create-yss-spec 3.4.3 → 3.4.4

package/template/docs/templates/review-bundle-template.yaml

@@ -0,0 +1,26 @@
+schema_version: 1
+kind: review-bundle
+bundle_id: review-bundle.plan
+task_id: replace-with-plan-review-task-id
+work_unit_id: work-unit.plan-requirements
+review_session_id: replace-with-stable-review-session-id
+role_id: role.product-manager
+runtime_id: runtime.generic
+principal_ref: replace-with-reviewer-instance
+reviews:
+- schema_version: 1
+  gate_id: check.domain-strategy-approved
+  decision: approved
+  actor_kind: digital-human
+  role_id: role.product-manager
+  runtime_id: runtime.generic
+  principal_ref: replace-with-reviewer-instance
+  drafter_role_id: role.requirements-manager
+  drafter_principal_ref: replace-with-drafter-instance
+  subject_ref: docs/.scratch/<feature>/domain/domain-strategy-v1.yaml
+  subject_digest: replace-with-64-char-sha256
+  approval_scope:
+  - replace-with-feature-id
+  evidence_refs:
+  - replace-with-current-review-evidence
+notes: 本模板只用于起草。只保留实际命中的 check；同一 bundle 的所有结论必须来自同一复核任务、会话和实例。

package/template/scripts/lib/approval-record.mjs

@@ -42,12 +42,32 @@ export function loadApprovalRecord(filePath, gateId) {
   return selectApprovalRecord(yamlFromFile(filePath, "会签记录"), gateId);
 }
 
+function reviewBundleRows(bundle) {
+  if (bundle?.schema_version !== 1 || bundle.kind !== "review-bundle") fail("组合审查身份无效");
+  for (const field of ["bundle_id", "task_id", "work_unit_id", "review_session_id", "role_id", "runtime_id", "principal_ref"]) requireString(bundle[field], field);
+  if (!/^review-bundle\.[a-z0-9][a-z0-9-]*$/.test(bundle.bundle_id)) fail("组合审查 bundle_id 格式非法");
+  if (!/^work-unit\.[a-z0-9][a-z0-9-]*$/.test(bundle.work_unit_id)) fail("组合审查 work_unit_id 格式非法");
+  if (!Array.isArray(bundle.reviews) || !bundle.reviews.length) fail("组合审查不能为空");
+  if (new Set(bundle.reviews.map(row => row?.gate_id)).size !== bundle.reviews.length) fail("组合审查 gate_id 重复");
+  for (const row of bundle.reviews) {
+    if (!row || typeof row !== "object" || Array.isArray(row)) fail("组合审查结论必须是对象");
+    if (row.role_id !== bundle.role_id || row.runtime_id !== bundle.runtime_id || row.principal_ref !== bundle.principal_ref) fail("组合审查必须来自同一复核角色、运行时和实例");
+    if (row.review_session_id != null && row.review_session_id !== bundle.review_session_id) fail("组合审查 review_session_id 不一致");
+  }
+  return bundle.reviews;
+}
+
 export function selectApprovalRecord(record, gateId) {
   if (record.kind !== 'review-bundle') return record;
-  if (record.schema_version !== 1 || !Array.isArray(record.reviews) || !record.reviews.length || new Set(record.reviews.map(x => x.gate_id)).size !== record.reviews.length) fail('组合审查身份无效或重复');
-  const selected = record.reviews.filter(x => x.gate_id === gateId);
+  const selected = reviewBundleRows(record).filter(x => x.gate_id === gateId);
   if (selected.length !== 1) fail('组合审查缺少当前检查的明确结论');
-  return selected[0];
+  return {
+    ...selected[0],
+    review_bundle_id: record.bundle_id,
+    review_task_id: record.task_id,
+    review_work_unit_id: record.work_unit_id,
+    review_session_id: record.review_session_id
+  };
 }
 
 export function resolveApprovalRef(approvalRef, fromFile = ROOT) {
@@ -114,7 +134,7 @@ export function validateApprovalRecord(record, { rolesDoc, requireApproved = fal
 }
 
