Skip to content

feat: 扩展 Dyro 只读控制面与安全边界 - #22

Merged
Dandre126 merged 30 commits into
mainfrom
feat/dev
Aug 13, 2026
Merged

feat: 扩展 Dyro 只读控制面与安全边界#22
Dandre126 merged 30 commits into
mainfrom
feat/dev

Conversation

@Dandre126

Copy link
Copy Markdown
Contributor

摘要

  • 扩展 workspace、status、doctor、line、changeset 与 Objective 的有界只读 JSON 控制面
  • 强化 bootstrap、Git 读取、证据清单与错误 envelope 的 fail-closed 边界
  • 精简并加固 dyro-control-plane Skill 的命令路由、证据收口和禁止执行规则
  • 移出本地审查、会话与证据资料,并加入对应忽略规则
  • 优化功能开发线创建确认:计划展示后回车即可确认,b 仍返回基线

隐私与发行安全

  • workspace、doctor 与 Skill integration JSON 默认不暴露绝对路径,显式 include-paths 才返回路径
  • 已知 workspace alias 时 Skill 跳过全局工作区枚举,并限制 Task、branch、SHA 的披露
  • wheel 与 sdist 强制拒绝 pycache、pyc、pyo 等本机构建字节码

验证

  • PYTHONWARNINGS=error::ResourceWarning:573 tests 通过
  • uv lock、全仓 Ruff、compileall、Skill quick validation、git diff check 通过
  • wheel 与 sdist 重建及 twine strict check 通过;制品字节码与 Skill 隐私扫描通过
  • 独立最终审查:GO / APPROVE,P0/P1/P2 均为 0

未关联的 plans/dyro-agent-bridge-phase-0.md 本地改动未纳入提交。

Dandre126 and others added 30 commits August 4, 2026 15:12
将 feature hero/intro/overview 海报与页面资源纳入 docs/assets,便于对外介绍与仓库内复用。
移除 dyro-bridge/dyro-mcp 及零副作用 CI 门禁,保留跨平台 Codex Skill
与只读 CLI;ADR/evidence 留档,避免把未跨平台证明的协议当产品卖点。
在 Dyro home 维护唯一实文件镜像,并向 Codex/Claude 等已探测宿主挂
symlink/junction 分身;codex 保留为兼容别名,避免每家智能体各拷一份。
Hotfix/功能线自定义参与仓库时显示编号列表,并接受序号与仓库 ID
混输,降低手打 ID 的摩擦。
Close adversarial-board blockers before publish: bind legacy targets to host avatars, prefer numeric repo IDs over indices, and bump release notes to 0.6.3.
Keep ko/es/fr/de/pt-BR/ru upgrade sections in sync with the English and zh-CN callout for dyro integration install skill.
Wire setup opt-in install, post-update fresh-CLI sync, and startup OUTDATED
repair without first-installing on upgrade. Close the same-turn stale
overwrite path, pin the refresh entrypoint to this install, and make bare
`dyro update` equivalent to `update check`.
@Dandre126
Dandre126 merged commit 4cbf49d into main Aug 13, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant