create-yss-spec 3.3.6 → 3.3.8

package/template/.agents/skills/yss-stage-decision/tests/run-scenarios.mjs

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { buildDecisionFixture } from "../../../../scripts/fixtures/user-decision/build-fixture.mjs";
 import { createHash } from "node:crypto";
 import { spawnSync } from "node:child_process";
 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
@@ -14,6 +13,7 @@ const validator = join(testsRoot, "..", "scripts", "validate-domain-strategy.mjs
 const packageValidator = join(testsRoot, "..", "scripts", "validate-stage-decision-package.mjs");
 const contextValidator = join(projectRoot, "scripts", "verify-context-contract");
 const migrationTool = join(testsRoot, "..", "scripts", "migrate-context-references.mjs");
+const v3MigrationTool = join(testsRoot, "..", "scripts", "migrate-contract-v3.mjs");
 const validTemplate = join(testsRoot, "fixtures", "valid-supplier-domain.yaml");
 const validPackageTemplate = join(testsRoot, "fixtures", "valid-stage-decision-package.yaml");
 
@@ -29,6 +29,58 @@ function digestYaml(source) {
   return `sha256:${createHash("sha256").update(JSON.stringify(canonical(document.toJS({ maxAliasCount: 0 })))).digest("hex")}`;
 }
 
+function parseYaml(source) {
+  const document = parseDocument(source, { maxAliasCount: 0, uniqueKeys: true });
+  if (document.errors.length) throw new Error(document.errors[0].message);
+  return document.toJS({ maxAliasCount: 0 });
+}
+
+function toV2Domain(source) {
+  const value = structuredClone(parseYaml(source));
+  value.schema_version = 2;
+  value.domain_version = "v2";
+  delete value.traceability_version;
+  delete value.rule_catalog;
+  for (const scenario of value.scenarios) {
+    delete scenario.rule_refs;
+    delete scenario.critical;
+    delete scenario.success_results;
+    delete scenario.evidence_refs;
+  }
+  for (const invariant of value.invariants) {
+    delete invariant.rule_ref;
+    delete invariant.evidence_refs;
+  }
+  value.downstream_mapping = [{
+    domain_change: "admission-decision-validity",
+    impacts: ["spec", "openapi", "procurement-acceptance-tests"],
+    propagation: "stale",
+    reapproval_condition: "ComplianceReview 决定和有效期重新批准"
+  }];
+  value.approval.current_version = "v2";
+  return value;
+}
+
+function toV2Stage(source, domainDigest) {
+  const value = structuredClone(parseYaml(source));
+  value.schema_version = 2;
+  value.package_version = "v2";
+  for (const field of ["success_criteria", "test_seams", "confirmed_decisions", "assumptions", "constraints"]) {
+    value[field] = value[field].map((item) => item.statement);
+  }
+  value.domain_strategy_ref.domain_version = "v2";
+  value.domain_strategy_ref.digest = domainDigest;
+  value.domain_strategy_ref.persisted_ref = "domain-strategy-v2.yaml";
+  value.downstream_mapping = [{
+    domain_change: "admission-decision-validity",
+    consumer: "spec-synthesis",
+    propagation: "direct",
+    reapproval_condition: "领域策略版本或有效性规则变化"
+  }];
+  value.approval.current_version = "v2";
+  return value;
+}
+
 function run(command, file, contextRoot) {
   return spawnSync(process.execPath, [command, file, "--root", contextRoot], { cwd: projectRoot, encoding: "utf8" });
 }
@@ -56,34 +108,59 @@ context_schema_version: 1
 | 准入决定 | 合规审查形成的准入结论。 | AdmissionDecision | ComplianceReview | 避免：\`审批结果\` |
 `;
 
-const temporaryRoot = await mkdtemp(join(tmpdir(), "yss-stage-decision-v2-"));
+const temporaryRoot = await mkdtemp(join(tmpdir(), "yss-stage-decision-v3-"));
 try {
   await writeFile(join(temporaryRoot, "CONTEXT.md"), contextSource);
   const contextResult = spawnSync(process.execPath, [contextValidator, "--root", temporaryRoot, "--allowed-context", "SupplierManagement", "--allowed-context", "ComplianceReview", "--allowed-context", "ProcurementExecution", "--term-ref", "Global/Supplier", "--term-ref", "ComplianceReview/AdmissionDecision", "--json"], { cwd: projectRoot, encoding: "utf8" });
   if (contextResult.status !== 0) throw new Error(`context fixture should pass: ${contextResult.stderr}`);
   const context = JSON.parse(contextResult.stdout);
 
