create-yss-spec 3.4.5 → 3.4.6

package/template/.pi/skills/yss-validation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: yss-validation
-description: "接入或排查 YSS Bean Validation、校验消息、LiteFlow EL 解析器与校验错误映射。"
+description: "接入或排查 YSS Bean Validation、校验消息与校验错误映射；不存在的历史 EL 组件路由保持阻断。"
 ---
 
 # yss-validation
@@ -13,40 +13,35 @@ Use this skill for YSS 校验组件. Keep implementation grounded in the local p
 
 - Backend source location is environment-specific; resolve it with `yss-skill-source-index-refresh/references/source-location.md`.
 - Generated index: `references/source-index.md`
-- Component path hints: `yss-microservice-components/yss-component-validation-engine-parent`, `yss-microservice-components/yss-component-validation-jsr303`
+- Component path hints: `yss-microservice-components/yss-component-validation-jsr303`
 
 Read `references/source-index.md` as a path-hint index whenever the task depends on exact modules, annotations, auto configuration, properties, controllers, clients, repositories, DTOs, handlers, or troubleshooting.
 
 ## Workflow
 
-1. Identify whether the task is JSR-303 annotation validation, validation engine expression parsing, LiteFlow EL parsing, or parser extension.
+1. Identify whether the task is JSR-303 annotation validation or an expression/EL parser request.
 2. Read `references/source-index.md`; for JSR-303 behavior, read `yss-component-validation-jsr303/readme.md` first.
-3. For expression parsing, inspect `ExpressParserFactory` and concrete `ExpressParser` implementations before adding syntax.
-4. Register new parsers as Spring beans; `ExpressParserFactory` auto-registers available parser beans by `parserType().getType()`.
-5. Keep validation failures mapped to the service/API error contract used by the local project.
-6. 消费工程基线选择 javax/jakarta，不自行升级 Java/Boot。MVC 输入校验放在 server/client，业务不变量由 service/core 验证；不生成 DDD Domain。HTTP 失败形态由 server 的合同测试验证。
+3. 当前组件仓不存在历史 `yss-component-validation-engine-parent`；表达式、LiteFlow EL 或 `ExpressParserFactory` 请求返回 `blocked`，先确认真实组件来源和生命周期影响，不以旧索引或通用知识生成实现。
+4. Keep validation failures mapped to the service/API error contract used by the local project.
+5. 消费工程基线选择 javax/jakarta，不自行升级 Java/Boot。MVC 输入校验放在 server/client，业务不变量由 service/core 验证；不生成 DDD Domain。HTTP 失败形态由 server 的合同测试验证。
 
 ## Capability Split
 
 - `validation-jsr303`: currently a dependency/message-resource aggregation module; it has no local Validator, Advice, or auto-configuration Java implementation.
-- `validation-el-parser`: LiteFlow/EL expression parser infrastructure.
-- `ExpressParserFactory`: central parser registry backed by a concurrent map.
-- Parser extension point: implement/provide `ExpressParser` with a non-null parser type and register it as a bean.
+- 历史 `validation-el-parser` / `ExpressParserFactory`：当前源码根不存在，状态为 `blocked`，不得作为可用 capability。
 
 ## Troubleshooting Notes
 
-- If a parser is not found, confirm it is a Spring bean and `parserType()` is non-null.
+- If an EL/parser capability is requested, stop and resolve its actual repository/module instead of assuming the removed path.
 - If validation annotations do not fire, check controller/service validation annotations and Spring validation starter wiring before editing parser code.
 - The component README is empty; use the POM, message resources, Controller annotations, and `GlobalExceptionAdvice` as current evidence.
-- Duplicate parser type keys are silently overwritten by `PARSER_MAP.put`; require collision and round-trip tests for extensions.
 - If behavior differs between expression validation and DTO validation, route the problem to the correct submodule first.
 
 ## Checklist
 
 - Required dependency or starter module is present.
-- JSR-303 and expression validation concerns are not mixed in the same fix.
-- New parser implementations have deterministic parser type keys.
-- Parser registration is verified through `ExpressParserFactory.PARSER_MAP`.
+- JSR-303 and unavailable expression-validation requests are not mixed in the same fix.
+- No class, parser or configuration is attributed to the absent historical module.
 - Validation errors preserve readable messages for Chinese business users.
 - Existing project conventions are reused before adding new wrappers.
 
@@ -56,6 +51,6 @@ Read `references/source-index.md` as a path-hint index whenever the task depends
 - Do not replace component extension points with business-local framework code.
 - Do not broaden the task into unrelated YSS components unless the user asks.
 
-## 新脚手架平台约束
+## 平台与源码门禁
 
-消费批准切片架构身份中的 `platform_configuration`，与工程 Manifest 核对后使用对应 YSS 组件。Boot 2.7 使用 `javax` Web/Validation API；Boot 3.5/4.1 使用 `jakarta`。Boot 4 按 Jackson 3、对应自动配置和 starter 适配；不替换 `javax.sql` 等 Java SE 包。平台不一致、兼容条目缺失或候选未验证时回合同编译器阻断，不在业务实现中升级或替换组件。详见 仓库共享合同 `docs/engineering/backend-platforms.md`。
+接入、修改、代码生成或给出精确类名/配置前，读取 [后端组件平台与源码门禁](../yss-skill-source-index-refresh/references/backend-component-platform-compatibility.md)，从批准的 `platform_configuration.component_platform_line` 选择 `source-index.boot2-java8.md` 或 `source-index.boot3-java17.md`，并以 `--skill yss-validation --platform-line <line> --source-root <matching-root>` 运行统一 freshness 校验。平台线与源码根不匹配、组件 tree 不一致、组件子树 dirty、索引缺少平台信号，或 Manifest / 组件 GAV 缺少 verified 兼容证据时返回 `blocked`；不得回退另一代索引，也不在业务实现中升级、降级或替换 YSS 组件。既有工程只读分诊可继续，但不得据此宣称跨 Boot/JDK 兼容。

package/template/.pi/skills/yss-validation/references/source-index.boot2-java8.md

@@ -0,0 +1,47 @@
+# yss-validation Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot2-java8`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `a3be2b2e33dca4545782e2b31894aaa00d0305cd`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-validation-jsr303`: `fe5b36afb474afa41541fe1187a6828bdae080dc`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT2_JAVA8` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-validation-jsr303` (existed when indexed)
+
+## Documentation Files
+
+- `yss-microservice-components/yss-component-validation-jsr303/readme.md`
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-validation-jsr303/pom.xml` — GAV `com.yss.cloud:yss-component-validation-jsr303:2.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-cloud-microservice:2.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `1.8`.
+- Inherited Spring Boot signals: `2.7.18`.
+- Namespace source signals: `javax.*` in 0 main Java files; `jakarta.*` in 0 main Java files.
+- Auto-configuration metadata: 0 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- No key Java entry points matched the configured name patterns.
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT2_JAVA8`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot2-java8 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.

package/template/.pi/skills/yss-validation/references/source-index.boot3-java17.md

@@ -0,0 +1,47 @@
+# yss-validation Source Index
+
+Index schema: `backend-component-source-index-v2`
+Platform line: `boot3-java17`
+Generated: 2026-09-18T18:40:26.031Z
+Source commit: `5041c41fbe96c25821bbc15f688c0521b8c97a3d`
+Component worktree: `clean`
+Component tree `yss-microservice-components/yss-component-validation-jsr303`: `aee5fea02f5de4d1e459679424f158d7537c5499`
+Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT_BOOT3_JAVA17` to reproduce or refresh.
+
+This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+
+Paths are relocatable source hints. Exact guidance requires a matching component tree and a clean indexed component subtree; the repository commit is trace metadata and may differ when unrelated components change.
+
+## Component Path Hints
+
+- `yss-microservice-components/yss-component-validation-jsr303` (existed when indexed)
+
+## Documentation Files
+
+- `yss-microservice-components/yss-component-validation-jsr303/readme.md`
+
+Component documentation is a discovery aid. For API signatures, conditions and defaults, prefer the indexed source facts below when documentation differs.
+
+## Maven Modules
+
+- `yss-microservice-components/yss-component-validation-jsr303/pom.xml` — GAV `com.yss.cloud:yss-component-validation-jsr303:3.0.0-SNAPSHOT`; parent `com.yss.cloud:yss-cloud-microservice:3.0.0-SNAPSHOT`
+
+## Platform Signals
+
+- Inherited Java signals: `17`.
+- Inherited Spring Boot signals: `3.5.16`.
+- Namespace source signals: `javax.*` in 0 main Java files; `jakarta.*` in 0 main Java files.
+- Auto-configuration metadata: 0 `spring.factories`; 0 `AutoConfiguration.imports` files.
+- These are source observations, not compatibility certification. Use the approved `platform_configuration` and verified compatibility evidence before integration or generation.
+
+## Key Java Entry Points
+
+- No key Java entry points matched the configured name patterns.
+
+## Freshness and Use
+
+- Locate the current source root using `YSS_SOURCE_ROOT_BOOT3_JAVA17`, CodeGraph, Maven artifact names or repository search.
+- Compare each indexed `Component tree` with `git rev-parse HEAD:<component-path>` and require the current component subtree to be clean before exact guidance.
+- Run `node ../yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs --skill <skill-id> --platform-line boot3-java17 --source-root <root>` from the canonical skill root before exact integration guidance.
+- A repository commit difference alone is not stale when the component tree is unchanged; a component tree mismatch or component-local dirty state is stale.
+- Read only the source entries needed for the current decision or troubleshooting path.

package/template/.pi/skills/yss-validation/references/source-index.md

@@ -1,33 +1,10 @@
-# yss-validation Source Index
+# yss-validation Source Index Router
 
-Generated: 2026-08-17T12:03:37.436Z
-Source commit: `38b556a5081e6c66c0c538cbc1ef839b19996ed3`
-Source worktree: `dirty`
-Indexed source root: resolved at refresh time; set `YSS_SOURCE_ROOT` to reproduce or refresh.
+Index schema: `backend-component-source-index-router-v1`
 
-This file is generated by `yss-skill-source-index-refresh/scripts/refresh-yss-skill-index.mjs`. Do not hand-edit generated sections.
+Select the source index from the approved `platform_configuration.component_platform_line`; do not infer a line from imports, a branch name or a requested upgrade.
 
-Paths below are source path hints captured at refresh time. If they do not exist in the current workspace, locate sources using `YSS_SOURCE_ROOT`, CodeGraph, package/class names, Maven artifact names, or repository search before assuming the source is unavailable.
+- `boot2-java8` — [Spring Boot 2.7 / Java 8 maintenance line](source-index.boot2-java8.md)
+- `boot3-java17` — [Spring Boot 3.5 / Java 17 mainline](source-index.boot3-java17.md)
 
-## Component Path Hints
-
-- `yss-microservice-components/yss-component-validation-engine-parent` (missing when indexed)
-- `yss-microservice-components/yss-component-validation-jsr303` (existed when indexed)
-
-## Documentation Files
-
-- `yss-microservice-components/yss-component-validation-jsr303/readme.md`
-
-## Maven Modules
-
-- `yss-microservice-components/yss-component-validation-jsr303`
-
-## Key Java Entry Points
-
-- No key Java entry points matched the configured name patterns.
-
-## Recommended Next Reads
-
-- Start with the documentation files above when learning component usage.
-- Search the key Java entry points for annotations, auto configuration, properties, aspects, interceptors, handlers, and result objects before changing application code.
-- Prefer existing component extension points over rewriting framework logic in business modules.
+Run the freshness checker with the same explicit `--platform-line` and its matching clean source root before exact integration guidance.

