create-yss-spec 3.3.4 → 3.3.7

package/template/.cursor/skills/yss-stage-decision/references/validation-rules.md

@@ -2,8 +2,8 @@
 
 验证分为结构、引用和语义三层：
 
-1. **结构**：Schema 版本、稳定 ID、状态枚举、必填字段、条件字段和证据格式。
-2. **引用**：上下文端点、场景、不变量、`context_snapshot.term_refs` 和下游资产引用必须可解析；`context_ref` 必须精确为根 `CONTEXT.md`，双摘要必须与当前内容一致。
+1. **结构**：Schema 版本、全局稳定 ID 唯一性、状态枚举、必填字段、条件字段和非空证据格式。
+2. **引用**：上下文端点、规则、场景、不变量、决定、测试 seam、`context_snapshot.term_refs` 和下游 mapping 来源必须可解析；`context_ref` 必须精确为根 `CONTEXT.md`，双摘要必须与当前内容一致。
 3. **语义**：禁止关系自环、未知上下文、未批准 Shared Kernel、未解释的语义/技术方向差异、职责重叠、无责任人的不变量和跨上下文直接共享实体。
 
 以下情况必须 `blocked`：关键规则所有权未知、关键术语冲突、上下文边界未定、关键失败场景缺失、事件语义无法解释、领域专家确认缺失。

package/template/.cursor/skills/yss-stage-decision/scripts/migrate-contract-v3.mjs

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import process from "node:process";
+import { parseArgs } from "node:util";
+import { parseDocument } from "../../../../scripts/vendor/yaml.mjs";
+
+function blocked(message) {
+  process.stderr.write(`${JSON.stringify({ result: "blocked", reason_code: "migration-required", errors: [message] }, null, 2)}\n`);
+  process.exitCode = 1;
+}
+
+function parse(source, label) {
+  const document = parseDocument(source, { maxAliasCount: 0, uniqueKeys: true });
+  if (document.errors.length) throw new TypeError(`${label} YAML 非法: ${document.errors[0].message}`);
+  const value = document.toJS({ maxAliasCount: 0 });
+  if (!value || typeof value !== "object" || Array.isArray(value)) throw new TypeError(`${label} 必须是对象`);
+  return value;
+}
+
+function nextVersion(value) {
+  const matched = String(value ?? "v2").match(/^v(\d+)$/);
+  return `v${Math.max(3, Number(matched?.[1] ?? 2) + 1)}`;
+}
+
+function token(value, fallback) {
+  const normalized = String(value ?? "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "");
+  return normalized || fallback;
+}
+
+function resetApproval(value, version) {
+  value.status = "draft";
+  value.approval = {
+    approval_ref: "migration-required",
+    approver: "unassigned",
+    persisted_ref: value.approval?.persisted_ref || "migration-output-not-persisted",
+    current_version: version
+  };
+}
+
+function migrateDomain(input) {
+  const output = structuredClone(input);
+  if (output.schema_version !== 2) throw new TypeError("Domain Strategy 迁移仅支持 schema_version: 2");
+  const evidence = Array.isArray(output.evidence_refs) && output.evidence_refs.length ? output.evidence_refs : ["migration-required:evidence"];
+  const rules = [];
+  const statementToId = new Map();
+  for (const [scenarioIndex, scenario] of (output.scenarios ?? []).entries()) {
+    scenario.rule_refs = [];
+    for (const [ruleIndex, statement] of (scenario.rules ?? []).entries()) {
+      let ruleId = statementToId.get(statement);
+      if (!ruleId) {
+        ruleId = `rule.${token(scenario.scenario_id?.replace(/^scenario\./, ""), `scenario-${scenarioIndex + 1}`)}-${ruleIndex + 1}`;
+        statementToId.set(statement, ruleId);
+        rules.push({ rule_id: ruleId, statement, responsible_context: scenario.responsible_context, status: "confirmed", evidence_refs: [...evidence] });
+      }
+      scenario.rule_refs.push(ruleId);
+    }
+    scenario.critical = false;
+    scenario.success_results = Array.isArray(scenario.events) && scenario.events.length ? [...scenario.events] : ["migration-required: 补充成功结果"];
+    scenario.evidence_refs = [...evidence];
+  }
+  for (const [index, invariant] of (output.invariants ?? []).entries()) {
+    let ruleId = statementToId.get(invariant.statement);
+    if (!ruleId) {
+      ruleId = `rule.${token(invariant.invariant_id?.replace(/^invariant\./, ""), `invariant-${index + 1}`)}`;
+      statementToId.set(invariant.statement, ruleId);
+      rules.push({ rule_id: ruleId, statement: invariant.statement, responsible_context: invariant.responsible_context, status: "confirmed", evidence_refs: [...evidence] });
+    }
+    invariant.rule_ref = ruleId;
+    invariant.evidence_refs = [...evidence];
+  }
+  const sourceRefs = [...(output.scenarios ?? []).map((item) => item.scenario_id), ...(output.invariants ?? []).map((item) => item.invariant_id)].filter(Boolean);
+  output.downstream_mapping = (output.downstream_mapping ?? []).map((mapping, index) => {
+    const impacts = Array.isArray(mapping.impacts) ? mapping.impacts : ["migration-required"];
+    const isFrontend = impacts.some((item) => /frontend|ui|visual/i.test(item));
+    return {
+      mapping_id: `mapping.${token(mapping.domain_change, `migrated-${index + 1}`)}`,
+      source_refs: sourceRefs.length ? sourceRefs : [rules[0]?.rule_id].filter(Boolean),
+      consumer_capability: isFrontend ? "frontend-engineering-design" : "backend-technical-design",
+      impacts,
+      propagation: mapping.propagation,
+      reapproval_condition: mapping.reapproval_condition,
+      evidence_refs: [...evidence]
+    };
+  });
+  output.schema_version = 3;
+  output.traceability_version = 1;
+  output.rule_catalog = rules;
+  output.domain_version = nextVersion(output.domain_version);
+  resetApproval(output, output.domain_version);
+  return output;
+}
+
+async function migrateStage(input, root) {
+  const output = structuredClone(input);
+  if (output.schema_version !== 2) throw new TypeError("Stage Decision 迁移仅支持 schema_version: 2");
+  const evidence = Array.isArray(output.evidence_refs) && output.evidence_refs.length ? output.evidence_refs : ["migration-required:evidence"];
+  let sourceRefs = [];
+  try {
+    const domainSource = await readFile(resolve(root, output.domain_strategy_ref.persisted_ref), "utf8");
+    const domain = parse(domainSource, "Domain Strategy");
+    sourceRefs = [...(domain.rule_catalog ?? []).map((item) => item.rule_id), ...(domain.scenarios ?? []).map((item) => item.scenario_id), ...(domain.invariants ?? []).map((item) => item.invariant_id)].filter(Boolean);
+  } catch {
+    sourceRefs = [];
+  }
+  const prefixes = { success_criteria: "success-criterion", test_seams: "test-seam", confirmed_decisions: "decision", assumptions: "assumption", constraints: "constraint" };
+  for (const [field, prefix] of Object.entries(prefixes)) {
+    output[field] = (output[field] ?? []).map((statement, index) => ({
+      id: `${prefix}.${token(statement, `migrated-${index + 1}`)}`,
+      statement,
+      source_refs: sourceRefs.slice(0, 1),
+      evidence_refs: [...evidence],
+      status: "candidate"
+    }));
+  }
+  output.downstream_mapping = (output.downstream_mapping ?? []).map((mapping, index) => ({
+    mapping_id: `mapping.${token(mapping.domain_change, `migrated-${index + 1}`)}`,
+    source_refs: sourceRefs.slice(0, 1),
+    consumer_capability: /frontend|ui/i.test(mapping.consumer ?? "") ? "frontend-engineering-design" : /coord/i.test(mapping.consumer ?? "") ? "delivery-coordination" : "backend-technical-design",
+    propagation: mapping.propagation,
+    reapproval_condition: mapping.reapproval_condition,
+    evidence_refs: [...evidence]
+  }));
+  output.schema_version = 3;
+  output.package_version = nextVersion(output.package_version);
+  resetApproval(output, output.package_version);
+  return output;
+}
+
+try {
+  const { values, positionals } = parseArgs({
+    options: { kind: { type: "string" }, root: { type: "string", default: process.cwd() } },
+    allowPositionals: true,
+    strict: true
+  });
+  const file = positionals[0];
+  if (!file || !["domain-strategy", "stage-decision"].includes(values.kind)) throw new TypeError("用法: migrate-contract-v3.mjs <contract.yaml> --kind <domain-strategy|stage-decision> [--root <project-root>]");
+  const value = parse(await readFile(file, "utf8"), "合同");
+  const migrated = values.kind === "domain-strategy" ? migrateDomain(value) : await migrateStage(value, values.root);
+  process.stdout.write(`${JSON.stringify(migrated, null, 2)}\n`);
+} catch (error) {
+  blocked(error.message);
+}

package/template/.cursor/skills/yss-stage-decision/scripts/validate-domain-strategy.mjs

