create-yss-spec 3.3.1 → 3.3.4

package/template/scripts/verify-digital-human-roles-scenarios

@@ -1,159 +0,0 @@
-#!/usr/bin/env node
-import { validateDefaultDigitalHumanRoles, validateDigitalHumanRoles, loadDigitalHumanRoles, skillIdsFromRegistry } from "./lib/digital-human-roles.mjs";
-import { loadRegistry } from "./lib/lifecycle-registry.mjs";
-import { loadSkillRegistry } from "./lib/skill-registry.mjs";
-import { validateApprovalRecord, validateApprovalRecordFile } from "./lib/approval-record.mjs";
-
-function clone() {
-  return structuredClone(loadDigitalHumanRoles());
-}
-
-function deps() {
-  const lifecycle = loadRegistry();
-  const skills = loadSkillRegistry();
-  const ids = (records) => new Set(records.map((record) => record.id));
-  return {
-    skillIds: skillIdsFromRegistry(skills),
-    stageIds: ids(lifecycle.stages),
-    gateIds: ids(lifecycle.gates),
-    artifactIds: ids(lifecycle.artifacts),
-    evidenceIds: ids(lifecycle.evidence),
-    workUnitIds: ids(lifecycle.work_units),
-    skillRegistry: skills
-  };
-}
-
-function mustFail(doc, pattern, label) {
-  let failed = false;
-  let message = "";
-  try {
-    validateDigitalHumanRoles(doc, deps());
-  } catch (error) {
-    failed = true;
-    message = error.message;
-  }
-  if (!failed) throw new TypeError(`错误配置未被拒绝: ${label}`);
-  if (!pattern.test(message)) throw new TypeError(`${label} 失败原因不符合预期: ${message}`);
-}
-
-validateDefaultDigitalHumanRoles();
-
-const tester = loadDigitalHumanRoles().roles.find((role) => role.id === "role.test-engineer");
-for (const skill of ["code-review", "alibaba-java-code-style", "yss-ui", "yss-ui-business-page-generation", "yss-domain", "yss-application", "yss-web-controller", "yss-dto", "mapstruct", "lombok"]) {
-  if (!tester.core_skills.includes(skill)) throw new TypeError(`role.test-engineer 缺少只读专项检查 skill: ${skill}`);
-}
-if (tester.forbidden_skills.includes("yss-ui") || tester.forbidden_skills.includes("alibaba-java-code-style")) {
-  throw new TypeError("测试工程师不得禁止审查所需的 YSS / Alibaba skill");
-}
-const backend = loadDigitalHumanRoles().roles.find((role) => role.id === "role.backend-engineer");
-if (!backend.core_skills.includes("alibaba-java-code-style") || !backend.core_skills.includes("mapstruct") || !backend.core_skills.includes("lombok")) {
-  throw new TypeError("role.backend-engineer 缺少 Alibaba / MapStruct / Lombok");
-}
-
-const seven = [
-  "role.lifecycle-orchestrator",
-  "role.requirements-manager",
-  "role.product-manager",
-  "role.project-manager",
-  "role.frontend-engineer",
-  "role.backend-engineer",
-  "role.test-engineer"
-];
-
-const genericAllowsSeven = clone();
-genericAllowsSeven.stage_groups[0].members = seven;
-validateDigitalHumanRoles(genericAllowsSeven, deps());
-
-const grokForbidsSeven = clone();
-grokForbidsSeven.stage_groups[0].members = seven;
-grokForbidsSeven.runtimes.find((runtime) => runtime.id === "runtime.grok").overflow = "forbid";
-mustFail(grokForbidsSeven, /禁止超过 6 人/, "Grok 适配器在 overflow=forbid 时拒绝七人协作组");
-
-const coupled = clone();
