timsquad 2.0.0 → 3.3.0

package/templates/project-types/api-backend/config.yaml

@@ -0,0 +1,227 @@
+# TimSquad API Backend 프로젝트 설정
+# API 서버, 마이크로서비스 전용
+
+type: api-backend
+description: "API 서버, 마이크로서비스, REST/GraphQL 백엔드"
+
+# ============================================================
+# 에이전트 설정
+# ============================================================
+agents:
+  # Planner는 API 설계에 집중
+  planner:
+    model: opus
+    focus:
+      - api_design
+      - data_modeling
+      - error_handling
+    ssot_priority:
+      - service-spec.md
+      - data-design.md
+      - error-codes.md
+
+  # Developer는 백엔드 구현
+  developer:
+    model: sonnet
+    skills:
+      - coding
+      - testing
+      - backend/node  # 또는 적절한 백엔드 기술
+    focus:
+      - api_implementation
+      - database_queries
+      - validation
+
+  # DBA는 필수
+  dba:
+    model: sonnet
+    required: true
+    focus:
+      - schema_design
+      - query_optimization
+      - migration
+
+  # QA는 API 테스트에 집중
+  qa:
+    model: sonnet
+    focus:
+      - api_testing
+      - integration_testing
+      - load_testing
+
+  # Security 검토 권장
+  security:
+    model: sonnet
+    recommended: true
+    focus:
+      - authentication
+      - authorization
+      - input_validation
+
+# ============================================================
+# SSOT 문서 설정
+# ============================================================
+ssot:
+  required:
+    - prd.md
+    - planning.md
+    - requirements.md
+    - service-spec.md      # API 명세 필수
+    - data-design.md       # 데이터 설계 필수
+    - error-codes.md       # 에러 코드 필수
+
+  recommended:
+    - glossary.md
+    - test-spec.md
+    - env-config.md
+
+  optional:
+    - ui-ux-spec.md        # API만이므로 불필요
+    - deployment-spec.md
+    - integration-spec.md
+
+# ============================================================
+# 워크플로우 설정
+# ============================================================
+workflow:
+  phases:
+    planning:
+      focus:
+        - API 명세 설계
+        - 데이터 모델링
+        - 에러 코드 정의
+      deliverables:
+        - service-spec.md
+        - data-design.md
+        - error-codes.md
+
+    implementation:
+      focus:
+        - API 엔드포인트 구현
+        - 데이터베이스 마이그레이션
+        - 비즈니스 로직
+      parallel_allowed: true
+      validation:
+        - api_contract_test
+        - schema_validation
+
+    testing:
+      focus:
+        - 단위 테스트
+        - 통합 테스트
+        - API 계약 테스트
+      coverage_target: 80
+
+    review:
+      checklist:
+        - API 응답 형식 일관성
+        - 에러 처리 완전성
+        - 성능 (응답 시간)
+        - 보안 (인증/인가)
+
+# ============================================================
+# 코딩 규칙
+# ============================================================
+coding:
+  api:
+    # REST API 규칙
+    rest:
+      versioning: url  # /api/v1/
+      naming: kebab-case
+      response_format:
+        success: |
+          {
+            "success": true,
+            "data": { ... }
+          }
+        error: |
+          {
+            "success": false,
+            "error": {
+              "code": "ERR_CODE",
+              "message": "Human readable message"
+            }
+          }
+
+    # 상태 코드
+    http_status:
+      success: [200, 201, 204]
+      client_error: [400, 401, 403, 404, 409, 422]
+      server_error: [500, 502, 503]
+
+  database:
+    # ORM 사용 권장
+    orm_required: true
+    # 마이그레이션 필수
+    migration_required: true
+    # 트랜잭션 처리
+    transaction_policy: "explicit"
+
+  validation:
+    # 입력 검증 필수
+    input_validation: required
+    # 스키마 검증 도구
+    schema_validation: "zod"  # 또는 joi, yup
+
+# ============================================================
+# 테스트 규칙
+# ============================================================
