create-yss-spec 3.4.4 → 3.4.6

package/template/.codex/skills/yss-validation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: yss-validation
-description: "接入或排查 YSS Bean Validation、校验消息、LiteFlow EL 解析器与校验错误映射。"
+description: "接入或排查 YSS Bean Validation、校验消息与校验错误映射；不存在的历史 EL 组件路由保持阻断。"
 ---
 
 # yss-validation
@@ -13,40 +13,35 @@ Use this skill for YSS 校验组件. Keep implementation grounded in the local p
 
 - Backend source location is environment-specific; resolve it with `yss-skill-source-index-refresh/references/source-location.md`.
 - Generated index: `references/source-index.md`
-- Component path hints: `yss-microservice-components/yss-component-validation-engine-parent`, `yss-microservice-components/yss-component-validation-jsr303`
+- Component path hints: `yss-microservice-components/yss-component-validation-jsr303`
 
 Read `references/source-index.md` as a path-hint index whenever the task depends on exact modules, annotations, auto configuration, properties, controllers, clients, repositories, DTOs, handlers, or troubleshooting.
 
 ## Workflow
 
-1. Identify whether the task is JSR-303 annotation validation, validation engine expression parsing, LiteFlow EL parsing, or parser extension.
+1. Identify whether the task is JSR-303 annotation validation or an expression/EL parser request.
 2. Read `references/source-index.md`; for JSR-303 behavior, read `yss-component-validation-jsr303/readme.md` first.
-3. For expression parsing, inspect `ExpressParserFactory` and concrete `ExpressParser` implementations before adding syntax.
-4. Register new parsers as Spring beans; `ExpressParserFactory` auto-registers available parser beans by `parserType().getType()`.
-5. Keep validation failures mapped to the service/API error contract used by the local project.
-6. 消费工程基线选择 javax/jakarta，不自行升级 Java/Boot。MVC 输入校验放在 server/client，业务不变量由 service/core 验证；不生成 DDD Domain。HTTP 失败形态由 server 的合同测试验证。
+3. 当前组件仓不存在历史 `yss-component-validation-engine-parent`；表达式、LiteFlow EL 或 `ExpressParserFactory` 请求返回 `blocked`，先确认真实组件来源和生命周期影响，不以旧索引或通用知识生成实现。
+4. Keep validation failures mapped to the service/API error contract used by the local project.
+5. 消费工程基线选择 javax/jakarta，不自行升级 Java/Boot。MVC 输入校验放在 server/client，业务不变量由 service/core 验证；不生成 DDD Domain。HTTP 失败形态由 server 的合同测试验证。
 
 ## Capability Split
 
 - `validation-jsr303`: currently a dependency/message-resource aggregation module; it has no local Validator, Advice, or auto-configuration Java implementation.
-- `validation-el-parser`: LiteFlow/EL expression parser infrastructure.
-- `ExpressParserFactory`: central parser registry backed by a concurrent map.
-- Parser extension point: implement/provide `ExpressParser` with a non-null parser type and register it as a bean.
+- 历史 `validation-el-parser` / `ExpressParserFactory`：当前源码根不存在，状态为 `blocked`，不得作为可用 capability。
 
 ## Troubleshooting Notes
 
-- If a parser is not found, confirm it is a Spring bean and `parserType()` is non-null.
+- If an EL/parser capability is requested, stop and resolve its actual repository/module instead of assuming the removed path.
 - If validation annotations do not fire, check controller/service validation annotations and Spring validation starter wiring before editing parser code.
 - The component README is empty; use the POM, message resources, Controller annotations, and `GlobalExceptionAdvice` as current evidence.
-- Duplicate parser type keys are silently overwritten by `PARSER_MAP.put`; require collision and round-trip tests for extensions.
 - If behavior differs between expression validation and DTO validation, route the problem to the correct submodule first.
 
 ## Checklist
 
 - Required dependency or starter module is present.
-- JSR-303 and expression validation concerns are not mixed in the same fix.
-- New parser implementations have deterministic parser type keys.
-- Parser registration is verified through `ExpressParserFactory.PARSER_MAP`.
+- JSR-303 and unavailable expression-validation requests are not mixed in the same fix.
+- No class, parser or configuration is attributed to the absent historical module.
 - Validation errors preserve readable messages for Chinese business users.
 - Existing project conventions are reused before adding new wrappers.
 
@@ -56,6 +51,6 @@ Read `references/source-index.md` as a path-hint index whenever the task depends
 - Do not replace component extension points with business-local framework code.
 - Do not broaden the task into unrelated YSS components unless the user asks.
 
