "form a product description". First step of the BA Toolkit pipeline.
+  Generate a high-level Project Brief for projects in any domain (SaaS, Fintech, E-commerce, Healthcare, Logistics, and others). Use this skill when the user enters /brief, or asks to "create a project brief", "describe the project", "start a new project", "project brief", or mentions the starting stage of the analytical pipeline. Also triggers on requests like "begin with a brief", "describe the product", "form a product description". First step of the BA Toolkit pipeline.
 ---
 
 # /brief — Project Brief
@@ -10,7 +10,7 @@ Starting point of the BA Toolkit pipeline. Generates a structured Project Brief
 
 ## Loading domain reference
 
-Domain references are located in `references/domains/` relative to the `ba-toolkit` directory. Supported domains: `igaming`, `fintech`, `saas`. For other domains, work without a reference file.
+Domain references are located in `references/domains/` relative to the `ba-toolkit` directory. Supported domains: `saas`, `fintech`, `ecommerce`, `healthcare`, `logistics`, `on-demand`, `social-media`, `real-estate`, `igaming`. For other domains, work without a reference file.
 
 ## Workflow
 
@@ -26,7 +26,7 @@ If `00_principles_*.md` exists in the output directory, load it and apply its co
 
 ### 3. Domain selection
 
-Ask the user about the project domain. If the domain matches `igaming`, `fintech`, or `saas`, load the corresponding `references/domains/{domain}.md`. Use domain-specific interview questions (section `1. /brief`), typical business goals, risks, and glossary from that file.
+Ask the user about the project domain. If a matching `references/domains/{domain}.md` file exists (currently: `saas`, `fintech`, `ecommerce`, `healthcare`, `logistics`, `on-demand`, `social-media`, `real-estate`, `igaming`), load it and use its domain-specific interview questions (section `1. /brief`), typical business goals, risks, and glossary.
 
 If the domain does not match any supported one, record it as `custom:{name}` and use general questions only.
 
@@ -54,7 +54,7 @@ If a domain reference is loaded, supplement general questions with domain-specif
 ```markdown
 # Project Brief: {Project Name}
 
-**Domain:** {igaming | fintech | saas | custom:{name}}
+**Domain:** {saas | fintech | ecommerce | healthcare | logistics | on-demand | social-media | real-estate | igaming | custom:{name}}
 **Date:** {date}
 
 ## 1. Project Summary

package/skills/references/environment.md

@@ -37,9 +37,9 @@ By default, all artifacts are saved flat in the output directory:
 
 ```
 output_dir/
-  00_principles_dragon-fortune.md
-  01_brief_dragon-fortune.md
-  02_srs_dragon-fortune.md
+  00_principles_my-app.md
+  01_brief_my-app.md
+  02_srs_my-app.md
   ...
 ```
 
@@ -47,10 +47,10 @@ If the user prefers a project-scoped subfolder (useful when managing multiple pr
 
