create-yss-spec 2.2.0 → 2.2.2

package/template/docs/agents/skills-maintenance.md

@@ -7,7 +7,7 @@
 - `.agents/skills` 是跨 Agent 共享技能的唯一权威内容。
 - `.claude/skills`、`.codex/skills`、`.cursor/skills`、`.hermes/skills`、`.pi/skills`、`.qoder/skills`、`.trae/skills` 中的同名共享技能是生成投影，不得分别手工修改。
 - Cursor 的契约运行时入口是 `.cursor/skills`。若客户端同时枚举 `.claude/skills`，仍以 `.cursor/skills` 为 Cursor 投影契约，不得把两套同名 skill 解释为两个来源。
-- 分层、别名和默认可发现性以 `docs/agents/yss-skill-registry.yaml` 为准；该文件当前为 shadow，不改变 Agent 实际发现列表，也不允许 Router 按其裁剪闭包。
+- 分层、别名和默认可发现性以 `docs/agents/yss-skill-registry.yaml` 为准；当前 registry 为 `active`，Router、生命周期编排器和实例发现面必须消费通过校验的 canonical 技能及其 alias 解析结果。
 - 只属于某个平台的 skill 继续保留在对应 root，并由 `skills-lock.json` 的 `platform` 分组记录。
 - 共享技能投影可以是指向权威目录的符号链接，也可以是完整同步副本；`scripts/sync-skills --check` 会检查链接目标或完整目录哈希。
 
@@ -57,7 +57,7 @@
    scripts/verify-template
    ```
 
-   若模板维护引入或更新分发到实例的 Node 工具，先在 `.template-source/tooling/node/` 使用 `pnpm install --frozen-lockfile`，再运行 `pnpm build:vendor` 与 `pnpm check:vendor`；实例门禁不得安装依赖或重建 vendor。运行时、公开入口和跨仓回滚规则以 `.template-source/adr/0009-zero-install-node-tooling-runtime.md` 及对应契约为准。
+   模板源维护引入或更新分发到实例的 Node 工具时，维护侧依赖、构建和 vendor 校验只在模板源治理区及 CI 中执行；实例门禁不得安装依赖或重建 vendor。实例只消费已提交的 `scripts/lib/*.mjs` 与 `scripts/vendor/*.mjs`，具体维护侧命令和治理决策不属于项目实例文档。
 
 6. 需要重新加载技能的客户端在变更落地后重启或刷新项目。
 

package/template/docs/agents/yss-skill-registry.yaml

@@ -1,14 +1,14 @@
 schema_version: 1
 registry_id: yss.skill-routing
-status: shadow
+status: active
 description: >-
-  技能分层、别名、默认可发现性和 Agent 运行时入口的 shadow 路由注册表。
-  本文件不替代 skills-lock.json 的来源、hash 与投影完整性职责；Router 与生命周期编排器在 status=shadow 时不得消费本表做运行时裁剪。
+  技能分层、别名、默认可发现性和 Agent 运行时入口的可执行路由注册表。
+  本文件不替代 skills-lock.json 的来源、hash 与投影完整性职责；Router 与生命周期编排器只消费通过本表校验的 canonical 技能。
 canonical_content_root: .agents/skills
 runtime_policy:
-  consumed_by_router: false
-  consumed_by_lifecycle: false
-  discovery_enforced: false
+  consumed_by_router: true
+  consumed_by_lifecycle: true
+  discovery_enforced: true
 agent_runtime_roots:
   claude: .claude/skills
   codex: .codex/skills
@@ -27,7 +27,7 @@ skills:
   - id: ask-matt
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [lifecycle]
   - id: code-review
@@ -75,13 +75,13 @@ skills:
   - id: grill-me
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [discovery]
   - id: grill-with-docs
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [discovery]
   - id: grilling
@@ -96,17 +96,10 @@ skills:
     instance_default_discoverable: true
     aliases: []
     impacts: [lifecycle]
-  - id: high-fidelity-html-prototype
-    layer: compatibility
-    maturity: deprecated
-    instance_default_discoverable: false
-    aliases: []
-    impacts: [prototype]
-    replaced_by: yss-prototype-stage
   - id: implement
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [lifecycle]
   - id: implementation-repo-onboarding
@@ -118,7 +111,7 @@ skills:
   - id: improve-codebase-architecture
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [quality]
   - id: llm-wiki
@@ -190,7 +183,7 @@ skills:
   - id: setup-matt-pocock-skills
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [setup]
   - id: setup-pre-commit
@@ -226,19 +219,19 @@ skills:
   - id: to-spec
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [lifecycle]
   - id: to-tickets
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [lifecycle]
   - id: triage
     layer: compatibility
     maturity: supported
-    instance_default_discoverable: true
+    instance_default_discoverable: false
     aliases: []
     impacts: [lifecycle]
   - id: using-git-worktrees
@@ -413,7 +406,7 @@ skills:
     layer: specialist
     maturity: supported
     instance_default_discoverable: false
-    aliases: []
+    aliases: [page-module-development, yss-ui-business-page-generation]
     impacts: [frontend]
   - id: yss-product-lifecycle
     layer: core
@@ -473,13 +466,13 @@ skills:
     layer: specialist
     maturity: supported
     instance_default_discoverable: false
-    aliases: []
+    aliases: [use-table-height]
     impacts: [frontend]
   - id: yss-use-tree-height
     layer: specialist
     maturity: supported
     instance_default_discoverable: false
-    aliases: []
+    aliases: [use-tree-height]
     impacts: [frontend]
   - id: yss-userinfo
     layer: specialist
@@ -499,12 +492,119 @@ skills:
     instance_default_discoverable: false
     aliases: []
     impacts: [backend, api]
+  - id: component-selection-imports
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: file-export-download
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend, api]
+  - id: formily-foundation
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: formily-linkage-effects
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: formily-mode-slot-detail
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: formily-step-flow
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: frontend-commit
+    layer: maintainer-only
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [template-maintenance]
+  - id: java-backend-commit
+    layer: maintainer-only
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [template-maintenance]
+  - id: page-form-module
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: page-list-module
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: page-skeleton
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: prototype-page-acceptance
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [prototype, frontend]
+  - id: theme-token-usage
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend, prototype]
+  - id: vue3-best-practices
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: yedit-table-usage
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: ytable-usage
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
+  - id: ytree-usage
+    layer: specialist
+    maturity: supported
+    instance_default_discoverable: false
+    aliases: []
+    impacts: [frontend]
 platform_skills:
   - id: data-analytics
     root: .codex/skills
     layer: maintainer-only
     instance_default_discoverable: false
+    aliases: []
   - id: product-design
     root: .codex/skills
     layer: specialist
     instance_default_discoverable: false
+    aliases: [product-design:index]
+external_skills:
+  - id: yss-backend-scaffold-parent
+    source: .agents/skills/yss-ddd-scaffold-generator/references/yss-backend-scaffold-parent/SKILL.md

package/template/docs/process/implementation-repo-integration.md

@@ -30,7 +30,7 @@ apps/
 - **frontend**：依赖安装、测试、type-check 与构建优先使用 `pnpm`（例如 `pnpm test`、`pnpm type-check`、`pnpm build`）。不要默认 `npm` 或 `yarn`。
 - **backend**：校验、测试与编译优先使用项目根 `./mvnw`（例如 `./mvnw validate`、`./mvnw test`、`./mvnw package`）。不要默认裸 `mvn`。
 - Ticket、Slice Implementation Contract、CI 和 Review 证据必须写下实际执行的上述命令。既有仓库缺少 `pnpm` 或 Maven Wrapper 时，先记录受控例外、替代命令和责任人，再执行。
-- 本模板源仓库没有产品 frontend / backend 运行时；其 Node 校验仍按 `AGENTS.md` 的 Cursor Cloud 说明使用 `pnpm --dir .template-source/tooling/node`。
+- 本模板源仓库没有产品 frontend / backend 运行时；模板源维护侧的 Node 校验命令和环境约束只记录在 `.template-source/` 治理区及 CI 配置中，不属于项目实例实现命令。
 
 ## 1.3 `repository_scope: git-submodule`
 

package/template/docs/user-guide//344/272/247/345/223/201/347/240/224/345/217/221/345/205/250/347/224/237/345/221/275/345/221/250/346/234/237/346/234/200/344/275/263/345/256/236/350/267/265.md

@@ -165,7 +165,7 @@ skills 是让 AI 按规程工作的“操作手册”，不是关键词装饰。
 使用 yss-router，基于 `docs/.scratch/data-modeling/issues/04-validate-model.md`、
 冻结 OpenAPI `docs/.scratch/data-modeling/api/data-modeling.yaml` 和架构设计，
 选择最小 YSS 技能集。
-请说明为什么需要或不需要 yss-domain、yss-repository、yss-mybatis、yss-web-controller、yss-ui、api-integration。
+请说明为什么需要或不需要 yss-domain、yss-repository、yss-mybatis、yss-web-controller、yss-ui、yss-api-integration。
 不要实现代码，只输出技能路由、实现顺序和验证建议。
 ```
 
@@ -804,8 +804,8 @@ TDD 顺序示例：
 | 后端用例编排 | `yss-application` |
 | 持久化 | `yss-repository`、需要分页/批量/数据源时加 `yss-mybatis` |
 | Web 接口 | `yss-web-controller`、`yss-dto` |
-| 前端页面 | `yss-ui`、`yss-page-module-development`、`api-integration` |
-| OpenAPI client 刷新 | `yss-openapi-governance` 从冻结 YAML 派生 JSON，随后 `api-integration` 运行 Orval；只在 Freeze 后或按实现契约刷新时使用 |
+| 前端页面 | `yss-ui`、`yss-page-module-development`、`yss-api-integration` |
+| OpenAPI client 刷新 | `yss-openapi-governance` 从冻结 YAML 派生 JSON，随后 `yss-api-integration` 运行 Orval；只在 Freeze 后或按实现契约刷新时使用 |
 
 阶段门禁：
 
@@ -1072,7 +1072,7 @@ docs/user-guide/
 使用 yss-router。
 输入资产：<Spec 路径>、<交互设计路径>、<OpenAPI Freeze 路径或无 API 影响记录>、<架构设计路径>、<垂直切片路径>。
 目标：选择最小 YSS 技能集。
-请说明每个候选技能需要或不需要的理由，尤其是 yss-domain、yss-repository、yss-mybatis、yss-web-controller、yss-ui、yss-openapi-governance、api-integration。
+请说明每个候选技能需要或不需要的理由，尤其是 yss-domain、yss-repository、yss-mybatis、yss-web-controller、yss-ui、yss-openapi-governance、yss-api-integration。
 边界：不要实现代码，只输出技能路由、实施顺序、测试 seam 和验证建议。
 ```
 

package/template/docs/user-guide//347/224/237/345/221/275/345/221/250/346/234/237/346/234/200/344/275/263/345/256/236/350/267/265.md

@@ -258,7 +258,7 @@ Competitive Matrix
 
 | 场景 | 主技能 | 常见补充 |
 |---|---|---|
-| 新建完整 Vue 业务页面 | `yss-ui` | `yss-page-module-development`、`yss-openapi-governance`、`api-integration` |
+| 新建完整 Vue 业务页面 | `yss-ui` | `yss-page-module-development`、`yss-openapi-governance`、`yss-api-integration` |
 | YTable / YTree / YssFormily 页面 | `yss-ui` | `yss-use-table-height`、`yss-use-tree-height`、`yss-formily` |
 | 从零创建后端服务 | `yss-ddd-scaffold-generator` | 后续接 `yss-domain`、`yss-repository`、`yss-web-controller` |
 | 领域建模和状态规则 | `yss-domain` | — |

package/template/scripts/lib/scenario-checks.mjs

@@ -57,6 +57,11 @@ function validateInvocationBoundary(data) {
   ensure(routes?.["work-unit.discovery-requirements"]?.skills?.includes("grilling") && routes?.["work-unit.discovery-requirements"]?.skills?.includes("domain-modeling"), "需求分析工作单元缺少 grilling/domain-modeling");
   ensure(routes?.["work-unit.discovery-opportunity"]?.route_by?.market_or_competitor_fact === "competitive-intelligence" && routes["work-unit.discovery-opportunity"].route_by.technical_or_standard_fact === "research", "机会调研事实路由不准确");
   ensure(routes?.["work-unit.slice-implementation"]?.skills?.includes("tdd") && routes?.["work-unit.slice-implementation"]?.skills?.includes("yss-ui"), "原生实现工作单元缺少 TDD 或 UI 路由");
+  const frontendRoute = routes?.["work-unit.slice-implementation"]?.frontend_route;
+  ensure(frontendRoute?.primary_skill === "yss-ui" && frontendRoute?.page_orchestration_skill === "yss-page-module-development", "前端实现路由缺少 yss-ui 主入口或页面编排技能");
+  for (const impact of ["api_impact", "formily_impact", "table_impact", "tree_impact", "height_impact", "export_impact", "theme_impact"]) {
+    ensure(Array.isArray(frontendRoute?.conditional_skills?.[impact]) && frontendRoute.conditional_skills[impact].length > 0 && typeof frontendRoute.not_applicable_reasons?.[impact] === "string", `前端条件专项路由缺少 ${impact}`);
+  }
   ensure(routes?.["work-unit.frontend-implementation-verification"]?.skills?.includes("code-review") && routes?.["work-unit.frontend-implementation-verification"]?.applies_when === "ui_impact", "前端还原验证未绑定 UI fidelity 审查轴");
   for (const id of ["work-unit.spec-synthesis", "work-unit.ticket-decomposition", "work-unit.slice-implementation"]) {
     ensure(routes?.[id]?.native?.source === "yss-product-lifecycle" && routes[id].compatibility?.source === "mattpocock/skills" && routes[id].compatibility.formal_artifact_owner === "explicit-user-entry", `${id} 未分离原生执行定义与 Matt 兼容输入`);
@@ -70,6 +75,12 @@ function validateInvocationBoundary(data) {
 function validateWorkflowExecutionResult(payload, contract, workUnitRoutes) {
   for (const field of contract.required) ensure(Object.hasOwn(payload, field), `Workflow Execution Result 缺少 ${field}`);
   ensure(contract.result_values.includes(payload.result), "Workflow Execution Result result 无效");
+  if (Object.hasOwn(payload, "unavailable_skill")) {
+    ensure(payload.result === contract.unavailable_skill.blocking_result, "技能不可用必须将 Workflow Execution Result 标记为 blocked");
+    for (const field of contract.unavailable_skill.required) {
+      ensure(typeof payload.unavailable_skill?.[field] === "string" && payload.unavailable_skill[field].trim(), `unavailable_skill.${field} 无效`);
+    }
+  }
   for (const field of contract.workflow_reference.required) ensure(typeof payload.workflow_reference?.[field] === "string" && payload.workflow_reference[field].trim(), `workflow_reference.${field} 无效`);
   const workUnit = workUnitRoutes?.[payload.work_unit];
   ensure(workUnit, `未知 Workflow Execution Result work_unit: ${payload.work_unit}`);
@@ -189,6 +200,16 @@ export function runScenario(name) {
       blocking_signals: []
     };
     validateWorkflowExecutionResult(validResult, data.workflow_execution_result, data.work_unit_routes);
+    const unavailableResult = structuredClone(validResult);
+    unavailableResult.result = "blocked";
+    unavailableResult.unavailable_skill = { skill: "yss-ui", provider: "codex", fallback: "manual-review", resolution: "needs-human" };
+    unavailableResult.blocking_signals = ["missing_evidence"];
+    validateWorkflowExecutionResult(unavailableResult, data.workflow_execution_result, data.work_unit_routes);
+    const malformedUnavailable = structuredClone(unavailableResult);
+    delete malformedUnavailable.unavailable_skill.fallback;
+    let unavailableRejected = false;
+    try { validateWorkflowExecutionResult(malformedUnavailable, data.workflow_execution_result, data.work_unit_routes); } catch { unavailableRejected = true; }
+    ensure(unavailableRejected, "技能不可用结果缺少 fallback 时未被拒绝");
     const compatibleResult = structuredClone(validResult);
     compatibleResult.workflow_reference = { source: "mattpocock/skills", skill: "to-spec", invocation_mode: "reference" };
     validateWorkflowExecutionResult(compatibleResult, data.workflow_execution_result, data.work_unit_routes);

package/template/scripts/lib/skill-governance.mjs

@@ -0,0 +1,50 @@
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { loadSkillRegistry } from "./skill-registry.mjs";
+
+export const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
+
+function fail(message) {
+  throw new TypeError(message);
+}
+
+export function validateSkillGovernance({ read = (relative) => readFileSync(path.join(ROOT, relative), "utf8"), exists = (relative) => existsSync(path.join(ROOT, relative)) } = {}) {
+  const globalRules = read(".agents/rules/yss-ai-skills.md");
+  const tableSkill = read(".agents/skills/ytable-usage/SKILL.md");
+  const pageSkill = read(".agents/skills/yss-page-module-development/SKILL.md");
+
+  if (/toolbar-config\.custom.{0,30}(必须|必需)|必须.{0,30}toolbar-config\.custom/.test(globalRules)) {
+    fail("全局规则不得把 toolbar-config.custom 作为无条件要求");
+  }
+  for (const marker of ["主操作必须放入 `#toolbar-right`", "只有确实需要列设置时才使用", "toolbar-config"] ) {
+    if (!globalRules.includes(marker)) fail(`全局规则缺少条件化表格工具栏规则: ${marker}`);
+  }
+  for (const marker of ["无需配置 `:toolbar-config=\"{ custom: true }\"`", "仅在业务明确需要列设置时才传入"]) {
+    if (!tableSkill.includes(marker)) fail(`YTable 专项技能缺少条件化工具栏规则: ${marker}`);
+  }
+  if (!pageSkill.includes("只有确实需要列设置时才启用 `toolbar-config.custom`")) {
+    fail("页面模块 canonical 技能缺少条件化 toolbar-config 规则");
+  }
+
+  const registry = loadSkillRegistry();
+  const canonicalIds = new Set(registry.skills.map((skill) => skill.id));
+  const aliases = new Map(registry.skills.flatMap((skill) => skill.aliases.map((alias) => [alias, skill.id])));
+  const legacy = new Set(["api-integration", "page-module-development", "use-table-height", "use-tree-height", "yss-ui-business-page-generation"]);
+  for (const alias of legacy) {
+    if (exists(`.agents/skills/${alias}`)) fail(`legacy alias 不得存在独立 canonical 目录: ${alias}`);
+    if (!aliases.has(alias)) fail(`legacy alias 未登记: ${alias}`);
+  }
+  if (exists(".agents/skills/high-fidelity-html-prototype") || aliases.has("high-fidelity-html-prototype")) {
+    fail("high-fidelity-html-prototype 已退役，不得保留物理目录或运行时 alias");
+  }
+  for (const skill of registry.skills) {
+    if (!canonicalIds.has(skill.id)) fail(`注册表 canonical skill 无效: ${skill.id}`);
+    if (skill.maturity === "deprecated") {
+      for (const field of ["replaced_by", "migration_deadline", "cleanup_status"]) {
+        if (!skill[field] || typeof skill[field] !== "string") fail(`deprecated 技能缺少 ${field}: ${skill.id}`);
+      }
+    }
+  }
+  return { checked: true, legacy_aliases: legacy.size };
+}

