create-yss-spec 3.3.0 → 3.3.3

package/template/scripts/verify-skill-registry

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import { validateDefaultSkillRegistry } from "./lib/skill-registry.mjs";
-
-try {
-  const result = validateDefaultSkillRegistry();
-  process.stdout.write(`技能路由注册表校验通过（${result.status}，${result.skill_count} 个共享，${result.platform_count} 个平台）\n`);
-} catch (error) {
-  process.stderr.write(`技能路由注册表校验失败: ${error.message}\n`);
-  process.exitCode = 1;
-}

package/template/scripts/verify-strategic-context-import-scenarios

@@ -1,50 +0,0 @@
-#!/usr/bin/env node
-import { mkdtempSync, mkdirSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { sealVisualBaseline } from "../.agents/skills/yss-prototype-stage/scripts/visual-baseline-contract.mjs";
-
-const repoRoot = path.resolve(import.meta.dirname, "..");
-const root = mkdtempSync(path.join(tmpdir(), "yss-strategic-import-"));
-mkdirSync(path.join(root, "docs", "evidence"), { recursive: true });
-writeFileSync(path.join(root, "yss-project.yaml"), "schema_version: 1\nrepository_mode: project-instance\n");
-const context = (meaning = "提供产品或服务的主体") => `---
-context_schema_version: 1
----
-# CONTEXT
-## 流程术语
-| 术语 | 含义 | 英文标识 | 避免 / 备注 |
-|---|---|---|---|
-| 阶段 | 生命周期阶段 | — | |
-## 业务术语
-| 术语 | 含义 | 英文标识 | 适用限界上下文 | 避免 / 备注 |
-|---|---|---|---|---|
-| 供应商 | ${meaning} | Supplier | Global | |
-`;
-writeFileSync(path.join(root, "CONTEXT.md"), context());
-const run = (command, args) => spawnSync(command, args, { cwd: repoRoot, encoding: "utf8" });
-const snapshot = JSON.parse(run("scripts/verify-context-contract", ["--root", root, "--term-ref", "Global/Supplier", "--json"]).stdout).context_snapshot;
-const reconciliation = { schema_version: 1, repository_mode: "project-instance", stage: "stage.system-data-engineering", work_unit: "work-unit.technical-analysis", status: "reconciled", context_snapshot: snapshot, changes: { added: ["Global/Supplier"], updated: [], deprecated: [] }, unresolved_terms: [], evidence_refs: ["CONTEXT.md"] };
-const reconciliationFile = path.join(root, "docs/evidence/context-reconciliation.json"); writeFileSync(reconciliationFile, JSON.stringify(reconciliation));
-const supplier = { term_ref: "Global/Supplier", term: "供应商", meaning: "提供产品或服务的主体", english_identifier: "Supplier", context_id: "Global", forbidden_aliases: [] };
-const ref = (id) => ({ id, version: "v2", digest: `sha256:${id}`, status: "approved", persisted_ref: `source/${id}` });
-function pngHeader(width, height) { const value = Buffer.alloc(24); Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]).copy(value, 0); value.writeUInt32BE(13, 8); value.write("IHDR", 12, "ascii"); value.writeUInt32BE(width, 16); value.writeUInt32BE(height, 20); return value; }
-const bundleRoot = path.join(root, "source/visual-baseline-v1"); mkdirSync(path.join(bundleRoot, "images"), { recursive: true }); mkdirSync(path.join(bundleRoot, "sources"), { recursive: true }); mkdirSync(path.join(bundleRoot, "capture"), { recursive: true });
-writeFileSync(path.join(bundleRoot, "images/primary-desktop.png"), pngHeader(1440, 900)); writeFileSync(path.join(bundleRoot, "images/primary-narrow.png"), pngHeader(390, 844));
-writeFileSync(path.join(bundleRoot, "sources/prototype.html"), "<main>supplier</main>\n"); writeFileSync(path.join(bundleRoot, "sources/interaction.md"), "# Interaction\n"); writeFileSync(path.join(bundleRoot, "sources/states.md"), "# States\n"); writeFileSync(path.join(bundleRoot, "capture/capture.mjs"), "// capture\n"); writeFileSync(path.join(bundleRoot, "capture/result.json"), "{\"result\":\"passed\"}\n");
-const baselineFile = path.join(bundleRoot, "visual-baseline.yaml");
-const baseline = { schema_version: 1, baseline_id: "visual-baseline.supplier", feature: "supplier", version: "v1", status: "approved", bundle: { format: "portable-directory", root_ref: "source/visual-baseline-v1", digest: `sha256:${"0".repeat(64)}`, size_bytes: 0, max_image_bytes: 5242880, max_bundle_bytes: 104857600 }, source: { prototype_ref: "sources/prototype.html", prototype_digest: `sha256:${"1".repeat(64)}`, interaction_spec_ref: "sources/interaction.md", interaction_spec_digest: `sha256:${"2".repeat(64)}`, state_matrix_ref: "sources/states.md", state_matrix_digest: `sha256:${"3".repeat(64)}` }, capture_environment: { browser: "chromium", browser_version: "140.0.0", operating_system: "linux", fonts_digest: `sha256:${"4".repeat(64)}`, device_scale_factor: 1, color_space: "srgb", locale: "zh-CN", timezone: "Asia/Shanghai", animations_disabled: true, cursor_hidden: true, capture_script_ref: "capture/capture.mjs", capture_script_digest: `sha256:${"5".repeat(64)}`, capture_result_ref: "capture/result.json", capture_result_digest: `sha256:${"6".repeat(64)}` }, cases: [{ case_id: "primary-desktop", route: "/supplier", page: "SupplierPage", state: "normal", viewport: { name: "desktop", width: 1440, height: 900, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-desktop.png", image_digest: `sha256:${"0".repeat(64)}`, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/prototype.html", "sources/interaction.md"], allowed_differences: [], result: "passed" }, { case_id: "primary-narrow", route: "/supplier", page: "SupplierPage", state: "normal", viewport: { name: "narrow", width: 390, height: 844, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-narrow.png", image_digest: `sha256:${"0".repeat(64)}`, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/states.md"], allowed_differences: [], result: "passed" }] };
-writeFileSync(baselineFile, JSON.stringify(baseline)); const sealedBaseline = await sealVisualBaseline(baselineFile, bundleRoot);
-const visualBaselineRef = { baseline_id: sealedBaseline.baseline_id, version: sealedBaseline.version, digest: sealedBaseline.bundle.digest, status: "approved", persisted_ref: "source/visual-baseline-v1", manifest_ref: "visual-baseline.yaml", case_ids: sealedBaseline.cases.map((item) => item.case_id) };
-const handoff = { schema_version: 3, handoff_id: "strategic-design-handoff.supplier", handoff_version: "v3", status: "approved", source: { domain_strategy_ref: ref("domain"), stage_decision_package_ref: ref("stage"), spec_ref: ref("spec"), prototype_ref: ref("prototype"), visual_baseline_ref: visualBaselineRef, business_ticket_set_ref: ref("tickets") }, source_context_snapshot: snapshot, context_delta: { added: [supplier], updated: [], deprecated: [] }, target_context_reconciliation: { target_context_ref: "CONTEXT.md", reconciliation_schema_ref: "docs/process/schemas/context-reconciliation.schema.json", required_before_skill: "yss-tactical-design", status: "pending" }, target: { team: "downstream-rd-team", skill: "yss-tactical-design", output: "tactical-design-contract" }, problem_and_business_outcomes: ["准入"], bounded_context_and_subdomain_map: ["Global"], context_map_and_translation_responsibility: ["共享"], ubiquitous_language_and_concept_candidates: ["Global/Supplier"], scenarios_and_business_invariants: ["稳定"], tactical_design_questions: ["聚合边界"], deferred_decisions_and_ownership: [], evidence_and_version_digests: ["source/evidence"], acceptance: ["target-context-reconciliation-is-required-before-tactical-design"] };
-const handoffFile = path.join(root, "handoff.json"); writeFileSync(handoffFile, JSON.stringify(handoff));
-function verify(expected, pattern) { const result = run("scripts/verify-strategic-context-import", ["--root", root, "--reconciliation", reconciliationFile, handoffFile]); if (result.status !== expected || (pattern && !pattern.test(`${result.stdout}${result.stderr}`))) throw new Error(`${result.stdout}${result.stderr}`); }
-verify(0);
-writeFileSync(path.join(root, "CONTEXT.md"), context("错误含义"));
-const staleSnapshot = JSON.parse(run("scripts/verify-context-contract", ["--root", root, "--term-ref", "Global/Supplier", "--json"]).stdout).context_snapshot;
-writeFileSync(reconciliationFile, JSON.stringify({ ...reconciliation, context_snapshot: staleSnapshot }));
-verify(1, /不一致/);
-writeFileSync(handoffFile, JSON.stringify({ ...handoff, schema_version: 2 }));
-verify(1, /migration-required/);
-process.stdout.write("Strategic context import scenarios passed\n");

