create-yss-spec 3.3.8 → 3.4.3

package/template/.pi/skills/yss-frontend-scaffold-generator/assets/data-quality-v1/pnpm-workspace.yaml

@@ -0,0 +1,7 @@
+packages:
+  - packages
+onlyBuiltDependencies:
+  - esbuild
+  - vue-demi
+  - '@formily/vue'
+  - core-js

package/template/.pi/skills/yss-frontend-scaffold-generator/references/data-quality-baseline.md

@@ -0,0 +1,17 @@
+# Data Quality v1 骨架基线
+
+采用 Data Quality 工程模式，随 Skill 提供可离线审阅的机械源文件。源工程 commit 为 `532509a59856fc02f3b9bcb28a062663ce887d71`；无 origin，因此不把本机路径伪装成可分发 Git 模板。文件列表及摘要由 `data-quality-v1.manifest.json` 固定，合同锁其字节摘要。
+
+| 保留 | 通用化调整 |
+| --- | --- |
+| `packages/` pnpm 工作区、Vue3 / TypeScript / Vite | 单一 Vite6.0.5 工具链，Node>=22.12；TypeScript5.9.3与ESLint parser8.70配套，满足Orval/Formily的TS4/5 peer约束，重建pnpm锁 |
+| Pinia、Vue Router、Ant Design Vue4.2.6、YSS UI | 空白首页 / 404，移除业务菜单、默认Admin、接口模块、Mock、任务抽屉 |
+| Qiankun mount/unmount/update与路由桥 | 版本检查、同源事件地址、app级恢复标记、销毁router监听；不带未取消timer和全局styleManager |
+| ConfigProvider及主题DTO | 根DESIGN派生，light32px默认；YSS/Ant/VXE变量只写当前容器，不改documentElement；不读取固定localStorage键 |
+| Orval本地OpenAPI与axios seam | 输入只为冻结JSON；无网络同步、schema删改、业务包装覆盖、硬编码token/401跳转 |
+
+Vue / Vue Router / Pinia / AntDV / YSS / Formily / Orval 等核心版本来自源 lock。TypeScript5.9.3和ESLint parser8.70是针对原TS6解析器及Orval/Formily peer冲突的兼容调整；依赖声明与锁文件重新生成并实际验证。运行 install 需要企业registry访问，认证仅通过环境配置；资产包不含 `.npmrc`、node_modules或构建产物。
+
+源 JSP 脚本引用的 Vite 配置缺失，所以当前只提供 Qiankun 与 standalone。资源 public base 与激活 route 分别配置，避免推测主门户部署规则。跨应用 CSS 隔离仍须由宿主合同定义；容器主题清理不能等同于完整样式沙箱。
+
+已有 Git 来源继续兼容，生成和验证遵守同一个批准 schema v4 合同、空目标目录、OpenAPI摘要和显式init_git边界。模板维护可以更新 bundled 源；目标应用生成不会自动升级已有工程。

package/template/.pi/skills/yss-frontend-scaffold-generator/references/data-quality-v1.manifest.json

