feat: 使用 uv 锁定主程序依赖并强化插件恢复边界 (#6364)

docs/rules/06-code-styles.md

@@ -11,7 +11,7 @@
 
 ## Python Version and Typing
 
-- Target: **Python 3.11+**. CI runs Python 3.12.
+- Target: **Python 3.12+**. Python 3.12 is the primary CI version; compatibility CI also verifies newer interpreters.
 - **Type annotations are required** on all public methods and function signatures.
 - Use `Optional[X]` for nullable types (do not use `X | None` — keep consistency with the existing codebase style).
 - Use `Union[X, Y]` for multi-type parameters.
@@ -114,11 +114,11 @@ except:
 
 ## What Not To Do
 
-- Do not introduce new third-party libraries without placing them in the correct dependency entry: runtime packages in `requirements.in`, test/lint/build tooling in `requirements-dev.in`.
+- Do not introduce new third-party libraries without placing them in the correct `pyproject.toml` dependency group and updating `uv.lock`: runtime packages belong in `[project].dependencies`, test/lint/build tooling in `[dependency-groups].dev`.
 - Do not use `requests` or `httpx` directly for external HTTP calls - host code uses `RequestUtils` from `app/adapters/network/http.py`; plugins use `app.sdk.network`.
 - Do not issue raw SQLAlchemy queries from chains, modules, or endpoints — use the Oper classes in `app/db/oper/`.
 - Do not add TODO or FIXME without context. Only keep one if it is genuinely deferred and cannot be addressed in the current task.
 - Do not add noisy markers like `# change starts here`, `# important`, or `# this is a fix`.
 - Do not write comments that restate what the code already clearly says.
 
-*Last Updated: 2026-08-14*
+*Last Updated: 2026-08-19*