create-yss-spec 3.3.1 → 3.3.4

package/template/.qoder/skills/archify/scripts/generate-brand-marks.mjs

@@ -1,141 +0,0 @@
-#!/usr/bin/env node
-
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import * as simpleIcons from 'simple-icons';
-
-const here = path.dirname(fileURLToPath(import.meta.url));
-const root = path.resolve(here, '..');
-const catalogPath = path.join(root, 'brand-marks', 'catalog.json');
-const outputPath = path.join(root, 'renderers', 'shared', 'generated-brand-marks.mjs');
-const catalog = JSON.parse(fs.readFileSync(catalogPath, 'utf8'));
-const simpleIconsVersion = JSON.parse(fs.readFileSync(
-  path.join(root, 'node_modules', 'simple-icons', 'package.json'),
-  'utf8',
-)).version;
-const simpleBySlug = new Map(Object.values(simpleIcons)
-  .filter((icon) => icon && typeof icon === 'object' && icon.slug && icon.path)
-  .map((icon) => [icon.slug, icon]));
-
-function normalizedList(value) {
-  return [...new Set((Array.isArray(value) ? value : [])
-    .map((item) => String(item).trim())
-    .filter(Boolean))];
-}
-
-function lookupForms(value) {
-  const raw = String(value ?? '').trim().toLocaleLowerCase('en-US');
-  if (!raw) return [];
-  return [...new Set([
-    raw,
-    raw.replace(/[\s_]+/g, '-'),
-    raw.replace(/[\s_.-]+/g, ''),
-  ])];
-}
-
-function fail(message) {
-  console.error(`brand catalog: ${message}`);
-  process.exit(1);
-}
-
-if (catalog.schemaVersion !== 1 || !Array.isArray(catalog.marks) || catalog.marks.length === 0) {
-  fail('catalog.json must contain a non-empty schemaVersion 1 marks array');
-}
-
-const ids = new Set();
-const lookupKeys = new Map();
-const domains = new Map();
-const generated = catalog.marks.map((entry, index) => {
-  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(entry.id || '')) fail(`marks[${index}] has an invalid id`);
-  if (ids.has(entry.id)) fail(`duplicate id ${entry.id}`);
-  ids.add(entry.id);
-
-  const aliases = normalizedList(entry.aliases);
-  const entryDomains = normalizedList(entry.domains).map((domain) => domain.toLowerCase());
-  for (const key of [entry.id, ...aliases]) {
-    for (const form of lookupForms(key)) {
-      if (lookupKeys.has(form) && lookupKeys.get(form) !== entry.id) {
-        fail(`lookup key ${JSON.stringify(key)} is shared by ${lookupKeys.get(form)} and ${entry.id}`);
-      }
-      lookupKeys.set(form, entry.id);
-    }
-  }
-  for (const domain of entryDomains) {
-    if (domains.has(domain) && domains.get(domain) !== entry.id) {
-      fail(`domain ${domain} is shared by ${domains.get(domain)} and ${entry.id}`);
-    }
-    domains.set(domain, entry.id);
-  }
-
-  let mark;
-  if (entry.simpleIcon) {
-    const icon = simpleBySlug.get(entry.simpleIcon);
-    if (!icon) fail(`${entry.id} references missing Simple Icons slug ${entry.simpleIcon}`);
-    mark = {
-      id: entry.id,
-      title: entry.title || icon.title,
-      category: entry.category,
-      aliases,
-      domains: entryDomains,
-      viewBox: 24,
-      hex: icon.hex,
-      path: icon.path,
-      provenance: {
-        provider: 'Simple Icons',
-        providerVersion: simpleIconsVersion,
-        source: icon.source,
-        ...(icon.guidelines ? { guidelines: icon.guidelines } : {}),
-        ...(icon.license ? { license: icon.license } : {}),
-      },
-    };
-  } else if (entry.custom) {
-    const custom = entry.custom;
-    if (!entry.title || !custom.path || !custom.source || !/^[0-9A-F]{6}$/i.test(custom.hex || '')) {
-      fail(`${entry.id} custom mark requires title, path, source, and six-digit hex`);
-    }
-    mark = {
