@scemoon/cdh 1.0.0

package/ai-dlc-skill/phases/deliver/rules.md

@@ -0,0 +1,61 @@
+# Deliver Rules (DLV-*) + Stack Rules (STK-*)
+
+## DLV-001: Unified Stack Preview Before Production
+**Severity:** MUST
+**Description:** Every release MUST deploy as unified stack preview with per-component e2e + cross-stack e2e passing before production.
+**Valid:** `deploy_stack --preview` → `pytest tests/cross-stack/ --stack-url $STACK_URL`.
+**Invalid:** Deploying only one component to preview.
+
+## DLV-002: Production Approval Gate
+**Severity:** MUST
+**Description:** Production deployment requires explicit human approval reviewing per-component e2e, cross-stack e2e, staging smoke, and contract-diff.md.
+**Valid:** Human reviews all reports and explicitly approves.
+**Invalid:** Automated production deployment triggered solely by test pass.
+
+## DLV-003: Stack BVT Validation
+**Severity:** MUST
+**Description:** After production deploy, BVT MUST run against the stack. Failure triggers automatic stack rollback.
+**Valid:** `bvt ${PRODUCTION_URL}` → fail → `deploy_stack --rollback`.
+**Invalid:** BVT skip or success with errors.
+
+## DLV-004: Per-Component Preview URL Isolation
+**Severity:** MUST
+**Description:** e2e tests run against dynamic preview URLs, never hardcoded production URLs.
+**Valid:** `pytest apps/web/tests/e2e/ --preview-url $WEB_URL`.
+**Invalid:** Hardcoded `https://prod.example.com` in tests.
+
+## STK-001: Component Scope Declaration
+**Severity:** MUST
+**Description:** Every spec delta, design doc, task list MUST declare `affects:`.
+**Valid:** `affects: [web, backend, contracts]`.
+**Invalid:** Missing `affects` declaration.
+
+## STK-002: Cross-Component Tasks Have Edges
+**Severity:** MUST
+**Description:** Tasks consuming a contract MUST have explicit `depends_on` edge to producing task.
+**Valid:** `depends_on: [int-contract-auth-login, be-login-endpoint]`.
+**Invalid:** Implicit dependency with no DAG edge.
+
+## STK-003: Cross-Stack E2E Mandatory for ≥2 Components
+**Severity:** MUST
+**Description:** Changes affecting ≥2 components MUST have cross-stack e2e testing real flow between components.
+**Valid:** Real web client against real backend preview.
+**Invalid:** Cross-stack test that mocks the other component.
+
+## STK-004: Unified Stack Deploy
+**Severity:** MUST
+**Description:** Shared environments MUST use `deploy_stack` orchestrator, not per-component ad-hoc deploys.
+**Valid:** `deploy_stack --preview` deploys all components.
+**Invalid:** Ad-hoc per-component deploy to shared preview.
+
+## STK-005: Cross-Component Build Config Injection
+**Severity:** MUST
+**Description:** All client builds receive `BACKEND_URL` as build-time env var, never hardcoded.
+**Valid:** `pnpm --filter web build --env BACKEND_URL=$BACKEND_URL`.
+**Invalid:** Hardcoded URLs in `.env.production`.
+
+## STK-006: Stack-Level Rollback
+**Severity:** MUST
+**Description:** Rollback is stack operation. Entire previous stable version reverts together.
+**Valid:** `deploy_stack --rollback v1.2.3` reverts all components.
+**Invalid:** Rolling back only backend while leaving clients on new version.

package/ai-dlc-skill/phases/plan/entry.md

@@ -0,0 +1,25 @@
+---
+name: ai-dlc-plan
+description: "Plan Phase: Design Doc → Task DAG → Test Plan"
+triggers:
+  - plan
+  - design
+  - task-list
+---
+
+# Plan Phase (规划)
+
+Convert approved spec into technical design and task decomposition.
+
+## Entry
+
+See `lifecycle.md` for the full phase flow.
+See `rules.md` for enforceable rules (PLN-001 to PLN-004).
+See `prompt.md` for the sub-agent delegation prompt template.
+
+## 当被委派时
+
+1. 读取 spec-delta 和 feature 文件
+2. 生成设计文档（per-component + integration）
+3. 分解为带 DAG 依赖的任务单元
+4. 编写测试计划（每层）

