create-yss-spec 2.2.3 → 2.2.5

package/template/.qoder/skills/yss-stage-decision/tests/fixtures/valid-supplier-domain.yaml

@@ -0,0 +1,108 @@
+schema_version: 1
+domain_strategy_id: domain-strategy.supplier-admission
+domain_version: v1
+status: approved
+contexts:
+  - context_id: SupplierManagement
+    name: 供应商管理
+    responsibilities: [供应商申请、资料生命周期]
+    non_responsibilities: [合规决定、采购订单]
+    subdomain_type: Supporting Subdomain
+    owner: requirements-manager
+    status: confirmed
+  - context_id: ComplianceReview
+    name: 合规审查
+    responsibilities: [资质审查、准入决定、有效期]
+    non_responsibilities: [供应商主档、采购订单]
+    subdomain_type: Core Domain
+    owner: product-manager
+    status: confirmed
+  - context_id: ProcurementExecution
+    name: 采购执行
+    responsibilities: [采购选择、采购订单履行]
+    non_responsibilities: [合规规则、供应商申请]
+    subdomain_type: Supporting Subdomain
+    owner: project-manager
+    status: confirmed
+subdomains:
+  - subdomain_id: subdomain.supplier-management
+    name: Supplier Management
+    type: Supporting Subdomain
+    rationale: 管理申请与资料生命周期，不承载差异化合规决策。
+    evidence_refs: [evidence.discovery.supplier]
+  - subdomain_id: subdomain.compliance-review
+    name: Compliance Review
+    type: Core Domain
+    rationale: 核心价值候选是企业自有的合规判断和风险规则。
+    evidence_refs: [evidence.discovery.compliance]
+relationships:
+  - relationship_id: relationship.supplier-to-compliance
+    from_context: SupplierManagement
+    to_context: ComplianceReview
+    relationship_pattern: Customer/Supplier
+    semantic_upstream: SupplierManagement
+    semantic_downstream: ComplianceReview
+    business_authority: SupplierManagement owns applicant facts
+    model_change_impact: applicant schema changes require review adaptation
+    transport_direction: SubmitSupplierForComplianceReview command
+    translation_responsibility: ComplianceReview ACL
+    direction_explanation: 申请资料由 SupplierManagement 拥有，但技术请求方向不代表合规规则所有权。
+  - relationship_id: relationship.compliance-to-procurement
+    from_context: ComplianceReview
+    to_context: ProcurementExecution
+    relationship_pattern: Published Language
+    semantic_upstream: ComplianceReview
+    semantic_downstream: ProcurementExecution
+    business_authority: ComplianceReview owns admission validity
+    model_change_impact: decision validity changes invalidate procurement acceptance
+    transport_direction: admission decision events
+    translation_responsibility: ProcurementExecution local projection
+    direction_explanation: 合规决定是语义上游；采购侧可通过事件接收并在下单时实时校验。
+scenarios:
+  - scenario_id: scenario.supplier-submits
+    actor: supplier
+    preconditions: [供应商资料可编辑]
+    commands: [SubmitSupplierApplication]
+    rules: [申请材料必须完整]
+    events: [SupplierApplicationSubmitted]
+    failure_results: [材料不完整时拒绝提交]
+    responsible_context: SupplierManagement
+    consumers: [ComplianceReview]
+    status: confirmed
+  - scenario_id: scenario.admission-expires
+    actor: compliance-officer
+    preconditions: [批准决定存在]
+    commands: [EvaluateAdmissionValidity]
+    rules: [过期决定不得支持新采购订单]
+    events: [SupplierAdmissionExpired]
+    failure_results: [采购下单时资格校验失败]
+    responsible_context: ComplianceReview
+    consumers: [SupplierManagement, ProcurementExecution]
+    status: confirmed
+concept_candidates:
+  - concept_id: domain-concept.admission-decision
+    name: AdmissionDecision
+    context_id: ComplianceReview
+    identity_features: [decision_id、subject_ref、rule_version]
+    lifecycle: [proposed、approved、rejected、expired、revoked]
+    possible_tactical_role: Entity candidate
+    confidence: high
+    status: confirmed
+invariants:
+  - invariant_id: invariant.current-admission-required
+    statement: 新采购订单必须引用当前有效的准入决定。
+    responsible_context: ComplianceReview
+    scenario_refs: [scenario.admission-expires]
+    verification_method: 领域场景测试和事件版本校验
+terminology_refs: [contexts/SupplierManagement/CONTEXT.md, contexts/ComplianceReview/CONTEXT.md]
+downstream_mapping:
+  - domain_change: admission-decision-validity
+    impacts: [spec, openapi, procurement-acceptance-tests]
+    propagation: stale
+    reapproval_condition: ComplianceReview 决定和有效期重新批准
+evidence_refs: [evidence.discovery.supplier, evidence.discovery.compliance]
+approval:
+  approval_ref: .agents/skills/yss-stage-decision/tests/fixtures/domain-strategy-approval.yaml
+  approver: role.product-manager
+  persisted_ref: docs/.scratch/supplier/domain/domain-strategy-v1.yaml
+  current_version: v1

