create-yss-spec 3.4.10 → 3.5.2

package/template/README.md

@@ -32,7 +32,7 @@
 └── scripts/                 ← 模板轻量校验脚本
 ```
 
-项目需要生成度量、外部实现仓库记录或其他临时产物时再按需创建对应目录。前后端实现仓库接入规则见 `docs/process/implementation-repo-integration.md`。
+项目需要生成度量、外部实现仓库记录或其他临时产物时再按需创建对应目录。前后端实现仓库接入规则见 `.template-spec/process/implementation-repo-integration.md`。
 
 ## Quickstart
 
@@ -43,14 +43,14 @@
 5. 实现仓库接入、YSS 路由、独立审查、fresh verification 和 Git checkpoint 以 `AGENTS.md` 的硬门禁为准。
 
 
-YSS UI 组件知识同时通过项目级 MCP 配置提供；支持的客户端、Codex 全局安装和自检方法见 [YSS UI MCP 接入](./docs/user-guide/yss-ui-mcp.md)。
+YSS UI 组件知识同时通过项目级 MCP 配置提供；支持的客户端、Codex 全局安装和自检方法见 [YSS UI MCP 接入](./.template-spec/user-guide/yss-ui-mcp.md)。
 
 ## 模板初始化 CLI
 
 `create-yss-spec` 的发布仓库是 [iloveZzz/create-yss-spec](https://github.com/iloveZzz/create-yss-spec)。用户从统一手册选择家族；CLI 源码、测试、打包和发布仍在各自仓库维护：
 
-- [YSS 用户手册：CLI 能力与写入方式](./docs/user-guide/用户手册.md#cli-能力与写入方式)
-- [YSS 用户手册：接管、同步与恢复](./docs/user-guide/用户手册.md#接管同步与恢复)
+- [YSS 用户手册：CLI 能力与写入方式](./.template-spec/user-guide/用户手册.md#cli-能力与写入方式)
+- [YSS 用户手册：接管、同步与恢复](./.template-spec/user-guide/用户手册.md#接管同步与恢复)
 
 推荐入口：
 
@@ -98,35 +98,32 @@ scripts/verify-template-fast
 
 ## 关键文档
 
+业务方可从[用户手册](./.template-spec/user-guide/用户手册.md)了解工作入口；阶段、条件门禁和完成证据以生命周期注册表及流程裁剪规则为准。
+
 | 文档 | 内容 |
 |------|------|
 | [AGENTS.md](./AGENTS.md) | 全局 AI 指令 + 工程基线入口 + Agent 协作 |
-| [docs/user-guide/用户手册.md](./docs/user-guide/用户手册.md) | 从首次只读检查到需求、开发、审查、发布和 CLI 操作的统一用户手册 |
-| [阶段接入与产物复用使用手册](./docs/user-guide/阶段接入与产物复用使用手册.md) | 复用上游资产，从指定入口继续；含后端交付后前端开发操作 |
-| [docs/process/PDCA-SCRUM.md](./docs/process/PDCA-SCRUM.md) | PDCA × Scrum × AI |
-| [docs/process/MATT-POCOCK-ENGINEERING-SKILLS.md](./docs/process/MATT-POCOCK-ENGINEERING-SKILLS.md) | Matt Pocock Engineering Skills 集成与使用 |
-| [docs/process/lifecycle-registry.yaml](./docs/process/lifecycle-registry.yaml) | 生命周期结构事实源：主阶段、门禁、产物、工作单元、证据与稳定 ID |
-| [docs/process/harness-process-tailoring.md](./docs/process/harness-process-tailoring.md) | 小改动 / 中等变更 / 新模块的流程裁剪指南 |
-| [docs/process/harness-executive-blueprint.md](./docs/process/harness-executive-blueprint.md) | 面向业务方和管理者的 Harness 一页式蓝图 |
-| [docs/process/implementation-repo-integration.md](./docs/process/implementation-repo-integration.md) | 外部前端 / 后端实现仓库接入与跨仓库切片绑定 |
-| [docs/agents/README.md](./docs/agents/README.md) | Agent 协作文档目录说明 |
-| [docs/user-guide/yss-ui-mcp.md](./docs/user-guide/yss-ui-mcp.md) | YSS UI MCP 项目配置、全局安装边界与自检 |
-| [docs/plan/IDEATION.md](./docs/plan/IDEATION.md) | 机会构想方法 |
-| [docs/architecture/README.md](./docs/architecture/README.md) | 架构设计 + 审查清单 |
-| [docs/testing/README.md](./docs/testing/README.md) | 测试策略 |
+| [.template-spec/user-guide/用户手册.md](./.template-spec/user-guide/用户手册.md) | 从首次只读检查到需求、开发、审查、发布和 CLI 操作的统一用户手册 |
+| [阶段接入与产物复用使用手册](./.template-spec/user-guide/阶段接入与产物复用使用手册.md) | 复用上游资产，从指定入口继续；含后端交付后前端开发操作 |
+| [.template-source/process/MATT-POCOCK-ENGINEERING-SKILLS.md](./.template-source/process/MATT-POCOCK-ENGINEERING-SKILLS.md) | Matt Pocock Engineering Skills 集成与使用 |
+| [.template-spec/process/lifecycle-registry.yaml](./.template-spec/process/lifecycle-registry.yaml) | 生命周期结构事实源：主阶段、门禁、产物、工作单元、证据与稳定 ID |
+| [.template-spec/process/harness-process-tailoring.md](./.template-spec/process/harness-process-tailoring.md) | 小改动 / 中等变更 / 新模块的流程裁剪指南 |
+| [.template-spec/process/implementation-repo-integration.md](./.template-spec/process/implementation-repo-integration.md) | 外部前端 / 后端实现仓库接入与跨仓库切片绑定 |
+| [.template-spec/agents/README.md](./.template-spec/agents/README.md) | Agent 协作文档目录说明 |
+| [.template-spec/user-guide/yss-ui-mcp.md](./.template-spec/user-guide/yss-ui-mcp.md) | YSS UI MCP 项目配置、全局安装边界与自检 |
+| [.template-spec/architecture/README.md](./.template-spec/architecture/README.md) | 架构设计 + 审查清单 |
 
 ## 核心模板
 
 | 模板 | 用途 |
 |------|------|
-| [docs/templates/spec-template.md](./docs/templates/spec-template.md) | Spec，包含 OpenAPI 影响、测试决策、AI / 人工审查点 |
-| [docs/templates/local-parent-ticket-template.md](./docs/templates/local-parent-ticket-template.md) | Local Markdown 功能父 Ticket 与生命周期索引 |
-| [docs/templates/vertical-slice-ticket-template.md](./docs/templates/vertical-slice-ticket-template.md) | 垂直切片 Ticket |
-| [docs/templates/agent-brief-template.md](./docs/templates/agent-brief-template.md) | `triage` 产出的 Agent Brief |
-| [docs/templates/implementation-repo-registry-template.md](./docs/templates/implementation-repo-registry-template.md) | 外部实现仓库登记 |
-| [docs/templates/cross-repo-slice-template.md](./docs/templates/cross-repo-slice-template.md) | 跨仓库垂直切片记录 |
-| [docs/architecture/templates/architecture-deepening-template.md](./docs/architecture/templates/architecture-deepening-template.md) | 架构 deepening 候选与 seam 设计 |
+| [.template-spec/templates/spec-template.md](./.template-spec/templates/spec-template.md) | Spec，包含 OpenAPI 影响、测试决策、AI / 人工审查点 |