+testing:
+  required:
+    - unit
+    - integration
+    - api_contract
+
+  optional:
+    - e2e
+    - load
+    - security
+
+  coverage:
+    minimum: 80
+    branches: 70
+
+  api_testing:
+    tools: ["supertest", "jest"]
+    mock_external: true
+
+# ============================================================
+# 보안 규칙
+# ============================================================
+security:
+  authentication:
+    methods: ["jwt", "api_key"]
+    token_expiry: "15m"
+    refresh_token: true
+
+  authorization:
+    model: "rbac"  # Role-Based Access Control
+
+  input:
+    sanitize: true
+    validate: true
+    rate_limit: true
+
+  headers:
+    required:
+      - "Content-Security-Policy"
+      - "X-Content-Type-Options"
+      - "X-Frame-Options"
+
+# ============================================================
+# 성능 기준
+# ============================================================
+performance:
+  response_time:
+    p50: "100ms"
+    p95: "500ms"
+    p99: "1s"
+
+  throughput:
+    minimum: "100 rps"
+
+  database:
+    query_timeout: "5s"
+    connection_pool:
+      min: 5
+      max: 20

package/templates/project-types/api-backend/process/workflow.xml

@@ -0,0 +1,214 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  TimSquad API Backend 워크플로우
+  API 서버, 마이크로서비스 전용 프로세스 정의
+-->
+<workflow type="api-backend" version="1.0">
+  <metadata>
+    <description>API 서버 개발 워크플로우</description>
+    <focus>API 설계, 데이터 모델링, 계약 기반 개발</focus>
+  </metadata>
+
+  <!-- ============================================================
+       Phase 정의
+       ============================================================ -->
+  <phases>
+    <!-- Planning Phase -->
+    <phase id="planning" order="1">
+      <name>API 설계</name>
+      <description>API 명세, 데이터 모델, 에러 코드 정의</description>
+
+      <tasks>
+        <task id="api-spec" required="true">
+          <name>API 명세 작성</name>
+          <agent>tsq-planner</agent>
+          <output>service-spec.md</output>
+          <checklist>
+            <item>엔드포인트 정의</item>
+            <item>Request/Response 스키마</item>
+            <item>인증 방식</item>
+            <item>버전 전략</item>
+          </checklist>
+        </task>
+
+        <task id="data-model" required="true">
+          <name>데이터 모델링</name>
+          <agent>tsq-dba</agent>
+          <output>data-design.md</output>
+          <checklist>
+            <item>ERD 작성</item>
+            <item>테이블 정의</item>
+            <item>인덱스 전략</item>
+            <item>관계 정의</item>
+          </checklist>
+        </task>
+
+        <task id="error-codes" required="true">
+          <name>에러 코드 정의</name>
+          <agent>tsq-planner</agent>
+          <output>error-codes.md</output>
+          <checklist>
+            <item>에러 코드 체계</item>
+            <item>HTTP 상태 코드 매핑</item>
+            <item>에러 메시지</item>
+          </checklist>
+        </task>
+      </tasks>
+
+      <validation>
+        <rule>모든 엔드포인트에 에러 케이스 정의</rule>
+        <rule>데이터 모델과 API 스키마 일치</rule>
+      </validation>
+
+      <exit-criteria>
+        <criterion>service-spec.md 완성</criterion>
+        <criterion>data-design.md 완성</criterion>
+        <criterion>error-codes.md 완성</criterion>
+        <criterion>사용자 승인</criterion>
+      </exit-criteria>
+    </phase>
+
+    <!-- Implementation Phase -->
+    <phase id="implementation" order="2">
+      <name>API 구현</name>
+      <description>엔드포인트 구현, DB 마이그레이션</description>
+
+      <tasks>
+        <task id="db-migration" required="true">
+          <name>DB 마이그레이션</name>
+          <agent>tsq-dba</agent>
+          <dependency>data-model</dependency>
+          <checklist>
+            <item>마이그레이션 스크립트</item>
+            <item>롤백 스크립트</item>
