@hupan56/wlkj 3.1.31 → 3.2.0

package/templates/qoder/scripts/domain/kg/build/kg_signatures.py

@@ -0,0 +1,169 @@
+# -*- coding: utf-8 -*-
+# v3.0 路径自举: 引导到 common/bootstrap, 统一 sys.path 逻辑
+import os as _o, sys as _s
+_f = _o.path.abspath(__file__)
+for _ in range(10):
+    _f = _o.path.dirname(_f)
+    _cp = _o.path.join(_f, 'foundation')
+    if _o.path.isfile(_o.path.join(_cp, 'bootstrap.py')):
+        break
+if _cp not in _s.path: _s.path.insert(0, _cp)
+from bootstrap import setup; setup()
+
+"""
+File-signature based incremental change detection (P0: fingerprint 三级增量).
+
+Goal: skip re-extraction for files whose changes don't affect the graph.
+The knowledge graph only records *topology* (who clicks/calls/handles whom),
+not implementations — so a file that only changed comments/whitespace has
+zero impact on the graph and can be safely skipped.
+
+Three levels (mirrors Understand-Anything's fingerprint approach, adapted to
+our regex/topology-only graph):
+  - NONE       : content_hash unchanged → file is byte-identical, skip entirely.
+  - COSMETIC   : structural_hash unchanged but content_hash changed
+                 → only comments/whitespace differ, skip re-extraction.
+  - STRUCTURAL : structural_hash changed → real code changed, re-extract.
+
+The signature is intentionally coarse (strip comments + all whitespace, hash
+the rest) — language-agnostic and robust. Worst case (e.g. pure variable
+rename) degrades to STRUCTURAL = re-extract = current behaviour, never wrong.
+"""
+
+import hashlib
+import os
+import re
+
+
+# ── Comment stripping (language-aware, single regex each) ────────────────────
+# Block comments /* ... */ and HTML comments <!-- ... --> span both JS-family
+# (.ts/.vue/.tsx/.jsx) and SQL (-- / /* */). Line comments vary by language.
+
+# /* block */ and <!-- block --> — shared by JS-family + SQL + Vue template
+_RE_BLOCK = re.compile(r'/\*.*?\*/', re.DOTALL)
+_RE_HTML_BLOCK = re.compile(r'<!--.*?-->', re.DOTALL)
+
+# // line comment — TS/JS/Vue script + Java. Robust against URL-ish tokens
+# (only strips when // is at start of a token, not inside a string — see below).
+_RE_LINE_SLASH = re.compile(r'(^|[\s;{}()\[\],])//[^\n]*')
+
+# # line comment — Python / shell / YAML / .properties
+_RE_LINE_HASH = re.compile(r'(^|[\s;{}()\[\],])#[^\n]*')
+
+# -- line comment — SQL / XML DTD
+_RE_LINE_DASH = re.compile(r'(^|[\s;{}()\[\],])--[^\n]*')
+
+
+def strip_comments(content, suffix):
+    """Remove comments from source text by file suffix.
+
+    Args:
+        content: source text (str)
+        suffix: file suffix lowercased with dot, e.g. '.vue', '.ts', '.java'
+
+    Returns:
+        Text with comments removed. Block comments always stripped for
+        JS-family/SQL; line-comment style picked by language.
+    """
+    s = content
+    # Block comments: JS-family + SQL share /* */; Vue/HTML share <!-- -->.
+    if suffix in ('.ts', '.tsx', '.js', '.jsx', '.vue', '.java', '.sql'):
+        s = _RE_BLOCK.sub(' ', s)
+    if suffix in ('.vue', '.html', '.xml'):
+        s = _RE_HTML_BLOCK.sub(' ', s)
+    # Line comments by language family.
+    if suffix in ('.ts', '.tsx', '.js', '.jsx', '.vue', '.java'):
+        s = _RE_LINE_SLASH.sub(r'\1', s)
+    elif suffix in ('.py', '.sh', '.yml', '.yaml', '.properties', '.cfg', '.ini'):
