feat: migrate fatecat to enterprise repository layout

Retire the scripts/project compatibility tree, move runtime assets into canonical enterprise roots, add governance and release gates, and preserve isolated reference snapshots under docs/reference-materials and tools/reference-repos.

Author: tradecatlabs

.auto-github.json

@@ -0,0 +1,37 @@
+{
+  "schema_version": "auto-github.profile.v1",
+  "repository": "fatecat",
+  "github_identity": {
+    "user": "tradecatlabs",
+    "commit_name": "tradecatlabs",
+    "commit_email": "tradecatlabs@users.noreply.github.com"
+  },
+  "protected_paths": [
+    "AGENTS.md",
+    "README.md",
+    "SKILL.md",
+    "CONSTITUTION.md",
+    "governance/**",
+    "domains/**/service.yaml",
+    "domains/**/AGENTS.md",
+    "domains/**/README.md",
+    "contracts/**",
+    "catalog/**",
+    ".github/workflows/**"
+  ],
+  "dirty_worktree_policy": "preserve-user-changes-and-stage-only-task-scope",
+  "blocked_operations": [
+    "git reset --hard",
+    "git checkout --",
+    "git clean -fd",
+    "git push --force"
+  ],
+  "delivery_gates": [
+    "git status --short --branch",
+    "bash scripts/preflight.sh --mode pure --bootstrap --pretty",
+    "bash scripts/acceptance.sh --with-dev",
+    "bash scripts/export-runtime.sh --output-parent /tmp/fatecat-export --mode lite",
+    "bash scripts/check-export-hygiene.sh /tmp/fatecat-export/fatecat",
+    "git diff --check"
+  ]
+}

.dockerignore

@@ -0,0 +1,42 @@
+.git
+.github
+.history
+.venv
+venv
+__pycache__
+*.py[cod]
+.pytest_cache
+.ruff_cache
+.mypy_cache
+.coverage
+htmlcov
+build
+dist
+*.egg-info
+
+.env
+.env.*
+!.env.example
+!*env.example
+*.log
+output
+
+scripts/project/.venv
+scripts/project/.pytest_cache
+scripts/project/.ruff_cache
+scripts/project/.mypy_cache
+scripts/project/assets/config/.env
+scripts/project/assets/data/classics/raw
+scripts/project/assets/data/calendar/solar_terms/raw
+scripts/project/assets/docs/lifecycle/packs
+scripts/project/modules/telegram/output
+scripts/project/runtime/**/*.db
+scripts/project/runtime/**/*.sqlite
+
+domains/**/output
+domains/**/runtime/**/*.db
+domains/**/runtime/**/*.sqlite
+infra/runtime/local-state/**/*.db
+infra/runtime/local-state/**/*.sqlite
+tools/reference-repos/**/node_modules
+node_modules

.editorconfig

@@ -0,0 +1,18 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.py]
+indent_style = space
+indent_size = 4
+
+[*.{md,yml,yaml,toml,json}]
+indent_style = space
+indent_size = 2
+
+[Makefile]
+indent_style = tab

.github/AGENTS.md

@@ -20,5 +20,5 @@
 
 ## 依赖方向
 
-- `.github/workflows/* -> scripts/acceptance.sh -> scripts/project/*`
+- `.github/workflows/* -> scripts/acceptance.sh -> scripts/common.sh runtime root resolution`
 - CI 只调用仓库脚本；具体质量门禁仍以 `scripts/acceptance.sh` 为单一入口。

.github/workflows/acceptance.yml

@@ -20,7 +20,9 @@ jobs:
         with:
           python-version: "3.12"
           cache: pip
-          cache-dependency-path: scripts/project/pyproject.toml
+          cache-dependency-path: |
+            pyproject.toml
+            requirements.lock.txt
 
       - name: Install system tools
         run: |

.gitignore

@@ -5,26 +5,47 @@
 Thumbs.db
 *.swp
 *.swo
+.idea/
+.vscode/
 
 # Python cache
 __pycache__/
 *.py[cod]
 .pytest_cache/
 .ruff_cache/
 .mypy_cache/
+.coverage
+htmlcov/
+build/
+dist/
+*.egg-info/
 
