create-yss-spec 3.0.0 → 3.1.0

package/template/.cursor/skills/yss-mvc-scaffold-generator/references/history/generate_project.test.mjs.txt

@@ -0,0 +1,341 @@
+import test from "node:test";
+// Historical Oracle/Mock fixtures; retained for migration audit only.
+import assert from "node:assert/strict";
+import { mkdtemp, readFile, readdir, rm, stat, writeFile, mkdir } from "node:fs/promises";
+import { spawnSync } from "node:child_process";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const script = path.join(path.dirname(fileURLToPath(import.meta.url)), "generate_project.mjs");
+const verifyScript = path.join(path.dirname(fileURLToPath(import.meta.url)), "verify_project.mjs");
+const harnessRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../../..");
+const gitAuthorEnvironment = {
+  GIT_CONFIG_COUNT: "1",
+  GIT_CONFIG_KEY_0: "user.name",
+  GIT_CONFIG_VALUE_0: "Scaffold Tester"
+};
+function run(args, options = {}) {
+  return spawnSync(process.execPath, [script, ...args], {
+    encoding: "utf8",
+    ...options,
+    env: { ...process.env, ...gitAuthorEnvironment, ...(options.env ?? {}) }
+  });
+}
+async function expectedDistributedLock() {
+  const lock = JSON.parse(await readFile(path.join(harnessRoot, "skills-lock.json"), "utf8"));
+  delete lock.skills?.shared?.["yss-mvc-scaffold-generator"];
+  for (const platform of Object.values(lock.skills?.platform ?? {})) delete platform?.["yss-mvc-scaffold-generator"];
+  return `${JSON.stringify(lock, null, 2)}\n`;
+}
+test("生成固定六模块和 mock endpoint", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-scaffold-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "item1"); const result = run(["--project-name", "data-analysis-item1", "--base-package", "com.yss.dataanalysis.item1", "--target-dir", target, "--database", "oracle", "--with-mock"]);
+  assert.equal(result.status, 0, result.stderr); const backend = target; const pom = await readFile(path.join(backend, "pom.xml"), "utf8");
+  const skillUtils = path.join(base, "skillUtils");
+  for (const module of ["server", "core", "client", "repository", "adapter", "feign-client"]) assert.match(pom, new RegExp(`<module>${module}</module>`));
+  const controller = await readFile(path.join(backend, "server/src/main/java/com/yss/dataanalysis/item1/server/controller/AnalysisController.java"), "utf8"); assert.match(controller, /\/api\/analysis/); assert.doesNotMatch(controller, /;[ \t]+import /);
+  assert.match(controller, /\* \u6570\u636e\u5206\u6790\u67e5\u8be2\u63a5\u53e3\u3002/);
+  assert.match(controller, /@author Scaffold Tester/);
+  assert.match(controller, /@date \d{4}\/\d{2}\/\d{2} \d{2}:\d{2}/);
+  assert.match(controller, /\* \u5206\u9875\u67e5\u8be2\u6570\u636e\u5206\u6790\u7ed3\u679c\u3002[\s\S]*@param query[\s\S]*@return \u6570\u636e\u5206\u6790\u5206\u9875\u7ed3\u679c/);
+  const mock = await readFile(path.join(backend, "adapter/src/main/java/com/yss/dataanalysis/item1/adapter/mock/MockAnalysisQueryExecutor.java"), "utf8"); assert.match(mock, /source|"mock"/);
+  const configuration = await readFile(path.join(backend, "server/src/main/java/com/yss/dataanalysis/item1/server/configuration/AnalysisConfiguration.java"), "utf8"); assert.match(configuration, /Profile\("mock"\)/); assert.match(configuration, /Profile\("oracle & !mock"\)/);
+  await readFile(path.join(backend, "server/src/main/java/com/yss/dataanalysis/item1/Application.java"), "utf8");
+  const controllerTest = await readFile(path.join(backend, "server/src/test/java/com/yss/dataanalysis/item1/server/controller/AnalysisControllerTest.java"), "utf8");
+  assert.match(controllerTest, /pageNo/);
+  assert.match(await readFile(path.join(target, "yss-project.yaml"), "utf8"), /repository_mode: project-instance/);
+  const generatedAgents = await readFile(path.join(target, "AGENTS.md"), "utf8");
+  assert.match(generatedAgents, /当前仓库是 `project-instance`，模板维护只在上游 Harness 执行/);
+  assert.doesNotMatch(generatedAgents, /按“影响面 → 单一事实来源 → 投影 \/ 派生资产 → 分级证据”维护/);
+  assert.match(await readFile(path.join(target, "CONTEXT.md"), "utf8"), /AnalysisDataset/);
+  assert.match(await readFile(path.join(target, ".artifact-workspace.yaml"), "utf8"), /kind: service/);
+  assert.match(await readFile(path.join(target, "docs/service/module-map.md"), "utf8"), /feign-client/);
+  assert.match(await readFile(path.join(target, "docs/service/current-capabilities.md"), "utf8"), /普通功能开发不手工修改/);
+  assert.match(await readFile(path.join(target, "docs/process/implementation-repo-registry.yaml"), "utf8"), /repository_scope: external-repository/);
+  const analysisProject = await readFile(path.join(target, "docs/process/analysis-project.yaml"), "utf8"); assert.match(analysisProject, /project_name: data-analysis-item1/); assert.doesNotMatch(analysisProject, /galaxy-data-analysis|fegin-client/);
+  assert.match(await readFile(path.join(target, "docs/process/lifecycle-registry.yaml"), "utf8"), /schema_version:/);
+  assert.match(await readFile(path.join(target, "docs/templates/vertical-slice-ticket-template.md"), "utf8"), /status: ready-for-human/);
+  assert.match(await readFile(path.join(target, "docs/templates/local-parent-ticket-template.md"), "utf8"), /lifecycle_status \| routing \/ running \/ paused-human-gate \/ blocked \/ completed/);
+  const lifecycleContract = await readFile(path.join(skillUtils, ".agents/skills/yss-product-lifecycle/references/orchestration-contract.yaml"), "utf8");
+  assert.match(lifecycleContract, /entry_routing:/);
+  assert.match(lifecycleContract, /workflow_execution_result:/);
