@bovinphang/frontend-craft 2.9.0 → 3.0.0

package/localized/zh-CN/skills/fec-dependency-upgrade/references/common/engineering-practices.sources.json

@@ -0,0 +1,377 @@
+{
+  "schemaVersion": 1,
+  "sources": [
+    {
+      "id": "google-review",
+      "publisher": "Google",
+      "title": "Code review standard",
+      "url": "https://google.github.io/eng-practices/review/reviewer/standard.html",
+      "section": "Engineering principles and code health",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guidance; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Use evidence and project standards; personal preference alone is not a blocker."
+    },
+    {
+      "id": "ms-playbook",
+      "publisher": "Microsoft ISE",
+      "title": "Test planning",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/test-planning/",
+      "section": "Risk, test scope and responsibilities",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Team practice, not a company-wide mandate; retain existing tools."
+    },
+    {
+      "id": "ms-faults",
+      "publisher": "Microsoft ISE",
+      "title": "Fault injection testing",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/fault-injection-testing/",
+      "section": "Controlled failure and observations",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Run scoped, controlled failures; do not infer production reliability from a small example."
+    },
+    {
+      "id": "google-ts",
+      "publisher": "Google",
+      "title": "TS/JS style guide",
+      "url": "https://google.github.io/styleguide/tsguide.html",
+      "section": "Environment caveat; types and exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Google explicitly notes internal constraints differ; no blanket ban overriding a justified project convention."
+    },
+    {
+      "id": "typescript-publishing",
+      "publisher": "TypeScript",
+      "title": "Publishing declaration files",
+      "url": "https://www.typescriptlang.org/docs/handbook/declaration-files/publishing.html",
+      "section": "Types and declaration dependencies",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living handbook; check installed compiler/module resolution",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Validate the actual packed consumer; do not upgrade compiler or module mode on this basis."
+    },
+    {
+      "id": "rust-api",
+      "publisher": "Rust library team",
+      "title": "Rust API Guidelines",
+      "url": "https://rust-lang.github.io/api-guidelines/",
+      "section": "Type safety, dependability and future proofing",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living recommendations; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Guidance rather than language law; preserve edition and MSRV."
+    },
+    {
+      "id": "tokio-join",
+      "publisher": "Tokio project",
+      "title": "JoinHandle",
+      "url": "https://docs.rs/tokio/latest/tokio/task/struct.JoinHandle.html",
+      "section": "Drop, abort and completion",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 1.54.1; project runtime/version determines applicability",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Tokio-specific mechanics only when Tokio is already used; no new runtime dependency."
+    },
+    {
+      "id": "uber-go",
+      "publisher": "Uber",
+      "title": "Go Style Guide",
+      "url": "https://github.com/uber-go/guide/blob/master/style.md",
+      "section": "Errors, interfaces and goroutine lifetime",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living master; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not import Uber dependencies or turn buffer-size style into a correctness theorem."
+    },
+    {
+      "id": "go-context",
+      "publisher": "Go project",
+      "title": "context package",
+      "url": "https://pkg.go.dev/context",
+      "section": "Cancellation propagation and ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Standard library; check owning go.mod/toolchain",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A cancellation signal alone does not confirm worker exit."
+    },
+    {
+      "id": "google-java",
+      "publisher": "Google",
+      "title": "Java Style Guide",
+      "url": "https://google.github.io/styleguide/javaguide.html",
+      "section": "Source structure and exception handling",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public style; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Naming/layout follows local standard; style is distinct from runtime correctness."
+    },
+    {
+      "id": "oracle-resources",
+      "publisher": "Oracle",
+      "title": "Try-with-resources",
+      "url": "https://docs.oracle.com/javase/tutorial/essential/exceptions/tryResourceClose.html",
+      "section": "Closing resources and suppressed exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "JDK8 tutorial; not a source for newer runtime features",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Preserve primary cause and borrowed-resource ownership; check actual API contract."
+    },
+    {
+      "id": "java-executor",
+      "publisher": "Oracle",
+      "title": "ExecutorService",
+      "url": "https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/concurrent/ExecutorService.html",
+      "section": "Shutdown, termination and awaitTermination",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Java SE17 documentation",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Check target JDK; no automatic virtual-thread or JDK migration."
+    },
+    {
+      "id": "google-python",
+      "publisher": "Google",
+      "title": "Python Style Guide",
+      "url": "https://google.github.io/styleguide/pyguide.html",
+      "section": "Imports, exceptions and mutable state",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Keep current formatter/type checker and library responsibilities."
+    },
+    {
+      "id": "python-asyncio",
+      "publisher": "Python project",
+      "title": "Coroutines and tasks",
+      "url": "https://docs.python.org/3/library/asyncio-task.html",
+      "section": "Cancellation and task ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 3.15.2; feature availability follows project Python",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Newer TaskGroup/timeout features require a supported project version; no upgrade implied."
+    },
+    {
+      "id": "cert-c",
+      "publisher": "CMU SEI",
+      "title": "MEM00-C allocation and release",
+      "url": "https://cmu-sei.github.io/secure-coding-standards/sei-cert-c-coding-standard/recommendations/memory-management-mem/mem00-c/",
+      "section": "MEM00-C memory responsibility",
+      "checkedAt": "2026-11-08",
+      "versionScope": "2016-edition standard family; MEM00-C is a recommendation",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not label recommendations as mandatory CERT rules or apply C++ ownership machinery to pure C."
+    },
+    {
+      "id": "cpp-core",
+      "publisher": "C++ Core Guidelines editors",
+      "title": "C++ Core Guidelines",
+      "url": "https://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines",
+      "section": "Resource and lifetime interfaces",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page dated 2026-06-14, living release0.8",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Adapt to existing exception policy and compiler; borrowing does not imply ownership."
