create-yss-spec 3.0.1 → 3.1.3

package/template/.agents/skills/yss-antdv-next-design/tests/run-scenarios.mjs

@@ -0,0 +1,139 @@
+#!/usr/bin/env node
+import assert from "node:assert/strict";
+import { createHash } from "node:crypto";
+import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { validateFactPack } from "../scripts/validate-fact-pack.mjs";
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const SKILL_ROOT = path.resolve(HERE, "..");
+const COMPONENTS = ["Button", "Form", "Table", "Modal", "Select", "DatePicker"];
+
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+function writeJson(root, ref, value) {
+  const target = path.join(root, ref);
+  mkdirSync(path.dirname(target), { recursive: true });
+  const content = `${JSON.stringify(value, null, 2)}\n`;
+  writeFileSync(target, content);
+  return { ref, sha256: sha256(content) };
+}
+
+function fixture() {
+  const projectRoot = mkdtempSync(path.join(os.tmpdir(), "yss-antdv-next-provider-"));
+  writeFileSync(path.join(projectRoot, "yss-project.yaml"), "schema_version: 1\nrepository_mode: template-source\n");
+  mkdirSync(path.join(projectRoot, "docs/design/tokens"), { recursive: true });
+  writeFileSync(path.join(projectRoot, "DESIGN.md"), "---\nversion: alpha\n---\n");
+  writeFileSync(path.join(projectRoot, "docs/design/design.md"), "# Design\n");
+  writeFileSync(path.join(projectRoot, "docs/design/tokens/theme.json"), "{}\n");
+  const packRoot = path.join(projectRoot, ".template-source/evidence/maintenance/antdv-next-p0-facts/1.5.2");
+  mkdirSync(packRoot, { recursive: true });
+  const help = "@antdv-next/cli v0.0.0-beta.5\n";
+  writeFileSync(path.join(packRoot, "cli-help.txt"), help);
+  const probe = writeJson(packRoot, "resolution-probe.json", { from: "1.5.2", to: "1.5.2", diffs: [] });
+  const design = writeJson(packRoot, "design-md.json", { doc: "---\nversion: alpha\nname: Antdv Next\n---\n" });
+  const componentList = writeJson(packRoot, "component-list.json", COMPONENTS.map((name) => ({ name })));
+  const components = COMPONENTS.map((name) => ({
+    name,
+    info: writeJson(packRoot, `components/${name}/info.json`, { name, props: [] }),
+    demo: writeJson(packRoot, `components/${name}/demo-basic.json`, { component: name, name: "basic", code: "<template><div /></template>" }),
+    token: writeJson(packRoot, `components/${name}/token.json`, { token: [] }),
+    semantic: writeJson(packRoot, `components/${name}/semantic.json`, { name, semanticStructure: [] })
+  }));
+  const manifest = {
+    schema_version: 1,
+    provider_id: "vue-antdv-next",
+    maturity: "supported",
+    collection_profile: "p0-reference",
+    library: {
+      package: "antdv-next",
+      requested_version: "1.5.2",
+      resolved_snapshot_version: "1.5.2",
+      integrity: "sha512-library",
+      tarball: "https://registry.example/antdv-next.tgz"
+    },
+    cli: {
+      package: "@antdv-next/cli",
+      version: "0.0.0-beta.5",
+      integrity: "sha512-cli",
+      tarball: "https://registry.example/cli.tgz",
+      help_ref: "cli-help.txt",
+      help_sha256: sha256(help)
+    },
+    resolution_probe: { exact_match: true, from: "1.5.2", to: "1.5.2", output: probe },
+    component_list: componentList,
+    design_baseline: { version_scope: "static-alpha-not-exact", output: design },
+    project_baseline: {
+      override_precedence: "project-first",
+      canonical_design: { ref: "DESIGN.md", sha256: sha256("---\nversion: alpha\n---\n") },
+      design: { ref: "docs/design/design.md", sha256: sha256("# Design\n") },
+      tokens: { ref: "docs/design/tokens/theme.json", sha256: sha256("{}\n") },
+      override_reviewed: false
+    },
+    components
+  };
+  writeFileSync(path.join(packRoot, "manifest.json"), `${JSON.stringify(manifest, null, 2)}\n`);
+  return { projectRoot, packRoot, manifest };
+}
+
+function expectFailure(change, pattern) {
+  const data = fixture();
+  try {
+    change(data);
+    writeFileSync(path.join(data.packRoot, "manifest.json"), `${JSON.stringify(data.manifest, null, 2)}\n`);
+    assert.throws(() => validateFactPack(path.join(data.packRoot, "manifest.json")), pattern);
+  } finally {
+    rmSync(data.projectRoot, { recursive: true, force: true });
+  }
+}
+
+const skill = readFileSync(path.join(SKILL_ROOT, "SKILL.md"), "utf8");
+assert.match(skill, /^---\nname: yss-antdv-next-design\ndescription: .+\n---/);
+for (const marker of ["默认组件事实 Provider", "yss-prototype-stage", "yss-ui", "禁止 `antdv setup`", "npx skills add antdv-next/cli"]) assert.ok(skill.includes(marker), `SKILL.md 缺少 ${marker}`);
+
+const valid = fixture();
+try {
+  const result = validateFactPack(path.join(valid.packRoot, "manifest.json"));
+  assert.deepEqual(result, { provider_id: "vue-antdv-next", library_version: "1.5.2", cli_version: "0.0.0-beta.5", components: 6, profile: "p0-reference" });
+} finally {
+  rmSync(valid.projectRoot, { recursive: true, force: true });
+}
+
+expectFailure(({ packRoot }) => {
+  const output = `${JSON.stringify({ from: "1.5.2", to: "1.5.1", diffs: [] }, null, 2)}\n`;
+  writeFileSync(path.join(packRoot, "resolution-probe.json"), output);
+}, /digest 不匹配/);
+
+expectFailure(({ packRoot, manifest }) => {
+  const output = `${JSON.stringify({ from: "1.5.1", to: "1.5.1", diffs: [] }, null, 2)}\n`;
+  writeFileSync(path.join(packRoot, "resolution-probe.json"), output);
+  manifest.resolution_probe.from = "1.5.1";
+  manifest.resolution_probe.to = "1.5.1";
+  manifest.resolution_probe.output.sha256 = sha256(output);
+}, /resolution probe 发生版本回退/);
+
+expectFailure(({ manifest }) => {
+  manifest.library.resolved_snapshot_version = "1.5.1";
+}, /resolved snapshot/);
+
+expectFailure(({ manifest }) => {
+  manifest.components.pop();
+}, /p0-reference 必须恰好覆盖/);
+
+expectFailure(({ manifest }) => {
+  manifest.components[0].info.ref = "../../../../../../outside.json";
+}, /路径越界/);
+
+expectFailure(({ manifest }) => {
+  delete manifest.project_baseline.canonical_design;
+}, /canonical_design/);
+
+expectFailure(({ projectRoot }) => {
+  writeFileSync(path.join(projectRoot, "DESIGN.md"), "---\nversion: changed\n---\n");
+}, /canonical_design digest 不匹配/);
+
+process.stdout.write("yss-antdv-next-design scenarios passed\n");

package/template/.agents/skills/yss-application/SKILL.md

@@ -5,6 +5,12 @@ description: Use when implementing YSS application use cases, transaction bounda
 
