create-yss-spec 2.1.7 → 2.1.9

package/template/scripts/lib/scenario-checks.mjs

@@ -2,11 +2,91 @@ import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { spawnSync } from "node:child_process";
+import { parseDocument } from "../vendor/yaml.mjs";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
 const read = (relative) => readFileSync(path.join(root, relative), "utf8");
 function ensure(condition, message) { if (!condition) throw new TypeError(message); }
 function exists(relative) { return existsSync(path.join(root, relative)); }
+function includesAll(actual, expected) { return Array.isArray(actual) && expected.every((item) => actual.includes(item)); }
+
+function validateMattContract(data) {
+  const direct = data.entry_routing?.direct_matt_entry;
+  ensure(direct?.skill === "ask-matt" && direct?.delegate_to === "yss-product-lifecycle" && direct?.requires_valid_manifest === true && direct?.action === "navigate-only" && direct?.lifecycle_state_mutation === "forbidden" && direct?.lifecycle_artifact_write === "forbidden" && direct?.return_to_orchestrator === "required", "ask-matt 导航入口尚未形成验明身份、只导航、禁止生命周期写入并强制回交主控的完整契约");
+  const formal = data.entry_routing?.formal_user_entry;
+  ensure(includesAll(formal?.skills, ["setup-matt-pocock-skills", "grill-with-docs", "to-spec", "to-tickets", "implement"]) && formal?.action === "lifecycle-validate-and-accept" && formal?.lifecycle_artifact_write === "conditional-explicit-user-entry" && formal?.return_to_orchestrator === "required", "正式用户入口未区分于 ask-matt 导航入口");
+  const setup = data.setup_readiness;
+  ensure(setup?.missing_action === "needs-human" && setup?.requested_skill === "setup-matt-pocock-skills" && setup?.resume_route === "setup-readiness" && setup?.lifecycle_may_invoke_setup === false, "setup 缺失时未限制为显式用户入口暂停");
+  ensure(includesAll(setup?.preserves, ["lifecycle.status", "gate.status", "ticket.role"]) && setup?.legacy_artifacts_detected?.action === "migration-check" && setup.legacy_artifacts_detected.setup === "forbidden" && setup.legacy_artifacts_detected.write === "paused", "setup 暂停或旧资产迁移暂停契约不完整");
+  const grill = data.grill_exit;
+  ensure(includesAll(grill?.required, ["frontier_empty", "facts_resolved_or_routed", "decisions_confirmed", "shared_understanding_confirmed", "no_unresolved_runnable_blocker"]) && grill?.user_confirmation_required === true, "grill_exit 缺少 frontier、事实路由、决策、共同理解、用户确认或 runnable blocker 条件");
+  ensure(grill?.facts_resolved_or_routed?.technical_fact === "research" && grill.facts_resolved_or_routed.runnable_question === "handoff-prototype-handoff" && grill.facts_resolved_or_routed.external_decision === "external-input-required", "grill_exit 的事实、runnable 问题或外部决策路由不完整");
+  const git = data.git_authorization;
+  for (const action of ["commit", "push"]) {
+    const prefix = action === "commit" ? "commit" : "push";
+    const rule = git?.[action];
+    ensure(git?.natural_language_intent_is_authorization === false && rule?.requires_explicit_user_authorization === true && rule?.authorized_value === true && rule?.unauthorized_action === "checkpoint-only", `${action} 授权边界不完整`);
+    ensure(includesAll(rule?.required, [`${prefix}_authorized`, `${prefix}_scope`, `${prefix}_authorization_ref`]) && includesAll(rule?.non_empty, [`${prefix}_scope`, `${prefix}_authorization_ref`]), `${action} 授权必填字段不完整`);
+  }
+}
+
+function validateInvocationBoundary(data) {
+  const boundary = data.matt_invocation_boundary;
