sdlc-workflow 1.2.2 → 1.2.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/bin/cli.js +72 -31
  2. package/package.json +1 -1
package/bin/cli.js CHANGED
@@ -254,14 +254,16 @@ globs: docs/sdlc/**/*, **/*.md
254
254
 
255
255
  **On idea/feature request:** Trigger full pipeline (PO → … → Deploy). One role per phase; run phases in sequence. (Single agent = simulate by switching role each phase.) See docs/sdlc/SDLC-WORKFLOW.md and docs/sdlc/agents/.
256
256
 
257
+ **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
258
+
257
259
  1. **PO** — PRD, user stories → docs/sdlc/po/{epic-slug}/ (one folder per epic)
258
260
  2. **Business BA** — FRS, process flows → docs/sdlc/ba/business/{epic-slug}/ (one folder per epic)
259
261
  3. **Design (if app/web)** — Design specs + wireframes → docs/sdlc/design/{epic-slug}/; **PO + BA review** → loop until approved
260
262
  4. **Architect** — ADRs, diagrams → docs/sdlc/architecture/
261
263
  5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
262
264
  6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
263
- 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + implementation roles → docs/sdlc/dev/{role}/
264
- 8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
265
+ 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + implementation roles (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
266
+ 8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
265
267
  9. **Security** — Audit security risk → docs/sdlc/security/
266
268
  10. **Principle Engineer** — Audit logic, architecture → docs/sdlc/principle-engineer/
267
269
  11. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/ (after Security + PE sign-off; fix → retest → re-audit loop until 0 issues)
@@ -283,8 +285,9 @@ Sequential workflow; **each role runs as a sub-agent**. Each phase produces docs
283
285
  ## Trigger and orchestration (mandatory)
284
286
 
285
287
  **When the user sends an idea, feature request, or new requirement:**
286
- 1. **Trigger the pipeline** and run it **continuously through deployment** (Phase 1 2 7).
287
- 2. **One role per phase.** For each phase, act **only** as that role (e.g. only PO in phase 1, only Business BA in phase 2). Produce that phase's outputs into the correct folder, then **continue to the next phase** without waiting for the user.
288
+ 1. **Recall memory** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
289
+ 2. **Trigger the pipeline** and run it **continuously through deployment** (Phase 1 2 7).
290
+ 3. **One role per phase.** For each phase, act **only** as that role (e.g. only PO in phase 1, only Business BA in phase 2). Produce that phase's outputs into the correct folder, then **continue to the next phase** without waiting for the user.
288
291
  3. **Run in order:** PO → Business BA → **Design (if app/web, PO+BA review loop)** → Architect → Technical BA → QE (docs) → Dev → QE (testing + UAT) → **QE bug-fix loop until 0 bugs → Security + Principle Engineer audit → fix → retest → re-audit loop until 0 issues** → Deploy → Maintenance. Do not stop after one phase unless the user explicitly asks to stop.
289
292
 
290
293
  **Note:** In Cursor and similar tools there is a single agent per conversation. "Sub-agent" means **one role per phase** — the same agent must adopt exactly one role per phase and run phases in sequence (do not mix roles in one step). If the platform later supports spawning separate agents per phase, use that; otherwise this single agent simulates the pipeline by switching role each phase.
@@ -357,8 +360,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
357
360
  **Trigger**: After docs are done (Technical BA + QE docs). **Dev runs implementation immediately.**
358
361
 
359
362
  **Roles** (vary by project — use only what applies; see \`docs/sdlc/dev/implementation-roles.template.md\`). All implementation roles are **Senior (10+ yrs)**:
360
- - **Tech Lead (15+ yrs)**: Tech stack, review & merge. Docs: \`docs/sdlc/dev/tech-lead/\`
361
- - **Senior Developer (10+ yrs)**: Implement per spec (generic). Docs: \`docs/sdlc/dev/senior-developer/\`
363
+ - **Tech Lead (15+ yrs)** **highest model** (e.g. Opus): Planning, logic analysis, architecture decisions, tech stack, code review & merge. Docs: \`docs/sdlc/dev/tech-lead/\`
364
+ - **Senior Developer (10+ yrs)** — **cost-efficient model** (e.g. Haiku): Implement per Tech Lead's spec. Docs: \`docs/sdlc/dev/senior-developer/\`
362
365
  - **Senior Frontend (10+ yrs)**: Web UI. Docs: \`docs/sdlc/dev/frontend/\`
363
366
  - **Senior Backend (10+ yrs)**: API, services. Docs: \`docs/sdlc/dev/backend/\`
364
367
  - **Senior Mobile (10+ yrs)**: iOS/Android/cross-platform. Docs: \`docs/sdlc/dev/mobile/\`
@@ -366,7 +369,9 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
366
369
  - **Senior Data/ML (10+ yrs)**: ETL, models. Docs: \`docs/sdlc/dev/data-ml/\`
367
370
  - **Senior Platform (10+ yrs)**: Infra, CI/CD. Docs: \`docs/sdlc/dev/platform/\`
368
371
 
