qfai 1.4.27 → 1.4.28

package/README.md

@@ -39,7 +39,7 @@ npx qfai report
 - `npx qfai doctor`
   - Diagnoses configuration discovery, path resolution, glob scanning, and `validate.json` inputs before running validate/report; use `--fail-on` to enforce failures in CI.
 
-## ATDD annotation hard gate (v1.4.27)
+## ATDD annotation hard gate (v1.4.28)
 
 `qfai validate` enforces spec-to-test traceability with directory-based rules.
 
@@ -220,7 +220,7 @@ flowchart LR
 - Contracts SSOT: `.qfai/contracts/**`
 - Report outputs (`.qfai/report/**`) are derived artifacts and not SSOT.
 
-## Minimal tutorial (v1.4.27)
+## Minimal tutorial (v1.4.28)
 
 1. `npx qfai init`
 2. Run `/qfai-discuss` to structure scope and open questions.
@@ -247,7 +247,7 @@ Release gate behavior:
 
 ## Continuous integration
 
-QFAI v1.4.27 generates integration wrappers under `.agents/**`, `.claude/**`,
+QFAI v1.4.28 generates integration wrappers under `.agents/**`, `.claude/**`,
 `.github/**`, and `.codex/**`.
 It does not generate GitHub Actions workflows.
 Configure CI in your own platform and run:

package/assets/init/.qfai/assistant/agents/backend-engineer.md

@@ -8,17 +8,19 @@
 
 - .qfai/assistant/instructions/\*
 - .qfai/assistant/steering/\*
+- .qfai/assistant/steering/test-layers.md (US/TC/CON-API hard obligations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
 - .qfai/specs/spec-\*/spec.md
-- .qfai/specs/spec-\*/scenario.feature
+- Optional legacy input: `.qfai/specs/spec-*/scenario.feature`
 - .qfai/contracts/api/\*\*
 - .qfai/contracts/db/\*\*
 
 ## Deliverables (MANDATORY)
 
 - Decision Records referenced (DR-IDs) + rejected check (or RE-OPEN request)
-- Implementation mapping (contract/scenario -> file/function)
+- Implementation mapping (contract/spec obligations -> file/function)
 - Backend code changes (minimal, traceable)
+- Validation gate evidence (`qfai validate --fail-on error`) for touched scope
 - Execution proof (commands + key outputs)
 - Evidence summary for `.qfai/evidence/` (gitignored; do not commit)
 

package/assets/init/.qfai/assistant/agents/frontend-engineer.md

@@ -8,16 +8,18 @@
 
 - .qfai/assistant/instructions/\*
 - .qfai/assistant/steering/\*
+- .qfai/assistant/steering/test-layers.md (US/TC/CON-API hard obligations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
 - .qfai/specs/spec-\*/spec.md
-- .qfai/specs/spec-\*/scenario.feature
+- Optional legacy input: `.qfai/specs/spec-*/scenario.feature`
 - .qfai/contracts/ui/\*\*
 
 ## Deliverables (MANDATORY)
 
 - Decision Records referenced (DR-IDs) + rejected check (or RE-OPEN request)
-- Implementation mapping (contract/scenario -> file/component)
+- Implementation mapping (contract/spec obligations -> file/component)
 - Frontend code changes (minimal, traceable)
+- Validation gate evidence (`qfai validate --fail-on error`) for touched scope
 - Execution proof (commands + key outputs)
 - Evidence summary for `.qfai/evidence/` (gitignored; do not commit)
 

package/assets/init/.qfai/assistant/agents/orchestrator.md

@@ -9,8 +9,9 @@
 
 - .qfai/assistant/instructions/\*
 - .qfai/assistant/steering/\*
+- .qfai/assistant/steering/test-layers.md (SSOT for hard coverage obligations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
-- Prompt-specific artifacts (ledgers, traceability, evidence)
+- Prompt-specific artifacts (traceability, validation evidence, optional legacy scenario/ledger artifacts)
 
