sdlc-workflow 1.2.2 → 1.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/bin/cli.js +48 -11
  2. package/package.json +1 -1
package/bin/cli.js CHANGED
@@ -254,13 +254,15 @@ globs: docs/sdlc/**/*, **/*.md
254
254
 
255
255
  **On idea/feature request:** Trigger full pipeline (PO → … → Deploy). One role per phase; run phases in sequence. (Single agent = simulate by switching role each phase.) See docs/sdlc/SDLC-WORKFLOW.md and docs/sdlc/agents/.
256
256
 
257
+ **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
258
+
257
259
  1. **PO** — PRD, user stories → docs/sdlc/po/{epic-slug}/ (one folder per epic)
258
260
  2. **Business BA** — FRS, process flows → docs/sdlc/ba/business/{epic-slug}/ (one folder per epic)
259
261
  3. **Design (if app/web)** — Design specs + wireframes → docs/sdlc/design/{epic-slug}/; **PO + BA review** → loop until approved
260
262
  4. **Architect** — ADRs, diagrams → docs/sdlc/architecture/
261
263
  5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
262
264
  6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
263
- 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + implementation roles → docs/sdlc/dev/{role}/
265
+ 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + implementation roles (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
264
266
  8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
265
267
  9. **Security** — Audit security risk → docs/sdlc/security/
266
268
  10. **Principle Engineer** — Audit logic, architecture → docs/sdlc/principle-engineer/
@@ -283,8 +285,9 @@ Sequential workflow; **each role runs as a sub-agent**. Each phase produces docs
283
285
  ## Trigger and orchestration (mandatory)
284
286
 
285
287
  **When the user sends an idea, feature request, or new requirement:**
286
- 1. **Trigger the pipeline** and run it **continuously through deployment** (Phase 1 2 7).
287
- 2. **One role per phase.** For each phase, act **only** as that role (e.g. only PO in phase 1, only Business BA in phase 2). Produce that phase's outputs into the correct folder, then **continue to the next phase** without waiting for the user.
288
+ 1. **Recall memory** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
289
+ 2. **Trigger the pipeline** and run it **continuously through deployment** (Phase 1 2 7).
290
+ 3. **One role per phase.** For each phase, act **only** as that role (e.g. only PO in phase 1, only Business BA in phase 2). Produce that phase's outputs into the correct folder, then **continue to the next phase** without waiting for the user.
288
291
  3. **Run in order:** PO → Business BA → **Design (if app/web, PO+BA review loop)** → Architect → Technical BA → QE (docs) → Dev → QE (testing + UAT) → **QE bug-fix loop until 0 bugs → Security + Principle Engineer audit → fix → retest → re-audit loop until 0 issues** → Deploy → Maintenance. Do not stop after one phase unless the user explicitly asks to stop.
289
292
 
290
293
  **Note:** In Cursor and similar tools there is a single agent per conversation. "Sub-agent" means **one role per phase** — the same agent must adopt exactly one role per phase and run phases in sequence (do not mix roles in one step). If the platform later supports spawning separate agents per phase, use that; otherwise this single agent simulates the pipeline by switching role each phase.
@@ -357,8 +360,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
357
360
  **Trigger**: After docs are done (Technical BA + QE docs). **Dev runs implementation immediately.**
358
361
 
359
362
  **Roles** (vary by project — use only what applies; see \`docs/sdlc/dev/implementation-roles.template.md\`). All implementation roles are **Senior (10+ yrs)**:
360
- - **Tech Lead (15+ yrs)**: Tech stack, review & merge. Docs: \`docs/sdlc/dev/tech-lead/\`
361
- - **Senior Developer (10+ yrs)**: Implement per spec (generic). Docs: \`docs/sdlc/dev/senior-developer/\`
363
+ - **Tech Lead (15+ yrs)** **highest model** (e.g. Opus): Planning, logic analysis, architecture decisions, tech stack, code review & merge. Docs: \`docs/sdlc/dev/tech-lead/\`
364
+ - **Senior Developer (10+ yrs)** — **cost-efficient model** (e.g. Haiku): Implement per Tech Lead's spec. Docs: \`docs/sdlc/dev/senior-developer/\`
362
365
  - **Senior Frontend (10+ yrs)**: Web UI. Docs: \`docs/sdlc/dev/frontend/\`
363
366
  - **Senior Backend (10+ yrs)**: API, services. Docs: \`docs/sdlc/dev/backend/\`
364
367
  - **Senior Mobile (10+ yrs)**: iOS/Android/cross-platform. Docs: \`docs/sdlc/dev/mobile/\`
@@ -366,6 +369,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
366
369
  - **Senior Data/ML (10+ yrs)**: ETL, models. Docs: \`docs/sdlc/dev/data-ml/\`
367
370
  - **Senior Platform (10+ yrs)**: Infra, CI/CD. Docs: \`docs/sdlc/dev/platform/\`
368
371
 
