@bovinphang/frontend-craft 2.9.0 → 3.0.0

package/localized/zh-CN/skills/fec-react-project-standard/references/common/engineering-practices.sources.json

@@ -0,0 +1,377 @@
+{
+  "schemaVersion": 1,
+  "sources": [
+    {
+      "id": "google-review",
+      "publisher": "Google",
+      "title": "Code review standard",
+      "url": "https://google.github.io/eng-practices/review/reviewer/standard.html",
+      "section": "Engineering principles and code health",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guidance; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Use evidence and project standards; personal preference alone is not a blocker."
+    },
+    {
+      "id": "ms-playbook",
+      "publisher": "Microsoft ISE",
+      "title": "Test planning",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/test-planning/",
+      "section": "Risk, test scope and responsibilities",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Team practice, not a company-wide mandate; retain existing tools."
+    },
+    {
+      "id": "ms-faults",
+      "publisher": "Microsoft ISE",
+      "title": "Fault injection testing",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/fault-injection-testing/",
+      "section": "Controlled failure and observations",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Run scoped, controlled failures; do not infer production reliability from a small example."
+    },
+    {
+      "id": "google-ts",
+      "publisher": "Google",
+      "title": "TS/JS style guide",
+      "url": "https://google.github.io/styleguide/tsguide.html",
+      "section": "Environment caveat; types and exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Google explicitly notes internal constraints differ; no blanket ban overriding a justified project convention."
+    },
+    {
+      "id": "typescript-publishing",
+      "publisher": "TypeScript",
+      "title": "Publishing declaration files",
+      "url": "https://www.typescriptlang.org/docs/handbook/declaration-files/publishing.html",
+      "section": "Types and declaration dependencies",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living handbook; check installed compiler/module resolution",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Validate the actual packed consumer; do not upgrade compiler or module mode on this basis."
+    },
+    {
+      "id": "rust-api",
+      "publisher": "Rust library team",
+      "title": "Rust API Guidelines",
+      "url": "https://rust-lang.github.io/api-guidelines/",
+      "section": "Type safety, dependability and future proofing",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living recommendations; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Guidance rather than language law; preserve edition and MSRV."
+    },
+    {
+      "id": "tokio-join",
+      "publisher": "Tokio project",
+      "title": "JoinHandle",
+      "url": "https://docs.rs/tokio/latest/tokio/task/struct.JoinHandle.html",
+      "section": "Drop, abort and completion",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 1.54.1; project runtime/version determines applicability",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Tokio-specific mechanics only when Tokio is already used; no new runtime dependency."
+    },
+    {
+      "id": "uber-go",
+      "publisher": "Uber",
+      "title": "Go Style Guide",
+      "url": "https://github.com/uber-go/guide/blob/master/style.md",
+      "section": "Errors, interfaces and goroutine lifetime",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living master; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not import Uber dependencies or turn buffer-size style into a correctness theorem."
+    },
+    {
+      "id": "go-context",
+      "publisher": "Go project",
+      "title": "context package",
+      "url": "https://pkg.go.dev/context",
+      "section": "Cancellation propagation and ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Standard library; check owning go.mod/toolchain",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A cancellation signal alone does not confirm worker exit."
+    },
+    {
+      "id": "google-java",
+      "publisher": "Google",
+      "title": "Java Style Guide",
+      "url": "https://google.github.io/styleguide/javaguide.html",
+      "section": "Source structure and exception handling",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public style; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Naming/layout follows local standard; style is distinct from runtime correctness."
+    },
+    {
+      "id": "oracle-resources",
+      "publisher": "Oracle",
+      "title": "Try-with-resources",
+      "url": "https://docs.oracle.com/javase/tutorial/essential/exceptions/tryResourceClose.html",
