@rasensio/aidlc 0.4.0 → 0.7.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +43 -253
- package/dist/cli.js +0 -2
- package/dist/cli.js.map +1 -1
- package/dist/commands/continue.d.ts.map +1 -1
- package/dist/commands/continue.js +11 -15
- package/dist/commands/continue.js.map +1 -1
- package/dist/commands/docs.d.ts.map +1 -1
- package/dist/commands/docs.js +35 -42
- package/dist/commands/docs.js.map +1 -1
- package/dist/commands/gate.d.ts.map +1 -1
- package/dist/commands/gate.js +11 -15
- package/dist/commands/gate.js.map +1 -1
- package/dist/commands/init.d.ts +17 -11
- package/dist/commands/init.d.ts.map +1 -1
- package/dist/commands/init.js +297 -77
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/start.d.ts.map +1 -1
- package/dist/commands/start.js +14 -16
- package/dist/commands/start.js.map +1 -1
- package/dist/commands/status.d.ts.map +1 -1
- package/dist/commands/status.js +11 -15
- package/dist/commands/status.js.map +1 -1
- package/dist/commands/transition.d.ts.map +1 -1
- package/dist/commands/transition.js +11 -15
- package/dist/commands/transition.js.map +1 -1
- package/dist/commands/update.d.ts.map +1 -1
- package/dist/commands/update.js +31 -30
- package/dist/commands/update.js.map +1 -1
- package/dist/compile/adapters/claude-code.js +2 -2
- package/dist/compile/adapters/claude-code.js.map +1 -1
- package/dist/compile/adapters/kiro.d.ts.map +1 -1
- package/dist/compile/adapters/kiro.js +2 -1
- package/dist/compile/adapters/kiro.js.map +1 -1
- package/package.json +14 -21
- package/capabilities/claude-code.yaml +0 -9
- package/capabilities/codex.yaml +0 -8
- package/capabilities/cursor.yaml +0 -8
- package/capabilities/kiro.yaml +0 -9
- package/capabilities/windsurf.yaml +0 -8
- package/ci/aidlc-gate.yml +0 -100
- package/examples/.gitkeep +0 -0
- package/guidance/accessibility.md +0 -67
- package/guidance/api-conventions.md +0 -124
- package/guidance/index.yaml +0 -7
- package/guidance/secure-defaults.md +0 -71
- package/phases/.gitkeep +0 -0
- package/skills/00-overview.md +0 -74
- package/skills/01-getting-started.md +0 -131
- package/skills/02-first-activation.md +0 -158
- package/skills/10-ideation.md +0 -45
- package/skills/20-requirements.md +0 -54
- package/skills/30-design.md +0 -57
- package/skills/40-implementation.md +0 -64
- package/skills/50-testing.md +0 -60
- package/skills/60-deployment.md +0 -63
- package/skills/70-maintenance.md +0 -56
- package/skills/80-review.md +0 -85
- package/skills/81-continue.md +0 -57
- package/skills/82-add-action.md +0 -71
- package/templates/.gitkeep +0 -0
- package/templates/bugfix.yaml +0 -14
- package/templates/full-feature.yaml +0 -44
- package/templates/micro-task.yaml +0 -11
- package/templates/quick-feature.yaml +0 -20
- package/templates/spike.yaml +0 -15
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"kiro.js","sourceRoot":"","sources":["../../../src/compile/adapters/kiro.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAcH,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI;SACd,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"kiro.js","sourceRoot":"","sources":["../../../src/compile/adapters/kiro.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAcH,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;GAGG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,IAAI;SACd,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,uDAAuD;IACvD,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC;IACxF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CACxB,KAAY,EACZ,IAA0B;IAE1B,gCAAgC;IAChC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC;IAC/C,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8CAA8C;IAC9C,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAsB,EAAE,CAAC;YAC1E,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,KAAK,CAAC,UAAU,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAY,EAAE,UAAyB;IAChE,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,cAAc;IACd,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,0DAA0D;IAC1D,IAAI,UAAU,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,UAAU,aAAa,wCAAwC,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,MAAe,EACf,GAAmB;IAEnB,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,oEAAoE;QACpE,sEAAsE;QACtE,4BAA4B,CAC7B,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,mCAAmC;IACnC,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACvD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,cAAc,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,wBAAwB,OAAO,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,4BAA4B;IAC5B,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,yBAAyB,OAAO,IAAI,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAoB;IAC1C,EAAE,EAAE,MAAoB;IAExB,IAAI,CAAC,MAAe,EAAE,IAA0B,EAAE,GAAmB;QACnE,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,iDAAiD;QACjD,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CACX,2DAA2D,IAAI,CAAC,QAAQ,oCAAoC,CAC7G,CAAC;YACF,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,iDAAiD;YACjD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK;gBAC3C,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;aACrC,CAAC,CAAC;YAEH,sDAAsD;YACtD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAElD,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;gBACxB,gEAAgE;gBAChE,QAAQ,CAAC,IAAI,CACX,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,8DAA8D,CACrH,CAAC;YACJ,CAAC;YAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,gBAAgB,OAAO,WAAW;gBACxC,OAAO,EAAE,WAAW;aACrB,CAAC,CAAC;QACL,CAAC;QAED,gEAAgE;QAChE,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,gBAAgB;YACzB,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QAEH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,kDAAkD;QAClD,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,6CAA6C;YAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC7B,+CAA+C;gBAC/C,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CACT,yBAAyB,OAAO,+CAA+C,CAChF,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CACT,yBAAyB,OAAO,iCAAiC,OAAO,CAAC,MAAM,GAAG,CACnF,CAAC;gBACJ,CAAC;gBACD,wBAAwB;gBACxB,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;oBAChC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,6BAA6B,CAAC,CAAC;QACxE,CAAC;QAED,gDAAgD;QAChD,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1D,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;GAEG;AACH,SAAS,oBAAoB,CAAC,KAAY;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@rasensio/aidlc",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.7.0",
|
|
4
4
|
"description": "AI Development Lifecycle Framework — structured lifecycle guidance for AI coding agents across platforms",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/cli.js",
|
|
@@ -10,15 +10,6 @@
|
|
|
10
10
|
"engines": {
|
|
11
11
|
"node": ">=18.0.0"
|
|
12
12
|
},
|
|
13
|
-
"scripts": {
|
|
14
|
-
"build": "tsc",
|
|
15
|
-
"test": "vitest run",
|
|
16
|
-
"test:watch": "vitest",
|
|
17
|
-
"lint": "tsc --noEmit",
|
|
18
|
-
"prepublishOnly": "npm run build && npm test",
|
|
19
|
-
"release": "bash scripts/release.sh",
|
|
20
|
-
"release:dry": "bash scripts/release.sh --dry-run"
|
|
21
|
-
},
|
|
22
13
|
"keywords": [
|
|
23
14
|
"ai",
|
|
24
15
|
"development",
|
|
@@ -32,7 +23,8 @@
|
|
|
32
23
|
"@clack/prompts": "1.7.0",
|
|
33
24
|
"commander": "15.0.0",
|
|
34
25
|
"picomatch": "4.0.5",
|
|
35
|
-
"yaml": "2.9.0"
|
|
26
|
+
"yaml": "2.9.0",
|
|
27
|
+
"@rasensio/aidlc-content": "0.7.0"
|
|
36
28
|
},
|
|
37
29
|
"devDependencies": {
|
|
38
30
|
"@types/node": "22.15.32",
|
|
@@ -42,13 +34,14 @@
|
|
|
42
34
|
"vitest": "4.1.10"
|
|
43
35
|
},
|
|
44
36
|
"files": [
|
|
45
|
-
"dist/"
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
"
|
|
49
|
-
"
|
|
50
|
-
"
|
|
51
|
-
"
|
|
52
|
-
"
|
|
53
|
-
|
|
54
|
-
}
|
|
37
|
+
"dist/"
|
|
38
|
+
],
|
|
39
|
+
"scripts": {
|
|
40
|
+
"build": "tsc",
|
|
41
|
+
"test": "vitest run",
|
|
42
|
+
"test:watch": "vitest",
|
|
43
|
+
"lint": "tsc --noEmit",
|
|
44
|
+
"release": "bash scripts/release.sh",
|
|
45
|
+
"release:dry": "bash scripts/release.sh --dry-run"
|
|
46
|
+
}
|
|
47
|
+
}
|
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
platform: claude-code
|
|
2
|
-
capabilities:
|
|
3
|
-
plan-mode:
|
|
4
|
-
phases: [ideation, requirements, design]
|
|
5
|
-
activation: >-
|
|
6
|
-
Before producing this phase's artifact, enter plan mode to reason through
|
|
7
|
-
the problem space, identify constraints, and outline the approach before
|
|
8
|
-
committing to a structure. Exit plan mode only when you begin writing the
|
|
9
|
-
artifact.
|
package/capabilities/codex.yaml
DELETED
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
platform: codex
|
|
2
|
-
capabilities:
|
|
3
|
-
code-generation:
|
|
4
|
-
phases: [implementation, testing]
|
|
5
|
-
activation: >-
|
|
6
|
-
Leverage Codex sandboxed execution for this phase. Write implementation
|
|
7
|
-
code and tests together, using the sandbox to validate that tests pass
|
|
8
|
-
before proposing the final changeset.
|
package/capabilities/cursor.yaml
DELETED
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
platform: cursor
|
|
2
|
-
capabilities:
|
|
3
|
-
composer:
|
|
4
|
-
phases: [design, implementation]
|
|
5
|
-
activation: >-
|
|
6
|
-
Use Cursor Composer for this phase to coordinate multi-file edits in a
|
|
7
|
-
single operation. Frame the design or implementation as a Composer prompt
|
|
8
|
-
describing the desired end state across all affected files.
|
package/capabilities/kiro.yaml
DELETED
|
@@ -1,9 +0,0 @@
|
|
|
1
|
-
platform: kiro
|
|
2
|
-
capabilities:
|
|
3
|
-
spec-driven-development:
|
|
4
|
-
phases: [requirements, design, implementation]
|
|
5
|
-
activation: >-
|
|
6
|
-
Use Kiro spec sessions for this phase. Keep spec documents under
|
|
7
|
-
.kiro/specs/ and let the spec workflow drive requirements, design
|
|
8
|
-
decisions, and task breakdown. Reference the active spec when producing
|
|
9
|
-
artifacts so that traceability is maintained.
|
|
@@ -1,8 +0,0 @@
|
|
|
1
|
-
platform: windsurf
|
|
2
|
-
capabilities:
|
|
3
|
-
cascade:
|
|
4
|
-
phases: [implementation]
|
|
5
|
-
activation: >-
|
|
6
|
-
Use Windsurf Cascade flows for implementation steps that span multiple
|
|
7
|
-
files. Keep individual instructions concise due to context-size
|
|
8
|
-
constraints; reference .aidlc/skills/ for full phase guidance when needed.
|
package/ci/aidlc-gate.yml
DELETED
|
@@ -1,100 +0,0 @@
|
|
|
1
|
-
# =============================================================================
|
|
2
|
-
# AIDLC Gate Check — GitHub Actions Workflow (sample/reference)
|
|
3
|
-
# =============================================================================
|
|
4
|
-
#
|
|
5
|
-
# This is a SAMPLE workflow demonstrating how to integrate `aidlc gate` into a
|
|
6
|
-
# CI/CD pipeline. Customize it for your project's branching strategy, instance
|
|
7
|
-
# naming, and phase requirements.
|
|
8
|
-
#
|
|
9
|
-
# Exit code semantics:
|
|
10
|
-
# 0 = phase is complete (gate passes, deployment may proceed)
|
|
11
|
-
# 1 = phase is incomplete (gate fails, deployment blocked)
|
|
12
|
-
#
|
|
13
|
-
# The --json flag outputs a structured GateCheckResult object:
|
|
14
|
-
# { pass, phase, missingArtifacts, unsatisfiedCriteria }
|
|
15
|
-
#
|
|
16
|
-
# Requirements: 9.5
|
|
17
|
-
# =============================================================================
|
|
18
|
-
|
|
19
|
-
name: AIDLC Gate Check
|
|
20
|
-
|
|
21
|
-
on:
|
|
22
|
-
pull_request:
|
|
23
|
-
branches: [main]
|
|
24
|
-
|
|
25
|
-
# ---------------------------------------------------------------------------
|
|
26
|
-
# Customization points:
|
|
27
|
-
#
|
|
28
|
-
# 1. AIDLC_INSTANCE — how you derive the lifecycle instance name.
|
|
29
|
-
# Below we use the PR title, but you could use branch name, a label, etc.
|
|
30
|
-
#
|
|
31
|
-
# 2. AIDLC_PHASE — which phase must be complete before merging.
|
|
32
|
-
# Common choices: "testing" (pre-merge), "deployment" (pre-deploy).
|
|
33
|
-
#
|
|
34
|
-
# 3. Node version — must be >= 18 (AIDLC prerequisite).
|
|
35
|
-
# ---------------------------------------------------------------------------
|
|
36
|
-
|
|
37
|
-
jobs:
|
|
38
|
-
gate:
|
|
39
|
-
runs-on: ubuntu-latest
|
|
40
|
-
steps:
|
|
41
|
-
- uses: actions/checkout@v4
|
|
42
|
-
|
|
43
|
-
- uses: actions/setup-node@v4
|
|
44
|
-
with:
|
|
45
|
-
node-version: '20'
|
|
46
|
-
|
|
47
|
-
- run: npm ci
|
|
48
|
-
|
|
49
|
-
# -----------------------------------------------------------------------
|
|
50
|
-
# Run the gate check.
|
|
51
|
-
# Exit code 0 means the phase is complete; exit code 1 means it is not.
|
|
52
|
-
# The --json flag produces structured output for downstream steps.
|
|
53
|
-
# -----------------------------------------------------------------------
|
|
54
|
-
- name: Check lifecycle gate
|
|
55
|
-
id: gate
|
|
56
|
-
run: |
|
|
57
|
-
set +e
|
|
58
|
-
OUTPUT=$(npx aidlc gate "$AIDLC_INSTANCE" "$AIDLC_PHASE" --json)
|
|
59
|
-
EXIT_CODE=$?
|
|
60
|
-
echo "$OUTPUT"
|
|
61
|
-
echo "result<<EOF" >> "$GITHUB_OUTPUT"
|
|
62
|
-
echo "$OUTPUT" >> "$GITHUB_OUTPUT"
|
|
63
|
-
echo "EOF" >> "$GITHUB_OUTPUT"
|
|
64
|
-
echo "exit_code=$EXIT_CODE" >> "$GITHUB_OUTPUT"
|
|
65
|
-
exit $EXIT_CODE
|
|
66
|
-
env:
|
|
67
|
-
AIDLC_INSTANCE: ${{ github.event.pull_request.title }}
|
|
68
|
-
AIDLC_PHASE: implementation
|
|
69
|
-
|
|
70
|
-
# -----------------------------------------------------------------------
|
|
71
|
-
# Optional: post gate results as a PR comment.
|
|
72
|
-
# Requires the `pull-requests: write` permission on the workflow.
|
|
73
|
-
# Uncomment and adapt as needed.
|
|
74
|
-
# -----------------------------------------------------------------------
|
|
75
|
-
# - name: Comment gate results on PR
|
|
76
|
-
# if: always()
|
|
77
|
-
# uses: actions/github-script@v7
|
|
78
|
-
# with:
|
|
79
|
-
# script: |
|
|
80
|
-
# const result = JSON.parse(`${{ steps.gate.outputs.result }}`);
|
|
81
|
-
# let body;
|
|
82
|
-
# if (result.pass) {
|
|
83
|
-
# body = `### ✓ AIDLC Gate Passed\n\nPhase **${result.phase}** is complete.`;
|
|
84
|
-
# } else {
|
|
85
|
-
# const missing = result.missingArtifacts.map(a => `- ${a}`).join('\n');
|
|
86
|
-
# const criteria = result.unsatisfiedCriteria.map(c => `- ${c}`).join('\n');
|
|
87
|
-
# body = [
|
|
88
|
-
# `### ✗ AIDLC Gate Failed`,
|
|
89
|
-
# ``,
|
|
90
|
-
# `Phase **${result.phase}** is not complete.`,
|
|
91
|
-
# missing ? `\n**Missing artifacts:**\n${missing}` : '',
|
|
92
|
-
# criteria ? `\n**Unsatisfied criteria:**\n${criteria}` : '',
|
|
93
|
-
# ].filter(Boolean).join('\n');
|
|
94
|
-
# }
|
|
95
|
-
# await github.rest.issues.createComment({
|
|
96
|
-
# owner: context.repo.owner,
|
|
97
|
-
# repo: context.repo.repo,
|
|
98
|
-
# issue_number: context.issue.number,
|
|
99
|
-
# body,
|
|
100
|
-
# });
|
package/examples/.gitkeep
DELETED
|
File without changes
|
|
@@ -1,67 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: accessibility
|
|
3
|
-
description: Web accessibility guidelines and inclusive design
|
|
4
|
-
---
|
|
5
|
-
# Accessibility
|
|
6
|
-
|
|
7
|
-
Follow these accessibility rules when building user interfaces. All interactive content must be usable by people with diverse abilities, including those using assistive technologies.
|
|
8
|
-
|
|
9
|
-
## Semantic HTML
|
|
10
|
-
|
|
11
|
-
- Use semantic elements (`<nav>`, `<main>`, `<article>`, `<section>`, `<header>`, `<footer>`) for page structure.
|
|
12
|
-
- Use heading elements (`<h1>`–`<h6>`) in logical hierarchy; never skip levels for styling.
|
|
13
|
-
- Use `<button>` for actions and `<a>` for navigation; never use `<div>` or `<span>` as interactive elements without proper roles.
|
|
14
|
-
- Use `<label>` elements explicitly associated with form inputs via `for`/`id` pairing.
|
|
15
|
-
- Use lists (`<ul>`, `<ol>`, `<dl>`) for grouped items rather than styled `<div>` sequences.
|
|
16
|
-
|
|
17
|
-
## ARIA Usage
|
|
18
|
-
|
|
19
|
-
- Prefer native HTML semantics over ARIA; add ARIA only when no native element provides the required semantics.
|
|
20
|
-
- Use `aria-label` or `aria-labelledby` for interactive elements that lack visible text labels.
|
|
21
|
-
- Set `aria-expanded`, `aria-selected`, `aria-checked` states dynamically to reflect current UI state.
|
|
22
|
-
- Apply `role="alert"` or `aria-live="polite"` for dynamic content that must be announced to screen readers.
|
|
23
|
-
- Never use `aria-hidden="true"` on focusable elements.
|
|
24
|
-
|
|
25
|
-
## Keyboard Navigation
|
|
26
|
-
|
|
27
|
-
- All interactive elements must be reachable and operable via keyboard alone (Tab, Shift+Tab, Enter, Space, Arrow keys).
|
|
28
|
-
- Maintain a logical tab order that follows the visual reading flow; avoid positive `tabindex` values.
|
|
29
|
-
- Provide visible focus indicators on all focusable elements; never remove outline without a visible replacement.
|
|
30
|
-
- Implement keyboard shortcuts for complex widgets (modals, dropdowns, tabs) per WAI-ARIA Authoring Practices.
|
|
31
|
-
- Trap focus inside modal dialogs until dismissed; restore focus to the triggering element on close.
|
|
32
|
-
|
|
33
|
-
## Color and Contrast
|
|
34
|
-
|
|
35
|
-
- Maintain a minimum contrast ratio of 4.5:1 for normal text and 3:1 for large text (WCAG AA).
|
|
36
|
-
- Never use color as the sole means of conveying information; pair color with text, icons, or patterns.
|
|
37
|
-
- Verify contrast in both light and dark modes if the application supports theme switching.
|
|
38
|
-
- Ensure focus indicators have at least 3:1 contrast against adjacent colors.
|
|
39
|
-
|
|
40
|
-
## Images and Media
|
|
41
|
-
|
|
42
|
-
- Provide meaningful `alt` text for informative images; use `alt=""` for decorative images.
|
|
43
|
-
- Provide captions or transcripts for video and audio content.
|
|
44
|
-
- Avoid auto-playing media; if unavoidable, provide an immediate mechanism to pause or stop.
|
|
45
|
-
- Ensure animated content can be paused and does not flash more than 3 times per second.
|
|
46
|
-
|
|
47
|
-
## Forms and Errors
|
|
48
|
-
|
|
49
|
-
- Associate error messages with their input fields using `aria-describedby` or `aria-errormessage`.
|
|
50
|
-
- Display error summaries at the top of forms with links to the offending fields.
|
|
51
|
-
- Do not rely solely on placeholder text as a label; placeholders disappear on input.
|
|
52
|
-
- Group related form controls with `<fieldset>` and `<legend>`.
|
|
53
|
-
- Provide clear instructions before the form and inline help where input format is constrained.
|
|
54
|
-
|
|
55
|
-
## Responsive and Adaptive Design
|
|
56
|
-
|
|
57
|
-
- Support zoom up to 200% without loss of content or functionality.
|
|
58
|
-
- Use relative units (rem, em, %) for text and spacing rather than fixed pixels.
|
|
59
|
-
- Ensure touch targets are at least 44x44 CSS pixels for mobile interfaces.
|
|
60
|
-
- Test layouts with different text sizes, languages, and reading directions (LTR/RTL).
|
|
61
|
-
|
|
62
|
-
## Testing and Verification
|
|
63
|
-
|
|
64
|
-
- Run automated accessibility scans (axe-core, Lighthouse) in CI and fix all critical/serious issues.
|
|
65
|
-
- Test with at least one screen reader (VoiceOver, NVDA, or JAWS) for major user flows.
|
|
66
|
-
- Validate keyboard-only navigation for all primary workflows.
|
|
67
|
-
- Note: full WCAG conformance requires manual testing with assistive technologies and expert review.
|
|
@@ -1,124 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: api-conventions
|
|
3
|
-
description: REST API naming, error format, and versioning conventions
|
|
4
|
-
---
|
|
5
|
-
# API Conventions
|
|
6
|
-
|
|
7
|
-
Follow these conventions when designing, implementing, or reviewing REST APIs. Consistency across endpoints reduces integration friction and simplifies documentation.
|
|
8
|
-
|
|
9
|
-
## URL Structure and Naming
|
|
10
|
-
|
|
11
|
-
- Use lowercase, hyphen-separated path segments: `/user-profiles`, not `/userProfiles` or `/user_profiles`.
|
|
12
|
-
- Use plural nouns for resource collections: `/orders`, `/products`, `/users`.
|
|
13
|
-
- Use resource identifiers as path segments: `/users/{userId}/orders/{orderId}`.
|
|
14
|
-
- Limit nesting to two levels; deeper relationships should use query parameters or links.
|
|
15
|
-
- Use query parameters for filtering, sorting, and pagination: `?status=active&sort=-created_at&page=2`.
|
|
16
|
-
- Avoid verbs in URLs; let HTTP methods convey the action.
|
|
17
|
-
|
|
18
|
-
## HTTP Methods
|
|
19
|
-
|
|
20
|
-
- `GET` — Retrieve a resource or collection. Must be safe and idempotent. Never mutate state.
|
|
21
|
-
- `POST` — Create a new resource or trigger a non-idempotent action. Return 201 with Location header for creates.
|
|
22
|
-
- `PUT` — Replace an entire resource. Must be idempotent. Return 200 or 204.
|
|
23
|
-
- `PATCH` — Partially update a resource. Use JSON Merge Patch or JSON Patch content types. Return 200.
|
|
24
|
-
- `DELETE` — Remove a resource. Must be idempotent. Return 204 on success, 404 if already absent.
|
|
25
|
-
- `OPTIONS` — Return allowed methods and CORS headers. Used for preflight requests.
|
|
26
|
-
|
|
27
|
-
## Status Codes
|
|
28
|
-
|
|
29
|
-
Use the most specific applicable status code:
|
|
30
|
-
|
|
31
|
-
| Range | Use for |
|
|
32
|
-
|-------|---------|
|
|
33
|
-
| 200 | Successful retrieval or update |
|
|
34
|
-
| 201 | Resource created (include Location header) |
|
|
35
|
-
| 204 | Success with no response body |
|
|
36
|
-
| 400 | Malformed request (syntax or validation errors) |
|
|
37
|
-
| 401 | Missing or invalid authentication credentials |
|
|
38
|
-
| 403 | Authenticated but insufficient permissions |
|
|
39
|
-
| 404 | Resource not found |
|
|
40
|
-
| 409 | Conflict (e.g., duplicate key, version mismatch) |
|
|
41
|
-
| 422 | Semantically invalid request (valid syntax but business rule violation) |
|
|
42
|
-
| 429 | Rate limit exceeded (include Retry-After header) |
|
|
43
|
-
| 500 | Unexpected server error (never expose internals) |
|
|
44
|
-
|
|
45
|
-
## Error Response Format
|
|
46
|
-
|
|
47
|
-
Return a consistent JSON error body for all 4xx and 5xx responses:
|
|
48
|
-
|
|
49
|
-
```json
|
|
50
|
-
{
|
|
51
|
-
"error": {
|
|
52
|
-
"code": "VALIDATION_FAILED",
|
|
53
|
-
"message": "Human-readable summary of the problem",
|
|
54
|
-
"details": [
|
|
55
|
-
{
|
|
56
|
-
"field": "email",
|
|
57
|
-
"issue": "Must be a valid email address"
|
|
58
|
-
}
|
|
59
|
-
],
|
|
60
|
-
"request_id": "req_abc123"
|
|
61
|
-
}
|
|
62
|
-
}
|
|
63
|
-
```
|
|
64
|
-
|
|
65
|
-
- `code` — Machine-readable error identifier (UPPER_SNAKE_CASE).
|
|
66
|
-
- `message` — Brief, user-safe description. Never include stack traces or internal paths.
|
|
67
|
-
- `details` — Optional array of field-level errors for validation failures.
|
|
68
|
-
- `request_id` — Correlation identifier for debugging (matches server-side logs).
|
|
69
|
-
|
|
70
|
-
## Pagination
|
|
71
|
-
|
|
72
|
-
- Use cursor-based pagination for large or frequently-changing collections.
|
|
73
|
-
- Support limit/offset as a simpler alternative for smaller, stable datasets.
|
|
74
|
-
- Return pagination metadata in the response body:
|
|
75
|
-
|
|
76
|
-
```json
|
|
77
|
-
{
|
|
78
|
-
"data": [...],
|
|
79
|
-
"pagination": {
|
|
80
|
-
"next_cursor": "eyJpZCI6MTAwfQ",
|
|
81
|
-
"has_more": true,
|
|
82
|
-
"total_count": 2340
|
|
83
|
-
}
|
|
84
|
-
}
|
|
85
|
-
```
|
|
86
|
-
|
|
87
|
-
- Include `total_count` only when it can be computed efficiently.
|
|
88
|
-
|
|
89
|
-
## Versioning
|
|
90
|
-
|
|
91
|
-
- Use URL prefix versioning for major breaking changes: `/v1/users`, `/v2/users`.
|
|
92
|
-
- Increment the version number only on backward-incompatible changes.
|
|
93
|
-
- Support the previous major version for at least 6 months after a new version ships.
|
|
94
|
-
- Treat additive changes (new optional fields, new endpoints) as backward-compatible.
|
|
95
|
-
- Document deprecation timelines in the Sunset response header and changelog.
|
|
96
|
-
|
|
97
|
-
## Request and Response Conventions
|
|
98
|
-
|
|
99
|
-
- Use `snake_case` for JSON field names throughout request and response bodies.
|
|
100
|
-
- Represent timestamps in ISO 8601 format with UTC timezone: `2025-06-15T10:30:00Z`.
|
|
101
|
-
- Use envelope format for collections: `{ "data": [...], "pagination": {...} }`.
|
|
102
|
-
- Return the full created or updated resource in response to POST, PUT, and PATCH.
|
|
103
|
-
- Accept and return `Content-Type: application/json` by default.
|
|
104
|
-
- Support `Accept` header negotiation where multiple formats are available.
|
|
105
|
-
|
|
106
|
-
## Rate Limiting and Throttling
|
|
107
|
-
|
|
108
|
-
- Enforce rate limits per client or API key.
|
|
109
|
-
- Return `429 Too Many Requests` with a `Retry-After` header (seconds until next allowed request).
|
|
110
|
-
- Include rate limit headers on every response: `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset`.
|
|
111
|
-
|
|
112
|
-
## CORS and Security Headers
|
|
113
|
-
|
|
114
|
-
- Configure CORS to allow only trusted origins; avoid wildcard `*` in production.
|
|
115
|
-
- Return appropriate CORS headers: `Access-Control-Allow-Origin`, `Access-Control-Allow-Methods`, `Access-Control-Allow-Headers`.
|
|
116
|
-
- Set `Cache-Control: no-store` on responses containing sensitive data.
|
|
117
|
-
- Include `X-Content-Type-Options: nosniff` and `X-Request-Id` on all responses.
|
|
118
|
-
|
|
119
|
-
## Documentation and Discoverability
|
|
120
|
-
|
|
121
|
-
- Provide an OpenAPI 3.x specification for every public API.
|
|
122
|
-
- Include request/response examples for each endpoint.
|
|
123
|
-
- Document authentication requirements, rate limits, and error codes.
|
|
124
|
-
- Use consistent terminology across endpoint descriptions.
|
package/guidance/index.yaml
DELETED
|
@@ -1,71 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: secure-defaults
|
|
3
|
-
description: Security best practices and secure coding defaults
|
|
4
|
-
---
|
|
5
|
-
# Secure Defaults
|
|
6
|
-
|
|
7
|
-
Follow these security rules by default when writing or reviewing code. Deviations require explicit justification in the design artifact.
|
|
8
|
-
|
|
9
|
-
## Input Validation
|
|
10
|
-
|
|
11
|
-
- Validate and sanitize all external inputs at the system boundary before processing.
|
|
12
|
-
- Use an allowlist approach for accepted values when possible; reject unknown inputs.
|
|
13
|
-
- Enforce maximum length, type, and format constraints on every input field.
|
|
14
|
-
- Never trust client-side validation alone; always validate server-side.
|
|
15
|
-
|
|
16
|
-
## Database and Query Safety
|
|
17
|
-
|
|
18
|
-
- Use parameterized queries or prepared statements for all database access.
|
|
19
|
-
- Never construct SQL, NoSQL, or ORM queries by string concatenation with user input.
|
|
20
|
-
- Apply principle of least privilege to database credentials (read-only where writes are not needed).
|
|
21
|
-
- Escape identifiers if dynamic table or column names are unavoidable.
|
|
22
|
-
|
|
23
|
-
## Authentication and Authorization
|
|
24
|
-
|
|
25
|
-
- Hash passwords with a modern adaptive algorithm (bcrypt, scrypt, or argon2) with per-user salts.
|
|
26
|
-
- Enforce minimum password complexity or passphrase length per current NIST guidance.
|
|
27
|
-
- Implement rate limiting and account lockout on authentication endpoints.
|
|
28
|
-
- Check authorization on every request; never rely solely on client-side role checks.
|
|
29
|
-
- Use short-lived tokens (JWT, session) with explicit expiration and refresh rotation.
|
|
30
|
-
|
|
31
|
-
## Secrets Management
|
|
32
|
-
|
|
33
|
-
- Never store secrets (API keys, tokens, passwords, private keys) in source code or config files committed to version control.
|
|
34
|
-
- Use environment variables or a dedicated secrets manager for runtime secrets.
|
|
35
|
-
- Rotate secrets on a defined schedule and immediately on suspected compromise.
|
|
36
|
-
- Log secret access but never log secret values.
|
|
37
|
-
|
|
38
|
-
## Transport and Data Protection
|
|
39
|
-
|
|
40
|
-
- Use TLS 1.2+ for all network communication; reject plain HTTP in production.
|
|
41
|
-
- Encrypt sensitive data at rest using AES-256 or equivalent.
|
|
42
|
-
- Set Secure, HttpOnly, and SameSite attributes on all authentication cookies.
|
|
43
|
-
- Apply Content-Security-Policy, X-Content-Type-Options, and Strict-Transport-Security headers.
|
|
44
|
-
|
|
45
|
-
## Error Handling and Logging
|
|
46
|
-
|
|
47
|
-
- Never expose stack traces, internal paths, or database details in user-facing error responses.
|
|
48
|
-
- Log errors with sufficient context for debugging but exclude sensitive data (PII, secrets).
|
|
49
|
-
- Use structured logging (JSON) with consistent severity levels.
|
|
50
|
-
- Return generic error messages to clients; map internal errors to safe public codes.
|
|
51
|
-
|
|
52
|
-
## Dependency Security
|
|
53
|
-
|
|
54
|
-
- Pin dependency versions and use lock files to ensure reproducible builds.
|
|
55
|
-
- Audit dependencies for known vulnerabilities regularly (e.g., npm audit, Snyk, Dependabot).
|
|
56
|
-
- Prefer well-maintained packages with active security response teams.
|
|
57
|
-
- Remove unused dependencies to reduce attack surface.
|
|
58
|
-
|
|
59
|
-
## Least Privilege and Defense in Depth
|
|
60
|
-
|
|
61
|
-
- Run services with the minimum permissions required for their function.
|
|
62
|
-
- Separate concerns: do not mix admin and user-facing logic in the same process.
|
|
63
|
-
- Apply defense in depth: assume any single layer can be bypassed.
|
|
64
|
-
- Validate at multiple boundaries (network edge, service boundary, data layer).
|
|
65
|
-
|
|
66
|
-
## File and Resource Handling
|
|
67
|
-
|
|
68
|
-
- Validate uploaded file types, sizes, and content (not just extensions).
|
|
69
|
-
- Store uploaded files outside the web root with randomized names.
|
|
70
|
-
- Set restrictive file permissions on sensitive files (0600 for keys, 0644 for config).
|
|
71
|
-
- Avoid path traversal: canonicalize paths and reject `..` sequences in user input.
|
package/phases/.gitkeep
DELETED
|
File without changes
|
package/skills/00-overview.md
DELETED
|
@@ -1,74 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: aidlc-overview
|
|
3
|
-
description: Framework overview and state protocol for the AI Development Lifecycle
|
|
4
|
-
phase: ideation
|
|
5
|
-
priority: 100
|
|
6
|
-
---
|
|
7
|
-
# AIDLC Framework Overview
|
|
8
|
-
|
|
9
|
-
You are operating within the AI Development Lifecycle (AIDLC) framework. This skill defines how you interact with lifecycle state and follow phase-driven development.
|
|
10
|
-
|
|
11
|
-
## Lifecycle Phases
|
|
12
|
-
|
|
13
|
-
The AIDLC defines seven ordered phases. Not all apply to every task:
|
|
14
|
-
|
|
15
|
-
1. **Ideation** — Problem exploration, goals, constraints
|
|
16
|
-
2. **Requirements** — Acceptance criteria, user stories, scope
|
|
17
|
-
3. **Design** — Architecture, interfaces, data flow
|
|
18
|
-
4. **Implementation** — Code production following the design
|
|
19
|
-
5. **Testing** — Verification against requirements
|
|
20
|
-
6. **Deployment** — Release preparation and execution
|
|
21
|
-
7. **Maintenance** — Monitoring, iteration, documentation updates
|
|
22
|
-
|
|
23
|
-
## Cycle Scopes
|
|
24
|
-
|
|
25
|
-
| Scope | Starting Phase | Applicable Phases |
|
|
26
|
-
|-------|---------------|-------------------|
|
|
27
|
-
| Full | Ideation | All seven phases |
|
|
28
|
-
| Standard | Requirements | Requirements through Deployment |
|
|
29
|
-
| Micro | Implementation | Implementation and Testing only |
|
|
30
|
-
|
|
31
|
-
## State Protocol
|
|
32
|
-
|
|
33
|
-
All state lives in `.aidlc/state/<instance-name>/`. Read and write state as follows:
|
|
34
|
-
|
|
35
|
-
### Reading State
|
|
36
|
-
|
|
37
|
-
1. Read `instance.yaml` to determine: current phase, template, scope, owner, claim
|
|
38
|
-
2. Read `phase-<name>.yaml` for per-phase status and artifact completion
|
|
39
|
-
3. Read `transitions.log` (NDJSON) for history — one JSON object per line
|
|
40
|
-
|
|
41
|
-
### Writing State
|
|
42
|
-
|
|
43
|
-
1. **Before mutating state**, check for an existing Instance_Claim in `instance.yaml`. If another session holds the claim and it is not stale, warn and request override confirmation.
|
|
44
|
-
2. Record your session identifier in the claim fields when you begin work.
|
|
45
|
-
3. Update phase state files as you produce artifacts.
|
|
46
|
-
4. Append a transition record to `transitions.log` only on successful phase transitions.
|
|
47
|
-
|
|
48
|
-
### Transition Records
|
|
49
|
-
|
|
50
|
-
Each line in `transitions.log` is a JSON object:
|
|
51
|
-
```json
|
|
52
|
-
{"timestamp":"<ISO 8601 UTC>","author":"<session-id>","from":"<phase>","to":"<phase>","type":"normal|skip|upgrade","criteria":["..."]}
|
|
53
|
-
```
|
|
54
|
-
|
|
55
|
-
## Context and Guidance
|
|
56
|
-
|
|
57
|
-
- Project context lives in `.aidlc/context/` (style-guide.md, architecture.md)
|
|
58
|
-
- Guidance layers live in `.aidlc/guidance/` — load only those listed in `index.yaml`
|
|
59
|
-
- Load context relevant to the current phase; avoid re-reading unchanged files
|
|
60
|
-
|
|
61
|
-
## Security
|
|
62
|
-
|
|
63
|
-
Before executing any sensitive operation (infrastructure changes, permission modifications, file deletions), you MUST:
|
|
64
|
-
1. Describe the operation and its impact to the user
|
|
65
|
-
2. Wait for explicit confirmation
|
|
66
|
-
3. If cancelled, halt and log the cancellation
|
|
67
|
-
|
|
68
|
-
Never store credentials, tokens, or secrets in state files or artifacts.
|
|
69
|
-
|
|
70
|
-
## Token Efficiency
|
|
71
|
-
|
|
72
|
-
- Read compact state files, not full artifacts, to determine progress
|
|
73
|
-
- Use Artifact_Summaries (`<artifact>.summary.md`) when available
|
|
74
|
-
- Load only the skill for the current phase, not all skills at once
|