create-yss-spec 2.2.8 → 2.2.10

package/template/.hermes/skills/yss-ddd-scaffold-generator/scripts/generate_and_verify_scaffold.mjs

@@ -0,0 +1,126 @@
+#!/usr/bin/env node
+/** 在同一个受控工作流中生成脚手架并执行真实 Maven Wrapper 验证。 */
+import { execFile } from "node:child_process";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import process from "node:process";
+import { fileURLToPath } from "node:url";
+
+import { run } from "./run_scaffold_verification.mjs";
+
+const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
+const GENERATOR = path.join(SCRIPT_DIR, "generate_scaffold.mjs");
+const isoNow = () => new Date().toISOString();
+
+function parseArgs(argv) {
+  const generatorArgs = [];
+  let evidenceDir;
+  let projectName;
+  let outputDir;
+  for (let index = 0; index < argv.length; index += 1) {
+    const original = argv[index];
+    const [flag, inlineValue] = original.split(/=(.*)/s, 2);
+    let value = inlineValue;
+    if (["--evidence-dir", "--project-name", "--output-dir"].includes(flag) && value === undefined) value = argv[index + 1];
+    if (flag === "--evidence-dir") {
+      if (!value || value.startsWith("--")) throw new Error("参数 --evidence-dir 缺少值");
+      evidenceDir = path.resolve(value);
+      if (inlineValue === undefined) index += 1;
+      continue;
+    }
+    generatorArgs.push(original);
+    if (["--project-name", "--output-dir"].includes(flag) && inlineValue === undefined) {
+      if (!value || value.startsWith("--")) throw new Error(`参数 ${flag} 缺少值`);
+      generatorArgs.push(value);
+      index += 1;
+    }
+    if (flag === "--project-name") projectName = value;
+    if (flag === "--output-dir") outputDir = value;
+  }
+  if (!evidenceDir) throw new Error("必须提供 --evidence-dir");
+  if (!projectName || !outputDir) throw new Error("必须提供 --project-name 和 --output-dir");
+  return { evidenceDir, generatorArgs, projectRoot: path.join(path.resolve(outputDir), projectName) };
+}
+
+function executeGenerator(args) {
+  return new Promise((resolve) => {
+    execFile(process.execPath, [GENERATOR, ...args], { encoding: "utf8" }, (error, stdout, stderr) => {
+      resolve({ exitCode: error?.code ?? 0, stdout, stderr });
+    });
+  });
+}
+
+async function writeJson(target, value) {
+  await mkdir(path.dirname(target), { recursive: true });
+  await writeFile(target, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+}
+
+async function main() {
+  let args;
+  try {
+    args = parseArgs(process.argv.slice(2));
+  } catch (error) {
+    process.stderr.write(`❌ 脚手架工作流无法执行: ${error.message}\n`);
+    return 1;
+  }
+  await mkdir(args.evidenceDir, { recursive: true });
+  const workflowPath = path.join(args.evidenceDir, "scaffold-workflow.json");
+  const verificationPath = path.join(args.evidenceDir, "scaffold-verification.json");
+  const generation = await executeGenerator(args.generatorArgs);
+  await writeFile(path.join(args.evidenceDir, "scaffold-generation.stdout.log"), generation.stdout, "utf8");
+  await writeFile(path.join(args.evidenceDir, "scaffold-generation.stderr.log"), generation.stderr, "utf8");
+  process.stdout.write(generation.stdout);
+  process.stderr.write(generation.stderr);
+  if (generation.exitCode !== 0) {
+    await writeJson(workflowPath, {
+      workflow_mode: "controlled-generation",
+      generated_at: isoNow(),
+      project_root: args.projectRoot,
+      status: "blocked",
+      failure_category: "generation",
+      generation_exit_code: generation.exitCode,
+      verification_ref: null
+    });
+    return 1;
+  }
+  try {
+    const verification = await run(args.projectRoot, args.evidenceDir);
+    await writeJson(verificationPath, verification);
+    const passed = verification.status === "passed";
+    if (passed) {
+      const manifestPath = path.join(args.projectRoot, ".yss", "scaffold-generation.json");
+      const manifest = JSON.parse(await readFile(manifestPath, "utf8"));
+      manifest.completion_level = "empty-scaffold-verified";
+      manifest.empty_scaffold_verification_ref = verificationPath;
+      manifest.empty_scaffold_verified_at = isoNow();
+      await writeJson(manifestPath, manifest);
+    }
+    await writeJson(workflowPath, {
+      workflow_mode: "controlled-generation",
+      generated_at: isoNow(),
+      project_root: args.projectRoot,
+      status: passed ? "completed" : "blocked",
+      failure_category: verification.failure_category,
+      generation_exit_code: generation.exitCode,
+      verification_ref: verificationPath
+    });
+    if (passed) process.stdout.write(`✅ 脚手架生成与验证完成: ${args.projectRoot}\n`);
+    else process.stderr.write(`❌ 脚手架验证失败，已阻断: ${verification.failure_category}\n`);
+    return passed ? 0 : 1;
+  } catch (error) {
+    await writeJson(workflowPath, {
+      workflow_mode: "controlled-generation",
+      generated_at: isoNow(),
+      project_root: args.projectRoot,
+      status: "blocked",
+      failure_category: "verification-preflight",
+      generation_exit_code: generation.exitCode,
+      verification_ref: verificationPath,
+      error: error.message
+    });
+    process.stderr.write(`❌ 脚手架验证无法执行，已阻断: ${error.message}\n`);
+    return 1;
+  }
+}
+
+process.exitCode = await main();

package/template/.hermes/skills/yss-ddd-scaffold-generator/scripts/generate_scaffold.mjs

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 /** YSS DDD 后端纯工程骨架生成器；只生成工程结构，不生成任何业务行为。 */
+import { createHash } from "node:crypto";
 import { chmod, cp, lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, stat, writeFile, copyFile } from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
@@ -15,17 +16,29 @@ const SCRIPT_DIR = path.dirname(fileURLToPath(import.meta.url));
 const SKILL_ROOT = path.resolve(SCRIPT_DIR, "..");
 const REPOSITORY_ROOT = path.resolve(SCRIPT_DIR, "../../../..");
 const COMMANDS = ["./mvnw validate", "./mvnw test", "./mvnw package"];
-
+const SUPPORTED_PROFILES = Object.freeze({
+  architecture: "target-domain-model",