package/template/.pi/skills/yss-web-controller/SKILL.md

@@ -47,7 +47,7 @@ node scripts/generate_controller.mjs \
   --domain-segment example \
   --web-project-dir /path/demo-adapter/demo-web \
   --application-service-package com.yss.demo.application.service \
-  --validation-namespace javax
+  --validation-namespace <resolved-platform-namespace>
 ```
 
 ## 输出预期
@@ -68,10 +68,10 @@ node scripts/generate_controller.mjs \
 - HTTP Request 不继承会暴露内部协作字段的 `PageQuery`；只生成冻结 OpenAPI allowlist 字段，禁止把 `offset`、`needTotalCount`、`tempTotalCount` 变成客户端输入。
 - `fields.<table>.pagination` 必须显式列出 `yss-dto` wire profile 允许暴露的字段子集；模板不得无条件生成字段或自行定义默认值。
 - 先跑脚本，再按项目规范做少量手调。
-- `javax` / `jakarta` validation namespace 必须来自工程基线，不得按记忆选择。
+- Validation namespace 参数必须来自批准的精确平台配置和当前工程基线，不得按记忆或 Boot 大版本自行选择。
 - 若用户只是要改单个 Controller，先看现有代码，不要盲覆盖整个目录。
 - 脚本是 initialize-only；写入前先规划全部目标并校验 `allowed_write_paths`，任一目标已存在或传入 `--force` 时整体返回 `unsupported`。落盘使用排他创建和失败回滚，不得留下部分文件；旧项目迁移不属于该生成器。
-- `integration_mode=existing-project` 保留已登记工程的 Boot 2/Boot 3 能力；`integration_mode=scaffold-v2` 必须提供 `--scaffold-manifest-file`，且 Manifest 已达到 `empty-scaffold-verified`，Profile、基础包和标准 Web module 路径全部一致。
+- `integration_mode=existing-project` 只复用工程登记、effective POM 与依赖树共同证明的精确平台，不从 Boot 大版本推断能力；`integration_mode=scaffold-v2` 必须提供 `--scaffold-manifest-file`，且 Manifest 已达到 `empty-scaffold-verified`，Profile、基础包、标准 Web module 路径和平台绑定全部一致。
 
 ## 按需读取
 
@@ -92,4 +92,4 @@ node scripts/generate_controller.mjs \
 
 ## 新脚手架平台约束
 
-消费批准切片架构身份中的 `platform_configuration`，与工程 Manifest 核对后使用对应 YSS 组件。Boot 2.7 使用 `javax` Web/Validation API；Boot 3.5/4.1 使用 `jakarta`。Boot 4 按 Jackson 3、对应自动配置和 starter 适配；不替换 `javax.sql` 等 Java SE 包。平台不一致、兼容条目缺失或候选未验证时回合同编译器阻断，不在业务实现中升级或替换组件。详见 仓库共享合同 `docs/engineering/backend-platforms.md`。
+消费批准切片架构身份中的 `platform_configuration`，并与工程 Manifest、effective POM 和依赖树核对。DTO、Validation、Exception 或其他 YSS 组件命中时，逐项消费合同中的 `component_bindings`；缺少 verified 架构证据、构件摘要或绑定发生漂移时回合同编译器阻断。Validation namespace、Jackson wire 行为、Web starter 和自动配置机制只来自解析后的精确平台事实；命令参数必须使用该解析值，不在本 Skill 中按 Boot 大版本硬编码。不得在业务实现中升级、降级或替换组件；平台迁移使用独立迁移工作单元。详见仓库共享合同 `docs/engineering/backend-platforms.md`。

package/template/.pi/skills/yss-web-controller/scripts/generate_controller.test.mjs

@@ -13,7 +13,7 @@ const dtoWireProfileDigest = createHash("sha256").update(await readFile(dtoWireP
 
 for (const [profile, module, placement, modules, generator] of [
   ["layered-mvc-service", "service", "server", ["server", "service", "repository"], "yss-layered-mvc-scaffold-generator"],
-  ["mvc-data-analysis-v1", "core", "client", ["server", "core", "client", "repository", "adapter", "feign-client"], "yss-mvc-data-analysis-project-initializer"]
+  ["mvc-data-analysis-v1", "core", "client", ["server", "core", "client", "repository", "adapter", "feign-client"], "yss-layered-mvc-scaffold-generator"]
 ]) test(`${profile} binds MVC service types, DTO ownership and drift checks`, async (t) => {
   const data = await fixture({ platform_profile: "spring-boot-2.7-jdk8", validation_namespace: "javax" });
   t.after(() => rm(data.root, { recursive: true, force: true }));

package/template/docs/agents/backend-architecture-profiles.md

@@ -21,7 +21,7 @@ Profile、模块闭包、生成器、成熟度和 Recipe 的权威映射见 `yss
 
 - 新脚手架统一 `verification_database=h2`、`production_database=not-bound`。仅测试和显式 `scaffold-local` 使用 H2；普通配置不设置数据库或默认激活 Profile。不另加生产驱动、第三方数据源或 Mock 服务。
 - 生产数据库、DDL、索引和方言在后续批准的存储工作单元接入；H2 测试不能证明生产方言兼容。脚手架不包含业务 SQL、schema/data 占位或业务 API。
-- DDD / 通用 MVC 消费批准的 `platform_configuration` v1，平台清单与证据规则见 `docs/engineering/backend-platforms.md`。数据分析初始化器保留 `spring-boot-2.7-jdk8` / `javax`，不自动开放新平台。组件 Skill 不擅自升级 Java、Boot、处理器或替换 YSS 依赖。MapStruct + Lombok 必须验证 binding 与生成代码编译。
+- DDD / 通用 MVC 消费批准的 `platform_configuration` v2，平台清单与证据规则见 `docs/engineering/backend-platforms.md`。凡注册表标记 `component_binding: required` 的能力，编译器必须从该配置指向的同一 compatibility 条目解析 `component_capabilities`；未登记、非 `verified`、架构证据缺失或构件摘要漂移均阻断。数据分析初始化器保留 `spring-boot-2.7-jdk8` / `javax`，不自动开放新平台。组件 Skill 不擅自升级 Java、Boot、处理器或替换 YSS 依赖。MapStruct + Lombok 必须验证 binding 与生成代码编译。
 - 对 SQL 注入、敏感信息、权限和事务的规则不因 H2 或模板而豁免。MySQL 专属语法规则仅适用于批准的 MySQL 存储工作单元；框架命名/返回包装等差异须记录明确的 YSS 基线例外。
 
 ## 验证含义

package/template/docs/agents/digital-human-roles.yaml

@@ -124,7 +124,7 @@ roles:
     title: YSS 后端工程师
     stages: [ stage.system-data-engineering, stage.ticket-formalization, stage.vertical-slice-implementation, stage.verification-release-retrospective ]
     draft_artifact_ids: [ artifact.openapi-draft, artifact.data-architecture, artifact.technical-design ]
-    core_skills: [ yss-implementation-contract-compiler, yss-technical-design, yss-tactical-design, yss-mvc-design, yss-domain, yss-application, yss-repository, yss-mybatis, yss-web-controller, yss-dto, mapstruct, lombok, alibaba-java-code-style, yss-exception, yss-validation, tdd, yss-ddd-scaffold-generator, yss-layered-mvc-scaffold-generator ]
+    core_skills: [ yss-implementation-contract-compiler, yss-technical-design, yss-tactical-design, yss-domain, yss-application, yss-repository, yss-mybatis, yss-web-controller, yss-dto, mapstruct, lombok, alibaba-java-code-style, yss-exception, yss-validation, tdd, yss-ddd-scaffold-generator, yss-layered-mvc-scaffold-generator ]
     forbidden_skills: [ yss-ui, yss-ui-business-page-generation, yss-formily, yss-frontend-scaffold-generator, page-list-module, page-form-module ]
     description: >-
       Own OpenAPI Draft, data-architecture contributions, and backend tests. Write only contract-allowed backend paths. Verify with ./mvnw. Do not Freeze OpenAPI, treat UI copy as requirements, or countersign your own implementation.

package/template/docs/agents/skill-migrations.md

@@ -2,6 +2,29 @@
 
 本文记录已退役技能入口的迁移路径。退役技能不保留物理目录、投影或 lock 条目；本文件是历史名称的唯一持久兼容说明。
 
+## 后端组件源码索引双轨迁移（2026-09-19）
+
+后端组件 Skill 的单一 `references/source-index.md` 已迁移为平台线选择页。生成证据分别保存在 `source-index.boot2-java8.md` 与 `source-index.boot3-java17.md`，来源根分别由 `YSS_SOURCE_ROOT_BOOT2_JAVA8` 与 `YSS_SOURCE_ROOT_BOOT3_JAVA17` 显式提供。
+
+- 精确接入、代码生成和配置指导必须从批准的 `platform_configuration.component_platform_line` 选择索引，并以相同 `--platform-line` 和匹配源码根运行 freshness 检查。
+- 平台线缺失、源码根错配、组件 tree 漂移或组件子树 dirty 均返回 `blocked`；禁止退回另一代索引，也不能用源码可编译替代构件兼容认证。
+- 历史提交中的单轨索引只作只读证据；当前刷新不得覆盖另一平台线或把两个变量指向同一代源码。
+
+## 后端设计与脚手架入口两阶段退役（2026-09-18）
+
+以下入口已停止承接新合同，但在迁移期保留可诊断壳；它们不是 alias，不能静默继承原批准：
+
+- `yss-mvc-design`：新工作使用 `yss-technical-design`。MVC schema、规则和 API impact 的 OpenAPI review 条件依赖由技术设计入口持有。
+- `yss-mvc-data-analysis-project-initializer`：新工作使用 `yss-layered-mvc-scaffold-generator` 的 `mvc-data-analysis-v1` Profile，继续保留六模块、H2、CONTEXT handoff、skillUtils 和独立 Git 行为。
+- `yss-backend-scaffold-parent`：新工作使用 `yss-ddd-scaffold-generator`；原嵌套 Skill 仅作为迁移期参考，基线约束迁入生成器内部 reference 和验证器。
+
+迁移期统一规则：
+
+- `maturity: deprecated`、`new_use: forbidden`、`cleanup_status: migration-only`；计划移除日期为 `2026-12-17`，但日期到达不等于授权删除。
+- 旧 Slice、Technical Design 或 Scaffold Contract 因 Registry、Profile 或 generator 摘要变化变为 `stale`，必须重新编译和批准。
+- 新请求命中迁移壳返回 `skill-deprecated`；硬退役后命中旧 ID 返回 `skill-retired`。
+- 引用、投影和 lock 未归零时不得将 `cleanup_status` 改为 `remove-ready`；硬退役后不保留 alias、物理目录、投影或 lock 条目。
+
 ## DDD 分层包装与前端组件总入口收敛（2026-09-15）
 
 以下入口已硬退役，不保留 alias、物理目录、投影或 lock 条目：

package/template/docs/agents/yss-skill-registry.yaml

@@ -1,4 +1,4 @@
-schema_version: 2
+schema_version: 3
 registry_id: yss.skill-routing
 status: active
 description: >-
@@ -6,6 +6,47 @@ description: >-
   单一可执行注册表。实现合同编译器与生命周期编排器只消费通过本表校验的
   canonical 技能；skills-lock.json 继续独立持有来源、hash 与投影完整性。
 canonical_content_root: .agents/skills
+backend_skill_domains:
+  schema_version: 1
+  scope: active-yss-backend-capability-owners
+  domain_ids: [technical-design, layered-implementation, wire-framework-contract, component-capability, engineering-initialization, platform-governance-migration]
+  assignments:
+    yss-technical-design: technical-design
+    yss-tactical-design: technical-design
+    yss-domain: layered-implementation
+    yss-application: layered-implementation
+    yss-repository: layered-implementation
+    yss-web-controller: layered-implementation
+    yss-mybatis: wire-framework-contract
+    yss-dto: wire-framework-contract
+    yss-validation: wire-framework-contract
+    yss-exception: wire-framework-contract
+    yss-cache: component-capability
+    yss-userinfo: component-capability
+    yss-audit-log: component-capability
+    yss-excel-mvc: component-capability
+    yss-distributed-id: component-capability
+    yss-resilience4j: component-capability
+    yss-security-algorithm: component-capability
+    yss-ddd-scaffold-generator: engineering-initialization
+    yss-layered-mvc-scaffold-generator: engineering-initialization
+    yss-implementation-contract-compiler: platform-governance-migration
+    yss-skill-source-index-refresh: platform-governance-migration
+    yss-up-springboot3: platform-governance-migration
+  deprecated_skills: [yss-mvc-design, yss-mvc-data-analysis-project-initializer, yss-backend-scaffold-parent]
+backend_source_index_contract:
+  schema_version: 1
+  owner_skill: yss-skill-source-index-refresh
+  scope: yss-component-capability-skills
+  component_skills: [yss-audit-log, yss-cache, yss-distributed-id, yss-dto, yss-excel-mvc, yss-exception, yss-mybatis, yss-resilience4j, yss-security-algorithm, yss-userinfo, yss-validation]
+  selector_path: references/source-index.md
+  generated_path_pattern: references/source-index.<platform-line>.md
+  platform_lines:
+    - { id: boot2-java8, source_env: YSS_SOURCE_ROOT_BOOT2_JAVA8, generated_suffix: source-index.boot2-java8.md }
+    - { id: boot3-java17, source_env: YSS_SOURCE_ROOT_BOOT3_JAVA17, generated_suffix: source-index.boot3-java17.md }
+  platform_line_source: approved-platform-configuration
+  freshness_checker: yss-skill-source-index-refresh/scripts/check-backend-skill-source-index.mjs
+  cross_line_fallback: forbidden
 existing_project_profiles:
   existing-domain-driven-maven:
     source_kind: existing-registration
@@ -45,7 +86,7 @@ architecture_profiles:
     dto_modules: [server, client]
   mvc-data-analysis-v1:
     architecture_family: layered-mvc
-    generator_skill: yss-mvc-data-analysis-project-initializer
+    generator_skill: yss-layered-mvc-scaffold-generator
     maturity: draft
     core_modules: [server, core, client, repository, adapter, feign-client]
     capability_modules: {}
@@ -58,7 +99,7 @@ runtime_policy:
   consumed_by_lifecycle: true
   discovery_enforced: true
 capability_contract:
-  schema_version: 2
+  schema_version: 3
   id_pattern: "^[a-z][a-z0-9-]*(?:\\.[a-z][a-z0-9-]*)+$"
   dependency_types: [context-required, context-conditional, coordination-only, review-only, component-dependency]
