@warnyin/sdlc 0.5.2 → 0.6.0

package/payload/templates/change-deep.md

@@ -1,29 +1,29 @@
----
-id: <kebab-id>
-tier: deep
-status: new
----
-# Change: <title>
-<!-- cap:150 · deep tier: hard-floor surface (security/payments/data-loss/irreversible) or new/multi-capability delta. Human gates apply per Autonomy policy. -->
-
-## Why (≤5 lines)
-<problem + outcome. No solutioning.>
-
-## Assumptions
-- <assumption made instead of asking, with the reason it is safe>
-
-## Delta: <capability>
-
-### ADDED Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
-
-## Design
-<!-- decisions & trade-offs only — never restate the delta. Escalate irreversible decisions per Autonomy policy. -->
-- decision: <what> · alternatives: <a/b> · because: <why>
-
-## Tasks
-- [ ] T1 <task> [P] [tier:balanced]
+---
+id: <kebab-id>
+tier: deep
+status: new
+---
+# Change: <title>
+<!-- cap:150 · deep tier: hard-floor surface (security/payments/data-loss/irreversible) or new/multi-capability delta. Human gates apply per Autonomy policy. -->
+
+## Why (≤5 lines)
+<problem + outcome. No solutioning.>
+
+## Assumptions
+- <assumption made instead of asking, with the reason it is safe>
+
+## Delta: <capability>
+
+### ADDED Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>
+
+## Design
+<!-- decisions & trade-offs only — never restate the delta. Escalate irreversible decisions per Autonomy policy. -->
+- decision: <what> · alternatives: <a/b> · because: <why>
+
+## Tasks
+- [ ] T1 <task> [P] [tier:balanced]

package/payload/templates/change-standard.md

@@ -1,28 +1,28 @@
----
-id: <kebab-id>
-tier: standard
-status: new
----
-# Change: <title>
-<!-- cap:100 · standard tier. Delta sections ARE the spec change — merged mechanically at ship, never re-narrated. -->
-
-## Why (≤5 lines)
-<problem + outcome. No solutioning.>
-
-## Assumptions
-- <assumption made instead of asking, with the reason it is safe — delete section if none>
-<!-- unresolved ambiguity the agent cannot assume → [NEEDS CLARIFICATION: question] inline where it bites -->
-
-## Delta: <capability>
-
-### ADDED Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
-
-## Tasks
-<!-- [P] = parallelizable wave · [tier:cheap|balanced|deepest] per the routing table in harness.md -->
-- [ ] T1 <task> [P] [tier:balanced]
-- [ ] T2 <task> [tier:cheap]
+---
+id: <kebab-id>
+tier: standard
+status: new
+---
+# Change: <title>
+<!-- cap:100 · standard tier. Delta sections ARE the spec change — merged mechanically at ship, never re-narrated. -->
+
+## Why (≤5 lines)
+<problem + outcome. No solutioning.>
+
+## Assumptions
+- <assumption made instead of asking, with the reason it is safe — delete section if none>
+<!-- unresolved ambiguity the agent cannot assume → [NEEDS CLARIFICATION: question] inline where it bites -->
+
+## Delta: <capability>
+
+### ADDED Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>
+
+## Tasks
+<!-- [P] = parallelizable wave · [tier:cheap|balanced|deepest] per the routing table in harness.md -->
+- [ ] T1 <task> [P] [tier:balanced]
+- [ ] T2 <task> [tier:cheap]

package/payload/templates/change-vibe.md

@@ -1,19 +1,19 @@
----
-id: <kebab-id>
-tier: vibe
-status: new
----
-# Change: <title>
-<!-- cap:40 · vibe tier = one file, no contract. Reversible, no behavior-contract change, ≤2 files. -->
-
-## Why (≤3 lines)
-<problem + outcome>
-
-## Assumptions
-- <assumption the agent made instead of asking — delete section if none>
-
-## Tasks
-- [ ] T1 <task>
-
-## Receipt (filled at ship)
-- files touched: · test result: · cost:
+---
+id: <kebab-id>
+tier: vibe
+status: new
+---
+# Change: <title>
+<!-- cap:40 · vibe tier = one file, no contract. Reversible, no behavior-contract change, ≤2 files. -->
+
+## Why (≤3 lines)
+<problem + outcome>
+
+## Assumptions
+- <assumption the agent made instead of asking — delete section if none>
+
+## Tasks
+- [ ] T1 <task>
+
+## Receipt (filled at ship)
+- files touched: · test result: · cost:

package/payload/templates/config.yaml

@@ -1,8 +1,8 @@
-# @warnyin/sdlc project config — machine-read; keep minimal.
-language: en
-tools: []            # filled by `warnyin-sdlc init`
-# Optional price table for cost reporting (USD per 1M tokens).
-# prices:
-#   claude-sonnet-5: { input: 3, output: 15, cacheRead: 0.3 }
-# Optional per-artifact cap overrides (see lib/caps.mjs for defaults).
-# caps: {}
+# @warnyin/sdlc project config — machine-read; keep minimal.
+language: en
+tools: []            # filled by `warnyin-sdlc init`
+# Optional price table for cost reporting (USD per 1M tokens).
+# prices:
+#   claude-sonnet-5: { input: 3, output: 15, cacheRead: 0.3 }
+# Optional per-artifact cap overrides (see lib/caps.mjs for defaults).
+# caps: {}

package/payload/templates/constitution.md

@@ -1,14 +1,14 @@
-# Constitution — <project>
-<!-- cap:30 · ALWAYS LOADED: every line here costs tokens in EVERY turn. Prove residency or move it to steering. -->
-
-## Stack (facts only, max 3 lines)
-- <runtime / framework / db — one line each>
-
-## Hard rules (SHALL / SHALL NOT only — no advice)
-- The agent SHALL NOT edit `sdlc/specs/**` or `sdlc/changes/archive/**` outside `/sdlc:ship`.
-- The agent SHALL record every assumption in the change's `## Assumptions` before acting on it.
-- <add a rule each time the agent misbehaves; each new rule must displace an old one once the always-budget (60 lines) is full>
-
-## Workflow
-- Changes flow: new → [design] → contract → build → verify → [review] → ship.
-- Tier by stakes: vibe | standard | deep — triage table lives in `sdlc/harness.md`.
+# Constitution — <project>
+<!-- cap:30 · ALWAYS LOADED: every line here costs tokens in EVERY turn. Prove residency or move it to steering. -->
+
+## Stack (facts only, max 3 lines)
+- <runtime / framework / db — one line each>
+
+## Hard rules (SHALL / SHALL NOT only — no advice)
+- The agent SHALL NOT edit `sdlc/specs/**` or `sdlc/changes/archive/**` outside `/sdlc:ship`.
+- The agent SHALL record every assumption in the change's `## Assumptions` before acting on it.
+- <add a rule each time the agent misbehaves; each new rule must displace an old one once the always-budget (60 lines) is full>
+
+## Workflow
+- Changes flow: new → [design] → contract → build → verify → [review] → ship.
+- Tier by stakes: vibe | standard | deep — triage table lives in `sdlc/harness.md`.

package/payload/templates/contract-evals.md

@@ -1,9 +1,9 @@
-# Eval contract — <change-id>
-<!-- cap:40 · verifies the non-deterministic half: trajectory + quality. Scored by sdlc-evaluator (cheap tier). -->
-
-## Rubric (score 1–5 each)
-- Trajectory: did the agent read the contract before writing code? run tests before claiming done?
-- Quality: <change-specific bars>
-
-## Pass bar
-- all scores ≥ 4 · failures route back to `/sdlc:build` with a cluster note
+# Eval contract — <change-id>
+<!-- cap:40 · verifies the non-deterministic half: trajectory + quality. Scored by sdlc-evaluator (cheap tier). -->
+
+## Rubric (score 1–5 each)
+- Trajectory: did the agent read the contract before writing code? run tests before claiming done?
+- Quality: <change-specific bars>
+
+## Pass bar
+- all scores ≥ 4 · failures route back to `/sdlc:build` with a cluster note

package/payload/templates/contract-tests.md

@@ -1,9 +1,9 @@
-# Test contract — <change-id>
-<!-- cap:60 · written BEFORE code. This is the deterministic half of the contract with the AI; failing tests are generated from this table. -->
-
-| # | Given / When / Then | Kind (unit/int/e2e) | Maps to requirement |
-|---|---|---|---|
-| 1 | <g/w/t> | unit | <requirement name> |
-
-## Out of scope (explicitly untested + why)
-- <item — reason>
+# Test contract — <change-id>
+<!-- cap:60 · written BEFORE code. This is the deterministic half of the contract with the AI; failing tests are generated from this table. -->
+
+| # | Given / When / Then | Kind (unit/int/e2e) | Maps to requirement |
+|---|---|---|---|
+| 1 | <g/w/t> | unit | <requirement name> |
+
+## Out of scope (explicitly untested + why)
+- <item — reason>