+    },
+    {
+      "id": "google-cpp",
+      "publisher": "Google",
+      "title": "C++ Style Guide",
+      "url": "https://google.github.io/styleguide/cppguide.html",
+      "section": "Exceptions and project consistency",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Its exception/standard policy is not universal; preserve the owning project policy and C ABI."
+    },
+    {
+      "id": "ms-sal",
+      "publisher": "Microsoft",
+      "title": "Understanding SAL",
+      "url": "https://learn.microsoft.com/en-us/cpp/code-quality/understanding-sal?view=msvc-170",
+      "section": "Parameter preconditions and output guarantees",
+      "checkedAt": "2026-11-08",
+      "versionScope": "MSVC170 documentation view",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "SAL is an optional toolchain-specific expression, not a portable mandatory annotation."
+    },
+    {
+      "id": "aws-retry",
+      "publisher": "AWS",
+      "title": "Timeouts, retries and backoff with jitter",
+      "url": "https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/",
+      "section": "Timeouts, bounded retries and retry amplification",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Article dated 2019-12-05; official Builder Center redirect",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Retry only semantically safe operations within a total budget; failure classes alone do not grant write replay."
+    },
+    {
+      "id": "aws-idempotency",
+      "publisher": "AWS",
+      "title": "Making retries safe with idempotent APIs",
+      "url": "https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/",
+      "section": "Caller intent, duplicate requests and atomic recording",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Builders Library; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A process-local example does not establish database/multi-process exactly-once."
+    },
+    {
+      "id": "react-effects",
+      "publisher": "React project",
+      "title": "useEffect",
+      "url": "https://react.dev/reference/react/useEffect",
+      "section": "Cleanup and fetching race conditions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; use installed project API",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Abort and stale-result checks complement each other; no React upgrade implied."
+    },
+    {
+      "id": "react-act",
+      "publisher": "React project",
+      "title": "act",
+      "url": "https://react.dev/reference/react/act",
+      "section": "Applying updates before assertions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; verify sample versions",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "DOM simulation is not browser E2E or native desktop execution."
+    },
+    {
+      "id": "vue-watchers",
+      "publisher": "Vue project",
+      "title": "Watchers",
+      "url": "https://vuejs.org/guide/essentials/watchers.html",
+      "section": "Side-effect cleanup",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Vue3; onWatcherCleanup requires3.5+ and synchronous registration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use supported callback cleanup on older Vue3; no framework migration."
+    },
+    {
+      "id": "tauri-permissions",
+      "publisher": "Tauri project",
+      "title": "Permissions",
+      "url": "https://v2.tauri.app/security/permissions/",
+      "section": "Command allow/deny and capability scope",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Tauri2 docs; check installed version/configuration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Rust command-unit tests do not activate webview permissions or prove packaged GUI security."
+    },
+    {
+      "id": "electron-security",
+      "publisher": "Electron project",
+      "title": "Security",
+      "url": "https://www.electronjs.org/docs/latest/tutorial/security",
+      "section": "IPC sender checks and renderer trust",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living docs; match installed Electron",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Handler tests do not prove sandbox/context isolation is active in a packaged app."
+    },
+    {
+      "id": "spring-tests",
+      "publisher": "Spring project",
+      "title": "Testing Spring Boot applications",
+      "url": "https://docs.spring.io/spring-boot/3.5/reference/testing/spring-boot-applications.html",
+      "section": "Test slices and application tests",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Boot3.5 docs observed3.5.16; preserve sample/project versions",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Test scope matters; MVC tests do not establish live DB/transaction or deployment behavior."
+    },
+    {
+      "id": "fastapi-lifespan",
+      "publisher": "FastAPI project",
+      "title": "Lifespan events",
+      "url": "https://fastapi.tiangolo.com/advanced/events/",
+      "section": "Acquire and release application resources",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living FastAPI documentation; match pinned dependencies",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use actual lifespan execution in tests; import does not own a live connection."
+    },
+    {
+      "id": "gin-binding",
+      "publisher": "Gin project",
+      "title": "Binding",
+      "url": "https://gin-gonic.com/en/docs/binding/",
+      "section": "Binding errors and validation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living Gin documentation; match pinned module",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Writing/aborting a response does not replace explicit control-flow return in the current handler."
+    },
+    {
+      "id": "axum-extractors",
+      "publisher": "Axum project",
+      "title": "Extractors",
+      "url": "https://docs.rs/axum/latest/axum/extract/",
+      "section": "Extractor order and rejections",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Latest route observed0.8.9; fixed0.8.9 route unavailable via browser tool",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Pinned existing example is authoritative for compilation; do not assume source signatures across releases."
+    },
+    {
+      "id": "drogon-filters",
+      "publisher": "Drogon project",
+      "title": "Middleware and Filter",
+      "url": "https://github.com/drogonframework/drogon/wiki/ENG-05-Middleware-and-Filter",
+      "section": "Filter callbacks and continuation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living wiki; match compiled example version",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Synthetic role headers are not authentication; callback lifetime must follow actual ownership."
+    },
+    {
+      "id": "node-typescript",
+      "publisher": "Node.js project",
+      "title": "Modules: TypeScript",
+      "url": "https://nodejs.org/api/typescript.html",
+      "section": "Type-stripping history, enabling, and separate type checking",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed26.13.0; sample>=22.18, actual24.14.1 tested; product Node>=22 unchanged",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Native stripping is not type checking and ignores tsconfig. Missing sample capability is MISSING, not a product runtime upgrade."
+    }
+  ]
+}