package/template/scripts/lib/skill-registry.mjs

@@ -1,4 +1,4 @@
-import { readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import { parseDocument } from "../vendor/yaml.mjs";
 import { PROJECTION_ROOTS, ROOT } from "./skill-supply-chain.mjs";
@@ -6,9 +6,11 @@ import { PROJECTION_ROOTS, ROOT } from "./skill-supply-chain.mjs";
 export const DEFAULT_REGISTRY = path.join(ROOT, "docs/agents/yss-skill-registry.yaml");
 const LOCK_PATH = path.join(ROOT, "skills-lock.json");
 const ROUTER_CONTRACT = path.join(ROOT, ".agents/skills/yss-router/references/router-contract.yaml");
+const LIFECYCLE_CONTRACT = path.join(ROOT, ".agents/skills/yss-product-lifecycle/references/orchestration-contract.yaml");
 const LAYERS = new Set(["core", "specialist", "compatibility", "maintainer-only"]);
 const MATURITIES = new Set(["draft", "verified", "supported", "deprecated"]);
 const ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+const PLATFORM_ALIAS_PATTERN = /^[a-z0-9][a-z0-9-]*(?::[a-z0-9][a-z0-9-]*)?$/;
 
 function fail(message) {
   throw new TypeError(message);
@@ -45,7 +47,7 @@ function requireString(value, field) {
   if (typeof value !== "string" || !value.trim()) fail(`${field} 不能为空`);
 }
 
-export function validateSkillRegistry(registry, { lock, routerContract, skillSource } = {}) {
+export function validateSkillRegistry(registry, { lock, routerContract, lifecycleContract, skillSource } = {}) {
   if (!registry || typeof registry !== "object" || Array.isArray(registry)) fail("技能路由注册表必须是对象");
   if (registry.schema_version !== 1) fail("schema_version 必须为 1");
   if (registry.registry_id !== "yss.skill-routing") fail("registry_id 必须为 yss.skill-routing");
@@ -99,10 +101,14 @@ export function validateSkillRegistry(registry, { lock, routerContract, skillSou
     if (!MATURITIES.has(skill.maturity)) fail(`${skill.id} 未知 maturity: ${skill.maturity}`);
     if (typeof skill.instance_default_discoverable !== "boolean") fail(`${skill.id} 缺少 instance_default_discoverable`);
     if (skill.layer === "core" && skill.instance_default_discoverable !== true) fail(`${skill.id} 作为 core 必须默认可发现`);
-    if ((skill.layer === "specialist" || skill.layer === "maintainer-only") && skill.instance_default_discoverable !== false) {
+    if (["specialist", "maintainer-only", "compatibility"].includes(skill.layer) && skill.instance_default_discoverable !== false) {
       fail(`${skill.id} 作为 ${skill.layer} 不得默认可发现`);
     }
-    if (skill.maturity === "deprecated") requireString(skill.replaced_by, `${skill.id}.replaced_by`);
+    if (skill.maturity === "deprecated") {
+      requireString(skill.replaced_by, `${skill.id}.replaced_by`);
+      requireString(skill.migration_deadline, `${skill.id}.migration_deadline`);
+      requireString(skill.cleanup_status, `${skill.id}.cleanup_status`);
+    }
     if (skill.replaced_by && !ids.has(skill.replaced_by) && !skills.some((item) => item.id === skill.replaced_by)) {
       // resolved in second pass
     }
@@ -125,6 +131,7 @@ export function validateSkillRegistry(registry, { lock, routerContract, skillSou
   const platform = registry.platform_skills ?? [];
   if (!Array.isArray(platform)) fail("platform_skills 必须是数组");
   const platformIds = new Set();
+  const platformAliases = new Map();
   for (const skill of platform) {
     requireString(skill.id, "platform_skills.id");
     requireString(skill.root, `${skill.id}.root`);
@@ -132,9 +139,27 @@ export function validateSkillRegistry(registry, { lock, routerContract, skillSou
     if (typeof skill.instance_default_discoverable !== "boolean" || skill.instance_default_discoverable !== false) {
       fail(`${skill.id} 平台技能不得作为实例默认可发现`);
     }
+    if (!Array.isArray(skill.aliases) || skill.aliases.some((alias) => typeof alias !== "string" || !PLATFORM_ALIAS_PATTERN.test(alias))) {
+      fail(`${skill.id} aliases 必须是合法 id 数组`);
+    }
     if (platformIds.has(`${skill.root}:${skill.id}`)) fail(`重复平台技能: ${skill.root}/${skill.id}`);
     platformIds.add(`${skill.root}:${skill.id}`);
   }
+  const external = registry.external_skills ?? [];
+  if (!Array.isArray(external)) fail("external_skills 必须是数组");
+  const externalIds = new Set();
+  for (const skill of external) {
+    requireString(skill.id, "external_skills.id");
+    requireString(skill.source, `${skill.id}.source`);
+    if (externalIds.has(skill.id) || ids.has(skill.id) || aliases.has(skill.id) || platformAliases.has(skill.id)) fail(`external skill 冲突: ${skill.id}`);
+    externalIds.add(skill.id);
+  }
+  for (const skill of platform) {
+    for (const alias of skill.aliases) {
+      if (ids.has(alias) || aliases.has(alias) || platformAliases.has(alias)) fail(`alias 冲突: ${alias}`);
+      platformAliases.set(alias, `${skill.root}:${skill.id}`);
+    }
+  }
 
