create-yss-spec 3.0.1 → 3.1.0

package/template/scripts/fixtures/strategic-handoff/fixture.mjs

@@ -0,0 +1,57 @@
+import { mkdirSync, writeFileSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { sealVisualBaseline } from '../../../.agents/skills/yss-prototype-stage/scripts/visual-baseline-contract.mjs';
+import { parseContextSource, resolveContextTermRefs } from '../../lib/context-contract.mjs';
+import { read, hash, digest, json, files, sourceApprovalPolicy, treeDigest } from '../../lib/strategic-handoff-io.mjs';
+import { countersignRuleForGate } from '../../lib/digital-human-roles.mjs';
+export const context = `---
+context_schema_version: 1
+---
+# 业务上下文
+## 流程术语
+| 术语 | 含义 | 英文标识 | 避免 / 备注 |
+|---|---|---|---|
+## 业务术语
+| 术语 | 含义 | 英文标识 | 适用业务责任区 | 避免 / 备注 |
+|---|---|---|---|---|
+| 供应商 | 提供产品或服务的主体 | Supplier | Global | |
+`;
+export async function fixture(root) {
+ const put=(ref,value)=>{const p=path.join(root,ref);mkdirSync(path.dirname(p),{recursive:true});writeFileSync(p,typeof value==='string'?value:json(value));};
+ put('yss-project.yaml','schema_version: 1\nrepository_mode: project-instance\n');put('CONTEXT.md',context);
+ const source=parseContextSource(context), resolved=resolveContextTermRefs(source,['Global/Supplier']);
+ const snapshot={context_ref:'CONTEXT.md',context_schema_version:1,document_digest:source.document_digest,referenced_terms_digest:resolved.referenced_terms_digest,term_refs:['Global/Supplier']};
+function pngHeader(width, height) { const value = Buffer.alloc(24); Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]).copy(value, 0); value.writeUInt32BE(13, 8); value.write("IHDR", 12, "ascii"); value.writeUInt32BE(width, 16); value.writeUInt32BE(height, 20); return value; }
+const bundleRoot = path.join(root, "source/visual-baseline-v1"); mkdirSync(path.join(bundleRoot, "images"), { recursive: true }); mkdirSync(path.join(bundleRoot, "sources"), { recursive: true }); mkdirSync(path.join(bundleRoot, "capture"), { recursive: true });
+writeFileSync(path.join(bundleRoot, "images/primary-desktop.png"), pngHeader(1440, 900)); writeFileSync(path.join(bundleRoot, "images/primary-narrow.png"), pngHeader(390, 844));
+writeFileSync(path.join(bundleRoot, "sources/prototype.html"), "<main>supplier</main>\n"); writeFileSync(path.join(bundleRoot, "sources/interaction.md"), "# Interaction\n"); writeFileSync(path.join(bundleRoot, "sources/states.md"), "# States\n"); writeFileSync(path.join(bundleRoot, "capture/capture.mjs"), "// capture\n"); writeFileSync(path.join(bundleRoot, "capture/result.json"), "{\"result\":\"passed\"}\n");
+const baselineFile = path.join(bundleRoot, "visual-baseline.yaml");
+const baseline = { schema_version: 1, baseline_id: "visual-baseline.supplier", feature: "supplier", version: "v1", status: "approved", bundle: { format: "portable-directory", root_ref: "source/visual-baseline-v1", digest: `sha256:${"0".repeat(64)}`, size_bytes: 0, max_image_bytes: 5242880, max_bundle_bytes: 104857600 }, source: { prototype_ref: "sources/prototype.html", prototype_digest: `sha256:${"1".repeat(64)}`, interaction_spec_ref: "sources/interaction.md", interaction_spec_digest: `sha256:${"2".repeat(64)}`, state_matrix_ref: "sources/states.md", state_matrix_digest: `sha256:${"3".repeat(64)}` }, capture_environment: { browser: "chromium", browser_version: "140.0.0", operating_system: "linux", fonts_digest: `sha256:${"4".repeat(64)}`, device_scale_factor: 1, color_space: "srgb", locale: "zh-CN", timezone: "Asia/Shanghai", animations_disabled: true, cursor_hidden: true, capture_script_ref: "capture/capture.mjs", capture_script_digest: `sha256:${"5".repeat(64)}`, capture_result_ref: "capture/result.json", capture_result_digest: `sha256:${"6".repeat(64)}` }, cases: [{ case_id: "primary-desktop", route: "/supplier", page: "SupplierPage", state: "normal", viewport: { name: "desktop", width: 1440, height: 900, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-desktop.png", image_digest: `sha256:${"0".repeat(64)}`, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/prototype.html", "sources/interaction.md"], allowed_differences: [], result: "passed" }, { case_id: "primary-narrow", route: "/supplier", page: "SupplierPage", state: "normal", viewport: { name: "narrow", width: 390, height: 844, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-narrow.png", image_digest: `sha256:${"0".repeat(64)}`, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/states.md"], allowed_differences: [], result: "passed" }] };