package/ai-dlc-skill/phases/plan/lifecycle.md

@@ -0,0 +1,204 @@
+# AI-DLC Phase 2: Plan (规划)
+
+Design the solution and decompose work into tracked, dependency-ordered units, including cross-component edges.
+
+## Goal
+
+Translate approved specifications into a concrete technical plan that can be executed unit by unit, with explicit cross-component dependencies and contract references.
+
+## Flow
+
+```
+Approved Spec + BDD Features (per-component + cross-stack)
+  │
+  ▼
+SDD: Design Doc
+  - architecture (per component)
+  - data model
+  - API contract (references INT-FR-*)
+  - state machine
+  - integration section (cross-component flow)
+  │
+  ▼
+SDD: Task Decomposition (units with DAG, including cross-component edges)
+  │
+  ▼
+TDD: Test Plan (per scenario, written before implementation)
+  - unit / integration / e2e / cross-stack layer
+  │
+  ▼
+INT: Contract plan (which contracts change, version impact)
+  │
+  ▼
+Gate: Human review → approved or revise
+```
+
+## SDD — Design Document (multi-component aware)
+
+A multi-component design doc is organized by **component sections** plus an **integration section**.
+
+```markdown
+## Design — CHG-{{id}}
+
+**Affects:** [{{components}}]
+**Contracts touched:** {{list or "none"}}
+
+### Component: backend (BE-FR-*)
+- Architecture: {{serverless / container / ...}}
+- Data model: {{tables / collections}}
+- API surface: {{references INT-FR-* contract}}
+- State machine: {{...}}
+
+### Component: web (WEB-FR-*)
+- Architecture: {{SPA / SSR}}
+- Routes: {{...}}
+- Data flow: {{uses packages/shared generated from INT-FR-001}}
+
+### Component: native (NATIVE-FR-*)
+- Architecture: {{native architecture}}
+- Data flow: {{uses packages/shared generated from INT-FR-*}}
+
+### Component: desktop (DESKTOP-FR-*)
+- Architecture: {{desktop architecture}}
+- Data flow: {{uses packages/shared generated from INT-FR-*}}
+
+### Component: wxa (WXA-FR-*)
+- Architecture: {{WeChat Mini Program}}
+- Data flow: {{uses packages/shared generated from INT-FR-*}}
+
+### Component: mya (MYA-FR-*)
+- Architecture: {{Mini Program}}
+- Data flow: {{uses packages/shared generated from INT-FR-*}}
+
+### Component: tta (TTA-FR-*)
+- Architecture: {{TikTok Mini Program}}
+- Data flow: {{uses packages/shared generated from INT-FR-*}}
+
+### Integration
+- Flow: {{web → backend → DB; or app → backend → event → ...}}
+- Contract refs: INT-FR-001, INT-FR-002
+- Failure modes: {{timeout, retry, fallback}}
+- Backward compat: {{additive / breaking → migration}}
+```
+
+### Data Model
+
+| Field | Type | Constraints |
+|-------|------|-------------|
+| id | UUID | PK |
+| email | string | UNIQUE, NOT NULL |
+| password_hash | string | NOT NULL |
+
+### API Contract
+
+| Method | Path | INT FR | Provider | Consumer |
+|--------|------|--------|----------|----------|
+| POST | /auth/login | INT-FR-001 | BE-FR-001 | WEB-FR-001, NATIVE-FR-001, DESKTOP-FR-001, WXA-FR-001, MYA-FR-001, TTA-FR-001 |
+
+### State Machine
+
+```
+ANONYMOUS → LOGGED_IN → SESSION_EXPIRED
+              ↓
+          LOGGED_OUT
+```
+
+## SDD — Task Decomposition with DAG (multi-component)