-## 新脚手架平台约束
+## 平台与源码门禁
 
-消费批准切片架构身份中的 `platform_configuration`，与工程 Manifest 核对后使用对应 YSS 组件。Boot 2.7 使用 `javax` Web/Validation API；Boot 3.5/4.1 使用 `jakarta`。Boot 4 按 Jackson 3、对应自动配置和 starter 适配；不替换 `javax.sql` 等 Java SE 包。平台不一致、兼容条目缺失或候选未验证时回合同编译器阻断，不在业务实现中升级或替换组件。详见 仓库共享合同 `docs/engineering/backend-platforms.md`。
+接入、修改、代码生成或给出精确类名/配置前，读取 [后端组件平台与源码门禁](../yss-skill-source-index-refresh/references/backend-component-platform-compatibility.md)，从批准的 `platform_configuration.component_platform_line` 选择 `source-index.boot2-java8.md` 或 `source-index.boot3-java17.md`，并以 `--skill yss-validation --platform-line <line> --source-root <matching-root>` 运行统一 freshness 校验。平台线与源码根不匹配、组件 tree 不一致、组件子树 dirty、索引缺少平台信号，或 Manifest / 组件 GAV 缺少 verified 兼容证据时返回 `blocked`；不得回退另一代索引，也不在业务实现中升级、降级或替换 YSS 组件。既有工程只读分诊可继续，但不得据此宣称跨 Boot/JDK 兼容。

package/template/.codex/skills/yss-validation/references/source-index.boot2-java8.md

@@ -0,0 +1,47 @@
+# yss-validation Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot2-java8`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `a3be2b2e33dca4545782e2b31894aaa00d0305cd`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-validation-jsr303`: `fe5b36afb474afa41541fe1187a6828bdae080dc`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT2_JAVA8` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-validation-jsr303` (existed when indexed)
+
+## Documentation Files
+
+- `yss-microservice-components/yss-component-validation-jsr303/readme.md`
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-validation-jsr303/pom.xml` — GAV `com.yss.cloud:yss-component-validation-jsr303:2.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-cloud-microservice:2.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `1.8`.
+- Inherited Spring Boot signals: `2.7.18`.
+- Namespace source signals: `javax.*` in 0 main Java files; `jakarta.*` in 0 main Java files.
+- Auto-configuration metadata: 0 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- No key Java entry points matched the configured name patterns.
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT2_JAVA8`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot2-java8 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.

package/template/.codex/skills/yss-validation/references/source-index.boot3-java17.md

@@ -0,0 +1,47 @@
+# yss-validation Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot3-java17`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `5041c41fbe96c25821bbc15f688c0521b8c97a3d`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-validation-jsr303`: `aee5fea02f5de4d1e459679424f158d7537c5499`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT3_JAVA17` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-validation-jsr303` (existed when indexed)
+
+## Documentation Files
+
+- `yss-microservice-components/yss-component-validation-jsr303/readme.md`
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-validation-jsr303/pom.xml` — GAV `com.yss.cloud:yss-component-validation-jsr303:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-cloud-microservice:3.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `17`.
+- Inherited Spring Boot signals: `3.5.16`.
+- Namespace source signals: `javax.*` in 0 main Java files; `jakarta.*` in 0 main Java files.
+- Auto-configuration metadata: 0 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- No key Java entry points matched the configured name patterns.
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT3_JAVA17`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot3-java17 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.

package/template/.codex/skills/yss-validation/references/source-index.md

@@ -1,33 +1,10 @@
-# yss-validation Source Index
+# yss-validation Source Index Router
 
-Generated: 2026-08-17T12:03:37.436Z
-Source commit: `38b556a5081e6c66c0c538cbc1ef839b19996ed3`
-Source worktree: `dirty`
-Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT` to reproduce or refresh.
+Index schema: `backend-component-source-index-router-v1`
 
-This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+Select the source index from the approved `platform_configuration.component_platform_line`; do not infer a line from imports, a branch name or a requested upgrade.
 
-Paths below are source path hints captured at refresh time. If they do not exist in the current workspace, locate sources using `YSS_SOURCE_ROOT`, CodeGraph, package/class names, Maven artifact names, or repository search before assuming the source is unavailable.
+- `boot2-java8` — [Spring Boot 2.7 / Java 8 maintenance line](source-index.boot2-java8.md)
+- `boot3-java17` — [Spring Boot 3.5 / Java 17 mainline](source-index.boot3-java17.md)
 
-## Component Path Hints
-
-- `yss-microservice-components/yss-component-validation-engine-parent` (missing when indexed)
-- `yss-microservice-components/yss-component-validation-jsr303` (existed when indexed)
-
-## Documentation Files
-
-- `yss-microservice-components/yss-component-validation-jsr303/readme.md`
-
-## Maven Modules
-
-- `yss-microservice-components/yss-component-validation-jsr303`
-
-## Key Java Entry Points
-
-- No key Java entry points matched the configured name patterns.
-
-## Recommended Next Reads
-
-- Start with the documentation files above when learning component usage.
-- Search the key Java entry points for annotations, auto configuration, properties, aspects, interceptors, handlers, and result objects before changing application code.
-- Prefer existing component extension points over rewriting framework logic in business modules.
+Run the freshness checker with the same explicit `--platform-line` and its matching clean source root before exact integration guidance.