package/localized/zh-CN/skills/fec-dependency-upgrade/references/engineering-practices.md

@@ -0,0 +1,73 @@
+---
+practiceCards:
+  - id: "fec-dependency-upgrade:compatibility"
+    level: "recommended"
+    sourceIds: ["google-review","typescript-publishing"]
+    caseIds: ["EP-TS-01"]
+    evidence: "review-only"
+  - id: "fec-dependency-upgrade:artifact-consumer"
+    level: "required"
+    sourceIds: ["typescript-publishing","ms-playbook"]
+    caseIds: ["EP-TS-01","EP-UI-01"]
+    evidence: "review-only"
+---
+
+# 本入口工程决策
+
+先定位项目角色、工具链及已有约定，再按需读取[公共原则](common/engineering-practices.md)。下列条件仅约束当前语言/场景；结构检查不证明全部语义或实际运行。
+
+<a id="fec-dependency-upgrade:compatibility"></a>
+## 按有证据的兼容需求升级
+
+级别: recommended
+
+### 风险
+孤立指南偏好版本可能把小任务扩大为破坏性工具链迁移。
+
+### 适用
+适用于有实际项目需要的依赖/框架升级及安全修复。
+
+### 决策
+读取清单/锁、peer、engine及迁移说明，选择局部兼容改动，保留回退，记录行为/类型/构建影响。
+
+### 例外
+文档显示新版本不等于授权升级；样例依赖与CLI/产品运行时隔离。
+
+### 正反示意
+正例：在独立样例锁定兼容DOM环境。反例：只为样例升级项目Node/React/构建工具。
+
+### 验证
+现有lint/类型/构建/测试配合受影响消费者及实际归档检查，不隐藏未支持环境。
+
+### 来源
+google-review, typescript-publishing — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-TS-01; review-only.  执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。
+
+<a id="fec-dependency-upgrade:artifact-consumer"></a>
+## 打包依赖才是交付契约
+
+级别: required
+
+### 风险
+workspace可用可能掩盖缺声明、样例、锁或运行时文件。
+
+### 适用
+交付包及升级改变消费面时适用。
+
+### 决策
+检查真实tarball、精确版本/完整性，离开相邻源码安装并验证支持消费者；公共内容保持唯一源并协调两产品。
+
+### 例外
+不以同版本不同字节覆盖已消费/已发布归档，不放松所有权检查强行升级；未发布候选只提供本地证据，不称公开可下载。
+
+### 正反示意
+正例：两产品消费同一不可变common归档/SRI。反例：file/link相邻路径悄悄补齐缺内容。
+
+### 验证
+运行真实打包/消费、对照源字节并在迁移中保护用户编辑；React样例通过不证明全部分发形式。
+
+### 来源
+typescript-publishing, ms-playbook — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-TS-01, EP-UI-01; review-only.  执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。

package/localized/zh-CN/skills/fec-doc-sync/SKILL.md

@@ -3,37 +3,16 @@ name: fec-doc-sync
 description: 用于根据 package.json、lockfile、配置、env 示例、路由、API client 或 server routes、schema、组件、测试、CI、构建/部署配置、ADR、changelog 或迁移说明等事实源同步前端项目文档。不要用于单纯润色普通文案；中文触发词包括 文档同步、更新 README、docs sync、环境变量文档、命令清单、API 文档同步。
 ---
 
-# 文档同步
+# 前端文档同步
 
-## 用途
+遵循[公共文档同步方法](references/common/doc-sync.md)，处理证据、多语言一致性和交付记录。
 
-从代码、配置、测试、类型、脚本和运行时模板同步前端项目文档，避免 README、docs、环境变量说明、API/路由说明、架构决策和迁移说明与实际项目行为漂移。
+## 前端事实来源
 
-## 流程
+核对 package.json、锁文件、框架与构建配置、环境变量示例、路由、API client/server routes、类型/schema、组件、测试、CI 和部署文件。
 
-1. 识别项目栈、文档入口和本次需要同步的范围；README 同步必须扫描根目录 `README*`、`docs/*/README*`、包、应用、部署或运行时相关 README，并排除 `node_modules`、构建产物和第三方依赖目录。
-2. 收集事实来源：`package.json`、lockfile、框架和构建配置、`.env.example`、路由、API clients 或 server routes、types/schemas、组件、测试、CI、build/deploy config。
-3. 比对 README、docs、ADR、changelog、example prompts、setup/deploy/env docs 中的命令、环境变量、路由、API 行为、部署步骤和支持矩阵。
-4. 只更新稳定的公共约定；不要把临时调试结论、一次性报告或未落地设计写入长期文档。
-5. 若仓库已有多语言文档或国际化 README，主 README 的公共事实更新后必须检查其它语言 README 是否需要同步；功能名称、命令名、脚本名、包名、组件/API 名称、报告文件名、路径、环境变量、路由/API 名称、版本约束和支持矩阵必须跨语言一致。
-6. 产品文案可保持本地化表达，但不得保留旧事实、旧默认推荐或过期示例；无法高质量翻译时，至少同步关键事实，并在输出中标出人工翻译风险。
-7. 当项目暴露插件、SDK、CLI、组件库、模板或集成能力时，同步对应的功能清单、集成说明、命令/脚本说明、公开 metadata、示例提示词或示例用法。
-8. 运行相关文档一致性、旧口径搜索、报告格式一致性、类型检查、测试、构建或打包检查。
+## 前端同步范围
 
-## 约束
+覆盖根目录与包、应用、部署、Runtime README，以及 docs、ADR、changelog、环境变量和安装说明。对照路由/API 行为、客户端集成、支持矩阵、插件入口、命令、报告路径、元数据和示例提示词。
 
