sdlc-workflow 1.2.2 → 1.2.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/cli.js +72 -31
- package/package.json +1 -1
package/bin/cli.js
CHANGED
|
@@ -254,14 +254,16 @@ globs: docs/sdlc/**/*, **/*.md
|
|
|
254
254
|
|
|
255
255
|
**On idea/feature request:** Trigger full pipeline (PO → … → Deploy). One role per phase; run phases in sequence. (Single agent = simulate by switching role each phase.) See docs/sdlc/SDLC-WORKFLOW.md and docs/sdlc/agents/.
|
|
256
256
|
|
|
257
|
+
**Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
|
|
258
|
+
|
|
257
259
|
1. **PO** — PRD, user stories → docs/sdlc/po/{epic-slug}/ (one folder per epic)
|
|
258
260
|
2. **Business BA** — FRS, process flows → docs/sdlc/ba/business/{epic-slug}/ (one folder per epic)
|
|
259
261
|
3. **Design (if app/web)** — Design specs + wireframes → docs/sdlc/design/{epic-slug}/; **PO + BA review** → loop until approved
|
|
260
262
|
4. **Architect** — ADRs, diagrams → docs/sdlc/architecture/
|
|
261
263
|
5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
|
|
262
264
|
6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
|
|
263
|
-
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + implementation roles → docs/sdlc/dev/{role}/
|
|
264
|
-
8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
|
|
265
|
+
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + implementation roles (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
|
|
266
|
+
8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
|
|
265
267
|
9. **Security** — Audit security risk → docs/sdlc/security/
|
|
266
268
|
10. **Principle Engineer** — Audit logic, architecture → docs/sdlc/principle-engineer/
|
|
267
269
|
11. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/ (after Security + PE sign-off; fix → retest → re-audit loop until 0 issues)
|
|
@@ -283,8 +285,9 @@ Sequential workflow; **each role runs as a sub-agent**. Each phase produces docs
|
|
|
283
285
|
## Trigger and orchestration (mandatory)
|
|
284
286
|
|
|
285
287
|
**When the user sends an idea, feature request, or new requirement:**
|
|
286
|
-
1. **
|
|
287
|
-
2. **
|
|
288
|
+
1. **Recall memory** — Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
|
|
289
|
+
2. **Trigger the pipeline** and run it **continuously through deployment** (Phase 1 → 2 → … → 7).
|
|
290
|
+
3. **One role per phase.** For each phase, act **only** as that role (e.g. only PO in phase 1, only Business BA in phase 2). Produce that phase's outputs into the correct folder, then **continue to the next phase** without waiting for the user.
|
|
288
291
|
3. **Run in order:** PO → Business BA → **Design (if app/web, PO+BA review loop)** → Architect → Technical BA → QE (docs) → Dev → QE (testing + UAT) → **QE bug-fix loop until 0 bugs → Security + Principle Engineer audit → fix → retest → re-audit loop until 0 issues** → Deploy → Maintenance. Do not stop after one phase unless the user explicitly asks to stop.
|
|
289
292
|
|
|
290
293
|
**Note:** In Cursor and similar tools there is a single agent per conversation. "Sub-agent" means **one role per phase** — the same agent must adopt exactly one role per phase and run phases in sequence (do not mix roles in one step). If the platform later supports spawning separate agents per phase, use that; otherwise this single agent simulates the pipeline by switching role each phase.
