菜单
Rust/Tauri backend standards — L0–L3 layers, centralized platform/net/error ownership, Rust-first business logic, registries, error handling. Load for changes under apps/desktop/src-tauri/src/**.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Shared write-side contract every domain AUTHOR imports — how to implement reliably, the smallest-diff rule, validation gates, and the never-approve-your-own-work rule. The write-side mirror of token-efficiency. Load at the start of any implementation task.
Shared context-discipline contract every agent imports — context-source priority, read budget, confidence-stop, the severity rubric, and terse output. Load at the start of any review or implementation task.
General repo rules enforced by ESLint/TypeScript/CI — PRs-only, never bypass lint, import ordering, type imports, path privacy, commit format. Load for any code change.
Browser-extension + bridge standards — MV3 (Chrome + Firefox), least-privilege permissions, the loopback pairing-token auth model, the shared TS↔Rust wire protocol, and the Chrome Web Store + Firefox AMO store-policy + pre-submission checklist. Load for changes under apps/extension/**, extension_bridge/, and the extension protocol.
React renderer standards — ports & adapters (service hooks), design tokens, motion tokens, @ajh/ui primitives, i18n, feature isolation, React Query, a11y. Load for changes under apps/desktop/src/renderer/**.
Tauri shell standards — the IPC 5-step capability flow, command implementation pattern, and capability/permission wiring. Load for new IPC capabilities and changes to commands.rs / tauri-client.ts / capabilities/.
| name | rust-standards |
| description | Rust/Tauri backend standards — L0–L3 layers, centralized platform/net/error ownership, Rust-first business logic, registries, error handling. Load for changes under apps/desktop/src-tauri/src/**. |
cargo test --test architecture)Authoritative source: docs/architecture-rules.md + docs/knowledge/architecture.md.
platform/ — std::env::var is banned elsewhere. Config/paths via platform/config.rs (data_dir()).net/ — reqwest::Client is banned elsewhere. Use net/http.rs (shared() / build_client()).Result<_, String> is banned outside error/. Use AppError/AppResult from error.rs.Business logic, processing pipelines, ATS analysis, and document generation live in Rust. The TS renderer stays presentation-only. Flag any business logic drifting into the frontend.
Respect the layer model in docs/architecture-rules.md; new cross-layer coupling is HIGH. L0 platform/net/error → L1 domain → L2 services/commands → L3 entrypoints.
New board scraper → scraping/boards/mod.rs (SCRAPERS, implement Scraper). Register, don't special-case. (No applier registry — the apply engine was removed.)
Migrations forward-safe and reversible-or-guarded; *Store writes go through the data layer, not ad-hoc SQL in commands. SQLite work off the async runtime (spawn_blocking).
Use observability.rs (Span) for tracing; don't invent ad-hoc logging.
#[cfg(target_os = …)] is not compiled on other hosts — a Windows/macOS dev build silently excludes the Linux module + its tests, so a same-host cargo test/clippy can't catch a Linux-only unused import, an attribute/use not in scope (a use is not inherited into a mod submodule), or a pub(super) visibility error. Cross-target-check gated code (cargo check --target x86_64-unknown-linux-gnu, or a dep-light standalone-crate check) before relying on a green build.set_var/LD_PRELOAD/re-exec must be scoped to the exact case that needs it (not every launch) and reverted on the failure path, so the still-running process and its children don't inherit bogus state. Env access still lives only in platform/.Command probe must enforce a real timeout (wait_timeout + kill on expiry) when it claims to; a missing-binary or slow external tool must not block detection/startup.Latest stable Rust 1.95; Edition 2024 default since 1.85 (2025-02-20). Set
edition = "2024"+ pin MSRV (rust-version). Re-verify version-pinned items periodically.
as_/to_/into_), iter/iter_mut/into_iter, eager Debug, Clone, Eq, Hash, #[non_exhaustive] on extensible public enums/structs, no private types in public signatures. https://rust-lang.github.io/api-guidelines/checklist.htmlthiserror typed enums, preserve the chain (#[source]/#[from], #[error(transparent)]); apps: anyhow/eyre + .context(...). Never expose anyhow::Error in a library's public API. https://docs.rs/thiserrorspawn_blocking (prefer over block_in_place); tokio::spawn futures need Send + 'static; bound parallel spawn_blocking with a Semaphore. https://docs.rs/tokio/latest/tokio/task/fn.spawn_blocking.html.await is a cancellation point; only hold across-await invariants that survive a drop; in select! use only cancel-safe futures; graceful shutdown via CancellationToken + cleanup. https://tokio.rs/tokio/topics/shutdownclippy::all + clippy::pedantic (-D warnings), allow-list rejected pedantic lints, set msrv in clippy.toml. https://doc.rust-lang.org/clippy/// SAFETY: note; keep minimal.cargo audit/cargo deny in CI vs https://rustsec.org/ . 2026 advisory RUSTSEC-2026-0098 (rustls-webpki < 0.103.12, URI name-constraint bypass) — bump transitively if any TLS path pulls it.Common mistakes: blocking the runtime (sync I/O, std::thread::sleep, heavy CPU) in async; .unwrap()/.expect() on fallible non-test paths; stringly errors dropping the source chain; anyhow in a public library API; holding a Mutex/RefCell guard across .await; assuming a select! branch completed (may be cancelled); unbounded spawn_blocking fan-out; unsafe without SAFETY.