+            <item>시드 데이터</item>
+          </checklist>
+        </task>
+
+        <task id="api-implementation" required="true">
+          <name>API 엔드포인트 구현</name>
+          <agent>tsq-developer</agent>
+          <dependency>api-spec, db-migration</dependency>
+          <parallel-allowed>true</parallel-allowed>
+          <checklist>
+            <item>라우터 설정</item>
+            <item>컨트롤러 구현</item>
+            <item>서비스 레이어</item>
+            <item>입력 검증</item>
+            <item>에러 핸들링</item>
+          </checklist>
+        </task>
+
+        <task id="unit-tests" required="true">
+          <name>단위 테스트 작성</name>
+          <agent>tsq-developer</agent>
+          <dependency>api-implementation</dependency>
+        </task>
+      </tasks>
+
+      <validation>
+        <rule>service-spec.md와 구현 일치</rule>
+        <rule>모든 엔드포인트 테스트 존재</rule>
+      </validation>
+    </phase>
+
+    <!-- Testing Phase -->
+    <phase id="testing" order="3">
+      <name>API 테스트</name>
+      <description>통합 테스트, API 계약 테스트</description>
+
+      <tasks>
+        <task id="integration-test" required="true">
+          <name>통합 테스트</name>
+          <agent>tsq-qa</agent>
+          <checklist>
+            <item>API 호출 테스트</item>
+            <item>DB 연동 테스트</item>
+            <item>에러 시나리오</item>
+          </checklist>
+        </task>
+
+        <task id="contract-test" required="true">
+          <name>API 계약 테스트</name>
+          <agent>tsq-qa</agent>
+          <checklist>
+            <item>Request 스키마 검증</item>
+            <item>Response 스키마 검증</item>
+            <item>에러 응답 검증</item>
+          </checklist>
+        </task>
+
+        <task id="performance-test" required="false">
+          <name>성능 테스트</name>
+          <agent>tsq-qa</agent>
+          <checklist>
+            <item>응답 시간 측정</item>
+            <item>부하 테스트</item>
+          </checklist>
+        </task>
+      </tasks>
+
+      <validation>
+        <rule>테스트 커버리지 80% 이상</rule>
+        <rule>모든 API 엔드포인트 테스트 통과</rule>
+      </validation>
+    </phase>
+
+    <!-- Review Phase -->
+    <phase id="review" order="4">
+      <name>코드 리뷰</name>
+      <description>품질 검토, 보안 검토</description>
+
+      <tasks>
+        <task id="code-review" required="true">
+          <name>코드 리뷰</name>
+          <agent>tsq-qa</agent>
+          <checklist>
+            <item>API 응답 형식 일관성</item>
+            <item>에러 처리 완전성</item>
+            <item>코드 품질</item>
+          </checklist>
+        </task>
+
+        <task id="security-review" required="true">
+          <name>보안 검토</name>
+          <agent>tsq-security</agent>
+          <checklist>
+            <item>인증/인가 검증</item>
+            <item>입력 검증</item>
+            <item>SQL Injection 방지</item>
+            <item>Rate Limiting</item>
+          </checklist>
+        </task>
+      </tasks>
+
+      <approval>
+        <required>true</required>
+        <approvers>
+          <approver>tsq-qa</approver>
+          <approver>tsq-security</approver>
+        </approvers>
+      </approval>
+    </phase>
+  </phases>
+
+  <!-- ============================================================
+       API Backend 특화 규칙
+       ============================================================ -->
+  <rules>
+    <rule id="api-first">
+      <description>API 명세 먼저, 구현은 나중</description>
+      <enforcement>strict</enforcement>
+    </rule>
+
+    <rule id="contract-testing">
+      <description>모든 API는 계약 테스트 필수</description>
+      <enforcement>strict</enforcement>
+    </rule>
+
+    <rule id="error-handling">
+      <description>모든 에러는 error-codes.md에 정의된 형식</description>
+      <enforcement>strict</enforcement>
+    </rule>
+  </rules>
+</workflow>

package/templates/project-types/fintech/config.yaml