@@ -18,6 +18,7 @@ const idPatterns = {
   concept_id: /^domain-concept\.[a-z0-9][a-z0-9-]*$/,
   invariant_id: /^invariant\.[a-z0-9][a-z0-9-]*$/
 };
+const consumerCapabilities = new Set(["backend-technical-design", "frontend-engineering-design", "delivery-coordination"]);
 const relationshipPatterns = new Set(["Partnership", "Customer/Supplier", "Conformist", "Anti-Corruption Layer", "Open Host Service", "Published Language", "Shared Kernel", "Separate Ways"]);
 
 function fail(errors) {
@@ -53,7 +54,7 @@ function validate(data, contextRoot) {
   if (!data || typeof data !== "object" || Array.isArray(data)) return ["合同必须是对象"];
   if (data.schema_version === 1) return ["migration-required: domain strategy v1 必须迁移到 v2 context_snapshot"];
   for (const field of required) requireField(data, field, "root", errors);
-  if (data.schema_version !== 2) errors.push("schema_version 必须为 2");
+  if (![2, 3].includes(data.schema_version)) errors.push("schema_version 不受支持；支持版本: 2, 3；新交付请迁移到 3");
   if (!idPatterns.domain_strategy_id.test(String(data.domain_strategy_id ?? ""))) errors.push("domain_strategy_id 格式非法");
   if (!/^v[0-9]+$/.test(String(data.domain_version ?? ""))) errors.push("domain_version 必须形如 v1");
   if (!["draft", "ready-for-human", "approved", "stale", "blocked"].includes(data.status)) errors.push("status 非法");
@@ -71,6 +72,23 @@ function validate(data, contextRoot) {
     if (context?.subdomain_type && !["Core Domain", "Supporting Subdomain", "Generic Subdomain"].includes(context.subdomain_type)) errors.push(`${path}.subdomain_type 非法`);
   }
 
+  const sourceIds = new Set();
+  if (data.schema_version === 3) {
+    if (data.traceability_version !== 1) errors.push("traceability_version 必须为 1");
+    requireArray(data, "rule_catalog", "root", errors, 1, "object");
+    const rules = list(data.rule_catalog) ? data.rule_catalog : [];
+    unique(rules.map((item) => item?.rule_id).filter(Boolean), "rule_id", errors);
+    for (const [index, rule] of rules.entries()) {
+      const path = `rule_catalog[${index}]`;
+      for (const field of ["rule_id", "statement", "responsible_context", "status"]) requireString(rule ?? {}, field, path, errors);
+      requireArray(rule ?? {}, "evidence_refs", path, errors, 1);
+      if (!/^rule\.[a-z0-9][a-z0-9-]*$/.test(String(rule?.rule_id ?? ""))) errors.push(`${path}.rule_id 格式非法`);
+      if (rule?.responsible_context && !contextIds.includes(rule.responsible_context)) errors.push(`${path}.responsible_context 未声明`);
+      if (rule?.status !== "confirmed") errors.push(`${path}.status 必须为 confirmed`);
+      if (rule?.rule_id) sourceIds.add(rule.rule_id);
+    }
+  }
+
   requireArray(data, "subdomains", "root", errors, 1, "object");
   const subdomains = list(data.subdomains) ? data.subdomains : [];
   unique(subdomains.map((item) => item?.subdomain_id).filter(Boolean), "subdomain_id", errors);
@@ -110,6 +128,14 @@ function validate(data, contextRoot) {
     if (scenario?.scenario_id && !idPatterns.scenario_id.test(scenario.scenario_id)) errors.push(`${path}.scenario_id 格式非法`);
     if (scenario?.responsible_context && !contextIds.includes(scenario.responsible_context)) errors.push(`${path}.responsible_context 未声明`);
     for (const consumer of scenario?.consumers ?? []) if (!contextIds.includes(consumer)) errors.push(`${path}.consumers 引用了未声明上下文: ${consumer}`);
+    if (scenario?.scenario_id) sourceIds.add(scenario.scenario_id);
+    if (data.schema_version === 3) {
+      requireArray(scenario ?? {}, "rule_refs", path, errors, 1);
+      requireArray(scenario ?? {}, "success_results", path, errors, 1);
+      requireArray(scenario ?? {}, "evidence_refs", path, errors, 1);
+      if (typeof scenario?.critical !== "boolean") errors.push(`${path}.critical 必须是 boolean`);
+      for (const reference of scenario?.rule_refs ?? []) if (!sourceIds.has(reference)) errors.push(`${path}.rule_refs 引用了未声明规则: ${reference}`);
+    }
   }
 
