create-yss-spec 2.1.4 → 2.1.6

package/template/scripts/verify-matt-yss-integration-scenarios

@@ -1,801 +1,3 @@
-#!/usr/bin/env ruby
-# frozen_string_literal: true
-
-require "pathname"
-require "yaml"
-require "digest"
-
-ROOT = Pathname.new(__dir__).join("..").realpath
-
-def read(root, relative_path)
-  root.join(relative_path).read
-end
-
-failures = []
-contract = YAML.safe_load(
-  read(ROOT, ".agents/skills/yss-product-lifecycle/references/orchestration-contract.yaml"),
-  permitted_classes: [],
-  aliases: false
-)
-
-def require_equal(failures, label, actual, expected)
-  failures << "#{label}: expected #{expected.inspect}, got #{actual.inspect}" unless actual == expected
-end
-
-def require_include(failures, label, values, expected)
-  failures << "#{label}: missing #{expected.inspect}" unless values.include?(expected)
-end
-
-def require_markers(failures, label, body, markers)
-  markers.each do |marker|
-    failures << "#{label}: missing marker #{marker.inspect}" unless body.include?(marker)
-  end
-end
-
-def preconditions_met?(definition, evidence)
-  definition.fetch("required", []).all? { |field| evidence.include?(field) }
-end
-
-def evidence_refs_resolvable?(root, result)
-  result.fetch("evidence_refs", []).all? do |ref|
-    ref.match?(%r{\Ahttps?://}) || root.join(ref).file?
-  end
-end
-
-def completed_result_allowed?(definition, result, root:)
-  definition["completed_requires_no_blocking_signals"] == true &&
-    result["result"] == "completed" &&
-    definition.fetch("required", []).all? { |field| result.key?(field) } &&
-    result.fetch("blocking_signals", []).empty? &&
-    definition.fetch("completed_requires_empty", []).all? { |field| result.fetch(field, []).empty? } &&
-    definition.fetch("completed_requires_non_empty", []).all? { |field| !result.fetch(field, []).empty? } &&
-    (!definition["completed_requires_readable_evidence_refs"] || evidence_refs_resolvable?(root, result))
-end
-
-def entry_decision(definition, repository_mode:, manifest_valid:, direct_matt:)
-  return definition.dig("invalid_manifest", "action") unless manifest_valid
-  return definition.dig("template_source", "route") if repository_mode == "template-source"
-  return definition.dig("direct_matt_entry", "delegate_to") if direct_matt
-
-  "lifecycle-entry"
-end
-
-def flow_allowed?(definition, repository_mode:, flow:)
-  return false if repository_mode == "template-source" && definition.dig("template_source", "forbidden_flows").include?(flow)
-
-  true
-end
-
-def flow_decision(definition, repository_mode:, flow:)
-  if repository_mode == "template-source" && definition.dig("template_source", "forbidden_flows").include?(flow)
-    return {
-      "result" => definition.dig("template_source", "on_forbidden_flow"),
-      "reason" => definition.dig("template_source", "block_reason")
-    }
-  end
-
-  {"result" => "allowed", "reason" => nil}
-end
-
-def git_operation_authorized?(definition, facts)
-  return false unless definition["requires_explicit_user_authorization"] == true
-  return false unless definition["authorized_value"] == true
-
-  required = definition.fetch("required", [])
-  return false unless required.all? { |field| facts.key?(field) }
-
-  authorization_fields = required.grep(/_authorized\z/)
-  return false unless authorization_fields.all? { |field| facts[field] == definition["authorized_value"] }
-
-  definition.fetch("non_empty", []).all? { |field| !facts.fetch(field, "").to_s.empty? }
-end
-
-def uint64be(value)
-  [value].pack("Q>")
-end
-
-def uint32be(value)
-  [value].pack("N")
-end
-
-def canonical_worktree_candidate_stream(snapshot, tracked_diff:, untracked:)
-  header = snapshot.fetch("header_ascii").b + [Integer(snapshot.fetch("terminator_byte"))].pack("C")
-  tracked = snapshot.fetch("tracked_record")
-  stream = header + [Integer(tracked.fetch("type_byte"))].pack("C") + uint64be(tracked_diff.bytesize) + tracked_diff
-  kinds = snapshot.fetch("untracked_record").fetch("entry_kinds")
-
-  untracked.sort_by { |entry| entry.fetch(:path).b }.each do |entry|
-    path = entry.fetch(:path).b
-    content = entry.fetch(:content).b
-    kind = entry.fetch(:kind).to_s
-    stream << [Integer(snapshot.fetch("untracked_record").fetch("type_byte"))].pack("C")
-    stream << uint64be(path.bytesize) << path
-    stream << uint32be(entry.fetch(:mode))
-    stream << [Integer(kinds.fetch(kind))].pack("C")