@@ -0,0 +1,151 @@
+# TimSquad Fintech Template Configuration
+# fintech 타입 기본 설정 (거래소, 결제 시스템 등)
+
+template:
+  name: fintech
+  description: 금융/결제 시스템을 위한 보안 강화 템플릿
+  version: 2.0.0
+
+# ============================================================
+# 프로젝트 기본값
+# ============================================================
+project:
+  type: fintech
+  level: 3  # fintech는 기본 Enterprise 레벨
+
+# ============================================================
+# 개발 방법론 기본값
+# ============================================================
+methodology:
+  development: tdd
+  process: agile
+  branching: gitflow  # 더 엄격한 브랜치 관리
+  review: required
+  security-review: required  # 보안 리뷰 필수
+
+# ============================================================
+# 권장 기술 스택
+# ============================================================
+stack:
+  language: typescript
+
+  frontend:
+    enabled: true
+    framework: nextjs
+    state: zustand
+    styling: tailwind
+    testing: vitest
+
+  backend:
+    enabled: true
+    runtime: node
+    framework: hono
+    testing: vitest
+
+  database:
+    primary: postgresql
+    orm: prisma
+    cache: redis
+    encryption: true  # 저장 데이터 암호화
+
+  infrastructure:
+    hosting: aws  # 컴플라이언스 친화적
+    container: true
+    ci_cd: github
+    secrets: vault  # 시크릿 관리 필수
+
+# ============================================================
+# 스킬 자동 로딩 규칙
+# ============================================================
+skills:
+  base:
+    - coding
+    - testing
+    - security  # 보안 필수
+    - planning
+    - architecture
+
+  # fintech 타입 추가 스킬
+  type-specific:
+    - typescript
+    - backend/node
+    - database/prisma
+    - methodology/tdd
+    - methodology/ddd  # 복잡한 도메인 필수
+
+# ============================================================
+# 추가 SSOT 문서 (필수)
+# ============================================================
+ssot:
+  additional:
+    - security-spec.md      # 보안 명세 필수
+    - compliance-spec.md    # 컴플라이언스 명세
+    - audit-log-spec.md     # 감사 로그 명세
+    - error-codes.md        # 에러 코드 (상세)
+
+# ============================================================
+# 추가 에이전트
+# ============================================================
+additional_agents:
+  - name: tsq-security
+    description: 보안 전문가 (필수 참여)
+    base: tsq-security
+    mandatory: true
+
+  - name: tsq-auditor
+    description: 감사/컴플라이언스 전문가
+    skills: [security, compliance]
+
+# ============================================================
+# Consensus 설정 (fintech 필수)
+# ============================================================
+consensus:
+  enabled: true
+  required_for:
+    - architecture_choice
+    - security_design
+    - data_model
+    - api_design
+    - authentication_design
+    - encryption_strategy
+    - compliance_decision
+
+# ============================================================
+# 보안 설정
+# ============================================================
+security:
+  mandatory:
+    - owasp_top_10_check
+    - secrets_scan
+    - dependency_audit
+    - penetration_test_plan
+
+  encryption:
+    at_rest: required
+    in_transit: required
+    key_management: vault
+
+  authentication:
+    mfa: required
+    session_timeout: 15m
+    password_policy: strict
+
+  audit:
+    all_transactions: true
+    retention_days: 365
+    tamper_proof: true
+
+# ============================================================
+# 컴플라이언스
+# ============================================================
+compliance:
+  standards:
+    - pci-dss    # 결제 카드 관련
+    - gdpr       # 개인정보
+    - sox        # 재무 보고 (필요시)
+
+  requirements:
+    - data_classification
+    - access_control_matrix
+    - incident_response_plan
+    - disaster_recovery_plan