create-yss-spec 3.0.0 → 3.1.0

package/template/scripts/audit-yss-backend-skills

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { loadSkillRegistry } from "./lib/skill-registry.mjs";
+import { OBSOLETE, ROOT } from "./lib/skill-supply-chain.mjs";
+
+const checkOnly = process.argv.includes("--check");
+const registry = loadSkillRegistry();
+const capabilityBySkill = new Map();
+for (const capability of registry.capabilities) {
+  if (!capabilityBySkill.has(capability.primary_skill)) capabilityBySkill.set(capability.primary_skill, []);
+  capabilityBySkill.get(capability.primary_skill).push(capability.id);
+}
+const inbound = new Map();
+for (const [owner, dependencies] of Object.entries(registry.skill_dependencies)) {
+  for (const dependency of dependencies) {
+    if (!inbound.has(dependency.skill)) inbound.set(dependency.skill, []);
+    inbound.get(dependency.skill).push({ owner, type: dependency.type, ...(dependency.when ? { when: dependency.when } : {}) });
+  }
+}
+const recipeCallers = new Map();
+for (const recipe of registry.recipes) for (const capability of recipe.capabilities) {
+  const skill = registry.capabilities.find((item) => item.id === capability)?.primary_skill;
+  if (!skill) continue;
+  if (!recipeCallers.has(skill)) recipeCallers.set(skill, []);
+  recipeCallers.get(skill).push(recipe.id);
+}
+
+const candidates = registry.skills
+  .filter((skill) => skill.impacts.includes("backend") || capabilityBySkill.has(skill.id))
+  .map((skill) => {
+    const capabilities = capabilityBySkill.get(skill.id) ?? [];
+    const callers = [...new Set(recipeCallers.get(skill.id) ?? [])].sort();
+    const dependencies = inbound.get(skill.id) ?? [];
+    const canonicalExists = existsSync(path.join(ROOT, ".agents/skills", skill.id, "SKILL.md"));
+    let classification = "keep";
+    let rationale = "unique capability or active typed caller exists";
+    if (OBSOLETE.has(skill.id)) {
+      classification = "remove";
+      rationale = "explicitly obsolete";
+    } else if (!capabilities.length && !callers.length && !dependencies.length) {
+      classification = "narrow";
+      rationale = "backend impact is declared but no capability, recipe, or typed dependency consumes it";
+    }
+    return { skill: skill.id, classification, canonical_exists: canonicalExists, capabilities, recipe_callers: callers, dependency_callers: dependencies, rationale };
+  })
+  .sort((left, right) => left.skill.localeCompare(right.skill));
+
+const blocking = candidates.filter((item) => item.classification === "remove" && item.canonical_exists);
+if (checkOnly) {
+  const counts = Object.fromEntries(["keep", "narrow", "merge", "remove"].map((classification) => [classification, candidates.filter((item) => item.classification === classification).length]));
+  process.stdout.write(`backend skill audit passed: ${candidates.length} candidates (${Object.entries(counts).map(([key, value]) => `${key}=${value}`).join(", ")})\n`);
+} else {
+  process.stdout.write(`${JSON.stringify({ schema_version: 1, generated_from: "docs/agents/yss-skill-registry.yaml", candidates }, null, 2)}\n`);
+}
+if (blocking.length) process.exitCode = 1;

package/template/scripts/fixtures/strategic-handoff/base-stage.json

@@ -0,0 +1,91 @@
+{
+  "schema_version": 2,
+  "stage_decision_id": "stage-decision.supplier-admission",
+  "package_version": "v2",
+  "status": "approved",
+  "problem_statement": "合规准入决定分散，采购无法稳定判断当前有效资格。",
+  "target_users": [
+    "采购专员、合规专员"
+  ],
+  "mvp": [
+    "提交供应商申请、合规准入决定、采购侧有效性校验"
+  ],
+  "non_goals": [
+    "供应商结算、采购付款、通用工作流平台"
+  ],
+  "success_criteria": [
+    "新采购订单 100% 校验当前有效准入决定"
+  ],
+  "test_seams": [
+    "supplier-application-submit",
+    "admission-validity-check"
+  ],
+  "confirmed_decisions": [
+    "ComplianceReview 拥有准入规则语义，ProcurementExecution 只消费决定"
+  ],
+  "assumptions": [
