create-yss-spec 2.1.10 → 2.1.13

package/template/.cursor/skills/lombok/SKILL.md

@@ -0,0 +1,351 @@
+---
+name: lombok
+description: |
+  Project Lombok for reducing Java boilerplate. Covers annotations for getters,
+  setters, constructors, builders, logging, and more. Based on production
+  patterns from castellino and gestionale-presenze projects.
+
+  USE WHEN: user mentions "lombok", "@Data", "@Builder", "@Slf4j", asks about
+  "boilerplate reduction", "getters/setters", "@RequiredArgsConstructor", "@Value"
+
+  DO NOT USE FOR: Java language features - use `java` skill instead
+  DO NOT USE FOR: MapStruct integration - use `mapstruct` skill
+  DO NOT USE FOR: Spring annotations - use `backend-spring-boot` skill
+allowed-tools: Read, Grep, Glob, Write, Edit
+---
+# Project Lombok
+
+> **Deep Knowledge**: Use `mcp__documentation__fetch_docs` with technology: `lombok` for comprehensive documentation.
+
+## YSS 阶段 7 执行结果
+
+- 消费批准后的 Slice Contract/work unit，只在允许路径内调整 POJO 样板和注解处理器配置。
+- 受控生成必须记录对象类型、选用/排除注解、实体关系和敏感字段风险、编译/测试实际结果。
+- 按 `yss-router` 的统一 Execution Result 返回 changed files、证据、偏离和新增影响；`@Data` 实体风险、处理器配置缺失或越界路径返回 `violation`。
+
+## Maven Configuration
+
+```xml
+<dependency>
+    <groupId>org.projectlombok</groupId>
+    <artifactId>lombok</artifactId>
+    <version>1.18.34</version>
+    <optional>true</optional>
+</dependency>
+
+<!-- For MapStruct compatibility -->
+<dependency>
+    <groupId>org.projectlombok</groupId>
+    <artifactId>lombok-mapstruct-binding</artifactId>
+    <version>0.2.0</version>
+</dependency>
+```
+
+## Common Annotations
+
+### @Data (All-in-One)
+
+```java
+@Data
+public class User {
+    private Long id;
+    private String name;
+    private String email;
+}
+
+// Generates:
+// - @Getter for all fields
+// - @Setter for all non-final fields
+// - @ToString
+// - @EqualsAndHashCode
+// - @RequiredArgsConstructor
+```
+
+### @Getter / @Setter
+
+```java
+public class User {
+    @Getter @Setter
+    private String name;
+
+    @Getter // Read-only
+    private final String email;
+
+    @Setter(AccessLevel.PROTECTED)
+    private String internalId;
+}
+```
+
+### @NoArgsConstructor / @AllArgsConstructor / @RequiredArgsConstructor
+
+```java
+@NoArgsConstructor
+@AllArgsConstructor
+public class User {
+    private Long id;
+    private String name;
+}
+
+@RequiredArgsConstructor
+public class UserService {
+    private final UserRepository userRepository; // Included in constructor
+    private final UserMapper userMapper;         // Included in constructor
+    private String cacheName;                    // NOT included
+}
+```
+
+### @Builder
+
+```java
+@Data
+@Builder
+public class User {
+    private Long id;
+    private String name;
+    private String email;
+    @Builder.Default
+    private UserStatus status = UserStatus.ACTIVE;
+}
+
+// Usage
+User user = User.builder()
+    .name("John")
+    .email("john@example.com")
+    .build();
+
+// With toBuilder for updates
+User updated = user.toBuilder()
+    .name("Jane")
+    .build();
+```
+
+### @Value (Immutable)
+
+```java
+@Value
+public class UserResponse {
+    Long id;
+    String name;
+    String email;
+    LocalDateTime createdAt;
+}
+
+// Generates:
+// - All fields are private final
+// - @AllArgsConstructor
+// - @Getter (no setters)
+// - @ToString
+// - @EqualsAndHashCode
+```
+
+## Entity Pattern
+
+```java
+@Entity
+@Table(name = "users")
+@Getter
+@Setter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@AllArgsConstructor(access = AccessLevel.PRIVATE)
+@Builder
+@EntityListeners(AuditingEntityListener.class)
+public class User {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Column(nullable = false)
+    private String name;
+
+    @Column(unique = true, nullable = false)
+    private String email;
+
+    @Enumerated(EnumType.STRING)
+    @Builder.Default
+    private UserStatus status = UserStatus.ACTIVE;
+
+    @CreatedDate
+    @Column(updatable = false)
+    private LocalDateTime createdAt;
+
+    @LastModifiedDate
+    private LocalDateTime updatedAt;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "department_id")
+    private Department department;
+}
+```
+
+JPA/DDD entities must not default to `@Data`; choose equality and `toString` deliberately from stable identity and exclude lazy, relationship, and sensitive fields.
+
+## Service Pattern with Constructor Injection
+
+```java
+@Service
+@RequiredArgsConstructor
+@Slf4j
+public class UserServiceImpl implements UserService {
+
+    private final UserRepository userRepository;
+    private final UserMapper userMapper;
+    private final PasswordEncoder passwordEncoder;
+
+    @Override
+    public UserResponse create(CreateUserRequest dto) {
+        log.info("Creating user: {}", dto.getEmail());
+        User user = userMapper.toEntity(dto);
+        return userMapper.toResponse(userRepository.save(user));
+    }
+}
+```
+
+## Logging
+
+```java
+@Slf4j  // SLF4J logger
+public class UserService {
+    public void process() {
+        log.info("Processing...");
+        log.debug("Debug info: {}", data);
+        log.error("Error occurred", exception);
+    }
+}
+
+@Log4j2  // Log4j2 logger
+@CommonsLog  // Apache Commons Logging
+@JBossLog  // JBoss Logging
+```
+
+## DTO Pattern
+
+```java
+// Request DTO
+@Data
+public class CreateUserRequest {
+    @NotBlank
+    private String name;
+    @Email
+    private String email;
+    @Size(min = 8)
+    private String password;
+}
+
+// Response DTO (immutable)
+@Value
+@Builder
+public class UserResponse {
+    Long id;
+    String name;
+    String email;
+    UserStatus status;
+    LocalDateTime createdAt;
+}
+```
+
+## @Cleanup
+
+```java
+public void readFile(String path) throws IOException {
+    @Cleanup InputStream in = new FileInputStream(path);
+    // in.close() called automatically
+}
+```
+
+## @SneakyThrows
+
+```java
+@SneakyThrows  // Wraps checked exception
+public String readConfig() {
+    return Files.readString(Path.of("config.json"));
+}
+```
+
+## @Synchronized
+
+```java
+public class Counter {
+    @Synchronized
+    public void increment() {
+        // Thread-safe
+    }
+}
+```
+
+## @With (Immutable Updates)
+
+```java
+@Value
+@With
+public class Point {
+    int x;
+    int y;
+}
+
+Point p1 = new Point(1, 2);
+Point p2 = p1.withX(5);  // Point(5, 2)
+```
+
+## Key Annotations
+
+| Annotation | Purpose |
+|------------|---------|
+| `@Data` | Getter, Setter, ToString, Equals, Constructor |
+| `@Value` | Immutable class |
+| `@Builder` | Builder pattern |
+| `@RequiredArgsConstructor` | Constructor for final fields |
+| `@Slf4j` | Logger field |
+| `@ToString.Exclude` | Exclude from toString |
+| `@EqualsAndHashCode.Exclude` | Exclude from equals/hashCode |
+
+---
+
+## When NOT to Use This Skill
+
+| Scenario | Use Instead |
+|----------|-------------|
+| Java core language | `java` skill |
+| MapStruct mapping | `mapstruct` skill |
+| Spring annotations | `backend-spring-boot` skill |
+| JPA entities complex logic | Manual implementation |
+| Public API design | Explicit methods for clarity |
+
+---
+
+## Anti-Patterns
+
+| Anti-Pattern | Why It's Bad | Correct Approach |
+|--------------|--------------|------------------|
+| @Data on JPA entities | toString/equals issues | Use @Getter/@Setter selectively |
+| Not excluding lazy relations | LazyInitializationException | Use @ToString.Exclude |
+| @EqualsAndHashCode on entities | Proxy issues | Use @EqualsAndHashCode(onlyExplicitlyIncluded = true) |
+| @SneakyThrows everywhere | Hides exceptions | Use proper exception handling |
+| @Builder without @Default | Null fields | Add @Builder.Default |
+| @Value with mutable fields | Breaks immutability | Use only immutable types |
+| Mixing @Data and manual methods | Confusing API | Be consistent |
+| Not configuring in lombok.config | Inconsistent behavior | Use lombok.config file |
+
+---
+
+## Quick Troubleshooting
+
+| Issue | Cause | Solution |
+|-------|-------|----------|
+| "Cannot find symbol" for getters | IDE not processing | Enable annotation processing |
+| LazyInitializationException | toString on lazy relation | Add @ToString.Exclude |
+| MapStruct not working | Wrong processor order | Lombok before MapStruct |
+| Builder missing fields | No @Builder.Default | Add defaults or check config |
+| StackOverflowError in equals | Circular reference | Exclude relation fields |
+| IDE shows errors but compiles | IDE cache | Invalidate caches/restart |
+| @Slf4j logger not found | SLF4J not in classpath | Add SLF4J dependency |
+| Generated code not visible | delombok needed | Run delombok task |
+
+---
+
+## Reference Documentation
+- [Lombok Documentation](https://projectlombok.org/features/)
+- [Stable Features](https://projectlombok.org/features/all)
+- [Configuration](https://projectlombok.org/features/configuration)
+
+> **Deep Knowledge**: Use `mcp__documentation__fetch_docs` with technology: `lombok` for comprehensive documentation.