-      id: entry.id,
-      title: entry.title,
-      category: entry.category,
-      aliases,
-      domains: entryDomains,
-      viewBox: custom.viewBox || 24,
-      hex: custom.hex.toUpperCase(),
-      path: custom.path,
-      provenance: {
-        provider: 'Official brand asset',
-        source: custom.source,
-        ...(custom.guidelines ? { guidelines: custom.guidelines } : {}),
-      },
-    };
-  } else {
-    fail(`${entry.id} must provide simpleIcon or custom`);
-  }
-  if (!mark.category || !mark.title) fail(`${entry.id} is missing category or title`);
-  for (const form of lookupForms(mark.title)) {
-    if (lookupKeys.has(form) && lookupKeys.get(form) !== entry.id) {
-      fail(`title ${JSON.stringify(mark.title)} is shared by ${lookupKeys.get(form)} and ${entry.id}`);
-    }
-    lookupKeys.set(form, entry.id);
-  }
-  return mark;
-}).sort((left, right) => left.id.localeCompare(right.id));
-
-const banner = `// Generated by scripts/generate-brand-marks.mjs from brand-marks/catalog.json.\n// Simple Icons ${simpleIconsVersion}. Do not edit by hand.\n`;
-const source = `${banner}export const BRAND_MARKS = Object.freeze(${JSON.stringify(generated, null, 2)});\n`;
-
-if (process.argv.includes('--check')) {
-  const current = fs.existsSync(outputPath)
-    ? fs.readFileSync(outputPath, 'utf8').replace(/\r\n?/g, '\n')
-    : '';
-  if (current !== source) {
-    console.error('generated brand marks are stale — run npm run generate:brand-marks');
-    process.exit(1);
-  }
-} else {
-  const temporary = `${outputPath}.${process.pid}.tmp`;
-  fs.writeFileSync(temporary, source);
-  fs.renameSync(temporary, outputPath);
-  console.log(`generated ${path.relative(root, outputPath)} (${generated.length} marks)`);
-}

package/template/.qoder/skills/archify/scripts/generate-validators.mjs

@@ -1,66 +0,0 @@
-#!/usr/bin/env node
-
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import Ajv2020 from 'ajv/dist/2020.js';
-import standaloneCode from 'ajv/dist/standalone/index.js';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const root = path.resolve(__dirname, '..');
-const schemasDir = path.join(root, 'schemas');
-const output = path.join(root, 'renderers/shared/generated-validators.mjs');
-const diagramTypes = ['workflow', 'sequence', 'dataflow', 'lifecycle', 'architecture'];
-
-const ajv = new Ajv2020({
-  allErrors: true,
-  strict: true,
-  code: { source: true, esm: true },
-});
-ajv.addSchema(JSON.parse(fs.readFileSync(path.join(schemasDir, 'common.schema.json'), 'utf8')));
-
-const schemaIds = {};
-for (const type of diagramTypes) {
-  const schema = JSON.parse(fs.readFileSync(path.join(schemasDir, `${type}.schema.json`), 'utf8'));
-  ajv.addSchema(schema);
-  schemaIds[type] = schema.$id;
-}
-
-const banner = '// Generated by scripts/generate-validators.mjs. Do not edit by hand.\n';
-const ajvUcs2Import = 'require("ajv/dist/runtime/ucs2length").default';
-const inlineUcs2Length = `function ucs2length(str) {
-  const len = str.length;
-  let length = 0;
-  let pos = 0;
-  while (pos < len) {
-    length += 1;
-    const value = str.charCodeAt(pos++);
-    if (value >= 0xd800 && value <= 0xdbff && pos < len
-      && (str.charCodeAt(pos) & 0xfc00) === 0xdc00) pos += 1;
-  }
-  return length;
-}`;
-let validatorCode = standaloneCode(ajv, schemaIds);
-if (!validatorCode.includes(ajvUcs2Import)) {
-  throw new Error('AJV standalone output no longer contains the expected ucs2length helper');
-}
-validatorCode = validatorCode.replaceAll(ajvUcs2Import, inlineUcs2Length);
-if (validatorCode.includes('require(')) {