-coupled.roles[0].grok_title = "legacy";
-mustFail(coupled, /平台耦合字段/, "角色上残留 grok_title");
-
-const unknownSkill = clone();
-unknownSkill.roles[0].core_skills = ["not-a-registered-skill"];
-mustFail(unknownSkill, /未登记技能/, "未知技能");
-
-const overlap = clone();
-overlap.roles.find((role) => role.id === "role.frontend-engineer").forbidden_skills.push("yss-ui");
-mustFail(overlap, /重叠/, "启用且禁止同一技能");
-
-const selfSign = clone();
-selfSign.gate_policy.dual_digital_human[0].countersigners = ["role.requirements-manager"];
-mustFail(selfSign, /起草者不得会签自己/, "起草者自签");
-
-const releaseByBot = clone();
-releaseByBot.gate_policy.biological_human = ["gate.architecture-reviewed"];
-releaseByBot.gate_policy.digital_human_review.push({
-  gate: "gate.release-ready",
-  countersigners: ["role.product-manager"]
-});
-mustFail(releaseByBot, /gate\.release-ready/, "数字人关闭发布门禁");
-
-const missingSigners = clone();
-missingSigners.gate_policy.digital_human_review[0].countersigners = [];
-mustFail(missingSigners, /countersigners/, "单审门禁缺 countersigners");
-
-const stringReview = clone();
-stringReview.gate_policy.digital_human_review = ["gate.prototype-reviewed"];
-mustFail(stringReview, /必须是含 gate/, "单审门禁仍用字符串名单");
-
-const missingGeneric = clone();
-missingGeneric.runtimes = missingGeneric.runtimes.filter((runtime) => runtime.id !== "runtime.generic");
-mustFail(missingGeneric, /缺少运行时绑定: runtime.generic/, "缺少通用运行时");
-
-validateApprovalRecordFile("docs/templates/approval-record-template.yaml");
-
-const rolesDoc = loadDigitalHumanRoles();
-try {
-  validateApprovalRecord({
-    schema_version: 1,
-    gate_id: "gate.spec-baseline-approved",
-    decision: "approved",
-    actor_kind: "digital-human",
-    role_id: "role.requirements-manager",
-    runtime_id: "runtime.generic",
-    principal_ref: "instance:wrong"
-  }, { rolesDoc });
-  throw new TypeError("错误配置未被拒绝: 错误角色会签");
-} catch (error) {
-  if (!/会签角色必须是/.test(error.message)) throw new TypeError(`错误角色会签 失败原因不符合预期: ${error.message}`);
-}
-
-try {
-  validateApprovalRecord({
-    schema_version: 1,
-    gate_id: "gate.spec-baseline-approved",
-    decision: "approved",
-    actor_kind: "digital-human",
-    role_id: "role.requirements-manager",
-    runtime_id: "runtime.generic",
-    principal_ref: "instance:req",
-    drafter_role_id: "role.requirements-manager"
-  }, { rolesDoc });
-  throw new TypeError("错误配置未被拒绝: 起草者自签会签记录");
-} catch (error) {
-  if (!/会签角色必须是|起草者不得会签自己/.test(error.message)) {
-    throw new TypeError(`起草者自签会签记录 失败原因不符合预期: ${error.message}`);
-  }
-}
-
-try {
-  validateApprovalRecord({
-    schema_version: 1,
-    gate_id: "gate.release-ready",
-    decision: "approved",
-    actor_kind: "digital-human",
-    role_id: "role.product-manager",
-    runtime_id: "runtime.generic",
-    principal_ref: "instance:pm"
-  }, { rolesDoc });
-  throw new TypeError("错误配置未被拒绝: 数字人关发布会签记录");
-} catch (error) {
-  if (!/必须由生物人会签/.test(error.message)) throw new TypeError(`数字人关发布会签记录 失败原因不符合预期: ${error.message}`);
-}
-
-process.stdout.write("数字人角色压力场景验证通过\n");