+writeFileSync(baselineFile, JSON.stringify(baseline)); const sealedBaseline = await sealVisualBaseline(baselineFile, bundleRoot);
+const visualBaselineRef = { baseline_id: sealedBaseline.baseline_id, version: sealedBaseline.version, digest: sealedBaseline.bundle.digest, status: "approved", persisted_ref: "source/visual-baseline-v1", manifest_ref: "visual-baseline.yaml", case_ids: sealedBaseline.cases.map((item) => item.case_id) };
+
+ const roles=sourceApprovalPolicy(read(new URL('./source-roles.json',import.meta.url)));
+ put('docs/agents/digital-human-roles.yaml',roles);
+ put('preview/index.html','<!doctype html><html><body><button onclick="this.textContent=\'已提交\'">提交</button></body></html>');
+ put('prototype-src/main.js','export const state = "ready";');
+ put('prototype-src/pnpm-lock.yaml','lockfileVersion: 9');
+ put('evidence/offline.log','Synthetic fixture for CLI tests; not product verification.');
+ const previewDigest=digest(files(root,'preview').map(ref=>({path:path.posix.relative('preview',ref),sha256:hash(readFileSync(path.join(root,ref)))})));
+ put('evidence/offline.json',{network_mode:'offline',exit_code:0,command:'synthetic fixture',executed_at:'2026-09-05T00:00:00Z',preview_digest:previewDigest,case_ids:['primary-desktop','primary-narrow'],evidence_refs:['evidence/offline.log']});
+ const baseStrategy=read(new URL('./base-strategy.json',import.meta.url));
+ const strategy={...baseStrategy,schema_version:2,domain_strategy_id:'domain-strategy.supplier',domain_version:'v1',status:'approved',contexts:baseStrategy.contexts,traceability_version:1,rule_catalog:[{rule_id:'rule.complete',statement:'申请材料必须完整',responsible_context:'SupplierManagement',status:'confirmed'}],scenarios:[{scenario_id:'scenario.submit',actor:'supplier',preconditions:['draft'],commands:['Submit'],rules:['申请材料必须完整'],rule_refs:['rule.complete'],events:['Submitted'],success_results:['已提交'],failure_results:['缺材料拒绝'],responsible_context:'SupplierManagement',consumers:[],status:'confirmed',critical:true}],invariants:[{invariant_id:'invariant.complete',statement:'申请材料必须完整',rule_ref:'rule.complete',responsible_context:'SupplierManagement',scenario_refs:['scenario.submit'],verification_method:'test'}],context_snapshot:snapshot,evidence_refs:['evidence/offline.log']};
+ strategy.approval={approval_ref:'approvals/domain_strategy_ref.yaml',approver:'role.product-manager',persisted_ref:'source/strategy.yaml',current_version:'v1'};
+ strategy.subdomains.forEach(x=>x.evidence_refs=['evidence/offline.log']);
+ put('source/strategy.yaml',strategy);
+ const stage={...read(new URL('./base-stage.json',import.meta.url)),schema_version:2,stage_decision_id:'stage-decision.supplier',package_version:'v1',status:'approved',domain_strategy_ref:{domain_strategy_id:strategy.domain_strategy_id,domain_version:'v1',status:'approved',persisted_ref:'source/strategy.yaml',digest:digest(strategy)},context_snapshot:snapshot,unresolved_items:[]};
+ stage.approval={approval_ref:'approvals/stage_decision_package_ref.yaml',approver:'role.product-manager',persisted_ref:'source/stage.yaml',current_version:'v1'};stage.evidence_refs=['evidence/offline.log'];
+ put('source/stage.yaml',stage);put('source/spec.md','# 供应商提交\n');put('source/tickets.yaml',{status:'approved'});
+ const ref=(id,p,kind)=>({id,version:'v1',status:'approved',persisted_ref:p,digest:kind==='canonical-json'?digest(read(path.join(root,p))):hash(readFileSync(path.join(root,p)))});
+ const sourceRefs={domain_strategy_ref:ref(strategy.domain_strategy_id,'source/strategy.yaml','canonical-json'),stage_decision_package_ref:ref(stage.stage_decision_id,'source/stage.yaml','canonical-json'),spec_ref:ref('spec.supplier','source/spec.md'),prototype_ref:ref('prototype.supplier','preview/index.html'),visual_baseline_ref:visualBaselineRef,business_ticket_set_ref:ref('business-ticket-set.supplier','source/tickets.yaml','canonical-json')};
