create-yss-spec 3.3.3 → 3.3.4

package/README.md

@@ -2,11 +2,11 @@
 
 用于初始化、接管已有项目并持续同步 `yss-spec-project-template` 研发管理资产的 npm CLI。
 
-源码候选版本：`3.3.3`。当前固定模板为 `yss-spec-project-template@70ed7b6b1824067a932371dbeb45c9541d08e375`；CLI 运行时不会拉取模板仓库。`npm create yss-spec@latest` 获取的是实际已发布 npm 包，发布版本请以 `npm view create-yss-spec version` 为准。
+源码候选版本：`3.3.4`。当前固定模板为 `yss-spec-project-template@46b29114de53cf4d8d92123006b211d7b3a5a142`；CLI 运行时不会拉取模板仓库。`npm create yss-spec@latest` 获取的是实际已发布 npm 包，发布版本请以 `npm view create-yss-spec version` 为准。
 
 ## 本版模板能力
 
-本版退役 Claude、Qoder、Trae 运行时投影，保留 `.agents`、Codex、Cursor 与 Pi 的共享 Skill 分发；同时纳入新的模板 CI、兼容矩阵和发布前验证合同。CLI 继续保留项目实例边界、事务回滚与安全清理语义。版本升级只完成 GitHub 源码交付，npm 发布状态仍以 registry 为准。
+本版修复生成型 Skill 锁在 `init`、`attach`、`sync` 最终校验前未自动重建的问题。CLI 会在同一事务内刷新 `skills-lock.json`，再运行项目实例校验；刷新或校验失败仍恢复同步前状态。版本升级只完成 GitHub 源码交付，npm 发布状态仍以 registry 为准。
 
 ## 快速开始
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-yss-spec",
-  "version": "3.3.3",
+  "version": "3.3.4",
   "description": "Initialize a YSS spec project template repository",
   "main": "src/api/index.js",
   "repository": {

package/src/api/_sync-service.js

@@ -14,7 +14,10 @@ const { buildLegacyMigrationPlan } = require("../template/migration-runtime");
 const { classifyRemovedFiles } = require("../template/prune-planner");
 const { decorateMetadataOwnership } = require("../template/ownership-metadata");
 const { decorateMetadataLifecycle } = require("../template/lifecycle-metadata");
-const { verifyGeneratedProjectInstance } = require("../template/verification-runtime");
+const {
+  refreshGeneratedProjectInstance,
+  verifyGeneratedProjectInstance,
+} = require("../template/verification-runtime");
 const {
   PACKAGE_ROOT,
   PACKAGE_MANIFEST,
@@ -172,6 +175,7 @@ function applySyncContext(context, { force = false, prune = false } = {}) {
       ...affectedPathsForManagedOperations(managedToApply),
       ...affectedPathsForMigration(migrationPlan),
       ...syncPlan.pruned,
+      "skills-lock.json",
       TEMPLATE_METADATA_FILENAME,
     ],
     execute: (transaction) => {
@@ -183,6 +187,7 @@ function applySyncContext(context, { force = false, prune = false } = {}) {
         transaction.remove(targetPath(targetDir, relativePath));
       }
       verifyGeneratedSyncInstance(targetDir);
+      refreshGeneratedProjectInstance(targetDir);
       verifyGeneratedProjectInstance(targetDir);
       const nextMetadata = decorateMetadataLifecycle(
         decorateMetadataOwnership(buildNextSyncMetadata(metadata, syncPlan)),

package/src/commands/attach.js

@@ -23,7 +23,10 @@ const {
   buildMetadata,
   writeTemplateMetadata,
 } = require("../template/instance-runtime");
-const { verifyGeneratedAttach } = require("../template/verification-runtime");
+const {
+  refreshGeneratedProjectInstance,
+  verifyGeneratedAttach,
+} = require("../template/verification-runtime");
 
 function assertRequiredOptions(options) {
   if (!options.projectName) {
@@ -243,6 +246,7 @@ function runAttach(argv = []) {
     affectedPaths: [
       ...affectedPathsForManagedOperations(managedToApply),
       ...affectedPathsForMigration(migrationPlan),
+      "skills-lock.json",
       TEMPLATE_METADATA_FILENAME,
     ],
     execute: (transaction) => {
@@ -250,6 +254,7 @@ function runAttach(argv = []) {
         applyManagedOperation(operation, transaction);
       }
       applyMigrationOperations(migrationPlan, transaction);
+      refreshGeneratedProjectInstance(targetDir);
       verifyGeneratedAttach(targetDir);
       writeTemplateMetadata(
         targetDir,

package/src/commands/init.js

@@ -27,6 +27,7 @@ const {
 } = require("../template/ownership-runtime");
 const {
   initializeGitRepository,
+  refreshGeneratedProjectInstance,
   verifyGeneratedInit,
 } = require("../template/verification-runtime");
 
@@ -162,12 +163,14 @@ async function runInit(argv = []) {
     operation: "init",
     affectedPaths: [
       ...desiredOperations.map((operation) => operation.relativePath),
+      "skills-lock.json",
       TEMPLATE_METADATA_FILENAME,
     ],
     execute: (transaction) => {
       for (const operation of desiredOperations) {
         applyManagedOperation(operation, transaction);
       }
+      refreshGeneratedProjectInstance(targetDir);
       verifyGeneratedInit(targetDir);
       writeTemplateMetadata(
         targetDir,

package/src/template/verification-runtime.js

@@ -134,6 +134,10 @@ function verifyGeneratedAttach(targetDir) {
   runTemplateVerification(targetDir, "scripts/verify-project-instance", []);
 }
 
+function refreshGeneratedProjectInstance(targetDir) {
+  runTemplateVerification(targetDir, "scripts/update-skill-lock", []);
+}
+
 module.exports = {
   verificationEnvironment,
   initializeGitRepository,
@@ -142,5 +146,6 @@ module.exports = {
   verifyGeneratedInstance,
   verifyGeneratedInit,
   verifyGeneratedAttach,
+  refreshGeneratedProjectInstance,
   verifyGeneratedProjectInstance: verifyGeneratedAttach,
 };

package/template.snapshot.json

@@ -3,8 +3,8 @@
   "templateName": "yss-spec-project-template",
   "templateSource": "github:iloveZzz/yss-spec-project-template",
   "templateRepository": "https://github.com/iloveZzz/yss-spec-project-template.git",
-  "requestedRef": "46b29114de53cf4d8d92123006b211d7b3a5a142",
-  "templateCommit": "46b29114de53cf4d8d92123006b211d7b3a5a142",
+  "requestedRef": "3e15bf3920520c1402e58ef78f303dc0353a1c99",
+  "templateCommit": "3e15bf3920520c1402e58ef78f303dc0353a1c99",
   "manifestHash": "d194bb318a47c9c53b04292e97805c563ef7b296c2ca9b507cca498be7f52afe",
   "encodedPaths": {
     ".codex/skills/data-analytics/.gitignore": ".codex/skills/data-analytics/__yss_dotfile__.gitignore",
@@ -13,5 +13,5 @@
     ".gitignore": "__yss_dotfile__.gitignore"
   },
   "snapshotHash": "6fe2b0f7444fdf19d3d23eca1c334195c551de01349d79ff0a1e468a3bb973f0",
-  "generatedAt": "2026-09-10T10:12:58.943Z"
+  "generatedAt": "2026-09-10T11:14:18.595Z"
 }