+| [.template-spec/templates/local-parent-ticket-template.md](./.template-spec/templates/local-parent-ticket-template.md) | Local Markdown 功能父 Ticket 与生命周期索引 |
+| [.template-spec/templates/vertical-slice-ticket-template.md](./.template-spec/templates/vertical-slice-ticket-template.md) | 垂直切片 Ticket |
+| [.template-spec/templates/implementation-repo-registry-template.md](./.template-spec/templates/implementation-repo-registry-template.md) | 外部实现仓库登记 |
+| [.template-spec/templates/cross-repo-slice-template.md](./.template-spec/templates/cross-repo-slice-template.md) | 跨仓库垂直切片记录 |
+| [.template-spec/architecture/templates/architecture-deepening-template.md](./.template-spec/architecture/templates/architecture-deepening-template.md) | 架构 deepening 候选与 seam 设计 |
 
 ## 按职责使用与升级
 
-[四个现行家族用户手册](docs/user-guide/用户手册.md)提供选型、初始化及升级；[设备借用贯穿案例](docs/user-guide/设备借用贯穿案例.md)演示战略、后端、前端与统一验收。[全部手册](docs/user-guide/用户手册索引.md)给出本体和子项目入口。GitHub 当前能力、npm 发布版本与实例模板快照分别核对。
+[四个现行家族用户手册](.template-spec/user-guide/用户手册.md)提供选型、初始化及升级；[设备借用贯穿案例](.template-spec/user-guide/设备借用贯穿案例.md)演示战略、后端、前端与统一验收。[全部手册](.template-spec/user-guide/用户手册索引.md)给出本体和子项目入口。GitHub 当前能力、npm 发布版本与实例模板快照分别核对。

package/template/scripts/backend-delivery

@@ -8,7 +8,7 @@ async function preflightExport(values) {
   const root=path.resolve(values['source-root']),delivery=read(safe(root,values.delivery));
   const document=read(safe(root,delivery.slice_contract.ref)),contract=document.slice_contract||document;
   const identity=contract.resolution?.architecture_identity||contract.backend?.architecture_identity||contract.architecture_identity;
-  ensure(identity?.schema_version!==2||values['preflight-input'],'preflight-required: 既有工程身份 v2 导出必须提供 --preflight-input <file>；先按 docs/process/delivery-preflight.md 准备源资产清单并执行 export 阶段只读预检');
+  ensure(identity?.schema_version!==2||values['preflight-input'],'preflight-required: 既有工程身份 v2 导出必须提供 --preflight-input <file>；先按 .template-spec/process/delivery-preflight.md 准备源资产清单并执行 export 阶段只读预检');
   if(!values['preflight-input'])return;
   const {preflightDelivery}=await import('./lib/delivery-preflight.mjs');
   const input=read(path.resolve(values['preflight-input']));

package/template/scripts/design-md

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import "./lib/design-md.mjs";

package/template/scripts/lib/api-contract-decision.mjs

@@ -8,7 +8,7 @@ import { validateJsonSchema } from "./json-schema.mjs";
 import { openApiDigest, resolveOpenApiRef, validateOpenApiDraftValidationRecord } from "./openapi-draft-validation.mjs";
 
 const TEMPLATE_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
-const SCHEMA = path.join(TEMPLATE_ROOT, "docs/process/schemas/api-contract-decision.schema.json");
+const SCHEMA = path.join(TEMPLATE_ROOT, ".template-spec/process/schemas/api-contract-decision.schema.json");
 const fail = (message) => { throw new TypeError(message); };
 const readBound = (root, ref, label) => {
   const file = resolveOpenApiRef(root, ref);

package/template/scripts/lib/approved-execution-context.mjs

@@ -38,13 +38,13 @@ export function verifySliceContractApproval(binding,{root=process.cwd(),contract
   assertExistingSliceStructure(contract);
   check((!binding.id||binding.id===contract.contract_id)&&(!binding.version||binding.version===contract.contract_version),'EXECUTION_CONTRACT_CONFLICT','当前合同身份或版本不匹配');
   if(expected)check(same(sourceSliceContract(expected),sourceSliceContract(contract)),'EXECUTION_CONTRACT_CONFLICT','调用方合同与持久化原字节不一致');
-  const roles=read(safe(root,'docs/agents/digital-human-roles.yaml'));
+  const roles=read(safe(root,'.template-spec/agents/digital-human-roles.yaml'));
   const approval=read(safe(root,binding.approval_ref));
   if(!countersignRuleForGate(roles.gate_policy,gateId)&&roles.gate_policy.orchestrator?.includes(gateId)) {
     // The current lifecycle already owns this gate. Consume its checkpoint and existing
     // implementation-scope decision instead of inventing an approval-record countersignature.
     check(approval?.gates&&approval?.human_review&&!approval.gate_id,'EXECUTION_APPROVAL_PROTOCOL','当前主控 gate 需要生命周期 checkpoint，不接受伪造 approval-record');
-    schema(approval,'docs/process/schemas/lifecycle-checkpoint.schema.json');
+    schema(approval,'.template-spec/process/schemas/lifecycle-checkpoint.schema.json');
     const gate=approval.gates?.[gateId],review=approval.human_review||{};
     check(approval.repository_mode==='project-instance'&&approval.status!=='blocked'&&approval.blockers.length===0,'EXECUTION_APPROVAL_BLOCKED','主控 checkpoint 仍有阻断或不是产品实例');
     check(gate?.status==='approved'&&gate.subject_ref===binding.ref,'EXECUTION_APPROVAL_SCOPE','主控 gate 未批准当前持久化 Slice');
@@ -80,11 +80,11 @@ function primeApprovalSchemas(binding,root){
     // Original consumers still validate every semantic and authorization rule below.
