@hupan56/wlkj 3.0.0 → 3.1.3

package/templates/qoder/scripts/{common → foundation/integrations}/active_task.py

@@ -28,15 +28,30 @@ from pathlib import Path
 from typing import Any
 
 # 支持的 AI 平台及其会话环境变量
-_ENV_SESSION_KEYS: tuple[tuple[str, tuple[str, ...]], ...] = (
-    ("qoder", ("QODER_SESSION_ID",)),
-    ("codex", ("CODEX_SESSION_ID", "CODEX_THREAD_ID")),
-    ("claude", ("CLAUDE_SESSION_ID", "CLAUDE_CODE_SESSION_ID")),
-    ("cursor", ("CURSOR_SESSION_ID",)),
-    ("opencode", ("OPENCODE_SESSION_ID", "OPENCODE_RUN_ID")),
-    ("gemini", ("GEMINI_SESSION_ID",)),
-    ("copilot", ("COPILOT_SESSION_ID",)),
-)
+# -----------------------------------------------------------------------------
+# 单一事实源: nexus.registry.HOST_TABLE（宿主能力抽象层）。
+# 本表从 HOST_TABLE 派生，保持 tuple[tuple[str, tuple[str, ...]]] 格式兼容。
+# 新增宿主只需改 nexus.HOST_TABLE 一处，active_task 自动跟随。
+# nexus 不可用时回退到内联定义（向后兼容，零破坏）。
+# -----------------------------------------------------------------------------
+try:
+    from capability.registry import HOST_TABLE as _HOST_TABLE
+
+    _ENV_SESSION_KEYS: tuple[tuple[str, tuple[str, ...]], ...] = tuple(
+        (name, tuple(info.get("detect", ())))
+        for name, info in _HOST_TABLE.items()
+        if name != "cli" and info.get("detect")
+    )
+except ImportError:
+    _ENV_SESSION_KEYS = (
+        ("qoderwork", ("QODER_SESSION_ID",)),
+        ("codex", ("CODEX_SESSION_ID", "CODEX_THREAD_ID")),
+        ("claude", ("CLAUDE_SESSION_ID", "CLAUDE_CODE_SESSION_ID")),
+        ("cursor", ("CURSOR_SESSION_ID",)),
+        ("opencode", ("OPENCODE_SESSION_ID", "OPENCODE_RUN_ID")),
+        ("gemini", ("GEMINI_SESSION_ID",)),
+        ("copilot", ("COPILOT_SESSION_ID",)),
+    )
 
 
 @dataclass(frozen=True)
@@ -127,7 +142,7 @@ def resolve_active_task(repo_root: Path | None = None) -> ActiveTask:
         ActiveTask 对象。
     """
     if repo_root is None:
-        from common.paths import get_repo_root
+        from foundation.core.paths import get_repo_root
         repo_root = get_repo_root()
 
     # 1. 尝试会话级
@@ -147,7 +162,7 @@ def resolve_active_task(repo_root: Path | None = None) -> ActiveTask:
                 pass
 
     # 2. 后备: 全局文件
-    from common.paths import get_current_task
+    from foundation.core.paths import get_current_task
     global_task = get_current_task(repo_root)
     if global_task:
         return ActiveTask(
@@ -170,13 +185,13 @@ def set_active_task(task_path: str, repo_root: Path | None = None) -> ActiveTask
         ActiveTask 对象, 无会话身份则返回 None。
     """
     if repo_root is None:
-        from common.paths import get_repo_root
+        from foundation.core.paths import get_repo_root
         repo_root = get_repo_root()
 
     session_key = resolve_context_key()
     if not session_key:
         # 无会话身份, 使用全局后备
-        from common.paths import set_current_task
+        from foundation.core.paths import set_current_task
         set_current_task(task_path, repo_root)
         return ActiveTask(
             task_path=task_path,
@@ -208,7 +223,7 @@ def clear_active_task(repo_root: Path | None = None) -> ActiveTask:
         清除前的 ActiveTask 状态。
     """
     if repo_root is None:
-        from common.paths import get_repo_root
+        from foundation.core.paths import get_repo_root
         repo_root = get_repo_root()
 
