create-yss-spec 3.0.1 → 3.1.3

package/template/.cursor/skills/yss-antdv-next-design/scripts/collect-antdv-next-facts.mjs

@@ -0,0 +1,213 @@
+#!/usr/bin/env node
+import { createHash } from "node:crypto";
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { validateFactPack } from "./validate-fact-pack.mjs";
+
+const EXACT_SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+const DEFAULT_COMPONENTS = ["Button", "Form", "Table", "Modal", "Select", "DatePicker"];
+
+function fail(message) {
+  throw new TypeError(message);
+}
+
+function sha256(buffer) {
+  return createHash("sha256").update(buffer).digest("hex");
+}
+
+function parseArguments(argv) {
+  const values = { components: [] };
+  for (let index = 0; index < argv.length; index += 1) {
+    const key = argv[index];
+    if (!["--project-root", "--output", "--library-version", "--cli-version", "--component", "--profile"].includes(key)) fail(`未知参数: ${key}`);
+    const value = argv[index + 1];
+    if (!value || value.startsWith("--")) fail(`${key} 缺少值`);
+    index += 1;
+    if (key === "--component") values.components.push(value);
+    else values[key.slice(2).replaceAll("-", "_")] = value;
+  }
+  values.project_root ??= ".";
+  values.profile ??= "selected-components";
+  if (!values.output || !values.library_version || !values.cli_version) fail("必须提供 --output、--library-version 和 --cli-version");
+  if (!EXACT_SEMVER.test(values.library_version) || !EXACT_SEMVER.test(values.cli_version)) fail("library/cli version 必须是精确 semver");
+  if (!["selected-components", "p0-reference"].includes(values.profile)) fail("--profile 仅支持 selected-components 或 p0-reference");
+  if (values.components.length === 0) values.components = [...DEFAULT_COMPONENTS];
+  if (new Set(values.components).size !== values.components.length || values.components.some((item) => !/^[A-Z][A-Za-z0-9]*$/.test(item))) fail("--component 必须是不重复的 PascalCase 组件名");
+  if (values.profile === "p0-reference" && JSON.stringify([...values.components].sort()) !== JSON.stringify([...DEFAULT_COMPONENTS].sort())) {
+    fail(`p0-reference 必须覆盖 ${DEFAULT_COMPONENTS.join(", ")}`);
+  }
+  return values;
+}
+
+function run(file, args, { json = false, cwd } = {}) {
+  let output;
+  try {
+    output = execFileSync(file, args, {
+      cwd,
+      encoding: "utf8",
+      env: { ...process.env, ANTDV_NO_AUTO_REPORT: "1", NO_COLOR: "1" },
+      maxBuffer: 32 * 1024 * 1024,
+      stdio: ["ignore", "pipe", "pipe"]
+    });
+  } catch (error) {
+    const detail = error.stderr?.toString().trim() || error.message;
+    fail(`${file} ${args.join(" ")} 失败: ${detail}`);
+  }
+  if (!json) return output;
+  try {
+    return JSON.parse(output);
+  } catch {
+    fail(`${file} ${args.join(" ")} 未返回有效 JSON`);
+  }
+}
+
+function npmMetadata(packageName, version, cwd) {
+  const value = run("npm", ["view", `${packageName}@${version}`, "version", "dist.integrity", "dist.tarball", "--json"], { json: true, cwd });
+  if (value.version !== version || typeof value["dist.integrity"] !== "string" || typeof value["dist.tarball"] !== "string") {
+    fail(`${packageName}@${version} npm metadata 不完整`);
+  }
+  return { version, integrity: value["dist.integrity"], tarball: value["dist.tarball"] };
+}
+
+function npmDistTags(packageName, cwd) {
+  return run("npm", ["view", packageName, "dist-tags", "--json"], { json: true, cwd });
+}
+
+function writeJson(root, ref, value) {
+  const target = path.join(root, ref);
+  mkdirSync(path.dirname(target), { recursive: true });
+  const content = `${JSON.stringify(value, null, 2)}\n`;
+  writeFileSync(target, content);
+  return { ref: ref.split(path.sep).join("/"), sha256: sha256(Buffer.from(content)) };
+}
+
+function writeText(root, ref, value) {
+  const target = path.join(root, ref);
+  mkdirSync(path.dirname(target), { recursive: true });
+  writeFileSync(target, value);
+  return { ref: ref.split(path.sep).join("/"), sha256: sha256(Buffer.from(value)) };
+}
+
+function projectRelative(projectRoot, target, label) {
+  const relative = path.relative(projectRoot, target);
+  if (!relative || relative.startsWith("..") || path.isAbsolute(relative)) fail(`${label} 必须位于项目根内`);
+  return relative.split(path.sep).join("/");
+}
+
+export function collectFactPack(argv = process.argv.slice(2)) {
+  const options = parseArguments(argv);
+  const projectRoot = path.resolve(options.project_root);
+  const output = path.resolve(projectRoot, options.output);
+  if (!existsSync(path.join(projectRoot, "yss-project.yaml"))) fail("--project-root 缺少 yss-project.yaml");
+  const outputRef = projectRelative(projectRoot, output, "--output");
+  const expectedOutput = options.profile === "p0-reference"
+    ? `.template-source/evidence/maintenance/antdv-next-p0-facts/${options.library_version}`
+    : `docs/design/facts/antdv-next/${options.library_version}`;
+  if (outputRef !== expectedOutput) fail(`--output 必须为 ${expectedOutput}`);
+  if (existsSync(output)) fail(`拒绝覆盖已有 fact pack: ${output}`);
+  const canonicalDesignPath = path.join(projectRoot, "DESIGN.md");
+  const designPath = path.join(projectRoot, "docs/design/design.md");
