create-yss-spec 2.1.3 → 2.1.5

package/template/scripts/verify-lifecycle-scenarios

@@ -2,9 +2,47 @@
 # frozen_string_literal: true
 
 require "pathname"
+require "set"
 require "yaml"
 
 ROOT = Pathname.new(__dir__).join("..").realpath
+REGISTRY = YAML.safe_load(
+  ROOT.join("docs/process/lifecycle-registry.yaml").read,
+  permitted_classes: [],
+  aliases: false
+)
+REGISTRY_IDS = %w[stages gates artifacts work_units evidence].flat_map do |collection|
+  REGISTRY.fetch(collection).map { |record| record.fetch("id") }
+end.to_set
+ROUTE_REGISTRY_IDS = {
+  "impact-assessment" => "artifact.impact-assessment",
+  "ssot-update" => "work-unit.ssot-update",
+  "skill-projection-sync" => "work-unit.skill-projection-sync",
+  "pressure-scenarios" => "evidence.fresh-verification",
+  "fresh-verification" => "work-unit.fresh-verification",
+  "independent-review" => "work-unit.independent-review",
+  "tracker-sync" => "evidence.checkpoint-and-rollback",
+  "spec" => "artifact.spec",
+  "product-overview" => "artifact.product-overview",
+  "functional-architecture" => "artifact.functional-architecture",
+  "interaction-spec" => "artifact.interaction-spec",
+  "low-fidelity-prototype" => "artifact.low-fidelity-prototype",
+  "state-matrix" => "artifact.state-matrix",
+  "prototype-review" => "gate.prototype-reviewed",
+  "high-fidelity-html-prototype" => "artifact.high-fidelity-html-prototype",
+  "prototype-verification" => "gate.prototype-verified",
+  "user-confirmation" => "gate.user-confirmation",
+  "openapi-draft" => "artifact.openapi-draft",
+  "draft-review" => "gate.openapi-draft-reviewed",
+  "design-review" => "gate.design-reviewed",
+  "openapi-freeze" => "gate.openapi-frozen",
+  "engineering-baseline" => "artifact.engineering-baseline",
+  "architecture-review" => "artifact.architecture-review",
+  "data-architecture" => "artifact.data-architecture",
+  "spec-delta" => "artifact.spec-delta",
+  "parent-ticket" => "artifact.parent-ticket",
+  "vertical-slice-tickets" => "artifact.vertical-slice-ticket"
+}.freeze
 
 def route(facts)
   if facts.fetch(:repository_mode) == "template-source"
@@ -19,20 +57,26 @@ def route(facts)
   end
 
   gates = %w[impact-assessment tracker-sync fresh-verification]
-  return gates if facts.fetch(:scale) == :small && !facts.fetch(:high_risk)
+  small_change = facts.fetch(:scale) == :small && !facts.fetch(:high_risk) &&
+                 !facts.fetch(:ui_impact) && !facts.fetch(:api_impact) &&
+                 !facts.fetch(:backend_impact) && !facts.fetch(:data_impact)
+  return gates if small_change
 
   gates.concat(%w[spec product-overview functional-architecture])
 
   if facts.fetch(:ui_impact)
     gates.concat(%w[
+      interaction-spec
       low-fidelity-prototype
       state-matrix
+      prototype-review
       high-fidelity-html-prototype
+      prototype-verification
       user-confirmation
     ])
   end
 
-  gates.concat(%w[openapi-draft design-review openapi-freeze]) if facts.fetch(:api_impact)
+  gates.concat(%w[openapi-draft draft-review design-review openapi-freeze]) if facts.fetch(:api_impact)
 
