create-yss-spec 2.1.3 → 2.1.5

package/template/scripts/verify-openapi-yaml-first-scenarios

@@ -0,0 +1,120 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require "json"
+require "pathname"
+require "yaml"
+
+ROOT = Pathname.new(__dir__).join("..").realpath
+PROJECTION_ROOTS = %w[
+  .agents/skills
+  .claude/skills
+  .codex/skills
+  .hermes/skills
+  .pi/skills
+  .qoder/skills
+  .trae/skills
+].freeze
+
+failures = []
+
+template_path = ROOT.join("docs/templates/openapi-spec-template.yaml")
+documents = YAML.load_stream(template_path.read)
+failures << "OpenAPI YAML 模板必须是单一 YAML document" unless documents.length == 1
+document = documents.first
+unless document.is_a?(Hash) && document["openapi"] == "3.1.0"
+  failures << "OpenAPI YAML 模板必须是 OAS 3.1 文档"
+end
+%w[pipeline stage status owner].each do |field|
+  failures << "OpenAPI YAML 模板不得把生命周期元数据写入根字段: #{field}" if document.is_a?(Hash) && document.key?(field)
+end
+
+PROJECTION_ROOTS.each do |root|
+  failures << "已移除的 yss-openapi 仍存在: #{root}/yss-openapi" if ROOT.join(root, "yss-openapi").exist?
+end
+
+lock = JSON.parse(ROOT.join("skills-lock.json").read)
+if lock.dig("skills", "shared", "yss-openapi")
+  failures << "skills-lock.json 仍登记 yss-openapi"
+end
+
+public_skills = JSON.parse(ROOT.join("yss-public-skills.json").read)
+if public_skills.fetch("skills").include?("yss-openapi")
+  failures << "yss-public-skills.json 仍公开 yss-openapi"
+end
+
+router = ROOT.join(".agents/skills/yss-router/references/router-contract.yaml").read
+removed_skill_pattern = /(?<![a-z0-9-])yss-openapi(?![a-z0-9-])/
+failures << "Router 仍路由到 yss-openapi" if router.match?(removed_skill_pattern)
+failures << "Router 脚手架合同仍允许旧 OpenAPI 基线" if router.include?("smart_doc_baseline")
+unless router.include?("api-integration:\n    when_regeneration: [yss-openapi-governance]")
+  failures << "Router 未将客户端重新生成路由到 yss-openapi-governance"
+end
+
+lifecycle_contract = ROOT.join(".agents/skills/yss-product-lifecycle/references/orchestration-contract.yaml").read
+failures << "Lifecycle 脚手架合同仍允许旧 OpenAPI 基线" if lifecycle_contract.include?("smart_doc_baseline")
+lifecycle_skill = ROOT.join(".agents/skills/yss-product-lifecycle/SKILL.md").read
+failures << "Lifecycle 说明仍保留旧 OpenAPI 基线" if lifecycle_skill.match?(/smart[ -]?doc/i)
+implementation_routing_template = ROOT.join("docs/templates/implementation-routing-template.md").read
+failures << "实现路由模板仍保留旧 OpenAPI 基线" if implementation_routing_template.match?(/smart[ -]?doc/i)
+
+scaffold_pom = ROOT.join(".agents/skills/yss-ddd-scaffold-generator/assets/templates/pom/bootstrap-pom.xml.template").read
+failures << "后端脚手架仍包含 smart-doc Maven 插件" if scaffold_pom.include?("smart-doc-maven-plugin")
+failures << "后端脚手架仍保留 smart-doc 配置模板" if ROOT.join(".agents/skills/yss-ddd-scaffold-generator/assets/templates/config/smart-doc.json.template").exist?
+
+scaffold_generator = ROOT.join(".agents/skills/yss-ddd-scaffold-generator/scripts/generate_scaffold.py").read
+failures << "后端脚手架生成器仍生成 smart-doc 配置" if scaffold_generator.include?("smart-doc.json") || scaffold_generator.include?("smart-doc-maven-plugin")
+
+governance = ROOT.join(".agents/skills/yss-openapi-governance/SKILL.md").read
+%w[YAML-first 唯一权威 redocly\ bundle --ext\ json operationId].each do |marker|
+  failures << "OpenAPI Governance 缺少 YAML-first JSON 派生规则: #{marker}" unless governance.include?(marker)
+end
+failures << "OpenAPI Governance 仍依赖 smart-doc" if governance.include?("smart-doc")
+%w[pnpm\ generate:api orval.config unsafeDisableValidation].each do |marker|
+  failures << "OpenAPI Governance 越界到前端代码生成或 Orval 配置: #{marker}" if governance.include?(marker)
+end
+
+api_integration = ROOT.join(".agents/skills/yss-api-integration/SKILL.md").read
+%w[冻结的\ OpenAPI\ YAML redocly\ bundle 原样物化 既有前端代码生成流程].each do |marker|
+  failures << "API Integration 缺少冻结 JSON 的下游交接规则: #{marker}" unless api_integration.include?(marker)
+end
+failures << "API Integration 仍引用 yss-openapi" if api_integration.match?(removed_skill_pattern)
+%w[docs/.scratch/<feature>/api/<feature>.json SHA-256 受控交接].each do |marker|
+  failures << "API Integration 未绑定治理 JSON 派生物: #{marker}" unless api_integration.include?(marker)
+end
+%w[orval.config unsafeDisableValidation].each do |marker|
+  failures << "API Integration 越界要求修改或核验 Orval 配置: #{marker}" if api_integration.include?(marker)
+end
+
+frontend_scaffold = ROOT.join(".agents/skills/yss-frontend-scaffold-generator/SKILL.md").read
+failures << "前端脚手架仍接受任意 openapi_source" if frontend_scaffold.include?("openapi_source")
+%w[OpenAPI\ Freeze\ 记录 OpenAPI\ JSON\ 派生记录 SHA-256 openapi/openapi.json 既有前端代码生成流程].each do |marker|
+  failures << "前端脚手架未绑定冻结 JSON 交接: #{marker}" unless frontend_scaffold.include?(marker)
+end
+%w[配置并读取实际\ `orval.config.*` unsafeDisableValidation].each do |marker|
+  failures << "前端脚手架越界修改或核验既有 Orval 配置: #{marker}" if frontend_scaffold.include?(marker)
+end
+
+export_record = ROOT.join("docs/api/templates/openapi-json-export-record-template.md")
+failures << "缺少 OpenAPI JSON 派生记录模板" unless export_record.file?
+if export_record.file?
+  export_record_text = export_record.read
+  %w[Orval\ 输入路径 orval.config unsafeDisableValidation pnpm\ generate:api].each do |marker|
+    failures << "JSON 派生记录越界记录前端 Orval 配置或执行: #{marker}" if export_record_text.include?(marker)
+  end
+end
+
+freeze_record = ROOT.join("docs/api/templates/openapi-freeze-record-template.md")
+%w[orval.config unsafeDisableValidation].each do |marker|
+  failures << "OpenAPI Freeze 记录越界规定 Orval 配置: #{marker}" if freeze_record.read.include?(marker)
+end
+
+draft_checklist = ROOT.join("docs/api/templates/openapi-draft-review-checklist.md")
+failures << "Draft 评审清单越界要求 Orval 输入路径" if draft_checklist.read.include?("Orval 输入路径")
+
+unless failures.empty?
+  warn failures.join("\n")
+  exit 1
+end
+
+puts "OpenAPI YAML-first 场景验证通过"

package/template/scripts/verify-prototype-backend-scaffold-scenarios

@@ -16,8 +16,16 @@ end
 def route_after_prototype(facts)
   return {"status" => "not-applicable", "steps" => []} unless facts.fetch(:backend_impact)
 
-  if facts.fetch(:ui_impact) && !facts.fetch(:prototype_confirmation)
-    return {"status" => "blocked", "reason" => "prototype-confirmation-required", "steps" => []}
+  if facts.fetch(:ui_impact)
+    {
+      prototype_review: "prototype-review-required",
+      prototype_verification: "prototype-verification-required",
+      antd_cli_verification: "antd-cli-verification-required",
+      browser_verification: "browser-verification-required",
+      prototype_confirmation: "prototype-confirmation-required"
+    }.each do |fact, reason|
+      return {"status" => "blocked", "reason" => reason, "steps" => []} unless facts.fetch(fact, false)
+    end
   end
 
   steps = ["engineering-baseline"]
@@ -74,7 +82,9 @@ if backend_scaffold.is_a?(Hash)
   %w[approval_ref approver persisted_ref current_version].each do |required|
     failures << "脚手架合同审批记录缺少 #{required}" unless scaffold_schema.dig("approval", "required").to_a.include?(required)
   end
-  failures << "backend_scaffold 必须声明 prototype_confirmation 后置顺序" unless backend_scaffold.dig("sequence", "after").include?("prototype_confirmation")
+  %w[prototype_review prototype_verification antd_cli_verification browser_verification prototype_confirmation].each do |required|
+    failures << "backend_scaffold 必须声明 #{required} 后置顺序" unless backend_scaffold.dig("sequence", "after").include?(required)
+  end
   failures << "backend_scaffold 必须先于业务代码生成" unless backend_scaffold.dig("sequence", "before").include?("business_code_generation")
   failures << "required 脚手架必须使用 yss-ddd-scaffold-generator" unless backend_scaffold["generator_skill"] == "yss-ddd-scaffold-generator"
   failures << "脚手架生成必须使用 controlled-generation" unless backend_scaffold["tdd_mode"] == "controlled-generation"
@@ -146,7 +156,9 @@ if router_scaffold_schema.is_a?(Hash)
 end
 
 complete_facts = {
-  backend_impact: true, ui_impact: true, prototype_confirmation: true, scaffold_status: "required", scaffold_contract_approved: true
+  backend_impact: true, ui_impact: true, prototype_review: true, prototype_verification: true,
+  antd_cli_verification: true, browser_verification: true, prototype_confirmation: true,
+  scaffold_status: "required", scaffold_contract_approved: true
 }
 complete_route = route_after_prototype(complete_facts)
 expected_steps = %w[engineering-baseline yss-router-scaffold-contract lifecycle-approve-scaffold-contract yss-ddd-scaffold-generator yss-backend-scaffold-parent yss-router-contract-recompile]
@@ -155,6 +167,16 @@ failures << "原型完成后的后端路由顺序不完整" unless complete_rout
 blocked_route = route_after_prototype(complete_facts.merge(prototype_confirmation: false))
 failures << "原型未确认时错误允许后端脚手架" unless blocked_route["status"] == "blocked" && blocked_route["reason"] == "prototype-confirmation-required"
 
+{
+  prototype_review: "prototype-review-required",
+  prototype_verification: "prototype-verification-required",
+  antd_cli_verification: "antd-cli-verification-required",
+  browser_verification: "browser-verification-required"
+}.each do |missing_fact, reason|
+  blocked = route_after_prototype(complete_facts.merge(missing_fact => false))
+  failures << "#{missing_fact} 缺失时错误允许后端脚手架" unless blocked["status"] == "blocked" && blocked["reason"] == reason
+end
+
 missing_scaffold_contract = route_after_prototype(complete_facts.merge(scaffold_contract_approved: false))
 failures << "脚手架受控生成缺少批准合同仍被允许" unless missing_scaffold_contract["status"] == "blocked" && missing_scaffold_contract["reason"] == "scaffold-contract-required"
 

package/template/scripts/verify-template

@@ -29,6 +29,9 @@ required_files=(
   "AGENTS.md"
   "CONTEXT.md"
   "skills-lock.json"
+  "docs/process/lifecycle-registry.yaml"
+  "docs/process/lifecycle-registry-baseline.json"
+  "docs/process/schemas/lifecycle-registry.schema.json"
   "docs/process/lifecycle-artifact-map.md"
   "docs/process/harness-process-tailoring.md"
   "docs/templates/local-parent-ticket-template.md"
@@ -39,11 +42,17 @@ required_files=(
   "scripts/update-skill-lock"
   "scripts/implementation-path-policy.rb"
   "scripts/verify-lifecycle-scenarios"
+  "scripts/generate-lifecycle-artifacts"
+  "scripts/verify-lifecycle-registry"
+  "scripts/test-lifecycle-registry.rb"
+  "scripts/verify-governance-release"
   "scripts/verify-implementation-path-scenarios"
   "scripts/verify-scaffold-generator-scenarios"
   "scripts/verify-prototype-backend-scaffold-scenarios"
   "scripts/verify-matt-yss-integration-scenarios"
   "scripts/verify-yss-ui-scenarios"
+  "scripts/verify-openapi-yaml-first-scenarios"
+  "scripts/verify-openapi-json-handoff-scenarios"
 )
 
 required_skills=(
@@ -120,19 +129,28 @@ lock.fetch("skills", {}).fetch("shared", {}).each do |skill_name, metadata|
 end
 
 openapi_path = root.join("docs/templates/openapi-spec-template.yaml")
-openapi_text = openapi_path.binread.force_encoding("UTF-8").sub(/\A---\n.*?\n---\n/m, "")
-YAML.safe_load(openapi_text, permitted_classes: [], aliases: true)
+documents = YAML.load_stream(openapi_path.binread.force_encoding("UTF-8"))
+unless documents.length == 1 && documents.first.is_a?(Hash) && documents.first["openapi"] == "3.1.0"
+  warn "docs/templates/openapi-spec-template.yaml 必须是单一 OAS 3.1 YAML document"
+  exit 1
+end
 RUBY
 
 scripts/sync-skills --check
 scripts/update-skill-lock --check
+scripts/verify-lifecycle-registry
 scripts/verify-lifecycle-scenarios
+scripts/verify-governance-release
 scripts/verify-implementation-path-scenarios
 scripts/verify-scaffold-generator-scenarios
 scripts/verify-prototype-backend-scaffold-scenarios
 ruby scripts/verify-matt-yss-integration-scenarios
 scripts/verify-yss-router-scenarios
 scripts/verify-yss-ui-scenarios
+scripts/verify-openapi-yaml-first-scenarios
+scripts/verify-openapi-json-handoff-scenarios
+ruby scripts/test-lifecycle-registry.rb
+ruby scripts/test-export-yss-skills.rb
 
 ruby <<'RUBY'
 # encoding: UTF-8
@@ -161,7 +179,8 @@ obsolete_names = [
   "obsidian-vault",
   "writing-great-skills",
   "code-review-process",
-  "yss-domain-modeling"
+  "yss-domain-modeling",
+  "yss-openapi"
 ].freeze
 
 agent_roots.each do |agent_root|
@@ -266,6 +285,11 @@ ruby -c scripts/sync-skills >/dev/null
 ruby -c scripts/update-skill-lock >/dev/null
 ruby -c scripts/implementation-path-policy.rb >/dev/null
 ruby -c scripts/verify-lifecycle-scenarios >/dev/null
+ruby -c scripts/lifecycle-registry.rb >/dev/null
+ruby -c scripts/generate-lifecycle-artifacts >/dev/null
+ruby -c scripts/verify-lifecycle-registry >/dev/null
+ruby -c scripts/test-lifecycle-registry.rb >/dev/null
+ruby -c scripts/verify-governance-release >/dev/null
 ruby -c scripts/verify-prototype-backend-scaffold-scenarios >/dev/null
 ruby -c scripts/verify-matt-yss-integration-scenarios >/dev/null
 ruby -c scripts/verify-yss-ui-scenarios >/dev/null

package/template/scripts/verify-yss-router-scenarios

@@ -38,7 +38,7 @@ def routing_input_violations(contract, input)
   contract.fetch("exclusive_flags").each do |left, right|
     violations << "#{left}/#{right}" unless flags[left] != flags[right]
   end
-  violations
+  violations.uniq
 end
 
 def active_impacts(input)
@@ -49,7 +49,8 @@ base_input = {
   "slice_id" => "order-create",
   "impact_flags" => {
     "ui_impact" => true, "api_impact" => true, "no_api_impact" => false,
-    "data_impact" => false, "backend_impact" => false, "cross_repo" => false
+    "data_impact" => false, "backend_impact" => false, "cross_repo" => false,
+    "existing_frozen_baseline" => false
   },
   "lifecycle" => {}, "implementation" => {}, "acceptance" => {}
 }
@@ -60,17 +61,36 @@ failures << "Invalid lifecycle input type was accepted" if routing_input_violati
 both_api_modes = base_input["impact_flags"].merge("api_impact" => true, "no_api_impact" => true)
 failures << "API/no-API exclusivity was not enforced" if routing_input_violations(CONTRACT, base_input.merge("impact_flags" => both_api_modes)).empty?
 
+legacy_posture_key = %w[security permission posture].join("_")
+failures << "Router 输入仍要求已废弃的专项输入" if CONTRACT.fetch("routing_input_required").include?(legacy_posture_key)
+failures << "Router 仍声明已废弃的专项合同" if CONTRACT.key?(legacy_posture_key)
+legacy_impact_flags = CONTRACT.fetch("impact_flags_required").select do |flag|
+  %w[permission security].any? { |prefix| flag.start_with?("#{prefix}_") }
+end
+failures << "Router 仍要求安全 / 权限派生旗标" unless (CONTRACT.fetch("impact_flags_required") & legacy_impact_flags).empty?
+explicit_authorization_input = base_input.merge("acceptance" => {"behavior" => "角色授权规则变化"})
+failures << "显式权限行为无法按普通输入进入 Router" unless routing_input_violations(CONTRACT, explicit_authorization_input).empty?
+
 common_ready = CONTRACT.dig("readiness", "common").to_h { |key| [key, true] }
 ui_ready = CONTRACT.dig("readiness", "ui_impact").to_h { |key| [key, true] }
 api_ready = CONTRACT.dig("readiness", "api_impact").to_h { |key| [key, true] }
 all_ui = common_ready.merge(ui_ready).merge(api_ready)
 failures << "Approved UI inputs were blocked" unless readiness_missing(CONTRACT, %w[ui_impact api_impact], all_ui).empty?
 
+%w[prototype_review prototype_verification antd_cli_evidence browser_verification_evidence prototype_confirmation].each do |field|
+  failures << "Router UI readiness 缺少 #{field}" unless CONTRACT.dig("readiness", "ui_impact").include?(field)
+end
+
 ui_without_confirmation = all_ui.merge("prototype_confirmation" => false)
 unless readiness_missing(CONTRACT, %w[ui_impact api_impact], ui_without_confirmation).include?("prototype_confirmation")
   failures << "UI implementation was not blocked without prototype confirmation"
 end
 
+ui_without_browser_evidence = all_ui.merge("browser_verification_evidence" => false)
+unless readiness_missing(CONTRACT, %w[ui_impact api_impact], ui_without_browser_evidence).include?("browser_verification_evidence")
+  failures << "UI implementation was not blocked without browser verification evidence"
+end
+
 data_ready = common_ready.merge(CONTRACT.dig("readiness", "data_impact").to_h { |key| [key, true] })
 data_missing = data_ready.merge("data_architecture" => false)
 unless readiness_missing(CONTRACT, %w[data_impact], data_missing).include?("data_architecture")
@@ -504,14 +524,26 @@ backend_skill_mutation["backend"]["required_skills"].delete("mapstruct")
 failures << "Backend contract accepted incomplete skill closure" unless slice_contract_decision_violations(CONTRACT, backend_input, backend_evidence, backend_skill_mutation, backend_expected_skills).include?("backend.required_skills")
 failures << "Backend contract accepted omitted skill closure" if slice_contract_decision_violations(CONTRACT, backend_input, backend_evidence, backend_slice, []).empty?
 
+component_route_examples = {
+  "Current-user" => {"impact" => "current-user-context", "skills" => ["yss-userinfo"]},
+  "Audit" => {"impact" => "audit-event", "skills" => ["yss-audit-log", "yss-userinfo", "yss-dto"]},
+  "Encryption" => {"impact" => "encryption-or-signing", "skills" => ["yss-security-algorithm", "yss-exception"]}
+}
+component_route_examples.each do |label, example|
+  candidate = Marshal.load(Marshal.dump(backend_slice))
+  candidate["backend"]["component_impacts"] = [example.fetch("impact")]
+  required_skills = dependency_closure(CONTRACT, backend_expected_skills + example.fetch("skills"), {})
+  candidate["backend"]["required_skills"] = required_skills
+  candidate["common"]["required_skills"] = required_skills
+  failures << "#{label} component route was rejected" unless slice_contract_decision_violations(
+    CONTRACT, backend_input, backend_evidence, candidate, required_skills
+  ).empty?
+end
 component_slice = Marshal.load(Marshal.dump(backend_slice))
 component_slice["backend"]["component_impacts"] = ["current-user-context"]
 component_skills = dependency_closure(CONTRACT, backend_expected_skills + ["yss-userinfo"], {})
 component_slice["backend"]["required_skills"] = component_skills
 component_slice["common"]["required_skills"] = component_skills
-failures << "Current-user component route was rejected" unless slice_contract_decision_violations(
-  CONTRACT, backend_input, backend_evidence, component_slice, component_skills
-).empty?
 unknown_component = Marshal.load(Marshal.dump(component_slice))
 unknown_component["backend"]["component_impacts"] = ["unknown-component"]
 unless slice_contract_decision_violations(CONTRACT, backend_input, backend_evidence, unknown_component, component_skills).include?("backend.component_impacts")
@@ -730,6 +762,17 @@ mutations = {
   "drift" => valid_result.merge("status" => "drift"),
   "violation" => valid_result.merge("status" => "violation")
 }
+
+valid_deferred = valid_result.merge(
+  "status" => "seam-deferred",
+  "seam_deferred" => [{
+    "risk" => "temporary adapter", "owner" => "team", "follow_up_ticket" => "T-2",
+    "verification_plan" => "contract test", "target_version_or_release_date" => "2026-09-01"
+  }]
+)
+unless execution_violations(CONTRACT, valid_deferred, *valid_args).empty?
+  failures << "Valid seam-deferred result was rejected"
+end
 mutations.each do |expected, result|
   blocker = expected.sub(/-(empty|command|contract-version|status|shape|work-unit|missing|implemented-with-seam|not-applicable-reason|identity|area)$/, "")
   actual = execution_violations(CONTRACT, result, *valid_args)
@@ -870,15 +913,9 @@ end
 
 scaffold_pom_template = ROOT.join(".agents/skills/yss-ddd-scaffold-generator/assets/templates/pom/bootstrap-pom.xml.template")
 scaffold_pom_body = scaffold_pom_template.read
-smart_doc_plugin_versions = scaffold_pom_body.scan(/<artifactId>smart-doc-maven-plugin<\/artifactId>\s*<version>([^<]+)<\/version>/).flatten
-failures << "smart-doc Maven plugin version must be fixed at yss-4.0.0" unless smart_doc_plugin_versions == ["yss-4.0.0"]
-smart_doc_template = ROOT.join(".agents/skills/yss-ddd-scaffold-generator/assets/templates/config/smart-doc.json.template")
-smart_doc_body = smart_doc_template.file? ? smart_doc_template.read : ""
-%w[allInOne outPath packageFilters componentType].each do |marker|
-  failures << "smart-doc template missing #{marker}" unless smart_doc_body.include?("\"#{marker}\"")
-end
-failures << "smart-doc packageFilters must use the supported single-star regex" unless smart_doc_body.include?("\"packageFilters\": \"{{base_package}}.*\"")
-failures << "smart-doc template contains environment secret settings" if smart_doc_body.match?(/appToken|openUrl|debugEnvUrl|serverUrl/)
+failures << "后端脚手架不得保留旧 OpenAPI Maven 插件" if scaffold_pom_body.include?("smart-doc-maven-plugin")
+legacy_openapi_template = ROOT.join(".agents/skills/yss-ddd-scaffold-generator/assets/templates/config/smart-doc.json.template")
+failures << "后端脚手架不得保留旧 OpenAPI 配置模板" if legacy_openapi_template.exist?
 
 %w[
   yss-domain/SKILL.md

package/template/skills-lock.json

@@ -94,7 +94,7 @@
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/engineering/code-review/SKILL.md",
-        "effectiveHash": "e336f095361832fbac27866a8d1c0fc61716ea7ce266c2d6eb193781ac6f60be",
+        "effectiveHash": "e1a71372e9ef1e5dc422fdf138ba2803ad7d4f6ce82d0fe276017276b365c150",
         "upstreamHash": "1d5e7242a98674635be79ab310cdda0e555d36a9903d2526ebf4263d0b7997ca",
         "targets": [
           ".agents/skills",
@@ -328,7 +328,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/high-fidelity-html-prototype/SKILL.md",
-        "effectiveHash": "e6de720a81d38e75a96ee30b3b8443ff1df0fd94f99a2dc512dee2348c7ab6be",
+        "effectiveHash": "9cde0608db48293eb0c0784a4283a41ba582aabdc2ef9f77dc1606492d333eda",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -469,7 +469,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/product-design-prototype/SKILL.md",
-        "effectiveHash": "ca8a5c4dbd8b75ebf6febcf1887d6b51bf7daa953b505694dac01fd59aef2f1a",
+        "effectiveHash": "cd8f600b5fde968244186e365e6533c1b6edbd8e3726d3d2d3e38b8056457d7f",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -500,7 +500,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/prototype-review/SKILL.md",
-        "effectiveHash": "3c5973fab1fabafe32d852e63629e0bf13cc38769728fe2037595525a8dfa9e5",
+        "effectiveHash": "5502cd1617734eaf50b6aaa26ced6d5dfe60b5ef552ea81cdfb7150a9d3008d0",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -784,7 +784,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/wireframe-prototype/SKILL.md",
-        "effectiveHash": "aa1d29a77ad5104ca67cf796ddfeaeccc3b3ea669697557b55c283f42c6cdc11",
+        "effectiveHash": "200e1a34cc4de1f6a9f6a8e31e66c123568e804183d6661ee0c164086f88a88e",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -894,7 +894,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-api-integration/SKILL.md",
-        "effectiveHash": "ac7223a22d83bb0b0365534ab4772847e64cb439c82e8a1d4a0b1c15b3d50a69",
+        "effectiveHash": "fb6ccf48f016b6df63c3072fc771344c29a1523b5daf08f9512e7bbd79c6a3bc",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1029,7 +1029,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-ddd-scaffold-generator/SKILL.md",
-        "effectiveHash": "2dc2ac84fac2d4a3a1da433dcb863bd8f8c77dc559c584b688876ab2ff8fac05",
+        "effectiveHash": "b0febe45515f862957742dabd2cfb1df7c56811b059f60821efee6712534a834",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1044,7 +1044,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-design-system/SKILL.md",
-        "effectiveHash": "2626e379a57a197a87e97110eb805b68aae149b4e7388c15dab2b7a2ca55ea26",
+        "effectiveHash": "0cf7028c716b33c6a4b376f8bc6d17708854c0e6b9c460fc60cfa3865be63ce5",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1179,7 +1179,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-frontend-scaffold-generator/SKILL.md",
-        "effectiveHash": "b61aa0fdbcd1026757efade8054b84a4f260f1bdf3b1f4d9b6a0315a4a933979",
+        "effectiveHash": "6b966c5824b80f5196c7fd8225238b3047d9e49f1f94c60179e4a567d82911f5",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1265,11 +1265,11 @@
           ".trae/skills"
         ]
       },
-      "yss-openapi": {
+      "yss-openapi-draft-review": {
         "source": "project",
         "sourceType": "local",
-        "skillPath": ".agents/skills/yss-openapi/SKILL.md",
-        "effectiveHash": "2283b86f5731d58d6138895f2418dd681abc49aa5b3b753b64ef3f7d0d87b690",
+        "skillPath": ".agents/skills/yss-openapi-draft-review/SKILL.md",
+        "effectiveHash": "dcf5c6125081e1adb3b3ee0204f2e14fec62dd2ccb7857d2f0d46c1b64e2755c",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1280,11 +1280,11 @@
           ".trae/skills"
         ]
       },
-      "yss-openapi-draft-review": {
+      "yss-openapi-governance": {
         "source": "project",
         "sourceType": "local",
-        "skillPath": ".agents/skills/yss-openapi-draft-review/SKILL.md",
-        "effectiveHash": "674d1b60d4b6fc5f13814e4b0c109fe183a54e23865f853994c0d7065847d40c",
+        "skillPath": ".agents/skills/yss-openapi-governance/SKILL.md",
+        "effectiveHash": "20ea763036bc0cbf355c2a644cc65e3054cfaa29de679f699409e24d8d647088",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1295,11 +1295,11 @@
           ".trae/skills"
         ]
       },
-      "yss-openapi-governance": {
+      "yss-page-module-development": {
         "source": "project",
         "sourceType": "local",
-        "skillPath": ".agents/skills/yss-openapi-governance/SKILL.md",
-        "effectiveHash": "9d34f131880fc517e163d2f73c93c8f141cc9d9411a6c015bd867d7085c4b31a",
+        "skillPath": ".agents/skills/yss-page-module-development/SKILL.md",
+        "effectiveHash": "3198981c5b138f1126e4c0c463eb195f47c4565a049518243651e8ea7bcc136c",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1310,11 +1310,11 @@
           ".trae/skills"
         ]
       },
-      "yss-page-module-development": {
+      "yss-product-lifecycle": {
         "source": "project",
         "sourceType": "local",
-        "skillPath": ".agents/skills/yss-page-module-development/SKILL.md",
-        "effectiveHash": "3198981c5b138f1126e4c0c463eb195f47c4565a049518243651e8ea7bcc136c",
+        "skillPath": ".agents/skills/yss-product-lifecycle/SKILL.md",
+        "effectiveHash": "1bdf5769a237d6a95bec19dc2ce5790ae052b164c79c9520373bacf9c7b28d0e",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1325,11 +1325,11 @@
           ".trae/skills"
         ]
       },
-      "yss-product-lifecycle": {
+      "yss-prototype-stage": {
         "source": "project",
         "sourceType": "local",
-        "skillPath": ".agents/skills/yss-product-lifecycle/SKILL.md",
-        "effectiveHash": "199a9f9422cdbb9e31d7517fa4ee9738e41e53a67188aeff9a0130d4f154f93a",
+        "skillPath": ".agents/skills/yss-prototype-stage/SKILL.md",
+        "effectiveHash": "38d4bb83e7a3bf104c11d99e4a8cad9f2094fb29da51f32b0e9a66ebcbe16d03",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1374,7 +1374,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-router/SKILL.md",
-        "effectiveHash": "5f19ae24070a93bae92fcd8731857e9a57027c27970106eb82498484f8524008",
+        "effectiveHash": "315788ec2c1fcca6f577fa3f83bf0e848404031c5691fd2ba8058ba25fcd0c14",
         "targets": [
           ".agents/skills",
           ".claude/skills",

package/template/wiki/raw/skills-lock.json

@@ -1265,21 +1265,6 @@
           ".trae/skills"
         ]
       },
-      "yss-openapi": {
-        "source": "project",
-        "sourceType": "local",
-        "skillPath": ".agents/skills/yss-openapi/SKILL.md",
-        "effectiveHash": "2283b86f5731d58d6138895f2418dd681abc49aa5b3b753b64ef3f7d0d87b690",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
       "yss-openapi-draft-review": {
         "source": "project",
         "sourceType": "local",

package/template/wiki/wiki/OpenAPI/345/245/221/347/272/246.md

@@ -6,4 +6,4 @@ OpenAPI Freeze 指已通过评审、可作为前后端实现和契约测试输
 
 OpenAPI 契约文件存放于 `docs/api/specs/`，评审检查清单与 Freeze 记录模板见 `docs/api/templates/`。OpenAPI Freeze 或无 API 影响记录完成后，使用 `to-tickets` 拆分成窄垂直切片（见 [[垂直切片Ticket]]）。OpenAPI Draft 属于待冻结资产，使用 `ready-for-human`；只有 Freeze 后的契约才支撑 `ready-for-agent` 的切片。
 
-YSS 的 OpenAPI 契约在实现后通过 `yss-openapi` 技能生成 OpenAPI JSON 并刷新前端 Orval API 客户端（见 [[YSS工程技能体系]]）。
+YSS 的 OpenAPI 契约以冻结的 OpenAPI 3.1 YAML 为唯一权威。`yss-openapi-governance` 使用锁定的 Redocly CLI 派生 JSON，随后由 `api-integration` 刷新前端 Orval API 客户端；JSON 与生成代码均不得手工修改（见 [[YSS工程技能体系]]）。

package/template/wiki/wiki/YSS/345/267/245/347/250/213/346/212/200/350/203/275/344/275/223/347/263/273.md

@@ -2,7 +2,7 @@
 
 YSS skills 是项目内置的 YSS 工程规范技能，用于 DDD、UI、OpenAPI、Repository、Controller、DTO、组件和编码规范，与 Matt Pocock 的轻量流程技能互补（见 [[Matt技能体系]]）。
 
-按领域划分：后端脚手架（`yss-ddd-scaffold-generator` 及 Domain / Application / Infrastructure / Web / Adapter 分层技能）、领域建模（`yss-domain`）、持久层（`yss-repository`、`yss-mybatis`、`yss-db2mybatis`）、Web 契约（`yss-web-controller`、`yss-dto`、`yss-openapi`）、前端（`yss-ui`、`yss-components`、`yss-formily`、`yss-hook`、`yss-page-module-development`）、以及横切组件（`yss-cache`、`yss-exception`、`yss-log`、`yss-userinfo`、`yss-distributed-id`、`yss-security-algorithm`、`yss-resilience4j` 等）。
+按领域划分：后端脚手架（`yss-ddd-scaffold-generator` 及 Domain / Application / Infrastructure / Web / Adapter 分层技能）、领域建模（`yss-domain`）、持久层（`yss-repository`、`yss-mybatis`、`yss-db2mybatis`）、Web 契约（`yss-web-controller`、`yss-dto`、`yss-openapi-governance`、`yss-openapi-draft-review`）、前端（`yss-ui`、`yss-components`、`yss-formily`、`yss-hook`、`yss-page-module-development`、`api-integration`）、以及横切组件（`yss-cache`、`yss-exception`、`yss-log`、`yss-userinfo`、`yss-distributed-id`、`yss-security-algorithm`、`yss-resilience4j` 等）。
 
 技能路由纪律：核心 YSS skills 必须消费批准合同并返回 YSS Skill Execution Result（见 [[切片实现合同]]）；路径越界、证据缺失、未执行验证、`drift`、`violation` 或 `new_impacts` 阻断继续实现或触发重路由。禁止绕过合同与检查清单直接在 `AGENTS.md` 中自行发明细则。
 

package/template/yss-public-skills.json

@@ -28,11 +28,11 @@
     "yss-log",
     "yss-microapp-commit",
     "yss-mybatis",
-    "yss-openapi",
     "yss-openapi-draft-review",
     "yss-openapi-governance",
     "yss-page-module-development",
     "yss-product-lifecycle",
+    "yss-prototype-stage",
     "yss-repository",
     "yss-resilience4j",
     "yss-router",
@@ -74,7 +74,8 @@
         "yss-dto",
         "yss-jdbc",
         "yss-mybatis",
-        "yss-repository"
+        "yss-repository",
+        "yss-web-controller"
       ]
     },
     {
@@ -88,10 +89,10 @@
         "yss-frontend-scaffold-generator",
         "yss-hook",
         "yss-page-module-development",
+        "yss-prototype-stage",
         "yss-ui",
         "yss-use-table-height",
-        "yss-use-tree-height",
-        "yss-web-controller"
+        "yss-use-tree-height"
       ]
     },
     {
@@ -99,7 +100,6 @@
       "description": "用于 YSS API 设计、审查、治理和生成集成的技能。",
       "skills": [
         "yss-api-integration",
-        "yss-openapi",
         "yss-openapi-draft-review",
         "yss-openapi-governance"
       ]