+  const tokenPath = path.join(projectRoot, "docs/design/tokens/theme.json");
+  for (const required of [canonicalDesignPath, designPath, tokenPath]) if (!existsSync(required)) fail(`缺少项目基线: ${required}`);
+
+  const outputParent = path.dirname(output);
+  mkdirSync(outputParent, { recursive: true });
+  const staging = mkdtempSync(path.join(outputParent, ".antdv-next-facts-"));
+  const cliSpec = `@antdv-next/cli@${options.cli_version}`;
+  const cli = (...args) => run("npx", ["-y", cliSpec, ...args], { json: true, cwd: projectRoot });
+  try {
+    const libraryMetadata = npmMetadata("antdv-next", options.library_version, projectRoot);
+    const cliMetadata = npmMetadata("@antdv-next/cli", options.cli_version, projectRoot);
+    const help = run("npx", ["-y", cliSpec, "--help"], { cwd: projectRoot });
+    if (!help.includes(`@antdv-next/cli v${options.cli_version}`)) fail("CLI help banner 与请求版本不一致");
+    const helpArtifact = writeText(staging, "cli-help.txt", help);
+
+    const probeValue = cli("changelog", options.library_version, options.library_version, "--format", "json");
+    const probeArtifact = writeJson(staging, "resolution-probe.json", probeValue);
+    if (probeValue.from !== options.library_version || probeValue.to !== options.library_version) {
+      fail(`exact-version probe 失败: requested=${options.library_version}, resolved=${probeValue.from}->${probeValue.to}`);
+    }
+
+    const listArtifact = writeJson(staging, "component-list.json", cli("list", "--ver", options.library_version, "--format", "json"));
+    const designValue = cli("design.md", "--ver", options.library_version, "--format", "json");
+    const designArtifact = writeJson(staging, "design-md.json", designValue);
+    const designVersion = typeof designValue.doc === "string" ? designValue.doc.match(/^version:\s*(\S+)$/m)?.[1] : null;
+    if (designVersion !== "alpha") fail("design.md 未声明预期的 alpha 版本");
+
+    const components = options.components.map((name) => ({
+      name,
+      info: writeJson(staging, `components/${name}/info.json`, cli("info", name, "--ver", options.library_version, "--format", "json")),
+      demo: writeJson(staging, `components/${name}/demo-basic.json`, cli("demo", name, "basic", "--ver", options.library_version, "--format", "json")),
+      token: writeJson(staging, `components/${name}/token.json`, cli("token", name, "--ver", options.library_version, "--format", "json")),
+      semantic: writeJson(staging, `components/${name}/semantic.json`, cli("semantic", name, "--ver", options.library_version, "--format", "json"))
+    }));
+
+    const manifest = {
+      schema_version: 1,
+      provider_id: "vue-antdv-next",
+      maturity: "supported",
+      collection_profile: options.profile,
+      generated_at: new Date().toISOString(),
+      library: {
+        package: "antdv-next",
+        requested_version: options.library_version,
+        resolved_snapshot_version: probeValue.to,
+        integrity: libraryMetadata.integrity,
+        tarball: libraryMetadata.tarball,
+        observed_dist_tags: npmDistTags("antdv-next", projectRoot)
+      },
+      cli: {
+        package: "@antdv-next/cli",
+        version: options.cli_version,
+        integrity: cliMetadata.integrity,
+        tarball: cliMetadata.tarball,
+        observed_dist_tags: npmDistTags("@antdv-next/cli", projectRoot),
+        invocation: ["npx", "-y", cliSpec],
+        help_ref: helpArtifact.ref,
+        help_sha256: helpArtifact.sha256
+      },
+      resolution_probe: {
+        command: ["changelog", options.library_version, options.library_version, "--format", "json"],
+        from: probeValue.from,
+        to: probeValue.to,
+        exact_match: true,
+        output: probeArtifact
+      },
+      component_list: listArtifact,
+      design_baseline: {
+        version_scope: "static-alpha-not-exact",
+        declared_version: designVersion,
+        output: designArtifact
+      },
+      project_baseline: {
+        override_precedence: "project-first",
+        canonical_design: { ref: projectRelative(projectRoot, canonicalDesignPath, "canonical design baseline"), sha256: sha256(readFileSync(canonicalDesignPath)) },
+        design: { ref: projectRelative(projectRoot, designPath, "design baseline"), sha256: sha256(readFileSync(designPath)) },
+        tokens: { ref: projectRelative(projectRoot, tokenPath, "token baseline"), sha256: sha256(readFileSync(tokenPath)) },
+        override_reviewed: false
+      },
+      components
+    };
+    writeJson(staging, "manifest.json", manifest);
+    const result = validateFactPack(path.join(staging, "manifest.json"));
+    renameSync(staging, output);
+    return { output, ...result };
+  } catch (error) {
+    if (existsSync(staging)) rmSync(staging, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+async function main() {
+  const result = collectFactPack();
+  process.stdout.write(`Collected Antdv Next fact pack: ${result.output} (${result.components} components)\n`);
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  main().catch((error) => {
+    process.stderr.write(`${error.message}\n`);
+    process.exitCode = 1;
+  });
+}