package/template/scripts/verify-strategic-handoff-package-scenarios

@@ -1,108 +0,0 @@
-#!/usr/bin/env node
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { mkdtempSync, mkdirSync, readFileSync, writeFileSync, cpSync, rmSync } from 'node:fs';
-import path from 'node:path';
-import { tmpdir } from 'node:os';
-import { spawnSync } from 'node:child_process';
-import { fixture, context } from './fixtures/strategic-handoff/fixture.mjs';
-import { exportBundle, openBundle, importBundle } from './lib/strategic-handoff.mjs';
-import { read, json, hash, digest } from './lib/strategic-handoff-io.mjs';
-import { parseContextContract } from './lib/context-contract.mjs';
-const setup=async t=>{const base=mkdtempSync(path.join(tmpdir(),'handoff-test-'));t.after(()=>rmSync(base,{recursive:true,force:true}));const source=path.join(base,'source');mkdirSync(source);return{base,source,...await fixture(source,{technicalDesign:true})};};
-function advanceStrategy(f,version='v2') {
- f.handoff.handoff_version=version;
- f.strategy.domain_version=version;
- f.strategy.approval.current_version=version;
- f.stage.package_version=version;
- f.stage.approval.current_version=version;
- f.stage.domain_strategy_ref.domain_version=version;
- f.handoff.source.domain_strategy_ref.version=version;
- f.handoff.source.stage_decision_package_ref.version=version;
- f.strategy.rule_catalog[0].statement='材料完整且有效';
- f.strategy.scenarios[0].rules=['材料完整且有效'];
- f.strategy.invariants[0].statement='材料完整且有效';
- f.put('source/strategy.yaml',f.strategy);
- f.handoff.source.domain_strategy_ref.digest=digest(f.strategy);
- f.stage.domain_strategy_ref.digest=digest(f.strategy);
- f.put('source/stage.yaml',f.stage);
- f.handoff.source.stage_decision_package_ref.digest=digest(f.stage);
- f.sign();
-}
-test('目录和 ZIP 可脱离源仓验包；导入幂等且不修改词汇表',async t=>{
- const f=await setup(t);const output=path.join(f.base,'package');
- const result=await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output,zip:true});
- rmSync(f.source,{recursive:true});
- for(const bundle of [output,`${output}.zip`])assert.equal(await openBundle(bundle,b=>b.manifest.bundle_digest),result.bundle_digest);
- const target=path.join(f.base,'target');mkdirSync(target);writeFileSync(path.join(target,'yss-project.yaml'),'schema_version: 1\nrepository_mode: project-instance\n');writeFileSync(path.join(target,'CONTEXT.md'),context);
- const imported=await importBundle({bundle:`${output}.zip`,targetRoot:target});assert.equal(imported.result,'imported-pending-reconciliation');
- assert.equal(readFileSync(path.join(target,'CONTEXT.md'),'utf8'),context);parseContextContract({root:target});
- assert.equal((await importBundle({bundle:output,targetRoot:target})).result,'already-imported');
-});
-test('规则遗漏、摘要漂移、批准不匹配和离线资源丢失阻断导出',async t=>{
- const f=await setup(t);const run=()=>exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output:path.join(f.base,'out')});
- const text=readFileSync(path.join(f.source,'source/strategy.yaml'));f.put('source/strategy.yaml',{...f.strategy,traceability_version:undefined});
- await assert.rejects(run,/不一致|过期|migration/);writeFileSync(path.join(f.source,'source/strategy.yaml'),text);
- const approved=read(path.join(f.source,'approvals/spec_ref.yaml'));f.put('approvals/spec_ref.yaml',{...approved,artifact_bindings:[]});await assert.rejects(run,/批准记录未绑定/);f.put('approvals/spec_ref.yaml',approved);
- const roles=read(path.join(f.source,'docs/agents/digital-human-roles.yaml'));f.put('docs/agents/digital-human-roles.yaml',{...roles,user_decision_policy:{...roles.user_decision_policy,gates:['gate.domain-strategy-approved']}});await assert.rejects(run,/user-decision|升级/);f.put('docs/agents/digital-human-roles.yaml',roles);
- const sourceBytes=readFileSync(path.join(f.source,'prototype-src/main.js'));f.put('prototype-src/main.js','changed');await assert.rejects(run,/源码\/锁文件批准摘要/);writeFileSync(path.join(f.source,'prototype-src/main.js'),sourceBytes);
- const verification=read(path.join(f.source,'evidence/offline.json'));f.put('evidence/offline.json',{...verification,command:'changed'});await assert.rejects(run,/验证记录批准摘要/);f.put('evidence/offline.json',verification);
- f.put('preview/index.html','<img src="missing.png">');await assert.rejects(run,/过期/);
-});
-test('篡改 payload、重新封摘要后的虚构规则索引、额外文件均拒绝',async t=>{
- const f=await setup(t),output=path.join(f.base,'package');await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output});
- const spec=path.join(output,'payload/files/source/spec.md'),bytes=readFileSync(spec);writeFileSync(spec,'tampered');await assert.rejects(()=>openBundle(output,()=>null),/摘要/);writeFileSync(spec,bytes);
- writeFileSync(path.join(output,'extra.txt'),'extra');await assert.rejects(()=>openBundle(output,()=>null),/未登记/);rmSync(path.join(output,'extra.txt'));
- const manifest=read(path.join(output,'manifest.json'));const idx=Buffer.from(json([]));writeFileSync(path.join(output,'indexes/rules.json'),idx);const row=manifest.files.find(x=>x.path==='indexes/rules.json');row.sha256=hash(idx);row.size_bytes=idx.length;delete manifest.bundle_digest;manifest.bundle_digest=digest(manifest);writeFileSync(path.join(output,'manifest.json'),json(manifest));await assert.rejects(()=>openBundle(output,()=>null),/索引与源/);
-});
-test('ZIP 路径穿越和重复条目拒绝',async t=>{
- const f=await setup(t);
- for(const names of [['../escape'],['manifest.json','manifest.json']]){
-  const zip=path.join(f.base,'bad.zip');rmSync(zip,{force:true});const py='import zipfile,json,sys; z=zipfile.ZipFile(sys.argv[1],"w"); [z.writestr(n,"x") for n in json.loads(sys.argv[2])]; z.close()';assert.equal(spawnSync('python3',['-c',py,zip,JSON.stringify(names)]).status,0);await assert.rejects(()=>openBundle(zip,()=>null),/ZIP/);
- }
-});
-test('版本差异绑定前版，重复版本不允许；修改规则产生更新集合',async t=>{
