create-yss-spec 3.3.1 → 3.3.4

package/template/.claude/skills/llm-wiki/scripts/lint-wikilinks.test.mjs

@@ -1,212 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdir, mkdtemp, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import path from "node:path";
-import test from "node:test";
-import { fileURLToPath } from "node:url";
-import { sha256 } from "./inventory.mjs";
-import { lintWiki } from "./lint-wikilinks.mjs";
-
-const skillRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const broken = path.join(skillRoot, "assets/fixtures/broken-wiki");
-
-test("broken fixture fails on dangling wikilink", async () => {
-  const result = await lintWiki(broken);
-  assert.equal(result.ok, false);
-  assert.ok(result.errors.some((line) => line.includes("[[不存在的页]]")));
-});
-
-test("complete wiki passes wikilink, index, and source-section checks", async () => {
-  const root = await mkdtemp(path.join(tmpdir(), "llm-wiki-lint-"));
-  const wiki = path.join(root, "wiki");
-  await mkdir(wiki, { recursive: true });
-  await writeFile(
-    path.join(wiki, "index.md"),
-    "# index\n\n## 分类\n\n- [[Alpha]]\n",
-    "utf8",
-  );
-  await writeFile(
-    path.join(wiki, "Alpha.md"),
-    "# Alpha\n\nSee [[Alpha]].\n\n## 来源\n\n- live\n",
-    "utf8",
-  );
-  await writeFile(path.join(wiki, "CLAUDE.md"), "# schema\n", "utf8");
-  const result = await lintWiki(root);
-  assert.equal(result.ok, true, result.errors.join("\n"));
-  assert.equal(result.counts.articles, 1);
-});
-
-test("cross-path wikilink fails instead of being ignored", async () => {
-  const root = await mkdtemp(path.join(tmpdir(), "llm-wiki-cross-"));
-  const wiki = path.join(root, "wiki");
-  await mkdir(wiki, { recursive: true });
-  await writeFile(path.join(wiki, "index.md"), "# index\n\n## 分类\n\n- [[Alpha]]\n", "utf8");
-  await writeFile(
-    path.join(wiki, "Alpha.md"),
-    "# Alpha\n\nSee [[../other]]\n\n## 来源\n\n- live\n",
-    "utf8",
-  );
-  const result = await lintWiki(root);
-  assert.equal(result.ok, false);
-  assert.ok(result.errors.some((line) => line.includes("CROSS-WIKI") && line.includes("[[../other]]")));
-});
-
-test("manifest sha256 mismatch is stale", async () => {
-  const repo = await mkdtemp(path.join(tmpdir(), "llm-wiki-hash-"));
-  const wikiRoot = path.join(repo, "wiki-root");
-  const wiki = path.join(wikiRoot, "wiki");
-  await mkdir(wiki, { recursive: true });
-  await mkdir(path.join(wikiRoot, "raw"), { recursive: true });
-  await mkdir(path.join(repo, "docs"), { recursive: true });
-  const liveRel = "docs/api.md";
-  await writeFile(path.join(repo, liveRel), "v2\n", "utf8");
-  await writeFile(path.join(wikiRoot, "raw", "api.md"), "v1\n", "utf8");
-  await writeFile(path.join(wiki, "index.md"), "# index\n\n## 分类\n\n- [[API]]\n", "utf8");
-  await writeFile(path.join(wiki, "API.md"), "# API\n\nSummary.\n\n## 来源\n\n- live\n", "utf8");
-  await writeFile(
-    path.join(wikiRoot, ".wiki-manifest.json"),
-    JSON.stringify({
-      schemaVersion: 1,
-      sources: [
-        {
-          id: "api.md",
-          kind: "document",
-          livePath: liveRel,
-          rawPath: "raw/api.md",
-          sha256: sha256(Buffer.from("v1\n")),
-        },
-      ],
-      articles: [{ id: "API", file: "wiki/API.md", sourceIds: ["api.md"] }],
-    }),