package/template/scripts/verify-digital-human-task-package-scenarios

@@ -1,8 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const result = spawnSync(process.execPath, [path.join(root, "scripts/verify-subagent-task-package-scenarios"), ...process.argv.slice(2)], { stdio: "inherit" });
-process.exitCode = result.status ?? 1;

package/template/scripts/verify-frontend-delivery-scenarios

@@ -1,131 +0,0 @@
-#!/usr/bin/env node
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { fork } from 'node:child_process';
-import { once } from 'node:events';
-import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync, cpSync, existsSync } from 'node:fs';
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { tmpdir } from 'node:os';
-import { fixture, context } from './fixtures/strategic-handoff/fixture.mjs';
-import { exportBundle } from './lib/strategic-handoff.mjs';
-const backendTools=process.env.YSS_DELIVERY_TEST_BACKEND_ROOT;
-const frontendTools=process.env.YSS_DELIVERY_TEST_FRONTEND_ROOT;
-const { backendDeliveryBasis, exportBackendDelivery, openBackendDelivery, inspectBackendDelivery } = await import(backendTools?pathToFileURL(path.join(backendTools,'scripts/lib/backend-delivery.mjs')):'./lib/backend-delivery.mjs');
-const {importBackendDelivery}=await import(frontendTools?pathToFileURL(path.join(frontendTools,'scripts/lib/backend-delivery.mjs')):'./lib/backend-delivery.mjs');
-const { verifyFrontendDelivery } = await import(frontendTools?pathToFileURL(path.join(frontendTools,'scripts/lib/frontend-delivery.mjs')):'./lib/frontend-delivery.mjs');
-const { enforceFrontendDelivery } = await import(frontendTools?pathToFileURL(path.join(frontendTools,'scripts/lib/frontend-delivery-boundary.mjs')):'./lib/frontend-delivery-boundary.mjs');
-const { compileDefaultImplementationContract } = await import(frontendTools?pathToFileURL(path.join(frontendTools,'scripts/lib/implementation-contract-compiler.mjs')):'./lib/implementation-contract-compiler.mjs');
-const { validateNextRoute, validateImplementationEntry } = await import(frontendTools?pathToFileURL(path.join(frontendTools,'scripts/lib/lifecycle-transition.mjs')):'./lib/lifecycle-transition.mjs');
-import { read, hash, json, ROOT } from './lib/strategic-handoff-io.mjs';
-const runtimeRegistry=read(path.join(frontendTools||ROOT,'docs/process/lifecycle-registry.yaml'));
-const frontendStage=runtimeRegistry.stages.find(x=>x.id==='stage.frontend-engineering-design')?.id||runtimeRegistry.stages.find(x=>x.id==='stage.tactical-design')?.id||'stage.system-data-engineering';
-const frontendWorkUnit=frontendStage==='stage.frontend-engineering-design'?'work-unit.frontend-engineering-design':frontendStage==='stage.tactical-design'?'work-unit.tactical-design':'work-unit.technical-analysis';
-
-test('战略与后端交付联合接收：便携、真实服务、拒绝不完整/过期输入及执行入口绕过',async t=>{
-  const base=mkdtempSync(path.join(tmpdir(),'frontend-delivery-test-'));
-  const put=(root,ref,value)=>{mkdirSync(path.dirname(path.join(root,ref)),{recursive:true});writeFileSync(path.join(root,ref),typeof value==='string'?value:json(value));};
-  const source=path.join(base,'strategy'), backend=path.join(base,'backend'), frontend=path.join(base,'frontend');
-  [source,backend,frontend].forEach(root=>mkdirSync(root));
-  if(backendTools)cpSync(backendTools,backend,{recursive:true});
-  if(frontendTools)cpSync(frontendTools,frontend,{recursive:true});
-  const f=await fixture(source);
-  for(const root of [backend,frontend]) {put(root,'yss-project.yaml','schema_version: 1\nrepository_mode: project-instance\n');put(root,'CONTEXT.md',context);}
-  const strategic=await exportBundle({sourceRoot:source,handoffRef:'handoff.yaml',output:path.join(backend,'strategy-package')});
-  const roles=read(path.join(source,'docs/agents/digital-human-roles.yaml'));
-  for(const gate of ['gate.openapi-frozen','gate.slice-contract-approved']) {
-    roles.gate_policy.biological_human=(roles.gate_policy.biological_human||[]).filter(x=>x!==gate);
-    roles.gate_policy.digital_human_review=(roles.gate_policy.digital_human_review||[]).filter(x=>x.gate!==gate);
-    roles.gate_policy.digital_human_review.push({gate,countersigners:['role.product-manager']});
-  }
-  put(backend,'docs/agents/digital-human-roles.yaml',roles);
-  put(backend,'api.yaml',{openapi:'3.1.0',info:{title:'Synthetic supplier API',version:'1'},paths:{'/suppliers':{post:{operationId:'submitSupplier',responses:{'200':{description:'OK'}}}}}});
-  put(backend,'slice.json',{schema_version:2,contract_id:'contract.backend',contract_version:'v1',slice_id:'slice.submit',status:'approved'});
-  put(backend,'data.md','Synthetic data setup for maintenance tests, not product verification.');
-  put(backend,'verification.log','Synthetic test fixture: successful/failed submissions exercised.');
-  const file=ref=>({ref,digest:hash(readFileSync(path.join(backend,ref)))});
-  const approved=(ref,id,gate)=>{
-    const binding={...file(ref),id,version:'v1',approval_ref:`approvals/${id}.json`};