- const f=await setup(t),first=path.join(f.base,'v1');await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output:first});
- await assert.rejects(()=>exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output:path.join(f.base,'bad'),previous:first}),/提升/);
- advanceStrategy(f);
- const second=path.join(f.base,'v2');await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output:second,previous:first});assert.deepEqual(await openBundle(second,b=>b.changes.updated),['rule.complete','scenario.submit']);
-});
-
-test('受控延期只阻断依赖切片；未知依赖扩大阻断；目标未对账禁止消费',async t=>{
- const {verifyConsumption}=await import('./lib/strategic-handoff-consumption.mjs');
- const f=await setup(t),output=path.join(f.base,'package');await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output});
- const target=path.join(f.base,'target');mkdirSync(target);writeFileSync(path.join(target,'yss-project.yaml'),'schema_version: 1\nrepository_mode: project-instance\n');writeFileSync(path.join(target,'CONTEXT.md'),context);
- const result=await importBundle({bundle:output,targetRoot:target});
- const draft=read(path.join(target,result.traceability_ref));
- const tactical={status:'approved',strategic_handoff:{...draft,context_reconciliation_ref:'reconciliation.yaml'},behavior_catalog:[{behavior_id:'behavior.submit'}],test_seams:[{seam_id:'test-seam.submit',subject_ref:'behavior.submit'}]};
- const record={schema_version:1,repository_mode:'project-instance',stage:'stage.system-data-engineering',work_unit:'work-unit.technical-analysis',status:'reconciled',context_snapshot:f.snapshot,changes:{added:['Global/Supplier'],updated:[],deprecated:[]},unresolved_terms:[],evidence_refs:['CONTEXT.md']};
- writeFileSync(path.join(target,'reconciliation.yaml'),json(record));
- for(const row of tactical.strategic_handoff.rows)Object.assign(row,{disposition:'implemented',tactical_refs:['behavior.submit'],test_seam_refs:['test-seam.submit'],scenario_tests:[{outcome:'success',seam_ref:'test-seam.submit'},{outcome:'failure',seam_ref:'test-seam.submit'}],evidence_refs:['CONTEXT.md'],dependency_status:'known',dependent_slice_refs:['slice.submit']});
- assert.equal((await verifyConsumption(tactical,{root:target})).result,'verified');
- const mvc={schema_version:2,status:'approved',architecture:{family:'layered-mvc'},strategic_handoff:structuredClone(tactical.strategic_handoff),design:{use_case_catalog:[{use_case_id:'use-case.submit'}],test_seams:[{seam_id:'test-seam.submit',subject_ref:'use-case.submit'}]}};
- for(const row of mvc.strategic_handoff.rows)row.tactical_refs=['use-case.submit'];
- assert.equal((await verifyConsumption(mvc,{root:target})).result,'verified');
- mvc.strategic_handoff.rows[0].tactical_refs=['aggregate.fake'];
- await assert.rejects(()=>verifyConsumption(mvc,{root:target}),/落点悬空/);
-
- const row=tactical.strategic_handoff.rows[0];Object.assign(row,{disposition:'deferred',reason:'分批实现',risk:'不能提交',owner:'需求负责人',followup_ticket_ref:'ticket.followup',verification_plan:'提交测试',target_version:'v2'});
- assert.equal((await verifyConsumption(tactical,{root:target,sliceRef:'slice.submit'})).result,'blocked');
- assert.equal((await verifyConsumption(tactical,{root:target,sliceRef:'slice.other'})).result,'verified');
- row.dependency_status='unknown';assert.equal((await verifyConsumption(tactical,{root:target,sliceRef:'slice.other'})).result,'blocked');
- row.dependency_status='known';row.disposition='implemented';advanceStrategy(f);const second=path.join(f.base,'v2');await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output:second,previous:output});await importBundle({bundle:second,targetRoot:target});
- const stale=await verifyConsumption(tactical,{root:target,sliceRef:'slice.submit'});assert.equal(stale.result,'blocked');assert(stale.issues.some(x=>x.reason==='stale-source'));assert.equal((await verifyConsumption(tactical,{root:target,sliceRef:'slice.other'})).result,'verified');
- f.strategy.contexts[0].responsibilities.push('新增责任边界');advanceStrategy(f,'v3');const third=path.join(f.base,'v3');await exportBundle({sourceRoot:f.source,handoffRef:'handoff.yaml',output:third,previous:second});await importBundle({bundle:third,targetRoot:target});const changedBoundary=await verifyConsumption(tactical,{root:target,sliceRef:'slice.other'});assert.equal(changedBoundary.block_all,true);assert(changedBoundary.issues.some(x=>x.reason==='upstream-design-stale'));
- writeFileSync(path.join(target,'reconciliation.yaml'),json({...record,status:'blocked',unresolved_terms:[{term:'Supplier',reason:'冲突',owner:'需求负责人',next_action:'回交战略方'}]}));
- await assert.rejects(()=>verifyConsumption(tactical,{root:target}),/对账未通过/);
-});
-
-test('源规则必须稳定可追溯，关键场景不能遗漏结果',async t=>{
- const {extractTraceability}=await import('./lib/strategic-handoff-rules.mjs');const f=await setup(t);
- for(const mutate of [s=>delete s.traceability_version,s=>s.scenarios[0].rule_refs=['rule.missing'],s=>delete s.scenarios[0].success_results,s=>s.invariants[0].rule_ref='rule.missing',s=>s.rule_catalog.push({...s.rule_catalog[0]})]){const s=structuredClone(f.strategy);mutate(s);assert.throws(()=>extractTraceability(s));}
-});
-test('统一 CLI 在源目录消失后通过 ZIP 验包',async t=>{
- const f=await setup(t),output=path.join(f.base,'cli');
- const cli=path.join(import.meta.dirname,'strategic-handoff');
- const exported=spawnSync(process.execPath,[cli,'export','--source-root',f.source,'--handoff','handoff.yaml','--output',output,'--zip'],{encoding:'utf8'});assert.equal(exported.status,0,exported.stderr);
- rmSync(f.source,{recursive:true});const checked=spawnSync(process.execPath,[cli,'verify','--bundle',`${output}.zip`],{encoding:'utf8'});assert.equal(checked.status,0,checked.stderr);assert.equal(JSON.parse(checked.stdout).result,'verified');
-});