-  throw new Error('AJV standalone output contains an unexpected runtime dependency');
-}
-const generated = `${banner}${validatorCode}\n`;
-
-if (process.argv.includes('--check')) {
-  const current = fs.existsSync(output)
-    ? fs.readFileSync(output, 'utf8').replace(/\r\n?/g, '\n')
-    : '';
-  if (current !== generated) {
-    console.error('generated validators are stale — run npm run generate:validators');
-    process.exit(1);
-  }
-} else {
-  const temporary = `${output}.${process.pid}.tmp`;
-  fs.writeFileSync(temporary, generated);
-  fs.renameSync(temporary, output);
-  console.log(`generated ${path.relative(root, output)}`);
-}

package/template/.qoder/skills/archify/scripts/render-examples.mjs

@@ -1,26 +0,0 @@
-// Re-render every bundled example from its JSON IR. Installed skills keep HTML
-// beside the JSON examples; the development script passes the golden directory.
-
-import { execFileSync } from 'node:child_process';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const skillRoot = path.resolve(__dirname, '..');
-const outputRoot = path.resolve(process.argv[2] || path.join(skillRoot, 'examples'));
-
-const TARGETS = [
-  ['workflow', 'agent-tool-call.workflow.json', 'workflow-agent-tool-call-rendered.html'],
-  ['sequence', 'cache-miss-request.sequence.json', 'sequence-cache-miss-request.html'],
-  ['dataflow', 'product-analytics.dataflow.json', 'dataflow-product-analytics.html'],
-  ['lifecycle', 'agent-run.lifecycle.json', 'lifecycle-agent-run.html'],
-  ['architecture', 'web-app.architecture.json', 'web-app-rendered.html'],
-];
-
-for (const [mode, input, output] of TARGETS) {
-  execFileSync(process.execPath, [
-    path.join(skillRoot, `renderers/${mode}/render-${mode}.mjs`),
-    path.join(skillRoot, 'examples', input),
-    path.join(outputRoot, output),
-  ], { stdio: 'inherit' });
-}

package/template/.qoder/skills/archify/scripts/update-contract.mjs

@@ -1,182 +0,0 @@
-export const SKILL_ID = 'archify';
-export const EXPECTED_REPOSITORY = 'https://github.com/tt-a1i/archify';
-export const DEFAULT_MANIFEST_URL = 'https://tt-a1i.github.io/archify/skill-updates/archify/stable.json';
-
-const CONTROL_OR_BIDI = /[\u0000-\u001f\u007f-\u009f\u202a-\u202e\u2066-\u2069]/u;
-const HEX_40 = /^[a-f0-9]{40}$/;
-const HEX_64 = /^[a-f0-9]{64}$/;
-const SEMVER = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
-const UTC_SECONDS = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z$/;
-
-export class UpdateContractError extends Error {
-  constructor(message) {
-    super(message);
-    this.name = 'UpdateContractError';
-  }
-}
-
-function isPlainObject(value) {
-  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
-}
-
-function hasExactKeys(value, expected) {
-  return isPlainObject(value)
-    && Object.keys(value).sort().join('\0') === [...expected].sort().join('\0');
-}
-
-export function parseSemver(value) {
-  if (typeof value !== 'string' || value.length > 128) {
-    throw new UpdateContractError(`invalid SemVer: ${JSON.stringify(value)}`);
-  }
-  const match = SEMVER.exec(value);
-  if (!match) throw new UpdateContractError(`invalid SemVer: ${JSON.stringify(value)}`);
-  const prerelease = match[4]?.split('.') ?? null;
-  if (prerelease?.some((identifier) => /^\d+$/.test(identifier)
-    && identifier.length > 1 && identifier.startsWith('0'))) {
-    throw new UpdateContractError(`invalid SemVer: ${JSON.stringify(value)}`);
-  }
-  return {
-    core: match.slice(1, 4),
-    prerelease,
-    build: match[5]?.split('.') ?? null,
-  };
-}
-
-function compareNumericIdentifiers(left, right) {