+ const terminalGate=countersignRuleForGate(roles.gate_policy,'gate.strategic-design-handoff-approved')?'gate.strategic-design-handoff-approved':'gate.stage-decision-package-approved';
+ const gates={domain_strategy_ref:'gate.domain-strategy-approved',stage_decision_package_ref:'gate.stage-decision-package-approved',spec_ref:'gate.spec-baseline-approved',prototype_ref:'gate.user-confirmation',visual_baseline_ref:'gate.user-confirmation',business_ticket_set_ref:terminalGate,handoff:terminalGate};
+ const approvals=Object.fromEntries([...Object.keys(sourceRefs),'handoff'].map(key=>[key,{record_ref:`approvals/${key}.yaml`,gate_id:gates[key],digest_kind:key==='visual_baseline_ref'?'visual-baseline':['domain_strategy_ref','stage_decision_package_ref','business_ticket_set_ref'].includes(key)?'canonical-json':'sha256-bytes'}]));
+ const handoff={schema_version:3,handoff_id:'strategic-design-handoff.supplier',handoff_version:'v1',status:'approved',source:sourceRefs,source_context_snapshot:snapshot,context_delta:{added:resolved.terms.map(({term_ref,term,meaning,english_identifier,context_id,forbidden_aliases})=>({term_ref,term,meaning,english_identifier,context_id,forbidden_aliases})),updated:[],deprecated:[]},target_context_reconciliation:{target_context_ref:'CONTEXT.md',reconciliation_schema_ref:'docs/process/schemas/context-reconciliation.schema.json',required_before_skill:'yss-tactical-design',status:'pending'},target:{team:'downstream-rd-team',skill:'yss-tactical-design',output:'tactical-design-contract'},problem_and_business_outcomes:['提交供应商材料'],bounded_context_and_subdomain_map:['SupplierManagement'],context_map_and_translation_responsibility:['SupplierManagement'],ubiquitous_language_and_concept_candidates:['Global/Supplier'],scenarios_and_business_invariants:['rule.complete','scenario.submit'],tactical_design_questions:['一致性边界'],deferred_decisions_and_ownership:[],evidence_and_version_digests:['evidence/offline.log'],acceptance:['traceability'],package_export:{schema_version:1,approvals,additional_files:[],reference_map:{},prototype:{profile:'H2',preview_root:'preview',entry_ref:'preview/index.html',verification_ref:'evidence/offline.json',verification_digest:hash(readFileSync(path.join(root,'evidence/offline.json'))),source_digest:treeDigest(root,'prototype-src'),source_root:'prototype-src',lock_ref:'prototype-src/pnpm-lock.yaml'}}};
+ const sign=()=>{put('handoff.yaml',handoff);for(const[key,approval]of Object.entries(approvals)){const asset=key==='handoff'?{id:handoff.handoff_id,version:handoff.handoff_version,digest:hash(readFileSync(path.join(root,'handoff.yaml')))}:sourceRefs[key];put(approval.record_ref,{schema_version:1,gate_id:approval.gate_id,decision:'approved',actor_kind:'digital-human',role_id:countersignRuleForGate(roles.gate_policy,approval.gate_id).countersigners[0],runtime_id:'runtime.generic',principal_ref:'synthetic-maintenance-fixture',artifact_bindings:[{id:asset.id||asset.baseline_id,version:asset.version,digest:asset.digest}]});}};
+ sign();return{handoff,strategy,stage,put,sign,snapshot};
+}

package/template/scripts/fixtures/strategic-handoff/source-roles.json

@@ -0,0 +1,528 @@
+{
+  "schema_version": 1,
+  "registry_id": "yss.digital-human-roles",
+  "status": "active",
+  "description": "数字人角色、主控、阶段协作组、技能启用/禁止与生命周期会签的单一事实源。 角色配置与运行时无关；Claude / Cursor / Codex / Grok 等只通过 runtimes 绑定。 Ticket 五态不是数字人角色。",
+  "canonical_path": "docs/agents/digital-human-roles.yaml",
+  "runtime_policy": {
+    "overlay_on_lifecycle": true,
+    "consumed_by_lifecycle": true,
+    "git_is_ssot": true,
+    "default_invocation": "orchestrator",
+    "dispatch": "orchestrator-one-to-one",
+    "per_feature_instances": "forbidden",
+    "project_instance_instantiation": "duplicate-and-bind-repo-path",
+    "template_instantiation": "publish-singleton-profiles",
+    "biological_veto": true,
+    "implementer_must_differ": true,
+    "write_isolation": "task-package-policy",
+    "dual_hat_split_when": [
+      "cross-repo-load",
+      "responsibility-conflict"