-    put(backend,binding.approval_ref,{schema_version:1,gate_id:gate,decision:'approved',actor_kind:'digital-human',role_id:'role.product-manager',runtime_id:'runtime.generic',principal_ref:'synthetic-maintenance-fixture',artifact_bindings:[{id,version:'v1',digest:binding.digest}]});return binding;
-  };
-  const serverState=path.join(base,'server.json');put(base,'server.json',{body:{}});
-  const server=fork(path.join(ROOT,'scripts/fixtures/backend-delivery/revision-server.mjs'),[serverState],{stdio:['ignore','ignore','inherit','ipc']});
-  t.after(()=>{server.kill();rmSync(base,{recursive:true,force:true});});
-  const [{port}]=await once(server,'message');
-  const delivery={schema_version:1,delivery_id:'backend-delivery.supplier',version:'v1',status:'verified',strategic_bundle_ref:'strategy-package',strategic_bundle_digest:strategic.bundle_digest,scope:{slice_id:'slice.submit',source_ids:['rule.complete','scenario.submit'],operation_ids:['submitSupplier']},openapi:approved('api.yaml','api.supplier','gate.openapi-frozen'),slice_contract:approved('slice.json','contract.backend','gate.slice-contract-approved'),build:{source_commit:'a'.repeat(40),artifact_digest:`sha256:${'b'.repeat(64)}`},environment:{id:'fixture-local',base_url:`http://127.0.0.1:${port}`,deployment_id:'fixture-v1',revision_path:'/version',revision_pointers:{deployment_id:'/deployment_id',source_commit:'/source_commit',openapi_digest:'/openapi_digest',artifact_digest:'/artifact_digest',test_data_digest:'/test_data_digest'},test_data:file('data.md')},verification:{},supporting_files:[]};
-  const record=kind=>({schema_version:1,kind,subject_digest:backendDeliveryBasis(delivery),results:[{command:'synthetic-maintenance-test',executed_at:new Date().toISOString(),exit_code:0,evidence:[file('verification.log')]}],operation_ids:['submitSupplier'],coverage:[{source_id:'scenario.submit',outcome:'success'},{source_id:'scenario.submit',outcome:'failure'}]});
-  put(backend,'contract-test.json',record('backend-contract'));put(backend,'deployment-test.json',record('backend-deployment'));
-  delivery.verification={contract:file('contract-test.json'),deployment:file('deployment-test.json')};put(backend,'delivery.json',delivery);
-  const body={deployment_id:'fixture-v1',source_commit:delivery.build.source_commit,openapi_digest:delivery.openapi.digest,artifact_digest:delivery.build.artifact_digest,test_data_digest:delivery.environment.test_data.digest};
-  put(base,'server.json',{body});
-  await t.test('导出拒绝缺失场景、篡改接口及错误批准',async()=>{
-    const bytes=readFileSync(path.join(backend,'api.yaml'));put(backend,'api.yaml','changed');
-    await assert.rejects(()=>inspectBackendDelivery(backend,'delivery.json'),/摘要不一致/);writeFileSync(path.join(backend,'api.yaml'),bytes);
-    const approval=read(path.join(backend,delivery.openapi.approval_ref));put(backend,delivery.openapi.approval_ref,{...approval,artifact_bindings:[]});
-    await assert.rejects(()=>inspectBackendDelivery(backend,'delivery.json'),/批准未绑定/);put(backend,delivery.openapi.approval_ref,approval);
-    const tests=record('backend-contract');tests.coverage.pop();put(backend,'contract-test.json',tests);
-    const broken=structuredClone(delivery);broken.verification.contract=file('contract-test.json');put(backend,'delivery.json',broken);
-    await assert.rejects(()=>inspectBackendDelivery(backend,'delivery.json'),/成功\/失败/);
-    put(backend,'contract-test.json',record('backend-contract'));delivery.verification.contract=file('contract-test.json');put(backend,'delivery.json',delivery);
-  });
-  const output=path.join(base,'package');await exportBackendDelivery({sourceRoot:backend,deliveryRef:'delivery.json',output,zip:true});
-  const imported=await importBackendDelivery({bundle:`${output}.zip`,targetRoot:frontend});
-  assert.equal((await importBackendDelivery({bundle:output,targetRoot:frontend})).result,'already-imported');
-  const acceptance=read(path.join(frontend,imported.acceptance_ref));
-  await t.test('草案/缺少两类产物不能进入前端任务',async()=>{
-    await assert.rejects(()=>verifyFrontendDelivery({root:frontend,acceptanceRef:imported.acceptance_ref,sliceRef:'slice.submit'}),/schema/);
-    const profileRef=path.join(frontend,'docs/process/harness-profile.yaml');
-    const profile=existsSync(profileRef)?read(profileRef):{schema_version:1,profile_id:'harness.frontend-delivery'};
-    put(frontend,'docs/process/harness-profile.yaml',{...profile,frontend_delivery:{required:true}});
-    assert.throws(()=>enforceFrontendDelivery({}, {root:frontend}),/frontend-delivery-required/);
-    assert.throws(()=>compileDefaultImplementationContract({root:frontend}),/frontend-delivery-required/);
-    assert.throws(()=>enforceFrontendDelivery({contract:{kind:'template-maintenance'}},{root:frontend}),/不得用模板维护/);
-    assert.equal(validateNextRoute(frontendWorkUnit==='work-unit.technical-analysis'?'work-unit.spec-synthesis':'work-unit.harness-entry',frontendWorkUnit,undefined,{root:frontend}).result,'blocked');
-    assert.equal(validateImplementationEntry({}, {root:frontend}).blocking_signals[0],'frontend-delivery-blocked');
-  });
