@chengzhao-dev/dsh-cpp-workflow 0.1.0 → 0.2.0

package/skills/building-cpp/assets/templates/projects/common/running-build.sh

@@ -1,11 +1,13 @@
 #!/usr/bin/env bash
-#===--------------------------------------------------------------------------------------------===#
-# 配置、构建、格式化、静态检查、测试并运行当前 C++20 工程。
+#===------------------------------------------------------------------------===#
+# 配置、构建、格式化、静态检查、测试并运行当前 C++11–C++23 工程（默认 C++23）。
 #
 # 用法：./running-build.sh [clang|gcc]；省略时用 clang。
-# 构建目录：build/<compiler>；编译数据库：build/<compiler>/compile_commands.json
-# 适用于 Linux、macOS 和 Windows + WSL；Windows 原生组合需要另写 PowerShell 版本。
-#===--------------------------------------------------------------------------------------------===#
+# 构建目录：build/<compiler>；
+# 编译数据库：build/<compiler>/compile_commands.json
+# 适用于 Linux、macOS 和 Windows + WSL；
+# 本版本不支持 Windows 原生壳。
+#===------------------------------------------------------------------------===#
 
 set -euo pipefail
 cd "$(dirname "$0")"
@@ -29,9 +31,9 @@ esac
 readonly COMPILER CXX
 readonly BUILD_DIR="${BUILD_ROOT}/${COMPILER}"
 
-#===--------------------------------------------------------------------------------------------===#
+#===------------------------------------------------------------------------===#
 # 输出辅助
-#===--------------------------------------------------------------------------------------------===#
+#===------------------------------------------------------------------------===#
 
 header() {
   printf '\n== %s ==\n' "$1"
@@ -41,23 +43,29 @@ err() {
   printf '错误: %s\n' "$1" >&2
 }
 
-trap 'status=$?; printf "失败（退出码 %s）：%s\n" "${status}" "${BASH_COMMAND}" >&2' ERR
+on_error() {
+  local status=$?
+  printf '失败（退出码 %s）：%s\n' "${status}" "${BASH_COMMAND}" >&2
+}
+trap on_error ERR
 
-#===--------------------------------------------------------------------------------------------===#
+#===------------------------------------------------------------------------===#
 # 项目源码
-#===--------------------------------------------------------------------------------------------===#
+#===------------------------------------------------------------------------===#
 
 collect_sources() {
   find . \
     \( -type d \( -name .git -o -name .cache -o -name node_modules \
        -o -name third_party -o -name external -o -name vendor \
        -o -name build -o -name temp -o -name templates \) -prune \) -o \
-    -type f \( -name '*.c' -o -name '*.cc' -o -name '*.cpp' -o -name '*.cxx' \
-       -o -name '*.h' -o -name '*.hh' -o -name '*.hpp' -o -name '*.hxx' \) -print0
+    -type f \( -name '*.c' -o -name '*.cc' -o -name '*.cpp' \
+       -o -name '*.cxx' -o -name '*.h' -o -name '*.hh' \
+       -o -name '*.hpp' -o -name '*.hxx' \) -print0
 }
 
-# 只让项目自身目录的头文件诊断进入结果。顶层目录从项目文件推导，
-# 不硬编码 include/src；项目根同时覆盖 clang-tidy 输出的绝对路径。
+# 只让项目自身目录的头文件诊断进入结果。
+# 顶层目录从项目文件推导，不硬编码 include/src；
+# 项目根同时覆盖 clang-tidy 输出的绝对路径。
 # 第三方头即使被包含，也不在项目根 + 顶层目录的白名单里。
 header_filter_for() {
   local tops=()
@@ -77,12 +85,14 @@ header_filter_for() {
     printf '^(%s/)?[^/]+$' "${root}"
     return 0
   fi
-  printf '^(%s/)?((%s)/|[^/]+$)' "${root}" "$(printf '%s\n' "${tops[@]}" | sort -u | paste -sd '|' -)"
+  local top_pattern
+  top_pattern="$(printf '%s\n' "${tops[@]}" | sort -u | paste -sd '|' -)"
+  printf '^(%s/)?((%s)/|[^/]+$)' "${root}" "${top_pattern}"
 }
 