package/template/.qoder/skills/yss-stage-decision/tests/run-scenarios.mjs

@@ -0,0 +1,68 @@
+#!/usr/bin/env node
+import { spawnSync } from "node:child_process";
+import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { tmpdir } from "node:os";
+
+const root = dirname(fileURLToPath(import.meta.url));
+const validator = join(root, "..", "scripts", "validate-domain-strategy.mjs");
+const packageValidator = join(root, "..", "scripts", "validate-stage-decision-package.mjs");
+const valid = join(root, "fixtures", "valid-supplier-domain.yaml");
+const invalid = join(root, "fixtures", "invalid-direction.yaml");
+const validPackage = join(root, "fixtures", "valid-stage-decision-package.yaml");
+const invalidPackage = join(root, "fixtures", "invalid-stage-decision-blocker.yaml");
+const run = (file) => spawnSync(process.execPath, [validator, file], { encoding: "utf8" });
+const pass = run(valid);
+if (pass.status !== 0) throw new Error(`valid fixture should pass: ${pass.stderr}`);
+const fail = run(invalid);
+if (fail.status === 0 || !fail.stderr.includes("direction_explanation")) throw new Error("invalid direction fixture should be blocked");
+const packagePass = spawnSync(process.execPath, [packageValidator, validPackage], { encoding: "utf8" });
+if (packagePass.status !== 0) throw new Error(`valid stage decision package should pass: ${packagePass.stderr}`);
+const packageFail = spawnSync(process.execPath, [packageValidator, invalidPackage], { encoding: "utf8" });
+if (packageFail.status === 0 || !packageFail.stderr.includes("blocker")) throw new Error("blocker package should be blocked");
+
+const temporaryRoot = await mkdtemp(join(tmpdir(), "yss-stage-decision-pressure-"));
+try {
+  const validSource = await readFile(valid, "utf8");
+  const sharedKernel = join(temporaryRoot, "shared-kernel.yaml");
+  await writeFile(sharedKernel, validSource.replace("relationship_pattern: Customer/Supplier", "relationship_pattern: Shared Kernel"));
+  const sharedKernelResult = run(sharedKernel);
+  if (sharedKernelResult.status === 0 || !sharedKernelResult.stderr.includes("shared_kernel_approval_ref")) throw new Error("unapproved Shared Kernel should be blocked");
+  const unknownContext = join(temporaryRoot, "unknown-context.yaml");
+  await writeFile(unknownContext, validSource.replace("to_context: ComplianceReview", "to_context: UnknownContext"));
+  const unknownContextResult = run(unknownContext);
+  if (unknownContextResult.status === 0 || !unknownContextResult.stderr.includes("未引用已声明上下文")) throw new Error("unknown context should be blocked");
+  const wrongArrayType = join(temporaryRoot, "wrong-array-type.yaml");
+  await writeFile(wrongArrayType, validSource.replace("responsibilities: [供应商申请、资料生命周期]", "responsibilities: [42]"));
+  const wrongArrayTypeResult = run(wrongArrayType);
+  if (wrongArrayTypeResult.status === 0 || !wrongArrayTypeResult.stderr.includes("responsibilities[0]")) throw new Error("non-string array item should be blocked");
+  const missingSubdomainType = join(temporaryRoot, "missing-subdomain-type.yaml");
+  await writeFile(missingSubdomainType, validSource.replace("    subdomain_type: Supporting Subdomain\n", ""));
+  const missingSubdomainTypeResult = run(missingSubdomainType);
+  if (missingSubdomainTypeResult.status === 0 || !missingSubdomainTypeResult.stderr.includes("subdomain_type 缺失")) throw new Error("missing subdomain type should be blocked");
+  const wrongReferenceType = join(temporaryRoot, "wrong-reference-type.yaml");
+  await writeFile(wrongReferenceType, validSource.replace("terminology_refs: [contexts/SupplierManagement/CONTEXT.md, contexts/ComplianceReview/CONTEXT.md]", "terminology_refs: [42]"));
+  const wrongReferenceTypeResult = run(wrongReferenceType);
+  if (wrongReferenceTypeResult.status === 0 || !wrongReferenceTypeResult.stderr.includes("terminology_refs[0]")) throw new Error("non-string terminology reference should be blocked");
+  const emptyDomainCollections = join(temporaryRoot, "empty-domain-collections.yaml");
+  await writeFile(emptyDomainCollections, validSource.replace(/contexts:\n[\s\S]*?subdomains:/, "contexts: []\nsubdomains:").replace(/subdomains:\n[\s\S]*?relationships:/, "subdomains: []\nrelationships:").replace(/scenarios:\n[\s\S]*?concept_candidates:/, "scenarios: []\nconcept_candidates:"));
+  const emptyDomainCollectionsResult = run(emptyDomainCollections);
+  if (emptyDomainCollectionsResult.status === 0 || !emptyDomainCollectionsResult.stderr.includes("contexts 必须是至少 1 项的数组")) throw new Error("empty DDD collections should be blocked");
+  const wrongDomainApproval = join(temporaryRoot, "wrong-domain-approval.yaml");
+  await writeFile(wrongDomainApproval, validSource.replace("approval_ref: .agents/skills/yss-stage-decision/tests/fixtures/domain-strategy-approval.yaml", "approval_ref: docs/.scratch/does-not-exist.yaml"));
+  const wrongDomainApprovalResult = run(wrongDomainApproval);
+  if (wrongDomainApprovalResult.status === 0 || !wrongDomainApprovalResult.stderr.includes("approval.approval_ref")) throw new Error("unreadable domain approval ref should be blocked");
+  const packageSource = await readFile(validPackage, "utf8");
+  const packageWrongArrayType = join(temporaryRoot, "package-wrong-array-type.yaml");
+  await writeFile(packageWrongArrayType, packageSource.replace("target_users: [采购专员、合规专员]", "target_users: [42]"));
+  const packageWrongArrayTypeResult = spawnSync(process.execPath, [packageValidator, packageWrongArrayType], { encoding: "utf8" });
+  if (packageWrongArrayTypeResult.status === 0 || !packageWrongArrayTypeResult.stderr.includes("target_users[0]")) throw new Error("package non-string array item should be blocked");
+  const packageWrongApproval = join(temporaryRoot, "package-wrong-approval.yaml");
+  await writeFile(packageWrongApproval, packageSource.replace("approval_ref: .agents/skills/yss-stage-decision/tests/fixtures/stage-decision-approval.yaml", "approval_ref: docs/.scratch/does-not-exist.yaml"));
+  const packageWrongApprovalResult = spawnSync(process.execPath, [packageValidator, packageWrongApproval], { encoding: "utf8" });
+  if (packageWrongApprovalResult.status === 0 || !packageWrongApprovalResult.stderr.includes("approval_ref")) throw new Error("unreadable approval ref should be blocked");
+} finally {
+  await rm(temporaryRoot, { recursive: true, force: true });
+}
+process.stdout.write("DDD strategic design scenarios passed\n");