 # yss-application
 
+## 架构分流（先执行）
+
+读取当前合同的 architecture_identity 并与工程基线、仓库登记及 Manifest 核对；再且只读取 `references/profiles/<architecture_profile>.md`。支持的分支为 target-domain-model、layered-mvc-service、mvc-data-analysis-v1；成熟度以注册表为准，不能把 draft 称为受支持。MVC 不执行下文 DDD 专属规则，也不加载其旧分层 guide；组件、安全、批准合同、允许路径及执行证据规则仍共用。
+
+以下 Application / Domain Gateway / Infrastructure / Web module 叙述仅适用于 target-domain-model；MVC 的 service/core/repository/server/client 所有权由所选 Profile 引用定义。
+
 Application 层用例编排 skill。负责协调 Domain 与 Gateway，定义事务边界和跨聚合流程，不承载核心领域规则。
 
 ## 何时使用

package/template/.agents/skills/yss-application/references/profiles/layered-mvc-service.md

@@ -0,0 +1,3 @@
+# layered-mvc-service
+
+先读仓库 `docs/agents/backend-architecture-profiles.md` 的 MVC 约定。写入 `service` 的 command/query/result/service 包；事务与业务行为通过公开用例 seam 做 behavior-tdd。调用 Repository/Adapter；不得生成 Domain Gateway 或引用 client DTO、Spring MVC、生产驱动。需要 HTTP 协议变更时返回 new_impacts，由 Web 工作单元处理。

package/template/.agents/skills/yss-application/references/profiles/mvc-data-analysis-v1.md

@@ -0,0 +1,3 @@
+# mvc-data-analysis-v1
+
+先读仓库 `docs/agents/backend-architecture-profiles.md` 的 MVC 约定。写入 `core` 的 command/query/result/service 包；core 是薄应用层，拥有事务与内部模型，不依赖 client/server。读取/计算/导出编排不能自动扩大 SQL 或 API 合同；数据行为采用 behavior-tdd。不要套用 DDD application-layer-guide。

package/template/.agents/skills/yss-application/references/profiles/target-domain-model.md

@@ -0,0 +1,3 @@
+# target-domain-model
+
+只用于 `domain-driven`；完整执行规则见 `../application-layer-guide.md`。Application 调用 Domain/Gateway 或 Query Port；领域不变量归 Domain，事务归 Application，HTTP DTO 转换归 Web。禁止把本分支套给 MVC。

package/template/.agents/skills/yss-components/SKILL.md

@@ -12,7 +12,7 @@ description: Use when YSS Vue 页面涉及布局、YTable、YEditTable、YFormil
 - YSS UI 组件文档：`http://192.168.164.27:3200/components`（组件契约以该手册为准；本技能依据 2026-08-18 可见内容整理）
 - 本地引用索引：`references/frontend-docs.md`
 
-本技能只负责页面组件、布局和交互呈现规范。请求、分页参数、接口映射交给 `yss-hook` 或 `yss-api-integration`；新建或改造完整业务页面交给 `yss-ui-business-page-generation`，生命周期编排和旧触发词兼容交给 `yss-page-module-development`；表格/树高度细节交给 `yss-use-table-height` 或 `yss-use-tree-height`。
+本技能只负责页面组件、布局和交互呈现规范。请求、分页参数、接口映射交给 `yss-hook` 或 `yss-api-integration`；新建、改造和编排完整业务页面统一交给 `yss-ui-business-page-generation`；表格/树高度细节交给 `yss-use-table-height` 或 `yss-use-tree-height`。
 
 组件文档与当前项目的已验证用法冲突时，先检查当前项目代码和依赖版本，再决定是否迁移；不得把上游 Ant Design Vue、vxe-table、Univer 或 Monaco 的未验证 API 当作 YSS 顶层契约。
 

package/template/.agents/skills/yss-ddd-scaffold-generator/SKILL.md

@@ -23,7 +23,7 @@ description: 用于生成完整的 YSS DDD 多模块后端脚手架。当用户
 
 ## 优先流程
 
-1. 确认服务级 `scaffold_request_id`、项目名、基础包名、Maven 项目坐标、父 POM GAV、YSS Components BOM 版本、输出目录和批准 Profile。Java `base_package` 与 Maven `group_id` 是两个独立输入，不得相互推导；脚手架发生在 Ticket 正式化前，不使用 `slice_id` 伪造切片身份。
+1. 确认服务级 `scaffold_request_id`、已由用户确认且生命周期批准的 `domain-driven` 架构选择及 digest、项目名、基础包名、Maven 项目坐标、父 POM GAV、YSS Components BOM 版本、输出目录和批准 Profile。Java `base_package` 与 Maven `group_id` 是两个独立输入，不得相互推导；脚手架发生在 Ticket 正式化前，不使用 `slice_id` 伪造切片身份。
    Harness 内输出目录必须是 `apps/backend/` 容器，生成器再以 `project_name` 创建 `apps/backend/<project>/`；禁止使用 `app/backend/`、`app/frontend/` 或把 `apps/backend/` 之外的容器根当作后端项目根。
 2. 优先运行 `node scripts/generate_and_verify_scaffold.mjs`，在同一个受控工作流中生成骨架并执行真实 Maven 验证。`generate_scaffold.mjs` 只是底层生成原语，单独返回 0 不代表脚手架完成。
 3. 检查生成的模块名、POM、机械启动入口、基础配置文件和包路径。
@@ -45,7 +45,6 @@ node scripts/generate_and_verify_scaffold.mjs \
   --parent-version 2.0.0-SNAPSHOT \
   --yss-components-version 2.0.0-SNAPSHOT \
   --output-dir /path/to/implementation-repo \
-  --database mysql \
   --contract-id <approved-scaffold-contract-id> \
   --contract-version <current-version> \
   --approval-ref <lifecycle-approval-ref> \
@@ -89,10 +88,10 @@ node scripts/run_first_slice_verification.mjs \
 - 生成后的后端工程必须使用项目根目录 `./mvnw ...` 执行构建、测试、运行和 CI 验证；不得在 README、实施记录、Ticket、Review 或 Release 中默认写裸 `mvn ...`。既有仓库确实无法使用 wrapper 时，必须记录受控例外。
 - 原型确认后，`scaffold_status=required` 才能进入本 skill；本 skill 的生成边界是工程结构、POM、配置、Wrapper 和机械模板，不是业务实现。
 - 脚手架合同必须携带 `contract_id`、`contract_version`、实现合同编译器 draft 引用、生命周期批准引用、持久化引用、当前版本、允许写路径、预期证据文件和验证命令；字段缺失或版本过期时阻断。
-- 新脚手架合同只接受 schema v2，必须分别携带 `project_name`、`base_package` 和 `maven_coordinates`；后者包含项目 `group_id` / `project_version`、父 POM GAV 与 `yss_components_version`，并由 CLI 原样传入。schema v1 为 `unsupported`，直接拒绝且不自动升级。
+- 新脚手架合同只接受 schema v3，必须携带 `architecture_family=domain-driven`、`generator_skill`、`decision_ref/id/digest`、固定模块闭包，并分别携带 `project_name`、`base_package` 和 `maven_coordinates`；后者包含项目 `group_id` / `project_version`、父 POM GAV 与 `yss_components_version`，并由 CLI 原样传入。历史 schema v2 仅只读兼容，不用于新生成；schema v1/v2 均不自动升级。
 - 合同 `profiles` 只支持 `target-domain-model`、`mybatis-plus`、`mysql`、`spring-boot-2.7-jdk8`、`javax`、`web`、`yss-internal`。普通 MyBatis、Boot 3、独立 client module、client-in-domain 和其他旧架构均为 `unsupported`，不提供回退分支。
 - 运行生成器必须传入 `--contract-file`；生成器会校验合同 `status=approved`、`current_version`、`primary_skill`、`controlled-generation`、实际输出路径和固定三条验证命令，不接受仅凭任意字符串引用的放行。
-- 生成项目必须写入 Manifest v2 `.yss/scaffold-generation.json`，记录合同 digest、Target Profile、模板 digest、下游完整 skill tree digest、脚手架父合同与 实现合同编译器 合同 digest、generator-owned 文件 hash、严格 `generation_policy` 和完成等级；清单缺失或不一致时不得交给后续 实现合同编译器。
+- 生成项目必须写入 Manifest v3 `.yss/scaffold-generation.json`，记录架构选择及 digest、生成器、合同 digest、Target Profile、模块闭包、模板 digest、下游完整 skill tree digest、脚手架父合同与 实现合同编译器 合同 digest、generator-owned 文件 hash、严格 `generation_policy` 和完成等级；清单缺失或不一致时不得交给后续 实现合同编译器。
 - `first-slice-verified` 只能由 `run_first_slice_verification.mjs` 写入。手工改 Manifest、只生成 Controller、只通过局部模块测试或仅有结构扫描都不能升级完成等级。
 - 严禁把领域规则、状态机、权限、事务、复杂查询、错误映射、业务字段或用户可见行为塞进脚手架生成步骤。`./mvnw validate`、输出目录存在或“生成成功”都不等于生命周期批准、架构放行或 `ready-for-agent`。
 - 生命周期脚手架生成必须关闭 `--with-example`，不得把 User CRUD 或业务字段当作样板。生成器严格 `initialize-only`：非空目标、`--force`、旧项目迁移和当前模板升级一律 `unsupported`。未来若支持同一 Target Profile 内的模板升级，必须另行设计和批准，当前不预留可执行承诺。