372
+ **Model optimization**: Tech Lead uses the **highest-tier model** (e.g. Claude Opus) for planning, architecture decisions, logic analysis, and code review. Implementation roles use a **cost-efficient model** (e.g. Claude Haiku) to execute code from Tech Lead's specs. This maximizes quality on critical thinking while reducing cost on execution.
373
+
369
374
  **Requirements**: Unit Test coverage **≥ 90%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS.
370
375
 
371
376
  **Output**: Code + unit tests. **Handoff to QE (testing + UAT).**
@@ -451,9 +456,9 @@ TC-001: [Scenario] — Precondition, Steps, Expected, Links to AC
451
456
  - Senior QE (10+ yrs): write automation tests → docs/sdlc/qe/{epic-slug}/
452
457
 
453
458
  ## Dev Team
454
- - Tech Lead (15+ yrs): tech stack, review & merge → docs/sdlc/dev/tech-lead/
455
- - Senior Dev (10+ yrs): implement, Unit Test ≥90% → docs/sdlc/dev/senior-developer/
456
- - By project (all Senior 10+ yrs): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
459
+ - Tech Lead (15+ yrs) — **highest model** (e.g. Opus): planning, logic, architecture decisions, code review → docs/sdlc/dev/tech-lead/
460
+ - Senior Dev (10+ yrs) — **cost-efficient model** (e.g. Haiku): execute code from Tech Lead specs, Unit Test ≥90% → docs/sdlc/dev/senior-developer/
461
+ - By project (all Senior 10+ yrs, cost-efficient model): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
457
462
 
458
463
  ## Security + Principle Engineer (after implementation)
459
464
  - Security team: audit security risk → docs/sdlc/security/
@@ -471,6 +476,8 @@ const AGENTS_MD_CONTENT = `## SDLC Workflow
471
476
 
472
477
  **Trigger:** When the user sends an **idea**, **feature request**, or **requirement**, run the full pipeline (Phase 1 → 7) in sequence. One role (sub-agent) per phase; produce outputs then continue to the next. Do not stop after one phase until deployment unless the user asks to stop.
473
478
 
479
+ **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
480
+
474
481
  When working on requirements, features, or handoffs, follow these phases:
475
482
 
476
483
  1. **PO** — PRD, user stories → docs/sdlc/po/{epic-slug}/ (one folder per epic)
@@ -479,7 +486,7 @@ When working on requirements, features, or handoffs, follow these phases:
479
486
  4. **Architect** — ADRs, diagrams → docs/sdlc/architecture/
480
487
  5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
481
488
  6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
482
- 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + Senior Dev → docs/sdlc/dev/{role}/
489
+ 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
483
490
  8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
484
491
  9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
485
492
  10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
@@ -492,13 +499,15 @@ const CLAUDE_SDLC_CONTENT = `## SDLC Workflow
492
499
 
493
500
  **Trigger on idea:** When the user sends an idea, feature request, or requirement, run the pipeline continuously: Phase 1 (PO) → 2 → … → Deploy → Maintenance. One role per phase (single agent = switch role each phase). Do not stop after one phase unless the user asks.
494
501
 
502
+ **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
503
+
495
504
  1. **PO** — PRD, user stories, feasibility assessment → docs/sdlc/po/{epic-slug}/ (one folder per epic)
496
505
  2. **Business BA** — FRS, NFR, process flows → docs/sdlc/ba/business/{epic-slug}/ (one folder per epic)
497
506
  3. **Design (if app/web)** — Design specs + wireframes (**Anti AI**: no AI-looking designs) → docs/sdlc/design/{epic-slug}/; **PO + BA review** until approved
498
507
  4. **Architect** — ADRs, diagrams, security by design, engineering principles (SOLID, DRY, KISS, CQRS, Zero Trust, EDA, HA) → docs/sdlc/architecture/
499
508
  5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
500
509
  6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
501
- 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + Senior Dev → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
510
+ 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
502
511
  8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
503
512
  9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
504
513
  10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
@@ -515,6 +524,7 @@ For Cursor, see .cursor/rules/sdlc-workflow.mdc
515
524
  ## Trigger and orchestration
516
525
 
517
526
  - **When the user sends an idea, feature request, or requirement:** Start the pipeline and run it **continuously through deployment** (Phase 1 → 2 → … → 7). Do not handle everything in one main-agent response.
527
+ - **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
518
528
  - **One role per phase:** Execute each phase as that role only; write artifacts to the right folder; then continue to the next phase. In Cursor there is one agent — it simulates the pipeline by adopting one role per phase in sequence.
519
529
  - **Do not stop** after PO or any single phase unless the user explicitly asks to stop. Run through to Deploy.
520
530
 
@@ -1289,8 +1299,11 @@ App
1289
1299
 
1290
1300
  const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
1291
1301
 
1302
+ > **Model**: Use the **highest-tier model** (e.g. Claude Opus) for this role. Tech Lead handles planning, logic analysis, architecture decisions, and code review — tasks that require maximum reasoning capability.
1303
+
1292
1304
  **Responsibilities**:
1293
1305
  - Decide tech stack, frameworks, libraries
1306
+ - Define implementation plan, critical logic, and technical specs for implementation roles
1294
1307
  - Review and merge code
1295
1308
  - Ensure architecture alignment
1296
1309
 
@@ -1298,6 +1311,7 @@ const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
1298
1311
 
1299
1312
  - [ ] **Read architecture and Technical BA spec**: ADRs, API spec, team breakdown
1300
1313
  - [ ] **Tech stack decision**: Languages, frameworks, libraries; document in ADR
1314
+ - [ ] **Implementation plan**: Define step-by-step tasks, critical logic, edge cases, and technical specs that implementation roles will execute
1301
1315
  - [ ] **Project setup**: Repo structure, tooling, lint, format, CI baseline
1302
1316
  - [ ] **Code review**: Architecture alignment, patterns, test coverage, security
1303
1317
  - [ ] **Security review (Shift Left)**: OWASP Top 10 check, input validation, auth/authz, secrets not hardcoded, dependency audit (npm audit / pip audit / etc.), SAST scan in CI
@@ -1309,8 +1323,10 @@ const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
1309
1323
 
1310
1324
  const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
1311
1325
 
1326
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku) for this role. Implementation is executed from Tech Lead's detailed specs — optimizing cost while maintaining quality through clear instructions.
1327
+
1312
1328
  **Responsibilities**:
1313
- - Implement features per Technical BA spec
1329
+ - Implement features per Tech Lead's implementation plan and Technical BA spec
1314
1330
  - Write code with Unit Test coverage **≥ 90%**
1315
1331
  - Follow Tech Lead's tech decisions
1316
1332
 
@@ -1328,6 +1344,15 @@ const DEV_IMPLEMENTATION_ROLES_TEMPLATE = `# Implementation roles by project typ
1328
1344
 
1329
1345
  Use only the roles that apply. Remove or ignore the rest. Tech Lead is cross-cutting; add discipline roles as needed.
1330
1346
 
1347
+ ## Model optimization strategy
1348
+
1349
+ | Role | Model tier | Why |
1350
+ |------|-----------|-----|
1351
+ | Tech Lead | **Highest** (e.g. Opus) | Planning, logic analysis, architecture decisions, code review |
1352
+ | All implementation roles | **Cost-efficient** (e.g. Haiku) | Execute code from Tech Lead's detailed specs |
1353
+
1354
+ Tech Lead defines all critical steps, logic, and specs first → implementation roles execute them. This maximizes quality on thinking while reducing cost on execution.
1355
+
1331
1356
  ## By project type
1332
1357
 
1333
1358
  | Project type | Roles to use (all Senior 10+ except Tech Lead 15+) |
@@ -1356,6 +1381,8 @@ Use only the roles that apply. Remove or ignore the rest. Tech Lead is cross-cut
1356
1381
 
1357
1382
  const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
1358
1383
 
1384
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1385
+
1359
1386
  **Responsibilities**:
1360
1387
  - Implement web UI per design and API contract
1361
1388
  - Unit Test coverage **≥ 90%**
@@ -1373,6 +1400,8 @@ const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
1373
1400
 
1374
1401
  const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
1375
1402
 
1403
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1404
+
1376
1405
  **Responsibilities**:
1377
1406
  - Implement API, services, DB layer per Technical BA spec
1378
1407
  - Unit Test coverage **≥ 90%**
@@ -1390,6 +1419,8 @@ const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
1390
1419
 
1391
1420
  const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / cross-platform
1392
1421
 
1422
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1423
+
1393
1424
  **Responsibilities**:
1394
1425
  - Implement app UI and API integration per spec
1395
1426
  - Unit Test coverage **≥ 90%**
@@ -1407,6 +1438,8 @@ const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / c
1407
1438
 
1408
1439
  const DEV_EMBEDDED_README = `# Senior Embedded (10+ years exp) — firmware, IoT
1409
1440
 
1441
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1442
+
1410
1443
  **Responsibilities**:
1411
1444
  - Implement firmware, drivers, hardware interfaces per spec
1412
1445
  - Tests as appropriate for target (unit, HW-in-loop)
@@ -1423,6 +1456,8 @@ const DEV_EMBEDDED_README = `# Senior Embedded (10+ years exp) — firmware, IoT
1423
1456
 
1424
1457
  const DEV_DATA_ML_README = `# Senior Data/ML (10+ years exp)
1425
1458
 
1459
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1460
+
1426
1461
  **Responsibilities**:
1427
1462
  - Implement ETL, models, analytics pipelines per spec
1428
1463
  - Tests and validation for data and model quality
@@ -1440,6 +1475,8 @@ const DEV_DATA_ML_README = `# Senior Data/ML (10+ years exp)
1440
1475
 
1441
1476
  const DEV_PLATFORM_README = `# Senior Platform (10+ years exp) — infra, CI/CD
1442
1477
 
1478
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1479
+
1443
1480
  **Responsibilities**:
1444
1481
  - Implement CI/CD, infra as code, observability per spec
1445
1482
  - Follow Tech Lead's stack and security requirements
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sdlc-workflow",
3
- "version": "1.2.2",
3
+ "version": "1.2.3",
4
4
  "description": "Scaffold SDLC workflow docs and templates for Cursor, Claude, and dev teams",
5
5
  "type": "module",
6
6
  "bin": {