create-yss-spec 2.2.10 → 3.0.1

package/template/.codex/skills/yss-implementation-contract-compiler/references/yss-skill-execution-result.md

@@ -0,0 +1,69 @@
+# YSS Skill Execution Result
+
+核心 YSS skill 必须消费已批准合同版本，并返回：
+
+```yaml
+execution_result:
+  schema_version: 2
+  skill:
+  slice_id:
+  work_unit_id:
+  status: implemented
+  consumed_contract:
+    contract_ref:
+    contract_id:
+    contract_version:
+    registry_digest:
+    compiler_contract_digest:
+    quality_baseline_ref:
+    context_plan_ref:
+  changed_files:
+    - path:
+      contract_area: common | frontend | backend | contract | cross_repo
+  evidence_files:
+    - path:
+      evidence_type: code | test | generated | review | verification
+      behavior_ref:
+  verification_results:
+    - command:
+      result:
+      executed_at:
+  constraint_results:
+    - constraint:
+      status: passed | failed | not-applicable
+      evidence_ref:
+  doubt_driven_review:
+    status: not-applicable | completed | blocked
+    record_ref:
+  seam_deferred:
+    - risk:
+      owner:
+      follow_up_ticket:
+      verification_plan:
+      target_version_or_release_date:
+  deviations:
+    - rule:
+      reason:
+      approval_ref:
+  new_impacts:
+    - impact_type:
+      evidence_ref:
+  not_applicable_reason:
+```
+
+允许状态：`implemented`、`seam-deferred`、`drift`、`violation`、`not-applicable`。
+
+实现合同编译器必须验证：
+
+1. `consumed_contract.contract_version` 与当前批准版本一致，两个 resolution digest 与批准合同一致且保持 current。
+2. `changed_files` 全部位于工作单元和切片允许路径内。
+3. `expected_evidence_files` 全部存在并能回指行为。
+4. 验证命令包含实际结果和时间；计划命令不算证据。
+5. `seam_deferred` 有风险、责任人、补齐 Ticket、验证计划和目标版本 / 发布日期。
+6. `new_impacts` 非空时暂停并重路由。
+7. `drift` 触发 Architecture Re-check；`violation` 阻断 build。
+8. `status: not-applicable` 必须填写 `not_applicable_reason`；其他状态保留字段但可为空。
+
+专项 skill 自报 `implemented` 不等于最终通过，生命周期编排器和独立 Reviewer 必须复核。
+
+`verification_results` 不得为空，每项必须包含非空 `command`、`result` 和 `executed_at`。路径校验按完整目录边界判断，`apps/backend/project1-escape` 不属于 `apps/backend/project1/`；Harness 内路径还必须通过项目路径策略。完整重路由时旧合同必须标记 `stale`，新合同版本递增并保留旧合同引用、失效原因和触发器。

package/template/.codex/skills/yss-implementation-contract-compiler/tests/compiler-scenarios.test.mjs