 ```
 output_dir/
-  dragon-fortune/
-    00_principles_dragon-fortune.md
-    01_brief_dragon-fortune.md
-    02_srs_dragon-fortune.md
+  my-app/
+    00_principles_my-app.md
+    01_brief_my-app.md
+    02_srs_my-app.md
     ...
 ```
 

package/skills/references/templates/export-template.md

@@ -39,7 +39,7 @@ Actual values are filled in by the skill based on the project's artifacts.
           },
           "issuetype": { "name": "Story" },
           "priority": { "name": "High" },
-          "labels": ["dragon-fortune", "E-01"],
+          "labels": ["nova-analytics", "E-01"],
           "customfield_10016": 3,
           "customfield_10014": null
         }

package/skills/references/templates/risk-template.md

@@ -23,19 +23,19 @@
 
 | ID | Title | Category | Probability | Impact | Score | Priority | Status |
 |----|-------|----------|:-----------:|:------:|:-----:|---------|--------|
-| RISK-01 | Payment provider SLA not guaranteed | External | 4 | 5 | 20 | 🔴 Critical | Open |
-| RISK-02 | Regulatory approval timeline unknown | Compliance | 3 | 4 | 12 | 🟡 High | Open |
-| RISK-03 | Real-time leaderboard at scale unproven | Technical | 3 | 3 | 9 | 🟡 High | Open |
+| RISK-01 | Third-party data source rate limits unclear | External | 4 | 5 | 20 | 🔴 Critical | Open |
+| RISK-02 | GDPR data-processing agreement unsigned | Compliance | 3 | 4 | 12 | 🟡 High | Open |
+| RISK-03 | Columnar query performance under concurrent load unproven | Technical | 3 | 3 | 9 | 🟡 High | Open |
 | RISK-04 | Scope creep from stakeholder wish list | Business | 3 | 2 | 6 | 🟢 Medium | Open |
-| RISK-05 | Telegram Mini App API breaking changes | External | 2 | 3 | 6 | 🟢 Medium | Open |
+| RISK-05 | OIDC / SSO library breaking changes | External | 2 | 3 | 6 | 🟢 Medium | Open |
 | RISK-06 | Data model changes after /datadict | Technical | 2 | 3 | 6 | 🟢 Medium | Open |
-| RISK-07 | Development team unfamiliar with domain | Business | 2 | 1 | 2 | ⚪ Low | Open |
+| RISK-07 | Development team unfamiliar with analytics domain | Business | 2 | 1 | 2 | ⚪ Low | Open |
 
 ---
 
 ## Risk Details
 
-### RISK-01 — Payment provider SLA not guaranteed
+### RISK-01 — Third-party data source rate limits unclear
 
 **Category:** External
 **Probability:** 4 / 5 — Likely
@@ -45,19 +45,19 @@
 **Source:** `07a_research_{slug}.md`
 
 **Description:**
-The selected payment provider has not provided a written SLA. If the provider experiences downtime during peak traffic, transactions will fail and user funds may be delayed, directly impacting revenue and trust.
+The product depends on timely event delivery from third-party integrations (Segment and warehouse connectors). The published rate limits do not guarantee sustained throughput at the projected MVP event volume. If a critical integration is rate-limited or breaks its contract, dashboards will show stale or incomplete data and user trust erodes quickly.
 
 **Mitigation:**
-Negotiate and sign an SLA before launch. Implement a fallback payment provider in the API contract. Add payment provider availability as a monitored NFR metric.
+Run a sustained-throughput test against each integration in sprint 0. Negotiate higher quotas with the providers before launch. Add per-source ingestion lag as a monitored NFR metric with an alert threshold.
 
 **Contingency:**
-Enable the fallback provider automatically via feature flag if primary provider error rate exceeds 5% over a 5-minute window.
+Enable an ingestion backpressure queue and surface a workspace-level banner when a source is lagging more than 5 minutes behind real-time. Prioritise critical event streams over low-value ones until the lag recovers.
 
 **Owner:** Tech Lead
 
 ---
 
-### RISK-02 — Regulatory approval timeline unknown
+### RISK-02 — GDPR data-processing agreement unsigned
 
 **Category:** Compliance
 **Probability:** 3 / 5 — Possible
@@ -67,19 +67,19 @@ Enable the fallback provider automatically via feature flag if primary provider
 **Source:** `01_brief_{slug}.md`
 
 **Description:**
-The product operates in a regulated iGaming jurisdiction. The licensing timeline was listed as an assumption in the Brief. If approval is delayed, the launch date will slip regardless of development readiness.