+  assert.match(lifecycleContract, /work_unit_routes:/);
+  assert.match(await readFile(path.join(target, "docs/templates/approval-record-template.yaml"), "utf8"), /gate_id:/);
+  assert.match(await readFile(path.join(target, "docs/templates/implementation-routing-template.md"), "utf8"), /implementation/);
+  assert.match(await readFile(path.join(target, "docs/templates/verification-record-template.md"), "utf8"), /verification/i);
+  await readFile(path.join(skillUtils, ".agents/skills/yss-product-lifecycle/SKILL.md"), "utf8");
+  for (const projection of [".agents", ".claude", ".codex", ".cursor", ".pi", ".qoder", ".trae"]) {
+    await assert.rejects(stat(path.join(skillUtils, projection, "skills/yss-mvc-scaffold-generator")), { code: "ENOENT" });
+  }
+  assert.equal(path.resolve(spawnSync("git", ["-C", target, "rev-parse", "--show-toplevel"], { encoding: "utf8" }).stdout.trim()), path.resolve(target));
+  assert.equal(spawnSync("git", ["-C", target, "branch", "--show-current"], { encoding: "utf8" }).stdout.trim(), "main");
+  assert.equal(spawnSync("git", ["-C", target, "rev-list", "--all", "--count"], { encoding: "utf8" }).stdout.trim(), "0");
+  assert.equal(spawnSync("git", ["-C", target, "remote"], { encoding: "utf8" }).stdout.trim(), "");
+  const verification = spawnSync(process.execPath, [verifyScript, "--project-root", target], { encoding: "utf8" });
+  assert.equal(verification.status, 0, verification.stderr);
+  await assert.rejects(stat(path.join(skillUtils, ".agents/skills/data-analysis-java-implementation")), { code: "ENOENT" });
+  const implementationRegistry = await readFile(path.join(target, "docs/process/implementation-repo-registry.yaml"), "utf8");
+  assert.doesNotMatch(implementationRegistry, /data-analysis-java-implementation|verify_java_web_style\.mjs/);
+  assert.match(implementationRegistry, /fmt-maven-plugin:2\.9\.1:check/);
+  assert.doesNotMatch(implementationRegistry, /smart-doc-maven-plugin:[^\s]+:openapi/);
+  assert.doesNotMatch(implementationRegistry, /smart-doc-verification\.md/);
+  const projectInstanceDocs = await Promise.all([
+    "AGENTS.md",
+    "docs/agents/skills-maintenance.md",
+    "docs/agents/gitlab-workflow-skills.md",
+    "docs/agents/issue-tracker.md",
+    "docs/process/implementation-repo-integration.md",
+    "docs/process/harness-process-tailoring.md",
+    "docs/templates/build-architecture-checklist-template.md"
+  ].map((relative) => readFile(path.join(target, relative), "utf8")));
+  const staleProjectCommands = /scripts\/(?:verify-template|sync-skills|update-skill-lock|export-yss-skills|verify-upstream-skill-source|verify-maintenance-checkpoint|verify-implementation-path-scenarios|gitworks)/;
+  for (const body of projectInstanceDocs) assert.doesNotMatch(body, staleProjectCommands);
+  const serverPom = await readFile(path.join(backend, "server/pom.xml"), "utf8");
+  assert.match(serverPom, /<profiles>[\s\S]*<id>nacos<\/id>[\s\S]*<activeByDefault>true<\/activeByDefault>/);
+  assert.match(serverPom, /<app\.env>dev<\/app\.env>[\s\S]*<app\.profiles>nacos<\/app\.profiles>/);
+  assert.match(serverPom, /spring-boot-maven-plugin/);
+  assert.match(serverPom, /<includes>[\s\S]*data-analysis-item1-client[\s\S]*data-analysis-item1-core[\s\S]*data-analysis-item1-repository[\s\S]*<\/includes>/);
+  const smartDocPlugin = serverPom.match(/<plugin>(?:(?!<\/plugin>)[\s\S])*?<artifactId>smart-doc-maven-plugin<\/artifactId>(?:(?!<\/plugin>)[\s\S])*?<\/plugin>/)?.[0];
+  assert.ok(smartDocPlugin);
+  assert.doesNotMatch(smartDocPlugin, /<executions>/);
+  const smartDoc = await readFile(path.join(backend, "server/src/main/resources/smart-doc.json"), "utf8");
+  assert.match(smartDoc, /"projectName": "data-analysis-item1"/);
+  assert.match(smartDoc, /"packageFilters": "com\.yss\.dataanalysis\.item1\.server\.controller\.\*"/);
+  assert.match(smartDoc, /"showAuthor": true/);
+  assert.match(smartDoc, /"appToken": ""/);
+  assert.doesNotMatch(smartDoc, /43fd1d4bc1c743c1b83bf4843e8167bf|192\.168\./);
+  const logback = await readFile(path.join(backend, "server/src/main/resources/logback-spring.xml"), "utf8");
+  assert.match(logback, /springProfile name="dev,mock"/);
+  assert.match(logback, /springProfile name="uat,pro,oracle,oceanbase-oracle"/);
+  assert.match(logback, /com\.yss\.dataanalysis\.item1/);
+  const bootstrap = await readFile(path.join(backend, "server/src/main/resources/bootstrap.yml"), "utf8");
+  assert.match(bootstrap, /active: \$\{app\.env:dev\},datasource,nacos,oracle,mock/);
+  assert.doesNotMatch(bootstrap, /mock,\s*$/m);
+  const bootstrapNacos = await readFile(path.join(backend, "server/src/main/resources/bootstrap-nacos.yml"), "utf8");
+  assert.match(bootstrapNacos, /server-addr: \$\{nacosserver:192\.168\.165\.58:8848\}/);
+  assert.match(bootstrapNacos, /group: \$\{nacos_group:yss-dm\}/);
+  assert.match(bootstrapNacos, /discovery:[\s\S]*enabled: true[\s\S]*config:[\s\S]*enabled: true/);
+  const bootstrapMock = await readFile(path.join(backend, "server/src/main/resources/bootstrap-mock.yml"), "utf8");
+  assert.match(bootstrapMock, /discovery:[\s\S]*enabled: false/);
+  assert.match(bootstrapMock, /config:[\s\S]*enabled: false[\s\S]*import-check:[\s\S]*enabled: false/);
+  const applicationMock = await readFile(path.join(backend, "server/src/main/resources/application-mock.yml"), "utf8");
+  assert.match(applicationMock, /leaf:[\s\S]*leafSegmentEnable: false[\s\S]*leafSnowflakeEnable: false/);
