npm - create-yss-spec - Versions diffs - 1.0.0 - Mend

create-yss-spec 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1880) hide show

package/template/.codex/skills/yss-repository/SKILL.md ADDED Viewed

@@ -0,0 +1,54 @@
+---
+name: yss-repository
+description: 用于生成或重构 YSS Repository 持久层与 Domain Gateway 实现。当用户要求按表结构、DDL、metadata 或现有领域模型补齐 PO、Repository、Convertor、GatewayImpl 时调用。
+---
+# yss-repository
+这是一个偏代码生成和结构补全的 skill，适合在已有工程里补 Repository 层，不适合替代完整脚手架。
+## 何时使用
+- 用户要生成 `PO / Repository / Convertor / GatewayImpl`。
+- 用户已有 Domain 模型，缺基础设施持久层落地。
+- 用户要基于表结构、DDL、metadata 补齐持久层代码。
+## 不适用
+- 只做 Controller 时，优先 `yss-web-controller`。
+- 只做领域建模时，优先 `yss-domain`。
+- 从零建多模块工程时，优先 `yss-ddd-scaffold-generator`。
+## 工作方式
+1. 先确认输入来源：领域模型、metadata、数据库表、DDL。
+2. 如果 metadata 不完整，优先转到 `yss-db2mybatis` 提取。
+3. 生成代码时严格保持 Domain 与 Infrastructure 分层边界。
+4. 默认先生成基础 CRUD 骨架，把复杂查询留给手工实现。
+## 产物范围
+- `domain/{segment}/gateway/*Gateway.java`
+- `repository/entity/*PO.java`
+- `repository/*Repository.java`
+- `repository/convertor/*Convertor.java`
+- `repository/gateway/impl/*GatewayImpl.java`
+## 约束
+- Domain 不依赖 Infrastructure。
+- Gateway 定义在 Domain，实现放在 Infrastructure。
+- Convertor 优先使用 MapStruct。
+- 逻辑删除、审计字段、主键策略要显式处理，不要隐式略过。
+## 质量门禁
+- 生成代码必须可编译。
+- 命名、包路径、注解要与工程现有规范一致。
+- 遇到无法自动判断的字段或规则时，写 TODO 或向用户说明，不要假装已确认。
+## 协同顺序
+- metadata 提取：`yss-db2mybatis`
+- 领域建模：`yss-domain`
+- Web 补齐：`yss-web-controller`

package/template/.codex/skills/yss-repository/agents/openai.yaml ADDED Viewed

@@ -0,0 +1,5 @@
+version: 1
+interface:
+  display_name: "YSS Repository"
+  short_description: "Repository、Convertor 与 gateway 实现规范"
+  default_prompt: "Use $yss-repository to generate or refactor YSS repository, convertor, and gateway implementation code."

package/template/.codex/skills/yss-resilience4j/SKILL.md ADDED Viewed

@@ -0,0 +1,46 @@
+---
+name: yss-resilience4j
+description: 用于 YSS Resilience4j starter、网关熔断、限流降级、GlobalCircuitExceptionAdvice、GatewayConfiguration 和断路器配置排障。
+---
+# yss-resilience4j
+Use this skill for YSS Resilience4j 组件. Keep implementation grounded in the local project and resolvable YSS backend component source.
+中文说明：本技能用于 YSS Resilience4j 组件。执行时优先读取源码索引，避免凭记忆猜类名、配置项或接入方式。
+## Source Index First
+- Backend source location is environment-specific; resolve it with `yss-source-index/references/source-location.md`.
+- Generated index: `references/source-index.md`
+- Component path hints: `yss-microservice-components/yss-component-resilience4j-starter`
+Read `references/source-index.md` as a path-hint index whenever the task depends on exact modules, annotations, auto configuration, properties, controllers, clients, repositories, DTOs, handlers, or troubleshooting.
+## Workflow
+1. Read `references/source-index.md`, then read component `readme.md`.
+2. Identify whether the task is gateway circuit breaker configuration, fallback response, global circuit exception handling, or resilience troubleshooting.
+3. Inspect `GatewayConfiguration` for route/filter wiring and `GlobalCircuitExceptionAdvice` for exception response behavior.
+4. Tune thresholds/timeouts in configuration rather than hardcoding resilience behavior in business handlers.
+5. Keep fallback responses consistent with gateway/API response contracts.
+## Capability Split
+- Gateway resilience wiring: `GatewayConfiguration`.
+- Circuit exception mapping: `GlobalCircuitExceptionAdvice`.
+- Operational guidance: README "轻量微服务断路器".
+## Checklist
+- Required dependency or starter module is present.
+- Circuit breaker names and route IDs match gateway configuration.
+- Fallback status/body are acceptable for frontend/API consumers.
+- Timeout, slow-call, and failure thresholds match service SLOs.
+- Logs/metrics make open/half-open/recovered states diagnosable.
+## Do Not
+- Do not invent class names or configuration keys without checking the source index.
+- Do not replace component extension points with business-local framework code.
+- Do not broaden the task into unrelated YSS components unless the user asks.