+    "供应商已有唯一 subject_ref"
+  ],
+  "constraints": [
+    "保留现有采购订单流程"
+  ],
+  "unresolved_items": [
+    {
+      "item": "供应商历史资料迁移范围",
+      "type": "deferred",
+      "owner": "role.product-manager",
+      "next_action": "在 Spec synthesis 前完成数据盘点",
+      "target_version": "2026-Q4"
+    }
+  ],
+  "context_snapshot": {
+    "context_ref": "CONTEXT.md",
+    "context_schema_version": 1,
+    "document_digest": "<document-digest>",
+    "referenced_terms_digest": "<referenced-terms-digest>",
+    "term_refs": [
+      "Global/Supplier",
+      "ComplianceReview/AdmissionDecision"
+    ]
+  },
+  "domain_strategy_ref": {
+    "domain_strategy_id": "domain-strategy.supplier-admission",
+    "domain_version": "v2",
+    "digest": "<domain-strategy-digest>",
+    "status": "approved",
+    "persisted_ref": "domain-strategy.yaml"
+  },
+  "impact_assessment": {
+    "ui": true,
+    "api": true,
+    "data": true,
+    "backend": true,
+    "frontend": true,
+    "cross_repo": false,
+    "high_risk": false
+  },
+  "downstream_mapping": [
+    {
+      "domain_change": "admission-decision-validity",
+      "consumer": "spec-synthesis",
+      "propagation": "direct",
+      "reapproval_condition": "领域策略版本或有效性规则变化"
+    },
+    {
+      "domain_change": "admission-decision-validity",
+      "consumer": "ticket-decomposition",
+      "propagation": "transitive",
+      "reapproval_condition": "Spec 基线变更"
+    }
+  ],
+  "evidence_refs": [
+    "evidence.discovery.supplier",
+    "evidence.domain-strategy-review.supplier"
+  ],
+  "approval": {
+    "approval_ref": ".agents/skills/yss-stage-decision/tests/fixtures/stage-decision-approval.yaml",
+    "approver": "role.product-manager",
+    "persisted_ref": "docs/.scratch/supplier/stage-decision/stage-decision-package-v1.yaml",
+    "current_version": "v2"
+  }
+}

package/template/scripts/fixtures/strategic-handoff/base-strategy.json

@@ -0,0 +1,205 @@
+{
+  "schema_version": 2,
+  "domain_strategy_id": "domain-strategy.supplier-admission",
+  "domain_version": "v2",
+  "status": "approved",
+  "contexts": [
+    {
+      "context_id": "SupplierManagement",
+      "name": "供应商管理",
+      "responsibilities": [
+        "供应商申请、资料生命周期"
+      ],
+      "non_responsibilities": [
+        "合规决定、采购订单"
+      ],
+      "subdomain_type": "Supporting Subdomain",
+      "owner": "requirements-manager",
+      "status": "confirmed"
+    },
+    {
+      "context_id": "ComplianceReview",
+      "name": "合规审查",
+      "responsibilities": [
+        "资质审查、准入决定、有效期"
+      ],
+      "non_responsibilities": [
+        "供应商主档、采购订单"
+      ],
+      "subdomain_type": "Core Domain",
+      "owner": "product-manager",
+      "status": "confirmed"
+    },
+    {
+      "context_id": "ProcurementExecution",
+      "name": "采购执行",
+      "responsibilities": [
+        "采购选择、采购订单履行"
+      ],
+      "non_responsibilities": [
+        "合规规则、供应商申请"
+      ],
+      "subdomain_type": "Supporting Subdomain",
+      "owner": "project-manager",
+      "status": "confirmed"
+    }
+  ],
+  "subdomains": [
+    {
+      "subdomain_id": "subdomain.supplier-management",
+      "name": "Supplier Management",
+      "type": "Supporting Subdomain",
+      "rationale": "管理申请与资料生命周期，不承载差异化合规决策。",
+      "evidence_refs": [
+        "evidence.discovery.supplier"
+      ]
+    },
+    {
+      "subdomain_id": "subdomain.compliance-review",
+      "name": "Compliance Review",
+      "type": "Core Domain",
+      "rationale": "核心价值候选是企业自有的合规判断和风险规则。",
+      "evidence_refs": [
+        "evidence.discovery.compliance"
+      ]
+    }
+  ],
+  "relationships": [
+    {
+      "relationship_id": "relationship.supplier-to-compliance",
+      "from_context": "SupplierManagement",
+      "to_context": "ComplianceReview",
+      "relationship_pattern": "Customer/Supplier",
+      "semantic_upstream": "SupplierManagement",