+  persistence: "mybatis-plus",
+  database: "mysql",
+  platform: "spring-boot-2.7-jdk8",
+  validation_namespace: "javax",
+  dto_placement: "web",
+  repository: "yss-internal"
+});
+const DOWNSTREAM_SKILLS = ["yss-domain", "yss-application", "yss-repository", "yss-mybatis", "yss-dto", "yss-exception", "yss-web-controller"];
 function fail(message) { throw new Error(message); }
 function isoNow() { return new Date().toISOString(); }
 function localDate() { return new Date().toISOString().slice(0, 10); }
-function backupStamp() { return new Date().toISOString().replace(/[-:TZ.]/g, ""); }
+function toUpperCamel(value) { return value.split("-").map((part) => `${part[0].toUpperCase()}${part.slice(1)}`).join(""); }
+function sha256(content) { return createHash("sha256").update(content).digest("hex"); }
 function usage(error) {
   const text = `YSS DDD 脚手架生成器\n\n` +
     `用法: node scripts/generate_scaffold.mjs --project-name <kebab-case> --base-package <package> --output-dir <dir> --contract-file <json> [选项]\n\n` +
     `必填合同元数据: --contract-id --contract-version --approval-ref --router-draft-ref --persisted-ref\n` +
-    `选项: --database mysql, --force, --overwrite-scope <scope>, --rollback-ref <ref>\n` +
-    `--with-example 已禁用；--without-example 是兼容的无操作参数。`;
+    `Maven 坐标: --group-id --project-version --parent-group-id --parent-artifact-id --parent-version --yss-components-version\n` +
+    `固定 Profile: target-domain-model / mybatis-plus / spring-boot-2.7-jdk8 / javax / web / yss-internal\n` +
+    `本生成器严格 initialize-only；--force 和任何已有项目目标均为 unsupported。\n` +
+    `--with-example 已禁用；--without-example 仅保留为无操作参数。`;
   if (error) process.stderr.write(`错误: ${error}\n\n`);
   process.stdout.write(`${text}\n`);
 }
@@ -36,7 +49,10 @@ function parseArgs(argv) {
     ["--project-name", "projectName"], ["--base-package", "basePackage"], ["--output-dir", "outputDir"],
     ["--database", "database"], ["--contract-id", "contractId"], ["--contract-version", "contractVersion"],
     ["--approval-ref", "approvalRef"], ["--router-draft-ref", "routerDraftRef"], ["--persisted-ref", "persistedRef"],
-    ["--contract-file", "contractFile"], ["--overwrite-scope", "overwriteScope"], ["--rollback-ref", "rollbackRef"],
+    ["--contract-file", "contractFile"],
+    ["--group-id", "groupId"], ["--project-version", "projectVersion"], ["--parent-group-id", "parentGroupId"],
+    ["--parent-artifact-id", "parentArtifactId"], ["--parent-version", "parentVersion"],
+    ["--yss-components-version", "yssComponentsVersion"],
   ]);
   for (let index = 0; index < argv.length; index += 1) {
     let token = argv[index];
@@ -54,7 +70,7 @@ function parseArgs(argv) {
   }
   if (options.help) return options;
   for (const [flag, key] of mapping) {
-    if (["database", "overwriteScope", "rollbackRef", "contractId", "contractVersion", "approvalRef", "routerDraftRef", "persistedRef"].includes(key)) continue;
+    if (["database", "overwriteScope", "rollbackRef", "contractId", "contractVersion", "approvalRef", "routerDraftRef", "persistedRef", "groupId", "projectVersion", "parentGroupId", "parentArtifactId", "parentVersion", "yssComponentsVersion"].includes(key)) continue;
     if (!options[key]) fail(`缺少必填参数: ${flag}`);
   }
   if (options.database !== "mysql") fail("参数 --database 只支持 mysql");
@@ -63,15 +79,37 @@ function parseArgs(argv) {
   if (options.contractVersion !== undefined && (!/^\d+$/.test(options.contractVersion) || Number(options.contractVersion) < 1)) fail("--contract-version(必须为正整数)");
   if (options.contractVersion !== undefined) options.contractVersion = Number(options.contractVersion);
   if (options.withExample) fail("--with-example 已禁用；业务代码必须由批准的 YSS Slice skill 逐切片生成");
+  if (options.force) fail("unsupported: initialize-only 脚手架禁止 --force，也不承担旧项目迁移或模板升级");
   return options;
 }
 
 async function exists(target) { try { await lstat(target); return true; } catch (error) { if (error.code === "ENOENT") return false; throw error; } }
 async function isFile(target) { try { return (await stat(target)).isFile(); } catch (error) { if (error.code === "ENOENT") return false; throw error; } }
-async function nonEmpty(target) { const info = await lstat(target); return !info.isDirectory() || (await readdir(target)).length > 0; }
 async function readJson(target, message) { try { return JSON.parse(await readFile(target, "utf8")); } catch (error) { fail(`${message}: ${target}`); } }
 async function writeText(target, content) { await mkdir(path.dirname(target), { recursive: true }); await writeFile(target, content, "utf8"); }
 function isPresent(value) { return value !== undefined && value !== null && value !== "" && (!Array.isArray(value) || value.length > 0); }
+function isWithin(parent, target) { const relative = path.relative(parent, target); return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative)); }
+async function fileEntries(root, { exclude = new Set() } = {}) {
+  const output = [];
+  const visit = async (directory) => {
+    for (const entry of (await readdir(directory, { withFileTypes: true })).sort((left, right) => left.name.localeCompare(right.name))) {
+      const absolute = path.join(directory, entry.name);
+      const relative = path.relative(root, absolute).split(path.sep).join("/");
+      if (exclude.has(relative)) continue;
+      if (entry.isDirectory()) await visit(absolute);
+      else if (entry.isFile()) output.push({ absolute, relative });
+    }
+  };
+  await visit(root);
+  return output;
+}
+async function treeDigest(root) {
+  const hash = createHash("sha256");
+  for (const entry of await fileEntries(root)) {
+    hash.update(entry.relative).update("\0").update(await readFile(entry.absolute)).update("\0");
+  }
+  return hash.digest("hex");
+}
 
 class ScaffoldGenerator {
   constructor(options) {
@@ -84,13 +122,19 @@ class ScaffoldGenerator {
     this.projectRoot = this.finalProjectRoot;
     this.templateRoot = path.join(SKILL_ROOT, "assets", "templates");