 ## Deliverables (MANDATORY)
 
@@ -23,7 +24,8 @@
 ## Stop conditions (Blockers)
 
 - Subagent delegation missing when required
-- Ledger missing or not 100% implemented
+- Validation gate evidence missing/failing (`qfai validate --fail-on error`)
+- Required hard obligations in `test-layers.md` are unmet
 - Reviewer sign-off missing
 - Rejected option would be reintroduced without RE-OPEN DR
 

package/assets/init/.qfai/assistant/agents/qa-engineer.md

@@ -8,15 +8,16 @@
 
 - .qfai/assistant/instructions/\*
 - .qfai/assistant/steering/\*
+- .qfai/assistant/steering/test-layers.md (US/TC/CON-API hard obligations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
 - .qfai/specs/spec-\*/spec.md
-- .qfai/specs/spec-\*/scenario.feature
-- Coverage ledgers and test outputs
+- Test outputs and coverage tooling outputs
+- Optional legacy artifacts: `.qfai/specs/spec-*/scenario.feature`, coverage ledgers
 
 ## Deliverables (MANDATORY)
 
 - Decision Records referenced (DR-IDs) + rejected check (or RE-OPEN request)
-- Traceability audit (Req/BR/AC/CASE/SC -> tests)
+- Traceability audit (`US/TC/CON-API` -> tests + runtime/coverage evidence)
 - Gap list with explicit rationale
 - Noise control notes (aggregation policy)
 - Evidence summary for `.qfai/evidence/` (gitignored; do not commit)
@@ -26,7 +27,7 @@
 - Rejected option would be reintroduced without RE-OPEN DR
 - Evidence is missing or incomplete
 - "Done" claimed without runtime evidence
-- Coverage ledger missing or inconsistent
+- Validation gate evidence missing/failing (`qfai validate --fail-on error`) or required `US/TC/CON-API` obligations are unmet
 
 ## Sign-off checklist (Check Last)
 
@@ -39,7 +40,7 @@
 
 - Decision Records (DR-IDs) / rejected check
 - Findings
-- Traceability audit
+- Traceability audit (`US/TC/CON-API` -> tests)
 - Gap list
 - Evidence summary
 - Open Questions / Risks

package/assets/init/.qfai/assistant/agents/qa-reviewer.md

@@ -12,9 +12,10 @@
 - .qfai/assistant/steering/test-layers.md (test-layer definitions + required coverage expectations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
 - QA evidence summary under `.qfai/evidence/` (gitignored)
-- Coverage ledgers and traceability reports
+- `qfai validate --fail-on error` evidence (`.qfai/report/validate.json` / logs)
+- Traceability reports and coverage tooling outputs (legacy ledgers optional when present)
 - .qfai/specs/spec-\*/spec.md
-- .qfai/specs/spec-\*/scenario.feature
+- Optional legacy input: `.qfai/specs/spec-*/scenario.feature`
 
 ## Cross-cutting review: Drift Protocol (MANDATORY)
 

package/assets/init/.qfai/assistant/agents/test-engineer.md

@@ -8,23 +8,25 @@
 
 - .qfai/assistant/instructions/\*
 - .qfai/assistant/steering/\*
+- .qfai/assistant/steering/test-layers.md (US/TC/CON-API hard obligations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
-- .qfai/specs/spec-\*/scenario.feature
 - .qfai/specs/spec-\*/spec.md
-- Existing test files and coverage ledgers
+- Existing test files and coverage tooling outputs
+- Optional legacy artifacts: `.qfai/specs/spec-*/scenario.feature`, coverage ledgers
 