@@ -0,0 +1,89 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import {
+  compileImplementationContract,
+  digestDocument,
+  evaluateContractFreshness,
+  loadCompilerContract,
+  validateExecutionResult
+} from "../../../../scripts/lib/implementation-contract-compiler.mjs";
+import { loadSkillRegistry } from "../../../../scripts/lib/skill-registry.mjs";
+
+const registry = loadSkillRegistry();
+const compilerContract = loadCompilerContract();
+const fixed = "2026-09-04T00:00:00.000Z";
+const compile = (input) => compileImplementationContract({ registry, compilerContract, compiledAt: fixed, ...input });
+
+test("combines narrow recipes once and preserves deterministic output", () => {
+  const input = {
+    recipeIds: ["backend.http-api", "backend.domain-behavior", "backend.persistence-mybatis"],
+    conditions: ["mybatis", "conversion", "pojo", "request-validation", "error-mapping"]
+  };
+  const first = compile(input);
+  const second = compile({ ...input, recipeIds: [...input.recipeIds].reverse(), conditions: [...input.conditions].reverse() });
+  assert.deepEqual(first, second);
+  assert.deepEqual(first.recipe_ids, ["backend.domain-behavior", "backend.persistence-mybatis", "backend.http-api"]);
+  for (const skill of ["yss-domain", "yss-application", "yss-repository", "yss-mybatis", "yss-web-controller", "yss-dto", "yss-validation", "yss-exception", "mapstruct", "lombok", "alibaba-java-code-style"]) {
+    assert.equal(first.required_skills.filter((candidate) => candidate === skill).length, 1, `${skill} should appear once`);
+  }
+});
+
+test("does not promote conditional or component dependencies without explicit input", () => {
+  const persistence = compile({ requiredCapabilities: ["layer.persistence"] });
+  assert.deepEqual(persistence.required_skills, ["alibaba-java-code-style", "yss-repository"]);
+  assert.equal(persistence.required_skills.includes("yss-mybatis"), false);
+  assert.equal(persistence.required_skills.includes("mapstruct"), false);
+  assert.equal(persistence.required_skills.includes("lombok"), false);
+
+  const validation = compile({ requiredCapabilities: ["contract.request-validation"] });
+  assert.deepEqual(validation.required_skills, ["yss-validation"]);
+  assert.equal(validation.required_skills.includes("yss-exception"), false);
+  assert.ok(validation.non_expanding_dependencies.some((edge) => edge.from === "yss-validation" && edge.skill === "yss-exception"));
+});
+
+test("loads only explicitly satisfied context-conditional dependencies", () => {
+  const persistence = compile({ requiredCapabilities: ["layer.persistence"], conditions: ["mybatis"] });
+  assert.equal(persistence.required_skills.includes("yss-mybatis"), true);
+  assert.equal(persistence.required_skills.includes("mapstruct"), false);
+  assert.equal(persistence.required_skills.includes("lombok"), false);
+});
+
+test("rejects recipes that reference skills and context-required cycles", () => {
+  const invalidRecipeRegistry = structuredClone(registry);
+  invalidRecipeRegistry.recipes[0].skills = ["yss-domain"];
+  assert.throws(() => compileImplementationContract({ registry: invalidRecipeRegistry, compilerContract, recipeIds: [invalidRecipeRegistry.recipes[0].id] }), /不得直接引用 skills/);
+
+  const cyclicRegistry = structuredClone(registry);
+  cyclicRegistry.skill_dependencies["alibaba-java-code-style"] = [{ skill: "yss-domain", type: "context-required" }];
+  assert.throws(() => compileImplementationContract({ registry: cyclicRegistry, compilerContract, requiredCapabilities: ["layer.domain"] }), /依赖循环/);
+});
+
+test("rejects removed ids and schema v1 without compatibility", () => {
+  assert.throws(() => compile({ recipeIds: ["yss-router"] }), /已移除 skill id/);
+  assert.throws(() => compileImplementationContract({ registry: { ...registry, schema_version: 1 }, compilerContract, requiredCapabilities: ["layer.domain"] }), /schema v1 已停止支持/);
+  assert.throws(() => compileImplementationContract({ registry, compilerContract: { ...compilerContract, schema_version: 1 }, requiredCapabilities: ["layer.domain"] }), /schema v1 已停止支持/);
+});
+
+test("marks digest drift stale and validates v2 execution evidence", () => {
+  const resolution = compile({ requiredCapabilities: ["layer.domain"] });
+  const contract = { schema_version: 2, contract_id: "slice-1", contract_version: 1, resolution };
+  assert.deepEqual(evaluateContractFreshness(contract, { registry, compilerContract }), { freshness: "current", reasons: [] });
+  const changedRegistry = structuredClone(registry);
+  changedRegistry.description += " changed";
+  assert.equal(evaluateContractFreshness(contract, { registry: changedRegistry, compilerContract }).freshness, "stale");
+
+  const result = {
+    schema_version: 2,
+    status: "implemented",
+    consumed_contract: {
+      contract_id: "slice-1",
+      contract_version: 1,
+      registry_digest: digestDocument(registry),
+      compiler_contract_digest: digestDocument(compilerContract)
+    },
+    verification_results: [{ command: "./mvnw test", exit_code: 0, executed_at: fixed }],
+    new_impacts: []
+  };
+  assert.deepEqual(validateExecutionResult(result, contract, { registry, compilerContract }), { status: "accepted", blockers: [] });
+  assert.deepEqual(validateExecutionResult({ ...result, new_impacts: [{ impact_type: "cache" }] }, contract, { registry, compilerContract }), { status: "blocked", blockers: ["new-impacts"] });
+});

package/template/.codex/skills/yss-mvc-scaffold-generator/SKILL.md

@@ -0,0 +1,87 @@
+---
+name: yss-mvc-scaffold-generator
+description: 从空目录初始化独立 Git 管理的 YSS Java 8 MVC 数据分析 project-instance，生成固定六模块、YSS 标准组件、Oracle/OceanBase Oracle 与 Mock HTTP API；不用于通用 DDD 服务。
+---
+
+# YSS MVC Scaffold Generator
+
+本 Skill 是 YSS MVC 数据分析项目的确定性机械生成器。它生成独立 `project-instance`、独立 Git 仓库，并将项目根直接作为 Maven 工程根，包含 `server`、`core`、`client`、`repository`、`adapter`、`feign-client` 六模块；业务功能仍须回到 `yss-product-lifecycle` 与 `yss-implementation-contract-compiler` 按垂直切片实现。
+
+生成器编排入口位于 `scripts/generate_project.mjs`，参数与环境解析、skillUtils 文件操作、项目治理封装和 Maven/Java 模板分别位于 `scripts/lib/`。初始化阶段只写入 staging 目录并在成功后原子重命名，不执行 Maven 或网络依赖下载。
+
+用户以“初始化新项目”进入时，由 `product-service-artifacts` 调用本生成器并默认附加 `docs/service/` 服务级研发产物；不要要求用户在提示词中另行说明“初始化产物”。未提供职责时生成 `skeleton`，不阻断工程创建。
+
+## 输入
+
+- `project-name`：小写连字符项目名。
+- `base-package`：合法 Java 包名。
+- `target-dir`：最终项目根目录，必须显式给出。
+- `database`：支持 `oracle`、`oceanbase-oracle`，默认 `oracle`。
+- `with-mock`：生成 `mock` Profile、Mock 执行器及 HTTP 冒烟测试。
+- `maven-settings`：可选的外部 Maven settings 绝对路径，仅用于后续验证；未显式提供时依次读取 `YSS_MAVEN_SETTINGS` 和用户目录 `.m2/settings.xml`。不复制进项目、不写入生成清单。
+
+## 执行
+
+先预演：
+
+```bash
+node scripts/generate_project.mjs --project-name mvc-analysis-item1 --base-package com.yss.dataanalysis.item1 --target-dir /path/to/mvc-analysis-item1 --database oracle --with-mock --maven-settings /path/to/settings.xml --dry-run
+```
+
+确认目标目录后去掉 `--dry-run`。生成后运行：
+
+```bash
+node scripts/verify_project.mjs --project-root /path/to/mvc-analysis-item1
+cd /path/to/mvc-analysis-item1
+./mvnw validate
+./mvnw test
+./mvnw package
+./mvnw spring-boot:run -pl mvc-analysis-item1-server -Dspring-boot.run.profiles=mock
+```
+
+Windows 使用 `mvnw.cmd`。指定外部 settings 时，Maven 命令必须加 `-s <settings.xml>`。启动后对 `POST /api/analysis/query` 执行 HTTP 冒烟测试。
+
+生成项目进入 API/Controller 实现后，登记命令必须包含 Java Web/Javadoc 检查、`fmt:check`、测试和构建。Smart-doc 仅作为人工按需从 Controller 生成辅助文档的工具，不属于默认 AI Coding 验证链路；只有用户明确要求生成 Smart-doc 文档时才执行对应 goal。
+
+生成结果包含根 `yss-project.yaml`、`AGENTS.md`、`CONTEXT.md`、生命周期事实源、共享 skills、本地 Ticket 入口、`external-repository` 实现仓库登记和 `.gitignore`。生成器执行 `git init --initial-branch=main`；旧版 Git自动回退到 `git init` 后重命名分支。只初始化仓库，不创建 commit 或 remote。
+
+## 硬约束
+
+- `target-dir` 是最终项目根，不在其下再次创建项目名目录。
+- Windows 下优先使用纯 ASCII、长度可控且不属于其他项目 Git 根的父目录（例如 `C:\\projects`）；旧 Maven 插件在非 ASCII 长路径上可能产生 reactor classpath 编码错误。
+- 非空目标目录拒绝生成；本 Skill 不提供隐式覆盖或删除。
+- 目标目录必须成为独立 Git 根；生成前必须能执行 `git --version`，生成后必须验证 Git 根等于 `target-dir`、分支为 `main`、commit 数为零且 remote 为空。
+- 生成前必须从 `git config --get user.name` 读取非空作者名；作者名包含换行或 `*/` 时拒绝生成。生成的 Controller 类和公开接口方法以该值填写 `@author`，不得固定为 `system`。
+- 项目根同时是 Maven 工程根和独立 Git 根，固定登记为 `repository_scope: external-repository`、`project_root: .`；六模块直接位于项目根目录。
+- 生成内容先写入同父目录 staging，全部步骤成功后再原子重命名；失败时只清理本次 staging，不留下不可重试的半成品。Maven 依赖解析明确延后到验证阶段；settings 缺失只记录 `maven-default` / `maven_settings_available=false`，不会压缩或截断生成的文件结构。
+- 每个项目持有自己的 `project-instance` 身份与业务资产；不得为了新项目改写模板工具仓库的项目名称或业务上下文。
+- 模块名固定使用正确拼写 `feign-client`；旧项目中的 `fegin-client` 只作为迁移来源，不继续传播。
+- Mock 与 Oracle 使用同一 Controller 和 DTO 契约，只替换 `AnalysisQueryExecutor` 实现。
+- Mock 仅用于本地联调和契约验证，不得携带真实凭据或生产数据。
+- 启用 Mock 时必须生成 `bootstrap-mock.yml`，并在 Spring Cloud Bootstrap 阶段同时禁用 Nacos Discovery、Nacos Config 和 Config import-check；不能只在 `application-mock.yml` 中禁用。
+- `bootstrap.yml` 的默认顺序为 `${app.env:dev},datasource,nacos,<database-profile>,mock`，`mock` 必须最后以覆盖 Nacos Bootstrap 配置，且 profile 列表不得有尾随逗号。未启用 Mock 时不生成、不激活 `mock`。
+- Mock 与数据库 profile 同时出现时，Mock 执行器优先；数据库执行器使用 `<database-profile> & !mock` 表达式，禁止两个 `AnalysisQueryExecutor` 同时注册。
+- Mock 的 `application-mock.yml` 必须关闭 Leaf Segment/Snowflake，并在 `spring.autoconfigure.exclude` 中排除 `DataSourceAutoConfiguration`、`MybatisPlusConfiguration` 和 `LeafDataSourceConfiguration`；组件扫描同时排除 `com.yss.cloud.mybatis..*`、`com.yss.cloud.sankuai..*`，`@EnableDistributedId` 与 `MapperConfiguration` 只允许在 `!mock` 配置类中加载，确保无数据库时 Mock 测试和 HTTP 冒烟可运行。
+- Oracle Adapter 只保留可编译 seam；连接信息通过环境变量注入，生成器不写真实账号密码。
+- 工程版本、YSS 父 POM 和组件 BOM 固定为 `2.0.0-SNAPSHOT`，运行时固定 Java 8。
+- 标准能力默认包含审计日志、分布式 ID、Excel、Nacos、Redis Cache、OpenFeign、Smart-doc、用户信息和 Actuator。
+- server POM 必须保留 `spring-boot-maven-plugin`和默认激活的 `nacos` profile；Nacos 依赖只在该 profile 中声明。
+- `bootstrap-nacos.yml` 默认使用 `${nacosserver:192.168.165.58:8848}`、`${nacos_group:yss-dm}` 和 `${namespace:yss-datamiddle}`，Discovery/Config 在 `nacos` profile 中开启，并由 `bootstrap-mock.yml` 在 Mock 模式覆盖关闭。
+- Smart-doc 使用 `assets/smart-doc.json.template`的完整配置并动态生成项目名、Controller 包和修订时间；Torna Token 与内网地址不进入生成项目。Smart-doc 插件保留跨模块 `includes`，但不绑定 Maven `executions`，不进入默认 `validate` / `test` / `package` / CI / AI Coding 验证命令。
+- Logback 使用 `assets/logback-spring.xml.template`；`dev,mock` 与 `uat,pro,oracle,oceanbase-oracle` 必须是并列 profile，项目名和基础包动态替换。
+- Controller 类和公开接口方法必须按真实业务语义生成 Javadoc，`@author` 使用生成时读取的 Git 用户名，`@date` 使用 `yyyy/MM/dd HH:mm`，方法按签名完整生成 `@param`和 `@return`。
+- API 实现不得交付单行 Javadoc block tag、Mapping 注解/方法同行或方法体单行压缩代码；相关规范由生成项目中的工程约定和实际验证命令约束。
+- API 完成证据必须包含 `yss-skill-execution-result.yaml` 和 `fresh-verification.md`，并记录 Controller 路由、DTO、响应 Wrapper、错误响应及契约测试与冻结 OpenAPI 的一致性。Smart-doc 输出不是 OpenAPI Freeze、契约审查或功能完成证据。
+- Maven settings 始终是项目外部的私密输入；不得复制到目标目录、写入 README/生成清单或提交 Git。
+- 持久层固定使用 YSS MyBatis-Plus；标准 CRUD 使用 MP，复杂 SQL 写入 mapper.xml，主键策略为 `IdType.ASSIGN_ID`。
+- 生成范围仅包含工程骨架、示例 Mock seam 和验证测试，不声称业务 Spec、OpenAPI Freeze 或 Slice Implementation Contract 已批准。
+- 完成结论必须包含结构验证，以及实际执行的 Maven 命令；无法下载依赖时如实记录环境阻塞。
+
+模块职责和依赖方向见 [references/architecture.md](references/architecture.md)。
+
+## API 契约与人工文档边界
+
+- 冻结的 OpenAPI 3.1 YAML 是接口契约的唯一事实来源；`yss-openapi-governance` 负责契约治理与 Freeze，`yss-openapi-draft-review` 负责冻结前审查，`yss-web-controller` 负责按冻结契约实现 Controller。
+- Smart-doc 是人工可选的源码文档工具。其输出只用于查看当前 Controller 实现，不得反向定义、覆盖或批准冻结 OpenAPI。
+- AI 默认不执行 `smart-doc:html`、`smart-doc:openapi` 或 `smart-doc:torna-rest`。`torna-rest` 涉及外部写入，执行前还必须获得对应授权。
+- 本生成器只用于空目录初始化。生成项目使用已物化的 `project-instance` 资产和实现 skills 开发后续需求；其共享 `skillUtils` 不应再分发 `yss-mvc-scaffold-generator` 本身。

package/template/.codex/skills/yss-mvc-scaffold-generator/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "YSS MVC Scaffold Generator"
+  short_description: "初始化独立 Git 的 YSS MVC 数据分析项目实例"
+  default_prompt: "Use $yss-mvc-scaffold-generator to initialize an independent Git-managed YSS MVC data-analysis project-instance with six Oracle backend modules and a mock HTTP profile."

package/template/.codex/skills/yss-mvc-scaffold-generator/assets/logback-spring.xml.template

@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+  <include resource="org/springframework/boot/logging/logback/defaults.xml"/>
+  <include resource="org/springframework/boot/logging/logback/console-appender.xml"/>
+
+  <property name="CONSOLE_LOG_PATTERN"
+            value="%clr(%d{yyyy-MM-dd HH:mm:ss.SSS}){faint} %clr(${LOG_LEVEL_PATTERN:-%5p}) %clr(${PID:- }){magenta} %clr(---){faint} %clr([%15.15t]){faint} %clr(%-40.40logger{39}){cyan} %clr(:){faint} %m%n${LOG_EXCEPTION_CONVERSION_WORD:-%wEx}"/>
+  <springProperty name="APP_NAME" scope="context" source="spring.application.name" defaultValue="{{PROJECT_NAME}}"/>
+  <springProperty name="LOG_PATH" scope="context" source="logging.file.path" defaultValue="logs"/>
+
+  <springProfile name="dev,mock">
+    <logger level="DEBUG" name="org.apache.ibatis"/>
+    <logger level="DEBUG" name="{{BASE_PACKAGE}}"/>
+    <root level="INFO">
+      <appender-ref ref="CONSOLE"/>
+    </root>
+  </springProfile>
+
+  <springProfile name="uat,pro,oracle,oceanbase-oracle">
+    <logger level="INFO" name="org.apache.ibatis"/>
+    <logger level="INFO" name="com.yss.cloud.log"/>
+    <logger level="INFO" name="com.yss.cloud.breaker"/>
+    <logger level="INFO" name="com.yss.cloud.exception"/>
+    <logger level="INFO" name="{{BASE_PACKAGE}}"/>
+    <logger level="INFO" name="com.alibaba"/>
+    <logger level="INFO" name="org.apache.commons"/>
+    <logger level="INFO" name="org.springframework"/>
+    <appender name="FILE" class="ch.qos.logback.core.rolling.RollingFileAppender">
+      <encoder>
+        <pattern>%d{yy-MM-dd.HH:mm:ss.SSS} [%-16t] %-5p %-22c{0} - %m%n</pattern>
+      </encoder>
+      <prudent>true</prudent>
+      <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">
+        <fileNamePattern>${LOG_PATH}/${APP_NAME}_%d{yyyyMMdd}_%i.log</fileNamePattern>
+        <maxHistory>7</maxHistory>
+        <timeBasedFileNamingAndTriggeringPolicy class="ch.qos.logback.core.rolling.SizeAndTimeBasedFNATP">
+          <maxFileSize>100MB</maxFileSize>
+        </timeBasedFileNamingAndTriggeringPolicy>
+      </rollingPolicy>
+    </appender>
+    <root level="INFO">
+      <appender-ref ref="FILE"/>
+      <appender-ref ref="CONSOLE"/>
+    </root>
+  </springProfile>
+
+  <root level="INFO">
+    <appender-ref ref="CONSOLE"/>
+  </root>
+</configuration>

package/template/.codex/skills/yss-mvc-scaffold-generator/assets/smart-doc.json.template

@@ -0,0 +1,42 @@
+{
+  "serverUrl": "http://localhost:8080",
+  "pathPrefix": "",
+  "isStrict": true,
+  "allInOne": true,
+  "outPath": "target/openapi",
+  "coverOld": true,
+  "createDebugPage": true,
+  "packageFilters": "{{BASE_PACKAGE}}.server.controller.*",
+  "md5EncryptedHtmlName": false,
+  "style": "xt256",
+  "projectName": "{{PROJECT_NAME}}",
+  "skipTransientField": true,
+  "sortByTitle": false,
+  "ignoreRequestParams": [
+    "com.yss.cloud.excel.annotation.RequestExcel",
+    "com.yss.cloud.excel.ExcelDataRequest"
+  ],
+  "showAuthor": true,
+  "requestFieldToUnderline": false,
+  "responseFieldToUnderline": false,
+  "inlineEnum": true,
+  "recursionLimit": 7,
+  "allInOneDocFileName": "{{PROJECT_NAME}}-v2.0.0",
+  "requestExample": true,
+  "responseExample": true,
+  "displayActualType": false,
+  "componentType": "NORMAL",
+  "appToken": "",
+  "openUrl": "",
+  "debugEnvName": "local",
+  "debugEnvUrl": "http://localhost:8080",
+  "revisionLogs": [
+    {
+      "version": "2.0.0",
+      "revisionTime": "{{GENERATED_AT}}",
+      "status": "create",
+      "author": "system",
+      "remarks": "项目初始化版本v2.0.0"
+    }
+  ]
+}

package/template/.codex/skills/yss-mvc-scaffold-generator/references/architecture.md

@@ -0,0 +1,28 @@
+# 固定架构
+
+| 模块 | 职责 |
+|---|---|
+| `client` | HTTP DTO 与稳定调用契约 |
+| `core` | 查询用例和 `AnalysisQueryExecutor` seam |
+| `repository` | 查询定义、元数据和后续持久化扩展 |
+| `adapter` | Oracle 与 Mock 执行器实现 |
+| `feign-client` | 面向其他服务的客户端契约扩展点 |
+| `server` | Spring Boot 装配和 REST Controller |
+
+依赖方向：
+
+```text
+server -> core + adapter + client
+core -> client
+repository -> client
+adapter -> core + client
+feign-client -> client
+```
+
+`core` 不依赖 Spring MVC、Oracle 驱动或具体数据源。Mock 和 Oracle 不能形成两套 HTTP 接口；二者只在 `AnalysisQueryExecutor` 的实现与 Profile 上不同。
+
+## 项目边界
+
+`target-dir` 同时是 `project-instance`、独立 Git 根和 Maven 聚合项目根。六个模块直接位于项目根；模板工具仓库只提供生成器；每个生成项目自行持有生命周期事实源、共享 skills、业务上下文、草案目录及 `external-repository` 实现仓库登记。Git 初始化只建立 `main` 分支，不创建 commit、remote 或跨项目父仓关系。
+
+工程基线固定为 Java 8、项目版本 `2.0.0-SNAPSHOT`、`com.yss.cloud:yss-cloud-microservice:2.0.0-SNAPSHOT` 父 POM 和同版本 `yss-components-bom`。标准预设包含审计、分布式 ID、Excel、Nacos、Redis Cache、OpenFeign、Smart-doc、Userinfo、Actuator 与 Mock；持久层使用 YSS MyBatis-Plus，数据库在 Oracle 与 OceanBase Oracle 中选择且驱动互斥。Smart-doc 只是人工按需生成 Controller 辅助文档的工具，不绑定 Maven 生命周期，不进入默认 AI Coding 验证链路，也不替代冻结的 OpenAPI 3.1 YAML。

package/template/.codex/skills/yss-mvc-scaffold-generator/scripts/generate_project.mjs

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+/** YSS MVC 脚手架编排入口；参数、文件、模板和项目治理分别位于 scripts/lib。 */
+import { cp, mkdir, mkdtemp, rename, rm, rmdir } from "node:fs/promises";
+import path from "node:path";
+
+import {
+  MODULES,
+  SHARED_SKILLS_ROOT,
+  fail,
+  parseArgs,
+  assertGitAvailable,
+  resolveGitAuthor,
+  resolveMavenSettings,
+  initializeGit,
+  exists,
+} from "./lib/runtime.mjs";
+import { assertEmpty, ensureSkillUtils, put, renderAsset } from "./lib/storage.mjs";
+import { writeProjectEnvelope } from "./lib/envelope.mjs";
+import { modulePom, parentPom, writeJavaSources } from "./lib/templates.mjs";
+
+const SKILL_ID = "yss-mvc-scaffold-generator";
+let generatedJavadocAuthor;
+
+function usage() {
+  console.log(`YSS MVC 脚手架生成器\n\n用法: node scripts/generate_project.mjs --project-name <name> --base-package <package> --target-dir <dir> [选项]\n\n选项: --database oracle|oceanbase-oracle --with-mock --maven-settings <path> --dry-run`);
+}
+
+async function writeGenerated(root, relative, content) {
+  await put(root, relative, content, generatedJavadocAuthor);
+}
+
+async function copyWrapper(root) {
+  const source = path.join(SHARED_SKILLS_ROOT, "yss-ddd-scaffold-generator", "assets", "wrapper");
+  if (!await exists(source)) fail(`Maven Wrapper 资产不存在: ${source}`);
+  await cp(source, root, { recursive: true });
+}
+
+function buildPlan(o, skillUtils, mavenSettings) {
+  const driver = o.database === "oceanbase-oracle" ? "com.oceanbase:oceanbase-client:2.4.3" : "com.oracle.database.jdbc:ojdbc8:19.8.0.0";
+  return {
+    project_name: o.projectName,
+    project_version: "2.0.0-SNAPSHOT",
+    base_package: o.basePackage,
+    target_dir: o.targetDir,
+    backend_root: ".",
+    skill_utils_dir: path.relative(o.targetDir, skillUtils.path).replaceAll(path.sep, "/"),
+    skill_utils_created: skillUtils.created,
+    skill_utils_refreshed: skillUtils.refreshed,
+    skill_utils_backup: skillUtils.backup,
+    repository_scope: "external-repository",
+    database: o.database,
+    database_driver: driver,
+    runtime_java: "8",
+    parent_pom: "com.yss.cloud:yss-cloud-microservice:2.0.0-SNAPSHOT",
+    components_bom: "com.yss.cloud:yss-components-bom:2.0.0-SNAPSHOT",
+    persistence_profile: "yss-mybatis-plus",
+    id_strategy: "ASSIGN_ID",
+    javadoc_author: o.gitAuthor,
+    maven_settings_mode: "external",
+    maven_settings_source: mavenSettings.source,
+    maven_settings_available: mavenSettings.available,
+    maven_settings_required: mavenSettings.available,
+    dependency_resolution: "deferred",
+    network_access_during_generation: "disabled",
+    features: ["audit", "distributed-id", "excel", "nacos", "redis", "openfeign", "smart-doc", "userinfo", "actuator"],
+    modules: MODULES,
+    mock_enabled: o.withMock,
+    project_instance: true,
+    git_initialized: true,
+    default_branch: "main",
+    endpoint: o.withMock ? "POST /api/analysis/query" : null
+  };
+}
+
+async function generate(o) {
+  await assertEmpty(o.targetDir);
+  const skillUtils = await ensureSkillUtils(o.targetDir, { apply: !o.dryRun });
+  assertGitAvailable();
+  o.gitAuthor = resolveGitAuthor();
+  generatedJavadocAuthor = o.gitAuthor;
+  const mavenSettings = await resolveMavenSettings(o);
+  const plan = buildPlan(o, skillUtils, mavenSettings);
+  if (o.dryRun) {
+    console.log(JSON.stringify({ mode: "dry-run", ...plan }, null, 2));
+    return;
+  }
+
+  const targetParent = path.dirname(o.targetDir);
+  await mkdir(targetParent, { recursive: true });
+  const staging = await mkdtemp(path.join(targetParent, `.${path.basename(o.targetDir)}.staging-`));
+  const work = { ...o, targetDir: staging, modules: MODULES };
+  try {
+    for (const module of MODULES) {
+      await writeGenerated(work.targetDir, `${module}/pom.xml`, modulePom(work, module));
+      await mkdir(path.join(work.targetDir, module, "src/main/resources"), { recursive: true });
+    }
+    await writeGenerated(work.targetDir, "pom.xml", parentPom(work));
+    await writeJavaSources(work, writeGenerated);
+    const activeProfiles = `\${app.env:dev},datasource,nacos,${o.database === "oceanbase-oracle" ? "oceanbase-oracle" : "oracle"}${o.withMock ? ",mock" : ""}`;