+      "semantic_downstream": "ComplianceReview",
+      "business_authority": "SupplierManagement owns applicant facts",
+      "model_change_impact": "applicant schema changes require review adaptation",
+      "transport_direction": "SubmitSupplierForComplianceReview command",
+      "translation_responsibility": "ComplianceReview ACL",
+      "direction_explanation": "申请资料由 SupplierManagement 拥有，但技术请求方向不代表合规规则所有权。"
+    },
+    {
+      "relationship_id": "relationship.compliance-to-procurement",
+      "from_context": "ComplianceReview",
+      "to_context": "ProcurementExecution",
+      "relationship_pattern": "Published Language",
+      "semantic_upstream": "ComplianceReview",
+      "semantic_downstream": "ProcurementExecution",
+      "business_authority": "ComplianceReview owns admission validity",
+      "model_change_impact": "decision validity changes invalidate procurement acceptance",
+      "transport_direction": "admission decision events",
+      "translation_responsibility": "ProcurementExecution local projection",
+      "direction_explanation": "合规决定是语义上游；采购侧可通过事件接收并在下单时实时校验。"
+    }
+  ],
+  "scenarios": [
+    {
+      "scenario_id": "scenario.supplier-submits",
+      "actor": "supplier",
+      "preconditions": [
+        "供应商资料可编辑"
+      ],
+      "commands": [
+        "SubmitSupplierApplication"
+      ],
+      "rules": [
+        "申请材料必须完整"
+      ],
+      "events": [
+        "SupplierApplicationSubmitted"
+      ],
+      "failure_results": [
+        "材料不完整时拒绝提交"
+      ],
+      "responsible_context": "SupplierManagement",
+      "consumers": [
+        "ComplianceReview"
+      ],
+      "status": "confirmed"
+    },
+    {
+      "scenario_id": "scenario.admission-expires",
+      "actor": "compliance-officer",
+      "preconditions": [
+        "批准决定存在"
+      ],
+      "commands": [
+        "EvaluateAdmissionValidity"
+      ],
+      "rules": [
+        "过期决定不得支持新采购订单"
+      ],
+      "events": [
+        "SupplierAdmissionExpired"
+      ],
+      "failure_results": [
+        "采购下单时资格校验失败"
+      ],
+      "responsible_context": "ComplianceReview",
+      "consumers": [
+        "SupplierManagement",
+        "ProcurementExecution"
+      ],
+      "status": "confirmed"
+    }
+  ],
+  "concept_candidates": [
+    {
+      "concept_id": "domain-concept.admission-decision",
+      "name": "AdmissionDecision",
+      "context_id": "ComplianceReview",
+      "identity_features": [
+        "decision_id、subject_ref、rule_version"
+      ],
+      "lifecycle": [
+        "proposed、approved、rejected、expired、revoked"
+      ],
+      "possible_tactical_role": "Entity candidate",
+      "confidence": "high",
+      "status": "confirmed"
+    }
+  ],
+  "invariants": [
+    {
+      "invariant_id": "invariant.current-admission-required",
+      "statement": "新采购订单必须引用当前有效的准入决定。",
+      "responsible_context": "ComplianceReview",
+      "scenario_refs": [
+        "scenario.admission-expires"
+      ],
+      "verification_method": "领域场景测试和事件版本校验"
+    }
+  ],
+  "context_snapshot": {
+    "context_ref": "CONTEXT.md",
+    "context_schema_version": 1,
+    "document_digest": "<document-digest>",
+    "referenced_terms_digest": "<referenced-terms-digest>",
+    "term_refs": [
+      "Global/Supplier",
+      "ComplianceReview/AdmissionDecision"
+    ]
+  },
+  "downstream_mapping": [
+    {
+      "domain_change": "admission-decision-validity",
+      "impacts": [
+        "spec",
+        "openapi",
+        "procurement-acceptance-tests"
+      ],
+      "propagation": "stale",
+      "reapproval_condition": "ComplianceReview 决定和有效期重新批准"
+    }
+  ],
+  "evidence_refs": [
+    "evidence.discovery.supplier",
+    "evidence.discovery.compliance"
+  ],
+  "approval": {
+    "approval_ref": ".agents/skills/yss-stage-decision/tests/fixtures/domain-strategy-approval.yaml",