|
|
@@ -357,8 +360,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
357
360
|
**Trigger**: After docs are done (Technical BA + QE docs). **Dev runs implementation immediately.**
|
|
358
361
|
|
|
359
362
|
**Roles** (vary by project — use only what applies; see \`docs/sdlc/dev/implementation-roles.template.md\`). All implementation roles are **Senior (10+ yrs)**:
|
|
360
|
-
- **Tech Lead (15+ yrs)
|
|
361
|
-
- **Senior Developer (10+ yrs)
|
|
363
|
+
- **Tech Lead (15+ yrs)** — **highest model** (e.g. Opus): Planning, logic analysis, architecture decisions, tech stack, code review & merge. Docs: \`docs/sdlc/dev/tech-lead/\`
|
|
364
|
+
- **Senior Developer (10+ yrs)** — **cost-efficient model** (e.g. Haiku): Implement per Tech Lead's spec. Docs: \`docs/sdlc/dev/senior-developer/\`
|
|
362
365
|
- **Senior Frontend (10+ yrs)**: Web UI. Docs: \`docs/sdlc/dev/frontend/\`
|
|
363
366
|
- **Senior Backend (10+ yrs)**: API, services. Docs: \`docs/sdlc/dev/backend/\`
|
|
364
367
|
- **Senior Mobile (10+ yrs)**: iOS/Android/cross-platform. Docs: \`docs/sdlc/dev/mobile/\`
|
|
@@ -366,7 +369,9 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
366
369
|
- **Senior Data/ML (10+ yrs)**: ETL, models. Docs: \`docs/sdlc/dev/data-ml/\`
|
|
367
370
|
- **Senior Platform (10+ yrs)**: Infra, CI/CD. Docs: \`docs/sdlc/dev/platform/\`
|
|
368
371
|
|
|
369
|
-
**
|
|
372
|
+
**Model optimization**: Tech Lead uses the **highest-tier model** (e.g. Claude Opus) for planning, architecture decisions, logic analysis, and code review. Implementation roles use a **cost-efficient model** (e.g. Claude Haiku) to execute code from Tech Lead's specs. This maximizes quality on critical thinking while reducing cost on execution.
|
|
373
|
+
|
|
374
|
+
**Requirements**: Unit Test coverage **100%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS.
|
|
370
375
|
|
|
371
376
|
**Output**: Code + unit tests. **Handoff to QE (testing + UAT).**
|
|
372
377
|
|
|
@@ -376,8 +381,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
376
381
|
**Role**: Write and run **automation tests** + **UAT**, sign-off.
|
|
377
382
|
|
|
378
383
|
**Roles**:
|
|
379
|
-
- **QE Lead (15+ yrs automation)
|
|
380
|
-
- **Senior QE (10+ yrs)
|
|
384
|
+
- **QE Lead (15+ yrs automation)** — **highest model** (e.g. Opus): Test strategy, framework choice, automation architecture, review test code. Output per epic: \`docs/sdlc/qe/{epic-slug}/\`
|
|
385
|
+
- **Senior QE (10+ yrs)** — **cost-efficient model** (e.g. Haiku): Write automation tests per QE Lead's strategy. Output per epic: \`docs/sdlc/qe/{epic-slug}/\` (e.g. automation/ or test files there)
|
|
381
386
|
- **UAT**: Verify implementation against original user stories and acceptance criteria from PO.
|
|
382
387
|
|
|
383
388
|
**Bug-fix loop**: If QE finds bugs or test failures → **Dev fixes** → **QE retests**. **Repeat until all tests pass and UAT approved (0 open bugs).** Only then → **Handoff to Security + Principle Engineer.**
|
|
@@ -408,7 +413,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
408
413
|
| 4 | Architect | ADRs, system diagrams, security by design |
|
|
409
414
|
| 5 | Technical BA | API specs, tech breakdown |
|
|
410
415
|
| 6 | QE (docs) | Test plan, test cases |
|
|
411
|
-
| 7 | Dev | Code, unit tests (
|
|
416
|
+
| 7 | Dev | Code, unit tests (100%), security shift-left |
|
|
412
417
|
| 8 | QE (testing + UAT) | Automation, UAT; **bug-fix loop** (QE finds bugs → Dev fix → QE retest) until 0 open bugs |
|
|
413
418
|
| 9 | Security + PE | Audit; **fix → retest → re-audit loop** (Dev fix → QE retest → re-audit) until 0 issues; sign-off → Deploy |
|
|
414
419
|
| 10 | Deploy | Docker Compose + K8s |
|
|
@@ -447,13 +452,13 @@ Design specs (Markdown) + optional HTML wireframes from idea + PO + BA (before A
|
|
|
447
452
|
TC-001: [Scenario] — Precondition, Steps, Expected, Links to AC
|
|
448
453
|
|
|
449
454
|
## QE Team (one folder per epic: qe/{epic-slug}/)
|
|
450
|
-
- QE Lead (15+ yrs automation): test strategy, framework, automation architecture, review → docs/sdlc/qe/{epic-slug}/
|
|
451
|
-
- Senior QE (10+ yrs): write automation tests → docs/sdlc/qe/{epic-slug}/
|
|
455
|
+
- QE Lead (15+ yrs automation) — **highest model** (e.g. Opus): test strategy, framework, automation architecture, review → docs/sdlc/qe/{epic-slug}/
|
|
456
|
+
- Senior QE (10+ yrs) — **cost-efficient model** (e.g. Haiku): write automation tests per QE Lead's strategy → docs/sdlc/qe/{epic-slug}/
