@scemoon/cdh 1.0.0

package/ai-dlc-skill/requirements.md

@@ -0,0 +1,140 @@
+# AI-DLC Skill — Requirements
+
+## Overview
+
+This skill implements the AI-Driven Development Lifecycle for **monorepo multi-component stacks** (native + desktop + web + backend + wxa + mya + tta) with four core phases — Understand (SDD+BDD), Plan (SDD+TDD), Verify (BDD+TDD), Deliver (SDD+Cloud) — plus a first-class **Integration** discipline that governs cross-component contracts (API, events, shared types).
+
+## Topology
+
+```
+┌──────────────────── Monorepo Root ─────────────────────┐
+│                                                        │
+│  apps/native  apps/desktop  apps/web  apps/backend     │
+│  (NATIVE-FR-) (DESKTOP-FR-) (WEB-FR-) (BE-FR-)        │
+│  apps/wxa     apps/mya      apps/tta                  │
+│  (WXA-FR-)    (MYA-FR-)     (TTA-FR-)                 │
+│       │              │           │                    │
+│       └──────┬───────┴─────┬─────┘                    │
+│              │             │                          │
+│          contracts/  packages/shared/                 │
+│          (INT-FR-*)   (generated types)               │
+│                                                        │
+│  features/  tests/  openspec/  providers/              │
+└────────────────────────────────────────────────────────┘
+```
+
+FR namespaces:
+
+| Prefix | Owner | Scope |
+|--------|-------|-------|
+| `NATIVE-*` | `apps/native` | Native mobile behavior |
+| `DESKTOP-*` | `apps/desktop` | Desktop client behavior |
+| `WEB-*` | `apps/web` | Browser frontend behavior |
+| `BE-*`  | `apps/backend` | Server/service behavior |
+| `WXA-*` | `apps/wxa` | WeChat Mini Program behavior |
+| `MYA-*` | `apps/mya` | Mini Program (e.g. Alipay) behavior |
+| `TTA-*` | `apps/tta` | TikTok Mini Program behavior |
+| `INT-*` | `contracts/`, `packages/shared/` | Cross-component contract & integration |
+
+## Functional Requirements
+
+### FR-001: Understand Phase
+
+**Priority:** P0
+
+**When** a developer starts a new feature (single-component or cross-cutting),
+**the system SHALL** capture intent, produce an OpenSpec spec delta in EARS format, and write BDD feature files with Given/When/Then scenarios.
+
+**Acceptance Criteria:**
+- Intent documented before implementation
+- Spec delta uses EARS (Ubiquitous/Event-Driven/State-Driven/Unwanted/Optional)
+- Each FR tagged with `@FR-{PREFIX}-NNN` in `.feature` files
+- Cross-component features use `INT-*` FRs in addition to per-component FRs
+- Minimum 3 scenarios per FR: positive, negative, edge
+- Scenarios reviewed and approved by human
+
+### FR-002: Plan Phase
+
+**Priority:** P0
+
+**When** spec and feature files are approved,
+**the system SHALL** produce a technical design, decompose work into units with dependency DAG, and write test plans.
+
+**Acceptance Criteria:**
+- Design doc includes architecture, data model, API contract, state machine
+- Tasks have explicit dependencies (DAG), per-component and cross-component
+- Cross-component tasks reference the relevant `INT-*` contract FR
+- Test plan written per scenario before implementation
+
+### FR-003: Verify Phase
+
+**Priority:** P0
+
+**When** design and tasks are approved,
+**the system SHALL** execute TDD red-green-refactor per BDD scenario and verify all scenarios pass.
+
+**Acceptance Criteria:**
+- Tests written before implementation (Red)
+- Tests fail initially (confirming assertion works)
+- Minimum implementation written to pass (Green)
+- Implementation refactored, all tests still pass
+- All BDD scenarios pass via pytest-bdd (or equivalent per component)
+- Quality gates enforced: coverage ≥80%, scenarios ≥90%, 0 vulns, no TODO
+- Per-component unit, integration, and e2e layers are all green
+- Cross-stack e2e scenarios pass against the unified preview URL
+
+### FR-004: Deliver Phase
+
+**Priority:** P1
+
+**When** all scenarios pass quality gates,
+**the system SHALL** deploy the full stack to preview, run cross-stack BDD e2e tests, and after human approval deploy to production with BVT verification.
+
+**Acceptance Criteria:**
+- Unified preview URL dynamically resolved per platform (TCB/Aliyun)
+- BDD e2e tests run against preview URL for the component they target
+- Cross-stack e2e tests run against the unified preview URL
+- Production deploy requires human approval
+- BVT (Build Verification Test) passes after production deploy
+- Failed BVT triggers rollback
+
+### FR-005: Cross-Component Contract Discipline
+
+**Priority:** P0
+
+**When** a feature spans more than one component (e.g. `WEB-*` + `BE-*`, or `NATIVE-*` + `BE-*`),
+**the system SHALL** define and verify the contract between components before integration.
+
+**Acceptance Criteria:**
+- All public APIs and async events are described in `contracts/` (OpenAPI/AsyncAPI) and tagged with `INT-FR-NNN`
+- Contract changes require a contract-diff review (backward-compat by default)
+- Shared types are generated from contracts, not hand-written, in `packages/shared/`
+- Contract tests run on every PR that touches `contracts/` or any consumer
+- A breaking contract change requires a major version bump and human approval
+
+### FR-006: Monorepo Stack Awareness
+
+**Priority:** P0
+
+**When** the AI agent operates in a monorepo with multiple components,
+**the system SHALL** be aware of which component(s) the current work affects and apply the right scope, tests, and deploy steps.
+
+**Acceptance Criteria:**
+- Spec delta, design doc, and task list each declare an `affects: [native, desktop, web, backend, wxa, mya, tta, contracts]` field
+- Test plan enumerates the layers it covers: `unit`, `integration`, `e2e`, `cross-stack`
+- Only the affected components are deployed in the unified preview (others reused or stubbed)
+- BVT and rollback operate on the whole stack, not a single component
+
+## Cross-Cutting Rules (summary)
+
+See `rules/` for full definitions.
+
+| Prefix | File | Phase | Scope |
+|--------|------|-------|-------|
+| UND | `rules/understand.md` | Understand | Single + multi-component |
+| PLN | `rules/plan.md` | Plan | Single + multi-component |
+| VRF | `rules/verify.md` | Verify | Single + multi-component |
+| DLV | `rules/deliver.md` | Deliver | Stack deploy + rollback |
+| INT | `rules/integration.md` | All phases | Cross-component contracts |
+| STK | `rules/stack.md` | All phases | Monorepo / multi-component |
+| SEC | `rules/security.md` | All phases | Security baseline |