@@ -0,0 +1,49 @@
+{
+  "schema_version": 1,
+  "baseline_id": "data-quality-v1",
+  "upstream": {
+    "project": "next-gen-data-quality",
+    "commit": "532509a59856fc02f3b9bcb28a062663ce887d71",
+    "use": "selected source patterns, reconstructed neutral scaffold; not a complete upstream Git tree",
+    "copied_and_adapted": [
+      "packages/src/types/microAppBridge.ts",
+      "packages/src/utils/microAppRouterBridge.ts"
+    ]
+  },
+  "design_source": "DESIGN.md",
+  "design_digest": "sha256:e84a6c175840efe9663a2d0aba37f5635c053f47452bb146d1025d65665b1bec",
+  "files": {
+    ".eslintrc.cjs": "sha256:3c2915cf2fff0efaba285fdc2d8c503a8597bcb062a396dfb54701e7672239f9",
+    ".gitignore": "sha256:fb8288522033f645a728dfb53cef24a11824bdbec858b93279d4809924b4539d",
+    ".npmrc.example": "sha256:cee4433295152854b58babea9072215a2d84b8de086d218b15ffb7e84f1fe9e1",
+    "DESIGN.md": "sha256:e84a6c175840efe9663a2d0aba37f5635c053f47452bb146d1025d65665b1bec",
+    "README.md": "sha256:6d8ed1aed45267f3c581733a7d12b0b891dc94c800d1416a0b172355031b4b96",
+    "micro-config.json": "sha256:8266b0eb806696d6bb2023a0d1e72113cdffc355bb0fafd8b2095d727f827711",
+    "orval.config.ts": "sha256:d918458e4ee972ae94740899dd15701530bdc31fd758240fc00e96aba3ba9b3a",
+    "package.json": "sha256:29cd516ba688ae3a3625b4f3a3921c47825134cff27622732ef942c4129c7222",
+    "packages/.env.development": "sha256:e698b56d83ad282c221e2c8067bc4e3e90789c610fd31da2489bd3ac2d8efc5f",
+    "packages/.env.example": "sha256:b8cf60af269af3f4dc3c167df88045af949683b302bd9b77e50fb77fa1adf81f",
+    "packages/.env.production": "sha256:b0a96ab02559a99fc95c37b967f604675686c8de336731a1721d54f43b047249",
+    "packages/.env.production.standalone": "sha256:e698b56d83ad282c221e2c8067bc4e3e90789c610fd31da2489bd3ac2d8efc5f",
+    "packages/index.html": "sha256:bdd33ab639ff63efe8f4c7d36dcae28f40f5b0586b1430714a86583789a3fd97",
+    "packages/package.json": "sha256:c680eaddad5e5a817ff31b65c80d45b12d7ef74d79b91e0bd5b6c16da5c96349",
+    "packages/public/favicon.svg": "sha256:9fb2de7c9d8b4333d5c660e81e6040195148afa2e05a4203e8be539cac915f2c",
+    "packages/src/App.vue": "sha256:fcc1e774142ba53dbeda8f425c0b00beffc4282c3d5254538be9b2cc104b811a",
+    "packages/src/api/mutator.ts": "sha256:7573bd2ff68454b0df42e120a049c75510df86579157d172a78cda97159747ea",
+    "packages/src/components/ThemeScope.vue": "sha256:216193e89cf104c72df8729f9ac2d616ac2ed7236f9d85f1a2744ab65e2efbef",
+    "packages/src/config/theme.json": "sha256:42a229ee534c87490924ddc0d9c985ae931c41da500d4be9bce819f4df638961",
+    "packages/src/env.d.ts": "sha256:65996936fbb042915f7b74a200fcdde7e410f32a669b1ab9597cfaa4b0faddb5",
+    "packages/src/main.ts": "sha256:7b91453f1f158b0da95a4195c5824d688f7556364c0e7dbffa9dd4a03c04c4e2",
+    "packages/src/router/index.ts": "sha256:c41c9400650c15945b9e6376a19ac6a9c08d2eb76d7a07b9624b266c39269c5a",
+    "packages/src/store/theme.ts": "sha256:1dc35947f93976f448e608298b593a873815b94442e263e15fbc4679187ae107",
+    "packages/src/styles/index.less": "sha256:90bbe2444c49eb983d49aa5618c27c57e0932e12f4f0d6aab52e266cb6843cb2",
+    "packages/src/types/microAppBridge.ts": "sha256:054f8c35eb33196f4bddb56d26957776b783e2a84f965229891d13fb0dae1274",
+    "packages/src/utils/microAppRouterBridge.ts": "sha256:f20d045be96c9034136da9296b718915555945a967a118d8aed9fd6ee93193bc",
+    "packages/src/views/NotFound.vue": "sha256:e420747300ff1b7c8575c6113cf276adcf5781d92ceeb92250e54bca9f977988",
+    "packages/src/views/Welcome.vue": "sha256:0498edee6e25b45644a2d12c6fded1e3c0fda830c9196d4fc5389b94fb1a0e0d",
+    "packages/tsconfig.json": "sha256:40e27bb07cd4ae8c0c636b5d9581fe378d00e21acb28423cc2a08bfa1a67c11f",
+    "packages/vite.config.ts": "sha256:d3c1775bdca54e1b0f2b267a7dae992cc61836891588e93e02caa49184cb2ab2",
+    "pnpm-lock.yaml": "sha256:dd05bbc9c948cb47de017fa215806d04f0f9f143d3c953b43076a62e5fd85d9b",
+    "pnpm-workspace.yaml": "sha256:d5cdbd2e0a167297976d11695d1593a4e71694ed462120569e20e98fd9c63fbe"
+  }
+}

package/template/.pi/skills/yss-frontend-scaffold-generator/scripts/generate_scaffold.mjs

@@ -9,6 +9,7 @@ import { validateJsonSchema } from "../../../../scripts/lib/json-schema.mjs";
 