+  const expectedUserInvoked = ["ask-matt", "batch-grill-me", "grill-me", "grill-with-docs", "handoff", "implement", "improve-codebase-architecture", "loop-me", "setup-matt-pocock-skills", "setup-ts-deep-modules", "teach", "to-questionnaire", "to-spec", "to-tickets", "triage", "wait-what", "wayfinder", "writing-beats", "writing-fragments", "writing-shape"];
+  ensure(JSON.stringify(boundary?.user_invoked_skills) === JSON.stringify(expectedUserInvoked), "Matt user-invoked skills 清单不完整或已漂移");
+  ensure(JSON.stringify(boundary?.lifecycle_managed_user_entries) === JSON.stringify(["setup-matt-pocock-skills", "grill-with-docs", "to-spec", "to-tickets", "implement"]), "生命周期管理的显式用户入口清单不完整");
+  ensure(boundary?.lifecycle_may_invoke_user_invoked === false && boundary?.formal_artifact_owner === "explicit-user-entry", "生命周期仍可能自动调用 user-invoked skill 或产出其正式资产");
+  ensure(JSON.stringify(boundary?.model_invoked_skills) === JSON.stringify(["grilling", "domain-modeling", "code-review"]) && boundary?.continuous_orchestration === "prepare-and-validate-only", "连续编排未被限制为允许的 model-invoked 原语与准备/校验动作");
+  validateInvocationMetadata(boundary, (skill) => read(`.agents/skills/${skill}/SKILL.md`));
+  const setup = data.setup_readiness;
+  ensure(setup?.missing_action === "needs-human" && setup?.requested_skill === "setup-matt-pocock-skills" && setup?.resume_route === "setup-readiness" && setup?.preserves?.includes("lifecycle.status"), "readiness=missing 未形成显式用户 setup 的结构化暂停");
+  const result = data.workflow_execution_result;
+  ensure(data.matt_skill_result?.status === "compatibility-read-only" && data.matt_skill_result?.may_influence_routing === false && data.matt_skill_result?.normalize_to === "workflow-execution-result-v1", "旧 Matt Skill Result 未限制为只读兼容 adapter");
+  ensure(result?.canonical_output_schema === "workflow-execution-result-v1" && JSON.stringify(result?.accepted_input_schemas) === JSON.stringify(["workflow-execution-result-v1"]) && result?.legacy?.["matt-skill-result-v1"]?.status === "compatibility-read-only" && result.legacy["matt-skill-result-v1"].may_influence_routing === false && result.legacy["matt-skill-result-v1"].normalize_to === "workflow-execution-result-v1", "Workflow Execution Result 未将旧 Matt Skill Result 限制为只读兼容");
+  ensure(includesAll(result?.required, ["result_schema", "work_unit", "workflow_reference", "result", "evidence_refs", "changed_artifacts", "new_impacts", "stale_candidates", "next_route", "blocking_signals"]) && includesAll(result?.result_values, ["completed", "blocked", "needs-human", "failed"]) && includesAll(result?.blocking_signals, ["drift", "new_impacts", "violation", "missing_evidence", "stale_candidates"]) && includesAll(result?.completed_requires_empty, ["new_impacts", "stale_candidates"]) && includesAll(result?.completed_requires_non_empty, ["evidence_refs"]) && result?.completed_requires_readable_evidence_refs === true && result?.evidence_ref_validation === "readable-or-resolvable" && result?.completed_requires_no_blocking_signals === true && includesAll(result?.workflow_reference?.required, ["source", "skill", "invocation_mode"]), "Workflow Execution Result 的完成态证据、阻断信号或 workflow_reference 契约不完整");
+  const units = data.lifecycle_workflow_references;
+  ensure(units?.["work-unit.discovery-interview"]?.invocation_mode === "model-invoked" && includesAll(units["work-unit.discovery-interview"].skills, ["grilling", "domain-modeling"]), "Discovery work unit 未调用允许的原语");
+  ensure(units?.["work-unit.code-review"]?.invocation_mode === "model-invoked" && units["work-unit.code-review"].skill === "code-review", "Code review work unit 未使用 model-invoked code-review");
+  for (const id of ["work-unit.spec-synthesis", "work-unit.ticket-decomposition", "work-unit.slice-implementation"]) {