package/template/.cursor/skills/yss-antdv-next-design/scripts/validate-fact-pack.mjs

@@ -0,0 +1,168 @@
+#!/usr/bin/env node
+import { createHash } from "node:crypto";
+import { existsSync, lstatSync, readFileSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const EXACT_SEMVER = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
+const SHA256 = /^[a-f0-9]{64}$/;
+const P0_COMPONENTS = ["Button", "DatePicker", "Form", "Modal", "Select", "Table"];
+
+function fail(message) {
+  throw new TypeError(message);
+}
+
+function sha256(buffer) {
+  return createHash("sha256").update(buffer).digest("hex");
+}
+
+function requireString(value, field) {
+  if (typeof value !== "string" || !value.trim()) fail(`${field} 不能为空`);
+}
+
+function requireExactVersion(value, field) {
+  if (typeof value !== "string" || !EXACT_SEMVER.test(value)) fail(`${field} 必须是精确 semver`);
+}
+
+function resolveContainedFile(root, ref, field) {
+  requireString(ref, field);
+  if (path.isAbsolute(ref)) fail(`${field} 必须是相对路径`);
+  const target = path.resolve(root, ref);
+  const relative = path.relative(root, target);
+  if (relative.startsWith("..") || path.isAbsolute(relative)) fail(`${field} 路径越界`);
+  if (!existsSync(target) || !lstatSync(target).isFile() || lstatSync(target).isSymbolicLink()) fail(`${field} 必须引用普通文件`);
+  const realRelative = path.relative(realpathSync(root), realpathSync(target));
+  if (realRelative.startsWith("..") || path.isAbsolute(realRelative)) fail(`${field} symlink 越界`);
+  return target;
+}
+
+function verifyArtifact(packRoot, artifact, field) {
+  if (!artifact || typeof artifact !== "object" || Array.isArray(artifact)) fail(`${field} 必须是对象`);
+  const target = resolveContainedFile(packRoot, artifact.ref, `${field}.ref`);
+  if (!SHA256.test(artifact.sha256 ?? "")) fail(`${field}.sha256 非法`);
+  const buffer = readFileSync(target);
+  if (sha256(buffer) !== artifact.sha256) fail(`${field} digest 不匹配`);
+  let value;
+  try {
+    value = JSON.parse(buffer.toString("utf8"));
+  } catch {
+    fail(`${field} 不是有效 JSON`);
+  }
+  return value;
+}
+
+function findProjectRoot(start) {
+  let current = path.resolve(start);
+  for (;;) {
+    if (existsSync(path.join(current, "yss-project.yaml"))) return current;
+    const parent = path.dirname(current);
+    if (parent === current) fail("无法定位包含 yss-project.yaml 的项目根");
+    current = parent;
+  }
+}
+
+function verifyProjectArtifact(projectRoot, item, field) {
+  if (!item || typeof item !== "object" || Array.isArray(item)) fail(`${field} 必须是对象`);
+  const target = resolveContainedFile(projectRoot, item.ref, `${field}.ref`);
+  if (!SHA256.test(item.sha256 ?? "") || sha256(readFileSync(target)) !== item.sha256) fail(`${field} digest 不匹配`);
+}
+
+export function validateFactPack(manifestPath) {
+  const absoluteManifest = path.resolve(manifestPath);
+  if (!existsSync(absoluteManifest) || !lstatSync(absoluteManifest).isFile()) fail(`manifest 不存在: ${manifestPath}`);
+  const packRoot = path.dirname(absoluteManifest);
+  const projectRoot = findProjectRoot(packRoot);
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(absoluteManifest, "utf8"));
+  } catch {
+    fail("manifest 不是有效 JSON");
+  }
+  if (manifest.schema_version !== 1) fail("schema_version 必须为 1");
+  if (manifest.provider_id !== "vue-antdv-next") fail("provider_id 必须为 vue-antdv-next");
+  if (!["supported", "draft"].includes(manifest.maturity)) fail("maturity 必须为 supported；历史 P0 draft 只读兼容");
+  if (!["selected-components", "p0-reference"].includes(manifest.collection_profile)) fail("collection_profile 无效");
+
+  const library = manifest.library;
+  if (!library || library.package !== "antdv-next") fail("library.package 必须为 antdv-next");
+  requireExactVersion(library.requested_version, "library.requested_version");
+  requireExactVersion(library.resolved_snapshot_version, "library.resolved_snapshot_version");
+  if (library.requested_version !== library.resolved_snapshot_version) fail("library resolved snapshot 与 requested version 不一致");
+  requireString(library.integrity, "library.integrity");
+  requireString(library.tarball, "library.tarball");
+
+  const cli = manifest.cli;
+  if (!cli || cli.package !== "@antdv-next/cli") fail("cli.package 必须为 @antdv-next/cli");
+  requireExactVersion(cli.version, "cli.version");
+  requireString(cli.integrity, "cli.integrity");
+  requireString(cli.tarball, "cli.tarball");
+  const helpPath = resolveContainedFile(packRoot, cli.help_ref, "cli.help_ref");
+  if (!SHA256.test(cli.help_sha256 ?? "") || sha256(readFileSync(helpPath)) !== cli.help_sha256) fail("cli help digest 不匹配");
+  if (!readFileSync(helpPath, "utf8").includes(`@antdv-next/cli v${cli.version}`)) fail("CLI help banner 与 cli.version 不一致");
+
+  const probe = manifest.resolution_probe;
+  if (!probe || probe.exact_match !== true) fail("resolution_probe.exact_match 必须为 true");
+  const probeValue = verifyArtifact(packRoot, probe.output, "resolution_probe.output");
+  if (probeValue.from !== library.requested_version || probeValue.to !== library.requested_version) fail("resolution probe 发生版本回退");
+  if (probe.from !== probeValue.from || probe.to !== probeValue.to) fail("resolution probe manifest 与输出不一致");
+
+  const design = manifest.design_baseline;
+  if (!design || design.version_scope !== "static-alpha-not-exact") fail("design_baseline 必须声明 static-alpha-not-exact");
+  const designValue = verifyArtifact(packRoot, design.output, "design_baseline.output");
+  if (typeof designValue.doc !== "string" || !/^version:\s*alpha$/m.test(designValue.doc) || !/^name:\s*Antdv Next$/m.test(designValue.doc)) {
+    fail("design.md 输出缺少 Antdv Next alpha 声明");
+  }
+
+  const baseline = manifest.project_baseline;
+  if (!baseline || baseline.override_precedence !== "project-first") fail("project_baseline.override_precedence 必须为 project-first");
+  if (typeof baseline.override_reviewed !== "boolean") fail("project_baseline.override_reviewed 必须是 boolean");
+  if (baseline.canonical_design?.ref !== "DESIGN.md") fail("project_baseline.canonical_design.ref 必须为 DESIGN.md");
+  verifyProjectArtifact(projectRoot, baseline.canonical_design, "project_baseline.canonical_design");
+  verifyProjectArtifact(projectRoot, baseline.design, "project_baseline.design");
+  verifyProjectArtifact(projectRoot, baseline.tokens, "project_baseline.tokens");
+
+  if (!Array.isArray(manifest.components) || manifest.components.length === 0) fail("components 不能为空");
+  const names = manifest.components.map((component) => component?.name);
+  if (new Set(names).size !== names.length) fail("components 不得重复");
+  if (names.some((name) => typeof name !== "string" || !/^[A-Z][A-Za-z0-9]*$/.test(name))) fail("component name 非法");
+  if (manifest.collection_profile === "p0-reference" && JSON.stringify([...names].sort()) !== JSON.stringify(P0_COMPONENTS)) {
+    fail(`p0-reference 必须恰好覆盖 ${P0_COMPONENTS.join(", ")}`);
+  }
+  const componentList = verifyArtifact(packRoot, manifest.component_list, "component_list");
+  if (!Array.isArray(componentList) || !names.every((name) => componentList.some((entry) => entry?.name === name))) {
+    fail("component_list 未覆盖全部选用组件");
+  }
+  for (const [index, component] of manifest.components.entries()) {
+    const prefix = `components[${index}]`;
+    const info = verifyArtifact(packRoot, component.info, `${prefix}.info`);
+    const demo = verifyArtifact(packRoot, component.demo, `${prefix}.demo`);
+    const token = verifyArtifact(packRoot, component.token, `${prefix}.token`);
+    const semantic = verifyArtifact(packRoot, component.semantic, `${prefix}.semantic`);
+    if (info.name !== component.name) fail(`${prefix}.info 组件名不一致`);
+    if (demo.component !== component.name || typeof demo.code !== "string" || !demo.code.includes("<template>")) fail(`${prefix}.demo 不是匹配的 Vue SFC`);
+    if (!Array.isArray(token.token)) fail(`${prefix}.token 缺少 token 数组`);
+    if (semantic.name !== component.name || !Array.isArray(semantic.semanticStructure)) fail(`${prefix}.semantic 结构无效`);
+  }
+
+  return {
+    provider_id: manifest.provider_id,
+    library_version: library.requested_version,
+    cli_version: cli.version,
+    components: names.length,
+    profile: manifest.collection_profile
+  };
+}
+
+async function main() {
+  const manifestPath = process.argv[2];
+  if (!manifestPath) fail("用法: validate-fact-pack.mjs <manifest.json>");
+  const result = validateFactPack(manifestPath);
+  process.stdout.write(`Antdv Next fact pack valid (${result.library_version}, ${result.components} components, ${result.profile})\n`);
+}
+
+if (process.argv[1] === fileURLToPath(import.meta.url)) {
+  main().catch((error) => {
+    process.stderr.write(`${error.message}\n`);
+    process.exitCode = 1;
+  });
+}

package/template/.cursor/skills/yss-antdv-next-design/tests/run-scenarios.mjs

@@ -0,0 +1,139 @@
+#!/usr/bin/env node
+import assert from "node:assert/strict";
+import { createHash } from "node:crypto";
+import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { validateFactPack } from "../scripts/validate-fact-pack.mjs";
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const SKILL_ROOT = path.resolve(HERE, "..");
+const COMPONENTS = ["Button", "Form", "Table", "Modal", "Select", "DatePicker"];
+
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+
+function writeJson(root, ref, value) {
+  const target = path.join(root, ref);
+  mkdirSync(path.dirname(target), { recursive: true });
+  const content = `${JSON.stringify(value, null, 2)}\n`;
+  writeFileSync(target, content);
+  return { ref, sha256: sha256(content) };
+}
+
+function fixture() {
+  const projectRoot = mkdtempSync(path.join(os.tmpdir(), "yss-antdv-next-provider-"));
+  writeFileSync(path.join(projectRoot, "yss-project.yaml"), "schema_version: 1\nrepository_mode: template-source\n");
+  mkdirSync(path.join(projectRoot, "docs/design/tokens"), { recursive: true });
+  writeFileSync(path.join(projectRoot, "DESIGN.md"), "---\nversion: alpha\n---\n");
+  writeFileSync(path.join(projectRoot, "docs/design/design.md"), "# Design\n");
+  writeFileSync(path.join(projectRoot, "docs/design/tokens/theme.json"), "{}\n");
+  const packRoot = path.join(projectRoot, ".template-source/evidence/maintenance/antdv-next-p0-facts/1.5.2");
+  mkdirSync(packRoot, { recursive: true });
+  const help = "@antdv-next/cli v0.0.0-beta.5\n";
+  writeFileSync(path.join(packRoot, "cli-help.txt"), help);
+  const probe = writeJson(packRoot, "resolution-probe.json", { from: "1.5.2", to: "1.5.2", diffs: [] });
+  const design = writeJson(packRoot, "design-md.json", { doc: "---\nversion: alpha\nname: Antdv Next\n---\n" });
+  const componentList = writeJson(packRoot, "component-list.json", COMPONENTS.map((name) => ({ name })));
+  const components = COMPONENTS.map((name) => ({
+    name,
+    info: writeJson(packRoot, `components/${name}/info.json`, { name, props: [] }),
+    demo: writeJson(packRoot, `components/${name}/demo-basic.json`, { component: name, name: "basic", code: "<template><div /></template>" }),
+    token: writeJson(packRoot, `components/${name}/token.json`, { token: [] }),
+    semantic: writeJson(packRoot, `components/${name}/semantic.json`, { name, semanticStructure: [] })
+  }));
+  const manifest = {
+    schema_version: 1,
+    provider_id: "vue-antdv-next",
+    maturity: "supported",
+    collection_profile: "p0-reference",
+    library: {
+      package: "antdv-next",
+      requested_version: "1.5.2",
+      resolved_snapshot_version: "1.5.2",
+      integrity: "sha512-library",
+      tarball: "https://registry.example/antdv-next.tgz"
+    },
+    cli: {
+      package: "@antdv-next/cli",
+      version: "0.0.0-beta.5",
+      integrity: "sha512-cli",
+      tarball: "https://registry.example/cli.tgz",
+      help_ref: "cli-help.txt",
+      help_sha256: sha256(help)
+    },
+    resolution_probe: { exact_match: true, from: "1.5.2", to: "1.5.2", output: probe },
+    component_list: componentList,
+    design_baseline: { version_scope: "static-alpha-not-exact", output: design },
+    project_baseline: {
+      override_precedence: "project-first",
+      canonical_design: { ref: "DESIGN.md", sha256: sha256("---\nversion: alpha\n---\n") },
+      design: { ref: "docs/design/design.md", sha256: sha256("# Design\n") },
+      tokens: { ref: "docs/design/tokens/theme.json", sha256: sha256("{}\n") },
+      override_reviewed: false
+    },
+    components
+  };
+  writeFileSync(path.join(packRoot, "manifest.json"), `${JSON.stringify(manifest, null, 2)}\n`);
+  return { projectRoot, packRoot, manifest };
+}
+
+function expectFailure(change, pattern) {
+  const data = fixture();
+  try {
+    change(data);
+    writeFileSync(path.join(data.packRoot, "manifest.json"), `${JSON.stringify(data.manifest, null, 2)}\n`);
+    assert.throws(() => validateFactPack(path.join(data.packRoot, "manifest.json")), pattern);
+  } finally {
+    rmSync(data.projectRoot, { recursive: true, force: true });
+  }
+}
+
+const skill = readFileSync(path.join(SKILL_ROOT, "SKILL.md"), "utf8");
+assert.match(skill, /^---\nname: yss-antdv-next-design\ndescription: .+\n---/);
+for (const marker of ["默认组件事实 Provider", "yss-prototype-stage", "yss-ui", "禁止 `antdv setup`", "npx skills add antdv-next/cli"]) assert.ok(skill.includes(marker), `SKILL.md 缺少 ${marker}`);
+
+const valid = fixture();
+try {
+  const result = validateFactPack(path.join(valid.packRoot, "manifest.json"));
+  assert.deepEqual(result, { provider_id: "vue-antdv-next", library_version: "1.5.2", cli_version: "0.0.0-beta.5", components: 6, profile: "p0-reference" });
+} finally {
+  rmSync(valid.projectRoot, { recursive: true, force: true });
+}
+
+expectFailure(({ packRoot }) => {
+  const output = `${JSON.stringify({ from: "1.5.2", to: "1.5.1", diffs: [] }, null, 2)}\n`;
+  writeFileSync(path.join(packRoot, "resolution-probe.json"), output);
+}, /digest 不匹配/);
+
+expectFailure(({ packRoot, manifest }) => {
+  const output = `${JSON.stringify({ from: "1.5.1", to: "1.5.1", diffs: [] }, null, 2)}\n`;
+  writeFileSync(path.join(packRoot, "resolution-probe.json"), output);
+  manifest.resolution_probe.from = "1.5.1";
+  manifest.resolution_probe.to = "1.5.1";
+  manifest.resolution_probe.output.sha256 = sha256(output);
+}, /resolution probe 发生版本回退/);
+
+expectFailure(({ manifest }) => {
+  manifest.library.resolved_snapshot_version = "1.5.1";
+}, /resolved snapshot/);
+
+expectFailure(({ manifest }) => {
+  manifest.components.pop();
+}, /p0-reference 必须恰好覆盖/);
+
+expectFailure(({ manifest }) => {
+  manifest.components[0].info.ref = "../../../../../../outside.json";
+}, /路径越界/);
+
+expectFailure(({ manifest }) => {
+  delete manifest.project_baseline.canonical_design;
+}, /canonical_design/);
+
+expectFailure(({ projectRoot }) => {
+  writeFileSync(path.join(projectRoot, "DESIGN.md"), "---\nversion: changed\n---\n");
+}, /canonical_design digest 不匹配/);
+
+process.stdout.write("yss-antdv-next-design scenarios passed\n");

package/template/.cursor/skills/yss-application/SKILL.md

@@ -5,6 +5,12 @@ description: Use when implementing YSS application use cases, transaction bounda
 
 # yss-application
 
+## 架构分流（先执行）
+
+读取当前合同的 architecture_identity 并与工程基线、仓库登记及 Manifest 核对；再且只读取 `references/profiles/<architecture_profile>.md`。支持的分支为 target-domain-model、layered-mvc-service、mvc-data-analysis-v1；成熟度以注册表为准，不能把 draft 称为受支持。MVC 不执行下文 DDD 专属规则，也不加载其旧分层 guide；组件、安全、批准合同、允许路径及执行证据规则仍共用。
+
+以下 Application / Domain Gateway / Infrastructure / Web module 叙述仅适用于 target-domain-model；MVC 的 service/core/repository/server/client 所有权由所选 Profile 引用定义。
+
 Application 层用例编排 skill。负责协调 Domain 与 Gateway，定义事务边界和跨聚合流程，不承载核心领域规则。
 
 ## 何时使用

package/template/.cursor/skills/yss-application/references/profiles/layered-mvc-service.md

@@ -0,0 +1,3 @@
+# layered-mvc-service
+
+先读仓库 `docs/agents/backend-architecture-profiles.md` 的 MVC 约定。写入 `service` 的 command/query/result/service 包；事务与业务行为通过公开用例 seam 做 behavior-tdd。调用 Repository/Adapter；不得生成 Domain Gateway 或引用 client DTO、Spring MVC、生产驱动。需要 HTTP 协议变更时返回 new_impacts，由 Web 工作单元处理。

package/template/.cursor/skills/yss-application/references/profiles/mvc-data-analysis-v1.md

@@ -0,0 +1,3 @@
+# mvc-data-analysis-v1
+
+先读仓库 `docs/agents/backend-architecture-profiles.md` 的 MVC 约定。写入 `core` 的 command/query/result/service 包；core 是薄应用层，拥有事务与内部模型，不依赖 client/server。读取/计算/导出编排不能自动扩大 SQL 或 API 合同；数据行为采用 behavior-tdd。不要套用 DDD application-layer-guide。

package/template/.cursor/skills/yss-application/references/profiles/target-domain-model.md

@@ -0,0 +1,3 @@
+# target-domain-model
+
+只用于 `domain-driven`；完整执行规则见 `../application-layer-guide.md`。Application 调用 Domain/Gateway 或 Query Port；领域不变量归 Domain，事务归 Application，HTTP DTO 转换归 Web。禁止把本分支套给 MVC。

package/template/.cursor/skills/yss-components/SKILL.md

@@ -12,7 +12,7 @@ description: Use when YSS Vue 页面涉及布局、YTable、YEditTable、YFormil
 - YSS UI 组件文档：`http://192.168.164.27:3200/components`（组件契约以该手册为准；本技能依据 2026-08-18 可见内容整理）
 - 本地引用索引：`references/frontend-docs.md`
 
-本技能只负责页面组件、布局和交互呈现规范。请求、分页参数、接口映射交给 `yss-hook` 或 `yss-api-integration`；新建或改造完整业务页面交给 `yss-ui-business-page-generation`，生命周期编排和旧触发词兼容交给 `yss-page-module-development`；表格/树高度细节交给 `yss-use-table-height` 或 `yss-use-tree-height`。
+本技能只负责页面组件、布局和交互呈现规范。请求、分页参数、接口映射交给 `yss-hook` 或 `yss-api-integration`；新建、改造和编排完整业务页面统一交给 `yss-ui-business-page-generation`；表格/树高度细节交给 `yss-use-table-height` 或 `yss-use-tree-height`。
 
 组件文档与当前项目的已验证用法冲突时，先检查当前项目代码和依赖版本，再决定是否迁移；不得把上游 Ant Design Vue、vxe-table、Univer 或 Monaco 的未验证 API 当作 YSS 顶层契约。
 

