@bovinphang/craft-common 1.0.1 → 2.0.0

package/localized/zh-CN/skills/cc-rust-project-standard/references/common/engineering-practices.sources.json

@@ -0,0 +1,377 @@
+{
+  "schemaVersion": 1,
+  "sources": [
+    {
+      "id": "google-review",
+      "publisher": "Google",
+      "title": "Code review standard",
+      "url": "https://google.github.io/eng-practices/review/reviewer/standard.html",
+      "section": "Engineering principles and code health",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guidance; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Use evidence and project standards; personal preference alone is not a blocker."
+    },
+    {
+      "id": "ms-playbook",
+      "publisher": "Microsoft ISE",
+      "title": "Test planning",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/test-planning/",
+      "section": "Risk, test scope and responsibilities",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Team practice, not a company-wide mandate; retain existing tools."
+    },
+    {
+      "id": "ms-faults",
+      "publisher": "Microsoft ISE",
+      "title": "Fault injection testing",
+      "url": "https://microsoft.github.io/code-with-engineering-playbook/automated-testing/fault-injection-testing/",
+      "section": "Controlled failure and observations",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living ISE playbook; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Run scoped, controlled failures; do not infer production reliability from a small example."
+    },
+    {
+      "id": "google-ts",
+      "publisher": "Google",
+      "title": "TS/JS style guide",
+      "url": "https://google.github.io/styleguide/tsguide.html",
+      "section": "Environment caveat; types and exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Google explicitly notes internal constraints differ; no blanket ban overriding a justified project convention."
+    },
+    {
+      "id": "typescript-publishing",
+      "publisher": "TypeScript",
+      "title": "Publishing declaration files",
+      "url": "https://www.typescriptlang.org/docs/handbook/declaration-files/publishing.html",
+      "section": "Types and declaration dependencies",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living handbook; check installed compiler/module resolution",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Validate the actual packed consumer; do not upgrade compiler or module mode on this basis."
+    },
+    {
+      "id": "rust-api",
+      "publisher": "Rust library team",
+      "title": "Rust API Guidelines",
+      "url": "https://rust-lang.github.io/api-guidelines/",
+      "section": "Type safety, dependability and future proofing",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living recommendations; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Guidance rather than language law; preserve edition and MSRV."
+    },
+    {
+      "id": "tokio-join",
+      "publisher": "Tokio project",
+      "title": "JoinHandle",
+      "url": "https://docs.rs/tokio/latest/tokio/task/struct.JoinHandle.html",
+      "section": "Drop, abort and completion",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 1.54.1; project runtime/version determines applicability",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Tokio-specific mechanics only when Tokio is already used; no new runtime dependency."
+    },
+    {
+      "id": "uber-go",
+      "publisher": "Uber",
+      "title": "Go Style Guide",
+      "url": "https://github.com/uber-go/guide/blob/master/style.md",
+      "section": "Errors, interfaces and goroutine lifetime",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living master; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not import Uber dependencies or turn buffer-size style into a correctness theorem."
+    },
+    {
+      "id": "go-context",
+      "publisher": "Go project",
+      "title": "context package",
+      "url": "https://pkg.go.dev/context",
+      "section": "Cancellation propagation and ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Standard library; check owning go.mod/toolchain",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A cancellation signal alone does not confirm worker exit."
+    },
+    {
+      "id": "google-java",
+      "publisher": "Google",
+      "title": "Java Style Guide",
+      "url": "https://google.github.io/styleguide/javaguide.html",
+      "section": "Source structure and exception handling",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public style; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Naming/layout follows local standard; style is distinct from runtime correctness."
+    },
+    {
+      "id": "oracle-resources",
+      "publisher": "Oracle",
+      "title": "Try-with-resources",
+      "url": "https://docs.oracle.com/javase/tutorial/essential/exceptions/tryResourceClose.html",