+    ensure(units?.[id]?.invocation_mode === "reference" && units[id].formal_artifact_owner === "explicit-user-entry", `${id} 未限制为 workflow reference 与显式正式入口`);
+  }
+}
+
+function validateWorkflowExecutionResult(payload, contract, workUnits) {
+  for (const field of contract.required) ensure(Object.hasOwn(payload, field), `Workflow Execution Result 缺少 ${field}`);
+  ensure(contract.result_values.includes(payload.result), "Workflow Execution Result result 无效");
+  for (const field of contract.workflow_reference.required) ensure(typeof payload.workflow_reference?.[field] === "string" && payload.workflow_reference[field].trim(), `workflow_reference.${field} 无效`);
+  const workUnit = workUnits?.[payload.work_unit];
+  ensure(workUnit, `未知 Workflow Execution Result work_unit: ${payload.work_unit}`);
+  const expectedSkills = workUnit.workflow_reference ? [workUnit.workflow_reference] : workUnit.skills ?? [workUnit.skill];
+  ensure(payload.workflow_reference.source === contract.workflow_reference.source && includesAll(expectedSkills, [payload.workflow_reference.skill]) && payload.workflow_reference.invocation_mode === workUnit.invocation_mode, "Workflow Execution Result workflow_reference 与 work_unit 不匹配");
+  if (payload.result !== "completed") return;
+  for (const field of contract.completed_requires_empty) ensure(Array.isArray(payload[field]) && payload[field].length === 0, `completed 的 ${field} 必须为空`);
+  for (const field of contract.completed_requires_non_empty) ensure(Array.isArray(payload[field]) && payload[field].length > 0, `completed 的 ${field} 不能为空`);
+  if (contract.completed_requires_readable_evidence_refs) {
+    for (const reference of payload.evidence_refs) ensure(typeof reference === "string" && reference.trim() && exists(reference), `completed 证据不可读取: ${reference}`);
+  }
+  if (contract.completed_requires_no_blocking_signals) ensure(Array.isArray(payload.blocking_signals) && payload.blocking_signals.length === 0, "completed 不得携带 blocking_signals");
+}
+
+function validateInvocationMetadata(boundary, skillContents) {
+  for (const skill of boundary.user_invoked_skills) ensure(skillContents(skill).includes("disable-model-invocation: true"), `${skill} 未声明为 user-invoked skill`);
+  for (const skill of boundary.lifecycle_managed_user_entries) ensure(skillContents(skill).includes("disable-model-invocation: true"), `${skill} 未声明为生命周期管理的 user-invoked skill`);
+  for (const skill of boundary.model_invoked_skills) ensure(!skillContents(skill).includes("disable-model-invocation: true"), `${skill} 不应出现在 model-invoked 白名单`);
+}
+
+function validateMattProse(skill, adapter) {
+  ensure(skill.includes("不得写生命周期资产或改变门禁/Ticket 状态") && skill.includes("任何写入前回交本编排器"), "主技能缺少 direct Matt 只导航并回交的说明");
+  ensure(adapter.includes("仅发现旧路径资产") && adapter.includes("不得调用 `setup-matt-pocock-skills`"), "适配器缺少 setup 旧资产迁移或显式用户入口条件");
+  ensure(adapter.includes("frontier 为空") && adapter.includes("双方共同理解已确认"), "适配器缺少 grill_exit 的 frontier 或共同理解条件");
+  ensure(skill.includes("自然语言意向不构成上述结构化 Git 授权") && adapter.includes("本身不是结构化授权"), "主技能或适配器缺少自然语言 Git 意向不是授权的说明");
+}
+
+function validateInvocationProse(skill, adapter, orchestration) {
+  ensure(skill.includes("不得自动调用它们或代替其创建正式资产") && skill.includes("Workflow Execution Result"), "主技能未限制 user-invoked 调用或未采用新结果协议");
+  ensure(adapter.includes("workflow reference 不表示调用") && adapter.includes("正式 Spec、Ticket 或实现资产仍只能由对应显式用户入口创建"), "适配器未限制 workflow reference 的正式资产所有权");
+  ensure(orchestration.includes("只实际调用允许的 model-invoked skill") && orchestration.includes("用户显式启动"), "编排协议未区分 model-invoked 原语和显式用户入口");
+}
 