-  if (left.length !== right.length) return left.length < right.length ? -1 : 1;
-  if (left === right) return 0;
-  return left < right ? -1 : 1;
-}
-
-function comparePrerelease(left, right) {
-  if (left === null && right === null) return 0;
-  if (left === null) return 1;
-  if (right === null) return -1;
-  const length = Math.max(left.length, right.length);
-  for (let index = 0; index < length; index += 1) {
-    if (left[index] === undefined) return -1;
-    if (right[index] === undefined) return 1;
-    if (left[index] === right[index]) continue;
-    const leftNumeric = /^\d+$/.test(left[index]);
-    const rightNumeric = /^\d+$/.test(right[index]);
-    if (leftNumeric && rightNumeric) return compareNumericIdentifiers(left[index], right[index]);
-    if (leftNumeric !== rightNumeric) return leftNumeric ? -1 : 1;
-    return left[index] < right[index] ? -1 : 1;
-  }
-  return 0;
-}
-
-export function compareSemver(leftValue, rightValue) {
-  const left = parseSemver(leftValue);
-  const right = parseSemver(rightValue);
-  for (let index = 0; index < left.core.length; index += 1) {
-    const comparison = compareNumericIdentifiers(left.core[index], right.core[index]);
-    if (comparison !== 0) return comparison;
-  }
-  return comparePrerelease(left.prerelease, right.prerelease);
-}
-
-export function releaseChannelForVersion(value) {
-  return parseSemver(value).prerelease ? 'development' : 'stable';
-}
-
-export function isStableCoreVersion(value) {
-  try {
-    const parsed = parseSemver(value);
-    return parsed.prerelease === null && parsed.build === null;
-  } catch {
-    return false;
-  }
-}
-
-export function validateCanonicalUtcTimestamp(value) {
-  if (typeof value !== 'string' || !UTC_SECONDS.test(value)) {
-    throw new UpdateContractError('publication time must use YYYY-MM-DDTHH:mm:ssZ');
-  }
-  const timestamp = Date.parse(value);
-  if (!Number.isFinite(timestamp)
-    || new Date(timestamp).toISOString().replace('.000Z', 'Z') !== value) {
-    throw new UpdateContractError('publication time is not a real UTC calendar instant');
-  }
-  return value;
-}
-
-export function validateLocalRelease(value) {
-  if (!hasExactKeys(value, [
-    'schemaVersion', 'skillId', 'channel', 'version', 'source', 'updateManifestUrl',
-  ])
-    || value.schemaVersion !== 1
-    || value.skillId !== SKILL_ID
-    || !hasExactKeys(value.source, ['repository'])
-    || value.source.repository !== EXPECTED_REPOSITORY
-    || value.updateManifestUrl !== DEFAULT_MANIFEST_URL) {
-    throw new UpdateContractError('invalid local release identity');
-  }
-  const expectedChannel = releaseChannelForVersion(value.version);
-  if (value.channel !== expectedChannel) {
-    throw new UpdateContractError('local release channel does not match its version');
-  }
-  return {
-    schemaVersion: value.schemaVersion,
-    skillId: value.skillId,
-    channel: value.channel,
-    version: value.version,
-    source: { repository: value.source.repository },
-    updateManifestUrl: value.updateManifestUrl,
-  };
-}
-
-export function validateReleaseNotesUrl(value, version) {
-  if (!isStableCoreVersion(version)) {
-    throw new UpdateContractError('release notes require a stable core version');
-  }
-  const expected = `https://github.com/tt-a1i/archify/releases/tag/v${version}`;
-  if (value !== expected) {
-    throw new UpdateContractError('release notes URL is outside the exact trusted release path');
-  }
-  return value;
-}
-
-export function validateStableUpdateManifest(value) {
-  if (!hasExactKeys(value, [
-    'schemaVersion', 'skillId', 'channel', 'version', 'publishedAt', 'source',