package/template/.qoder/skills/yss-tactical-design/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: yss-tactical-design
+description: 在 YSS 技术分析阶段将批准的战略领域输入细化为可审查的聚合、行为、一致性和 Gateway 设计；不生成生产代码。
+---
+
+# yss-tactical-design
+
+本 skill 负责 DDD 战术设计，不新增生命周期主阶段，也不替代 `yss-stage-decision` 或 `yss-domain`。
+
+## 适用边界
+
+- 由 `yss-product-lifecycle` 在 `work-unit.technical-analysis` 中按领域影响条件调度。
+- 输入必须是版本当前的 Spec、功能架构、战略 DDD、状态矩阵、OpenAPI Draft / Freeze、ADR 和工程约束。
+- 默认将结果写入系统概要设计 / 数据架构中的 Tactical DDD Check；聚合、状态机、一致性或持久化映射复杂到无法清楚表达时，才升级为独立战术设计文档。
+- 没有聚合、状态、不变量、一致性或领域边界影响时返回 `not-applicable` 及原因，不生成空设计。
+
+## 设计内容
+
+必须明确 Aggregate Root、Entity、Value Object、领域行为、状态转换、不变量、一致性 / 事务、幂等 / 并发、Domain Event、Gateway、持久化映射和 Domain / Application 测试 seam。
+
+数据库表、HTTP 调用链或菜单结构不能单独决定聚合边界；OpenAPI 不得暴露内部聚合、Repository 或持久化表结构。
+
+## 输出与状态
+
+输出结构化 tactical-design contract、验证结果、评审引用和影响标记。状态使用 `draft`、`ready-for-human`、`approved`、`blocked`、`stale`、`drift`、`new_impacts`。
+
+本 skill 不能自行批准资产、设置 `ready-for-agent`、创建 Ticket 或修改生命周期状态。批准由 `yss-product-lifecycle` 维护；独立架构评审使用 `evidence.tactical-design-review`。
+
+## 与实现交接
+
+批准且版本当前的战术设计合同由 `Slice Implementation Contract` 引用，再由 `yss-domain` 使用 `behavior-tdd` 实现。`yss-domain` 不得静默重新定义聚合或不变量；发现新的 API、状态、数据或架构影响时必须返回 `new_impacts` / `drift` 并重新路由。
+
+合同、Schema、校验规则和示例见 `references/`；使用 `scripts/validate-tactical-design.mjs` 做只读验证。该 skill 不生成 Java、Repository、Controller、DTO、OpenAPI Freeze、实现 Ticket 或生产代码。

package/template/.qoder/skills/yss-tactical-design/agents/openai.yaml

@@ -0,0 +1,4 @@
+interface:
+  display_name: "YSS Tactical DDD Design"
+  short_description: "聚合、不变量、状态机、一致性与 Gateway 的战术设计"
+  default_prompt: "基于批准且版本当前的上游资产，完成可审查的 YSS DDD 战术设计并返回结构化验证结果。"

package/template/.qoder/skills/yss-tactical-design/references/output-template.md

@@ -0,0 +1,28 @@
+pipeline: <feature-id>
+stage: system-data-engineering
+status: draft
+owner: ai
+
+# <功能名称> Tactical DDD Design
+
+## 上游引用
+
+| 资产 | ref | version / digest | 状态 |
+|---|---|---|---|
+| Spec |  |  |  |
+| Strategic DDD |  |  |  |
+| 状态矩阵 |  |  |  |
+| OpenAPI / 无 API 影响记录 |  |  |  |
+
+## Tactical DDD Check
+
+| 限界上下文 | 聚合根 | Entity / Value Object | 行为与不变量 | 一致性边界 | Gateway | 测试 seam |
+|---|---|---|---|---|---|---|
+|  |  |  |  |  |  |  |
+
+## 结论
+
+- 复杂度升级：是 / 否
+- API / 数据 / 状态新增影响：是 / 否
+- 评审结论：Approved / Blocked
+- 下一步：

package/template/.qoder/skills/yss-tactical-design/references/tactical-design-contract.md