     try{
       const source=parseSliceYaml(readFileSync(safe(root,binding.ref))),raw=source.slice_contract||source;
-      if(raw.schema_version===3)add(raw,'docs/process/schemas/slice-implementation-contract-v3.schema.json',false,'verbose');
+      if(raw.schema_version===3)add(raw,'.template-spec/process/schemas/slice-implementation-contract-v3.schema.json',false,'verbose');
       const approval=read(safe(root,binding.approval_ref));
       if(approval.gates&&approval.human_review&&!approval.gate_id){
-        add(approval,'docs/process/schemas/lifecycle-checkpoint.schema.json',false,'verbose');
-        for(const requirement of approval.human_review.user_decisions||[])if(requirement.user_decision_ref&&!requirement.continuation_ref){const ref=path.isAbsolute(requirement.user_decision_ref)?path.relative(root,requirement.user_decision_ref):requirement.user_decision_ref;add(read(safe(root,ref)),'docs/process/schemas/user-decision.schema.json',true,'compact');}
+        add(approval,'.template-spec/process/schemas/lifecycle-checkpoint.schema.json',false,'verbose');
+        for(const requirement of approval.human_review.user_decisions||[])if(requirement.user_decision_ref&&!requirement.continuation_ref){const ref=path.isAbsolute(requirement.user_decision_ref)?path.relative(root,requirement.user_decision_ref):requirement.user_decision_ref;add(read(safe(root,ref)),'.template-spec/process/schemas/user-decision.schema.json',true,'compact');}
       }
     }catch{/* The original consumer reports missing or invalid input with its existing code. */}
     if(jobs.length)validateJsonSchemas(jobs);return true;

package/template/scripts/lib/backend-delivery.mjs

@@ -20,7 +20,7 @@ async function approvedFile(root, binding, gate) {
   const bytes=boundFile(root,binding);
   if(gate==='gate.slice-contract-approved'){verifySliceContractApproval(binding,{root});return bytes;}
   const record=read(safe(root,binding.approval_ref));
-  const roles=sourceApprovalPolicy(read(safe(root,'docs/agents/digital-human-roles.yaml')));
+  const roles=sourceApprovalPolicy(read(safe(root,'.template-spec/agents/digital-human-roles.yaml')));
   await sourceApproval(record,roles,root);
   ensure((Array.isArray(gate)?gate:[gate]).includes(record.gate_id),`交付资产批准门禁不匹配: ${binding.ref}`);
   ensure(record.artifact_bindings?.some(x=>x.id===binding.id&&x.version===binding.version&&x.digest===binding.digest),`批准未绑定当前交付资产: ${binding.ref}`);
@@ -30,7 +30,7 @@ async function approvedFile(root, binding, gate) {
 function verification(root, binding, basis, kind) {
   boundFile(root,binding);
   const record=read(safe(root,binding.ref));
-  schema(record,'docs/process/schemas/backend-delivery-verification.schema.json');
+  schema(record,'.template-spec/process/schemas/backend-delivery-verification.schema.json');
   ensure(record.kind===kind&&record.subject_digest===basis,`验证未绑定当前交付: ${kind}`);
   ensure(record.results.every(x=>x.exit_code===0),`后端验证失败: ${kind}`);
   for(const result of record.results) {
@@ -43,7 +43,7 @@ function verification(root, binding, basis, kind) {
 export async function inspectBackendDelivery(root, ref, { readOnly = false } = {}) {
   project(root);
   const delivery=read(safe(root,ref));
-  schema(delivery,'docs/process/schemas/backend-delivery.schema.json');
+  schema(delivery,'.template-spec/process/schemas/backend-delivery.schema.json');
   ensure(boundFile(root,delivery.environment.test_data).length>0,'测试数据准备说明为空');
   await approvedFile(root,delivery.openapi,['gate.engineering-contract-approved','gate.openapi-frozen','gate.openapi-freeze-confirmed']);
   await approvedFile(root,delivery.slice_contract,'gate.slice-contract-approved');
@@ -115,7 +115,7 @@ export async function exportBackendDelivery({sourceRoot,deliveryRef,output,zip=f
   const root=project(sourceRoot), target=path.resolve(output);
   ensure(!existsSync(target)&&(!zip||!existsSync(`${target}.zip`)),'后端包输出已存在');
   const {delivery}=await inspectBackendDelivery(root,deliveryRef);
-  const refs=new Set([deliveryRef,'yss-project.yaml','CONTEXT.md','docs/agents/digital-human-roles.yaml',delivery.openapi.ref,delivery.openapi.approval_ref,delivery.slice_contract.ref,delivery.slice_contract.approval_ref,delivery.environment.test_data.ref,...delivery.supporting_files]);
+  const refs=new Set([deliveryRef,'yss-project.yaml','CONTEXT.md','.template-spec/agents/digital-human-roles.yaml',delivery.openapi.ref,delivery.openapi.approval_ref,delivery.slice_contract.ref,delivery.slice_contract.approval_ref,delivery.environment.test_data.ref,...delivery.supporting_files]);
   for(const binding of Object.values(delivery.verification)) {
     refs.add(binding.ref);
     for(const result of read(safe(root,binding.ref)).results)for(const file of result.evidence)refs.add(file.ref);

package/template/scripts/lib/backend-platform.mjs

@@ -6,7 +6,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 
 export const PLATFORM_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../..");
-export const PLATFORM_CATALOG_REF = "docs/engineering/backend-platforms.json";
+export const PLATFORM_CATALOG_REF = ".template-spec/engineering/backend-platforms.json";
 export const PLATFORM_SKILLS = ["yss-ddd-scaffold-generator", "yss-layered-mvc-scaffold-generator"];
 const fail = (message) => { throw new TypeError(`backend-platform: ${message}`); };
 const componentFail = (code, message) => {

package/template/scripts/lib/backend-review.mjs

@@ -124,7 +124,7 @@ function validateBaselineReview(state,{root}) {