-  put(frontend,'reconciliation.json',{schema_version:1,repository_mode:'project-instance',stage:frontendStage,work_unit:frontendWorkUnit,status:'reconciled',context_snapshot:f.snapshot,changes:{added:['Global/Supplier'],updated:[],deprecated:[]},unresolved_terms:[],evidence_refs:['CONTEXT.md']});
-  put(frontend,'cases.md','Synthetic planned UI cases: complete submission succeeds; incomplete submission fails.');
-  acceptance.status='accepted';acceptance.strategic_handoff.context_reconciliation_ref='reconciliation.json';
-  acceptance.frontend_cases=['success','failure'].map(outcome=>({case_id:`submit-${outcome}`,source_ids:['rule.complete','scenario.submit'],outcome,operation_ids:['submitSupplier'],visual_case_ids:['primary-desktop','primary-narrow'],evidence_ref:'cases.md',evidence_digest:hash(readFileSync(path.join(frontend,'cases.md')))}));
-  for(const row of acceptance.strategic_handoff.rows)Object.assign(row,{disposition:'mapped',frontend_case_refs:acceptance.frontend_cases.map(x=>x.case_id),dependency_status:'known',dependent_slice_refs:['slice.submit'],evidence_refs:['cases.md']});
-  put(frontend,imported.acceptance_ref,acceptance);
-  const check=()=>verifyFrontendDelivery({root:frontend,acceptanceRef:imported.acceptance_ref,sliceRef:'slice.submit'});
-  await t.test('源仓消失后可验 ZIP 并独立恢复；输入就绪不授予代码实施',async()=>{
-    rmSync(source,{recursive:true});rmSync(backend,{recursive:true});
-    assert.equal(await openBackendDelivery(`${output}.zip`,b=>b.delivery.scope.slice_id),'slice.submit');
-    const verified=await check();assert.equal(verified.result,'inputs-verified');assert.equal(verified.ready_for_agent,false);
-    assert.equal(verified.actual_verification.observed.deployment_id,'fixture-v1');
-    const draft=compileDefaultImplementationContract({root:frontend,slice_id:'slice.submit',frontend_delivery:{acceptance_ref:imported.acceptance_ref},requiredCapabilities:['governance.implementation-contract']});
-    assert.equal(draft.status,'draft');assert.equal(draft.slice_id,'slice.submit');assert.equal(draft.frontend_delivery.digest,verified.acceptance_digest);
-    assert.equal(enforceFrontendDelivery({slice_id:'slice.submit',frontend_delivery:{acceptance_ref:imported.acceptance_ref}}, {root:frontend}).result,'inputs-verified');
-    assert.throws(()=>enforceFrontendDelivery({slice_id:'slice.submit',frontend_delivery:{acceptance_ref:imported.acceptance_ref}}, {root:frontend,phase:'implementation'}),/approved Slice Contract/);
-  });
-  await t.test('实现边界读取持久化合同并冻结接收记录及用例字节',async()=>{
-    const binding={acceptance_ref:imported.acceptance_ref,digest:hash(readFileSync(path.join(frontend,imported.acceptance_ref)))};
-    put(frontend,'frontend-contract.json',{status:'approved',slice_id:'slice.submit',frontend:{delivery:binding}});
-    assert.equal(enforceFrontendDelivery({slice_contract_ref:'frontend-contract.json'},{root:frontend,phase:'implementation'}).result,'inputs-verified');
-    put(frontend,'cases.md','changed case');await assert.rejects(check,/摘要漂移/);
-    put(frontend,'cases.md','Synthetic planned UI cases: complete submission succeeds; incomplete submission fails.');
-    put(frontend,'frontend-contract.json',{status:'draft',slice_id:'slice.submit',frontend:{delivery:binding}});
-    assert.throws(()=>enforceFrontendDelivery({slice_contract_ref:'frontend-contract.json'},{root:frontend,phase:'implementation'}),/approved Slice Contract/);
-  });
-  await t.test('部署版本/数据失配与服务失败使旧接收记录失效',async()=>{
-    for(const field of ['deployment_id','source_commit','openapi_digest','artifact_digest','test_data_digest']) {
-      put(base,'server.json',{body:{...body,[field]:'wrong'}});await assert.rejects(check,/真实服务版本不匹配/);
-    }
-    put(base,'server.json',{status:503,body});await assert.rejects(check,/真实接口不可用/);put(base,'server.json',{body});
-  });
-  await t.test('范围、摘要和逐条承接缺口均拒绝',async()=>{
-    await assert.rejects(()=>verifyFrontendDelivery({root:frontend,acceptanceRef:imported.acceptance_ref,sliceRef:'slice.other'}),/切片不匹配/);
-    await assert.rejects(()=>verifyFrontendDelivery({root:frontend,acceptanceRef:imported.acceptance_ref,sliceRef:'slice.submit',expectedDigest:`sha256:${'0'.repeat(64)}`}),/摘要已变化/);
-    for(const mutate of [a=>a.frontend_cases.pop(),a=>a.strategic_handoff.rows[0].disposition='pending',a=>a.frontend_cases[0].operation_ids=['unknown'],a=>a.strategic_handoff.bundle_digest=`sha256:${'0'.repeat(64)}`]) {
-      const changed=structuredClone(acceptance);mutate(changed);put(frontend,imported.acceptance_ref,changed);await assert.rejects(check);
-    }
-    put(frontend,imported.acceptance_ref,acceptance);
-  });
-  await t.test('已导入更新版本阻断旧切片；包篡改拒绝',async()=>{
-    const receipt=read(path.join(frontend,imported.receipt_ref));const newer=path.posix.dirname(path.posix.dirname(imported.receipt_ref))+'/v2';
-    put(frontend,`${newer}/import-receipt.json`,{...receipt,version:'v2'});await assert.rejects(check,/旧前端接收记录 stale/);rmSync(path.join(frontend,newer),{recursive:true});
-    const changed=path.join(base,'tampered');cpSync(output,changed,{recursive:true});put(changed,'extra.txt','extra');await assert.rejects(()=>openBackendDelivery(changed,()=>null),/未登记文件/);
-  });
-});