-    'artifact', 'summary', 'releaseNotes', 'severity',
-  ])
-    || value.schemaVersion !== 1
-    || value.skillId !== SKILL_ID
-    || value.channel !== 'stable'
-    || !isStableCoreVersion(value.version)
-    || !hasExactKeys(value.source, ['repository', 'ref', 'treeSha'])
-    || value.source.repository !== EXPECTED_REPOSITORY
-    || value.source.ref !== `v${value.version}`
-    || !HEX_40.test(value.source.treeSha)
-    || !hasExactKeys(value.artifact, ['sha256'])
-    || !HEX_64.test(value.artifact.sha256)) {
-    throw new UpdateContractError('invalid immutable stable release identity');
-  }
-  validateCanonicalUtcTimestamp(value.publishedAt);
-  if (typeof value.summary !== 'string' || value.summary.length < 1 || value.summary.length > 160
-    || CONTROL_OR_BIDI.test(value.summary)) {
-    throw new UpdateContractError('invalid release summary');
-  }
-  validateReleaseNotesUrl(value.releaseNotes, value.version);
-  if (!['normal', 'security'].includes(value.severity)) {
-    throw new UpdateContractError('invalid update severity');
-  }
-  return {
-    schemaVersion: value.schemaVersion,
-    skillId: value.skillId,
-    channel: value.channel,
-    version: value.version,
-    publishedAt: value.publishedAt,
-    source: {
-      repository: value.source.repository,
-      ref: value.source.ref,
-      treeSha: value.source.treeSha,
-    },
-    artifact: { sha256: value.artifact.sha256 },
-    summary: value.summary,
-    releaseNotes: value.releaseNotes,
-    severity: value.severity,
-  };
-}

package/template/.qoder/skills/archify/scripts/yss-safe-deliver.mjs

@@ -1,214 +0,0 @@
-#!/usr/bin/env node
-
-import { spawnSync } from 'node:child_process';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const scriptDirectory = path.dirname(fileURLToPath(import.meta.url));
-const skillRoot = path.resolve(scriptDirectory, '..');
-const archifyCli = path.join(skillRoot, 'bin', 'archify.mjs');
-const diagramTypes = new Set(['architecture', 'workflow', 'sequence', 'dataflow', 'lifecycle']);
-const diagramIdPattern = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
-
-function fail(message, code = 2) {
-  process.stderr.write(`${message}\n`);
-  process.exit(code);
-}
-
-function isWithin(base, target) {
-  const relative = path.relative(base, target);
-  return relative === '' || (!relative.startsWith(`..${path.sep}`) && relative !== '..' && !path.isAbsolute(relative));
-}
-
-function findProjectRoot(start) {
-  let current = fs.realpathSync(path.resolve(start));
-  while (true) {
-    if (fs.existsSync(path.join(current, 'yss-project.yaml'))) return current;
-    const parent = path.dirname(current);
-    if (parent === current) return null;
-    current = parent;
-  }
-}
-
-function findRequestedProjectRoot(start) {
-  let current = path.resolve(start);
-  while (true) {
-    if (fs.existsSync(path.join(current, 'yss-project.yaml'))) return current;
-    const parent = path.dirname(current);
-    if (parent === current) return null;
-    current = parent;
-  }
-}
-
-function repositoryMode(projectRoot) {
-  const manifest = fs.readFileSync(path.join(projectRoot, 'yss-project.yaml'), 'utf8');
-  const match = manifest.match(/^repository_mode:\s*(template-source|project-instance)\s*$/m);
-  if (!match) fail('yss-project.yaml 缺少受支持的 repository_mode');
-  return match[1];
-}
-
-function regularFile(target, label) {
-  let metadata;
-  try {
-    metadata = fs.lstatSync(target);
-  } catch (error) {
-    if (error.code === 'ENOENT') fail(`${label}不存在: ${target}`);
-    throw error;
-  }
-  if (!metadata.isFile() || metadata.isSymbolicLink()) fail(`${label}必须是非符号链接普通文件: ${target}`);
-}
-
-function prepareParent(base, output) {
-  fs.mkdirSync(base, { recursive: true });
-  const realBase = fs.realpathSync(base);
-  const parent = path.dirname(output);
-  fs.mkdirSync(parent, { recursive: true });
-  const realParent = fs.realpathSync(parent);
-  if (!isWithin(realBase, realParent)) fail(`输出目录越过允许根: ${output}`);
-  return realBase;
-}
-
-function assertReplaceableHtml(output) {
-  if (!fs.existsSync(output)) return;
-  const metadata = fs.lstatSync(output);
-  if (!metadata.isFile() || metadata.isSymbolicLink()) fail(`拒绝覆盖非普通 HTML 文件: ${output}`);
-  const head = fs.readFileSync(output, { encoding: 'utf8' }).slice(0, 2048);
-  if (!/<meta name="generator" content="archify [^"]+">/.test(head)) {
-    fail(`拒绝覆盖非 Archify 产物: ${output}`);
-  }
-}
-
-function assertReplaceableReceipt(receipt) {
-  if (!fs.existsSync(receipt)) return;
-  const metadata = fs.lstatSync(receipt);
-  if (!metadata.isFile() || metadata.isSymbolicLink()) fail(`拒绝覆盖非普通 receipt: ${receipt}`);
-  let parsed;
-  try {
-    parsed = JSON.parse(fs.readFileSync(receipt, 'utf8'));
-  } catch {
-    fail(`拒绝覆盖无法识别的 receipt: ${receipt}`);
-  }
-  if (parsed?.yssArchifyReceipt !== true) fail(`拒绝覆盖非 YSS Archify receipt: ${receipt}`);
-}
-
-function stableContract(projectRoot, mode, input, output) {
-  const relativeBase = mode === 'project-instance'
-    ? 'docs/architecture/diagrams'
-    : '.template-source/evidence/maintenance/diagrams';
-  const base = path.join(projectRoot, relativeBase);
-  const relativeOutput = path.relative(base, output);
-  const segments = relativeOutput.split(path.sep);
-  if (segments.length !== 2 || !diagramIdPattern.test(segments[0])) {
-    fail(`稳定图必须位于 ${relativeBase}/<diagram-id>/<diagram-id>.html`);
-  }
-  const diagramId = segments[0];
-  if (segments[1] !== `${diagramId}.html`) {
-    fail(`稳定图文件名必须与 diagram-id 一致: ${diagramId}.html`);
-  }
-  const expectedInput = path.join(base, diagramId, `${diagramId}.archify.json`);
-  if (input !== expectedInput) fail(`稳定图源必须为: ${expectedInput}`);
-  return { base, diagramId, receipt: path.join(base, diagramId, `${diagramId}.receipt.json`) };
-}
-
-const [type, inputArgument, outputArgument, ...forwardedArguments] = process.argv.slice(2);
-if (!diagramTypes.has(type)) fail(`未知图类型: ${type || '<missing>'}`);
-if (!inputArgument || !outputArgument) {
-  fail('用法: yss-safe-deliver <type> <input.archify.json> <output.html> [Archify flags]');
-}
-if (forwardedArguments.includes('--open')) fail('YSS 安全交付不允许 --open；交付后由用户显式打开产物');
-
-const input = fs.realpathSync(path.resolve(inputArgument));
-const requestedOutput = path.resolve(outputArgument);
-let outputParent;
-try {
-  outputParent = fs.realpathSync(path.dirname(requestedOutput));
-} catch (error) {
-  if (error.code === 'ENOENT') fail(`输出目录必须先随配对的 JSON 源建立: ${path.dirname(requestedOutput)}`);
-  throw error;
-}
-const output = path.join(outputParent, path.basename(requestedOutput));
-if (path.extname(output).toLowerCase() !== '.html') fail(`输出必须使用 .html 扩展名: ${output}`);
-regularFile(input, 'Archify JSON 源');
-
-const projectRoot = findProjectRoot(process.cwd());
-const requestedProjectRoot = findRequestedProjectRoot(path.dirname(requestedOutput));
-const temporaryBase = fs.realpathSync(os.tmpdir());
-// A repository-relative request stays under the repository contract even when a
-// parent symlink resolves into the OS temporary directory. Otherwise the
-// temporary-delivery exception could be used to escape the stable output root.