-    "utf8",
-  );
-  const result = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(result.ok, false);
-  assert.ok(result.errors.some((line) => line.includes("STALE HASH") && line.includes("api.md")));
-});
-
-async function seedClosedWiki() {
-  const repo = await mkdtemp(path.join(tmpdir(), "llm-wiki-closed-"));
-  const wikiRoot = path.join(repo, "wiki-root");
-  const wiki = path.join(wikiRoot, "wiki");
-  await mkdir(wiki, { recursive: true });
-  await mkdir(path.join(wikiRoot, "raw"), { recursive: true });
-  await mkdir(path.join(repo, "docs"), { recursive: true });
-  const liveRel = "docs/api.md";
-  await writeFile(path.join(repo, liveRel), "v1\n", "utf8");
-  await writeFile(path.join(wikiRoot, "raw", "api.md"), "v1\n", "utf8");
-  await writeFile(path.join(wiki, "index.md"), "# index\n\n## 分类\n\n- [[Alpha]]\n", "utf8");
-  await writeFile(
-    path.join(wiki, "Alpha.md"),
-    "# Alpha\n\nSee [[Alpha]].\n\n## 来源\n\n- live\n",
-    "utf8",
-  );
-  const manifest = {
-    schemaVersion: 1,
-    profile: "documents",
-    sources: [
-      {
-        id: "api.md",
-        kind: "document",
-        livePath: liveRel,
-        rawPath: "raw/api.md",
-        sha256: sha256(Buffer.from("v1\n")),
-      },
-    ],
-    articles: [{ id: "Alpha", file: "wiki/Alpha.md", sourceIds: ["api.md"] }],
-  };
-  await writeFile(path.join(wikiRoot, ".wiki-manifest.json"), JSON.stringify(manifest), "utf8");
-  return { repo, wikiRoot, wiki, manifest };
-}
-
-test("closed manifest passes listing, id, sourceIds, profile, and rawPath checks", async () => {
-  const { repo, wikiRoot } = await seedClosedWiki();
-  const result = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(result.ok, true, result.errors.join("\n"));
-});
-
-test("open manifest fails unlisted article, id mismatch, unknown source, profile kind, and rawPath", async () => {
-  const repo = await mkdtemp(path.join(tmpdir(), "llm-wiki-open-"));
-  const wikiRoot = path.join(repo, "wiki-root");
-  const wiki = path.join(wikiRoot, "wiki");
-  await mkdir(wiki, { recursive: true });
-  await mkdir(path.join(repo, "docs"), { recursive: true });
-  await writeFile(path.join(repo, "docs", "api.md"), "v1\n", "utf8");
-  await writeFile(path.join(wiki, "index.md"), "# index\n\n## 分类\n\n- [[Alpha]]\n- [[Beta]]\n", "utf8");
-  await writeFile(path.join(wiki, "Alpha.md"), "# Alpha\n\nSee [[Beta]].\n\n## 来源\n\n- live\n", "utf8");
-  await writeFile(path.join(wiki, "Beta.md"), "# Beta\n\nSee [[Alpha]].\n\n## 来源\n\n- live\n", "utf8");
-  await writeFile(
-    path.join(wikiRoot, ".wiki-manifest.json"),
-    JSON.stringify({
-      schemaVersion: 1,
-      profile: "documents",
-      sources: [
-        {
-          id: "api.md",
-          kind: "code-surface",
-          livePath: "docs/api.md",
-          rawPath: "raw/should-not-exist.md",
-          sha256: sha256(Buffer.from("v1\n")),
-        },
-        {
-          id: "note",
-          kind: "document",
-          livePath: "docs/api.md",
-          rawPath: "",
-          sha256: sha256(Buffer.from("v1\n")),
-        },
-      ],
-      articles: [
-        {
-          id: "WrongId",
-          file: "wiki/Alpha.md",
-          sourceIds: ["api.md", "ghost"],
-        },
-      ],
-    }),
-    "utf8",
-  );
