@aipt/cli 0.1.0 → 0.1.14

package/dist/catalog/foundation.capability-family-routing/1.0.0/assets/src/capability-family-routing.test.ts

@@ -0,0 +1,10 @@
+import { expect, it } from "vitest";
+import { CapabilityFamilyRegistry, capabilityRegistryDigest } from "@aipt/agent-skill-registry";
+
+it("通过正式 Capability 使用能力族路由", () => {
+  const registry = new CapabilityFamilyRegistry(); const at = "2026-08-25T08:00:00.000Z";
+  const family = { schemaVersion: 1 as const, familyReleaseId: "document-review@1", familyId: "document-review", contentDigest: capabilityRegistryDigest("family"), inputSchemaVersion: "ReviewInput@1", outputSchemaVersion: "ReviewOutput@1", status: "published" as const, publishedAt: at };
+  const familyPlan = registry.approvePlan(registry.planPublish({ planId: "family-plan", kind: "family", targetId: family.familyReleaseId, targetDigest: family.contentDigest })); registry.publishFamily(family, familyPlan);
+  expect(registry.snapshot().families.get(family.familyReleaseId)).toEqual(family);
+  expect(() => registry.route({ schemaVersion: 2, routeId: "route", familyId: family.familyId, strategyId: "missing", inputSchemaVersion: family.inputSchemaVersion, requiredOutputSchemaVersion: family.outputSchemaVersion, taxonomy: { schemaVersion: 1, dimensions: [{ key: "domain", value: "generic" }], taxonomyDigest: capabilityRegistryDigest("taxonomy") }, expectedRegistryRevision: 1, requestedAt: at })).toThrow("CAPABILITY_STRATEGY_UNAVAILABLE");
+});