+      "section": "Closing resources and suppressed exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "JDK8 tutorial; not a source for newer runtime features",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Preserve primary cause and borrowed-resource ownership; check actual API contract."
+    },
+    {
+      "id": "java-executor",
+      "publisher": "Oracle",
+      "title": "ExecutorService",
+      "url": "https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/concurrent/ExecutorService.html",
+      "section": "Shutdown, termination and awaitTermination",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Java SE17 documentation",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Check target JDK; no automatic virtual-thread or JDK migration."
+    },
+    {
+      "id": "google-python",
+      "publisher": "Google",
+      "title": "Python Style Guide",
+      "url": "https://google.github.io/styleguide/pyguide.html",
+      "section": "Imports, exceptions and mutable state",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Keep current formatter/type checker and library responsibilities."
+    },
+    {
+      "id": "python-asyncio",
+      "publisher": "Python project",
+      "title": "Coroutines and tasks",
+      "url": "https://docs.python.org/3/library/asyncio-task.html",
+      "section": "Cancellation and task ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 3.15.2; feature availability follows project Python",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Newer TaskGroup/timeout features require a supported project version; no upgrade implied."
+    },
+    {
+      "id": "cert-c",
+      "publisher": "CMU SEI",
+      "title": "MEM00-C allocation and release",
+      "url": "https://cmu-sei.github.io/secure-coding-standards/sei-cert-c-coding-standard/recommendations/memory-management-mem/mem00-c/",
+      "section": "MEM00-C memory responsibility",
+      "checkedAt": "2026-11-08",
+      "versionScope": "2016-edition standard family; MEM00-C is a recommendation",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not label recommendations as mandatory CERT rules or apply C++ ownership machinery to pure C."
+    },
+    {
+      "id": "cpp-core",
+      "publisher": "C++ Core Guidelines editors",
+      "title": "C++ Core Guidelines",
+      "url": "https://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines",
+      "section": "Resource and lifetime interfaces",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page dated 2026-06-14, living release0.8",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Adapt to existing exception policy and compiler; borrowing does not imply ownership."
+    },
+    {
+      "id": "google-cpp",
+      "publisher": "Google",
+      "title": "C++ Style Guide",
+      "url": "https://google.github.io/styleguide/cppguide.html",
+      "section": "Exceptions and project consistency",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Its exception/standard policy is not universal; preserve the owning project policy and C ABI."
+    },
+    {
+      "id": "ms-sal",
+      "publisher": "Microsoft",
+      "title": "Understanding SAL",
+      "url": "https://learn.microsoft.com/en-us/cpp/code-quality/understanding-sal?view=msvc-170",
+      "section": "Parameter preconditions and output guarantees",
+      "checkedAt": "2026-11-08",
+      "versionScope": "MSVC170 documentation view",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "SAL is an optional toolchain-specific expression, not a portable mandatory annotation."
+    },
+    {
+      "id": "aws-retry",
+      "publisher": "AWS",
+      "title": "Timeouts, retries and backoff with jitter",
+      "url": "https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/",
+      "section": "Timeouts, bounded retries and retry amplification",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Article dated 2019-12-05; official Builder Center redirect",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Retry only semantically safe operations within a total budget; failure classes alone do not grant write replay."
+    },
+    {
+      "id": "aws-idempotency",
+      "publisher": "AWS",
+      "title": "Making retries safe with idempotent APIs",
+      "url": "https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/",
+      "section": "Caller intent, duplicate requests and atomic recording",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Builders Library; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A process-local example does not establish database/multi-process exactly-once."
+    },
+    {
+      "id": "react-effects",
+      "publisher": "React project",
+      "title": "useEffect",
+      "url": "https://react.dev/reference/react/useEffect",
+      "section": "Cleanup and fetching race conditions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; use installed project API",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Abort and stale-result checks complement each other; no React upgrade implied."
+    },