     this.configTemplateDir = path.join(this.templateRoot, "config");
+    this.javaTemplateDir = path.join(this.templateRoot, "java");
     this.pomTemplateDir = path.join(this.templateRoot, "pom");
     this.packagePath = this.basePackage.replaceAll(".", path.sep);
     this.author = process.env.USER || "yss-team";
     this.date = localDate();
-    this.groupId = this.basePackage.split(".").slice(0, 2).join(".");
     this.dbName = this.projectName.replaceAll("-", "_");
+    this.applicationClassName = `${toUpperCamel(this.projectName)}Application`;
+    this.bootstrapMainSource = `${this.projectName}-bootstrap/src/main/java/${this.basePackage.replaceAll(".", "/")}/${this.applicationClassName}.java`;
     this.scaffoldContract = undefined;
+    this.mavenCoordinates = undefined;
+    this.mavenCoordinatesSource = "approved-contract";
+    this.contractDigest = undefined;
+    this.profiles = structuredClone(SUPPORTED_PROFILES);
   }
 
   gitRootForOutput() {
@@ -108,30 +152,22 @@ class ScaffoldGenerator {
     const gitlinkViolation = gitSubmoduleScaffoldViolation(gitRoot, this.outputDir, this.projectName, { force: this.options.force });
     if (gitlinkViolation) fail(gitlinkViolation);
     this.refuseGitlinkAsRegularDirectory(gitRoot, this.finalProjectRoot);
+    await this.validateContractMetadata();
     const targetExists = await exists(this.finalProjectRoot);
     if (targetExists) {
       this.refuseGitlinkAsRegularDirectory(gitRoot, this.finalProjectRoot);
-      if (!this.options.force) fail(`输出目录已存在: ${this.finalProjectRoot}；如确认覆盖，请显式传入 --force`);
+      fail(`unsupported: initialize-only 脚手架只创建全新项目，拒绝已存在目标: ${this.finalProjectRoot}`);
     }
-    await this.validateContractMetadata();
-    if (targetExists && await nonEmpty(this.finalProjectRoot) && this.options.force) this.validateForceMetadata();
     await mkdir(this.outputDir, { recursive: true });
     const stagingRoot = await mkdtemp(path.join(this.outputDir, `.${this.projectName}.staging-`));
     this.projectRoot = path.join(stagingRoot, this.projectName);
     try {
       console.log(`🚀 开始生成项目: ${this.projectName}\n📦 基础包名: ${this.basePackage}\n📁 输出目录: ${this.outputDir}\n`);
-      await this.createProjectStructure(); await this.generatePomFiles(); await this.generateConfigFiles();
-      this.generateDatabaseScripts(); await this.generateDocumentation(); await this.writeGenerationManifest();
-      await this.copyWrapperFiles(); await this.validateGeneratedArtifacts();
-      let backupPath;
-      if (await exists(this.finalProjectRoot)) {
-        this.refuseGitlinkAsRegularDirectory(gitRoot, this.finalProjectRoot);
-        backupPath = path.join(this.outputDir, `.${this.projectName}.backup-${backupStamp()}`);
-        await rename(this.finalProjectRoot, backupPath);
-      }
+      await this.createProjectStructure(); await this.generatePomFiles(); await this.generateBootstrapSource(); await this.generateArchitectureRules(); await this.generateConfigFiles();
+      this.generateDatabaseScripts(); await this.generateDocumentation(); await this.copyWrapperFiles();
+      await this.writeGenerationManifest(); await this.validateGeneratedArtifacts();
       await rename(this.projectRoot, this.finalProjectRoot); this.projectRoot = this.finalProjectRoot;
-      console.log(`\n✅ 项目生成完成!\n📂 项目位置: ${this.projectRoot}`);
-      if (backupPath) console.log(`♻️ 原项目备份: ${backupPath}`);
+      console.log(`\n✅ 工程文件生成完成，等待受控 Maven 验证\n📂 项目位置: ${this.projectRoot}`);
       console.log(`\n🎯 下一步:\n  cd ${this.projectRoot}\n  ./mvnw validate\n  ./mvnw test\n  ./mvnw package\n  ./mvnw spring-boot:run -pl ${this.projectName}-bootstrap`);
     } catch (error) { await rm(stagingRoot, { recursive: true, force: true }); throw error; }
   }
@@ -148,15 +184,17 @@ class ScaffoldGenerator {
 
   async validateContractMetadata() {
     if (!await isFile(this.contractFile)) fail("必须提供已持久化的结构化脚手架合同 JSON 文件: --contract-file");
-    const contract = await readJson(this.contractFile, "脚手架合同文件无法读取或不是合法 JSON");
+    const contractText = await readFile(this.contractFile, "utf8");
+    let contract; try { contract = JSON.parse(contractText); } catch { fail(`脚手架合同文件无法读取或不是合法 JSON: ${this.contractFile}`); }
     if (!contract || Array.isArray(contract) || typeof contract !== "object") fail("脚手架合同必须是 JSON 对象");
+    if (contract.schema_version !== 2) fail(`unsupported: scaffold contract schema_version=${contract.schema_version}；只接受 Target Profile schema v2，不提供自动升级`);
     const requiredMetadata = [["--contract-id", this.options.contractId], ["--contract-version", this.options.contractVersion], ["--approval-ref", this.options.approvalRef], ["--router-draft-ref", this.options.routerDraftRef], ["--persisted-ref", this.options.persistedRef]];
     const missing = requiredMetadata.filter(([, value]) => !isPresent(value)).map(([flag]) => flag);
     if (missing.length) fail(`生成项目必须提供当前已批准脚手架合同的完整元数据: ${missing.join(", ")}`);
-    const required = ["schema_version", "contract_id", "contract_version", "slice_id", "status", "router_draft_ref", "lifecycle_approval_ref", "persisted_ref", "current_version", "implementation_repository", "backend_repository", "scaffold_status", "target_git_url_or_output_dir", "allowed_write_paths", "expected_evidence_files", "verification_commands", "approval", "work_unit", "overwrite_policy"];
+    const required = ["schema_version", "contract_id", "contract_version", "scaffold_request_id", "status", "router_draft_ref", "lifecycle_approval_ref", "persisted_ref", "current_version", "implementation_repository", "backend_repository", "scaffold_status", "project_name", "target_output_dir", "base_package", "maven_coordinates", "profiles", "allowed_write_paths", "expected_evidence_files", "verification_commands", "approval", "work_unit", "generation_policy"];
     const missingFields = required.filter((field) => !isPresent(contract[field]));
     if (missingFields.length) fail(`脚手架合同缺少结构化字段: ${missingFields.join(", ")}`);
