@scemoon/cdh 1.0.8 → 1.0.9-beta.2

package/ai-dlc-skill/pybdd/README.md

@@ -0,0 +1,41 @@
+# pytest-bdd Configuration
+
+pytest-bdd 配置和示例。
+
+## 目录结构
+
+```
+pybdd/
+├── pytest.ini              # pytest 配置
+├── conftest.py             # fixtures
+├── steps/                  # step definitions
+│   ├── .gitkeep
+│   └── test_example_steps.py
+└── example/                 # 示例 feature
+    └── auth/
+        └── login.feature
+```
+
+## 使用方法
+
+```bash
+# 运行所有 BDD 场景
+pytest pybdd/ --verbose
+
+# 运行特定 FR
+pytest pybdd/ -k "FR-001"
+
+# 生成 step definitions
+pytest-bdd generate pybdd/example/auth/login.feature
+```
+
+## 场景标签
+
+每个 FR 需包含 4 类场景：
+
+| 标签 | 含义 |
+|------|------|
+| `@positive` | 处理逻辑 |
+| `@negative` | 异常处理 |
+| `@edge` | 边界情况 |
+| `@logic` | 逻辑一致性 |

package/ai-dlc-skill/pybdd/conftest.py

@@ -0,0 +1,17 @@
+"""pytest-bdd configuration for ai-dlc."""
+import pytest
+from pathlib import Path
+
+
+def pytest_bdd_get_features_paths():
+    """Return all paths containing BDD feature files."""
+    return [
+        Path("pybdd"),
+        Path("aidlc"),
+    ]
+
+
+@pytest.fixture
+def pybdd_root():
+    """Return the root directory for BDD features."""
+    return Path(__file__).parent.parent

package/ai-dlc-skill/pybdd/example/auth/login.feature

@@ -0,0 +1,32 @@
+@INT-FR-001
+Feature: User Authentication
+
+  Cross-stack authentication feature covering positive, negative, edge cases, and logic consistency.
+
+  @INT-FR-001 @positive
+  Scenario: Successful login with valid credentials
+    Given the user is on the login page
+    And the user has valid credentials
+    When the user submits email "user@test.com" and password "correct123"
+    Then the user receives a JWT token
+    And the user is redirected to dashboard
+
+  @INT-FR-001 @negative
+  Scenario: Login fails with wrong password
+    Given the user is on the login page
+    And the user has invalid credentials
+    When the user submits email "user@test.com" and password "wrong"
+    Then the user sees error "Invalid credentials"
+
+  @INT-FR-001 @edge
+  Scenario: Login fails with empty fields
+    Given the user is on the login page
+    When the user submits email "" and password ""
+    Then the user sees error "Email and password are required"
+
+  @INT-FR-001 @logic
+  Scenario: Login is idempotent
+    Given the user has valid credentials
+    When the user submits the same credentials 3 times
+    Then each login returns the same JWT token
+    And no duplicate sessions are created

package/ai-dlc-skill/pybdd/pytest.ini

@@ -0,0 +1,5 @@
+[pytest]
+bdd_features_base_dir = .
+bdd_features_root = pybdd aidlc
+step_utils_base_dir = pybdd
+asyncio_mode = auto