 const fail = (message) => { throw new TypeError(message); };
 const REPOSITORY_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../../..");
+const SKILL_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const sha256 = (value) => `sha256:${createHash("sha256").update(value).digest("hex")}`;
 function argsOf(argv) {
   const args = {};
@@ -33,7 +34,11 @@ function validate(contract, outputDir) {
   if (contract.delivery_role !== "frontend" || contract.scaffold_kind !== "frontend-yss-vue3" || contract.generator_skill !== "yss-frontend-scaffold-generator") fail("contract is not for the YSS frontend generator");
   if (path.resolve(contract.target_output_dir) !== outputDir) fail("output directory differs from approved contract");
   if (contract.generation_policy?.mode !== "initialize-only" || contract.generation_policy?.existing_target !== "unsupported") fail("unsupported generation policy");
-  if (!contract.frontend?.template?.repository || !/^[a-f0-9]{40}$/.test(contract.frontend.template.commit || "")) fail("template repository and exact 40-character commit are required");
+  if (contract.frontend.template.kind === "bundled") {
+    for (const value of [contract.frontend.app_name, contract.frontend.microapp_name]) if (!/^[a-z][a-z0-9-]{0,62}$/.test(value)) fail("bundled app names must be lowercase kebab-case");
+    if (!/^\/(?:[a-zA-Z0-9_-]+\/?)*$/.test(contract.frontend.base_route)) fail("bundled base_route must be an absolute path without query, quotes or traversal");
+    if (Object.keys(contract.frontend.replacements || {}).length) fail("bundled baseline does not accept arbitrary replacements");
+  } else if (!contract.frontend?.template?.repository || !/^[a-f0-9]{40}$/.test(contract.frontend.template.commit || "")) fail("template repository and exact 40-character commit are required");
   if (contract.frontend.openapi_impact === "frozen" && (!contract.frontend.openapi_json_ref || !contract.frontend.openapi_json_digest)) fail("frozen OpenAPI JSON and digest are required");
   if (contract.frontend.openapi_impact === "not-applicable" && !contract.frontend.openapi_not_applicable_reason) fail("no-API scaffold requires a reason");
 }
@@ -41,20 +46,45 @@ function validate(contract, outputDir) {
 export function generate({ contractFile, templateCheckout, outputDir }) {
   const contract = JSON.parse(readFileSync(contractFile, "utf8"));
   outputDir = path.resolve(outputDir);
-  templateCheckout = path.resolve(templateCheckout);
   validate(contract, outputDir);
-  if (!existsSync(path.join(templateCheckout, ".git"))) fail("template checkout must be a Git worktree");
-  if (git(templateCheckout, "rev-parse", "HEAD") !== contract.frontend.template.commit) fail("template checkout does not match approved commit");
-  if (git(templateCheckout, "config", "--get", "remote.origin.url") !== contract.frontend.template.repository) fail("template repository differs from approved source");
+  const bundled = contract.frontend.template.kind === "bundled";
+  let sourceRoot;
+  if (bundled) {
+    const bytes = readFileSync(path.join(SKILL_ROOT, "references/data-quality-v1.manifest.json"));
+    if (sha256(bytes) !== contract.frontend.template.manifest_digest) fail("bundled manifest digest differs from approved contract");
+    const manifest = JSON.parse(bytes);
+    if (manifest.baseline_id !== contract.frontend.template.baseline_id) fail("bundled baseline mismatch");
+    sourceRoot = path.join(SKILL_ROOT, "assets/data-quality-v1");
+    const actual = walk(sourceRoot).map(file => path.relative(sourceRoot, file)).sort();
+    if (JSON.stringify(actual) !== JSON.stringify(Object.keys(manifest.files).sort())) fail("bundled file inventory mismatch");
+    for (const relative of actual) {
+      const file = path.join(sourceRoot, relative);
+      if (lstatSync(file).isSymbolicLink() || sha256(readFileSync(file)) !== manifest.files[relative]) fail(`bundled file digest mismatch: ${relative}`);
+    }
+  } else {
+    if (!templateCheckout) fail("Git template requires --template-checkout");
+    templateCheckout = path.resolve(templateCheckout);
+    if (!existsSync(path.join(templateCheckout, ".git"))) fail("template checkout must be a Git worktree");
+    if (git(templateCheckout, "rev-parse", "HEAD") !== contract.frontend.template.commit) fail("template checkout does not match approved commit");
+    if (git(templateCheckout, "config", "--get", "remote.origin.url") !== contract.frontend.template.repository) fail("template repository differs from approved source");
+  }
+  let openapi;
+  if (contract.frontend.openapi_impact === "frozen") {
+    openapi = readFileSync(contract.frontend.openapi_json_ref);
+    if (sha256(openapi) !== contract.frontend.openapi_json_digest) fail("OpenAPI JSON digest mismatch");
+  }
   if (existsSync(outputDir) && readdirSync(outputDir).length > 0) fail("target directory must not exist or must be empty");
   mkdirSync(outputDir, { recursive: true });
   const scratch = mkdtempSync(path.join(tmpdir(), "yss-frontend-source-"));
   try {
     // Read the approved Git tree, never dependency caches or edits in the checkout.
-    const archive = spawnSync("git", ["archive", contract.frontend.template.commit], { cwd: templateCheckout, maxBuffer: 256 * 1024 * 1024 });
-    if (archive.error || archive.status !== 0) fail(archive.error?.message || String(archive.stderr));
-    const unpack = spawnSync("tar", ["-xf", "-", "-C", scratch], { input: archive.stdout });
-    if (unpack.error || unpack.status !== 0) fail(unpack.error?.message || String(unpack.stderr));
+    if (bundled) cpSync(sourceRoot, scratch, { recursive: true });
+    else {
+      const archive = spawnSync("git", ["archive", contract.frontend.template.commit], { cwd: templateCheckout, maxBuffer: 256 * 1024 * 1024 });
+      if (archive.error || archive.status !== 0) fail(archive.error?.message || String(archive.stderr));
+      const unpack = spawnSync("tar", ["-xf", "-", "-C", scratch], { input: archive.stdout });
+      if (unpack.error || unpack.status !== 0) fail(unpack.error?.message || String(unpack.stderr));
+    }
     cpSync(scratch, outputDir, { recursive: true, verbatimSymlinks: true });
   } finally { rmSync(scratch, { recursive: true, force: true }); }
 
@@ -76,10 +106,8 @@ export function generate({ contractFile, templateCheckout, outputDir }) {
     if (replaced !== text) writeFileSync(file, replaced);
   }
   if (contract.frontend.openapi_impact === "frozen") {
-    const bytes = readFileSync(contract.frontend.openapi_json_ref);
-    if (sha256(bytes) !== contract.frontend.openapi_json_digest) fail("OpenAPI JSON digest mismatch");
     mkdirSync(path.join(outputDir, "openapi"), { recursive: true });
-    writeFileSync(path.join(outputDir, "openapi", "openapi.json"), bytes);
+    writeFileSync(path.join(outputDir, "openapi", "openapi.json"), openapi);
     if (!generatedFiles.includes("openapi/openapi.json")) generatedFiles.push("openapi/openapi.json");
   }
   if (contract.init_git === true) git(outputDir, "init");
@@ -95,7 +123,7 @@ export function generate({ contractFile, templateCheckout, outputDir }) {
     contract_file_ref: path.resolve(contractFile),
     persisted_ref: contract.persisted_ref,
     approval_ref: contract.approval.approval_ref,
-    template: { ...contract.frontend.template, checkout: templateCheckout },
+    template: { ...contract.frontend.template, ...(!bundled ? { checkout: templateCheckout } : {}) },
     repository_scope: contract.repository_scope,
     target_output_dir: outputDir,
     init_git: contract.init_git,

package/template/.pi/skills/yss-frontend-scaffold-generator/scripts/refresh_baseline.mjs