-    if (contract.schema_version !== 1 || contract.status !== "approved") fail("脚手架合同必须是 schema_version=1 且已由生命周期批准");
+    if (contract.status !== "approved") fail("脚手架合同必须已由生命周期批准");
     if (contract.contract_id !== this.options.contractId) fail("--contract-id 与脚手架合同不一致");
     if (contract.contract_version !== this.options.contractVersion) fail("--contract-version 与脚手架合同不一致");
     if (contract.current_version !== contract.contract_version) fail("脚手架合同版本不是当前版本");
@@ -164,10 +202,13 @@ class ScaffoldGenerator {
     if (contract.persisted_ref !== this.options.persistedRef) fail("--persisted-ref 与脚手架合同不一致");
     if (contract.lifecycle_approval_ref !== this.options.approvalRef) fail("--approval-ref 与脚手架合同不一致");
     if (contract.scaffold_status !== "required") fail("脚手架生成器只接受 scaffold_status=required");
+    if (contract.project_name !== this.projectName) fail("--project-name 与脚手架合同不一致");
+    if (contract.base_package !== this.basePackage) fail("--base-package 与脚手架合同不一致");
     if (!["allowed_write_paths", "expected_evidence_files", "verification_commands"].every((field) => Array.isArray(contract[field]) && contract[field].length)) fail("脚手架合同的 allowed_write_paths、expected_evidence_files、verification_commands 必须非空");
     if (!contract.expected_evidence_files.map(String).join(" ").includes(".yss/scaffold-generation.json")) fail("脚手架合同 expected_evidence_files 必须包含 .yss/scaffold-generation.json");
-    const targetRef = String(contract.target_git_url_or_output_dir);
-    if (!targetRef.includes("://") && !targetRef.startsWith("git@") && path.resolve(targetRef) !== this.outputDir) fail("脚手架合同目标目录与 --output-dir 不一致");
+    if (path.resolve(String(contract.target_output_dir)) !== this.outputDir) fail("脚手架合同 target_output_dir 与 --output-dir 不一致");
+    const allowedRoots = contract.allowed_write_paths.map((item) => path.resolve(this.outputDir, String(item)));
+    if (!allowedRoots.some((root) => isWithin(root, this.finalProjectRoot))) fail("实际项目根不在脚手架合同 allowed_write_paths 内");
     if (JSON.stringify(contract.verification_commands) !== JSON.stringify(COMMANDS)) fail("脚手架合同验证命令必须固定为三条项目根目录 ./mvnw 命令");
     const approval = contract.approval;
     if (!approval || typeof approval !== "object" || ["approval_ref", "approver", "persisted_ref", "current_version"].some((field) => !isPresent(approval[field]))) fail("脚手架合同 approval 记录不完整");
@@ -178,23 +219,57 @@ class ScaffoldGenerator {
     if (!workUnit || typeof workUnit !== "object" || workFields.some((field) => !isPresent(workUnit[field]))) fail("脚手架合同 work_unit 结构不完整");
     if (workUnit.primary_skill !== "yss-ddd-scaffold-generator" || workUnit.tdd_mode !== "controlled-generation" || workUnit.controlled_generation !== true) fail("脚手架合同 work_unit 必须绑定本 skill 和 controlled-generation");
     if (JSON.stringify(workUnit.verification_commands) !== JSON.stringify(contract.verification_commands) || JSON.stringify(workUnit.allowed_write_paths) !== JSON.stringify(contract.allowed_write_paths)) fail("脚手架合同 work_unit 与根级验证/写路径约束不一致");
-    const overwrite = contract.overwrite_policy;
-    if (!overwrite || typeof overwrite !== "object" || ["force_allowed", "overwrite_scope", "rollback_ref"].some((field) => !(field in overwrite))) fail("脚手架合同 overwrite_policy 结构不完整");
+    this.validateMavenCoordinates(contract);
+    this.validateProfiles(contract.profiles);
+    const generationPolicy = contract.generation_policy;
+    if (!generationPolicy || generationPolicy.mode !== "initialize-only" || generationPolicy.existing_target !== "unsupported" || generationPolicy.old_project_migration !== "unsupported" || generationPolicy.template_upgrade !== "unsupported") fail("脚手架合同 generation_policy 必须声明 initialize-only，且 existing_target、old_project_migration、template_upgrade 均为 unsupported");
+    this.contractDigest = sha256(contractText);
     this.scaffoldContract = contract;
   }
 
-  validateForceMetadata() {
-    if (!isPresent(this.options.overwriteScope) || !isPresent(this.options.rollbackRef)) fail("覆盖非空目录必须提供当前批准合同的覆盖范围和回滚引用: --overwrite-scope, --rollback-ref");
-    const policy = this.scaffoldContract.overwrite_policy;
-    if (policy.force_allowed !== true) fail("脚手架合同未批准非空目录覆盖");
-    if (policy.overwrite_scope !== this.options.overwriteScope) fail("--overwrite-scope 与脚手架合同不一致");
-    if (policy.rollback_ref !== this.options.rollbackRef) fail("--rollback-ref 与脚手架合同不一致");
+  validateProfiles(profiles) {
+    if (!profiles || typeof profiles !== "object") fail("脚手架合同 profiles 结构不完整");
+    for (const [name, expected] of Object.entries(SUPPORTED_PROFILES)) {
+      if (!isPresent(profiles[name])) fail(`脚手架合同 profiles 缺少 ${name}`);
+      if (profiles[name] !== expected) {
+        if (name === "persistence") fail(`unsupported persistence profile: ${profiles[name]}；只支持 ${expected}`);
+        fail(`unsupported ${name} profile: ${profiles[name]}；只支持 ${expected}`);
+      }
+    }
+    this.profiles = structuredClone(profiles);
+    if (this.options.database !== profiles.database) fail("--database 与脚手架合同 profiles.database 不一致");
+  }
+
+  validateMavenCoordinates(contract) {
+    const optionValues = [
+      this.options.groupId,
+      this.options.projectVersion,
+      this.options.parentGroupId,
+      this.options.parentArtifactId,
+      this.options.parentVersion,
+      this.options.yssComponentsVersion
+    ];
+    const providedCount = optionValues.filter(isPresent).length;
+    if (providedCount !== 0 && providedCount !== optionValues.length) {
+      fail("显式 Maven 坐标必须完整提供 groupId、项目版本、父 POM 坐标和 YSS Components 版本");
+    }
+    const coordinates = contract.maven_coordinates;
+    const parent = coordinates.parent;
+    const values = [coordinates.group_id, coordinates.project_version, parent?.group_id, parent?.artifact_id, parent?.version, coordinates.yss_components_version];
+    if (values.some((value) => !isPresent(value))) fail("脚手架合同 maven_coordinates 必须包含项目 groupId/version、父 POM GAV 和 YSS Components 版本");
+    if (providedCount !== optionValues.length) fail("合同包含 maven_coordinates 时必须传入完整 Maven 坐标参数");