-#===--------------------------------------------------------------------------------------------===#
+#===------------------------------------------------------------------------===#
 # 主流程
-#===--------------------------------------------------------------------------------------------===#
+#===------------------------------------------------------------------------===#
 
 main() {
   header "配置 (${COMPILER})"
@@ -97,7 +107,8 @@ main() {
 
   header "编译数据库"
   rm -f "${BUILD_ROOT}/compile_commands.json"
-  ln -s "${COMPILER}/compile_commands.json" "${BUILD_ROOT}/compile_commands.json"
+  ln -s "${COMPILER}/compile_commands.json" \
+    "${BUILD_ROOT}/compile_commands.json"
 
   local format_sources=()
   local tidy_sources=()

package/skills/building-cpp/assets/templates/projects/multi/CMakeLists.txt

@@ -7,12 +7,16 @@ set(CMAKE_RUNTIME_OUTPUT_DIRECTORY "${CMAKE_BINARY_DIR}/bin")
 enable_testing()
 
 add_executable(app
-  src/main.cpp
-  src/greeting.cpp
+  src/main.cc
+  src/greeting.cc
+)
+target_include_directories(app PRIVATE ${CMAKE_CURRENT_SOURCE_DIR})
+target_compile_features(app PRIVATE cxx_std_23)
+set_target_properties(app PROPERTIES
+  CXX_STANDARD 23
+  CXX_STANDARD_REQUIRED ON
+  CXX_EXTENSIONS OFF
 )
-target_include_directories(app PRIVATE include)
-target_compile_features(app PRIVATE cxx_std_20)
-set_target_properties(app PROPERTIES CXX_EXTENSIONS OFF)
 target_compile_options(app PRIVATE -Wall -Wextra -Werror)
 
 add_test(NAME app_smoke COMMAND app)

package/skills/building-cpp/assets/templates/projects/multi/include/greeting.h

@@ -1,10 +1,12 @@
-#pragma once
+#ifndef CPP_WORKFLOW_TEMPLATE_MULTI_INCLUDE_GREETING_H_
+#define CPP_WORKFLOW_TEMPLATE_MULTI_INCLUDE_GREETING_H_
 
 #include <string>
-#include <string_view>
 
 namespace greeting {
 
-[[nodiscard]] std::string MakeGreeting(std::string_view name);
+std::string MakeGreeting(const std::string& name);
 
 }  // namespace greeting
+
+#endif  // CPP_WORKFLOW_TEMPLATE_MULTI_INCLUDE_GREETING_H_

package/skills/building-cpp/assets/templates/projects/multi/src/greeting.cc

@@ -0,0 +1,18 @@
+#include "include/greeting.h"
+
+#include <string>
+#if __cplusplus >= 202002L
+#include <format>
+#endif
+
+namespace greeting {
+
+std::string MakeGreeting(const std::string& name) {
+#if __cplusplus >= 202002L
+  return std::format("Hello, {}!", name);
+#else
+  return "Hello, " + name + "!";
+#endif
+}
+
+}  // namespace greeting

package/skills/building-cpp/assets/templates/projects/multi/src/main.cc

@@ -0,0 +1,8 @@
+#include <iostream>
+
+#include "include/greeting.h"
+
+int main() {
+  std::cout << greeting::MakeGreeting("C++23") << '\n';
+  return 0;
+}

package/skills/building-cpp/assets/templates/projects/shared-library/CMakeLists.txt

@@ -9,9 +9,14 @@ enable_testing()
 
 add_subdirectory(greeting)
 
-add_executable(app src/main.cpp)
-target_compile_features(app PRIVATE cxx_std_20)
-set_target_properties(app PROPERTIES CXX_EXTENSIONS OFF)
+add_executable(app src/main.cc)
+target_include_directories(app PRIVATE ${CMAKE_CURRENT_SOURCE_DIR})
+target_compile_features(app PRIVATE cxx_std_23)
+set_target_properties(app PROPERTIES
+  CXX_STANDARD 23
+  CXX_STANDARD_REQUIRED ON
+  CXX_EXTENSIONS OFF
+)
 target_link_libraries(app PRIVATE greeting)
 target_compile_options(app PRIVATE -Wall -Wextra -Werror)
 

package/skills/building-cpp/assets/templates/projects/shared-library/greeting/CMakeLists.txt