   const concepts = list(data.concept_candidates) ? data.concept_candidates : [];
@@ -132,6 +158,12 @@ function validate(data, contextRoot) {
     if (invariant?.invariant_id && !idPatterns.invariant_id.test(invariant.invariant_id)) errors.push(`${path}.invariant_id 格式非法`);
     if (invariant?.responsible_context && !contextIds.includes(invariant.responsible_context)) errors.push(`${path}.responsible_context 未声明`);
     for (const reference of invariant?.scenario_refs ?? []) if (!scenarioIds.includes(reference)) errors.push(`${path}.scenario_refs 引用了未声明场景: ${reference}`);
+    if (invariant?.invariant_id) sourceIds.add(invariant.invariant_id);
+    if (data.schema_version === 3) {
+      requireString(invariant ?? {}, "rule_ref", path, errors);
+      requireArray(invariant ?? {}, "evidence_refs", path, errors, 1);
+      if (invariant?.rule_ref && !sourceIds.has(invariant.rule_ref)) errors.push(`${path}.rule_ref 引用了未声明规则: ${invariant.rule_ref}`);
+    }
   }
 
   try {
@@ -141,11 +173,21 @@ function validate(data, contextRoot) {
   }
   requireArray(data, "evidence_refs", "root", errors, 1);
   const mappings = list(data.downstream_mapping) ? data.downstream_mapping : [];
+  if (data.schema_version === 3) unique(mappings.map((item) => item?.mapping_id).filter(Boolean), "mapping_id", errors);
   for (const [index, mapping] of mappings.entries()) {
     const path = `downstream_mapping[${index}]`;
-    for (const field of ["domain_change", "propagation", "reapproval_condition"]) requireString(mapping ?? {}, field, path, errors);
-    requireArray(mapping ?? {}, "impacts", path, errors, 1);
-    if (mapping?.propagation && !["direct", "transitive", "stale"].includes(mapping.propagation)) errors.push(`${path}.propagation 非法`);
+    if (data.schema_version === 3) {
+      for (const field of ["mapping_id", "consumer_capability", "propagation", "reapproval_condition"]) requireString(mapping ?? {}, field, path, errors);
+      for (const field of ["source_refs", "impacts", "evidence_refs"]) requireArray(mapping ?? {}, field, path, errors, 1);
+      if (!/^mapping\.[a-z0-9][a-z0-9-]*$/.test(String(mapping?.mapping_id ?? ""))) errors.push(`${path}.mapping_id 格式非法`);
+      if (mapping?.consumer_capability && !consumerCapabilities.has(mapping.consumer_capability)) errors.push(`${path}.consumer_capability 非法`);
+      for (const reference of mapping?.source_refs ?? []) if (!sourceIds.has(reference)) errors.push(`${path}.source_refs 引用了未声明来源: ${reference}`);
+      if (mapping?.propagation && !["direct", "transitive", "not-applicable", "stale"].includes(mapping.propagation)) errors.push(`${path}.propagation 非法`);
+    } else {
+      for (const field of ["domain_change", "propagation", "reapproval_condition"]) requireString(mapping ?? {}, field, path, errors);
+      requireArray(mapping ?? {}, "impacts", path, errors, 1);
+      if (mapping?.propagation && !["direct", "transitive", "stale"].includes(mapping.propagation)) errors.push(`${path}.propagation 非法`);
+    }
   }
   const approval = data.approval ?? {};
   for (const field of ["approval_ref", "approver", "persisted_ref", "current_version"]) requireString(approval, field, "approval", errors);

package/template/.cursor/skills/yss-stage-decision/scripts/validate-stage-decision-package.mjs

@@ -10,6 +10,7 @@ import { verifyContextSnapshot } from "../../../../scripts/lib/context-contract.
 
 const required = ["schema_version", "stage_decision_id", "package_version", "status", "problem_statement", "target_users", "mvp", "non_goals", "success_criteria", "test_seams", "confirmed_decisions", "assumptions", "constraints", "unresolved_items", "context_snapshot", "domain_strategy_ref", "impact_assessment", "downstream_mapping", "evidence_refs", "approval"];
 const idPattern = /^stage-decision\.[a-z0-9][a-z0-9-]*$/;
+const consumerCapabilities = new Set(["backend-technical-design", "frontend-engineering-design", "delivery-coordination"]);
 
 function fail(errors) {
   process.stderr.write(`${JSON.stringify({ result: "blocked", errors }, null, 2)}\n`);
@@ -18,7 +19,8 @@ function fail(errors) {
 function nonEmpty(value) { return typeof value === "string" && value.trim().length > 0; }
 function requireField(object, field, path, errors) { if (!(field in object) || object[field] === null || object[field] === undefined) errors.push(`${path}.${field} 缺失`); }
 function requireString(object, field, path, errors) { requireField(object, field, path, errors); if (field in object && !nonEmpty(object[field])) errors.push(`${path}.${field} 必须是非空字符串`); }
-function requireArray(object, field, path, errors, min = 0) { requireField(object, field, path, errors); if (field in object && (!Array.isArray(object[field]) || object[field].length < min)) errors.push(`${path}.${field} 必须是至少 ${min} 项的数组`); if (field in object && Array.isArray(object[field])) object[field].forEach((item, index) => { if (!nonEmpty(item)) errors.push(`${path}.${field}[${index}] 必须是非空字符串`); }); }
+function requireArray(object, field, path, errors, min = 0, itemKind = "string") { requireField(object, field, path, errors); if (field in object && (!Array.isArray(object[field]) || object[field].length < min)) errors.push(`${path}.${field} 必须是至少 ${min} 项的数组`); if (field in object && Array.isArray(object[field]) && itemKind === "string") object[field].forEach((item, index) => { if (!nonEmpty(item)) errors.push(`${path}.${field}[${index}] 必须是非空字符串`); }); }
+function unique(items, label, errors) { const seen = new Set(); for (const item of items) { if (seen.has(item)) errors.push(`${label} 重复: ${item}`); seen.add(item); } }
 function canonical(value) { if (Array.isArray(value)) return value.map(canonical); if (value && typeof value === "object") return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonical(value[key])])); return value; }
 function digest(value) { return `sha256:${createHash("sha256").update(JSON.stringify(canonical(value))).digest("hex")}`; }
 
@@ -27,12 +29,13 @@ async function validate(data, contextRoot) {
   if (!data || typeof data !== "object" || Array.isArray(data)) return ["合同必须是对象"];
   if (data.schema_version === 1) return ["migration-required: stage decision package v1 必须迁移到 v2 context_snapshot"];
   for (const field of required) requireField(data, field, "root", errors);
-  if (data.schema_version !== 2) errors.push("schema_version 必须为 2");
+  if (![2, 3].includes(data.schema_version)) errors.push("schema_version 不受支持；支持版本: 2, 3；新交付请迁移到 3");
   if (!idPattern.test(String(data.stage_decision_id ?? ""))) errors.push("stage_decision_id 格式非法");
   if (!/^v[0-9]+$/.test(String(data.package_version ?? ""))) errors.push("package_version 必须形如 v1");
   if (!["draft", "ready-for-human", "approved", "stale", "blocked"].includes(data.status)) errors.push("status 非法");
   for (const field of ["problem_statement"]) requireString(data, field, "root", errors);
-  for (const field of ["target_users", "mvp", "non_goals", "success_criteria", "test_seams", "confirmed_decisions", "assumptions", "constraints", "evidence_refs"]) requireArray(data, field, "root", errors, ["target_users", "mvp", "success_criteria", "test_seams", "confirmed_decisions", "evidence_refs"].includes(field) ? 1 : 0);
+  for (const field of ["target_users", "mvp", "non_goals", "evidence_refs"]) requireArray(data, field, "root", errors, ["target_users", "mvp", "evidence_refs"].includes(field) ? 1 : 0);
+  for (const field of ["success_criteria", "test_seams", "confirmed_decisions", "assumptions", "constraints"]) requireArray(data, field, "root", errors, ["success_criteria", "test_seams", "confirmed_decisions"].includes(field) ? 1 : 0, data.schema_version === 3 ? "object" : "string");
 
   const unresolved = Array.isArray(data.unresolved_items) ? data.unresolved_items : [];
   for (const [index, item] of unresolved.entries()) {
@@ -56,9 +59,38 @@ async function validate(data, contextRoot) {
         if (strategy.domain_version !== domainRef.domain_version) errors.push("domain_strategy_ref.domain_version 与实际文件不一致");
         if (strategy.status !== domainRef.status) errors.push("domain_strategy_ref.status 与实际文件不一致");
         if (domainRef.digest !== digest(strategy)) errors.push("domain_strategy_ref.digest 与实际领域战略内容不一致");
+        if (data.schema_version === 3 && strategy.schema_version !== 3) errors.push("Stage Decision v3 必须引用 Domain Strategy v3");
       }
     } catch (error) { errors.push(`domain_strategy_ref.persisted_ref 无法读取: ${error.message}`); }
   }
+
+  if (data.schema_version === 3) {
+    const sourceIds = new Set([
+      ...(strategy?.rule_catalog ?? []).map((item) => item?.rule_id),
+      ...(strategy?.scenarios ?? []).map((item) => item?.scenario_id),
+      ...(strategy?.invariants ?? []).map((item) => item?.invariant_id)
+    ].filter(Boolean));
+    const recordFields = {
+      success_criteria: "success-criterion",
+      test_seams: "test-seam",
+      confirmed_decisions: "decision",
+      assumptions: "assumption",
+      constraints: "constraint"
+    };
+    const recordIds = [];
+    for (const [field, prefix] of Object.entries(recordFields)) {
+      for (const [index, record] of (Array.isArray(data[field]) ? data[field] : []).entries()) {
+        const path = `${field}[${index}]`;
+        for (const name of ["id", "statement"]) requireString(record ?? {}, name, path, errors);
+        requireArray(record ?? {}, "evidence_refs", path, errors, 1);
+        if (!new RegExp(`^${prefix}\\.[a-z0-9][a-z0-9-]*$`).test(String(record?.id ?? ""))) errors.push(`${path}.id 格式非法`);
+        for (const reference of record?.source_refs ?? []) if (!sourceIds.has(reference)) errors.push(`${path}.source_refs 未在领域战略中声明: ${reference}`);
+        if (record?.status && !["confirmed", "candidate", "stale"].includes(record.status)) errors.push(`${path}.status 非法`);
+        if (record?.id) recordIds.push(record.id);
+      }
+    }
+    unique(recordIds, "stage record id", errors);
+  }
   try {
     const contextIds = Array.isArray(strategy?.contexts) ? strategy.contexts.map((item) => item?.context_id).filter(Boolean) : [];
     verifyContextSnapshot(data.context_snapshot, { root: contextRoot, allowedContextIds: contextIds });
@@ -73,9 +105,21 @@ async function validate(data, contextRoot) {
   }
   const mappings = Array.isArray(data.downstream_mapping) ? data.downstream_mapping : [];
   if (mappings.length < 1) errors.push("downstream_mapping 至少需要一项");
+  if (data.schema_version === 3) unique(mappings.map((item) => item?.mapping_id).filter(Boolean), "mapping_id", errors);
+  const strategySourceIds = new Set([
+    ...(strategy?.rule_catalog ?? []).map((item) => item?.rule_id),
+    ...(strategy?.scenarios ?? []).map((item) => item?.scenario_id),
+    ...(strategy?.invariants ?? []).map((item) => item?.invariant_id)
+  ].filter(Boolean));
   for (const [index, mapping] of mappings.entries()) {
     const path = `downstream_mapping[${index}]`;
-    for (const field of ["domain_change", "consumer", "propagation", "reapproval_condition"]) requireString(mapping ?? {}, field, path, errors);
+    if (data.schema_version === 3) {
+      for (const field of ["mapping_id", "consumer_capability", "propagation", "reapproval_condition"]) requireString(mapping ?? {}, field, path, errors);
+      requireArray(mapping ?? {}, "source_refs", path, errors, 1);
+      requireArray(mapping ?? {}, "evidence_refs", path, errors, 1);
+      if (mapping?.consumer_capability && !consumerCapabilities.has(mapping.consumer_capability)) errors.push(`${path}.consumer_capability 非法`);
+      for (const reference of mapping?.source_refs ?? []) if (!strategySourceIds.has(reference)) errors.push(`${path}.source_refs 未在领域战略中声明: ${reference}`);
+    } else for (const field of ["domain_change", "consumer", "propagation", "reapproval_condition"]) requireString(mapping ?? {}, field, path, errors);
     if (mapping?.propagation && !["direct", "transitive", "not-applicable", "stale"].includes(mapping.propagation)) errors.push(`${path}.propagation 非法`);
   }
   const approval = data.approval ?? {};

package/template/.cursor/skills/yss-stage-decision/tests/fixtures/valid-stage-decision-package.yaml

@@ -1,16 +1,41 @@
-schema_version: 2
+schema_version: 3
 stage_decision_id: stage-decision.supplier-admission
-package_version: v2
+package_version: v3
 status: approved
 problem_statement: 合规准入决定分散，采购无法稳定判断当前有效资格。
 target_users: [采购专员、合规专员]
 mvp: [提交供应商申请、合规准入决定、采购侧有效性校验]
 non_goals: [供应商结算、采购付款、通用工作流平台]
-success_criteria: [新采购订单 100% 校验当前有效准入决定]
-test_seams: [supplier-application-submit, admission-validity-check]
-confirmed_decisions: [ComplianceReview 拥有准入规则语义，ProcurementExecution 只消费决定]
-assumptions: [供应商已有唯一 subject_ref]
-constraints: [保留现有采购订单流程]
+success_criteria:
+  - id: success-criterion.current-admission
+    statement: 新采购订单 100% 校验当前有效准入决定。
+    source_refs: [rule.current-admission-required]
+    evidence_refs: [evidence.discovery.compliance]
+    status: confirmed
+test_seams:
+  - id: test-seam.admission-validity-check
+    statement: admission-validity-check
+    source_refs: [scenario.admission-expires, invariant.current-admission-required]
+    evidence_refs: [evidence.discovery.compliance]
+    status: confirmed
+confirmed_decisions:
+  - id: decision.compliance-owns-admission-rules
+    statement: ComplianceReview 拥有准入规则语义，ProcurementExecution 只消费决定。
+    source_refs: [rule.current-admission-required]
+    evidence_refs: [evidence.domain-strategy-review.supplier]
+    status: confirmed
+assumptions:
+  - id: assumption.unique-subject-ref
+    statement: 供应商已有唯一 subject_ref。
+    source_refs: [scenario.supplier-submits]
+    evidence_refs: [evidence.discovery.supplier]
+    status: confirmed
+constraints:
+  - id: constraint.preserve-procurement-flow
+    statement: 保留现有采购订单流程。
+    source_refs: [scenario.admission-expires]
+    evidence_refs: [evidence.discovery.compliance]
+    status: confirmed
 unresolved_items:
   - item: 供应商历史资料迁移范围
     type: deferred
@@ -25,7 +50,7 @@ context_snapshot:
   term_refs: [Global/Supplier, ComplianceReview/AdmissionDecision]
 domain_strategy_ref:
   domain_strategy_id: domain-strategy.supplier-admission
-  domain_version: v2
+  domain_version: v3
   digest: <domain-strategy-digest>
   status: approved
   persisted_ref: domain-strategy.yaml
@@ -38,17 +63,21 @@ impact_assessment:
   cross_repo: false
   high_risk: false
 downstream_mapping:
-  - domain_change: admission-decision-validity
-    consumer: spec-synthesis
+  - mapping_id: mapping.backend-admission-validity
+    source_refs: [rule.current-admission-required, invariant.current-admission-required]
+    consumer_capability: backend-technical-design
     propagation: direct
     reapproval_condition: 领域策略版本或有效性规则变化
-  - domain_change: admission-decision-validity
-    consumer: ticket-decomposition
+    evidence_refs: [evidence.domain-strategy-review.supplier]
+  - mapping_id: mapping.frontend-admission-validity
+    source_refs: [scenario.admission-expires]
+    consumer_capability: frontend-engineering-design
     propagation: transitive
     reapproval_condition: Spec 基线变更
+    evidence_refs: [evidence.domain-strategy-review.supplier]
 evidence_refs: [evidence.discovery.supplier, evidence.domain-strategy-review.supplier]
 approval:
   approval_ref: .agents/skills/yss-stage-decision/tests/fixtures/stage-decision-approval.yaml
   approver: role.product-manager
   persisted_ref: docs/.scratch/supplier/stage-decision/stage-decision-package-v1.yaml
-  current_version: v2
+  current_version: v3