-    stream << uint64be(content.bytesize) << content
-  end
-  stream
-end
-
-entry = contract.fetch("entry_routing", {})
-require_equal(failures, "entry manifest", entry["manifest"], "yss-project.yaml")
-require_equal(failures, "entry valid modes", entry["valid_modes"], %w[template-source project-instance])
-require_equal(
-  failures,
-  "direct Matt delegate",
-  entry.dig("direct_matt_entry", "delegate_to"),
-  "yss-product-lifecycle"
-)
-require_equal(
-  failures,
-  "invalid manifest action",
-  entry.dig("invalid_manifest", "action"),
-  "migration-check"
-)
-require_equal(
-  failures,
-  "template source route",
-  entry.dig("template_source", "route"),
-  "template-maintenance"
-)
-require_equal(
-  failures,
-  "template source direct Matt route",
-  entry_decision(entry, repository_mode: "template-source", manifest_valid: true, direct_matt: true),
-  "template-maintenance"
-)
-require_equal(
-  failures,
-  "project instance direct Matt route",
-  entry_decision(entry, repository_mode: "project-instance", manifest_valid: true, direct_matt: true),
-  "yss-product-lifecycle"
-)
-require_equal(
-  failures,
-  "invalid manifest route",
-  entry_decision(entry, repository_mode: nil, manifest_valid: false, direct_matt: true),
-  "migration-check"
-)
-%w[product-spec prototype openapi vertical-slice-tickets].each do |artifact|
-  require_include(
-    failures,
-    "template source forbidden artifacts",
-    entry.dig("template_source", "forbidden_artifacts") || [],
-    artifact
-  )
-end
-entry.dig("template_source", "forbidden_flows").each do |flow|
-  failures << "template-source 错误允许流程 #{flow}" if flow_allowed?(entry, repository_mode: "template-source", flow: flow)
-  failures << "project-instance 错误禁止流程 #{flow}" unless flow_allowed?(entry, repository_mode: "project-instance", flow: flow)
-  decision = flow_decision(entry, repository_mode: "template-source", flow: flow)
-  require_equal(failures, "template-source #{flow} block result", decision["result"], "blocked")
-  require_equal(failures, "template-source #{flow} block reason", decision["reason"], "template-source-product-artifact-forbidden")
-end
-
-result_contract = contract.fetch("matt_skill_result", {})
-require_equal(failures, "Matt result schema", result_contract["schema_version"], 1)
-%w[completed blocked needs-human failed].each do |result|
-  require_include(failures, "Matt result values", result_contract["result_values"] || [], result)
-end
-%w[result skill evidence_refs changed_artifacts new_impacts stale_candidates next_route blocking_signals].each do |field|
-  require_include(failures, "Matt result required fields", result_contract["required"] || [], field)
-end
-%w[drift new_impacts violation missing_evidence stale_candidates].each do |signal|
-  require_include(failures, "Matt result blocking signals", result_contract["blocking_signals"] || [], signal)
-end
-require_include(failures, "Matt result completed-empty fields", result_contract["completed_requires_empty"] || [], "new_impacts")
-require_include(failures, "Matt result completed-empty fields", result_contract["completed_requires_empty"] || [], "stale_candidates")
-require_include(failures, "Matt result completed-non-empty fields", result_contract["completed_requires_non_empty"] || [], "evidence_refs")
-{
-  "draft" => "completed",
-  "blocked" => "blocked",
-  "ready-for-lifecycle-review" => "needs-human"
-}.each do |router_status, result_status|
-  require_equal(
-    failures,
-    "Router 状态映射 #{router_status}",
-    result_contract.dig("router_status_mapping", router_status),
-    result_status
-  )
-end
-
-valid_result = result_contract.fetch("required", []).to_h do |field|
-  [field, field.end_with?("_refs") || field.end_with?("_artifacts") || field.end_with?("_candidates") || field == "new_impacts" || field == "blocking_signals" ? [] : nil]
-end.merge("result" => "completed", "blocking_signals" => [], "evidence_refs" => ["docs/agents/issue-tracker.md"])
-failures << "完整 Matt Result 未被接受" unless completed_result_allowed?(result_contract, valid_result, root: ROOT)
-%w[drift new_impacts violation missing_evidence stale_candidates].each do |signal|
-  candidate = valid_result.merge("blocking_signals" => [signal])
-  failures << "Matt Result 的 #{signal} 未阻断 completed" if completed_result_allowed?(result_contract, candidate, root: ROOT)
-end
-[
-  ["new_impacts", ["api-schema"]],
-  ["stale_candidates", ["openapi-draft"]]
-].each do |field, value|
-  candidate = valid_result.merge(field => value)
-  failures << "Matt Result 的 #{field} 未阻断 completed" if completed_result_allowed?(result_contract, candidate, root: ROOT)
-end
-empty_evidence_result = valid_result.merge("evidence_refs" => [])
-failures << "空 evidence_refs 未阻断 completed" if completed_result_allowed?(result_contract, empty_evidence_result, root: ROOT)
-unreadable_evidence_result = valid_result.merge("evidence_refs" => ["missing-evidence.md"])
-failures << "不可读取 evidence_refs 未阻断 completed" if completed_result_allowed?(result_contract, unreadable_evidence_result, root: ROOT)
-
-preconditions = contract.fetch("flow_preconditions", {})
-{
-  "to-spec" => %w[grill_exit no_unresolved_runnable_blocker],
-  "to-tickets" => %w[openapi_freeze_or_no_api_impact required_gates_satisfied vertical_slice_scope blocking_edges],
-  "implement" => %w[ready_for_agent slice_contract_approved slice_contract_persisted slice_contract_current_version build_architecture_checklist implementation_repo implementation_branch ci verification_commands rollback_point backend_slice_contract_if_applicable backend_scaffold_policy_satisfied]
-}.each do |flow, required|
-  actual = preconditions.dig(flow, "required") || []
-  required.each { |field| require_include(failures, "#{flow} preconditions", actual, field) }
-  failures << "#{flow} 合格证据未被接受" unless preconditions_met?(preconditions.fetch(flow), required)
-  required.each do |field|
-    incomplete = required - [field]
-    failures << "#{flow} 缺失 #{field} 时未阻断" if preconditions_met?(preconditions.fetch(flow), incomplete)
-  end
-end
-ready_required = contract.dig("ready_for_agent", "required") || []
-(preconditions.dig("implement", "required") || []).reject { |field| field == "ready_for_agent" }.each do |field|
-  require_include(failures, "ready-for-agent 与 implement 前置条件", ready_required, field)
-end
-
-ticket_role_transition = contract.fetch("ticket_role_transition", {})
-require_equal(
-  failures,
-  "YSS to-tickets initial role",
-  ticket_role_transition.dig("yss_active", "to_tickets_initial_role"),
-  "ready-for-human"
-)
-require_equal(
-  failures,
-  "YSS ticket promotion owner",
-  ticket_role_transition.dig("yss_active", "promotion_owner"),
-  "yss-product-lifecycle"
-)
-require_equal(
-  failures,
-  "YSS ticket promoted role",
-  ticket_role_transition.dig("yss_active", "promoted_role"),
-  "ready-for-agent"
-)
-require_equal(
-  failures,
-  "YSS ticket promotion condition",
-  ticket_role_transition.dig("yss_active", "promotion_requires"),
-  "ready_for_agent"
-)
-
-review_input = contract.fetch("review_input", {})
-require_equal(failures, "review input schema", review_input["schema_version"], 1)
-%w[
-  review_mode
-  review_base_ref
-  implementation_candidate_ref
-  candidate_snapshot_ref
-  candidate_digest
-  spec_ref
-  ticket_ref
-  slice_contract_ref
-  build_architecture_checklist_ref
-  yss_execution_result_refs
-].each do |field|
-  require_include(failures, "review input required fields", review_input["required"] || [], field)
-end
-%w[committed worktree].each do |mode|
-  require_include(failures, "review modes", review_input["modes"] || [], mode)
-end
-%w[committed staged unstaged untracked].each do |candidate_part|
-  require_include(
-    failures,
-    "worktree review coverage",
-    review_input.dig("worktree", "required_coverage") || [],
-    candidate_part
-  )
-end
-require_equal(
-  failures,
-  "worktree untracked inventory",
-  review_input.dig("worktree", "untracked_inventory_command"),
-  "git ls-files -z --others --exclude-standard"
-)
-require_equal(
-  failures,
-  "worktree tracked binary diff",
-  review_input.dig("worktree", "tracked_diff_command"),
-  "git diff --no-ext-diff --binary --full-index <merge-base>"
-)
-require_equal(
-  failures,
-  "worktree untracked binary diff",
-  review_input.dig("worktree", "untracked_diff_command"),
-  "git diff --no-index --no-ext-diff --binary --full-index -- /dev/null <path>"
-)
-require_equal(failures, "worktree capture once", review_input.dig("worktree", "capture_once"), true)
-require_equal(failures, "worktree verify unchanged", review_input.dig("worktree", "verify_unchanged_after_review"), true)
-require_equal(failures, "review snapshot immutable", review_input.dig("snapshot", "immutable"), true)
-require_equal(failures, "review digest algorithm", review_input.dig("snapshot", "digest_algorithm"), "sha256")
-require_equal(
-  failures,
-  "review digest framing",
-  review_input.dig("snapshot", "digest_framing"),
-  "length-prefixed-path-and-bytes"
-)
-require_equal(failures, "review digest path order", review_input.dig("snapshot", "path_order"), "bytewise")
-require_equal(failures, "review digest change action", review_input.dig("snapshot", "on_digest_change"), "blocked")
-require_equal(failures, "review completion digest guard", review_input.dig("snapshot", "completion_requires_current_digest"), true)
-require_equal(failures, "review snapshot protocol", review_input.dig("snapshot", "protocol"), "yss-worktree-candidate-v1")
-require_equal(failures, "review snapshot path encoding", review_input.dig("snapshot", "path_encoding"), "raw-bytes")
-require_equal(failures, "review snapshot length encoding", review_input.dig("snapshot", "length_encoding"), "uint64-big-endian")
-require_equal(failures, "review snapshot header", review_input.dig("snapshot", "header_ascii"), "YSS-WORKTREE-CANDIDATE-V1")
-require_equal(failures, "review snapshot terminator", review_input.dig("snapshot", "terminator_byte"), "0x00")
-require_equal(failures, "review snapshot tracked record", review_input.dig("snapshot", "tracked_record", "type_byte"), "0x54")
-require_equal(failures, "review snapshot untracked record", review_input.dig("snapshot", "untracked_record", "type_byte"), "0x55")
-require_equal(failures, "review snapshot unsupported entry action", review_input.dig("snapshot", "unsupported_entry_action"), "blocked")
-require_equal(
-  failures,
-  "review snapshot tracked fields",
-  review_input.dig("snapshot", "tracked_record", "fields"),
-  %w[type_byte uint64be_content_length binary_diff_bytes]
-)
-require_equal(
-  failures,
-  "review snapshot untracked fields",
-  review_input.dig("snapshot", "untracked_record", "fields"),
-  %w[type_byte uint64be_path_length raw_path_bytes uint32be_file_mode entry_kind_byte uint64be_content_length content_bytes]
-)
-require_equal(
-  failures,
-  "review snapshot entry kinds",
-  review_input.dig("snapshot", "untracked_record", "entry_kinds"),
-  {"regular" => "0x52", "symlink" => "0x4c"}
-)
-fixture_tracked_diff = "COMMITTED\\nSTAGED\\nUNSTAGED\\nDELETE\\nMODE-CHANGE\\n".b
-fixture_untracked = [
-  {path: "z\\nname".b, mode: 0o100644, kind: :regular, content: "untracked-bytes\\n".b},
-  {path: "a-link".b, mode: 0o120777, kind: :symlink, content: "target\\nname".b}
-]
-fixture_stream = canonical_worktree_candidate_stream(
-  review_input.fetch("snapshot"),
-  tracked_diff: fixture_tracked_diff,
-  untracked: fixture_untracked
-)
-require_equal(
-  failures,
-  "review snapshot canonical digest",
-  Digest::SHA256.hexdigest(fixture_stream),
-  "cc1b30990cc0d2a11721140cd94cb92a275f9dd24c6663e21ad7e5ea47898b7d"
-)
-reordered_stream = canonical_worktree_candidate_stream(
-  review_input.fetch("snapshot"),
-  tracked_diff: fixture_tracked_diff,
-  untracked: fixture_untracked.reverse
-)
-require_equal(failures, "review snapshot bytewise ordering", reordered_stream, fixture_stream)
-review_return_digest = Digest::SHA256.hexdigest(fixture_stream)
-completion_digest = Digest::SHA256.hexdigest(fixture_stream)
-require_equal(failures, "review return digest guard", review_return_digest, Digest::SHA256.hexdigest(fixture_stream))
-require_equal(failures, "review completion digest guard behavior", completion_digest, Digest::SHA256.hexdigest(fixture_stream))
-drift_stream = canonical_worktree_candidate_stream(
-  review_input.fetch("snapshot"),
-  tracked_diff: fixture_tracked_diff,
-  untracked: fixture_untracked.map { |entry| entry.merge(content: entry[:content] + "changed".b) }
-)
-failures << "review return digest drift 未阻断" if Digest::SHA256.hexdigest(drift_stream) == review_return_digest
-failures << "review completion digest drift 未阻断" if Digest::SHA256.hexdigest(drift_stream) == completion_digest
-%w[merge_base tracked_diff_command untracked_inventory_command untracked_diff_command untracked_files commit_list_command].each do |field|
-  require_include(
-    failures,
-    "worktree manifest required fields",
-    review_input.dig("manifest_required_by_mode", "worktree") || [],
-    field
-  )
-end
-%w[merge_base tracked_diff_command commit_list_command].each do |field|
-  require_include(
-    failures,
-    "committed manifest required fields",
-    review_input.dig("manifest_required_by_mode", "committed") || [],
-    field
-  )
-end
-
-git_authorization = contract.fetch("git_authorization", {})
-{
-  "commit" => %w[commit_authorized commit_scope commit_authorization_ref],
-  "push" => %w[push_authorized push_scope push_authorization_ref]
-}.each do |operation, required_fields|
-  require_equal(
-    failures,
-    "#{operation} explicit authorization",
-    git_authorization.dig(operation, "requires_explicit_user_authorization"),
-    true
-  )
-  required_fields.each do |field|
-    require_include(failures, "#{operation} authorization fields", git_authorization.dig(operation, "required") || [], field)
-  end
-  require_equal(
-    failures,
-    "#{operation} authorization value",
-    git_authorization.dig(operation, "authorized_value"),
-    true
-  )
-  required_fields.reject { |field| field.end_with?("_authorized") }.each do |field|
-    require_include(
-      failures,
-      "#{operation} non-empty authorization fields",
-      git_authorization.dig(operation, "non_empty") || [],
-      field
-    )
-  end
-  require_equal(
-    failures,
-    "#{operation} unauthorized action",
-    git_authorization.dig(operation, "unauthorized_action"),
-    "checkpoint-only"
-  )
-
-  definition = git_authorization.fetch(operation, {})
-  valid_facts = required_fields.to_h do |field|
-    [field, field.end_with?("_authorized") ? true : "explicit-value"]
-  end
-  allowed = git_operation_authorized?(definition, valid_facts)
-  failures << "#{operation} 完整显式授权被错误阻断" unless allowed
-
-  false_authorization = valid_facts.merge("#{operation}_authorized" => false)
-  false_allowed = git_operation_authorized?(definition, false_authorization)
-  failures << "#{operation} authorized=false 未阻断" if false_allowed
-
-  required_fields.reject { |field| field.end_with?("_authorized") }.each do |field|
-    blank = valid_facts.merge(field => "")
-    blank_allowed = git_operation_authorized?(definition, blank)
-    failures << "#{operation} #{field} 为空时未阻断" if blank_allowed
-  end
-
-  false_contract = definition.merge("authorized_value" => false)
-  failures << "#{operation} authorized_value=false 未阻断" if git_operation_authorized?(false_contract, valid_facts)
-end
-{
-  "to-spec" => %w[user_problem mvp_and_non_goals success_criteria test_seam terminology_review]
-}.each do |flow, required|
-  actual = preconditions.dig(flow, "evidence") || []
-  required.each { |field| require_include(failures, "#{flow} evidence", actual, field) }
-end
-require_equal(
-  failures,
-  "single-session implement guard",
-  preconditions.dig("implement", "applies_to_single_session"),
-  true
-)
-
-setup = contract.fetch("setup_readiness", {})
-require_equal(
-  failures,
-  "setup readiness states",
-  setup["states"],
-  %w[ready missing conflict degraded not-applicable]
-)
-%w[platform label_check domain_layout artifact_root migration_ref].each do |field|
-  require_include(failures, "setup readiness evidence", setup["evidence"] || [], field)
-end
-require_equal(failures, "template setup action", setup.dig("template_source", "action"), "validate-only")
-{
-  "ready" => %w[tracker_compatible labels_verified domain_layout_verified artifact_root_verified],
-  "missing" => %w[required_configuration_absent legacy_artifacts_detected_requires_migration],
-  "conflict" => %w[persistent_configuration_or_tracker_conflict canonical_and_legacy_artifacts],
-  "degraded" => %w[target_platform_unavailable],
-  "not-applicable" => %w[template_source_validate_only]
-}.each do |state, semantics|
-  actual = setup.dig("semantics", state) || []
-  semantics.each { |field| require_include(failures, "setup #{state} semantics", actual, field) }
-end
-
-tracker = contract.fetch("tracker", {})
-%w[local-markdown github gitlab].each do |platform|
-  require_include(failures, "tracker platforms", tracker["allowed_platforms"] || [], platform)
-end
-require_equal(failures, "tracker default", tracker["default_platform"], "local-markdown")
-require_equal(failures, "tracker origin role", tracker["remote_origin_role"], "code_host_only")
-require_equal(failures, "tracker no automatic cross-platform switch", tracker["no_automatic_cross_platform_switch"], true)
-local_tracker = tracker.fetch("local_markdown", {})
-require_equal(failures, "local tracker root", local_tracker["root"], "docs/.scratch")
-%w[.scratch docs/requirements/tickets].each do |legacy_root|
-  require_include(failures, "local tracker legacy roots", local_tracker["legacy_roots"] || [], legacy_root)
-end
-require_equal(failures, "local tracker remote requirement", local_tracker["remote_ticket_required"], false)
-require_equal(failures, "local tracker default mirror", local_tracker["default_remote_mirror"], false)
-%w[map.md discovery spec.md spec-delta parent-ticket.md design api architecture gates verification issues].each do |entry|
-  require_include(failures, "local tracker feature layout", local_tracker["feature_layout"] || [], entry)
-end
-remote_tracker = tracker.fetch("remote_platforms", {})
-require_equal(failures, "remote tracker ticket requirement", remote_tracker["remote_ticket_required"], true)
-require_equal(failures, "remote tracker fallback root", remote_tracker["unavailable_fallback_root"], "docs/.scratch")
-require_equal(failures, "remote tracker fallback record", remote_tracker["unavailable_fallback_record"], "parent-ticket.md")
-%w[tracker publication pending_publication_to].each do |field|
-  require_include(failures, "remote tracker fallback fields", remote_tracker["unavailable_fallback_fields"] || [], field)
-end
-
-issue_tracker = read(ROOT, "docs/agents/issue-tracker.md")
-issue_tracker_front_matter = issue_tracker.match(/\A---\n(.*?)\n---/m)
-failures << "issue tracker 缺少机器可读 front matter" unless issue_tracker_front_matter
-issue_tracker_config = issue_tracker_front_matter ? YAML.safe_load(issue_tracker_front_matter[1], permitted_classes: [], aliases: false) : {}
-project_tracker = issue_tracker_config.fetch("tracker", {})
-require_equal(failures, "persisted tracker platform", project_tracker["platform"], "local-markdown")
-require_equal(failures, "persisted tracker root", project_tracker["root"], "docs/.scratch")
-require_equal(
-  failures,
-  "persisted tracker legacy roots",
-  project_tracker["legacy_roots"],
-  [".scratch", "docs/requirements/tickets"]
-)
-require_markers(
-  failures,
-  "issue tracker configuration",
-  issue_tracker,
-  [
-    "`platform` | `local-markdown`",
-    "`docs/.scratch/`",
-    "旧路径",
-    "Git remote 只用于代码托管",
-    "Local 主 tracker 不要求远程 Ticket",
-    "Status:",
-    "needs-triage",
-    "ready-for-agent",
-    "待发布平台",
-    "pending_publication_to"
-  ]
-)
-local_seed = read(ROOT, ".agents/skills/setup-matt-pocock-skills/issue-tracker-local.md")
-require_markers(
-  failures,
-  "Matt local/YSS mapping",
-  local_seed,
-  ["tracker:", "platform: local-markdown", "root: docs/.scratch", "legacy_roots:", "docs/requirements/tickets", "YSS lifecycle extension", "parent-ticket.md", "remote issue"]
-)
-setup_skill = read(ROOT, ".agents/skills/setup-matt-pocock-skills/SKILL.md")
-require_markers(
-  failures,
-  "Matt setup path resolution",
-  setup_skill,
-  ["persisted `tracker.root`", "`docs/.scratch` as the default", "exactly `local-markdown`, `github`, and `gitlab`", "must not choose or rank a tracker", "Do not offer an `Other` tracker", "unsupported tracker request", "do not write an unsupported platform", "read-only migration"]
-)
-local_parent_template = read(ROOT, "docs/templates/local-parent-ticket-template.md")
-require_markers(
-  failures,
-  "Local parent fallback template",
-  local_parent_template,
-  ["<local-markdown | github | gitlab>", "<local | pending>", "pending_publication_to"]
-)
-
-def tracker_decision(repository_mode:, persisted_platforms:, explicit_platform:, remote:, platform_available:, legacy_paths: [], canonical_artifacts: false)
-  return {state: "not-applicable", platform: nil, writes: [], reason: "validate-only"} if repository_mode == "template-source"
-
-  persisted = persisted_platforms.compact.uniq
-  return {state: "conflict", platform: nil, writes: [], reason: "persistent-configuration-conflict"} if persisted.length > 1
-
-  platform = persisted.first || explicit_platform || "local-markdown"
-  return {state: "conflict", platform: nil, writes: [], reason: "unsupported-platform"} unless %w[local-markdown github gitlab].include?(platform)
-
-  if legacy_paths.any? && canonical_artifacts
-    return {state: "conflict", platform: platform, writes: [], reason: "legacy-and-canonical-artifacts", migration_ref: legacy_paths}
-  end
-
-  if legacy_paths.any?
-    return {state: "missing", platform: platform, writes: [], reason: "legacy-artifacts-detected", migration_ref: legacy_paths}
-  end
-
-  if platform != "local-markdown" && !platform_available
-    return {
-      state: "degraded",
-      platform: platform,
-      fallback_root: "docs/.scratch",
-      publish_target: platform,
-      writes: ["docs/.scratch/<feature>/parent-ticket.md (tracker: #{platform}, publication: pending, pending_publication_to: #{platform})"]
-    }
-  end
-
-  {
-    state: "ready",
-    platform: platform,
-    code_host: remote,
-    writes: platform == "local-markdown" ? ["docs/.scratch/<feature>/"] : ["#{platform}:issue"]
-  }
-end
-
-local_with_github_origin = tracker_decision(
-  repository_mode: "project-instance",
-  persisted_platforms: [project_tracker.fetch("platform")],
-  explicit_platform: nil,
-  remote: "github",
-  platform_available: true
-)
-require_equal(failures, "GitHub origin does not override Local tracker", local_with_github_origin[:platform], "local-markdown")
-require_equal(failures, "Local tracker does not call remote issue command", local_with_github_origin[:writes], ["docs/.scratch/<feature>/"])
-
-unavailable_github = tracker_decision(
-  repository_mode: "project-instance",
-  persisted_platforms: [],
-  explicit_platform: "github",
-  remote: "gitlab",
-  platform_available: false
-)
-require_equal(failures, "explicit GitHub remains selected when unavailable", unavailable_github[:platform], "github")
-require_equal(failures, "unavailable remote fallback state", unavailable_github[:state], "degraded")
-require_equal(failures, "unavailable remote fallback root", unavailable_github[:fallback_root], "docs/.scratch")
-require_equal(failures, "unavailable remote does not switch platform", unavailable_github[:publish_target], "github")
-require_equal(
-  failures,
-  "unavailable remote fallback marker",
-  unavailable_github[:writes],
-  ["docs/.scratch/<feature>/parent-ticket.md (tracker: github, publication: pending, pending_publication_to: github)"]
-)
-
-conflicting_persistent_config = tracker_decision(
-  repository_mode: "project-instance",
-  persisted_platforms: ["local-markdown", "gitlab"],
-  explicit_platform: nil,
-  remote: "gitlab",
-  platform_available: true
-)
-require_equal(failures, "conflicting persistent tracker config", conflicting_persistent_config[:state], "conflict")
-
-legacy_only = tracker_decision(
-  repository_mode: "project-instance",
-  persisted_platforms: ["local-markdown"],
-  explicit_platform: nil,
-  remote: "github",
-  platform_available: true,
-  legacy_paths: [".scratch"],
-  canonical_artifacts: false
-)
-require_equal(failures, "legacy-only tracker requires migration", legacy_only[:state], "missing")
-require_equal(failures, "legacy-only tracker does not write", legacy_only[:writes], [])
-require_equal(failures, "legacy-only tracker records migration reference", legacy_only[:migration_ref], [".scratch"])
-
-legacy_and_canonical = tracker_decision(
-  repository_mode: "project-instance",
-  persisted_platforms: ["local-markdown"],
-  explicit_platform: nil,
-  remote: "github",
-  platform_available: true,
-  legacy_paths: ["docs/requirements/tickets"],
-  canonical_artifacts: true
-)
-require_equal(failures, "legacy and canonical tracker conflict", legacy_and_canonical[:state], "conflict")
-require_equal(failures, "legacy and canonical tracker does not write", legacy_and_canonical[:writes], [])
-
-template_source_tracker = tracker_decision(
-  repository_mode: "template-source",
-  persisted_platforms: ["local-markdown"],
-  explicit_platform: "github",
-  remote: "github",
-  platform_available: true
-)
-require_equal(failures, "template-source tracker action", template_source_tracker[:state], "not-applicable")
-require_equal(failures, "template-source does not create product assets", template_source_tracker[:writes], [])
-
-phase_boundary = contract.fetch("phase_boundary", {})
-require_equal(
-  failures,
-  "phase-boundary precedence",
-  phase_boundary["precedence"],
-  %w[continue clear handoff subagent compact]