package/template/.cursor/skills/yss-ddd-scaffold-generator/SKILL.md

@@ -23,7 +23,7 @@ description: 用于生成完整的 YSS DDD 多模块后端脚手架。当用户
 
 ## 优先流程
 
-1. 确认服务级 `scaffold_request_id`、项目名、基础包名、Maven 项目坐标、父 POM GAV、YSS Components BOM 版本、输出目录和批准 Profile。Java `base_package` 与 Maven `group_id` 是两个独立输入，不得相互推导；脚手架发生在 Ticket 正式化前，不使用 `slice_id` 伪造切片身份。
+1. 确认服务级 `scaffold_request_id`、已由用户确认且生命周期批准的 `domain-driven` 架构选择及 digest、项目名、基础包名、Maven 项目坐标、父 POM GAV、YSS Components BOM 版本、输出目录和批准 Profile。Java `base_package` 与 Maven `group_id` 是两个独立输入，不得相互推导；脚手架发生在 Ticket 正式化前，不使用 `slice_id` 伪造切片身份。
    Harness 内输出目录必须是 `apps/backend/` 容器，生成器再以 `project_name` 创建 `apps/backend/<project>/`；禁止使用 `app/backend/`、`app/frontend/` 或把 `apps/backend/` 之外的容器根当作后端项目根。
 2. 优先运行 `node scripts/generate_and_verify_scaffold.mjs`，在同一个受控工作流中生成骨架并执行真实 Maven 验证。`generate_scaffold.mjs` 只是底层生成原语，单独返回 0 不代表脚手架完成。
 3. 检查生成的模块名、POM、机械启动入口、基础配置文件和包路径。
@@ -45,7 +45,6 @@ node scripts/generate_and_verify_scaffold.mjs \
   --parent-version 2.0.0-SNAPSHOT \
   --yss-components-version 2.0.0-SNAPSHOT \
   --output-dir /path/to/implementation-repo \
-  --database mysql \
   --contract-id <approved-scaffold-contract-id> \
   --contract-version <current-version> \
   --approval-ref <lifecycle-approval-ref> \
@@ -89,10 +88,10 @@ node scripts/run_first_slice_verification.mjs \
 - 生成后的后端工程必须使用项目根目录 `./mvnw ...` 执行构建、测试、运行和 CI 验证；不得在 README、实施记录、Ticket、Review 或 Release 中默认写裸 `mvn ...`。既有仓库确实无法使用 wrapper 时，必须记录受控例外。
 - 原型确认后，`scaffold_status=required` 才能进入本 skill；本 skill 的生成边界是工程结构、POM、配置、Wrapper 和机械模板，不是业务实现。
 - 脚手架合同必须携带 `contract_id`、`contract_version`、实现合同编译器 draft 引用、生命周期批准引用、持久化引用、当前版本、允许写路径、预期证据文件和验证命令；字段缺失或版本过期时阻断。
-- 新脚手架合同只接受 schema v2，必须分别携带 `project_name`、`base_package` 和 `maven_coordinates`；后者包含项目 `group_id` / `project_version`、父 POM GAV 与 `yss_components_version`，并由 CLI 原样传入。schema v1 为 `unsupported`，直接拒绝且不自动升级。
+- 新脚手架合同只接受 schema v3，必须携带 `architecture_family=domain-driven`、`generator_skill`、`decision_ref/id/digest`、固定模块闭包，并分别携带 `project_name`、`base_package` 和 `maven_coordinates`；后者包含项目 `group_id` / `project_version`、父 POM GAV 与 `yss_components_version`，并由 CLI 原样传入。历史 schema v2 仅只读兼容，不用于新生成；schema v1/v2 均不自动升级。
 - 合同 `profiles` 只支持 `target-domain-model`、`mybatis-plus`、`mysql`、`spring-boot-2.7-jdk8`、`javax`、`web`、`yss-internal`。普通 MyBatis、Boot 3、独立 client module、client-in-domain 和其他旧架构均为 `unsupported`，不提供回退分支。
 - 运行生成器必须传入 `--contract-file`；生成器会校验合同 `status=approved`、`current_version`、`primary_skill`、`controlled-generation`、实际输出路径和固定三条验证命令，不接受仅凭任意字符串引用的放行。
-- 生成项目必须写入 Manifest v2 `.yss/scaffold-generation.json`，记录合同 digest、Target Profile、模板 digest、下游完整 skill tree digest、脚手架父合同与 实现合同编译器 合同 digest、generator-owned 文件 hash、严格 `generation_policy` 和完成等级；清单缺失或不一致时不得交给后续 实现合同编译器。
+- 生成项目必须写入 Manifest v3 `.yss/scaffold-generation.json`，记录架构选择及 digest、生成器、合同 digest、Target Profile、模块闭包、模板 digest、下游完整 skill tree digest、脚手架父合同与 实现合同编译器 合同 digest、generator-owned 文件 hash、严格 `generation_policy` 和完成等级；清单缺失或不一致时不得交给后续 实现合同编译器。
 - `first-slice-verified` 只能由 `run_first_slice_verification.mjs` 写入。手工改 Manifest、只生成 Controller、只通过局部模块测试或仅有结构扫描都不能升级完成等级。
 - 严禁把领域规则、状态机、权限、事务、复杂查询、错误映射、业务字段或用户可见行为塞进脚手架生成步骤。`./mvnw validate`、输出目录存在或“生成成功”都不等于生命周期批准、架构放行或 `ready-for-agent`。
 - 生命周期脚手架生成必须关闭 `--with-example`，不得把 User CRUD 或业务字段当作样板。生成器严格 `initialize-only`：非空目标、`--force`、旧项目迁移和当前模板升级一律 `unsupported`。未来若支持同一 Target Profile 内的模板升级，必须另行设计和批准，当前不预留可执行承诺。

package/template/.cursor/skills/yss-ddd-scaffold-generator/assets/templates/config/application.yml.template

@@ -5,19 +5,6 @@ spring:
   application:
     name: {{project_name}}
 
-  datasource:
-    primary:
-      url: {{jdbc_url}}
-      username: ${DB_USERNAME:}
-      password: ${DB_PASSWORD:}
-      driver-class-name: {{driver_class}}
-      hikari:
-        maximum-pool-size: 20
-        minimum-idle: 5
-        connection-timeout: 30000
-        idle-timeout: 600000
-        max-lifetime: 1800000
-
 mybatis-plus:
   configuration:
     map-underscore-to-camel-case: true

package/template/.cursor/skills/yss-ddd-scaffold-generator/assets/templates/pom/bootstrap-pom.xml.template

@@ -59,6 +59,19 @@
         </dependency>
     </dependencies>
 
+    <profiles>
+        <profile>
+            <id>scaffold-local</id>
+            <dependencies>
+                <dependency>
+                    <groupId>com.h2database</groupId>
+                    <artifactId>h2</artifactId>
+                    <scope>runtime</scope>
+                </dependency>
+            </dependencies>
+        </profile>
+    </profiles>
+
     <build>
         <plugins>
             <plugin>