-const requestedWithinProject = requestedProjectRoot !== null;
-const isTemporary = !requestedWithinProject && isWithin(temporaryBase, output);
-let mode = null;
-let receipt;
-let allowedBase;
-
-if (isTemporary) {
-  allowedBase = temporaryBase;
-  receipt = output.replace(/\.html$/i, '.receipt.json');
-} else {
-  if (!projectRoot) fail('稳定交付必须从包含 yss-project.yaml 的仓库内运行');
-  mode = repositoryMode(projectRoot);
-  const contract = stableContract(projectRoot, mode, input, output);
-  allowedBase = contract.base;
-  receipt = contract.receipt;
-}
-
-prepareParent(allowedBase, output);
-assertReplaceableHtml(output);
-assertReplaceableReceipt(receipt);
-
-const hasQuality = forwardedArguments.some((argument) => argument === '--quality' || argument.startsWith('--quality='));
-const archifyArguments = [
-  archifyCli,
-  'deliver',
-  type,
-  input,
-  output,
-  ...forwardedArguments.filter((argument) => argument !== '--json'),
-  ...(hasQuality ? [] : ['--quality', 'showcase']),
-  '--json',
-];
-const result = spawnSync(process.execPath, archifyArguments, {
-  cwd: projectRoot || process.cwd(),
-  encoding: 'utf8',
-  stdio: ['ignore', 'pipe', 'pipe'],
-});
-
-if (result.status !== 0) {
-  if (result.stdout) process.stdout.write(result.stdout);
-  if (result.stderr) process.stderr.write(result.stderr);
-  process.exit(result.status ?? 1);
-}
-
-let upstreamReceipt;
-try {
-  upstreamReceipt = JSON.parse(result.stdout);
-} catch {
-  fail('Archify 成功返回但 receipt 不是有效 JSON', 1);
-}
-if (upstreamReceipt?.ok !== true || !fs.existsSync(output)) fail('Archify 未产生可验证交付物', 1);
-assertReplaceableHtml(output);
-
-const wrapperReceipt = {
-  schemaVersion: 1,
-  yssArchifyReceipt: true,
-  repositoryMode: mode || 'temporary',
-  source: input,
-  output,
-  archify: upstreamReceipt,
-};
-const receiptStagingDirectory = fs.mkdtempSync(path.join(path.dirname(receipt), `.${path.basename(receipt)}.tmp-`));
-const temporaryReceipt = path.join(receiptStagingDirectory, 'receipt.json');
-try {
-  fs.writeFileSync(temporaryReceipt, `${JSON.stringify(wrapperReceipt, null, 2)}\n`, {
-    encoding: 'utf8',
-    mode: 0o644,
-    flag: 'wx',
-  });
-  fs.renameSync(temporaryReceipt, receipt);
-} finally {
-  fs.rmSync(receiptStagingDirectory, { recursive: true, force: true });
-}
-process.stdout.write(`${JSON.stringify(wrapperReceipt, null, 2)}\n`);

package/template/.qoder/skills/archify/skill-release.json

@@ -1,10 +0,0 @@
-{
-  "schemaVersion": 1,
-  "skillId": "archify",
-  "channel": "stable",
-  "version": "2.16.0",
-  "source": {
-    "repository": "https://github.com/tt-a1i/archify"
-  },
-  "updateManifestUrl": "https://tt-a1i.github.io/archify/skill-updates/archify/stable.json"
-}