-  const result = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(result.ok, false);
-  assert.ok(result.errors.some((line) => line.includes("UNLISTED ARTICLE") && line.includes("Beta.md")));
-  assert.ok(result.errors.some((line) => line.includes("MANIFEST ID MISMATCH") && line.includes("WrongId")));
-  assert.ok(result.errors.some((line) => line.includes("UNKNOWN SOURCE ID") && line.includes("ghost")));
-  assert.ok(result.errors.some((line) => line.includes("PROFILE KIND") && line.includes("code-surface")));
-  assert.ok(result.errors.some((line) => line.includes("RAW PATH REQUIRED") && line.includes("note")));
-  assert.ok(result.errors.some((line) => line.includes("RAW PATH FORBIDDEN") && line.includes("api.md")));
-});
-
-test("derived source requires a known extract.kind", async () => {
-  const { repo, wikiRoot, manifest } = await seedClosedWiki();
-  manifest.sources.push({
-    id: "lock",
-    kind: "derived",
-    livePath: "docs/api.md",
-    rawPath: "raw/api.md",
-    sha256: sha256(Buffer.from("v1\n")),
-  });
-  await writeFile(path.join(wikiRoot, ".wiki-manifest.json"), JSON.stringify(manifest), "utf8");
-  const missing = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(missing.ok, false);
-  assert.ok(missing.errors.some((line) => line.includes("EXTRACT REQUIRED") && line.includes("lock")));
-
-  manifest.sources.at(-1).extract = { kind: "whole-file" };
-  await writeFile(path.join(wikiRoot, ".wiki-manifest.json"), JSON.stringify(manifest), "utf8");
-  const unknown = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(unknown.ok, false);
-  assert.ok(unknown.errors.some((line) => line.includes("EXTRACT KIND") && line.includes("whole-file")));
-
-  manifest.sources.at(-1).extract = { kind: "skill-names" };
-  await writeFile(path.join(wikiRoot, ".wiki-manifest.json"), JSON.stringify(manifest), "utf8");
-  const ok = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(ok.ok, true, ok.errors.join("\n"));
-});
-
-test("document rawPath must exist on disk", async () => {
-  const { repo, wikiRoot, manifest } = await seedClosedWiki();
-  manifest.sources[0].rawPath = "raw/missing.md";
-  await writeFile(path.join(wikiRoot, ".wiki-manifest.json"), JSON.stringify(manifest), "utf8");
-  const result = await lintWiki(wikiRoot, { repoRoot: repo });
-  assert.equal(result.ok, false);
-  assert.ok(result.errors.some((line) => line.includes("RAW MISSING") && line.includes("raw/missing.md")));
-});

package/template/.claude/skills/lombok/SKILL.md

@@ -1,352 +0,0 @@
----
-name: lombok
-description: |
-  Project Lombok for reducing Java boilerplate. Covers annotations for getters,
-  setters, constructors, builders, logging, and more. Based on production
-  patterns from castellino and gestionale-presenze projects.
-
-  USE WHEN: user mentions "lombok", "@Data", "@Builder", "@Slf4j", asks about
-  "boilerplate reduction", "getters/setters", "@RequiredArgsConstructor", "@Value"
-
-  DO NOT USE FOR: Java language features - use `java` skill instead
-  DO NOT USE FOR: MapStruct integration - use `mapstruct` skill
-  DO NOT USE FOR: Spring annotations - use `backend-spring-boot` skill
-allowed-tools: Read, Grep, Glob, Write, Edit
----
-# Project Lombok
-
-> **Deep Knowledge**: Use `mcp__documentation__fetch_docs` with technology: `lombok` for comprehensive documentation.