package/template/.codex/skills/yss-resilience4j/agents/openai.yaml ADDED Viewed

@@ -0,0 +1,4 @@
+interface:
+  display_name: "yss-resilience4j"
+  short_description: "YSS component skill for yss-resilience4j"
+  default_prompt: "Use yss-resilience4j for this YSS backend component task."

package/template/.codex/skills/yss-resilience4j/references/source-index.md ADDED Viewed

@@ -0,0 +1,31 @@
+# yss-resilience4j Source Index
+Generated: 2026-06-29T16:11:14+00:00
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT` to reproduce or refresh.
+This file is generated by `yss-source-index/scripts/refresh-yss-skill-index.py`. Do not hand-edit generated sections.
+Paths below are source path hints captured at refresh time. If they do not exist in the current workspace, locate sources using `YSS_SOURCE_ROOT`, CodeGraph, package/class names, Maven artifact names, or repository search before assuming the source is unavailable.
+## Component Path Hints
+- `yss-microservice-components/yss-component-resilience4j-starter` (existed when indexed)
+## Documentation Files
+- `yss-microservice-components/yss-component-resilience4j-starter/readme.md`
+## Maven Modules
+- `yss-microservice-components/yss-component-resilience4j-starter`
+## Key Java Entry Points
+- `yss-microservice-components/yss-component-resilience4j-starter/src/main/java/com/yss/cloud/breaker/config/GatewayConfiguration.java`
+- `yss-microservice-components/yss-component-resilience4j-starter/src/main/java/com/yss/cloud/breaker/exception/GlobalCircuitExceptionAdvice.java`
+## Recommended Next Reads
+- Start with the documentation files above when learning component usage.
+- Search the key Java entry points for annotations, auto configuration, properties, aspects, interceptors, handlers, and result objects before changing application code.
+- Prefer existing component extension points over rewriting framework logic in business modules.