+  assert.match(applicationMock, /com\.yss\.cloud\.mybatis\.MybatisPlusConfiguration/);
+  assert.match(applicationMock, /com\.yss\.cloud\.sankuai\.config\.LeafDataSourceConfiguration/);
+  const application = await readFile(path.join(backend, "server/src/main/java/com/yss/dataanalysis/item1/Application.java"), "utf8");
+  assert.doesNotMatch(application, /@EnableDistributedId/);
+  const databaseInfrastructure = await readFile(path.join(backend, "server/src/main/java/com/yss/dataanalysis/item1/server/configuration/DatabaseInfrastructureConfiguration.java"), "utf8");
+  assert.match(databaseInfrastructure, /@Profile\("!mock"\)/);
+  assert.match(databaseInfrastructure, /@EnableDistributedId/);
+  assert.match(databaseInfrastructure, /@Import\(MapperConfiguration.class\)/);
+});
+
+test("已有 skillUtils 落后时原子刷新并保留备份", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-skill-refresh-"));
+  t.after(() => rm(base, { recursive: true, force: true }));
+  const skillUtils = path.join(base, "skillUtils");
+  await mkdir(skillUtils, { recursive: true });
+  await writeFile(path.join(skillUtils, "skill-utils.yaml"), "schema_version: 1\nkind: yss-skill-utils\n", "utf8");
+  await writeFile(path.join(skillUtils, "skills-lock.json"), "{\"version\":0}\n", "utf8");
+  await writeFile(path.join(skillUtils, "local-marker.txt"), "preserve old installation\n", "utf8");
+  const target = path.join(base, "item-refresh");
+  const result = run(["--project-name", "data-analysis-refresh", "--base-package", "com.yss.dataanalysis.refresh", "--target-dir", target]);
+  assert.equal(result.status, 0, result.stderr);
+  const output = JSON.parse(result.stdout);
+  assert.equal(output.skill_utils_created, false);
+  assert.equal(output.skill_utils_refreshed, true);
+  assert.ok(output.skill_utils_backup);
+  assert.equal(await readFile(path.join(output.skill_utils_backup, "local-marker.txt"), "utf8"), "preserve old installation\n");
+  assert.equal(await readFile(path.join(skillUtils, "skills-lock.json"), "utf8"), await expectedDistributedLock());
+});
+
+test("已有 skillUtils 与源锁一致时直接复用", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-skill-reuse-"));
+  t.after(() => rm(base, { recursive: true, force: true }));
+  const first = run(["--project-name", "data-analysis-reuse-a", "--base-package", "com.yss.dataanalysis.reusea", "--target-dir", path.join(base, "item-a")]);
+  assert.equal(first.status, 0, first.stderr);
+  const second = run(["--project-name", "data-analysis-reuse-b", "--base-package", "com.yss.dataanalysis.reuseb", "--target-dir", path.join(base, "item-b")]);
+  assert.equal(second.status, 0, second.stderr);
+  const output = JSON.parse(second.stdout);
+  assert.equal(output.skill_utils_created, false);
+  assert.equal(output.skill_utils_refreshed, false);
+  assert.equal(output.skill_utils_backup, null);
+});
+
+test("dry-run 仅报告 skillUtils 将刷新且不修改旧目录", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-skill-dry-refresh-"));
+  t.after(() => rm(base, { recursive: true, force: true }));
+  const skillUtils = path.join(base, "skillUtils");
+  await mkdir(skillUtils, { recursive: true });
+  await writeFile(path.join(skillUtils, "skill-utils.yaml"), "schema_version: 1\nkind: yss-skill-utils\n", "utf8");
+  await writeFile(path.join(skillUtils, "skills-lock.json"), "{\"version\":0}\n", "utf8");
+  const result = run(["--project-name", "data-analysis-dry-refresh", "--base-package", "com.yss.dataanalysis.dryrefresh", "--target-dir", path.join(base, "item"), "--dry-run"]);
+  assert.equal(result.status, 0, result.stderr);
+  const output = JSON.parse(result.stdout);
+  assert.equal(output.skill_utils_refreshed, true);
+  assert.equal(output.skill_utils_backup, null);
+  assert.equal(await readFile(path.join(skillUtils, "skills-lock.json"), "utf8"), "{\"version\":0}\n");
+  assert.deepEqual((await readdir(base)).sort(), ["skillUtils"]);
+});
+
+test("Git 当前用户写入 Javadoc 且缺失时拒绝生成", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-author-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "author-project");
+  const generated = run(["--project-name", "author-project", "--base-package", "com.yss.author", "--target-dir", target], {
+    env: { GIT_CONFIG_VALUE_0: "张三" }
+  });
+  assert.equal(generated.status, 0, generated.stderr);
+  const controller = await readFile(path.join(target, "server/src/main/java/com/yss/author/server/controller/AnalysisController.java"), "utf8");
+  assert.match(controller, /@author 张三/);
+  assert.doesNotMatch(controller, /@author system/);
+
+  const missingTarget = path.join(base, "missing-author");
+  const missing = run(["--project-name", "missing-author", "--base-package", "com.yss.missing", "--target-dir", missingTarget], {
+    env: { GIT_CONFIG_COUNT: "0", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: path.join(base, "not-found.gitconfig") }
+  });
+  assert.notEqual(missing.status, 0);
+  assert.match(missing.stderr, /Git user\.name/);
+  await assert.rejects(stat(missingTarget), { code: "ENOENT" });
+});
+
+test("不启用 Mock 时不生成 bootstrap-mock 且不激活 mock profile", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-no-mock-profile-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-no-mock");
+  const result = run(["--project-name", "data-analysis-no-mock", "--base-package", "com.yss.dataanalysis.nomock", "--target-dir", target]);
+  assert.equal(result.status, 0, result.stderr);
+  const bootstrap = await readFile(path.join(target, "server/src/main/resources/bootstrap.yml"), "utf8");
+  assert.match(bootstrap, /active: \$\{app\.env:dev\},datasource,nacos,oracle/);