package/template/.agents/skills/yss-ddd-scaffold-generator/assets/templates/config/application.yml.template

@@ -5,19 +5,6 @@ spring:
   application:
     name: {{project_name}}
 
-  datasource:
-    primary:
-      url: {{jdbc_url}}
-      username: ${DB_USERNAME:}
-      password: ${DB_PASSWORD:}
-      driver-class-name: {{driver_class}}
-      hikari:
-        maximum-pool-size: 20
-        minimum-idle: 5
-        connection-timeout: 30000
-        idle-timeout: 600000
-        max-lifetime: 1800000
-
 mybatis-plus:
   configuration:
     map-underscore-to-camel-case: true

package/template/.agents/skills/yss-ddd-scaffold-generator/assets/templates/pom/bootstrap-pom.xml.template

@@ -59,6 +59,19 @@
         </dependency>
     </dependencies>
 
+    <profiles>
+        <profile>
+            <id>scaffold-local</id>
+            <dependencies>
+                <dependency>
+                    <groupId>com.h2database</groupId>
+                    <artifactId>h2</artifactId>
+                    <scope>runtime</scope>
+                </dependency>
+            </dependencies>
+        </profile>
+    </profiles>
+
     <build>
         <plugins>
             <plugin>

package/template/.agents/skills/yss-ddd-scaffold-generator/references/USAGE_EXAMPLES.md

@@ -2,15 +2,20 @@
 
 ## 1. 准备批准合同
 
-新合同是服务级工程基线，使用 schema v2 与 `scaffold_request_id`，并把 Java 包名、Maven 坐标和 Profile 分开登记：
+新合同是服务级工程基线，使用 schema v3 与 `scaffold_request_id`，并把已批准的架构决策、Java 包名、Maven 坐标和 Profile 分开登记：
 
 ```json
 {
-  "schema_version": 2,
+  "schema_version": 3,
   "scaffold_request_id": "scaffold-metadata-service-1",
   "project_name": "metadata-service",
   "target_output_dir": "/path/to/implementation-repo",
   "base_package": "com.yss.metadata",
+  "architecture_family": "domain-driven",
+  "generator_skill": "yss-ddd-scaffold-generator",
+  "decision_ref": "scaffold-architecture-decisions.yaml",
+  "decision_id": "architecture-metadata-service",
+  "decision_digest": "sha256:<digest>",
   "maven_coordinates": {
     "group_id": "com.yss.datamiddle",
     "project_version": "1.0.0-SNAPSHOT",
@@ -30,6 +35,11 @@
     "dto_placement": "web",
     "repository": "yss-internal"
   },
+  "module_profile": {
+    "resolution_version": 1,
+    "requested_capabilities": [],
+    "resolved_modules": ["domain", "application", "infrastructure", "adapter", "bootstrap"]
+  },
   "generation_policy": {
     "mode": "initialize-only",
     "existing_target": "unsupported",
@@ -39,7 +49,7 @@
 }
 ```
 
-以上只是关键片段；实际合同还必须满足 `yss-implementation-contract-compiler/references/compiler-contract.yaml` 中的完整 `scaffold_contract_schema`，由生命周期批准并持久化为当前版本。schema v1 合同为 `unsupported`，直接拒绝且不自动升级。
+以上只是关键片段；实际合同还必须满足 `yss-implementation-contract-compiler/references/compiler-contract.yaml` 中的完整 `scaffold_contract_schema`，引用经用户确认并由生命周期批准的 `scaffold-architecture-decisions.yaml`，再持久化为当前版本。历史 schema v2 仅用于验证器只读兼容；新生成拒绝 schema v1/v2 且不自动升级。
 
 ## 2. 一键生成并验证
 
@@ -54,7 +64,6 @@ node .agents/skills/yss-ddd-scaffold-generator/scripts/generate_and_verify_scaff
   --parent-version 2.0.0-SNAPSHOT \
   --yss-components-version 2.0.0-SNAPSHOT \
   --output-dir /path/to/implementation-repo \
-  --database mysql \
   --contract-id <approved-scaffold-contract-id> \
   --contract-version <current-version> \
   --approval-ref <lifecycle-approval-ref> \

package/template/.agents/skills/yss-ddd-scaffold-generator/references/yss-backend-scaffold-parent/SKILL.md

@@ -40,7 +40,7 @@ infrastructure-+
 
 ## 生成与验证
 
-- 输入是批准且持久化的服务级 scaffold contract schema v2，身份为 `scaffold_request_id`，不使用 `slice_id`。
+- 输入是批准且持久化的服务级 scaffold contract schema v3，身份为 `scaffold_request_id`，并绑定已确认的 `architecture_family=domain-driven` 架构决策；不使用 `slice_id`。历史 Manifest v2 仅供验证器只读兼容。
 - 生成器严格 initialize-only：目标工程目录必须不存在，`--force`、旧项目迁移和当前模板升级均为 `unsupported`。
 - Maven 内部仓库通过命名 profile `yss-internal` 与环境变量注入；共享模板不写内部 URL 或凭据。
 - Wrapper 必须带 checksum；DEBUG 和 MyBatis stdout SQL 只允许在 `application-local.yml`。

package/template/.agents/skills/yss-ddd-scaffold-generator/scripts/first-slice-compatibility.test.mjs