package/template/.codex/skills/yss-router/SKILL.md ADDED Viewed

@@ -0,0 +1,107 @@
+---
+name: yss-router
+description: YSS 技能总路由。Use when a task involves YSS micro-applications, YSS Vue pages, YSS backend components, yss-cloud-microservice, YTable/YTree/YssFormily, Orval API clients, YSS DDD scaffolding, Repository/MyBatis/DTO/Controller generation, cache/audit/excel/distributed-id/JDBC/file/log/dictionary/taskflow/validation/security components, or when multiple YSS skills might apply and Codex must choose the minimal correct skill set before implementation.
+---
+# yss-router
+Use this skill first for broad or ambiguous YSS work. Its job is to choose the smallest useful set of YSS skills, not to replace specialist skills.
+中文说明：这个技能是 YSS 技能总入口，主要帮助 Codex 先判断“该用哪些技能”，避免一次性加载太多 YSS 规范。
+## Core Rule
+Route first, then load specialists. Do not load every YSS skill just because the repo is a YSS repo.
+When the request is already narrowly scoped, use the matching specialist directly. When the task crosses frontend/backend/component boundaries, use this router to pick the minimal combination.
+中文说明：如果用户已经明确提到缓存、审计、Excel、YTable 等具体内容，可以直接用专项技能；只有需求比较宽或跨前后端时才先用 router。
+## Lifecycle Boundaries
+- If the task introduces or changes a frontend/backend API contract, route back to `yss-product-lifecycle` until PRD, OpenAPI Draft, engineering baseline/design review, and OpenAPI Freeze are clear.
+- `api-integration` consumes generated clients and wires page behavior; it must not invent missing API paths, DTOs, or response shapes.
+- `yss-openapi` is for generating or refreshing contracts/Orval clients after OpenAPI Freeze, or for regenerating from an already implemented backend source of truth.
+## Minimal Skill Matrix
+| User intent | Load these skills |
+| --- | --- |
+| Build or refactor a Vue business page | `yss-page-module-development`; add `yss-components`, `yss-hook`, `api-integration` only when needed |
+| Work on YTable responsive height | `yss-use-table-height`; add `yss-components` only for page layout |
+| Work on YTree responsive height or search tree | `yss-use-tree-height`; add `yss-components` only for page layout |
+| Build or modify YssFormily schema/forms | `yss-formily`; add `yss-formily-schema-generator` when converting requirements, screenshots, Figma, or natural language into schema |
+| Integrate backend APIs in Vue | `api-integration`; add `yss-openapi` only after OpenAPI Freeze or when regenerating from an implemented backend contract |
+| Generate/refresh OpenAPI and Orval clients | `yss-openapi` only after OpenAPI Freeze or implemented-backend source-of-truth refresh |
+| Commit micro-app changes | `microapp-commit` |
+| Create a DDD backend module from scratch | `yss-ddd-scaffold-generator` |
+| Create a YSS frontend micro-app from scratch | `yss-frontend-scaffold-generator`; add `yss-page-module-development`, `yss-components`, `api-integration` only after the scaffold and contract are ready |
+| Model domain aggregates/entities/gateways | `yss-domain-modeling`; add `yss-domain` when code implementation is required, and add `yss-repository` when persistence is required |
+| Generate persistence from DDL/metadata | `yss-db2mybatis`; add `yss-mybatis` for framework-specific behavior |
+| Implement Repository/GatewayImpl/PO/Convertor | `yss-repository`; add `yss-mybatis` for BaseRepository, pagination, or datasource issues |
+| Implement Controller/DTO/VO/Web Convertor | `yss-web-controller`; add `yss-dto` for Result/PageQuery/CommandDTO conventions |
+| Work with Result/PageQuery/CommandDTO/QueryDTO | `yss-dto` |
+| Work with MyBatis/MyBatis-Plus persistence | `yss-mybatis` |
+| Work with QueryCache/UpdateCache/ClearCache | `yss-cache` |
+| Work with AuditLog/EnableAuditLog/SpEL audit descriptions | `yss-audit-log` |
+| Work with RequestExcel/ResponseExcel import/export | `yss-excel-mvc` |
+| Work with Leaf/CosId/AutoIdInterceptor/ID strategy | `yss-distributed-id` |
+| Work with Hutool Db/JdbcSqlUtil/dynamic datasource JDBC | `yss-jdbc` |
+| Work with dictionaries, dictionary items, or Dic APIs | `yss-dictionary` |