@@ -0,0 +1,29 @@
+#!/usr/bin/env node
+import { createHash } from 'node:crypto';
+import { readFileSync, writeFileSync, readdirSync, mkdirSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const skill = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const repository = path.resolve(skill, '../../..');
+const assets = path.join(skill, 'assets/data-quality-v1');
+const sha = bytes => `sha256:${createHash('sha256').update(bytes).digest('hex')}`;
+const walk = root => readdirSync(root, { withFileTypes: true }).flatMap(item => item.isDirectory() ? walk(path.join(root, item.name)) : [path.join(root, item.name)]);
+const design = readFileSync(path.join(repository, 'DESIGN.md'));
+const theme = JSON.parse(readFileSync(path.join(repository, 'docs/design/tokens/theme.json')));
+const css = readFileSync(path.join(repository, 'docs/design/tokens/variables.css'), 'utf8');
+const token = name => css.match(new RegExp(`--${name}: ([^;]+);`))[1];
+const projection = { ...theme, accessibility: { primaryControl: token('yss-color-primary-control'), primaryControlHover: token('yss-color-primary-control-hover') } };
+const generated = { 'DESIGN.md': design, 'packages/src/config/theme.json': Buffer.from(JSON.stringify(projection, null, 2) + '\n') };
+const write = process.argv.includes('--write');
+for (const [relative, bytes] of Object.entries(generated)) {
+ const file = path.join(assets, relative);
+ if (write) { mkdirSync(path.dirname(file), { recursive: true }); writeFileSync(file, bytes); }
+ else if (!readFileSync(file).equals(bytes)) throw new Error(`baseline theme drift: ${relative}`);
+}
+const files = Object.fromEntries(walk(assets).sort().map(file => [path.relative(assets, file), sha(readFileSync(file))]));
+const manifest = { schema_version: 1, baseline_id: 'data-quality-v1', upstream: { project: 'next-gen-data-quality', commit: '532509a59856fc02f3b9bcb28a062663ce887d71', use: 'selected source patterns, reconstructed neutral scaffold; not a complete upstream Git tree', copied_and_adapted: ['packages/src/types/microAppBridge.ts', 'packages/src/utils/microAppRouterBridge.ts'] }, design_source: 'DESIGN.md', design_digest: sha(design), files };
+const file = path.join(skill, 'references/data-quality-v1.manifest.json');
+const bytes = Buffer.from(JSON.stringify(manifest, null, 2) + '\n');
+if (write) { mkdirSync(path.dirname(file), { recursive: true }); writeFileSync(file, bytes); }
+else if (!readFileSync(file).equals(bytes)) throw new Error('baseline manifest drift; review files before refresh_baseline.mjs --write');
+console.log(sha(bytes));

package/template/.pi/skills/yss-frontend-scaffold-generator/scripts/run_scaffold_verification.mjs

@@ -6,8 +6,10 @@ import { runCommandSync } from "../../../../scripts/lib/command-runner.mjs";
 const ALLOWED = new Map([
   ["pnpm install --frozen-lockfile", ["install", "--frozen-lockfile"]],
   ["pnpm lint", ["lint"]],
+  ["pnpm lint:check", ["lint:check"]],
   ["pnpm type-check", ["type-check"]],
   ["pnpm build", ["build"]],
+  ["pnpm build:standalone", ["build:standalone"]],
 ]);
 function argsOf(argv) { const args = {}; for (let i = 0; i < argv.length; i += 2) args[argv[i].replace(/^--/, "")] = argv[i + 1]; return args; }
 export function verify(projectRoot, evidenceDir, { timeoutMs = 0 } = {}) {
@@ -17,7 +19,9 @@ export function verify(projectRoot, evidenceDir, { timeoutMs = 0 } = {}) {
   if (manifest.schema_version !== 4 || manifest.kind !== "frontend-scaffold" || manifest.generation_mode !== "controlled-generation") throw new TypeError("invalid frontend scaffold manifest");
   if (!manifest.generated_files.includes("pnpm-lock.yaml")) throw new TypeError("frontend template must contain pnpm-lock.yaml");
   const commands = manifest.verification_commands;
-  for (const required of ALLOWED.keys()) if (!commands.includes(required)) throw new TypeError(`missing required verification command: ${required}`);
+  const requiredCommands = ["pnpm install --frozen-lockfile", manifest.template?.kind === "bundled" ? "pnpm lint:check" : "pnpm lint", "pnpm type-check", "pnpm build", ...(manifest.template?.kind === "bundled" ? ["pnpm build:standalone"] : [])];
+  for (const required of requiredCommands) if (!commands.includes(required)) throw new TypeError(`missing required verification command: ${required}`);
+  for (const command of commands) if (!ALLOWED.has(command)) throw new TypeError(`unsupported verification command: ${command}`);
   mkdirSync(evidenceDir, { recursive: true });
   const results = commands.map((command, index) => {
     const argv = ALLOWED.get(command);

package/template/.pi/skills/yss-frontend-scaffold-generator/scripts/scaffold-generator.test.mjs