package/dist/catalog/foundation.capability-family-routing/1.0.0/release.json

@@ -0,0 +1,35 @@
+{
+  "schemaVersion": 2,
+  "capabilityId": "foundation.capability-family-routing",
+  "version": "1.0.0",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": { "profiles": ["workspace-npm-package", "standalone-npm-package", "nextjs-full-stack-application"] },
+  "compatibility": { "node": ">=24.18.0 <25", "pnpm": "11.21.0", "typescript": "6.0.3" },
+  "integration": {
+    "title": "Capability Family Routing development candidate",
+    "purpose": "为 Agent 消费者提供能力族、策略、工作流绑定、旧 Skill 映射和确定性路由合同。",
+    "packages": [
+      { "packageName": "@aipt/agent-chat-contracts", "version": "0.3.0", "usage": "runtime", "imports": [] },
+      { "packageName": "@aipt/agent-runtime-contracts", "version": "0.4.0", "usage": "runtime", "imports": [{ "importFrom": "@aipt/agent-runtime-contracts", "symbol": "CapabilityRoutingDecision", "referencePath": "src/capability-family-routing.test.ts" }] },
+      { "packageName": "@aipt/agent-skill-registry", "version": "0.2.0", "usage": "runtime", "imports": [{ "importFrom": "@aipt/agent-skill-registry", "symbol": "CapabilityFamilyRegistry", "referencePath": "src/capability-family-routing.test.ts" }] }
+    ],
+    "codeAssets": [
+      { "sourcePath": "assets/README.capability-family-routing.md", "targetPath": "README.capability-family-routing.md", "ownership": "owned-file" },
+      { "sourcePath": "assets/src/capability-family-routing.test.ts", "targetPath": "src/capability-family-routing.test.ts", "ownership": "owned-file" }
+    ]
+  },
+  "assets": [
+    { "path": "README.capability-family-routing.md", "ownership": "owned-file", "digest": "sha256:7a89f103326d82eda6042407673c1fd412cf34f2a82710068c8ba00ef6b2fcc5", "mode": 420 },
+    { "path": "src/capability-family-routing.test.ts", "ownership": "owned-file", "digest": "sha256:8540be9ba1e5712a1dcffcc19c94bca6d47bab60de53081c3292d682f148fa2b", "mode": 420 }
+  ],
+  "verifiers": [{ "id": "capability.assets" }, { "id": "typescript.typecheck" }, { "id": "vitest.run" }],
+  "exit": { "ownedAssets": ["README.capability-family-routing.md", "src/capability-family-routing.test.ts"] },
+  "availability": { "maturity": "candidate", "visibility": "maintainers-only", "sourceState": "development-registry" },
+  "packageSources": [
+    { "registryId": "registry.local.development", "packageName": "@aipt/agent-chat-contracts", "version": "0.3.0", "integrity": "sha512-Q2a17bdmSPFQeN0p1XBut7CH+fZ1GSALMPRrVG3DUHXypgdeIw5MSvCT5wmBMSIFLSxgVyBW6yH/LUUJ92iZHQ==", "tarballDigest": "sha256:dd1aaae6dcb480d874b9cdbb7883c4dfbab18db2dcd1d69c7d55722593e49955", "deliveryReceiptId": "sha256:4af8f6e5ea30e9da39f2796135e4101e8ac82cad828c9f6c0024985d8342f8da", "usage": "runtime" },
+    { "registryId": "registry.local.development", "packageName": "@aipt/agent-runtime-contracts", "version": "0.4.0", "integrity": "sha512-+Ux1zVbfjpuV3KfpCf00h2HrihuJeu/NQ96Bl/HIBmU/rSxAyJLlBVlCCK4yux9CLLmITl8wFJKSeAQy4dbLIQ==", "tarballDigest": "sha256:4ab24e4b438651ab0aefd0c76c016f3cdef7c3398680e86f016906d6fab04a78", "deliveryReceiptId": "sha256:42f1696d7c3b0786f2d1dc0ad0c7ce4212d87cdbeeed4a5e4d3693bbac9578b5", "usage": "runtime" },
+    { "registryId": "registry.local.development", "packageName": "@aipt/agent-skill-registry", "version": "0.2.0", "integrity": "sha512-OSO6nUc+aLMUvvOqhpZHQKi28kT/JKdBYMwr4GwI6h6sJa2BDJtILXwKYB8bMJVw0Osz5ekXMnmRt2mw5W424Q==", "tarballDigest": "sha256:d48149c339acfbe59df530ae649fcdf57658b11adb9a43e4b0b39310cc1ae4b6", "deliveryReceiptId": "sha256:bca33c06ceaea0a29f9cd17ae56585c002dcc204d0b11626082f0c0b93ad8a1d", "usage": "runtime" }
+  ],
+  "integrity": "sha256:94f4c11bfcf26c0dbd94c7ae8daef7503759d30d6f932d75d2591f74f62deec1"
+}

package/dist/catalog/foundation.environment-schema/1.0.0/assets/docs/engineering/environment.md

@@ -0,0 +1,37 @@
+# 环境配置
+
+本项目的环境变量在 `src/environment.ts` 中**只声明一次**。`.env.example`、就绪度投影与部署门禁都由那一份声明派生。
+
+## 为什么不手工维护 `.env.example`
+
+手抄的变量清单不会失败，只会过期。同一组凭据散落在校验数组、示例文件和运维脚本里，改动任何一处都不会让其余几处报错——直到某次部署缺了个变量才发现。
+
+`.env.example` 是**派生产物**，由 `pnpm env:emit` 生成，不要手改。
+
+## 日常操作
+
+```bash
+pnpm env:emit     # 改完 src/environment.ts 后重新生成 .env.example
+pnpm env:check    # CI：.env.example 与 schema 不一致就失败
+pnpm env:verify   # 部署前：当前环境是否满足 schema，按能力报缺什么
+```
+
+## 三种读法
+
+```ts
+import { environment } from "./environment.js";
+
+environment.load();                  // 全部变量，任一违约即抛。适用于配置全是启动必需的应用
+environment.capability("storage");   // 只装载一项能力。适用于按能力优雅降级的应用
+environment.readiness();             // 逐能力报告，永不抛异常，可直接交给前端渲染
+```
+
+按能力优雅降级是常见需求：没配对象存储不该让进程起不来，界面本来就要显示"缺什么"。这时用 `capability()` 与 `readiness()`，不要用 `load()`。
+
+## 约定
+
+- **机密变量标 `secret: true`**。它在 `.env.example` 中的值恒为空，也不会出现在任何就绪度输出或错误信息里。
+- **可选性由 schema 推导**：schema 接受 `undefined` 即可选。不要另设开关。
+- **一个变量只能属于一个能力**，重复声明会在启动时被拒。
+- **不要把 `readiness()` 之外的东西交给前端**。它只含 `configured` 与缺失的变量名，不含值。
+- 浏览器可见的变量请统一加前缀，并在 `defineEnvironment` 里声明 `clientPrefix`——未带前缀的变量在客户端读取会直接抛错。

package/dist/catalog/foundation.environment-schema/1.0.0/assets/src/environment.ts