package/ai-dlc-skill/pybdd/steps/.gitkeep

@@ -0,0 +1 @@
+# Step definitions for pytest-bdd

package/ai-dlc-skill/pybdd/steps/test_example_steps.py

@@ -0,0 +1,65 @@
+"""Example step definitions for login feature."""
+from pytest_bdd import scenarios, given, when, then, parsers
+
+scenarios("../example/auth/login.feature")
+
+
+@given("the user is on the login page")
+def login_page():
+    return {"url": "/login", "email_field": "", "password_field": ""}
+
+
+@given("the user has valid credentials")
+def valid_credentials():
+    return {"email": "user@test.com", "password": "correct123"}
+
+
+@given("the user has invalid credentials")
+def invalid_credentials():
+    return {"email": "user@test.com", "password": "wrong"}
+
+
+@when(parsers.parse('the user submits email "{email}" and password "{password}"'))
+def submit_login(email: str, password: str):
+    if email and password:
+        return {"success": True, "token": "jwt_abc123", "redirect": "/dashboard"}
+    return {"success": False, "error": "Email and password are required"}
+
+
+@when("the user submits the same credentials 3 times")
+def submit_repeated_login():
+    return [
+        {"success": True, "token": "jwt_abc123", "redirect": "/dashboard"},
+        {"success": True, "token": "jwt_abc123", "redirect": "/dashboard"},
+        {"success": True, "token": "jwt_abc123", "redirect": "/dashboard"},
+    ]
+
+
+@then("the user receives a JWT token")
+def receive_token(result):
+    assert result.get("success") is True
+    assert "token" in result
+    assert result["token"].startswith("jwt_")
+
+
+@then("the user is redirected to dashboard")
+def redirect_dashboard(result):
+    assert result.get("redirect") == "/dashboard"
+
+
+@then("the user sees error {error}")
+def see_error(result, error):
+    assert result.get("success") is False
+    assert result.get("error") == error
+
+
+@then("each login returns the same JWT token")
+def same_token(results):
+    tokens = [r["token"] for r in results]
+    assert len(set(tokens)) == 1, "Tokens should be identical for idempotent login"
+
+
+@then("no duplicate sessions are created")
+def no_duplicate_sessions():
+    session_count = 1
+    assert session_count == 1, "No duplicate sessions should be created"