+    {
+      "id": "react-act",
+      "publisher": "React project",
+      "title": "act",
+      "url": "https://react.dev/reference/react/act",
+      "section": "Applying updates before assertions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; verify sample versions",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "DOM simulation is not browser E2E or native desktop execution."
+    },
+    {
+      "id": "vue-watchers",
+      "publisher": "Vue project",
+      "title": "Watchers",
+      "url": "https://vuejs.org/guide/essentials/watchers.html",
+      "section": "Side-effect cleanup",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Vue3; onWatcherCleanup requires3.5+ and synchronous registration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use supported callback cleanup on older Vue3; no framework migration."
+    },
+    {
+      "id": "tauri-permissions",
+      "publisher": "Tauri project",
+      "title": "Permissions",
+      "url": "https://v2.tauri.app/security/permissions/",
+      "section": "Command allow/deny and capability scope",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Tauri2 docs; check installed version/configuration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Rust command-unit tests do not activate webview permissions or prove packaged GUI security."
+    },
+    {
+      "id": "electron-security",
+      "publisher": "Electron project",
+      "title": "Security",
+      "url": "https://www.electronjs.org/docs/latest/tutorial/security",
+      "section": "IPC sender checks and renderer trust",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living docs; match installed Electron",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Handler tests do not prove sandbox/context isolation is active in a packaged app."
+    },
+    {
+      "id": "spring-tests",
+      "publisher": "Spring project",
+      "title": "Testing Spring Boot applications",
+      "url": "https://docs.spring.io/spring-boot/3.5/reference/testing/spring-boot-applications.html",
+      "section": "Test slices and application tests",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Boot3.5 docs observed3.5.16; preserve sample/project versions",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Test scope matters; MVC tests do not establish live DB/transaction or deployment behavior."
+    },
+    {
+      "id": "fastapi-lifespan",
+      "publisher": "FastAPI project",
+      "title": "Lifespan events",
+      "url": "https://fastapi.tiangolo.com/advanced/events/",
+      "section": "Acquire and release application resources",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living FastAPI documentation; match pinned dependencies",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use actual lifespan execution in tests; import does not own a live connection."
+    },
+    {
+      "id": "gin-binding",
+      "publisher": "Gin project",
+      "title": "Binding",
+      "url": "https://gin-gonic.com/en/docs/binding/",
+      "section": "Binding errors and validation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living Gin documentation; match pinned module",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Writing/aborting a response does not replace explicit control-flow return in the current handler."
+    },
+    {
+      "id": "axum-extractors",
+      "publisher": "Axum project",
+      "title": "Extractors",
+      "url": "https://docs.rs/axum/latest/axum/extract/",
+      "section": "Extractor order and rejections",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Latest route observed0.8.9; fixed0.8.9 route unavailable via browser tool",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Pinned existing example is authoritative for compilation; do not assume source signatures across releases."
+    },
+    {
+      "id": "drogon-filters",
+      "publisher": "Drogon project",
+      "title": "Middleware and Filter",
+      "url": "https://github.com/drogonframework/drogon/wiki/ENG-05-Middleware-and-Filter",
+      "section": "Filter callbacks and continuation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living wiki; match compiled example version",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Synthetic role headers are not authentication; callback lifetime must follow actual ownership."
+    },
+    {
+      "id": "node-typescript",
+      "publisher": "Node.js project",
+      "title": "Modules: TypeScript",
+      "url": "https://nodejs.org/api/typescript.html",
+      "section": "Type-stripping history, enabling, and separate type checking",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed26.13.0; sample>=22.18, actual24.14.1 tested; product Node>=22 unchanged",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Native stripping is not type checking and ignores tsconfig. Missing sample capability is MISSING, not a product runtime upgrade."
+    }
+  ]
+}