 ## Deliverables (MANDATORY)
 
 - Decision Records referenced (DR-IDs) + rejected check (or RE-OPEN request)
 - Automation plan per layer (unit/component/integration/api/e2e)
-- Coverage ledger is 100% implemented (blocked/skipped require DR + approval)
+- Coverage obligations mapped to `US/TC/CON-API` with evidence from tests/coverage tooling
+- Validation gate evidence (`qfai validate --fail-on error`) with `error=0`
 - Execution proof (commands + key outputs)
 - Evidence summary for `.qfai/evidence/` (gitignored; do not commit)
 
 ## Stop conditions (Blockers)
 
 - Rejected option would be reintroduced without RE-OPEN DR
-- Scenarios cannot be mapped to layers
+- `US/TC/CON-API` obligations cannot be mapped to test layers
 - Test stack is absent and cannot be bootstrapped via policy
 - Evidence is missing or incomplete
 - Scope ambiguity prevents a safe decision
@@ -42,7 +44,7 @@
 - Findings
 - Decisions
 - Proposed tests (files/sections)
-- Coverage ledger summary
+- Coverage/obligation summary (`US/TC/CON-API`, tool coverage evidence)
 - Evidence summary
 - Open Questions / Risks
 - Confidence (High/Medium/Low + reason)

package/assets/init/.qfai/assistant/agents/unit-test-scope-enforcer.md

@@ -8,15 +8,16 @@
 
 - .qfai/assistant/instructions/\*
 - .qfai/assistant/steering/\*
+- .qfai/assistant/steering/test-layers.md (scope and hard obligations)
 - .qfai/specs/spec-\*/delta.md (Decision Records; check rejected)
 - .qfai/specs/spec-\*/spec.md
-- .qfai/specs/spec-\*/scenario.feature
-- Current unit/component test ledger
+- Optional legacy input: `.qfai/specs/spec-*/scenario.feature`
+- Current unit/component test outputs or coverage reports (legacy ledgers optional)
 
 ## Deliverables (MANDATORY)
 
 - Decision Records referenced (DR-IDs) + rejected check (or RE-OPEN request)
-- Scope ledger with explicit inclusions/exclusions
+- Scope matrix with explicit inclusions/exclusions
 - Review of test scope vs requirements/contracts
 - Evidence summary for `.qfai/evidence/` (gitignored; do not commit)
 
@@ -38,7 +39,7 @@
 
 - Decision Records (DR-IDs) / rejected check
 - Findings
-- Scope ledger
+- Scope matrix
 - Exclusions rationale
 - Evidence summary
 - Open Questions / Risks

package/assets/init/.qfai/assistant/skills/qfai-configure/SKILL.md

@@ -38,7 +38,7 @@ When unsure, read inputs in this order:
 - P1: `.qfai/assistant/instructions/*`
 - P2: `.qfai/assistant/steering/*`
 - P3: `.qfai/specs/<spec-id>/delta.md` (Decision Records; if no spec yet, state "not applicable")
-- P4: other artifacts (spec.md, scenario.feature, contracts, evidence)
+- P4: other artifacts (spec.md, contracts, evidence, optional legacy `scenario.feature` / coverage ledgers)
 
 ## Sub-agent Delegation (MANDATORY)
 
@@ -85,7 +85,8 @@ Every major artifact in this stage MUST include a `## Work Orders Summary` secti
 - Final completion gate MUST be delegated to an independent Reviewer sub-agent.
 - Reviewer checks (minimum):
   - Required roles were delegated (no orchestrator self-authoring).
-  - DoD satisfied (coverage ledger, gates, evidence, DR-IDs).
+  - DoD satisfied (validate gate, test-layer hard gate, evidence, DR-IDs).
+  - Validate gate evidence exists: `qfai validate --fail-on error` completed with `error=0`.
   - **Drift Protocol enforced**:
     - No upstream artifact edits were made without an explicit user-approved Change Request.
     - If upstream changes exist, the correct owner skill was re-run after approval; downstream did not patch upstream directly.
@@ -105,7 +106,8 @@ Inputs (refs):
 Constraints:
 - must: enforce Drift Protocol (no upstream edits without user approval + CR)
 - must: verify plan/test-layer adherence (`steering/test-layers.md` + plan)
-- must: check Coverage Ledger is 100% unless approved exception
+- must: check `qfai validate --fail-on error` passes with evidence (`error=0`)
+- must: enforce `.qfai/assistant/steering/test-layers.md` hard gates
 - must_not: accept test-volume ratios/floors as a hard gate
 - must_not: accept upstream edits made directly by downstream phase
 Output format:

package/assets/init/.qfai/assistant/skills/qfai-prototyping/SKILL.md

@@ -45,7 +45,7 @@ When unsure, read inputs in this order:
 - P1: `.qfai/assistant/instructions/*`
 - P2: `.qfai/assistant/steering/*`
 - P3: `.qfai/specs/<spec-id>/delta.md` (Decision Records; if no spec yet, state "not applicable")
-- P4: other artifacts (spec.md, scenario.feature, contracts, evidence)
+- P4: other artifacts (spec.md, contracts, evidence, optional legacy `scenario.feature` / coverage ledgers)
 
 ## Sub-agent Delegation (MANDATORY)
 
@@ -92,7 +92,8 @@ Every major artifact in this stage MUST include a `## Work Orders Summary` secti
 - Final completion gate MUST be delegated to an independent Reviewer sub-agent.
 - Reviewer checks (minimum):
   - Required roles were delegated (no orchestrator self-authoring).
-  - DoD satisfied (coverage ledger, gates, evidence, DR-IDs).
+  - DoD satisfied (validate gate, test-layer hard gate, evidence, DR-IDs).
+  - Validate gate evidence exists: `qfai validate --fail-on error` completed with `error=0`.
   - **Drift Protocol enforced**:
     - No upstream artifact edits were made without an explicit user-approved Change Request.
     - If upstream changes exist, the correct owner skill was re-run after approval; downstream did not patch upstream directly.
@@ -112,7 +113,8 @@ Inputs (refs):
 Constraints:
 - must: enforce Drift Protocol (no upstream edits without user approval + CR)
 - must: verify plan/test-layer adherence (`steering/test-layers.md` + plan)
-- must: check Coverage Ledger is 100% unless approved exception
+- must: check `qfai validate --fail-on error` passes with evidence (`error=0`)
+- must: enforce `.qfai/assistant/steering/test-layers.md` hard gates
 - must_not: accept test-volume ratios/floors as a hard gate
 - must_not: accept upstream edits made directly by downstream phase
 Output format:
@@ -222,7 +224,7 @@ Build a minimal runnable vertical slice from contracts so the app boots and user
 - `.qfai/contracts/api/*.yaml` (OpenAPI)
 - `.qfai/contracts/db/*.sql` (schema constraints)
 - `.qfai/specs/<spec-id>/spec.md` + `delta.md` (scope + decisions)
-- `.qfai/specs/<spec-id>/scenario.feature` (for “what users do”, but do NOT implement tests here)
+- `.qfai/specs/<spec-id>/scenario.feature` (optional legacy input for “what users do”; do NOT implement tests here)
 
 ## Output boundaries
 

package/assets/init/.qfai/assistant/skills/qfai-sdd/SKILL.md

@@ -97,7 +97,7 @@ Every major artifact in this stage MUST include a `## Work Orders Summary` secti
 - Final completion gate MUST be delegated to an independent Reviewer sub-agent.
 - Reviewer checks (minimum):
   - Required roles were delegated (no orchestrator self-authoring).
-  - DoD satisfied (coverage ledger, gates, evidence, DR-IDs).
+  - DoD satisfied (validate gate, test-layer hard gate, evidence, DR-IDs).
   - Validate gate evidence exists and is fresh:
     - `qfai validate --fail-on error --format github` completed with `error=0`.
     - `.qfai/report/validate.log` and `.qfai/report/specs-coverage/spec-*.md` are present.
@@ -129,7 +129,8 @@ Inputs (refs):
 Constraints:
 - must: enforce Drift Protocol (no upstream edits without user approval + CR)
 - must: verify plan/test-layer adherence (`steering/test-layers.md` + plan)
-- must: check Coverage Ledger is 100% unless approved exception
+- must: check `qfai validate --fail-on error` passes with evidence (`error=0`)
+- must: enforce `.qfai/assistant/steering/test-layers.md` hard gates
 - must_not: accept test-volume ratios/floors as a hard gate
 - must_not: accept upstream edits made directly by downstream phase
 Output format:

package/assets/init/.qfai/assistant/skills/qfai-verify/SKILL.md

@@ -38,7 +38,7 @@ When unsure, read inputs in this order:
 - P1: `.qfai/assistant/instructions/*`
 - P2: `.qfai/assistant/steering/*`
 - P3: `.qfai/specs/<spec-id>/delta.md` (Decision Records; if no spec yet, state "not applicable")
-- P4: other artifacts (spec.md, scenario.feature, contracts, evidence)
+- P4: other artifacts (spec.md, contracts, evidence, optional legacy `scenario.feature` / coverage ledgers)
 
 ## Sub-agent Delegation (MANDATORY)
 
@@ -85,7 +85,8 @@ Every major artifact in this stage MUST include a `## Work Orders Summary` secti
 - Final completion gate MUST be delegated to an independent Reviewer sub-agent.
 - Reviewer checks (minimum):
   - Required roles were delegated (no orchestrator self-authoring).
-  - DoD satisfied (coverage ledger, gates, evidence, DR-IDs).
+  - DoD satisfied (validate gate, test-layer hard gate, evidence, DR-IDs).
+  - Validate gate evidence exists: `qfai validate --fail-on error` completed with `error=0`.
   - **Drift Protocol enforced**:
     - No upstream artifact edits were made without an explicit user-approved Change Request.
     - If upstream changes exist, the correct owner skill was re-run after approval; downstream did not patch upstream directly.
@@ -105,7 +106,8 @@ Inputs (refs):
 Constraints:
 - must: enforce Drift Protocol (no upstream edits without user approval + CR)
 - must: verify plan/test-layer adherence (`steering/test-layers.md` + plan)
-- must: check Coverage Ledger is 100% unless approved exception
+- must: check `qfai validate --fail-on error` passes with evidence (`error=0`)
+- must: enforce `.qfai/assistant/steering/test-layers.md` hard gates
 - must_not: accept test-volume ratios/floors as a hard gate
 - must_not: accept upstream edits made directly by downstream phase
 Output format:

package/dist/cli/index.cjs

@@ -1589,8 +1589,8 @@ var import_promises7 = require("fs/promises");
 var import_node_path8 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 async function resolveToolVersion() {
-  if ("1.4.27".length > 0) {
-    return "1.4.27";
+  if ("1.4.28".length > 0) {
+    return "1.4.28";
   }
   try {
     const packagePath = resolvePackageJsonPath();
@@ -8549,7 +8549,7 @@ async function validateDiscussPack(root) {
     issues.push(
       issue(
         "QFAI-DISCUSS-028",
-        `legacy discuss pack \u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.27 \u306F warning\uFF09: ${legacyPacks.join(", ")}`,
+        `legacy discuss pack \u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.28 \u306F warning\uFF09: ${legacyPacks.join(", ")}`,
         "warning",
         discussRoot,
         "discussPack.legacy",
@@ -10670,7 +10670,7 @@ async function validateRequirePackReadiness(root, config) {
     issues.push(
       issue(
         "QFAI-RPACK-006",
-        `legacy require-pack \u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.27 \u306F warning\uFF09: ${readiness.legacyPackNames.join(", ")}`,
+        `legacy require-pack \u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.28 \u306F warning\uFF09: ${readiness.legacyPackNames.join(", ")}`,
         "warning",
         requireRoot,
         "requirePack.legacy",
@@ -10775,7 +10775,7 @@ async function validateRepositoryHygiene(root, config) {
     issues.push(
       issue(
         "QFAI-HYG-001",
-        `legacy \u30C7\u30A3\u30EC\u30AF\u30C8\u30EA\u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.27 \u306F warning\uFF09: .qfai/${rule.legacy}/`,
+        `legacy \u30C7\u30A3\u30EC\u30AF\u30C8\u30EA\u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.28 \u306F warning\uFF09: .qfai/${rule.legacy}/`,
         "warning",
         legacyPath,
         "hygiene.legacyDirectory",
@@ -10790,7 +10790,7 @@ async function validateRepositoryHygiene(root, config) {
     issues.push(
       issue(
         "QFAI-HYG-002",
-        `specs \u914D\u4E0B\u306B\u30C6\u30F3\u30D7\u30EC\u6DF7\u5165\u7591\u3044\u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.27 \u306F warning\uFF09: ${suspiciousPaths.join(", ")}`,
+        `specs \u914D\u4E0B\u306B\u30C6\u30F3\u30D7\u30EC\u6DF7\u5165\u7591\u3044\u3092\u691C\u51FA\u3057\u307E\u3057\u305F\uFF08v1.4.28 \u306F warning\uFF09: ${suspiciousPaths.join(", ")}`,
         "warning",
         specsRoot,
         "hygiene.templateContamination",
@@ -13210,13 +13210,13 @@ var ISSUE_EXPECTED_BY_CODE = {
   "QFAI-RPACK-003": "The latest require-pack files contain minimum substantive content.",
   "QFAI-RPACK-004": "No blocking OQ remains in 08_OQ.md (Disposition=open with Gate discuss|require|sdd).",
   "QFAI-RPACK-005": "require-* naming must be timestamp format only (dangerous names are forbidden).",
-  "QFAI-RPACK-006": "Legacy require-* serial packs are migration warnings in v1.4.27.",
+  "QFAI-RPACK-006": "Legacy require-* serial packs are migration warnings in v1.4.28.",
   "QFAI-DISCUSS-023": "Discuss directory naming uses discuss-YYYYMMDDhhmmssSSS for new outputs.",
   "QFAI-DISCUSS-024": "Latest discuss pack contains required files (01_Context.md..09_delta.md).",
   "QFAI-DISCUSS-025": "No open OQ remains in latest discuss 05_OQ-Register.md.",
   "QFAI-DISCUSS-026": "Deferred rows include complete metadata in 07_Deferred.md.",
   "QFAI-DISCUSS-027": "Every deferred OQ in 05_OQ-Register.md is listed in 07_Deferred.md.",
-  "QFAI-DISCUSS-028": "Legacy discuss serial packs are migration warnings in v1.4.27.",
+  "QFAI-DISCUSS-028": "Legacy discuss serial packs are migration warnings in v1.4.28.",
   "QFAI-COV-201": "Every AC must be referenced by at least one TC (`AC-Refs`).",
   "QFAI-COV-202": "Every BR must be referenced by at least one EX (`BR-Ref`).",
   "QFAI-COV-203": "Every EX must be referenced by at least one TC (`EX-Ref`).",
@@ -13241,7 +13241,7 @@ var ISSUE_EXPECTED_BY_CODE = {
   "QFAI-REVIEW-004": "Each review pack contains `summary.json`.",
   "QFAI-REVIEW-005": "Each review pack contains one or more reviewer files (`Rxx_*.md`).",
   "QFAI-REVIEW-006": "Each review summary JSON is parseable.",
-  "QFAI-REVIEW-007": "Each review summary satisfies the v1.4.27 minimum schema.",
+  "QFAI-REVIEW-007": "Each review summary satisfies the v1.4.28 minimum schema.",
   "QFAI-CONTRACT-030": "Contract index references must match declared contract IDs in .qfai/contracts/**."
 };
 function resolveIssueTarget(issue2) {