@@ -53,3 +53,35 @@ const second = spawnSync(process.execPath, [runner, "--contract-file", contractF
 assert.notEqual(second.status, 0);
 assert.match(second.stderr, /must not exist or must be empty/);
 process.stdout.write("前端脚手架受控生成场景验证通过\n");
+
+// Bundled source proves portability without the source project's checkout or credentials.
+const { generate } = await import('./generate_scaffold.mjs');
+const { createHash } = await import('node:crypto');
+const bundleManifest = readFileSync(path.resolve('.agents/skills/yss-frontend-scaffold-generator/references/data-quality-v1.manifest.json'));
+const bundle = structuredClone(contract);
+bundle.frontend.template = { kind: 'bundled', baseline_id: 'data-quality-v1', manifest_digest: `sha256:${createHash('sha256').update(bundleManifest).digest('hex')}` };
+bundle.verification_commands = ['pnpm install --frozen-lockfile', 'pnpm lint:check', 'pnpm type-check', 'pnpm build', 'pnpm build:standalone'];
+bundle.target_output_dir = path.join(root, 'bundled'); bundle.implementation_repository = bundle.target_output_dir; bundle.allowed_write_paths = [bundle.target_output_dir];
+const saveBundle = () => writeFileSync(contractFile, JSON.stringify(bundle));
+saveBundle();
+const bundled = generate({ contractFile, outputDir: bundle.target_output_dir });
+assert.equal(bundled.template.checkout, undefined);
+assert.equal(JSON.parse(readFileSync(path.join(bundle.target_output_dir, 'packages/package.json'))).dependencies['ant-design-vue'], '4.2.6');
+assert.equal(JSON.parse(readFileSync(path.join(bundle.target_output_dir, 'packages/src/config/theme.json'))).algorithm, 'default');
+for (const forbidden of ['.npmrc', 'node_modules', '.git', 'packages/src/views/datasource/index.vue', 'scripts/sync-openapi.js']) assert.equal(existsSync(path.join(bundle.target_output_dir, forbidden)), false, forbidden);
+assert.throws(() => generate({ contractFile, outputDir: bundle.target_output_dir }), /must not exist or must be empty/);
+bundle.target_output_dir = path.join(root, 'rejected'); bundle.implementation_repository = bundle.target_output_dir; bundle.allowed_write_paths = [bundle.target_output_dir];
+const goodDigest = bundle.frontend.template.manifest_digest;
+bundle.frontend.template.manifest_digest = `sha256:${'0'.repeat(64)}`; saveBundle();
+assert.throws(() => generate({ contractFile, outputDir: bundle.target_output_dir }), /manifest digest/);
+assert.equal(existsSync(bundle.target_output_dir), false);
+bundle.frontend.template.manifest_digest = goodDigest;
+bundle.frontend.app_name = 'invalid";execute()'; saveBundle();
+assert.throws(() => generate({ contractFile, outputDir: bundle.target_output_dir }), /kebab-case/);
+bundle.frontend.app_name = 'safe'; bundle.frontend.base_route = '/../escape'; saveBundle();
+assert.throws(() => generate({ contractFile, outputDir: bundle.target_output_dir }), /base_route/);
+bundle.frontend.base_route = '/safe'; bundle.frontend.openapi_impact = 'frozen'; bundle.frontend.openapi_json_ref = path.join(root, 'openapi.json'); bundle.frontend.openapi_json_digest = `sha256:${'0'.repeat(64)}`;
+writeFileSync(bundle.frontend.openapi_json_ref, '{"openapi":"3.1.0"}'); saveBundle();
+assert.throws(() => generate({ contractFile, outputDir: bundle.target_output_dir }), /OpenAPI JSON digest mismatch/);
+assert.equal(existsSync(bundle.target_output_dir), false);
+process.stdout.write('Data Quality bundled baseline / source binding / no-write rejection scenarios passed\n');

package/template/.pi/skills/yss-hook/SKILL.md

@@ -13,7 +13,7 @@ description: Use when YSS Vue 页面涉及 vue-hooks-plus/useRequest、分页、
 - Vue Hooks Plus `useRequest`: `https://inhiblabcore.github.io/vue-hooks-plus/zh/hooks/useRequest/quick-start`
 - Local reference index: `references/frontend-docs.md`
 
-本技能负责请求执行、分页/筛选参数、选择状态、响应映射和页面级调度。接口导入与 Orval mutator 使用 `yss-api-integration`；布局、组件与交互呈现使用 `yss-components`；高度计算分别使用 `yss-use-table-height` 或 `yss-use-tree-height`。
+本技能负责请求执行、分页/筛选参数、选择状态、响应映射和页面级调度。接口导入与 Orval mutator 使用 `yss-api-integration`；页面布局和组件选型从 `yss-ui` 路由到 `page-skeleton`、`component-selection-imports` 及具体组件 Skill；高度计算分别使用 `yss-use-table-height` 或 `yss-use-tree-height`。
 
 官方 `@yss-ui/hooks` 当前公开 `useFullscreen`、`useTreeHeight`、`useTableHeight`、`useLoading`、`usePollingTask` 与 `useUrlState`。`useRequest`、防抖、缓存或重试不属于这套公开 YSS Hooks 契约。仅当项目已批准 `vue-hooks-plus` 及其具体版本时，才可使用第 3 节的 `useRequest`；不得把它命名或包装成 YSS 官方 API。
 

package/template/.pi/skills/yss-implementation-contract-compiler/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: yss-implementation-contract-compiler
-description: Use when a YSS vertical slice is entering implementation, spans multiple frontend/backend/API areas, needs implementation readiness checked, or requires a minimal YSS skill set, Slice Implementation Contract, TDD mode, evidence plan, or reroute decision.
+description: "编译或重验 YSS Slice Implementation Contract、最小 Skill 集与证据计划；判定偏离及重新路由。"
 ---
 
 # YSS Implementation Contract Compiler
 
-阶段 7 的实现合同编译器。它把已批准的生命周期资产、垂直切片、capability 和窄 Recipe 编译为 `Slice Implementation Contract` v2 草案；不批准合同、不写业务代码、不设置 `ready-for-agent`。
+阶段 7 的实现合同编译器。它把已批准的生命周期资产、垂直切片、capability 和窄 Recipe 编译为 `Slice Implementation Contract` v3 草案；不批准合同、不写业务代码、不设置 `ready-for-agent`。
 
 文档输出时按 `lifecycle-document-output` 条件调用 `i-have-adhd`，读取 `docs/process/document-writing.md`；作用域仅限当前产物，派发时传递条件及引用。
 
@@ -15,7 +15,7 @@ description: Use when a YSS vertical slice is entering implementation, spans mul
 