package/template/scripts/verify-frontend-implementation-evidence-scenarios

@@ -1,56 +0,0 @@
-#!/usr/bin/env node
-import { mkdtempSync, mkdirSync, writeFileSync } from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-import { sealVisualBaseline } from "../.agents/skills/yss-prototype-stage/scripts/visual-baseline-contract.mjs";
-
-const repoRoot = path.resolve(import.meta.dirname, "..");
-const root = mkdtempSync(path.join(os.tmpdir(), "yss-frontend-evidence-"));
-const write = (relative, value = relative) => {
-  const file = path.join(root, relative); mkdirSync(path.dirname(file), { recursive: true }); writeFileSync(file, Buffer.isBuffer(value) || typeof value === "string" ? value : JSON.stringify(value, null, 2)); return relative;
-};
-write("docs/spec.md"); write("docs/prototype.html");
-for (const file of ["verification/desktop.png", "verification/narrow.png", "verification/desktop-diff.png", "verification/narrow-diff.png", "verification/pnpm.txt", "verification/review.md"]) write(file);
-const digest = `sha256:${"a".repeat(64)}`;
-function pngHeader(width, height) { const value = Buffer.alloc(24); Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]).copy(value, 0); value.writeUInt32BE(13, 8); value.write("IHDR", 12, "ascii"); value.writeUInt32BE(width, 16); value.writeUInt32BE(height, 20); return value; }
-write("baseline/images/primary-desktop.png", pngHeader(1440, 900)); write("baseline/images/primary-narrow.png", pngHeader(390, 844));
-write("baseline/sources/prototype.html", "<main>demo</main>\n"); write("baseline/sources/interaction.md", "# Interaction\n"); write("baseline/sources/states.md", "# States\n");
-write("baseline/capture/capture.mjs", "// capture\n"); write("baseline/capture/result.json", "{\"result\":\"passed\"}\n");
-const baselineFile = write("baseline/visual-baseline.yaml", {
-  schema_version: 1, baseline_id: "visual-baseline.demo", feature: "demo", version: "v1", status: "approved",
-  bundle: { format: "portable-directory", root_ref: "baseline", digest, size_bytes: 0, max_image_bytes: 5242880, max_bundle_bytes: 104857600 },
-  source: { prototype_ref: "sources/prototype.html", prototype_digest: digest, interaction_spec_ref: "sources/interaction.md", interaction_spec_digest: digest, state_matrix_ref: "sources/states.md", state_matrix_digest: digest },
-  capture_environment: { browser: "chromium", browser_version: "140.0.0", operating_system: "linux", fonts_digest: digest, device_scale_factor: 1, color_space: "srgb", locale: "zh-CN", timezone: "Asia/Shanghai", animations_disabled: true, cursor_hidden: true, capture_script_ref: "capture/capture.mjs", capture_script_digest: digest, capture_result_ref: "capture/result.json", capture_result_digest: digest },
-  cases: [
-    { case_id: "primary-desktop", route: "/demo", page: "DemoPage", state: "normal", viewport: { name: "desktop", width: 1440, height: 900, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-desktop.png", image_digest: digest, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/prototype.html", "sources/interaction.md"], allowed_differences: [], result: "passed" },
-    { case_id: "primary-narrow", route: "/demo", page: "DemoPage", state: "normal", viewport: { name: "narrow", width: 390, height: 844, scroll_mode: "viewport", scroll_position: 0 }, theme: "compact-light", locale: "zh-CN", data_scenario: "primary", image_ref: "images/primary-narrow.png", image_digest: digest, image_size_bytes: 1, mask_ref: "not-applicable", mask_digest: "not-applicable", mask_size_bytes: 0, semantic_refs: ["sources/states.md"], allowed_differences: [], result: "passed" }
-  ]
-});
-const sealedBaseline = await sealVisualBaseline(path.join(root, baselineFile), path.join(root, "baseline"));
-const visual_baseline = { baseline_id: "visual-baseline.demo", version: "v1", digest: sealedBaseline.bundle.digest, manifest_ref: "baseline/visual-baseline.yaml", status: "approved", case_ids: ["primary-desktop", "primary-narrow"] };
-const base = {
-  schema_version: 2, template: false, status: "approved", prototype_ref: "docs/prototype.html", spec_ref: "docs/spec.md", visual_baseline,
-  route_and_page_inventory: [{ route: "/demo", page: "DemoPage", case_ids: ["primary-desktop", "primary-narrow"] }], pnpm_commands: ["pnpm test"]
-};
-const plan = { ...base, kind: "plan", baseline_case_ids: ["primary-desktop", "primary-narrow"], desktop_viewport: "1440x900", narrow_viewport: "390x844", state_cases: ["normal"] };
-const verification = {
-  ...base, kind: "verification",
-  case_results: [
-    { case_id: "primary-desktop", baseline_image_ref: "baseline/images/primary-desktop.png", implementation_image_ref: "verification/desktop.png", diff_ref: "verification/desktop-diff.png", mask_ref: "not-applicable", result: "pass", uncovered_difference: false, explanation: "无未解释差异" },
-    { case_id: "primary-narrow", baseline_image_ref: "baseline/images/primary-narrow.png", implementation_image_ref: "verification/narrow.png", diff_ref: "verification/narrow-diff.png", mask_ref: "not-applicable", result: "pass", uncovered_difference: false, explanation: "无未解释差异" }
-  ],
-  interaction_results: ["normal passed"], console_warning_check: "pass", actual_verification: [{ command: "pnpm test", exit_code: 0, executed_at: "2026-09-05T00:00:00Z", evidence_ref: "verification/pnpm.txt" }],
-  uncovered_differences: [], difference_owner: null, independent_review: { reviewer: "reviewer-1", candidate_digest: digest, status: "approved", findings_ref: "verification/review.md" }
-};
-const run = (name, value, expected, pattern) => {
-  const file = write(`${name}.json`, value);
-  const result = spawnSync("scripts/verify-frontend-implementation-evidence", ["--root", root, path.join(root, file)], { cwd: repoRoot, encoding: "utf8" });
-  if (result.status !== expected || (pattern && !pattern.test(`${result.stdout}${result.stderr}`))) throw new Error(`${name} unexpected\n${result.stdout}${result.stderr}`);
-};
-run("valid-plan", plan, 0);
-run("valid-verification", verification, 0);
-run("missing-case", { ...verification, case_results: verification.case_results.slice(0, 1) }, 1, /一一对应/);
-run("unexplained", { ...verification, uncovered_differences: ["间距偏差"], difference_owner: "frontend" }, 1, /未解释视觉差异/);
-run("nonzero", { ...verification, actual_verification: [{ ...verification.actual_verification[0], exit_code: 1 }] }, 1, /非零退出码/);
-process.stdout.write("Frontend implementation evidence v2 scenarios passed\n");