@@ -0,0 +1,41 @@
+# Tactical DDD Design Contract
+
+## 输入
+
+必须引用批准且版本当前的 Spec、功能架构、战略 DDD、原型状态矩阵、OpenAPI Draft / Freeze（或无 API 影响记录）、ADR 和工程约束。所有引用都必须带版本或 digest；不可读或过期引用返回 `blocked` / `stale`。
+
+## 输出
+
+```yaml
+schema_version: 1
+tactical_design_id: tactical-design.<feature>
+tactical_version: v1
+status: draft | ready-for-human | approved | blocked | stale | drift | new_impacts | not-applicable
+context_ref: <限界上下文引用>
+aggregate_catalog: []
+entity_catalog: []
+value_object_catalog: []
+behavior_catalog: []
+invariant_catalog: []
+state_transition_catalog: []
+consistency_policy: {}
+domain_event_catalog: []
+gateway_catalog: []
+persistence_mapping: []
+test_seams: []
+adr_candidates: []
+upstream_impact: {}
+version: v1
+digest: sha256:<digest>
+evidence_refs: []
+```
+
+## 设计规则
+
+1. 聚合边界由业务行为和不变量决定，不由数据库表或外键自动推导。
+2. 每个聚合根必须列出行为、不变量和一致性边界。
+3. 状态转换必须绑定领域行为，禁止只有状态字段而没有行为语义。
+4. Gateway 接口属于 Domain，Repository / Mapper / GatewayImpl 属于 Infrastructure。
+5. OpenAPI schema 使用上下文公开语言，不泄漏内部聚合或持久化结构。
+6. 复杂跨聚合一致性、并发、幂等、事件补偿或持久化错位必须写明策略，必要时升级独立文档。
+7. 实现发现新影响时必须阻断并回到生命周期重新路由。

package/template/.qoder/skills/yss-tactical-design/references/tactical-design.schema.json

@@ -0,0 +1,31 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://yss.dev/schemas/tactical-design.schema.json",
+  "title": "YSS Tactical DDD Design Contract",
+  "type": "object",
+  "required": ["schema_version", "tactical_design_id", "tactical_version", "status", "context_ref", "aggregate_catalog", "entity_catalog", "value_object_catalog", "behavior_catalog", "invariant_catalog", "state_transition_catalog", "consistency_policy", "domain_event_catalog", "gateway_catalog", "persistence_mapping", "test_seams", "adr_candidates", "upstream_impact", "version", "digest", "evidence_refs"],
+  "properties": {
+    "schema_version": {"const": 1},
+    "tactical_design_id": {"type": "string", "pattern": "^tactical-design\\.[a-z0-9][a-z0-9-]*$"},
+    "tactical_version": {"type": "string", "pattern": "^v[0-9]+$"},
+    "status": {"enum": ["draft", "ready-for-human", "approved", "blocked", "stale", "drift", "new_impacts", "not-applicable"]},
+    "context_ref": {"type": "string", "minLength": 1},
+    "aggregate_catalog": {"type": "array", "minItems": 1},
+    "entity_catalog": {"type": "array", "minItems": 1},
+    "value_object_catalog": {"type": "array"},
+    "behavior_catalog": {"type": "array", "minItems": 1},
+    "invariant_catalog": {"type": "array", "minItems": 1},
+    "state_transition_catalog": {"type": "array", "minItems": 1},
+    "consistency_policy": {"type": "object", "minProperties": 1},
+    "domain_event_catalog": {"type": "array"},
+    "gateway_catalog": {"type": "array", "minItems": 1},
+    "persistence_mapping": {"type": "array", "minItems": 1},
+    "test_seams": {"type": "array", "minItems": 1},
+    "adr_candidates": {"type": "array"},
+    "upstream_impact": {"type": "object", "minProperties": 1},
+    "version": {"type": "string", "pattern": "^v[0-9]+$"},
+    "digest": {"type": "string", "pattern": "^sha256:[A-Fa-f0-9]{64}$"},
+    "evidence_refs": {"type": "array", "items": {"type": "string"}}
+  },
+  "additionalProperties": true
+}

package/template/.qoder/skills/yss-tactical-design/references/validation-rules.md

@@ -0,0 +1,13 @@
+# Tactical DDD Validation Rules
+
+- 根对象必须包含合同要求的字段，状态只能使用生命周期状态集合。
+- `aggregate_catalog`、`behavior_catalog`、`invariant_catalog`、`state_transition_catalog`、`consistency_policy` 和 `test_seams` 不能为空。
+- 聚合、Entity、Value Object、行为、不变量、状态转换、事件和 Gateway ID 必须唯一且引用已声明对象。
+- 聚合根必须是 Entity；Entity 和 Value Object 不得跨聚合隐式共享身份。
+- 每个行为至少引用一个聚合和一个不变量；每个状态转换必须引用已声明行为。
+- `api_exposure: internal-only` 是内部聚合的唯一允许值；其他值需要回到 API 影响分析。
+- Gateway 的 `layer` 必须为 `Domain`，持久化实现不得出现在 Domain 目录。
+- `consistency_policy` 必须说明事务边界、并发、幂等和跨聚合策略。
+- 上游引用发生版本变化时，设计标记为 `stale`，不得进入 `approved` 或 `ready-for-agent`。
+- 若合同标记 `model_origin: strategic-concept`，必须阻断并要求完成战术细化。
+- 当 `complexity.escalate_to_standalone` 为真时，必须提供独立文档引用；否则仅允许作为嵌入式 Tactical DDD Check 消费。

package/template/.qoder/skills/yss-tactical-design/scripts/validate-tactical-design.mjs