+The product collects first-party user-behavioural events from EU workspaces. The Brief listed the GDPR data-processing agreement (DPA) with the selected cloud provider as an assumption. If the DPA is delayed or blocked by legal review, the EU launch date will slip regardless of development readiness.
 
 **Mitigation:**
-Engage legal counsel early to track approval status. Decouple development milestones from the licensing timeline so that technical readiness does not block on regulatory process.
+Engage legal counsel early to track DPA status. Decouple development milestones from the legal timeline so that technical readiness does not block on paperwork. Draft the workspace-level privacy controls (PII redaction, data residency) independently of the final DPA text.
 
 **Contingency:**
-Prepare a soft launch in an unregulated market while the primary jurisdiction approval is pending.
+Launch in non-EU regions first (US, CA, APAC) while the EU DPA is pending. Gate EU workspace signups behind a feature flag tied to DPA status.
 
 **Owner:** Product Manager
 
 ---
 
-### RISK-03 — Real-time leaderboard at scale unproven
+### RISK-03 — Columnar query performance under concurrent load unproven
 
 **Category:** Technical
 **Probability:** 3 / 5 — Possible
@@ -89,13 +89,13 @@ Prepare a soft launch in an unregulated market while the primary jurisdiction ap
 **Source:** `07a_research_{slug}.md`
 
 **Description:**
-The ADR for the leaderboard service chose Redis Sorted Sets as the primary data structure. This approach has not been load-tested for the projected 10,000 concurrent users. If throughput assumptions are wrong, real-time updates will lag and degrade UX.
+The ADR for the analytics query layer chose ClickHouse as the primary store. This setup has not been load-tested for the projected 200 concurrent dashboard viewers reading against a 10 M-event dataset. If query throughput assumptions are wrong, dashboards will exceed the 500 ms p95 NFR target and degrade UX.
 
 **Mitigation:**
-Conduct a load test spike in the first development sprint. Define a fallback to polling-based updates (every 5s) if WebSocket throughput targets are not met.
+Run a load-test spike in the first development sprint against the reference dataset. Define a caching fallback (5-minute materialised query cache) if raw query throughput does not meet targets.
 
 **Contingency:**
-Switch to polling-based leaderboard refresh with a 10-second interval. Communicate the change as a phased rollout feature.
+Enable the query cache globally and mark cached dashboards with a "last refreshed" timestamp. Communicate the change as a phased rollout feature.
 
 **Owner:** Tech Lead
 
@@ -123,7 +123,7 @@ Freeze scope at the start of each sprint. Defer any mid-sprint scope additions t
 
 ---
 
-### RISK-05 — Telegram Mini App API breaking changes
+### RISK-05 — OIDC / SSO library breaking changes
 
 **Category:** External
 **Probability:** 2 / 5 — Unlikely
@@ -133,13 +133,13 @@ Freeze scope at the start of each sprint. Defer any mid-sprint scope additions t
 **Source:** `07a_research_{slug}.md`
 
 **Description:**
-The product is built as a Telegram Mini App. Telegram has released breaking changes to the Mini Apps API in previous versions. If the API changes after development, UI components and deep links may require rework.
+The product uses a third-party OIDC / SAML library for workspace SSO. Similar libraries have released breaking changes in previous majors without long deprecation windows. If the library releases a breaking change after development, sign-up and SSO flows may require rework.
 
 **Mitigation:**
-Pin the Telegram Web App SDK version used in development. Monitor the Telegram changelog and the `@twa-dev/sdk` release notes. Abstract SDK calls behind a thin adapter layer.
+Pin the library version used in development. Monitor the library changelog and security advisories. Abstract SSO calls behind a thin adapter layer so a future swap to a different provider is isolated to one module.
 
 **Contingency:**
-Allocate a 3-day buffer in the release plan for SDK compatibility fixes.
+Allocate a 3-day buffer in the release plan for library compatibility fixes.
 
 **Owner:** Frontend Lead
 
@@ -167,7 +167,7 @@ Use `/revise` on affected artifacts to propagate changes. Document the delta in
 
