@ykdz/template 0.0.40 → 0.0.41

package/node_modules/@ykdz/template-builtin-presets/dist/src/foundation.js

@@ -688,8 +688,8 @@ function contributedDevcontainerComposition(options) {
         baseLayer: {
             identity: "node-pnpm",
             dockerfile: {
-                source: templateSources.sharedDevcontainer,
-                from: "node-pnpm.Dockerfile",
+                source: templateSources.foundation,
+                from: "devcontainer/base.Dockerfile",
             },
             buildArguments: [
                 {
@@ -701,6 +701,37 @@ function contributedDevcontainerComposition(options) {
             probes: [
                 { identity: "procps", command: "ps", args: ["--version"] },
                 { identity: "bubblewrap", command: "bwrap", args: ["--version"] },
+                {
+                    identity: "awk",
+                    command: "awk",
+                    args: ["BEGIN { exit (6 * 7 != 42) }"],
+                },
+                { identity: "ripgrep", command: "rg", args: ["--version"] },
+                {
+                    identity: "jq",
+                    command: "jq",
+                    args: ["--exit-status", "--null-input", "{ ready: true } | .ready"],
+                },
+                {
+                    identity: "python3",
+                    command: "python3",
+                    args: [
+                        "-c",
+                        'import json, pathlib, sqlite3, urllib.request; assert json.loads("true") is True',
+                    ],
+                },
+                {
+                    identity: "python",
+                    command: "python",
+                    args: [
+                        "-c",
+                        'import os, shutil, sys; assert sys.version_info.major == 3; assert os.path.samefile(sys.executable, shutil.which("python3"))',
+                    ],
+                },
+                { identity: "openssh-client", command: "ssh", args: ["-V"] },
+                { identity: "unzip", command: "unzip", args: ["-v"] },
+                { identity: "file", command: "file", args: ["--version"] },
+                { identity: "iproute2", command: "ss", args: ["--version"] },
             ],
             mounts: [
                 {

package/node_modules/@ykdz/template-builtin-presets/templates/foundation/AGENTS.md.template

@@ -6,7 +6,7 @@
 
 若这些限制与 Spec、Ticket、ADR 等权威本地文档冲突，应该以权威本地文档为准。
 
-- 开发自动化：非临时维护脚本必须使用 `scripts/**/*.ts` 中可擦除的 TypeScript，而不是 `.mjs` 等 JavaScript 脚本；归所属非构建 TypeScript 项目并受 format、lint、typecheck 覆盖，防止腐化；产品 build 不产出这些脚本。普通 Node 自动化使用原生 TypeScript 执行链。
+- 开发自动化：非临时维护脚本必须使用 `scripts/**/*.ts` 中可擦除的 TypeScript，而不是 `.mjs` 等 JavaScript 脚本；归所属非构建 TypeScript 项目并受 format、lint、typecheck 覆盖，防止腐化；产品 build 不产出这些脚本。普通 Node 自动化使用原生 TypeScript 执行链
 - 临时脚本：编写临时脚本时，应该将其放到有临时目录语义的位置
 - 任务归属：优先使用工具原生配置；直接命令与简单 `&&` 编排写在所属 package manifest；只有复杂逻辑才新增 TypeScript script
 - 包边界：本地文件系统访问留在所属包内；跨包代码与资源通过声明依赖和公开 exports 获取，跨包任务交根 Turbo/pnpm 编排。不要以根目录定位器、跨包物理路径或 `@boundaries-ignore` 绕过边界
@@ -15,3 +15,5 @@
 - 正式处理链路：开发、回放和端到端验收应复用生产的正式处理链路与制品，入口和配置可不同；同类流程只保留一份实现，迁移后删除旧链路，局部测试不得冒充全链路验收
 - 用户界面：不要将任何技术细节泄漏到用户可见的 UI 中
 - 逐步验收：先通过改动相关的局部门禁，交付前再执行较重的验收任务
+- 减少持久文档：以代码和少量权威文档作为事实依据；只有任务明确要求时，才新增或修改持久文档。过程记录、临时方案等放入临时目录
+- 彻底迁移：迁移或迭代替换旧实现时，同步删除已失效的文档、逻辑和代码。只有任务明确要求兼容或临时绕行时，才保留相应旧内容

package/node_modules/@ykdz/template-builtin-presets/templates/{shared/devcontainer/node-pnpm.Dockerfile → foundation/devcontainer/base.Dockerfile}

@@ -6,7 +6,20 @@ ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME/bin:$PNPM_HOME:$PATH"
 ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0
 RUN apt-get update \
-    && apt-get install -y --no-install-recommends ca-certificates git procps bubblewrap \
+    && apt-get install -y --no-install-recommends \
+        bubblewrap \
+        ca-certificates \
+        curl \
+        file \
+        git \
+        iproute2 \
+        jq \
+        openssh-client \
+        procps \
+        python-is-python3 \
+        python3 \
+        ripgrep \
+        unzip \
     && rm -rf /var/lib/apt/lists/* \
     && git config --system init.defaultBranch main \
     && install -d -m 0755 "$PNPM_HOME" "$PNPM_HOME/bin" \

package/node_modules/@ykdz/template-builtin-presets/templates/rust-bin/devcontainer/rust.Dockerfile

@@ -3,13 +3,9 @@ ENV RUSTUP_HOME=/usr/local/rustup
 ENV CARGO_HOME=/usr/local/cargo
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    ca-certificates \
-    curl \
     gcc \
-    git \
     libc6-dev \
-    && rm -rf /var/lib/apt/lists/* \
-    && git config --system init.defaultBranch main
+    && rm -rf /var/lib/apt/lists/*
 RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
     sh -s -- -y --profile minimal --default-toolchain none \
     && "${CARGO_HOME}/bin/rustup" toolchain install ${RUST_TOOLCHAIN} --profile minimal --component rustfmt --component clippy \

package/node_modules/@ykdz/template-builtin-presets/templates/shared/devcontainer/github-cli.Dockerfile

@@ -1,6 +1,4 @@
-RUN apt-get update \
-    && apt-get install -y --no-install-recommends curl \
-    && install -m 0755 -d /etc/apt/keyrings \
+RUN install -m 0755 -d /etc/apt/keyrings \
     && curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg -o /etc/apt/keyrings/githubcli-archive-keyring.gpg \
     && chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
     && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" > /etc/apt/sources.list.d/github-cli.list \

package/node_modules/@ykdz/template-core/dist/dependency-catalog.d.ts

@@ -28,7 +28,6 @@ export declare function renderCargoLockForPackage(options: {
 }): string;
 export declare function selectTemplateCargoDependencyVersions(dependencies: readonly string[], catalog?: TemplateCargoDependencyVersions): TemplateCargoDependencyVersions;
 export declare function renderCargoDependencyTomlEntries(dependencies: readonly string[], catalog?: TemplateCargoDependencyVersions): string[];
-export declare function collectGeneratedManifestCatalogDependencies(manifests: readonly GeneratedPackageManifestDependencies[]): string[];
 export declare function collectGeneratedManifestCatalogReferences(manifests: readonly GeneratedPackageManifestDependencies[]): string[];
 export declare function pnpmWorkspaceYamlWithCatalogDependencies(workspaceYaml: string, dependencies: readonly string[], templateCatalog?: TemplateDependencyCatalog): string;
 export declare function renderGeneratedPnpmWorkspaceYaml(options: GeneratedDependencyCatalogOptions): string;

package/node_modules/@ykdz/template-core/dist/dependency-catalog.js

@@ -127,25 +127,6 @@ export function renderCargoDependencyTomlEntries(dependencies, catalog = loadTem
         return `${renderTomlKey(dependency)} = ${JSON.stringify(version)}`;
     });
 }
-export function collectGeneratedManifestCatalogDependencies(manifests) {
-    const dependencies = new Set();
-    for (const manifest of manifests) {
-        for (const dependencyMap of [
-            manifest.dependencies,
-            manifest.devDependencies,
-            manifest.optionalDependencies,
-            manifest.peerDependencies,
-        ]) {
-            for (const [dependency, specifier] of Object.entries(dependencyMap ?? {})) {
-                if (specifier !== "catalog:") {
-                    throw new Error(`Generated manifest dependency ${dependency} must use catalog:, got ${specifier}`);
-                }
-                dependencies.add(dependency);
-            }
-        }
-    }
-    return [...dependencies].toSorted();
-}
 export function collectGeneratedManifestCatalogReferences(manifests) {
     const dependencies = new Set();
     for (const manifest of manifests) {