@@ -1,5 +1,15 @@
-add_library(greeting SHARED src/greeting.cpp)
-target_include_directories(greeting PUBLIC include)
-target_compile_features(greeting PUBLIC cxx_std_20)
-set_target_properties(greeting PROPERTIES CXX_EXTENSIONS OFF)
-target_compile_options(greeting PRIVATE -Wall -Wextra -Werror -Wold-style-cast -Wshadow)
+add_library(greeting SHARED src/greeting.cc)
+target_include_directories(greeting PUBLIC ${CMAKE_CURRENT_SOURCE_DIR}/..)
+target_compile_features(greeting PUBLIC cxx_std_23)
+set_target_properties(greeting PROPERTIES
+  CXX_STANDARD 23
+  CXX_STANDARD_REQUIRED ON
+  CXX_EXTENSIONS OFF
+)
+target_compile_options(greeting PRIVATE
+  -Wall
+  -Wextra
+  -Werror
+  -Wold-style-cast
+  -Wshadow
+)

package/skills/building-cpp/assets/templates/projects/shared-library/greeting/include/greeting.h

@@ -1,10 +1,12 @@
-#pragma once
+#ifndef CPP_WORKFLOW_TEMPLATE_GREETING_INCLUDE_GREETING_H_
+#define CPP_WORKFLOW_TEMPLATE_GREETING_INCLUDE_GREETING_H_
 
 #include <string>
-#include <string_view>
 
 namespace greeting {
 
-[[nodiscard]] std::string MakeGreeting(std::string_view name);
+std::string MakeGreeting(const std::string& name);
 
 }  // namespace greeting
+
+#endif  // CPP_WORKFLOW_TEMPLATE_GREETING_INCLUDE_GREETING_H_

package/skills/building-cpp/assets/templates/projects/shared-library/greeting/src/greeting.cc

@@ -0,0 +1,18 @@
+#include "greeting/include/greeting.h"
+
+#include <string>
+#if __cplusplus >= 202002L
+#include <format>
+#endif
+
+namespace greeting {
+
+std::string MakeGreeting(const std::string& name) {
+#if __cplusplus >= 202002L
+  return std::format("Hello, {}!", name);
+#else
+  return "Hello, " + name + "!";
+#endif
+}
+
+}  // namespace greeting

package/skills/building-cpp/assets/templates/projects/shared-library/src/main.cc

@@ -0,0 +1,8 @@
+#include <iostream>
+
+#include "greeting/include/greeting.h"
+
+int main() {
+  std::cout << greeting::MakeGreeting("C++23") << '\n';
+  return 0;
+}

package/skills/building-cpp/assets/templates/projects/single/CMakeLists.txt

@@ -6,9 +6,13 @@ set(CMAKE_RUNTIME_OUTPUT_DIRECTORY "${CMAKE_BINARY_DIR}/bin")
 
 enable_testing()
 
-add_executable(app src/main.cpp)
-target_compile_features(app PRIVATE cxx_std_20)
-set_target_properties(app PROPERTIES CXX_EXTENSIONS OFF)
+add_executable(app src/main.cc)
+target_compile_features(app PRIVATE cxx_std_23)
+set_target_properties(app PROPERTIES
+  CXX_STANDARD 23
+  CXX_STANDARD_REQUIRED ON
+  CXX_EXTENSIONS OFF
+)
 target_compile_options(app PRIVATE -Wall -Wextra -Werror)
 
 add_test(NAME app_smoke COMMAND app)

package/skills/building-cpp/assets/templates/projects/single/src/main.cc

@@ -0,0 +1,15 @@
+#include <iostream>
+#include <string>
+#if __cplusplus >= 202002L
+#include <format>
+#endif
+
+int main() {
+  const std::string name = "C++";
+#if __cplusplus >= 202002L
+  std::cout << std::format("Hello, {}!\n", name);
+#else
+  std::cout << "Hello, " << name << "!\n";
+#endif
+  return 0;
+}

package/skills/building-cpp/assets/templates/projects/static-library/CMakeLists.txt

@@ -9,9 +9,14 @@ enable_testing()
 
 add_subdirectory(greeting)
 
-add_executable(app src/main.cpp)
-target_compile_features(app PRIVATE cxx_std_20)
-set_target_properties(app PROPERTIES CXX_EXTENSIONS OFF)
+add_executable(app src/main.cc)
+target_include_directories(app PRIVATE ${CMAKE_CURRENT_SOURCE_DIR})
+target_compile_features(app PRIVATE cxx_std_23)
+set_target_properties(app PROPERTIES
+  CXX_STANDARD 23
+  CXX_STANDARD_REQUIRED ON
+  CXX_EXTENSIONS OFF
+)
 target_link_libraries(app PRIVATE greeting)
 target_compile_options(app PRIVATE -Wall -Wextra -Werror)
 

package/skills/building-cpp/assets/templates/projects/static-library/greeting/CMakeLists.txt

@@ -1,5 +1,15 @@
-add_library(greeting STATIC src/greeting.cpp)
-target_include_directories(greeting PUBLIC include)
-target_compile_features(greeting PUBLIC cxx_std_20)
-set_target_properties(greeting PROPERTIES CXX_EXTENSIONS OFF)
-target_compile_options(greeting PRIVATE -Wall -Wextra -Werror -Wold-style-cast -Wshadow)
+add_library(greeting STATIC src/greeting.cc)
+target_include_directories(greeting PUBLIC ${CMAKE_CURRENT_SOURCE_DIR}/..)
+target_compile_features(greeting PUBLIC cxx_std_23)
+set_target_properties(greeting PROPERTIES
+  CXX_STANDARD 23
+  CXX_STANDARD_REQUIRED ON
+  CXX_EXTENSIONS OFF
+)
+target_compile_options(greeting PRIVATE
+  -Wall
+  -Wextra
+  -Werror
+  -Wold-style-cast
+  -Wshadow
+)

package/skills/building-cpp/assets/templates/projects/static-library/greeting/include/greeting.h

@@ -1,10 +1,12 @@
-#pragma once
+#ifndef CPP_WORKFLOW_TEMPLATE_GREETING_INCLUDE_GREETING_H_
+#define CPP_WORKFLOW_TEMPLATE_GREETING_INCLUDE_GREETING_H_
 
 #include <string>
-#include <string_view>
 
 namespace greeting {
 
-[[nodiscard]] std::string MakeGreeting(std::string_view name);
+std::string MakeGreeting(const std::string& name);
 
 }  // namespace greeting
+
+#endif  // CPP_WORKFLOW_TEMPLATE_GREETING_INCLUDE_GREETING_H_

package/skills/building-cpp/assets/templates/projects/static-library/greeting/src/greeting.cc

@@ -0,0 +1,18 @@
+#include "greeting/include/greeting.h"
+
+#include <string>
+#if __cplusplus >= 202002L
+#include <format>
+#endif
+
+namespace greeting {
+
+std::string MakeGreeting(const std::string& name) {
+#if __cplusplus >= 202002L
+  return std::format("Hello, {}!", name);
+#else
+  return "Hello, " + name + "!";
+#endif
+}
+
+}  // namespace greeting

package/skills/building-cpp/assets/templates/projects/static-library/src/main.cc

@@ -0,0 +1,8 @@
+#include <iostream>
+
+#include "greeting/include/greeting.h"
+
+int main() {
+  std::cout << greeting::MakeGreeting("C++23") << '\n';
+  return 0;
+}

package/skills/building-cpp/examples/cmake.md

@@ -10,14 +10,14 @@ set(CMAKE_EXPORT_COMPILE_COMMANDS ON)
 set(CMAKE_RUNTIME_OUTPUT_DIRECTORY "${CMAKE_BINARY_DIR}/bin")
 set(CMAKE_ARCHIVE_OUTPUT_DIRECTORY "${CMAKE_BINARY_DIR}/lib")
 
-add_library(greeting STATIC greeting/src/greeting.cpp)
+add_library(greeting STATIC greeting/src/greeting.cc)
 target_include_directories(greeting PUBLIC greeting/include)
-target_compile_features(greeting PUBLIC cxx_std_20)
+target_compile_features(greeting PUBLIC cxx_std_23)
 set_target_properties(greeting PROPERTIES CXX_EXTENSIONS OFF)
 target_compile_options(greeting PRIVATE -Wall -Wextra -Werror)
 
-add_executable(app src/main.cpp)
-target_compile_features(app PRIVATE cxx_std_20)
+add_executable(app src/main.cc)
+target_compile_features(app PRIVATE cxx_std_23)
 set_target_properties(app PROPERTIES CXX_EXTENSIONS OFF)
 target_link_libraries(app PRIVATE greeting)
 ```
@@ -30,7 +30,7 @@ target_link_libraries(app PRIVATE greeting)
 