 ---
 
-### RISK-07 — Development team unfamiliar with domain
+### RISK-07 — Development team unfamiliar with analytics domain
 
 **Category:** Business
 **Probability:** 2 / 5 — Unlikely
@@ -177,10 +177,10 @@ Use `/revise` on affected artifacts to propagate changes. Document the delta in
 **Source:** `01_brief_{slug}.md`
 
 **Description:**
-The engineering team has limited prior experience with iGaming products. Domain-specific concepts (RTP, bonus wagering, KYC flows) may be misunderstood during implementation, leading to minor defects in edge cases.
+The engineering team has limited prior experience with columnar analytics storage. Domain-specific concepts (event schemas, funnel aggregation, cohort joins) may be misunderstood during implementation, leading to query correctness bugs on edge cases.
 
 **Mitigation:**
-Include a domain onboarding session as part of sprint 0. Reference the iGaming domain glossary in the Handoff document.
+Include a domain onboarding session as part of sprint 0. Reference the SaaS domain glossary in the Handoff document.
 
 **Contingency:**
 Schedule a BA review checkpoint after the first feature is implemented end-to-end.

package/skills/references/templates/sprint-template.md

@@ -1,11 +1,11 @@
-# Sprint Plan: Dragon Fortune
+# Sprint Plan: Nova Analytics
 
-**Domain:** iGaming
+**Domain:** saas
 **Date:** 2026-04-08
-**Slug:** dragon-fortune
+**Slug:** nova-analytics
 **Sprint length:** 2 weeks
 **Team velocity:** 35 SP per sprint
-**Sources:** `00_estimate_dragon-fortune.md`, `03_stories_dragon-fortune.md`, `00_risks_dragon-fortune.md`, `02_srs_dragon-fortune.md`
+**Sources:** `00_estimate_nova-analytics.md`, `03_stories_nova-analytics.md`, `00_risks_nova-analytics.md`, `02_srs_nova-analytics.md`
 
 ---
 
@@ -13,11 +13,11 @@
 
 | Sprint | Goal | Stories | Points | Capacity |
 |--------|------|:-------:|:------:|:--------:|
-| SP-00 | Setup: environment, CI/CD, Telegram Mini App scaffold | — | — | — |
-| SP-01 | Players can register via Telegram and spin a slot for the first time | 6 | 34 SP | 97% |
-| SP-02 | Players can deposit, withdraw, and view wallet balance | 5 | 32 SP | 91% |
-| SP-03 | Referral programme and bonus mechanics are live | 5 | 30 SP | 86% |
-| SP-04 | Admin panel: player management, game configuration, reporting | 4 | 28 SP | 80% |
+| SP-00 | Setup: environment, CI/CD, event-ingestion pipeline scaffold | — | — | — |
+| SP-01 | Users can sign up, connect a data source, and see events arrive | 6 | 34 SP | 97% |
+| SP-02 | Users can build dashboards with funnel, cohort, and trend widgets | 5 | 32 SP | 91% |
+| SP-03 | Alerts and collaboration: thresholds, notifications, sharing, SSO | 5 | 30 SP | 86% |
+| SP-04 | Admin workspace: usage, retention, billing, audit log | 4 | 28 SP | 80% |
 | **Total** | | **20** | **124 SP** | |
 
 **Planned:** 20 stories / 124 SP across 4 sprints (8 weeks)
@@ -35,104 +35,104 @@
 **Tasks:**
 - Configure CI/CD pipeline (GitHub Actions).
 - Provision staging environment on cloud infrastructure.
-- Scaffold Telegram Mini App project with base authentication stub.
-- Establish database schema baseline from `/datadict`.
-- Team domain onboarding session (iGaming concepts, RTP, KYC flow).
+- Scaffold Next.js web app and Node ingestion service with a base authentication stub.
+- Establish OLTP (Postgres) and columnar analytics (ClickHouse) schema baselines from `/datadict`.
+- Team alignment session on analytics domain concepts (event taxonomy, funnel modelling, cohort analysis).
 
 **Definition of Done for SP-00:**
 - [ ] All developers can run the project locally.
-- [ ] Staging environment is accessible via Telegram.
+- [ ] Staging environment is reachable from the team's workstations.
 - [ ] Base CI pipeline runs lint + unit tests on every push.
 
 ---
 
-### SP-01 — Players can register via Telegram and spin a slot for the first time
+### SP-01 — Users can sign up, connect a data source, and see events arrive
 
 **Duration:** Weeks 1–2
 **Capacity:** 35 SP
 
 | US | Title | Epic | Priority | Risk | Estimate |
 |----|-------|------|---------|------|---------|
-| US-001 | Register via Telegram | E-01 Auth | Must | RISK-02 ↑ | 5 SP |