369
- **Requirements**: Unit Test coverage **≥ 90%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS.
372
+ **Model optimization**: Tech Lead uses the **highest-tier model** (e.g. Claude Opus) for planning, architecture decisions, logic analysis, and code review. Implementation roles use a **cost-efficient model** (e.g. Claude Haiku) to execute code from Tech Lead's specs. This maximizes quality on critical thinking while reducing cost on execution.
373
+
374
+ **Requirements**: Unit Test coverage **100%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS.
370
375
 
371
376
  **Output**: Code + unit tests. **Handoff to QE (testing + UAT).**
372
377
 
@@ -376,8 +381,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
376
381
  **Role**: Write and run **automation tests** + **UAT**, sign-off.
377
382
 
378
383
  **Roles**:
379
- - **QE Lead (15+ yrs automation)**: Test strategy, framework choice, automation architecture, review test code. Output per epic: \`docs/sdlc/qe/{epic-slug}/\`
380
- - **Senior QE (10+ yrs)**: Write automation tests per QE Lead's strategy. Output per epic: \`docs/sdlc/qe/{epic-slug}/\` (e.g. automation/ or test files there)
384
+ - **QE Lead (15+ yrs automation)** — **highest model** (e.g. Opus): Test strategy, framework choice, automation architecture, review test code. Output per epic: \`docs/sdlc/qe/{epic-slug}/\`
385
+ - **Senior QE (10+ yrs)** — **cost-efficient model** (e.g. Haiku): Write automation tests per QE Lead's strategy. Output per epic: \`docs/sdlc/qe/{epic-slug}/\` (e.g. automation/ or test files there)
381
386
  - **UAT**: Verify implementation against original user stories and acceptance criteria from PO.
382
387
 
383
388
  **Bug-fix loop**: If QE finds bugs or test failures → **Dev fixes** → **QE retests**. **Repeat until all tests pass and UAT approved (0 open bugs).** Only then → **Handoff to Security + Principle Engineer.**
@@ -408,7 +413,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
408
413
  | 4 | Architect | ADRs, system diagrams, security by design |
409
414
  | 5 | Technical BA | API specs, tech breakdown |
410
415
  | 6 | QE (docs) | Test plan, test cases |
411
- | 7 | Dev | Code, unit tests (≥90%), security shift-left |
416
+ | 7 | Dev | Code, unit tests (100%), security shift-left |
412
417
  | 8 | QE (testing + UAT) | Automation, UAT; **bug-fix loop** (QE finds bugs → Dev fix → QE retest) until 0 open bugs |
413
418
  | 9 | Security + PE | Audit; **fix → retest → re-audit loop** (Dev fix → QE retest → re-audit) until 0 issues; sign-off → Deploy |
414
419
  | 10 | Deploy | Docker Compose + K8s |
@@ -447,13 +452,13 @@ Design specs (Markdown) + optional HTML wireframes from idea + PO + BA (before A
447
452
  TC-001: [Scenario] — Precondition, Steps, Expected, Links to AC
448
453
 
449
454
  ## QE Team (one folder per epic: qe/{epic-slug}/)
450
- - QE Lead (15+ yrs automation): test strategy, framework, automation architecture, review → docs/sdlc/qe/{epic-slug}/
451
- - Senior QE (10+ yrs): write automation tests → docs/sdlc/qe/{epic-slug}/
455
+ - QE Lead (15+ yrs automation) — **highest model** (e.g. Opus): test strategy, framework, automation architecture, review → docs/sdlc/qe/{epic-slug}/
456
+ - Senior QE (10+ yrs) — **cost-efficient model** (e.g. Haiku): write automation tests per QE Lead's strategy → docs/sdlc/qe/{epic-slug}/
452
457
 