 const profiles = {
   lifecycle: {
@@ -17,7 +97,7 @@ const profiles = {
   matt: {
     message: "Matt/YSS 集成压力场景验证通过",
     files: [".agents/skills/yss-product-lifecycle/references/matt-yss-adapter.md", ".agents/skills/yss-product-lifecycle/references/orchestration-contract.yaml"],
-    markers: [[".agents/skills/yss-product-lifecycle/SKILL.md", "Matt Skill Result"]]
+    markers: [[".agents/skills/yss-product-lifecycle/SKILL.md", "Workflow Execution Result"]]
   },
   prototype: {
     message: "原型到后端脚手架及后续 YSS 代码生成压力场景验证通过",
@@ -67,6 +147,74 @@ export function runScenario(name) {
     const result = spawnSync("scripts/verify-lifecycle-registry", [], { cwd: root, encoding: "utf8" });
     ensure(result.status === 0, result.stderr || result.stdout);
   }
+  if (name === "matt") {
+    const contract = parseDocument(read(".agents/skills/yss-product-lifecycle/references/orchestration-contract.yaml"), { uniqueKeys: true });
+    ensure(contract.errors.length === 0, contract.errors[0]?.message || "生命周期编排契约无法解析");
+    const data = contract.toJS({ maxAliasCount: 0 });
+    validateMattContract(data);
+    validateInvocationBoundary(data);
+    const validResult = {
+      result_schema: "workflow-execution-result-v1",
+      work_unit: "work-unit.spec-synthesis",
+      workflow_reference: { source: "mattpocock/skills", skill: "to-spec", invocation_mode: "reference" },
+      result: "completed",
+      evidence_refs: ["docs/process/lifecycle-registry.yaml"],
+      changed_artifacts: [],
+      new_impacts: [],
+      stale_candidates: [],
+      next_route: "work-unit.ticket-decomposition",
+      blocking_signals: []
+    };
+    validateWorkflowExecutionResult(validResult, data.workflow_execution_result, data.lifecycle_workflow_references);
+    for (const mutate of [
+      (item) => { delete item.workflow_reference; },
+      (item) => { item.evidence_refs = []; },
+      (item) => { item.evidence_refs = ["docs/process/not-found.md"]; },
+      (item) => { item.blocking_signals = ["drift"]; },
+      (item) => { item.new_impacts = ["new-api"]; },
+      (item) => { item.workflow_reference.source = "untrusted/source"; },
+      (item) => { item.workflow_reference.skill = "implement"; },
+      (item) => { item.workflow_reference.invocation_mode = "model-invoked"; }
+    ]) {
+      const invalid = structuredClone(validResult); mutate(invalid);
+      let rejected = false;
+      try { validateWorkflowExecutionResult(invalid, data.workflow_execution_result, data.lifecycle_workflow_references); } catch { rejected = true; }
+      ensure(rejected, "Workflow Execution Result 完成态变异未被拒绝");
+    }
+    let metadataRejected = false;
+    try {
+      validateInvocationMetadata(data.matt_invocation_boundary, (skill) => skill === "grill-with-docs" ? read(`.agents/skills/${skill}/SKILL.md`).replace("disable-model-invocation: true\n", "") : read(`.agents/skills/${skill}/SKILL.md`));
+    } catch { metadataRejected = true; }
+    ensure(metadataRejected, "user-invoked front matter 变异未被 baseline oracle 拒绝");
+    const mutations = [
+      (item) => { delete item.entry_routing.direct_matt_entry.return_to_orchestrator; },
+      (item) => { item.entry_routing.formal_user_entry.lifecycle_artifact_write = "forbidden"; },
+      (item) => { item.matt_invocation_boundary.user_invoked_skills.push("unexpected-user-entry"); },
+      (item) => { item.setup_readiness.lifecycle_may_invoke_setup = true; },
+      (item) => { item.grill_exit.user_confirmation_required = false; },
+      (item) => { delete item.git_authorization.push; }
+    ];
+    for (const mutate of mutations) {
+      const candidate = structuredClone(data); mutate(candidate);
+      let rejected = false;
+      try { validateMattContract(candidate); validateInvocationBoundary(candidate); } catch { rejected = true; }
+      ensure(rejected, "Matt/YSS 契约变异未被 baseline oracle 拒绝");
+    }
+    const skill = read(".agents/skills/yss-product-lifecycle/SKILL.md");
+    const adapter = read(".agents/skills/yss-product-lifecycle/references/matt-yss-adapter.md");
+    const orchestration = read(".agents/skills/yss-product-lifecycle/references/orchestration.md");
+    validateMattProse(skill, adapter);
+    validateInvocationProse(skill, adapter, orchestration);
+    let proseRejected = false;
+    try { validateMattProse(skill.replace("任何写入前回交本编排器", "允许直接写入"), adapter); } catch { proseRejected = true; }
+    ensure(proseRejected, "Matt/YSS prose 变异未被 baseline oracle 拒绝");
+    let invocationProseRejected = false;
+    try { validateInvocationProse(skill.replace("不得自动调用它们或代替其创建正式资产", "可以自动调用并创建正式资产"), adapter, orchestration); } catch { invocationProseRejected = true; }
+    ensure(invocationProseRejected, "调用边界 prose 变异未被 baseline oracle 拒绝");
+    for (const relative of ["SKILL.md", "references/matt-yss-adapter.md", "references/orchestration-contract.yaml"]) {
+      ensure(read(`.agents/skills/yss-product-lifecycle/${relative}`) === read(`.codex/skills/yss-product-lifecycle/${relative}`), `YSS 生命周期投影未同步: ${relative}`);
+    }
+  }
   if (name === "yssDtoWire") {
     const result = spawnSync("scripts/verify-yss-dto-openapi-profile", [], { cwd: root, encoding: "utf8" });
     ensure(result.status === 0, result.stderr || result.stdout);