|
|
452
457
|
|
|
453
458
|
## Dev Team
|
|
454
|
-
- Tech Lead (15+ yrs):
|
|
455
|
-
- Senior Dev (10+ yrs):
|
|
456
|
-
- By project (all Senior 10+ yrs): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
|
|
459
|
+
- Tech Lead (15+ yrs) — **highest model** (e.g. Opus): planning, logic, architecture decisions, code review → docs/sdlc/dev/tech-lead/
|
|
460
|
+
- Senior Dev (10+ yrs) — **cost-efficient model** (e.g. Haiku): execute code from Tech Lead specs, Unit Test 100% → docs/sdlc/dev/senior-developer/
|
|
461
|
+
- By project (all Senior 10+ yrs, cost-efficient model): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
|
|
457
462
|
|
|
458
463
|
## Security + Principle Engineer (after implementation)
|
|
459
464
|
- Security team: audit security risk → docs/sdlc/security/
|
|
@@ -471,6 +476,8 @@ const AGENTS_MD_CONTENT = `## SDLC Workflow
|
|
|
471
476
|
|
|
472
477
|
**Trigger:** When the user sends an **idea**, **feature request**, or **requirement**, run the full pipeline (Phase 1 → 7) in sequence. One role (sub-agent) per phase; produce outputs then continue to the next. Do not stop after one phase until deployment unless the user asks to stop.
|
|
473
478
|
|
|
479
|
+
**Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
|
|
480
|
+
|
|
474
481
|
When working on requirements, features, or handoffs, follow these phases:
|
|
475
482
|
|
|
476
483
|
1. **PO** — PRD, user stories → docs/sdlc/po/{epic-slug}/ (one folder per epic)
|
|
@@ -479,8 +486,8 @@ When working on requirements, features, or handoffs, follow these phases:
|
|
|
479
486
|
4. **Architect** — ADRs, diagrams → docs/sdlc/architecture/
|
|
480
487
|
5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
|
|
481
488
|
6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
|
|
482
|
-
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + Senior Dev → docs/sdlc/dev/{role}/
|
|
483
|
-
8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
489
|
+
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
|
|
490
|
+
8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
484
491
|
9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
|
|
485
492
|
10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
|
|
486
493
|
11. **Maintenance** — Monitoring, bug fixes, patches, dependency updates → docs/sdlc/maintenance/
|
|
@@ -492,14 +499,16 @@ const CLAUDE_SDLC_CONTENT = `## SDLC Workflow
|
|
|
492
499
|
|
|
493
500
|
**Trigger on idea:** When the user sends an idea, feature request, or requirement, run the pipeline continuously: Phase 1 (PO) → 2 → … → Deploy → Maintenance. One role per phase (single agent = switch role each phase). Do not stop after one phase unless the user asks.
|
|
494
501
|
|
|
502
|
+
**Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
|
|
503
|
+
|
|
495
504
|
1. **PO** — PRD, user stories, feasibility assessment → docs/sdlc/po/{epic-slug}/ (one folder per epic)
|
|
496
505
|
2. **Business BA** — FRS, NFR, process flows → docs/sdlc/ba/business/{epic-slug}/ (one folder per epic)
|
|
497
506
|
3. **Design (if app/web)** — Design specs + wireframes (**Anti AI**: no AI-looking designs) → docs/sdlc/design/{epic-slug}/; **PO + BA review** until approved
|
|
498
507
|
4. **Architect** — ADRs, diagrams, security by design, engineering principles (SOLID, DRY, KISS, CQRS, Zero Trust, EDA, HA) → docs/sdlc/architecture/
|
|
499
508
|
5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
|
|
500
509
|
6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
|
|
501
|
-
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead + Senior Dev → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
|
|
502
|
-
8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
510
|
+
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
|
|
511
|
+
8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
503
512
|
9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
|
|
504
513
|
10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
|
|
505
514
|
11. **Maintenance** — Monitoring, bug fixes, patches, dependency updates → docs/sdlc/maintenance/
|
|
@@ -515,6 +524,7 @@ For Cursor, see .cursor/rules/sdlc-workflow.mdc
|
|
|
515
524
|
## Trigger and orchestration
|
|
516
525
|
|
|
517
526
|
- **When the user sends an idea, feature request, or requirement:** Start the pipeline and run it **continuously through deployment** (Phase 1 → 2 → … → 7). Do not handle everything in one main-agent response.