@@ -0,0 +1,30 @@
+import { defineEnvironment } from "@aipt/environment";
+import { z } from "zod";
+
+/**
+ * 本项目的环境契约。**每个变量只在这里声明一次**——`.env.example`、就绪度面板与部署门禁
+ * 全部由它派生，不要在别处再抄一份变量名。
+ *
+ * 装载 `.env` 文件是 Node 的事（`process.loadEnvFile()`），本文件只负责声明与校验。
+ *
+ * 这是一份种子文件：请按项目实际情况改写下面的能力与变量，改完运行 `pnpm env:emit`。
+ */
+export const environment = defineEnvironment({
+  capabilities: {
+    runtime: {
+      summary: "应用进程",
+      variables: {
+        PORT: { schema: z.coerce.number().int().positive().max(65_535).default(3000), summary: "监听端口", example: "3000" },
+      },
+    },
+    // 按能力分组，而不是把变量平铺成一张大表：
+    // "缺 BUCKET" 的答案应该是"存储不可用"，而不是"整个应用不可用"。
+    // storage: {
+    //   summary: "对象存储",
+    //   variables: {
+    //     STORAGE_BUCKET: { schema: z.string().min(1), summary: "Bucket 名", example: "my-bucket" },
+    //     STORAGE_ACCESS_KEY_SECRET: { schema: z.string().min(1), summary: "AccessKey Secret", secret: true },
+    //   },
+    // },
+  },
+});

package/dist/catalog/foundation.environment-schema/1.0.0/release.json

@@ -0,0 +1,75 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.environment-schema",
+  "version": "1.0.0",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": {
+    "profiles": [
+      "nextjs-full-stack-application",
+      "workspace-node-application",
+      "workspace-web-application"
+    ]
+  },
+  "compatibility": {
+    "node": ">=24.18.0 <25",
+    "pnpm": "11.21.0",
+    "typescript": "6.0.3"
+  },
+  "integration": {
+    "title": "环境配置契约",
+    "purpose": "环境变量按能力声明一次；.env.example、就绪度投影与部署门禁全部由这份声明派生。",
+    "packages": [
+      {
+        "packageName": "@aipt/environment",
+        "version": "workspace:*",
+        "usage": "runtime",
+        "imports": [
+          {
+            "importFrom": "@aipt/environment",
+            "symbol": "defineEnvironment",
+            "referencePath": "packages/environment/src/index.ts"
+          }
+        ]
+      }
+    ],
+    "codeAssets": [
+      {
+        "sourcePath": "assets/src/environment.ts",
+        "targetPath": "src/environment.ts",
+        "ownership": "seed-file"
+      },
+      {
+        "sourcePath": "assets/docs/engineering/environment.md",
+        "targetPath": "docs/engineering/environment.md",
+        "ownership": "owned-file"
+      }
+    ]
+  },
+  "assets": [
+    {
+      "path": "docs/engineering/environment.md",
+      "ownership": "owned-file",
+      "digest": "sha256:41ada52e9a72c328d845d56fa74f761c3ba04303ee3a64a81ec02140b7fb9a5a",
+      "mode": 420
+    },
+    {
+      "path": "src/environment.ts",
+      "ownership": "seed-file",
+      "digest": "sha256:7626900dc0769ce2d5e9df55c61a2b8de123df1c94d4c4aa1738b43840010474",
+      "mode": 420
+    }
+  ],
+  "verifiers": [
+    {
+      "id": "capability.assets"
+    }
+  ],
+  "exit": {
+    "ownedAssets": [
+      "docs/engineering/environment.md",
+      "src/environment.ts"
+    ]
+  },
+  "integrity": "sha256:b32123a88058a6c9f4754cee1acbdcad2778f276be44aa088bcb60a1c1eb6591"
+}

package/dist/catalog/foundation.environment-schema/1.1.0/assets/.env.example

@@ -0,0 +1 @@
+PORT=3000

package/dist/catalog/foundation.environment-schema/1.1.0/assets/docs/engineering/environment.md

@@ -0,0 +1,9 @@
+# 环境配置清单
+
+`.env.example` 是开发工作台环境就绪度的需求清单，也是本地配置的公开键名基线。
+
+- 在 `.env.local` 填写本机值；它优先于 `.env`。
+- Secret 在示例中保持空值。
+- 工作台只显示变量名、来源和是否配置，不读取或返回值。
+- 新增变量时先更新 `.env.example`，再通过项目测试和维护检查。
+- 运行时强校验由应用 composition root 负责；不得以工作台进程环境掩盖项目文件缺失。

package/dist/catalog/foundation.environment-schema/1.1.0/release.json

@@ -0,0 +1,25 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.environment-schema",
+  "version": "1.1.0",
+  "integrity": "sha256:6622f1ba1cff8d388ff0bb306bf18407ffce3f2c442675d0684a51cd2646f11e",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": { "profiles": ["nextjs-full-stack-application", "workspace-node-application", "workspace-web-application", "workspace-expo-application"] },
+  "compatibility": { "node": ">=24.18.0 <25", "pnpm": "11.21.0", "typescript": "6.0.3" },
+  "integration": {
+    "title": "环境配置清单",
+    "purpose": "以 .env.example 声明变量需求，由工作台安全投影就绪度并补全本地值。",
+    "packages": [],
+    "codeAssets": [
+      { "sourcePath": "assets/.env.example", "targetPath": ".env.example", "ownership": "seed-file" },
+      { "sourcePath": "assets/docs/engineering/environment.md", "targetPath": "docs/engineering/environment.md", "ownership": "owned-file" }
+    ]
+  },
+  "assets": [
+    { "path": ".env.example", "ownership": "seed-file", "digest": "sha256:97fbfbc6ba76b530dbbd25096d61fb361ec99d4d308b32fda3509441db316385", "mode": 420 },
+    { "path": "docs/engineering/environment.md", "ownership": "owned-file", "digest": "sha256:24421dad46e7b1fc041edbf9e531b4faca4322a580cb0318dc2c6f762083b321", "mode": 420 }
+  ],
+  "verifiers": [{ "id": "capability.assets" }],
+  "exit": { "ownedAssets": [".env.example", "docs/engineering/environment.md"] }
+}

package/dist/catalog/foundation.environment-schema/2.0.0/assets/config/application-config.json

@@ -0,0 +1,4 @@
+{
+  "schemaVersion": 1,
+  "renderer": "application-config-contract-v1"
+}

package/dist/catalog/foundation.environment-schema/2.0.0/assets/docs/engineering/environment.md

@@ -0,0 +1,33 @@
+# 应用配置目录契约
+
+`config/application-config.json` 是本应用唯一的非敏感配置需求清单。它声明 Application identity、
+运行时变量以及 Secret/Certificate 文件 Binding，但不保存任何真实密码、Token、密钥或证书。
+
+真实配置由宿主部署控制面在 Git 仓库外物化：
+
+```text
+$IDP_CONFIG_DIR/applications/<application-id>/.env
+$IDP_CONFIG_DIR/applications/<application-id>/secrets/*
+$IDP_CONFIG_DIR/applications/<application-id>/certs/*
+```
+
+开发与部署约束：
+
+- 不要把 `.env`、`.env.local`、Secret 或证书复制进项目；
+- 普通非敏感值使用 `value` Binding；疑似密码、Token、私钥、AccessKey 或 API Key 的名称
+  不能使用 `value`；
+- Secret 使用 `secret-file`，环境变量必须以 `*_FILE` 结尾，文件位于 `secrets/`；
+- 证书使用 `certificate-file`，环境变量必须以 `*_FILE` 结尾，文件位于 `certs/`；
+- 修改需求后先生成并审批新的不可变 Plan，再运行 Verify；禁止绕过 Dyyto 修改已锁定事实；
+- Dyyto 不创建宿主配置目录或 Secret。缺少真实值时，应由部署控制面报告未配置，而不是在仓库内补值。
+
+示例 Secret Binding（只声明路径，不声明真实值）：
+
+```json
+{
+  "name": "DATABASE_URL_FILE",
+  "kind": "secret-file",
+  "required": true,
+  "file": "secrets/database-url"
+}
+```