     ensure(digest(fs.readFileSync(file(root,input.spec_binding.ref)))===input.spec_binding.digest.replace(/^sha256:/,''),'Spec evidence stale');
     ensure(text(input.spec_binding.approval_ref),'Spec approval record required');
     const approval=parseSliceYaml(fs.readFileSync(file(root,input.spec_binding.approval_ref),'utf8'));
-    validateApprovalRecord(approval,{root,requireApproved:true,rolesDoc:parseSliceYaml(fs.readFileSync(file(root,'docs/agents/digital-human-roles.yaml'),'utf8'))});
+    validateApprovalRecord(approval,{root,requireApproved:true,rolesDoc:parseSliceYaml(fs.readFileSync(file(root,'.template-spec/agents/digital-human-roles.yaml'),'utf8'))});
     ensure(approval.gate_id==='gate.spec-baseline-approved' && approval.artifact_bindings?.some(b=>b.digest.replace(/^sha256:/,'')===input.spec_binding.digest.replace(/^sha256:/,'')),'Spec approval does not bind current baseline');
     ensure(Array.isArray(result.constraint_results)&&result.constraint_results.some(r=>r.axis==='Spec'&&r.status==='passed'&&text(r.evidence_ref)),'Spec acceptance evidence required');
     for(const row of result.constraint_results.filter(r=>r.axis==='Spec')) {

package/template/scripts/lib/backend-scaffold-prerequisites.mjs

@@ -8,7 +8,7 @@ import { ROOT } from "./lifecycle-registry.mjs";
 import { validateTechnicalDesign } from "../../.agents/skills/yss-technical-design/scripts/validate-technical-design.mjs";
 import { validateApiContractDecision } from "./api-contract-decision.mjs";
 
-const DATA_DECISION_SCHEMA = path.join(ROOT, "docs/process/schemas/data-architecture-decision.schema.json");
+const DATA_DECISION_SCHEMA = path.join(ROOT, ".template-spec/process/schemas/data-architecture-decision.schema.json");
 
 const fail = (message) => { throw new TypeError(message); };
 const digest = (bytes) => `sha256:${createHash("sha256").update(bytes).digest("hex")}`;

package/template/scripts/lib/backend-standards-coverage.mjs

@@ -153,7 +153,7 @@ export function compileStandardsCoverage({root,projectRoot,contract=null,scope_k
   // Derive component ownership from the existing registry and the locked platform index.
   // These are discovery signals only; they never certify component compatibility.
   const discovery_sources=[];
-  const registryRef='docs/agents/yss-skill-registry.yaml';
+  const registryRef='.template-spec/agents/yss-skill-registry.yaml';
   if(fs.existsSync(path.join(root,registryRef))) {
     const registryBytes=fs.readFileSync(coverageFile(root,registryRef));
     discovery_sources.push({ref:registryRef,digest:coverageDigest(registryBytes)});
@@ -195,7 +195,7 @@ export function compileStandardsCoverage({root,projectRoot,contract=null,scope_k
   for(const skill of observedSkills){const {rules,sourceDigests}=readRules(root,skill);rulesSources.push(...sourceDigests);for(const rule of rules){const applicability=tags.has(rule.when)?'required':(['pagination','batch'].includes(rule.when)?'conditional':'not-applicable');constraints.push({...rule,constraint_id:rule.id,applicability,applicability_basis:applicability==='required'?[...reasons.get(skill)].sort():[`no-observed-${rule.when}; reviewer must reconcile actual behavior`]});}}
   ensure(new Set(constraints.map(r=>r.constraint_id)).size===constraints.length,'duplicate canonical constraint_id');
   const platform=identity?.platform_configuration;
-  const catalogRef='docs/engineering/backend-platforms.json';
+  const catalogRef='.template-spec/engineering/backend-platforms.json';
   const catalogPath=path.join(root,catalogRef);
   let platform_catalog_digest=null;
   if(platform?.profile_id && fs.existsSync(catalogPath)) {

package/template/scripts/lib/context-reconciliation.mjs

@@ -3,7 +3,7 @@ import path from "node:path";
 import { parseDocument } from "../vendor/yaml.mjs";
 import { resolveContextTermRefs, verifyContextSnapshot } from "./context-contract.mjs";
 import { validateJsonSchema } from "./json-schema.mjs";
-const schemaPath = path.resolve(import.meta.dirname, "../../docs/process/schemas/context-reconciliation.schema.json");
+const schemaPath = path.resolve(import.meta.dirname, "../../.template-spec/process/schemas/context-reconciliation.schema.json");
 export function parseReconciliationFile(file) {
   const document = parseDocument(readFileSync(file, "utf8"), { maxAliasCount: 0, uniqueKeys: true });
   if (document.errors.length) throw new TypeError(document.errors[0].message);

package/template/scripts/lib/contract-views.mjs

@@ -7,13 +7,13 @@ import {renderSliceContractView,diffSliceContracts} from './slice-contract-views
 export const contractKinds=Object.freeze({
  slice:null,plan:null,spec:null,'product-design':null,'prototype-confirmation':null,'visual-baseline':null,
  'technical-design':'.agents/skills/yss-technical-design/references/technical-design.schema.json',
- 'api-decision':'docs/process/schemas/api-contract-decision.schema.json',
- 'data-decision':'docs/process/schemas/data-architecture-decision.schema.json',
- scaffold:'docs/process/schemas/project-scaffold-contract.schema.json',
- 'scaffold-decision':'docs/process/schemas/scaffold-architecture-decisions.schema.json',
- handoff:null,'backend-delivery':'docs/process/schemas/backend-delivery.schema.json',
- 'frontend-acceptance':'docs/process/schemas/frontend-delivery-acceptance.schema.json',approval:null,'user-decision':'docs/process/schemas/user-decision.schema.json',
- 'context-reconciliation':'docs/process/schemas/context-reconciliation.schema.json'
+ 'api-decision':'.template-spec/process/schemas/api-contract-decision.schema.json',
+ 'data-decision':'.template-spec/process/schemas/data-architecture-decision.schema.json',
+ scaffold:'.template-spec/process/schemas/project-scaffold-contract.schema.json',
+ 'scaffold-decision':'.template-spec/process/schemas/scaffold-architecture-decisions.schema.json',
+ handoff:null,'backend-delivery':'.template-spec/process/schemas/backend-delivery.schema.json',
+ 'frontend-acceptance':'.template-spec/process/schemas/frontend-delivery-acceptance.schema.json',approval:null,'user-decision':'.template-spec/process/schemas/user-decision.schema.json',
+ 'context-reconciliation':'.template-spec/process/schemas/context-reconciliation.schema.json'
 });
 const object=v=>v&&typeof v==='object'&&!Array.isArray(v);
 const stringify=v=>typeof v==='string'?v:JSON.stringify(v,null,2);
@@ -84,8 +84,8 @@ function view(ref,{root=process.cwd(),kind,profile='review',unit_id}={}){
  }else{
   const {bytes,raw}=load(ref,root);binding={ref,id:raw.contract_id||raw.technical_design_id||raw.decision_id||raw.request?.request_id||raw.handoff_id||raw.baseline_id||raw.spec_id||raw.plan_id||raw.id||null,version:raw.contract_version||raw.decision_version||raw.handoff_version||raw.version||null,digest:hash(bytes)};
   blockers.push(...declaredBlockers(raw));
-  let schemaRef=contractKinds[kind];if(kind==='api-decision'&&raw.schema_version===2)schemaRef='docs/process/schemas/api-contract-decision-v2.schema.json';
-  if(kind==='frontend-acceptance'&&[1,3].includes(raw.schema_version))schemaRef=`docs/process/schemas/frontend-delivery-acceptance${raw.schema_version===1?'-v1':'-v3'}.schema.json`;
+  let schemaRef=contractKinds[kind];if(kind==='api-decision'&&raw.schema_version===2)schemaRef='.template-spec/process/schemas/api-contract-decision-v2.schema.json';
+  if(kind==='frontend-acceptance'&&[1,3].includes(raw.schema_version))schemaRef=`.template-spec/process/schemas/frontend-delivery-acceptance${raw.schema_version===1?'-v1':'-v3'}.schema.json`;
   if(schemaRef)try{schema(raw,schemaRef);checks.push('结构校验');}catch(error){blockers.push(error.message);}
   else checks.push('结构与批准未核验，按资产所有者规则继续');
   sourceChecks=references(raw,root);if(sourceChecks.length)checks.push(`核对 ${sourceChecks.length} 项可识别来源摘要；其余语义由资产所有者核验`);for(const source of sourceChecks)if(!source.current)blockers.push(`来源不可读或过期：${source.ref}`);

package/template/scripts/lib/delivery-preflight.mjs

@@ -28,7 +28,7 @@ export function invalidPreflightInput(message) {
 
 /** Installed profile owns backend technical authoring; caller governance_root cannot grant it. */
 export function backendPreflightCapability() {
-  const profileRef=path.join(ROOT,'docs/process/harness-profile.yaml');
+  const profileRef=path.join(ROOT,'.template-spec/process/harness-profile.yaml');
   const profile=existsSync(profileRef)?read(profileRef):null;
   const profileId=profile?.profile_id||'template.full';
   const ownsBackend=!profile||profileId==='harness.backend-delivery';
@@ -49,7 +49,7 @@ function requireBackendCapability(key) {
 /** Read-only: never executes input commands, starts services, unpacks archives or writes receipts. */
 export async function preflightDelivery(input,options={}) {return withValidationPhase({root:path.resolve(options.root||process.cwd(),typeof input?.governance_root==='string'?input.governance_root:'.'),purpose:`delivery-${options.stage}`,slice_id:input?.scope?.slice_id,work_unit_id:options.work_unit_id,readOnly:true,signal:options.signal},()=>preflight(input,options));}
 async function preflight(input,{stage,root=process.cwd(),work_unit_id}={}) {
-  try { ensure(STAGES.includes(stage),'未知阶段；必须是 prepare|build|export|accept');schema(input,'docs/process/schemas/delivery-preflight-input.schema.json'); }
+  try { ensure(STAGES.includes(stage),'未知阶段；必须是 prepare|build|export|accept');schema(input,'.template-spec/process/schemas/delivery-preflight-input.schema.json'); }
   catch(error) { return invalidPreflightInput(error.message); }
   root=path.resolve(root,input.governance_root||'.');
   const deliveryKind=input.delivery_kind||'complete';
@@ -121,7 +121,7 @@ async function preflight(input,{stage,root=process.cwd(),work_unit_id}={}) {
 async function approved(root,binding,gates) {
   ensure(binding.approval_ref&&binding.id&&binding.version,'缺少当前资产 id/version/approval_ref');
   const record=read(safe(root,binding.approval_ref));
-  const roles=sourceApprovalPolicy(read(safe(root,'docs/agents/digital-human-roles.yaml')));
+  const roles=sourceApprovalPolicy(read(safe(root,'.template-spec/agents/digital-human-roles.yaml')));
   validateApprovalRecord(record,{rolesDoc:roles,requireApproved:true,root,read:ref=>readFileSync(safe(root,path.relative(root,ref).split(path.sep).join('/')))});
   ensure(gates.includes(record.gate_id),'资产批准使用错误门禁');
   ensure(record.artifact_bindings?.some(x=>x.id===binding.id&&x.version===binding.version&&x.digest===binding.digest),'stale: 批准未绑定当前资产身份、版本及字节');
@@ -186,7 +186,7 @@ async function verifyAsset(key,data,binding,{root,input,documents,assets,executi
     await approved(root,binding,['gate.product-design-approved','gate.user-confirmation']);
   } else if(key==='build') {
     // Same build shape used by backend-delivery, captured independently before packaging.
-    const deliverySchema=read(safe(ROOT,'docs/process/schemas/backend-delivery.schema.json'));
+    const deliverySchema=read(safe(ROOT,'.template-spec/process/schemas/backend-delivery.schema.json'));
     const buildRules=deliverySchema.properties.build;
     // Validate in memory to avoid writing a generated schema: check the published required fields.
     for(const field of buildRules.required||[])ensure(Object.hasOwn(data,field),`构建缺少交付协议字段: ${field}`);
@@ -195,7 +195,7 @@ async function verifyAsset(key,data,binding,{root,input,documents,assets,executi
     ensure(/^sha256:[0-9a-f]{64}$/.test(data.artifact_digest),'构建制品摘要无效');
     ensure(Object.keys(data).every(key=>Object.hasOwn(buildRules.properties,key)),'构建包含交付协议未定义字段');
   } else if(key==='deployment') {
-    schema(data,'docs/process/schemas/backend-delivery-verification.schema.json');
+    schema(data,'.template-spec/process/schemas/backend-delivery-verification.schema.json');
     ensure(data.kind==='backend-deployment','部署证据 kind 必须为 backend-deployment');
     for(const result of data.results) {
       ensure(result.exit_code===0&&Number.isFinite(Date.parse(result.executed_at))&&Date.parse(result.executed_at)<=Date.now()+60000,'部署执行结果或时间无效');
@@ -206,7 +206,7 @@ async function verifyAsset(key,data,binding,{root,input,documents,assets,executi
       ensure(data.subject_digest===backendDeliveryBasis(documents.backend_delivery),'stale: 部署验证未绑定当前交付依据');
     }
   } else if(key==='backend_delivery') {
-    schema(data,`docs/process/schemas/backend-delivery${data.schema_version===2?'-v2':''}.schema.json`);
+    schema(data,`.template-spec/process/schemas/backend-delivery${data.schema_version===2?'-v2':''}.schema.json`);
     ensure(data.scope.slice_id===input.scope.slice_id&&input.scope.operation_ids.every(id=>data.scope.operation_ids.includes(id)),'后端交付切片/接口范围不匹配');
     for(const asset of ['openapi','slice_contract'])if(assets[asset])ensure(data[asset].ref===assets[asset].ref&&data[asset].digest===assets[asset].digest,'后端交付引用与预检输入不一致');
     for(const asset of [data.environment.test_data,...Object.values(data.verification)])fileBinding(root,asset);

package/template/scripts/lib/design-md.mjs

@@ -0,0 +1,230 @@
+#!/usr/bin/env node
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+import { createRequire } from "node:module";
+import { parseDocument } from "../vendor/yaml.mjs";
+
+const repositoryRoot = path.resolve(new URL("../..", import.meta.url).pathname);
+const designPath = path.join(repositoryRoot, "DESIGN.md");
+const projectionDir = path.join(repositoryRoot, ".template-spec/design/tokens");
+const manifestPath = path.join(projectionDir, ".design-md-projection.json");
+const syncMetadataPath = path.join(repositoryRoot, ".template-source/design/design-system-sync.yaml");
+const expectedSections = ["Overview", "Colors", "Typography", "Layout", "Elevation & Depth", "Shapes", "Components", "Do's and Don'ts"];
+const requiredFrontmatter = ["version", "name", "description", "colors", "typography", "rounded", "spacing", "components"];
+const componentProperties = new Set(["backgroundColor", "textColor", "typography", "rounded", "padding", "size", "height", "width"]);
+
+function sha256(value) { return createHash("sha256").update(value).digest("hex"); }
+function fail(message) { throw new Error(message); }
+function escapeRegExp(value) { return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"); }
+
+function resolveValue(value, frontmatter) {
+  const match = typeof value === "string" ? value.match(/^\{(colors|typography|rounded|spacing)\.([\w-]+)\}$/) : null;
+  return match ? frontmatter[match[1]]?.[match[2]] : value;
+}
+
+function projectedCssVariables(frontmatter) {
+  const components = frontmatter.components;
+  return {
+    "yss-color-primary-control": resolveValue(components["button-primary"].backgroundColor, frontmatter),
+    "yss-color-primary-control-hover": resolveValue(components["button-primary-hover"].backgroundColor, frontmatter),
+    "yss-color-on-primary": resolveValue(components["button-primary"].textColor, frontmatter),
+    "yss-control-height": resolveValue(components["button-primary"].height, frontmatter),
+    "yss-card-padding": resolveValue(components["card-default"].padding, frontmatter),
+    "yss-control-height-compact": resolveValue(components["button-compact"].height, frontmatter),
+    "yss-card-compact-padding": resolveValue(components["card-compact"].padding, frontmatter)
+  };
+}
+
+function writeCssProjection(frontmatter) {
+  const cssPath = path.join(projectionDir, "variables.css");
+  let source = readFileSync(cssPath, "utf8");
+  for (const [name, value] of Object.entries(projectedCssVariables(frontmatter))) {
+    const declaration = `  --${name}: ${value};`;
+    const pattern = new RegExp(`^\\s*--${escapeRegExp(name)}:.*;$`, "m");
+    source = pattern.test(source) ? source.replace(pattern, declaration) : source.replace(":root {\n", `:root {\n${declaration}\n`);
+  }
+  writeFileSync(cssPath, source);
+}
+
+function validateCssProjection(frontmatter) {
+  const source = readFileSync(path.join(projectionDir, "variables.css"), "utf8");
+  for (const [name, value] of Object.entries(projectedCssVariables(frontmatter))) {
+    if (!new RegExp(`^\\s*--${escapeRegExp(name)}: ${escapeRegExp(String(value))};$`, "m").test(source)) fail(`variables.css 的 --${name} 与 DESIGN.md 不一致`);
+  }
+}
+
+function readDesign(file = designPath) {
+  const source = readFileSync(file, "utf8");
+  if (!source.startsWith("---\n")) fail(`${path.relative(repositoryRoot, file)} 缺少 YAML frontmatter`);
+  const end = source.indexOf("\n---", 4);
+  if (end < 0) fail(`${path.relative(repositoryRoot, file)} frontmatter 未闭合`);
+  const document = parseDocument(source.slice(4, end), { uniqueKeys: true, maxAliasCount: 0 });
+  if (document.errors.length) fail(document.errors[0].message);
+  const frontmatter = document.toJS({ maxAliasCount: 0 });
+  for (const field of requiredFrontmatter) if (!frontmatter?.[field]) fail(`frontmatter 缺少 ${field}`);
+  const body = source.slice(end + 4);
+  const headings = [...body.matchAll(/^## ([^\n]+)$/gm)].map((match) => match[1].trim());
+  const actual = headings.slice(0, expectedSections.length);
+  if (JSON.stringify(actual) !== JSON.stringify(expectedSections)) fail(`canonical H2 章节顺序必须为: ${expectedSections.join(" → ")}`);
+  for (const section of expectedSections) {
+    if (headings.filter((heading) => heading === section).length !== 1) fail(`canonical H2 章节必须且只能出现一次: ${section}`);
+  }
+  const canonicalH1 = [...body.matchAll(/^# ([^\n]+)$/gm)].map((match) => match[1].trim()).filter((heading) => expectedSections.includes(heading));
+  if (canonicalH1.length > 0) fail(`canonical 正文章节必须使用 H2，不能使用 H1: ${canonicalH1.join(", ")}`);
+  for (const [name, component] of Object.entries(frontmatter.components)) {
+    if (!/^[a-z][a-z0-9-]*$/.test(name)) fail(`组件变体名称非法: ${name}`);
+    for (const key of Object.keys(component)) if (!componentProperties.has(key)) fail(`组件 ${name} 使用不支持的属性: ${key}`);
+  }
+  const references = [...source.matchAll(/\{(colors|typography|rounded|spacing)\.([\w-]+)\}/g)].map((match) => match[0]);
+  for (const reference of references) {
+    const [, group, token] = reference.match(/^\{([^}]+)\.([^}]+)\}$/);
+    if (frontmatter[group]?.[token] === undefined) fail(`悬空 token 引用: ${reference}`);
+  }
+  if (file === designPath && existsSync(syncMetadataPath)) {
+    const syncDocument = parseDocument(readFileSync(syncMetadataPath, "utf8"), { uniqueKeys: true, maxAliasCount: 0 });
+    if (syncDocument.errors.length) fail(syncDocument.errors[0].message);
+    const sync = syncDocument.toJS({ maxAliasCount: 0 })?.design_system_sync;
+    if (!sync?.baseline_sha256 || sync.baseline_sha256 !== sha256(source)) {
+      fail("design-system-sync.yaml 的 baseline_sha256 与 DESIGN.md 不一致，请更新跨仓同步摘要");
+    }
+    if (!Array.isArray(sync.synchronized_sections) || sync.synchronized_sections.length === 0) {
+      fail("design-system-sync.yaml 缺少 synchronized_sections");
+    }
+  }
+  return { source, frontmatter };
+}
+
+function runUpstream(args) {
+  const result = spawnSync("npx", ["--yes", "@google/design.md@0.4.0", ...args], { cwd: repositoryRoot, encoding: "utf8" });
+  if (result.error || result.status !== 0) fail(result.stderr?.trim() || result.stdout?.trim() || "design.md CLI 执行失败");
+  return result.stdout;
+}
+
+function projectionFiles() {
+  return ["theme.json", "tokens.default.json", "tokens.dark.json", "tokens.compact.json", "variables.css", "variables.dark.css"].map((file) => path.join(projectionDir, file));
+}
+
+function writeProjectionManifest() {
+  const { source } = readDesign();
+  const files = Object.fromEntries(projectionFiles().map((file) => [path.relative(repositoryRoot, file), sha256(readFileSync(file))]));
+  writeFileSync(manifestPath, `${JSON.stringify({ schema_version: 1, source: "DESIGN.md", source_sha256: sha256(source), files }, null, 2)}\n`);
+}
+
+function writeThemeProjection(frontmatter) {
+  const themeFile = path.join(projectionDir, "theme.json");
+  const theme = { token: {}, algorithm: "default" };
+  const token = theme.token || (theme.token = {});
+  const colors = frontmatter.colors;
+  const typography = frontmatter.typography;
+  const rounded = frontmatter.rounded;
+  const spacing = frontmatter.spacing;
+  Object.assign(token, {
+    colorPrimary: colors.primary,
+    colorSuccess: colors.success,
+    colorWarning: colors.warning,
+    colorError: colors.error,
+    colorInfo: colors.info ?? colors.primary,
+    colorTextBase: "#000000",
+    colorBgBase: colors.surface ?? "#ffffff",
+    colorBgLayout: colors["canvas-layout"] ?? "#f0f2f5",
+    colorText: colors.text,
+    colorTextSecondary: colors["text-secondary"],
+    colorBorder: colors.border ?? "#d9d9d9",
+    fontFamily: typography.body.fontFamily,
+    fontSize: Number.parseInt(typography.body.fontSize, 10),
+    borderRadius: Number.parseInt(rounded.md, 10),
+    sizeUnit: Number.parseInt(spacing.xxs, 10),
+    sizeStep: Number.parseInt(spacing.xxs, 10),
+    controlHeight: Number.parseInt(frontmatter.components["button-primary"].height, 10),
+    controlHeightSM: Number.parseInt(frontmatter.components["button-small"].height, 10),
+    controlHeightLG: Number.parseInt(frontmatter.components["button-large"].height, 10),
+    fontSizeSM: Number.parseInt(typography.caption.fontSize, 10),
+    borderRadiusSM: Number.parseInt(rounded.sm, 10),
+    borderRadiusLG: Number.parseInt(rounded.lg, 10),
+    padding: Number.parseInt(spacing.md, 10),
+    paddingSM: Number.parseInt(spacing.sm, 10),
+    paddingXS: Number.parseInt(spacing.xs, 10),
+    paddingLG: Number.parseInt(spacing.card, 10)
+  });
+  theme.components = { Card: { borderRadiusLG: token.borderRadiusLG, paddingLG: token.paddingLG } };
+  writeFileSync(themeFile, `${JSON.stringify(theme, null, 2)}\n`);
+}
+
+function writeAlgorithmProjections(toolchain) {
+  if (!toolchain) fail("export --write 需要 --antd-toolchain <独立作者工具目录>，固定 antd 6.6.4");
+  const require = createRequire(path.join(path.resolve(toolchain), "package.json"));
+  if (require("antd/package.json").version !== "6.6.4") fail("主题算法需要 antd 6.6.4");
+  const { theme } = require("antd");
+  const config = JSON.parse(readFileSync(path.join(projectionDir, "theme.json")));
+  const kebab = key => key.replace(/[A-Z]/g, letter => `-${letter.toLowerCase()}`);
+  const snapshots = {};
+  for (const [mode, algorithm] of Object.entries({ default: theme.defaultAlgorithm, dark: theme.darkAlgorithm, compact: theme.compactAlgorithm })) {
+    const token = { ...config.token };
+    // Let the dark algorithm derive neutral colors instead of pinning light aliases.