453
458
  ## Dev Team
454
- - Tech Lead (15+ yrs): tech stack, review & merge → docs/sdlc/dev/tech-lead/
455
- - Senior Dev (10+ yrs): implement, Unit Test ≥90% → docs/sdlc/dev/senior-developer/
456
- - By project (all Senior 10+ yrs): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
459
+ - Tech Lead (15+ yrs) — **highest model** (e.g. Opus): planning, logic, architecture decisions, code review → docs/sdlc/dev/tech-lead/
460
+ - Senior Dev (10+ yrs) — **cost-efficient model** (e.g. Haiku): execute code from Tech Lead specs, Unit Test 100% → docs/sdlc/dev/senior-developer/
461
+ - By project (all Senior 10+ yrs, cost-efficient model): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
457
462
 
458
463
  ## Security + Principle Engineer (after implementation)
459
464
  - Security team: audit security risk → docs/sdlc/security/
@@ -471,6 +476,8 @@ const AGENTS_MD_CONTENT = `## SDLC Workflow
471
476
 
472
477
  **Trigger:** When the user sends an **idea**, **feature request**, or **requirement**, run the full pipeline (Phase 1 → 7) in sequence. One role (sub-agent) per phase; produce outputs then continue to the next. Do not stop after one phase until deployment unless the user asks to stop.
473
478
 
479
+ **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
480
+
474
481
  When working on requirements, features, or handoffs, follow these phases:
475
482
 
476
483
  1. **PO** — PRD, user stories → docs/sdlc/po/{epic-slug}/ (one folder per epic)
@@ -479,8 +486,8 @@ When working on requirements, features, or handoffs, follow these phases:
479
486
  4. **Architect** — ADRs, diagrams → docs/sdlc/architecture/
480
487
  5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
481
488
  6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
482
- 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + Senior Dev → docs/sdlc/dev/{role}/
483
- 8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
489
+ 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
490
+ 8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
484
491
  9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
485
492
  10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
486
493
  11. **Maintenance** — Monitoring, bug fixes, patches, dependency updates → docs/sdlc/maintenance/
@@ -492,14 +499,16 @@ const CLAUDE_SDLC_CONTENT = `## SDLC Workflow
492
499
 
493
500
  **Trigger on idea:** When the user sends an idea, feature request, or requirement, run the pipeline continuously: Phase 1 (PO) → 2 → … → Deploy → Maintenance. One role per phase (single agent = switch role each phase). Do not stop after one phase unless the user asks.
494
501
 
502
+ **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
503
+
495
504
  1. **PO** — PRD, user stories, feasibility assessment → docs/sdlc/po/{epic-slug}/ (one folder per epic)
496
505
  2. **Business BA** — FRS, NFR, process flows → docs/sdlc/ba/business/{epic-slug}/ (one folder per epic)
497
506
  3. **Design (if app/web)** — Design specs + wireframes (**Anti AI**: no AI-looking designs) → docs/sdlc/design/{epic-slug}/; **PO + BA review** until approved
498
507
  4. **Architect** — ADRs, diagrams, security by design, engineering principles (SOLID, DRY, KISS, CQRS, Zero Trust, EDA, HA) → docs/sdlc/architecture/
499
508
  5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
500
509
  6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
501
- 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + Senior Dev → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
502
- 8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
510
+ 7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
511
+ 8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
503
512
  9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
504
513
  10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
505
514
  11. **Maintenance** — Monitoring, bug fixes, patches, dependency updates → docs/sdlc/maintenance/
@@ -515,6 +524,7 @@ For Cursor, see .cursor/rules/sdlc-workflow.mdc
515
524
  ## Trigger and orchestration
516
525
 
517
526
  - **When the user sends an idea, feature request, or requirement:** Start the pipeline and run it **continuously through deployment** (Phase 1 → 2 → … → 7). Do not handle everything in one main-agent response.
527
+ - **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
518
528
  - **One role per phase:** Execute each phase as that role only; write artifacts to the right folder; then continue to the next phase. In Cursor there is one agent — it simulates the pipeline by adopting one role per phase in sequence.
519
529
  - **Do not stop** after PO or any single phase unless the user explicitly asks to stop. Run through to Deploy.
520
530
 