   task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input, contract-compilation, reroute, result-validation, source-index-refresh]
@@ -69,39 +110,54 @@ capability_contract:
     deduplicate_skills: true
     preserve_all_reasons: true
   deterministic_order: [recipe-declaration, dependency-topology, skill-id]
+  platform_component_binding:
+    marker: provider
+    required_kind: yss-component
+    catalog_source: docs/engineering/backend-platforms.json
+  provider_kinds: [yss-component, platform-managed, none]
+retirement_contract:
+  schema_version: 1
+  stages: [deprecated, retired]
+  deprecated_new_use: forbidden
+  cleanup_statuses: [migration-only, remove-ready]
+  hard_retirement_tombstone: docs/agents/skill-migrations.md
+  retired_id_source: scripts/lib/skill-supply-chain.mjs#OBSOLETE
+  failure_codes:
+    deprecated: skill-deprecated
+    retired: skill-retired
 capabilities:
-  - { id: writing.lifecycle-document, primary_skill: i-have-adhd, task_modes: [guidance] }
-  - { id: architecture.technical-design, primary_skill: yss-technical-design, task_modes: [guidance, integration, review-input] }
-  - { id: architecture.mvc-design, primary_skill: yss-mvc-design, architecture_family: layered-mvc, task_modes: [guidance, integration, review-input] }
-  - { id: layer.mvc-service, primary_skill: yss-application, architecture_family: layered-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: layer.mvc-persistence, primary_skill: yss-repository, architecture_family: layered-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: layer.mvc-web, primary_skill: yss-web-controller, architecture_family: layered-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: governance.implementation-contract, primary_skill: yss-implementation-contract-compiler, task_modes: [contract-compilation, reroute, result-validation] }
-  - { id: maintenance.skill-source-index, primary_skill: yss-skill-source-index-refresh, task_modes: [component-maintenance, source-index-refresh] }
-  - { id: architecture.tactical-domain, primary_skill: yss-tactical-design, architecture_family: domain-driven, task_modes: [guidance, integration, slice-implementation, review-input] }
-  - { id: layer.domain, primary_skill: yss-domain, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: layer.application, primary_skill: yss-application, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: layer.persistence, primary_skill: yss-repository, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: layer.web-adapter, primary_skill: yss-web-controller, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: contract.dto-wire, primary_skill: yss-dto, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: contract.request-validation, primary_skill: yss-validation, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: contract.error-mapping, primary_skill: yss-exception, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: framework.mybatis, primary_skill: yss-mybatis, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
-  - { id: quality.java-code-style, primary_skill: alibaba-java-code-style, task_modes: [guidance, slice-implementation, review-input] }
-  - { id: codegen.mapstruct, primary_skill: mapstruct, task_modes: [integration, slice-implementation, troubleshooting, review-input] }
-  - { id: codegen.lombok, primary_skill: lombok, task_modes: [integration, slice-implementation, troubleshooting, review-input] }
-  - { id: component.cache, primary_skill: yss-cache, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: component.current-user-context, primary_skill: yss-userinfo, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: component.audit-log, primary_skill: yss-audit-log, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: component.excel-import-export, primary_skill: yss-excel-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: component.distributed-id, primary_skill: yss-distributed-id, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: component.security-algorithm, primary_skill: yss-security-algorithm, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: component.gateway-resilience, primary_skill: yss-resilience4j, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
-  - { id: scaffold.ddd, primary_skill: yss-ddd-scaffold-generator, task_modes: [integration, component-maintenance] }
-  - { id: scaffold.layered-mvc, primary_skill: yss-layered-mvc-scaffold-generator, task_modes: [integration, component-maintenance] }
-  - { id: scaffold.frontend-vue3, primary_skill: yss-frontend-scaffold-generator, task_modes: [integration, component-maintenance] }
-  - { id: project-init.mvc-data-analysis, primary_skill: yss-mvc-data-analysis-project-initializer, task_modes: [component-maintenance] }
-  - { id: migration.springboot3, primary_skill: yss-up-springboot3, task_modes: [guidance, integration, troubleshooting, component-maintenance, review-input] }
+  - { id: writing.lifecycle-document, primary_skill: i-have-adhd, provider: { kind: none }, task_modes: [guidance] }
+  - { id: architecture.technical-design, primary_skill: yss-technical-design, provider: { kind: none }, task_modes: [guidance, integration, review-input] }
+  - { id: architecture.mvc-design, primary_skill: yss-technical-design, provider: { kind: none }, architecture_family: layered-mvc, task_modes: [guidance, integration, review-input] }