+      "section": "Closing resources and suppressed exceptions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "JDK8 tutorial; not a source for newer runtime features",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Preserve primary cause and borrowed-resource ownership; check actual API contract."
+    },
+    {
+      "id": "java-executor",
+      "publisher": "Oracle",
+      "title": "ExecutorService",
+      "url": "https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/concurrent/ExecutorService.html",
+      "section": "Shutdown, termination and awaitTermination",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Java SE17 documentation",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Check target JDK; no automatic virtual-thread or JDK migration."
+    },
+    {
+      "id": "google-python",
+      "publisher": "Google",
+      "title": "Python Style Guide",
+      "url": "https://google.github.io/styleguide/pyguide.html",
+      "section": "Imports, exceptions and mutable state",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Keep current formatter/type checker and library responsibilities."
+    },
+    {
+      "id": "python-asyncio",
+      "publisher": "Python project",
+      "title": "Coroutines and tasks",
+      "url": "https://docs.python.org/3/library/asyncio-task.html",
+      "section": "Cancellation and task ownership",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed 3.15.2; feature availability follows project Python",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Newer TaskGroup/timeout features require a supported project version; no upgrade implied."
+    },
+    {
+      "id": "cert-c",
+      "publisher": "CMU SEI",
+      "title": "MEM00-C allocation and release",
+      "url": "https://cmu-sei.github.io/secure-coding-standards/sei-cert-c-coding-standard/recommendations/memory-management-mem/mem00-c/",
+      "section": "MEM00-C memory responsibility",
+      "checkedAt": "2026-11-08",
+      "versionScope": "2016-edition standard family; MEM00-C is a recommendation",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Do not label recommendations as mandatory CERT rules or apply C++ ownership machinery to pure C."
+    },
+    {
+      "id": "cpp-core",
+      "publisher": "C++ Core Guidelines editors",
+      "title": "C++ Core Guidelines",
+      "url": "https://isocpp.github.io/CppCoreGuidelines/CppCoreGuidelines",
+      "section": "Resource and lifetime interfaces",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page dated 2026-06-14, living release0.8",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Adapt to existing exception policy and compiler; borrowing does not imply ownership."
+    },
+    {
+      "id": "google-cpp",
+      "publisher": "Google",
+      "title": "C++ Style Guide",
+      "url": "https://google.github.io/styleguide/cppguide.html",
+      "section": "Exceptions and project consistency",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living public guide; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Its exception/standard policy is not universal; preserve the owning project policy and C ABI."
+    },
+    {
+      "id": "ms-sal",
+      "publisher": "Microsoft",
+      "title": "Understanding SAL",
+      "url": "https://learn.microsoft.com/en-us/cpp/code-quality/understanding-sal?view=msvc-170",
+      "section": "Parameter preconditions and output guarantees",
+      "checkedAt": "2026-11-08",
+      "versionScope": "MSVC170 documentation view",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "SAL is an optional toolchain-specific expression, not a portable mandatory annotation."
+    },
+    {
+      "id": "aws-retry",
+      "publisher": "AWS",
+      "title": "Timeouts, retries and backoff with jitter",
+      "url": "https://aws.amazon.com/builders-library/timeouts-retries-and-backoff-with-jitter/",
+      "section": "Timeouts, bounded retries and retry amplification",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Article dated 2019-12-05; official Builder Center redirect",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Retry only semantically safe operations within a total budget; failure classes alone do not grant write replay."
+    },
+    {
+      "id": "aws-idempotency",
+      "publisher": "AWS",
+      "title": "Making retries safe with idempotent APIs",
+      "url": "https://aws.amazon.com/builders-library/making-retries-safe-with-idempotent-APIs/",
+      "section": "Caller intent, duplicate requests and atomic recording",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Builders Library; revision unknown",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "A process-local example does not establish database/multi-process exactly-once."
+    },
+    {
+      "id": "react-effects",
+      "publisher": "React project",
+      "title": "useEffect",
+      "url": "https://react.dev/reference/react/useEffect",
+      "section": "Cleanup and fetching race conditions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; use installed project API",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "Abort and stale-result checks complement each other; no React upgrade implied."