 # Root skill runtime outputs
 output/
 *.log
 
+# Local env and secrets
+.env
+.env.*
+!.env.example
+!*env.example
+
 # Local raw research/source material
-scripts/project/assets/data/classics/raw/
-scripts/project/assets/data/calendar/solar_terms/raw/
+domains/fate-analysis/data-products/classics/raw/
+domains/fate-analysis/data-products/calendar/solar_terms/raw/
 
 # Lifecycle working packs
-scripts/project/assets/docs/lifecycle/packs/*
-!scripts/project/assets/docs/lifecycle/packs/.gitkeep
+docs/reference-materials/lifecycle/packs/*
+!docs/reference-materials/lifecycle/packs/.gitkeep
 
 # Local virtualenvs
 .venv/
 venv/
+
+# Enterprise service runtime outputs
+domains/*/services/*/output/
+domains/*/services/*/runtime/
+infra/runtime/local-state/**/*.db
+infra/runtime/local-state/**/*.sqlite
+infra/runtime/local-state/vendor-build/
+tools/reference-repos/**/node_modules/

.gitmodules

@@ -0,0 +1,3 @@
+# No Git submodules are registered.
+# Vendor and reference repositories must be managed through tools/reference-repos
+# or the existing compatibility asset registry, not implicit submodule state.

.pre-commit-config.yaml

@@ -0,0 +1,28 @@
+repos:
+  - repo: local
+    hooks:
+      - id: fatecat-structure
+        name: FateCat structure gate
+        entry: bash scripts/check-structure.sh
+        language: system
+        pass_filenames: false
+      - id: fatecat-source-hygiene
+        name: FateCat source hygiene
+        entry: bash scripts/check-source-hygiene.sh
+        language: system
+        pass_filenames: false
+      - id: fatecat-privacy-fixtures
+        name: FateCat privacy fixture gate
+        entry: bash scripts/check-privacy-fixtures.sh
+        language: system
+        pass_filenames: false
+      - id: fatecat-governance
+        name: FateCat governance strict validate
+        entry: python3 governance/tools/validate_governance_package.py --project-root . --strict
+        language: system
+        pass_filenames: false
+      - id: fatecat-diff-check
+        name: Git whitespace diff check
+        entry: git diff --check --cached
+        language: system
+        pass_filenames: false

scripts/project/.python-version .python-versionscripts/project/.python-version renamed to .python-version

@@ -1,17 +1,41 @@
-# AGENTS.md - FateCat Skill Repo
+# AGENTS.md - FateCat Enterprise Repo
 
 ## 目录用途
 
-当前根目录就是单 skill 仓库根：对外暴露标准 skill 入口；真实源码与生命周期资产统一收进 `scripts/project/`，保持根目录卫生。
+当前根目录是 FateCat 企业级系统仓库真相源：结构采用 `apps`、`ai`、`domains`、`platform`、`infra`、`contracts`、`catalog`、`governance`、`shared`、`tools`、`docs`、`scripts`、`tests` canonical roots；运行、测试、导出和治理入口全部从企业根解析。
+
+项目主旨：整理综合全部预测流派，首先完善中国传统主流和有效开源仓库，复用先于自写。
 
 ## 目录结构
 
 ```text
 fatecat/
 ├── AGENTS.md
+├── DEBUG.md
 ├── README.md
 ├── REVIEW.md
 ├── SKILL.md
+├── apps/
+├── ai/
+├── domains/
+│   ├── fate-analysis/
+│   │   └── services/fate-core/
+│   │       ├── src/
+│   │       └── tests/
+│   └── experience-delivery/
+│       └── services/fatecat-delivery/
+│           ├── src/
+│           ├── scripts/
+│           └── tests/
+├── platform/
+├── infra/
+├── contracts/
+├── catalog/
+├── governance/
+├── shared/
+├── tools/
+├── docs/
+├── tests/
 ├── .github/
 │   ├── AGENTS.md
 │   └── workflows/
@@ -20,8 +44,9 @@ fatecat/
 │   ├── commands.md
 │   ├── execution-playbook.md
 │   └── troubleshooting.md
-├── scripts/
+└── scripts/
 │   ├── acceptance.sh
+│   ├── check-structure.sh
 │   ├── check-export-hygiene.sh
 │   ├── check-source-hygiene.sh
 │   ├── clean-runtime.sh
@@ -31,32 +56,35 @@ fatecat/
 │   ├── production-readiness.sh
 │   ├── preflight.sh
 │   └── vendor-health.sh
-└── scripts/project/
-    ├── AGENTS.md
-    ├── pyproject.toml
-    ├── assets/
-    │   └── docs/
-    │       └── lifecycle/
-    ├── modules/
-    ├── runtime/
-    ├── scripts/
-    └── tests/
 ```
 