@@ -1,3 +1,4 @@
+import { attachScaffoldDecisionFixture } from "../../../../scripts/fixtures/user-decision/build-fixture.mjs";
 import assert from "node:assert/strict";
 import { execFile } from "node:child_process";
 import { createHash } from "node:crypto";
@@ -15,9 +16,9 @@ const generator = path.join(scripts, "generate_scaffold.mjs");
 const dtoWireProfileFile = path.resolve(scripts, "../../yss-dto/references/openapi-wire-profile.yaml");
 const execute = (file, args, options = {}) => new Promise((resolve) => execFile(file, args, { encoding: "utf8", ...options }, (error, stdout, stderr) => resolve({ code: error?.code ?? 0, stdout, stderr })));
 
-function scaffoldContract(output) {
+function scaffoldContract(output, decisionDigest) {
   return {
-    schema_version: 2,
+    schema_version: 3,
     contract_id: "golden-scaffold-1",
     contract_version: 1,
     scaffold_request_id: "golden-request-1",
@@ -32,8 +33,14 @@ function scaffoldContract(output) {
     project_name: "golden-service",
     target_output_dir: output,
     base_package: "com.yss.golden",
+    architecture_family: "domain-driven", architecture_profile: "target-domain-model",
+    generator_skill: "yss-ddd-scaffold-generator",
+    decision_ref: "scaffold-architecture-decisions.yaml",
+    decision_id: "scaffold-decision.golden-service",
+    decision_digest: decisionDigest,
     maven_coordinates: { group_id: "com.yss.datamiddle", project_version: "1.0.0-SNAPSHOT", parent: { group_id: "com.yss.datamiddle", artifact_id: "yss-datamiddle-parent", version: "2.0.0-SNAPSHOT" }, yss_components_version: "2.0.0-SNAPSHOT" },
-    profiles: { architecture: "target-domain-model", persistence: "mybatis-plus", database: "mysql", platform: "spring-boot-2.7-jdk8", validation_namespace: "javax", dto_placement: "web", repository: "yss-internal" },
+    profiles: { architecture: "target-domain-model", persistence: "mybatis-plus", verification_database: "h2", production_database: "not-bound", platform: "spring-boot-2.7-jdk8", validation_namespace: "javax", dto_placement: "web", repository: "yss-internal" },
+    module_profile: { resolution_version: 1, requested_capabilities: [], resolved_modules: ["domain", "application", "infrastructure", "adapter", "bootstrap"] },
     allowed_write_paths: ["."],
     expected_evidence_files: [".yss/scaffold-generation.json"],
     verification_commands: ["./mvnw validate", "./mvnw test", "./mvnw package"],
@@ -54,9 +61,16 @@ async function prepareGoldenProject(t) {
   t.after(() => rm(root, { recursive: true, force: true }));
   const output = path.join(root, "implementation");
   await mkdir(output);
+  const decisionFile = path.join(root, "scaffold-architecture-decisions.yaml");
+  let decisionText = `${JSON.stringify({ schema_version: 1, kind: "scaffold-architecture-decisions", template: false, status: "current", decisions: [{ decision_id: "scaffold-decision.golden-service", project_id: "golden-service", parent_project_id: null, status: "lifecycle-approved", recommended_architecture: "domain-driven", recommendation_reasons: ["golden first slice 需要领域边界"], confirmed_architecture: "domain-driven", override_reason: null, inheritance_mode: "root-default", inherited_from: null, platform_profile: "spring-boot-2.7-jdk8", architecture_profile: "target-domain-model", verification_database: "h2", production_database: "not-bound", requested_capabilities: [], resolved_modules: ["domain", "application", "infrastructure", "adapter", "bootstrap"], resolution_version: 1, user_confirmation: { confirmed_by: "tester", channel: "test", confirmation_ref: "test://golden-confirmation", confirmed_at: "2026-09-05T00:00:00Z", normalized_text: "确认使用 DDD" }, decision_inputs_digest: `sha256:${"1".repeat(64)}` }] }, null, 2)}\n`;
+  const decisionSet = JSON.parse(decisionText);
+  decisionSet.decisions = decisionSet.decisions.map((decision) => attachScaffoldDecisionFixture(path.join(root, "user-decision"), decision));
+  decisionText = JSON.stringify(decisionSet, null, 2) + "\n";
+  await writeFile(decisionFile, decisionText);
+  const decisionDigest = `sha256:${createHash("sha256").update(decisionText).digest("hex")}`;
   const contractFile = path.join(root, "scaffold-contract.json");
-  await writeFile(contractFile, `${JSON.stringify(scaffoldContract(output), null, 2)}\n`);
-  const args = ["--project-name", "golden-service", "--base-package", "com.yss.golden", "--output-dir", output, "--database", "mysql", "--contract-id", "golden-scaffold-1", "--contract-version", "1", "--approval-ref", "approval-golden-1", "--compiler-draft-ref", "compiler-golden-1", "--persisted-ref", "persisted-golden-1", "--contract-file", contractFile, "--group-id", "com.yss.datamiddle", "--project-version", "1.0.0-SNAPSHOT", "--parent-group-id", "com.yss.datamiddle", "--parent-artifact-id", "yss-datamiddle-parent", "--parent-version", "2.0.0-SNAPSHOT", "--yss-components-version", "2.0.0-SNAPSHOT"];
+  await writeFile(contractFile, `${JSON.stringify(scaffoldContract(output, decisionDigest), null, 2)}\n`);
+  const args = ["--project-name", "golden-service", "--base-package", "com.yss.golden", "--output-dir", output, "--contract-id", "golden-scaffold-1", "--contract-version", "1", "--approval-ref", "approval-golden-1", "--compiler-draft-ref", "compiler-golden-1", "--persisted-ref", "persisted-golden-1", "--contract-file", contractFile, "--group-id", "com.yss.datamiddle", "--project-version", "1.0.0-SNAPSHOT", "--parent-group-id", "com.yss.datamiddle", "--parent-artifact-id", "yss-datamiddle-parent", "--parent-version", "2.0.0-SNAPSHOT", "--yss-components-version", "2.0.0-SNAPSHOT"];
   const generated = await execute(process.execPath, [generator, ...args]);
   assert.equal(generated.code, 0, generated.stderr);
   const project = path.join(output, "golden-service");
@@ -100,7 +114,7 @@ import com.yss.cloud.dto.result.PageResult; import com.yss.golden.application.co
   const dtoWireProfileDigest = createHash("sha256").update(await readFile(dtoWireProfileFile)).digest("hex");
   await writeFile(metadata, JSON.stringify({ tables: [{ table_name: "quality_rule", table_comment: "质量规则", columns: [{ name: "id", sql_type: "bigint", primary: true, nullable: false }, { name: "rule_name", sql_type: "varchar(64)", nullable: false }] }] }));
   const webProject = path.join(project, "golden-service-adapter", "golden-service-web");
-  await writeFile(webContract, JSON.stringify({ schema_version: 2, contract_id: "golden-slice-1", contract_version: 1, current_version: 1, slice_id: "quality-rule-first-slice", status: "approved", integration_mode: "scaffold-v2", implementation_project_root: project, scaffold_manifest_ref: manifestPath, base_package: "com.yss.golden", module_name: "golden", domain_segment: "quality", application_service_package: "com.yss.golden.application.service", architecture_profile: "target-domain-model", platform_profile: "spring-boot-2.7-jdk8", validation_namespace: "javax", dto_placement: "web", dto_wire_profile_ref: dtoWireProfileFile, dto_wire_profile_digest: dtoWireProfileDigest, openapi_freeze_ref: "openapi://quality-rule@1", allowed_write_paths: [path.join(webProject, "src/main/java/com/yss/golden/rest")], expected_evidence_files: ["first-slice-verification.json"], verification_commands: ["./mvnw test", "./mvnw package"], fields: { quality_rule: { create: ["rule_name"], update: ["id", "rule_name"], query: ["rule_name"], pagination: ["pageIndex", "pageSize"], response: ["id", "rule_name"] } } }));
+  await writeFile(webContract, JSON.stringify({ architecture_identity: manifest.architecture_identity, schema_version: 2, contract_id: "golden-slice-1", contract_version: 1, current_version: 1, slice_id: "quality-rule-first-slice", status: "approved", integration_mode: "scaffold-v2", implementation_project_root: project, scaffold_manifest_ref: manifestPath, base_package: "com.yss.golden", module_name: "golden", domain_segment: "quality", application_service_package: "com.yss.golden.application.service", architecture_profile: "target-domain-model", platform_profile: "spring-boot-2.7-jdk8", validation_namespace: "javax", dto_placement: "web", dto_wire_profile_ref: dtoWireProfileFile, dto_wire_profile_digest: dtoWireProfileDigest, openapi_freeze_ref: "openapi://quality-rule@1", allowed_write_paths: [path.join(webProject, "src/main/java/com/yss/golden/rest")], expected_evidence_files: ["first-slice-verification.json"], verification_commands: ["./mvnw test", "./mvnw package"], fields: { quality_rule: { create: ["rule_name"], update: ["id", "rule_name"], query: ["rule_name"], pagination: ["pageIndex", "pageSize"], response: ["id", "rule_name"] } } }));
   await generateWeb(parseWebArgs(["--metadata-file", metadata, "--contract-file", webContract, "--dto-wire-profile-file", dtoWireProfileFile, "--scaffold-manifest-file", manifestPath, "--base-package", "com.yss.golden", "--module-name", "golden", "--domain-segment", "quality", "--web-project-dir", webProject, "--application-service-package", "com.yss.golden.application.service", "--validation-namespace", "javax"]), { log() {}, warn() {} });
   await writeJava(project, `golden-service-adapter/golden-service-web/${java}/rest/advice/TargetProfileExceptionAdvice.java`, `package com.yss.golden.rest.advice;
 import com.yss.golden.application.error.QualityRuleConflictException;
@@ -169,7 +183,7 @@ class GoldenExceptionIntegrationTest {
 }`);
   const sliceContract = path.join(root, "slice-contract.json");
   const requiredSkills = ["yss-domain", "yss-application", "yss-repository", "yss-mybatis", "yss-web-controller", "yss-dto", "yss-exception", "yss-validation", "mapstruct", "lombok", "alibaba-java-code-style"];
-  await writeFile(sliceContract, JSON.stringify({ schema_version: 1, contract_id: "golden-slice-1", contract_version: 1, slice_id: "quality-rule-first-slice", status: "approved", readiness: { blockers: [], stale_inputs: [] }, common: { required_skills: requiredSkills }, backend: { status: "required", affected_layers: ["domain", "application", "infrastructure", "web"], required_skills: requiredSkills }, work_units: [{ id: "slice-backend", contract_id: "golden-slice-1", contract_version: 1, work_unit: { primary_skill: "yss-domain" } }] }));
+  await writeFile(sliceContract, JSON.stringify({ architecture_identity: manifest.architecture_identity, schema_version: 2, contract_id: "golden-slice-1", contract_version: 1, slice_id: "quality-rule-first-slice", status: "approved", readiness: { blockers: [], stale_inputs: [] }, common: { required_skills: requiredSkills }, backend: { status: "required", affected_layers: ["domain", "application", "infrastructure", "web"], required_skills: requiredSkills }, work_units: [{ architecture_identity: manifest.architecture_identity, id: "slice-backend", contract_id: "golden-slice-1", contract_version: 1, work_unit: { primary_skill: "yss-domain" } }] }));
   return { root, project, sliceContract };
 }
 