+    await writeGenerated(work.targetDir, "server/src/main/resources/bootstrap.yml", `server:\n  port: \${SERVER_PORT:8080}\nspring:\n  application:\n    name: \${APP_NAME:${o.projectName}}\n  profiles:\n    active: ${activeProfiles}\n  main:\n    allow-bean-definition-overriding: true\n  servlet:\n    multipart:\n      max-file-size: \${MAX_FILE_SIZE:100MB}\n      max-request-size: \${MAX_REQUEST_SIZE:100MB}`);
+    await writeGenerated(work.targetDir, "server/src/main/resources/bootstrap-nacos.yml", `spring:\n  cloud:\n    nacos:\n      discovery:\n        server-addr: \${nacosserver:192.168.165.58:8848}\n        group: \${nacos_group:yss-dm}\n        namespace: \${namespace:yss-datamiddle}\n        enabled: true\n      config:\n        import-check:\n          enabled: false\n        server-addr: \${nacosserver:192.168.165.58:8848}\n        namespace: \${namespace:yss-datamiddle}\n        group: \${nacos_group:yss-dm}\n        file-extension: yml\n        enabled: true`);
+    if (o.withMock) await writeGenerated(work.targetDir, "server/src/main/resources/bootstrap-mock.yml", `spring:\n  cloud:\n    nacos:\n      discovery:\n        enabled: false\n      config:\n        enabled: false\n        import-check:\n          enabled: false`);
+    await writeGenerated(work.targetDir, "server/src/main/resources/application-mock.yml", `spring:\n  autoconfigure:\n    exclude:\n      - org.springframework.boot.autoconfigure.jdbc.DataSourceAutoConfiguration\n      - com.yss.cloud.mybatis.MybatisPlusConfiguration\n      - com.yss.cloud.sankuai.config.LeafDataSourceConfiguration\n  leaf:\n    leafSegmentEnable: false\n    leafSnowflakeEnable: false\nyss:\n  audit:\n    enabled: false`);
+    const driver = o.database === "oceanbase-oracle" ? "com.oceanbase.jdbc.Driver" : "oracle.jdbc.OracleDriver";
+    await writeGenerated(work.targetDir, `server/src/main/resources/application-${o.database}.yml`, `spring:\n  datasource:\n    driver-class-name: ${driver}\n    url: \${DB_URL:}\n    username: \${DB_USERNAME:}\n    password: \${DB_PASSWORD:}\nyss:\n  id:\n    strategy: ASSIGN_ID`);
+    await writeGenerated(work.targetDir, "server/src/main/resources/logback-spring.xml", await renderAsset("logback-spring.xml.template", { PROJECT_NAME: o.projectName, BASE_PACKAGE: o.basePackage }));
+    await writeGenerated(work.targetDir, "server/src/main/resources/smart-doc.json", await renderAsset("smart-doc.json.template", { PROJECT_NAME: o.projectName, BASE_PACKAGE: o.basePackage, GENERATED_AT: new Date().toISOString() }));
+    await writeGenerated(staging, "README.md", `# ${o.projectName}\n\n项目根即 Maven 后端工程根，固定模块：${MODULES.join("、")}。\n\n## 依赖解析\n\n初始化阶段只生成文件和 Git 根，不执行 Maven，不下载依赖。未提供 settings 时仍会完整生成；后续验证时请使用 \`mvnw.cmd -s <settings.xml> validate\`（Windows）或 \`./mvnw -s <settings.xml> validate\`（Unix）。`);
+    await writeProjectEnvelope(work);
+    await copyWrapper(work.targetDir);
+    if (process.env.NODE_ENV === "test" && process.env.YSS_SCAFFOLD_TEST_FAIL_AFTER_STAGING === "1") fail("测试注入：staging 后失败");
+    initializeGit(staging);
+    await writeGenerated(staging, ".yss/scaffold-generation.json", JSON.stringify({ schema_version: 1, skill: SKILL_ID, generation_mode: "controlled-generation", generated_at: new Date().toISOString(), ...plan }, null, 2));
+    if (process.env.NODE_ENV === "test" && process.env.YSS_SCAFFOLD_TEST_WRITE_TARGET_DURING_STAGING === "1") await writeGenerated(o.targetDir, "keep.txt", "concurrent content");
+    if (await exists(o.targetDir)) await rmdir(o.targetDir);
+    await rename(staging, o.targetDir);
+  } catch (error) {
+    if (await exists(staging)) await rm(staging, { recursive: true, force: true });
+    throw error;
+  }
+  console.log(JSON.stringify({ mode: "generated", ...plan }, null, 2));
+}
+
+async function main() {
+  try {
+    const options = parseArgs(process.argv.slice(2));
+    if (options.help) { usage(); return 0; }
+    await generate(options);
+    return 0;
+  } catch (error) {
+    process.stderr.write(`\n❌ 生成失败: ${error.message}\n`);
+    return 1;
+  }
+}
+
+process.exitCode = await main();