package/template/scripts/verify-frontend-scaffold-generator-scenarios

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-import "../.agents/skills/yss-frontend-scaffold-generator/scripts/scaffold-generator.test.mjs";

package/template/scripts/verify-governance-release

@@ -1,25 +0,0 @@
-#!/usr/bin/env node
-import { existsSync, readdirSync, readFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { isTemplateSource } from "./lib/repository-mode.mjs";
-
-const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-const failures = [];
-const read = (relativePath) => readFileSync(path.join(root, relativePath), "utf8");
-for (const [relativePath, marker] of Object.entries({
-  "docs/architecture/templates/system-overview-design-template.md": "已明确的认证、授权、租户隔离、敏感数据或合规行为",
-  "docs/architecture/templates/tech-design-template.md": "已明确的认证、授权、租户隔离、敏感数据或合规行为"
-})) {
-  if (!read(relativePath).includes(marker)) failures.push(`${relativePath} 缺少条件性安全/权限架构承载`);
-}
-if (isTemplateSource(root)) {
-  const adrDirectory = path.join(root, ".template-source/adr");
-  const files = existsSync(adrDirectory) ? readdirSync(adrDirectory).filter((name) => name.endsWith(".md")).sort() : [];
-  if (files.length > 0) failures.push(`模板源治理 ADR 已退役，禁止新增：${files.join(", ")}`);
-}
-if (!read("scripts/verify-lifecycle-scenarios").includes("ROUTE_REGISTRY_IDS")) failures.push("生命周期场景未校验稳定 ID 映射");
-if (failures.length > 0) {
-  process.stderr.write(`${failures.join("\n")}\n`);
-  process.exitCode = 1;
-}

package/template/scripts/verify-grill-with-docs-context-scenarios

@@ -1,15 +0,0 @@
-#!/usr/bin/env node
-import { readFileSync } from "node:fs";
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-
-const root = path.resolve(import.meta.dirname, "..");
-const skill = readFileSync(path.join(root, ".agents/skills/grill-with-docs/SKILL.md"), "utf8");
-for (const marker of ["scripts/verify-context-contract --root . --json", "domain-modeling/CONTEXT-FORMAT.md", "<ContextId>/<EnglishIdentifier>", "context_reconciliation", "referenced_terms_digest", "template-source", "not-applicable", "yss-product-lifecycle"]) {
-  if (!skill.includes(marker)) throw new Error(`grill-with-docs 缺少统一 Context Contract 标记: ${marker}`);
-}
-for (const script of ["scripts/verify-context-contract-scenarios", "scripts/verify-context-reconciliation-scenarios"]) {
-  const result = spawnSync(path.join(root, script), { cwd: root, encoding: "utf8" });
-  if (result.status !== 0) throw new Error(`${script} failed\n${result.stdout}${result.stderr}`);
-}
-process.stdout.write("grill-with-docs Context Contract scenarios passed\n");

package/template/scripts/verify-implementation-path-scenarios

@@ -1,40 +0,0 @@
-#!/usr/bin/env node
-import { validImplementationPath, violation } from "./lib/implementation-path-policy.mjs";
-
-const validPaths = {
-  "backend project 1": "apps/backend/project1/",
-  "backend project 2 nested source": "apps/backend/project2/src/main/java/",
-  "frontend project 1": "apps/frontend/project1/",
-  "external repository native path": "src/main/java/"
-};
-
-const invalidPaths = {
-  "singular backend root": "app/backend/project1/",
-  "singular frontend root": "app/frontend/project1/",
-  "backend container root": "apps/backend/",
-  "frontend container root": "apps/frontend/",
-  "wildcard project root": "apps/backend/*/",
-  traversal: "apps/backend/project1/../project2/"
-};
-
-const externalNativePaths = {
-  "external repository app directory": "app/backend/src/main/java/",
-  "external repository apps directory": "apps/backend/project1/src/"
-};
-
-const failures = [];
-for (const [name, value] of Object.entries(validPaths)) {
-  if (!validImplementationPath(value)) failures.push(`应允许 ${name}: ${violation(value)}`);
-}
-for (const [name, value] of Object.entries(invalidPaths)) {
-  if (validImplementationPath(value)) failures.push(`应阻断 ${name}`);
-}
-for (const [name, value] of Object.entries(externalNativePaths)) {
-  if (!validImplementationPath(value, { enforceHarness: false })) failures.push(`外部 native root 不应被 Harness 路径策略误伤 ${name}`);
-}
-if (failures.length > 0) {
-  process.stderr.write(`${failures.join("\n")}\n`);
-  process.exitCode = 1;
-} else {
-  process.stdout.write("实现项目路径策略压力场景验证通过\n");
-}