package/template/.agents/skills/yss-ddd-scaffold-generator/scripts/generate_scaffold.mjs

@@ -1,10 +1,14 @@
 #!/usr/bin/env node
 /** YSS DDD 后端纯工程骨架生成器；只生成工程结构，不生成任何业务行为。 */
+import { assertScaffoldUserDecision } from "../../../../scripts/lib/user-decision.mjs";
 import { createHash } from "node:crypto";
 import { chmod, cp, lstat, mkdir, mkdtemp, readFile, readdir, rename, rm, stat, writeFile, copyFile } from "node:fs/promises";
 import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
+import { parseDocument } from "../../../../scripts/vendor/yaml.mjs";
+import { assertLocalDatabaseProfile, localDatabaseConfiguration, scaffoldArchitectureIdentity } from "../../../../scripts/lib/scaffold-local-database.mjs";
+import { validateArchitectureIdentity } from "../../../../scripts/lib/backend-architecture.mjs";
 
 import {
   findGitRoot,
@@ -19,7 +23,8 @@ const COMMANDS = ["./mvnw validate", "./mvnw test", "./mvnw package"];
 const SUPPORTED_PROFILES = Object.freeze({
   architecture: "target-domain-model",
   persistence: "mybatis-plus",
-  database: "mysql",
+  verification_database: "h2",
+  production_database: "not-bound",
   platform: "spring-boot-2.7-jdk8",
   validation_namespace: "javax",
   dto_placement: "web",
@@ -43,6 +48,7 @@ function isoNow() { return new Date().toISOString(); }
 function localDate() { return new Date().toISOString().slice(0, 10); }
 function toUpperCamel(value) { return value.split("-").map((part) => `${part[0].toUpperCase()}${part.slice(1)}`).join(""); }
 function sha256(content) { return createHash("sha256").update(content).digest("hex"); }
+function sha256Ref(content) { return `sha256:${sha256(content)}`; }
 function usage(error) {
   const text = `YSS DDD 脚手架生成器\n\n` +
     `用法: node scripts/generate_scaffold.mjs --project-name <kebab-case> --base-package <package> --output-dir <dir> --contract-file <json> [选项]\n\n` +
@@ -56,10 +62,10 @@ function usage(error) {
 }
 
