feat(design): 引入 DESIGN.md 设计 token SSOT + 状态覆盖 + 8 维交付自查#2
Merged
Conversation
P0 — 项目级设计 token 单一来源: - 新增 docs/design/DESIGN.md(YAML token + on-* 配对 + Do/Don't + 最小组件覆盖) - uiux-designer spec 引用 token、禁内联硬编码 - coding.md 增「设计 token 纪律」；code-reviewer 增「设计 token 审查项」 - CLAUDE.md / repo-layout / team-capability-map 三处同步 P1 — 状态完整性 + 设计侧前置门: - spec 新增「页面/模块状态覆盖」(loading/empty/error/permission) - 原型要求扩成组件态+产品态；新增「交付前自查(8 维)」 - testing.md「视觉达标」口径扩成全状态(保留「读图四查」术语不改) 借鉴 xianxin-design-workflow 的 DESIGN.md token 体系与 8 维验证框架。
pcliangx
added a commit
that referenced
this pull request
Jun 17, 2026
rule #4 的 sk-ant- 排除原为整段 prompt 级（scan-secrets）/ 整行级（scan-commit）： prompt 或同一行里只要出现裸字符串 sk-ant-，同处真 OpenAI key 即被静默放行。 "同时讨论 OpenAI 与 Anthropic 两家 key" 是很自然的场景。 - scan-secrets.sh rule #4：改 grep -oE 抽取每个 sk- token，再过滤 ^sk-ant- - scan-commit.sh rule #4：同改（layer-4 与 layer-2 同步，防 Edit/Write 绕过） - 真 sk-ant- key 仍由 rule #3 优先拦（更具体 message），逻辑不变 - 加 2 条回归用例（真 OpenAI key + 裸 sk-ant- 文本须拦 / 仅讨论前缀须放行） 注：本提交含假 key 测试夹具，触发（已修好的）scan-commit 自身拦截， --no-verify 记录见 docs/reviews/no-verify-log-2026-06-17.md（security.md §紧急绕过）。 评审 P0-1（QualityExpert finding #2，已复验）。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
背景
借鉴 xianxin-design-workflow 的设计工作流,把其中与 AGF 哲学最契合的价值点引入
uiux-designer体系。补齐 AGF 此前缺的「项目级设计系统 SSOT」一层。P0 — 项目级设计 token 单一来源
docs/design/DESIGN.md:设计 token SSOT(YAML 机读 color/typography/spacing/radius/component +on-*对比安全配对 + Do/Don't + 最小组件覆盖)uiux-designerspec 改为引用 token、禁内联硬编码色板/间距coding.md增「设计 token 纪律」(与前后端/Apple 契约纪律同构)code-reviewer增「设计 token 审查项」(硬编码/on-* 配对/token 在册三查)CLAUDE.md设计交付物路径约定、repo-layout.md、team-capability-map.md主要输出列P1 — 状态完整性 + 设计侧前置门
loading / empty / error / permission(AGF 此前真正缺的产品态)testing.md「视觉达标」状态口径扩成全状态 —— 刻意不改「读图四查」术语(跨 6+ 文件既定词汇),8 维(设计前置门)与四查(qa 验证)互补不重叠闭环
DESIGN.md(token SSOT)→ designer 引用 token + 全状态覆盖 → 8 维自查门 → frontend-dev 禁硬编码 → code-reviewer token 审查 → qa UAT 读图四查(全状态验证)验证
lint-all.sh全过、roles 无 drift