@@ -535,7 +545,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
535
545
  | 4 | Architect | ADRs, system diagrams, security by design |
536
546
  | 5 | Technical BA | API specs, tech breakdown |
537
547
  | 6 | QE (docs) | Test plan, test cases |
538
- | 7 | Dev | Code, unit tests (≥90%), security shift-left |
548
+ | 7 | Dev | Code, unit tests (100%), security shift-left |
539
549
  | 8 | QE (testing + UAT) | Automation, UAT; **bug-fix loop** (QE finds bugs → Dev fix → QE retest) until 0 open bugs |
540
550
  | 9 | Security + PE | Audit; **fix → retest → re-audit loop** (Dev fix → QE retest → re-audit) until 0 issues; sign-off → Deploy |
541
551
  | 10 | Deploy | Docker Compose + K8s |
@@ -575,7 +585,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
575
585
  ### Phase 5b: Dev Teams
576
586
  - **Tech Lead (15+ yrs)**: Tech stack, review & merge, **security review (Shift Left)**: OWASP check, dependency audit, SAST in CI. Output: \`docs/sdlc/dev/tech-lead/\`
577
587
  - **Implementation roles** (all Senior 10+ yrs; use only what applies): Senior Dev, Senior Frontend, Senior Backend, Senior Mobile, Senior Embedded, Senior Data/ML, Senior Platform → \`docs/sdlc/dev/{role}/\`. See \`implementation-roles.template.md\`.
578
- - **Requirement**: Unit Test coverage **≥ 90%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS; security practices (input validation, no hardcoded secrets)
588
+ - **Requirement**: Unit Test coverage **100%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS; security practices (input validation, no hardcoded secrets)
579
589
  - **Then**: QE starts testing phase
580
590
 
581
591
  ### Phase 6: QE (Testing — automation + UAT) → bug-fix loop
@@ -665,7 +675,7 @@ Every role in the SDLC runs as a **sub-agent**. Each phase is assigned to a corr
665
675
  | Technical BA | technical-ba | docs/sdlc/architecture/ + design (if any) | docs/sdlc/ba/technical/ |
666
676
  | QE (docs) | qe-docs | docs/sdlc/ba/technical/ (+ design if any) | docs/sdlc/qe/{epic-slug}/ (one folder per epic) |
667
677
  | Tech Lead | tech-lead | Technical spec | Review, merge, docs/sdlc/dev/tech-lead/ |
668
- | Senior Dev | senior-dev | Spec + test plan | After docs → run implementation immediately. Code, unit tests (≥90%) |
678
+ | Senior Dev | senior-dev | Spec + test plan | After docs → run implementation immediately. Code, unit tests (100%) |
669
679
  | Senior Frontend | frontend | UI spec, API contract | Web UI, docs/sdlc/dev/frontend/ |
670
680
  | Senior Backend | backend | API spec, DB schema | API, services, docs/sdlc/dev/backend/ |
671
681
  | Senior Mobile | mobile | API contract, design | App (iOS/Android), docs/sdlc/dev/mobile/ |
@@ -1142,6 +1152,8 @@ Use test-case.template.md for test cases.
1142
1152
 
1143
1153
  const QE_LEAD_README = `# QE Lead (15+ years exp in test automation)
1144
1154
 
1155
+ > **Model**: Use the **highest-tier model** (e.g. Claude Opus) for this role. QE Lead handles test strategy, framework decisions, automation architecture, and review — tasks that require maximum reasoning capability.
1156
+
1145
1157
  **Profile**: 15+ years of experience in test automation, test strategy, and quality engineering. Owns test automation strategy, framework selection, and quality gates across the project.
1146
1158
 
1147
1159
  **Responsibilities**:
@@ -1165,6 +1177,8 @@ const QE_LEAD_README = `# QE Lead (15+ years exp in test automation)
1165
1177
 
1166
1178
  const QE_SENIOR_README = `# Senior QE (10+ years exp)
1167
1179
 
1180
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute test implementation from QE Lead's strategy and specs.
1181
+
1168
1182
  **Responsibilities**:
1169
1183
  - Write automation tests per test plan
1170
1184
  - Implement E2E, integration, regression tests
@@ -1289,8 +1303,11 @@ App
1289
1303
 
1290
1304
  const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
1291
1305
 
1306
+ > **Model**: Use the **highest-tier model** (e.g. Claude Opus) for this role. Tech Lead handles planning, logic analysis, architecture decisions, and code review — tasks that require maximum reasoning capability.
1307
+
1292
1308
  **Responsibilities**:
1293
1309
  - Decide tech stack, frameworks, libraries
1310
+ - Define implementation plan, critical logic, and technical specs for implementation roles
1294
1311
  - Review and merge code
1295
1312
  - Ensure architecture alignment
1296
1313
 
@@ -1298,6 +1315,7 @@ const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
1298
1315
 
1299
1316
  - [ ] **Read architecture and Technical BA spec**: ADRs, API spec, team breakdown
1300
1317
  - [ ] **Tech stack decision**: Languages, frameworks, libraries; document in ADR
1318
+ - [ ] **Implementation plan**: Define step-by-step tasks, critical logic, edge cases, and technical specs that implementation roles will execute
1301
1319
  - [ ] **Project setup**: Repo structure, tooling, lint, format, CI baseline
1302
1320
  - [ ] **Code review**: Architecture alignment, patterns, test coverage, security
1303
1321
  - [ ] **Security review (Shift Left)**: OWASP Top 10 check, input validation, auth/authz, secrets not hardcoded, dependency audit (npm audit / pip audit / etc.), SAST scan in CI
@@ -1309,9 +1327,11 @@ const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
1309
1327
 
1310
1328
  const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
1311
1329
 
1330
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku) for this role. Implementation is executed from Tech Lead's detailed specs — optimizing cost while maintaining quality through clear instructions.
1331
+
1312
1332
  **Responsibilities**:
1313
- - Implement features per Technical BA spec
1314
- - Write code with Unit Test coverage **≥ 90%**
1333
+ - Implement features per Tech Lead's implementation plan and Technical BA spec
1334
+ - Write code with Unit Test coverage **100%**
1315
1335
  - Follow Tech Lead's tech decisions
1316
1336
 
1317
1337
  ## Detailed tasks
@@ -1319,7 +1339,7 @@ const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
1319
1339
  - [ ] **Read Technical BA spec**: API, schema, team breakdown
1320
1340
  - [ ] **Implement feature**: Code per spec; follow Tech Lead stack. Adhere to: Clean Code, SOLID, DRY, KISS, SoC, LoD, CoI, GRASP, POLS
1321
1341
  - [ ] **Security practices (Shift Left)**: Input validation, parameterized queries, no hardcoded secrets, follow Architect's security ADR
1322
- - [ ] **Unit tests (TDD/BDD)**: Coverage **≥ 90%**; TDD (write tests first) or BDD (behavior specs); edge cases, error paths, BSR (Behavior-Structure-Result)
1342
+ - [ ] **Unit tests (TDD/BDD)**: Coverage **100%**; TDD (write tests first) or BDD (behavior specs); edge cases, error paths, BSR (Behavior-Structure-Result)
1323
1343
  - [ ] **PR**: Lint, tests, security scan passing; request Tech Lead review
1324
1344
  - [ ] **Output**: Code + implementation notes in \`dev/senior-developer/\`
1325
1345
  `;
@@ -1328,6 +1348,15 @@ const DEV_IMPLEMENTATION_ROLES_TEMPLATE = `# Implementation roles by project typ
1328
1348
 
1329
1349
  Use only the roles that apply. Remove or ignore the rest. Tech Lead is cross-cutting; add discipline roles as needed.
1330
1350
 
1351
+ ## Model optimization strategy
1352
+
1353
+ | Role | Model tier | Why |
1354
+ |------|-----------|-----|
1355
+ | Tech Lead | **Highest** (e.g. Opus) | Planning, logic analysis, architecture decisions, code review |
1356
+ | All implementation roles | **Cost-efficient** (e.g. Haiku) | Execute code from Tech Lead's detailed specs |
1357
+
1358
+ Tech Lead defines all critical steps, logic, and specs first → implementation roles execute them. This maximizes quality on thinking while reducing cost on execution.
1359
+
1331
1360
  ## By project type
1332
1361
 
1333
1362
  | Project type | Roles to use (all Senior 10+ except Tech Lead 15+) |
@@ -1356,9 +1385,11 @@ Use only the roles that apply. Remove or ignore the rest. Tech Lead is cross-cut
1356
1385
 
1357
1386
  const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
1358
1387
 
1388
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1389
+
1359
1390
  **Responsibilities**:
1360
1391
  - Implement web UI per design and API contract
1361
- - Unit Test coverage **≥ 90%**
1392
+ - Unit Test coverage **100%**
1362
1393
  - Follow Tech Lead's stack (e.g. React, Vue, Angular)
1363
1394
 
1364
1395
  ## Detailed tasks
@@ -1366,16 +1397,18 @@ const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
1366
1397
  - [ ] **Read Technical BA spec**: API contract, design (if any)
1367
1398
  - [ ] **Implement components/screens**: Per spec; responsive, accessible
1368
1399
  - [ ] **API integration**: Fetch, state, error handling
1369
- - [ ] **Unit tests (TDD/BDD)**: Components, hooks, utils — coverage **≥ 90%**; follow Clean Code, SOLID, DRY, KISS
1400
+ - [ ] **Unit tests (TDD/BDD)**: Components, hooks, utils — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
1370
1401
  - [ ] **PR**: Lint, tests; Tech Lead review
1371
1402
  - [ ] **Output**: Code + component/integration docs in \`dev/frontend/\`
1372
1403
  `;
1373
1404
 
1374
1405
  const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
1375
1406
 
1407
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1408
+
1376
1409
  **Responsibilities**:
1377
1410
  - Implement API, services, DB layer per Technical BA spec
1378
- - Unit Test coverage **≥ 90%**
1411
+ - Unit Test coverage **100%**
1379
1412
  - Follow Tech Lead's stack
1380
1413
 
1381
1414
  ## Detailed tasks
@@ -1383,16 +1416,18 @@ const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
1383
1416
  - [ ] **Read Technical BA spec**: API spec, DB schema
1384
1417
  - [ ] **Implement endpoints**: Per spec; validation, auth, error responses
1385
1418
  - [ ] **Implement DB layer**: Migrations, queries, transactions
1386
- - [ ] **Unit tests (TDD/BDD)**: Services, controllers, DB — coverage **≥ 90%**; follow Clean Code, SOLID, DRY, KISS
1419
+ - [ ] **Unit tests (TDD/BDD)**: Services, controllers, DB — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
1387
1420
  - [ ] **PR**: Lint, tests; Tech Lead review
1388
1421
  - [ ] **Output**: Code + API/DB implementation notes in \`dev/backend/\`
1389
1422
  `;
1390
1423
 
1391
1424
  const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / cross-platform
1392
1425
 
1426
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1427
+
1393
1428
  **Responsibilities**:
1394
1429
  - Implement app UI and API integration per spec
1395
- - Unit Test coverage **≥ 90%**
1430
+ - Unit Test coverage **100%**
1396
1431
  - Follow Tech Lead's stack (e.g. React Native, Flutter, native)
1397
1432
 
1398
1433
  ## Detailed tasks
@@ -1400,13 +1435,15 @@ const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / c
1400
1435
  - [ ] **Read Technical BA spec**: API contract, screen flows
1401
1436
  - [ ] **Implement screens/modules**: Per spec; platform parity (iOS/Android)
1402
1437
  - [ ] **API integration**: Auth, state, offline (if required)
1403
- - [ ] **Unit tests (TDD/BDD)**: Components, logic — coverage **≥ 90%**; follow Clean Code, SOLID, DRY, KISS
1438
+ - [ ] **Unit tests (TDD/BDD)**: Components, logic — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
1404
1439
  - [ ] **PR**: Lint, tests; Tech Lead review
1405
1440
  - [ ] **Output**: Code + screen/module docs in \`dev/mobile/\`
1406
1441
  `;
1407
1442
 
1408
1443
  const DEV_EMBEDDED_README = `# Senior Embedded (10+ years exp) — firmware, IoT
1409
1444
 
1445
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1446
+
1410
1447
  **Responsibilities**:
1411
1448
  - Implement firmware, drivers, hardware interfaces per spec
1412
1449
  - Tests as appropriate for target (unit, HW-in-loop)
@@ -1423,6 +1460,8 @@ const DEV_EMBEDDED_README = `# Senior Embedded (10+ years exp) — firmware, IoT
1423
1460
 
1424
1461
  const DEV_DATA_ML_README = `# Senior Data/ML (10+ years exp)
1425
1462
 
1463
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1464
+
1426
1465
  **Responsibilities**:
1427
1466
  - Implement ETL, models, analytics pipelines per spec
1428
1467
  - Tests and validation for data and model quality
@@ -1440,6 +1479,8 @@ const DEV_DATA_ML_README = `# Senior Data/ML (10+ years exp)
1440
1479
 
1441
1480
  const DEV_PLATFORM_README = `# Senior Platform (10+ years exp) — infra, CI/CD
1442
1481
 
1482
+ > **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
1483
+
1443
1484
  **Responsibilities**:
1444
1485
  - Implement CI/CD, infra as code, observability per spec
1445
1486
  - Follow Tech Lead's stack and security requirements
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sdlc-workflow",
3
- "version": "1.2.2",
3
+ "version": "1.2.6",
4
4
  "description": "Scaffold SDLC workflow docs and templates for Cursor, Claude, and dev teams",
5
5
  "type": "module",
6
6
  "bin": {