+  - { id: layer.mvc-service, primary_skill: yss-application, provider: { kind: none }, architecture_family: layered-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: layer.mvc-persistence, primary_skill: yss-repository, provider: { kind: none }, architecture_family: layered-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: layer.mvc-web, primary_skill: yss-web-controller, provider: { kind: none }, architecture_family: layered-mvc, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: governance.implementation-contract, primary_skill: yss-implementation-contract-compiler, provider: { kind: none }, task_modes: [contract-compilation, reroute, result-validation] }
+  - { id: maintenance.skill-source-index, primary_skill: yss-skill-source-index-refresh, provider: { kind: none }, task_modes: [component-maintenance, source-index-refresh] }
+  - { id: architecture.tactical-domain, primary_skill: yss-tactical-design, provider: { kind: none }, architecture_family: domain-driven, task_modes: [guidance, integration, slice-implementation, review-input] }
+  - { id: layer.domain, primary_skill: yss-domain, provider: { kind: none }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: layer.application, primary_skill: yss-application, provider: { kind: none }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: layer.persistence, primary_skill: yss-repository, provider: { kind: none }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: layer.web-adapter, primary_skill: yss-web-controller, provider: { kind: none }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: contract.dto-wire, primary_skill: yss-dto, provider: { kind: yss-component, binding_id: contract.dto-wire }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: contract.request-validation, primary_skill: yss-validation, provider: { kind: platform-managed, binding_id: spring-validation }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: contract.error-mapping, primary_skill: yss-exception, provider: { kind: yss-component, binding_id: contract.error-mapping }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: framework.mybatis, primary_skill: yss-mybatis, provider: { kind: yss-component, binding_id: framework.mybatis }, task_modes: [guidance, integration, slice-implementation, troubleshooting, review-input] }
+  - { id: quality.java-code-style, primary_skill: alibaba-java-code-style, provider: { kind: none }, task_modes: [guidance, slice-implementation, review-input] }
+  - { id: codegen.mapstruct, primary_skill: mapstruct, provider: { kind: none }, task_modes: [integration, slice-implementation, troubleshooting, review-input] }
+  - { id: codegen.lombok, primary_skill: lombok, provider: { kind: none }, task_modes: [integration, slice-implementation, troubleshooting, review-input] }
+  - { id: component.cache, primary_skill: yss-cache, provider: { kind: yss-component, binding_id: component.cache }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: component.current-user-context, primary_skill: yss-userinfo, provider: { kind: yss-component, binding_id: component.current-user-context }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: component.audit-log, primary_skill: yss-audit-log, provider: { kind: yss-component, binding_id: component.audit-log }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: component.excel-import-export, primary_skill: yss-excel-mvc, provider: { kind: yss-component, binding_id: component.excel-import-export }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: component.distributed-id, primary_skill: yss-distributed-id, provider: { kind: yss-component, binding_id: component.distributed-id }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: component.security-algorithm, primary_skill: yss-security-algorithm, provider: { kind: yss-component, binding_id: component.security-algorithm, new_adoption: forbidden, failure_code: component-new-adoption-forbidden }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: component.gateway-resilience, primary_skill: yss-resilience4j, provider: { kind: yss-component, binding_id: component.gateway-resilience }, task_modes: [guidance, integration, slice-implementation, troubleshooting, component-maintenance, review-input] }
+  - { id: scaffold.ddd, primary_skill: yss-ddd-scaffold-generator, provider: { kind: none }, task_modes: [integration, component-maintenance] }
+  - { id: scaffold.layered-mvc, primary_skill: yss-layered-mvc-scaffold-generator, provider: { kind: none }, task_modes: [integration, component-maintenance] }
+  - { id: scaffold.frontend-vue3, primary_skill: yss-frontend-scaffold-generator, provider: { kind: none }, task_modes: [integration, component-maintenance] }
+  - { id: project-init.mvc-data-analysis, primary_skill: yss-layered-mvc-scaffold-generator, provider: { kind: none }, task_modes: [component-maintenance] }
+  - { id: migration.springboot3, primary_skill: yss-up-springboot3, provider: { kind: none }, task_modes: [guidance, integration, troubleshooting, component-maintenance, review-input] }
 recipes:
   - { id: backend.ddd-domain-behavior, architecture_family: domain-driven, capabilities: [layer.domain, layer.application, quality.java-code-style] }