 ```cmake
 include_directories(include greeting/include)
-add_executable(app src/main.cpp greeting/src/greeting.cpp)
+add_executable(app src/main.cc greeting/src/greeting.cc)
 ```
 
 问题：所有 target 共享 include，边界消失；程序直接编译库源码，测试无法只链接库。
@@ -47,7 +47,7 @@ target_link_libraries(app PRIVATE greeting)
 **差**：
 
 ```cmake
-file(GLOB SOURCES "src/*.cpp")
+file(GLOB SOURCES "src/*.cc")
 add_executable(app ${SOURCES})
 ```
 
@@ -57,9 +57,9 @@ add_executable(app ${SOURCES})
 
 ```cmake
 add_executable(app
-  src/main.cpp
-  src/task_list.cpp
-  src/task_parser.cpp
+  src/main.cc
+  src/task_list.cc
+  src/task_parser.cc
 )
 ```
 
@@ -70,15 +70,15 @@ add_executable(app
 **差**：
 
 ```cmake
-add_library(core STATIC src/main.cpp src/core.cpp)
-add_executable(app src/main.cpp)   # 重复定义
+add_library(core STATIC src/main.cc src/core.cc)
+add_executable(app src/main.cc)   # 重复定义
 ```
 
 **好**：
 
 ```cmake
-add_library(core STATIC src/core.cpp)
-add_executable(app src/main.cpp)
+add_library(core STATIC src/core.cc)
+add_executable(app src/main.cc)
 target_link_libraries(app PRIVATE core)
 ```
 
@@ -93,7 +93,7 @@ target_link_libraries(app PRIVATE core)
 ```
 
 ```bash
-clang-tidy src/main.cpp   # 没有编译参数，头路径和标准都不对
+clang-tidy src/main.cc   # 没有编译参数，头路径和标准都不对
 ```
 
 **好**：
@@ -106,7 +106,7 @@ set(CMAKE_EXPORT_COMPILE_COMMANDS ON)
 cmake -S . -B build/clang -G Ninja -DCMAKE_CXX_COMPILER=clang++
 rm -f build/compile_commands.json
 ln -s clang/compile_commands.json build/compile_commands.json
-clang-tidy -p build/clang src/main.cpp
+clang-tidy -p build/clang src/main.cc
 ```
 
 ## 共享库运行时路径
@@ -120,11 +120,11 @@ LD_LIBRARY_PATH=build/clang/lib ./build/clang/bin/app   # 每次运行都要包
 **好**：
 
 ```cmake
-add_library(greeting SHARED greeting/src/greeting.cpp)
+add_library(greeting SHARED greeting/src/greeting.cc)
 set_target_properties(greeting PROPERTIES
   LIBRARY_OUTPUT_DIRECTORY "${CMAKE_BINARY_DIR}/lib")
 
-add_executable(app src/main.cpp)
+add_executable(app src/main.cc)
 target_link_libraries(app PRIVATE greeting)
 if(APPLE)
   set_target_properties(app PROPERTIES BUILD_RPATH "@loader_path/../lib")

package/skills/building-cpp/examples/environment.md

@@ -70,13 +70,14 @@ WSL 只对 `host=windows` 合法；不要通过改 `host` 来绕过，先确认
 }
 ```
 
-声明合法，但本版本没有 PowerShell 构建脚本。`--live` 输出类似：
+这不是「合法但暂时不能构建」，而是本版本直接拒绝的组合。声明校验返回：
 
 ```text
-声明合法，但 Windows 原生构建缺少 POSIX 构建脚本；缺的是 shell，不是编译器。
+ok: false
+issues: ["本版本不能在 Windows 原生壳里构建"]
 ```
 
-不要把 `build_host` 改成 `wsl` 来「让它过」；要么补脚本，要么换到 WSL 并更新声明。
+停在这里。不要建议改 `build_host` 为 `wsl` 来绕过，也不要补 PowerShell 脚本。
 
 ## GCC 模式不比较 GCC 主版本
 

package/skills/building-cpp/examples/tooling.md

@@ -33,6 +33,27 @@ CompileFlags:
 }
 ```
 