-- 不把 README 变成完整实现细节；公开文档保留高信号摘要。
-- 不引入与事实来源不一致的命令、路径、环境变量、API 行为或能力名称。
-- 不把未确认的 TODO、草案或实验能力写成已支持行为。
-- 不修改用户项目私有文档，除非用户明确指定。
-- 多语言文档若无法完整翻译，至少保持命令名、环境变量、路由/API 名称、版本约束和报告格式一致。
-- 不把国际化 README 同步简化成只改主 README；公共事实、功能清单、报告清单、命令/脚本说明和示例用法必须检查所有语言入口。
-- 不把 ADR 当作长篇复盘；只记录背景、决策、取舍、影响范围、验证和回滚线索。
-
-## 预期输出
-
-- 列出已同步的 README/docs/ADR/changelog/env/setup/deploy 文档。
-- 列出已检查的 README/docs 入口，并说明哪些语言文件已同步、哪些无需同步、哪些需要人工确认。
-- 总结使用的事实来源、更新范围、验证命令和未覆盖风险。
-- 汇总旧口径搜索、报告文件名/路径/命令一致性和多语言关键事实一致性验证结果。
-- 标出仍需人工确认的产品文案、翻译、外部服务配置或发布说明。
+所有已有语言入口均检查公共事实；遵循公共方法记录事实源、已同步文件、无需修改项和人工翻译复核事项。使用项目现有内容检查、类型、测试和打包命令。

package/localized/zh-CN/skills/fec-doc-sync/references/common/doc-sync.md

@@ -0,0 +1,12 @@
+# 文档事实同步
+
+从实现事实同步公共文档，不把期望设计写成既有能力。
+
+1. 明确技术栈、文档入口和本次范围，覆盖根 README、嵌套包/应用/Runtime README 和部署指南；排除依赖、构建产物和第三方目录。
+2. 收集权威事实：清单和锁文件、配置、环境变量示例、命令、schema、公共 API、测试、CI、构建与部署文件。使用实际技术栈的来源，不强制某一种语言的项目清单。
+3. 对照命令、环境变量名、路径、版本、API 行为、能力、安装和部署说明。只写稳定公共事实，不将提案和实验设计描述为已支持行为。
+4. 检查全部已有语言入口。公共标识、命令、版本范围、支持矩阵、报告路径和示例必须一致；文案遵循现有翻译约定，明确需要人工复核的内容。
+5. 同步相关 README/docs/ADR/changelog 和用户可见元数据。ADR 记录背景、决定、备选、影响、验证和回退线索，不写成完整评审报告。
+6. 执行项目已有一致性、相关类型/测试/构建/打包检查和旧引用搜索。记录每份已查文档、事实源、已同步语言、不需修改的入口和未决问题。
+
+不虚构命令或环境变量，不越界修改用户私有文档，不用内部实现细节淹没 README。文案编辑成功不等于事实一致性已经验证。

package/localized/zh-CN/skills/fec-image-generation/SKILL.md

@@ -1,110 +1,16 @@
 ---
 name: fec-image-generation
-description: 用于生成或编辑图表、图形资产、海报、UI 样机、产品图、信息图、学术图、漫画、头像、分镜、品牌板或图像编辑工作流，尤其是导出 PNG 需要视觉质检和有限自动修复时。文字密集图表优先使用确定性的 Mermaid/SVG/HTML/canvas 源；浏览器可打开的技术图优先使用 HTML technical diagrams，覆盖系统蓝图、架构图、部署拓扑、Agent runtime、memory flow、before-after architecture、流程、序列、数据流、生命周期、runbook、PII/数据血缘和状态机；不要用于不涉及生成图像的普通 UI 打磨。中文触发词包括 图片生成、图像编辑、图表生成、架构图、系统蓝图、部署拓扑、Agent runtime、memory flow、before-after architecture、工作流图、数据流、生命周期图、状态机、ER 图、UML、序列图、海报、UI 样机、产品图、信息图、学术图、漫画、头像、分镜、品牌板、PNG 自检、自动修复。
+description: 用于生成或编辑前端 UI 样机、产品图、海报、品牌视觉、插图、头像、分镜和位图素材，并对 PNG 进行质检；不要用于架构、序列、流程和数据流等结构化技术图表。
 ---
 
