@hupan56/wlkj 2.7.12 → 3.1.2

package/templates/qoder/config.yaml

@@ -1,27 +1,43 @@
 # 角色定义 (与 kg.py ROLE_SECTIONS 的 5 角色对齐)
 # commands: 该角色建议主用的命令 (软引导, 不拦截 —— 任何角色都能跑任何命令)
-# permissions: 声明式权限 (当前未强制执行, 留作未来硬权限墙)
+# permissions: 声明式权限 (遗留字段, 向后兼容)
+#
+# ★ 能力边界 (v3.0+ 解耦核心) ★
+# can_produce: 该角色允许产出的契约类型 (guard.py 强制, 越权则降级)
+# can_consume: 该角色允许读取/消费的能力 (越权则只读降级)
+# 契约类型必须与 contracts/schemas/*.schema.json 的 type 对齐:
+#   prd / prototype / spec / design-spec / code / unit-test / test-report / task
 roles:
   pm:
     name: 产品经理
     permissions: [create_task, write_prd, approve_prd, review_spec]
-    commands: [wl-init, wl-insight, wl-prd-full, wl-prd-quick, wl-prd-review, wl-design, wl-task, wl-search, wl-status, wl-report]
+    commands: [wl-init, wl-insight, wl-prd, wl-design, wl-task, wl-search, wl-status, wl-report]
+    can_produce: [prd, prototype]
+    can_consume: ["*"]              # PM 需读代码做现状分析
   design:
     name: 设计师
     permissions: [upload_design, approve_design]
     commands: [wl-init, wl-design, wl-search, wl-status]
+    can_produce: [design-spec, prototype]
+    can_consume: [prd, code-search]
   dev:
     name: 开发
     permissions: [write_spec, implement, commit, review_code]
     commands: [wl-init, wl-spec, wl-code, wl-test, wl-search, wl-commit, wl-status]
+    can_produce: [spec, code, unit-test]
+    can_consume: [prd, prototype, task]
   test:
     name: 测试
     permissions: [run_test, review_acceptance]
     commands: [wl-init, wl-test, wl-search, wl-status]
+    can_produce: [test-report, test-cases, unit-test]
+    can_consume: [prd, task, prototype]
   admin:
     name: 管理员
     permissions: [manage_index, manage_members, all]
     commands: [wl-init, wl-status, wl-search, wl-report]
+    can_produce: ["*"]
+    can_consume: ["*"]
 
 pipeline:
   workspace_dir: workspace
@@ -32,20 +48,42 @@ pipeline:
   auto_spec_on_prd_push: true
   req_id_start: 1
 
-# ── MySQL 只读 MCP (QAS 测试环境, 团队共享) ──
+# ── MySQL 只读 MCP (团队共享, 多环境) ──
+# AI 查数据库时会先问"查哪个环境"，用这里的标签让用户选。
+# 标签名自定义 (test/pre/prod 或 qa/staging...)，对应 environments 下的 key。
+# 没配 environments (旧扁平结构) 时兼容：当作只有 default_env 一个环境。
 mysql:
-  host: 10.54.6.9
-  port: 3306
-  user: fywl_ics_test
-  password: Fywl_ics_test56476
-  env_name: "QAS 测试环境"
+  default_env: test            # AI 不指定 / 用户不选时的默认环境
+  environments:
+    test:                      # 测试环境
+      host: 10.54.6.9
+      port: 3306
+      user: fywl_ics_test
+      password: Fywl_ics_test56476
+      env_name: "QAS 测试环境"   # 显示标签，会随查询结果返回提醒 AI 当前在哪个环境
+    pre:                       # 预生产环境 (按需填, 不用可整段删)
+      host: 10.54.6.10
+      port: 3306
+      user: fywl_ics_pre_ro
+      password: ""
+      env_name: "预生产环境"
+    prod:                      # 生产环境 (⚠️ 只读账号! 配了才能查, 查时 AI 会标红提醒)
+      host: fywl-mysql.rwlb.rds.aliyuncs.com
+      port: 3306
+      user: queryuser
+      password: "query2025_ics@infore"
+      env_name: "生产环境"
 
-# ── 禅道 MCP (自建内网, 团队共享) ──
-# /wl-task 对接禅道: 创建需求/查任务/跟踪状态
+# ── 禅道 MCP (自建内网) ──
+# v3.1.4: 禅道是【每人一个账号】(非团队共享)。
+#   - url (服务地址): 团队共享, 留这里。
+#   - user/password (个人凭据): 不放这里 (进 git 会泄露)。
+#     每人各自填 workspace/members/{我}/.private/secrets/zentao.env:
+#       ZENTAO_USER=<你的禅道账号>
+#       ZENTAO_PASSWORD=<你的禅道密码>
+#   - 账号名映射: member.json 的 zentao_account (进 git, 用于归属过滤)。
 zentao:
   url: http://10.89.2.91/zentao
-  user: hupan
-  password: Aa123456
 