+  assert.doesNotMatch(bootstrap, /,mock/);
+  await assert.rejects(stat(path.join(target, "server/src/main/resources/bootstrap-mock.yml")), { code: "ENOENT" });
+});
+
+test("Maven settings \u4f5c\u4e3a外部验证输入且不写入项目", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-settings-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const settings = path.join(base, "settings.xml");
+  await writeFile(settings, "<settings/>\n");
+  const target = path.join(base, "data-analysis-item-settings");
+  const result = run(["--project-name", "data-analysis-item-settings", "--base-package", "com.yss.dataanalysis.settings", "--target-dir", target, "--maven-settings", settings]);
+  assert.equal(result.status, 0, result.stderr);
+  const manifest = await readFile(path.join(target, ".yss/scaffold-generation.json"), "utf8");
+  assert.match(manifest, /"maven_settings_mode": "external"/);
+  assert.match(manifest, /"maven_settings_required": true/);
+  assert.doesNotMatch(manifest, new RegExp(settings.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")));
+  assert.equal((await readdir(target)).includes("settings.xml"), false);
+});
+test("Maven settings 支持环境变量且显式参数优先", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-settings-resolution-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const environmentSettings = path.join(base, "environment-settings.xml");
+  const explicitSettings = path.join(base, "explicit-settings.xml");
+  await writeFile(environmentSettings, "<settings/>\n");
+  await writeFile(explicitSettings, "<settings/>\n");
+  const environmentTarget = path.join(base, "environment-project");
+  const fromEnvironment = run(["--project-name", "environment-project", "--base-package", "com.yss.environment", "--target-dir", environmentTarget, "--dry-run"], { env: { YSS_MAVEN_SETTINGS: environmentSettings } });
+  assert.equal(fromEnvironment.status, 0, fromEnvironment.stderr);
+  assert.match(fromEnvironment.stdout, /"maven_settings_source": "environment"/);
+  const explicitTarget = path.join(base, "explicit-project");
+  const fromExplicit = run(["--project-name", "explicit-project", "--base-package", "com.yss.explicit", "--target-dir", explicitTarget, "--maven-settings", explicitSettings, "--dry-run"], { env: { YSS_MAVEN_SETTINGS: environmentSettings } });
+  assert.equal(fromExplicit.status, 0, fromExplicit.stderr);
+  assert.match(fromExplicit.stdout, /"maven_settings_source": "explicit"/);
+});
+test("未指定 settings 时仍完整生成，并将依赖解析延后到验证阶段", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "yss-mvc-no-settings-"));
+  t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "no-settings-project");
+  const result = run(["--project-name", "no-settings-project", "--base-package", "com.yss.nosettings", "--target-dir", target], {
+    env: { YSS_MAVEN_SETTINGS: "", USERPROFILE: path.join(base, "missing-user"), HOME: path.join(base, "missing-home") }
+  });
+  assert.equal(result.status, 0, result.stderr);
+  const output = JSON.parse(result.stdout);
+  assert.equal(output.maven_settings_source, "maven-default");
+  assert.equal(output.maven_settings_available, false);
+  assert.equal(output.dependency_resolution, "deferred");
+  assert.equal(output.network_access_during_generation, "disabled");
+  for (const module of ["server", "core", "client", "repository", "adapter", "feign-client"]) {
+    await stat(path.join(target, module, "pom.xml"));
+  }
+  await stat(path.join(target, "mvnw"));
+  assert.equal((await readdir(target)).includes("settings.xml"), false);
+});
+test("拒绝非空目标目录", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-scaffold-nonempty-")); t.after(() => rm(base, { recursive: true, force: true })); await mkdir(base, { recursive: true }); await writeFile(path.join(base, "keep.txt"), "keep");
+  const result = run(["--project-name", "data-analysis-item1", "--base-package", "com.yss.dataanalysis.item1", "--target-dir", base]); assert.notEqual(result.status, 0); assert.match(result.stderr, /目标目录非空/);
+});
+test("允许已存在的空目标目录", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-empty-target-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-item-empty"); await mkdir(target);
+  const result = run(["--project-name", "data-analysis-item-empty", "--base-package", "com.yss.dataanalysis.empty", "--target-dir", target]);
+  assert.equal(result.status, 0, result.stderr);
+  assert.equal(path.resolve(spawnSync("git", ["-C", target, "rev-parse", "--show-toplevel"], { encoding: "utf8" }).stdout.trim()), path.resolve(target));
+});
+test("嵌套在父仓目录时仍初始化为独立 Git 根", async (t) => {
+  const parent = await mkdtemp(path.join(os.tmpdir(), "data-analysis-parent-repo-")); t.after(() => rm(parent, { recursive: true, force: true }));
+  assert.equal(spawnSync("git", ["init", "--initial-branch=parent-main", parent], { encoding: "utf8" }).status, 0);
+  const target = path.join(parent, "data-analysis-item2");
+  const result = run(["--project-name", "data-analysis-item2", "--base-package", "com.yss.dataanalysis.item2", "--target-dir", target]);
+  assert.equal(result.status, 0, result.stderr);
+  assert.equal(path.resolve(spawnSync("git", ["-C", target, "rev-parse", "--show-toplevel"], { encoding: "utf8" }).stdout.trim()), path.resolve(target));
+  assert.equal(spawnSync("git", ["-C", target, "branch", "--show-current"], { encoding: "utf8" }).stdout.trim(), "main");
+});
+test("dry-run 不创建目录或 Git 仓库", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-dry-run-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-item3");
+  const result = run(["--project-name", "data-analysis-item3", "--base-package", "com.yss.dataanalysis.item3", "--target-dir", target, "--dry-run"]);
+  assert.equal(result.status, 0, result.stderr);
+  assert.match(result.stdout, /"mode": "dry-run"/);
+  assert.equal(spawnSync("git", ["-C", target, "rev-parse", "--show-toplevel"], { encoding: "utf8" }).status, 128);
+});
+test("Git 预检失败时不留下目标目录或 staging", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-no-git-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-item4");
+  const result = run(["--project-name", "data-analysis-item4", "--base-package", "com.yss.dataanalysis.item4", "--target-dir", target], { env: { ...process.env, PATH: "" } });
+  assert.notEqual(result.status, 0); assert.match(result.stderr, /未检测到可用的 Git/);
+  await assert.rejects(stat(target), { code: "ENOENT" });
+  assert.deepEqual((await readdir(base)).filter((name) => name.includes(".staging-")), []);
+});
+test("staging 创建后中间步骤失败时只清理本轮 staging", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-git-init-fail-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const occupied = path.join(base, ".data-analysis-item5.staging-occupied"); await mkdir(occupied); await writeFile(path.join(occupied, "keep.txt"), "keep");
+  const target = path.join(base, "data-analysis-item5");
+  const result = run(["--project-name", "data-analysis-item5", "--base-package", "com.yss.dataanalysis.item5", "--target-dir", target], { env: { ...process.env, NODE_ENV: "test", YSS_SCAFFOLD_TEST_FAIL_AFTER_STAGING: "1" } });
+  assert.notEqual(result.status, 0); assert.match(result.stderr, /staging 后失败/);
+  await assert.rejects(stat(target), { code: "ENOENT" });
+  assert.equal(await readFile(path.join(occupied, "keep.txt"), "utf8"), "keep");
+  assert.deepEqual((await readdir(base)).filter((name) => name.startsWith(".data-analysis-item5.staging-") && name !== path.basename(occupied)), []);
+});
+test("生成期间空目标目录被写入时保留新内容并拒绝替换", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-target-race-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-item6"); await mkdir(target);
+  const result = run(["--project-name", "data-analysis-item6", "--base-package", "com.yss.dataanalysis.item6", "--target-dir", target], { env: { ...process.env, NODE_ENV: "test", YSS_SCAFFOLD_TEST_WRITE_TARGET_DURING_STAGING: "1" } });
+  assert.notEqual(result.status, 0);
+  assert.equal(await readFile(path.join(target, "keep.txt"), "utf8"), "concurrent content\n");
+  assert.deepEqual((await readdir(base)).filter((name) => name.startsWith(".data-analysis-item6.staging-")), []);
+});
+test("结构验证器拒绝与生成清单不一致的实现仓登记", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-registry-drift-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-item7");
+  const result = run(["--project-name", "data-analysis-item7", "--base-package", "com.yss.dataanalysis.item7", "--target-dir", target]);
+  assert.equal(result.status, 0, result.stderr);
+  const registryPath = path.join(target, "docs/process/implementation-repo-registry.yaml");
+  const registry = await readFile(registryPath, "utf8");
+  await writeFile(registryPath, registry.replace("repository_scope: external-repository", "repository_scope: harness-apps"));
+  const verification = spawnSync(process.execPath, [verifyScript, "--project-root", target], { encoding: "utf8" });
+  assert.notEqual(verification.status, 0);
+  assert.match(verification.stderr, /实现仓登记与生成清单不一致/);
+});
+test("OceanBase Oracle 仅生成指定驱动并保持 Java 8 基线", async (t) => {
+  const base = await mkdtemp(path.join(os.tmpdir(), "data-analysis-oceanbase-")); t.after(() => rm(base, { recursive: true, force: true }));
+  const target = path.join(base, "data-analysis-item8");
+  const result = run(["--project-name", "data-analysis-item8", "--base-package", "com.yss.dataanalysis.item8", "--target-dir", target, "--database", "oceanbase-oracle", "--with-mock"]);
+  assert.equal(result.status, 0, result.stderr);
+  const parentPom = await readFile(path.join(target, "pom.xml"), "utf8");
+  const repositoryPom = await readFile(path.join(target, "repository/pom.xml"), "utf8");
+  assert.match(parentPom, /<java.version>1.8<\/java.version>/);
+  assert.match(parentPom, /<version>2.0.0-SNAPSHOT<\/version>/);
+  assert.match(repositoryPom, /oceanbase-client/);
+  assert.doesNotMatch(repositoryPom, /ojdbc8/);
+  const querySource = await readFile(path.join(target, "client/src/main/java/com/yss/dataanalysis/item8/client/query/AnalysisQuery.java"), "utf8");
+  assert.doesNotMatch(querySource, /\brecord\b|List\.of|Map\.of|jakarta\./);
+  const verification = spawnSync(process.execPath, [verifyScript, "--project-root", target], { encoding: "utf8" });
+  assert.equal(verification.status, 0, verification.stderr);
+});

package/template/.cursor/skills/yss-mvc-scaffold-generator/references/history/skill.md

@@ -0,0 +1,87 @@
+---
+name: yss-mvc-scaffold-generator
+description: 从空目录初始化独立 Git 管理的 YSS Java 8 MVC 数据分析 project-instance，生成固定六模块、YSS 标准组件、Oracle/OceanBase Oracle 与 Mock HTTP API；不用于通用 DDD 服务。
+---
+
+# YSS MVC Scaffold Generator
+
+本 Skill 是 YSS MVC 数据分析项目的确定性机械生成器。它生成独立 `project-instance`、独立 Git 仓库，并将项目根直接作为 Maven 工程根，包含 `server`、`core`、`client`、`repository`、`adapter`、`feign-client` 六模块；业务功能仍须回到 `yss-product-lifecycle` 与 `yss-implementation-contract-compiler` 按垂直切片实现。
+
+生成器编排入口位于 `scripts/generate_project.mjs`，参数与环境解析、skillUtils 文件操作、项目治理封装和 Maven/Java 模板分别位于 `scripts/lib/`。初始化阶段只写入 staging 目录并在成功后原子重命名，不执行 Maven 或网络依赖下载。
+
+用户以“初始化新项目”进入时，由 `product-service-artifacts` 调用本生成器并默认附加 `docs/service/` 服务级研发产物；不要要求用户在提示词中另行说明“初始化产物”。未提供职责时生成 `skeleton`，不阻断工程创建。
+
+## 输入
+
+- `project-name`：小写连字符项目名。
+- `base-package`：合法 Java 包名。
+- `target-dir`：最终项目根目录，必须显式给出。
+- `database`：支持 `oracle`、`oceanbase-oracle`，默认 `oracle`。
+- `with-mock`：生成 `mock` Profile、Mock 执行器及 HTTP 冒烟测试。
+- `maven-settings`：可选的外部 Maven settings 绝对路径，仅用于后续验证；未显式提供时依次读取 `YSS_MAVEN_SETTINGS` 和用户目录 `.m2/settings.xml`。不复制进项目、不写入生成清单。
+
+## 执行
+
+先预演：
+
+```bash
+node scripts/generate_project.mjs --project-name mvc-analysis-item1 --base-package com.yss.dataanalysis.item1 --target-dir /path/to/mvc-analysis-item1 --database oracle --with-mock --maven-settings /path/to/settings.xml --dry-run
+```
+
+确认目标目录后去掉 `--dry-run`。生成后运行：
+
+```bash
+node scripts/verify_project.mjs --project-root /path/to/mvc-analysis-item1
+cd /path/to/mvc-analysis-item1
+./mvnw validate
+./mvnw test
+./mvnw package
+./mvnw spring-boot:run -pl mvc-analysis-item1-server -Dspring-boot.run.profiles=mock
+```
+
+Windows 使用 `mvnw.cmd`。指定外部 settings 时，Maven 命令必须加 `-s <settings.xml>`。启动后对 `POST /api/analysis/query` 执行 HTTP 冒烟测试。
+
+生成项目进入 API/Controller 实现后，登记命令必须包含 Java Web/Javadoc 检查、`fmt:check`、测试和构建。Smart-doc 仅作为人工按需从 Controller 生成辅助文档的工具，不属于默认 AI Coding 验证链路；只有用户明确要求生成 Smart-doc 文档时才执行对应 goal。
+
+生成结果包含根 `yss-project.yaml`、`AGENTS.md`、`CONTEXT.md`、生命周期事实源、共享 skills、本地 Ticket 入口、`external-repository` 实现仓库登记和 `.gitignore`。生成器执行 `git init --initial-branch=main`；旧版 Git自动回退到 `git init` 后重命名分支。只初始化仓库，不创建 commit 或 remote。
+
+## 硬约束
+
+- `target-dir` 是最终项目根，不在其下再次创建项目名目录。
+- Windows 下优先使用纯 ASCII、长度可控且不属于其他项目 Git 根的父目录（例如 `C:\\projects`）；旧 Maven 插件在非 ASCII 长路径上可能产生 reactor classpath 编码错误。
+- 非空目标目录拒绝生成；本 Skill 不提供隐式覆盖或删除。
+- 目标目录必须成为独立 Git 根；生成前必须能执行 `git --version`，生成后必须验证 Git 根等于 `target-dir`、分支为 `main`、commit 数为零且 remote 为空。
+- 生成前必须从 `git config --get user.name` 读取非空作者名；作者名包含换行或 `*/` 时拒绝生成。生成的 Controller 类和公开接口方法以该值填写 `@author`，不得固定为 `system`。
+- 项目根同时是 Maven 工程根和独立 Git 根，固定登记为 `repository_scope: external-repository`、`project_root: .`；六模块直接位于项目根目录。
+- 生成内容先写入同父目录 staging，全部步骤成功后再原子重命名；失败时只清理本次 staging，不留下不可重试的半成品。Maven 依赖解析明确延后到验证阶段；settings 缺失只记录 `maven-default` / `maven_settings_available=false`，不会压缩或截断生成的文件结构。
+- 每个项目持有自己的 `project-instance` 身份与业务资产；不得为了新项目改写模板工具仓库的项目名称或业务上下文。
+- 模块名固定使用正确拼写 `feign-client`；旧项目中的 `fegin-client` 只作为迁移来源，不继续传播。
+- Mock 与 Oracle 使用同一 Controller 和 DTO 契约，只替换 `AnalysisQueryExecutor` 实现。
+- Mock 仅用于本地联调和契约验证，不得携带真实凭据或生产数据。
+- 启用 Mock 时必须生成 `bootstrap-mock.yml`，并在 Spring Cloud Bootstrap 阶段同时禁用 Nacos Discovery、Nacos Config 和 Config import-check；不能只在 `application-mock.yml` 中禁用。
+- `bootstrap.yml` 的默认顺序为 `${app.env:dev},datasource,nacos,<database-profile>,mock`，`mock` 必须最后以覆盖 Nacos Bootstrap 配置，且 profile 列表不得有尾随逗号。未启用 Mock 时不生成、不激活 `mock`。
+- Mock 与数据库 profile 同时出现时，Mock 执行器优先；数据库执行器使用 `<database-profile> & !mock` 表达式，禁止两个 `AnalysisQueryExecutor` 同时注册。
+- Mock 的 `application-mock.yml` 必须关闭 Leaf Segment/Snowflake，并在 `spring.autoconfigure.exclude` 中排除 `DataSourceAutoConfiguration`、`MybatisPlusConfiguration` 和 `LeafDataSourceConfiguration`；组件扫描同时排除 `com.yss.cloud.mybatis..*`、`com.yss.cloud.sankuai..*`，`@EnableDistributedId` 与 `MapperConfiguration` 只允许在 `!mock` 配置类中加载，确保无数据库时 Mock 测试和 HTTP 冒烟可运行。
+- Oracle Adapter 只保留可编译 seam；连接信息通过环境变量注入，生成器不写真实账号密码。
+- 工程版本、YSS 父 POM 和组件 BOM 固定为 `2.0.0-SNAPSHOT`，运行时固定 Java 8。
+- 标准能力默认包含审计日志、分布式 ID、Excel、Nacos、Redis Cache、OpenFeign、Smart-doc、用户信息和 Actuator。
+- server POM 必须保留 `spring-boot-maven-plugin`和默认激活的 `nacos` profile；Nacos 依赖只在该 profile 中声明。
+- `bootstrap-nacos.yml` 默认使用 `${nacosserver:192.168.165.58:8848}`、`${nacos_group:yss-dm}` 和 `${namespace:yss-datamiddle}`，Discovery/Config 在 `nacos` profile 中开启，并由 `bootstrap-mock.yml` 在 Mock 模式覆盖关闭。
+- Smart-doc 使用 `assets/smart-doc.json.template`的完整配置并动态生成项目名、Controller 包和修订时间；Torna Token 与内网地址不进入生成项目。Smart-doc 插件保留跨模块 `includes`，但不绑定 Maven `executions`，不进入默认 `validate` / `test` / `package` / CI / AI Coding 验证命令。
+- Logback 使用 `assets/logback-spring.xml.template`；`dev,mock` 与 `uat,pro,oracle,oceanbase-oracle` 必须是并列 profile，项目名和基础包动态替换。
+- Controller 类和公开接口方法必须按真实业务语义生成 Javadoc，`@author` 使用生成时读取的 Git 用户名，`@date` 使用 `yyyy/MM/dd HH:mm`，方法按签名完整生成 `@param`和 `@return`。
+- API 实现不得交付单行 Javadoc block tag、Mapping 注解/方法同行或方法体单行压缩代码；相关规范由生成项目中的工程约定和实际验证命令约束。
+- API 完成证据必须包含 `yss-skill-execution-result.yaml` 和 `fresh-verification.md`，并记录 Controller 路由、DTO、响应 Wrapper、错误响应及契约测试与冻结 OpenAPI 的一致性。Smart-doc 输出不是 OpenAPI Freeze、契约审查或功能完成证据。
+- Maven settings 始终是项目外部的私密输入；不得复制到目标目录、写入 README/生成清单或提交 Git。
+- 持久层固定使用 YSS MyBatis-Plus；标准 CRUD 使用 MP，复杂 SQL 写入 mapper.xml，主键策略为 `IdType.ASSIGN_ID`。
+- 生成范围仅包含工程骨架、示例 Mock seam 和验证测试，不声称业务 Spec、OpenAPI Freeze 或 Slice Implementation Contract 已批准。
+- 完成结论必须包含结构验证，以及实际执行的 Maven 命令；无法下载依赖时如实记录环境阻塞。
+
+模块职责和依赖方向见 [references/architecture.md](references/architecture.md)。
+
+## API 契约与人工文档边界
+
+- 冻结的 OpenAPI 3.1 YAML 是接口契约的唯一事实来源；`yss-openapi-governance` 负责契约治理与 Freeze，`yss-openapi-draft-review` 负责冻结前审查，`yss-web-controller` 负责按冻结契约实现 Controller。
+- Smart-doc 是人工可选的源码文档工具。其输出只用于查看当前 Controller 实现，不得反向定义、覆盖或批准冻结 OpenAPI。
+- AI 默认不执行 `smart-doc:html`、`smart-doc:openapi` 或 `smart-doc:torna-rest`。`torna-rest` 涉及外部写入，执行前还必须获得对应授权。
+- 本生成器只用于空目录初始化。生成项目使用已物化的 `project-instance` 资产和实现 skills 开发后续需求；其共享 `skillUtils` 不应再分发 `yss-mvc-scaffold-generator` 本身。

package/template/.cursor/skills/yss-mvc-scaffold-generator/scripts/generate_project.mjs

