保留编译数据库多配置的不同上下文阻塞

Author: loong10k

crates/codeguard-cli/src/c_family_compilation_discovery.rs

@@ -26,6 +26,15 @@ pub(crate) fn observe<P: ObservationPort>(
             reason = match parse_c_family_compilation_database(&bytes) {
                 Ok(entries) => {
                     parsed = true;
+                    let blockers: std::collections::BTreeSet<_> = entries
+                        .iter()
+                        .filter_map(|entry| entry.execution_context_blocker())
+                        .collect();
+                    for blocker in &blockers {
+                        report
+                            .unknown_conditions
+                            .push(format!("{blocker}:{relative}"));
+                    }
                     entries
                         .iter()
                         .find_map(|entry| entry.execution_context_blocker())
@@ -43,9 +52,10 @@ pub(crate) fn observe<P: ObservationPort>(
         report.observation_complete = false;
         report.blocked_paths.push(relative.into());
     }
-    report
-        .unknown_conditions
-        .push(format!("{reason}:{relative}"));
+    let condition = format!("{reason}:{relative}");
+    if !report.unknown_conditions.contains(&condition) {
+        report.unknown_conditions.push(condition);
+    }
     let build_root = relative.rsplit_once('/').map_or(".", |(parent, _)| parent);
     report.checker_configurations.push(CheckerConfiguration {
         build_root: build_root.into(),
@@ -110,6 +120,41 @@ mod tests {
         assert!(report.build_roots.is_empty());
     }
 
+    #[test]
+    fn multiple_compilation_contexts_keep_each_distinct_blocker() {
+        let mut report = crate::discovery::empty_report(Path::new("project"));
+        let observation = DatabaseObservation {
+            bytes: br#"[
+              {"directory":"/a","file":"a.cpp","arguments":["clang++","-std=c++17","@flags.rsp"]},
+              {"directory":"/b","file":"a.cpp","arguments":["clang++","a.cpp"]},
+              {"directory":"/c","file":"a.cpp","arguments":["clang++","-std=c++17","@other.rsp"]}
+            ]"#,
+            changed: false,
+            reads: Cell::new(0),
+        };
+        super::observe(
+            &mut report,
+            &observation,
+            Path::new("project/compile_commands.json"),
+            "compile_commands.json",
+        );
+        for reason in [
+            "compilation_database_response_file_unresolved",
+            "compilation_database_standard_missing",
+        ] {
+            assert_eq!(
+                report
+                    .unknown_conditions
+                    .iter()
+                    .filter(|entry| *entry == &format!("{reason}:compile_commands.json"))
+                    .count(),
+                1
+            );
+        }
+        assert_eq!(report.checker_configurations[0].configuration, "unknown");
+        assert!(report.observation_complete);
+    }
+
     #[test]
     fn unstable_or_command_only_database_never_becomes_verified_config() {
         for (bytes, changed) in [

openspec/changes/introduce-rust-codeguard-cli/specs/native-tool-adapters/spec.md

@@ -1228,3 +1228,7 @@ The adapter SHALL parse bounded compilation database bytes without filesystem ac
 #### Scenario: Static compilation arguments expose unresolved execution context
 - **WHEN** the argument vector uses response files, frontend passthrough, compiler plugins or ambiguous/missing/unsupported explicit standards
 - **THEN** initialization SHALL preserve configuration unknown and execution not_run, expose a concrete context blocker, and SHALL NOT classify that blocker as a source violation. No known blocker SHALL NOT imply execution authorization or verified project coverage.
+
+#### Scenario: Distinct blockers across compilation configurations remain visible
+- **WHEN** multiple argument-vector entries have different known execution-context blockers
+- **THEN** observation SHALL retain each distinct per-entry blocker in unknown conditions, deduplicate identical reasons, and SHALL NOT stop reporting after the first entry or claim complete flag auditing

tests/acceptance/c-family-compilation-database-init.md

@@ -13,3 +13,5 @@
 新增上下文诊断：响应文件、前端透传、插件、重复标准、缺标准、不支持标准6类参数反例通过。适配器3项测试通过；当前公开CLI定向4项默认/WASM各通过（WASM 2.00秒），严格Clippy通过。配置可读不等于执行上下文可用；未命中已知阻塞也不授权运行。
 
 低误报修复：合法-stdlib选择曾被-std前缀匹配误识别为重复标准，新增测试先复现失败后修正。Apple Clang21实际stdin核验-std=c++17、--std=c++17、--std c++17均接受，-std c++17拒绝；仅接纳核对过的选项形式。适配器4项通过，默认初始化47项通过（2.47秒），WASM新增合法反例1项通过（1.82秒）。不扩大语言版本或项目执行资格。
+
+多配置诊断修复：同一文件多条数据库配置中的不同阻塞类型全部保留，同类原因去重；新增反例先因遗漏standard_missing失败，修复后发现定向3项默认/WASM各通过，全工作区WASM严格Clippy通过。这里是每条配置的首个已知阻塞汇总，不是完整编译器参数审计，仍不执行项目命令。