package/template/scripts/lib/skill-supply-chain.mjs

@@ -8,7 +8,7 @@ export const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "
 const SOURCE_ROOT = path.join(ROOT, ".agents/skills");
 const LOCK_PATH = path.join(ROOT, "skills-lock.json");
 const PROJECTION_ROOTS = [".claude/skills", ".codex/skills", ".hermes/skills", ".pi/skills", ".qoder/skills", ".trae/skills"];
-const OBSOLETE = new Set(["to-" + "prd", "to-" + "issues", "design-an-interface", "qa", "request-refactor-plan", "ubiquitous-language", "edit-article", "obsidian-vault", "writing-great-skills", "code-review-process", "yss-domain-modeling", "yss-dir", "yss-duckdb", "yss-file", "yss-filerunner", "yss-db2mybatis", "yss-mail", "yss-mapper-dynamic", "yss-quality", "yss-sql-condition", "yss-sql-tpl", "yss-valuation", "yss-variable", "yss-openapi"]);
+const OBSOLETE = new Set(["to-" + "prd", "to-" + "issues", "design-an-interface", "qa", "request-refactor-plan", "ubiquitous-language", "edit-article", "obsidian-vault", "writing-great-skills", "code-review-process", "yss-domain-modeling", "yss-dir", "yss-duckdb", "yss-file", "yss-filerunner", "yss-db2mybatis", "yss-mail", "yss-mapper-dynamic", "yss-quality", "yss-sql-condition", "yss-sql-tpl", "yss-valuation", "yss-variable", "yss-openapi", "web-design-engineer", "web-video-presentation", "wireframe-prototype", "wizard", "git-guardrails-claude-code", "claude-handoff"]);
 
 function relative(target) { return path.relative(ROOT, target).replaceAll(path.sep, "/"); }
 function entries(directory) { return existsSync(directory) ? readdirSync(directory, { withFileTypes: true }) : []; }
@@ -42,8 +42,13 @@ function ensureSafeProjection(target) {
   const resolved = path.resolve(target);
   if (!resolved.startsWith(`${ROOT}${path.sep}`) || path.basename(resolved) !== "skills") throw new TypeError(`refusing unsafe projection target: ${target}`);
 }
+export function unlockedProjectionEntries(candidates, allowedNames, isTracked) {
+  const allowed = new Set(allowedNames);
+  return candidates.filter((candidate) => candidate.isDirectory() || candidate.isSymbolicLink()).filter((candidate) => !allowed.has(candidate.name) && isTracked(candidate.name));
+}
 export function syncSkills({ check = false } = {}) {
-  const shared = sharedFromLock(parseLock());
+  const lock = parseLock();
+  const shared = sharedFromLock(lock);
   const absent = shared.filter((name) => !lstatSafe(path.join(SOURCE_ROOT, name))?.isDirectory());
   if (absent.length) throw new TypeError(`锁文件声明的共享 skills 缺少权威内容: ${absent.join(", ")}`);
   const obsolete = shared.filter((name) => OBSOLETE.has(name));
@@ -53,6 +58,12 @@ export function syncSkills({ check = false } = {}) {
     const projection = path.join(ROOT, root);
     ensureSafeProjection(projection);
     if (!check) mkdirSync(projection, { recursive: true });
+    const allowed = [...shared, ...Object.keys(lock.skills?.platform?.[root] ?? {})];
+    for (const entry of unlockedProjectionEntries(entries(projection), allowed, (name) => tracked(relative(path.join(projection, name))))) {
+      const target = path.join(projection, entry.name);
+      if (!check && entry.isSymbolicLink() && !existsSync(target)) rmSync(target, { force: true });
+      else drift.push(`unlocked projection: ${relative(target)}`);
+    }
     for (const name of shared) {
       const source = path.join(SOURCE_ROOT, name);
       const target = path.join(projection, name);

package/template/scripts/verify-maintenance-checkpoint

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import { parseArgs } from "node:util";
+import { loadMaintenanceCheckpoint, validateMaintenanceCheckpoint } from "./lib/maintenance-intensity.mjs";
+
+try {
+  const { positionals } = parseArgs({ allowPositionals: true, strict: true });
+  if (positionals.length > 1) throw new TypeError("用法: scripts/verify-maintenance-checkpoint [checkpoint.yaml|checkpoint.json|-]");
+  const result = validateMaintenanceCheckpoint(loadMaintenanceCheckpoint(positionals[0] ?? "-"));
+  process.stdout.write(`模板维护 checkpoint 验证通过（${result.intensity}，最低 ${result.minimum_intensity}）\n`);
+} catch (error) {
+  process.stderr.write(`模板维护 checkpoint 验证失败: ${error.message}\n`);
+  process.exitCode = 1;
+}