+
+Tasks MUST include cross-component edges. A task that produces or consumes a contract depends on the corresponding `INT-FR-*` task.
+
+```mermaid
+graph TD
+  INT1[INT-FR-001: define /auth/login contract]
+  BE1[BE-FR-001 unit-1: DB schema + models]
+  BE2[BE-FR-001 unit-2: login endpoint]
+  WEB1[WEB-FR-001 unit-1: login form + API client]
+  WEB2[WEB-FR-001 unit-2: token storage + redirect]
+  CS1[INT-FR-001 cross-stack: e2e login flow]
+
+  INT1 --> BE2
+  INT1 --> WEB1
+  BE1 --> BE2
+  BE2 --> CS1
+  WEB1 --> CS1
+  WEB2 --> CS1
+```
+
+```yaml
+units:
+  - id: int-contract-1
+    fr: INT-FR-001
+    affects: [contracts]
+    depends_on: []
+    deliverables: [contracts/api/auth.yaml]
+  - id: be-unit-1
+    fr: BE-FR-001
+    affects: [backend]
+    depends_on: []
+    scenarios: []
+  - id: be-unit-2
+    fr: BE-FR-001
+    affects: [backend]
+    depends_on: [int-contract-1, be-unit-1]
+    scenarios: ["BE-FR-001 @positive", "BE-FR-001 @negative"]
+  - id: web-unit-1
+    fr: WEB-FR-001
+    affects: [web]
+    depends_on: [int-contract-1]
+    scenarios: ["WEB-FR-001 @positive", "WEB-FR-001 @negative"]
+  - id: cross-stack-1
+    fr: INT-FR-001
+    affects: [web, backend]
+    depends_on: [be-unit-2, web-unit-1]
+    layer: cross-stack
+    scenarios: ["INT-FR-001 @positive", "INT-FR-001 @negative", "INT-FR-001 @edge"]
+```
+
+## TDD — Test Plan (per scenario, per layer)
+
+Each scenario gets a test plan that names the **layer** it runs at.
+
+```markdown
+## BE-FR-001 @positive: Login API success
+Layer: integration
+Test cases:
+  1. test_login_valid_credentials_returns_jwt
+  2. test_login_sets_expiry_3600
+
+## WEB-FR-001 @positive: Login form happy path
+Layer: e2e
+Test cases:
+  1. test_login_form_submits_and_redirects
+
+## INT-FR-001 @positive: Full web→backend login flow
+Layer: cross-stack
+Test cases:
+  1. test_web_login_e2e_against_preview_url
+```
+
+## INT — Contract Plan
+
+For each contract change, list:
+- Old version, new version
+- Breaking? (yes / no) → if yes, plan migration in `contracts/CHANGELOG.md`
+- Consumers affected (which components will pull the new shared types)
+- Backward-compat strategy (additive vs. deprecate-then-remove)
+
+## Artifacts
+
+| Artifact | Location | Purpose |
+|----------|----------|---------|
+| Design doc | `openspec/changes/{id}/design.md` | Per-component + integration |
+| Task list | `openspec/changes/{id}/task-list.md` | DAG with cross-component edges |
+| Test plan | Embedded in task-list or separate | Per-scenario, per-layer |
+| Contract plan | `openspec/changes/{id}/contract-diff.md` placeholder | Filled in Verify |
+
+## Gate
+
+**Before advancing to Verify phase:**
+- [ ] Design doc has per-component sections + integration section
+- [ ] Tasks decomposed with explicit dependency DAG (including cross-component edges)
+- [ ] `INT-FR-*` tasks precede the consuming per-component tasks
+- [ ] Test plans name the layer (`unit` / `integration` / `e2e` / `cross-stack`) per scenario
+- [ ] Contract plan identifies breaking vs. additive
+- [ ] Human reviewed and approved