+| Work with directory/resource trees | `yss-dir` |
+| Work with base file abstractions or file parser utilities | `yss-file` |
+| Work with logging starter behavior | `yss-log` |
+| Work with Liquibase starter or migration bootstrap | `yss-liquibase` |
+| Work with Resilience4j gateway/circuit-breaker/fallback behavior | `yss-resilience4j` |
+| Work with SQL condition parsing, validation, or SQL condition builders | `yss-sql-condition` |
+| Work with SQL template management or rendering | `yss-sql-tpl` |
+| Work with task flow definitions or execution | `yss-taskflow` |
+| Work with validation engine or JSR-303 integration | `yss-validation` |
+| Work with RSA/AES/crypto/security algorithm helpers | `yss-security-algorithm` |
+| Work with current user info propagation or user info starter | `yss-userinfo` |
+| Work with variable component APIs | `yss-variable` |
+| Work with quality starter behavior | `yss-quality` |
+| Work with DolphinScheduler anti-corrosion/anti-scheduler integration | `yss-anti-scheduler` |
+| Work with exception component or unified exception handling | `yss-exception` |
+| Work with mail starter or email sending | `yss-mail` |
+| Work with file runner component | `yss-filerunner` |
+| Work with valuation component | `yss-valuation` |
+| Work with DuckDB component | `yss-duckdb` |
+| Work with dynamic mapper component | `yss-mapper-dynamic` |
+| Work with QLExpress4 expressions | `qlexpress4` |
+## Selection Workflow
+1. Identify whether the request is frontend page, frontend API, backend domain, backend component, code generation, or workflow/commit.
+2. Pick one primary specialist skill from the matrix.
+3. Add secondary skills only when the task explicitly requires their implementation details.
+4. Before editing code, inspect repo conventions and the specialist skill's `references/source-index.md` when present.
+5. Prefer existing YSS components and framework hooks over new abstractions.
+中文说明：优先选一个主技能，再按需补充副技能；不要因为是 YSS 项目就把所有 YSS 技能全读进上下文。
+## Common Combinations
+- New frontend micro-app: `yss-frontend-scaffold-generator`; after scaffold creation, use `yss-page-module-development` + `api-integration` for business pages.
+- Page with backend list API: `yss-page-module-development` + `api-integration`; add `yss-openapi` only when the contract is frozen or the backend contract is being refreshed.
+- Tree-table page: `yss-page-module-development` + `yss-use-tree-height` + `yss-use-table-height`.
+- Search form plus table: `yss-page-module-development` + `yss-formily` + `api-integration`.
+- Backend CRUD from table: `yss-domain-modeling` + `yss-domain` + `yss-dto` + `yss-repository` + `yss-web-controller`.
+- DDD modeling before implementation: `yss-domain-modeling` + `yss-domain` + `yss-repository` + `yss-web-controller` as needed.
+- Metadata/DDL to backend layers: `yss-db2mybatis` + `yss-web-controller`.
+- Cached query endpoint: `yss-cache` + `yss-mybatis` + `yss-dto` when DTO/page results are involved.
+## Source Indexes
+Backend component skills have generated source indexes under `references/source-index.md`. Read them when the task depends on concrete component classes, configuration, annotations, or troubleshooting:
+中文说明：当问题涉及真实类名、配置项、注解、拦截器、自动配置或排障时，先读对应 `source-index.md`，它会指向后端组件源码库里的真实入口。
+- Core framework/component examples: `yss-cache`, `yss-mybatis`, `yss-dto`, `yss-audit-log`, `yss-excel-mvc`, `yss-distributed-id`, `yss-jdbc`.
+- Extended component examples: `yss-dictionary`, `yss-dir`, `yss-file`, `yss-log`, `yss-liquibase`, `yss-resilience4j`, `yss-sql-condition`, `yss-sql-tpl`, `yss-taskflow`, `yss-validation`, `yss-security-algorithm`, `yss-userinfo`, `yss-variable`, `yss-quality`, `yss-anti-scheduler`, `yss-exception`, `yss-mail`, `yss-filerunner`, `yss-valuation`, `yss-duckdb`, `yss-mapper-dynamic`.
+Regenerate these indexes with `yss-source-index/scripts/refresh-yss-skill-index.py` after `yss-cloud-microservice` changes. Read `yss-source-index/references/source-map-config.md` when you need the full skill-to-source mapping.
+## Boundaries
+Read `references/boundaries.md` when two or more YSS skills appear to overlap.