package/template/.codex/skills/yss-web-controller/SKILL.md

@@ -47,7 +47,7 @@ node scripts/generate_controller.mjs \
   --domain-segment example \
   --web-project-dir /path/demo-adapter/demo-web \
   --application-service-package com.yss.demo.application.service \
-  --validation-namespace javax
+  --validation-namespace <resolved-platform-namespace>
 ```
 
 ## 输出预期
@@ -68,10 +68,10 @@ node scripts/generate_controller.mjs \
 - HTTP Request 不继承会暴露内部协作字段的 `PageQuery`；只生成冻结 OpenAPI allowlist 字段，禁止把 `offset`、`needTotalCount`、`tempTotalCount` 变成客户端输入。
 - `fields.<table>.pagination` 必须显式列出 `yss-dto` wire profile 允许暴露的字段子集；模板不得无条件生成字段或自行定义默认值。
 - 先跑脚本，再按项目规范做少量手调。
-- `javax` / `jakarta` validation namespace 必须来自工程基线，不得按记忆选择。
+- Validation namespace 参数必须来自批准的精确平台配置和当前工程基线，不得按记忆或 Boot 大版本自行选择。
 - 若用户只是要改单个 Controller，先看现有代码，不要盲覆盖整个目录。
 - 脚本是 initialize-only；写入前先规划全部目标并校验 `allowed_write_paths`，任一目标已存在或传入 `--force` 时整体返回 `unsupported`。落盘使用排他创建和失败回滚，不得留下部分文件；旧项目迁移不属于该生成器。
-- `integration_mode=existing-project` 保留已登记工程的 Boot 2/Boot 3 能力；`integration_mode=scaffold-v2` 必须提供 `--scaffold-manifest-file`，且 Manifest 已达到 `empty-scaffold-verified`，Profile、基础包和标准 Web module 路径全部一致。
+- `integration_mode=existing-project` 只复用工程登记、effective POM 与依赖树共同证明的精确平台，不从 Boot 大版本推断能力；`integration_mode=scaffold-v2` 必须提供 `--scaffold-manifest-file`，且 Manifest 已达到 `empty-scaffold-verified`，Profile、基础包、标准 Web module 路径和平台绑定全部一致。
 
 ## 按需读取
 
@@ -92,4 +92,4 @@ node scripts/generate_controller.mjs \
 
 ## 新脚手架平台约束
 
-消费批准切片架构身份中的 `platform_configuration`，与工程 Manifest 核对后使用对应 YSS 组件。Boot 2.7 使用 `javax` Web/Validation API；Boot 3.5/4.1 使用 `jakarta`。Boot 4 按 Jackson 3、对应自动配置和 starter 适配；不替换 `javax.sql` 等 Java SE 包。平台不一致、兼容条目缺失或候选未验证时回合同编译器阻断，不在业务实现中升级或替换组件。详见 仓库共享合同 `docs/engineering/backend-platforms.md`。
+消费批准切片架构身份中的 `platform_configuration`，并与工程 Manifest、effective POM 和依赖树核对。DTO、Validation、Exception 或其他 YSS 组件命中时，逐项消费合同中的 `component_bindings`；缺少 verified 架构证据、构件摘要或绑定发生漂移时回合同编译器阻断。Validation namespace、Jackson wire 行为、Web starter 和自动配置机制只来自解析后的精确平台事实；命令参数必须使用该解析值，不在本 Skill 中按 Boot 大版本硬编码。不得在业务实现中升级、降级或替换组件；平台迁移使用独立迁移工作单元。详见仓库共享合同 `docs/engineering/backend-platforms.md`。

package/template/.codex/skills/yss-web-controller/scripts/generate_controller.test.mjs

@@ -13,7 +13,7 @@ const dtoWireProfileDigest = createHash("sha256").update(await readFile(dtoWireP
 
 for (const [profile, module, placement, modules, generator] of [
   ["layered-mvc-service", "service", "server", ["server", "service", "repository"], "yss-layered-mvc-scaffold-generator"],
-  ["mvc-data-analysis-v1", "core", "client", ["server", "core", "client", "repository", "adapter", "feign-client"], "yss-mvc-data-analysis-project-initializer"]
+  ["mvc-data-analysis-v1", "core", "client", ["server", "core", "client", "repository", "adapter", "feign-client"], "yss-layered-mvc-scaffold-generator"]
 ]) test(`${profile} binds MVC service types, DTO ownership and drift checks`, async (t) => {
   const data = await fixture({ platform_profile: "spring-boot-2.7-jdk8", validation_namespace: "javax" });
   t.after(() => rm(data.root, { recursive: true, force: true }));

package/template/.cursor/skills/yss-application/SKILL.md

@@ -27,13 +27,15 @@ Application 层用例编排 skill。负责协调 Domain 与 Gateway，定义事
 
 ## 工作方式
 
-1. 确认工程来自 `target-domain-model`；`core/client/repository` 等旧架构对本脚手架链路为 `unsupported`。
-2. 确认 Use Case、Application 边界、事务边界已在批准合同中写明。
-3. 实现 AppService 时调用 Domain Service / Gateway，核心规则下沉 Domain。
-4. Web DTO 转 Application Command/Result 属于 Web，PO 转 Domain 属于 Infrastructure；Application 内确有独立模型转换时才加载 `mapstruct`，并统一 Spring Bean 与构造器注入。
-5. 详细包结构、注解、示例和旧架构阻断边界见 `references/application-layer-guide.md`。
+1. 按 `architecture_identity.architecture_profile` 选择且只选择对应 Profile reference；Profile 未登记、与 Manifest 不一致或成熟度不满足当前任务时返回 `blocked`。
+2. `target-domain-model` 才执行 Domain Service / Gateway、跨聚合编排和下述 DDD 产物规则；`layered-mvc-service` 与 `mvc-data-analysis-v1` 分别按其 service/core Profile 承载用例、规则和事务，不加载 DDD Gateway。
+3. 确认 Use Case、Application/service/core 边界与事务边界已在批准合同中写明。