+    ]
+  },
+  "runtimes": [
+    {
+      "id": "runtime.generic",
+      "kind": "generic",
+      "instance_kind": "agent-session",
+      "skill_root": null,
+      "covers_skill_registry_roots": false,
+      "collaboration": "task-package-and-handoff",
+      "max_collaboration_group_size": null,
+      "overflow": "not-applicable",
+      "shared_workspace_is_not_security_boundary": false,
+      "side_effect_approval": "biological-human",
+      "notes": "任何能加载 core_skills 并接受任务包的 Agent 会话。"
+    },
+    {
+      "id": "runtime.skill-projection",
+      "kind": "projected-agent-root",
+      "instance_kind": "agent-session-or-subagent",
+      "skill_root": "from-skill-registry",
+      "covers_skill_registry_roots": true,
+      "collaboration": "subagent-task-package",
+      "max_collaboration_group_size": null,
+      "overflow": "not-applicable",
+      "shared_workspace_is_not_security_boundary": false,
+      "side_effect_approval": "biological-human",
+      "notes": "覆盖 docs/agents/yss-skill-registry.yaml 的 agent_runtime_roots （claude / codex / cursor / pi / qoder / trae）。 技能仍从 .agents/skills 投影，不按职称再维护一份。"
+    },
+    {
+      "id": "runtime.grok",
+      "kind": "grok-bot",
+      "instance_kind": "durable-bot",
+      "skill_root": null,
+      "covers_skill_registry_roots": false,
+      "collaboration": "group-chat-or-async-dm",
+      "max_collaboration_group_size": 6,
+      "min_collaboration_group_size": 2,
+      "overflow": "one-to-one-handoff",
+      "shared_workspace_is_not_security_boundary": true,
+      "side_effect_approval": "biological-human",
+      "notes": "Grok Bot 适配。群聊 2–6 人；超出则改 1:1 交接，不改逻辑阶段协作组。 全部 Bot 共享云计算机，写范围只靠任务包。不新增 agent_runtime_roots.grok。"
+    }
+  ],
+  "orchestrator": {
+    "id": "role.lifecycle-orchestrator",
+    "name": "主控数字人",
+    "kind": "orchestrator",
+    "title": "YSS 生命周期主控",
+    "default_dual_hat": [
+      "role.project-manager"
+    ],
+    "stages": [
+      "stage.entry-triage",
+      "stage.discovery",
+      "stage.spec-architecture",
+      "stage.product-design",
+      "stage.system-data-engineering",
+      "stage.ticket-formalization",
+      "stage.vertical-slice-implementation",
+      "stage.verification-release-retrospective"
+    ],
+    "core_skills": [
+      "yss-product-lifecycle",
+      "yss-implementation-contract-compiler"
+    ],
+    "forbidden_skills": [
+      "yss-domain",
+      "yss-ui",
+      "yss-ui-business-page-generation",
+      "yss-web-controller",
+      "yss-repository",
+      "implement"
+    ],
+    "description": "Own YSS lifecycle routing. Read yss-project.yaml and CONTEXT.md first. Select the next unblocked work unit, compile a task package, and assign one owner per stage. Do not implement business code. Do not approve Slice contracts into ready-for-agent without the full formula. Do not announce releasable. Default dual-hat: project manager until a separate instance is required. Authoritative artifacts live in git."
+  },
+  "roles": [
+    {
+      "id": "role.requirements-manager",
+      "name": "需求经理",
+      "kind": "digital-human",
+      "contract_version": 1,
+      "title": "YSS 需求经理",
+      "stages": [
+        "stage.discovery",
+        "stage.spec-architecture"
+      ],
+      "draft_artifact_ids": [
+        "artifact.discovery-record",
+        "artifact.spec"
+      ],
+      "core_skills": [
+        "grilling",
+        "domain-modeling",
+        "yss-research",
+        "competitive-intelligence",
+        "grill-with-docs"
+      ],
+      "forbidden_skills": [
+        "yss-ui",
+        "yss-domain",
+        "yss-web-controller",
+        "yss-repository",
+        "yss-ddd-scaffold-generator",
+        "yss-layered-mvc-scaffold-generator",
+        "yss-frontend-scaffold-generator",
+        "implement",
+        "tdd"
+      ],
+      "description": "Own Discovery language, users, MVP, non-goals, success criteria, test seams, and Spec prose. Propose CONTEXT.md glossary entries. Do not freeze visual prototypes, OpenAPI, or code. Do not guess unconfirmed business rules. Hand off to the orchestrator when the frontier is empty."