+    },
+    {
+      "id": "react-act",
+      "publisher": "React project",
+      "title": "act",
+      "url": "https://react.dev/reference/react/act",
+      "section": "Applying updates before assertions",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed React19.3; verify sample versions",
+      "licenseStatus": "unknown",
+      "adoption": "adopt",
+      "limits": "DOM simulation is not browser E2E or native desktop execution."
+    },
+    {
+      "id": "vue-watchers",
+      "publisher": "Vue project",
+      "title": "Watchers",
+      "url": "https://vuejs.org/guide/essentials/watchers.html",
+      "section": "Side-effect cleanup",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Vue3; onWatcherCleanup requires3.5+ and synchronous registration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use supported callback cleanup on older Vue3; no framework migration."
+    },
+    {
+      "id": "tauri-permissions",
+      "publisher": "Tauri project",
+      "title": "Permissions",
+      "url": "https://v2.tauri.app/security/permissions/",
+      "section": "Command allow/deny and capability scope",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Tauri2 docs; check installed version/configuration",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Rust command-unit tests do not activate webview permissions or prove packaged GUI security."
+    },
+    {
+      "id": "electron-security",
+      "publisher": "Electron project",
+      "title": "Security",
+      "url": "https://www.electronjs.org/docs/latest/tutorial/security",
+      "section": "IPC sender checks and renderer trust",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living docs; match installed Electron",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Handler tests do not prove sandbox/context isolation is active in a packaged app."
+    },
+    {
+      "id": "spring-tests",
+      "publisher": "Spring project",
+      "title": "Testing Spring Boot applications",
+      "url": "https://docs.spring.io/spring-boot/3.5/reference/testing/spring-boot-applications.html",
+      "section": "Test slices and application tests",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Boot3.5 docs observed3.5.16; preserve sample/project versions",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Test scope matters; MVC tests do not establish live DB/transaction or deployment behavior."
+    },
+    {
+      "id": "fastapi-lifespan",
+      "publisher": "FastAPI project",
+      "title": "Lifespan events",
+      "url": "https://fastapi.tiangolo.com/advanced/events/",
+      "section": "Acquire and release application resources",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living FastAPI documentation; match pinned dependencies",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Use actual lifespan execution in tests; import does not own a live connection."
+    },
+    {
+      "id": "gin-binding",
+      "publisher": "Gin project",
+      "title": "Binding",
+      "url": "https://gin-gonic.com/en/docs/binding/",
+      "section": "Binding errors and validation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living Gin documentation; match pinned module",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Writing/aborting a response does not replace explicit control-flow return in the current handler."
+    },
+    {
+      "id": "axum-extractors",
+      "publisher": "Axum project",
+      "title": "Extractors",
+      "url": "https://docs.rs/axum/latest/axum/extract/",
+      "section": "Extractor order and rejections",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Latest route observed0.8.9; fixed0.8.9 route unavailable via browser tool",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Pinned existing example is authoritative for compilation; do not assume source signatures across releases."
+    },
+    {
+      "id": "drogon-filters",
+      "publisher": "Drogon project",
+      "title": "Middleware and Filter",
+      "url": "https://github.com/drogonframework/drogon/wiki/ENG-05-Middleware-and-Filter",
+      "section": "Filter callbacks and continuation",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Living wiki; match compiled example version",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Synthetic role headers are not authentication; callback lifetime must follow actual ownership."
+    },
+    {
+      "id": "node-typescript",
+      "publisher": "Node.js project",
+      "title": "Modules: TypeScript",
+      "url": "https://nodejs.org/api/typescript.html",
+      "section": "Type-stripping history, enabling, and separate type checking",
+      "checkedAt": "2026-11-08",
+      "versionScope": "Page observed26.13.0; sample>=22.18, actual24.14.1 tested; product Node>=22 unchanged",
+      "licenseStatus": "unknown",
+      "adoption": "conditional",
+      "limits": "Native stripping is not type checking and ignores tsconfig. Missing sample capability is MISSING, not a product runtime upgrade."
+    }
+  ]
+}

package/localized/zh-CN/skills/cc-rust-project-standard/references/engineering-practices.md

@@ -0,0 +1,106 @@
+---
+practiceCards:
+  - id: "cc-rust-project-standard:ownership-api"
+    level: "required"
+    sourceIds: ["rust-api","cpp-core"]
+    caseIds: ["EP-RS-01"]
+    evidence: "review-only"
+  - id: "cc-rust-project-standard:result-boundaries"
+    level: "required"
+    sourceIds: ["rust-api"]
+    caseIds: ["EP-RS-01"]
+    evidence: "case"
+  - id: "cc-rust-project-standard:unsafe-ffi"
+    level: "conditional"
+    sourceIds: ["rust-api","cert-c"]
+    caseIds: ["EP-RS-01","EP-C-01"]
+    evidence: "review-only"
+---
+
+# 本入口工程决策
+
+先定位项目角色、工具链及已有约定，再按需读取[公共原则](common/engineering-practices.md)。下列条件仅约束当前语言/场景；结构检查不证明全部语义或实际运行。
+
+<a id="cc-rust-project-standard:ownership-api"></a>
+## 先明确借用，再考虑共享拥有
+
+级别: required
+
+### 风险
+复制拥有关系可能掩盖资源超出调用方寿命。
+
+### 适用
+适用于crate公共API、原生库和桌面核心，无需服务分层。
+
+### 决策
+明确句柄拥有方、借用期限及转移；调用方保留所有权时使用借用，Arc必须有真实共享寿命需求。
+
+### 例外
+有意隔离时可克隆已拥有数据，这是成本/契约选择，不是全面禁克隆；保留edition/MSRV。
+
+### 正反示意
+正例：借用输入，拥有新获取lease。反例：以Arc替代关闭协调。
+
+### 验证
+评审公共签名及转移/借用示意；本地Drop测试不能证明所有别名或异步交互。
+
+### 来源
+rust-api, cpp-core — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-RS-01; review-only.  执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。
+
+<a id="cc-rust-project-standard:result-boundaries"></a>
+## Result保留原因及清理
+
+级别: required
+
+### 风险
+抹去原因或Err时遗忘资源会隐藏操作失败。
+
+### 适用
+适用于可失败库/API；已记录不可能不变量可使用项目允许的断言。
+
+### 决策
+返回项目Result分类，保留Error::source，以RAII覆盖提前返回；错误在应用边缘转换，不在crate内部打印秘密。
+
+### 例外
+受控测试中的unwrap与不可信运行时输入有别，不必替换所有测试断言。
+
+### 正反示意
+正例：Err保留I/O原因并释放lease。反例：失败路径mem::forget或返回空成功。
+
+### 验证
+以缺陷开关1/0运行相同两个cargo测试，检查cause与Drop次数；offline/locked准备单独进行。
+
+### 来源
+rust-api — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-RS-01; case. [本入口可运行案例](../examples/engineering/README.md)。 执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。
+
+<a id="cc-rust-project-standard:unsafe-ffi"></a>
+## unsafe与FFI需明确有效性契约
+
+级别: conditional
+
+### 风险
+Rust类型不能证明外部指针长度、寿命及分配器。
+
+### 适用
+仅实际unsafe/FFI/原生边界适用，安全Rust无需新增unsafe包装。
+
+### 决策
+记录指针有效性、对齐、长度、所有权及panic政策，将unsafe缩小在已检查接口后；分配器及释放方配对。
+
+### 例外
+没有当前edition/工具链事实，不采用新unsafe属性或ABI假设；捕获边界应尊重unwind/abort政策。
+
+### 正反示意
+正例：校验外部借用缓冲区，由原拥有者释放。反例：把任意非空指针转为拥有关系。
+
+### 验证
+用实际原生工具评审安全前提及失败/销毁测试；安全Rust样例不验证unsafe健全性。
+
+### 来源
+rust-api, cert-c — [来源与适用限制](common/engineering-practices.sources.json).
+
+证据标识: EP-RS-01, EP-C-01; review-only.  执行状态及覆盖范围见实际记录；关联ID不证明该卡全部语义。

