sdlc-workflow 1.2.3 → 1.2.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/cli.js +25 -21
- package/package.json +1 -1
package/bin/cli.js
CHANGED
|
@@ -263,7 +263,7 @@ globs: docs/sdlc/**/*, **/*.md
|
|
|
263
263
|
5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
|
|
264
264
|
6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
|
|
265
265
|
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + implementation roles (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
|
|
266
|
-
8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
|
|
266
|
+
8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/
|
|
267
267
|
9. **Security** — Audit security risk → docs/sdlc/security/
|
|
268
268
|
10. **Principle Engineer** — Audit logic, architecture → docs/sdlc/principle-engineer/
|
|
269
269
|
11. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/ (after Security + PE sign-off; fix → retest → re-audit loop until 0 issues)
|
|
@@ -371,7 +371,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
371
371
|
|
|
372
372
|
**Model optimization**: Tech Lead uses the **highest-tier model** (e.g. Claude Opus) for planning, architecture decisions, logic analysis, and code review. Implementation roles use a **cost-efficient model** (e.g. Claude Haiku) to execute code from Tech Lead's specs. This maximizes quality on critical thinking while reducing cost on execution.
|
|
373
373
|
|
|
374
|
-
**Requirements**: Unit Test coverage
|
|
374
|
+
**Requirements**: Unit Test coverage **100%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS.
|
|
375
375
|
|
|
376
376
|
**Output**: Code + unit tests. **Handoff to QE (testing + UAT).**
|
|
377
377
|
|
|
@@ -381,8 +381,8 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
381
381
|
**Role**: Write and run **automation tests** + **UAT**, sign-off.
|
|
382
382
|
|
|
383
383
|
**Roles**:
|
|
384
|
-
- **QE Lead (15+ yrs automation)
|
|
385
|
-
- **Senior QE (10+ yrs)
|
|
384
|
+
- **QE Lead (15+ yrs automation)** — **highest model** (e.g. Opus): Test strategy, framework choice, automation architecture, review test code. Output per epic: \`docs/sdlc/qe/{epic-slug}/\`
|
|
385
|
+
- **Senior QE (10+ yrs)** — **cost-efficient model** (e.g. Haiku): Write automation tests per QE Lead's strategy. Output per epic: \`docs/sdlc/qe/{epic-slug}/\` (e.g. automation/ or test files there)
|
|
386
386
|
- **UAT**: Verify implementation against original user stories and acceptance criteria from PO.
|
|
387
387
|
|
|
388
388
|
**Bug-fix loop**: If QE finds bugs or test failures → **Dev fixes** → **QE retests**. **Repeat until all tests pass and UAT approved (0 open bugs).** Only then → **Handoff to Security + Principle Engineer.**
|
|
@@ -413,7 +413,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
413
413
|
| 4 | Architect | ADRs, system diagrams, security by design |
|
|
414
414
|
| 5 | Technical BA | API specs, tech breakdown |
|
|
415
415
|
| 6 | QE (docs) | Test plan, test cases |
|
|
416
|
-
| 7 | Dev | Code, unit tests (
|
|
416
|
+
| 7 | Dev | Code, unit tests (100%), security shift-left |
|
|
417
417
|
| 8 | QE (testing + UAT) | Automation, UAT; **bug-fix loop** (QE finds bugs → Dev fix → QE retest) until 0 open bugs |
|
|
418
418
|
| 9 | Security + PE | Audit; **fix → retest → re-audit loop** (Dev fix → QE retest → re-audit) until 0 issues; sign-off → Deploy |
|
|
419
419
|
| 10 | Deploy | Docker Compose + K8s |
|
|
@@ -452,12 +452,12 @@ Design specs (Markdown) + optional HTML wireframes from idea + PO + BA (before A
|
|
|
452
452
|
TC-001: [Scenario] — Precondition, Steps, Expected, Links to AC
|
|
453
453
|
|
|
454
454
|
## QE Team (one folder per epic: qe/{epic-slug}/)
|
|
455
|
-
- QE Lead (15+ yrs automation): test strategy, framework, automation architecture, review → docs/sdlc/qe/{epic-slug}/
|
|
456
|
-
- Senior QE (10+ yrs): write automation tests → docs/sdlc/qe/{epic-slug}/
|
|
455
|
+
- QE Lead (15+ yrs automation) — **highest model** (e.g. Opus): test strategy, framework, automation architecture, review → docs/sdlc/qe/{epic-slug}/
|
|
456
|
+
- Senior QE (10+ yrs) — **cost-efficient model** (e.g. Haiku): write automation tests per QE Lead's strategy → docs/sdlc/qe/{epic-slug}/
|
|
457
457
|
|
|
458
458
|
## Dev Team
|
|
459
459
|
- Tech Lead (15+ yrs) — **highest model** (e.g. Opus): planning, logic, architecture decisions, code review → docs/sdlc/dev/tech-lead/
|
|
460
|
-
- Senior Dev (10+ yrs) — **cost-efficient model** (e.g. Haiku): execute code from Tech Lead specs, Unit Test
|
|
460
|
+
- Senior Dev (10+ yrs) — **cost-efficient model** (e.g. Haiku): execute code from Tech Lead specs, Unit Test 100% → docs/sdlc/dev/senior-developer/
|
|
461
461
|
- By project (all Senior 10+ yrs, cost-efficient model): Senior Frontend, Backend, Mobile, Embedded, Data/ML, Platform → docs/sdlc/dev/{role}/
|
|
462
462
|
|
|
463
463
|
## Security + Principle Engineer (after implementation)
|
|
@@ -487,7 +487,7 @@ When working on requirements, features, or handoffs, follow these phases:
|
|
|
487
487
|
5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
|
|
488
488
|
6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
|
|
489
489
|
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/
|
|
490
|
-
8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
490
|
+
8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
491
491
|
9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
|
|
492
492
|
10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
|
|
493
493
|
11. **Maintenance** — Monitoring, bug fixes, patches, dependency updates → docs/sdlc/maintenance/
|
|
@@ -508,7 +508,7 @@ const CLAUDE_SDLC_CONTENT = `## SDLC Workflow
|
|
|
508
508
|
5. **Technical BA** — API specs, team breakdown → docs/sdlc/ba/technical/
|
|
509
509
|
6. **QE (docs)** — Test plan, test cases → docs/sdlc/qe/{epic-slug}/ (one folder per epic)
|
|
510
510
|
7. **Dev** — After docs phase → **run implementation immediately**. Tech Lead (highest model: planning, logic, review) + Senior Dev (cost-efficient model: code execution) → docs/sdlc/dev/{role}/. Clean Code, SOLID, DRY, KISS, TDD/BDD. Security shift-left: OWASP checks, dependency audit in CI
|
|
511
|
-
8. **QE (testing + UAT)** — QE Lead + Senior QE + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
511
|
+
8. **QE (testing + UAT)** — QE Lead (highest model: strategy, review) + Senior QE (cost-efficient model: test execution) + UAT; **bug-fix loop** (bugs → Dev fix → QE retest) until 0 bugs → docs/sdlc/qe/{epic-slug}/ (same folder per epic)
|
|
512
512
|
9. **Security + Principle Engineer** — Security + logic audit; **fix → retest → re-audit loop** (Dev fixes → QE retests → re-audit) until 0 issues; sign-off before Deploy
|
|
513
513
|
10. **Deploy** — Docker Compose + K8s → docs/sdlc/deploy/
|
|
514
514
|
11. **Maintenance** — Monitoring, bug fixes, patches, dependency updates → docs/sdlc/maintenance/
|
|
@@ -545,7 +545,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
545
545
|
| 4 | Architect | ADRs, system diagrams, security by design |
|
|
546
546
|
| 5 | Technical BA | API specs, tech breakdown |
|
|
547
547
|
| 6 | QE (docs) | Test plan, test cases |
|
|
548
|
-
| 7 | Dev | Code, unit tests (
|
|
548
|
+
| 7 | Dev | Code, unit tests (100%), security shift-left |
|
|
549
549
|
| 8 | QE (testing + UAT) | Automation, UAT; **bug-fix loop** (QE finds bugs → Dev fix → QE retest) until 0 open bugs |
|
|
550
550
|
| 9 | Security + PE | Audit; **fix → retest → re-audit loop** (Dev fix → QE retest → re-audit) until 0 issues; sign-off → Deploy |
|
|
551
551
|
| 10 | Deploy | Docker Compose + K8s |
|
|
@@ -585,7 +585,7 @@ User Request → PO → Business BA → Design (if app/web) → Architect → Te
|
|
|
585
585
|
### Phase 5b: Dev Teams
|
|
586
586
|
- **Tech Lead (15+ yrs)**: Tech stack, review & merge, **security review (Shift Left)**: OWASP check, dependency audit, SAST in CI. Output: \`docs/sdlc/dev/tech-lead/\`
|
|
587
587
|
- **Implementation roles** (all Senior 10+ yrs; use only what applies): Senior Dev, Senior Frontend, Senior Backend, Senior Mobile, Senior Embedded, Senior Data/ML, Senior Platform → \`docs/sdlc/dev/{role}/\`. See \`implementation-roles.template.md\`.
|
|
588
|
-
- **Requirement**: Unit Test coverage
|
|
588
|
+
- **Requirement**: Unit Test coverage **100%** (TDD/BDD); Clean Code, SOLID, DRY, KISS, SoC, POLS; security practices (input validation, no hardcoded secrets)
|
|
589
589
|
- **Then**: QE starts testing phase
|
|
590
590
|
|
|
591
591
|
### Phase 6: QE (Testing — automation + UAT) → bug-fix loop
|
|
@@ -675,7 +675,7 @@ Every role in the SDLC runs as a **sub-agent**. Each phase is assigned to a corr
|
|
|
675
675
|
| Technical BA | technical-ba | docs/sdlc/architecture/ + design (if any) | docs/sdlc/ba/technical/ |
|
|
676
676
|
| QE (docs) | qe-docs | docs/sdlc/ba/technical/ (+ design if any) | docs/sdlc/qe/{epic-slug}/ (one folder per epic) |
|
|
677
677
|
| Tech Lead | tech-lead | Technical spec | Review, merge, docs/sdlc/dev/tech-lead/ |
|
|
678
|
-
| Senior Dev | senior-dev | Spec + test plan | After docs → run implementation immediately. Code, unit tests (
|
|
678
|
+
| Senior Dev | senior-dev | Spec + test plan | After docs → run implementation immediately. Code, unit tests (100%) |
|
|
679
679
|
| Senior Frontend | frontend | UI spec, API contract | Web UI, docs/sdlc/dev/frontend/ |
|
|
680
680
|
| Senior Backend | backend | API spec, DB schema | API, services, docs/sdlc/dev/backend/ |
|
|
681
681
|
| Senior Mobile | mobile | API contract, design | App (iOS/Android), docs/sdlc/dev/mobile/ |
|
|
@@ -1152,6 +1152,8 @@ Use test-case.template.md for test cases.
|
|
|
1152
1152
|
|
|
1153
1153
|
const QE_LEAD_README = `# QE Lead (15+ years exp in test automation)
|
|
1154
1154
|
|
|
1155
|
+
> **Model**: Use the **highest-tier model** (e.g. Claude Opus) for this role. QE Lead handles test strategy, framework decisions, automation architecture, and review — tasks that require maximum reasoning capability.
|
|
1156
|
+
|
|
1155
1157
|
**Profile**: 15+ years of experience in test automation, test strategy, and quality engineering. Owns test automation strategy, framework selection, and quality gates across the project.
|
|
1156
1158
|
|
|
1157
1159
|
**Responsibilities**:
|
|
@@ -1175,6 +1177,8 @@ const QE_LEAD_README = `# QE Lead (15+ years exp in test automation)
|
|
|
1175
1177
|
|
|
1176
1178
|
const QE_SENIOR_README = `# Senior QE (10+ years exp)
|
|
1177
1179
|
|
|
1180
|
+
> **Model**: Use a **cost-efficient model** (e.g. Claude Haiku). Execute test implementation from QE Lead's strategy and specs.
|
|
1181
|
+
|
|
1178
1182
|
**Responsibilities**:
|
|
1179
1183
|
- Write automation tests per test plan
|
|
1180
1184
|
- Implement E2E, integration, regression tests
|
|
@@ -1327,7 +1331,7 @@ const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
|
|
|
1327
1331
|
|
|
1328
1332
|
**Responsibilities**:
|
|
1329
1333
|
- Implement features per Tech Lead's implementation plan and Technical BA spec
|
|
1330
|
-
- Write code with Unit Test coverage
|
|
1334
|
+
- Write code with Unit Test coverage **100%**
|
|
1331
1335
|
- Follow Tech Lead's tech decisions
|
|
1332
1336
|
|
|
1333
1337
|
## Detailed tasks
|
|
@@ -1335,7 +1339,7 @@ const DEV_SENIOR_README = `# Senior Developer (10+ years exp)
|
|
|
1335
1339
|
- [ ] **Read Technical BA spec**: API, schema, team breakdown
|
|
1336
1340
|
- [ ] **Implement feature**: Code per spec; follow Tech Lead stack. Adhere to: Clean Code, SOLID, DRY, KISS, SoC, LoD, CoI, GRASP, POLS
|
|
1337
1341
|
- [ ] **Security practices (Shift Left)**: Input validation, parameterized queries, no hardcoded secrets, follow Architect's security ADR
|
|
1338
|
-
- [ ] **Unit tests (TDD/BDD)**: Coverage
|
|
1342
|
+
- [ ] **Unit tests (TDD/BDD)**: Coverage **100%**; TDD (write tests first) or BDD (behavior specs); edge cases, error paths, BSR (Behavior-Structure-Result)
|
|
1339
1343
|
- [ ] **PR**: Lint, tests, security scan passing; request Tech Lead review
|
|
1340
1344
|
- [ ] **Output**: Code + implementation notes in \`dev/senior-developer/\`
|
|
1341
1345
|
`;
|
|
@@ -1385,7 +1389,7 @@ const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
|
|
|
1385
1389
|
|
|
1386
1390
|
**Responsibilities**:
|
|
1387
1391
|
- Implement web UI per design and API contract
|
|
1388
|
-
- Unit Test coverage
|
|
1392
|
+
- Unit Test coverage **100%**
|
|
1389
1393
|
- Follow Tech Lead's stack (e.g. React, Vue, Angular)
|
|
1390
1394
|
|
|
1391
1395
|
## Detailed tasks
|
|
@@ -1393,7 +1397,7 @@ const DEV_FRONTEND_README = `# Senior Frontend (10+ years exp) — Web UI
|
|
|
1393
1397
|
- [ ] **Read Technical BA spec**: API contract, design (if any)
|
|
1394
1398
|
- [ ] **Implement components/screens**: Per spec; responsive, accessible
|
|
1395
1399
|
- [ ] **API integration**: Fetch, state, error handling
|
|
1396
|
-
- [ ] **Unit tests (TDD/BDD)**: Components, hooks, utils — coverage
|
|
1400
|
+
- [ ] **Unit tests (TDD/BDD)**: Components, hooks, utils — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
|
|
1397
1401
|
- [ ] **PR**: Lint, tests; Tech Lead review
|
|
1398
1402
|
- [ ] **Output**: Code + component/integration docs in \`dev/frontend/\`
|
|
1399
1403
|
`;
|
|
@@ -1404,7 +1408,7 @@ const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
|
|
|
1404
1408
|
|
|
1405
1409
|
**Responsibilities**:
|
|
1406
1410
|
- Implement API, services, DB layer per Technical BA spec
|
|
1407
|
-
- Unit Test coverage
|
|
1411
|
+
- Unit Test coverage **100%**
|
|
1408
1412
|
- Follow Tech Lead's stack
|
|
1409
1413
|
|
|
1410
1414
|
## Detailed tasks
|
|
@@ -1412,7 +1416,7 @@ const DEV_BACKEND_README = `# Senior Backend (10+ years exp) — API, services
|
|
|
1412
1416
|
- [ ] **Read Technical BA spec**: API spec, DB schema
|
|
1413
1417
|
- [ ] **Implement endpoints**: Per spec; validation, auth, error responses
|
|
1414
1418
|
- [ ] **Implement DB layer**: Migrations, queries, transactions
|
|
1415
|
-
- [ ] **Unit tests (TDD/BDD)**: Services, controllers, DB — coverage
|
|
1419
|
+
- [ ] **Unit tests (TDD/BDD)**: Services, controllers, DB — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
|
|
1416
1420
|
- [ ] **PR**: Lint, tests; Tech Lead review
|
|
1417
1421
|
- [ ] **Output**: Code + API/DB implementation notes in \`dev/backend/\`
|
|
1418
1422
|
`;
|
|
@@ -1423,7 +1427,7 @@ const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / c
|
|
|
1423
1427
|
|
|
1424
1428
|
**Responsibilities**:
|
|
1425
1429
|
- Implement app UI and API integration per spec
|
|
1426
|
-
- Unit Test coverage
|
|
1430
|
+
- Unit Test coverage **100%**
|
|
1427
1431
|
- Follow Tech Lead's stack (e.g. React Native, Flutter, native)
|
|
1428
1432
|
|
|
1429
1433
|
## Detailed tasks
|
|
@@ -1431,7 +1435,7 @@ const DEV_MOBILE_README = `# Senior Mobile (10+ years exp) — iOS / Android / c
|
|
|
1431
1435
|
- [ ] **Read Technical BA spec**: API contract, screen flows
|
|
1432
1436
|
- [ ] **Implement screens/modules**: Per spec; platform parity (iOS/Android)
|
|
1433
1437
|
- [ ] **API integration**: Auth, state, offline (if required)
|
|
1434
|
-
- [ ] **Unit tests (TDD/BDD)**: Components, logic — coverage
|
|
1438
|
+
- [ ] **Unit tests (TDD/BDD)**: Components, logic — coverage **100%**; follow Clean Code, SOLID, DRY, KISS
|
|
1435
1439
|
- [ ] **PR**: Lint, tests; Tech Lead review
|
|
1436
1440
|
- [ ] **Output**: Code + screen/module docs in \`dev/mobile/\`
|
|
1437
1441
|
`;
|