-| US-002 | Launch slot game from Mini App | E-02 Gameplay | Must | — | 3 SP |
-| US-003 | Execute a spin and see result | E-02 Gameplay | Must | RISK-03 ↑ | 13 SP |
-| US-004 | View current wallet balance | E-03 Wallet | Must | — | 3 SP |
-| US-005 | See responsible gambling session limit warning | E-05 Compliance | Must | — | 5 SP |
-| US-006 | View game history (last 20 spins) | E-02 Gameplay | Should | — | 5 SP |
+| US-001 | Sign up via email or Google SSO | E-01 Onboarding | Must | RISK-02 ↑ | 5 SP |
+| US-002 | Create a workspace and invite a teammate | E-01 Onboarding | Must | — | 3 SP |
+| US-003 | Connect first data source (Segment or warehouse) | E-06 Integrations | Must | RISK-03 ↑ | 13 SP |
+| US-004 | View the live event stream from the connected source | E-03 Events | Must | — | 3 SP |
+| US-005 | Validate the incoming event schema against expected taxonomy | E-03 Events | Must | — | 5 SP |
+| US-006 | View the default dashboard with sample metrics | E-02 Dashboards | Should | — | 5 SP |
 
 **Sprint total:** 34 SP / 35 SP capacity (97%)
 
 **Definition of Done for SP-01:**
 - [ ] All stories pass their Acceptance Criteria.
-- [ ] Telegram login tested on iOS and Android Telegram clients.
-- [ ] RNG certified spin result returned in under 200 ms at p95.
+- [ ] Sign-up and SSO flows tested on Chrome, Safari, and Firefox.
+- [ ] End-to-end event ingestion latency under 1 s at p95 from source emit to dashboard read.
 - [ ] No 🔴 Critical open items in `/analyze` for completed stories.
 
 ---
 
-### SP-02 — Players can deposit, withdraw, and view wallet balance
+### SP-02 — Users can build dashboards with funnel, cohort, and trend widgets
 
 **Duration:** Weeks 3–4
 **Capacity:** 35 SP
 
 | US | Title | Epic | Priority | Risk | Estimate |
 |----|-------|------|---------|------|---------|
-| US-007 | Deposit via cryptocurrency | E-03 Wallet | Must | RISK-01 ↑ | 8 SP |
-| US-008 | Deposit via local payment system | E-03 Wallet | Must | RISK-01 ↑ | 8 SP |
-| US-009 | Request withdrawal | E-03 Wallet | Must | — | 8 SP |
-| US-010 | View full transaction history | E-03 Wallet | Should | — | 5 SP |
-| US-011 | Complete KYC identity verification | E-04 Compliance | Must | — | 3 SP |
+| US-007 | Create a custom dashboard from scratch | E-02 Dashboards | Must | RISK-01 ↑ | 8 SP |
+| US-008 | Add a funnel widget with 3 configurable steps | E-02 Dashboards | Must | RISK-01 ↑ | 8 SP |
+| US-009 | Add a cohort retention widget for the last 30 days | E-02 Dashboards | Must | — | 8 SP |
+| US-010 | Save a dashboard to the workspace library | E-02 Dashboards | Should | — | 5 SP |
+| US-011 | Filter a dashboard by date range and segment | E-02 Dashboards | Must | — | 3 SP |
 
 **Sprint total:** 32 SP / 35 SP capacity (91%)
 
 **Definition of Done for SP-02:**
 - [ ] All stories pass their Acceptance Criteria.
-- [ ] Payment provider sandbox integration verified end-to-end.
-- [ ] KYC flow tested with test credentials from the provider.
-- [ ] Withdrawal processed within 24 h in staging environment.
+- [ ] Dashboard read query latency under 500 ms at p95 for the reference dataset (10 M events).
+- [ ] Funnel and cohort calculations verified against the reference dataset to within 0.1%.
+- [ ] Saved dashboards survive workspace reload and session refresh.
 
 ---
 
-### SP-03 — Referral programme and bonus mechanics are live
+### SP-03 — Alerts and collaboration: thresholds, notifications, sharing, SSO
 
 **Duration:** Weeks 5–6
 **Capacity:** 35 SP
 
 | US | Title | Epic | Priority | Risk | Estimate |
 |----|-------|------|---------|------|---------|
-| US-012 | Share referral link and earn bonus | E-06 Referrals | Must | RISK-04 ↑ | 8 SP |
-| US-013 | Claim welcome bonus on first deposit | E-06 Referrals | Must | — | 5 SP |
-| US-014 | View active bonuses and wagering progress | E-06 Referrals | Should | — | 5 SP |
-| US-015 | Set self-exclusion period | E-05 Compliance | Must | — | 5 SP |
-| US-016 | Configure deposit limits | E-05 Compliance | Should | — | 7 SP |
+| US-012 | Set a metric threshold alert on any dashboard widget | E-04 Alerts | Must | RISK-04 ↑ | 8 SP |
+| US-013 | Receive an alert email within 60 s of threshold breach | E-04 Alerts | Must | — | 5 SP |