package/ai-dlc-skill/skill.yaml

@@ -0,0 +1,147 @@
+categories:
+- ai-dlc
+- development
+- sdd
+- bdd
+- tdd
+- specification
+- cloud
+- monorepo
+- integration
+description: >-
+  AI-Driven Development Lifecycle for monorepo multi-component stacks
+  (native + desktop + web + backend + wxa + mya + tta). Adaptive orchestration:
+  Master Agent evaluates complexity, delegates sub-tasks via CDHA Task tool.
+  Core phases: Understand (SDD+BDD) → Plan (SDD+TDD) → Verify (BDD+TDD) →
+  Deliver (SDD+Cloud), with cross-stack Integration rules governing
+  component boundaries. FR namespaces: NATIVE-*, DESKTOP-*, WEB-*, BE-*,
+  WXA-*, MYA-*, TTA-*, INT-*. Default cloud platform: TCB. Also supports Aliyun.
+enabled: true
+entry: SKILL.md
+name: ai-dlc-skill
+version: 4.0.0
+
+stack:
+  topology: monorepo
+  components:
+    - id: native
+      kind: mobile
+      tech: react-native | flutter
+      default_language: dart
+      default_ui_framework: flutter-sdk
+      owns: apps/native
+      fr_prefix: NATIVE
+    - id: desktop
+      kind: desktop
+      tech: electron | tauri
+      default_language: typescript
+      default_ui_framework: electron-react
+      owns: apps/desktop
+      fr_prefix: DESKTOP
+    - id: web
+      kind: frontend
+      tech: react | vue | svelte
+      default_language: typescript
+      default_ui_framework: nextjs
+      owns: apps/web
+      fr_prefix: WEB
+    - id: backend
+      kind: service
+      tech: python | node | go
+      owns: apps/backend
+      fr_prefix: BE
+    - id: wxa
+      kind: mini-program
+      tech: miniprogram
+      default_language: javascript
+      default_ui_framework: vant-weapp
+      owns: apps/wxa
+      fr_prefix: WXA
+    - id: mya
+      kind: mini-program
+      tech: miniprogram
+      default_language: javascript
+      default_ui_framework: ant-design-mini
+      owns: apps/mya
+      fr_prefix: MYA
+    - id: tta
+      kind: mini-program
+      tech: miniprogram
+      default_language: typescript
+      owns: apps/tta
+      fr_prefix: TTA
+  cross_cutting:
+    fr_prefix: INT
+    owns:
+      - contracts/
+      - packages/shared/
+  e2e_layers:
+    - unit
+    - integration
+    - e2e
+    - cross-stack
+  storage:
+    default_provider: tcb
+    providers:
+      tcb:
+        object_storage: cloudbase-storage
+        document_db: docdb
+        relational_db: mysql
+        cdn: tencent-cloud-cdn
+      aliyun:
+        object_storage: oss
+        document_db: mongodb
+        relational_db: rds-mysql
+        cdn: aliyun-cdn
+
+integration:
+  contract_first: true
+  contract_format: openapi-3.1
+  backward_compat: required
+  breaking_change_gate: human-approval
+  shared_types:
+    generator: openapi-typescript | openapi-python
+    output: packages/shared/
+    publish: workspace-package
+  event_contract:
+    format: asyncapi | cloudevent
+    registry: contracts/events/
+    version_strategy: semver-major-for-breaking
+
+deploy:
+  preview:
+    strategy: unified
+    description: >-
+      Single stack preview deploys all components together.
+      PREVIEW_URL is the backend gateway; web, native, desktop,
+      and mini-programs receive it as a build-time/runtime config.
+    ttl: 24h
+    bdd_target: cross-stack
+  environments:
+    - preview
+    - staging
+    - production
+
+quality_gates:
+  coverage_min: 80
+  bdd_pass_rate: 100
+  contract_diff: required
+  no_todo: true
+  no_secrets_in_diff: true
+
+agents:
+  - name: ai-dlc-master
+    entry: SKILL.md
+    mode: primary
+  - name: ai-dlc-understand
+    entry: phases/understand/entry.md
+    mode: subagent
+  - name: ai-dlc-plan
+    entry: phases/plan/entry.md
+    mode: subagent
+  - name: ai-dlc-verify
+    entry: phases/verify/entry.md
+    mode: subagent
+  - name: ai-dlc-deliver
+    entry: phases/deliver/entry.md
+    mode: subagent

package/ai-dlc-skill/templates/integration/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Contracts Changelog
+
+All notable changes to any contract in `contracts/` are recorded here. Format follows
+[Keep a Changelog](https://keepachangelog.com/) and the project uses [SemVer](https://semver.org/).
+
+> **Breaking change rule (INT-002):** any MAJOR bump requires human approval and a
+> Migration section. `tools/contract_diff.py` flags breaking changes automatically.
+
+## [Unreleased]
+
+### Added
+- _None yet_
+
+### Changed
+- _None yet_
+
+### Removed
+- _None yet_
+
+### Migration
+- _None yet_
+
+---
+
+## {{version}} — {{date}} — {{change_id}}
+
+**FRs:** {{list_of_frs}}
+**Affects:** {{components}}
+
+### Added
+- {{new_endpoint_or_field}}
+
+### Changed
+- {{additive_change}}
+
+### Removed
+- {{breaking_removal}}
+
+### Migration
+1. {{step_1}}
+2. {{step_2}}

package/ai-dlc-skill/templates/integration/asyncapi.yaml

@@ -0,0 +1,43 @@
+asyncapi: 3.0.0
+info:
+  title: {{title}}
+  version: {{version}}
+  description: |
+    Async contract for INT-FR-{{int_fr_id}}.
+    Producer: {{producer}}
+    Consumers: {{consumers}}
+  x-change-id: {{change_id}}
+  x-fr: INT-FR-{{int_fr_id}}
+
+channels:
+  {{channel_name}}:
+    address: {{channel_address}}
+    messages:
+      {{message_name}}:
+        $ref: '#/components/messages/{{MessageName}}'
+
+operations:
+  {{operation_name}}:
+    action: {{send | receive}}
+    channel:
+      $ref: '#/channels/{{channel_name}}'
+
+components:
+  messages:
+    {{MessageName}}:
+      name: {{message_name}}
+      title: {{message_title}}
+      contentType: application/cloudevents+json
+      payload:
+        $ref: '#/components/schemas/{{PayloadName}}'
+  schemas:
+    {{PayloadName}}:
+      type: object
+      required: [id, type, time, data]
+      properties:
+        id:       { type: string, format: uuid }
+        type:     { type: string }
+        source:   { type: string }
+        time:     { type: string, format: date-time }
+        specversion: { type: string, enum: ["1.0"] }
+        data:     { type: object }