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+process.stderr.write("deprecated: yss-mvc-scaffold-generator 已退役；请由生命周期重新批准 yss-mvc-data-analysis-project-initializer 的 H2 合同。不会生成、迁移或覆盖文件。\n");
+process.exitCode = 1;

package/template/.cursor/skills/yss-mvc-scaffold-generator/scripts/generate_project.test.mjs

@@ -0,0 +1,9 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+test("退役入口拒绝旧数据库和 Mock，不作静默别名", () => {
+  const result = spawnSync(process.execPath, [fileURLToPath(new URL("./generate_project.mjs", import.meta.url)), "--database", "oracle", "--with-mock"], { encoding: "utf8" });
+  assert.equal(result.status, 1);
+  assert.match(result.stderr, /deprecated.*yss-mvc-data-analysis-project-initializer/);
+});

package/template/.cursor/skills/yss-mvc-scaffold-generator/scripts/lib/envelope.mjs

@@ -0,0 +1,74 @@
+import { cp, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+
+import { HARNESS_ROOT, MODULES, PROJECT_SCRIPT_FILES, exists, fail } from "./runtime.mjs";
+import { put } from "./storage.mjs";
+
+const TEMPLATE_SOURCE_COMMAND = /scripts\/(?:verify-template(?:-fast|-candidate)?|sync-skills|update-skill-lock|export-yss-skills|verify-upstream-skill-source|verify-maintenance-checkpoint|verify-implementation-path-scenarios|gitworks)/g;
+const TEMPLATE_SOURCE_SECTION = /(^## 4\. `template-source` 模板维护路由[^\S\r\n]*$)[\s\S]*?(?=^## 5\. `project-instance` 产品研发路由[^\S\r\n]*$)/m;
+
+function removeTemplateSourceCommands(content) {
+  return content.replace(TEMPLATE_SOURCE_COMMAND, "上游 Harness 专用命令");
+}
+
+export function renderProjectInstanceAgents(content) {
+  if (!TEMPLATE_SOURCE_SECTION.test(content)) fail("无法定位 AGENTS.md 的模板维护章节边界");
+  return content.replace(
+    TEMPLATE_SOURCE_SECTION,
+    "$1\n\n当前仓库是 `project-instance`，模板维护只在上游 Harness 执行。\n\n"
+  );
+}
+
+export async function writeProjectEnvelope(o) {
+  await put(o.targetDir, "yss-project.yaml", "schema_version: 1\nrepository_mode: project-instance");
+  await put(o.targetDir, ".artifact-workspace.yaml", `schema_version: 1\nkind: service\nservice_id: ${o.projectName}\nowner: ${JSON.stringify(o.gitAuthor)}`);
+  await cp(path.join(HARNESS_ROOT, "AGENTS.md"), path.join(o.targetDir, "AGENTS.md"));
+  const generatedAgents = await readFile(path.join(o.targetDir, "AGENTS.md"), "utf8");
+  await writeFile(path.join(o.targetDir, "AGENTS.md"), renderProjectInstanceAgents(generatedAgents)
+    .replaceAll(".agents/skills", "../skillUtils/.agents/skills")
+    .replaceAll(".codex/skills", "../skillUtils/.codex/skills"), "utf8");
+  await put(o.targetDir, "CONTEXT.md", "# 领域上下文\n\n## 业务术语\n\n| 术语 | 定义 | 英文标识 | 避免 / 备注 |\n|---|---|---|---|\n| 分析数据集 | 支撑一个数据分析功能的表结构、字段语义和查询边界。 | AnalysisDataset | 具体业务术语在需求分析后补充 |\n| 分析结果 | 数据分析接口返回的分页明细或聚合结果。 | AnalysisResult | 不表示未经约束的原始结果集 |");
+  for (const relative of ["docs/agents", "docs/process", "docs/templates", "docs/architecture/templates"]) {
+    const source = path.join(HARNESS_ROOT, relative);
+    if (!await exists(source)) fail(`项目实例治理资产不存在: ${source}`);
+    await cp(source, path.join(o.targetDir, relative), { recursive: true });
+  }
+  const integrationPath = path.join(o.targetDir, "docs/process/implementation-repo-integration.md");
+  const integration = (await readFile(integrationPath, "utf8"))
+    .replace("模板仓库至少执行：", "以下命令仅由上游 Harness 模板源执行，项目实例不分发这些模板维护工具：")
+    .replace(/scripts\/sync-skills --check\r?\nscripts\/update-skill-lock --check\r?\nscripts\/verify-template/, "在 Harness 模板源执行 Skill 投影同步、锁文件检查和模板发布校验。");
+  await writeFile(integrationPath, integration, "utf8");
+  const checklistPath = path.join(o.targetDir, "docs/templates/build-architecture-checklist-template.md");
+  await writeFile(checklistPath, (await readFile(checklistPath, "utf8")).replace("scripts/verify-implementation-path-scenarios", "node scripts/implementation-path-policy"), "utf8");
+  for (const relative of ["AGENTS.md", "docs/process/implementation-repo-integration.md", "docs/process/harness-process-tailoring.md", "docs/templates/build-architecture-checklist-template.md"]) {
+    const target = path.join(o.targetDir, relative);
+    await writeFile(target, removeTemplateSourceCommands(await readFile(target, "utf8")), "utf8");
+  }
+  const agentReadmePath = path.join(o.targetDir, "docs/agents/README.md");
+  const agentReadme = (await readFile(agentReadmePath, "utf8"))
+    .replace("Engineering Skills 的安装、升级和验证说明", "项目实例使用共享 `skillUtils` 的版本检查说明")
+    .replace("GitLab、MR、CI 和自动 gitworks 的技能配置与使用规则", "GitLab、MR 和 CI 的 `glab` 使用规则");
+  await writeFile(agentReadmePath, agentReadme, "utf8");
+  const issueTrackerPath = path.join(o.targetDir, "docs/agents/issue-tracker.md");
+  await writeFile(issueTrackerPath, (await readFile(issueTrackerPath, "utf8")).replace("当平台为 GitLab 时，优先使用 `glab` 或项目快捷入口 `scripts/gitworks`。", "当平台为 GitLab 时，使用已认证的 `glab`。"), "utf8");
+  const tailoringPath = path.join(o.targetDir, "docs/process/harness-process-tailoring.md");
+  await writeFile(tailoringPath, (await readFile(tailoringPath, "utf8")).replace("使用 `scripts/verify-maintenance-checkpoint <file>` 或通过 stdin 传入 YAML / JSON 做只读校验。触发项 ID 与最低等级只由 `docs/process/maintenance-intensity.yaml` 维护；校验器消费该策略。未知触发项必须先更新该权威策略和场景，不能静默接受。", "维护 checkpoint 校验只在上游 Harness 模板源执行。触发项 ID 与最低等级只由 `docs/process/maintenance-intensity.yaml` 维护；未知触发项必须先更新该权威策略和场景，不能静默接受。"), "utf8");
+  await put(o.targetDir, "docs/agents/skills-maintenance.md", "# 项目实例 Skill 环境\n\n本项目不维护或发布共享 Skill。共享 Skill 位于相邻的 `../skillUtils`，版本由项目根 `skills-lock.json` 锁定。\n\n开发前执行：\n\n```bash\nnpm run check-agent-environment\n```\n\n输出 `READY` 表示工具版本、兼容协议、Agent 投影和 canonical Skill hash 一致。输出 `NOT_READY` 时停止功能实现，使用上游 Harness 的项目初始化或刷新流程更新 `skillUtils`；不要在项目内手工同步、导出或覆盖共享 Skill。\n\n项目实例只消费已提交的 `scripts/lib/*.mjs` 和 `scripts/vendor/*.mjs`。模板发布、Skill 投影生成、上游来源验证和公开导出均属于 Harness 模板源维护，不在本项目执行。");