package/template/scripts/verify-maintenance-intensity-scenarios

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { validateMaintenanceCheckpoint } from "./lib/maintenance-intensity.mjs";
+
+const checkerSource = readFileSync(new URL("./lib/maintenance-intensity.mjs", import.meta.url), "utf8");
+if (checkerSource.includes("LEVEL_BY_TRIGGER = new Map")) {
+  throw new TypeError("触发项映射必须由 docs/process/maintenance-intensity.yaml 唯一维护");
+}
+if (!checkerSource.includes("maintenance-intensity.yaml")) {
+  throw new TypeError("维护强度校验器必须加载权威触发项映射");
+}
+
+const evidence = (...kinds) => kinds.map((kind) => ({ kind, command: `verify ${kind}`, result: "pass" }));
+const base = {
+  schema_version: 1,
+  classification_reason: "场景验证",
+  changed_assets: ["docs/example.md"],
+  escalation: "none"
+};
+
+const accepted = [
+  { ...base, intensity: "L1", triggers: ["textual-only"], verification_evidence: evidence("relevant-check"), review_mode: "self-check" },
+  { ...base, intensity: "L2", triggers: ["local-rule"], verification_evidence: evidence("counterexample", "fresh-verification", "focused-independent-review"), review_mode: "focused-independent" },
+  { ...base, intensity: "L2", triggers: [], verification_evidence: evidence("counterexample", "fresh-verification", "focused-independent-review"), review_mode: "focused-independent" },
+  { ...base, intensity: "L3", triggers: ["lifecycle-gate"], verification_evidence: evidence("red", "green", "refactor", "pressure-scenario", "fresh-verification", "formal-independent-review"), review_mode: "formal-independent" }
+];
+
+for (const checkpoint of accepted) validateMaintenanceCheckpoint(checkpoint);
+
+const rejected = [
+  { ...accepted[1], verification_evidence: evidence("fresh-verification") },
+  { ...accepted[1], verification_evidence: evidence("counterexample", "fresh-verification") },
+  { ...accepted[0], triggers: ["release-semantics"] },
+  { ...accepted[0], triggers: ["aggregate-behavior-change"] },
+  { ...accepted[2], verification_evidence: evidence("red", "green", "refactor", "pressure-scenario") },
+  { ...accepted[2], verification_evidence: evidence("red", "green", "refactor", "pressure-scenario", "fresh-verification") },
+  { ...accepted[1], escalation: "发现发布语义影响但仍维持 L2", triggers: ["release-semantics"] },
+  { ...accepted[2], intensity: "L1" }
+];
+
+for (const checkpoint of rejected) {
+  let failed = false;
+  try { validateMaintenanceCheckpoint(checkpoint); } catch { failed = true; }
+  if (!failed) throw new TypeError(`错误 checkpoint 未被拒绝: ${JSON.stringify(checkpoint)}`);
+}
+
+process.stdout.write("模板维护 L1/L2/L3 强度场景验证通过\n");

package/template/scripts/verify-template

@@ -5,7 +5,7 @@ ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT_DIR"
 node -e 'const [major]=process.versions.node.split(".").map(Number); if (major < 22 || major >= 27) { console.error("模板工具需要 Node >=22 <27"); process.exit(1); }'
 
-required_files=(yss-project.yaml AGENTS.md CONTEXT.md skills-lock.json docs/process/lifecycle-registry.yaml docs/process/lifecycle-registry-baseline.json scripts/repository-mode scripts/implementation-path-policy scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/export-yss-skills)
+required_files=(yss-project.yaml AGENTS.md CONTEXT.md skills-lock.json docs/process/lifecycle-registry.yaml docs/process/lifecycle-registry-baseline.json docs/process/maintenance-intensity.yaml scripts/repository-mode scripts/implementation-path-policy scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/export-yss-skills)
 for required in "${required_files[@]}"; do test -f "$required" || { echo "缺少模板必需文件: $required" >&2; exit 1; }; done
 
 repository_mode="$(scripts/repository-mode)"
@@ -22,6 +22,7 @@ scripts/verify-yss-dto-openapi-profile
 scripts/verify-yss-dto-openapi-scenarios
 scripts/verify-lifecycle-registry
 scripts/verify-lifecycle-scenarios
+scripts/verify-maintenance-intensity-scenarios
 scripts/verify-governance-release
 scripts/verify-implementation-path-scenarios
 scripts/verify-scaffold-generator-scenarios
@@ -32,7 +33,7 @@ scripts/verify-yss-ui-scenarios
 scripts/verify-openapi-yaml-first-scenarios
 scripts/verify-openapi-json-handoff-scenarios
 
-for entry in scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-lifecycle-scenarios scripts/verify-matt-yss-integration-scenarios scripts/verify-prototype-backend-scaffold-scenarios scripts/verify-yss-router-scenarios scripts/verify-openapi-yaml-first-scenarios scripts/verify-openapi-json-handoff-scenarios scripts/export-yss-skills; do node --check "$entry"; done
+for entry in scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-lifecycle-scenarios scripts/verify-matt-yss-integration-scenarios scripts/verify-prototype-backend-scaffold-scenarios scripts/verify-yss-router-scenarios scripts/verify-openapi-yaml-first-scenarios scripts/verify-openapi-json-handoff-scenarios scripts/export-yss-skills; do node --check "$entry"; done
 
 legacy_runtime="ru""by"
 script_roots=(scripts)

