lanrtop/dev-manager-tauri
1
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity

docs(resource/dev-variables): record Codex approval blocker

Browse Source 
Three isolated real-client attempts were denied before dispatch by approval policy=never. Keep V7 blocked pending an explicitly approved pilot.

Rules-Applied: R03,R10,R13
This commit is contained in:
lanrtop 2026-09-26 16:57:58 +09:00
parent fe71536f33
commit 0b0bc18ce4
2 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.blueprint/manifest.yaml
View File

@ -504,7 +504,7 @@ modules:
status: in_progress status: in_progress
progress: 86 progress: 86
updated: 2026-09-26 updated: 2026-09-26
note: "V1–V6 合成验收通过；V7 的完整真实 Codex 新工具调用与桌面 UI 人眼终验待做。仅非生产开发用途，运行时 env 注入后置。" note: "V1–V6 合成验收通过；V7 真实 Codex 工具调用被客户端 approval policy=never 拒绝，待用户决定受控审批试点；桌面 UI 人眼终验待做。仅非生产开发用途，运行时 env 注入后置。"
position: [3250, 950] position: [3250, 950]
edges: edges:

5
.blueprint/modules/project-dev-variables.md
View File

@ -102,10 +102,11 @@ progress: 86
- acceptance: "[真实 scoped MCP] p1 Agent 登记 E2E_PASSWORD → UI 待填写；人保存合成值后已认证 Agent 单项读取成功；未认证、p2 和全局路由拒绝；tools/list 无批量导出或任意代理。" - acceptance: "[真实 scoped MCP] p1 Agent 登记 E2E_PASSWORD → UI 待填写；人保存合成值后已认证 Agent 单项读取成功；未认证、p2 和全局路由拒绝；tools/list 无批量导出或任意代理。"
- evidence: `scoped_dev_variable_http_pilot_denies_missing_wrong_cross_and_global_auth` 真实本机 HTTP 测试通过；撤销后读取失败，工具清单无批量出口。 - evidence: `scoped_dev_variable_http_pilot_denies_missing_wrong_cross_and_global_auth` 真实本机 HTTP 测试通过；撤销后读取失败，工具清单无批量出口。
### 🔵 V7 — 契约、合成试点与改动边界验收 ### 🔴 V7 — 契约、合成试点与改动边界验收
- status: in_progress - status: blocked
- complexity: M - complexity: M
- files: docs/ai-context/project-context.yaml, docs/ai-context/agent-button-system.md, .blueprint/modules/project-dev-variables.md - files: docs/ai-context/project-context.yaml, docs/ai-context/agent-button-system.md, .blueprint/modules/project-dev-variables.md
- depends: V6 - depends: V6
- acceptance: "agent_verify: [真实 Codex CLI + 合成数据] 跨会话登记→填写→读取→撤销后再读失败，项目目录无新 .env 或 token；[CLI] cargo test、pnpm typecheck、git diff --check 均 exit 0。human_verify: 不使用真实生产账号、不触发真实 PR/部署/数据库写入，确认日常开发摩擦是否下降。" - acceptance: "agent_verify: [真实 Codex CLI + 合成数据] 跨会话登记→填写→读取→撤销后再读失败，项目目录无新 .env 或 token；[CLI] cargo test、pnpm typecheck、git diff --check 均 exit 0。human_verify: 不使用真实生产账号、不触发真实 PR/部署/数据库写入，确认日常开发摩擦是否下降。"
- blocked_reason: 真实 Codex CLI 三次隔离合成试点均在调用 `register_project_dev_variable` 时被客户端审批策略拒绝（`MCP tool call requires approval, but approval policy is never`），服务端未收到登记请求；未尝试绕过审批。需用户决定是否允许一次受控、可审批的真实客户端试点。
- pending: 真实 Codex CLI 调新工具完成整条业务链、正式打包版、桌面 UI 人眼便利性终验；V1 的真实 Codex 认证初始化与 V6 的真实 scoped HTTP 业务链已分别验证，不把组合证据冒充本卡端到端完成。 - pending: 真实 Codex CLI 调新工具完成整条业务链、正式打包版、桌面 UI 人眼便利性终验；V1 的真实 Codex 认证初始化与 V6 的真实 scoped HTTP 业务链已分别验证，不把组合证据冒充本卡端到端完成。