-# 图片生成与图表工作流
+# 前端视觉资产生成与编辑
 
-## 用途
+用于 UI、品牌和产品视觉，先读取[资产路由](references/artifact-routing.md)，根据已有图片、目标用途、尺寸、透明背景和交付路径选择生成、编辑或混合流程。
 
-生成或编辑图表、视觉资产和图片工作流，并对导出的 PNG 做可复查的自检与修复迭代。
+## 实施与质检
 
-## 流程
+保留原图，编辑默认另存新文件。不要将占位图或概念稿当作最终产品图。明确品牌、文案、可访问替代描述和授权约束；有现成图片时优先定向编辑。
 
-1. 判断产物类型
-   - 文本、结构和连线准确性优先时，用 Mermaid、SVG、HTML/CSS、canvas 或图表库生成可编辑源，再导出 PNG。
-   - 需要单文件浏览器打开、暗/亮主题和结构化 QA 的系统蓝图、架构图、部署拓扑、Agent runtime、memory flow、before-after architecture、流程、序列、数据流、生命周期、runbook、状态机或 PII/数据血缘图时，使用 HTML technical diagrams。
-   - 流程地图、审批流、自动化运行、异常路径和循环运营流需要清晰的起止节点、决策、参与者、步骤编号和摘要，但不需要 diagrams.net 时，在 Mermaid 不可用或明确需要浏览器泳道/主题交付时，使用兼容 HTML `workflow` 路线。
-   - 系统、Agent、memory、数据或 tool-call 图需要语义节点形状、有含义的连线和可浏览器打开、可导出、可 QA 的源文件时，使用主题化 HTML technical diagrams。
-   - 用户需要在本地浏览器里看到节点和连线实时出现，或需要在会话中拖拽、改标签、删除、缩放并快速导出草图时，使用交互式实时图表路线。
-   - 审美、质感、照片、插画、漫画、产品图或品牌氛围优先时，用图片生成或编辑工具，再把最终资产保存到项目或报告目录。
+每次 PNG 交付前检查实际图像，核验主体渲染、文字截断、构图、透明背景和品牌。使用[公共来源的 PNG 检查工具](scripts/png-qa.mjs)；默认最多两轮修复，按 [PNG 修复说明](references/png-qa-autofix.md) 修改源文件、提示词或布局，不直接破坏性修改输出像素。
 