   - { id: backend.ddd-persistence-mybatis, architecture_family: domain-driven, capabilities: [layer.persistence, framework.mybatis, codegen.mapstruct, codegen.lombok, quality.java-code-style] }
@@ -145,7 +201,6 @@ skill_dependencies:
     - { skill: prototype-review, type: review-only }
     - { skill: yss-design-system, type: coordination-only }
   yss-ddd-scaffold-generator:
-    - { skill: yss-backend-scaffold-parent, type: context-required }
     - { skill: alibaba-java-code-style, type: context-required }
   yss-layered-mvc-scaffold-generator:
     - { skill: alibaba-java-code-style, type: context-required }
@@ -157,8 +212,6 @@ skill_dependencies:
   yss-technical-design:
     - { skill: i-have-adhd, type: context-conditional, when: lifecycle-document-output }
     - { skill: yss-tactical-design, type: coordination-only, when: domain-driven }
-    - { skill: yss-mvc-design, type: coordination-only, when: layered-mvc }
-  yss-mvc-design:
     - { skill: yss-openapi-draft-review, type: review-only, when: api-impact }
   yss-tactical-design:
     - { skill: domain-modeling, type: coordination-only }
@@ -506,7 +559,12 @@ skills:
     impacts: [backend, lifecycle]
   - id: yss-mvc-design
     layer: specialist
-    maturity: draft
+    maturity: deprecated
+    replacement_skill: yss-technical-design
+    deprecation:
+      new_use: forbidden
+      cleanup_status: migration-only
+      remove_after: 2026-12-17
     instance_default_discoverable: false
     aliases: []
     impacts: [backend, lifecycle]
@@ -560,7 +618,12 @@ skills:
     impacts: [frontend]
   - id: yss-mvc-data-analysis-project-initializer
     layer: specialist
-    maturity: draft
+    maturity: deprecated
+    replacement_skill: yss-layered-mvc-scaffold-generator
+    deprecation:
+      new_use: forbidden
+      cleanup_status: migration-only
+      remove_after: 2026-12-17
     instance_default_discoverable: false
     aliases: []
     impacts: [backend]
@@ -788,3 +851,9 @@ platform_skills:
 external_skills:
   - id: yss-backend-scaffold-parent
     source: .agents/skills/yss-ddd-scaffold-generator/references/yss-backend-scaffold-parent/SKILL.md
+    maturity: deprecated
+    replacement_skill: yss-ddd-scaffold-generator
+    deprecation:
+      new_use: forbidden
+      cleanup_status: migration-only
+      remove_after: 2026-12-17

package/template/docs/api/templates/openapi-draft-review-checklist.md

@@ -20,7 +20,7 @@
 | 原型交付物 | `docs/.scratch/<feature>/design/prototypes/index.html` 或稳定 URL | 有产品设计影响时必需；必须引用 Prototype Evidence schema v4、Visual Baseline schema v1 档位决策与交付物验证 |
 | 条件 AntD 事实 | `prototype-evidence.yaml` 的档位证据 | H1 不适用；H2 使用 AntD 时引用新鲜 fact pack 或增量 CLI；不得作为生产 YSS/AntDV 组件事实 |
 | 用户确认记录 | `docs/.scratch/<feature>/design/<feature>-prototype-confirmation.md` | 有 UI 时必需；未确认前不得进入 OpenAPI Draft 评审 |
-| YSS 工程基线 | `.codex/skills/yss-ddd-scaffold-generator/references/yss-backend-scaffold-parent/SKILL.md` |  |
+| YSS 工程基线 | `.agents/skills/yss-ddd-scaffold-generator/references/engineering-baseline.md` |  |
 | YSS DTO wire profile | `.agents/skills/yss-dto/references/openapi-wire-profile.yaml`；`scripts/verify-yss-dto-openapi-profile` |  |
 
 ## P0 追踪矩阵

package/template/docs/architecture/templates/engineering-baseline-review-template.md

@@ -77,7 +77,7 @@ owner: ai
 | 场景 | 推荐 skill | 是否需要 | 备注 |
 |------|-------------|----------|------|
 | 新服务骨架 | `yss-ddd-scaffold-generator` / `yss-layered-mvc-scaffold-generator` | 是 / 否 | 按批准的 architecture_family 选择 |
-| 后端基线检查 | `yss-backend-scaffold-parent` | 是 / 否 |  |
+| 后端基线检查 | `yss-ddd-scaffold-generator` 内部 `engineering-baseline` / `yss-layered-mvc-scaffold-generator` | 是 / 否 |  |
 | 领域建模 | `yss-domain` | 是 / 否 |  |
 | Application 用例编排 / 事务边界 | `yss-application` | 是 / 否 |  |
 | Repository / MyBatis | `yss-repository` / `yss-mybatis` | 是 / 否 |  |
@@ -91,7 +91,7 @@ owner: ai
 | `scaffold_status=required` 时已由 Agent 推荐并通过 `gate.backend-architecture-platform-approved` 同时确认 DDD / MVC 与精确 Spring Boot 版本，随后编译 schema v4 合同并经生命周期批准，再使用对应生成器；既有工程核验复用登记值 | 是 / 否 / 不适用 | gate、decision_id / digest、platform_configuration、contract_id / contract_version、批准引用、持久化引用和 Manifest v4 |
 | 脚手架生成结果只包含工程结构、配置和机械模板 | 是 / 否 | 禁止生成业务行为 |
 | 生成器输入、预期文件和实际 `./mvnw validate` / `./mvnw test` / `./mvnw package` 已留证 | 是 / 否 | 每条命令记录 `exit_code`、`duration_ms`、stdout/stderr 引用和执行时间；打印命令不算证据 |
-| `yss-backend-scaffold-parent` 基线校验已完成并重新进入 `yss-implementation-contract-compiler` | 是 / 否 / 不适用 |  |
+| 生成器内部工程基线校验已完成并重新进入 `yss-implementation-contract-compiler` | 是 / 否 / 不适用 |  |
 | 脚手架后所有业务代码均绑定批准 Slice Implementation Contract 和 YSS Skill Execution Result | 是 / 否 |  |
 
 ## 5. 完成标准
@@ -104,7 +104,7 @@ owner: ai
 - [ ] `baseline_id` / `baseline_version` 已登记，后续切片和审查只引用该质量基线，未重复定义。
 - [ ] 命中高风险影响时已完成 Doubt-Driven 主张、反证、证据和残余风险记录；未命中时已记录 `not-applicable` 原因。
 - [ ] 风险影响、验证证据和责任人已记录。
-- [ ] 原型确认后已按脚手架顺序完成工程基线、生成器、`yss-backend-scaffold-parent` 和 实现合同编译器 重编译；脚手架未生成业务行为。
+- [ ] 原型确认后已按脚手架顺序完成工程基线、生成器内部基线校验和 实现合同编译器 重编译；脚手架未生成业务行为。
 
 ## 6. 下一步门禁
 

package/template/docs/architecture/templates/system-overview-design-template.md

@@ -74,7 +74,7 @@ owner: ai
 |---|---|---|---|---|---|
 |  |  |  |  |  |  |
 
-检查规则和关键场景逐条承接、成功/失败测试、分层依赖及事务回滚。MVC 不填写聚合、值对象或 DDD Gateway；详细规则消费 `yss-mvc-design`。
+检查规则和关键场景逐条承接、成功/失败测试、分层依赖及事务回滚。MVC 不填写聚合、值对象或 DDD Gateway；详细规则由 `yss-technical-design` 的 `layered-mvc` 分支负责。
 
 ### 8.2 DDD Tactical Check