|
|
527
|
+
- **Memory requirement:** Before executing any new action, recall relevant memories (project context, user preferences, past decisions) to ensure continuity and avoid repeating mistakes.
|
|
518
528
|
- **One role per phase:** Execute each phase as that role only; write artifacts to the right folder; then continue to the next phase. In Cursor there is one agent — it simulates the pipeline by adopting one role per phase in sequence.
|
|
519
529
|
- **Do not stop** after PO or any single phase unless the user explicitly asks to stop. Run through to Deploy.
|
|
520
530
|
|
|
@@ -535,7 +545,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
535
545
|
| 4 | Architect | ADRs, system diagrams, security by design |
|
|
536
546
|
| 5 | Technical BA | API specs, tech breakdown |
|
|
537
547
|
| 6 | QE (docs) | Test plan, test cases |
|
|
538
|
-
| 7 | Dev | Code, unit tests (
|
|
548
|
+
| 7 | Dev | Code, unit tests (100%), security shift-left |
|
|
539
549
|
| 8 | QE (testing + UAT) | Automation, UAT; **bug-fix loop** (QE finds bugs → Dev fix → QE retest) until 0 open bugs |
|
|
540
550
|
| 9 | Security + PE | Audit; **fix → retest → re-audit loop** (Dev fix → QE retest → re-audit) until 0 issues; sign-off → Deploy |
|
|
541
551
|
| 10 | Deploy | Docker Compose + K8s |
|
|
@@ -575,7 +585,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
575
585
|
### Phase 5b: Dev Teams
|
|
576
586
|
- **Tech Lead (15+ yrs)**: Tech stack, review & merge, **security review (Shift Left)**: OWASP check, dependency audit, SAST in CI. Output: \`docs/sdlc/dev/tech-lead/\`
|
|
577
587
|
- **Implementation roles** (all Senior 10+ yrs; use only what applies): Senior Dev, Senior Frontend, Senior Backend, Senior Mobile, Senior Embedded, Senior Data/ML, Senior Platform → \`docs/sdlc/dev/{role}/\`. See \`implementation-roles.template.md\`.
|
|
578
|
-
- **Requirement**: Unit Test coverage
|
|
588
|
+
- **Requirement**: Unit Test coverage **100%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS; security practices (input validation, no hardcoded secrets)
|
|
579
589
|
- **Then**: QE starts testing phase
|
|
580
590
|
|
|
581
591
|
### Phase 6: QE (Testing — automation + UAT) → bug-fix loop
|
|
@@ -665,7 +675,7 @@ Every role in the SDLC runs as a **sub-agent**. Each phase is assigned to a corr
|
|
|
665
675
|
| Technical BA | technical-ba | docs/sdlc/architecture/ + design (if any) | docs/sdlc/ba/technical/ |
|
|
666
676
|
| QE (docs) | qe-docs | docs/sdlc/ba/technical/ (+ design if any) | docs/sdlc/qe/{epic-slug}/ (one folder per epic) |
|
|
667
677
|
| Tech Lead | tech-lead | Technical spec | Review, merge, docs/sdlc/dev/tech-lead/ |
|
|
668
|
-
| Senior Dev | senior-dev | Spec + test plan | After docs → run implementation immediately. Code, unit tests (
|
|
678
|
+
| Senior Dev | senior-dev | Spec + test plan | After docs → run implementation immediately. Code, unit tests (100%) |
|
|
669
679
|
| Senior Frontend | frontend | UI spec, API contract | Web UI, docs/sdlc/dev/frontend/ |
|
|
670
680
|
| Senior Backend | backend | API spec, DB schema | API, services, docs/sdlc/dev/backend/ |
|
|
671
681
|
| Senior Mobile | mobile | API contract, design | App (iOS/Android), docs/sdlc/dev/mobile/ |
|
|
@@ -1142,6 +1152,8 @@ Use test-case.template.md for test cases.
|
|
|
1142
1152
|
|
|
1143
1153
|
const QE_LEAD_README = `# QE Lead (15+ years exp in test automation)
|
|
1144
1154
|
|
|
1155
|
+
> **Model**: Use the **highest-tier model** (e.g. Claude Opus) for this role. QE Lead handles test strategy, framework decisions, automation architecture, and review — tasks that require maximum reasoning capability.
|
|
1156
|
+
|
|
1145
1157
|
**Profile**: 15+ years of experience in test automation, test strategy, and quality engineering. Owns test automation strategy, framework selection, and quality gates across the project.
|
|
1146
1158
|
|
|
1147
1159
|
**Responsibilities**:
|
|
@@ -1165,6 +1177,8 @@ const QE_LEAD_README = `# QE Lead (15+ years exp in test automation)
|
|
|
1165
1177
|
|
|
1166
1178
|
const QE_SENIOR_README = `# Senior QE (10+ years exp)
|
|
1167
1179
|
|
|
1180
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute test implementation from QE Lead's strategy and specs.
|
|
1181
|
+
|
|
1168
1182
|
**Responsibilities**:
|
|
1169
1183
|
- Write automation tests per test plan
|
|
1170
1184
|
- Implement E2E, integration, regression tests
|
|
@@ -1289,8 +1303,11 @@ App
|
|
|
1289
1303
|
|
|
1290
1304
|
const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
|
|
1291
1305
|
|
|
1306
|
+
> **Model**: Use the **highest-tier model** (e.g. Claude Opus) for this role. Tech Lead handles planning, logic analysis, architecture decisions, and code review — tasks that require maximum reasoning capability.
|
|
1307
|
+
|
|
1292
1308
|
**Responsibilities**:
|
|
1293
1309
|
- Decide tech stack, frameworks, libraries
|
|
1310
|
+
- Define implementation plan, critical logic, and technical specs for implementation roles
|
|
1294
1311
|
- Review and merge code
|
|
1295
1312
|
- Ensure architecture alignment
|
|
1296
1313
|
|
|
@@ -1298,6 +1315,7 @@ const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
|
|
|
1298
1315
|
|
|
1299
1316
|
- [ ] **Read architecture and Technical BA spec**: ADRs, API spec, team breakdown
|
|
1300
1317
|
- [ ] **Tech stack decision**: Languages, frameworks, libraries; document in ADR
|
|
1318
|
+
- [ ] **Implementation plan**: Define step-by-step tasks, critical logic, edge cases, and technical specs that implementation roles will execute
|
|
1301
1319
|
- [ ] **Project setup**: Repo structure, tooling, lint, format, CI baseline
|
|
1302
1320
|
- [ ] **Code review**: Architecture alignment, patterns, test coverage, security
|
|
1303
1321
|
- [ ] **Security review (Shift Left)**: OWASP Top 10 check, input validation, auth/authz, secrets not hardcoded, dependency audit (npm audit / pip audit / etc.), SAST scan in CI
|
|
@@ -1309,9 +1327,11 @@ const DEV_TECH_LEAD_README = `# Tech Lead (15+ years exp)
|
|
|
1309
1327
|
|
|
1310
1328
|
const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
|
|
1311
1329
|
|
|
1330
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku) for this role. Implementation is executed from Tech Lead's detailed specs — optimizing cost while maintaining quality through clear instructions.
|
|
1331
|
+
|
|
1312
1332
|
**Responsibilities**:
|
|
1313
|
-
- Implement features per Technical BA spec
|
|
1314
|
-
- Write code with Unit Test coverage
|
|
1333
|
+
- Implement features per Tech Lead's implementation plan and Technical BA spec
|
|
1334
|
+
- Write code with Unit Test coverage **100%**
|
|
1315
1335
|
- Follow Tech Lead's tech decisions
|
|
1316
1336
|
|
|
1317
1337
|
## Detailed tasks
|
|
@@ -1319,7 +1339,7 @@ const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
|
|
|
1319
1339
|
- [ ] **Read Technical BA spec**: API, schema, team breakdown
|
|
1320
1340
|
- [ ] **Implement feature**: Code per spec; follow Tech Lead stack. Adhere to: Clean Code, SOLID, DRY, KISS, SoC, LoD, CoI, GRASP, POLS
|
|
1321
1341
|
- [ ] **Security practices (Shift Left)**: Input validation, parameterized queries, no hardcoded secrets, follow Architect's security ADR
|
|
1322
|
-
- [ ] **Unit tests (TDD/BDD)**: Coverage
|
|
1342
|
+
- [ ] **Unit tests (TDD/BDD)**: Coverage **100%**; TDD (write tests first) or BDD (behavior specs); edge cases, error paths, BSR (Behavior-Structure-Result)
|
|
1323
1343
|
- [ ] **PR**: Lint, tests, security scan passing; request Tech Lead review
|
|
1324
1344
|
- [ ] **Output**: Code + implementation notes in \`dev/senior-developer/\`
|
|
1325
1345
|
`;
|
|
@@ -1328,6 +1348,15 @@ const DEV_IMPLEMENTATION_ROLES_TEMPLATE = `# Implementation roles by project typ
|
|
|
1328
1348
|
|
|
1329
1349
|
Use only the roles that apply. Remove or ignore the rest. Tech Lead is cross-cutting; add discipline roles as needed.
|
|
1330
1350
|
|
|
1351
|
+
## Model optimization strategy
|
|
1352
|
+
|
|
1353
|
+
| Role | Model tier | Why |
|
|
1354
|
+
|------|-----------|-----|
|
|
1355
|
+
| Tech Lead | **Highest** (e.g. Opus) | Planning, logic analysis, architecture decisions, code review |
|
|
1356
|
+
| All implementation roles | **Cost-efficient** (e.g. Haiku) | Execute code from Tech Lead's detailed specs |
|
|
1357
|
+
|
|
1358
|
+
Tech Lead defines all critical steps, logic, and specs first → implementation roles execute them. This maximizes quality on thinking while reducing cost on execution.
|
|
1359
|
+
|
|
1331
1360
|
## By project type
|
|
1332
1361
|
|
|
1333
1362
|
| Project type | Roles to use (all Senior 10+ except Tech Lead 15+) |
|
|
@@ -1356,9 +1385,11 @@ Use only the roles that apply. Remove or ignore the rest. Tech Lead is cross-cut
|
|
|
1356
1385
|
|
|
1357
1386
|
const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
|
|
1358
1387
|
|
|
1388
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
|
|
1389
|
+
|
|
1359
1390
|
**Responsibilities**:
|
|
1360
1391
|
- Implement web UI per design and API contract
|
|
1361
|
-
- Unit Test coverage
|
|
1392
|
+
- Unit Test coverage **100%**
|
|
1362
1393
|
- Follow Tech Lead's stack (e.g. React, Vue, Angular)
|
|
1363
1394
|
|
|
1364
1395
|
## Detailed tasks
|
|
@@ -1366,16 +1397,18 @@ const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
|
|
|
1366
1397
|
- [ ] **Read Technical BA spec**: API contract, design (if any)
|
|
1367
1398
|
- [ ] **Implement components/screens**: Per spec; responsive, accessible
|
|
1368
1399
|
- [ ] **API integration**: Fetch, state, error handling
|
|
1369
|
-
- [ ] **Unit tests (TDD/BDD)**: Components, hooks, utils — coverage
|
|
1400
|
+
- [ ] **Unit tests (TDD/BDD)**: Components, hooks, utils — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
|
|
1370
1401
|
- [ ] **PR**: Lint, tests; Tech Lead review
|
|
1371
1402
|
- [ ] **Output**: Code + component/integration docs in \`dev/frontend/\`
|
|
1372
1403
|
`;
|
|
1373
1404
|
|
|
1374
1405
|