package/template/scripts/verify-subagent-task-package-scenarios

@@ -1,211 +0,0 @@
-#!/usr/bin/env node
-import assert from "node:assert/strict";
-import { existsSync, mkdirSync, rmSync, writeFileSync, mkdtempSync, readFileSync } from "node:fs";
-import path from "node:path";
-import os from "node:os";
-import { buildDecisionFixture } from "./fixtures/user-decision/build-fixture.mjs";
-import { decisionDigest } from "./lib/user-decision.mjs";
-const decisionTemp = mkdtempSync(path.join(os.tmpdir(), "task-decision-test-"));
-process.on("exit", () => rmSync(decisionTemp, { recursive: true, force: true }));
-let decisionRequirement;
-import { spawnSync } from "node:child_process";
-import { ROOT } from "./lib/lifecycle-registry.mjs";
-import { generateTaskPackageDefaults, validateTaskPackage, validateTaskPackageSet } from "./lib/task-package.mjs";
-
-const contractRef = ".template-source/evidence/.task-package-slice-contract.json";
-const contractFile = path.join(ROOT, contractRef);
-const templateSourceRoot = path.join(ROOT, ".template-source");
-const templateSourceExisted = existsSync(templateSourceRoot);
-const evidenceRef = ".template-source/evidence/.task-package-evidence.json";
-const evidenceFile = path.join(ROOT, evidenceRef);
-const maintenanceRef = ".template-source/evidence/.task-package-maintenance.json";
-const contract = {
-  schema_version: 1,
-  contract_id: "slice-todo",
-  contract_version: 2,
-  slice_id: "todo",
-  status: "approved",
-  lifecycle_refs: { ticket: "docs/.scratch/todo/issues/01-todo.md", engineering_baseline: evidenceRef },
-  common: { project_roots: ["apps/frontend/todo", "apps/backend/todo"], allowed_write_paths: ["apps/frontend/todo/", "apps/backend/todo/"] },
-  readiness: {},
-  work_units: [
-    { id: "work-unit.slice-frontend", role_id: "role.frontend-engineer", runtime_id: "runtime.skill-projection", task_package_ref: "work-unit.slice-frontend", contract_id: "slice-todo", contract_version: 2, allowed_write_paths: ["apps/frontend/todo/"] },
-    { id: "work-unit.slice-backend", role_id: "role.backend-engineer", runtime_id: "runtime.skill-projection", task_package_ref: "work-unit.slice-backend", contract_id: "slice-todo", contract_version: 2, allowed_write_paths: ["apps/backend/todo/"] }
-  ]
-};
-const maintenance = {
-  schema_version: 1,
-  intensity: "L2",
-  classification_reason: "场景测试维护合同",
-  triggers: [],
-  changed_assets: ["scenario-fixture"],
-  verification_evidence: [
-    { kind: "counterexample", command: "scenario", result: "pass" },
-    { kind: "fresh-verification", command: "scenario", result: "pass" }
-  ],
-  review_mode: "focused-independent",
-  escalation: "none"
-};
-
-function writeFixtures() {
-  mkdirSync(path.dirname(contractFile), { recursive: true });
-  writeFileSync(contractFile, JSON.stringify(contract));
-  writeFileSync(evidenceFile, JSON.stringify({ ok: true }));
-  writeFileSync(path.join(ROOT, maintenanceRef), JSON.stringify(maintenance));
-  const scopeRef = path.join(decisionTemp, "scope.json");
-  const asset = (ref) => ({ ref, version: "v1", digest: decisionDigest(readFileSync(path.join(ROOT, ref))) });
-  writeFileSync(scopeRef, JSON.stringify({ kind: "implementation-scope", slices: [{ ticket_ref: contract.lifecycle_refs.ticket, contract: asset(contractRef), repositories: contract.common.project_roots, allowed_write_paths: contract.common.allowed_write_paths, baselines: [asset(evidenceRef)] }] }));
-  decisionRequirement = buildDecisionFixture(decisionTemp, { boundary: "implementation-scope", scope: [contract.lifecycle_refs.ticket], subjectRef: scopeRef }).requirement;
-}
-
-function packageBase(roleId, taskId, workUnitId, kind, contractFields, stageId) {
-  writeFixtures();
-  return generateTaskPackageDefaults(roleId, {
-    task_id: taskId,
-    work_unit_id: workUnitId,
-    actor_id: `${roleId}.instance-1`,
-    ...(stageId ? { stage_id: stageId } : {}),
-    runtime_id: "runtime.skill-projection",
-    execution_state: "Worker",
-    workflow_status: "not-started",
-    contract: { kind, contract_id: `${kind}-${taskId}`, contract_version: 1, status: "issued", contract_ref: "docs/process/lifecycle-registry.yaml", ...contractFields },
-    inputs: ["CONTEXT.md"],
-    objective: "执行有界生命周期工作单元",
-    allowed_write_paths: ["docs/.scratch/"],
-    forbidden_actions: ["不得越过主控门禁"],
-    expected_outputs: ["结构化工作结果"],
-    expected_evidence_files: [evidenceRef],
-    verification_commands: ["scripts/verify-template"],
-    verification_results: [],
-    downstream_consumers: ["role.lifecycle-orchestrator"],
-    convergence: { parent_work_unit: workUnitId, convergence_ref: "checkpoint:test", conflict_escalation: "返回主控" }
-  });
-}
-
-function lifecyclePackage() {