-
-## YSS 阶段 7 执行结果
-
-- 消费工程 Java 与处理器基线；三个新后端 Profile 为 Java 8。MapStruct binding 进入 annotationProcessorPaths，不作为业务依赖单独引入；示例不授权升级依赖。MVC PO 的身份/敏感字段风险与 DDD 相同，不能默认全量 @Data。
-- 消费批准后的 Slice Contract/work unit，只在允许路径内调整 POJO 样板和注解处理器配置。
-- 受控生成必须记录对象类型、选用/排除注解、实体关系和敏感字段风险、编译/测试实际结果。
-- 按 `yss-implementation-contract-compiler` 的统一 Execution Result 返回 changed files、证据、偏离和新增影响；`@Data` 实体风险、处理器配置缺失或越界路径返回 `violation`。
-
-## Maven Configuration
-
-```xml
-<dependency>
-    <groupId>org.projectlombok</groupId>
-    <artifactId>lombok</artifactId>
-    <version>1.18.34</version>
-    <optional>true</optional>
-</dependency>
-
-<!-- For MapStruct compatibility -->
-<dependency>
-    <groupId>org.projectlombok</groupId>
-    <artifactId>lombok-mapstruct-binding</artifactId>
-    <version>0.2.0</version>
-</dependency>
-```
-
-## Common Annotations
-
-### @Data (All-in-One)
-
-```java
-@Data
-public class User {
-    private Long id;
-    private String name;
-    private String email;
-}
-
-// Generates:
-// - @Getter for all fields
-// - @Setter for all non-final fields
-// - @ToString
-// - @EqualsAndHashCode
-// - @RequiredArgsConstructor
-```
-
-### @Getter / @Setter
-
-```java
-public class User {
-    @Getter @Setter
-    private String name;
-
-    @Getter // Read-only
-    private final String email;
-
-    @Setter(AccessLevel.PROTECTED)
-    private String internalId;
-}
-```
-
-### @NoArgsConstructor / @AllArgsConstructor / @RequiredArgsConstructor
-
-```java
-@NoArgsConstructor
-@AllArgsConstructor
-public class User {
-    private Long id;
-    private String name;
-}
-
-@RequiredArgsConstructor
-public class UserService {
-    private final UserRepository userRepository; // Included in constructor
-    private final UserMapper userMapper;         // Included in constructor
-    private String cacheName;                    // NOT included
-}
-```
-
-### @Builder
-
-```java
-@Data
-@Builder
-public class User {
-    private Long id;
-    private String name;
-    private String email;
-    @Builder.Default
-    private UserStatus status = UserStatus.ACTIVE;
-}
-
-// Usage
-User user = User.builder()
-    .name("John")
-    .email("john@example.com")
-    .build();
-
-// With toBuilder for updates
-User updated = user.toBuilder()
-    .name("Jane")
-    .build();
-```
-
-### @Value (Immutable)
-
-```java
-@Value
-public class UserResponse {
-    Long id;
-    String name;
-    String email;
-    LocalDateTime createdAt;
-}
-
-// Generates:
-// - All fields are private final
-// - @AllArgsConstructor
-// - @Getter (no setters)
-// - @ToString
-// - @EqualsAndHashCode
-```
-
-## Entity Pattern
-
-```java
-@Entity
-@Table(name = "users")
-@Getter
-@Setter
-@NoArgsConstructor(access = AccessLevel.PROTECTED)
-@AllArgsConstructor(access = AccessLevel.PRIVATE)
-@Builder
-@EntityListeners(AuditingEntityListener.class)
-public class User {
-
-    @Id
-    @GeneratedValue(strategy = GenerationType.IDENTITY)
-    private Long id;
-
-    @Column(nullable = false)
-    private String name;
-
-    @Column(unique = true, nullable = false)
-    private String email;
-
-    @Enumerated(EnumType.STRING)
-    @Builder.Default
-    private UserStatus status = UserStatus.ACTIVE;
-
-    @CreatedDate
-    @Column(updatable = false)
-    private LocalDateTime createdAt;
-
-    @LastModifiedDate
-    private LocalDateTime updatedAt;
-
-    @ManyToOne(fetch = FetchType.LAZY)
-    @JoinColumn(name = "department_id")
-    private Department department;
-}
-```
-
-JPA/DDD entities must not default to `@Data`; choose equality and `toString` deliberately from stable identity and exclude lazy, relationship, and sensitive fields.