package/ai-dlc-skill/requirements.md

@@ -0,0 +1,140 @@
+# AI-DLC Skill — Requirements
+
+## Overview
+
+This skill implements the AI-Driven Development Lifecycle for **monorepo multi-component stacks** (native + desktop + web + backend + wxa + mya + tta) with four core phases — Understand (SDD+BDD), Plan (SDD+TDD), Verify (BDD+TDD), Deliver (SDD+Cloud) — plus a first-class **Integration** discipline that governs cross-component contracts (API, events, shared types).
+
+## Topology
+
+```
+┌──────────────────── Monorepo Root ─────────────────────┐
+│                                                        │
+│  apps/native  apps/desktop  apps/web  apps/backend     │
+│  (NATIVE-FR-) (DESKTOP-FR-) (WEB-FR-) (BE-FR-)        │
+│  apps/wxa     apps/mya      apps/tta                  │
+│  (WXA-FR-)    (MYA-FR-)     (TTA-FR-)                 │
+│       │              │           │                    │
+│       └──────┬───────┴─────┬─────┘                    │
+│              │             │                          │
+│          aidlc/contracts/  aidlc/packages/shared/                 │
+│          (INT-FR-*)   (generated types)                     │
+│                                                        │
+│  aidlc/features/  tests/  aidlc/openspec/  aidlc/providers/              │
+└────────────────────────────────────────────────────────┘
+```
+
+FR namespaces:
+
+| Prefix | Owner | Scope |
+|--------|-------|-------|
+| `NATIVE-*` | `apps/native` | Native mobile behavior |
+| `DESKTOP-*` | `apps/desktop` | Desktop client behavior |
+| `WEB-*` | `apps/web` | Browser frontend behavior |
+| `BE-*`  | `apps/backend` | Server/service behavior |
+| `WXA-*` | `apps/wxa` | WeChat Mini Program behavior |
+| `MYA-*` | `apps/mya` | Mini Program (e.g. Alipay) behavior |
+| `TTA-*` | `apps/tta` | TikTok Mini Program behavior |
+| `INT-*` | `aidlc/contracts/`, `aidlc/packages/shared/` | Cross-component contract & integration |
+
+## Functional Requirements
+
+### FR-001: Understand Phase
+
+**Priority:** P0
+
+**When** a developer starts a new feature (single-component or cross-cutting),
+**the system SHALL** capture intent, produce an OpenSpec spec delta in EARS format, and write BDD feature files with Given/When/Then scenarios.
+
+**Acceptance Criteria:**
+- Intent documented before implementation
+- Spec delta uses EARS (Ubiquitous/Event-Driven/State-Driven/Unwanted/Optional)
+- Each FR tagged with `@FR-{PREFIX}-NNN` in `.feature` files
+- Cross-component features use `INT-*` FRs in addition to per-component FRs
+- Minimum 3 scenarios per FR: positive, negative, edge
+- Scenarios reviewed and approved by human
+
+### FR-002: Plan Phase
+
+**Priority:** P0
+
+**When** spec and feature files are approved,
+**the system SHALL** produce a technical design, decompose work into units with dependency DAG, and write test plans.
+
+**Acceptance Criteria:**
+- Design doc includes architecture, data model, API contract, state machine
+- Tasks have explicit dependencies (DAG), per-component and cross-component
+- Cross-component tasks reference the relevant `INT-*` contract FR
+- Test plan written per scenario before implementation
+
+### FR-003: Verify Phase
+
+**Priority:** P0
+
+**When** design and tasks are approved,
+**the system SHALL** execute TDD red-green-refactor per BDD scenario and verify all scenarios pass.
+
+**Acceptance Criteria:**
+- Tests written before implementation (Red)
+- Tests fail initially (confirming assertion works)
+- Minimum implementation written to pass (Green)
+- Implementation refactored, all tests still pass
+- All BDD scenarios pass via pytest-bdd (or equivalent per component)
+- Quality gates enforced: coverage ≥80%, scenarios ≥90%, 0 vulns, no TODO
+- Per-component unit, integration, and e2e layers are all green
+- Cross-stack e2e scenarios pass against the unified preview URL
+
+### FR-004: Deliver Phase
+
+**Priority:** P1
+
+**When** all scenarios pass quality gates,
+**the system SHALL** deploy the full stack to preview, run cross-stack BDD e2e tests, and after human approval deploy to production with BVT verification.
+
+**Acceptance Criteria:**
+- Unified preview URL dynamically resolved per platform (TCB/Aliyun)
+- BDD e2e tests run against preview URL for the component they target
+- Cross-stack e2e tests run against the unified preview URL
+- Production deploy requires human approval
+- BVT (Build Verification Test) passes after production deploy
+- Failed BVT triggers rollback
+
+### FR-005: Cross-Component Contract Discipline
+
+**Priority:** P0
+
+**When** a feature spans more than one component (e.g. `WEB-*` + `BE-*`, or `NATIVE-*` + `BE-*`),
+**the system SHALL** define and verify the contract between components before integration.
+
+**Acceptance Criteria:**
+- All public APIs and async events are described in `aidlc/contracts/` (OpenAPI/AsyncAPI) and tagged with `INT-FR-NNN`
+- Contract changes require a contract-diff review (backward-compat by default)
+- Shared types are generated from contracts, not hand-written, in `aidlc/packages/shared/`
+- Contract tests run on every PR that touches `aidlc/contracts/` or any consumer
+- A breaking contract change requires a major version bump and human approval
+
+### FR-006: Monorepo Stack Awareness
+
+**Priority:** P0
+
+**When** the AI agent operates in a monorepo with multiple components,
+**the system SHALL** be aware of which component(s) the current work affects and apply the right scope, tests, and deploy steps.
+
+**Acceptance Criteria:**
+- Spec delta, design doc, and task list each declare an `affects: [native, desktop, web, backend, wxa, mya, tta, contracts]` field
+- Test plan enumerates the layers it covers: `unit`, `integration`, `e2e`, `cross-stack`
+- Only the affected components are deployed in the unified preview (others reused or stubbed)
+- BVT and rollback operate on the whole stack, not a single component
+
+## Cross-Cutting Rules (summary)
+
+See `rules/` for full definitions.
+
+| Prefix | File | Phase | Scope |
+|--------|------|-------|-------|
+| UND | `rules/understand.md` | Understand | Single + multi-component |
+| PLN | `rules/plan.md` | Plan | Single + multi-component |
+| VRF | `rules/verify.md` | Verify | Single + multi-component |
+| DLV | `rules/deliver.md` | Deliver | Stack deploy + rollback |
+| INT | `rules/integration.md` | All phases | Cross-component contracts |
+| STK | `rules/stack.md` | All phases | Monorepo / multi-component |
+| SEC | `rules/security.md` | All phases | Security baseline |