     # 获取清除前的状态
@@ -224,7 +239,7 @@ def clear_active_task(repo_root: Path | None = None) -> ActiveTask:
             pass
 
     # 也清除全局后备
-    from common.paths import set_current_task
+    from foundation.core.paths import set_current_task
     set_current_task(None, repo_root)
 
     return active

package/templates/qoder/scripts/{common → foundation/integrations}/feishu.py

@@ -64,14 +64,14 @@ def _load_config():
     config = {}
     try:
         # 优先: Config 单例 (mtime 缓存, 避免每次重读)
-        from .config import Config, SECTIONS
+        from foundation.core.config import Config, SECTIONS
         config = Config.load().section(SECTIONS.FEISHU, {})
     except Exception:
         pass
     if not config:
         # 回退: 简单文本解析 (PyYAML 不可用时)
         try:
-            from .paths import get_repo_root
+            from foundation.core.paths import get_repo_root
             cfg_path = os.path.join(str(get_repo_root()), '.qoder', 'config.yaml')
             in_feishu = False
             with open(cfg_path, encoding='utf-8') as f:

package/templates/qoder/scripts/{common → foundation/integrations}/terms.py

@@ -12,7 +12,7 @@ of these maps in other scripts - import from here.
 # 性能优化 A6: 从 40 词扩展到 ~120 词, 覆盖库存/采购/供应商/客户/财务/工单等通用业务域
 CN_MAP = {
     # 考勤/人事
-    '考勤': 'attendance clock', '打卡': 'clock', '签到': 'sign',
+    '考勤': 'attendance', '打卡': 'clock', '签到': 'sign',
     '薪资': 'salary', '工资': 'salary', '请假': 'leave', '休假': 'leave',
     '加班': 'overtime', '员工': 'employee staff', '用户': 'user',
     '组织': 'org department', '部门': 'department', '岗位': 'position role',
@@ -108,8 +108,8 @@ CN_MAP = {
 # so building and querying use the same semantics.
 BUSINESS_PATH_MAP = {
     '保险': ['insurance', 'Insurance', 'ins-', '/ins/', 'vehlife/insurance'],
-    '考勤': ['attendance', 'Attendance', 'clock', 'Clock', 'time/clock', 'TimeClock'],
-    '打卡': ['clock', 'Clock', 'photoClock', 'PhotoClock'],
+    '考勤': ['attendance', 'Attendance', 'Attend', 'timeManage', 'TimeWork'],
+    '打卡': ['clock', 'Clock', 'photoClock', 'PhotoClock', 'time/clock', 'TimeClock'],
     '车辆': ['vehicle', 'Vehicle', 'veh', 'vehlife', '/veh/'],
     '品质': ['quality', 'Quality', 'QualityInspection', 'patrol', 'Patrol'],
     '巡查': ['inspection', 'Inspection', 'patrol', 'Patrol'],