   if (lock) {
     const shared = Object.keys(lock.skills?.shared ?? {}).sort();
@@ -179,7 +204,58 @@ export function validateSkillRegistry(registry, { lock, routerContract, skillSou
     }
     const closures = Object.keys(routerContract.dependency_closure ?? {});
     for (const name of closures) {
-      if (!ids.has(name) && !aliases.has(name)) fail(`Router 闭包引用了未登记技能: ${name}`);
+      if (!ids.has(name) && !aliases.has(name) && !externalIds.has(name)) fail(`Router 闭包引用了未登记技能: ${name}`);
+    }
+    for (const dependencies of Object.values(routerContract.dependency_closure ?? {})) {
+      for (const names of Object.values(dependencies ?? {})) {
+        for (const name of names ?? []) if (!ids.has(name) && !aliases.has(name) && !externalIds.has(name)) fail(`Router 依赖引用了未登记技能: ${name}`);
+      }
+    }
+  }
+
+  if (lifecycleContract || existsSync(LIFECYCLE_CONTRACT)) {
+    const lifecycle = lifecycleContract ?? yamlFromFile(LIFECYCLE_CONTRACT, "生命周期编排合同");
+    const routes = lifecycle.work_unit_routes;
+    if (!routes || typeof routes !== "object" || Array.isArray(routes)) fail("生命周期编排合同缺少 work_unit_routes");
+    const resolve = (name) => {
+      if (ids.has(name)) return name;
+      if (aliases.has(name)) return aliases.get(name);
+      if (platformAliases.has(name)) return platformAliases.get(name);
+      if (externalIds.has(name)) return name;
+      if ([...platformIds].some((key) => key.endsWith(`:${name}`))) return name;
+      return null;
+    };
+    for (const [routeId, route] of Object.entries(routes)) {
+      if (!route || typeof route !== "object") fail(`${routeId} 生命周期路由必须是对象`);
+      requireString(route.primary_skill, `${routeId}.primary_skill`);
+      if (!Array.isArray(route.supporting_skills)) fail(`${routeId}.supporting_skills 必须是数组`);
+      if (!Array.isArray(route.skills) || route.skills.length === 0) fail(`${routeId}.skills 不能为空`);
+      if (!route.applies_when || !route.not_applicable_reason) fail(`${routeId} 缺少 applies_when 或 not_applicable_reason`);
+      for (const name of [route.primary_skill, ...route.supporting_skills, ...route.skills]) {
+        if (!resolve(name)) fail(`生命周期路由引用了未登记技能: ${routeId} -> ${name}`);
+      }
+      if (route.frontend_route) {
+        requireString(route.frontend_route.primary_skill, `${routeId}.frontend_route.primary_skill`);
+        requireString(route.frontend_route.page_orchestration_skill, `${routeId}.frontend_route.page_orchestration_skill`);
+        const conditional = route.frontend_route.conditional_skills;
+        if (!conditional || typeof conditional !== "object" || Array.isArray(conditional)) fail(`${routeId}.frontend_route.conditional_skills 必须是对象`);
+        for (const [impact, names] of Object.entries(conditional)) {
+          if (!Array.isArray(names) || names.length === 0) fail(`${routeId}.frontend_route.conditional_skills.${impact} 必须是非空数组`);
+          for (const name of names) if (!resolve(name)) fail(`前端条件路由引用了未登记技能: ${routeId}.${impact} -> ${name}`);
+          if (route.frontend_route.not_applicable_reasons && typeof route.frontend_route.not_applicable_reasons[impact] !== "string") {
+            fail(`${routeId}.frontend_route.not_applicable_reasons.${impact} 必须是字符串`);
+          }
+        }
+        if (!resolve(route.frontend_route.primary_skill) || !resolve(route.frontend_route.page_orchestration_skill)) {
+          fail(`${routeId}.frontend_route 主入口引用了未登记技能`);
+        }
+      }
+      if (routeId === "work-unit.prototype-design") {
+        if (!route.skills.includes("prototype-review") || !route.supporting_skills.includes("prototype-review")) {
+          fail("原型工作单元必须包含独立 prototype-review supporting skill");
+        }
+        if (route.primary_skill === "prototype-review") fail("prototype-review 必须作为独立 supporting skill，不得成为生命周期主技能");
+      }
     }
   }
 