-  const domainApprovalRef = join(temporaryRoot, "domain-approval.json");
   const domainSource = (await readFile(validTemplate, "utf8"))
-    .replace(".agents/skills/yss-stage-decision/tests/fixtures/domain-strategy-approval.yaml", domainApprovalRef)
     .replace("<document-digest>", context.document_digest)
     .replace("<referenced-terms-digest>", context.referenced_terms_digest);
   const domainFile = join(temporaryRoot, "domain-strategy.yaml");
   await writeFile(domainFile, domainSource);
-  const domainDecision = buildDecisionFixture(join(temporaryRoot, "domain-decision"), { boundary: "check.domain-strategy-approved", subjectRef: domainFile });
-  const domainApproval = parseDocument(await readFile(join(testsRoot, "fixtures/domain-strategy-approval.yaml"), "utf8")).toJS();
-  await writeFile(domainApprovalRef, JSON.stringify({ ...domainApproval, subject_ref: domainFile, approval_scope: domainDecision.requirement.scope, user_decision_ref: domainDecision.ref }));
   const pass = run(validator, domainFile, temporaryRoot);
-  if (pass.status !== 0) throw new Error(`valid v2 fixture should pass: ${pass.stderr}`);
+  if (pass.status !== 0) throw new Error(`valid v3 fixture should pass: ${pass.stderr}`);
+
+  const v2Domain = toV2Domain(domainSource);
+  const v2DomainSource = JSON.stringify(v2Domain, null, 2);
+  const v2DomainFile = join(temporaryRoot, "domain-strategy-v2.yaml");
+  await writeFile(v2DomainFile, v2DomainSource);
+  const v2Pass = run(validator, v2DomainFile, temporaryRoot);
+  if (v2Pass.status !== 0) throw new Error(`read-only v2 fixture should pass: ${v2Pass.stderr}`);
+
+  const migratedDomainV3 = spawnSync(process.execPath, [v3MigrationTool, v2DomainFile, "--kind", "domain-strategy", "--root", temporaryRoot], { cwd: projectRoot, encoding: "utf8" });
+  if (migratedDomainV3.status !== 0) throw new Error(`v2 domain strategy should migrate: ${migratedDomainV3.stderr}`);
+  const migratedDomainV3Value = JSON.parse(migratedDomainV3.stdout);
+  if (migratedDomainV3Value.schema_version !== 3 || migratedDomainV3Value.status !== "draft" || migratedDomainV3Value.approval.approval_ref !== "migration-required") throw new Error("domain v2 -> v3 migration must reset approval and status");
+
+  const duplicateRule = join(temporaryRoot, "duplicate-rule.yaml");
+  const duplicateRuleValue = parseYaml(domainSource);
+  duplicateRuleValue.rule_catalog.push(structuredClone(duplicateRuleValue.rule_catalog[0]));
+  await writeFile(duplicateRule, JSON.stringify(duplicateRuleValue, null, 2));
+  expectBlocked(run(validator, duplicateRule, temporaryRoot), /rule_id.*重复|重复.*rule_id/, "duplicate v3 rule id");
+
+  const danglingRule = join(temporaryRoot, "dangling-rule.yaml");
+  const danglingRuleValue = parseYaml(domainSource);
+  danglingRuleValue.scenarios[0].rule_refs = ["rule.missing"];
+  await writeFile(danglingRule, JSON.stringify(danglingRuleValue, null, 2));
+  expectBlocked(run(validator, danglingRule, temporaryRoot), /rule_refs.*未声明|悬空/, "dangling v3 rule ref");
+
+  const missingEvidence = join(temporaryRoot, "missing-rule-evidence.yaml");
+  const missingEvidenceValue = parseYaml(domainSource);
+  missingEvidenceValue.rule_catalog[0].evidence_refs = [];
+  await writeFile(missingEvidence, JSON.stringify(missingEvidenceValue, null, 2));
+  expectBlocked(run(validator, missingEvidence, temporaryRoot), /evidence_refs/, "missing v3 evidence");
 
   const legacyFile = join(temporaryRoot, "legacy-domain.yaml");
-  await writeFile(legacyFile, domainSource.replace("schema_version: 2", "schema_version: 1"));
+  await writeFile(legacyFile, JSON.stringify({ ...v2Domain, schema_version: 1 }, null, 2));
   expectBlocked(run(validator, legacyFile, temporaryRoot), /migration-required/, "legacy domain contract");
 
   const migratableLegacy = join(temporaryRoot, "migratable-legacy-domain.yaml");
-  const migratableLegacySource = domainSource
-    .replace("schema_version: 2", "schema_version: 1")
-    .replace(/context_snapshot:\n[\s\S]*?\ndownstream_mapping:/, "terminology_refs: [CONTEXT.md#Supplier, contexts/ComplianceReview/CONTEXT.md#AdmissionDecision]\ndownstream_mapping:");
+  const migratableLegacyValue = { ...structuredClone(v2Domain), schema_version: 1, terminology_refs: ["CONTEXT.md#Supplier", "contexts/ComplianceReview/CONTEXT.md#AdmissionDecision"] };
+  delete migratableLegacyValue.context_snapshot;
+  const migratableLegacySource = JSON.stringify(migratableLegacyValue, null, 2);
   await writeFile(migratableLegacy, migratableLegacySource);
   const migrated = spawnSync(process.execPath, [migrationTool, migratableLegacy, "--root", temporaryRoot], { cwd: projectRoot, encoding: "utf8" });
   if (migrated.status !== 0) throw new Error(`migratable v1 contract should migrate: ${migrated.stderr}`);
@@ -91,7 +168,7 @@ try {
   if (migratedValue.schema_version !== 2 || migratedValue.terminology_refs !== undefined || migratedValue.context_snapshot.context_ref !== "CONTEXT.md" || migratedValue.context_snapshot.term_refs.join(",") !== "ComplianceReview/AdmissionDecision,Global/Supplier") throw new Error("migrated context snapshot is incomplete");
 
   const ambiguousLegacy = join(temporaryRoot, "ambiguous-legacy-domain.yaml");
-  await writeFile(ambiguousLegacy, migratableLegacySource.replace("CONTEXT.md#Supplier, contexts/ComplianceReview/CONTEXT.md#AdmissionDecision", "contexts/ComplianceReview/CONTEXT.md"));
+  await writeFile(ambiguousLegacy, JSON.stringify({ ...migratableLegacyValue, terminology_refs: ["contexts/ComplianceReview/CONTEXT.md"] }, null, 2));
   const ambiguousMigration = spawnSync(process.execPath, [migrationTool, ambiguousLegacy, "--root", temporaryRoot], { cwd: projectRoot, encoding: "utf8" });
   expectBlocked(ambiguousMigration, /migration-required.*无法唯一定位|无法唯一定位.*migration-required/, "ambiguous legacy reference");
 
@@ -115,32 +192,48 @@ try {
   await writeFile(unknownContext, domainSource.replace("to_context: ComplianceReview", "to_context: UnknownContext"));
   expectBlocked(run(validator, unknownContext, temporaryRoot), /未引用已声明上下文|未在领域战略中登记/, "unknown context");
 
-  const packageApprovalRef = join(temporaryRoot, "package-approval.json");
   const packageSource = (await readFile(validPackageTemplate, "utf8"))
-    .replace(".agents/skills/yss-stage-decision/tests/fixtures/stage-decision-approval.yaml", packageApprovalRef)
     .replace("<document-digest>", context.document_digest)
     .replace("<referenced-terms-digest>", context.referenced_terms_digest)
     .replace("<domain-strategy-digest>", digestYaml(domainSource));
   const packageFile = join(temporaryRoot, "stage-decision.yaml");
   await writeFile(packageFile, packageSource);
-  const packageDecision = buildDecisionFixture(join(temporaryRoot, "package-decision"), { boundary: "check.stage-decision-package-approved", subjectRef: packageFile });
-  const packageApproval = parseDocument(await readFile(join(testsRoot, "fixtures/stage-decision-approval.yaml"), "utf8")).toJS();
-  await writeFile(packageApprovalRef, JSON.stringify({ ...packageApproval, subject_ref: packageFile, approval_scope: packageDecision.requirement.scope, user_decision_ref: packageDecision.ref }));
   const packagePass = run(packageValidator, packageFile, temporaryRoot);
-  if (packagePass.status !== 0) throw new Error(`valid v2 stage decision package should pass: ${packagePass.stderr}`);
+  if (packagePass.status !== 0) throw new Error(`valid v3 stage decision package should pass: ${packagePass.stderr}`);
+
+  const v2Stage = toV2Stage(packageSource, digestYaml(v2DomainSource));
+  const v2StageFile = join(temporaryRoot, "stage-decision-v2.yaml");
+  await writeFile(v2StageFile, JSON.stringify(v2Stage, null, 2));
+  const v2StagePass = run(packageValidator, v2StageFile, temporaryRoot);
+  if (v2StagePass.status !== 0) throw new Error(`read-only v2 stage decision package should pass: ${v2StagePass.stderr}`);
+
+  const migratedV3 = spawnSync(process.execPath, [v3MigrationTool, v2StageFile, "--kind", "stage-decision", "--root", temporaryRoot], { cwd: projectRoot, encoding: "utf8" });
+  if (migratedV3.status !== 0) throw new Error(`v2 stage decision should migrate: ${migratedV3.stderr}`);
+  const migratedV3Value = JSON.parse(migratedV3.stdout);
+  if (migratedV3Value.schema_version !== 3 || migratedV3Value.status !== "draft" || migratedV3Value.approval.approval_ref !== "migration-required") throw new Error("v2 -> v3 migration must reset approval and status");
+
+  const wrongSourceRef = join(temporaryRoot, "stage-decision-wrong-source-ref.yaml");
+  const wrongSourceRefValue = parseYaml(packageSource);
+  wrongSourceRefValue.success_criteria[0].source_refs = ["rule.missing"];
+  await writeFile(wrongSourceRef, JSON.stringify(wrongSourceRefValue, null, 2));
+  expectBlocked(run(packageValidator, wrongSourceRef, temporaryRoot), /source_refs.*未在领域战略中声明|悬空/, "stage decision dangling source ref");
 
   const packageLegacy = join(temporaryRoot, "legacy-stage-decision.yaml");
-  await writeFile(packageLegacy, packageSource.replace("schema_version: 2", "schema_version: 1"));
+  await writeFile(packageLegacy, JSON.stringify({ ...v2Stage, schema_version: 1 }, null, 2));
   expectBlocked(run(packageValidator, packageLegacy, temporaryRoot), /migration-required/, "legacy stage decision contract");
 
   const packageBlocker = join(temporaryRoot, "stage-decision-blocker.yaml");
-  await writeFile(packageBlocker, packageSource.replace("type: deferred", "type: blocker"));
+  const blockerValue = parseYaml(packageSource);
+  blockerValue.unresolved_items[0].type = "blocker";
+  await writeFile(packageBlocker, JSON.stringify(blockerValue, null, 2));
   expectBlocked(run(packageValidator, packageBlocker, temporaryRoot), /blocker/, "blocker package");
 
   const packageWrongArray = join(temporaryRoot, "stage-decision-wrong-array.yaml");
-  await writeFile(packageWrongArray, packageSource.replace("target_users: [采购专员、合规专员]", "target_users: [42]"));
+  const wrongArrayValue = parseYaml(packageSource);
+  wrongArrayValue.target_users = [42];
+  await writeFile(packageWrongArray, JSON.stringify(wrongArrayValue, null, 2));
   expectBlocked(run(packageValidator, packageWrongArray, temporaryRoot), /target_users\[0\]/, "package non-string array item");
 } finally {
   await rm(temporaryRoot, { recursive: true, force: true });
 }
-process.stdout.write("业务边界与规则设计 v2 场景验证通过\n");
+process.stdout.write("业务边界与规则设计 v2/v3 场景验证通过\n");

package/template/.agents/skills/yss-technical-design/SKILL.md

@@ -24,6 +24,8 @@ description: 在 YSS 技术分析中统一承接需求与战略输入，按已
 
 已有 Strategic Design Handoff 时，两种分支都必须先完成导入和目标词汇对账，再逐条承接规则与关键场景。没有战略交接包的项目直接消费批准需求，不能为 MVC 补造战略 DDD。
 
+既有身份 v2 的纯工程变更可显式使用 `design_scope: engineering-only`；按 `references/engineering-design.schema.json` 绑定真实构建单元、写路径、只读依赖、失败处理与测试 seam。不得更改登记业务边界、领域模型、业务规则/状态、持久化、数据库 schema 或 UI；命中这些影响回原架构设计。缺省仍保留原 DDD/MVC 规则，不自动降级。工程分支仍需当前 Spec/API/工程依据、逐条承接、独立技术审查及正式 Slice 批准。
+
 ## 合同与验证
 
 新产物使用 schema v2 Technical Design Contract：共同头记录架构来源、输入版本与摘要、规则/场景承接、评审证据和状态，`design` 保存架构专属内容。合同格式与兼容规则见 `references/technical-design-contract.md`，Schema 见 `references/technical-design.schema.json`。

package/template/.agents/skills/yss-technical-design/references/engineering-design.schema.json

@@ -0,0 +1,224 @@
+{
+  "type": "object",
+  "properties": {
+    "scope_reason": {
+      "type": "string",
+      "minLength": 1
+    },
+    "impact_assessment": {
+      "type": "object",
+      "properties": {
+        "domain_model": {
+          "const": "none"
+        },
+        "business_state": {
+          "const": "none"
+        },
+        "business_rules": {
+          "const": "none"
+        },
+        "business_persistence": {
+          "const": "none"
+        },
+        "schema_migration": {
+          "const": "none"
+        },
+        "ui_change": {
+          "const": "none"
+        },
+        "architecture_boundary_change": {
+          "const": "none"
+        }
+      },
+      "required": [
+        "domain_model",
+        "business_state",
+        "business_rules",
+        "business_persistence",
+        "schema_migration",
+        "ui_change",
+        "architecture_boundary_change"
+      ],
+      "additionalProperties": false
+    },
+    "component_catalog": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "properties": {
+          "component_id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "responsibility": {
+            "type": "string",
+            "minLength": 1
+          },
+          "build_unit_ref": {
+            "type": "string",
+            "minLength": 1
+          },
+          "write_paths": {
+            "type": "array",
+            "minItems": 1,
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "depends_on": {
+            "type": "array",
+            "minItems": 0,
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        },
+        "required": [
+          "component_id",
+          "responsibility",
+          "build_unit_ref",
+          "write_paths",
+          "depends_on"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "allowed_write_paths": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "read_dependencies": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "properties": {
+          "ref": {
+            "type": "string",
+            "minLength": 1
+          },
+          "digest": {
+            "type": "string",
+            "pattern": "^sha256:[a-f0-9]{64}$"
+          },
+          "purpose": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "ref",
+          "digest",
+          "purpose"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "flow": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "failure_handling": {
+      "type": "string",
+      "minLength": 1
+    },
+    "consistency_policy": {
+      "type": "object",
+      "properties": {
+        "read_only": {
+          "const": "read-only"
+        },
+        "transaction_boundary": {
+          "type": "string",
+          "minLength": 1
+        },
+        "concurrency": {
+          "type": "string",
+          "minLength": 1
+        },
+        "idempotency": {
+          "type": "string",
+          "minLength": 1
+        },
+        "cross_database_limit": {
+          "type": "string",
+          "minLength": 1
+        },
+        "timeouts": {
+          "type": "string",
+          "minLength": 1
+        },
+        "recovery": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "required": [
+        "read_only",
+        "transaction_boundary",
+        "concurrency",
+        "idempotency",
+        "cross_database_limit",
+        "timeouts",
+        "recovery"
+      ],
+      "additionalProperties": false
+    },
+    "test_seams": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "properties": {
+          "seam_id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "kind": {
+            "type": "string",
+            "minLength": 1
+          },
+          "subject_ref": {
+            "type": "string",
+            "minLength": 1
+          },
+          "assertion": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "seam_id",
+          "kind",
+          "subject_ref",
+          "assertion"
+        ],
+        "additionalProperties": false
+      }
+    }
+  },
+  "required": [
+    "scope_reason",
+    "impact_assessment",
+    "component_catalog",
+    "allowed_write_paths",
+    "read_dependencies",
+    "flow",
+    "failure_handling",
+    "consistency_policy",
+    "test_seams"
+  ],
+  "additionalProperties": false,
+  "title": "既有工程的受控工程技术设计"
+}

package/template/.agents/skills/yss-technical-design/references/technical-design-common.schema.json

@@ -266,6 +266,12 @@
     "digest": {
       "type": "string",
       "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "design_scope": {
+      "enum": [
+        "architecture-specific",
+        "engineering-only"
+      ]
     }
   },
   "required": [