package/ai-dlc-skill/phases/plan/prompt.md

@@ -0,0 +1,38 @@
+# Plan Phase Agent Prompt
+
+你是一个 AI-DLC Plan Phase Agent。
+由 Master Agent 委派处理方案设计。
+
+## 输入
+- `openspec/changes/{id}/spec-delta.md`
+- BDD feature 文件
+
+## 任务
+
+1. **SDD: Design Doc**
+   - 在 `openspec/changes/{id}/design.md` 输出
+   - 包含：架构图（Mermaid）、数据模型、API 表、状态机
+   - 每组件独立 section + 集成 section
+
+2. **SDD: Task Decomposition**
+   - 在 `openspec/changes/{id}/task-list.md` 输出
+   - YAML 格式，unit 带 `depends_on` DAG
+   - 跨组件 task 显示声明 `depends_on` 关系
+
+3. **TDD: Test Plan**
+   - 每个 BDD scenario 对应最少一个测试 case
+   - 标注 layer: unit / integration / e2e / cross-stack / contract
+
+4. **Contract Plan**
+   - 标注版本影响：additive / breaking
+   - 如需 breaking change 标记为 human-approval 阻塞
+
+## 输出产物
+- `openspec/changes/{id}/design.md`
+- `openspec/changes/{id}/task-list.md`
+- `openspec/changes/{id}/contract-diff.md`（占位）
+
+## 约束
+- 遵守 `rules.md` 中的 PLN-001 到 PLN-004
+- 遵守 STK-001, STK-002（affects 声明 + cross-component 依赖）
+- 完成前必须通过 Human Gate 审查

package/ai-dlc-skill/phases/plan/rules.md

@@ -0,0 +1,25 @@
+# Plan Rules (PLN-*)
+
+## PLN-001: Design Documentation
+**Severity:** MUST
+**Description:** Each feature MUST have a design document covering architecture, data model, API contracts, and state machine. For multi-component features, MUST have per-component sections and an integration section.
+**Valid:** `openspec/changes/{id}/design.md` with `## Component: backend`, `## Component: web`, `## Integration`.
+**Invalid:** A single flat architecture section with no per-component concerns.
+
+## PLN-002: Dependency DAG
+**Severity:** MUST
+**Description:** Units MUST be decomposed with explicit dependency DAG including cross-component edges. A task producing/consuming a contract MUST depend on the corresponding `INT-FR-*` task.
+**Valid:** `depends_on: [int-contract-1, be-unit-1]` for a web task consuming the contract.
+**Invalid:** Per-component task lists with no cross-component edges.
+
+## PLN-003: Test Plan Before Implementation
+**Severity:** MUST
+**Description:** Test plans for each scenario MUST be written before implementation and MUST name the test layer (`unit`, `integration`, `e2e`, `cross-stack`, `contract`).
+**Valid:** `BE-FR-001 @positive → layer: integration → test_login_valid_credentials`
+**Invalid:** A test plan with no layer designation.
+
+## PLN-004: Contract Plan
+**Severity:** MUST
+**Description:** For each contract change, the design doc MUST identify version impact (additive vs. breaking), consumers affected, and backward-compat strategy.
+**Valid:** `INT-FR-001 change: additive, MINOR bump; no consumer migration needed`
+**Invalid:** Contract change with no version impact noted.

package/ai-dlc-skill/phases/understand/entry.md

@@ -0,0 +1,26 @@
+---
+name: ai-dlc-understand
+description: "Understand Phase: Intent → Spec Delta → BDD Feature Files"
+triggers:
+  - understand
+  - spec-delta
+  - EARS
+  - feature file
+---
+
+# Understand Phase (理解)
+
+Transform business intent into formal specification and behavior scenarios.
+
+## Entry
+
+See `lifecycle.md` for the full phase flow.
+See `rules.md` for enforceable rules (UND-001 to UND-006).
+See `prompt.md` for the sub-agent delegation prompt template.
+
+## 当被委派时
+
+1. 读取 intent 输入
+2. 按 SDD 方法生成 spec-delta（EARS 格式）
+3. 为每个 FR 写 BDD feature 文件（≥3 scenarios: positive, negative, edge）
+4. 输出到 `openspec/changes/{id}/`