 # ── Platforms (知识图谱/搜索的平台映射, 换项目改这里即可) ──
 # search_index.py --platform <key或alias> 会过滤到对应 project 目录
@@ -89,14 +127,14 @@ team_remote:
 
 # ── Git Sync (Weekly) ──
 # 每个项目在 data/code/ 下有自己的 git 仓库
-# 运行: python .qoder/scripts/git_sync.py
+# 运行: python .qoder/scripts/orchestration/wlkj.py git-sync
 # 或设 cron: 每周五 18:00
 #
 # ★ 源码仓库配置 (重要) ★
 #   把下面的 url 改成你团队的 git 地址 (Gitea/GitLab/GitHub 均可)。
 #   branch 改成你的主分支。
 #   不知道填什么? 注释掉整个 projects 段, 手动把代码放到 data/code/<项目名>/ 即可。
-#   填完后跑: python .qoder/scripts/setup.py  会自动克隆+建索引。
+#   填完后跑: python .qoder/scripts/orchestration/wlkj.py doctor --fix  会自动克隆+建索引。
 git_sync:
   schedule: "0 18 * * 5"
   projects:

package/templates/qoder/hooks/post-tool-use.py

@@ -0,0 +1,181 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""post-tool-use.py - PostToolUse hook: 工具执行后自动埋点 (确定性, 治漏斗断链)
+
+吸收宿主确定性 hook 能力: 把"埋点"从"靠 AI 手动调 learn record"(老忘 → F2 漏斗数据残缺)
+升级为"宿主在工具执行后自动埋点"。AI 想忘都忘不了。
+
+触发场景 (只埋这几类, 不滥用):
+  - Write/Edit 落到 **/prd*.md 或 **/PRD*.md    → 记 prd_written
+  - Write/Edit/MultiEdit 落到 **/task.json      → 记 task_created
+  - Bash 跑了 git commit / team_sync push       → 记 commit_done (兜底, 主路径在 team_sync.py)
+
+铁律:
+  - 永远 exit 0 (埋点绝不阻断工作流)
+  - 失败 try/except 静默 (hook 崩溃绝不阻塞会话)
+  - 幂等: 同一文件短时间内重复埋点靠 feedback.jsonl append 即可 (统计层去重)
+
+阻断契约: exit 0 放行 (本 hook 不阻断)。
+stdin 字段名官方未公开, 兼容 tool_name/tool_input 等多种写法。
+"""
+import json
+import os
+import re
+import sys
+from datetime import datetime
+
+if sys.platform == 'win32':
+    try:
+        sys.stdout.reconfigure(encoding='utf-8')
+        sys.stderr.reconfigure(encoding='utf-8')
+    except Exception:
+        pass
+
+BASE = os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+HOOK_ERRORS_LOG = os.path.join(BASE, '.qoder', '.runtime', 'hook-errors.log')
+
+# 工具名: 宿主原生工具(大写) + 兼容别名
+WRITE_TOOLS = {'write', 'edit', 'multiedit', 'str_replace_editor', 'create_file'}
+COMMIT_RE = re.compile(r'git\s+commit|team_sync.*push|wlkj\.py\s+sync\s+push', re.IGNORECASE)
+
+
+def _read_tool_info():
+    """从 stdin 读 {tool_name, tool_input}。兼容多种字段名。取不到返回 ({}, None)。"""
+    try:
+        if sys.stdin.isatty():
+            return {}, None
+        raw = sys.stdin.read().strip()
+    except Exception:
+        return {}, None
+    if not raw:
+        return {}, None
+    try:
+        data = json.loads(raw)
+    except (ValueError, TypeError):
+        return {}, None
+    if not isinstance(data, dict):
+        return {}, None
+    # tool_name 兼容
+    tool_name = None
+    for k in ('tool_name', 'name', 'tool'):
+        v = data.get(k)
+        if isinstance(v, str) and v.strip():
+            tool_name = v.strip()
+            break
+    # tool_input 兼容
+    tool_input = data.get('tool_input') or data.get('input') or data.get('args') or data.get('arguments')
+    if not isinstance(tool_input, dict):
+        tool_input = {}
+    return tool_input, tool_name
+
+
+def _file_paths_from_input(tool_input, tool_name):
+    """从 tool_input 提取涉及的文件路径列表。兼容 Write/Edit/Bash 的不同参数名。"""
+    paths = []
+    for k in ('file_path', 'path', 'filename', 'filePath'):
+        v = tool_input.get(k)
+        if isinstance(v, str) and v:
+            paths.append(v)
+    # MultiEdit 可能多文件
+    for k in ('paths', 'files'):
+        v = tool_input.get(k)
+        if isinstance(v, list):
+            paths.extend(x for x in v if isinstance(x, str))
+    return paths
+
+
+def _cmd_from_input(tool_input):
+    """Bash 工具的命令文本。"""
+    for k in ('command', 'cmd'):
+        v = tool_input.get(k)
+        if isinstance(v, str):
+            return v
+    return ''
+
+
+def _dev():
+    """读当前开发者。失败返回 None。"""