-)
-require_include(
-  failures,
-  "phase-boundary guard",
-  phase_boundary["invariants"] || [],
-  "does-not-force-clear"
-)
-
-%w[release retrospective].each do |work_unit|
-  require_include(
-    failures,
-    "lifecycle-owned work units",
-    contract["lifecycle_owned_work_units"] || [],
-    work_unit
-  )
-end
-{
-  "release" => %w[fresh_verification release_or_rollback_evidence independent_review],
-  "retrospective" => %w[fresh_verification retrospective_record governance_reflow_decision]
-}.each do |work_unit, required|
-  actual = contract.dig("lifecycle_work_unit_requirements", work_unit) || []
-  required.each { |field| require_include(failures, "#{work_unit} requirements", actual, field) }
-end
-
-adapter = read(ROOT, ".agents/skills/yss-product-lifecycle/references/matt-yss-adapter.md")
-to_spec = read(ROOT, ".agents/skills/to-spec/SKILL.md")
-code_review = read(ROOT, ".agents/skills/code-review/SKILL.md")
-require_markers(
-  failures,
-  "Matt to-spec core contract",
-  to_spec,
-  ["Apply the `ready-for-agent` triage label"]
-)
-require_markers(
-  failures,
-  "Matt/YSS adapter",
-  adapter,
-  [
-    "直接调用 `ask-matt`",
-    "template-source",
-    "Matt Skill Result",
-    "Local Markdown 兼容映射",
-    "docs/.scratch/<feature>/parent-ticket.md",
-    "发布提示由本适配层覆盖为 `ready-for-human`",
-    "to-spec",
-    "to-tickets",
-    "YSS active 的 `to-tickets`",
-    "`review_mode`",
-    "`commit_authorized`",
-    "`push_authorized`",
-    "Release",
-    "Retrospective"
-  ]
-)
-require_markers(
-  failures,
-  "Matt code-review candidate modes",
-  code_review,
-  [
-    "Committed candidate",
-    "Worktree candidate",
-    "git diff --no-ext-diff --binary --full-index <merge-base>",
-    "git diff --no-index --no-ext-diff --binary --full-index -- /dev/null <path>",
-    "git ls-files -z --others --exclude-standard",
-    "staged",
-    "unstaged",
-    "untracked",
-    "candidate manifest",
-    "captured candidate",
-    "yss-worktree-candidate-v1",
-    "unsigned 64-bit big-endian",
-    "candidate_digest",
-    "stale candidate",
-    "immutable",
-    "length-prefixed",
-    "bytewise path order",
-    "return `blocked`"
-  ]
-)
-
-lifecycle_skill = read(ROOT, ".agents/skills/yss-product-lifecycle/SKILL.md")
-require_markers(
-  failures,
-  "lifecycle template-source guard",
-  lifecycle_skill,
-  [
-    "template-source",
-    "必须返回 `blocked`",
-    "template-source-product-artifact-forbidden",
-    "YSS active 调用 `to-spec` 时",
-    "ready-for-agent` 发布提示归一化为 Spec `ready-for-human`",
-    "YSS active 调用 `to-tickets` 时",
-    "`commit_authorized`",
-    "`push_authorized`"
-  ]
-)
-orchestration = read(ROOT, ".agents/skills/yss-product-lifecycle/references/orchestration.md")
-require_markers(
-  failures,
-  "lifecycle Matt Result guard",
-  orchestration,
-  ["stale_candidates", "空 `evidence_refs`", "Local Markdown", "docs/.scratch/<feature>/"]
-)
-
-feature_skill_markers = {
-  "high-fidelity-html-prototype" => ["docs/.scratch/<feature>/spec.md", "docs/.scratch/<feature>/design/prototypes/index.html"],
-  "product-design-prototype" => ["docs/.scratch/<feature>/design/", "docs/.scratch/<feature>/design/<feature>-interaction-spec.md"],
-  "yss-openapi-draft-review" => ["docs/.scratch/<feature>/api/<feature>.yaml", "docs/.scratch/<feature>/architecture/"],
-  "yss-openapi-governance" => ["docs/.scratch/<feature>/api/<feature>.yaml", "docs/.scratch/<feature>/spec-delta/"],
-  "excalidraw-diagram-generator" => ["docs/.scratch/<feature>/discovery/diagrams/", "docs/.scratch/<feature>/architecture/diagrams/"]
-}.each do |skill_name, markers|
-  body = read(ROOT, ".agents/skills/#{skill_name}/SKILL.md")
-  require_markers(failures, "Local feature path #{skill_name}", body, markers)
-end
-
-if failures.empty?
-  puts "Matt/YSS 集成压力场景验证通过"
-else
-  warn failures.join("\n")
-  exit 1
-end
+#!/usr/bin/env node
+import { runScenario } from "./lib/scenario-checks.mjs";
+try { runScenario("matt"); } catch (error) { process.stderr.write(`${error.message}\n`); process.exitCode = 1; }