+    if (JSON.stringify(values) !== JSON.stringify(optionValues)) fail("命令行 Maven 坐标与已批准脚手架合同不一致");
+    const coordinatePattern = /^[A-Za-z0-9_.-]+$/;
+    if (values.some((value) => !coordinatePattern.test(String(value)))) fail("Maven 坐标只能包含字母、数字、点、下划线和连字符");
+    this.mavenCoordinates = structuredClone(coordinates);
+    this.mavenCoordinatesSource = "approved-contract";
   }
 
   templateVars() {
     const database = this.options.database;
     const dependency = database === "mysql" ? `<dependency>\n    <groupId>com.mysql</groupId>\n    <artifactId>mysql-connector-j</artifactId>\n    <version>8.4.0</version>\n    <scope>compile</scope>\n</dependency>` : "";
-    return { project_name: this.projectName, base_package: this.basePackage, group_id: this.groupId, project_description: `${this.projectName} service`, author: this.author, date: this.date, database, driver_class: "com.mysql.cj.jdbc.Driver", db_name: this.dbName, jdbc_url: `jdbc:mysql://localhost:3306/${this.dbName}?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai`, db_dependency: dependency };
+    const coordinates = this.mavenCoordinates;
+    return { project_name: this.projectName, application_class_name: this.applicationClassName, base_package: this.basePackage, group_id: coordinates.group_id, project_version: coordinates.project_version, parent_group_id: coordinates.parent.group_id, parent_artifact_id: coordinates.parent.artifact_id, parent_version: coordinates.parent.version, yss_components_version: coordinates.yss_components_version, project_description: `${this.projectName} service`, author: this.author, date: this.date, database, driver_class: "com.mysql.cj.jdbc.Driver", db_name: this.dbName, jdbc_url: `jdbc:mysql://localhost:3306/${this.dbName}?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai`, db_dependency: dependency };
   }
   render(text) { let output = text; for (const [key, value] of Object.entries(this.templateVars())) output = output.replaceAll(`{{${key}}}`, String(value)); return output; }
   async renderTemplate(template, output) { if (!await isFile(template)) fail(`模板文件不存在: ${template}`); await writeText(output, this.render(await readFile(template, "utf8"))); }
@@ -217,10 +292,22 @@ class ScaffoldGenerator {
     await Promise.all([[pom("parent-pom.xml.template"), path.join(this.projectRoot, "pom.xml")], [pom("domain-pom.xml.template"), target(`${this.projectName}-domain`)], [pom("application-pom.xml.template"), target(`${this.projectName}-application`)], [pom("infrastructure-pom.xml.template"), target(`${this.projectName}-infrastructure`)], [pom("adapter-pom.xml.template"), target(`${this.projectName}-adapter`)], [pom("web-pom.xml.template"), target(path.join(`${this.projectName}-adapter`, `${this.projectName}-web`))], [pom("bootstrap-pom.xml.template"), target(`${this.projectName}-bootstrap`)]].map(([from, to]) => this.renderTemplate(from, to)));
     console.log("  ✓ 父级 pom.xml\n  ✓ domain pom.xml\n  ✓ application pom.xml\n  ✓ infrastructure pom.xml\n  ✓ adapter pom.xml\n  ✓ web pom.xml\n  ✓ bootstrap pom.xml");
   }
+  async generateBootstrapSource() {
+    const source = path.join(this.javaTemplateDir, "bootstrap-application.java.template");
+    const target = path.join(this.projectRoot, this.bootstrapMainSource);
+    await this.renderTemplate(source, target);
+    console.log(`\n☕ 生成机械启动入口...\n  ✓ ${this.applicationClassName}.java`);
+  }
+  async generateArchitectureRules() {
+    const source = path.join(this.javaTemplateDir, "architecture-rules-test.java.template");
+    const target = path.join(this.projectRoot, `${this.projectName}-bootstrap`, "src", "test", "java", this.packagePath, "ArchitectureRulesTest.java");
+    await this.renderTemplate(source, target);
+    console.log("  ✓ ArchitectureRulesTest.java");
+  }
   async generateConfigFiles() {
     console.log("\n⚙️  生成配置文件..."); const base = path.join(this.projectRoot, `${this.projectName}-bootstrap`, "src/main/resources");
-    await Promise.all([["application.yml.template", "application.yml"], ["logback-spring.xml.template", "logback-spring.xml"]].map(([from, to]) => this.renderTemplate(path.join(this.configTemplateDir, from), path.join(base, to))));
-    console.log("  ✓ application.yml\n  ✓ logback-spring.xml");
+    await Promise.all([["application.yml.template", "application.yml"], ["application-local.yml.template", "application-local.yml"], ["logback-spring.xml.template", "logback-spring.xml"]].map(([from, to]) => this.renderTemplate(path.join(this.configTemplateDir, from), path.join(base, to))));
+    console.log("  ✓ application.yml\n  ✓ application-local.yml\n  ✓ logback-spring.xml");
   }
   generateDatabaseScripts() { console.log("\n🗃️  保留数据库目录布局...\n  ✓ db/（业务 schema 和初始化数据由批准切片合同生成）"); }
   async generateDocumentation() {
@@ -230,7 +317,17 @@ class ScaffoldGenerator {
   }
   async writeGenerationManifest() {
     const contract = this.scaffoldContract;
-    const manifest = { schema_version: 1, contract_id: this.options.contractId, contract_version: this.options.contractVersion, approval_ref: this.options.approvalRef, router_draft_ref: this.options.routerDraftRef, persisted_ref: this.options.persistedRef, contract_file_ref: this.contractFile, slice_id: contract.slice_id, lifecycle_approval_ref: contract.lifecycle_approval_ref, current_version: contract.current_version, approver: contract.approval.approver, allowed_write_paths: contract.allowed_write_paths, expected_evidence_files: contract.expected_evidence_files, project_name: this.projectName, base_package: this.basePackage, database: this.options.database, generation_mode: "controlled-generation", force: this.options.force, overwrite_scope: this.options.overwriteScope, rollback_ref: this.options.rollbackRef, verification_commands: COMMANDS, generated_at: isoNow() };
+    const manifestRelative = ".yss/scaffold-generation.json";
+    const generatedFiles = [];