 ## 输入
 
-先读取 Spec、切片 Ticket、需求冻结、适用的原型确认、OpenAPI Freeze/no-impact、系统/数据架构、Design Review、Build Architecture Checklist、实现仓库和验证命令。输入缺失、未批准或 `stale` 时输出 `blocked`，交回 `yss-product-lifecycle`。
+先读取 Spec、切片 Ticket、需求冻结、适用的原型确认、OpenAPI Freeze/no-impact、适用的系统/数据架构和 Design Review、Build Architecture Checklist、实现仓库和验证命令。输入缺失、未批准或 `stale` 时输出 `blocked`，交回 `yss-product-lifecycle`。
 
 ## 编译循环
 
@@ -28,6 +28,8 @@ description: Use when a YSS vertical slice is entering implementation, spans mul
 7. 选择 `behavior-tdd` 或 `controlled-generation`。
 8. 输出 `draft`、`blocked` 或 `ready-for-lifecycle-review`，交生命周期编排器核验和持久化。
 
+完整草案使用 `scripts/slice-contract prepare` 或 `prepareSliceImplementationContract` 从已有 Ticket / checkpoint 和必要细化组装；执行前读取唯一 YAML，视图和检查报告不授予权限。
+
 合同结构见 [slice-implementation-contract.md](references/slice-implementation-contract.md)，专项返回协议见 [yss-skill-execution-result.md](references/yss-skill-execution-result.md)。前端、后端和测试子任务必须由生命周期主控从批准的 Slice Contract 编译任务包；任务包 schema 为 `docs/process/schemas/subagent-task-package.schema.json`，技能列表必须来自 `taskPackageDefaults`，不能由编译器或执行 Agent 另行手写。
 
 ## 硬规则
@@ -35,7 +37,7 @@ description: Use when a YSS vertical slice is entering implementation, spans mul
 采用专职前端 profile 或显式 `frontend_delivery` 绑定时，先按 `docs/process/frontend-backend-delivery.md` 实际核验战略与后端联合交付。缺任一输入只能诊断和回交；输入通过后准备计划/合同，正式实现、生成和恢复仍须当前批准的 Slice Contract 冻结接收摘要。接口或部署版本漂移时重新接收，不复用旧成功输出。
 
 - 编译器不得输出 `approved`、`ready-for-agent` 或 `completed`。
-- Registry、Slice Contract 或编译器合同 schema v1 一律拒绝并给出迁移到 v2 的提示；不自动升级，不提供旧技能名兼容。
+- Registry 和编译规则保持 schema v2；新 Slice 使用 v3，v2 按原规则读取和显式迁移。schema v1 一律拒绝，不自动升级，不提供旧技能名兼容。
 - `required_capabilities` 与 `required_skills` 必须同时冻结；Registry 或编译器摘要变化后合同立即 `stale`，重新编译后仍须交生命周期重新批准。
 - UI 影响按来源分支核验：新设计保持正式原型确认与 Visual Baseline；无 UI 改动才允许 `existing-ui-baseline` v1，并须当前真实基线确认及 `case_id`。任一来源缺少当前批准或摘要绑定时，不得路由页面实现。模型必须先读 manifest 与语义引用，再查看对应 PNG；禁止目录 glob 和图片独立猜义。
 - Repository/数据模型影响缺少数据架构时，不得路由持久化实现。
@@ -45,7 +47,7 @@ description: Use when a YSS vertical slice is entering implementation, spans mul
 - Harness 内实现路径必须落在 `apps/backend/<project>/` 或 `apps/frontend/<project>/` 的具体项目目录；`apps/backend/`、`apps/frontend/` 只能作为容器，`app/backend/`、`app/frontend/` 及其子路径一律阻断。外部实现仓库使用其登记的真实项目根路径。`git-submodule` 使用 `implementation_path_policy: git-submodule-harness-apps`，空 gitlink、detached HEAD 或 `--force` 覆盖挂载点不得脚手架；`inspectWorkingTreeScope.writable` 必须为显式布尔值。
 - 当前用户、缓存、审计、Excel、分布式 ID、请求校验、错误映射、加解密或网关韧性命中时，必须按 `compiler-contract.yaml` 的 `impact_to_capabilities` 补齐入口 capability；不能只在 `boundaries.md` 中提及。仅复用已经验证的平台认证 / 授权能力不算 component impact，不自动增加权限专项 skill。
 - 业务行为使用 `behavior-tdd`；只有机械脚手架/生成物可用 `controlled-generation`，并记录例外和验证。
-- 阶段 5 若命中交付面且无已有工程，按 Project Scaffold Contract schema v4 编译 `controlled-generation` 合同 draft。后端先读取 `scaffold-architecture-decisions.yaml`，只接受已达到 `lifecycle-approved` 且 digest 当前的 DDD / Layered MVC 选择；前端绑定标准模板精确 commit、应用标识、路由、OpenAPI 影响、目标路径和 `init_git` 决定。合同经生命周期批准并持久化后才能运行生成器。历史后端 schema v3 只读兼容并可完成已批准生成；前端只接受 v4。生成与验证完成、仓库登记并通过 `check.implementation-repositories-ready` 后，才编译 Ticket 与业务 Slice Contract。
+- 阶段 5 若命中交付面且无已有工程，按 Project Scaffold Contract schema v4 编译 `controlled-generation` 合同 draft。后端先读取已确认的架构决定，并以原始字节 digest 绑定批准且当前的 Technical Design、Data Architecture Decision v1、API Contract Decision v1 及 `gate.engineering-contract-approved` 真实批准记录；API `required` 时工程批准还必须直接绑定冻结 OpenAPI YAML 的版本与摘要，`not-applicable` 时必须有影响评估、明确原因和证据。前端绑定标准模板精确 commit、应用标识、路由、OpenAPI 影响、目标路径和 `init_git` 决定。合同经生命周期批准并持久化后才能运行生成器。历史后端 schema v3 只允许 Manifest 只读恢复审计，并须补齐 API 对账，不得新生成；前端只接受 v4。生成与验证完成、仓库登记并通过 `check.implementation-repositories-ready` 后，才编译 Ticket 与业务 Slice Contract。
 - 脚手架合同在编译阶段只能是 `draft` / `ready-for-lifecycle-review` / `blocked`；只有生命周期编排器可以把已持久化脚手架合同标记为 `approved`。脚手架合同只覆盖业务代码前的工程骨架工作单元；生成、基线校验和合同重编译完成后，它不能替代脚手架后的 Slice Implementation Contract。
 - 脚手架输出消费批准的脚手架合同；脚手架后的所有生成后端代码都必须绑定当前批准且版本当前的 Slice Implementation Contract、主 YSS skill、依赖闭包、允许写路径、预期证据和 YSS Skill Execution Result。打印命令、`./mvnw validate` 单项通过或脚手架成功不能替代合同批准；生成范围从机械内容变成业务行为时触发完整重路由。
 - 专项结果中的越界路径、缺失证据、`drift`、`violation` 或 `new_impacts` 必须阻断或重路由。
@@ -60,10 +62,16 @@ description: Use when a YSS vertical slice is entering implementation, spans mul
 
 ## 输出
 
-输出合同草案、capability/Recipe 解析记录、技能依赖闭包、不适用理由、阻塞项、TDD 模式、工作单元、预期证据、验证命令、人工审查点、完整重路由触发器，以及建议的 `suggested_owner_role_id`（UI 影响 → `role.frontend-engineer`，后端影响 → `role.backend-engineer`，测试/审查 → `role.test-engineer`）。自然语言说明不能替代结构化合同字段。编译器不得自行批准合同、设置 `ready-for-agent` 或关闭会签门禁；owner 建议只供主控派活。
+输出唯一 YAML 合同草案及派生报告；报告包含 capability/Recipe 解析记录、技能依赖闭包、不适用理由、阻塞项、TDD 模式、工作单元、预期证据、验证命令、人工审查点、完整重路由触发器，以及建议的 `suggested_owner_role_id`（UI 影响 → `role.frontend-engineer`，后端影响 → `role.backend-engineer`，测试/审查 → `role.test-engineer`）。自然语言说明不能替代结构化合同字段。编译器不得自行批准合同、设置 `ready-for-agent` 或关闭会签门禁；owner 建议只供主控派活。
 
 ## 战略交接快照包
 
 跨仓交接使用 `scripts/strategic-handoff export / verify / import`。正式导出前补齐源战略的稳定规则 ID、关键场景和当前批准绑定；源资产原字节冻结、包内路径通过清单解析。目标导入只产生快照和对账/承接草案，正式 reconciliation 通过后才能进入战术设计。流程与字段见 `docs/process/strategic-handoff-package.md`。
 
 来自战略交接包的技术设计合同（DDD / MVC）必须绑定 `strategic_handoff` 导入收据、包摘要、正式目标对账及逐条承接 rows。来自导入包时禁止仅填 `upstream_current: true`。批准前执行 `scripts/verify-strategic-handoff-consumption --root <target> <tactical>`；存在受控延期时按切片执行 `--slice <slice-id>`，实际核验通过且合同批准后才可继续相关切片。最新源规则、关键场景或资产变化使依赖项 stale；未知依赖扩大阻断，业务冲突回交战略方。结果绑定当前包与战术摘要，不能复用旧输出宣布 ready-for-agent。
+
+Slice v3 的任务进度、缺口和实时就绪结果不回写合同。源事实集中在 basis，Skill 闭包只在 resolution 保存，工作单元继承共同约束；独立工程审查与已有用户确认共同交生命周期批准。详见合同引用。
+
+## 后端脚手架平台承接
+
+消费生命周期已确认的架构与 `platform_configuration` v2；不得自行选择、批准或静默升级 Boot/Java。平台清单执行 `scripts/backend-platforms` 查询；只允许已验证 YSS 组合，新生成缺少配置或证据即阻断。决定、合同、Manifest 与下游架构身份须绑定同一平台及兼容摘要。详见 仓库共享合同 `docs/engineering/backend-platforms.md`。

package/template/.pi/skills/yss-implementation-contract-compiler/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "YSS Implementation Contract Compiler"
   short_description: "Compile capabilities into a minimal implementation contract"
-  default_prompt: "Use yss-implementation-contract-compiler to compile the approved slice capabilities, deterministic skill closure, evidence plan, and v2 contract draft."
+  default_prompt: "Use yss-implementation-contract-compiler to compile the approved slice capabilities, deterministic skill closure, evidence plan, and v3 contract draft."

package/template/.pi/skills/yss-implementation-contract-compiler/references/boundaries.md