 function parseArgs(argv) {
-  const options = { database: "mysql", force: false, withExample: false };
+  const options = { force: false, withExample: false };
   const mapping = new Map([
     ["--project-name", "projectName"], ["--base-package", "basePackage"], ["--output-dir", "outputDir"],
-    ["--database", "database"], ["--contract-id", "contractId"], ["--contract-version", "contractVersion"],
+    ["--contract-id", "contractId"], ["--contract-version", "contractVersion"],
     ["--approval-ref", "approvalRef"], ["--compiler-draft-ref", "compilerDraftRef"], ["--persisted-ref", "persistedRef"],
     ["--contract-file", "contractFile"],
     ["--group-id", "groupId"], ["--project-version", "projectVersion"], ["--parent-group-id", "parentGroupId"],
@@ -85,7 +91,6 @@ function parseArgs(argv) {
     if (["database", "overwriteScope", "rollbackRef", "contractId", "contractVersion", "approvalRef", "compilerDraftRef", "persistedRef", "groupId", "projectVersion", "parentGroupId", "parentArtifactId", "parentVersion", "yssComponentsVersion"].includes(key)) continue;
     if (!options[key]) fail(`缺少必填参数: ${flag}`);
   }
-  if (options.database !== "mysql") fail("参数 --database 只支持 mysql");
   if (!/^[a-z][a-z0-9-]*$/.test(options.projectName)) fail("项目名称必须是 kebab-case 格式 (例如: user-service)");
   if (!/^[a-z](?:[a-z0-9]*)(?:\.[a-z](?:[a-z0-9]*)?)*$/.test(options.basePackage)) fail("包名格式不正确 (例如: com.yss.user)");
   if (options.contractVersion !== undefined && (!/^\d+$/.test(options.contractVersion) || Number(options.contractVersion) < 1)) fail("--contract-version(必须为正整数)");
@@ -199,11 +204,11 @@ class ScaffoldGenerator {
     const contractText = await readFile(this.contractFile, "utf8");
     let contract; try { contract = JSON.parse(contractText); } catch { fail(`脚手架合同文件无法读取或不是合法 JSON: ${this.contractFile}`); }
     if (!contract || Array.isArray(contract) || typeof contract !== "object") fail("脚手架合同必须是 JSON 对象");
-    if (contract.schema_version !== 2) fail(`unsupported: scaffold contract schema_version=${contract.schema_version}；只接受 Target Profile schema v2，不提供自动升级`);
+    if (contract.schema_version !== 3) fail(`unsupported: scaffold contract schema_version=${contract.schema_version}；新生成只接受 schema v3，不提供自动升级`);
     const requiredMetadata = [["--contract-id", this.options.contractId], ["--contract-version", this.options.contractVersion], ["--approval-ref", this.options.approvalRef], ["--compiler-draft-ref", this.options.compilerDraftRef], ["--persisted-ref", this.options.persistedRef]];
     const missing = requiredMetadata.filter(([, value]) => !isPresent(value)).map(([flag]) => flag);
     if (missing.length) fail(`生成项目必须提供当前已批准脚手架合同的完整元数据: ${missing.join(", ")}`);
-    const required = ["schema_version", "contract_id", "contract_version", "scaffold_request_id", "status", "compiler_draft_ref", "lifecycle_approval_ref", "persisted_ref", "current_version", "implementation_repository", "backend_repository", "scaffold_status", "project_name", "target_output_dir", "base_package", "maven_coordinates", "profiles", "allowed_write_paths", "expected_evidence_files", "verification_commands", "approval", "work_unit", "generation_policy"];
+    const required = ["schema_version", "contract_id", "contract_version", "scaffold_request_id", "status", "compiler_draft_ref", "lifecycle_approval_ref", "persisted_ref", "current_version", "implementation_repository", "backend_repository", "scaffold_status", "project_name", "target_output_dir", "base_package", "architecture_family", "generator_skill", "decision_ref", "decision_id", "decision_digest", "maven_coordinates", "profiles", "module_profile", "allowed_write_paths", "expected_evidence_files", "verification_commands", "approval", "work_unit", "generation_policy"];
     const missingFields = required.filter((field) => !isPresent(contract[field]));
     if (missingFields.length) fail(`脚手架合同缺少结构化字段: ${missingFields.join(", ")}`);
     if (contract.status !== "approved") fail("脚手架合同必须已由生命周期批准");
@@ -214,6 +219,7 @@ class ScaffoldGenerator {
     if (contract.persisted_ref !== this.options.persistedRef) fail("--persisted-ref 与脚手架合同不一致");
     if (contract.lifecycle_approval_ref !== this.options.approvalRef) fail("--approval-ref 与脚手架合同不一致");
     if (contract.scaffold_status !== "required") fail("脚手架生成器只接受 scaffold_status=required");
+    if (contract.architecture_family !== "domain-driven" || contract.generator_skill !== "yss-ddd-scaffold-generator") fail("脚手架合同必须绑定 domain-driven 与本生成器");
     if (contract.project_name !== this.projectName) fail("--project-name 与脚手架合同不一致");
     if (contract.base_package !== this.basePackage) fail("--base-package 与脚手架合同不一致");
     if (!["allowed_write_paths", "expected_evidence_files", "verification_commands"].every((field) => Array.isArray(contract[field]) && contract[field].length)) fail("脚手架合同的 allowed_write_paths、expected_evidence_files、verification_commands 必须非空");
@@ -233,9 +239,25 @@ class ScaffoldGenerator {
     if (JSON.stringify(workUnit.verification_commands) !== JSON.stringify(contract.verification_commands) || JSON.stringify(workUnit.allowed_write_paths) !== JSON.stringify(contract.allowed_write_paths)) fail("脚手架合同 work_unit 与根级验证/写路径约束不一致");
     this.validateMavenCoordinates(contract);
     this.validateProfiles(contract.profiles);
+    const expectedModules = ["domain", "application", "infrastructure", "adapter", "bootstrap"];
+    if (contract.module_profile?.resolution_version !== 1 || JSON.stringify(contract.module_profile.requested_capabilities) !== "[]" || JSON.stringify(contract.module_profile.resolved_modules) !== JSON.stringify(expectedModules)) fail("DDD module_profile 必须冻结固定模块闭包与 resolution_version=1");
+    const decisionPath = path.isAbsolute(contract.decision_ref) ? contract.decision_ref : path.resolve(path.dirname(this.contractFile), contract.decision_ref);
+    const decisionText = await readFile(decisionPath, "utf8").catch(() => fail(`架构决策文件不可读取: ${decisionPath}`));
+    if (sha256Ref(decisionText) !== contract.decision_digest) fail("架构决策文件 digest 与合同不一致");
+    const decisionDocument = parseDocument(decisionText, { maxAliasCount: 0, uniqueKeys: true });
+    if (decisionDocument.errors.length) fail(`架构决策 YAML 无效: ${decisionDocument.errors[0].message}`);
+    const decisionSet = decisionDocument.toJS({ maxAliasCount: 0 });
+    if (decisionSet?.kind !== "scaffold-architecture-decisions" || decisionSet?.template !== false || decisionSet?.status !== "current") fail("架构决策文件必须是 current 的正式 scaffold-architecture-decisions 记录");
+    const decision = (decisionSet.decisions ?? []).find((item) => item.decision_id === contract.decision_id);
+    if (!decision || decision.status !== "lifecycle-approved" || decision.confirmed_architecture !== "domain-driven" || decision.project_id !== contract.project_name) fail("架构决策未批准、项目不匹配或不是 domain-driven");
+    if (decision.platform_profile !== contract.profiles.platform || decision.architecture_profile !== contract.architecture_profile || decision.verification_database !== "h2" || decision.production_database !== "not-bound" || Object.hasOwn(decision, "database_profile") || JSON.stringify(decision.requested_capabilities) !== JSON.stringify(contract.module_profile.requested_capabilities) || JSON.stringify(decision.resolved_modules) !== JSON.stringify(contract.module_profile.resolved_modules)) fail("架构决策的 Profile 或模块闭包与脚手架合同不一致");
+    if (!decision.user_confirmation || Object.values(decision.user_confirmation).some((value) => !isPresent(value))) fail("架构决策缺少完整用户确认记录");
+  assertScaffoldUserDecision(decision);
     const generationPolicy = contract.generation_policy;
     if (!generationPolicy || generationPolicy.mode !== "initialize-only" || generationPolicy.existing_target !== "unsupported" || generationPolicy.old_project_migration !== "unsupported" || generationPolicy.template_upgrade !== "unsupported") fail("脚手架合同 generation_policy 必须声明 initialize-only，且 existing_target、old_project_migration、template_upgrade 均为 unsupported");
     this.contractDigest = sha256(contractText);
+    if (contract.architecture_profile !== "target-domain-model") fail("合同必须显式绑定 target-domain-model Profile");
+    validateArchitectureIdentity(scaffoldArchitectureIdentity(contract, this.contractDigest));
     this.scaffoldContract = contract;
   }
 