@@ -0,0 +1,213 @@
+#!/usr/bin/env node
+import { readFile } from "node:fs/promises";
+import process from "node:process";
+import { parseDocument } from "../../../../scripts/vendor/yaml.mjs";
+
+const required = [
+  "schema_version", "tactical_design_id", "tactical_version", "status", "context_ref",
+  "aggregate_catalog", "entity_catalog", "value_object_catalog", "behavior_catalog",
+  "invariant_catalog", "state_transition_catalog", "consistency_policy", "domain_event_catalog",
+  "gateway_catalog", "persistence_mapping", "test_seams", "adr_candidates", "upstream_impact",
+  "version", "digest", "evidence_refs"
+];
+const statuses = new Set(["draft", "ready-for-human", "approved", "blocked", "stale", "drift", "new_impacts", "not-applicable"]);
+const idPatterns = {
+  tactical_design_id: /^tactical-design\.[a-z0-9][a-z0-9-]*$/,
+  aggregate_id: /^aggregate\.[a-z0-9][a-z0-9-]*$/,
+  entity_id: /^entity\.[a-z0-9][a-z0-9-]*$/,
+  value_object_id: /^value-object\.[a-z0-9][a-z0-9-]*$/,
+  behavior_id: /^behavior\.[a-z0-9][a-z0-9-]*$/,
+  invariant_id: /^invariant\.[a-z0-9][a-z0-9-]*$/,
+  transition_id: /^transition\.[a-z0-9][a-z0-9-]*$/,
+  event_id: /^domain-event\.[a-z0-9][a-z0-9-]*$/,
+  gateway_id: /^gateway\.[a-z0-9][a-z0-9-]*$/,
+  seam_id: /^test-seam\.[a-z0-9][a-z0-9-]*$/,
+  version: /^v[0-9]+$/
+};
+
+const isObject = (value) => value && typeof value === "object" && !Array.isArray(value);
+const nonEmpty = (value) => typeof value === "string" && value.trim().length > 0;
+const list = (value) => Array.isArray(value);
+
+function unique(items, label, errors) {
+  const seen = new Set();
+  for (const item of items) {
+    if (seen.has(item)) errors.push(`${label} 重复: ${item}`);
+    seen.add(item);
+  }
+}
+
+function requireField(object, field, path, errors) {
+  if (!Object.prototype.hasOwnProperty.call(object ?? {}, field) || object[field] === null || object[field] === undefined) {
+    errors.push(`${path}.${field} 缺失`);
+  }
+}
+
+function requireString(object, field, path, errors) {
+  requireField(object, field, path, errors);
+  if (Object.prototype.hasOwnProperty.call(object ?? {}, field) && !nonEmpty(object[field])) errors.push(`${path}.${field} 必须是非空字符串`);
+}
+
+function requireArray(object, field, path, errors, minimum = 0) {
+  requireField(object, field, path, errors);
+  if (Object.prototype.hasOwnProperty.call(object ?? {}, field) && (!list(object[field]) || object[field].length < minimum)) {
+    errors.push(`${path}.${field} 必须是至少 ${minimum} 项的数组`);
+  }
+}
+
+function requireId(value, kind, path, errors) {
+  if (value !== undefined && value !== null && !idPatterns[kind].test(String(value))) errors.push(`${path} 格式非法`);
+}
+
+function refsExist(values, known, path, errors) {
+  for (const [index, value] of (values ?? []).entries()) {
+    if (!known.has(value)) errors.push(`${path}[${index}] 引用了未声明对象: ${value}`);
+  }
+}
+
+function validate(data) {
+  const errors = [];
+  if (!isObject(data)) return ["合同必须是对象"];
+  for (const field of required) requireField(data, field, "root", errors);
+  if (data.schema_version !== 1) errors.push("schema_version 必须为 1");
+  requireId(data.tactical_design_id, "tactical_design_id", "tactical_design_id", errors);
+  for (const field of ["tactical_version", "version"]) if (data[field] !== undefined && !idPatterns.version.test(String(data[field]))) errors.push(`${field} 必须形如 v1`);
+  if (data.status !== undefined && !statuses.has(data.status)) errors.push(`status 非法: ${data.status}`);
+  if (data.digest !== undefined && !/^sha256:[A-Fa-f0-9]{64}$/.test(String(data.digest))) errors.push("digest 必须为 sha256 加 64 位十六进制");
+
+  for (const field of ["aggregate_catalog", "entity_catalog", "behavior_catalog", "invariant_catalog", "state_transition_catalog", "gateway_catalog", "persistence_mapping", "test_seams"]) {
+    requireArray(data, field, "root", errors, 1);
+  }
+  for (const field of ["value_object_catalog", "domain_event_catalog", "adr_candidates", "evidence_refs"]) requireArray(data, field, "root", errors);
+  if (!isObject(data.consistency_policy)) errors.push("consistency_policy 必须是对象");
+  if (!isObject(data.upstream_impact)) errors.push("upstream_impact 必须是对象");
+  if (isObject(data.consistency_policy)) {
+    for (const field of ["transaction_boundary", "concurrency", "idempotency", "cross_aggregate_strategy"]) requireString(data.consistency_policy, field, "consistency_policy", errors);
+  }
+  if (isObject(data.upstream_impact)) {
+    for (const field of ["spec_ref", "strategic_ref", "api_ref", "data_ref"]) requireString(data.upstream_impact, field, "upstream_impact", errors);
+    if (data.upstream_impact.upstream_current === false && data.status !== "stale") errors.push("上游已过期时 status 必须为 stale");
+  }
+
+  const aggregates = list(data.aggregate_catalog) ? data.aggregate_catalog : [];
+  const entities = list(data.entity_catalog) ? data.entity_catalog : [];
+  const values = list(data.value_object_catalog) ? data.value_object_catalog : [];
+  const behaviors = list(data.behavior_catalog) ? data.behavior_catalog : [];
+  const invariants = list(data.invariant_catalog) ? data.invariant_catalog : [];
+  const transitions = list(data.state_transition_catalog) ? data.state_transition_catalog : [];
+  const events = list(data.domain_event_catalog) ? data.domain_event_catalog : [];
+  const gateways = list(data.gateway_catalog) ? data.gateway_catalog : [];
+  const mappings = list(data.persistence_mapping) ? data.persistence_mapping : [];
+  const seams = list(data.test_seams) ? data.test_seams : [];
+  const ids = (items, field, kind, label) => {
+    const result = new Set();
+    unique(items.map((item) => item?.[field]).filter(Boolean), label, errors);
+    for (const [index, item] of items.entries()) {
+      if (item?.[field]) { requireId(item[field], kind, `${label}[${index}].${field}`, errors); result.add(item[field]); }
+    }
+    return result;
+  };
+  const aggregateIds = ids(aggregates, "aggregate_id", "aggregate_id", "aggregate_id");
+  const entityIds = ids(entities, "entity_id", "entity_id", "entity_id");
+  const valueIds = ids(values, "value_object_id", "value_object_id", "value_object_id");
+  const behaviorIds = ids(behaviors, "behavior_id", "behavior_id", "behavior_id");
+  const invariantIds = ids(invariants, "invariant_id", "invariant_id", "invariant_id");
+  const transitionIds = ids(transitions, "transition_id", "transition_id", "transition_id");
+  const eventIds = ids(events, "event_id", "event_id", "event_id");
+  const gatewayIds = ids(gateways, "gateway_id", "gateway_id", "gateway_id");
+  ids(seams, "seam_id", "seam_id", "seam_id");
+
+  for (const [index, aggregate] of aggregates.entries()) {