-
-## Service Pattern with Constructor Injection
-
-```java
-@Service
-@RequiredArgsConstructor
-@Slf4j
-public class UserServiceImpl implements UserService {
-
-    private final UserRepository userRepository;
-    private final UserMapper userMapper;
-    private final PasswordEncoder passwordEncoder;
-
-    @Override
-    public UserResponse create(CreateUserRequest dto) {
-        log.info("Creating user: {}", dto.getEmail());
-        User user = userMapper.toEntity(dto);
-        return userMapper.toResponse(userRepository.save(user));
-    }
-}
-```
-
-## Logging
-
-```java
-@Slf4j  // SLF4J logger
-public class UserService {
-    public void process() {
-        log.info("Processing...");
-        log.debug("Debug info: {}", data);
-        log.error("Error occurred", exception);
-    }
-}
-
-@Log4j2  // Log4j2 logger
-@CommonsLog  // Apache Commons Logging
-@JBossLog  // JBoss Logging
-```
-
-## DTO Pattern
-
-```java
-// Request DTO
-@Data
-public class CreateUserRequest {
-    @NotBlank
-    private String name;
-    @Email
-    private String email;
-    @Size(min = 8)
-    private String password;
-}
-
-// Response DTO (immutable)
-@Value
-@Builder
-public class UserResponse {
-    Long id;
-    String name;
-    String email;
-    UserStatus status;
-    LocalDateTime createdAt;
-}
-```
-
-## @Cleanup
-
-```java
-public void readFile(String path) throws IOException {
-    @Cleanup InputStream in = new FileInputStream(path);
-    // in.close() called automatically
-}
-```
-
-## @SneakyThrows
-
-```java
-@SneakyThrows  // Wraps checked exception
-public String readConfig() {
-    return new String(Files.readAllBytes(Paths.get("config.json")), StandardCharsets.UTF_8);
-}
-```
-
-## @Synchronized
-
-```java
-public class Counter {
-    @Synchronized
-    public void increment() {
-        // Thread-safe
-    }
-}
-```
-
-## @With (Immutable Updates)
-
-```java
-@Value
-@With
-public class Point {
-    int x;
-    int y;
-}
-
-Point p1 = new Point(1, 2);
-Point p2 = p1.withX(5);  // Point(5, 2)
-```
-
-## Key Annotations
-
-| Annotation | Purpose |
-|------------|---------|
-| `@Data` | Getter, Setter, ToString, Equals, Constructor |
-| `@Value` | Immutable class |
-| `@Builder` | Builder pattern |
-| `@RequiredArgsConstructor` | Constructor for final fields |
-| `@Slf4j` | Logger field |
-| `@ToString.Exclude` | Exclude from toString |
-| `@EqualsAndHashCode.Exclude` | Exclude from equals/hashCode |
-
----
-
-## When NOT to Use This Skill
-
-| Scenario | Use Instead |
-|----------|-------------|
-| Java core language | `java` skill |
-| MapStruct mapping | `mapstruct` skill |
-| Spring annotations | `backend-spring-boot` skill |
-| JPA entities complex logic | Manual implementation |
-| Public API design | Explicit methods for clarity |
-
----
-
-## Anti-Patterns
-
-| Anti-Pattern | Why It's Bad | Correct Approach |
-|--------------|--------------|------------------|
-| @Data on JPA entities | toString/equals issues | Use @Getter/@Setter selectively |
-| Not excluding lazy relations | LazyInitializationException | Use @ToString.Exclude |
-| @EqualsAndHashCode on entities | Proxy issues | Use @EqualsAndHashCode(onlyExplicitlyIncluded = true) |
-| @SneakyThrows everywhere | Hides exceptions | Use proper exception handling |
-| @Builder without @Default | Null fields | Add @Builder.Default |
-| @Value with mutable fields | Breaks immutability | Use only immutable types |
-| Mixing @Data and manual methods | Confusing API | Be consistent |
-| Not configuring in lombok.config | Inconsistent behavior | Use lombok.config file |
-
----
-
-## Quick Troubleshooting
-
-| Issue | Cause | Solution |
-|-------|-------|----------|
-| "Cannot find symbol" for getters | IDE not processing | Enable annotation processing |
-| LazyInitializationException | toString on lazy relation | Add @ToString.Exclude |
-| MapStruct not working | Wrong processor order | Lombok before MapStruct |