+        s = _RE_LINE_HASH.sub(r'\1', s)
+    elif suffix == '.sql':
+        s = _RE_LINE_DASH.sub(r'\1', s)
+    return s
+
+
+def _strip_all_whitespace(s):
+    """Remove every whitespace char so formatting/indentation never affects hash."""
+    return re.sub(r'\s+', '', s)
+
+
+def compute_hashes(filepath):
+    """Compute (content_hash, structural_hash) for a file.
+
+    Args:
+        filepath: absolute or relative path to the source file.
+
+    Returns:
+        (content_hash, structural_hash) — both hex sha256, or (None, None) if
+        the file can't be read.
+    """
+    try:
+        with open(filepath, 'rb') as f:
+            raw = f.read()
+    except Exception:
+        return (None, None)
+    content_hash = hashlib.sha256(raw).hexdigest()
+
+    suffix = os.path.splitext(filepath)[1].lower()
+    try:
+        text = raw.decode('utf-8', errors='replace')
+    except Exception:
+        text = ''
+    stripped = strip_comments(text, suffix)
+    structural = _strip_all_whitespace(stripped)
+    structural_hash = hashlib.sha256(structural.encode('utf-8')).hexdigest()
+    return (content_hash, structural_hash)
+
+
+def classify(old_sig, new_sig):
+    """Compare old vs new (content_hash, structural_hash) → change level.
+
+    Args:
+        old_sig: dict {content_hash, structural_hash}, or tuple of the two,
+                 or None (never seen → STRUCTURAL).
+        new_sig: (content_hash, structural_hash) tuple from compute_hashes.
+
+    Returns:
+        'NONE' | 'COSMETIC' | 'STRUCTURAL'.
+        Never-seen files (old_sig is None) → 'STRUCTURAL' (safe default: extract).
+    """
+    if old_sig is None:
+        return 'STRUCTURAL'
+    # Accept both dict (from get_file_signature) and tuple (from compute_hashes)
+    # so callers don't have to convert.
+    if isinstance(old_sig, dict):
+        old_content = old_sig.get('content_hash')
+        old_struct = old_sig.get('structural_hash')
+    else:
+        old_content, old_struct = old_sig[0], old_sig[1]
+    new_content, new_struct = new_sig
+    if old_content == new_content:
+        return 'NONE'
+    if old_struct == new_struct:
+        return 'COSMETIC'
+    return 'STRUCTURAL'
+
+
+# ── Suffixes the incremental builder cares about ─────────────────────────────
+# Keep in sync with kg_incremental.py's filter: ('.vue', '.ts', '.java').
+TRACKED_SUFFIXES = ('.vue', '.ts', '.java')
+
+
+if __name__ == '__main__':
+    # Quick self-test: same code + extra comment → COSMETIC; changed code → STRUCTURAL.
+    import tempfile
+    tmp = tempfile.NamedTemporaryFile(suffix='.ts', delete=False, mode='w', encoding='utf-8')
+    tmp.write('export function add(a, b) {\n  return a + b\n}\n')
+    tmp.close()
+    h1 = compute_hashes(tmp.name)
+    print('original:', h1)
+
+    with open(tmp.name, 'w', encoding='utf-8') as f:
+        f.write('// leading comment\nexport function add(a, b) {\n  return a + b\n}\n')
+    h2 = compute_hashes(tmp.name)
+    print('comment-only change:', h2, '→', classify(h1, h2))
+
+    with open(tmp.name, 'w', encoding='utf-8') as f:
+        f.write('export function add(a, b, c) {\n  return a + b + c\n}\n')
+    h3 = compute_hashes(tmp.name)
+    print('structural change:', h3, '→', classify(h1, h3))
+    os.unlink(tmp.name)