-2. 明确输入与约束
-   - 收集受众、用途、尺寸、语言、必须出现的文本、品牌限制、可编辑源格式、导出格式和禁用元素。
-   - 对海报、UI 样机、品牌板和产品图，先写出一行视觉读取：目标用户、场景、可信感来源、主视觉锚点。
-
-3. 选择生成路线
-   - ER 图、UML 类图、序列图、技术架构图、ML/深度学习、流程图等，优先按 [diagram-workflows.md](references/diagram-workflows.md) 建立结构化源。
-   - 浏览器可打开的系统蓝图、架构、流程、序列、数据流和生命周期图，先读 [html-technical-diagrams.md](references/html-technical-diagrams.md)，再用 [tech-diagram-render.mjs](scripts/tech-diagram-render.mjs) 渲染 JSON IR。流程工作流用 `lanes` 表达参与方，用 `nodes` 表达有序动作，用 `edges` 表达异常或回环路径，并可添加 `waypoints`：
-     ```bash
-     node skills/fec-image-generation/scripts/tech-diagram-render.mjs --input diagram.json --output diagram.html --type architecture --manifest diagram.layout.json
-     ```
-   - Agent 和 memory 图优先使用 `architecture` IR，并使用 `agent`、`model`、`memory`、`vectorstore`、`graphdb`、`tool`、`document`、`queue`、`browser`、`user`、`gateway` 等语义节点类型。连线含义重要时添加 `flow`：`control`、`data`、`read`、`write`、`async`、`feedback`；出现两种以上 flow 时自动生成 flow legend。
-   - 需要源文件级主题方向时可添加 `visual.style`：`default`、`terminal`、`blueprint`、`minimal`、`glass`、`warm`、`openai` 或 `editorial-dark`。这些是交付主题，不等同于品牌规范承诺。
-   - 需要从生成好的 HTML/SVG 源导出适合 README 的 SVG、PNG、JPG 或 JPEG 交付物时，使用 [export-diagram.mjs](scripts/export-diagram.mjs)：
-     ```bash
-     node skills/fec-image-generation/scripts/export-diagram.mjs --input diagram.html --format svg
-     node skills/fec-image-generation/scripts/export-diagram.mjs --input diagram.html --format png --output diagram.png --scale 2
-     ```
-   - 实时交互草图使用 [interactive-diagram-server.mjs](scripts/interactive-diagram-server.mjs)，打开服务提供的 [interactive-diagram.html](assets/interactive-diagram.html) 页面并带上唯一 `?s=session-id`，再向 `/cmd?s=session-id` 发送小 JSON 命令：
-     ```bash
-     node skills/fec-image-generation/scripts/interactive-diagram-server.mjs --port 6100
-     curl -s "http://127.0.0.1:6100/cmd?s=checkout-flow" -d '{"cmd":"init","title":"Checkout Flow","direction":"TB"}'
-     curl -s "http://127.0.0.1:6100/cmd?s=checkout-flow" -d '{"cmd":"node","id":"cart","label":"Review cart","type":"process"}'
-     ```
-   - 海报、UI 样机、产品图、信息图、学术图、漫画、头像、分镜、品牌板和图像编辑，按 [artifact-routing.md](references/artifact-routing.md) 选择生成、编辑或混合路线。
-
-4. 导出并自检 PNG
-   - 每次交付前都读取导出的 PNG，检查主体是否真实渲染、文字是否截断、连线是否堆叠、节点是否重叠。
-   - 有布局 manifest 时运行：
-     ```bash
-     node skills/fec-image-generation/scripts/png-qa.mjs --png output.png --manifest layout.json --format markdown
-     ```
-   - 没有 manifest 时仍运行 PNG 基础检查：
-     ```bash
-     node skills/fec-image-generation/scripts/png-qa.mjs --png output.png --format json
-     ```
-
-5. 自动修复循环
-   - 默认最多 2 轮；用户明确要求时可提高到 5 轮软上限。
-   - 修复对象是源文件、prompt、布局参数或导出尺寸，不直接破坏性修改 PNG 像素。
-   - 按 [png-qa-autofix.md](references/png-qa-autofix.md) 把问题转成具体修复：增大画布、换行、移动节点、分层连线、调整 padding 或重导出。
-
-6. 交付记录
-   - 说明最终源文件、PNG 路径、生成路线、QA 轮次、发现并修复的问题、仍需人工确认的文字或品牌风险。
-
-## 约束
-
-- 文本密集图不要只靠位图模型生成；必须保留可编辑结构化源。
-- HTML 技术图必须保留 JSON 源和生成的 HTML；PNG/SVG/JPG 是交付产物，不是事实源。需要官方厂商图标或长期手工编辑时，改用 `.drawio` 路线。
-- 主题化语义图由 Frontend Craft 渲染器实现。不要把 Python、shell、cairosvg、rsvg-convert、Puppeteer、CDN 截图库、复制来的 SVG 模板或外部图标包作为这一路线的必需依赖。
-- 交互式实时图表是会话期预览；当图表成为交付物时要保存 JSON/SVG/PNG 导出，需要长期维护事实源时改用 HTML technical diagrams 或 `.drawio`。
-- 不把截图、假数据或占位图当成最终产品图，除非用户明确要求概念稿。
-- 不直接覆盖原图；编辑工作流默认输出新文件。
-- 不为追求美观牺牲可读标签、连线归属、图例、坐标轴和可访问替代说明。
-- PNG helper 只做检测和建议；修复必须回到源、prompt 或布局参数。
-- 自检结果不能替代人工确认专有名词、公式、论文图注、品牌规范和合规信息。
-
-## 预期输出
-
-产出可编辑源、最终 PNG 或编辑后图片，并附带生成路线与 QA 结果。图表应结构清晰、标签不截断、连线不混乱；视觉资产应匹配用途、尺寸、品牌语气和交付路径。
-
-
-## 技术图质量与工具路由
-
-标准时序图、流程图优先使用本地 Mermaid；架构图需长期手工编辑时复用 fec-drawio-studio；大型拓扑可选本地 Graphviz。工具不可用时明确记录并使用兼容的 JSON/HTML 路线，不自动安装、下载或使用 CDN。示意图保留完整文字与所有节点、连接关系；显式尺寸、坐标和 waypoints 不静默重排。
-
-```sh
-node skills/fec-image-generation/scripts/mermaid-render.mjs --input sequence.mmd --output sequence.svg --report sequence.render.json
-node skills/fec-image-generation/scripts/export-diagram.mjs --input diagram.html --format png --output diagram.png --theme light --scale 2 --manifest diagram.layout.json --output-manifest diagram.actual.json
-node skills/fec-image-generation/scripts/png-qa.mjs --png diagram.png --manifest diagram.actual.json --format json
-```
-
-PNG QA 使用导出后的 actual manifest；原始 manifest 是 SVG 坐标与估算边界，2x 导出不能直接复用。浏览器等待字体并测量真实文字边界；独立 SVG 内嵌主题样式。渲染成功、静态估算和自动检测通过都不等于人工视觉验收；检查最终 PNG 后记录工具版本、主题、缩放、修复轮次、未解决问题及部分验收状态。提高分辨率不会修复文字截断或布局冲突。
-
-技能内部模块与可复现样例：
-- [mermaid-render.mjs](scripts/mermaid-render.mjs)
-- [diagram-layout.mjs](scripts/diagram-layout.mjs)
-- [diagram-browser.mjs](scripts/diagram-browser.mjs)
-- [quality examples](assets/quality-examples/README.md)
-- [sequence.json](assets/quality-examples/sequence.json)
-- [workflow.json](assets/quality-examples/workflow.json)
-- [architecture.json](assets/quality-examples/architecture.json)
-- [sequence.mmd](assets/quality-examples/sequence.mmd)
-- [workflow.mmd](assets/quality-examples/workflow.mmd)
-
-内置 sequence 仅支持参与者和有序消息；activation、alt、loop、par、复杂 async 片段请使用 Mermaid，不把这些语义悄悄简化成直线消息。可选 ELK 仅在本机 Mermaid 版本确实支持时启用，否则使用兼容默认布局。
-
-- [invalid-explicit.json](assets/quality-examples/invalid-explicit.json)
-
-- [png-qa.mjs](scripts/png-qa.mjs)
+报告源文件、结果路径、生成路由、QA 轮次与剩余风险。结构化技术图表使用独立公共技术图表能力；此入口不再维护图表渲染器。

package/localized/zh-CN/skills/fec-image-generation/references/png-qa-autofix.md

@@ -32,6 +32,6 @@
 
 ## 质量交付约定
 
-标准序列/流程图优先本地 Mermaid；架构图需要手工编辑时复用 fec-drawio-studio，大型拓扑可选 Graphviz。无本地工具时使用兼容 JSON/HTML，不自动安装或下载。HTML 预览、独立 SVG 和 PNG 使用同源主题样式；导出指定 `--theme light|dark`。PNG 导出等待字体并测量文字，使用 `--manifest source.layout.json --output-manifest image.actual.json` 写出缩放后的像素坐标。QA 必须读取 actual manifest，不能把估算坐标直接用于 2x PNG。
+标准序列/流程图优先本地 Mermaid；架构图需要手工编辑时复用 cc-drawio-studio，大型拓扑可选 Graphviz。无本地工具时使用兼容 JSON/HTML，不自动安装或下载。HTML 预览、独立 SVG 和 PNG 使用同源主题样式；导出指定 `--theme light|dark`。PNG 导出等待字体并测量文字，使用 `--manifest source.layout.json --output-manifest image.actual.json` 写出缩放后的像素坐标。QA 必须读取 actual manifest，不能把估算坐标直接用于 2x PNG。
 
 扩展 manifest 保留 canvas/boxes/connectors，增加 coordinateSpace、scale、measurement、groups、labels 与 issues。分组包含节点不算节点重叠。新增 node-text-overflow、label-content-loss、label-out-of-bounds、edge-label-collision、text-overlap 与 degenerate-connector 检查。旧 manifest 保留估算检测。显式尺寸或 waypoints 不满足约束时定位问题，不删字、不改关系、不静默移动。提高导出分辨率不能修复源级溢出。最终 PNG 必须视觉审阅；记录工具可用性、版本、主题、比例、修复轮次和残留问题，未解决时标记部分验收。