+    "approver": "role.product-manager",
+    "persisted_ref": "docs/.scratch/supplier/domain/domain-strategy-v1.yaml",
+    "current_version": "v2"
+  }
+}

package/template/scripts/fixtures/strategic-handoff/fixture.mjs

@@ -0,0 +1,57 @@
+import { mkdirSync, writeFileSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { sealVisualBaseline } from '../../../.agents/skills/yss-prototype-stage/scripts/visual-baseline-contract.mjs';
+import { parseContextSource, resolveContextTermRefs } from '../../lib/context-contract.mjs';
+import { read, hash, digest, json, files, sourceApprovalPolicy, treeDigest } from '../../lib/strategic-handoff-io.mjs';
+import { countersignRuleForGate } from '../../lib/digital-human-roles.mjs';
+export const context = `---
+context_schema_version: 1
+---
+# 业务上下文
+## 流程术语
+| 术语 | 含义 | 英文标识 | 避免 / 备注 |
+|---|---|---|---|
+## 业务术语
+| 术语 | 含义 | 英文标识 | 适用业务责任区 | 避免 / 备注 |
+|---|---|---|---|---|
+| 供应商 | 提供产品或服务的主体 | Supplier | Global | |
+`;
+export async function fixture(root) {
+ const put=(ref,value)=>{const p=path.join(root,ref);mkdirSync(path.dirname(p),{recursive:true});writeFileSync(p,typeof value==='string'?value:json(value));};
+ put('yss-project.yaml','schema_version: 1\nrepository_mode: project-instance\n');put('CONTEXT.md',context);
+ const source=parseContextSource(context), resolved=resolveContextTermRefs(source,['Global/Supplier']);
+ const snapshot={context_ref:'CONTEXT.md',context_schema_version:1,document_digest:source.document_digest,referenced_terms_digest:resolved.referenced_terms_digest,term_refs:['Global/Supplier']};
+function pngHeader(width, height) { const value = Buffer.alloc(24); Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]).copy(value, 0); value.writeUInt32BE(13, 8); value.write("IHDR", 12, "ascii"); value.writeUInt32BE(width, 16); value.writeUInt32BE(height, 20); return value; }
+const bundleRoot = path.join(root, "source/visual-baseline-v1"); mkdirSync(path.join(bundleRoot, "images"), { recursive: true }); mkdirSync(path.join(bundleRoot, "sources"), { recursive: true }); mkdirSync(path.join(bundleRoot, "capture"), { recursive: true });
+writeFileSync(path.join(bundleRoot, "images/primary-desktop.png"), pngHeader(1440, 900)); writeFileSync(path.join(bundleRoot, "images/primary-narrow.png"), pngHeader(390, 844));
+writeFileSync(path.join(bundleRoot, "sources/prototype.html"), "<main>supplier</main>\n"); writeFileSync(path.join(bundleRoot, "sources/interaction.md"), "# Interaction\n"); writeFileSync(path.join(bundleRoot, "sources/states.md"), "# States\n"); writeFileSync(path.join(bundleRoot, "capture/capture.mjs"), "// capture\n"); writeFileSync(path.join(bundleRoot, "capture/result.json"), "{\"result\":\"passed\"}\n");
+const baselineFile = path.join(bundleRoot, "visual-baseline.yaml");
+const baseline = { schema_version: 1, baseline_id: "visual-baseline.supplier", feature: "supplier", version: "v1", status: "approved", bundle: { format: "portable-directory", root_ref: "source/visual-baseline-v1", digest: `sha256:${"0".repeat(64)}`, size_bytes: 0, max_image_bytes: 5242880, max_bundle_bytes: 104857600 }, source: { prototype_ref: "sources/prototype.html", prototype_digest: `sha256:${"1".repeat(64)}`, interaction_spec_ref: "sources/interaction.md", interaction_spec_digest: `sha256:${"2".repeat(64)}`, state_matrix_ref: "sources/states.md", state_matrix_digest: `sha256:${"3".repeat(64)}` }, capture_environment: { browser: "chromium", browser_version: "140.0.0", operating_system: "linux", fonts_digest: `sha256:${"4".repeat(64)}`, device_scale_factor: 1, color_space: "srgb", locale: "zh-CN", timezone: "Asia/Shanghai", animations_disabled: true, cursor_hidden: true, capture_script_ref: "capture/capture.mjs", capture_script_digest: `sha256:${"5".repeat(64)}`, capture_result_ref: "capture/result.json", capture_result_digest: `sha256:${"6".repeat(64)}` }, cases: [{ case_id: "primary-desktop", route: "/supplier", page: "SupplierPage", state: "normal", viewport: { name: "desktop", width: 1440, height: 900, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-desktop.png", image_digest: `sha256:${"0".repeat(64)}`, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/prototype.html", "sources/interaction.md"], allowed_differences: [], result: "passed" }, { case_id: "primary-narrow", route: "/supplier", page: "SupplierPage", state: "normal", viewport: { name: "narrow", width: 390, height: 844, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-narrow.png", image_digest: `sha256:${"0".repeat(64)}`, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/states.md"], allowed_differences: [], result: "passed" }] };
+writeFileSync(baselineFile, JSON.stringify(baseline)); const sealedBaseline = await sealVisualBaseline(baselineFile, bundleRoot);
+const visualBaselineRef = { baseline_id: sealedBaseline.baseline_id, version: sealedBaseline.version, digest: sealedBaseline.bundle.digest, status: "approved", persisted_ref: "source/visual-baseline-v1", manifest_ref: "visual-baseline.yaml", case_ids: sealedBaseline.cases.map((item) => item.case_id) };
+
+ const roles=sourceApprovalPolicy(read(new URL('./source-roles.json',import.meta.url)));
+ put('docs/agents/digital-human-roles.yaml',roles);
+ put('preview/index.html','<!doctype html><html><body><button onclick="this.textContent=\'已提交\'">提交</button></body></html>');
+ put('prototype-src/main.js','export const state = "ready";');
+ put('prototype-src/pnpm-lock.yaml','lockfileVersion: 9');
+ put('evidence/offline.log','Synthetic fixture for CLI tests; not product verification.');
+ const previewDigest=digest(files(root,'preview').map(ref=>({path:path.posix.relative('preview',ref),sha256:hash(readFileSync(path.join(root,ref)))})));
+ put('evidence/offline.json',{network_mode:'offline',exit_code:0,command:'synthetic fixture',executed_at:'2026-09-05T00:00:00Z',preview_digest:previewDigest,case_ids:['primary-desktop','primary-narrow'],evidence_refs:['evidence/offline.log']});
+ const baseStrategy=read(new URL('./base-strategy.json',import.meta.url));
+ const strategy={...baseStrategy,schema_version:2,domain_strategy_id:'domain-strategy.supplier',domain_version:'v1',status:'approved',contexts:baseStrategy.contexts,traceability_version:1,rule_catalog:[{rule_id:'rule.complete',statement:'申请材料必须完整',responsible_context:'SupplierManagement',status:'confirmed'}],scenarios:[{scenario_id:'scenario.submit',actor:'supplier',preconditions:['draft'],commands:['Submit'],rules:['申请材料必须完整'],rule_refs:['rule.complete'],events:['Submitted'],success_results:['已提交'],failure_results:['缺材料拒绝'],responsible_context:'SupplierManagement',consumers:[],status:'confirmed',critical:true}],invariants:[{invariant_id:'invariant.complete',statement:'申请材料必须完整',rule_ref:'rule.complete',responsible_context:'SupplierManagement',scenario_refs:['scenario.submit'],verification_method:'test'}],context_snapshot:snapshot,evidence_refs:['evidence/offline.log']};
+ strategy.approval={approval_ref:'approvals/domain_strategy_ref.yaml',approver:'role.product-manager',persisted_ref:'source/strategy.yaml',current_version:'v1'};
+ strategy.subdomains.forEach(x=>x.evidence_refs=['evidence/offline.log']);
+ put('source/strategy.yaml',strategy);
+ const stage={...read(new URL('./base-stage.json',import.meta.url)),schema_version:2,stage_decision_id:'stage-decision.supplier',package_version:'v1',status:'approved',domain_strategy_ref:{domain_strategy_id:strategy.domain_strategy_id,domain_version:'v1',status:'approved',persisted_ref:'source/strategy.yaml',digest:digest(strategy)},context_snapshot:snapshot,unresolved_items:[]};
+ stage.approval={approval_ref:'approvals/stage_decision_package_ref.yaml',approver:'role.product-manager',persisted_ref:'source/stage.yaml',current_version:'v1'};stage.evidence_refs=['evidence/offline.log'];