   if facts.fetch(:backend_impact) || facts.fetch(:high_risk)
     gates.concat(%w[engineering-baseline architecture-review])
@@ -53,7 +97,7 @@ scenarios = [
       data_impact: false, existing_frozen_baseline: true
     },
     required: %w[impact-assessment tracker-sync fresh-verification],
-    forbidden: %w[spec product-overview spec-delta high-fidelity-html-prototype]
+    forbidden: %w[spec product-overview spec-delta interaction-spec high-fidelity-html-prototype prototype-review prototype-verification]
   },
   {
     name: "纯后端新功能",
@@ -63,7 +107,17 @@ scenarios = [
       data_impact: false, existing_frozen_baseline: false
     },
     required: %w[spec product-overview functional-architecture openapi-draft engineering-baseline parent-ticket vertical-slice-tickets],
-    forbidden: %w[low-fidelity-prototype state-matrix high-fidelity-html-prototype user-confirmation spec-delta]
+    forbidden: %w[interaction-spec low-fidelity-prototype state-matrix prototype-review high-fidelity-html-prototype prototype-verification user-confirmation spec-delta]
+  },
+  {
+    name: "普通 API 功能无需专项输入",
+    facts: {
+      repository_mode: "project-instance", scale: :small, high_risk: false,
+      ui_impact: false, api_impact: true, backend_impact: true,
+      data_impact: false, existing_frozen_baseline: false
+    },
+    required: %w[spec product-overview functional-architecture openapi-draft draft-review openapi-freeze engineering-baseline parent-ticket vertical-slice-tickets],
+    forbidden: %w[interaction-spec low-fidelity-prototype state-matrix prototype-review high-fidelity-html-prototype prototype-verification user-confirmation spec-delta]
   },
   {
     name: "有 UI 的新功能",
@@ -72,7 +126,7 @@ scenarios = [
       ui_impact: true, api_impact: true, backend_impact: true,
       data_impact: false, existing_frozen_baseline: false
     },
-    required: %w[spec product-overview low-fidelity-prototype state-matrix high-fidelity-html-prototype user-confirmation openapi-freeze vertical-slice-tickets],
+    required: %w[spec product-overview interaction-spec low-fidelity-prototype state-matrix prototype-review high-fidelity-html-prototype prototype-verification user-confirmation openapi-freeze vertical-slice-tickets],
     forbidden: %w[spec-delta]
   },
   {
@@ -83,7 +137,7 @@ scenarios = [
       data_impact: true, existing_frozen_baseline: true
     },
     required: %w[spec product-overview spec-delta openapi-draft data-architecture architecture-review vertical-slice-tickets],
-    forbidden: %w[high-fidelity-html-prototype]
+    forbidden: %w[interaction-spec prototype-review high-fidelity-html-prototype prototype-verification]
   },
   {
     name: "模板源流程修订",
@@ -107,12 +161,48 @@ scenarios.each do |scenario|
   failures << "#{scenario.fetch(:name)} 错误触发: #{unexpected.join(', ')}" unless unexpected.empty?
 end
 
+route_keys = scenarios.flat_map { |scenario| scenario.fetch(:required) + scenario.fetch(:forbidden) }.uniq
+route_keys.each do |route_key|
+  registry_id = ROUTE_REGISTRY_IDS[route_key]
+  failures << "生命周期场景 route key 未映射稳定 ID: #{route_key}" unless registry_id
+  failures << "生命周期场景 route key 映射到不存在的稳定 ID: #{route_key} -> #{registry_id}" if registry_id && !REGISTRY_IDS.include?(registry_id)
+end
+
+prototype_registry_requirements = {
+  "gate.prototype-reviewed" => ["evidence.prototype-review-result"],
+  "gate.prototype-verified" => ["evidence.antd-cli-validation", "evidence.browser-prototype-verification"],
+  "gate.user-confirmation" => ["evidence.prototype-confirmation"]
+}.freeze
+prototype_registry_requirements.each do |gate_id, required_evidence|
+  gate = REGISTRY.fetch("gates").find { |record| record.fetch("id") == gate_id }
+  failures << "原型阶段缺少生命周期门禁: #{gate_id}" unless gate
+  next unless gate
+
+  missing_evidence = required_evidence - gate.fetch("evidence", [])
+  failures << "#{gate_id} 缺少证据: #{missing_evidence.join(', ')}" unless missing_evidence.empty?
+end
+
+%w[
+  artifact.interaction-spec
+  artifact.prototype-review
+  artifact.prototype-confirmation
+  evidence.prototype-review-result
+  evidence.antd-cli-validation
+  evidence.browser-prototype-verification
+  evidence.prototype-confirmation
+].each do |stable_id|
+  failures << "原型阶段缺少生命周期对象: #{stable_id}" unless REGISTRY_IDS.include?(stable_id)
+end
+
 semantic_markers = {
   "AGENTS.md" => [
-    "21 个门禁全部是条件强制门禁",
+    "生命周期注册表中的条件门禁全部按影响面强制",
     "只要进入 Spec 基线",
     "才构成产品设计影响",
     "Spec Delta 只记录相对既有冻结 Spec 基线",
+    "安全 / 权限不设独立生命周期资料或专属门禁",
+    "普通 action 注册",
+    "SQL / DDL / 迁移和上传 / 下载本身不构成安全 / 权限专项",
     "template-source",
     "apps/backend/<project>/",
     "apps/frontend/<project>/",
@@ -126,7 +216,17 @@ semantic_markers = {
     "不生成空文档",
     "最近可信阶段",
     "同一独立执行者",
-    "集中 checkpoint"
+    "集中 checkpoint",
+    "安全 / 权限不单独分诊",
+    "不自动升级为安全专项"
+  ],
+  "docs/process/lifecycle-artifact-map.md" => [
+    "安全 / 权限不形成独立门禁",
+    "按实际 UI、API、Backend、Data、High-risk 影响"
+  ],
+  ".agents/skills/yss-product-lifecycle/references/artifact-dependencies.md" => [
+    "不使用独立影响类型",
+    "不增加安全 / 权限传播"
   ],
   "docs/process/implementation-repo-integration.md" => [
     "apps/backend/<project>/",
@@ -171,7 +271,7 @@ unless failures.empty?
   exit 1
 end
 
-puts "五类生命周期压力场景验证通过"
+puts "六类生命周期压力场景验证通过"
 
 skill_root = ROOT.join(".agents/skills/yss-product-lifecycle")
 skill = skill_root.join("SKILL.md").read
@@ -235,7 +335,7 @@ reference_markers = {
   ]
 }.freeze
 
-removed_skills = %w[code-review-process yss-domain-modeling]
+removed_skills = %w[code-review-process yss-domain-modeling yss-openapi]
 removed_skills.each do |skill_name|
   failures << "已移除 skill 仍存在: #{skill_name}" if ROOT.join(".agents/skills", skill_name).exist?
 end
@@ -250,7 +350,8 @@ tracked_policy_files = [
 tracked_policy_files.each do |relative_path|
   body = ROOT.join(relative_path).read
   removed_skills.each do |skill_name|
-    failures << "#{relative_path} 仍引用已移除 skill: #{skill_name}" if body.include?(skill_name)
+    pattern = Regexp.new("(?<![a-z0-9-])#{Regexp.escape(skill_name)}(?![a-z0-9-])")
+    failures << "#{relative_path} 仍引用已移除 skill: #{skill_name}" if body.match?(pattern)
   end
 end
 
@@ -265,6 +366,47 @@ unless prototype_review.include?("isolated visual fixes") && prototype_review.in
   failures << "prototype-review 未排除无行为影响的局部视觉改动"
 end
 
+yss_design_system = ROOT.join(".agents/skills/yss-design-system/SKILL.md").read
+failures << "yss-design-system 未将 product-design:index 声明为原型主入口" unless yss_design_system.include?("product-design:index")
+failures << "yss-design-system 未路由统一原型阶段契约" unless yss_design_system.include?("yss-prototype-stage")
+
+%w[product-design-prototype wireframe-prototype high-fidelity-html-prototype].each do |skill_name|
+  body = ROOT.join(".agents/skills/#{skill_name}/SKILL.md").read
+  failures << "#{skill_name} 未降为兼容入口" unless body.include?("兼容入口") && body.include?("yss-prototype-stage")
+end
+
+high_fidelity = ROOT.join(".agents/skills/high-fidelity-html-prototype/SKILL.md").read
+failures << "高保真原型仍固定 AntD CLI 版本" if high_fidelity.include?("@ant-design/cli@6.5.0")
+failures << "高保真原型仍以 npm view 代替受控 AntD CLI 证据" if high_fidelity.include?("npm view antd version")
+
+confirmation_template = ROOT.join("docs/design/templates/prototype-confirmation-template.md").read
+failures << "原型确认模板仍固定 AntD 版本" if confirmation_template.include?("--version 6.0.0")
+failures << "原型确认模板未引用统一证据清单" unless confirmation_template.include?("prototype-evidence.yaml")
+
+evidence_template_path = ROOT.join("docs/design/templates/prototype-evidence-template.yaml")
+failures << "缺少机器可读的原型证据模板" unless evidence_template_path.file?
+if evidence_template_path.file?
+  evidence_template = evidence_template_path.read
+  %w[design_baseline antd browser_verification review user_confirmation].each do |field|
+    failures << "原型证据模板缺少 #{field}" unless evidence_template.include?("#{field}:")
+  end
+end
+
+prototype_stage_path = ROOT.join(".agents/skills/yss-prototype-stage/SKILL.md")
+failures << "缺少跨 Agent 原型阶段契约" unless prototype_stage_path.file?
+if prototype_stage_path.file?
+  prototype_stage = prototype_stage_path.read
+  %w[product-design:index antd design.md project_design browser_verification].each do |marker|
+    failures << "统一原型阶段契约缺少 #{marker}" unless prototype_stage.include?(marker)
+  end
+end
+
+design_baseline = ROOT.join("docs/design/design.md").read
+failures << "项目设计基线未声明上游 design.md 与项目 token 的优先级" unless design_baseline.include?("上游默认") && design_baseline.include?("项目覆盖")
+
+adr = ROOT.join("docs/adr/0001-product-design-prototype-entrypoint.md").read
+failures << "ADR 仍引用不存在的原型流程文档" if adr.include?("docs/process/product-prototype-workflow.md")
+
 openapi_review = ROOT.join(".agents/skills/yss-openapi-draft-review/SKILL.md").read
 %w[Automated semantic unchanged].each do |marker|
   failures << "OpenAPI Draft Review 缺少自动/语义边界: #{marker}" unless openapi_review.include?(marker)
@@ -362,14 +504,14 @@ failures << "Matt prototype 分支模式错误" unless matt_prototype["branch_pa
 failures << "Matt prototype 不能作为生产交付物" unless matt_prototype["production_delivery"] == false
 failures << "Matt prototype 错误替代 YSS 高保真原型" unless matt_prototype["replaces_yss_high_fidelity"] == false
 yss_prototype = prototype_modes.fetch("yss_high_fidelity", {})
-%w[prototype_review antd_cli_verification user_confirmation].each do |field|
+%w[prototype_review antd_cli_verification browser_verification prototype_evidence user_confirmation].each do |field|
   failures << "YSS 高保真 prototype 缺少 #{field} 门禁" unless yss_prototype.fetch("required", []).include?(field)
 end
 failures << "YSS 高保真 prototype 错误替代 Matt prototype" unless yss_prototype["replaces_matt_logic"] == false
 
 prototype_mode_requirements = {
   "matt_logic" => %w[prototype_mode prototype_branch source_handoff prototype_asset_or_run conclusion updated_authoritative_asset remaining_questions return_handoff],
-  "yss_high_fidelity" => %w[prototype_mode prototype_review antd_cli_verification user_confirmation]
+  "yss_high_fidelity" => %w[prototype_mode prototype_review antd_cli_verification browser_verification prototype_evidence user_confirmation]
 }.freeze
 prototype_mode_requirements.each do |mode, required_fields|
   evidence = required_fields.to_h { |field| [field, true] }.merge("prototype_mode" => mode)
@@ -421,8 +563,9 @@ ready_required.each do |condition|
 end
 
 propagation = contract.fetch("impact_propagation")
-expected_types = %w[wording ui-state permission api-schema state-machine data-model service-boundary nfr deployment security]
+expected_types = %w[wording ui-state api-schema state-machine data-model service-boundary nfr deployment]
 failures << "影响类型不完整" unless (expected_types - propagation.keys).empty?
+failures << "安全 / 权限仍作为独立传播类型" unless (propagation.keys & %w[permission security]).empty?
 
 allowed_conditions = %w[always existing_frozen_baseline ui_impact api_impact data_impact backend_impact]
 propagation.each do |impact_type, definition|
@@ -464,14 +607,41 @@ expected_types.each do |impact_type|
   failures << "#{impact_type} 可执行传播结果为空" if targets.nil? || targets.empty?
 end
 
-new_module_permission = propagated_targets(
+new_module_api = propagated_targets(
   propagation,
-  "permission",
+  "api-schema",
   all_impacts_context.merge("existing_frozen_baseline" => false)
 )
-failures << "新模块错误激活 spec-delta" if new_module_permission.any? { |target| target["name"] == "spec-delta" }
-unless new_module_permission.any? { |target| target["kind"] == "gate" && target["name"] == "openapi-freeze" }
-  failures << "permission API 影响未使 openapi-freeze gate stale"
+failures << "新模块错误激活 spec-delta" if new_module_api.any? { |target| target["name"] == "spec-delta" }
+unless new_module_api.any? { |target| target["kind"] == "gate" && target["name"] == "openapi-freeze" }
+  failures << "普通 API 影响未使 openapi-freeze gate stale"
+end
+
+legacy_posture_key = %w[security permission posture].join("_")
+failures << "生命周期合同仍要求已废弃的专项输入" if contract.key?(legacy_posture_key)
+ordinary_route = route(
+  repository_mode: "project-instance", scale: :medium, high_risk: false,
+  ui_impact: true, api_impact: true, backend_impact: true,
+  data_impact: false, existing_frozen_baseline: false
+)
+%w[openapi-draft openapi-freeze engineering-baseline].each do |gate|
+  failures << "普通功能错误移除 #{gate} 门禁" unless ordinary_route.include?(gate)
+end
+
+data_targets = propagated_targets(propagation, "data-model", all_impacts_context)
+failures << "SQL / DDL 未按普通数据影响传播" unless data_targets.any? { |target| target["name"] == "data-architecture" }
+api_targets = propagated_targets(propagation, "api-schema", all_impacts_context)
+failures << "下载接口未按普通 API 影响传播" unless api_targets.any? { |target| target["name"] == "openapi-draft" }
+
+seam_required = contract.fetch("seam_deferred_required")
+def seam_field_filled?(value)
+  value.is_a?(Array) ? !value.empty? : !value.to_s.empty?
+end
+valid_seam = seam_required.to_h { |field| [field, "value"] }
+failures << "完整 seam-deferred 证据被错误阻断" unless seam_required.all? { |field| seam_field_filled?(valid_seam[field]) }
+%w[owner follow_up_ticket target_version_or_release_date].each do |field|
+  mutation = valid_seam.reject { |key, _| key == field }
+  failures << "seam-deferred 缺少 #{field} 时未阻断" if seam_required.all? { |required_field| seam_field_filled?(mutation[required_field]) }
 end
 
 no_api_ui = propagated_targets(
@@ -488,11 +658,11 @@ unless unknown_decision == {"action" => "pause", "reason_code" => "impact-classi
   failures << "未知 impact type 未返回结构化暂停"
 end
 
-permission_gate_stale = new_module_permission.any? { |target| target["kind"] == "gate" }
-permission_artifact_stale = new_module_permission.any? { |target| target["kind"] == "artifact" }
+api_gate_stale = new_module_api.any? { |target| target["kind"] == "gate" }
+api_artifact_stale = new_module_api.any? { |target| target["kind"] == "artifact" }
 linked_ready_facts = ready_slice.merge(
-  "gates_satisfied" => !permission_gate_stale,
-  "no_stale_artifacts" => !permission_artifact_stale
+  "gates_satisfied" => !api_gate_stale,
+  "no_stale_artifacts" => !api_artifact_stale
 )
 failures << "传播后未撤销 ready-for-agent" if ready_for_agent?(ready_required, linked_ready_facts)