package/ai-dlc-skill/templates/integration/contract-diff.md

@@ -0,0 +1,63 @@
+# Contract Diff — {{change_id}}
+
+> Auto-generated by `tools/contract_diff.py`. Reviewed during Verify and Deliver.
+
+## Summary
+
+| Field | Value |
+|-------|-------|
+| Change ID | `{{change_id}}` |
+| Base version | `{{base_version}}` |
+| Head version | `{{head_version}}` |
+| Breaking? | {{yes / no}} |
+| Approval required | {{yes / no}} |
+
+## Files Changed
+
+| File | Old Version | New Version | Breaking |
+|------|-------------|-------------|----------|
+| `{{path}}` | `{{old}}` | `{{new}}` | {{y / n}} |
+
+## OpenAPI Diff
+
+```diff
+--- a/contracts/api/{{file}}.yaml
++++ b/contracts/api/{{file}}.yaml
+@@
+- removed: {{field}}
++ added:    {{field}}
+~ changed: {{field}} ({{old_type}} → {{new_type}})
+```
+
+## AsyncAPI Diff
+
+```diff
+--- a/contracts/events/{{file}}.yaml
++++ b/contracts/events/{{file}}.yaml
+@@
+- channel removed: {{name}}
++ channel added:   {{name}}
+~ payload field:   {{field}}
+```
+
+## Breaking Change Detail
+
+> _Filled automatically. Each breaking change must link to a migration note in `contracts/CHANGELOG.md`._
+
+- {{breaking_change_1}}
+  - Migration: {{link}}
+
+## Compat Check Result
+
+```
+$ tools/contract_diff.py --base {{base}} --head {{head}}
+RESULT: {{COMPATIBLE | BREAKING}}
+EXIT:   {{0 | 1}}
+```
+
+## Sign-off
+
+- [ ] Contracts owner reviewed
+- [ ] Provider team reviewed
+- [ ] Consumer teams reviewed
+- [ ] (If breaking) Human approval received

package/ai-dlc-skill/templates/integration/contract-spec.md

@@ -0,0 +1,49 @@
+# Contract Spec — {{contract_name}}
+
+> Source of truth for cross-component contract. Implements `INT-FR-{{int_fr_id}}`.
+> Consumers: {{consumers}}
+> Producers: {{producers}}
+
+## Kind
+
+- [ ] REST API (OpenAPI 3.1) — `contracts/api/{{name}}.yaml`
+- [ ] AsyncAPI event — `contracts/events/{{name}}.yaml`
+- [ ] GraphQL schema — `contracts/api/{{name}}.graphql`
+
+## Versioning
+
+- Current version: `{{version}}`  (SemVer: MAJOR.MINOR.PATCH)
+- MAJOR: breaking (field removed, type changed, status code changed)
+- MINOR: additive (new optional field, new endpoint)
+- PATCH: doc / example only
+
+> Any MAJOR bump requires human approval (INT-002) and a migration note in
+> `contracts/CHANGELOG.md`.
+
+## Change
+
+| Field | Value |
+|-------|-------|
+| Change ID | `{{change_id}}` |
+| Affects | {{affects: [native, desktop, web, backend, wxa, mya, tta]}} |
+| Direction | {{provider → consumer / bidirectional}} |
+| Breaking? | {{yes / no}} |
+| Migration | {{link to migration doc or "none"}} |
+
+## FR Mapping
+
+| FR | Component | Role |
+|----|-----------|------|
+| `INT-FR-{{int_fr_id}}` | contracts | Contract definition |
+| `{{provider_namespace}}-FR-{{provider_fr}}` | {{provider}} | Provider behavior |
+| `{{consumer_namespace}}-FR-{{consumer_fr}}` | {{consumer}} | Consumer behavior |
+
+## Contract Test Mapping
+
+- `tests/contract/test_{{contract_name}}.py`
+- Scenarios: @INT-FR-{{int_fr_id}} @positive / @negative / @edge
+
+## See Also
+
+- `contracts/CHANGELOG.md` — version history
+- `openspec/changes/{{change_id}}/contract-diff.md` — auto-generated diff