@@ -193,6 +269,7 @@ export function validateDefaultSkillRegistry() {
   return validateSkillRegistry(registry, {
     lock,
     routerContract,
+    lifecycleContract: yamlFromFile(LIFECYCLE_CONTRACT, "生命周期编排合同"),
     skillSource: (id) => readFileSync(path.join(ROOT, ".agents/skills", id, "SKILL.md"), "utf8")
   });
 }

package/template/scripts/lib/skill-supply-chain.mjs

@@ -49,6 +49,10 @@ export function unlockedProjectionEntries(candidates, allowedNames, isTracked) {
   const allowed = new Set(allowedNames);
   return candidates.filter((candidate) => candidate.isDirectory() || candidate.isSymbolicLink()).filter((candidate) => !allowed.has(candidate.name) && isTracked(candidate.name));
 }
+export function unlockedCanonicalEntries(names, allowedNames, hasSkillMd = () => true) {
+  const allowed = new Set(allowedNames);
+  return names.filter((name) => !allowed.has(name) && !OBSOLETE.has(name) && hasSkillMd(name)).sort();
+}
 export function syncSkills({ check = false } = {}) {
   const lock = parseLock();
   const shared = sharedFromLock(lock);
@@ -141,7 +145,7 @@ export function updateSkillLock(arguments_ = process.argv.slice(2)) {
   const sharedNames = [...new Set([...existing, ...additions])].filter((name) => !removals.has(name) && !OBSOLETE.has(name)).sort();
   const absent = sharedNames.filter((name) => !lstatSafe(path.join(SOURCE_ROOT, name))?.isDirectory());
   if (absent.length) throw new TypeError(`锁文件声明的共享 skills 缺少权威内容: ${absent.join(", ")}`);
-  const unlocked = skillNames(SOURCE_ROOT).filter((name) => tracked(`.agents/skills/${name}`) && !sharedNames.includes(name) && !OBSOLETE.has(name));
+  const unlocked = unlockedCanonicalEntries(skillNames(SOURCE_ROOT), sharedNames, (name) => lstatSafe(path.join(SOURCE_ROOT, name, "SKILL.md"))?.isFile());
   if (unlocked.length) throw new TypeError(`发现未登记到 skills-lock.json 的已跟踪共享 skills: ${unlocked.join(", ")}\n确认新增后运行 scripts/update-skill-lock --add=<skill-name>`);
   const targets = [".agents/skills", ...PROJECTION_ROOTS];
   const shared = Object.fromEntries(sharedNames.map((name) => {