package/templates/qoder/scripts/foundation/integrations/zentao_client.py

@@ -0,0 +1,220 @@
+# -*- coding: utf-8 -*-
+"""
+zentao_client.py —— 禅道 HTTP 客户端（唯一真相源）。
+
+消除重复: zentao_sync.py (CLI 批量同步) 和 zentao_mcp_server.py (MCP server)
+原本各自实现了一份禅道 HTTP 层（内网探测/登录/token缓存/API/401重登），
+现统一收敛到本类。
+
+设计:
+    - ZentaoClient(url, user, password)   —— 显式构造
+    - ZentaoClient.from_env()             —— 从 ZENTAO_URL/USER/PASSWORD 环境变量 (mcp_launcher 注入)
+    - ZentaoClient.from_config()          —— 从 .qoder/config.yaml 的 zentao 段 (CLI 用)
+    - 凭据不全时工厂返回 None（调用方自行降级/报错）
+
+    client.check_intranet()  -> (ok, msg)   带缓存，避免连续 ping
+    client.api(method, path, data) -> Response   内含 401 自动重登
+
+与 nexus 的关系:
+    禅道 MCP server (zentao_mcp_server.py) 是 nexus L1 层的 MCP 资产。
+    本 client 是其 HTTP 底座；未来 McpCap 实现后，工作流统一走
+    nexus.resolve().mcp.call("list_execution_tasks")，本 client 仍是底层实现。
+"""
+from __future__ import annotations
+
+import os
+import socket
+from typing import Optional
+
+
+class ZentaoClient:
+    """禅道 REST API 客户端（登录/token/401重登/内网探测）。
+
+    Attributes:
+        url:      禅道根地址（构造时已去尾斜杠）。
+        user/password: 账号密码。
+    """
+
+    def __init__(self, url: str, user: str, password: str, intranet_ttl: int = 60):
+        self.url = (url or '').rstrip('/')
+        self.user = (user or '').strip()
+        self.password = password or ''
+        self._token: Optional[str] = None
+        # 内网可达性缓存 [timestamp, ok, msg]，list 原地写避免 global 声明
+        self._intranet_cache: list = []
+        self._intranet_ttl = intranet_ttl
+
+    # ------------------------------------------------------------------
+    # 工厂
+    # ------------------------------------------------------------------
+
+    @classmethod
+    def from_env(cls) -> Optional['ZentaoClient']:
+        """从环境变量构造（mcp_launcher 注入）。凭据不全返回 None。"""
+        url = os.environ.get('ZENTAO_URL', '').strip()
+        user = os.environ.get('ZENTAO_USER', '').strip()
+        pwd = os.environ.get('ZENTAO_PASSWORD', '')
+        if not url or not user or not pwd:
+            return None
+        return cls(url, user, pwd)
+
+    @classmethod
+    def from_config(cls) -> Optional['ZentaoClient']:
+        """从 .qoder/config.yaml 的 zentao 段构造（CLI 用）。凭据不全返回 None。"""
+        try:
+            from foundation.core.config import load_config_section, SECTIONS
+            cfg = load_config_section(SECTIONS.ZENTAO)
+        except Exception:
+            return None
+        url = (cfg.get('url') or '').strip()
+        user = (cfg.get('user') or '').strip()
+        pwd = (cfg.get('password') or '')
+        if not url or not user or not pwd:
+            return None
+        return cls(url, user, pwd)
+
+    # ------------------------------------------------------------------
+    # 校验
+    # ------------------------------------------------------------------
+
+    def credentials_ok(self) -> tuple[bool, str]:
+        """凭据完整性校验。返回 (ok, msg)。"""
+        missing = []
+        if not self.url:
+            missing.append('url')
+        if not self.user:
+            missing.append('user')
+        if not self.password:
+            missing.append('password')
+        if missing:
+            return False, '禅道凭据未配置 (缺 %s)。请在 .qoder/config.yaml 的 zentao: 段填写。' % '/'.join(missing)
+        return True, ''
+
+    # ------------------------------------------------------------------
+    # 内网探测
+    # ------------------------------------------------------------------
+
+    def _ping_target(self) -> tuple[str, int]:
+        """从 url 解析 (host, port)。"""
+        host = self.url.replace('http://', '').replace('https://', '').split('/')[0]
+        try:
+            port = 80
+            if self.url.count(':') >= 2:
+                port = int(self.url.split(':')[2].split('/')[0])
+        except (ValueError, IndexError):
+            port = 80
+        return host, port
+
+    def check_intranet(self) -> tuple[bool, str]:
+        """内网连通性（带 TTL 缓存，失败不缓存）。
+
+        多工具连续调用时只 ping 一次。失败不缓存，便于网络恢复后立即重试。
+        """
+        import time
+        now = time.time()