package/dist/catalog/foundation.environment-schema/2.0.0/release.json

@@ -0,0 +1,63 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.environment-schema",
+  "version": "2.0.0",
+  "integrity": "sha256:a248b3d4770082b42968d28660c44c22166979858e6eaf006d545cee6383e81c",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": {
+    "profiles": [
+      "nextjs-full-stack-application",
+      "workspace-node-application",
+      "workspace-web-application"
+    ]
+  },
+  "compatibility": {
+    "node": ">=24.18.0 <25",
+    "pnpm": "11.21.0",
+    "typescript": "6.0.3"
+  },
+  "integration": {
+    "title": "应用 Config Dir 契约",
+    "purpose": "在项目内声明无敏感值的运行时配置需求，由外部部署控制面安全物化 Config Dir。",
+    "packages": [],
+    "codeAssets": [
+      {
+        "sourcePath": "assets/config/application-config.json",
+        "targetPath": "config/application-config.json",
+        "ownership": "seed-file"
+      },
+      {
+        "sourcePath": "assets/docs/engineering/environment.md",
+        "targetPath": "docs/engineering/environment.md",
+        "ownership": "owned-file"
+      }
+    ]
+  },
+  "assets": [
+    {
+      "path": "config/application-config.json",
+      "ownership": "seed-file",
+      "digest": "sha256:43a92aed2fa1d3aac4f9f78fba0f2748c4039a6e23fd0a4869c0d028f48d832d",
+      "mode": 420,
+      "renderer": "application-config-contract-v1"
+    },
+    {
+      "path": "docs/engineering/environment.md",
+      "ownership": "owned-file",
+      "digest": "sha256:38d51a6a3177f026afdd3316e81b99cbb5890f06f9e91223c6cefd0ce18bd096",
+      "mode": 420
+    }
+  ],
+  "verifiers": [
+    {
+      "id": "application.config-contract"
+    }
+  ],
+  "exit": {
+    "ownedAssets": [
+      "config/application-config.json",
+      "docs/engineering/environment.md"
+    ]
+  }
+}

package/dist/catalog/foundation.managed-project-control/1.0.0/assets/docs/engineering/project-control.md

@@ -0,0 +1,24 @@
+# 受控项目生命周期
+
+本项目允许 Dyyto 使用正式 Template Release 声明的固定 `dev` 命令管理本地开发进程。
+
+## 安全边界
+
+- 不接受任意 shell、argv、环境变量或远端执行；
+- 启动、停止和重启只作用于精确项目 realpath；
+- 停止前校验受管进程 PID、命令与项目身份，不接管未知进程；
+- 状态快照不是进程事实源，刷新时必须重新检查现场；
+- 日志有大小上限，并对项目路径和常见凭据字段脱敏。
+
+## 标准命令
+
+```bash
+dyyto lifecycle start --project . --command dev
+dyyto lifecycle status --project .
+dyyto lifecycle logs --project .
+dyyto lifecycle restart --project . --command dev
+dyyto lifecycle stop --project .
+dyyto integrations --project .
+```
+
+移除本能力时删除本文件即可；项目自身 `package.json` scripts 仍可脱离 Dyyto 运行。

package/dist/catalog/foundation.managed-project-control/1.0.0/release.json

@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.managed-project-control",
+  "version": "1.0.0",
+  "integrity": "sha256:72a017659dab71e8ef767687bb3a96c96641c1932d4b85cfbf3e7f9bbbd62b02",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": {
+    "profiles": [
+      "nextjs-full-stack-application",
+      "workspace-node-application",
+      "workspace-web-application"
+    ]
+  },
+  "compatibility": {
+    "node": ">=24.18.0 <25",
+    "pnpm": "11.21.0",
+    "typescript": "6.0.3"
+  },
+  "assets": [
+    {
+      "path": "docs/engineering/project-control.md",
+      "ownership": "owned-file",
+      "digest": "sha256:e2ddae9ac86e428e6ad1fb7e2dad9f9bdaa6ff6c9e1cfcc2d803a03bf943be24",
+      "mode": 420
+    }
+  ],
+  "verifiers": [
+    { "id": "capability.assets" }
+  ],
+  "exit": {
+    "ownedAssets": ["docs/engineering/project-control.md"]
+  }
+}

package/dist/catalog/foundation.managed-project-control/1.1.0/assets/docs/engineering/project-control.md