+ put('source/stage.yaml',stage);put('source/spec.md','# 供应商提交\n');put('source/tickets.yaml',{status:'approved'});
+ const ref=(id,p,kind)=>({id,version:'v1',status:'approved',persisted_ref:p,digest:kind==='canonical-json'?digest(read(path.join(root,p))):hash(readFileSync(path.join(root,p)))});
+ const sourceRefs={domain_strategy_ref:ref(strategy.domain_strategy_id,'source/strategy.yaml','canonical-json'),stage_decision_package_ref:ref(stage.stage_decision_id,'source/stage.yaml','canonical-json'),spec_ref:ref('spec.supplier','source/spec.md'),prototype_ref:ref('prototype.supplier','preview/index.html'),visual_baseline_ref:visualBaselineRef,business_ticket_set_ref:ref('business-ticket-set.supplier','source/tickets.yaml','canonical-json')};
+ const terminalGate=countersignRuleForGate(roles.gate_policy,'gate.strategic-design-handoff-approved')?'gate.strategic-design-handoff-approved':'gate.stage-decision-package-approved';
+ const gates={domain_strategy_ref:'gate.domain-strategy-approved',stage_decision_package_ref:'gate.stage-decision-package-approved',spec_ref:'gate.spec-baseline-approved',prototype_ref:'gate.user-confirmation',visual_baseline_ref:'gate.user-confirmation',business_ticket_set_ref:terminalGate,handoff:terminalGate};
+ const approvals=Object.fromEntries([...Object.keys(sourceRefs),'handoff'].map(key=>[key,{record_ref:`approvals/${key}.yaml`,gate_id:gates[key],digest_kind:key==='visual_baseline_ref'?'visual-baseline':['domain_strategy_ref','stage_decision_package_ref','business_ticket_set_ref'].includes(key)?'canonical-json':'sha256-bytes'}]));
+ const handoff={schema_version:3,handoff_id:'strategic-design-handoff.supplier',handoff_version:'v1',status:'approved',source:sourceRefs,source_context_snapshot:snapshot,context_delta:{added:resolved.terms.map(({term_ref,term,meaning,english_identifier,context_id,forbidden_aliases})=>({term_ref,term,meaning,english_identifier,context_id,forbidden_aliases})),updated:[],deprecated:[]},target_context_reconciliation:{target_context_ref:'CONTEXT.md',reconciliation_schema_ref:'docs/process/schemas/context-reconciliation.schema.json',required_before_skill:'yss-tactical-design',status:'pending'},target:{team:'downstream-rd-team',skill:'yss-tactical-design',output:'tactical-design-contract'},problem_and_business_outcomes:['提交供应商材料'],bounded_context_and_subdomain_map:['SupplierManagement'],context_map_and_translation_responsibility:['SupplierManagement'],ubiquitous_language_and_concept_candidates:['Global/Supplier'],scenarios_and_business_invariants:['rule.complete','scenario.submit'],tactical_design_questions:['一致性边界'],deferred_decisions_and_ownership:[],evidence_and_version_digests:['evidence/offline.log'],acceptance:['traceability'],package_export:{schema_version:1,approvals,additional_files:[],reference_map:{},prototype:{profile:'H2',preview_root:'preview',entry_ref:'preview/index.html',verification_ref:'evidence/offline.json',verification_digest:hash(readFileSync(path.join(root,'evidence/offline.json'))),source_digest:treeDigest(root,'prototype-src'),source_root:'prototype-src',lock_ref:'prototype-src/pnpm-lock.yaml'}}};
+ const sign=()=>{put('handoff.yaml',handoff);for(const[key,approval]of Object.entries(approvals)){const asset=key==='handoff'?{id:handoff.handoff_id,version:handoff.handoff_version,digest:hash(readFileSync(path.join(root,'handoff.yaml')))}:sourceRefs[key];put(approval.record_ref,{schema_version:1,gate_id:approval.gate_id,decision:'approved',actor_kind:'digital-human',role_id:countersignRuleForGate(roles.gate_policy,approval.gate_id).countersigners[0],runtime_id:'runtime.generic',principal_ref:'synthetic-maintenance-fixture',artifact_bindings:[{id:asset.id||asset.baseline_id,version:asset.version,digest:asset.digest}]});}};
+ sign();return{handoff,strategy,stage,put,sign,snapshot};
+}