 ## 职责边界
 
 - `SKILL.md`：标准 skill 入口说明。
+- `DEBUG.md`：当前调试证据、根因和回归验证记录；只承载已复现问题的诊断闭环。
 - `REVIEW.md`：当前仓库审计结果与 release gate 结论；只记录证据、风险与交接，不承载业务源码。
+- `apps/`：用户体验入口和渠道壳层。
+- `ai/`：Agent、skill、Prompt、评估和 AI 监管相关入口。
+- `domains/`：领域服务根；当前承载 `fate-core` 与 `fatecat-delivery` 两个生产候选服务源码、契约和测试入口。
+- `platform/`：Golden Path、CI/CD、供应链和开发者平台能力。
+- `infra/`：环境、容器、数据库、运行准入、安全和观测期望状态。
+- `contracts/`：API、数据集、capability、profile、evidence 和策略契约。
+- `catalog/`：组件发现、owner、生命周期和依赖关系。
+- `governance/`：标准、流程、ADR、风险、门禁、baseline evidence、任务和迁移账本。
+- `shared/`：真实复用后的薄共享库，不作为 common 垃圾桶。
+- `tools/`：迁移工具、参考仓和供应链快照。
+- `docs/`：人类文档入口，不替代机器契约和治理证据。
+- `tests/`：仓库级结构、契约、导出和跨服务测试入口。
 - `.github/`：GitHub Actions 远端验收配置；只调用仓库脚本，不保存业务代码或 secret。
 - `references/`：长文档、阶段门禁、输入输出契约、迁移与排障材料；其中 `execution-playbook.md` 是统一执行顺序真相源。
-- `scripts/`：skill 包装脚本、生命周期脚手架与导出脚本；其中 `preflight.sh` 是默认预检入口，`acceptance.sh` 是发布门禁入口，`delivery-smoke.sh` 负责可回收启动验证，`check-source-hygiene.sh` 负责源仓 raw/运行态/个人路径门禁，`check-export-hygiene.sh` 负责导出包卫生门禁，`check-privacy-fixtures.sh` 负责示例数据与 vendor web 隔离门禁，`vendor-health.sh` 负责 vendor 快照健康检查，`live-bot-smoke.sh` 负责真实 Telegram token 验收，`production-readiness.sh` 负责生产配置与 live 验收总门禁。
-- `scripts/project/`：FateCat 项目的真实源码根、运行时骨架与项目文档真相源。
-- `scripts/project/assets/docs/lifecycle/`：生命周期模板、治理资产与可沉淀的 agent 运维材料。
+- `scripts/`：本地可重复执行入口；其中 `preflight.sh` 是默认预检入口，`acceptance.sh` 是发布门禁入口，`check-structure.sh` 是企业结构门禁。
 
 ## 依赖方向
 
-- `README.md -> SKILL.md + references/* + scripts/project/assets/docs/lifecycle/*`
+- `apps/ai -> domains + contracts`
+- `domains/experience-delivery -> domains/fate-analysis + contracts + infra`
+- `domains/fate-analysis -> contracts + tools/reference-repos`
+- `catalog -> domains + contracts + governance`
 - `.github/workflows/* -> scripts/acceptance.sh`
-- `scripts/* -> scripts/project/*`
-- `SKILL.md -> scripts/preflight.sh + scripts/delivery-smoke.sh + references/execution-playbook.md`
-- 禁止在根目录重新散落与 `scripts/project/` 平行的第二套业务源码目录
+- `scripts/* -> domains + contracts + infra + governance`
+- 禁止新增旧路径 fallback；退役路径只允许出现在迁移账本、历史证据、负例测试和防回潮规则中。