@@ -0,0 +1,15 @@
+# 受控项目生命周期与集成审计
+
+本项目允许 Dyyto 使用正式 Template Release 声明的固定 `dev` 命令管理本地开发进程，并通过同源集成审计查看 Package、公共导入、代码资产、Lock 与 Evidence。
+
+```bash
+dyyto lifecycle start --project . --command dev
+dyyto lifecycle status --project .
+dyyto lifecycle logs --project .
+dyyto lifecycle restart --project . --command dev
+dyyto lifecycle stop --project .
+dyyto integrations --project .
+dyyto integrations --project . --json > platform-integrations.audit.json
+```
+
+命令不接受任意 shell、argv、环境变量或远端执行；停止前校验受管进程身份。审计输出由 Manifest、不可变 Release、Lock、Evidence 和现场 Package 依赖生成，不是第二份声明源。

package/dist/catalog/foundation.managed-project-control/1.1.0/release.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.managed-project-control",
+  "version": "1.1.0",
+  "integrity": "sha256:ad516d642a453fafdceb459d16f198a39916797f8a42b43494b79241a2738de9",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": { "profiles": ["nextjs-full-stack-application", "workspace-node-application", "workspace-web-application"] },
+  "compatibility": { "node": ">=24.18.0 <25", "pnpm": "11.21.0", "typescript": "6.0.3" },
+  "integration": {
+    "title": "项目生命周期与集成审计",
+    "purpose": "统一管理本地开发进程，并审计能力对应的 Package、公共导入、代码资产与验证证据。",
+    "packages": [{
+      "packageName": "@aipt/platform-kernel",
+      "version": "workspace:*",
+      "usage": "runtime",
+      "imports": [
+        { "importFrom": "@aipt/platform-kernel", "symbol": "auditCapabilityIntegrations", "referencePath": "packages/kernel/src/project-control.ts" },
+        { "importFrom": "@aipt/platform-kernel", "symbol": "projectCapabilityIntegrations", "referencePath": "packages/kernel/src/project-control.ts" }
+      ]
+    }],
+    "codeAssets": [{ "sourcePath": "assets/docs/engineering/project-control.md", "targetPath": "docs/engineering/project-control.md", "ownership": "owned-file" }]
+  },
+  "assets": [{ "path": "docs/engineering/project-control.md", "ownership": "owned-file", "digest": "sha256:4b5b5c244a1fa9936ec9b43f5ac289af176a29be8c7b4531dc607cd6ffadbd6a", "mode": 420 }],
+  "verifiers": [{ "id": "capability.assets" }],
+  "exit": { "ownedAssets": ["docs/engineering/project-control.md"] }
+}

package/dist/catalog/foundation.managed-project-control/1.2.0/assets/docs/engineering/project-control.md

@@ -0,0 +1,15 @@
+# 受控项目生命周期与集成审计
+
+本项目允许 Dyyto 使用正式 Template Release 声明的固定 `dev` 命令管理本地开发进程，并通过同源集成审计查看 Package、公共导入、代码资产、Lock 与 Evidence。支持 Next.js、Workspace Node、Workspace Web 与 Workspace Expo Application Profile。
+
+```bash
+dyyto lifecycle start --project . --command dev
+dyyto lifecycle status --project .
+dyyto lifecycle logs --project .
+dyyto lifecycle restart --project . --command dev
+dyyto lifecycle stop --project .
+dyyto integrations --project .
+dyyto integrations --project . --json > platform-integrations.audit.json
+```
+
+命令不接受任意 shell、argv、环境变量或远端执行；停止前校验受管进程身份。Expo 进程审计不采集 Metro bundle、环境变量、用户媒体、设备信息或原生签名材料。审计输出由 Manifest、不可变 Release、Lock、Evidence 和现场 Package 依赖生成，不是第二份声明源。

package/dist/catalog/foundation.managed-project-control/1.2.0/release.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.managed-project-control",
+  "version": "1.2.0",
+  "integrity": "sha256:b7858288f67f5ce450d5b6786705deaf149cc99e1560024f75e71db8f7c86c31",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": { "profiles": ["nextjs-full-stack-application", "workspace-node-application", "workspace-web-application", "workspace-expo-application"] },
+  "compatibility": { "node": ">=24.18.0 <25", "pnpm": "11.21.0", "typescript": "6.0.3" },
+  "integration": {
+    "title": "项目生命周期与集成审计",
+    "purpose": "统一管理 Node、Web、Next.js 与 Expo 本地开发进程，并审计能力对应的 Package、公共导入、代码资产与验证证据。",
+    "packages": [{
+      "packageName": "@aipt/platform-kernel",
+      "version": "workspace:*",
+      "usage": "runtime",
+      "imports": [
+        { "importFrom": "@aipt/platform-kernel", "symbol": "auditCapabilityIntegrations", "referencePath": "packages/kernel/src/project-control.ts" },
+        { "importFrom": "@aipt/platform-kernel", "symbol": "projectCapabilityIntegrations", "referencePath": "packages/kernel/src/project-control.ts" }
+      ]
+    }],
+    "codeAssets": [{ "sourcePath": "assets/docs/engineering/project-control.md", "targetPath": "docs/engineering/project-control.md", "ownership": "owned-file" }]
+  },
+  "assets": [{ "path": "docs/engineering/project-control.md", "ownership": "owned-file", "digest": "sha256:09a5f4df8a404e3b1c7ac5ebe9de5612bd2e1140033bd8b1e84c2a7c29a87e6e", "mode": 420 }],
+  "verifiers": [{ "id": "capability.assets" }],
+  "exit": { "ownedAssets": ["docs/engineering/project-control.md"] }
+}

package/dist/catalog/foundation.managed-project-control/1.3.0/assets/docs/engineering/project-control.md

@@ -0,0 +1,14 @@
+# 受控项目生命周期与集成审计
+
+本项目允许 Dyyto 使用正式 Template Release 声明的固定 `dev` 命令管理本地开发进程，并通过同源集成审计查看 Package、代码资产、Lock 与 Evidence。支持 Workspace Root、Next.js、Workspace Node、Workspace Web 与 Workspace Expo Application Profile。
+
+```bash
+dyyto lifecycle start --project . --command dev
+dyyto lifecycle status --project .
+dyyto lifecycle logs --project .
+dyyto lifecycle restart --project . --command dev
+dyyto lifecycle stop --project .
+dyyto integrations --project .
+```
+
+命令不接受任意 shell、argv、环境变量或远端执行；停止前校验受管进程身份。Workspace Root 的 Docker Compose 等组合行为由根 `dev` 脚本拥有，平台发送 SIGTERM 并等待项目脚本完成清理，不形成容器编排旁路。

package/dist/catalog/foundation.managed-project-control/1.3.0/release.json

@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.managed-project-control",
+  "version": "1.3.0",
+  "integrity": "sha256:f08293b7da620982da63d9a8c5ff75bd6aee0a16d872e143bf4db7bcd565f693",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": { "profiles": ["workspace-root", "nextjs-full-stack-application", "workspace-node-application", "workspace-web-application", "workspace-expo-application"] },
+  "compatibility": { "node": ">=24.18.0 <25", "pnpm": "11.21.0", "typescript": "6.0.3" },
+  "integration": {
+    "title": "项目生命周期与集成审计",
+    "purpose": "统一管理 Workspace Root、Node、Web、Next.js 与 Expo 本地开发进程，并审计平台能力采用事实。",
+    "packages": [{
+      "packageName": "@aipt/platform-kernel",
+      "version": "workspace:*",
+      "usage": "runtime",
+      "imports": [
+        { "importFrom": "@aipt/platform-kernel", "symbol": "auditCapabilityIntegrations", "referencePath": "packages/kernel/src/project-control.ts" },
+        { "importFrom": "@aipt/platform-kernel", "symbol": "projectCapabilityIntegrations", "referencePath": "packages/kernel/src/project-control.ts" }
+      ]
+    }],
+    "codeAssets": [{ "sourcePath": "assets/docs/engineering/project-control.md", "targetPath": "docs/engineering/project-control.md", "ownership": "owned-file" }]
+  },
+  "assets": [{ "path": "docs/engineering/project-control.md", "ownership": "owned-file", "digest": "sha256:76ee095296c8fb9137cb1966f615c8eb80b986f4187d029d0efcbc6099daa7bf", "mode": 420 }],
+  "verifiers": [{ "id": "capability.assets" }],
+  "exit": { "ownedAssets": ["docs/engineering/project-control.md"] }
+}

