create-yss-spec 2.2.2 → 2.2.3

package/template/scripts/verify-digital-human-roles-scenarios

@@ -0,0 +1,147 @@
+#!/usr/bin/env node
+import { validateDefaultDigitalHumanRoles, validateDigitalHumanRoles, loadDigitalHumanRoles, skillIdsFromRegistry } from "./lib/digital-human-roles.mjs";
+import { loadRegistry } from "./lib/lifecycle-registry.mjs";
+import { loadSkillRegistry } from "./lib/skill-registry.mjs";
+import { validateApprovalRecord, validateApprovalRecordFile } from "./lib/approval-record.mjs";
+
+function clone() {
+  return structuredClone(loadDigitalHumanRoles());
+}
+
+function deps() {
+  const lifecycle = loadRegistry();
+  const skills = loadSkillRegistry();
+  const ids = (records) => new Set(records.map((record) => record.id));
+  return {
+    skillIds: skillIdsFromRegistry(skills),
+    stageIds: ids(lifecycle.stages),
+    gateIds: ids(lifecycle.gates),
+    artifactIds: ids(lifecycle.artifacts),
+    evidenceIds: ids(lifecycle.evidence),
+    workUnitIds: ids(lifecycle.work_units),
+    skillRegistry: skills
+  };
+}
+
+function mustFail(doc, pattern, label) {
+  let failed = false;
+  let message = "";
+  try {
+    validateDigitalHumanRoles(doc, deps());
+  } catch (error) {
+    failed = true;
+    message = error.message;
+  }
+  if (!failed) throw new TypeError(`错误配置未被拒绝: ${label}`);
+  if (!pattern.test(message)) throw new TypeError(`${label} 失败原因不符合预期: ${message}`);
+}
+
+validateDefaultDigitalHumanRoles();
+
+const seven = [
+  "role.lifecycle-orchestrator",
+  "role.requirements-manager",
+  "role.product-manager",
+  "role.business",
+  "role.frontend-engineer",
+  "role.backend-engineer",
+  "role.test-engineer"
+];
+
+const genericAllowsSeven = clone();
+genericAllowsSeven.stage_groups[0].members = seven;
+validateDigitalHumanRoles(genericAllowsSeven, deps());
+
+const grokForbidsSeven = clone();
+grokForbidsSeven.stage_groups[0].members = seven;
+grokForbidsSeven.runtimes.find((runtime) => runtime.id === "runtime.grok").overflow = "forbid";
+mustFail(grokForbidsSeven, /禁止超过 6 人/, "Grok 适配器在 overflow=forbid 时拒绝七人协作组");
+
+const coupled = clone();
+coupled.roles[0].grok_title = "legacy";
+mustFail(coupled, /平台耦合字段/, "角色上残留 grok_title");
+
+const unknownSkill = clone();
+unknownSkill.roles[0].core_skills = ["not-a-registered-skill"];
+mustFail(unknownSkill, /未登记技能/, "未知技能");
+
+const overlap = clone();
+overlap.roles.find((role) => role.id === "role.frontend-engineer").forbidden_skills.push("yss-ui");
+mustFail(overlap, /重叠/, "启用且禁止同一技能");
+
+const selfSign = clone();
+selfSign.gate_policy.dual_digital_human[0].countersigners = ["role.requirements-manager"];
+mustFail(selfSign, /起草者不得会签自己/, "起草者自签");
+
+const releaseByBot = clone();
+releaseByBot.gate_policy.biological_human = ["gate.architecture-reviewed"];
+releaseByBot.gate_policy.digital_human_review.push({
+  gate: "gate.release-ready",
+  countersigners: ["role.product-manager"]
+});
+mustFail(releaseByBot, /gate\.release-ready/, "数字人关闭发布门禁");
+
+const missingSigners = clone();
+missingSigners.gate_policy.digital_human_review[0].countersigners = [];
+mustFail(missingSigners, /countersigners/, "单审门禁缺 countersigners");
+
+const stringReview = clone();
+stringReview.gate_policy.digital_human_review = ["gate.prototype-reviewed"];
+mustFail(stringReview, /必须是含 gate/, "单审门禁仍用字符串名单");
+
+const missingGeneric = clone();
+missingGeneric.runtimes = missingGeneric.runtimes.filter((runtime) => runtime.id !== "runtime.generic");
+mustFail(missingGeneric, /缺少运行时绑定: runtime.generic/, "缺少通用运行时");
+
+validateApprovalRecordFile("docs/templates/approval-record-template.yaml");
+
+const rolesDoc = loadDigitalHumanRoles();
+try {
+  validateApprovalRecord({
+    schema_version: 1,
+    gate_id: "gate.spec-baseline-approved",
+    decision: "approved",
+    actor_kind: "digital-human",
+    role_id: "role.requirements-manager",
+    runtime_id: "runtime.generic",
+    principal_ref: "instance:wrong"
+  }, { rolesDoc });
+  throw new TypeError("错误配置未被拒绝: 错误角色会签");
+} catch (error) {
+  if (!/会签角色必须是/.test(error.message)) throw new TypeError(`错误角色会签 失败原因不符合预期: ${error.message}`);
+}
+
+try {
+  validateApprovalRecord({
+    schema_version: 1,
+    gate_id: "gate.spec-baseline-approved",
+    decision: "approved",
+    actor_kind: "digital-human",
+    role_id: "role.requirements-manager",
+    runtime_id: "runtime.generic",
+    principal_ref: "instance:req",
+    drafter_role_id: "role.requirements-manager"
+  }, { rolesDoc });
+  throw new TypeError("错误配置未被拒绝: 起草者自签会签记录");
+} catch (error) {
+  if (!/会签角色必须是|起草者不得会签自己/.test(error.message)) {
+    throw new TypeError(`起草者自签会签记录 失败原因不符合预期: ${error.message}`);
+  }
+}
+
+try {
+  validateApprovalRecord({
+    schema_version: 1,
+    gate_id: "gate.release-ready",
+    decision: "approved",
+    actor_kind: "digital-human",
+    role_id: "role.product-manager",
+    runtime_id: "runtime.generic",
+    principal_ref: "instance:pm"
+  }, { rolesDoc });
+  throw new TypeError("错误配置未被拒绝: 数字人关发布会签记录");
+} catch (error) {
+  if (!/必须由生物人会签/.test(error.message)) throw new TypeError(`数字人关发布会签记录 失败原因不符合预期: ${error.message}`);
+}
+
+process.stdout.write("数字人角色压力场景验证通过\n");

package/template/scripts/verify-lifecycle-checkpoint

@@ -5,6 +5,7 @@ import path from "node:path";
 import { parseArgs } from "node:util";
 import { fileURLToPath } from "node:url";
 import { parseDocument } from "./vendor/yaml.mjs";
+import { assertCheckpointApprovals } from "./lib/approval-record.mjs";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const schemaPath = path.join(root, "docs/process/schemas/lifecycle-checkpoint.schema.json");
@@ -30,6 +31,7 @@ try {
   const value = document.toJS({ maxAliasCount: 0 });
   const result = spawnSync("python3", ["-c", validator, schemaPath], { cwd: root, encoding: "utf8", input: JSON.stringify(value) });
   if (result.status !== 0) throw new TypeError(`${result.stdout}${result.stderr}`.trim());
+  assertCheckpointApprovals(value, sourcePath);
   process.stdout.write("生命周期 checkpoint 验证通过\n");
 } catch (error) {
   process.stderr.write(`生命周期 checkpoint 验证失败: ${error.message}\n`);

package/template/scripts/verify-template

@@ -5,7 +5,7 @@ ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 cd "$ROOT_DIR"
 node -e 'const [major]=process.versions.node.split(".").map(Number); if (major < 22 || major >= 27) { console.error("模板工具需要 Node >=22 <27"); process.exit(1); }'
 
-required_files=(yss-project.yaml AGENTS.md CONTEXT.md skills-lock.json docs/agents/yss-skill-registry.yaml docs/process/lifecycle-registry.yaml docs/process/lifecycle-registry-baseline.json docs/process/maintenance-intensity.yaml docs/process/schemas/lifecycle-checkpoint.schema.json docs/process/schemas/frontend-implementation-evidence.schema.json docs/process/templates/lifecycle-checkpoint-template.yaml docs/process/templates/frontend-implementation-plan-template.yaml docs/process/templates/frontend-implementation-verification-template.yaml scripts/repository-mode scripts/implementation-path-policy scripts/repository-scope-policy scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-skill-governance scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/export-yss-skills)
+required_files=(yss-project.yaml AGENTS.md CONTEXT.md skills-lock.json docs/agents/yss-skill-registry.yaml docs/agents/digital-human-roles.yaml docs/process/lifecycle-registry.yaml docs/process/lifecycle-registry-baseline.json docs/process/maintenance-intensity.yaml docs/process/schemas/lifecycle-checkpoint.schema.json docs/process/schemas/frontend-implementation-evidence.schema.json docs/process/templates/lifecycle-checkpoint-template.yaml docs/process/templates/frontend-implementation-plan-template.yaml docs/process/templates/frontend-implementation-verification-template.yaml scripts/repository-mode scripts/implementation-path-policy scripts/repository-scope-policy scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-skill-governance scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-digital-human-roles scripts/verify-digital-human-roles-scenarios scripts/verify-approval-record scripts/export-yss-skills)
 for required in "${required_files[@]}"; do test -f "$required" || { echo "缺少模板必需文件: $required" >&2; exit 1; }; done
 
 repository_mode="$(scripts/repository-mode)"
@@ -22,6 +22,9 @@ scripts/verify-skill-registry
 scripts/verify-skill-governance
 scripts/verify-yss-dto-openapi-profile
 scripts/verify-yss-dto-openapi-scenarios
+scripts/verify-digital-human-roles
+scripts/verify-digital-human-roles-scenarios
+scripts/verify-approval-record docs/templates/approval-record-template.yaml
 scripts/verify-lifecycle-registry
 scripts/verify-lifecycle-checkpoint docs/process/templates/lifecycle-checkpoint-template.yaml
 scripts/verify-frontend-implementation-evidence --allow-template docs/process/templates/frontend-implementation-plan-template.yaml
@@ -39,7 +42,7 @@ scripts/verify-yss-ui-scenarios
 scripts/verify-openapi-yaml-first-scenarios
 scripts/verify-openapi-json-handoff-scenarios
 
-for entry in scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-skill-governance scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-lifecycle-scenarios scripts/verify-matt-yss-integration-scenarios scripts/verify-prototype-backend-scaffold-scenarios scripts/verify-yss-router-scenarios scripts/verify-openapi-yaml-first-scenarios scripts/verify-openapi-json-handoff-scenarios scripts/verify-repository-scope-scenarios scripts/export-yss-skills; do node --check "$entry"; done
+for entry in scripts/sync-skills scripts/update-skill-lock scripts/generate-lifecycle-artifacts scripts/verify-lifecycle-registry scripts/verify-lifecycle-checkpoint scripts/verify-frontend-implementation-evidence scripts/verify-maintenance-checkpoint scripts/verify-maintenance-intensity-scenarios scripts/verify-skill-registry scripts/verify-skill-governance scripts/verify-yss-dto-openapi-profile scripts/verify-yss-dto-openapi-scenarios scripts/verify-digital-human-roles scripts/verify-digital-human-roles-scenarios scripts/verify-approval-record scripts/verify-lifecycle-scenarios scripts/verify-matt-yss-integration-scenarios scripts/verify-prototype-backend-scaffold-scenarios scripts/verify-yss-router-scenarios scripts/verify-openapi-yaml-first-scenarios scripts/verify-openapi-json-handoff-scenarios scripts/verify-repository-scope-scenarios scripts/export-yss-skills; do node --check "$entry"; done
 
 legacy_runtime="ru""by"
 script_roots=(scripts)

package/template/skills-lock.json

@@ -1398,7 +1398,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-product-lifecycle/SKILL.md",
-        "effectiveHash": "6b5ca6ad3453abf2b4794569853ffc4a1c5a625adee4428373fc690c729fee20",
+        "effectiveHash": "4c2f7c8d008397e0bfe134461e1e5ea7eadbbe91c18966bce68ae506b7166569",
         "targets": [
           ".agents/skills",
           ".claude/skills",
@@ -1462,7 +1462,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-router/SKILL.md",
-        "effectiveHash": "f78b0264ff4e381fa5ca64b65a08de501e6f3580f00d186e7dd28d3da252769f",
+        "effectiveHash": "a43355c7d8a1a5016d75af084328a4cfbb758aa5bf022b644d215c0e868b5bfa",
         "targets": [
           ".agents/skills",
           ".claude/skills",

package/template.snapshot.json

@@ -3,8 +3,8 @@
   "templateName": "yss-spec-project-template",
   "templateSource": "github:iloveZzz/yss-spec-project-template",
   "templateRepository": "https://github.com/iloveZzz/yss-spec-project-template.git",
-  "requestedRef": "51189cae987209ff9076a3336269318f47615d5a",
-  "templateCommit": "51189cae987209ff9076a3336269318f47615d5a",
+  "requestedRef": "030d8062634018880a3422fd55065d8d8e61e41e",
+  "templateCommit": "030d8062634018880a3422fd55065d8d8e61e41e",
   "manifestHash": "10d161eb3f0e426aeefad5d0b9e6c5522d8a4dbacb9edf6ed64285dcb40b1a65",
   "encodedPaths": {
     ".codex/skills/data-analytics/.gitignore": ".codex/skills/data-analytics/__yss_dotfile__.gitignore",
@@ -12,6 +12,6 @@
     ".codex/skills/product-design/templates/prototype/.npmrc": ".codex/skills/product-design/templates/prototype/__yss_dotfile__.npmrc",
     ".gitignore": "__yss_dotfile__.gitignore"
   },
-  "snapshotHash": "f3ae9ea041af1b2c07c60e3d9794f22dc20f7c7cd655e95fba442344f124a8b2",
-  "generatedAt": "2026-08-25T05:55:41.500Z"
+  "snapshotHash": "be94c1d18bbfdbf58971964288ecc5ec2fc3607e80537cb46b667d645df74006",
+  "generatedAt": "2026-08-26T10:05:21.409Z"
 }