@@ -249,7 +271,7 @@ class ScaffoldGenerator {
       }
     }
     this.profiles = structuredClone(profiles);
-    if (this.options.database !== profiles.database) fail("--database 与脚手架合同 profiles.database 不一致");
+    assertLocalDatabaseProfile(profiles);
   }
 
   validateMavenCoordinates(contract) {
@@ -278,10 +300,8 @@ class ScaffoldGenerator {
   }
 
   templateVars() {
-    const database = this.options.database;
-    const dependency = database === "mysql" ? `<dependency>\n    <groupId>com.mysql</groupId>\n    <artifactId>mysql-connector-j</artifactId>\n    <version>8.4.0</version>\n    <scope>compile</scope>\n</dependency>` : "";
     const coordinates = this.mavenCoordinates;
-    return { project_name: this.projectName, application_class_name: this.applicationClassName, base_package: this.basePackage, group_id: coordinates.group_id, project_version: coordinates.project_version, parent_group_id: coordinates.parent.group_id, parent_artifact_id: coordinates.parent.artifact_id, parent_version: coordinates.parent.version, yss_components_version: coordinates.yss_components_version, project_description: `${this.projectName} service`, author: this.author, date: this.date, database, driver_class: "com.mysql.cj.jdbc.Driver", db_name: this.dbName, jdbc_url: `jdbc:mysql://localhost:3306/${this.dbName}?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai`, db_dependency: dependency };
+    return { project_name: this.projectName, application_class_name: this.applicationClassName, base_package: this.basePackage, group_id: coordinates.group_id, project_version: coordinates.project_version, parent_group_id: coordinates.parent.group_id, parent_artifact_id: coordinates.parent.artifact_id, parent_version: coordinates.parent.version, yss_components_version: coordinates.yss_components_version, project_description: `${this.projectName} service`, author: this.author, date: this.date, db_dependency: "" };
   }
   render(text) { let output = text; for (const [key, value] of Object.entries(this.templateVars())) output = output.replaceAll(`{{${key}}}`, String(value)); return output; }
   async renderTemplate(template, output) { if (!await isFile(template)) fail(`模板文件不存在: ${template}`); await writeText(output, this.render(await readFile(template, "utf8"))); }
@@ -318,13 +338,15 @@ class ScaffoldGenerator {
   }
   async generateConfigFiles() {
     console.log("\n⚙️  生成配置文件..."); const base = path.join(this.projectRoot, `${this.projectName}-bootstrap`, "src/main/resources");
-    await Promise.all([["application.yml.template", "application.yml"], ["application-local.yml.template", "application-local.yml"], ["logback-spring.xml.template", "logback-spring.xml"]].map(([from, to]) => this.renderTemplate(path.join(this.configTemplateDir, from), path.join(base, to))));
-    console.log("  ✓ application.yml\n  ✓ application-local.yml\n  ✓ logback-spring.xml");
+    await Promise.all([["application.yml.template", "application.yml"], ["logback-spring.xml.template", "logback-spring.xml"]].map(([from, to]) => this.renderTemplate(path.join(this.configTemplateDir, from), path.join(base, to))));
+    await writeText(path.join(base, "application-scaffold-local.yml"), localDatabaseConfiguration(this.projectName));
+    await writeText(path.join(this.projectRoot, `${this.projectName}-bootstrap/src/test/resources/application.yml`), localDatabaseConfiguration(`${this.projectName}_test`));
+    console.log("  ✓ application.yml\n  ✓ application-scaffold-local.yml\n  ✓ test H2 configuration\n  ✓ logback-spring.xml");
   }
   generateDatabaseScripts() { console.log("\n🗃️  保留数据库目录布局...\n  ✓ db/（业务 schema 和初始化数据由批准切片合同生成）"); }
   async generateDocumentation() {
     console.log("\n📚 生成项目文档...");
-    await writeText(path.join(this.projectRoot, "README.md"), this.render("# {{project_name}}\n\n## 模块说明\n\n- {{project_name}}-domain\n- {{project_name}}-application\n- {{project_name}}-infrastructure\n- {{project_name}}-adapter\n- {{project_name}}-bootstrap\n\n业务 API、领域模型、数据结构和权限行为必须在冻结的 Slice Implementation Contract 下，由对应 YSS skill 逐切片实现。\n\n## 快速开始\n\n```bash\ncd {{project_name}}\n./mvnw clean compile\n./mvnw spring-boot:run -pl {{project_name}}-bootstrap\n```\n"));
+    await writeText(path.join(this.projectRoot, "README.md"), this.render("# {{project_name}}\n\n## 模块说明\n\n- {{project_name}}-domain\n- {{project_name}}-application\n- {{project_name}}-infrastructure\n- {{project_name}}-adapter\n- {{project_name}}-bootstrap\n\n业务 API、领域模型、数据结构和权限行为必须在冻结的 Slice Implementation Contract 下，由对应 YSS skill 逐切片实现。\n\n## 快速开始\n\n```bash\ncd {{project_name}}\n./mvnw clean compile\n./mvnw -Pscaffold-local spring-boot:run -pl {{project_name}}-bootstrap -Dspring-boot.run.profiles=scaffold-local\n```\n"));
     console.log("  ✓ README.md");
   }
   async writeGenerationManifest() {
@@ -341,7 +363,7 @@ class ScaffoldGenerator {
     }
     const scaffoldParent = path.join(SKILL_ROOT, "references", "yss-backend-scaffold-parent", "SKILL.md");
     const compilerContract = path.join(REPOSITORY_ROOT, ".agents", "skills", "yss-implementation-contract-compiler", "references", "compiler-contract.yaml");
-    const manifest = { schema_version: 2, contract_id: this.options.contractId, contract_version: this.options.contractVersion, scaffold_request_id: contract.scaffold_request_id, approval_ref: this.options.approvalRef, compiler_draft_ref: this.options.compilerDraftRef, persisted_ref: this.options.persistedRef, contract_file_ref: this.contractFile, contract_digest: this.contractDigest, lifecycle_approval_ref: contract.lifecycle_approval_ref, current_version: contract.current_version, approver: contract.approval.approver, allowed_write_paths: contract.allowed_write_paths, expected_evidence_files: contract.expected_evidence_files, project_name: this.projectName, base_package: this.basePackage, bootstrap_main_class: `${this.basePackage}.${this.applicationClassName}`, bootstrap_main_source: this.bootstrapMainSource, maven_coordinates: this.mavenCoordinates, maven_coordinates_source: this.mavenCoordinatesSource, profiles: this.profiles, database: this.options.database, generation_mode: "controlled-generation", completion_level: "generated", generator: { id: "yss-ddd-scaffold-generator", template_digest: await treeDigest(path.join(SKILL_ROOT, "assets")) }, ownership: { generated_files: generatedFiles, user_owned_globs: ["**/src/main/java/**", "**/src/test/java/**", "db/**"] }, readiness: { downstream_skills: downstream, contracts: { scaffold_parent: sha256(await readFile(scaffoldParent)), compiler_contract: sha256(await readFile(compilerContract)) }, architecture_ruleset: sha256(await readFile(path.join(this.javaTemplateDir, "architecture-rules-test.java.template"))) }, generation_policy: { mode: "initialize-only", existing_target: "unsupported", old_project_migration: "unsupported", template_upgrade: "unsupported" }, verification_commands: COMMANDS, generated_at: isoNow() };