+    for (const entry of await fileEntries(this.projectRoot, { exclude: new Set([manifestRelative]) })) {
+      generatedFiles.push({ path: entry.relative, owner: "generator", sha256: sha256(await readFile(entry.absolute)) });
+    }
+    const downstream = {};
+    for (const skill of DOWNSTREAM_SKILLS) {
+      const skillFile = path.join(REPOSITORY_ROOT, ".agents", "skills", skill, "SKILL.md");
+      downstream[skill] = await isFile(skillFile) ? sha256(await readFile(skillFile)) : "unavailable";
+    }
+    const manifest = { schema_version: 2, contract_id: this.options.contractId, contract_version: this.options.contractVersion, scaffold_request_id: contract.scaffold_request_id, approval_ref: this.options.approvalRef, router_draft_ref: this.options.routerDraftRef, persisted_ref: this.options.persistedRef, contract_file_ref: this.contractFile, contract_digest: this.contractDigest, lifecycle_approval_ref: contract.lifecycle_approval_ref, current_version: contract.current_version, approver: contract.approval.approver, allowed_write_paths: contract.allowed_write_paths, expected_evidence_files: contract.expected_evidence_files, project_name: this.projectName, base_package: this.basePackage, bootstrap_main_class: `${this.basePackage}.${this.applicationClassName}`, bootstrap_main_source: this.bootstrapMainSource, maven_coordinates: this.mavenCoordinates, maven_coordinates_source: this.mavenCoordinatesSource, profiles: this.profiles, database: this.options.database, generation_mode: "controlled-generation", completion_level: "generated", generator: { id: "yss-ddd-scaffold-generator", template_digest: await treeDigest(path.join(SKILL_ROOT, "assets")) }, ownership: { generated_files: generatedFiles, user_owned_globs: ["**/src/main/java/**", "**/src/test/java/**", "db/**"] }, readiness: { downstream_skills: downstream, architecture_ruleset: sha256(await readFile(path.join(this.javaTemplateDir, "architecture-rules-test.java.template"))) }, generation_policy: { mode: "initialize-only", existing_target: "unsupported", old_project_migration: "unsupported", template_upgrade: "unsupported" }, verification_commands: COMMANDS, generated_at: isoNow() };
     await writeText(path.join(this.projectRoot, ".yss", "scaffold-generation.json"), `${JSON.stringify(manifest, null, 2)}\n`); console.log("  ✓ .yss/scaffold-generation.json");
   }
   async copyWrapperFiles() {
@@ -239,10 +336,10 @@ class ScaffoldGenerator {
     if (await exists(path.join(wrapper, ".mvn"))) await cp(path.join(wrapper, ".mvn"), path.join(this.projectRoot, ".mvn"), { recursive: true, force: true });
   }
   async validateGeneratedArtifacts() {
-    const required = [path.join(this.projectRoot, "pom.xml"), path.join(this.projectRoot, `${this.projectName}-bootstrap`, "pom.xml"), path.join(this.projectRoot, "mvnw"), path.join(this.projectRoot, ".yss", "scaffold-generation.json")];
+    const required = [path.join(this.projectRoot, "pom.xml"), path.join(this.projectRoot, `${this.projectName}-bootstrap`, "pom.xml"), path.join(this.projectRoot, this.bootstrapMainSource), path.join(this.projectRoot, "mvnw"), path.join(this.projectRoot, ".yss", "scaffold-generation.json")];
     const missing = []; for (const target of required) if (!await isFile(target)) missing.push(target); if (missing.length) fail(`生成产物缺失: ${missing.join(", ")}`);
-    const manifest = await readJson(required[3], "脚手架生成元数据清单无法读取");
-    if (manifest.contract_id !== this.options.contractId || manifest.contract_version !== this.options.contractVersion || manifest.current_version !== this.options.contractVersion || manifest.generation_mode !== "controlled-generation" || JSON.stringify(manifest.verification_commands) !== JSON.stringify(COMMANDS)) fail("脚手架生成元数据清单与当前批准合同或固定验证命令不一致");
+    const manifest = await readJson(required[4], "脚手架生成元数据清单无法读取");
+    if (manifest.schema_version !== 2 || manifest.contract_id !== this.options.contractId || manifest.contract_version !== this.options.contractVersion || manifest.current_version !== this.options.contractVersion || manifest.generation_mode !== "controlled-generation" || manifest.bootstrap_main_class !== `${this.basePackage}.${this.applicationClassName}` || manifest.bootstrap_main_source !== this.bootstrapMainSource || manifest.profiles.architecture !== SUPPORTED_PROFILES.architecture || manifest.generation_policy.mode !== "initialize-only" || manifest.generation_policy.existing_target !== "unsupported" || JSON.stringify(manifest.verification_commands) !== JSON.stringify(COMMANDS)) fail("脚手架生成元数据清单与当前批准合同、Target Profile、initialize-only 边界、机械启动入口或固定验证命令不一致");
     const stack = [this.projectRoot], binary = new Set([".class", ".db", ".jar", ".png", ".jpg", ".jpeg", ".gif"]);
     while (stack.length) { const dir = stack.pop(); for (const entry of await readdir(dir, { withFileTypes: true })) { const target = path.join(dir, entry.name); if (entry.isDirectory()) { stack.push(target); continue; } if (!entry.isFile() || binary.has(path.extname(entry.name))) continue; const content = await readFile(target, "utf8"); if (content.includes("{{") || content.includes("root/root")) fail(`生成文件包含未替换占位符或明文凭据: ${target}`); } }
   }

package/template/.hermes/skills/yss-ddd-scaffold-generator/scripts/run_scaffold_verification.mjs

@@ -10,23 +10,103 @@ const COMMANDS = PHASES.map((phase) => `./mvnw ${phase}`);
 const isoNow = () => new Date().toISOString();
 async function isFile(target) { try { return (await stat(target)).isFile(); } catch (error) { if (error.code === "ENOENT") return false; throw error; } }
 async function writeText(target, content) { await mkdir(path.dirname(target), { recursive: true }); await writeFile(target, content, "utf8"); }
+async function isExecutable(target) {
+  try { const info = await stat(target); return info.isFile() && Boolean(info.mode & 0o111); }
+  catch (error) { if (error.code === "ENOENT") return false; throw error; }
+}
+async function readTextIfPresent(target) { try { return await readFile(target, "utf8"); } catch (error) { if (error.code === "ENOENT") return ""; throw error; } }