+        cached = self._intranet_cache
+        if cached and now - cached[0] < self._intranet_ttl and cached[1]:
+            return cached[1], cached[2]
+        host, port = self._ping_target()
+        try:
+            with socket.create_connection((host, port), timeout=3):
+                self._intranet_cache[:] = [now, True, '']
+                return True, ''
+        except Exception as e:
+            return False, '无法连接禅道 (%s): %s。请确认已连内网。' % (self.url, str(e)[:60])
+
+    # ------------------------------------------------------------------
+    # HTTP
+    # ------------------------------------------------------------------
+
+    @staticmethod
+    def _ensure_requests():
+        """延迟导入 requests（未装时报清晰错误，而非启动即崩）。"""
+        try:
+            import requests
+            return requests
+        except ImportError:
+            raise RuntimeError('缺少 requests 库。请运行: pip install requests')
+
+    def login(self) -> str:
+        """登录拿 token（进程内缓存）。"""
+        if self._token:
+            return self._token
+        requests = self._ensure_requests()
+        r = requests.post(self.url + '/api.php/v1/tokens',
+                          json={'account': self.user, 'password': self.password},
+                          timeout=10)
+        if r.status_code in (200, 201):
+            self._token = r.json().get('token')
+            return self._token
+        raise RuntimeError('禅道登录失败: %s %s' % (r.status_code, r.text[:100]))
+
+    def api(self, method: str, path: str, data: dict | None = None):
+        """调禅道 REST API。401 自动重登一次。
+
+        Args:
+            method: GET/POST/PUT/DELETE
+            path:   /api.php/v1 之后的路径（如 /executions/12/tasks）
+            data:   GET 时作 query params，POST/PUT 时作 json body
+        Returns:
+            requests.Response
+        """
+        requests = self._ensure_requests()
+        token = self.login()
+        full = self.url + '/api.php/v1' + path
+        kwargs = dict(
+            headers={'Token': token},
+            json=data if method in ('POST', 'PUT') else None,
+            params=data if method == 'GET' else None,
+            timeout=15,
+        )
+        r = requests.request(method, full, **kwargs)
+        if r.status_code == 401:
+            self._token = None
+            token = self.login()
+            kwargs['headers'] = {'Token': token}
+            r = requests.request(method, full, **kwargs)
+        return r
+
+    def upload_file(self, file_path: str, title: str = '', extra_fields: dict | None = None):
+        """上传文件到禅道 (multipart/form-data, POST /api.php/v1/files)。
+
+        禅道文件接口需 multipart 而非 JSON, api() 不支持, 故单独实现。
+        用于: 上传原型图 HTML / PRD 附件到需求。
+
+        Args:
+            file_path: 本地文件绝对路径
+            title: 文件标题 (可选, 默认取文件名)
+            extra_fields: 额外表单字段 (如 {'objectType':'story','objectID':812} 关联到对象)
+        Returns:
+            requests.Response
+        """
+        import os
+        requests = self._ensure_requests()
+        token = self.login()
+        full = self.url + '/api.php/v1/files'
+        fname = os.path.basename(file_path)
+        title = title or fname
+        fields = {'title': title}
+        if extra_fields:
+            fields.update(extra_fields)
+        with open(file_path, 'rb') as f:
+            files = {'file': (fname, f, 'application/octet-stream')}
+            r = requests.post(full, headers={'Token': token},
+                              data=fields, files=files, timeout=30)
+        if r.status_code == 401:
+            self._token = None
+            token = self.login()
+            with open(file_path, 'rb') as f:
+                files = {'file': (fname, f, 'application/octet-stream')}
+                r = requests.post(full, headers={'Token': token},
+                                  data=fields, files=files, timeout=30)
+        return r
+
+    @staticmethod
+    def err_text(r) -> str:
+        """从 response 提取错误文本（容错）。"""
+        try:
+            return r.json().get('error', r.text[:120])
+        except Exception:
+            return r.text[:120]

package/templates/qoder/scripts/{common → foundation/io}/filelock.py

@@ -6,7 +6,7 @@ filelock.py - 跨平台原子文件锁
 Windows / macOS / Linux 均无需管理员权限。
 
 用法:
-    from common.filelock import FileLock
+    from foundation.io.filelock import FileLock
     with FileLock('.qoder/.runtime/team-sync.lock', timeout=30):
         # 临界区：同一时刻只有一个进程能进入
         do_critical_work()

package/templates/qoder/scripts/{common → foundation/io}/reqid.py

@@ -36,7 +36,7 @@ if _THIS_DIR not in sys.path:
 try:
     from .atomicio import atomic_write_json, safe_read_json
     from .filelock import FileLock, LockTimeoutError
-    from .paths import get_repo_root
+    from foundation.core.paths import get_repo_root
 except ImportError:
     # 被当作脚本直接运行时
     from atomicio import atomic_write_json, safe_read_json

package/templates/qoder/scripts/foundation/protocol/duckdb_conn.py

@@ -0,0 +1,39 @@
+# -*- coding: utf-8 -*-
+"""
+duckdb_conn —— DuckDB 连接基础设施（L0 基础设施层）。
+
+设计模式: Utility（纯连接管理，无领域语义）
+
+职责：打开/关闭 kg.duckdb 连接。不知道表结构，不知道业务逻辑。
+被 L2（nexus）和 L3（kg/learning）共用，避免 L2 反向依赖 L3。
+
+init_schema 等领域 DDL 留在各域（kg_duckdb.py 定义图谱表，
+nexus/adapters/mcp.py 定义自己的 learning_events 表）。
+"""
+import os
+
+from foundation.core.paths import DATA_INDEX_DIR
+
+DB_PATH = str(DATA_INDEX_DIR / 'kg.duckdb')
+
+
+def get_db():
+    """Open DuckDB read-write connection (creates file if not exists)."""
+    os.makedirs(os.path.dirname(DB_PATH), exist_ok=True)
+    import duckdb
+    return duckdb.connect(DB_PATH)
+
+
+def get_db_readonly():
+    """Open read-only DuckDB connection. Returns None if file missing.
+
+    DuckDB 不允许对同一文件混用 read_only 和 read_write 连接,
+    所以只读路径必须全程用 read_only。
+    """
+    import duckdb
+    if not os.path.isfile(DB_PATH):
+        return None
+    try:
+        return duckdb.connect(DB_PATH, read_only=True)
+    except Exception:
+        return None

package/templates/qoder/scripts/{common → foundation/protocol}/mcp_base.py

@@ -21,7 +21,7 @@ mcp_base.py - MCP Server 基类 (Template Method 模式)
   - on_tool_error(e) -> (text, is_error): 自定义异常分类 (默认通用)
 
 Usage (子类示例):
-    from common.mcp_base import BaseMCPServer
+    from foundation.protocol.mcp_base import BaseMCPServer
 
     class ZentaoMCPServer(BaseMCPServer):
         SERVER_NAME = "qoder-zentao"

package/templates/qoder/scripts/{common → foundation/utils}/eval_api.py

@@ -26,6 +26,7 @@ eval_prd.py 的 main() 也改为调用本模块。
 
 import os
 import sys
+import re
 
 _THIS_DIR = os.path.dirname(os.path.abspath(__file__))
 _SCRIPTS_DIR = os.path.dirname(_THIS_DIR)
@@ -33,7 +34,7 @@ if _SCRIPTS_DIR not in sys.path:
     sys.path.insert(0, _SCRIPTS_DIR)
 
 # 复用 eval_prd.py 的评分函数 (不重复实现)
-from eval_prd import (
+from validation.metrics.eval_prd import (
     score_reality, score_style, score_template, read_text,
     FULL_SECTIONS, QUICK_SECTIONS,
 )
@@ -75,6 +76,16 @@ def evaluate(prd_path, html_path=None):
         try:
             r2, msg2, miss2 = score_style(read_text(html_path))
             a2 = round(r2 * 30)
+            # v3.1 来源锚定检查: HTML 必须含 @prototype-source 或 x-source-pages 注释
+            # 没有 = AI 没做 Step 2 真实页面锚定, 直接从模板手抄 → 扣 5 分
+            html_text = read_text(html_path)
+            has_source = bool(re.search(r'@prototype-source:|x-source-pages', html_text))
+            if not has_source:
+                a2 = max(0, a2 - 5)
+                msg2 = (msg2 or '') + '; 缺来源锚定(@prototype-source 注释), 扣 5 分'
+                if miss2 is None:
+                    miss2 = []
+                miss2 = list(miss2) + ['缺 @prototype-source 注释']
         except Exception as e:
             r2, msg2, miss2 = 0.0, "评估异常: %s" % e, []
             a2 = 0

package/templates/qoder/scripts/{common → foundation/utils}/pip_install.py

@@ -35,17 +35,34 @@ def _run_pip(args, index_url=None, timeout=MIRROR_TIMEOUT):
     """跑一次 pip, 返回 (returncode, stdout, stderr)。
     index_url 非 None 时加 -i 指定镜像源。
     用 trusted-host 避免某些镜像的 SSL 证书警告阻断。
+
+    ⚠ 不用 subprocess.run / communicate:
+      Anaconda Python 3.9 + Windows 下, subprocess 的 communicate() 内部 join 读子进程
+      输出的线程时, 会触发 "PyEval_SaveThread: GIL released" 致命崩溃
+      (pip 跑 tree-sitter/playwright/ddddocr 这类大包时尤其稳定复现)。
+      50 人不同环境都要跑这步, 必须跨版本稳。
+
+    解法: Popen + wait(), stdout/stderr 全丢 DEVNULL。
+      pip 的啰嗦输出对我们无用 (成功与否以 _verify_packages 的 import 验证为准),
+      丢了反而避免大输出撑爆管道 + 触发 GIL 崩溃。超时用独立的计时线程判, 不走 communicate。
     """
-    cmd = [sys.executable, '-m', 'pip', 'install'] + args
+    cmd = [sys.executable, '-m', 'pip', 'install', '--no-input',
+           '--progress-bar', 'off'] + args
     if index_url:
         cmd += ['-i', index_url,
                 '--trusted-host', _host_of(index_url)]
     try:
-        r = subprocess.run(cmd, capture_output=True, text=True,
-                           encoding='utf-8', errors='replace', timeout=timeout)
-        return r.returncode, r.stdout or '', r.stderr or ''
-    except subprocess.TimeoutExpired:
-        return 1, '', '安装超时 (%ds)' % timeout
+        proc = subprocess.Popen(cmd, stdout=subprocess.DEVNULL,
+                                stderr=subprocess.DEVNULL)
+        try:
+            rc = proc.wait(timeout=timeout)
+            return rc, '', ''
+        except subprocess.TimeoutExpired:
+            try:
+                proc.kill()
+            except Exception:
+                pass
+            return 1, '', '安装超时 (%ds)' % timeout
     except Exception as e:
         return 1, '', str(e)
 

package/templates/qoder/scripts/{common → foundation/utils}/platform_guard.py

@@ -26,7 +26,7 @@ def _platform_explicitly_passed(argv=None):
     return '--platform' in argv
 
 
-def assert_platform_selected(skill='wl-prd-full', argv=None):
+def assert_platform_selected(skill='wl-prd', argv=None):
     """硬墙: 没显式传 --platform 就调用 PRD 链路脚本 = 违规。
 
     1. best-effort 上报 rule_violation 事件 (不阻塞, 失败静默)