+    const path = `aggregate_catalog[${index}]`;
+    if (!isObject(aggregate)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["aggregate_id", "name", "context_ref", "root_entity", "consistency_boundary"]) requireString(aggregate, field, path, errors);
+    requireArray(aggregate, "invariant_refs", path, errors, 1); requireArray(aggregate, "behavior_refs", path, errors, 1);
+    if (aggregate.model_origin === "strategic-concept") errors.push(`${path}.model_origin 不得直接把战略概念当作 Aggregate`);
+    if (aggregate.api_exposure !== "internal-only") errors.push(`${path}.api_exposure 必须为 internal-only`);
+    if (aggregate.root_entity && !entityIds.has(aggregate.root_entity)) errors.push(`${path}.root_entity 未引用 Entity`);
+    const rootEntity = entities.find((entity) => entity?.entity_id === aggregate.root_entity);
+    if (rootEntity && rootEntity.aggregate_id !== aggregate.aggregate_id) errors.push(`${path}.root_entity 的 aggregate_id 必须与当前 Aggregate 一致`);
+    refsExist(aggregate.invariant_refs, invariantIds, `${path}.invariant_refs`, errors);
+    refsExist(aggregate.behavior_refs, behaviorIds, `${path}.behavior_refs`, errors);
+  }
+  for (const [index, entity] of entities.entries()) {
+    const path = `entity_catalog[${index}]`;
+    if (!isObject(entity)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["entity_id", "name", "aggregate_id", "identity", "lifecycle"]) requireString(entity, field, path, errors);
+    if (entity.aggregate_id && !aggregateIds.has(entity.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+  }
+  for (const [index, value] of values.entries()) {
+    const path = `value_object_catalog[${index}]`;
+    if (!isObject(value)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["value_object_id", "name", "aggregate_id", "immutable"]) requireField(value, field, path, errors);
+    if (typeof value.immutable !== "boolean" || value.immutable !== true) errors.push(`${path}.immutable 必须为 true`);
+    if (value.aggregate_id && !aggregateIds.has(value.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+  }
+  for (const [index, behavior] of behaviors.entries()) {
+    const path = `behavior_catalog[${index}]`;
+    if (!isObject(behavior)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["behavior_id", "name", "aggregate_id", "command"]) requireString(behavior, field, path, errors);
+    for (const field of ["preconditions", "invariant_refs", "postconditions", "event_refs"]) requireArray(behavior, field, path, errors, field === "invariant_refs" ? 1 : 0);
+    if (behavior.aggregate_id && !aggregateIds.has(behavior.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+    refsExist(behavior.invariant_refs, invariantIds, `${path}.invariant_refs`, errors);
+    refsExist(behavior.event_refs, eventIds, `${path}.event_refs`, errors);
+  }
+  for (const [index, invariant] of invariants.entries()) {
+    const path = `invariant_catalog[${index}]`;
+    if (!isObject(invariant)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["invariant_id", "aggregate_id", "statement"]) requireString(invariant, field, path, errors);
+    if (invariant.aggregate_id && !aggregateIds.has(invariant.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+  }
+  for (const [index, transition] of transitions.entries()) {
+    const path = `state_transition_catalog[${index}]`;
+    if (!isObject(transition)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["transition_id", "aggregate_id", "from", "to", "behavior_id"]) requireString(transition, field, path, errors);
+    if (transition.aggregate_id && !aggregateIds.has(transition.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+    if (transition.behavior_id && !behaviorIds.has(transition.behavior_id)) errors.push(`${path}.behavior_id 未引用行为`);
+  }
+  for (const [index, event] of events.entries()) {
+    const path = `domain_event_catalog[${index}]`;
+    if (!isObject(event)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["event_id", "name", "aggregate_id", "delivery"]) requireString(event, field, path, errors);
+    requireArray(event, "consumers", path, errors, 0);
+    if (event.aggregate_id && !aggregateIds.has(event.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+  }
+  for (const [index, gateway] of gateways.entries()) {
+    const path = `gateway_catalog[${index}]`;
+    if (!isObject(gateway)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["gateway_id", "name", "context_ref", "layer"]) requireString(gateway, field, path, errors);
+    requireArray(gateway, "capabilities", path, errors, 1);
+    if (gateway.layer !== "Domain") errors.push(`${path}.layer 必须为 Domain，Infrastructure 只实现 Gateway`);
+  }
+  for (const [index, mapping] of mappings.entries()) {
+    const path = `persistence_mapping[${index}]`;
+    if (!isObject(mapping)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["aggregate_id", "storage_model", "notes"]) requireString(mapping, field, path, errors);
+    if (mapping.aggregate_id && !aggregateIds.has(mapping.aggregate_id)) errors.push(`${path}.aggregate_id 未引用 Aggregate`);
+  }
+  for (const [index, seam] of seams.entries()) {
+    const path = `test_seams[${index}]`;
+    if (!isObject(seam)) { errors.push(`${path} 必须是对象`); continue; }
+    for (const field of ["seam_id", "kind", "subject_ref", "assertion"]) requireString(seam, field, path, errors);
+    if (seam.subject_ref && !new Set([...aggregateIds, ...entityIds, ...valueIds, ...behaviorIds, ...invariantIds, ...transitionIds, ...gatewayIds]).has(seam.subject_ref)) errors.push(`${path}.subject_ref 未引用已声明领域对象`);
+  }
+  if (isObject(data.complexity) && data.complexity.escalate_to_standalone === true && !nonEmpty(data.complexity.standalone_ref)) errors.push("complexity.escalate_to_standalone 为 true 时必须提供 standalone_ref");
+  return errors;
+}
+
+async function main() {
+  const file = process.argv[2];
+  if (!file) throw new Error("用法: validate-tactical-design.mjs <contract.yaml>");
+  const source = await readFile(file, "utf8");
+  const document = parseDocument(source, { maxAliasCount: 0, uniqueKeys: true });
+  if (document.errors.length) throw new Error(`无法解析合同: ${document.errors[0].message}`);
+  const errors = validate(document.toJS({ maxAliasCount: 0 }));
+  if (errors.length) {
+    process.stderr.write(`${JSON.stringify({ result: "blocked", errors }, null, 2)}\n`);
+    process.exitCode = 1;
+    return;
+  }
+  process.stdout.write(`${JSON.stringify({ result: "ready-for-lifecycle-review", tactical_design_id: document.get("tactical_design_id"), status: document.get("status") }, null, 2)}\n`);
+}
+
+main().catch((error) => { process.stderr.write(`${error.message}\n`); process.exitCode = 1; });

package/template/.qoder/skills/yss-tactical-design/tests/fixtures/invalid-api-leaks-aggregate.yaml

@@ -0,0 +1,21 @@
+schema_version: 1
+tactical_design_id: tactical-design.invalid-api
+tactical_version: v1
+status: ready-for-human
+context_ref: context.example
+aggregate_catalog: [{aggregate_id: aggregate.example, name: Example, context_ref: context.example, root_entity: entity.example-root, invariant_refs: [invariant.example], behavior_refs: [behavior.example], consistency_boundary: single, api_exposure: public-aggregate}]
+entity_catalog: [{entity_id: entity.example-root, name: Root, aggregate_id: aggregate.example, identity: id, lifecycle: active}]
+value_object_catalog: []
+behavior_catalog: [{behavior_id: behavior.example, name: Do, aggregate_id: aggregate.example, command: do, preconditions: [ready], invariant_refs: [invariant.example], postconditions: [done], event_refs: []}]
+invariant_catalog: [{invariant_id: invariant.example, aggregate_id: aggregate.example, statement: required}]
+state_transition_catalog: [{transition_id: transition.example, aggregate_id: aggregate.example, from: draft, to: done, behavior_id: behavior.example}]
+consistency_policy: {transaction_boundary: single, concurrency: optimistic, idempotency: guarded, cross_aggregate_strategy: none}
+domain_event_catalog: []
+gateway_catalog: [{gateway_id: gateway.example, name: Gateway, context_ref: context.example, layer: Domain, capabilities: [load]}]
+persistence_mapping: [{aggregate_id: aggregate.example, storage_model: example, notes: mapping}]
+test_seams: [{seam_id: test-seam.example, kind: domain, subject_ref: invariant.example, assertion: behavior}]
+adr_candidates: []
+upstream_impact: {spec_ref: spec@v1, strategic_ref: strategy@v1, api_ref: api@draft, data_ref: data@v1, upstream_current: true}
+version: v1
+digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
+evidence_refs: []

package/template/.qoder/skills/yss-tactical-design/tests/fixtures/invalid-missing-consistency-policy.yaml

@@ -0,0 +1,21 @@
+schema_version: 1
+tactical_design_id: tactical-design.invalid-consistency
+tactical_version: v1
+status: ready-for-human
+context_ref: context.example
+aggregate_catalog: [{aggregate_id: aggregate.example, name: Example, context_ref: context.example, root_entity: entity.example-root, invariant_refs: [invariant.example], behavior_refs: [behavior.example], consistency_boundary: single, api_exposure: internal-only}]
+entity_catalog: [{entity_id: entity.example-root, name: Root, aggregate_id: aggregate.example, identity: id, lifecycle: active}]
+value_object_catalog: []
+behavior_catalog: [{behavior_id: behavior.example, name: Do, aggregate_id: aggregate.example, command: do, preconditions: [ready], invariant_refs: [invariant.example], postconditions: [done], event_refs: []}]
+invariant_catalog: [{invariant_id: invariant.example, aggregate_id: aggregate.example, statement: required}]
+state_transition_catalog: [{transition_id: transition.example, aggregate_id: aggregate.example, from: draft, to: done, behavior_id: behavior.example}]
+consistency_policy: {}
+domain_event_catalog: []
+gateway_catalog: [{gateway_id: gateway.example, name: Gateway, context_ref: context.example, layer: Domain, capabilities: [load]}]
+persistence_mapping: [{aggregate_id: aggregate.example, storage_model: example, notes: mapping}]
+test_seams: [{seam_id: test-seam.example, kind: domain, subject_ref: invariant.example, assertion: behavior}]
+adr_candidates: []
+upstream_impact: {spec_ref: spec@v1, strategic_ref: strategy@v1, api_ref: api@draft, data_ref: data@v1, upstream_current: true}
+version: v1
+digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
+evidence_refs: []

package/template/.qoder/skills/yss-tactical-design/tests/fixtures/invalid-missing-invariant.yaml

@@ -0,0 +1,21 @@
+schema_version: 1
+tactical_design_id: tactical-design.invalid-missing-invariant
+tactical_version: v1
+status: ready-for-human
+context_ref: context.example
+aggregate_catalog: [{aggregate_id: aggregate.example, name: Example, context_ref: context.example, root_entity: entity.example-root, invariant_refs: [], behavior_refs: [behavior.example], consistency_boundary: single, api_exposure: internal-only}]
+entity_catalog: [{entity_id: entity.example-root, name: Root, aggregate_id: aggregate.example, identity: id, lifecycle: active}]
+value_object_catalog: []
+behavior_catalog: [{behavior_id: behavior.example, name: Do, aggregate_id: aggregate.example, command: do, preconditions: [], invariant_refs: [], postconditions: [], event_refs: []}]
+invariant_catalog: []
+state_transition_catalog: [{transition_id: transition.example, aggregate_id: aggregate.example, from: draft, to: done, behavior_id: behavior.example}]
+consistency_policy: {transaction_boundary: single, concurrency: optimistic, idempotency: guarded, cross_aggregate_strategy: none}
+domain_event_catalog: []
+gateway_catalog: [{gateway_id: gateway.example, name: Gateway, context_ref: context.example, layer: Domain, capabilities: [load]}]
+persistence_mapping: [{aggregate_id: aggregate.example, storage_model: example, notes: mapping}]
+test_seams: [{seam_id: test-seam.example, kind: domain, subject_ref: aggregate.example, assertion: behavior}]
+adr_candidates: []
+upstream_impact: {spec_ref: spec@v1, strategic_ref: strategy@v1, api_ref: api@draft, data_ref: data@v1, upstream_current: true}
+version: v1
+digest: sha256:0000000000000000000000000000000000000000000000000000000000000000
+evidence_refs: []