package/template/skills-lock.json

@@ -31,7 +31,7 @@
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/engineering/ask-matt/SKILL.md",
-        "effectiveHash": "09433f6b967f02fd537be226936ae5374bb06fd4ece706559e74b9dee74d748e",
+        "effectiveHash": "0b4416d7b8115f78b94b01a3eabe627a4e489212b934fecc33bf00c218a17275",
         "upstreamHash": "b2e8ef5ffc2f142022c1e1e1bba68073f0821356a8e1cf1b23670f61d13fe50b",
         "targets": [
           ".agents/skills",
@@ -59,27 +59,11 @@
           ".trae/skills"
         ]
       },
-      "claude-handoff": {
-        "source": "mattpocock/skills",
-        "sourceType": "github",
-        "skillPath": "skills/in-progress/claude-handoff/SKILL.md",
-        "effectiveHash": "37af6cfb3d32f651afbffa2c2387f10427040dbabf23c4303fd815f05413c289",
-        "upstreamHash": "40a7f4ec80b9826ad7d0c47b0778c99686d6d9d662112b3e175a816f3aca4c39",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
       "code-review": {
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/engineering/code-review/SKILL.md",
-        "effectiveHash": "3b54298033db8f7bd945c99b41b6200c5f3ab3c11f168b16306618379aade45f",
+        "effectiveHash": "38c199724dde690e26a8d1bd21b4fbe19ff31d6225b63779a45e518c96ff8194",
         "upstreamHash": "1d5e7242a98674635be79ab310cdda0e555d36a9903d2526ebf4263d0b7997ca",
         "targets": [
           ".agents/skills",
@@ -184,27 +168,11 @@
           ".trae/skills"
         ]
       },
-      "git-guardrails-claude-code": {
-        "source": "mattpocock/skills",
-        "sourceType": "github",
-        "skillPath": "skills/misc/git-guardrails-claude-code/SKILL.md",
-        "effectiveHash": "1361a1c2e05256123d36ed4a17a3e71055e2dc6189cc8cb8cde632f7f27f129c",
-        "upstreamHash": "8c29552c621da0121427306afd92f8e02f47f446cdb0b55ceae01de6879fcb3a",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
       "grill-me": {
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/productivity/grill-me/SKILL.md",
-        "effectiveHash": "38451dd2683eb309b4176ac5b2648ff6f86e320145baed1ac6c2e34367c8cae6",
+        "effectiveHash": "916cf7ff0d81cf47fe578bd86695e09a53fbe8a4b371586e19dde6573549e88d",
         "upstreamHash": "f361db4e15e6bfd562a9282b1dccda513910a50061f9e838ce017be9c69dde3f",
         "targets": [
           ".agents/skills",
@@ -220,7 +188,7 @@
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/engineering/grill-with-docs/SKILL.md",
-        "effectiveHash": "1125eddfb4d1aeb43c490e0e1f194ee3dc4afb45554f8bb2a971c54b8f9a6593",
+        "effectiveHash": "8d3fbdd09fc1ab2efb8046e7d61f6d50ed9db88f8fefb17d0e2ca8c31ad8caa9",
         "upstreamHash": "9c460cbd94fd3c63cdef967dbdb6e66ca687103cdc380cd37834e4d10b738f78",
         "targets": [
           ".agents/skills",
@@ -358,6 +326,21 @@
           ".trae/skills"
         ]
       },
+      "maintaining-skills": {
+        "source": "project",
+        "sourceType": "local",
+        "skillPath": ".agents/skills/maintaining-skills/SKILL.md",
+        "effectiveHash": "c88bf01f745fb85575cbfcef20a5a9dc071740b364c780490032b278313f11eb",
+        "targets": [
+          ".agents/skills",
+          ".claude/skills",
+          ".codex/skills",
+          ".hermes/skills",
+          ".pi/skills",
+          ".qoder/skills",
+          ".trae/skills"
+        ]
+      },
       "mapstruct": {
         "source": "claude-dev-suite/claude-dev-suite",
         "sourceType": "github",
@@ -394,7 +377,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/product-design-prototype/SKILL.md",
-        "effectiveHash": "a92eb61d58f2f027109a008d18ee5c7c8141f8b604d0e1b428359517baf2701d",
+        "effectiveHash": "1628df47584ceabf0b0b90f87a1ef280cbb94ade3ada57f8a928bc66ac50cde4",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -584,7 +567,7 @@
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/engineering/to-spec/SKILL.md",
-        "effectiveHash": "c411a2a6037bbee2b7e289bd2c6f9c8236c073b65d4560b6be0b0ee575978e7c",
+        "effectiveHash": "25b956bb908264def38a311a03bbeb9940a4c98325a8b2750d095696e3a98cd2",
         "upstreamHash": "7e07d4cfabd1a4f61627ebe2705601784fae7b9aca7e13af3e201ace75738200",
         "targets": [
           ".agents/skills",
@@ -600,7 +583,7 @@
         "source": "mattpocock/skills",
         "sourceType": "github",
         "skillPath": "skills/engineering/to-tickets/SKILL.md",
-        "effectiveHash": "56b011b5d0ec5cb5b692648656a3ae22114ff32ebea8fa13cc44e8e3749c342a",
+        "effectiveHash": "22cc7ab4757e8757588b715bb5c01a62bddf72494c1873b9c28faab5f43babc7",
         "upstreamHash": "0349eee265e7005e667b4543de849672106c46d545e998f37d3319300bb07751",
         "targets": [
           ".agents/skills",
@@ -675,67 +658,6 @@
           ".trae/skills"
         ]
       },
-      "web-design-engineer": {
-        "source": "project",
-        "sourceType": "local",
-        "skillPath": ".agents/skills/web-design-engineer/SKILL.md",
-        "effectiveHash": "95b0d9dd4a45b8640d4e4f6efb494faff64b74b947250d2f5841c2cd88a05642",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
-      "web-video-presentation": {
-        "source": "project",
-        "sourceType": "local",
-        "skillPath": ".agents/skills/web-video-presentation/SKILL.md",
-        "effectiveHash": "2bdcaf1a9a6a3d9aa208d58bba1739d4472b6c9d58f8f342e752894e603c1e5f",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
-      "wireframe-prototype": {
-        "source": "project",
-        "sourceType": "local",
-        "skillPath": ".agents/skills/wireframe-prototype/SKILL.md",
-        "effectiveHash": "bdb4ef6fdec842ac9e8e0b982e03cb723c8f6fe7aa4c9c99b585676e97ff0255",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
-      "wizard": {
-        "source": "mattpocock/skills",
-        "sourceType": "github",
-        "skillPath": "skills/engineering/wizard/SKILL.md",
-        "effectiveHash": "42920399f9833ed80f7f71e3abedc135312da06fbd96e7c4faf94afba404e476",
-        "upstreamHash": "2c0d1187398b1b7ebb9902a4c91b24181ee07892f285615b46c59f45e2c4229c",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
       "writing-beats": {
         "source": "mattpocock/skills",
         "sourceType": "github",
@@ -800,21 +722,6 @@
           ".trae/skills"
         ]
       },
-      "writing-skills": {
-        "source": "project",
-        "sourceType": "local",
-        "skillPath": ".agents/skills/writing-skills/SKILL.md",
-        "effectiveHash": "255d5e097c1ff369d1eecf416757dd6b2cd48f1c4aa749b70168ef8043d76e96",
-        "targets": [
-          ".agents/skills",
-          ".claude/skills",
-          ".codex/skills",
-          ".hermes/skills",
-          ".pi/skills",
-          ".qoder/skills",
-          ".trae/skills"
-        ]
-      },
       "yss-api-integration": {
         "source": "project",
         "sourceType": "local",
@@ -924,7 +831,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-components/SKILL.md",
-        "effectiveHash": "baa5ca07b655cb1ab1045418aa07e906018e31b6609bbe87dc6e9043123e5d78",
+        "effectiveHash": "2353131879924ba24d86c70d472a8af545c66979881129b5f66a11eaca826d23",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -954,7 +861,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-design-system/SKILL.md",
-        "effectiveHash": "65bb2991f7773f74d50bbfa65bd494ea8552b5ec6637a8abb5bedadd99082986",
+        "effectiveHash": "e179989cd6db0b33739c7fa88f09010c0b4af74b4af625b0774ec5cd7c574775",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1104,7 +1011,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-hook/SKILL.md",
-        "effectiveHash": "0d3400398c60b082a95ec4f09d13381ce00ce280b3f979f8939c1eba53e18afe",
+        "effectiveHash": "513f1d6bbd192852502948c090e94691c365803b7f926146e4225ea0e548e970",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1224,7 +1131,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-product-lifecycle/SKILL.md",
-        "effectiveHash": "df69789888b58bcf521d400f0ae67c8825921b7c75490128736c6ab1f6f7f01b",
+        "effectiveHash": "c2e5d6807eecfb14d0e0b2388114e7e00e7bb18f92bd98dfb8a0cc430e9a2cbb",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1239,7 +1146,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-prototype-stage/SKILL.md",
-        "effectiveHash": "38d4bb83e7a3bf104c11d99e4a8cad9f2094fb29da51f32b0e9a66ebcbe16d03",
+        "effectiveHash": "dbe733f5396b3dd51f13e6170373a77c32dd4675a091b1e7df9da35387521d9a",
         "targets": [
           ".agents/skills",
           ".claude/skills",