package/templates/qoder/scripts/domain/kg/extract/ts_extract.py

@@ -65,6 +65,117 @@ def _find_calls_in_function_ast(func_node, source_bytes):
     return calls
 
 
+# ── P1: calls / imports 边抽取 ────────────────────────────────────────────
+# 把 tree-sitter 已能识别的 call_expression 和 import 语句导出成图边,
+# 让知识图谱从"按钮→接口→控制器"单条业务链升级为带函数级调用的代码图。
+# 返回结构供 kg_build / kg_incremental 写成 entities(FUNCTION) + edges(calls/imports)。
+
+# 函数定义节点类型 (TS/JS): 命名函数 / const fn = () => {} / 类方法
+_FN_NODE_TYPES = (
+    'function_declaration',      # function foo() {}
+    'method_definition',         # class { foo() {} }
+    # lexical_declaration 内的 arrow_function 由下面单独处理 (export const fn = () => {})
+)
+
+
+def _fn_name_from_node(node, source_bytes):
+    """Extract a function's name from a definition node, or None."""
+    if node.type == 'function_declaration':
+        name_node = node.child_by_field_name('name')
+        return _node_text(name_node, source_bytes) if name_node else None
+    if node.type == 'method_definition':
+        name_node = node.child_by_field_name('name')
+        return _node_text(name_node, source_bytes) if name_node else None
+    if node.type == 'lexical_declaration':
+        # export const fnName = (...) => { ... }  /  const fnName = function() {}
+        for child in node.children:
+            if child.type == 'variable_declarator':
+                name_node = child.child_by_field_name('name')
+                value = child.child_by_field_name('value')
+                if name_node and value and value.type in ('arrow_function', 'function_expression'):
+                    return _node_text(name_node, source_bytes)
+    return None
+
+
+def ts_extract_calls(content):
+    """Extract function-level call edges from TS/JS/Vue-script source.
+
+    Walks every function definition in the AST, then reuses
+    _find_calls_in_function_ast to collect each function's callees.
+
+    Returns:
+        [(from_fn, callee), ...] — caller function name and callee text.
+        Callee text may be qualified (e.g. 'obj.method', 'useStore()');
+        callers choose how to resolve. Tree-sitter unavailable → [] .
+    """
+    if not _TS_AVAILABLE or not content:
+        return []
+    try:
+        source = content.encode('utf-8')
+        tree = _PARSER.parse(source)
+    except Exception:
+        return []
+
+    edges = []
+    # Collect every function definition (named + arrow + method).
+    fns = []
+
+    def collect_fns(node):
+        if node.type in _FN_NODE_TYPES:
+            fns.append(node)
+        # lexical_declaration may hold `const fn = () => {}` — handled in _fn_name_from_node
+        if node.type == 'lexical_declaration':
+            fns.append(node)
+        for child in node.children:
+            collect_fns(child)
+
+    collect_fns(tree.root_node)
+
+    for fn_node in fns:
+        caller = _fn_name_from_node(fn_node, source)
+        if not caller:
+            continue
+        for callee, _full in _find_calls_in_function_ast(fn_node, source):
+            # Skip trivial self-references and empty callees.
+            callee = callee.strip()
+            if callee and callee != caller:
+                edges.append((caller, callee))
+    return edges
+
+
+def ts_extract_imports(content):
+    """Extract import edges from TS/JS source (local module imports only).
+
+    Returns:
+        [(imported_name, source_path), ...] for local imports (relative paths
+        or @/ #/ alias). Third-party bare specifiers (e.g. 'vue', 'axios') are
+        filtered out — they aren't part of the project graph.
+    """
+    if not content:
+        return []
+    out = []
+    # Generic local import: import { a, b } from './x' | import x from '@/y' | import * as z from '../z'
+    for m in re.finditer(
+        r"import\s+(?:\{([^}]*)\}|\*\s+as\s+(\w+)|(\w+))\s*(?:,\s*\{([^}]*)\})?\s+from\s+['\"]([^'\"]+)['\"]",
+        content,
+    ):
+        names_group = m.group(1) or m.group(4)  # named imports {a, b}
+        default_name = m.group(2) or m.group(3)  # * as z  or  default x
+        src = (m.group(5) or '').strip()
+        # Only local imports (relative or alias); skip bare packages like 'vue'.
+        if not src or not (src.startswith('.') or src.startswith('@/') or src.startswith('#/')):
+            continue
+        names = []
+        if names_group:
+            names.extend(n.strip().split(' as ')[-1].strip() for n in names_group.split(',') if n.strip())
+        if default_name:
+            names.append(default_name.strip())
+        for name in names:
+            if name:
+                out.append((name, src))
+    return out
+
+
 def ts_build_api_fn_table(api_dir):
     """Tree-sitter version: build {fnName: {url, verb, file}} from api/*.ts.
 