package/ai-dlc-skill/phases/understand/lifecycle.md

@@ -0,0 +1,184 @@
+# AI-DLC Phase 1: Understand (理解)
+
+Transform business intent into formal specification and behavior scenarios, scoped to the right FR namespace.
+
+## Goal
+
+Convert a business need into unambiguous, verifiable requirements before any design or code work begins. For multi-component features, capture the **cross-component boundary** in addition to per-component behavior.
+
+## Flow
+
+```
+Intent (business need / user story)
+  │
+  ▼
+Identify scope: which components does this touch?
+  │
+  ▼
+SDD: Proposal (why, what, impact, affects: [native|desktop|web|backend|wxa|mya|tta|contracts])
+  │
+  ▼
+SDD: Spec Delta (EARS format — ADDED/MODIFIED/REMOVED, FR namespaces)
+  │
+  ▼
+BDD: Feature Files
+  - features/{component}/{domain}/{feature}.feature   (per-component)
+  - features/cross-stack/{domain}/{feature}.feature   (full flow, if applies)
+  │
+  ▼
+Gate: Human review → approved or revise
+```
+
+## Scope Identification
+
+Before writing the spec, declare which components the feature affects. This determines the FR namespaces and which lifecycle paths run.
+
+| Affects | Example | FRs |
+|---------|---------|-----|
+| `[backend]` only | Internal API | `BE-FR-NNN` |
+| `[web, backend]` | Login UI + API | `WEB-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[native, backend]` | Native login | `NATIVE-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[desktop, backend]` | Desktop login | `DESKTOP-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[wxa, backend]` | Mini-program login | `WXA-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[mya, backend]` | Mini-program login | `MYA-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[tta, backend]` | Mini-program login | `TTA-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[web, native, desktop, wxa, mya, tta, backend]` | Full feature | `WEB-FR-NNN`, `NATIVE-FR-NNN`, `DESKTOP-FR-NNN`, `WXA-FR-NNN`, `MYA-FR-NNN`, `TTA-FR-NNN`, `BE-FR-NNN`, `INT-FR-NNN` |
+| `[contracts]` | Schema-only change | `INT-FR-NNN` only |
+
+`affects: [contracts]` is reserved for **pure contract changes** (e.g. add a new field shared by all components). It still requires Plan + Verify.
+
+## SDD — Spec-Driven Development
+
+### Intent Capture
+
+```markdown
+## Intent
+
+**Title:** {{title}}
+**Affects:** [{{components}}]
+**Why:** {{why}}
+**What:** {{what}}
+**Success:** {{success_criteria}}
+```
+
+### Spec Delta (EARS) with Namespace
+
+```markdown
+## Change: CHG-{{id}} — {{title}}
+
+**Affects:** [{{components}}]
+**Contracts touched:** {{list or "none"}}
+
+## ADDED Requirements
+
+### INT-FR-{{nnn}}: {{contract_title}}
+(only if affects contracts or ≥2 components)
+
+**Description (Event-Driven):**
+When a {{event}}, the system SHALL {{behavior}} on the contract boundary.
+
+### BE-FR-{{nnn}}: {{backend_title}}
+**Description (Event-Driven):**
+When {{event}}, the backend SHALL {{behavior}}.
+
+### WEB-FR-{{nnn}}: {{web_title}}
+**Description (Event-Driven):**
+When {{event}}, the web client SHALL {{behavior}}.
+
+### NATIVE-FR-{{nnn}}: {{native_title}}
+**Description (Event-Driven):**
+When {{event}}, the native client SHALL {{behavior}}.
+
+### DESKTOP-FR-{{nnn}}: {{desktop_title}}
+**Description (Event-Driven):**
+When {{event}}, the desktop client SHALL {{behavior}}.
+
+### WXA-FR-{{nnn}}: {{wxa_title}}
+**Description (Event-Driven):**
+When {{event}}, the WeChat Mini Program SHALL {{behavior}}.
+
+### MYA-FR-{{nnn}}: {{mya_title}}
+**Description (Event-Driven):**
+When {{event}}, the Mini Program SHALL {{behavior}}.
+
+### TTA-FR-{{nnn}}: {{tta_title}}
+**Description (Event-Driven):**
+When {{event}}, the TikTok Mini Program SHALL {{behavior}}.
+```
+
+### EARS Patterns
+
+| Pattern | Syntax | When to Use |
+|---------|--------|-------------|
+| Ubiquitous | `The system SHALL ...` | Always-active rules |
+| Event-Driven | `When {event}, the system SHALL ...` | Trigger-based behavior |
+| State-Driven | `While {state}, the system SHALL ...` | Active state conditions |
+| Unwanted | `If {condition}, the system SHALL ...` | Error handling |
+| Optional | `Where {feature} enabled, the system SHALL ...` | Feature flags |
+
+## BDD — Behavior-Driven Development
+
+### Per-Component Feature Files
+
+```gherkin
+@WEB-FR-001
+Feature: Web Login UI
+
+  @WEB-FR-001 @positive
+  Scenario: User logs in successfully
+    Given the web app is on the login page
+    When the user submits valid credentials
+    Then the user is redirected to dashboard
+    And the user receives a JWT in storage
+
+  @WEB-FR-001 @negative
+  Scenario: Invalid credentials show error
+    ...
+
+  @WEB-FR-001 @edge
+  Scenario: Empty fields show validation
+    ...
+```
+
+### Cross-Stack Feature File (mandatory for `affects ≥ 2 components`)
+
+```gherkin
+@INT-FR-001
+Feature: Cross-stack login flow
+
+  @INT-FR-001 @positive
+  Scenario: Web login reaches backend and stores token
+    Given the web app is on the login page
+    When the user submits valid credentials
+    Then the backend POST /auth/login returns 200 with JWT
+    And the web app stores the token
+    And the user is redirected to dashboard
+
+  @INT-FR-001 @negative
+  Scenario: Backend rejects invalid credentials with 401
+    ...
+
+  @INT-FR-001 @edge
+  Scenario: Backend timeout surfaces a user-friendly error
+    ...
+```
+
+## Artifacts
+
+| Artifact | Location | Purpose |
+|----------|----------|---------|
+| Intent | `requirements.md` | Business need + `affects` |
+| Spec delta | `openspec/changes/{id}/spec-delta.md` | EARS, FR namespaces, `affects` |
+| Per-component BDD | `apps/{component}/features/{domain}/{feature}.feature` | Component behavior |
+| Cross-stack BDD | `features/cross-stack/{domain}/{feature}.feature` | End-to-end flow |
+| Contract spec | `contracts/{api,events}/{name}.{yaml,graphql}` | INT-FR-NNN source of truth |
+
+## Gate
+
+**Before advancing to Plan phase:**
+- [ ] `affects: [...]` declared in spec-delta
+- [ ] Spec delta uses EARS format
+- [ ] Per-component FRs: each tagged `@FR-{PREFIX}-NNN` (e.g. `@NATIVE-`, `@DESKTOP-`, `@WEB-`, `@BE-`, `@WXA-`, `@MYA-`, `@TTA-`), ≥3 scenarios (positive/negative/edge)
+- [ ] If `affects` includes ≥2 components: at least one `INT-FR-NNN` and a `features/cross-stack/*.feature` with ≥3 scenarios
+- [ ] If `affects` includes contracts: contract file present in `contracts/`
+- [ ] Human reviewed and approved