package/ai-dlc-skill/templates/integration/openapi.yaml

@@ -0,0 +1,18 @@
+openapi: 3.1.0
+info:
+  title: {{title}}
+  version: {{version}}
+  description: |
+    Implements INT-FR-{{int_fr_id}}.
+    Consumers: {{consumers}}
+    Producers: {{producers}}
+  x-change-id: {{change_id}}
+  x-fr: INT-FR-{{int_fr_id}}
+
+servers:
+  - url: ${BACKEND_URL}
+    description: Stack preview / staging / production (URL injected at deploy)
+
+paths:
+  /{{resource}}:
+    {{methods}}

package/ai-dlc-skill/templates/integration/runtime-contract.yaml

@@ -0,0 +1,36 @@
+# Runtime Contract 模板 — Serverless 函数接口声明
+# Provider-agnostic: 描述函数"做什么"，不涉及具体部署平台
+# 放置在 contracts/functions/{name}.yaml
+
+function: {{function_name}}
+version: {{semver}}
+fr_ref: {{INT-FR-NNN}}
+description: {{description}}
+
+triggers:
+  - type: http            # http | timer | event | oss | mns
+    method: POST
+    path: /{{endpoint}}
+  - type: event
+    source: {{event_source}}
+
+timeout: {{timeout}}s
+memory: {{memory}}MB
+
+env:
+  {{env_var_name}}: {from: {{source}}}  # stack_env | secrets | literal
+
+# Provider-specific 映射 (自动选择)
+# 部署时根据 --provider + --compute-mode 选择合适的 runtime
+provider_map:
+  tcb:
+    compute_mode: cloudbase-functions
+    runtime: nodejs18 | python3.10 | go1.18
+  aliyun:
+    compute_mode: fc           # Function Compute
+    runtime: python3.10 | nodejs18
+    # 或 SAE 模式 (container):
+    sae:
+      type: web-app
+      port: 8080
+      health_check: /health

package/ai-dlc-skill/templates/plan/design.md

@@ -0,0 +1,49 @@
+# Technical Design — {{feature_name}}
+
+## Overview
+
+{{brief_description}}
+
+## Architecture
+
+```
+[Client] → [API Gateway] → [Function] → [Database]
+```
+
+## Data Model
+
+```python
+@dataclass
+class {{model_name}}:
+    id: str
+    {{field_1}}: {{type_1}}
+    {{field_2}}: {{type_2}}
+```
+
+| Field | Type | Constraints | Description |
+|-------|------|-------------|-------------|
+| {{field}} | {{type}} | {{constraints}} | {{description}} |
+
+## API Contract
+
+| Method | Path | Request | Response | Status |
+|--------|------|---------|----------|--------|
+| {{method}} | {{path}} | {{request}} | {{response}} | {{status_code}} |
+
+## State Machine
+
+```
+{{state_a}} → {{state_b}} → {{state_c}}
+{{state_b}} → {{error_state}}  (on validation failure)
+```
+
+## Dependencies
+
+- {{dependency_1}}
+- {{dependency_2}}
+
+## BDD Scenarios
+
+- `features/{{domain}}/{{feature}}.feature` — @FR-{{fr_id}} @positive
+- `features/{{domain}}/{{feature}}.feature` — @FR-{{fr_id}} @negative
+- `features/{{domain}}/{{feature}}.feature` — @FR-{{fr_id}} @edge

package/ai-dlc-skill/templates/plan/task-list.md

@@ -0,0 +1,32 @@
+# Task List — {{feature_name}}
+
+## Dependency Graph
+
+```mermaid
+graph TD
+  {{dag_nodes}}
+```
+
+## Units
+
+### Unit 1: {{unit_1_name}}
+
+- **Depends on:** none
+- **Scenarios:** {{scenario_tags_1}}
+- **Tasks:**
+  - [ ] {{task_1}}
+  - [ ] {{task_2}}
+- **Test plan:**
+  - `test_{{case_1}}` → {{expected_1}}
+  - `test_{{case_2}}` → {{expected_2}}
+
+### Unit 2: {{unit_2_name}}
+
+- **Depends on:** {{unit_1_name}}
+- **Scenarios:** {{scenario_tags_2}}
+- **Tasks:**
+  - [ ] {{task_1}}
+  - [ ] {{task_2}}
+- **Test plan:**
+  - `test_{{case_1}}` → {{expected_1}}
+  - `test_{{case_2}}` → {{expected_2}}