@@ -118,8 +118,6 @@
 | `yss-prototype-stage` | `i-have-adhd` | `context-conditional` | `lifecycle-document-output` |
 | `yss-prototype-stage` | `prototype-review` | `review-only` | — |
 | `yss-prototype-stage` | `yss-design-system` | `coordination-only` | — |
-| `yss-prototype-stage` | `yss-antdv-next-design` | `context-conditional` | `h2-vue-antdv-next-default` |
-| `yss-prototype-stage` | `yss-antd-design` | `context-conditional` | `h2-react-antd-explicit-compatibility` |
 | `yss-ddd-scaffold-generator` | `yss-backend-scaffold-parent` | `context-required` | — |
 | `yss-ddd-scaffold-generator` | `alibaba-java-code-style` | `context-required` | — |
 | `yss-layered-mvc-scaffold-generator` | `alibaba-java-code-style` | `context-required` | — |
@@ -154,8 +152,12 @@
 | `yss-validation` | `yss-exception` | `component-dependency` | — |
 | `yss-security-algorithm` | `yss-exception` | `component-dependency` | — |
 | `yss-exception` | `yss-dto` | `context-required` | — |
-| `yss-ui-business-page-generation` | `yss-components` | `context-conditional` | `components` |
+| `yss-ui-business-page-generation` | `component-selection-imports` | `context-conditional` | `components` |
 | `yss-ui-business-page-generation` | `yss-hook` | `context-conditional` | `hooks` |
 | `yss-ui-business-page-generation` | `yss-formily` | `context-conditional` | `form` |
 | `yss-ui-business-page-generation` | `yss-api-integration` | `context-conditional` | `api` |
+| `yss-formily` | `formily-foundation` | `context-required` | — |
+| `yss-formily` | `formily-linkage-effects` | `context-conditional` | `formily-linkage` |
+| `yss-formily` | `formily-mode-slot-detail` | `context-conditional` | `formily-mode-detail` |
+| `yss-formily` | `formily-step-flow` | `context-conditional` | `formily-step-flow` |
 | `yss-api-integration` | `yss-openapi-governance` | `context-conditional` | `regeneration` |

package/template/.pi/skills/yss-implementation-contract-compiler/references/compiler-contract.yaml

@@ -1,4 +1,10 @@
 schema_version: 2
+slice_contract_versions:
+  default: 3
+  accepted: [2, 3]
+  v3_schema: docs/process/schemas/slice-implementation-contract-v3.schema.json
+  normalization: scripts/lib/slice-contract.mjs
+  v2_migration: explicit-new-draft-no-inherited-approval
 backend_architecture:
   registry_source: docs/agents/yss-skill-registry.yaml
   identity_schema: docs/process/schemas/backend-architecture-identity.schema.json
@@ -85,6 +91,7 @@ impact_flags_required: [ui_impact, api_impact, no_api_impact, data_impact, backe
 exclusive_flags:
   - [api_impact, no_api_impact]
 
+# 以下 required 表仅供历史 Slice v2；v3 由 v3_schema 校验。
 slice_contract_required:
   root: [schema_version, contract_id, contract_version, slice_id, status, lifecycle_refs, readiness, resolution, common, frontend, backend, contract, cross_repo, work_units]
   lifecycle_refs: [spec, ticket, requirement_freeze, low_fidelity_review, prototype_review, prototype_profile_decision, prototype_deliverable, prototype_deliverable_verification, visual_baseline, prototype_confirmation, openapi_freeze_or_no_impact, architecture_review, data_architecture, technical_design, tactical_design, engineering_baseline, build_architecture_checklist, implementation_repository, frontend_repository, backend_repository, maven_wrapper]
@@ -149,9 +156,17 @@ project_scaffold_contract_schema:
   discriminant: delivery_role
   delivery_roles:
     backend:
-      scaffold_kinds: [backend-ddd, backend-layered-mvc]
-      generators: [yss-ddd-scaffold-generator, yss-layered-mvc-scaffold-generator]
-      requires: [scaffold_request_id, architecture_family, decision_ref, decision_id, decision_digest, project_name, base_package, maven_coordinates, profiles, module_profile]
+      scaffold_kinds: [backend-ddd, backend-layered-mvc, backend-mvc-data-analysis]
+      generators: [yss-ddd-scaffold-generator, yss-layered-mvc-scaffold-generator, yss-mvc-data-analysis-project-initializer]
+      requires: [scaffold_request_id, architecture_family, decision_ref, decision_id, decision_digest, project_name, base_package, maven_coordinates, profiles, module_profile, design_prerequisites]
+      design_prerequisites:
+        required: [technical_design, data_architecture_decision, api_contract_decision, engineering_contract_approval_ref]
+        artifact_binding: [ref, version, digest]
+        data_impact_modes: [required, not-applicable]
+        api_impact_modes: [required, not-applicable]
+        api_required_closure: [openapi_yaml, validation_record, independent_draft_review, freeze]
+        api_same_original_bytes: true
+        approval_gate: gate.engineering-contract-approved
     frontend:
       scaffold_kinds: [frontend-yss-vue3]
       generators: [yss-frontend-scaffold-generator]
@@ -163,7 +178,7 @@ project_scaffold_contract_schema:
   target_policy: nonexistent-or-empty
   force_overwrite: forbidden
   compatibility:
-    backend_schema_v3: read-only-and-complete-approved-generation
+    backend_schema_v3: historical-manifest-read-only-recovery-audit
     frontend_before_v4: unsupported
 
 scaffold_contract_schema:
@@ -236,7 +251,7 @@ scaffold_contract_schema:
   lifecycle_boundary:
     compiler_emits: [draft, ready-for-lifecycle-review, blocked]
     lifecycle_approves: [approved]
-    generator_consumes: [approved]
+    generator_consumes: []
     after_generation:
       domain-driven: [yss-backend-scaffold-parent, yss-implementation-contract-compiler]
       layered-mvc: [yss-implementation-contract-compiler]
@@ -408,3 +423,12 @@ strategic_handoff_consumption:
   stale_policy: latest-imported-source-digest-and-dependent-slices
   unknown_dependency: block-all
   compiler_must_not_approve: true
+
+backend_platform_contract:
+  schema_version: 2
+  catalog_ref: docs/engineering/backend-platforms.json
+  configuration_field: platform_configuration
+  selection_owner: yss-product-lifecycle
+  new_generation_requires: [exact-boot-java, confirmed-decision, matching-yss-coordinates, verified-compatibility-entry]
+  candidate_generation: maintenance-only
+  candidate_downstream: blocked