+4. Web DTO 到内部 Command/Result 的转换归 Web 边界，持久化转换归 Repository/Infrastructure；用例层确有独立模型转换时才加载 `mapstruct`，并统一 Spring Bean 与构造器注入。
+5. DDD 的详细包结构、注解、示例和旧架构阻断边界见 `references/application-layer-guide.md`；MVC 不读取该 guide。
 
-## 产物范围
+## DDD 产物范围
+
+以下路径只适用于 `target-domain-model`；MVC 产物以选中的 Profile reference 和合同为准。
 
 - `application/.../command/*Command.java`、`application/.../query/*Query.java`、`application/.../result/*Result.java`
 - `application/.../port/*QueryPort.java`

package/template/.cursor/skills/yss-audit-log/SKILL.md

@@ -18,7 +18,7 @@ description: "接入或排查 YSS AuditLog 的 SpEL 摘要、异步发布、订
 1. 先确认用户是在做“接入”还是“排障”。
 2. 涉及真实类名、配置项、订阅器或排障时，先读 `references/source-index.md`，再定位源码或文档。
 3. 优先检查项目里是否已有注解、配置项和订阅器实现，再决定改法。
-4. 只给出与当前问题直接相关的接入点：注解、配置、切面链路、订阅器扩展。
+4. 只给出与当前问题直接相关的接入点：注解、配置、切面链路、`CurrentUserProvider` 和订阅器扩展。
 5. 需要看实现细节时，再读取 `assets/` 下源码，不要先讲整套组件原理。
 
 ## 源码索引
@@ -34,23 +34,24 @@ description: "接入或排查 YSS AuditLog 的 SpEL 摘要、异步发布、订
 - 启动类是否启用了类似 `@EnableAuditLog` 的能力。
 - 目标方法是否是可被 AOP 代理拦截的 Spring Bean 方法。
 - `@AuditLog` 是否标在正确的方法上。
-- `summary` 中的 SpEL 变量必须使用源码实际暴露的 context keys (`参数审计` / `结果审计`)；方法参数名不会自动进入 context。
-- 当前源码的变量正则只接受 ASCII 字母、数字、下划线和路径符号，不能可靠识别中文 context key；涉及 `#{参数审计...}` / `#{结果审计...}` 时先标记 `blocked`，除非组件修复并有表达式测试，不要声称摘要会被解析。
-- 项目编译参数是否保留了参数名。
+- `boot3-java17` 的 SpEL 根上下文只暴露 ASCII key：`args` 和 `result`；例如 `#{args[0]}`、`#{result[name]}`。方法参数名不会自动进入上下文。
+- `args` 仅在 `@AuditLog(isNeedArgs = true)` 时写入，`result` 仅在 `isNeedResult = true` 时写入；表达式引用未启用的 key 属于配置错误，必须由组件 seam 测试覆盖。
+- `boot3-java17` 不再使用中文 context key，也不得把 Boot 2 的历史模板直接复制到 Boot 3。处理旧模板时先读取所选平台线索引并显式迁移。
 - `yss.audit.enabled` 是否开启；`sendSysManageEnabled` 与 `auditLogPrintEnabled` 在当前实现中不会自动阻止订阅器注册，需按源码验证，不能假设开关生效。
+- 审计身份由 `CurrentUserProvider` 提供；不得在审计切面中重新解析 Header 或未验签 JWT。
 
 ## 排障顺序
 
 1. 注解是否生效。
 2. 切面是否拦截到方法。
-3. SpEL 是否能从参数和返回值取到值。
+3. SpEL 是否能从已启用的 `args` / `result` 取到值。
 4. 发布服务是否成功入队。
 5. 订阅器是否被 Spring 扫描并注册。
 6. 下游系统管理或打印订阅器是否被开关禁用。
 7. 异步线程池或事件发布异常是否被吞掉。
-8. 参数名、返回值字段、异常分支是否满足摘要模板。
+8. 参数位置、返回值字段、异常分支是否满足摘要模板。
 
-审计切面当前是 `@AfterReturning`，只记录成功返回；异常审计、参数脱敏、队列满丢弃、线程池关闭、重试和幂等必须单独设计并测试。
+`boot3-java17` 审计切面当前是 `@AfterReturning`，只记录成功返回；异常审计、参数脱敏、队列满丢弃、线程池关闭、重试和幂等必须单独设计并测试。组件测试至少覆盖 `#{result[name]}`、`args` / `result` 资源写入和可信身份来源。
 
 ## 修改约束
 
@@ -65,3 +66,7 @@ description: "接入或排查 YSS AuditLog 的 SpEL 摘要、异步发布、订
 - 审计切面与 SpEL 解析：`assets/AuditLogAspect.java`
 - 异步发布链路：`assets/YssAuditPublishService.java`
 - 默认订阅器：`assets/YssAuditLogPrintSubscriberImpl.java`、`assets/YssAuditLogSysManagerSubscriberImpl.java`
+
+## 平台与源码门禁
+
+接入、修改、代码生成或给出精确类名/配置前，读取 [后端组件平台与源码门禁](../yss-skill-source-index-refresh/references/backend-component-platform-compatibility.md)，从批准的 `platform_configuration.component_platform_line` 选择 `source-index.boot2-java8.md` 或 `source-index.boot3-java17.md`，并以 `--skill yss-audit-log --platform-line <line> --source-root <matching-root>` 运行统一 freshness 校验。平台线与源码根不匹配、组件 tree 不一致、组件子树 dirty、索引缺少平台信号，或 Manifest / 组件 GAV 缺少 verified 兼容证据时返回 `blocked`；不得回退另一代索引，也不在业务实现中升级、降级或替换 YSS 组件。既有工程只读分诊可继续，但不得据此宣称跨 Boot/JDK 兼容。

package/template/.cursor/skills/yss-audit-log/references/source-index.boot2-java8.md

@@ -0,0 +1,57 @@
+# yss-audit-log Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot2-java8`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `a3be2b2e33dca4545782e2b31894aaa00d0305cd`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-audit-log`: `d00f2e156714e43e8ec70b28e0bd33967d130485`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT2_JAVA8` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-audit-log` (existed when indexed)
+
+## Documentation Files
+
+- No component documentation files found.
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-audit-log/pom.xml` — GAV `com.yss.cloud:yss-component-audit-log:2.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-microservice-components:2.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `1.8`.
+- Inherited Spring Boot signals: `2.7.18`.
+- Namespace source signals: `javax.*` in 2 main Java files; `jakarta.*` in 0 main Java files.