 function assertRecordUserDecision(record, registry, options) {
-  if (!registry.user_decision_policy.gates.includes(record.gate_id) && countersignRuleForGate(registry.gate_policy, record.gate_id)?.bucket !== "biological_human") return;
+  if (!registry.user_decision_policy.gates.includes(record.gate_id)) return;
   const result = assertApprovalUserDecision(record, registry, options);
   if (record.actor_kind === "biological-human" && result.validated.some((item) => item.principal_ref !== record.principal_ref)) fail("user-decision-responder-mismatch: 生物人会签者与原始回复者不一致");
 }
@@ -122,8 +142,7 @@ function assertRecordUserDecision(record, registry, options) {
 export function validateApprovalRecordFile(filePath, options = {}) {
   const record = yamlFromFile(filePath, "会签记录");
   if (record.kind === 'review-bundle') {
-    if (!Array.isArray(record.reviews) || !record.reviews.length) fail('组合审查不能为空');
-    return record.reviews.map(item => {
+    return reviewBundleRows(record).map(item => {
       const row = loadApprovalRecord(filePath, item.gate_id);
       if (options.requireApproved) {
         if (!row.drafter_principal_ref || row.drafter_principal_ref === row.principal_ref) fail('组合审查必须保留独立身份');

package/template/scripts/lib/strategic-handoff-io.mjs

@@ -78,6 +78,13 @@ export function sourceApprovalPolicy(source) {
   roles.user_decision_policy ||= {gates:[]};
   ensure(!(roles.user_decision_policy.required_capabilities || []).some(id => id !== 'strategic-decision-reuse-v1'), '接收工具不支持源用户决定策略，请升级工具后验包');
   const policy=roles.gate_policy;
+  // Dedicated receivers may predate check_reviews. Mirror source check-review
+  // rules into their existing digital review lookup without changing source bytes.
+  for(const rule of policy.check_reviews || []) {
+    if(!(policy.digital_human_review||[]).some(x=>x.gate===rule.gate) && !(policy.dual_digital_human||[]).some(x=>x.gate===rule.gate)) {
+      policy.digital_human_review ||= [];policy.digital_human_review.push({gate:rule.gate,drafter:rule.drafter,countersigners:[...rule.countersigners]});
+    }
+  }
   for(const gate of policy.product_digital_human_with_biological_veto || []) {
     if(!(policy.biological_human||[]).includes(gate) && !(policy.digital_human_review||[]).some(x=>x.gate===gate) && !(policy.dual_digital_human||[]).some(x=>x.gate===gate)) {
       policy.digital_human_review ||= [];policy.digital_human_review.push({gate,countersigners:['role.product-manager']});

package/template/scripts/lib/strategic-handoff.mjs

@@ -20,6 +20,19 @@ const SOURCE_SCHEMAS = new Map([
 ]);
 const CAPABILITIES=['backend-technical-design','frontend-engineering-design','delivery-coordination'];
 
+function sourceApprovalRecord(document, gateId) {
+  if(document?.kind!=='review-bundle')return document;
+  for(const field of ['bundle_id','task_id','work_unit_id','review_session_id','role_id','runtime_id','principal_ref'])ensure(nonempty(document[field]),`组合审查缺少 ${field}`);
+  ensure(Array.isArray(document.reviews)&&document.reviews.length,'组合审查不能为空');
+  ensure(new Set(document.reviews.map(row=>row?.gate_id)).size===document.reviews.length,'组合审查 gate_id 重复');
+  const rows=document.reviews.filter(row=>row.gate_id===gateId);
+  ensure(rows.length===1,`组合审查缺少当前结论: ${gateId}`);
+  const row=rows[0];
+  ensure(row.role_id===document.role_id&&row.runtime_id===document.runtime_id&&row.principal_ref===document.principal_ref,'组合审查必须来自同一复核角色、运行时和实例');
+  ensure(!row.review_session_id||row.review_session_id===document.review_session_id,'组合审查 review_session_id 不一致');
+  return {...row,review_bundle_id:document.bundle_id,review_task_id:document.task_id,review_work_unit_id:document.work_unit_id,review_session_id:document.review_session_id};
+}
+
 function deliveryReadme(handoff) {
   const sources=Object.entries(handoff.source).sort(([a],[b])=>a.localeCompare(b)).map(([key,value])=>`- \`${key}\`: \`${value.persisted_ref}\` (${value.version}, ${value.digest})`);
   const routes=handoff.consumer_routes.map(route=>`- \`${route.capability}\`: \`${route.activation}\` (${route.route_id})`);
@@ -171,13 +184,14 @@ export async function inspectSource(root, handoffRef) {
   const indexes=extractTraceability(strategy);
   const sourceRoles=read(safe(root,'docs/agents/digital-human-roles.yaml'));
   const roles=sourceApprovalPolicy(sourceRoles);
-  for (const [artifact, version] of [[strategy,strategy.domain_version],[stage,stage.package_version]]) {
-    if(artifact.approval) { const record=read(safe(root,artifact.approval.approval_ref));await sourceApproval(record,roles,root);ensure(artifact.approval.current_version===version,'资产内置批准版本过期'); }
+  for (const [artifact, version, gateId] of [[strategy,strategy.domain_version,'check.domain-strategy-approved'],[stage,stage.package_version,'check.stage-decision-package-approved']]) {
+    if(artifact.approval) { const record=sourceApprovalRecord(read(safe(root,artifact.approval.approval_ref)),gateId);await sourceApproval(record,roles,root);ensure(artifact.approval.current_version===version,'资产内置批准版本过期'); }
   }
   // Source packages retain their published approval vocabulary. Never promote old approvals into current checkpoint gates.
   const currentPlan = (roles.gate_policy.dual_digital_human || []).some(rule => rule.gate === 'gate.plan-approved');
-  const terminalGate=currentPlan?'gate.plan-approved':countersignRuleForGate(roles.gate_policy,'gate.strategic-design-handoff-approved')?'gate.strategic-design-handoff-approved':'gate.stage-decision-package-approved';
-  const expectedGates={domain_strategy_ref:currentPlan?'gate.plan-approved':'gate.domain-strategy-approved',stage_decision_package_ref:currentPlan?'gate.plan-approved':'gate.stage-decision-package-approved',spec_ref:'gate.spec-baseline-approved',prototype_ref:currentPlan?'gate.product-design-approved':'gate.user-confirmation',visual_baseline_ref:currentPlan?'gate.product-design-approved':'gate.user-confirmation',business_ticket_set_ref:terminalGate,handoff:terminalGate};
+  const explicitlyReviewed=(gate)=>(roles.gate_policy.digital_human_review||[]).some(rule=>rule.gate===gate)||(roles.gate_policy.dual_digital_human||[]).some(rule=>rule.gate===gate)||(roles.gate_policy.biological_human||[]).includes(gate);
+  const terminalGate=currentPlan||explicitlyReviewed('gate.strategic-design-handoff-approved')?'gate.strategic-design-handoff-approved':'gate.stage-decision-package-approved';
+  const expectedGates={domain_strategy_ref:currentPlan?'gate.plan-approved':'gate.domain-strategy-approved',stage_decision_package_ref:currentPlan?'gate.plan-approved':'gate.stage-decision-package-approved',spec_ref:'gate.spec-baseline-approved',prototype_ref:currentPlan?'gate.product-design-approved':'gate.user-confirmation',visual_baseline_ref:currentPlan?'gate.product-design-approved':'gate.user-confirmation',business_ticket_set_ref:currentPlan?'gate.plan-approved':terminalGate,handoff:terminalGate};
   expectedGates.existing_ui_baseline_ref=expectedGates.prototype_ref;
   const bindings={...handoff.source,handoff:{id:handoff.handoff_id,version:handoff.handoff_version,persisted_ref:handoffRef,status:'approved'}};
   for(const [key,ref] of Object.entries(bindings)) {
@@ -194,14 +208,14 @@ export async function inspectSource(root, handoffRef) {
       }
     } else actual=bytesDigest(readFileSync(safe(root,ref.persisted_ref)),approval.digest_kind);
     if(key!=='handoff')ensure(ref.digest===actual,`源资产摘要过期: ${key}`);
-    const record=read(safe(root,approval.record_ref));
+    const record=sourceApprovalRecord(read(safe(root,approval.record_ref)),approval.gate_id);
     if(key==='existing_ui_baseline_ref')ensure(record.subject_ref===`${ref.persisted_ref}/${ref.manifest_ref}`,'既有 UI 用户决定必须以当前 manifest 为批准主体');
     await sourceApproval(record,roles,root);
     ensure(record.gate_id===approval.gate_id,`批准门禁不匹配: ${key}`);
     ensure((record.artifact_bindings || []).some(x=>x.id===(ref.id||ref.baseline_id) && x.version===ref.version && x.digest===actual),`批准记录未绑定当前资产: ${key}`);
   }
   if (roles.user_decision_policy.required_capabilities?.includes('strategic-decision-reuse-v1')) {
-    const record=read(safe(root,config.approvals.handoff.record_ref));
+    const record=sourceApprovalRecord(read(safe(root,config.approvals.handoff.record_ref)),config.approvals.handoff.gate_id);
     const scope=read(safe(root,record.subject_ref));
     ensure(scope.kind==='strategic-delivery-scope' && scope.schema_version===1, '交接必须绑定独立的交付范围清单');
     const {package_export,status,...delivery}=handoff;
@@ -209,7 +223,7 @@ export async function inspectSource(root, handoffRef) {
     ensure(scope.assets?.some(asset=>asset.ref===scope.delivery_ref && asset.digest===hash(readFileSync(safe(root,scope.delivery_ref)))), '交接内容快照缺少批准覆盖');
     for (const [key,ref] of Object.entries(handoff.source)) {
       const file=['visual_baseline_ref','existing_ui_baseline_ref'].includes(key)?`${ref.persisted_ref}/${ref.manifest_ref}`:ref.persisted_ref;
-      const decisionBoundaries=key==='business_ticket_set_ref'?['gate.spec-baseline-approved',terminalGate]:[expectedGates[key]];
+      const decisionBoundaries=[expectedGates[key]];
       ensure(scope.assets?.some(asset=>asset.ref===file && asset.version===ref.version && decisionBoundaries.includes(asset.boundary) && asset.digest===hash(readFileSync(safe(root,file)))), `交付范围清单遗漏当前资产: ${key}`);
     }
   }

package/template/scripts/lib/user-decision.mjs

@@ -7,6 +7,7 @@ import { ROOT } from "./lifecycle-registry.mjs";
 import { loadDigitalHumanRoles } from "./digital-human-roles.mjs";
 import { validateJsonSchema } from "./json-schema.mjs";
 import { assertDecisionContinuation } from './decision-continuation.mjs';
+import { platformProfile } from './backend-platform.mjs';
 
 export function decisionError(code, detail) {
   const error = new TypeError(`${code}: ${detail}`);
@@ -205,11 +206,21 @@ export function assertImplementationDecision(state, options = {}) {
 
 export function scaffoldDecisionSnapshot(decision) {
   const { user_confirmation, status, decision_inputs_digest, ...inputs } = decision;
-  return inputs;
+  const profile = platformProfile(decision.platform_profile, undefined, decision.platform_configuration?.spring_boot_version);
+  return {
+    ...inputs,
+    platform_selection: {
+      profile_id: profile.id,
+      spring_boot_version: profile.spring_boot_version,
+      java_version: profile.java_version,
+    },
+  };
 }
 export function assertScaffoldUserDecision(decision, options = {}) {
   const confirmation = decision.user_confirmation || {};
-  const requirement = { boundary: "scaffold-choice", subject_ref: confirmation.decision_subject_ref, scope: [decision.project_id, decision.confirmed_architecture, decision.decision_inputs_digest], user_decision_ref: confirmation.user_decision_ref };
+  const profile = platformProfile(decision.platform_profile, undefined, decision.platform_configuration?.spring_boot_version);
+  const platformScope = `${profile.id}@${profile.spring_boot_version}/java${profile.java_version}`;
+  const requirement = { boundary: "gate.backend-architecture-platform-approved", subject_ref: confirmation.decision_subject_ref, scope: [decision.project_id, decision.confirmed_architecture, platformScope, decision.decision_inputs_digest], user_decision_ref: confirmation.user_decision_ref };
   assertUserDecisionRequirement(requirement, options);
   const io = decisionIO(options);
   if (decisionDigest(io.document(requirement.subject_ref)) !== decisionDigest(scaffoldDecisionSnapshot(decision))) decisionError("user-decision-stale", "脚手架输入与用户所见快照不一致");

package/template/skills-lock.json

@@ -18,7 +18,7 @@
       "revision": "c4d958f18cc947cb91cbe1bd48783fa4601cc18f"
     },
     "iloveZzz/yss-harness-design-agent": {
-      "revision": "fa294bf74b9a5225861b9b92288797b28f8ad1ac"
+      "revision": "e9a28b4cb0d3003a730b0113bb4dad59665e38b5"
     },
     "ayghri/i-have-adhd": {
       "revision": "7b9069b39972e269e61bd95c2f66ebb90cac6a02"
@@ -481,7 +481,7 @@
         "sourceType": "git-submodule",
         "skillPath": ".agents/skills/prototype-review/SKILL.md",
         "effectiveHash": "df6f131bef0f52a96d307d98ab42d74888a9b72c5508911b5622913b334e8eab",
-        "sourceRevision": "fa294bf74b9a5225861b9b92288797b28f8ad1ac",
+        "sourceRevision": "e9a28b4cb0d3003a730b0113bb4dad59665e38b5",
         "upstreamHash": "9206df8b6c555c1af1351e425c5ec99ec2a40263c6861607f1418b9c520873ab",
         "adaptationRef": "docs/agents/strategic-design-skills-integration.md",
         "targets": [
@@ -753,7 +753,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-ddd-scaffold-generator/SKILL.md",
-        "effectiveHash": "1890d5c36a93036f0db8df19c7446176dfc4ec54b3b0118199e2ac1f9ce61ece",
+        "effectiveHash": "08417fab2d809080470c8ec085330084a7ddeac5c1b385f40fc8491c461749e8",
         "targets": [
           ".agents/skills",
           ".codex/skills",
@@ -766,7 +766,7 @@
         "sourceType": "git-submodule",
         "skillPath": ".agents/skills/yss-design-system/SKILL.md",
         "effectiveHash": "c5c023813042472030cecca187c222257151dd5554655a6bdcdd757bc2a516c7",
-        "sourceRevision": "fa294bf74b9a5225861b9b92288797b28f8ad1ac",
+        "sourceRevision": "e9a28b4cb0d3003a730b0113bb4dad59665e38b5",
         "upstreamHash": "c917ecf40a67c52f0fa7894fbdfbf827cc1ed6aff1037be2911377387fede1a0",
         "adaptationRef": "docs/agents/strategic-design-skills-integration.md",
         "targets": [
@@ -891,7 +891,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-implementation-contract-compiler/SKILL.md",
-        "effectiveHash": "311b97c2f4295ae68c20d2e10c3f936595e2c1b9c306519fbd5a823f0cc5f521",
+        "effectiveHash": "624b3d948a95bf27282e938d386308e74d0c8448ebd3321a31a3f298a6ccafba",
         "targets": [
           ".agents/skills",
           ".codex/skills",
@@ -903,7 +903,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-layered-mvc-scaffold-generator/SKILL.md",
-        "effectiveHash": "d76212f24e96c6a85a11b0d21ea207fdba9534735f5ede7c4de5d0fb28ac81f6",
+        "effectiveHash": "ab0f73e2a820572cbc5206a2a5b608c180876b2909d871d978608073211be0cd",
         "targets": [
           ".agents/skills",
           ".codex/skills",
@@ -975,7 +975,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-product-lifecycle/SKILL.md",
-        "effectiveHash": "f58057c83879e7967ddd61a47fcce8007f03d79e6321130ff774045dfd82174f",
+        "effectiveHash": "c4709ad26b58b1f740484f056fd79820b4b42833e001a2ff37fb7ebea40ba745",
         "targets": [
           ".agents/skills",
           ".codex/skills",
@@ -988,7 +988,7 @@
         "sourceType": "git-submodule",
         "skillPath": ".agents/skills/yss-prototype-stage/SKILL.md",
         "effectiveHash": "cbe197cdf9e4c7e073ea1892dbcfd03778552cd361d6f3e7e16107a89c20677d",
-        "sourceRevision": "fa294bf74b9a5225861b9b92288797b28f8ad1ac",
+        "sourceRevision": "e9a28b4cb0d3003a730b0113bb4dad59665e38b5",
         "upstreamHash": "8256a1edfeb203f4de27d190210b0ba5593f8f74e0f3655b62b146daff2105a8",
         "adaptationRef": "docs/agents/strategic-design-skills-integration.md",
         "targets": [
@@ -1065,9 +1065,9 @@
         "source": "iloveZzz/yss-harness-design-agent",
         "sourceType": "git-submodule",
         "skillPath": ".agents/skills/yss-stage-decision/SKILL.md",
-        "effectiveHash": "ada584c7b996439a47e24153e156c38198f60f3f84250cd37aea6e2a118131aa",
-        "sourceRevision": "fa294bf74b9a5225861b9b92288797b28f8ad1ac",
-        "upstreamHash": "8752a1ed6903bd20c33e21b521d52bd4f7a0662b1d25e00152b60ba38333c93b",
+        "effectiveHash": "4c2cfefe9ed99283ec55e029136b64885280935e8e2a9f66d0425b3f1e8217a9",
+        "sourceRevision": "e9a28b4cb0d3003a730b0113bb4dad59665e38b5",
+        "upstreamHash": "46a9be287963eff0e71f8106b5d31311e43aabbd1117d7bc3d2d8666a0a99474",
         "adaptationRef": "docs/agents/strategic-design-skills-integration.md",
         "targets": [
           ".agents/skills",
@@ -1080,7 +1080,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-tactical-design/SKILL.md",
-        "effectiveHash": "4ecf7d3fcd1f66a9408b4ac70d0825375a6b5c230798aa72f1079ed22759b1af",
+        "effectiveHash": "894ecd416a4b9e91d354f85e623ea3e2eb7d2af75407a848134112e2a756d0e0",
         "targets": [
           ".agents/skills",
           ".codex/skills",
@@ -1092,7 +1092,7 @@
         "source": "project",
         "sourceType": "local",
         "skillPath": ".agents/skills/yss-technical-design/SKILL.md",
-        "effectiveHash": "123e56badd48acf6012f63f7a0b432e09719398b37a912bcb38d6981ec9458e5",
+        "effectiveHash": "d1b91d1e3485ba3bf39cd30a746b512dfce12f9db132a8b3345719cbb45b0cb6",
         "targets": [
           ".agents/skills",
           ".codex/skills",

package/template.snapshot.json

@@ -4,7 +4,7 @@
   "templateSource": "github:iloveZzz/yss-spec-project-template",
   "templateRepository": "https://github.com/iloveZzz/yss-spec-project-template.git",
   "requestedRef": "working-tree",
-  "templateCommit": "c041caf7045718f420b5ada6f2dc91a0f9e728ac",
+  "templateCommit": "582b6e62b54eab7a02fbe85aa2954aec5770f65f",
   "sourceState": "working-tree",
   "manifestHash": "191240f4716de5f93cf1b30ea917a9a14dfd4a29b12dd2ba569c6271fa46009e",
   "encodedPaths": {
@@ -17,6 +17,6 @@
     ".gitignore": "__yss_dotfile__.gitignore",
     ".pi/skills/yss-frontend-scaffold-generator/assets/data-quality-v1/.gitignore": ".pi/skills/yss-frontend-scaffold-generator/assets/data-quality-v1/__yss_dotfile__.gitignore"
   },
-  "snapshotHash": "2ccb06bfbe347a6a7c4bcecba5627441f40d4c169522aa721cafe5d886c11204",
-  "generatedAt": "2026-09-17T01:11:25.463Z"
+  "snapshotHash": "f0a4b41e55f53b3d3ace6f0104d1347e6b757ff6b635dbaae1bed3ce882fb4fd",
+  "generatedAt": "2026-09-18T03:43:12.395Z"
 }