package/templates/qoder/scripts/domain/kg/storage/kg_duckdb.py

@@ -29,6 +29,7 @@ Schema:
 import json
 import os
 import sys
+import time
 
 import duckdb
 
@@ -102,6 +103,19 @@ def init_schema(con):
             value TEXT
         )
     """)
+    # ── 文件签名表 (P0: fingerprint 三级增量) ──
+    # 记录每个被索引文件的 content_hash (全文) 和 structural_hash (去注释去空白)。
+    # 增量构建前比对: NONE=完全没变; COSMETIC=只改注释/空白(跳过重算);
+    # STRUCTURAL=真改结构(正常重算)。图谱只记拓扑不记实现 → COSMETIC 跳过 100% 安全。
+    con.execute("""
+        CREATE TABLE IF NOT EXISTS file_signatures (
+            file_path TEXT PRIMARY KEY,
+            content_hash TEXT,
+            structural_hash TEXT,
+            level TEXT,
+            updated_at TEXT
+        )
+    """)
     # ── 搜索层表 ──
     con.execute("CREATE TABLE IF NOT EXISTS keywords(keyword TEXT, file_path TEXT)")
     con.execute("CREATE TABLE IF NOT EXISTS endpoints(endpoint TEXT PRIMARY KEY, controller_file TEXT)")
@@ -182,6 +196,8 @@ def init_schema(con):
     con.execute("CREATE INDEX IF NOT EXISTS idx_alias ON aliases(alias)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_edge_from ON edges(from_id)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_edge_to ON edges(to_id)")
+    # P1: 复合索引加速按类型的边查询 (calls/imports 边量大, multi_hop 按类型过滤)
+    con.execute("CREATE INDEX IF NOT EXISTS idx_edge_from_type ON edges(from_id, edge_type)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_kw ON keywords(keyword)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_page_type ON pages(page_type)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_field ON fields(field)")
@@ -192,6 +208,7 @@ def init_schema(con):
     con.execute("CREATE INDEX IF NOT EXISTS idx_learn_dev ON learning_events(dev)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_learn_pat_cat ON learning_patterns(category)")
     con.execute("CREATE INDEX IF NOT EXISTS idx_wf_mod ON workflows(module)")
+    con.execute("CREATE INDEX IF NOT EXISTS idx_fsig ON file_signatures(file_path)")
 
 
 def _sql_escape(val):
@@ -244,6 +261,32 @@ def delete_edges_from(con, from_id, edge_type=None):
         con.execute("DELETE FROM edges WHERE from_id = ?", [from_id])
 
 
+def upsert_file_signature(con, file_path, content_hash, structural_hash, level):
+    """Insert or replace a file's signature (P0: fingerprint incremental).
+
+    Called after classifying a changed file; stored so the next incremental
+    run can compare and skip COSMETIC-only changes.
+    """
+    con.execute(
+        "INSERT OR REPLACE INTO file_signatures VALUES (?, ?, ?, ?, ?)",
+        [file_path, content_hash, structural_hash, level, str(int(time.time()))]
+    )
+
+
+def get_file_signature(con, file_path):
+    """Read a file's stored signature, or None if never seen."""
+    row = con.execute(
+        "SELECT content_hash, structural_hash FROM file_signatures WHERE file_path = ?",
+        [file_path]
+    ).fetchone()
+    return {'content_hash': row[0], 'structural_hash': row[1]} if row else None
+
+
+def clear_file_signatures(con):
+    """Wipe all signatures (full rebuild resets the baseline)."""
+    con.execute("DELETE FROM file_signatures")
+
+
 def resolve_entity(con, alias):
     """Resolve any alias to its canonical entity ID."""
     row = con.execute(

package/templates/qoder/scripts/domain/requirement/req.py

@@ -29,7 +29,7 @@ for _ in range(10):
         break
 if _cp not in _s.path: _s.path.insert(0, _cp)
 from bootstrap import setup; setup()
-from foundation.core.paths import get_repo_root
+from foundation.core.paths import get_repo_root
 
 import os
 import sys
@@ -164,10 +164,43 @@ def cmd_promote(req_id, dev=None):
     return 0
 