package/dist/catalog/foundation.media-production-infrastructure/1.0.0/assets/docs/engineering/media-production-infrastructure.md

@@ -0,0 +1,3 @@
+# 媒体生产基础设施
+
+本项目采用媒体资源合同、对象存储、音频生产与可恢复后台任务。外部媒体必须经过校验、摘要、转存和回读后再提交元数据。

package/dist/catalog/foundation.media-production-infrastructure/1.0.0/release.json

@@ -0,0 +1,99 @@
+{
+  "schemaVersion": 1,
+  "capabilityId": "foundation.media-production-infrastructure",
+  "version": "1.0.0",
+  "integrity": "sha256:188bc54ddee77f9f317f0e47213471d27fecea99f90ad408456d4050524e741e",
+  "consumerProfile": "any-project",
+  "kind": "engineering-feature",
+  "dependencies": {
+    "profiles": [
+      "nextjs-full-stack-application",
+      "workspace-node-application",
+      "workspace-web-application"
+    ]
+  },
+  "compatibility": {
+    "node": ">=24.18.0 <25",
+    "pnpm": "11.21.0",
+    "typescript": "6.0.3"
+  },
+  "integration": {
+    "title": "媒体生产基础设施",
+    "purpose": "统一媒体合同、对象存储、音频生产与可恢复后台任务。",
+    "packages": [
+      {
+        "packageName": "@aipt/media-resource-contracts",
+        "version": "workspace:*",
+        "usage": "runtime",
+        "imports": [
+          {
+            "importFrom": "@aipt/media-resource-contracts",
+            "symbol": "parseMediaCatalog",
+            "referencePath": "packages/media-resource-contracts/src/index.ts"
+          }
+        ]
+      },
+      {
+        "packageName": "@aipt/object-store",
+        "version": "workspace:*",
+        "usage": "runtime",
+        "imports": [
+          {
+            "importFrom": "@aipt/object-store",
+            "symbol": "filesystemObjectStore",
+            "referencePath": "packages/object-store/src/index.ts"
+          }
+        ]
+      },
+      {
+        "packageName": "@aipt/audio-production",
+        "version": "workspace:*",
+        "usage": "runtime",
+        "imports": [
+          {
+            "importFrom": "@aipt/audio-production",
+            "symbol": "createAudioIdempotencyKey",
+            "referencePath": "packages/audio-production/src/index.ts"
+          }
+        ]
+      },
+      {
+        "packageName": "@aipt/background-execution",
+        "version": "workspace:*",
+        "usage": "runtime",
+        "imports": [
+          {
+            "importFrom": "@aipt/background-execution",
+            "symbol": "createBackgroundTask",
+            "referencePath": "packages/background-execution/src/index.ts"
+          }
+        ]
+      }
+    ],
+    "codeAssets": [
+      {
+        "sourcePath": "assets/docs/engineering/media-production-infrastructure.md",
+        "targetPath": "docs/engineering/media-production-infrastructure.md",
+        "ownership": "owned-file"
+      }
+    ]
+  },
+  "assets": [
+    {
+      "path": "docs/engineering/media-production-infrastructure.md",
+      "ownership": "owned-file",
+      "digest": "sha256:e7e79066796d84173d617c4796e2c83c814feab657ecc9c936799a5449fa3cdc",
+      "mode": 420
+    }
+  ],
+  "verifiers": [
+    {
+      "id": "capability.assets"
+    }
+  ],
+  "exit": {
+    "ownedAssets": [
+      "docs/engineering/media-production-infrastructure.md"
+    ]
+  }
+}