package/template/.codex/skills/yss-router/agents/openai.yaml ADDED Viewed

@@ -0,0 +1,4 @@
+interface:
+  display_name: "YSS Router"
+  short_description: "Route YSS tasks to the right skills"
+  default_prompt: "Use yss-router to choose the minimal YSS skills for this task."

package/template/.codex/skills/yss-router/references/boundaries.md ADDED Viewed

@@ -0,0 +1,67 @@
+# YSS Skill Boundaries
+Use this reference when multiple YSS skills seem applicable.
+中文说明：当多个 YSS 技能看起来都能用时，先看这个边界说明，选择最小技能组合。
+## Frontend Boundaries
+- `yss-page-module-development`: Page/module workflow. Use for creating or reorganizing a page folder, deciding structure, and assembling page, hooks, schemas, and blocks.
+- `yss-components`: Component layout and visual/page composition rules. Use for YTable/YTree/YssFormily/YSplitPane usage details.
+- `yss-hook`: Request, pagination, parameter, tree-selection, and response-mapping logic in `views/**/hooks/useXxx.ts`.
+- `api-integration`: Orval-generated API client imports, request/response mapping, `useRequest` calling patterns, submit/list/detail flows.
+- `yss-formily`: Hand-written YssFormily schema implementation and form behavior.
+- `yss-formily-schema-generator`: Generate YssFormily schema from requirements, screenshots, mockups, Figma, or natural-language field descriptions.
+- `yss-use-table-height`: Only table available-height calculation and required container/pagination/toolbar wiring.
+- `yss-use-tree-height`: Only tree available-height calculation, search offset, and virtual scrolling wiring.
+Default for a new page: start with `yss-page-module-development`, then add the narrow skills that match the page controls.
+中文说明：新建页面默认从页面模块技能开始，只有遇到具体组件、Hook、API、Formily 细节时再加载专项技能。
+## Backend Boundaries
+- `yss-ddd-scaffold-generator`: Create a whole multi-module backend skeleton.
+- `yss-domain`: Domain modeling and domain gateway contracts.
+- `yss-repository`: Persistence implementation, PO, Repository, Convertor, GatewayImpl.
+- `yss-web-controller`: REST adapter layer, request/response DTOs, VO, web convertor.
+- `yss-db2mybatis`: Generate persistence artifacts from database metadata or DDL.
+- `yss-mybatis`: Framework behavior for MyBatis/MyBatis-Plus, BaseRepository, pagination, mapper scanning, batch, datasource issues.
+- `yss-dto`: Result/PageQuery/CommandDTO/QueryDTO and unified API contract objects.
+Default for backend CRUD: use `yss-domain`, `yss-dto`, `yss-repository`, and `yss-web-controller`; add `yss-mybatis` only when persistence framework details matter.
+中文说明：后端 CRUD 按领域、DTO、持久层、Controller 分层处理；只有涉及 MyBatis 机制、分页、扫描、多数据源时才加 `yss-mybatis`。
+## Component Boundaries
+- `yss-cache`: Query/update/clear cache annotations, Redis/Caffeine/JetCache wiring, cache invalidation.
+- `yss-audit-log`: Audit annotations, SpEL summaries, async publication, subscribers.
+- `yss-excel-mvc`: Spring MVC Excel import/export annotations and handlers.
+- `yss-distributed-id`: ID strategies, AutoIdInterceptor, Leaf/CosId/Snowflake, batch ID injection.
+- `yss-jdbc`: Hutool Db, dynamic datasource JDBC, JdbcSqlUtil, batch SQL execution.
+- `yss-dictionary`: Dictionary/domain item APIs and dictionary component integration.
+- `yss-dir`: Directory/resource tree component behavior.
+- `yss-file`: Base file abstractions and file parser utilities.
+- `yss-log`: Logging starter auto-configuration and log extension points.
+- `yss-liquibase`: Liquibase starter migration bootstrap.
+- `yss-resilience4j`: Circuit breaker, fallback, and gateway resilience integration.
+- `yss-sql-condition`: SQL condition parsing, validation, and condition builder behavior.
+- `yss-sql-tpl`: SQL template definition, rendering, and template management.
+- `yss-taskflow`: Task flow definition/execution component behavior.
+- `yss-validation`: Validation engine and JSR-303 integration.
+- `yss-security-algorithm`: RSA/AES/crypto/security algorithm utilities.
+- `yss-userinfo`: Current-user info propagation and starter integration.
+- `yss-variable`: Variable component APIs and variable resolution.
+- `yss-quality`: Quality starter behavior.
+- `yss-anti-scheduler`: DolphinScheduler anti-corrosion/anti-scheduler integration.
+- `yss-exception`: Exception component and unified exception handling.
+- `yss-mail`: Mail starter and email sending.
+- `yss-filerunner`: File runner component behavior.
+- `yss-valuation`: Valuation component behavior.
+- `yss-duckdb`: DuckDB component behavior.
+- `yss-mapper-dynamic`: Dynamic mapper component behavior.
+Component skills should inspect generated `references/source-index.md` before changing code when the task depends on exact class or config names.
+中文说明：组件类技能不要凭记忆猜类名，先用源码索引找真实位置。