-  return packageBase("role.requirements-manager", "task-discovery", "work-unit.discovery-opportunity", "lifecycle-work-unit", { lifecycle_ref: "docs/process/lifecycle-registry.yaml", artifact_refs: ["artifact.discovery-record"] , gate_refs: [] , contract_id: "lifecycle-discovery", contract_version: 1 }, "stage.discovery");
-}
-
-function lifecycleStagePackage(roleId, taskId, workUnitId, stageId) {
-  return packageBase(roleId, taskId, workUnitId, "lifecycle-work-unit", { lifecycle_ref: "docs/process/lifecycle-registry.yaml", contract_id: `lifecycle-${taskId}`, contract_version: 1 }, stageId);
-}
-
-function templatePackage() {
-  return packageBase("role.test-engineer", "task-maintenance", "work-unit.intensity-aware-verification", "template-maintenance", { maintenance_ref: maintenanceRef, contract_id: "template-maintenance", contract_version: 1 });
-}
-
-function slicePackage(roleId, taskId, workUnitId, writePath) {
-  writeFixtures();
-  return generateTaskPackageDefaults(roleId, {
-    task_id: taskId,
-    work_unit_id: workUnitId,
-    actor_id: `${roleId}.instance-1`,
-    stage_id: "stage.vertical-slice-implementation",
-    runtime_id: "runtime.skill-projection",
-    execution_state: "Worker",
-    workflow_status: "not-started",
-    contract: { kind: "slice-implementation", contract_id: contract.contract_id, contract_version: contract.contract_version, status: "issued", contract_ref: contractRef, slice_contract_ref: contractRef },
-    inputs: ["CONTEXT.md"],
-    user_decisions: [decisionRequirement],
-    objective: "实现 Todo 垂直切片",
-    allowed_write_paths: [writePath],
-    forbidden_actions: ["不得修改合同"],
-    expected_outputs: ["实现代码", "测试证据"],
-    expected_evidence_files: [evidenceRef],
-    verification_commands: ["scripts/verify-template"],
-    verification_results: [],
-    downstream_consumers: ["role.test-engineer"],
-    convergence: { parent_work_unit: "work-unit.slice-implementation", convergence_ref: "checkpoint:todo", conflict_escalation: "返回主控" }
-  });
-}
-
-function completedResult(pkg, overrides = {}) {
-  return {
-    result_schema: "workflow-execution-result-v1",
-    work_unit: pkg.work_unit_id,
-    workflow_reference: `workflow:${pkg.task_id}`,
-    result: "completed",
-    skill: "yss-product-lifecycle",
-    changed_files: [],
-    context_reconciliation: { status: "reconciled", ref: evidenceRef },
-    evidence_refs: [evidenceRef],
-    deferred_seams: [],
-    drift: [],
-    violation: [],
-    new_impacts: [],
-    stale_candidates: [],
-    next_route: "work-unit.spec-synthesis",
-    blocking_signals: [],
-    ...overrides
-  };
-}
-
-function mustFail(mutator, pattern, label, factory = () => lifecyclePackage()) {
-  const value = factory();
-  mutator(value);
-  assert.throws(() => validateTaskPackage(value), pattern, label);
-}
-
-try {
-  const discovery = lifecyclePackage();
-  const spec = lifecycleStagePackage("role.requirements-manager", "task-spec", "work-unit.spec-synthesis", "stage.spec-architecture");
-  const prototype = lifecycleStagePackage("role.product-manager", "task-prototype", "work-unit.prototype-design", "stage.product-design");
-  const technical = lifecycleStagePackage("role.backend-engineer", "task-technical", "work-unit.technical-analysis", "stage.system-data-engineering");
-  const tickets = lifecycleStagePackage("role.project-manager", "task-tickets", "work-unit.ticket-decomposition", "stage.ticket-formalization");
-  const review = lifecycleStagePackage("role.test-engineer", "task-review", "work-unit.code-review", "stage.verification-release-retrospective");
-  review.execution_state = "Reviewer";
-  review.review_context = { implementation_actor_id: "role.frontend-engineer.instance-1" };
-  const maintenance = templatePackage();
-  maintenance.execution_state = "Reviewer";
-  maintenance.review_context = { implementation_actor_id: "role.lifecycle-orchestrator.instance-1" };
-  const frontend = slicePackage("role.frontend-engineer", "task-frontend", "work-unit.slice-frontend", "apps/frontend/todo/");
-  const backend = slicePackage("role.backend-engineer", "task-backend", "work-unit.slice-backend", "apps/backend/todo/");
-  [discovery, spec, prototype, technical, tickets, review].forEach((pkg) => validateTaskPackage(pkg));
-  validateTaskPackage(maintenance);
-  validateTaskPackage(frontend);
-  assert.throws(() => validateTaskPackage({ ...frontend, user_decisions: [] }), /user-decision-scope-mismatch/, "Worker 派发前必须有当前实施范围批准");
-  validateTaskPackage(backend);
-  validateTaskPackageSet([frontend, backend]);
-
-  const completedDiscovery = lifecyclePackage();
-  completedDiscovery.workflow_status = "resolved";
-  completedDiscovery.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }];
-  completedDiscovery.result = completedResult(completedDiscovery);
-  validateTaskPackage(completedDiscovery);
-
-  const validFile = path.join(ROOT, ".template-source/evidence/.task-package-valid.json");
-  writeFileSync(validFile, JSON.stringify(discovery));
-  for (const cli of ["scripts/verify-digital-human-task-package", "scripts/verify-subagent-task-package"]) {
-    const result = spawnSync(process.execPath, [path.join(ROOT, cli), validFile], { encoding: "utf8" });
-    assert.equal(result.status, 0, result.stderr);
-  }
-  rmSync(validFile, { force: true });
-
-  mustFail((value) => { value.contract.kind = "unknown"; }, /未知 contract.kind|not one of/, "unknown-contract-kind");
-  mustFail((value) => { value.contract.slice_contract_ref = contractRef; }, /不得携带专项合同引用/, "lifecycle-slice-ref");
-  mustFail((value) => { delete value.contract.lifecycle_ref; }, /lifecycle_ref/, "lifecycle-missing-ref");
-  mustFail((value) => { value.contract.kind = "slice-implementation"; delete value.contract.slice_contract_ref; }, /slice_contract_ref/, "slice-missing-ref");
-  mustFail((value) => { value.contract.kind = "template-maintenance"; delete value.contract.maintenance_ref; }, /maintenance_ref/, "maintenance-missing-ref");
-  mustFail((value) => { value.work_unit_id = "work-unit.intensity-aware-review"; value.contract.kind = "lifecycle-work-unit"; value.contract.lifecycle_ref = "docs/process/lifecycle-registry.yaml"; }, /template-source.*template-maintenance/, "template-source-lifecycle-kind");
-  mustFail((value) => { value.work_unit_id = "work-unit.slice-implementation"; value.stage_id = "stage.vertical-slice-implementation"; value.contract.kind = "lifecycle-work-unit"; value.contract.lifecycle_ref = "docs/process/lifecycle-registry.yaml"; }, /不得冒充垂直切片/, "implementation-lifecycle-kind", () => lifecycleStagePackage("role.frontend-engineer", "task-illegal-implementation", "work-unit.slice-implementation", "stage.vertical-slice-implementation"));
-  mustFail((value) => { value.convergence.parent_work_unit = "work-unit.code-review"; }, /必须汇合到 work-unit.slice-implementation/, "slice-wrong-parent", () => slicePackage("role.frontend-engineer", "task-slice-parent", "work-unit.slice-frontend", "apps/frontend/todo/"));
-  mustFail((value) => { value.contract.status = "stale"; }, /stale 任务包必须暂停/, "stale-not-paused");
-  mustFail((value) => { value.runtime_id = "runtime.unknown"; }, /未知 runtime_id/, "unknown-runtime");
-  mustFail((value) => { value.skill_source.core_skills = ["forbidden-skill"]; }, /core_skills 必须与角色注册表完全一致/, "skill-source-mismatch");
-  mustFail((value) => { value.stage_id = "stage.product-design"; }, /未覆盖 stage_id/, "role-stage-mismatch");
-  mustFail((value) => { value.result = { result: "blocked", changed_files: ["docs/../secret.txt"] }; }, /超出 allowed_write_paths|越出仓库/, "write-path-traversal");
-  mustFail((value) => { value.execution_state = "Reviewer"; value.review_context = { implementation_actor_id: value.actor_id }; }, /不同 actor_id/, "reviewer-implementer-conflict");
-  mustFail((value) => { value.workflow_status = "resolved"; value.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }]; value.result = completedResult(value, { new_impacts: ["api-change"] }); }, /new_impacts 必须为空/, "completed-new-impact");
-  mustFail((value) => { value.workflow_status = "resolved"; value.verification_commands = ["scripts/verify-template", "pnpm test"]; value.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }]; value.result = completedResult(value); }, /覆盖全部 verification_commands/, "verification-command-gap");
-  mustFail((value) => { value.workflow_status = "resolved"; value.result = completedResult(value, { context_reconciliation: { status: "reconciled", ref: ".template-source/evidence/.missing.json" }, evidence_refs: [".template-source/evidence/.missing.json"] }); value.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }]; }, /不可读/, "unreadable-evidence");
-  mustFail((value) => { value.workflow_status = "resolved"; value.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }]; }, /Workflow Execution Result/, "resolved-without-result");
-  mustFail((value) => { value.workflow_status = "resolved"; value.result = { result: "blocked" }; value.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }]; }, /Workflow Execution Result/, "resolved-blocked-result");
-  mustFail((value) => { value.workflow_status = "resolved"; value.verification_results = [{ command: "scripts/verify-template", exit_code: 0, executed_at: "now", evidence_ref: evidenceRef }]; value.result = completedResult(value); value.expected_evidence_files = [".template-source/evidence/.missing.json"]; }, /expected_evidence_files.*不可读/, "missing-expected-evidence");
-
-  process.stdout.write("数字人全生命周期任务包压力场景验证通过\n");
-} finally {
-  rmSync(contractFile, { force: true });
-  rmSync(evidenceFile, { force: true });
-  rmSync(path.join(ROOT, maintenanceRef), { force: true });
-  if (!templateSourceExisted) rmSync(templateSourceRoot, { recursive: true, force: true });
-}

package/template/scripts/verify-template

@@ -1,4 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-exec node "$ROOT_DIR/scripts/run-template-verification" --profile release "$@"

package/template/scripts/verify-template-cache-scenarios

@@ -1,47 +0,0 @@
-#!/usr/bin/env node
-import assert from "node:assert/strict";
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { acquireTemplateCommit } from "./lib/template-commit-cache.mjs";
-
-function git(args, cwd) {
-  const result = spawnSync("git", args, { cwd, encoding: "utf8" });
-  if (result.status !== 0) throw new Error(result.stderr);
-  return result.stdout.trim();
-}
-
-const root = mkdtempSync(path.join(tmpdir(), "yss-template-cache-"));
-try {
-  const remote = path.join(root, "remote");
-  const cacheRoot = path.join(root, "cache");
-  git(["init", "-q", remote], root);
-  git(["config", "user.email", "fixture@example.com"], remote);
-  git(["config", "user.name", "Fixture"], remote);
-  writeFileSync(path.join(remote, "template.txt"), "stable\n");
-  git(["add", "template.txt"], remote);
-  git(["commit", "-qm", "fixture"], remote);
-  const commit = git(["rev-parse", "HEAD"], remote);
-
-  const first = acquireTemplateCommit({ repository: remote, commit, cacheRoot, allowLocal: true });
-  assert.equal(first.cache_hit, false);
-  const second = acquireTemplateCommit({ repository: remote, commit, cacheRoot, allowLocal: true });
-  assert.equal(second.cache_hit, true);
-  assert.equal(second.commit, commit);
-
-  const metadata = JSON.parse(readFileSync(second.metadata_path, "utf8"));
-  metadata.repository = `${remote}-tampered`;
-  writeFileSync(second.metadata_path, `${JSON.stringify(metadata)}\n`);
-  assert.throws(() => acquireTemplateCommit({ repository: remote, commit, cacheRoot, allowLocal: true }), /缓存来源不一致/);
-  metadata.repository = remote;
-  writeFileSync(second.metadata_path, `${JSON.stringify(metadata)}\n`);
-  rmSync(second.repository_path, { recursive: true, force: true });
-  assert.throws(() => acquireTemplateCommit({ repository: remote, commit, cacheRoot, allowLocal: true }), /缓存不完整/);
-  assert.throws(() => acquireTemplateCommit({ repository: path.join(root, "offline"), commit, cacheRoot: path.join(root, "offline-cache"), allowLocal: true }), /执行失败|does not appear to be a git repository/);
-  assert.throws(() => acquireTemplateCommit({ repository: remote, commit: "main", cacheRoot, allowLocal: true }), /40 位 commit/);
-} finally {
-  rmSync(root, { recursive: true, force: true });
-}
-
-process.stdout.write("远程模板 commit 缓存场景验证通过\n");

package/template/scripts/verify-template-candidate

@@ -1,4 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-exec node "$ROOT_DIR/scripts/run-template-verification" --profile candidate "$@"

package/template/scripts/verify-template-fast

@@ -1,4 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-exec node "$ROOT_DIR/scripts/run-template-verification" --profile fast "$@"