package/template/.cursor/skills/loop-me/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: loop-me
+description: Grill me about specs for the workflows I want to build, within this workspace.
+disable-model-invocation: true
+argument-hint: "A workflow to design, or nothing to go find one"
+---
+
+Run a stateful `/grilling` session whose only output is **workflow** specs. Use the grilling discipline — relentless, one question at a time, a recommended answer attached to each — aimed at the vocabulary and goal below. Create, edit, and delete specs as the grilling resolves things.
+
+## The loop lens
+
+A **loop** is a recurring pattern in the user's life: their career, their week, their morning, a single repeated activity. Picturing a life as loops within loops reveals how predictable its activities really are — which is what makes them worth **delegating**. Use the lens to find loops worth specifying, and propose ones the user hasn't noticed.
+
+A **workflow** is the spec of one loop, made real. You run a workflow on a loop — the loop is its running instantiation. Workflows live in `workflows/*.md` and are the source of truth.
+
+## Vocabulary
+
+A shared language, reached for only when a workflow calls for it — never a checklist. **Mandate nothing structural**: a workflow needs no AI, no checkpoint, and no schedule unless the grilling shows it does.
+
+- **Trigger** — what fires each run: an **event** (a new email, a new issue) or a **schedule** (every morning). Event-triggering is usually the more efficient.
+- **Checkpoint** — a human-in-the-loop point where the user is asked to verify or decide. Some workflows have none and run autonomously; some use no AI at all.
+- **Push right** — defer the checkpoint as far as it will go. Do maximal work before involving the human, so they are asked once, late, with everything prepared.
+- **Brief** — what a checkpoint presents: a tight, decision-ready summary — what was produced, why, and a link down to the asset itself — never the raw output. The user reads a brief, not a draft. Speed of review is imperative.
+
+## Definition of done
+
+A workflow spec is done when an implementer agent could build it without asking a single question. Grill until then; nothing is done while a question remains.
+
+## The workspace
+
+- `workflows/*.md` — one spec per workflow.
+- `NOTES.md` — raw notes on the user's world: the tools they use, the channels they process, and their own terminology for both. When it is empty or thin, interview them about their world before specifying anything. Sharpen fuzzy terms into canonical ones as they surface, and record them here.

package/template/.cursor/skills/loop-me/agents/openai.yaml

@@ -0,0 +1,5 @@
+interface:
+  display_name: "Loop Me"
+  short_description: "Spec the workflows you want to build"
+policy:
+  allow_implicit_invocation: false

package/template/.cursor/skills/maintaining-skills/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: maintaining-skills
+description: Use when creating, modifying, validating, or retiring reusable Agent skills.
+---
+
+# Maintaining Skills
+
+Create skills that add useful, non-obvious guidance without constraining unrelated work.
+
+## Working Contract
+
+1. Inspect the skill's callers, ownership, projections, and validation policy before editing. Preserve user intent, authorization boundaries, supported runtimes, and existing metadata unless the requested change requires otherwise.
+2. Assume the Agent already has general reasoning and tool competence. Record only domain knowledge, decision criteria, fragile invariants, or repeatable operations that materially improve outcomes. Do not turn one example or past failure into a universal rule.
+3. Keep discovery precise: use a lowercase hyphenated name and a concise description that states the capability and when it applies. Avoid catchalls that attract unrelated requests.
+4. Keep `SKILL.md` as short as the task permits. Put conditional detail in `references/`, deterministic repeated operations in `scripts/`, and files intended for generated output in `assets/`. Create only resources with a concrete use.
+5. Match specificity and validation to risk. Prefer outcome and decision criteria when several approaches are valid; use fixed steps or absolute rules only for correctness, safety, permissions, or genuinely fragile workflows.
+6. Follow the repository's declared maintenance and review policy. If none exists, run structural validation plus focused checks of the behavior or invariant changed. Use independent forward testing only when complexity or risk makes it meaningful; do not require a failing baseline for every ordinary edit.
+7. After changes, validate frontmatter, naming, references, scripts, projections, locks, and affected callers. Retire obsolete names and resources unless the repository explicitly requires compatibility.
+
+## Boundaries
+
+- Project rules belong in the project's authoritative instructions, not duplicated inside a generic skill.
+- Platform-private skills or absolute local paths are not portable shared dependencies.
+- A validation command proves only what it checks; structural validation alone does not prove good Agent decisions.
+- Do not create README files, changelogs, examples, routers, or placeholder directories without a concrete requirement.