package/ai-dlc-skill/skill.yaml

@@ -0,0 +1,135 @@
+categories:
+- ai-dlc
+- development
+- sdd
+- bdd
+- tdd
+- specification
+- cloud
+- monorepo
+- integration
+description: >-
+  AI-Driven Development Lifecycle for monorepo multi-component stacks
+  (native + desktop + web + backend + wxa + mya + tta). Adaptive orchestration:
+  Master Agent evaluates complexity, delegates sub-tasks via CDHA Task tool.
+  Core phases: Understand (SDD+BDD) → Plan (SDD+TDD) → Verify (BDD+TDD) →
+  Deliver (SDD+Cloud), with cross-stack Integration rules governing
+  component boundaries. FR namespaces: NATIVE-*, DESKTOP-*, WEB-*, BE-*,
+  WXA-*, MYA-*, TTA-*, INT-*. Default cloud platform: TCB. Also supports Aliyun.
+enabled: true
+entry: SKILL.md
+name: ai-dlc-skill
+version: 4.0.0
+
+stack:
+  topology: monorepo
+  components:
+    - id: native
+      kind: mobile
+      tech: react-native | flutter
+      default_language: dart
+      default_ui_framework: flutter-sdk
+      owns: apps/native
+      fr_prefix: NATIVE
+    - id: desktop
+      kind: desktop
+      tech: electron | tauri
+      default_language: typescript
+      default_ui_framework: electron-react
+      owns: apps/desktop
+      fr_prefix: DESKTOP
+    - id: web
+      kind: frontend
+      tech: react | vue | svelte
+      default_language: typescript
+      default_ui_framework: nextjs
+      owns: apps/web
+      fr_prefix: WEB
+    - id: backend
+      kind: service
+      tech: python | node | go | cloud-function
+      compute_modes:
+        - cloudbase-functions (FaaS, default)
+        - cloudbase-run (CaaS)
+        - server (traditional)
+      owns: apps/backend
+      fr_prefix: BE
+    - id: wxa
+      kind: mini-program
+      tech: miniprogram
+      default_language: javascript
+      default_ui_framework: vant-weapp
+      owns: apps/wxa
+      fr_prefix: WXA
+    - id: mya
+      kind: mini-program
+      tech: miniprogram
+      default_language: javascript
+      default_ui_framework: ant-design-mini
+      owns: apps/mya
+      fr_prefix: MYA
+    - id: tta
+      kind: mini-program
+      tech: miniprogram
+      default_language: typescript
+      owns: apps/tta
+      fr_prefix: TTA
+  cross_cutting:
+    fr_prefix: INT
+    owns:
+      - aidlc/contracts/
+      - aidlc/packages/shared/
+  e2e_layers:
+    - unit
+    - integration
+    - e2e
+    - cross-stack
+  storage:
+    default_provider: tcb
+    providers:
+      tcb:
+        object_storage: cloudbase-storage
+        document_db: docdb
+        relational_db: mysql
+        cdn: tencent-cloud-cdn
+      aliyun:
+        object_storage: oss
+        document_db: mongodb
+        relational_db: rds-mysql
+        cdn: aliyun-cdn
+
+integration:
+  contract_first: true
+  contract_format: openapi-3.1
+  backward_compat: required
+  breaking_change_gate: human-approval
+  shared_types:
+    generator: openapi-typescript | openapi-python
+    output: aidlc/packages/shared/
+    publish: workspace-package
+  event_contract:
+    format: asyncapi | cloudevent
+    registry: aidlc/contracts/events/
+    version_strategy: semver-major-for-breaking
+
+deploy:
+  preview:
+    strategy: unified
+    description: >-
+      Single stack preview deploys all components together.
+      PREVIEW_URL is the backend gateway; web, native, desktop,
+      and mini-programs receive it as a build-time/runtime config.
+    ttl: 24h
+    bdd_target: cross-stack
+  environments:
+    - preview
+    - staging
+    - production
+
+quality_gates:
+  coverage_min: 80
+  bdd_pass_rate: 100
+  contract_diff: required
+  no_todo: true
+  no_secrets_in_diff: true
+

package/ai-dlc-skill/templates/brownfield/context.md

@@ -0,0 +1,78 @@
+# {{project_name}} — AI-DLC Context
+
+> Auto-generated by `brownfield/generate-context.sh`
+> Generated at: {{timestamp}}
+
+## Project Overview
+
+**Project**: {{project_name}}
+**Type**: {{project_type}} (monorepo multi-component)
+**Technology Stack**: {{tech_stack}}
+
+## Components
+
+| Component | Directory | Tech | FR Prefix |
+|-----------|-----------|------|-----------|
+{{#components}}
+| {{name}} | {{directory}} | {{tech}} | {{fr_prefix}} |
+{{/components}}
+
+## Discovered APIs
+
+### Backend Endpoints
+
+| Method | Path | Description | FR Namespace |
+|--------|------|-------------|--------------|
+{{#apis}}
+| {{method}} | `{{path}}` | {{description}} | {{fr_namespace}} |
+{{/apis}}
+
+### Events
+
+| Event | Schema | Description | FR Namespace |
+|-------|--------|-------------|--------------|
+{{#events}}
+| `{{name}}` | `{{schema}}` | {{description}} | {{fr_namespace}} |
+{{/events}}
+
+## Cross-Component Dependencies
+
+```mermaid
+graph TD
+{{#dependencies}}
+    {{from}}[{{from_component}}] --> {{to}}[{{to_component}}]
+{{/dependencies}}
+```
+
+## Architecture Summary
+
+{{architecture_summary}}
+
+## Existing BDD Features
+
+| Feature | Path | Scenarios |
+|---------|------|-----------|
+{{#features}}
+| {{name}} | `{{path}}` | {{scenario_count}} |
+{{/features}}
+
+## Quality Gates Status
+
+| Gate | Status | Notes |
+|------|--------|-------|
+| Coverage ≥80% | {{coverage_status}} | {{coverage_note}} |
+| BDD 100% | {{bdd_status}} | {{bdd_note}} |
+| Contract compat | {{contract_status}} | {{contract_note}} |
+| No secrets | {{secrets_status}} | {{secrets_note}} |
+
+## Integration Contracts
+
+| Contract | Type | Location | Version |
+|----------|------|----------|---------|
+{{#contracts}}
+| {{name}} | {{type}} | `{{location}}` | {{version}} |
+{{/contracts}}
+
+## Recommendations for AI-DLC
+
+{{recommendations}}

package/ai-dlc-skill/templates/integration/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Contracts Changelog
+
+All notable changes to any contract in `aidlc/contracts/` are recorded here. Format follows
+[Keep a Changelog](https://keepachangelog.com/) and the project uses [SemVer](https://semver.org/).
+
+> **Breaking change rule (INT-002):** any MAJOR bump requires human approval and a
+> Migration section. `aidlc/tools/contract_diff.py` flags breaking changes automatically.
+
+## [Unreleased]
+
+### Added
+- _None yet_
+
+### Changed
+- _None yet_
+
+### Removed
+- _None yet_
+
+### Migration
+- _None yet_
+
+---
+
+## {{version}} — {{date}} — {{change_id}}
+
+**FRs:** {{list_of_frs}}
+**Affects:** {{components}}
+
+### Added
+- {{new_endpoint_or_field}}
+
+### Changed
+- {{additive_change}}
+
+### Removed
+- {{breaking_removal}}
+
+### Migration
+1. {{step_1}}
+2. {{step_2}}

package/ai-dlc-skill/templates/integration/asyncapi.yaml

@@ -0,0 +1,43 @@
+asyncapi: 3.0.0
+info:
+  title: {{title}}
+  version: {{version}}
+  description: |
+    Async contract for INT-FR-{{int_fr_id}}.
+    Producer: {{producer}}
+    Consumers: {{consumers}}
+  x-change-id: {{change_id}}
+  x-fr: INT-FR-{{int_fr_id}}
+
+channels:
+  {{channel_name}}:
+    address: {{channel_address}}
+    messages:
+      {{message_name}}:
+        $ref: '#/components/messages/{{MessageName}}'
+
+operations:
+  {{operation_name}}:
+    action: {{send | receive}}
+    channel:
+      $ref: '#/channels/{{channel_name}}'
+
+components:
+  messages:
+    {{MessageName}}:
+      name: {{message_name}}
+      title: {{message_title}}
+      contentType: application/cloudevents+json
+      payload:
+        $ref: '#/components/schemas/{{PayloadName}}'
+  schemas:
+    {{PayloadName}}:
+      type: object
+      required: [id, type, time, data]
+      properties:
+        id:       { type: string, format: uuid }
+        type:     { type: string }
+        source:   { type: string }
+        time:     { type: string, format: date-time }
+        specversion: { type: string, enum: ["1.0"] }
+        data:     { type: object }

package/ai-dlc-skill/templates/integration/contract-diff.md

@@ -0,0 +1,63 @@
+# Contract Diff — {{change_id}}
+
+> Auto-generated by `aidlc/tools/contract_diff.py`. Reviewed during Verify and Deliver.
+
+## Summary
+
+| Field | Value |
+|-------|-------|
+| Change ID | `{{change_id}}` |
+| Base version | `{{base_version}}` |
+| Head version | `{{head_version}}` |
+| Breaking? | {{yes / no}} |
+| Approval required | {{yes / no}} |
+
+## Files Changed
+
+| File | Old Version | New Version | Breaking |
+|------|-------------|-------------|----------|
+| `{{path}}` | `{{old}}` | `{{new}}` | {{y / n}} |
+
+## OpenAPI Diff
+
+```diff
+--- a/aidlc/contracts/api/{{file}}.yaml
++++ b/aidlc/contracts/api/{{file}}.yaml
+@@
+- removed: {{field}}
++ added:    {{field}}
+~ changed: {{field}} ({{old_type}} → {{new_type}})
+```
+
+## AsyncAPI Diff
+
+```diff
+--- a/aidlc/contracts/events/{{file}}.yaml
++++ b/aidlc/contracts/events/{{file}}.yaml
+@@
+- channel removed: {{name}}
++ channel added:   {{name}}
+~ payload field:   {{field}}
+```
+
+## Breaking Change Detail
+
+> _Filled automatically. Each breaking change must link to a migration note in `aidlc/contracts/CHANGELOG.md`._
+
+- {{breaking_change_1}}
+  - Migration: {{link}}
+
+## Compat Check Result
+
+```
+$ aidlc/tools/contract_diff.py --base {{base}} --head {{head}}
+RESULT: {{COMPATIBLE | BREAKING}}
+EXIT:   {{0 | 1}}
+```
+
+## Sign-off
+
+- [ ] Contracts owner reviewed
+- [ ] Provider team reviewed
+- [ ] Consumer teams reviewed
+- [ ] (If breaking) Human approval received