package/ai-dlc-skill/phases/understand/prompt.md

@@ -0,0 +1,41 @@
+# Understand Phase Agent Prompt
+
+你是一个 AI-DLC Understand Phase Agent。
+由 Master Agent 委派处理需求分析。
+
+## 输入
+- Intent 描述（来自用户 / Master）
+- `affects: [component list]` 声明
+
+## 任务
+
+1. **SDD: Intent Capture**
+   - 在 `requirements.md` 记录 Why / What / Success Criteria / Scope
+   - 声明 `affects: [native|desktop|web|backend|wxa|mya|tta|contracts]`
+
+2. **SDD: Spec Delta (EARS)**
+   - 在 `openspec/changes/{id}/spec-delta.md` 输出
+   - 使用 EARS 格式：Ubiquitous / Event-Driven / State-Driven / Unwanted / Optional
+   - FR 必须使用命名空间前缀（BE-FR-001, WEB-FR-001 等）
+
+3. **BDD: Feature Files**
+   - 每个 FR ≥3 个 scenario（positive / negative / edge）
+   - Per-component: `apps/{component}/features/{domain}/{feature}.feature`
+   - Cross-stack: `features/cross-stack/{domain}/{feature}.feature`
+   - Tag 使用 `@FR-PREFIX-NNN`
+
+4. **Contract First**（跨组件时）
+   - 在 `contracts/{api,events}/` 创建合约文件
+   - 引用 INT-FR-NNN
+
+## 输出产物
+- `requirements.md`
+- `openspec/changes/{id}/spec-delta.md`
+- `apps/{component}/features/{domain}/{feature}.feature`
+- `features/cross-stack/{domain}/{feature}.feature`（跨组件时）
+- `contracts/{api,events}/{name}.yaml`（跨组件时）
+
+## 约束
+- 遵守 `rules.md` 中的 UND-001 到 UND-006
+- 遵守 `core/security.md`
+- 完成前必须通过 Human Gate 审查