const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
|
|
1375
1406
|
|
|
1407
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
|
|
1408
|
+
|
|
1376
1409
|
**Responsibilities**:
|
|
1377
1410
|
- Implement API, services, DB layer per Technical BA spec
|
|
1378
|
-
- Unit Test coverage
|
|
1411
|
+
- Unit Test coverage **100%**
|
|
1379
1412
|
- Follow Tech Lead's stack
|
|
1380
1413
|
|
|
1381
1414
|
## Detailed tasks
|
|
@@ -1383,16 +1416,18 @@ const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
|
|
|
1383
1416
|
- [ ] **Read Technical BA spec**: API spec, DB schema
|
|
1384
1417
|
- [ ] **Implement endpoints**: Per spec; validation, auth, error responses
|
|
1385
1418
|
- [ ] **Implement DB layer**: Migrations, queries, transactions
|
|
1386
|
-
- [ ] **Unit tests (TDD/BDD)**: Services, controllers, DB — coverage
|
|
1419
|
+
- [ ] **Unit tests (TDD/BDD)**: Services, controllers, DB — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
|
|
1387
1420
|
- [ ] **PR**: Lint, tests; Tech Lead review
|
|
1388
1421
|
- [ ] **Output**: Code + API/DB implementation notes in \`dev/backend/\`
|
|
1389
1422
|
`;
|
|
1390
1423
|
|
|
1391
1424
|
const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / cross-platform
|
|
1392
1425
|
|
|
1426
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
|
|
1427
|
+
|
|
1393
1428
|
**Responsibilities**:
|
|
1394
1429
|
- Implement app UI and API integration per spec
|
|
1395
|
-
- Unit Test coverage
|
|
1430
|
+
- Unit Test coverage **100%**
|
|
1396
1431
|
- Follow Tech Lead's stack (e.g. React Native, Flutter, native)
|
|
1397
1432
|
|
|
1398
1433
|
## Detailed tasks
|
|
@@ -1400,13 +1435,15 @@ const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / c
|
|
|
1400
1435
|
- [ ] **Read Technical BA spec**: API contract, screen flows
|
|
1401
1436
|
- [ ] **Implement screens/modules**: Per spec; platform parity (iOS/Android)
|
|
1402
1437
|
- [ ] **API integration**: Auth, state, offline (if required)
|
|
1403
|
-
- [ ] **Unit tests (TDD/BDD)**: Components, logic — coverage
|
|
1438
|
+
- [ ] **Unit tests (TDD/BDD)**: Components, logic — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
|
|
1404
1439
|
- [ ] **PR**: Lint, tests; Tech Lead review
|
|
1405
1440
|
- [ ] **Output**: Code + screen/module docs in \`dev/mobile/\`
|
|
1406
1441
|
`;
|
|
1407
1442
|
|
|
1408
1443
|
const DEV_EMBEDDED_README = `# Senior Embedded (10+ years exp) — firmware, IoT
|
|
1409
1444
|
|
|
1445
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
|
|
1446
|
+
|
|
1410
1447
|
**Responsibilities**:
|
|
1411
1448
|
- Implement firmware, drivers, hardware interfaces per spec
|
|
1412
1449
|
- Tests as appropriate for target (unit, HW-in-loop)
|
|
@@ -1423,6 +1460,8 @@ const DEV_EMBEDDED_README = `# Senior Embedded (10+ years exp) — firmware, IoT
|
|
|
1423
1460
|
|
|
1424
1461
|
const DEV_DATA_ML_README = `# Senior Data/ML (10+ years exp)
|
|
1425
1462
|
|
|
1463
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
|
|
1464
|
+
|
|
1426
1465
|
**Responsibilities**:
|
|
1427
1466
|
- Implement ETL, models, analytics pipelines per spec
|
|
1428
1467
|
- Tests and validation for data and model quality
|
|
@@ -1440,6 +1479,8 @@ const DEV_DATA_ML_README = `# Senior Data/ML (10+ years exp)
|
|
|
1440
1479
|
|
|
1441
1480
|
const DEV_PLATFORM_README = `# Senior Platform (10+ years exp) — infra, CI/CD
|
|
1442
1481
|
|
|
1482
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute from Tech Lead's specs.
|
|
1483
|
+
|
|
1443
1484
|
**Responsibilities**:
|
|
1444
1485
|
- Implement CI/CD, infra as code, observability per spec
|
|
1445
1486
|
- Follow Tech Lead's stack and security requirements
|