package/template/.cursor/skills/yss-stage-decision/tests/fixtures/valid-supplier-domain.yaml

@@ -1,7 +1,19 @@
-schema_version: 2
+schema_version: 3
 domain_strategy_id: domain-strategy.supplier-admission
-domain_version: v2
+domain_version: v3
 status: approved
+traceability_version: 1
+rule_catalog:
+  - rule_id: rule.application-material-complete
+    statement: 申请材料必须完整
+    responsible_context: SupplierManagement
+    status: confirmed
+    evidence_refs: [evidence.discovery.supplier]
+  - rule_id: rule.current-admission-required
+    statement: 新采购订单必须引用当前有效的准入决定。
+    responsible_context: ComplianceReview
+    status: confirmed
+    evidence_refs: [evidence.discovery.compliance]
 contexts:
   - context_id: SupplierManagement
     name: 供应商管理
@@ -64,6 +76,10 @@ scenarios:
     preconditions: [供应商资料可编辑]
     commands: [SubmitSupplierApplication]
     rules: [申请材料必须完整]
+    rule_refs: [rule.application-material-complete]
+    critical: true
+    success_results: [完整申请进入合规审查]
+    evidence_refs: [evidence.discovery.supplier]
     events: [SupplierApplicationSubmitted]
     failure_results: [材料不完整时拒绝提交]
     responsible_context: SupplierManagement
@@ -73,7 +89,11 @@ scenarios:
     actor: compliance-officer
     preconditions: [批准决定存在]
     commands: [EvaluateAdmissionValidity]
-    rules: [过期决定不得支持新采购订单]
+    rules: [新采购订单必须引用当前有效的准入决定。]
+    rule_refs: [rule.current-admission-required]
+    critical: true
+    success_results: [过期准入决定不能支持新采购订单]
+    evidence_refs: [evidence.discovery.compliance]
     events: [SupplierAdmissionExpired]
     failure_results: [采购下单时资格校验失败]
     responsible_context: ComplianceReview
@@ -94,6 +114,8 @@ invariants:
     responsible_context: ComplianceReview
     scenario_refs: [scenario.admission-expires]
     verification_method: 领域场景测试和事件版本校验
+    rule_ref: rule.current-admission-required
+    evidence_refs: [evidence.discovery.compliance]
 context_snapshot:
   context_ref: CONTEXT.md
   context_schema_version: 1
@@ -101,13 +123,23 @@ context_snapshot:
   referenced_terms_digest: <referenced-terms-digest>
   term_refs: [Global/Supplier, ComplianceReview/AdmissionDecision]
 downstream_mapping:
-  - domain_change: admission-decision-validity
+  - mapping_id: mapping.backend-admission-validity
+    source_refs: [rule.current-admission-required, invariant.current-admission-required]
+    consumer_capability: backend-technical-design
     impacts: [spec, openapi, procurement-acceptance-tests]
     propagation: stale
     reapproval_condition: ComplianceReview 决定和有效期重新批准
+    evidence_refs: [evidence.discovery.compliance]
+  - mapping_id: mapping.frontend-admission-validity
+    source_refs: [scenario.admission-expires]
+    consumer_capability: frontend-engineering-design
+    impacts: [ui, frontend]
+    propagation: direct
+    reapproval_condition: 场景结果或视觉基线变化
+    evidence_refs: [evidence.discovery.compliance]
 evidence_refs: [evidence.discovery.supplier, evidence.discovery.compliance]
 approval:
   approval_ref: .agents/skills/yss-stage-decision/tests/fixtures/domain-strategy-approval.yaml
   approver: role.product-manager
   persisted_ref: docs/.scratch/supplier/domain/domain-strategy-v1.yaml
-  current_version: v2
+  current_version: v3