+| US-014 | Invite a teammate and assign a role (admin, editor, viewer) | E-05 Collaboration | Should | — | 5 SP |
+| US-015 | Share a dashboard read-only link with internal and external viewers | E-05 Collaboration | Must | — | 5 SP |
+| US-016 | Enable SSO (SAML / OIDC) for the workspace | E-05 Collaboration | Should | — | 7 SP |
 
 **Sprint total:** 30 SP / 35 SP capacity (86%)
 
 **Definition of Done for SP-03:**
 - [ ] All stories pass their Acceptance Criteria.
-- [ ] Fraud scoring on referral payouts is active and logged.
-- [ ] Self-exclusion blocks all game access within 5 minutes of activation.
+- [ ] Alert evaluation runs within 60 s of threshold breach in staging.
+- [ ] Read-only share links respect role permissions and expire as configured.
 
 ---
 
-### SP-04 — Admin panel: player management, game configuration, reporting
+### SP-04 — Admin workspace: usage, retention, billing, audit log
 
 **Duration:** Weeks 7–8
 **Capacity:** 35 SP
 
 | US | Title | Epic | Priority | Risk | Estimate |
 |----|-------|------|---------|------|---------|
-| US-017 | Admin views player list and profile | E-07 Admin | Must | — | 5 SP |
-| US-018 | Admin adjusts RTP and payline configuration | E-07 Admin | Must | — | 8 SP |
-| US-019 | Admin views revenue and activity report | E-07 Admin | Should | — | 8 SP |
-| US-020 | Admin flags a player account for review | E-07 Admin | Should | — | 7 SP |
+| US-017 | Admin views the workspace list with per-workspace event volume | E-07 Admin | Must | — | 5 SP |
+| US-018 | Admin adjusts data retention window and event quota per workspace | E-07 Admin | Must | — | 8 SP |
+| US-019 | Admin views the usage-based billing report for the current period | E-07 Admin | Should | — | 8 SP |
+| US-020 | Admin reviews the audit log of workspace and permission changes | E-07 Admin | Should | — | 7 SP |
 
 **Sprint total:** 28 SP / 35 SP capacity (80%)
 
 **Definition of Done for SP-04:**
 - [ ] All stories pass their Acceptance Criteria.
-- [ ] RTP configuration change takes effect within 1 spin cycle.
-- [ ] Revenue report matches transaction ledger to within 0.01%.
+- [ ] Retention changes take effect on the next hourly compaction run.
+- [ ] Billing report matches the underlying usage ledger to within 0.01%.
 
 ---
 
@@ -142,10 +142,10 @@ Stories not assigned to any sprint — below MVP capacity or marked Could/Won't:
 
 | US | Title | Epic | Priority | Estimate | Reason |
 |----|-------|------|---------|---------|--------|
-| US-021 | Export transaction history as PDF | E-03 Wallet | Could | 5 SP | Capacity exceeded — defer to v1.1 |
-| US-022 | Multi-language support (EN / RU / KZ) | E-01 Auth | Could | 8 SP | Deferred — requires i18n infrastructure |
-| US-023 | Live chat support widget | E-08 Support | Could | 3 SP | Deferred — third-party integration |
-| US-024 | Affiliate dashboard | E-06 Referrals | Won't | 2 SP | Out of MVP scope |
+| US-021 | Export a dashboard snapshot as PDF | E-02 Dashboards | Could | 5 SP | Capacity exceeded — defer to v1.1 |
+| US-022 | Mobile companion app for alert notifications | E-04 Alerts | Could | 8 SP | Deferred — requires mobile infrastructure |
+| US-023 | In-app chat support widget | E-08 Support | Could | 3 SP | Deferred — third-party integration |
+| US-024 | White-label dashboards for embedded use | E-05 Collaboration | Won't | 2 SP | Out of MVP scope |
 
 ---
 

package/skills/srs/SKILL.md

@@ -15,7 +15,7 @@ Second step of the BA Toolkit pipeline. Generates an SRS adapted from IEEE 830.
 0. If `00_principles_*.md` exists in the output directory, load it and apply its conventions (artifact language, ID format, traceability requirements, Definition of Ready, quality gate threshold).
 1. Read `01_brief_*.md` from the output directory. If missing, warn and suggest running `/brief`.
 2. Extract: slug, domain, business goals, functionality, stakeholders, constraints, glossary.
-3. If domain is `igaming`, `fintech`, or `saas`, load `references/domains/{domain}.md`, section `2. /srs`.
+3. If a matching `references/domains/{domain}.md` file exists (currently: `saas`, `fintech`, `ecommerce`, `healthcare`, `logistics`, `on-demand`, `social-media`, `real-estate`, `igaming`), load it and apply its section `2. /srs`.
 
 ## Environment