+    },
+    {
+      "id": "role.product-manager",
+      "name": "产品经理",
+      "kind": "digital-human",
+      "contract_version": 1,
+      "title": "YSS 产品经理",
+      "stages": [
+        "stage.discovery",
+        "stage.spec-architecture",
+        "stage.product-design",
+        "stage.verification-release-retrospective"
+      ],
+      "draft_artifact_ids": [
+        "artifact.product-overview",
+        "artifact.functional-architecture",
+        "artifact.interaction-spec",
+        "artifact.state-matrix",
+        "artifact.prototype-confirmation"
+      ],
+      "core_skills": [
+        "yss-design-system",
+        "yss-prototype-stage",
+        "prototype-review",
+        "yss-antdv-next-design",
+        "yss-research",
+        "competitive-intelligence"
+      ],
+      "forbidden_skills": [
+        "yss-ui",
+        "yss-domain",
+        "yss-repository",
+        "yss-web-controller",
+        "yss-ddd-scaffold-generator",
+        "yss-layered-mvc-scaffold-generator",
+        "implement",
+        "tdd"
+      ],
+      "description": "Own priority, product-design impact, interaction, state matrix, prototype confirmation recommendation, and the commercial constraints, delivery commitments, release window, and commercial non-goals for Discovery and release. May reject Spec scope. Do not write production code or freeze OpenAPI alone. Do not independently approve external commercial contracts or formal commitments; those require biological-human approval. Frontend implementation uses the frontend-engineer role and yss-ui, not yss-antdv-next-design. Explicit React/AntD compatibility prototypes use yss-antd-design conditionally."
+    },
+    {
+      "id": "role.project-manager",
+      "name": "项目经理",
+      "kind": "digital-human",
+      "contract_version": 1,
+      "title": "YSS 项目经理",
+      "stages": [
+        "stage.entry-triage",
+        "stage.discovery",
+        "stage.spec-architecture",
+        "stage.product-design",
+        "stage.system-data-engineering",
+        "stage.ticket-formalization",
+        "stage.vertical-slice-implementation",
+        "stage.verification-release-retrospective"
+      ],
+      "draft_artifact_ids": [
+        "artifact.parent-ticket",
+        "artifact.vertical-slice-ticket"
+      ],
+      "core_skills": [
+        "yss-product-lifecycle",
+        "handoff",
+        "implementation-repo-onboarding",
+        "cross-repo-implementation-routing"
+      ],
+      "forbidden_skills": [
+        "yss-domain",
+        "yss-ui",
+        "implement",
+        "tdd",
+        "yss-web-controller"
+      ],
+      "description": "Own parent Ticket hygiene, checkpoints, handoff, risk, and implementation repo registry. Do not set ready-for-agent; the orchestrator recomputes that formula. Do not approve Spec or OpenAPI Freeze. Do not write business code or serve as independent Reviewer. Default dual-hat on the orchestrator instance until dual_hat_split_when (cross-repo-load or responsibility-conflict) requires a separate instance."
+    },
+    {
+      "id": "role.frontend-engineer",
+      "name": "前端工程师",
+      "kind": "digital-human",
+      "contract_version": 1,
+      "title": "YSS 前端工程师",
+      "stages": [
+        "stage.product-design",
+        "stage.system-data-engineering",
+        "stage.ticket-formalization",
+        "stage.vertical-slice-implementation",
+        "stage.verification-release-retrospective"
+      ],
+      "draft_artifact_ids": [
+        "artifact.frontend-implementation-plan"
+      ],
+      "core_skills": [
+        "yss-ui",
+        "yss-ui-business-page-generation",
+        "yss-components",
+        "yss-formily",
+        "formily-foundation",
+        "formily-linkage-effects",
+        "formily-mode-slot-detail",
+        "formily-step-flow",
+        "ytable-usage",
+        "ytree-usage",
+        "yedit-table-usage",
+        "yss-api-integration",
+        "yss-hook",
+        "theme-token-usage",
+        "page-skeleton",
+        "page-list-module",
+        "page-form-module",
+        "component-selection-imports",
+        "vue3-best-practices",
+        "tdd"
+      ],
+      "forbidden_skills": [
+        "yss-domain",
+        "yss-application",
+        "yss-repository",
+        "yss-mybatis",
+        "yss-web-controller",
+        "yss-ddd-scaffold-generator",
+        "yss-layered-mvc-scaffold-generator",
+        "java-backend-commit"
+      ],
+      "description": "Own Vue page modules, frontend tests, and frontend_implementation_plan. Review OpenAPI Draft for client fit and prototype feasibility. Write only contract-allowed frontend paths. Verify with pnpm. Do not freeze API, own backend domain, or countersign your own merge."
+    },
+    {
+      "id": "role.backend-engineer",
+      "name": "后端工程师",
+      "kind": "digital-human",
+      "contract_version": 1,
+      "title": "YSS 后端工程师",
+      "stages": [
+        "stage.system-data-engineering",
+        "stage.ticket-formalization",
+        "stage.vertical-slice-implementation",
+        "stage.verification-release-retrospective"
+      ],
+      "draft_artifact_ids": [
+        "artifact.openapi-draft",
+        "artifact.data-architecture"
+      ],
+      "core_skills": [
+        "yss-implementation-contract-compiler",
+        "yss-tactical-design",
+        "yss-domain",
+        "yss-application",
+        "yss-repository",
+        "yss-mybatis",
+        "yss-web-controller",
+        "yss-dto",
+        "mapstruct",
+        "lombok",
+        "alibaba-java-code-style",
+        "yss-exception",
+        "yss-validation",
+        "tdd",
+        "yss-ddd-scaffold-generator",
+        "yss-layered-mvc-scaffold-generator"
+      ],
+      "forbidden_skills": [
+        "yss-ui",
+        "yss-ui-business-page-generation",
+        "yss-formily",
+        "yss-frontend-scaffold-generator",
+        "yss-antd-design",
+        "yss-antdv-next-design",
+        "page-list-module",
+        "page-form-module"
+      ],
+      "description": "Own OpenAPI Draft, data-architecture contributions, and backend tests. Write only contract-allowed backend paths. Verify with ./mvnw. Do not Freeze OpenAPI, treat UI copy as requirements, or countersign your own implementation."
+    },
+    {
+      "id": "role.test-engineer",
+      "name": "测试工程师",
+      "kind": "digital-human",
+      "contract_version": 1,
+      "title": "YSS 测试工程师",
+      "stages": [
+        "stage.spec-architecture",
+        "stage.vertical-slice-implementation",
+        "stage.verification-release-retrospective"
+      ],
+      "draft_artifact_ids": [
+        "artifact.frontend-implementation-verification"
+      ],
+      "owned_evidence_ids": [
+        "evidence.fresh-verification",
+        "evidence.frontend-implementation-verification"
+      ],
+      "core_skills": [
+        "tdd",
+        "diagnosing-bugs",
+        "code-review",
+        "alibaba-java-code-style",
+        "yss-ui",
+        "yss-design-system",
+        "yss-ui-business-page-generation",
+        "yss-domain",
+        "yss-application",
+        "yss-repository",
+        "yss-web-controller",
+        "yss-dto",
+        "mapstruct",
+        "lombok"
+      ],
+      "forbidden_skills": [
+        "yss-ddd-scaffold-generator",
+        "yss-layered-mvc-scaffold-generator",
+        "yss-frontend-scaffold-generator",
+        "implement",
+        "to-spec"
+      ],
+      "description": "Own test code, defect records, fresh verification, and frontend implementation verification evidence. Review every implementation slice through the unique code-review skill, loading YSS and Alibaba specialist skills as read-only Standards sources. Recommend release readiness; do not close gate.release-ready. Do not change product scope or write feature implementation. Must be a different instance from the implementer."
+    }
+  ],
+  "stage_groups": [
+    {
+      "id": "group.discovery",
+      "name": "Discovery",
+      "stage": "stage.discovery",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.requirements-manager",
+        "role.product-manager"
+      ]
+    },
+    {
+      "id": "group.spec",
+      "name": "Spec",
+      "stage": "stage.spec-architecture",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.requirements-manager",
+        "role.product-manager",
+        "role.test-engineer"
+      ]
+    },
+    {
+      "id": "group.product-design",
+      "name": "产品设计",
+      "stage": "stage.product-design",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.product-manager",
+        "role.requirements-manager",
+        "role.frontend-engineer"
+      ]
+    },
+    {
+      "id": "group.contract",
+      "name": "契约",
+      "stage": "stage.system-data-engineering",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.backend-engineer",
+        "role.frontend-engineer",
+        "role.test-engineer",
+        "role.product-manager"
+      ]
+    },
+    {
+      "id": "group.tickets",
+      "name": "Ticket 正式化",
+      "stage": "stage.ticket-formalization",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.project-manager",
+        "role.frontend-engineer",
+        "role.backend-engineer",
+        "role.test-engineer"
+      ]
+    },
+    {
+      "id": "group.implementation",
+      "name": "实现",
+      "stage": "stage.vertical-slice-implementation",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.frontend-engineer",
+        "role.backend-engineer",
+        "role.test-engineer"
+      ]
+    },
+    {
+      "id": "group.release",
+      "name": "发布",
+      "stage": "stage.verification-release-retrospective",
+      "members": [
+        "role.lifecycle-orchestrator",
+        "role.project-manager",
+        "role.test-engineer",
+        "role.product-manager"
+      ]
+    }
+  ],
+  "gate_policy": {
+    "default_if_unlisted": "biological-human",
+    "unlisted_kept_biological": [
+      "gate.design-reviewed",
+      "gate.architecture-reviewed"
+    ],
+    "evidence_only": [
+      "gate.repository-identity-valid",
+      "gate.prototype-verified"
+    ],
+    "orchestrator": [
+      "gate.slice-contract-approved",
+      "gate.slice-ready-for-agent"
+    ],
+    "digital_human_review": [
+      {
+        "gate": "gate.prototype-reviewed",
+        "drafter": "role.product-manager",
+        "countersigners": [
+          "role.frontend-engineer"
+        ]
+      },
+      {
+        "gate": "gate.openapi-draft-reviewed",
+        "drafter": "role.backend-engineer",
+        "countersigners": [
+          "role.frontend-engineer"
+        ]
+      },
+      {
+        "gate": "gate.engineering-baseline-accepted",
+        "countersigners": [
+          "role.test-engineer"
+        ]
+      },
+      {
+        "gate": "gate.frontend-implementation-verified",
+        "drafter": "role.frontend-engineer",
+        "countersigners": [
+          "role.test-engineer"
+        ]
+      }
+    ],
+    "digital_human_review_work_units": [
+      {
+        "work_unit": "work-unit.code-review",
+        "countersigners": [
+          "role.test-engineer"
+        ],
+        "implementer_must_differ": true
+      }
+    ],
+    "dual_digital_human": [
+      {
+        "gate": "gate.spec-baseline-approved",
+        "drafter": "role.requirements-manager",
+        "countersigners": [
+          "role.product-manager"
+        ]
+      },
+      {
+        "gate": "gate.domain-strategy-approved",
+        "drafter": "role.requirements-manager",
+        "countersigners": [
+          "role.product-manager"
+        ]
+      },
+      {
+        "gate": "gate.stage-decision-package-approved",
+        "drafter": "role.requirements-manager",
+        "countersigners": [
+          "role.product-manager"
+        ]
+      },
+      {
+        "gate": "gate.openapi-frozen",
+        "drafter": "role.backend-engineer",
+        "countersigners": [
+          "role.product-manager",
+          "role.test-engineer"
+        ]
+      }
+    ],
+    "product_digital_human_with_biological_veto": [
+      "gate.user-confirmation"
+    ],
+    "biological_human": [
+      "gate.release-ready"
+    ],
+    "runtime_side_effect_approval": "biological-human",
+    "commercial_contract": "biological-human"
+  },
+  "user_decision_policy": {
+    "gates": [],
+    "work_units": {},
+    "source_kinds": [
+      "platform-message",
+      "session-export",
+      "user-confirmation-file"
+    ]
+  }
+}

package/template/scripts/fixtures/user-decision/build-fixture.mjs

@@ -0,0 +1,61 @@
+// Synthetic sources for tests only. Never use these helpers to record a real user's approval.