+- Auto-configuration metadata: 0 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/AuditLog.java` — `sha256:09d7d6cae894bbb9d5e9651812d0cc599dd5907cc728b81c82843e57845d3a11`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/EnableAuditLog.java` — `sha256:cc1085f77fcd3ffd995a73d4eca083059d204c8aee3c51779fa9427797033a9b`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditConfiguration.java` — `sha256:abf75caddee4ade5169a178be11b56ad2a5da9525b50e11d4e6306fef6430ca4`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditConfigurationProperties.java` — `sha256:32664d23f229583e05a1f14a3a45547b585d9f521d2f20c08604b04fcc1e2b3d`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditLogAspect.java` — `sha256:e66fc07f1a13b03cfb5d01299cee273d58534d66761d729ea133e850848980c3`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/EnableAuditLogImportSelector.java` — `sha256:4877f5c1319d16c8796a2cd775d20d8703c6000a33069b4eff2a566b685b47ef`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/UUIDGenerator.java` — `sha256:02f61fcd3e1c225acc7aaf36dfdc16f1ccb429b79711f969bb3fdf40a7bcbfaa`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/YssAuditPublishService.java` — `sha256:741031682d4ae8776c3cfdc6def08a6e3ab962f7159d6941599d32ed9dbc0c96`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/YssAuditSubscriber.java` — `sha256:f8274254df0be009f26f5fd1bbffd801b5410f28c0dd2981182bfe4940be66da`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/impl/YssAuditLogPrintSubscriberImpl.java` — `sha256:bf74f628ffa94b3f58402960b0808663410235f979cf83cafeadacbe4de7a798`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/impl/YssAuditLogSysManagerSubscriberImpl.java` — `sha256:f5be56e112c046957f5589f66450bea9421e32b1aaf1cd0d42f97c998338dab4`
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT2_JAVA8`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot2-java8 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.

package/template/.cursor/skills/yss-audit-log/references/source-index.boot3-java17.md

@@ -0,0 +1,58 @@
+# yss-audit-log Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot3-java17`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `5041c41fbe96c25821bbc15f688c0521b8c97a3d`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-audit-log`: `c642c01ee64abd557d3637eb7fe15f9f4947cb2d`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT3_JAVA17` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-audit-log` (existed when indexed)
+
+## Documentation Files
+
+- No component documentation files found.
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-audit-log/pom.xml` — GAV `com.yss.cloud:yss-component-audit-log:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-microservice-components:3.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `17`.
+- Inherited Spring Boot signals: `3.5.16`.
+- Namespace source signals: `javax.*` in 0 main Java files; `jakarta.*` in 2 main Java files.
+- Auto-configuration metadata: 0 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/AuditLog.java` — `sha256:09d7d6cae894bbb9d5e9651812d0cc599dd5907cc728b81c82843e57845d3a11`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/EnableAuditLog.java` — `sha256:cc1085f77fcd3ffd995a73d4eca083059d204c8aee3c51779fa9427797033a9b`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditConfiguration.java` — `sha256:abf75caddee4ade5169a178be11b56ad2a5da9525b50e11d4e6306fef6430ca4`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditConfigurationProperties.java` — `sha256:32664d23f229583e05a1f14a3a45547b585d9f521d2f20c08604b04fcc1e2b3d`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditLogAspect.java` — `sha256:3db4297a0d52e97cff70a13800ae4f412f87799abc231e9cd8b9b43ecf7c1c00`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/EnableAuditLogImportSelector.java` — `sha256:4877f5c1319d16c8796a2cd775d20d8703c6000a33069b4eff2a566b685b47ef`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/UUIDGenerator.java` — `sha256:02f61fcd3e1c225acc7aaf36dfdc16f1ccb429b79711f969bb3fdf40a7bcbfaa`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/feign/YssDmSystemManageFeign.java` — `sha256:3a76cd33dbff182f964975c7ce4a63405660c0edb15057ff57eeebf0085b942a`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/YssAuditPublishService.java` — `sha256:0de3ddc7ff56051d7b955a4d9d0f0ec3230d5674abfb2a3cc10ba457dbcc7afd`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/YssAuditSubscriber.java` — `sha256:f8274254df0be009f26f5fd1bbffd801b5410f28c0dd2981182bfe4940be66da`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/impl/YssAuditLogPrintSubscriberImpl.java` — `sha256:bf74f628ffa94b3f58402960b0808663410235f979cf83cafeadacbe4de7a798`
+- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/impl/YssAuditLogSysManagerSubscriberImpl.java` — `sha256:5f8853eea7484726ba3816899b3ea3afb7fb3c74635ff7008d331ec9b697d2ef`
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT3_JAVA17`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot3-java17 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.

package/template/.cursor/skills/yss-audit-log/references/source-index.md

@@ -1,43 +1,10 @@
-# yss-audit-log Source Index
+# yss-audit-log Source Index Router
 
-Generated: 2026-08-17T12:03:37.436Z
-Source commit: `38b556a5081e6c66c0c538cbc1ef839b19996ed3`
-Source worktree: `dirty`
-Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT` to reproduce or refresh.
+Index schema: `backend-component-source-index-router-v1`
 
-This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+Select the source index from the approved `platform_configuration.component_platform_line`; do not infer a line from imports, a branch name or a requested upgrade.
 
-Paths below are source path hints captured at refresh time. If they do not exist in the current workspace, locate sources using `YSS_SOURCE_ROOT`, CodeGraph, package/class names, Maven artifact names, or repository search before assuming the source is unavailable.
+- `boot2-java8` — [Spring Boot 2.7 / Java 8 maintenance line](source-index.boot2-java8.md)
+- `boot3-java17` — [Spring Boot 3.5 / Java 17 mainline](source-index.boot3-java17.md)
 
-## Component Path Hints
-
-- `yss-microservice-components/yss-component-audit-log` (existed when indexed)
-
-## Documentation Files
-
-- No component documentation files found.
-
-## Maven Modules
-
-- `yss-microservice-components/yss-component-audit-log`
-
-## Key Java Entry Points
-
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/AuditLog.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/EnableAuditLog.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditConfiguration.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditConfigurationProperties.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/AuditLogAspect.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/EnableAuditLogImportSelector.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/configuration/UUIDGenerator.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/feign/YssDmSystemManageFeign.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/YssAuditPublishService.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/YssAuditSubscriber.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/impl/YssAuditLogPrintSubscriberImpl.java`
-- `yss-microservice-components/yss-component-audit-log/src/main/java/com/yss/cloud/audit/subscriber/impl/YssAuditLogSysManagerSubscriberImpl.java`
-
-## Recommended Next Reads
-
-- Start with the documentation files above when learning component usage.
-- Search the key Java entry points for annotations, auto configuration, properties, aspects, interceptors, handlers, and result objects before changing application code.
-- Prefer existing component extension points over rewriting framework logic in business modules.
+Run the freshness checker with the same explicit `--platform-line` and its matching clean source root before exact integration guidance.

package/template/.cursor/skills/yss-cache/SKILL.md

@@ -39,6 +39,10 @@ description: "接入或排查 YSS QueryCache、UpdateCache、ClearCache、TTL、
 
 - `scripts/inspect-cache-usage.sh <project-root>`：只读扫描消费项目；发现阻断缺陷返回 1，输入或环境错误返回 2。
 - `scripts/verify-cache-component.sh [--source-root PATH] [--consumer-root PATH --consumer-module MODULE]`：验证组件、真实 Redis、Java 8 字节码及可选消费模块。
-- `scripts/check-skill-freshness.sh [source-root]`：比较技能契约与当前组件源码；发现漂移返回 1。
+- `scripts/check-skill-freshness.sh <boot2-java8|boot3-java17> [source-root]`：比较所选平台线的技能契约与当前组件源码；发现平台错配或漂移返回 1。
 
 当组件源码变化后，用 `yss-skill-source-index-refresh` 刷新 [source-index.md](references/source-index.md)，再运行 freshness 检查。不要手工修改生成索引。
+
+## 平台与源码门禁
+
+接入、修改、代码生成或给出精确类名/配置前，读取 [后端组件平台与源码门禁](../yss-skill-source-index-refresh/references/backend-component-platform-compatibility.md)，从批准的 `platform_configuration.component_platform_line` 选择 `source-index.boot2-java8.md` 或 `source-index.boot3-java17.md`，并以 `--skill yss-cache --platform-line <line> --source-root <matching-root>` 运行统一 freshness 校验。平台线与源码根不匹配、组件 tree 不一致、组件子树 dirty、索引缺少平台信号，或 Manifest / 组件 GAV 缺少 verified 兼容证据时返回 `blocked`；不得回退另一代索引，也不在业务实现中升级、降级或替换 YSS 组件。既有工程只读分诊可继续，但不得据此宣称跨 Boot/JDK 兼容。

package/template/.cursor/skills/yss-cache/references/source-index.boot2-java8.md

@@ -0,0 +1,81 @@
+# yss-cache Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot2-java8`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `a3be2b2e33dca4545782e2b31894aaa00d0305cd`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-cache-parent`: `bc17b39c68a6ad0a96a5fad506f82652a70a461c`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT2_JAVA8` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-cache-parent` (existed when indexed)
+
+## Documentation Files
+
+- `yss-microservice-components/yss-component-cache-parent/readme.md`
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-cache-parent/pom.xml` — GAV `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-microservice-components:2.0.0-SNAPSHOT`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-cache-starter/pom.xml` — GAV `com.yss.cloud:yss-component-cache-starter:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-caffeine-cache/pom.xml` — GAV `com.yss.cloud:yss-component-caffeine-cache:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-hazelcast-cache/pom.xml` — GAV `com.yss.cloud:yss-component-hazelcast-cache:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-jetcache/pom.xml` — GAV `com.yss.cloud:yss-component-jetcache:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/pom.xml` — GAV `com.yss.cloud:yss-component-redis-cache:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/pom.xml` — GAV `com.yss.cloud:yss-component-spring-cache:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-component-cache-parent:3.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `1.8`.
+- Inherited Spring Boot signals: `2.7.18`.
+- Namespace source signals: `javax.*` in 3 main Java files; `jakarta.*` in 0 main Java files.
+- Auto-configuration metadata: 4 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- `yss-microservice-components/yss-component-cache-parent/yss-component-caffeine-cache/src/main/java/com/yss/cloud/cache/caffeine/config/CacheCaffeineManagerConfig.java` — `sha256:3a24a45d5958d2b854f7a1a58e33e90f71fac5ea1ded71545cdb6e6467c17165`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-caffeine-cache/src/main/java/com/yss/cloud/cache/caffeine/config/CacheCaffeineResolver.java` — `sha256:a4c55043da2519763d2ff41f02eee49a3c48e9e300d57e349c57b4a7a3d5ff0d`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-caffeine-cache/src/main/java/com/yss/cloud/cache/caffeine/config/CaffeineCacheBackendProvider.java` — `sha256:a1abe2aa93b43a296c281f8fe6c10d48623f2702897ecddfd0f598aead9c3c1e`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-hazelcast-cache/src/main/java/com/yss/cloud/cache/hazelcast/config/CacheHazelcastManagerConfig.java` — `sha256:4636be7f75c4ac4e14e32fc84d79c1cbd52bfba7c3db46144b924a8f970ba73d`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-hazelcast-cache/src/main/java/com/yss/cloud/cache/hazelcast/config/HazelcastCacheBackendProvider.java` — `sha256:8dff13225a69fb3f22a0640754ba0c9c314ce2f048c6145740400350f0d22514`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-hazelcast-cache/src/main/java/com/yss/cloud/cache/hazelcast/config/YssCacheHazelcastProperties.java` — `sha256:52568d1eadaafd7a054b5fd765