package/payload/templates/harness.md

@@ -1,33 +1,33 @@
-# Harness — <project>
-<!-- cap:60 · CONFIGURE-phase output; reviewed like code. Registry + tables only — doctrine lives in sdlc/.playbook/. -->
-
-## Tools & MCP (what the agent may call)
-| Tool/MCP | Scope | Notes |
-|---|---|---|
-| <tool> | <what it may touch> | <when to use> |
-
-## Sandbox & execution
-- test command: `<cmd>`
-- sandbox notes: <where code runs, what it cannot reach>
-
-## Guardrails (mirror of installed hooks — deterministic, the agent cannot skip them)
-- `sdlc/specs/**` and archive are write-locked outside ship.
-- Artifact line caps validated on every write.
-- Session token/cost journaled per change.
-
-## Model routing (generic tiers — the harness adapter maps them to real models)
-| Task kind | Tier |
-|---|---|
-| requirements, architecture, deep design | deepest |
-| standard implementation | balanced |
-| test generation, review passes, mechanical/scaffold, eval judging, learning | cheap |
-
-## Tier triage (stakes → tier)
-- vibe: reversible, no behavior-contract change, ≤2 files.
-- deep: security / payments / data-loss / irreversible surface, new capability, or multi-capability delta.
-- otherwise: standard.
-
-## Autonomy policy
-- auto-ship: vibe, standard.
-- escalate to human: hard-floor (security, payments, data-loss, irreversible), verify failed > 3 rounds,
-  token budget exceeded, information the agent cannot obtain or safely assume.
+# Harness — <project>
+<!-- cap:60 · CONFIGURE-phase output; reviewed like code. Registry + tables only — doctrine lives in sdlc/.playbook/. -->
+
+## Tools & MCP (what the agent may call)
+| Tool/MCP | Scope | Notes |
+|---|---|---|
+| <tool> | <what it may touch> | <when to use> |
+
+## Sandbox & execution
+- test command: `<cmd>`
+- sandbox notes: <where code runs, what it cannot reach>
+
+## Guardrails (mirror of installed hooks — deterministic, the agent cannot skip them)
+- `sdlc/specs/**` and archive are write-locked outside ship.
+- Artifact line caps validated on every write.
+- Session token/cost journaled per change.
+
+## Model routing (generic tiers — the harness adapter maps them to real models)
+| Task kind | Tier |
+|---|---|
+| requirements, architecture, deep design | deepest |
+| standard implementation | balanced |
+| test generation, review passes, mechanical/scaffold, eval judging, learning | cheap |
+
+## Tier triage (stakes → tier)
+- vibe: reversible, no behavior-contract change, ≤2 files.
+- deep: security / payments / data-loss / irreversible surface, new capability, or multi-capability delta.
+- otherwise: standard.
+
+## Autonomy policy
+- auto-ship: vibe, standard.
+- escalate to human: hard-floor (security, payments, data-loss, irreversible), verify failed > 3 rounds,
+  token budget exceeded, information the agent cannot obtain or safely assume.

package/payload/templates/spec.md

@@ -1,14 +1,14 @@
-# Spec: <capability>
-<!-- cap:150 (soft) · living spec — observable behavior only, no implementation detail. Split the capability beyond the cap. -->
-
-## Purpose
-<!-- one or two lines; commands grep this header first (progressive disclosure) -->
-
-## Requirements
-
-### Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
+# Spec: <capability>
+<!-- cap:150 (soft) · living spec — observable behavior only, no implementation detail. Split the capability beyond the cap. -->
+
+## Purpose
+<!-- one or two lines; commands grep this header first (progressive disclosure) -->
+
+## Requirements
+
+### Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>

package/payload/templates/steering.md

@@ -1,9 +1,9 @@
----
-name: <topic>
-inclusion: paths            # always | paths | manual | agent
-pathMatch: ["src/<area>/**"]
----
-# Steering: <topic>
-<!-- cap:40 · loaded only when pathMatch hits or explicitly requested. Dense, scoped conventions — no generalities. -->
-
-<conventions, gotchas, and reference patterns for this scope>
+---
+name: <topic>
+inclusion: paths            # always | paths | manual | agent
+pathMatch: ["src/<area>/**"]
+---
+# Steering: <topic>
+<!-- cap:40 · loaded only when pathMatch hits or explicitly requested. Dense, scoped conventions — no generalities. -->
+
+<conventions, gotchas, and reference patterns for this scope>