+import { mkdirSync, writeFileSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { decisionDigest, requestDigest, renderDecisionRequest } from "../../lib/user-decision.mjs";
+export function buildDecisionFixture(root, { boundary = "gate.spec-baseline-approved", scope = ["feature.demo"], subjectRef, subjectContent = "冻结业务基线 v1\n", extraItems = [] } = {}) {
+  mkdirSync(root, { recursive: true });
+  const write = (name, value) => {
+    const ref = path.join(root, name);
+    writeFileSync(ref, typeof value === "string" ? value : JSON.stringify(value, null, 2));
+    return ref;
+  };
+  const subject = subjectRef || write("subject.md", subjectContent);
+  const capture = (name, principal, actor, sentAt, text, kind = "session-export", replyTo = null) => {
+    const value = { source_kind: kind, messages: [{ id: name, principal_ref: principal, actor_kind: actor, sent_at: sentAt, text, ...(replyTo ? { reply_to: replyTo } : {}), original_ref: `test-only://${name}` }] };
+    const ref = write(`${name}.json`, value);
+    return { kind, ref, digest: decisionDigest(readFileSync(ref)), message_id: name };
+  };
+  const record = { schema_version: 1, kind: "user-decision", request: {
+    id: "request.demo", requester_ref: "person.requester",
+    requester_source: capture("requester", "person.requester", "biological-human", "2026-09-05T01:00:00Z", "请整理可审阅的功能方案。"),
+    items: [{ id: "decision.demo", boundary, title: "确认本次范围", subject: { ref: subject, version: "v1", digest: decisionDigest(readFileSync(subject)) }, basis: [], scope, changes: "新增已列明范围", risks: [], recommendation: "批准上述范围", next_actions: ["进入下一工作单元"], responder_ref: "person.requester" }, ...extraItems],
+  }, responses: [] };
+  const present = () => { record.request.presented_source = capture("presentation", "agent.orchestrator", "digital-human", "2026-09-05T01:02:00Z", renderDecisionRequest(record.request)); };
+  present();
+  const respond = ({ principal = "person.requester", actor = "biological-human", text = "同意", decision = "approved", selection = record.request.items.length === 1 ? "single" : "explicit-all", itemIds = record.request.items.map((item) => item.id), approvedScope = record.request.items.flatMap((item) => item.scope), time = "2026-09-05T01:03:00Z", name = `reply-${record.responses.length}` } = {}) => {
+    record.responses.push({ source: capture(name, principal, actor, time, text, "session-export", JSON.parse(readFileSync(record.request.presented_source.ref, "utf8")).messages[0].original_ref), principal_ref: principal, responded_at: time, text, request_digest: requestDigest(record.request), selection, item_ids: itemIds, decision, approved_scope: approvedScope });
+  };
+  respond({ text: extraItems.length ? "同意以上全部事项" : "同意" });
+  const ref = path.join(root, "decision.json");
+  const save = () => writeFileSync(ref, JSON.stringify(record, null, 2));
+  save();
+  return { record, ref, save, write, capture, present, respond, requirement: { boundary, subject_ref: subject, scope: [...scope], user_decision_ref: ref } };
+}
+export function buildImplementationFixture(root, ticketRef) {
+  mkdirSync(root, { recursive: true });
+  const baselineRef = path.join(root, "engineering-baseline.md");
+  const contractRef = path.join(root, "slice-contract.json");
+  const scopeRef = path.join(root, "implementation-scope.json");
+  writeFileSync(baselineRef, "已采纳工程基线 v1\n");
+  const contract = { lifecycle_refs: { ticket: ticketRef, engineering_baseline: baselineRef }, common: { project_roots: ["external/demo"], allowed_write_paths: ["src/demo/**"] } };
+  writeFileSync(contractRef, JSON.stringify(contract));
+  const asset = (ref) => ({ ref, version: "v1", digest: decisionDigest(readFileSync(ref)) });
+  writeFileSync(scopeRef, JSON.stringify({ kind: "implementation-scope", slices: [{ ticket_ref: ticketRef, contract: asset(contractRef), repositories: contract.common.project_roots, allowed_write_paths: contract.common.allowed_write_paths, baselines: [asset(baselineRef)] }] }));
+  const fixture = buildDecisionFixture(root, { boundary: "implementation-scope", scope: [ticketRef], subjectRef: scopeRef });
+  return { ...fixture, state: { slice_contract_ref: contractRef, vertical_slice_ticket_ref: ticketRef, user_decisions: [fixture.requirement] } };
+}
+
+export function attachScaffoldDecisionFixture(root, decision) {
+  mkdirSync(root, { recursive: true });
+  const { user_confirmation, status, decision_inputs_digest, ...snapshot } = decision;
+  const snapshotRef = path.join(root, "scaffold-inputs.json");
+  writeFileSync(snapshotRef, JSON.stringify(snapshot));
+  const f = buildDecisionFixture(root, { boundary: "scaffold-choice", subjectRef: snapshotRef, scope: [decision.project_id, decision.confirmed_architecture, decision.decision_inputs_digest] });
+  return { ...decision, user_confirmation: { ...user_confirmation, user_decision_ref: f.ref, decision_subject_ref: snapshotRef } };
+}
+if (process.argv[2] === "--scaffold") {
+  const file = process.argv[3];
+  const value = JSON.parse(readFileSync(file, "utf8"));
+  value.decisions = value.decisions.map((decision) => attachScaffoldDecisionFixture(path.join(path.dirname(file), `user-decision-${decision.project_id}`), decision));
+  writeFileSync(file, JSON.stringify(value, null, 2) + "\n");
+}