+    const manifest = { schema_version: 3, kind: "backend-scaffold", architecture_profile: contract.architecture_profile, architecture_identity: scaffoldArchitectureIdentity(contract, this.contractDigest), contract_id: this.options.contractId, contract_version: this.options.contractVersion, scaffold_request_id: contract.scaffold_request_id, architecture_family: contract.architecture_family, generator_skill: contract.generator_skill, decision_id: contract.decision_id, decision_digest: contract.decision_digest, module_profile: contract.module_profile, approval_ref: this.options.approvalRef, compiler_draft_ref: this.options.compilerDraftRef, persisted_ref: this.options.persistedRef, contract_file_ref: this.contractFile, contract_digest: this.contractDigest, lifecycle_approval_ref: contract.lifecycle_approval_ref, current_version: contract.current_version, approver: contract.approval.approver, allowed_write_paths: contract.allowed_write_paths, expected_evidence_files: contract.expected_evidence_files, project_name: this.projectName, base_package: this.basePackage, bootstrap_main_class: `${this.basePackage}.${this.applicationClassName}`, bootstrap_main_source: this.bootstrapMainSource, maven_coordinates: this.mavenCoordinates, maven_coordinates_source: this.mavenCoordinatesSource, profiles: this.profiles, generation_mode: "controlled-generation", completion_level: "generated", generator: { id: "yss-ddd-scaffold-generator", template_digest: await treeDigest(path.join(SKILL_ROOT, "assets")) }, ownership: { generated_files: generatedFiles, user_owned_globs: ["**/src/main/java/**", "**/src/test/java/**", "db/**"] }, readiness: { downstream_skills: downstream, contracts: { scaffold_parent: sha256(await readFile(scaffoldParent)), compiler_contract: sha256(await readFile(compilerContract)) }, architecture_ruleset: sha256(await readFile(path.join(this.javaTemplateDir, "architecture-rules-test.java.template"))) }, generation_policy: { mode: "initialize-only", existing_target: "unsupported", old_project_migration: "unsupported", template_upgrade: "unsupported" }, verification_commands: COMMANDS, generated_at: isoNow() };
     await writeText(path.join(this.projectRoot, ".yss", "scaffold-generation.json"), `${JSON.stringify(manifest, null, 2)}\n`); console.log("  ✓ .yss/scaffold-generation.json");
   }
   async copyWrapperFiles() {
@@ -353,7 +375,7 @@ class ScaffoldGenerator {
     const required = [path.join(this.projectRoot, "pom.xml"), path.join(this.projectRoot, `${this.projectName}-bootstrap`, "pom.xml"), path.join(this.projectRoot, this.bootstrapMainSource), path.join(this.projectRoot, "mvnw"), path.join(this.projectRoot, ".yss", "scaffold-generation.json")];
     const missing = []; for (const target of required) if (!await isFile(target)) missing.push(target); if (missing.length) fail(`生成产物缺失: ${missing.join(", ")}`);
     const manifest = await readJson(required[4], "脚手架生成元数据清单无法读取");
-    if (manifest.schema_version !== 2 || manifest.contract_id !== this.options.contractId || manifest.contract_version !== this.options.contractVersion || manifest.current_version !== this.options.contractVersion || manifest.generation_mode !== "controlled-generation" || manifest.bootstrap_main_class !== `${this.basePackage}.${this.applicationClassName}` || manifest.bootstrap_main_source !== this.bootstrapMainSource || manifest.profiles.architecture !== SUPPORTED_PROFILES.architecture || manifest.generation_policy.mode !== "initialize-only" || manifest.generation_policy.existing_target !== "unsupported" || JSON.stringify(manifest.verification_commands) !== JSON.stringify(COMMANDS)) fail("脚手架生成元数据清单与当前批准合同、Target Profile、initialize-only 边界、机械启动入口或固定验证命令不一致");
+    if (manifest.schema_version !== 3 || manifest.contract_id !== this.options.contractId || manifest.contract_version !== this.options.contractVersion || manifest.current_version !== this.options.contractVersion || manifest.generation_mode !== "controlled-generation" || manifest.architecture_family !== "domain-driven" || manifest.generator_skill !== "yss-ddd-scaffold-generator" || manifest.decision_id !== this.scaffoldContract.decision_id || manifest.decision_digest !== this.scaffoldContract.decision_digest || JSON.stringify(manifest.module_profile) !== JSON.stringify(this.scaffoldContract.module_profile) || manifest.bootstrap_main_class !== `${this.basePackage}.${this.applicationClassName}` || manifest.bootstrap_main_source !== this.bootstrapMainSource || manifest.profiles.architecture !== SUPPORTED_PROFILES.architecture || manifest.generation_policy.mode !== "initialize-only" || manifest.generation_policy.existing_target !== "unsupported" || JSON.stringify(manifest.verification_commands) !== JSON.stringify(COMMANDS)) fail("脚手架生成元数据清单与当前批准架构决策、合同、Target Profile、initialize-only 边界、机械启动入口或固定验证命令不一致");
     const stack = [this.projectRoot], binary = new Set([".class", ".db", ".jar", ".png", ".jpg", ".jpeg", ".gif"]);
     while (stack.length) { const dir = stack.pop(); for (const entry of await readdir(dir, { withFileTypes: true })) { const target = path.join(dir, entry.name); if (entry.isDirectory()) { stack.push(target); continue; } if (!entry.isFile() || binary.has(path.extname(entry.name))) continue; const content = await readFile(target, "utf8"); if (content.includes("{{") || content.includes("root/root")) fail(`生成文件包含未替换占位符或明文凭据: ${target}`); } }
   }