package/template/scripts/verify-lifecycle-context-query-scenarios

@@ -1,88 +0,0 @@
-#!/usr/bin/env node
-import assert from "node:assert/strict";
-import { readFileSync } from "node:fs";
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { queryLifecycleContext } from "./lib/lifecycle-context-query.mjs";
-
-const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-
-const query = {
-  mode: "route",
-  stageId: "stage.plan",
-  workUnitId: "work-unit.plan-requirements",
-  include: ["grill_exit"],
-};
-const first = queryLifecycleContext(query);
-const second = queryLifecycleContext(query);
-
-assert.deepEqual(first, second, "同一查询必须产生确定性结果");
-// 合并调用须保留原来三次查询的路由、阶段和技能信息。
-const modeOnly = queryLifecycleContext({ mode: query.mode });
-const stageOnly = queryLifecycleContext({ stageId: query.stageId });
-const unitOnly = queryLifecycleContext({ workUnitId: query.workUnitId });
-assert.deepEqual(first.execution.mode, modeOnly.execution.mode);
-for (const key of ["stage", "gates", "artifacts", "evidence"]) {
-  assert.deepEqual(first.lifecycle[key], stageOnly.lifecycle[key]);
-}
-assert.deepEqual(first.lifecycle.work_unit, unitOnly.lifecycle.work_unit);
-assert.deepEqual(first.execution.work_unit_route, unitOnly.execution.work_unit_route);
-assert.deepEqual(first.execution.transition, unitOnly.execution.transition);
-assert.deepEqual(first.skills, unitOnly.skills);
-const efficient = queryLifecycleContext({ ...query, include: ["grill_exit", "execution_efficiency"] });
-assert.deepEqual(efficient.lifecycle, first.lifecycle, "执行成本策略不得改变阶段门禁");
-assert.deepEqual(efficient.skills, first.skills);
-assert.deepEqual(efficient.execution.transition, first.execution.transition);
-assert.equal(efficient.execution.selected.execution_efficiency.verification.skip_triggered_gates, "forbidden");
-assert.equal("execution_efficiency" in first.execution.selected, false, "成本策略仍按需加载");
-assert.equal(first.query.mode, "route");
-assert.equal(first.lifecycle.stage.id, "stage.plan");
-assert.ok(first.lifecycle.gates.every((gate) => gate.stage === "stage.plan"));
-assert.ok(first.lifecycle.artifacts.every((artifact) => artifact.stage === "stage.plan"));
-assert.equal(first.lifecycle.work_unit.id, "work-unit.plan-requirements");
-assert.equal(first.execution.mode, "read_only");
-assert.equal(first.execution.work_unit_route.primary_skill, "yss-product-lifecycle");
-assert.ok(first.execution.selected.grill_exit.required.includes("frontier_empty"));
-assert.equal("review_input" in first.execution.selected, false, "不得返回未请求的合同子树");
-assert.ok(first.skills.some((skill) => skill.id === "grilling"));
-assert.throws(() => queryLifecycleContext({ stageId: "stage.discovery" }), /未知阶段/);
-assert.throws(() => queryLifecycleContext({ workUnitId: "work-unit.discovery-requirements" }), /未知工作单元/);
-assert.match(first.sources.lifecycle_registry.semantic_sha256, /^[0-9a-f]{64}$/);
-assert.match(first.sources.orchestration_contract.sha256, /^[0-9a-f]{64}$/);
-
-for (const invalid of [
-  { mode: "invalid" },
-  { stageId: "stage.missing" },
-  { workUnitId: "work-unit.missing" },
-  { include: ["missing_contract_section"] },
-]) {
-  assert.throws(() => queryLifecycleContext(invalid), /未知|至少提供/);
-}
-
-const cli = spawnSync("node", [
-  "scripts/query-lifecycle-context",
-  "--mode", "route",
-  "--stage", "stage.plan",
-  "--work-unit", "work-unit.plan-requirements",
-  "--include", "grill_exit",
-], { cwd: ROOT, encoding: "utf8" });
-assert.equal(cli.status, 0, cli.stderr);
-assert.deepEqual(JSON.parse(cli.stdout), first, "CLI 输出必须等于库函数的规范投影");
-
-const skillPath = path.join(ROOT, ".agents/skills/yss-product-lifecycle/SKILL.md");
-const skill = readFileSync(skillPath, "utf8");
-assert.ok(Buffer.byteLength(skill) <= 8192, "生命周期入口 Skill 必须保持在 8KB 软预算内");
-assert.equal(skill.includes("| 主阶段 |"), false, "入口 Skill 不得复制完整阶段表");
-for (const marker of [
-  "docs/process/lifecycle-registry.yaml",
-  "references/orchestration-contract.yaml",
-  "docs/agents/yss-skill-registry.yaml",
-  "scripts/query-lifecycle-context",
-  "### 仓库身份",
-  "### 流转与实现",
-  "### 用户决定",
-  "### 外部副作用与 Git",
-]) assert.match(skill, new RegExp(marker.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")));
-
-process.stdout.write("生命周期按需上下文查询场景验证通过\n");

package/template/scripts/verify-lifecycle-scenarios

@@ -1,4 +0,0 @@
-#!/usr/bin/env node
-import { runScenario } from "./lib/scenario-checks.mjs";
-// ROUTE_REGISTRY_IDS keeps the lifecycle-to-router stable-ID check discoverable.
-try { runScenario("lifecycle"); } catch (error) { process.stderr.write(`${error.message}\n`); process.exitCode = 1; }