package/template/.codex/skills/yss-security-algorithm/SKILL.md ADDED Viewed

@@ -0,0 +1,48 @@
+---
+name: yss-security-algorithm
+description: 用于 YSS security algorithm、RSA/AES/JWT、SecurityCryptoUtil、KeyPairUtil、DefaultJwtConfiguration 和加解密排障。
+---
+# yss-security-algorithm
+Use this skill for YSS 安全算法组件. Keep implementation grounded in the local project and resolvable YSS backend component source.
+中文说明：本技能用于 YSS 安全算法组件。执行时优先读取源码索引，避免凭记忆猜类名、配置项或接入方式。
+## Source Index First
+- Backend source location is environment-specific; resolve it with `yss-source-index/references/source-location.md`.
+- Generated index: `references/source-index.md`
+- Component path hints: `yss-microservice-components/yss-component-security-algorithm`
+Read `references/source-index.md` as a path-hint index whenever the task depends on exact modules, annotations, auto configuration, properties, controllers, clients, repositories, DTOs, handlers, or troubleshooting.
+## Workflow
+1. Identify whether the task is symmetric encryption, asymmetric encryption, SM algorithms, JWT key generation/configuration, or decryption troubleshooting.
+2. Read `references/source-index.md`, then inspect `CryptoType`, `SecurityCryptoUtil`, `KeyGeneratorUtils`, and `DefaultJwtConfiguration`.
+3. Use `CryptoType` to route algorithm-specific behavior; current enum values include `RSA`, `AES`, `DES`, `SM2`, and `SM4`.
+4. Treat `SecurityCryptoUtil` as a utility implementation reference, not automatically as a production key-management design.
+5. For production changes, externalize keys/secrets and avoid copying hardcoded sample keys into business modules.
+## Security Notes
+- The current utility contains built-in/static key material and fixed key-style behavior in places; do not introduce new hardcoded secrets.
+- Verify whether callers need encryption for storage, transport, signing, or compatibility; choose algorithm and key lifecycle accordingly.
+- Prefer environment/config/secret-manager backed keys for deployable code.
+- Keep plaintext, ciphertext, encoding format, and key type explicit in API contracts.
+## Checklist
+- Required dependency or starter module is present.
+- Algorithm choice is explicit and compatible with the caller.
+- Key source and rotation story are documented for production code.
+- Encoding format is clear: Base64, hex, UTF-8 string, or raw bytes.
+- Decrypt path uses the matching algorithm/key type.
+- No passwords, private keys, or long-lived secrets are added to source files.
+## Do Not
+- Do not invent class names or configuration keys without checking the source index.
+- Do not replace component extension points with business-local framework code.
+- Do not broaden the task into unrelated YSS components unless the user asks.

package/template/.codex/skills/yss-security-algorithm/agents/openai.yaml ADDED Viewed

@@ -0,0 +1,4 @@
+interface:
+  display_name: "yss-security-algorithm"
+  short_description: "YSS component skill for yss-security-algorithm"
+  default_prompt: "Use yss-security-algorithm for this YSS backend component task."

package/template/.codex/skills/yss-security-algorithm/references/source-index.md ADDED Viewed

@@ -0,0 +1,33 @@
+# yss-security-algorithm Source Index
+Generated: 2026-06-29T16:11:14+00:00
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT` to reproduce or refresh.
+This file is generated by `yss-source-index/scripts/refresh-yss-skill-index.py`. Do not hand-edit generated sections.
+Paths below are source path hints captured at refresh time. If they do not exist in the current workspace, locate sources using `YSS_SOURCE_ROOT`, CodeGraph, package/class names, Maven artifact names, or repository search before assuming the source is unavailable.
+## Component Path Hints
+- `yss-microservice-components/yss-component-security-algorithm` (existed when indexed)
+## Documentation Files
+- No component documentation files found.
+## Maven Modules
+- `yss-microservice-components/yss-component-security-algorithm`
+## Key Java Entry Points
+- `yss-microservice-components/yss-component-security-algorithm/src/main/java/com/yss/cloud/CryptoType.java`
+- `yss-microservice-components/yss-component-security-algorithm/src/main/java/com/yss/cloud/config/DefaultJwtConfiguration.java`
+- `yss-microservice-components/yss-component-security-algorithm/src/main/java/com/yss/cloud/jose/KeyGeneratorUtils.java`
+- `yss-microservice-components/yss-component-security-algorithm/src/main/java/com/yss/cloud/util/SecurityCryptoUtil.java`
+## Recommended Next Reads
+- Start with the documentation files above when learning component usage.
+- Search the key Java entry points for annotations, auto configuration, properties, aspects, interceptors, handlers, and result objects before changing application code.
+- Prefer existing component extension points over rewriting framework logic in business modules.

package/template/.codex/skills/yss-source-index/SKILL.md ADDED Viewed

@@ -0,0 +1,56 @@
+---
+name: yss-source-index
+description: Refresh generated YSS skill source indexes from the local backend component source repository and record frontend YSS UI documentation entry points. Use when yss-cloud-microservice changes, when YSS component skills need accurate source paths, or when maintaining YSS backend component skills such as cache/mybatis/dto/audit/excel/distributed-id/jdbc/dictionary/file/log/taskflow/validation/security and frontend yss-ui skill references.
+---
+# yss-source-index
+Use this maintenance skill to keep YSS skills grounded in current source and documentation.
+中文说明：这个技能用于维护 YSS skills 的“源码索引”。后端组件库或前端文档入口变化后，运行脚本刷新引用文件。
+## Source Location Policy
+- Backend component source is environment-specific. Use `references/source-location.md` before trusting any generated path.
+- Preferred explicit setting: `YSS_SOURCE_ROOT=/absolute/path/to/yss-cloud-microservice`.
+- Frontend YSS UI components: `http://192.168.164.27:3200/components`
+- Frontend YSS UI hooks: `http://192.168.164.27:3200/hooks`
+- Frontend YSS UI skill docs: `http://192.168.164.27:3200/skills`
+## Refresh Workflow
+Run:
+```bash
+YSS_SKILLS_ROOT=/path/to/.codex/skills \
+YSS_SOURCE_ROOT=/path/to/yss-cloud-microservice \
+python3 /path/to/yss-source-index/scripts/refresh-yss-skill-index.py
+```
+The script updates `references/source-index.md` for backend component skills and `references/frontend-docs.md` for frontend YSS UI skills. Read `references/source-map-config.md` for the full skill-to-source mapping.
+中文说明：脚本不会复制大段源码，只会生成可追踪的文档路径、模块路径和关键 Java 入口类，方便 Codex 后续精准读取。
+If `YSS_SOURCE_ROOT` is omitted, the script tries to find a repository containing `yss-microservice-components` from the current workspace and common local project folders. If it cannot find one, set `YSS_SOURCE_ROOT` explicitly.
+## Output Contract
+Generated source indexes should contain:
+- source root and generated timestamp
+- component directories and documentation files
+- Maven modules
+- key Java classes matched by names such as annotations, auto configurations, properties, aspects, interceptors, handlers, repositories, DTOs, and result objects
+- recommended next reads for Codex when performing implementation or troubleshooting
+Do not paste full component source into `SKILL.md`. Keep `SKILL.md` short and let specialists read generated indexes or targeted assets only when needed.
+中文说明：`SKILL.md` 保持短小，细节放到 `references/`，这是为了降低每次触发技能时的上下文成本。
+## After Refresh
+Validate changed skills with:
+```bash
+python3 /path/to/skill-creator/scripts/quick_validate.py /path/to/.codex/skills/yss-source-index
+```

package/template/.codex/skills/yss-source-index/agents/openai.yaml ADDED Viewed

@@ -0,0 +1,4 @@
+interface:
+  display_name: "YSS Source Index"
+  short_description: "Refresh YSS skill source indexes"
+  default_prompt: "Refresh YSS skill indexes from yss-cloud-microservice and YSS UI docs."

package/template/.codex/skills/yss-source-index/references/source-location.md ADDED Viewed

@@ -0,0 +1,17 @@
+# YSS Source Location Policy
+YSS skill references may mention paths such as `yss-microservice-components/yss-component-dto`. Treat these as source path hints, not guaranteed filesystem locations.
+## Lookup Order
+1. Check the current workspace first. If `.codegraph/` exists, use `codegraph explore "<class, module, or path hint>"` before text search.
+2. If the component source is outside the workspace, use `YSS_SOURCE_ROOT` when it is set. It should point to the repository root that contains `yss-microservice-components`.
+3. If `YSS_SOURCE_ROOT` is not set, search common local roots such as the current repository parents, `~/Projects`, `~/Documents`, and `~/Documents/yss-project`.
+4. If the source still cannot be found, use the generated `references/source-index.md` as a stale-but-useful map of module names, package names, class names, and Maven artifacts. Do not assume listed files exist locally.
+## For Skill Authors
+- Say "source path hints" instead of "source root" unless you have verified the directory in the current environment.
+- Keep generated indexes useful for search, but do not require agents to open those exact paths.
+- Prefer symbols, package names, Maven artifact names, and annotations in instructions; they survive repository relocation better than absolute paths.
+- When refreshing indexes, set `YSS_SOURCE_ROOT=/absolute/path/to/yss-cloud-microservice` if auto-detection cannot find the component repository.

package/template/.codex/skills/yss-source-index/references/source-map-config.md ADDED Viewed

@@ -0,0 +1,47 @@
+# YSS Source Index Mapping
+The refresh script maps component source path hints to skill references. These paths are relative to the detected or configured `YSS_SOURCE_ROOT`; they are not guaranteed to exist in every workspace.
+中文说明：这个文件记录“哪个组件源码目录生成到哪个 skill 的引用索引”，方便你以后维护映射关系。
+| Skill | Backend source path hints |
+| --- | --- |
+| `yss-cache` | `yss-microservice-components/yss-component-cache-parent` |
+| `yss-mybatis` | `yss-microservice-components/yss-component-persistence` |
+| `yss-dto` | `yss-microservice-components/yss-component-dto` |
+| `yss-audit-log` | `yss-microservice-components/yss-component-audit-log` |
+| `yss-excel-mvc` | `yss-microservice-components/yss-component-excel-mvc`, `yss-microservice-components/yss-component-excel-starter` |
+| `yss-distributed-id` | `yss-microservice-components/yss-component-distributed-id`, `yss-microservice-components/yss-component-leaf` |
+| `yss-jdbc` | `yss-microservice-components/yss-component-jdbc` |
+| `yss-dictionary` | `yss-microservice-components/yss-component-dictionary-parent` |
+| `yss-dir` | `yss-microservice-components/yss-component-dir-parent` |
+| `yss-file` | `yss-microservice-components/yss-component-file`, `yss-microservice-components/yss-component-file-parser`, `yss-microservice-components/yss-component-filemanager-common` |
+| `yss-log` | `yss-microservice-components/yss-component-log-starter` |
+| `yss-liquibase` | `yss-microservice-components/yss-component-liquibase-starter` |
+| `yss-resilience4j` | `yss-microservice-components/yss-component-resilience4j-starter` |
+| `yss-sql-condition` | `yss-microservice-components/yss-component-sql-condition` |
+| `yss-sql-tpl` | `yss-microservice-components/yss-component-sql-tpl-parent` |
+| `yss-taskflow` | `yss-microservice-components/yss-component-taskflow` |
+| `yss-validation` | `yss-microservice-components/yss-component-validation-engine-parent`, `yss-microservice-components/yss-component-validation-jsr303` |
+| `yss-security-algorithm` | `yss-microservice-components/yss-component-security-algorithm` |
+| `yss-userinfo` | `yss-microservice-components/yss-component-userinfo-starter` |
+| `yss-variable` | `yss-microservice-components/yss-component-variable` |
+| `yss-quality` | `yss-microservice-components/yss-component-quality-starter` |
+| `yss-anti-scheduler` | `yss-microservice-components/yss-component-anti-corrosion/yss-component-anti-scheduler` |
+| `yss-exception` | `yss-microservice-components/yss-component-exception` |
+| `yss-mail` | `yss-microservice-components/yss-component-mail-starter` |
+| `yss-filerunner` | `yss-microservice-components/yss-component-filerunner-parent` |
+| `yss-valuation` | `yss-microservice-components/yss-component-valuation` |
+| `yss-duckdb` | `yss-microservice-components/yss-component-duckdb` |
+| `yss-mapper-dynamic` | `yss-microservice-components/yss-component-mapper-dynamic` |
+Frontend docs are written to these skills:
+| Skill | Frontend references |
+| --- | --- |
+| `yss-ui` | components, hooks, skills docs |
+| `yss-components` | components docs |
+| `yss-hook` | hooks docs |
+| `yss-page-module-development` | components and hooks docs |
+| `yss-use-table-height` | hooks docs |
+| `yss-use-tree-height` | hooks docs |