+    if (mode === "dark") for (const key of ["colorBgBase", "colorTextBase", "colorBgLayout", "colorText", "colorTextSecondary", "colorBorder"]) delete token[key];
+    snapshots[mode] = theme.getDesignToken({ token, algorithm });
+    writeFileSync(path.join(projectionDir, `tokens.${mode}.json`), JSON.stringify(snapshots[mode], null, 2) + "\n");
+  }
+  const rewrite = (css, token) => {
+    const values = Object.fromEntries(Object.entries(token).map(([key,value]) => [kebab(key),value]));
+    return css.replace(/(--brand-([\w-]+):\s*)([^;]+);/g, (all, prefix, key, old) => {
+      const value = values[key];
+      if (value === undefined || typeof value === "object") return all;
+      const unit = typeof value === "number" ? old.trim().match(/(?:px|ms|s)$/)?.[0] || "" : "";
+      return `${prefix}${value}${unit};`;
+    });
+  };
+  const cssPath = path.join(projectionDir, "variables.css");
+  const css = readFileSync(cssPath, "utf8");
+  const darkStart = css.indexOf('[data-theme="dark"]');
+  writeFileSync(cssPath, darkStart < 0 ? rewrite(css, snapshots.default) : rewrite(css.slice(0, darkStart), snapshots.default) + rewrite(css.slice(darkStart), snapshots.dark));
+  const darkPath = path.join(projectionDir, "variables.dark.css");
+  writeFileSync(darkPath, rewrite(readFileSync(darkPath, "utf8"), snapshots.dark));
+}
+
+function driftCheck() {
+  const { source, frontmatter } = readDesign();
+  validateCssProjection(frontmatter);
+  if (!existsSync(manifestPath)) fail(`缺少 ${path.relative(repositoryRoot, manifestPath)}，请先执行 export --write-manifest`);
+  const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+  if (manifest.source_sha256 !== sha256(source)) fail("DESIGN.md 已变化但投影未重新生成（source_sha256 漂移）");
+  for (const [relative, digest] of Object.entries(manifest.files || {})) {
+    const file = path.join(repositoryRoot, relative);
+    if (!existsSync(file) || sha256(readFileSync(file)) !== digest) fail(`派生文件漂移: ${relative}`);
+  }
+}
+
+function main() {
+  const [command, ...args] = process.argv.slice(2);
+  if (command === "lint") {
+    const file = args.find((arg) => !arg.startsWith("-")) || designPath;
+    readDesign(path.resolve(repositoryRoot, file));
+    process.stdout.write(`${runUpstream(["lint", file, "--format", "json"])}`);
+    return;
+  }
+  if (command === "diff") {
+    if (args.length < 2) fail("用法: design-md diff <before> <after>");
+    process.stdout.write(runUpstream(["diff", ...args.slice(0, 2), "--format", "json"]));
+    return;
+  }
+  if (command === "export") {
+    const format = args[0] || "dtcg";
+    const { frontmatter } = readDesign();
+    process.stdout.write(runUpstream(["export", "DESIGN.md", "--format", format]));
+    if (args.includes("--write")) {
+      const toolchain = args[args.indexOf("--antd-toolchain") + 1];
+      if (!args.includes("--antd-toolchain") || !toolchain) fail("缺少 --antd-toolchain");
+      writeThemeProjection(frontmatter);
+      writeAlgorithmProjections(toolchain);
+      writeCssProjection(frontmatter);
+    }
+    if (args.includes("--write-manifest")) writeProjectionManifest();
+    return;
+  }
+  if (command === "drift") { driftCheck(); process.stdout.write("DESIGN.md 投影无漂移\n"); return; }
+  fail("用法: design-md lint|diff|export|drift");
+}
+
+try { main(); } catch (error) { process.stderr.write(`${error.message}\n`); process.exitCode = 1; }

package/template/scripts/lib/digital-human-roles.mjs

@@ -4,7 +4,7 @@ import { parseDocument } from "../vendor/yaml.mjs";
 import { loadRegistry, ROOT } from "./lifecycle-registry.mjs";
 import { loadSkillRegistry } from "./skill-registry.mjs";
 
-export const DEFAULT_DIGITAL_HUMAN_ROLES = path.join(ROOT, "docs/agents/digital-human-roles.yaml");
+export const DEFAULT_DIGITAL_HUMAN_ROLES = path.join(ROOT, ".template-spec/agents/digital-human-roles.yaml");
 
 const ROLE_ID = /^role\.[a-z0-9][a-z0-9-]*$/;
 const GROUP_ID = /^group\.[a-z0-9][a-z0-9-]*$/;
@@ -259,7 +259,7 @@ export function validateDigitalHumanRoles(doc, { skillIds, stageIds, gateIds, ar
   if (doc.registry_id !== "yss.digital-human-roles") fail("registry_id 必须为 yss.digital-human-roles");
   if (doc.status !== "active") fail("status 必须为 active");
   requireString(doc.description, "description");
-  if (doc.canonical_path !== "docs/agents/digital-human-roles.yaml") fail("canonical_path 必须为 docs/agents/digital-human-roles.yaml");
+  if (doc.canonical_path !== ".template-spec/agents/digital-human-roles.yaml") fail("canonical_path 必须为 .template-spec/agents/digital-human-roles.yaml");
   rejectGrokCoupling(doc.runtime_policy, "runtime_policy");
   rejectGrokCoupling(doc.gate_policy, "gate_policy");
   const runtime = doc.runtime_policy;

package/template/scripts/lib/existing-backend-architecture.mjs

@@ -111,7 +111,7 @@ export function verifyExistingArchitecture(identity,bindings,{root,registry,exec
  requireThat(Array.isArray(baseline.verification_commands)&&baseline.verification_commands.length&&Array.isArray(registration.verification_commands),'ARCH_VERIFICATION_MISSING','缺少登记验证命令');
  same(baseline.verification_commands,registration.verification_commands,'ARCH_VERIFICATION_CONFLICT','验证入口不一致');
  const review=bound(root,baseline.boundary_review);
- const rolesFile=path.join(root,'docs/agents/digital-human-roles.yaml');
+ const rolesFile=path.join(root,'.template-spec/agents/digital-human-roles.yaml');
  const roles=parse(readFileSync(rolesFile));
  validateApprovalRecord(review,{rolesDoc:roles,requireApproved:true,root});
  requireThat(['check.architecture-reviewed','gate.technical-design-approved'].includes(review.gate_id)&&text(baseline.id)&&text(baseline.version),'ARCH_REVIEW_MISSING','需要架构边界审查');

package/template/scripts/lib/existing-ui-baseline.mjs

@@ -7,7 +7,7 @@ export function validateExistingUiBaseline(data,options={}) {return inValidation
 function validate(data, { bundleRoot } = {}) {
   const errors=[];
   try {
-    schema(data,'docs/process/schemas/existing-ui-baseline.schema.json');
+    schema(data,'.template-spec/process/schemas/existing-ui-baseline.schema.json');
     ensure(bundleRoot,'existing-ui-baseline 需要原始 bundleRoot');
     const consumed=new Set(['existing-ui-baseline.json']);
     const allFiles=files(bundleRoot);