+function configured(value) { return typeof value === "string" && value.trim().length > 0; }
+function redactSecrets(text, environment = process.env) {
+  let output = text;
+  for (const name of ["MAVEN_REPO_USERNAME", "MAVEN_REPO_PASSWORD"]) {
+    const value = environment[name];
+    if (configured(value)) output = output.replaceAll(value, `[REDACTED:${name}]`);
+  }
+  return output;
+}
+function classifyFailure(phase, outcome) {
+  if (outcome.exitCode === 0) return null;
+  const output = `${outcome.stdout}\n${outcome.stderr}`.replaceAll(/\u001B\[[0-9;]*m/g, "");
+  if (/Non-resolvable parent POM|Could not transfer artifact|Could not resolve (?:dependencies|artifact)|status code: 401|\bUnauthorized\b|PKIX path building failed|Name or service not known|Unknown host/i.test(output)) return "repository-access";
+  if (/Unable to find main class|mainClass.*(?:not found|missing)/i.test(output)) return "bootstrap-entrypoint";
+  if (/COMPILATION ERROR|Compilation failure|maven-compiler-plugin/i.test(output)) return "compilation";
+  if (phase === "validate") return "project-model";
+  if (phase === "test") return "test-failure";
+  if (phase === "package") return "packaging";
+  return "maven-execution";
+}
 function parseArgs(argv) { const result = {}; for (let index = 0; index < argv.length; index += 1) { let token = argv[index]; if (token === "--help" || token === "-h") { result.help = true; continue; } const equals = token.indexOf("="); let value; if (equals !== -1) { value = token.slice(equals + 1); token = token.slice(0, equals); } if (!["--project-root", "--evidence-dir"].includes(token)) throw new Error(`不支持的参数: ${token}`); if (value === undefined) value = argv[++index]; if (!value || value.startsWith("--")) throw new Error(`参数 ${token} 缺少值`); result[token === "--project-root" ? "projectRoot" : "evidenceDir"] = path.resolve(value); } if (result.help) return result; if (!result.projectRoot || !result.evidenceDir) throw new Error("必须提供 --project-root 和 --evidence-dir"); return result; }
 function validateManifest(manifest) {
-  const required = ["schema_version", "contract_id", "contract_version", "slice_id", "approval_ref", "approver", "lifecycle_approval_ref", "router_draft_ref", "persisted_ref", "contract_file_ref", "current_version", "allowed_write_paths", "expected_evidence_files", "verification_commands", "generation_mode"];
+  if (manifest.schema_version !== 2) throw new Error(`unsupported: scaffold Manifest schema_version=${manifest.schema_version}；只验证 Target Profile v2`);
+  const required = ["schema_version", "contract_id", "contract_version", "scaffold_request_id", "contract_digest", "profiles", "ownership", "readiness", "generation_policy", "completion_level", "approval_ref", "approver", "lifecycle_approval_ref", "router_draft_ref", "persisted_ref", "contract_file_ref", "current_version", "allowed_write_paths", "expected_evidence_files", "verification_commands", "generation_mode"];
   const missing = required.filter((field) => manifest[field] === undefined || manifest[field] === null || manifest[field] === "");
   if (manifest.generation_mode !== "controlled-generation" || missing.length) throw new Error(`脚手架生成元数据清单不完整或不是 controlled-generation: ${missing.join(", ")}`);
+  if (manifest.profiles.architecture !== "target-domain-model" || manifest.generation_policy.mode !== "initialize-only" || manifest.generation_policy.existing_target !== "unsupported" || manifest.generation_policy.old_project_migration !== "unsupported" || manifest.generation_policy.template_upgrade !== "unsupported") throw new Error("Manifest v2 必须声明 Target Profile 与严格 initialize-only；已有目标、旧项目迁移和模板升级均须为 unsupported");
   if (manifest.current_version !== manifest.contract_version) throw new Error("脚手架生成元数据清单不是当前合同版本");
   if (JSON.stringify(manifest.verification_commands) !== JSON.stringify(COMMANDS)) throw new Error("脚手架生成元数据清单验证命令不符合固定合同");
 }
-function execute(wrapper, phase, cwd) { return new Promise((resolve) => { const child = spawn(wrapper, [phase], { cwd, stdio: ["ignore", "pipe", "pipe"] }); let stdout = "", stderr = ""; child.stdout.on("data", (chunk) => { stdout += chunk; }); child.stderr.on("data", (chunk) => { stderr += chunk; }); child.on("error", (error) => resolve({ exitCode: 127, stdout: "", stderr: String(error) })); child.on("close", (code) => resolve({ exitCode: code ?? 1, stdout, stderr })); }); }
-export async function run(projectRoot, evidenceDir) {
+function execute(wrapper, phase, cwd, environment) { return new Promise((resolve) => { const child = spawn(wrapper, [phase], { cwd, env: environment, stdio: ["ignore", "pipe", "pipe"] }); let stdout = "", stderr = ""; child.stdout.on("data", (chunk) => { stdout += chunk; }); child.stderr.on("data", (chunk) => { stderr += chunk; }); child.on("error", (error) => resolve({ exitCode: 127, stdout: "", stderr: String(error) })); child.on("close", (code) => resolve({ exitCode: code ?? 1, stdout, stderr })); }); }
+export async function run(projectRoot, evidenceDir, environment = process.env) {
   const wrapper = path.join(projectRoot, "mvnw"), manifestPath = path.join(projectRoot, ".yss", "scaffold-generation.json");
   if (!await isFile(wrapper)) throw new Error(`项目根目录缺少 Maven wrapper: ${wrapper}`);
   if (!await isFile(manifestPath)) throw new Error(`项目根目录缺少脚手架生成元数据清单: ${manifestPath}`);
   let manifest; try { manifest = JSON.parse(await readFile(manifestPath, "utf8")); } catch { throw new Error(`脚手架生成元数据清单无法读取或不是合法 JSON: ${manifestPath}`); }
-  validateManifest(manifest); await mkdir(evidenceDir, { recursive: true }); const commands = [];
-  for (const phase of PHASES) { const stdoutPath = path.join(evidenceDir, `mvnw-${phase}.stdout.log`), stderrPath = path.join(evidenceDir, `mvnw-${phase}.stderr.log`), startedAt = isoNow(), started = process.hrtime.bigint(); const outcome = await execute(wrapper, phase, projectRoot); const durationMs = Number(process.hrtime.bigint() - started) / 1e6; await writeText(stdoutPath, outcome.stdout); await writeText(stderrPath, outcome.stderr); commands.push({ command: `./mvnw ${phase}`, phase, exit_code: outcome.exitCode, duration_ms: Number(durationMs.toFixed(3)), started_at: startedAt, executed_at: isoNow(), stdout_ref: stdoutPath, stderr_ref: stderrPath }); }
-  return { verification_mode: "controlled-generation", project_root: projectRoot, scaffold_manifest_ref: manifestPath, generated_at: isoNow(), status: commands.every((item) => item.exit_code === 0) ? "passed" : "failed", commands };
+  validateManifest(manifest);
+  await mkdir(evidenceDir, { recursive: true });
+  const mavenConfig = await readTextIfPresent(path.join(projectRoot, ".mvn", "maven.config"));
+  const preflight = {
+    wrapper_exists: true,
+    wrapper_executable: await isExecutable(wrapper),
+    java_home_configured: configured(environment.JAVA_HOME),
+    maven_repository_credentials_configured: configured(environment.MAVEN_REPO_USERNAME) && configured(environment.MAVEN_REPO_PASSWORD),
+    maven_repository_url_configured: configured(environment.YSS_MAVEN_REPOSITORY_URL),
+    project_settings_present: await isFile(path.join(projectRoot, ".mvn", "settings.xml")),
+    project_maven_config_present: await isFile(path.join(projectRoot, ".mvn", "maven.config")),
+    project_settings_wired: /(?:^|\s)-(?:s|-settings)\s+\.mvn\/settings\.xml(?:\s|$)/m.test(mavenConfig),
+    repository_profile: manifest.profiles.repository,
+    repository_profile_wired: /(?:^|\s)-(?:P|-activate-profiles)\s+yss-internal(?:\s|$)/m.test(mavenConfig),
+    maven_coordinates_source: manifest.maven_coordinates_source
+  };
+  const failed = [];
+  if (!preflight.wrapper_executable) failed.push("wrapper-not-executable");
+  if (!preflight.project_settings_present || !preflight.project_maven_config_present || !preflight.project_settings_wired || !preflight.repository_profile_wired) failed.push("repository-profile-not-wired");
+  if (!preflight.maven_repository_url_configured) failed.push("repository-url-not-configured");
+  if (!preflight.maven_repository_credentials_configured) failed.push("repository-credentials-not-configured");
+  if (failed.length) return { verification_mode: "controlled-generation", project_root: projectRoot, scaffold_manifest_ref: manifestPath, generated_at: isoNow(), status: "failed", failure_category: "verification-preflight", completion_level: "generated", preflight: { ...preflight, failures: failed }, commands: [] };
+  const commands = [];
+  for (const phase of PHASES) {
+    const stdoutPath = path.join(evidenceDir, `mvnw-${phase}.stdout.log`);
+    const stderrPath = path.join(evidenceDir, `mvnw-${phase}.stderr.log`);
+    const startedAt = isoNow();
+    const started = process.hrtime.bigint();
+    const outcome = await execute(wrapper, phase, projectRoot, environment);
+    const durationMs = Number(process.hrtime.bigint() - started) / 1e6;
+    await writeText(stdoutPath, redactSecrets(outcome.stdout, environment));
+    await writeText(stderrPath, redactSecrets(outcome.stderr, environment));
+    commands.push({
+      command: `./mvnw ${phase}`,
+      phase,
+      exit_code: outcome.exitCode,
+      failure_category: classifyFailure(phase, outcome),
+      duration_ms: Number(durationMs.toFixed(3)),
+      started_at: startedAt,
+      executed_at: isoNow(),
+      stdout_ref: stdoutPath,
+      stderr_ref: stderrPath
+    });
+  }
+  const failureCategory = commands.find((item) => item.failure_category)?.failure_category ?? null;
+  return {
+    verification_mode: "controlled-generation",
+    project_root: projectRoot,
+    scaffold_manifest_ref: manifestPath,
+    generated_at: isoNow(),
+    status: failureCategory === null ? "passed" : "failed",
+    failure_category: failureCategory,
+    completion_level: failureCategory === null ? "empty-scaffold-verified" : "generated",
+    preflight,
+    commands
+  };
 }
-async function main() { let args; try { args = parseArgs(process.argv.slice(2)); if (args.help) { console.log("运行 YSS 脚手架真实验证命令\n用法: node scripts/run_scaffold_verification.mjs --project-root <dir> --evidence-dir <dir>"); return 0; } const reportPath = path.join(args.evidenceDir, "scaffold-verification.json"); try { const report = await run(args.projectRoot, args.evidenceDir); await writeText(reportPath, `${JSON.stringify(report, null, 2)}\n`); console.log(`${report.status}: ${reportPath}`); return report.status === "passed" ? 0 : 1; } catch (error) { const report = { verification_mode: "controlled-generation", project_root: args.projectRoot, generated_at: isoNow(), status: "failed", error: error.message, commands: [] }; await writeText(reportPath, `${JSON.stringify(report, null, 2)}\n`); process.stderr.write(`❌ 脚手架验证无法执行: ${error.message}\n`); return 1; } } catch (error) { process.stderr.write(`❌ 脚手架验证无法执行: ${error.message}\n`); return 1; } }
+async function main() { let args; try { args = parseArgs(process.argv.slice(2)); if (args.help) { console.log("运行 YSS 脚手架真实验证命令\n用法: node scripts/run_scaffold_verification.mjs --project-root <dir> --evidence-dir <dir>"); return 0; } const reportPath = path.join(args.evidenceDir, "scaffold-verification.json"); try { const report = await run(args.projectRoot, args.evidenceDir); await writeText(reportPath, `${JSON.stringify(report, null, 2)}\n`); console.log(`${report.status}: ${reportPath}`); return report.status === "passed" ? 0 : 1; } catch (error) { const report = { verification_mode: "controlled-generation", project_root: args.projectRoot, generated_at: isoNow(), status: "failed", failure_category: "verification-preflight", error: error.message, commands: [] }; await writeText(reportPath, `${JSON.stringify(report, null, 2)}\n`); process.stderr.write(`❌ 脚手架验证无法执行: ${error.message}\n`); return 1; } } catch (error) { process.stderr.write(`❌ 脚手架验证无法执行: ${error.message}\n`); return 1; } }
 if (process.argv[1] && import.meta.url === new URL(`file://${process.argv[1]}`).href) process.exitCode = await main();