package/localized/zh-CN/skills/cc-rust-project-standard/references/practice.md

@@ -0,0 +1,37 @@
+# Rust 工程规范
+
+## 关键检查
+
+1. 先读 Cargo.toml、workspace 成员、edition、MSRV 与现有 alias；在所属 crate 内改动，不顺手升级整个工作区。
+
+2. 在接口边界明确所有权；调用方持有生命周期时优先借用，共享所有权必须有真实共享生命周期需求。
+
+3. 遵循仓库错误分类与 Result 传播，保留原因链，在应用边界映射，不在公共诊断中暴露敏感信息。
+
+4. 隔离领域逻辑、持久化与传输，检查锁守卫生命周期，避免持有阻塞锁跨越挂起点。
+
+5. 同时测试畸形输入、部分持久化、回滚和所有权转移；使用临时资源与确定性失败注入。
+
+6. 使用现有锁与工具链运行可用的 fmt 检查、clippy 和定向 Cargo 测试；缺少工具链必须记为未验证。
+
+<a id="scope"></a>
+## 边界与案例
+
+适用场景：
+- 规划现有 Cargo workspace 的 crate 边界
+- 审查 Rust 公共接口所有权和 Result 边界
+- 保持现有 edition 增加存储模块
+- 为 Rust 库选择工程质量检查
+
+应用角色按实际证据区分；本语言模块可用于库、CLI、桌面或服务，框架问题另选专项。
+
+## 交付要求
+
+- 已读取的工程/契约证据及变更作用域。
+- 选用方案、关键不变量、资源/错误或失败边界。
+- 实际运行的命令与结果，未运行项及不能证明的结论。
+- 兼容、恢复/回滚或后续处理限制；评审结论须给可核实位置。
+
+## 权威资料
+
+[相关官方/项目资料](https://doc.rust-lang.org/book/ch04-00-understanding-ownership.html)（核验日期：2026-11-06）。实际使用时再匹配项目声明版本，不把参考页的最新版本当作升级授权。

package/localized/zh-CN/skills/cc-tauri-project-standard/SKILL.md

@@ -0,0 +1,21 @@
+---
+name: cc-tauri-project-standard
+description: 用于 Tauri 应用的 Rust command、WebView IPC 契约、capabilities 与 permissions、托管状态、桌面生命周期和平台构建发布；没有 Tauri 的普通 Rust 库不属于本专项。
+---
+
+# Tauri 应用工程
+
+定位拥有任务的 Web 应用及 `src-tauri` crate。UI 与 Rust 核心是应用角色，不受提供本能力的前后端产品名称限制。
+
+1. 读取实际 Tauri/API/plugin 版本、两端锁文件、配置及支持平台。区分 v1/v2 权限模型，保持既有工具链。
+2. 将每次 invoke 对应到 Rust command、校验后的输入、公共结果/错误及资源所有者。文件和进程权限留在核心，只开放狭窄操作。
+3. 联合检查注册命令、应用命令权限生成、capabilities、窗口/WebView label 及远程来源；权限配置不能代替业务输入校验。
+4. 明确托管状态生命周期、阻塞工作的界限、取消及退出；检查跨 await 的锁和事件监听清理。
+5. 使用[实践清单](references/practice.md)及[最小应用](examples/minimal/README.md)，本包包含独立完成专项所需的本地契约参考。
+6. 遵循[验证边界](references/verification.md)：先验证拒绝输入时无越界结果，再单独测试真实 WebView/权限激活、目标平台产物和签名。
+
+交付 UI/core 子工程范围、invoke 契约、权限决定、实际命令结果及未验证平台。源码检查或核心单测不能证明桌面发布成功。
+
+## 工程实践
+
+按当前任务读取[本入口工程细则](references/engineering-practices.md)，再按链接选择公共原则。规则级别与例外以实际项目契约为准；不因产品前后端标签限制语言或职责。

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/README.md

@@ -0,0 +1,9 @@
+# 最小 Tauri 文档应用
+
+本目录独立包含纯 Rust 的 core、Tauri 2 command、应用命令权限生成、main capability 和实际调用它的 UI，不依赖相邻 Skill。
+
+按[验证说明](../../references/verification.md)运行 core 测试。显式启用 defective 时选择缺陷函数，同一断言应失败；应用不得启用此特性。
+
+现有 Tauri 2 依赖及平台前置条件准备好后，在此目录执行 cargo run --manifest-path src-tauri/Cargo.toml --offline。应用在自身数据目录创建 documents/hello.txt，按钮通过受保护核心读取；renderer 不提供可信根。
+
+框架依赖应由所属项目的正常流程解析并锁定后再主张可复现构建；core 的独立锁不覆盖 GUI 依赖图。核心测试只证明读取边界，权限激活、拒绝窗口和 GUI 发布须通过真实环境验证。

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/core/Cargo.lock

@@ -0,0 +1,5 @@
+version = 4
+
+[[package]]
+name = "document-core"
+version = "0.1.0"

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/core/Cargo.toml

@@ -0,0 +1,9 @@
+[package]
+name = "document-core"
+version = "0.1.0"
+edition = "2021"
+publish = false
+
+[features]
+# 显式缺陷教学模式，应用不得启用。
+defective = []

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/core/src/lib.rs

@@ -0,0 +1,46 @@
+use std::{fs, io::Read, path::{Component, Path}};
+
+/// Deliberately flawed baseline: the caller can leave the allowed directory.
+pub fn read_document_defective(root: &Path, name: &str) -> Result<String, String> {
+    fs::read_to_string(root.join(name)).map_err(|_| "read failed".into())
+}
+
+pub fn read_document(root: &Path, name: &str) -> Result<String, String> {
+    if name.is_empty() || Path::new(name).components().any(|part| !matches!(part, Component::Normal(_))) {
+        return Err("invalid document name".into());
+    }
+    let root=fs::canonicalize(root).map_err(|_| "document root unavailable")?;
+    let file=fs::canonicalize(root.join(name)).map_err(|_| "document unavailable")?;
+    if !file.starts_with(&root) || !file.is_file() { return Err("outside allowed directory".into()); }
+    let mut bytes=Vec::new();
+    fs::File::open(file).map_err(|_| "read failed")?.take(65_537).read_to_end(&mut bytes).map_err(|_| "read failed")?;
+    if bytes.len()>65_536 { return Err("document too large".into()); }
+    String::from_utf8(bytes).map_err(|_| "document is not UTF-8".into())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::{path::PathBuf, sync::atomic::{AtomicUsize, Ordering}};
+    static NEXT: AtomicUsize = AtomicUsize::new(0);
+    struct Fixture(PathBuf);
+    impl Fixture {
+        fn new() -> Self {
+            let base = std::env::temp_dir().join(format!("craft-command-{}-{}", std::process::id(), NEXT.fetch_add(1, Ordering::Relaxed)));
+            fs::create_dir_all(base.join("allowed")).unwrap();
+            fs::write(base.join("allowed/hello.txt"), "hello").unwrap();
+            fs::write(base.join("private.txt"), "outside").unwrap();
+            Self(base)
+        }
+        fn read(&self, name: &str) -> Result<String, String> {
+            let root=self.0.join("allowed");
+            if cfg!(feature="defective") { read_document_defective(&root,name) } else { read_document(&root,name) }
+        }
+    }
+    impl Drop for Fixture { fn drop(&mut self) { fs::remove_dir_all(&self.0).unwrap(); } }
+    #[test] fn reads_allowed_document() { let f=Fixture::new();assert_eq!(f.read("hello.txt").unwrap(),"hello"); }
+    #[test] fn rejects_traversal() { let f=Fixture::new();assert!(f.read("../private.txt").is_err(),"outside allowed directory must be rejected"); }
+    #[test] fn rejects_absolute_path() { let f=Fixture::new();assert!(f.read(f.0.join("private.txt").to_str().unwrap()).is_err()); }
+    #[cfg(unix)]
+    #[test] fn rejects_symlink_escape() { let f=Fixture::new();std::os::unix::fs::symlink(f.0.join("private.txt"),f.0.join("allowed/link.txt")).unwrap();assert!(f.read("link.txt").is_err()); }
+}

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/src-tauri/Cargo.toml

@@ -0,0 +1,12 @@
+[package]
+name = "craft-document-example"
+version = "0.1.0"
+edition = "2021"
+publish = false
+
+[build-dependencies]
+tauri-build = { version = "2", features = [] }
+
+[dependencies]
+tauri = { version = "2", features = [] }
+document-core = { path = "../core" }

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/src-tauri/build.rs

@@ -0,0 +1,5 @@
+fn main() {
+    tauri_build::try_build(tauri_build::Attributes::new().app_manifest(
+        tauri_build::AppManifest::new().commands(&["read_document"]),
+    )).expect("Tauri permission generation failed");
+}

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/src-tauri/capabilities/main.json

@@ -0,0 +1,6 @@
+{
+  "identifier": "main",
+  "description": "Local main window document access",
+  "windows": ["main"],
+  "permissions": ["allow-read-document"]
+}

package/localized/zh-CN/skills/cc-tauri-project-standard/examples/minimal/src-tauri/permissions/documents.toml

@@ -0,0 +1,4 @@
+[[permission]]
+identifier = "allow-read-document"
+description = "通过已校验的 Rust command 读取有界文档"
+commands.allow = ["read_document"]