v0.16.1：统一 Rust CLI 变更骨架 + skipGate 安全边界加固 + 工具链 PATH 根因修复 - #80
Merged
Merged
Conversation
- docs/rust-cli 五份设计文档（README / 架构 / 技术设计 / 覆盖率验收 / 修复工作流） - openspec 变更 introduce-rust-codeguard-cli：proposal / design / tasks(300 行) / verification + 10 个能力 delta - bump-plugin 写后回读支持 .claude-plugin 嵌套版本路径（plugins[0].version） - 五份清单 bump 0.16.1+codex.20260924；CHANGELOG v0.16.1 段 - hook-protocol delta 补带场景「SkipGate set with a secret on the commit face」， 避免 MODIFIED 重写丢掉已归档语义
- 豁免语义收窄：仓库配置/内联 -c/链式 skipGate 不再吞入库内容安全扫描， 恒执行；唯一完整逃生门为进程环境变量 CODEGUARD_SKIP_GATE（1/true/yes， 仅用户可设）。git_guard_application 暂存面计算移出 not-active 短路； prompt_application 豁免下仍注入安全报告；gate_directive 声明豁免范围 - 工具链 PATH 根因：paths.ensure_user_path 补 resolve 目录与 sysconfig scripts 目录（符号链接解释器机器不再误报工具未装）；probe/run_gate 入口 先补 PATH 再采集缓存身份（check_identity 计入 PATH，事后改写使 ck≠after、 软缓存永不落盘）；not_found 时以 python3 -m <tool> 试判未安装 vs 入口缺失 - 测试：新增 test_skip_gate_safety_scope.py 8 例；前缀内联豁免测试改写到 加固契约；架构白名单声明 paths/sys；全套件 626 passed - 文档：__protocol__/README×2/current-architecture 同步豁免范围 （doc-behavior-parity 14 绿）；openspec 2026-09-24-harden-skip-gate-boundary 归档，hook-protocol 主规格 +1 ADDED +1 MODIFIED
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
内容
64b46c8：统一 Rust CLI 变更骨架（docs/rust-cli 五份设计文档 + openspecintroduce-rust-codeguard-cliproposal/design/tasks/verification + 10 能力 delta）；bump-plugin 写后回读支持嵌套版本路径；五份清单 bump 0.16.1+codex.2026092431d475c：skipGate 豁免范围收窄——代理可控豁免（仓库配置/内联-c/链式）只覆盖语言门禁，入库内容安全扫描恒执行；唯一完整逃生门CODEGUARD_SKIP_GATE（1/true/yes，仅用户可设）。工具链 PATH 根因修复（符号链接解释器 resolve 目录 + sysconfig scripts；探活 not_found 以python3 -m试判）；run_gate 入口先补 PATH 再采集缓存身份ea6138b：tmp-tp 测试可移植性与迁移债收口（与 PR merge: test-portability-and-debt 批次合入 main（16 文件 +150） #79 同内容双汇流，已三方去重，合并零内容漂移）验证
tests/test_skip_gate_safety_scope.py8 例钉住豁免范围契约openspec validate --all --strict19 绿2026-09-24-harden-skip-gate-boundary已归档（hook-protocol 主规格 +1 ADDED +1 MODIFIED）