惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Application and Cybersecurity Blog
Application and Cybersecurity Blog
S
Securelist
K
Kaspersky official blog
Scott Helme
Scott Helme
C
CXSECURITY Database RSS Feed - CXSecurity.com
GbyAI
GbyAI
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
C
Cisco Blogs
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
博客园 - Franky
Security Latest
Security Latest
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Y
Y Combinator Blog
T
Threat Research - Cisco Blogs
L
LINUX DO - 热门话题
C
Cyber Attacks, Cyber Crime and Cyber Security
Project Zero
Project Zero
Cisco Talos Blog
Cisco Talos Blog
月光博客
月光博客
I
Intezer
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
人人都是产品经理
人人都是产品经理
L
Lohrmann on Cybersecurity
Recorded Future
Recorded Future
Latest news
Latest news
V2EX - 技术
V2EX - 技术
T
The Exploit Database - CXSecurity.com
H
Heimdal Security Blog
F
Fortinet All Blogs
Cloudbric
Cloudbric
IT之家
IT之家
博客园 - 叶小钗
Microsoft Security Blog
Microsoft Security Blog
P
Proofpoint News Feed
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
PCI Perspectives
PCI Perspectives
AWS News Blog
AWS News Blog
H
Help Net Security
S
Security @ Cisco Blogs
酷 壳 – CoolShell
酷 壳 – CoolShell
Recent Announcements
Recent Announcements
Hacker News - Newest:
Hacker News - Newest: "LLM"
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
F
Full Disclosure
S
Schneier on Security
S
Security Affairs
T
Tenable Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
BMAD Story Automator in Practice: Handing 5 Stories to AI for Autonomous Execution
NEE · 2026-05-17 · via DEV Community

If you're already used to writing code with BMAD, the real time sink isn't "writing" — it's "coordination."

An Epic has 5, 10, or 20 Stories. Each one goes through spec creation, implementation, test automation, code review, and retrospective. What's exhausting isn't any single step — it's constantly monitoring the process, switching sessions, handling failures, and deciding what to do next.

Story Automator aims to eliminate this "human orchestration" layer.

Last night I ran through the full /bmad-story-automator workflow. Below is a walkthrough of the experience, with screenshots taken along the way.


It doesn't solve "writing code" — it solves "babysitting the process"

One-sentence summary of Story Automator:

You tell it which Stories to process and what execution strategy to use, and it automatically runs the pipeline: spec creation → implementation → test automation → code review → retrospective — only interrupting you when a genuine human decision is needed.

This is different from running a single Skill command. It's more like a build cycle orchestrator:

Initialization
  → Read Epic / Sprint status
  → Select Story scope
  → Assess complexity
  → Choose Agent strategy
  → Execute create / dev / automate / review / retro
  → Escalate to human on failures or conflicts

Enter fullscreen mode Exit fullscreen mode

By design, it automates "coordination work" rather than replacing any specific development step.


Upgrade BMAD to the latest version (v6.6)

To try Story Automator, you first need to upgrade BMAD to 6.6. During installation, make sure to check the BMad Automator (Experimental) module.

BMAD 6.6 installation showing the new BMad Automator module

Otherwise, the Automator won't be available after installing BMAD.


First run: installing the Stop Hook to prevent mid-workflow interruptions

The first time you run /bmad-story-automator, it doesn't rush to start executing. Instead, it performs initialization checks.

As shown below, it loads the configuration, then attempts to read the current orchestration state. If the state directory doesn't exist yet, that's expected for a first run. It then automatically installs a Stop Hook into .claude/settings.json.

Story Automator automatically installing a Stop Hook on first run


Step 1: Select Stories — don't blindly run all pending items

Before entering the orchestration phase, Story Automator reads the Epic and sprint status, then lets you decide the scope.

The screenshot below shows a typical scenario: across Epics 5, 6, and 7, some Stories are completed while others are still pending. The tool displays these states directly and asks which Stories you want to process.

Story Automator listing pending Stories based on sprint status


Step 2: Complexity isn't guesswork — it scores first, then assigns Agents

This is one of the most interesting parts of Story Automator.

Instead of dumping all Stories to the same Agent, it first generates a Story complexity matrix. The screenshot shows:

  • Story 5.3 "Server Commands & API Authentication" → 4 pts / Medium
  • Story 6.1 "Expose Axion via SDK AgentMCPServer" → 2 pts / Low
  • Story 6.2 "axion mcp Command & External Agent Integration Verification" → 2 pts / Low
  • Story 7.1 "User Takeover Mechanism Based on SDK Pause Protocol" → 2 pts / Low
  • Story 7.2 "--fast Mode" → 5 pts / Medium

Story Automator auto-generating a Story complexity matrix

More importantly, it doesn't just give scores — it shows reasoning:

  • authorization / permissions
  • real-time communication
  • high number of acceptance criteria
  • large Story text

This means complexity assessment isn't a black box. You see not just the "conclusion" but "why it considers this Story harder." This directly influences the subsequent Agent selection strategy.

In other words, what Story Automator is really doing:

First turning Stories into "schedulable objects," then deciding who executes them.


Step 3: You can inject custom instructions, but it doesn't force you to overthink

Next, it asks whether you have custom instructions.

Story Automator asking about custom instructions

For example:

  • Run tests after every modification
  • Prioritize a specific Story
  • Watch out for database migrations

I really like this design because it strikes a nice balance between "fully automatic" and "controllable":

  • If you have no special requirements, just select none
  • If you have iteration-specific preferences, you can inject them temporarily

In other words, it treats "human experience" as an optional input rather than forcing you to configure a pile of parameters every time.


Step 4: Execution settings determine how aggressively it runs

Next comes execution strategy configuration. The screenshot shows two core questions:

  1. Whether to skip the automate step (test automation)
  2. What's the maximum number of parallel sessions

Story Automator execution settings interface

The defaults are:

  • Don't skip automate
  • Maximum 1 parallel session

For most real projects, test automation is the last thing you should skip in the delivery loop; and keeping parallelism at 1 avoids multiple sessions stepping on each other when modifying the same codebase. In other words:

It defaults to "controllable completion" rather than "parallel sprint to the limit."


Step 5: Different complexity levels automatically map to different Agents

With the complexity matrix in hand, Story Automator can recommend Agent configurations.

The recommended configuration:

  • Low: create / dev / auto / review all use Claude
  • Medium: create / dev / auto / review all use Codex, with Claude as fallback
  • High: Also primarily Codex
  • Retro: Claude for the retrospective phase

Story Automator recommending Agent combinations based on complexity

From this configuration, it's clear that we're no longer at the "call a model" level — it's doing model orchestration.

It also provides strategy options:

  • Suggested: Use the recommended complexity-tiered configuration
  • Uniform: Use the same Agent for all Stories

Different teams can use it differently:

  • Play it safe, follow recommendations
  • Keep behavior consistent, use uniform Agents

And from the configuration summary screenshot later, you can see that this demo ended up saving as all-claude. This perfectly illustrates: recommendations are recommendations, not mandates. You can let the system intelligently assign by complexity, or manually unify to the same Agent type for stability or consistency.

This step makes the system more like a "dispatcher" than a simple command wrapper.


Step 6: Configuration is explicitly saved for easy recovery and review

Once you confirm, Story Automator saves the run configuration. The screenshot shows a configuration summary named all-claude:

Story Automator saving the run configuration and generating a summary

The summary covers several things:

  • Which Epic
  • Story scope
  • Whether there are custom instructions
  • Which Agent is used for create / dev / auto / review / retro respectively
  • Whether test automation is skipped

This kind of "summary page" looks ordinary, but it's the foundation for an orchestrator to be recoverable, auditable, and reviewable.

Because once automation spans multiple Stories, sessions, and phases, these questions inevitably arise:

  • What if it stops midway?
  • What configuration did I actually choose this time?
  • Why did this batch of Stories use that Agent combination?

With explicitly saved configuration, subsequent recovery or post-hoc analysis won't be a guessing game.


Real-world experience takeaways

Before going to bed last night, I handed all 5 Stories to Story Automator. When I checked the results in the morning, it had run for 5.5 hours.

Honestly, it was slower than if I had run them manually. At my usual pace, I could have finished these 5 Stories in about 3 hours. As for why it was so much slower, I haven't carefully analyzed the implementation details yet — but it's still an experimental release, so getting it to work at all is what matters most.

For now, the best use case is: fire it off before bed.

Another thing I think it does well is that after each Epic completes, it automatically runs a retrospective and appends useful information to project-context.md.

After Epic completion, retrospective results are appended to project-context.md

So my current take is simple:

Running things manually during the day is still faster.
But handing a batch of Stories to it for an overnight run — that's a scenario where it really shines.

If you're using BMAD to develop projects, you should definitely give Story Automator a try. It might be the tool that reduces your repetitive coordination time from hours to minutes.