package/node_modules/@ykdz/template-core/dist/pnpm-workspace.yaml

@@ -25,7 +25,7 @@ catalog:
   "@valibot/to-json-schema": ^1.8.0
   "@devcontainers/cli": 0.89.0
   "@hono/node-server": ^2.0.12
-  "@playwright/test": ^1.62.1
+  "@playwright/test": 1.64.0
   "@tailwindcss/vite": ^4.3.3
   "@types/node": ^24.13.3
   "@types/web-bluetooth": ^0.0.21

package/node_modules/@ykdz/template-core/dist/project-github.d.ts

@@ -1,52 +1,4 @@
-import { type CiDiagnosticArtifactDeclaration } from "./ci-diagnostic-artifact.ts";
 import type { DeploymentEnvironmentNeed } from "./module-graph.ts";
-export type CiCapability = {
-    readonly workflowName: "Check";
-    readonly jobName: "check";
-    readonly jobDisplayName: "Root Check";
-    readonly runner: "ubuntu-latest";
-    readonly timeoutMinutes: 30;
-};
-export type CiEnvironmentPreparation = {
-    readonly nodeFromPackageMetadata: boolean;
-    readonly packageManagerFromPackageMetadata: boolean;
-    readonly pnpmStoreCache: boolean;
-};
-export type PnpmTaskLayer = {
-    readonly installCommand: "pnpm install --frozen-lockfile";
-    readonly checkCommand: "pnpm run check";
-};
-export type CiCheckMatrixEntry = {
-    readonly capability: "root" | "deployment";
-    readonly jobDisplayName: "Root Check" | "Deployment Check";
-    readonly taskEntrypoint: "pnpm run check" | "pnpm run check:deployment";
-    readonly timeoutMinutes: 30 | 45;
-    readonly requiresDocker: boolean;
-};
-export type ProjectCheckWorkflowPlan = {
-    readonly workflowName: "Check";
-    readonly triggers: {
-        readonly pullRequest: true;
-        readonly pushBranches: readonly ["main"];
-    };
-    readonly permissions: {
-        readonly contents: "read";
-    };
-    readonly concurrency: {
-        readonly group: "${{ github.workflow }}-${{ github.ref }}";
-        readonly cancelInProgress: true;
-    };
-    readonly rootCheck: CiCapability;
-    readonly matrix: {
-        readonly failFast: false;
-        readonly include: readonly CiCheckMatrixEntry[];
-    } | undefined;
-    readonly environmentPreparation: CiEnvironmentPreparation;
-    readonly taskLayer: PnpmTaskLayer;
-    /** Actual Package Boundaries allowed to own retained native diagnostics. */
-    readonly packagePaths: readonly string[];
-    readonly diagnosticArtifacts: readonly CiDiagnosticArtifactDeclaration[];
-};
 export type DependencyEcosystem = "npm" | "cargo" | "github-actions" | "docker" | "devcontainers" | "rust-toolchain";
 export type DependabotDirectory = `/${string}`;
 export type DependencyMaintenancePolicy = {
@@ -60,16 +12,6 @@ export type ProjectCheckWorkflowDiagnosticOptions = {
     readonly packagePaths: readonly string[];
     readonly diagnosticArtifacts?: readonly unknown[] | undefined;
 };
-type ProjectCheckWorkflowOptions = ProjectCheckWorkflowDiagnosticOptions & {
-    readonly deploymentCheck?: {
-        readonly environmentNeeds: readonly DeploymentEnvironmentNeed[];
-    } | undefined;
-    readonly capability?: CiCapability | undefined;
-    readonly environmentPreparation?: Partial<CiEnvironmentPreparation> | undefined;
-    readonly taskLayer?: PnpmTaskLayer | undefined;
-};
-/** Capability facts for the Foundation-owned GitHub Actions Template Source. */
-export declare function projectCheckWorkflowPlan(options: ProjectCheckWorkflowOptions): ProjectCheckWorkflowPlan;
 /** Selects a complete Foundation-owned workflow Template Source. */
 export declare function projectCheckWorkflowTemplateSource(options: ProjectCheckWorkflowDiagnosticOptions & {
     readonly deploymentCheck?: {
@@ -81,4 +23,3 @@ export declare function projectCheckWorkflowTemplateReplacements(options: Projec
 export declare function projectDependabotConfig(policy: DependencyMaintenancePolicy): string;
 /** Limited substitution for the Foundation-owned Dependabot Template Source. */
 export declare function projectDependabotTemplateReplacements(policy: DependencyMaintenancePolicy): Record<string, string>;
-export {};

package/node_modules/@ykdz/template-core/dist/project-github.js

@@ -5,73 +5,6 @@ function validatedDiagnosticArtifacts(options) {
         declarations: options.artifacts,
     });
 }
-const defaultCiCapability = {
-    workflowName: "Check",
-    jobName: "check",
-    jobDisplayName: "Root Check",
-    runner: "ubuntu-latest",
-    timeoutMinutes: 30,
-};
-const pnpmTaskLayer = {
-    installCommand: "pnpm install --frozen-lockfile",
-    checkCommand: "pnpm run check",
-};
-/** Capability facts for the Foundation-owned GitHub Actions Template Source. */
-export function projectCheckWorkflowPlan(options) {
-    const capability = options.capability ?? defaultCiCapability;
-    const environmentPreparation = {
-        nodeFromPackageMetadata: true,
-        packageManagerFromPackageMetadata: true,
-        pnpmStoreCache: true,
-        ...options.environmentPreparation,
-    };
-    const taskLayer = options.taskLayer ?? pnpmTaskLayer;
-    const hasDeploymentTask = options.deploymentCheck !== undefined;
-    const needsDocker = (options.deploymentCheck?.environmentNeeds ?? []).some((need) => need.kind === "docker-engine");
-    if (hasDeploymentTask && !needsDocker) {
-        throw new Error("Deployment Check requires a Docker environment need");
-    }
-    const packagePaths = [...options.packagePaths];
-    const diagnosticArtifacts = validatedDiagnosticArtifacts({
-        packagePaths,
-        artifacts: options.diagnosticArtifacts ?? [],
-    });
-    return {
-        workflowName: capability.workflowName,
-        triggers: { pullRequest: true, pushBranches: ["main"] },
-        permissions: { contents: "read" },
-        concurrency: {
-            group: "${{ github.workflow }}-${{ github.ref }}",
-            cancelInProgress: true,
-        },
-        rootCheck: capability,
-        matrix: hasDeploymentTask
-            ? {
-                failFast: false,
-                include: [
-                    {
-                        capability: "root",
-                        jobDisplayName: capability.jobDisplayName,
-                        taskEntrypoint: taskLayer.checkCommand,
-                        timeoutMinutes: capability.timeoutMinutes,
-                        requiresDocker: false,
-                    },
-                    {
-                        capability: "deployment",
-                        jobDisplayName: "Deployment Check",
-                        taskEntrypoint: "pnpm run check:deployment",
-                        timeoutMinutes: 45,
-                        requiresDocker: true,
-                    },
-                ],
-            }
-            : undefined,
-        environmentPreparation,
-        taskLayer,
-        packagePaths,
-        diagnosticArtifacts,
-    };
-}
 /** Selects a complete Foundation-owned workflow Template Source. */
 export function projectCheckWorkflowTemplateSource(options) {
     const hasDeploymentTask = options.deploymentCheck !== undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ykdz/template",
-  "version": "0.0.40",
+  "version": "0.0.41",
   "private": false,
   "description": "Project template generator for YKDZ starter projects.",
   "keywords": [