统一语言检查入口与原生修复任务，完善 WASM 验收

.github/workflows/ci.yml

@@ -9,9 +9,23 @@ permissions:
   contents: read
 
 jobs:
+  msrv:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Install the declared minimum Rust in this CI runner
+        run: rustup toolchain install 1.85.0 --profile minimal
+      - name: Check default and WASM targets with actual Rust 1.85
+        run: |
+          cargo +1.85.0 check --locked --workspace --all-targets
+          cargo +1.85.0 check --locked --workspace --all-targets --features wasm-precheck
   gate:
     # ubuntu-latest 预装稳定版 Rust；Cargo.toml 声明 rust-version = 1.85 / edition = 2024。
     runs-on: ubuntu-latest
+    env:
+      # Linux 完整 DWARF 测试制品会超出 SDK 的 256 MiB 宿主制品读取预算。
+      # 仅去掉测试调试符号；保留 debug assertions 和产品读取上限。
+      CARGO_PROFILE_TEST_DEBUG: "0"
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
@@ -34,18 +48,50 @@ jobs:
 
       - name: Verify Linux WASM worker resource boundary
         run: |
+          # 帮助目录须保留当前构建特性；默认 suite 无法证明 WASM 入口状态。
+          cargo test --locked -p codeguard-cli --features wasm-precheck --test help_command_contract --test rules_list_cli --test version_cli --test rust_lint_cli --test ruby_lint_cli --test check_all_ruby --test ruby_native_hook --test ruby_project_version --test shell_lint_cli
+          cargo test --locked -p codeguard-cli --features wasm-precheck --test workspace_msrv --test crate_boundaries
           cargo test -p codeguard-runtime --features wasm-precheck --test process_contract
-          cargo test -p codeguard-runtime --features wasm-precheck --test wasm_grammar_load --test dart_upstream_corpus
-          cargo test -p codeguard-cli --features wasm-precheck --test syntax_worker_candidate --test grammar_probe_cli --test grammar_route --test zig_lint_cli --test typescript_syntax_fallback_candidate --test java_syntax_fallback_candidate --test java_native_differential --test kotlin_native_differential
+          cargo test -p codeguard-runtime --features wasm-precheck --test wasm_grammar_load --test wasm_recovery_scan --test wasm_empty_block_scan --test wasm_root_child_scan --test dart_upstream_corpus
+          cargo test -p codeguard-cli --features wasm-precheck --test syntax_worker_candidate --test check_python_structure --test check_go_package_structure --test go_syntax_fallback_candidate --test python_structural_syntax --test python_syntax_fallback_candidate --test grammar_probe_cli --test grammar_route --test zig_lint_cli --test typescript_syntax_fallback_candidate --test java_syntax_fallback_candidate --test java_native_differential --test kotlin_native_differential --test kotlin_lint_cli --test kotlin_syntax_task_verify --test kotlin_native_first --test erlang_native_differential --test erlang_lint_cli --test erlang_native_discovery --test check_all_erlang --test erlang_syntax_task_verify --test erlang_native_workbench --test swift_native_differential --test swift_lint_cli --test check_all_swift --test swift_native_hook --test swift_native_workbench --test swift_syntax_task_verify --test check_all_eslint --test hook_execute_cli --test claude_hook_cli --test hook_syntax_tasks --test syntax_task_verify --test zig_native_cli --test zig_native_discovery --test check_all_zig --test zig_native_hook --test zig_native_workbench --test zig_native_first_resolution --test task_resolution_service
+          # 原生限定关闭服务在 WASM 构建下也须实际运行，默认 suite 不涵盖所有历史来源。
+          cargo test --locked -p codeguard-cli --features wasm-precheck --test erlang_task_resolution_service --test swift_task_resolution_service --test kotlin_task_resolution_service --test go_task_resolution_service --test check_language_selection
+          cargo test --locked -p codeguard-cli --lib --features wasm-precheck selected_compiler_does_not_hide_unobserved_files_with_wasm
           # 32 份 WASM 的批次和单项目回归各自独占候选阶段预算，避免测试进程互相争抢内存与 CPU。
           cargo test -p codeguard-cli --features wasm-precheck --test check_all_grammar_candidates -- --test-threads=1
 
+      - name: Replay every fixed grammar and retain per-language evidence
+        run: |
+          cargo test --locked -p codeguard-cli --features wasm-precheck --test grammar_evaluation --test grammar_native_differential --test javascript_native_differential --test ruby_native_differential --test go_native_differential --test go_package_structure
+          cargo test --locked -p codeguard-cli --features wasm-precheck --lib python_syntax_probe
+          # Go双制品、整文件与取消反例使用受控SDK；真实版本需显式选择。
+          cargo test --locked -p codeguard-cli --features wasm-precheck --lib go_syntax_probe
+          # Ruby 固定版本的真实对照需显式工具；普通输出边界反例在 Linux 运行。
+          cargo test --locked -p codeguard-cli --features wasm-precheck --lib ruby_syntax_probe
+          # Node 版本不匹配时不借用宿主版本；受控隔离/执行中取消反例仍在 Linux 实际运行。
+          cargo test --locked -p codeguard-cli --features wasm-precheck --lib javascript_syntax_probe
+          cargo test --locked -p codeguard-cli --features wasm-precheck --lib grammar_native_checker
+          # 此测试确认全部 worker 实际运行并保留逐语言 JSON；已知语法差异保留为数据，
+          # 不断言成正确行为，也不把工具不可用的 358 项 unknown 当回放成功。
+          # 0.1 协议与历史报告由上面的普通测试保留兼容；当前回放显式分离语料来源。
+          cargo test --locked -p codeguard-cli --features wasm-precheck --test grammar_evaluation \
+            replay_expanded_cohorts_and_archive_current_evidence -- \
+            --ignored --exact --nocapture --test-threads=1
+
       - name: Verify the local npm package contains a running WASM worker
         run: |
           cargo build --locked -p codeguard-cli --features wasm-precheck
           CODEGUARD_NO_WASM_BIN="$RUNNER_TEMP/codeguard-no-wasm" \
           CODEGUARD_WASM_BIN="$PWD/target/debug/codeguard" \
           node --test tests/npm_pack_wasm.test.mjs
+          # 独占打包输出与 npm 缓存，不与上面的全量 grammar 包测试并发。
+          CODEGUARD_WASM_BIN="$PWD/target/debug/codeguard" \
+          node --test tests/npm_pack_repair.test.mjs
+          # 安装后的原生首次发现不依赖 WASM 任务；真实 OTP 目标须显式选择。
+          CODEGUARD_WASM_BIN="$PWD/target/debug/codeguard" \
+          node --test tests/npm_pack_erlang_repair.test.mjs
+          CODEGUARD_WASM_BIN="$PWD/target/debug/codeguard" \
+          node --test tests/npm_pack_ruby_repair.test.mjs
 
       - name: Run test suite
         run: cargo test --workspace --all-targets

Cargo.toml

@@ -8,7 +8,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.1.3"
+version = "0.1.4"
 edition = "2024"
 rust-version = "1.85"
 license = "Apache-2.0"
@@ -20,3 +20,7 @@ sha2 = "0.10.9"
 sha1 = "=0.10.7"
 ring = "=0.17.14"
 base64 = "=0.22.1"
+
+# 开发与测试保留全部制品摘要核验，仅优化 SHA-256 压缩计算，避免大工具耗尽检查预算。
+[profile.dev.package.sha2]
+opt-level = 3