303b5c840b9a4660370ace933267da716424ac`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-jetcache/src/main/java/com/yss/cloud/cache/jetcache/CacheManagerCompose.java` — `sha256:dbce39f2a3b0f13e8ea8da9ae952ace9bba5c89e1dcec8e1a71cc8f2e4dfabe9`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/redis/config/RedisCacheBackendProvider.java` — `sha256:fd9dea0dd93a9325c2399b80c88ca47b8a3c7ad886ae29ef0973ea986ff6314b`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/redis/config/RedisConnFactoryConfig.java` — `sha256:7e0bc3a62ab0a202c0a450d87b2eb486440483f7a1f4bcc1920ea38310e397ec`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/redis/config/RedisTemplateConfig.java` — `sha256:d6939ee2408beebfe8866e547155c13d372e061c50646961e1b40c77e017fecf`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/redis/config/SafeRedisCache.java` — `sha256:cab1c61c2284ddcc2f88435f76882378175e8d3674113df2da715775d9e265b2`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/redis/config/YssCacheRedisResolver.java` — `sha256:786af0511754e90f70315c106bd34ba24a50024cbc3e9feff46ff62ba65ff964`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/repository/BaseRedisRepository.java` — `sha256:c79736715e3881a3c8fcb57f44b9024813954c8bc4d9185d9ddbe78f1d6eb749`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-redis-cache/src/main/java/com/yss/cloud/cache/repository/YssDatamiddle.java` — `sha256:e6f29975ea8b282c8ff51318855a86161cc213210669a735ec68c53268493dc1`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/ApplicationContextCacheHelper.java` — `sha256:218246ded19de9fb5a3c5d448f50bd34a208b569e0c5b5c0f9d8b8ec8e25982c`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/CacheComposeResolver.java` — `sha256:d70f6743f3cab0384cda7860e345206b341148e30b9c72bacf7bf7674ac2b923`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/CacheManagerCompose.java` — `sha256:57d0a7a2f31d12d4bea6ac4cbc975cede9d35797f0ee6f4781c39388ed6b9c0a`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/CacheMemResolver.java` — `sha256:206c53772d6d5ca59ff30c16967e2b7048614a887e65489667f07d0b4fc9cf93`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/CacheRedisResolver.java` — `sha256:eae6535764caa0f8023051173a81f490408c436055f396f59a965fb4db5df8d4`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/EnableYssCloudCache.java` — `sha256:5db0b797d3deb45f06fd68f9d17b66d7248c6c78dcb90d147c6f6c5b04afc214`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/EnableYssCloudRedisCache.java` — `sha256:1310f6d89a470c0057e6cf25ff095af1024825f27fde376beefbcdde81cb902a`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/YssCacheBackendProvider.java` — `sha256:a58c8b7634a8608766c9bdd5180bcb2949c4ee47af3497c573a006703fc38489`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/YssCacheInterceptor.java` — `sha256:80449fa08d253b0defbdc3d859a797b84aaeaf9098d52cf93b2a45e40416411e`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/YssCacheProperties.java` — `sha256:4b6d6850096fe4ac06567e7a2a2802802853d4aa824c22f17530efdcfb3191a4`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/annotation/ClearCache.java` — `sha256:61dd140b8a2126e2619f19484908757409766a0647bd2fdd7c0d96a1600452cf`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/annotation/QueryCache.java` — `sha256:7368d795819edc21ecf38a9c1604e5642cdb4d841251e85634d6a877e5b13529`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/annotation/UpdateCache.java` — `sha256:2efe5f0d1134cba3bc0076770f3fb4b2cf78433bc2c53d21c256bb3dd7aa2a92`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/annotation/YssCacheAnnotationParser.java` — `sha256:9838e82ae26fa8b52c74e95946c4f837379b010efb06f6ce75d5187b9bb546d2`
+- `yss-microservice-components/yss-component-cache-parent/yss-component-spring-cache/src/main/java/com/yss/cloud/cache/config/CacheOperationSourceConfiguration.java` — `sha256:59266cc7f9f78d35369983dae6dd15debe6f6335e4cf2f20446945412adb3d05`
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT2_JAVA8`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot2-java8 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.