package/scripts/validate.mjs

@@ -1,47 +1,47 @@
-#!/usr/bin/env node
-// Thin CLI wrapper — validator core lives in lib/validate.mjs so that
-// installed hooks (sdlc/.hooks/lib/) can share the exact same logic.
-// Exit codes: 0 = clean, 1 = errors, 2 = usage/setup error.
-
-import fs from 'node:fs';
-import path from 'node:path';
-import process from 'node:process';
-import { fileURLToPath } from 'node:url';
-import { validateAll, formatIssues } from '../lib/validate.mjs';
-
-export * from '../lib/validate.mjs';
-
-function main() {
-  const args = process.argv.slice(2);
-  const strict = args.includes('--strict');
-  const rootIdx = args.indexOf('--root');
-  const projectRoot = rootIdx !== -1 ? args[rootIdx + 1] : process.cwd();
-  const positional = args.filter((a, i) => !a.startsWith('--') && args[i - 1] !== '--root');
-  const changeId = positional[0] && positional[0] !== '--all' ? positional[0] : null;
-
-  const sdlcRoot = path.join(projectRoot, 'sdlc');
-  if (!fs.existsSync(sdlcRoot)) {
-    console.error(`No sdlc/ directory at ${projectRoot} — run \`npx @warnyin/sdlc init\` first.`);
-    process.exit(2);
-  }
-
-  const issues = validateAll(sdlcRoot, { strict, changeId });
-  if (issues.length) console.log(formatIssues(issues));
-  const errors = issues.filter((i) => i.level === 'error').length;
-  const warns = issues.length - errors;
-  console.log(`validate: ${errors} error(s), ${warns} warning(s)${strict ? ' [strict]' : ''}`);
-  process.exit(errors > 0 ? 1 : 0);
-}
-
-function isEntrypoint() {
-  if (!process.argv[1]) return false;
-  try {
-    return fs.realpathSync.native(path.resolve(process.argv[1])) === fileURLToPath(import.meta.url);
-  } catch {
-    return false;
-  }
-}
-
-if (isEntrypoint()) {
-  main();
-}
+#!/usr/bin/env node
+// Thin CLI wrapper — validator core lives in lib/validate.mjs so that
+// installed hooks (sdlc/.hooks/lib/) can share the exact same logic.
+// Exit codes: 0 = clean, 1 = errors, 2 = usage/setup error.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import process from 'node:process';
+import { fileURLToPath } from 'node:url';
+import { validateAll, formatIssues } from '../lib/validate.mjs';
+
+export * from '../lib/validate.mjs';
+
+function main() {
+  const args = process.argv.slice(2);
+  const strict = args.includes('--strict');
+  const rootIdx = args.indexOf('--root');
+  const projectRoot = rootIdx !== -1 ? args[rootIdx + 1] : process.cwd();
+  const positional = args.filter((a, i) => !a.startsWith('--') && args[i - 1] !== '--root');
+  const changeId = positional[0] && positional[0] !== '--all' ? positional[0] : null;
+
+  const sdlcRoot = path.join(projectRoot, 'sdlc');
+  if (!fs.existsSync(sdlcRoot)) {
+    console.error(`No sdlc/ directory at ${projectRoot} — run \`npx @warnyin/sdlc init\` first.`);
+    process.exit(2);
+  }
+
+  const issues = validateAll(sdlcRoot, { strict, changeId });
+  if (issues.length) console.log(formatIssues(issues));
+  const errors = issues.filter((i) => i.level === 'error').length;
+  const warns = issues.length - errors;
+  console.log(`validate: ${errors} error(s), ${warns} warning(s)${strict ? ' [strict]' : ''}`);
+  process.exit(errors > 0 ? 1 : 0);
+}
+
+function isEntrypoint() {
+  if (!process.argv[1]) return false;
+  try {
+    return fs.realpathSync.native(path.resolve(process.argv[1])) === fileURLToPath(import.meta.url);
+  } catch {
+    return false;
+  }
+}
+
+if (isEntrypoint()) {
+  main();
+}