+  await put(o.targetDir, "docs/agents/gitlab-workflow-skills.md", "# GitLab 工作流\n\n本项目不分发 GitLab 包装脚本。需要查看 MR、Pipeline 或 CI 时，使用已认证的 `glab`，并先确认当前仓库的 `origin` 指向目标 GitLab 项目。\n\n常用只读命令：\n\n```bash\ngit status --short --branch\nglab mr list\nglab ci list\nglab ci status\n```\n\n创建分支、commit、push、MR 或触发 Pipeline 都必须遵守 `AGENTS.md` 的显式授权和 checkpoint 规则。Token 只通过 `glab auth login` 或环境变量管理，不写入仓库文件。");
+  for (const relative of PROJECT_SCRIPT_FILES) await cp(path.join(HARNESS_ROOT, "scripts", relative), path.join(o.targetDir, "scripts", relative));
+  for (const relative of ["lib", "vendor"]) await cp(path.join(HARNESS_ROOT, "scripts", relative), path.join(o.targetDir, "scripts", relative), { recursive: true });
+  for (const relative of ["package.json", "skills-lock.json", ".nvmrc"]) {
+    const source = path.join(HARNESS_ROOT, relative);
+    if (await exists(source)) await cp(source, path.join(o.targetDir, relative));
+  }
+  await put(o.targetDir, "skills-lock.json", JSON.stringify({ version: 1, distribution: { mode: "sibling-directory", skillUtilsDir: "../skillUtils", required: true, compatibility: "skill-utils-v1", requiredToolVersion: "1.0.0" }, skills: { source: "../skillUtils/skills-lock.json", validation: "scripts/check-agent-environment.mjs" } }, null, 2));
+  await put(o.targetDir, "package.json", JSON.stringify({ name: o.projectName, private: true, scripts: { "check-agent-environment": "node scripts/check-agent-environment.mjs", "verify-project": "node scripts/verify-lifecycle-registry", "verify-dto": "node scripts/verify-yss-dto-openapi-profile" } }, null, 2));
+  await put(o.targetDir, "docs/process/analysis-project.yaml", `project_name: ${o.projectName}\nproject_type: data-analysis\nrepository_scope: external-repository\nimplementation_root: .\nruntime_java: 8\npersistence_profile: yss-mybatis-plus\nid_strategy: ASSIGN_ID\ndatabase:\n  type: ${o.database}\n  runtime_connection: true\n  metadata_contract: docs/data-model\nquery:\n  sql_mode: readonly\n  allowed_statement_types: [select, with]\n  parameter_binding_required: true\nmodules:\n${MODULES.map((module) => `  - ${module}`).join("\n")}\nworkflow:\n  - requirement-and-data-contract\n  - specification-freeze\n  - vertical-slice-implementation\n  - automated-gates\n  - single-release-confirmation\n  - runtime-monitoring`);
+  await put(o.targetDir, "docs/process/implementation-repo-registry.yaml", `schema_version: 1\nprojects:\n  - project_type: backend\n    project_name: ${o.projectName}\n    project_root: .\n    git_root: .\n    repository_scope: external-repository\n    scaffold_status: initialized\n    default_branch: main\n    allowed_write_paths:\n      - .\n    verification_commands:\n      - mvnw com.coveo:fmt-maven-plugin:2.9.1:check\n      - mvnw validate\n      - mvnw test\n      - mvnw package\n    expected_evidence_files:\n      - docs/.scratch/<feature>/verification/yss-skill-execution-result.yaml\n      - docs/.scratch/<feature>/verification/fresh-verification.md\n    ci: not-configured\n    rollback_point: initial-empty-repository`);
+  await put(o.targetDir, "docs/.scratch/.gitkeep", "# Local lifecycle artifacts are created in feature subdirectories.");
+  await put(o.targetDir, "docs/service/service-overview.md", `# ${o.projectName} 服务说明\n\nOwner: ${o.gitAuthor}\n\n## 职责\n\n提供数据分析服务能力；具体业务职责在产品服务登记和功能 Spec 中维护。\n\n## 非职责\n\n## 依赖服务\n`);
+  await put(o.targetDir, "docs/service/module-map.md", `# ${o.projectName} Module 地图\n\n| Module | 职责 | 主要 Interface |\n|---|---|---|\n| server | Web 入口与运行配置 | HTTP Controller |\n| core | 领域与应用行为 | Domain/Application Interface |\n| client | 对外 DTO 与客户端契约 | Request/Response |\n| repository | 数据持久化 | Gateway/Repository |\n| adapter | 外部系统适配 | Adapter |\n| feign-client | 服务间调用客户端 | Feign Interface |\n`);
+  await put(o.targetDir, "docs/service/current-capabilities.md", "# 当前能力\n\n本文件是发布时生成的派生阅读视图，普通功能开发不手工修改。功能详情位于 `docs/features/`，开发中功能位于 `docs/.scratch/`。\n");
+  await put(o.targetDir, "docs/engineering/data-analysis-java-conventions.md", `# 数据分析 Java 工程规范\n\n变量、参数和字段必须使用业务含义名称。public 类、接口和方法必须有简体中文 Javadoc；Controller 类和公开接口方法使用初始化时读取的 Git user.name（本项目为 @author ${o.gitAuthor}）和生成时的 @date，方法参数、返回值分别使用 @param、@return 完整说明。Javadoc 正文、@author、@date、@param、@return 必须分行；Mapping 注解、方法签名、方法体不得压缩在同一行。\n`);
+  await put(o.targetDir, ".gitignore", "target/\n**/target/\n.idea/\n*.iml\n.env\n.env.*\n!.env.example\n.local/\n");
+}

package/template/.cursor/skills/yss-mvc-scaffold-generator/scripts/lib/envelope.test.mjs

@@ -0,0 +1,36 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+
+import { renderProjectInstanceAgents } from "./envelope.mjs";
+
+test("按章节边界把模板维护路由转换为项目实例说明", () => {
+  const source = `# AGENTS.md
+
+## 3. 上文
+
+保留。
+
+## 4. \`template-source\` 模板维护路由
+
+这里的自然语言允许持续精简，不应参与匹配。
+
+- 模板源命令也不应进入项目实例。
+
+## 5. \`project-instance\` 产品研发路由
+
+继续保留。
+`;
+
+  const result = renderProjectInstanceAgents(source);
+
+  assert.match(result, /## 4\. `template-source` 模板维护路由\n\n当前仓库是 `project-instance`，模板维护只在上游 Harness 执行。/);
+  assert.doesNotMatch(result, /这里的自然语言允许持续精简/);
+  assert.match(result, /## 5\. `project-instance` 产品研发路由\n\n继续保留/);
+});
+
+test("模板维护章节边界缺失时明确失败", () => {
+  assert.throws(
+    () => renderProjectInstanceAgents("# AGENTS.md\n\n## 5. `project-instance` 产品研发路由\n"),
+    /无法定位 AGENTS\.md 的模板维护章节边界/
+  );
+});