+## `.clangd` 写死标准
+
+**差**：
+
+```yaml
+# 工程已经在 CMake 里声明 C++23
+CompileFlags:
+  CompilationDatabase: build/clang
+  Add:
+    - -std=c++20   # 覆盖 compile_commands.json，C++23 补全/诊断全部降级
+```
+
+**好**：
+
+```yaml
+CompileFlags:
+  CompilationDatabase: build/clang
+```
+
+标准只来自 `compile_commands.json`。没有数据库时先回到定构建生成，不要在 `.clangd` 里猜一个 `-std`。
+
 ## 编译数据库指错目录
 
 **差**：
@@ -64,11 +85,13 @@ ColumnLimit: 100
 **好**：
 
 ```yaml
-# 100 列：模板和格式化串在 80 列下换行过碎。
-ColumnLimit: 100
+# 全部取 Google 预设：80 列、2 空格、不用 tab、包含顺序。
+Language: Cpp
+BasedOnStyle: Google
+Standard: Latest
 ```
 
-配置注释解释取值，不重复策略；策略在技能文档里。
+配置只选预设和语言版本，不重复策略；列宽、缩进、包含顺序都由 Google 预设决定。需要新规则时先改技能文档并说明理由，不要在手写配置里堆本地约定。
 
 ## 整族关闭检查
 
@@ -87,26 +110,18 @@ Checks: >
 ```yaml
 Checks: >
   -*,
-  clang-analyzer-*,
-  bugprone-*,
-  cppcoreguidelines-*,
   google-*,
-  modernize-*,
-  performance-*,
-  readability-*
-CheckOptions:
-  # 团队用 100 列，tidy 的列宽判断跟随 clang-format。
-  readability-identifier-length.MinimumVariableNameLength: 2
+  readability-identifier-naming
 ```
 
-保留主体；关闭项逐条写理由。
+保留 Google 检查主体和项目命名规则；关闭项逐条写理由，不整族关闭。不设 `FunctionCase`，Google 允许 `count()` / `set_count()` 这类访问器。
 
 ## tidy 扫描系统头
 
 **差**：
 
 ```bash
-clang-tidy -p build/clang --system-headers src/main.cpp
+clang-tidy -p build/clang --system-headers src/main.cc
 ```
 
 系统头也参与诊断，出现大量第三方告警。
@@ -115,7 +130,7 @@ clang-tidy -p build/clang --system-headers src/main.cpp
 
 ```bash
 clang-tidy -p build/clang --header-filter="^$(pwd -P)/(include|src)/" \
-  --warnings-as-errors='*' src/main.cpp
+  --warnings-as-errors='*' src/main.cc
 ```
 
 `--header-filter` 只列项目顶层目录，避免把第三方头纳入；系统头默认排除。工程有别的顶层目录时按实际替换。
@@ -125,7 +140,7 @@ clang-tidy -p build/clang --header-filter="^$(pwd -P)/(include|src)/" \
 **差**：
 
 ```bash
-clang-format -i src/*.cpp   # 构建时悄悄改源码
+clang-format -i src/*.cc   # 构建时悄悄改源码
 ```
 
 **好**：

package/skills/building-cpp/references/build-script.md

@@ -1,6 +1,6 @@
 # 构建脚本
 
-`assets/templates/projects/common/running-build.sh` 是 POSIX build-host 脚本，适用于 Linux、macOS 和 Windows + WSL。Windows 原生组合（`build_host=native`）本版本没有 PowerShell 版本；这是已知缺口，不是编译器问题。
+`assets/templates/projects/common/running-build.sh` 是 POSIX build-host 脚本，适用于 Linux、macOS 和 Windows + WSL。`host=windows` + `build_host=native` 不是本版本支持的组合：声明校验会直接拒绝，脚本也不会在原生 Windows 壳里运行。
 
 ## 用法
 
@@ -60,4 +60,4 @@
 - 从工程根直接 `./build/clang/bin/app` 能启动（共享库场景由 RPATH 保证）。
 - 切换编译器后 `build/compile_commands.json` 指向新数据库。
 - 调用者的 `LD_LIBRARY_PATH` 在脚本结束后不变。
-- Windows 原生：没有脚本时明确报告缺口，不伪造通过。
+- Windows 原生：声明校验已拒绝该组合；不要伪造 PowerShell 脚本，也不要绕过声明。