+    df = os.path.join(BASE, '.qoder', '.developer')
+    try:
+        if not os.path.isfile(df):
+            return None
+        for line in open(df, encoding='utf-8'):
+            if 'name=' in line:
+                return line.split('name=', 1)[1].strip().split()[0]
+    except Exception:
+        pass
+    return None
+
+
+def _append_event(event, data):
+    """best-effort append 一条事件到当前 dev 的 feedback.jsonl。避开 learn import 断链, 直接写文件。"""
+    try:
+        dev = _dev()
+        if not dev:
+            return
+        fb = os.path.join(BASE, 'workspace', 'members', dev, 'journal', 'feedback.jsonl')
+        os.makedirs(os.path.dirname(fb), exist_ok=True)
+        entry = {
+            'ts': datetime.now().isoformat(timespec='seconds'),
+            'dev': dev,
+            'event': event,
+            'data': data,
+            '_source': 'post-tool-use-hook',  # 标记来源, 区别于 AI 主动埋点
+        }
+        with open(fb, 'a', encoding='utf-8') as f:
+            f.write(json.dumps(entry, ensure_ascii=False) + '\n')
+    except Exception:
+        pass  # 铁律: 埋点失败绝不阻塞
+
+
+def main():
+    try:
+        tool_input, tool_name = _read_tool_info()
+        tn = (tool_name or '').lower()
+
+        # 1. Write/Edit 落到 PRD / task.json → 埋点
+        if tn in WRITE_TOOLS or tn == 'bash':
+            paths = _file_paths_from_input(tool_input, tool_name)
+            for p in paths:
+                plow = p.lower().replace('\\', '/')
+                if 'prd' in os.path.basename(plow).lower() and plow.endswith('.md'):
+                    _append_event('prd_written', {'prd': os.path.basename(p), 'tool': tool_name})
+                if plow.endswith('task.json'):
+                    _append_event('task_touched', {'task_json': os.path.basename(os.path.dirname(p)), 'tool': tool_name})
+                # v3.1 软提示: prototype HTML 写完但缺来源锚定 → stderr 提醒(不阻断)
+                if 'prototype' in os.path.basename(plow) and plow.endswith('.html'):
+                    try:
+                        if os.path.isfile(p):
+                            with open(p, encoding='utf-8', errors='ignore') as _f:
+                                _ht = _f.read()[:8192]
+                            import re as _re
+                            if not _re.search(r'@prototype-source:|x-source-pages', _ht):
+                                sys.stderr.write(
+                                    '[prototype 提醒] %s 缺来源锚定注释。\n'
+                                    '  → 在 <head> 加一行: <!-- @prototype-source: fywl-ui/.../index.vue -->\n'
+                                    '  → 没做这一步 = 没读真实代码就手抄模板, eval A2 会扣 5 分。\n' % os.path.basename(p))
+                    except Exception:
+                        pass  # 软提示, 失败静默
+
+            # 2. Bash 跑了 commit/push → 兜底埋点 commit_done
+            if tn == 'bash':
+                cmd = _cmd_from_input(tool_input)
+                if cmd and COMMIT_RE.search(cmd):
+                    _append_event('commit_done', {'source': 'post-tool-use-hook', 'cmd': cmd[:120]})
+
+        sys.exit(0)  # 永远放行
+    except SystemExit:
+        raise
+    except Exception as e:
+        try:
+            os.makedirs(os.path.dirname(HOOK_ERRORS_LOG), exist_ok=True)
+            with open(HOOK_ERRORS_LOG, 'a', encoding='utf-8') as f:
+                f.write('[{}] post-tool-use: {}\n'.format(
+                    datetime.now().strftime('%Y-%m-%d %H:%M:%S'), str(e)[:200]))
+        except Exception:
+            pass
+        sys.exit(0)
+
+
+if __name__ == '__main__':
+    main()

package/templates/qoder/hooks/session-start.py

@@ -62,17 +62,8 @@ def _recent_hook_errors(hours=24, limit=3):
     except Exception:
         return []
 
-# Injected as REAL OUTPUT below (a comment here would never reach the AI)
-CRITICAL_RULE = NL.join([
-    '## CRITICAL RULE',
-    'When user asks for /wl-prd-full, ALWAYS ask platform FIRST:',
-    '"这个需求是针对哪个平台？',
-    ' 1. Web 管理端 (fywl-ui) - Ant Design Vue + VxeGrid 风格',
-    ' 2. APP 移动端 (Carmg-H5) - Vant 风格',
-    ' 3. 两端都要',
-    ' 请选择 (1/2/3):"',
-    'DO NOT skip this question. DO NOT auto-detect. ALWAYS ASK.',
-])
+# v3.0 M4: 删 CRITICAL_RULE (会话开始主动推销工作流铁律 → 非侵入式改造)
+# 平台询问逻辑保留在 wl-pipeline.md 规则1 (命令启动后才生效, 不在会话开头强推)
 
 
 def load_json_safe(path):
@@ -138,14 +129,14 @@ def get_index_info():
             recent = errors[-10:]  # 取最后 10 行检查
             if len(recent) >= 3:
                 lines.append('[WARN] hook 最近频繁失败 (%d 条错误), 详情见 .qoder/.runtime/hook-errors.log' % len(recent))
-                lines.append('  跑 python .qoder/scripts/init_doctor.py --fix 排查')
+                lines.append('  跑 python .qoder/scripts/setup/init_doctor.py --fix 排查')
     except OSError:
         pass
 
     lines.append('## Knowledge Graph')
     lines.append('MCP工具 (QoderWork自动调用): search_code / get_impact / coverage_matrix / get_workflow 等11个')
-    lines.append('  python .qoder/scripts/search_index.py <keyword> [--platform web|app]')
-    lines.append('  python .qoder/scripts/context_pack.py <keyword>   # 一次打包全部上下文')
+    lines.append('  python .qoder/scripts/io/search_index.py <keyword> [--platform web|app]')
+    lines.append('  python .qoder/scripts/io/context_pack.py <keyword>   # 一次打包全部上下文')
 
     # DuckDB 知识图谱状态检查
     # Read role from .developer file
@@ -192,22 +183,23 @@ def get_index_info():
             # 管理员/开发: 能构建
             if code_newer or db_age_hours > 168:  # 7天 = 168小时
                 lines.append('  [WARN] 知识图谱过期! 代码有新变更.')
-                lines.append('  → 管理员请运行: python .qoder/scripts/kg_build.py')
-                lines.append('  → 完成后: python .qoder/scripts/team_sync.py push (共享给团队)')
+                lines.append('  → 管理员请运行: python .qoder/scripts/kg/kg_build.py')
+                lines.append('  → 完成后: python .qoder/scripts/io/team_sync.py push (共享给团队)')
             else:
                 lines.append('  ✓ 知识图谱最新')
         else:
             # 非管理员: 只拉取
             if code_newer or db_age_hours > 168:
                 lines.append('  [WARN] 知识图谱可能过期.')
-                lines.append('  → 运行: python .qoder/scripts/team_sync.py pull (获取管理员最新构建)')
+                lines.append('  → 运行: python .qoder/scripts/io/team_sync.py pull (获取管理员最新构建)')
             else:
                 lines.append('  ✓ 知识图谱最新')
 
         # 检查是否有未标注的模块 (提示AI做语义标注)
         try:
             import subprocess as _sp
-            r = _sp.run([sys.executable, os.path.join(BASE, '.qoder', 'scripts', 'kg_semantic.py'), '--check'],
+            # v3.x: kg_semantic.py 已迁移到 domain/kg/graph/ (旧扁平路径不存在)
+            r = _sp.run([sys.executable, os.path.join(BASE, '.qoder', 'scripts', 'domain', 'kg', 'graph', 'kg_semantic.py'), '--check'],
                         capture_output=True, text=True, encoding='utf-8', timeout=5)
             if r.stdout and 'semantic_labeling_needed' in r.stdout:
                 import json as _json
@@ -220,9 +212,9 @@ def get_index_info():
     else:
         lines.append('  [MISSING] kg.duckdb 不存在!')
         if role in ('admin', 'dev'):
-            lines.append('  → 运行: python .qoder/scripts/kg_build.py')
+            lines.append('  → 运行: python .qoder/scripts/kg/kg_build.py')
         else:
-            lines.append('  → 运行: python .qoder/scripts/team_sync.py pull')
+            lines.append('  → 运行: python .qoder/scripts/io/team_sync.py pull')
 
     return NL.join(lines)
 
@@ -235,8 +227,8 @@ def get_style_info():
 
     lines = []
     lines.append('## UI Style Index')
-    lines.append('Style search: python .qoder/scripts/search_index.py --style <table|form|modal>')
-    lines.append('Field search: python .qoder/scripts/search_index.py --field <name>')
+    lines.append('Style search: python .qoder/scripts/io/search_index.py --style <table|form|modal>')
+    lines.append('Field search: python .qoder/scripts/io/search_index.py --field <name>')
 
     for proj, d in meta.get('projects', {}).items():
         vue = d.get('vue_files', 0)
@@ -254,6 +246,81 @@ def get_style_info():
     return NL.join(lines)
 
 
+def get_usability_summary():
+    """读工作流可用性指标, 把"不达标"项注入会话上下文。
+
+    吸收宿主 SessionStart hook 能力: 不用等用户跑 /wl-status, 每次开会话主动
+    暴露"工作流用没用起来"的红灯项。只展示红/黄 (绿的不打扰), 无数据则不显示。
+    (与 usability_score.py 同源逻辑, 但 hook 内联精简版, 避免 import 验证脚本拖慢启动)
+    """
+    lines = []
+    try:
+        # U2 一次过审率 (从 eval-history 取首条)
+        eval_path = os.path.join(BASE, 'data', 'learning', 'eval-history.jsonl')
+        records = []
+        if os.path.isfile(eval_path):
+            with open(eval_path, encoding='utf-8', errors='replace') as f:
+                for ln in f:
+                    ln = ln.strip()
+                    if ln:
+                        try:
+                            records.append(json.loads(ln))
+                        except Exception:
+                            continue
+        # 取最近 7 天
+        from datetime import datetime, timedelta
+        cutoff = datetime.now() - timedelta(days=7)
+        recent = []
+        for r in records:
+            t = r.get('time', '')
+            try:
+                if datetime.fromisoformat(str(t).split('.')[0]) >= cutoff:
+                    recent.append(r)
+            except Exception:
+                continue
+
+        issues = []  # 只收红/黄
+        if recent:
+            passed = sum(1 for r in recent if r.get('passed'))
+            rate = 100.0 * passed / len(recent)
+            if rate < 60:  # 黄线 30, 红线 60
+                tag = '🔴' if rate < 30 else '🟡'
+                issues.append('%s 一次过审率 %.0f%% (<60%% 目标) — PRD 质量需提升' % (tag, rate))
+
+        # U4 规则违反率 (从 feedback)
+        fb_dir = os.path.join(BASE, 'workspace', 'members')
+        violations = 0
+        prds_gen = 0
+        if os.path.isdir(fb_dir):
+            for dev in os.listdir(fb_dir):
+                fb = os.path.join(fb_dir, dev, 'journal', 'feedback.jsonl')
+                if not os.path.isfile(fb):
+                    continue
+                try:
+                    with open(fb, encoding='utf-8', errors='replace') as f:
+                        for ln in f:
+                            if '"rule_violation"' in ln:
+                                violations += 1
+                            elif '"prd_accepted"' in ln:
+                                prds_gen += 1
+                except Exception:
+                    continue
+        if prds_gen and violations:
+            vrate = 100.0 * violations / prds_gen
+            if vrate > 10:
+                tag = '🔴' if vrate > 25 else '🟡'
+                issues.append('%s 规则违反率 %.0f%% (>10%% 目标) — 关键规则没拦住' % (tag, vrate))
+
+        if issues:
+            lines.append('## Workflow Usability (近7天)')
+            lines.append('工作流"用不用得起来"红灯 (详情: wlkj.py usability):')
+            for it in issues:
+                lines.append('  ' + it)
+    except Exception:
+        pass  # hook 失败绝不阻塞会话
+    return NL.join(lines) if lines else ''
+
+
 def main():
     parts = []
     parts.append('<qoder-context>')
@@ -282,8 +349,12 @@ def main():
         for t in tasks:
             parts.append('  [' + t['status'] + '] ' + t['name'] + ' - ' + t['title'])
 
+    usability = get_usability_summary()
+    if usability:
+        parts.append('')
+        parts.append(usability)
+
     parts.append('')
-    parts.append(CRITICAL_RULE)
 
     idx_info = get_index_info()
     if idx_info: