@torus-engineering/tas-kit 1.5.0

package/.tas/checklists/code-review.md

@@ -0,0 +1,29 @@
+# Code Review Checklist
+
+## Architecture
+- [ ] Code align với SAD
+- [ ] Không vi phạm ADR nào
+- [ ] Đúng layer separation
+
+## Code Quality
+- [ ] Naming theo conventions trong CLAUDE.md
+- [ ] Không có magic numbers/strings
+- [ ] Error handling đầy đủ
+- [ ] Logging có ý nghĩa
+- [ ] Không có code duplication
+
+## Security
+- [ ] Input validation
+- [ ] No SQL injection risk
+- [ ] No XSS risk
+- [ ] Sensitive data không log
+
+## Testing
+- [ ] Unit tests cover happy path
+- [ ] Unit tests cover edge cases
+- [ ] Tests có assertion rõ ràng
+
+## Performance
+- [ ] Không có N+1 query
+- [ ] Async/await đúng cách
+- [ ] Dispose resources properly

package/.tas/checklists/security.md

@@ -0,0 +1,21 @@
+# Security Checklist - .NET Specific
+
+## Authentication & Authorization
+- [ ] JWT validation đúng
+- [ ] Role-based authorization
+- [ ] Anti-forgery token cho forms
+
+## Data Protection
+- [ ] Connection strings trong secrets, không hardcode
+- [ ] PII data encrypted at rest
+- [ ] HTTPS enforced
+
+## Input Validation
+- [ ] Model validation attributes
+- [ ] Parameterized queries (EF Core)
+- [ ] File upload validation
+
+## CORS & Headers
+- [ ] CORS policy restrictive
+- [ ] Security headers: X-Content-Type-Options, X-Frame-Options
+- [ ] HSTS enabled

package/.tas/checklists/story-done.md

@@ -0,0 +1,23 @@
+# Definition of Done Checklist
+
+## Code
+- [ ] Code implemented theo acceptance criteria
+- [ ] Tuân thủ conventions trong CLAUDE.md
+- [ ] Mỗi public method có XML doc comment
+
+## Testing
+- [ ] Unit tests pass (happy path + edge cases + negative cases)
+- [ ] No regression trên existing tests
+
+## Review
+- [ ] Code review passed (theo code-review checklist)
+- [ ] Nếu auto_review = true, đã qua automated review
+
+## Documentation
+- [ ] Technical notes trong Story cập nhật
+- [ ] Nếu thay đổi API, cập nhật docs tương ứng
+
+## Status
+- [ ] Story status cập nhật trong file Story
+- [ ] project-status.yaml cập nhật
+- [ ] Commit message đúng format

package/.tas/project-status-example.yaml

@@ -0,0 +1,17 @@
+# .tas/project-status-example.yaml - Reference template cho root/project-status.yaml
+# /tas-init sẽ tạo file root/project-status.yaml từ template này.
+# Human có thể sửa tay. Chạy /tas-init để đồng bộ lại nếu lệch.
+last_updated: ""
+
+artifacts:
+  prd: {}
+  design_spec: {}
+  sad: {}
+  security_report: {}
+  performance_report: {}
+
+adrs: {}
+
+bugs: {}
+
+epics: {}

package/.tas/tas-example.yaml

@@ -0,0 +1,108 @@
+# .tas/tas-example.yaml - Reference template cho tas.yaml ở root
+# Copy file này ra root (tas.yaml) và điền thông tin dự án.
+# File này CHỈ chứa flow và logic của TAS.
+# Tech stack, coding conventions, build commands thuộc về CLAUDE.md.
+
+project:
+  name: "My Project"
+  code: "PROJ"              # Prefix for file naming: PROJ-Epic-001, PROJ-Feature-001, etc.
+  type: greenfield          # greenfield | brownfield
+  description: "Mô tả ngắn về dự án"
+
+# Azure DevOps integration
+ado:
+  organization: "https://dev.azure.com/torus-bellesoft"
+  project_id: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+
+team:
+  - name: "Nguyen Van A"
+    role: pe
+    ado_id: "nguyenvana@torus.vn"
+  - name: "Tran Van B"
+    role: se
+    ado_id: "tranvanb@torus.vn"
+  - name: "Le Van C"
+    role: dse
+    ado_id: "levanc@torus.vn"
+
+# Flow configuration
+workflow:
+  # Phase 0: Discovery & Design (Human-led, AI-powered)
+  discovery:
+    enabled: true
+    lead: pe
+    artifacts:
+      - prd
+      - design_spec
+      - sad
+      - adr
+      - epic
+      - feature
+      - story
+    gate: ready_for_development
+
+  # Phase 1: Develop (Orchestrated Agentic)
+  develop:
+    enabled: true
+    lead: se
+    environment: test
+    use_tdd: true
+    auto_review: true
+
+  # Phase 2: Verify (Agentic + PE Review)
+  verify:
+    enabled: true
+    lead: pe
+    environment: staging
+    auto_integration_test: true
+    gate: pe_approved
+
+  # Phase 3: Deploy with Feature Flag (Agentic)
+  deploy:
+    enabled: true
+    lead: dse
+    environment: production
+    feature_flag: true
+    gate: pe_approved_production
+
+  # Phase 4: Operate (Autonomous)
+  operate:
+    enabled: false
+    lead: dse
+    environment: production
+    security_check: true
+    performance_monitor: true
+
+# Brownfield-specific config
+brownfield:
+  existing_docs_path: "docs/"
+  codebase_scan_on_init: true
+
+# Template overrides (optional)
+templates:
+  sad: ".tas/templates/SAD.md"
+  adr: ".tas/templates/ADR.md"
+  prd: ".tas/templates/PRD.md"
+  epic: ".tas/templates/Epic.md"
+  feature: ".tas/templates/Feature.md"
+  story: ".tas/templates/Story.md"
+  bug: ".tas/templates/Bug.md"
+
+# Model mapping
+models:
+  default: sonnet
+  commands:
+    tas-prd: sonnet
+    tas-design: sonnet
+    tas-sad: opus
+    tas-adr: opus
+    tas-epic: sonnet
+    tas-feature: sonnet
+    tas-story: sonnet
+    tas-dev-story: sonnet
+    tas-review-code: opus
+    tas-brainstorm: opus
+    tas-bug: sonnet
+    tas-verify: haiku
+    tas-status: haiku
+    tas-security-check: opus

package/.tas/templates/ADR.md

@@ -0,0 +1,47 @@
+# ADR-{NNN}: {Title}
+
+> **Status:** Proposed | Accepted | Deprecated | Superseded
+> **Date:** [Date]
+> **Author:** [SE name]
+> **Supersedes:** [ADR-NNN nếu có]
+> **Related:** [ADR-NNN nếu có]
+
+## Context
+[Mô tả bối cảnh dẫn đến quyết định này. Vấn đề cần giải quyết là gì?]
+
+## Decision
+[Mô tả quyết định kiến trúc đã chọn.]
+
+## Rationale
+[Tại sao chọn hướng này? Lý do kỹ thuật và kinh doanh.]
+
+## Alternatives Considered
+
+### Alternative 1: [Tên]
+- **Pros:** [ưu điểm]
+- **Cons:** [nhược điểm]
+- **Lý do không chọn:** [giải thích]
+
+### Alternative 2: [Tên]
+- **Pros:** [ưu điểm]
+- **Cons:** [nhược điểm]
+- **Lý do không chọn:** [giải thích]
+
+## Consequences
+
+### Positive
+- [consequence 1]
+- [consequence 2]
+
+### Negative
+- [consequence 1]
+- [consequence 2]
+
+### SAD Updates
+*(Liệt kê các thay đổi cần cập nhật vào docs/sad.md - chỉ thêm khi ADR ảnh hưởng đến kiến trúc chung)*
+- [ ] [thay đổi 1]
+- [ ] [thay đổi 2]
+
+## Changelog
+| Date | Changes | Author |
+|------|---------|--------|

package/.tas/templates/Bug.md

@@ -0,0 +1,67 @@
+---
+ado_id:
+ado_type: Bug
+ado_title: "{Title}"
+ado_state: New
+ado_assigned_to:
+ado_created:
+last_ado_sync:
+parent_ado_id:
+---
+# Bug-{NNN}: {Title}
+
+> **Status:** New | Committed | In Progress | Deploy Test | Verify Test | Deploy Stag | Verify Stag | Deploy Prod | Verify Prod | Done
+> **Feature:** Feature-{NNN}
+> **Severity:** Critical | High | Medium | Low
+> **Found in:** Test | Staging | Production
+> **Found by:** {PE/SE name}
+> **Assigned to:** {SE name}
+> **Created:** {Date}
+
+## Description
+{Mô tả bug ngắn gọn}
+
+## Steps to Reproduce
+1. {Step 1}
+2. {Step 2}
+3. {Step 3}
+
+## Expected Behavior
+{Kết quả mong đợi}
+
+## Actual Behavior
+{Kết quả thực tế}
+
+## Evidence
+{Screenshots, logs, error messages}
+
+## Root Cause Analysis
+*SE điền khi phân tích*
+- **Root Cause:** {Mô tả nguyên nhân gốc}
+- **Affected Files:** {Danh sách file liên quan}
+- **Impact Scope:** {Ảnh hưởng đến những chức năng nào khác}
+
+## Regression Test Cases
+*SE thiết kế trước khi fix*
+
+| ID | Description | Input | Expected | Status |
+|----|-------------|-------|----------|--------|
+| RT-1 | Reproduce bug case | {input} | {expected} | - |
+| RT-2 | Related regression | {input} | {expected} | - |
+
+## Fix Notes
+*SE ghi sau khi fix*
+- **Fix Description:** {Mô tả cách fix}
+- **Files Changed:** {Danh sách file đã sửa}
+- **Commit:** {commit hash}
+
+## Verify Notes
+*PE ghi khi verify*
+
+| Date | Environment | Result | Verified by | Notes |
+|------|-------------|--------|-------------|-------|
+| {Date} | {env} | Pass/Fail | {PE name} | {notes} |
+
+## Changelog
+| Date | Changes | Author |
+|------|---------|--------|

package/.tas/templates/Design-Spec.md

@@ -0,0 +1,36 @@
+# Design Specification
+
+> **Status:** Draft | Approved
+> **Last Updated:** [Date]
+> **Author:** [PE name]
+> **PRD Reference:** docs/prd.md
+
+---
+
+## 1. Overview
+{Tổng quan design}
+
+## 2. User Flows
+<!-- Dùng Mermaid flowchart, :::mermaid wrapper, không dùng () -->
+
+## 3. Screen Descriptions
+
+### Screen 1: {Name}
+- **Purpose:** {mục đích}
+- **Key Elements:** {thành phần chính}
+- **Actions Available:** {hành động người dùng có thể thực hiện}
+
+## 4. Navigation Structure
+<!-- Dùng Mermaid flowchart -->
+
+## 5. Interaction Patterns
+{Mô tả patterns: form submission, search, pagination...}
+
+## 6. Responsive Behavior
+{Mô tả breakpoints và behavior thay đổi}
+
+---
+
+## Changelog
+| Date | Changes | Author |
+|------|---------|--------|

package/.tas/templates/Epic.md

@@ -0,0 +1,46 @@
+---
+ado_id:
+ado_type: Epic
+ado_title: "{Title}"
+ado_state: New
+ado_assigned_to:
+ado_created:
+last_ado_sync:
+---
+# Epic-{NNN}: {Title}
+
+> **Status:** New | Pending | In Design | In Progress | In Monitoring | In Closing | Done | Removed
+> **Owner:** {PE name}
+> **Created:** {Date}
+> **PRD Reference:** {link to PRD section}
+
+## Business Value
+{Mô tả giá trị kinh doanh}
+
+## Scope
+### In Scope
+- Item 1
+- Item 2
+
+### Out of Scope
+- Item 1
+
+## Acceptance Criteria (High-level)
+- [ ] Criteria 1
+- [ ] Criteria 2
+
+## Features
+| ID | Feature | Priority | Estimate |
+|----|---------|----------|----------|
+| Feature-001 | {name} | Must | M |
+| Feature-002 | {name} | Should | L |
+
+## Dependencies
+- {dependency 1}
+
+## Risks
+- {risk 1}
+
+## Changelog
+| Date | Changes | Author |
+|------|---------|--------|

package/.tas/templates/Feature.md

@@ -0,0 +1,55 @@
+---
+ado_id:
+ado_type: Feature
+ado_title: "{Title}"
+ado_state: New
+ado_assigned_to:
+ado_created:
+last_ado_sync:
+parent_ado_id:
+---
+# Feature-{NNN}: {Title}
+
+> **Status:** New | Pending | In Design | In Progress | Ready for Dev | In Development | Ready To Verify | Verified | Done | Removed
+> **Epic:** Epic-{NNN}
+> **Owner:** {PE name}
+> **Created:** {Date}
+> **Verified Date:** {Date khi status = Verified}
+
+## Description
+{Mô tả chức năng}
+
+## User Stories
+| ID | Story | Priority | Estimate | Status |
+|----|-------|----------|----------|--------|
+| Story-001 | {name} | Must | S | New |
+
+## Acceptance Criteria
+- [ ] AC-1: {criteria}
+- [ ] AC-2: {criteria}
+
+## UI/UX Notes
+{Nếu có, reference đến design-spec.md}
+
+## Technical Notes
+{Nếu có, reference đến SAD/ADR}
+
+## Integration Test Cases
+PE thiết kế khi tạo Feature. SE implement trong code.
+
+| ID | Scenario | Expected Result | Status |
+|----|----------|-----------------|--------|
+| IT-1 | {Mô tả flow liên kết} | {Kết quả mong đợi} | - |
+| IT-2 | {Mô tả flow liên kết} | {Kết quả mong đợi} | - |
+
+## E2E / Acceptance Test Cases
+PE thiết kế khi tạo Feature. PE verify trên Staging ở Phase 2 bằng /tas-verify.
+
+| ID | User Scenario | Steps | Expected Result | Status | Verified Date |
+|----|---------------|-------|-----------------|--------|---------------|
+| E2E-1 | {Scenario} | {Bước thực hiện} | {Kết quả mong đợi} | - | - |
+| E2E-2 | {Scenario} | {Bước thực hiện} | {Kết quả mong đợi} | - | - |
+
+## Changelog
+| Date | Changes | Author |
+|------|---------|--------|

package/.tas/templates/PRD.md

@@ -0,0 +1,142 @@
+# Product Requirements Document (PRD)
+
+> **Document Status:** [Draft | In Review | Approved | Archived]
+> **Last Updated:** [Date]
+> **Product Manager:** [Name]
+> **Contributors:** [Names/Roles]
+
+---
+
+## Executive Summary
+
+**Product Name:** [Product/Feature Name]
+
+**Problem Statement:**
+[In 2-3 sentences, describe the core problem you're solving.]
+
+**Proposed Solution:**
+[In 2-3 sentences, describe your solution approach.]
+
+**Success Metrics:**
+- [Key metric 1 with target]
+- [Key metric 2 with target]
+
+**Launch Target:** [Quarter/Date]
+
+---
+
+## Background & Context
+
+### Why Now?
+[Market timing, competitive landscape, internal factors]
+
+### User Research & Insights
+- **Research Methods:** [Interviews, surveys, usage data]
+- **Key Findings:**
+  - [Finding 1]
+  - [Finding 2]
+
+### Market Analysis
+- **Competitive Landscape:** [Key competitors]
+- **Differentiation:** [What makes our approach unique]
+
+---
+
+## Goals & Success Criteria
+
+### Business Goals
+1. [Primary business objective]
+2. [Secondary business objective]
+
+### User Goals
+1. [What users should accomplish]
+2. [What friction we're removing]
+
+### Non-Goals (Out of Scope)
+- [Explicitly what this will NOT do]
+
+---
+
+## User Personas & Use Cases
+
+### Primary Persona: [Name]
+- **Role:** [Job title]
+- **Goals:** [What they're trying to achieve]
+- **Pain Points:** [Current frustrations]
+
+### Key Use Cases
+
+#### Use Case 1: [Title]
+**Actor:** [Which persona]
+**Flow:**
+1. User [action]
+2. System [response]
+**Expected Outcome:** [Success looks like]
+
+---
+
+## Product Requirements
+
+### Functional Requirements
+
+#### Must Have (P0)
+- **FR-001:** [Description]
+  - User Story: As a [persona], I want to [action] so that [benefit]
+  - Acceptance Criteria: [testable criteria]
+
+#### Should Have (P1)
+- **FR-010:** [Description]
+
+#### Could Have (P2)
+- **FR-020:** [Description]
+
+### Non-Functional Requirements
+- **NFR-001:** Performance - [requirement]
+- **NFR-002:** Security - [requirement]
+- **NFR-003:** Scalability - [requirement]
+
+---
+
+## Technical Specifications
+[High-level architecture overview - link to SAD]
+
+---
+
+## Go-to-Market Strategy
+
+### Launch Plan
+- **Beta Testing:** [Timeline, criteria]
+- **Launch Date:** [Target date]
+
+### Marketing & Positioning
+- **Value Proposition:** [One sentence]
+
+---
+
+## Dependencies & Risks
+
+### Risks & Mitigation
+| Risk | Impact | Probability | Mitigation |
+|------|--------|-------------|------------|
+| [Risk 1] | High | Medium | [Mitigation] |
+
+### Open Questions
+- [Question 1]
+- [Question 2]
+
+---
+
+## Timeline & Milestones
+| Phase | Timeline | Deliverables | Owner |
+|-------|----------|-------------|-------|
+| Discovery | [Dates] | PRD, Design | PE |
+| Development | [Dates] | Features | SE |
+| QA & Testing | [Dates] | Test reports | PE |
+| Launch | [Dates] | Production | DSE |
+
+---
+
+## Changelog
+| Date | Version | Changes | Author |
+|------|---------|---------|--------|
+| [Date] | 1.0 | Initial draft | [Name] |

package/.tas/templates/Performance-Report.md

@@ -0,0 +1,30 @@
+# Performance Report
+
+> **Last Test:** {Date}
+> **Environment:** {Test | Staging | Production}
+> **Tested by:** {DSE name}
+
+## Baseline Metrics
+| Metric | Target | Actual | Status |
+|--------|--------|--------|--------|
+| API Response Time (p95) | < 200ms | {value} | Pass/Fail |
+| Throughput | > 1000 req/s | {value} | Pass/Fail |
+| Database Query (p95) | < 100ms | {value} | Pass/Fail |
+| Memory Usage | < 512MB | {value} | Pass/Fail |
+| CPU Usage (peak) | < 80% | {value} | Pass/Fail |
+
+## Bottlenecks
+| ID | Description | Impact | Recommendation | Status |
+|----|-------------|--------|----------------|--------|
+| PERF-001 | {description} | {impact} | {recommendation} | Open/Fixed |
+
+## Load Test Results
+- **Tool:** {k6 | JMeter | NBomber...}
+- **Scenario:** {description}
+- **Duration:** {minutes}
+- **Concurrent users:** {count}
+- **Results:** {summary}
+
+## Test History
+| Date | Environment | Result | Notes |
+|------|-------------|--------|-------|

package/.tas/templates/SAD.md

@@ -0,0 +1,64 @@
+# Solution Architecture Document (SAD)
+
+> **Version:** 1.0
+> **Last Updated:** [Date]
+> **Author:** [SE name]
+
+---
+
+## 1. Executive Summary
+### 1.1 Purpose
+### 1.2 Scope
+### 1.3 Key Objectives
+
+## 2. Architecture Vision
+### 2.1 Vision Statement
+### 2.2 Architecture Principles
+### 2.3 Constraints & Assumptions
+
+## 3. Business Requirements
+### 3.1 Business Problem
+### 3.2 Stakeholders
+### 3.3 Functional Requirements
+### 3.4 Non-Functional Requirements
+
+## 4. Technology Baseline
+### 4.1 Current State
+### 4.2 Technology Stack
+### 4.3 Dependencies
+
+## 5. System Context (C4 Level 1)
+<!-- Dùng Mermaid flow diagram, :::mermaid wrapper, không dùng () -->
+
+## 6. Logical View (C4 Level 2 - Container)
+<!-- Dùng Mermaid flow diagram -->
+
+## 7. Component View (C4 Level 3)
+<!-- Dùng Mermaid flow diagram -->
+
+## 8. Data Architecture & ERD
+<!-- Dùng Mermaid erDiagram -->
+
+## 9. Integration & Data Flow
+<!-- Dùng Mermaid sequenceDiagram -->
+
+## 10. Security Architecture
+
+## 11. Deployment View
+<!-- Dùng Mermaid flow diagram -->
+
+## 12. Non-Functional Requirements
+
+## 13. Architectural Decisions
+| ID | Decision | Status | Date | Rationale |
+|----|----------|--------|------|-----------|
+
+## 14. Risks & Mitigation
+| Risk | Impact | Probability | Mitigation |
+|------|--------|-------------|------------|
+
+---
+
+## Changelog
+| Date | Version | Changes | Author |
+|------|---------|---------|--------|