package/ai-dlc-skill/phases/understand/rules.md

@@ -0,0 +1,37 @@
+# Understand Rules (UND-*)
+
+## UND-001: Intent Documentation
+**Severity:** MUST
+**Description:** Before any specification or implementation, the business intent MUST be documented. Intent includes: what is being built, why, and how success is measured.
+**Valid:** Intent captured in `requirements.md` with `affects: [...]` before spec delta.
+**Invalid:** Starting spec delta or feature files without documented intent or without an `affects` declaration.
+
+## UND-002: EARS Format
+**Severity:** MUST
+**Description:** All functional requirements MUST use EARS syntax (Ubiquitous, Event-Driven, State-Driven, Unwanted, or Optional).
+**Valid:** `When a user submits valid credentials, the system SHALL return a JWT token.`
+**Invalid:** `The login should work well and be fast.`
+
+## UND-003: BDD Scenario Coverage
+**Severity:** MUST
+**Description:** Each functional requirement MUST have at least 3 BDD scenarios covering positive, negative, and edge cases. Scenarios MUST be tagged with the FR namespace prefix (`@NATIVE-`, `@DESKTOP-`, `@WEB-`, `@BE-`, `@WXA-`, `@MYA-`, `@TTA-`, or `@INT-`).
+**Valid:** `@WEB-FR-001 @positive` with three scenarios per FR.
+**Invalid:** One scenario per FR, or missing namespace prefix.
+
+## UND-004: Affects Declaration
+**Severity:** MUST
+**Description:** Every spec delta MUST declare `affects: [native, desktop, web, backend, wxa, mya, tta, contracts]`.
+**Valid:** `## Change: CHG-001 — User Login\nAffects: [web, backend, contracts]`
+**Invalid:** Spec delta without an `affects` declaration.
+
+## UND-005: Cross-Component Feature Decomposition
+**Severity:** MUST
+**Description:** A feature that affects ≥2 components MUST be split into: one FR per component, one or more `INT-*` FRs, and a `features/cross-stack/*.feature` file.
+**Valid:** `affects: [web, backend]` → `WEB-FR-001`, `BE-FR-001`, `INT-FR-001`, plus cross-stack feature file.
+**Invalid:** A single feature file claiming to test both web and backend behavior.
+
+## UND-006: Contract-First for Cross-Component
+**Severity:** MUST
+**Description:** When a feature introduces or changes a public API or event consumed by another component, a contract file MUST be added or updated in `contracts/` before any per-component implementation.
+**Valid:** `contracts/api/auth.yaml` defines `POST /auth/login` before any code.
+**Invalid:** Per-component code that depends on a contract not in `contracts/`.

package/ai-dlc-skill/phases/verify/entry.md

@@ -0,0 +1,26 @@
+---
+name: ai-dlc-verify
+description: "Verify Phase: TDD Red-Green-Refactor → Contract Test → Quality Gates"
+triggers:
+  - verify
+  - TDD
+  - test
+  - quality-gate
+---
+
+# Verify Phase (验证)
+
+Execute TDD per BDD scenario, verify contracts, enforce quality gates.
+
+## Entry
+
+See `lifecycle.md` for the full phase flow.
+See `rules.md` for enforceable rules (VRF-001 to VRF-006 + INT-001 to INT-006).
+See `prompt.md` for the sub-agent delegation prompt template.
+
+## 当被委派时
+
+1. 按 DAG 顺序对每个 unit 执行 TDD Red→Green→Refactor
+2. 运行合约测试 + 检查 backward-compat
+3. 运行 cross-stack e2e
+4. 执行质量门禁（cov≥80%, 0 vulns, no TODO）