package/template/scripts/verify-template-verification-scenarios

@@ -1,89 +0,0 @@
-#!/usr/bin/env node
-import assert from "node:assert/strict";
-import { planTemplateVerification } from "./lib/template-verification.mjs";
-
-const releaseBaseline = [
-  ".template-source/scripts/evidence-index --check",
-  "pnpm --dir .template-source/tooling/node test",
-  "pnpm --dir .template-source/tooling/node check:vendor",
-  "scripts/sync-skills --check",
-  "scripts/update-skill-lock --check",
-  "scripts/verify-skill-registry",
-  "scripts/verify-skill-governance",
-  "node --check .agents/skills/yss-tactical-design/scripts/validate-tactical-design.mjs",
-  "node --check .agents/skills/yss-tactical-design/tests/run-scenarios.mjs",
-  "node .agents/skills/yss-tactical-design/tests/run-scenarios.mjs",
-  "scripts/verify-yss-dto-openapi-profile",
-  "scripts/verify-yss-dto-openapi-scenarios",
-  "scripts/verify-digital-human-roles",
-  "scripts/verify-digital-human-roles-scenarios",
-  "scripts/verify-approval-record --history docs/templates/approval-record-template.yaml",
-  "scripts/verify-lifecycle-registry",
-  "scripts/verify-context-contract --root . --json",
-  "scripts/verify-context-contract-scenarios",
-  "scripts/verify-context-reconciliation-scenarios",
-  "scripts/verify-grill-with-docs-context-scenarios",
-  "scripts/verify-strategic-context-import-scenarios",
-  "scripts/verify-lifecycle-checkpoint docs/process/templates/lifecycle-checkpoint-template.yaml",
-  "scripts/verify-frontend-implementation-evidence --allow-template docs/process/templates/frontend-implementation-plan-template.yaml",
-  "scripts/verify-frontend-implementation-evidence --allow-template docs/process/templates/frontend-implementation-verification-template.yaml",
-  "scripts/verify-subagent-task-package-scenarios",
-  "scripts/verify-digital-human-task-package-scenarios",
-  "scripts/verify-digital-human-task-package .template-source/evidence/maintenance/digital-human-task-package-review-task.yaml",
-  "scripts/verify-digital-human-task-package .template-source/evidence/maintenance/lifecycle-ticket-transition-review-task-package.yaml",
-  "scripts/verify-maintenance-checkpoint .template-source/evidence/maintenance/yss-tactical-design-l3-checkpoint-2026-08-27.yaml",
-  "scripts/verify-lifecycle-scenarios",
-  "scripts/verify-lifecycle-transition-scenarios",
-  "scripts/verify-maintenance-intensity-scenarios",
-  "scripts/verify-governance-release",
-  "scripts/verify-implementation-path-scenarios",
-  "scripts/verify-repository-scope-scenarios",
-  "scripts/verify-scaffold-generator-scenarios",
-  "scripts/verify-prototype-backend-scaffold-scenarios",
-  "scripts/verify-matt-yss-integration-scenarios",
-  "scripts/verify-yss-implementation-contract-compiler-scenarios",
-  "scripts/generate-yss-skill-boundaries --check",
-  "scripts/audit-yss-backend-skills --check",
-  "scripts/verify-retired-skill-ids",
-  "scripts/verify-yss-ui-scenarios",
-  "scripts/verify-yss-prototype-contract-scenarios",
-  "node .agents/skills/yss-prototype-stage/scripts/prototype-contract.mjs validate-evidence docs/design/templates/prototype-evidence-template.yaml --allow-template",
-  "scripts/verify-openapi-yaml-first-scenarios",
-  "scripts/verify-openapi-json-handoff-scenarios"
-].sort();
-
-const release = planTemplateVerification({ profile: "release", changedFiles: [] });
-assert.equal(release.effective_profile, "release");
-const releaseCommands = new Set(release.commands.map((entry) => entry.command));
-assert.deepEqual(releaseBaseline.filter((command) => !releaseCommands.has(command)), [], "release profile 必须保留旧发布门禁的全部行为命令");
-assert.ok(releaseCommands.has("node scripts/verify-template-verification-scenarios"), "release profile 必须验证三级核验路由本身");
-
-const docsOnly = planTemplateVerification({ profile: "fast", changedFiles: ["docs/user-guide/example.md"] });
-assert.equal(docsOnly.effective_profile, "fast");
-assert.ok(docsOnly.groups.includes("hygiene"));
-assert.ok(!docsOnly.groups.includes("skills"), "文档内循环不得运行无关 skill 投影检查");
-
-const skillChange = planTemplateVerification({ profile: "fast", changedFiles: [".agents/skills/maintaining-skills/SKILL.md"] });
-assert.ok(skillChange.groups.includes("skills"));
-assert.ok(skillChange.groups.includes("hygiene"));
-
-const prototypeContractChange = planTemplateVerification({ profile: "fast", changedFiles: ["scripts/verify-yss-prototype-contract-scenarios"] });
-assert.ok(prototypeContractChange.groups.includes("implementation"), "原型契约脚本变化必须运行实现压力场景");
-
-const candidate = planTemplateVerification({ profile: "candidate", changedFiles: ["docs/process/harness-process-tailoring.md"] });
-assert.equal(candidate.effective_profile, "candidate");
-assert.ok(candidate.groups.includes("maintenance"));
-assert.ok(candidate.groups.includes("candidate-integrity"));
-
-const unknown = planTemplateVerification({ profile: "candidate", changedFiles: ["new-unmapped-root/file.txt"] });
-assert.equal(unknown.effective_profile, "release");
-assert.match(unknown.escalation_reason, /未映射/);
-
-const core = planTemplateVerification({ profile: "fast", changedFiles: ["scripts/lib/template-verification.mjs"] });
-assert.equal(core.effective_profile, "release");
-assert.match(core.escalation_reason, /核心核验/);
-
-const entryRule = planTemplateVerification({ profile: "candidate", changedFiles: ["AGENTS.md"] });
-assert.equal(entryRule.effective_profile, "release", "Agent 入口规则变化必须 fail-safe 到完整门禁");
-
-process.stdout.write("模板三级核验路由场景验证通过\n");