package/localized/zh-CN/skills/fec-react-project-standard/references/engineering-practices.md

@@ -0,0 +1,73 @@
+---
+practiceCards:
+  - id: "fec-react-project-standard:effect-cleanup"
+    level: "required"
+    sourceIds: ["react-effects","react-act"]
+    caseIds: ["EP-UI-01"]
+    evidence: "case"
+  - id: "fec-react-project-standard:stale-results"
+    level: "conditional"
+    sourceIds: ["react-effects","react-act"]
+    caseIds: ["EP-UI-01"]
+    evidence: "case"
+---
+
+# 本入口工程决策
+
+先定位项目角色、工具链及已有约定，再按需读取[公共原则](common/engineering-practices.md)。下列条件仅约束当前语言/场景；结构检查不证明全部语义或实际运行。
+
+<a id="fec-react-project-standard:effect-cleanup"></a>
+## Effect清理自己真实拥有的资源
+
+级别: required
+
+### 风险
+组件移除后，请求、监听或定时器可能继续活动。
+
+### 适用
+组件自己启动effect时适用；共享缓存/客户端任务保留原拥有者，取消订阅不授权取消全部消费者。
+
+### 决策
+setup与cleanup配对，向所属任务传播取消，清理可重复；使用已安装React API及已有组件/query边界。
+
+### 例外
+开发环境setup/cleanup循环不自动等于生产缺陷；Abort表示结束关注，不能撤销已提交服务端写。
+
+### 正反示意
+正例：清理取消本组件load并移除监听。反例：卸载时清空其他组件仍使用的全局客户端。
+
+### 验证
+运行本地真实React/DOM卸载测试；变更组件实际拥有订阅/定时器或Strict Mode行为时补对应检查。
+
+### 来源
+react-effects, react-act — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-UI-01; case. [本入口可运行案例](../examples/engineering/README.md)。 执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。
+
+<a id="fec-react-project-standard:stale-results"></a>
+## 仅当前视图请求可发布结果
+
+级别: conditional
+
+### 风险
+迟到的A成功、错误或finally可能覆盖B当前状态。
+
+### 适用
+适用于只展示最新结果的视图；各有独立结果的排队命令需自己的意图契约。
+
+### 决策
+按所属视图/query key限定请求身份及寿命，成功、错误和loading等所有状态发布都检查；取消与身份校验互补。
+
+### 例外
+不使用使无关组件失效的全局计数；取消已提交mutation不证明回滚，也不授权重放。
+
+### 正反示意
+正例：A迟到仍展示B。反例：只保护成功回调，旧finally却清掉B的loading。
+
+### 验证
+本地可控A/B Promise测试实际渲染React；实际拥有者再补迟到错误/loading及共享缓存，不把DOM模拟称浏览器E2E。
+
+### 来源
+react-effects, react-act — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-UI-01; case. [本入口可运行案例](../examples/engineering/README.md)。 执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。

package/localized/zh-CN/skills/fec-react-project-standard/references/generic-component-types.md

@@ -0,0 +1,37 @@
+## 更安全的泛型组件模式
+
+```tsx
+interface Entity {
+  id: string;
+}
+
+interface EntityPickerProps<TEntity extends Entity> {
+  items: TEntity[];
+  selectedId: string | null;
+  getLabel: (item: TEntity) => string;
+  onSelect: (item: TEntity) => void;
+}
+
+export function EntityPicker<TEntity extends Entity>({
+  items,
+  selectedId,
+  getLabel,
+  onSelect,
+}: EntityPickerProps<TEntity>) {
+  return (
+    <ul>
+      {items.map((item) => (
+        <li key={item.id}>
+          <button
+            aria-pressed={item.id === selectedId}
+            type="button"
+            onClick={() => onSelect(item)}
+          >
+            {getLabel(item)}
+          </button>
+        </li>
+      ))}
+    </ul>
+  );
+}
+```

package/localized/zh-CN/skills/fec-react-project-standard/references/react-quality-patterns.md

@@ -27,9 +27,9 @@
 
 ## TypeScript 规范
 
-通用 TypeScript 工程规则由 `fec-typescript-project-standard` 负责，包括 `tsconfig`、strictness、DTO / view model 边界、`unknown` 收窄、public API 类型、声明产物和类型测试。
+通用 TypeScript 工程规则由 `cc-typescript-project-standard` 负责，包括 `tsconfig`、strictness、DTO / view model 边界、`unknown` 收窄、public API 类型、声明产物和类型测试。
 
-React 规范只补充组件、Props、事件和 TSX 泛型写法；复杂类型建模或跨框架类型契约先分流到 `fec-typescript-project-standard`。
+React 规范只补充组件、Props、事件和 TSX 泛型写法；复杂类型建模或跨框架类型契约先分流到 `cc-typescript-project-standard`。
 
 ### React 项目补充约定
 
@@ -119,7 +119,7 @@ describe("UserForm", () => {
 - [ ] 可复用逻辑是否已提取为 hooks
 - [ ] loading / error / empty / data 状态是否齐全
 - [ ] API 层是否具备类型约束和统一错误处理
-- [ ] 复杂 DTO、外部数据收窄、公共类型或 `tsconfig` 问题是否已分流到 `fec-typescript-project-standard`
+- [ ] 复杂 DTO、外部数据收窄、公共类型或 `tsconfig` 问题是否已分流到 `cc-typescript-project-standard`
 - [ ] 状态管理是否符合就近原则
 - [ ] 路由级或重型模块是否考虑懒加载
 - [ ] 样式方案是否与仓库保持一致

package/localized/zh-CN/skills/fec-react-project-standard/references/react-runtime-patterns.md

@@ -28,7 +28,7 @@
 
 ### 表单
 
-- 受控字段 + 校验错误对象是一类可行实现；中大型表单优先 **React Hook Form**（或 Formik）+ **Zod**，复杂表单值、DTO 和校验类型契约分流到 `fec-typescript-project-standard`。
+- 受控字段 + 校验错误对象是一类可行实现；中大型表单优先 **React Hook Form**（或 Formik）+ **Zod**，复杂表单值、DTO 和校验类型契约分流到 `cc-typescript-project-standard`。
 - 避免单组件内巨型 `useState` 表单对象与重复校验逻辑，可拆字段子组件或抽 `useFormSchema`。
 
 ### Error Boundary

package/localized/zh-CN/skills/fec-refactoring/SKILL.md

@@ -3,81 +3,23 @@ name: fec-refactoring
 description: 用于在不改变可观察行为的前提下重组既有前端代码，包括职责提炼、模块搬移、条件逻辑简化、API 整理和数据组织。不要用于新增功能、改变行为的缺陷修复、依赖或框架迁移，以及已经证实的死代码清理。
 ---
 
-# 技能：保持行为的重构
+# 前端行为保持重构
 
-## 用途
+执行[公共重构方法](references/common/refactoring.md)，保持 GREEN → REFACTOR → GREEN。公共方法规定行为保持、绿色基线、单步变换、立即验证、回归时只撤回当前步骤，以及差异预算。
 
-以小步、可验证、可回滚的方式重组仍在使用的前端代码，同时保持用户、调用方、测试、路由和集成能够观察到的行为不变。
+## 前端观察边界
 
-## 核心契约
+明确 props/emits/slots、hooks/composables、DOM、loading/error/empty、焦点和键盘、路由与 URL、状态归属和对象身份、请求、缓存、生命周期、SSR/hydration、导出及动态注册。
 
-每次执行都遵守以下规则：
+## 前端风险与范围
 
-1. **行为保持**：纯重构只改变内部结构，不主动改变可观察行为。
-2. **修改前基线**：编辑前先记录当前可用验证结果。
-3. **一次只做一个主要重构**：每一步只有一个主要结构意图。
-4. **每一步都验证**：完成一步后立即运行最小但有效的验证。
-5. **先回滚当前步骤，再讨论修复**：若当前步骤引入回归，先恢复到上一步，再缩小或重排方案。
-6. **重构与功能修改分离**：新增行为或改变行为的缺陷修复不属于纯重构。
-7. **优先最小安全重构**：有局部、可逆方案时，不直接扩大为架构重写。
-8. **遵守差异预算**：实际修改范围明显超出计划时必须停止并重新评估。
+认证、权限、路由、存储、SSR/hydration、网络协议和全局状态搬移按实际影响评估。不要把重构手法名称当作 SAFE 的证明。
 
-纯重构采用 **GREEN → REFACTOR → GREEN**，不为了形式上的 TDD 人为制造失败行为测试。
+## 专业参考
 
-## 流程
+- [领域证据和观察契约](references/principles.md)
+- [前端验证阶梯](references/workflow.md)
+- [何时重构](references/when-to-refactor.md)
+- [与行为变更的边界](references/refactoring-vs-feature-change.md)
 
-1. 分类请求，确认目标是结构调整且要求行为保持。
-2. 读取项目配置、受影响模块、公开导出、路由、状态边界、测试和当前 diff。
-3. 记录相关可观察契约：输入、输出、异常、副作用、UI 状态、事件、网络请求、状态迁移、路由和公开 API。
-4. 建立修改前基线；既有失败要单独记录，不能算到后续重构头上。
-5. 基于证据诊断结构问题，并检查可能的误判。
-6. 建立安全网：优先复用已有测试，风险较高且覆盖不足时再补当前行为的特征测试。
-7. 把方案拆成有顺序的小步，每步记录手法、原因、前置条件、风险、差异预算、验证和回滚边界。
-8. 每次只执行一个主要结构变换，不夹带无关清理、格式化和重新设计。
-9. 立即验证，并比较实际修改范围与差异预算。
-10. 若出现新回归，先回滚当前步骤，确认基线恢复，再缩小或调整顺序。
-11. 最后按需要运行类型检查、测试、构建、E2E、无障碍或其他专项门禁。
-12. 根据证据给出 PASS、PARTIAL 或 NOT PROVEN，不夸大验证强度。
-
-## 风险分级
-
-| 风险 | 常见范围 | 默认动作 |
-| --- | --- | --- |
-| `SAFE` | 局部私有代码、契约稳定、容易回滚 | 可执行，并逐步验证 |
-| `CAUTION` | 跨模块、共享状态、导入、Hook/Composable、生命周期 | 安全证据充分时执行，否则先规划 |
-| `DANGER` | 公开 API、路由、持久化、网络契约、认证、SSR/水合、大范围状态或继承改造 | 默认先规划并停止等待明确授权 |
-
-风险由上下文决定，不能只凭手法名称判定安全级别。
-
-## 差异预算
-
-每个可执行步骤先写清：
-
-```text
-预期文件数：N
-预期函数/组件数：N
-预期公开 API 变化：0
-预期行为变化：0
-```
-
-如果实际 diff 明显超出预算，停止并重新评估，不能静默扩大成重新设计。
-
-## 参考资料
-
-- 安全规则、证据模型和风险语言见 [principles.md](references/principles.md)。
-- 状态机、基线、回滚和报告契约见 [workflow.md](references/workflow.md)。
-- 判断何时重构或何时延后见 [when-to-refactor.md](references/when-to-refactor.md)。
-- 区分重构、功能、缺陷、清理、迁移和评审见 [refactoring-vs-feature-change.md](references/refactoring-vs-feature-change.md)。
-
-## 约束
-
-- 不修改测试来接受被重构意外改变的业务行为。
-- 未有充分证据时，不把认证、权限、路由、持久化、协议或公开包契约变化标为 `SAFE`。
-- 当前步骤出现新失败后，不继续叠加结构修改。
-- 项目没有测试框架时，不自动安装新框架。
-- 行数、复杂度、注释、一个 switch 或链式调用都不能单独证明存在坏味道。
-- 默认不执行远程 Git 写入。
-
-## 预期输出
-
-输出带证据、风险、差异预算、逐步验证和必要回滚记录的重构方案或实现，并给出 PASS、PARTIAL 或 NOT PROVEN 的行为保持结论。
+交付公共方法定义的 PASS、PARTIAL 或 NOT PROVEN、每步差异预算、实际校验和剩余风险。

package/localized/zh-CN/skills/fec-refactoring/references/common/refactoring.md

@@ -0,0 +1,16 @@
+# 保持行为的重构
+
+重构改变内部组织并保持可观察契约，使用 GREEN → REFACTOR → GREEN，不为结构变换制造失败的行为需求。
+
+1. 区分结构调整、新行为、缺陷修复和依赖迁移；行为变化进入独立流程。
+2. 阅读实现、调用方、导出、注册、持久化与测试；改动前定义结果、错误、副作用及顺序、状态变换、公共名称和协议。
+3. 建立绿色基线，或记录已有失败。关键行为缺少覆盖时补充描述当前行为的特征测试，可以从绿色开始。
+4. 诊断结构证据并排除误判。行数或复杂度指标本身不足以证明应当重写；优先选择最小安全、可回退的变换。
+5. 规划前置步骤；每步记录目标、结构意图、手法、风险、预计文件/函数、公共 API/行为变化（纯重构为零）、验证和回退边界。
+6. 一次只改一个主要结构问题，立即运行最近的有效校验并检查差异；实际范围超出预算时停止并重新评估。
+7. 新回归使当前步骤失效：只撤回当前结构步骤，验证前一基线，再缩小或调整顺序；不撤销无关用户改动，不跨无关模块扩散修复。
+8. 按受影响契约扩展验证：本地/静态、单元/集成、完整 lint/类型/测试、构建和相关专项。使用现有工具，不强制引入框架。
+
+风险依上下文判断：SAFE 为证据充分的局部私有变换，CAUTION 为跨模块/共享状态/生命周期变换，DANGER 为公共 API、schema、持久化、鉴权、权限、协议或架构级变化。手法名称不自动决定安全等级。
+
+给出证明结论：PASS 表示相关行为充分覆盖且校验通过；PARTIAL 表示已执行检查通过但仍有重要覆盖缺口；NOT PROVEN 表示证据或环境不足以证明行为保持。附实际命令、回退决定和剩余风险。