-| Builder missing fields | No @Builder.Default | Add defaults or check config |
-| StackOverflowError in equals | Circular reference | Exclude relation fields |
-| IDE shows errors but compiles | IDE cache | Invalidate caches/restart |
-| @Slf4j logger not found | SLF4J not in classpath | Add SLF4J dependency |
-| Generated code not visible | delombok needed | Run delombok task |
-
----
-
-## Reference Documentation
-- [Lombok Documentation](https://projectlombok.org/features/)
-- [Stable Features](https://projectlombok.org/features/all)
-- [Configuration](https://projectlombok.org/features/configuration)
-
-> **Deep Knowledge**: Use `mcp__documentation__fetch_docs` with technology: `lombok` for comprehensive documentation.

package/template/.claude/skills/maintaining-skills/SKILL.md

@@ -1,27 +0,0 @@
----
-name: maintaining-skills
-description: Use when creating, modifying, validating, or retiring reusable Agent skills.
----
-
-# Maintaining Skills
-
-Create skills that add useful, non-obvious guidance without constraining unrelated work.
-
-## Working Contract
-
-1. Inspect the skill's callers, ownership, projections, and validation policy before editing. Preserve user intent, authorization boundaries, supported runtimes, and existing metadata unless the requested change requires otherwise.
-2. Assume the Agent already has general reasoning and tool competence. Record only domain knowledge, decision criteria, fragile invariants, or repeatable operations that materially improve outcomes. Do not turn one example or past failure into a universal rule.
-3. Keep discovery precise: use a lowercase hyphenated name and a concise description that states the capability and when it applies. Avoid catchalls that attract unrelated requests.
-4. Keep `SKILL.md` as short as the task permits. Put conditional detail in `references/`, deterministic repeated operations in `scripts/`, and files intended for generated output in `assets/`. Create only resources with a concrete use.
-5. Match specificity and validation to risk. Prefer outcome and decision criteria when several approaches are valid; use fixed steps or absolute rules only for correctness, safety, permissions, or genuinely fragile workflows.
-6. Follow the repository's declared maintenance and review policy. If none exists, run structural validation plus focused checks of the behavior or invariant changed. Use independent forward testing only when complexity or risk makes it meaningful; do not require a failing baseline for every ordinary edit.
-7. After changes, validate frontmatter, naming, references, scripts, projections, locks, and affected callers. Retire obsolete names and resources unless the repository explicitly requires compatibility.
-8. When a repository declares staged template verification, default the implementation loop to its fast impact profile and stop at `implementation-ready`. Promote explicitly to `review-ready`; do not create frozen candidates, review packages, or release evidence during ordinary iteration. Unknown paths and changes to the verification framework itself must fail safe to the full profile.
-9. For L3 template maintenance, record maintainer self-check plus fresh verification and do not create a frozen candidate or formal independent review during ordinary iteration. Before release, run the repository's full `scripts/verify-template` gate once; historical formal-review records remain read-only compatible.
-
-## Boundaries
-
-- Project rules belong in the project's authoritative instructions, not duplicated inside a generic skill.
-- Platform-private skills or absolute local paths are not portable shared dependencies.
-- A validation command proves only what it checks; structural validation alone does not prove good Agent decisions.
-- Do not create README files, changelogs, examples, routers, or placeholder directories without a concrete requirement.