qfai 1.4.6 → 1.4.8

package/README.md

@@ -31,7 +31,7 @@ npx qfai report
 ## What you can do (CLI commands)
 
 - `npx qfai init`
-  - Creates the QFAI workspace under `.qfai/` (requirements/specs/contracts/report) and installs the AI assistant kit (`assistant/` with skills, instructions, agents, and steering templates), plus a default GitHub Actions workflow and `qfai.config.yaml`.
+  - Creates the QFAI workspace under `.qfai/` (requirements/specs/contracts/report) and installs the AI assistant kit (`assistant/` with skills, instructions, agents, and steering templates), plus `qfai.config.yaml`.
 - `npx qfai validate`
   - Validates specs/contracts/scenarios/traceability and writes `.qfai/report/validate.json`; use `--fail-on error` (or `--fail-on warning`) to turn it into a CI gate, and `--format github` to emit GitHub-friendly annotations. Use `--phase refinement` only for local refinement checks; CI should use default/full validation.
 - `npx qfai report`
@@ -42,7 +42,7 @@ npx qfai report
 ## Operating model (skills-driven workflow)
 
 QFAI assumes you operate the project primarily via prepared custom skills.
-A custom skill is a reusable task instruction set for your AI coding agent (for example, IDE/CLI skill wrappers that link to canonical QFAI skills).
+A custom skill is a reusable task instruction set for your AI coding agent.
 The agent reads QFAI assets under `.qfai/assistant/` and produces or updates SDD/ATDD/TDD artifacts and code.
 
 ### Where the skills live
@@ -58,12 +58,12 @@ QFAI includes a small set of custom skills (stored under `.qfai/assistant/skills
 - **qfai-discuss**: Turn an idea into clear requirements by discussing scope, constraints, risks, and open questions.
 - **qfai-require**: Produce `.qfai/require/REQUIRE-XXXX/*` from your idea or discussion output.
 - **qfai-sdd**: Produce/update the full spec pack (`01_Spec.md` to `18_delta.md`) in one workflow (Outline -> Slice -> Plan finalize -> Delta).
-- **qfai-spec**: Deprecated alias of `qfai-sdd` for backward compatibility.
-- **qfai-scenario-test**: Implement acceptance tests (ATDD) driven by specs/scenarios.
-- **qfai-unit-test**: Implement unit tests (TDD) driven by specs/scenarios.
-- **qfai-implement**: Implement the feature; iterate test→fix until all quality gates are green.
-- **qfai-verify**: Run/interpret the local quality gates and produce a PR-ready summary.
-- **qfai-pr**: Draft a PR description aligned with the repository’s PR template.
+- **qfai-prototyping**: Build a contract-aligned skeleton implementation before deep coding.
+- **qfai-atdd**: Implement acceptance tests driven by specs/scenarios.
+- **qfai-tdd-red**: Add failing unit/component tests from the approved acceptance scenarios.
+- **qfai-tdd-green**: Implement production code to satisfy failing tests.
+- **qfai-tdd-refactor**: Refactor while keeping all tests green.
+- **qfai-verify**: Run/interpret the local quality gates and produce a release-ready summary.
 
 ### Workflow sequence (example)
 
@@ -100,24 +100,39 @@ AG->>Q: Read .qfai/assistant/skills/qfai-sdd/SKILL.md
 AG->>R: Create/refine spec pack (01..18) + contracts + 17_Plan.md
 AG-->>U: SDD artifacts ready
 
-U->>AG: Run /qfai-scenario-test
-AG->>Q: Read .qfai/assistant/skills/qfai-scenario-test/SKILL.md
+U->>AG: Run /qfai-prototyping
+AG->>Q: Read .qfai/assistant/skills/qfai-prototyping/SKILL.md
+AG->>R: Build contract-aligned implementation skeleton
+AG-->>U: Prototype ready
+
+U->>AG: Run /qfai-atdd
+AG->>Q: Read .qfai/assistant/skills/qfai-atdd/SKILL.md
 AG->>R: Implement acceptance tests
-AG-->>U: Scenario tests ready
+AG-->>U: ATDD tests ready
 
-U->>AG: Run /qfai-unit-test
-AG->>Q: Read .qfai/assistant/skills/qfai-unit-test/SKILL.md
-AG->>R: Implement unit tests
-AG-->>U: Unit tests ready
+U->>AG: Run /qfai-tdd-red
+AG->>Q: Read .qfai/assistant/skills/qfai-tdd-red/SKILL.md
+AG->>R: Add failing unit/component tests
+AG-->>U: RED state ready
 
-U->>AG: Run /qfai-implement
-AG->>Q: Read .qfai/assistant/skills/qfai-implement/SKILL.md
+U->>AG: Run /qfai-tdd-green
+AG->>Q: Read .qfai/assistant/skills/qfai-tdd-green/SKILL.md
 loop Implement and fix until green
 AG->>R: Implement code changes
 AG->>R: Run project tests locally
 end
 AG-->>U: Working implementation (quality gates passing)
 
+U->>AG: Run /qfai-tdd-refactor
+AG->>Q: Read .qfai/assistant/skills/qfai-tdd-refactor/SKILL.md
+AG->>R: Refactor with tests green
+AG-->>U: Refactor complete
+
+U->>AG: Run /qfai-verify
+AG->>Q: Read .qfai/assistant/skills/qfai-verify/SKILL.md
+AG->>R: Run quality gates and summarize evidence
+AG-->>U: Verification summary ready
+
 U->>R: Run npx qfai validate
 U->>R: Run npx qfai report
 R-->>U: Traceability checks and report artifacts
@@ -192,7 +207,7 @@ flowchart LR
 - Contracts SSOT: `.qfai/contracts/**`
 - Report outputs (`.qfai/report/**`) are derived artifacts and not SSOT.
 
-## Minimal tutorial (v1.4.6)
+## Minimal tutorial (v1.4.8)
 
 1. `npx qfai init`
 2. Run `/qfai-discuss` to structure scope and open questions.
@@ -216,17 +231,22 @@ Release gate behavior:
 - Q: release_candidate validation fails due open questions.
   - A: In `15_Open-questions.md`, change `status: open` to `resolved` or `deferred` and keep evidence.
 
-## Continuous integration (GitHub Actions)
+## Continuous integration
 
-(GitHub Actions)
+QFAI v1.4.8 no longer generates `.github/**` assets.
+Configure CI in your own platform and run:
 
-`npx qfai init` generates `.github/workflows/qfai.yml` which runs `npx qfai validate --fail-on error` on pull requests and on pushes to `main`, and uploads `.qfai/report/validate.json` as an artifact.
+```bash
+pnpm ci:local
+# or, minimum gate only:
+npx qfai validate --fail-on error
+```
 
-What works out-of-the-box.
+Recommended baseline.
 
-- The generated workflow is npm-oriented (`npm ci`); if your repository uses pnpm/yarn/bun, replace the install/cache steps accordingly.
-- The default validate gate fails only on `error`; use `--fail-on warning` or `--strict` if you want a stricter gate.
 - Keep CI on default/full validation (`qfai validate --fail-on error`); do not use `--phase refinement` in CI.
+- Add a report step (`npx qfai report`) when you need a human-readable artifact.
+- Tune traceability globs in `qfai.config.yaml` to match your test layout.
 
 Waiver policy.
 
@@ -237,9 +257,8 @@ Waiver policy.
 
 Typical customizations.
 
-- Add a second job to generate `report.md` from the uploaded `validate.json`.
 - Add a `doctor` step before validate if you want to fail fast on path/glob/config issues.
-- Tune traceability globs in `qfai.config.yaml` to match your test layout.
+- Publish `.qfai/report/validate.json` and `report.md` as CI artifacts.
 
 ## Generated structure
 
@@ -247,50 +266,6 @@ Typical customizations.
 
 ```text
 .
-├── .claude
-│   └── skills
-│       ├── qfai-configure
-│       │   └── SKILL.md
-│       ├── qfai-discuss
-│       │   └── SKILL.md
-│       ├── qfai-require
-│       │   └── SKILL.md
-│       └── ...
-├── .codex
-│   └── skills
-│       ├── qfai-configure
-│       │   └── SKILL.md
-│       ├── qfai-discuss
-│       │   └── SKILL.md
-│       ├── qfai-implement
-│       │   └── SKILL.md
-│       ├── qfai-pr
-│       │   └── SKILL.md
-│       ├── qfai-require
-│       │   └── SKILL.md
-│       ├── qfai-scenario-test
-│       │   └── SKILL.md
-│       ├── qfai-sdd
-│       │   └── SKILL.md
-│       ├── qfai-spec
-│       │   └── SKILL.md
-│       ├── qfai-unit-test
-│       │   └── SKILL.md
-│       └── qfai-verify
-│           └── SKILL.md
-├── .github
-│   ├── skills
-│   │   ├── qfai-configure
-│   │   │   └── SKILL.md
-│   │   ├── qfai-discuss
-│   │   │   └── SKILL.md
-│   │   ├── qfai-require
-│   │   │   └── SKILL.md
-│   │   └── ...
-│   ├── workflows
-│   │   └── qfai.yml
-│   ├── copilot-instructions.md
-│   └── PULL_REQUEST_TEMPLATE.md
 ├── .qfai
 │   ├── assistant
 │   │   ├── agents
@@ -320,9 +295,22 @@ Typical customizations.
 │   │   │   │   └── SKILL.md
 │   │   │   ├── qfai-discuss
 │   │   │   │   └── SKILL.md
+│   │   │   ├── qfai-prototyping
+│   │   │   │   └── SKILL.md
 │   │   │   ├── qfai-require
 │   │   │   │   └── SKILL.md
-│   │   │   └── ...
+│   │   │   ├── qfai-sdd
+│   │   │   │   └── SKILL.md
+│   │   │   ├── qfai-atdd
+│   │   │   │   └── SKILL.md
+│   │   │   ├── qfai-tdd-red
+│   │   │   │   └── SKILL.md
+│   │   │   ├── qfai-tdd-green
+│   │   │   │   └── SKILL.md
+│   │   │   ├── qfai-tdd-refactor
+│   │   │   │   └── SKILL.md
+│   │   │   └── qfai-verify
+│   │   │       └── SKILL.md
 │   │   ├── skills.local
 │   │   │   └── README.md
 │   │   ├── steering
@@ -353,27 +341,17 @@ Typical customizations.
 │   │   │   ├── 00_Summary.md
 │   │   │   ├── ...
 │   │   │   └── 07_Open-questions.md
-│   │   ├── glossary.md        # legacy compatibility
-│   │   ├── actors.md          # legacy compatibility
-│   │   ├── business-flows.md  # legacy compatibility
-│   │   ├── require.md         # legacy compatibility
-│   │   └── open-questions.md  # legacy compatibility
+│   │   └── README.md
 │   ├── specs
 │   │   └── README.md
 │   └── README.md
 └── qfai.config.yaml
 ```
 
-## Agent integrations (Copilot / Claude Code / Codex)
-
-`npx qfai init` also installs lightweight integration stubs so your AI coding agent can invoke QFAI custom skills directly.
-
-- **GitHub Copilot Agent skills**: `.github/skills/*/SKILL.md`.
-- **GitHub Copilot repository instructions**: `.github/copilot-instructions.md` (baseline behavior guidance for Copilot in this repo).
-- **Claude Code skills**: `.claude/skills/*/SKILL.md`.
-- **OpenAI Codex skills**: `.codex/skills/*/SKILL.md` (invoke as Codex skills; each skill points to the canonical QFAI skill doc).
+## Agent integrations
 
-Each of these files is intentionally thin and forwards to the canonical source of truth under `.qfai/assistant/skills/**`.
+`npx qfai init` installs only canonical skills under `.qfai/assistant/skills/**`.
+If your toolchain needs wrapper files, manage them in your own repository convention and keep `.qfai/assistant/skills/**` as SSOT.
 
 ## Contributing (for QFAI maintainers)
 

package/assets/init/.qfai/README.md

@@ -88,12 +88,12 @@ It is useful for local review but should not pollute version control.
 ### R5. init is an empty scaffold
 
 - `qfai init` creates README-centric directories for `discuss`, `require`, `contracts`, and `specs`.
-- Sample artifacts are provided under skill templates (for example, `assistant/skills/qfai-spec/templates/contracts/`).
+- Sample artifacts are provided under skill templates (for example, `assistant/skills/qfai-sdd/templates/contracts/`).
 
 ## Skills (SSOT)
 
 `assistant/skills/**` is the canonical source.
-Tool-specific wrappers (`.claude/skills`, `.github/skills`, `.codex/skills`) should point to this tree.
+Invoke canonical skills from this tree directly.
 
 ## Where to look next
 

package/assets/init/.qfai/assistant/instructions/workflow.md

@@ -2,7 +2,7 @@
 
 QFAI standardizes work into a fixed pipeline:
 
-**SDD → ATDD → TDD → Implementation → Verification**
+**SDD → ATDD → TDD → Verification**
 
 This file defines the canonical stages and delegation expectations.
 
@@ -50,14 +50,14 @@ Do not proceed without a declared Change Type.
 1. Discussion (optional): clarify idea → requirement seed
 2. Requirements: requirements document in `.qfai/require/`
 3. Specification (SDD): `.qfai/specs/spec-XXXX/`
-4. Scenario tests (ATDD): runnable scenario tests derived from `scenario.feature`
-5. Unit tests (TDD): runnable unit tests enforcing the spec
-6. Implementation: implement to satisfy spec + tests
+4. Prototyping (optional): contract-aligned implementation skeleton
+5. Scenario tests (ATDD): runnable scenario tests derived from `scenario.feature`
+6. TDD: red/green/refactor loop enforcing spec + tests
 7. Verify: run quality gates and provide evidence
 
 ### Stage 0 — Steering refresh contract (mandatory)
 
-At the beginning of each stage (`qfai-discuss`, `qfai-require`, `qfai-sdd`, `qfai-atdd`, `qfai-tdd-*`, `qfai-implement`, `qfai-verify`):
+At the beginning of each stage (`qfai-discuss`, `qfai-require`, `qfai-sdd`, `qfai-prototyping`, `qfai-atdd`, `qfai-tdd-*`, `qfai-verify`):
 
 1. Check these steering files:
    - `.qfai/assistant/steering/manifest.md`

package/assets/init/.qfai/assistant/skills/qfai-sdd/SKILL.md

@@ -161,6 +161,7 @@ Rules:
 - This is the unified SDD skill. Do not split work into deprecated refinement/planning skills.
 - Use only skill-local templates:
   - `.qfai/assistant/skills/qfai-sdd/templates/spec-pack/`
+  - `.qfai/assistant/skills/qfai-sdd/templates/contracts/`
 - Scenario specification in `09_Examples.feature` is strict:
   - exactly one `Feature:`
   - one or more tagged `Scenario:`
@@ -347,5 +348,7 @@ When this skill is complete, provide a final user-facing completion message and
   Action: build contract-aligned skeleton implementation before deeper coding.
 - Test-first path: `/qfai-atdd`.
   Action: implement acceptance tests from the finalized spec pack.
+- Want to add contracts:
+  Action: create files under `.qfai/contracts/(api|db|ui)/` from `templates/contracts/*` and declare `QFAI-CONTRACT-ID`.
 - Spec pack needs correction: rerun `/qfai-sdd`.
   Action: fix `01..18` consistency and decision records, then regenerate evidence.

package/assets/init/.qfai/assistant/skills/qfai-verify/SKILL.md

@@ -524,8 +524,8 @@ When you declare DONE, include:
 
 When this skill is complete, provide a final user-facing completion message and enumerate all actionable next steps.
 
-- Proceed (recommended): `/qfai-pr`.
-  Action: draft the PR description with verified evidence.
+- Proceed (recommended): Create a PR on your hosting platform.
+  Action: use the verified evidence to write the PR description.
 - Any gate failed:
   Action: return to the owning skill, fix the issue, then rerun `/qfai-verify`.
 - Need a report artifact:

package/dist/cli/index.cjs

@@ -1218,8 +1218,8 @@ var import_promises7 = require("fs/promises");
 var import_node_path8 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 async function resolveToolVersion() {
-  if ("1.4.6".length > 0) {
-    return "1.4.6";
+  if ("1.4.8".length > 0) {
+    return "1.4.8";
   }
   try {
     const packagePath = resolvePackageJsonPath();
@@ -2404,14 +2404,13 @@ async function runInit(options) {
   const destQfai = import_node_path14.default.join(destRoot, ".qfai");
   if (options.force) {
     info(
-      "NOTE: --force \u306F .qfai/assistant/skills/** \u3068 publish \u5148\uFF08.claude/.github/.codex \u306E skills\uFF09\u3092\u4E0A\u66F8\u304D\u3057\u3001legacy 10_workflow.md \u3092\u524A\u9664\u3057\u307E\u3059\uFF08skills.local \u306F\u4FDD\u8B77\u3055\u308C\u3001specs/contracts \u7B49\u306F\u4E0A\u66F8\u304D\u3057\u307E\u305B\u3093\uFF09\u3002"
+      "NOTE: --force \u306F .qfai/assistant/skills/** \u3092\u4E0A\u66F8\u304D\u3057\u3001legacy 10_workflow.md \u3092\u524A\u9664\u3057\u307E\u3059\uFF08skills.local \u306F\u4FDD\u8B77\u3055\u308C\u3001specs/contracts \u7B49\u306F\u4E0A\u66F8\u304D\u3057\u307E\u305B\u3093\uFF09\u3002"
     );
   }
   const rootResult = await copyTemplateTree(rootAssets, destRoot, {
     force: false,
     dryRun: options.dryRun,
-    conflictPolicy: "skip",
-    exclude: [".claude/skills", ".github/skills", ".codex/skills"]
+    conflictPolicy: "skip"
   });
   const qfaiResult = await copyTemplateTree(qfaiAssets, destQfai, {
     force: false,
@@ -2431,30 +2430,10 @@ async function runInit(options) {
       protect: ["assistant/skills.local"]
     }
   );
-  const publishedSkillsResult = await copyTemplatePaths(
-    rootAssets,
-    destRoot,
-    [".claude/skills", ".github/skills", ".codex/skills"],
-    {
-      force: options.force,
-      dryRun: options.dryRun,
-      conflictPolicy: "skip"
-    }
-  );
   const removedLegacySkills = options.force ? await pruneLegacySkillFiles(destRoot, options.dryRun) : [];
   report(
-    [
-      ...rootResult.copied,
-      ...qfaiResult.copied,
-      ...skillsResult.copied,
-      ...publishedSkillsResult.copied
-    ],
-    [
-      ...rootResult.skipped,
-      ...qfaiResult.skipped,
-      ...skillsResult.skipped,
-      ...publishedSkillsResult.skipped
-    ],
+    [...rootResult.copied, ...qfaiResult.copied, ...skillsResult.copied],
+    [...rootResult.skipped, ...qfaiResult.skipped, ...skillsResult.skipped],
     removedLegacySkills,
     options.dryRun,
     "init",
@@ -2486,12 +2465,7 @@ function report(copied, skipped, removed, dryRun, label, baseDir) {
   }
 }
 async function pruneLegacySkillFiles(destRoot, dryRun) {
-  const roots = [
-    import_node_path14.default.join(destRoot, ".qfai", "assistant", "skills"),
-    import_node_path14.default.join(destRoot, ".claude", "skills"),
-    import_node_path14.default.join(destRoot, ".github", "skills"),
-    import_node_path14.default.join(destRoot, ".codex", "skills")
-  ];
+  const roots = [import_node_path14.default.join(destRoot, ".qfai", "assistant", "skills")];
   const legacyFiles = [];
   for (const root of roots) {
     const found = await collectLegacyWorkflowFiles(root);