package/template/scripts/verify-governance-release

@@ -25,11 +25,13 @@ if (isTemplateSource(root)) {
     if (status === "proposed" && !/尚未|未实现|不构成|不能把/.test(body)) failures.push(`${relativePath} 的 proposed ADR 缺少未实施/非当前门禁说明`);
   }
 }
-for (const [relativePath, marker] of Object.entries({
-  "docs/adr/0003-machine-readable-lifecycle-registry.md": "状态：部分实施（Phase 1）",
-  "docs/adr/0006-stable-lifecycle-ids-and-generated-structure.md": "状态：部分实施（Phase 1）"
-})) {
-  if (!read(relativePath).includes(marker)) failures.push(`${relativePath} 未声明当前实现状态`);
+if (isTemplateSource(root)) {
+  for (const [relativePath, marker] of Object.entries({
+    ".template-source/adr/0003-machine-readable-lifecycle-registry.md": "状态：部分实施（Phase 1）",
+    ".template-source/adr/0006-stable-lifecycle-ids-and-generated-structure.md": "状态：部分实施（Phase 1）"
+  })) {
+    if (!read(relativePath).includes(marker)) failures.push(`${relativePath} 未声明当前实现状态`);
+  }
 }
 if (!read("scripts/verify-lifecycle-scenarios").includes("ROUTE_REGISTRY_IDS")) failures.push("生命周期场景未校验稳定 ID 映射");
 if (failures.length > 0) {

package/template/scripts/verify-skill-governance

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { validateSkillGovernance } from "./lib/skill-governance.mjs";
+
+try {
+  const result = validateSkillGovernance();
+  process.stdout.write(`技能规范冲突扫描通过（${result.legacy_aliases} 个兼容 alias）\n`);
+} catch (error) {
+  process.stderr.write(`技能规范冲突扫描失败: ${error.message}\n`);
+  process.exitCode = 1;
+}

package/template/scripts/verify-template

@@ -5,7 +5,7 @@ ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT_DIR"
 node -e 'const [major]=process.versions.node.split(".").map(Number); if (major < 22 || major >= 27) { console.error("模板工具需要 Node >=22 <27"); process.exit(1); }'
 
-required_files=(yss-project.yaml AGENTS.md CONTEXT.md skills-lock.json docs/agents/yss-skill-registry.yaml docs/process/lifecycle-registry.yaml docs/process/lifecycle-registry-baseline.json docs/process/maintenance-intensity.yaml docs/process/schemas/lifecycle-checkpoint.schema.json docs/process/schemas/frontend-implementation-evidence.schema.json docs/process/templates/lifecycle-checkpoint-template.yaml docs/process/templates/frontend-implementation-plan-template.yaml docs/process/templates/frontend-implementation-verification-template.yaml scripts/repository-mode scripts/implementation-path-policy scripts/repository-scope-policy scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/export-yss-skills)
+required_files=(yss-project.yaml AGENTS.md CONTEXT.md skills-lock.json docs/agents/yss-skill-registry.yaml docs/process/lifecycle-registry.yaml docs/process/lifecycle-registry-baseline.json docs/process/maintenance-intensity.yaml docs/process/schemas/lifecycle-checkpoint.schema.json docs/process/schemas/frontend-implementation-evidence.schema.json docs/process/templates/lifecycle-checkpoint-template.yaml docs/process/templates/frontend-implementation-plan-template.yaml docs/process/templates/frontend-implementation-verification-template.yaml scripts/repository-mode scripts/implementation-path-policy scripts/repository-scope-policy scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-skill-governance scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/export-yss-skills)
 for required in "${required_files[@]}"; do test -f "$required" || { echo "缺少模板必需文件: $required" >&2; exit 1; }; done
 
 repository_mode="$(scripts/repository-mode)"
@@ -19,6 +19,7 @@ fi
 scripts/sync-skills --check
 scripts/update-skill-lock --check
 scripts/verify-skill-registry
+scripts/verify-skill-governance
 scripts/verify-yss-dto-openapi-profile
 scripts/verify-yss-dto-openapi-scenarios
 scripts/verify-lifecycle-registry
@@ -38,7 +39,7 @@ scripts/verify-yss-ui-scenarios
 scripts/verify-openapi-yaml-first-scenarios
 scripts/verify-openapi-json-handoff-scenarios
 
-for entry in scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-lifecycle-scenarios scripts/verify-matt-yss-integration-scenarios scripts/verify-prototype-backend-scaffold-scenarios scripts/verify-yss-router-scenarios scripts/verify-openapi-yaml-first-scenarios scripts/verify-openapi-json-handoff-scenarios scripts/verify-repository-scope-scenarios scripts/export-yss-skills; do node --check "$entry"; done
+for entry in scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-skill-governance scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-lifecycle-scenarios scripts/verify-matt-yss-integration-scenarios scripts/verify-prototype-backend-scaffold-scenarios scripts/verify-yss-router-scenarios scripts/verify-openapi-yaml-first-scenarios scripts/verify-openapi-json-handoff-scenarios scripts/verify-repository-scope-scenarios scripts/export-yss-skills; do node --check "$entry"; done
 
 legacy_runtime="ru""by"
 script_roots=(scripts)