 
-def cmd_publish(req_id, dev=None):
-    """发布 = promote + 发禅道。PM 只用这个。"""
+def _parse_prd_meta(prd_path):
+    """从 PRD 提取发布所需元信息: 标题(首个#行) + spec(正文) + 可选 product/plan/build。
+
+    PRD 可在首行用 frontmatter 风格标注禅道目标:
+      <!-- zentao: product=1 plan=12 build=8 -->
+    没标则返回 None, 由发布方补。
+    """
+    text = prd_path.read_text(encoding="utf-8")
+    meta = {"product_id": None, "plan_id": None, "build_id": None,
+            "title": "", "spec": ""}
+    for line in text.splitlines():
+        s = line.strip()
+        if s.startswith("<!--") and "zentao" in s:
+            for kv in s.replace("<!--", "").replace("-->", "").split():
+                if "=" in kv:
+                    k, v = kv.split("=", 1)
+                    kk = {"product": "product_id", "plan": "plan_id", "build": "build_id"}.get(k)
+                    if kk and v.isdigit():
+                        meta[kk] = int(v)
+    # 标题: 第一个非空 # 行; spec: 全文(截断到 8000 防 API 截断)
+    for line in text.splitlines():
+        if line.startswith("# ") and line[2:].strip():
+            meta["title"] = line[2:].strip()[:80]
+            break
+    meta["spec"] = text[:8000]
+    return meta
+
+
+def cmd_publish(req_id, dev=None, product_id=None, plan_id=None, build_id=None, confirm=False):
+    """发布 = promote + 发禅道(建需求+关联计划+纳入版本)。
+
+    默认 dry-run(只打印不写禅道); --confirm 才真发。
+    产品/计划/版本: 优先用参数 > PRD里<!-- zentao: -->标注 > 缺则停在第该步问PM。
+    用 ZentaoClient 直连 HTTP(不走 MCP), AI 只触发一次, 省 token。
+    """
     dev = dev or get_developer(BASE) or "unknown"
-    # 先确保在 outputs (不在则 promote)
+    # 1. promote (草稿→产出)
     out_found = [e for e in find_req_dirs(req_id, dev, BASE) if e["area"] == "outputs"]
     if not out_found:
         print("草稿 → 产出...")
@@ -179,30 +212,92 @@ def cmd_publish(req_id, dev=None):
         print("✗ 发布失败: 产出区找不到 %s" % req_id)
         return 1
     out_path = out_found[0]["path"]
-    print()
-    print("发禅道 (从产出区: %s)" % out_path)
-    print("-" * 40)
-    # 找禅道 MCP 创建需求
-    try:
-        sys.path.insert(0, str(BASE / ".qoder" / "scripts" / "mcp"))
-        # 禅道发布: 读 PRD, 调 zentao MCP 建 story
-        prd_file = None
-        for f in out_path.iterdir():
-            if f.is_file() and (f.name.endswith(".md") and "prd" in f.name.lower()):
+
+    # 2. 找 PRD
+    prd_file = None
+    for f in out_path.iterdir():
+        if f.is_file() and f.suffix == ".md" and not f.name.startswith("_"):
+            if "prd" in f.name.lower() or prd_file is None:
                 prd_file = f
-                break
-            if f.is_file() and f.suffix == ".md" and not f.name.startswith("_"):
-                prd_file = f  # 第一个 md 当 PRD
-        if prd_file:
-            print("  PRD: %s" % prd_file.name)
-        print()
-        print("⚠️ 禅道发布需要 QoderWork 的禅道 MCP (mcp__qoder-zentao__create_story)。")
-        print("   AI 会读产出的 PRD, 调禅道建需求。")
-        print("   如果你在 QoderWork 里说'%s 发布', AI 会自动完成这步。" % req_id)
+    if not prd_file:
+        print("✗ 发布失败: 产出区没有 .md (PRD)。")
+        return 1
+    meta = _parse_prd_meta(prd_file)
+    pid = product_id or meta["product_id"]
+    plan = plan_id or meta["plan_id"]
+    build = build_id or meta["build_id"]
+
+    mode = "★真发" if confirm else "DRY-RUN(只预览不写禅道, 加 --confirm 真发)"
+    print("发禅道 [%s]  需求: %s  PRD: %s" % (mode, req_id, prd_file.name))
+    print("-" * 50)
+    print("  标题: %s" % meta["title"] or "(未提取到#标题)")
+    print("  产品: %s" % (pid if pid else "⚠️ 未指定 — 用 --product=N 或 PRD标 <!-- zentao: product=N -->"))
+
+    if not pid:
+        print("\n✗ 缺产品ID, 已停(禅道需求必须挂某产品)。")
+        print("  补: python req.py %s 发布 --product=N [--plan=M --build=K]" % req_id)
+        return 2
+    if not confirm:
+        print("\n  [预览] 将: 建 story(product=%s) → %s%s" % (
+            pid,
+            "关联计划#%s → " % plan if plan else "",
+            "纳入版本#%s" % build if build else ""))
+        print("  真发加 --confirm")
         return 0
+
+    # 3. 真发: 直连禅道 HTTP
+    try:
+        from foundation.integrations.zentao_client import ZentaoClient
     except Exception as e:
-        print("✗ 发布出错: %s" % e)
-        return 1
+        print("✗ 加载禅道客户端失败: %s" % e)
+        return 3
+    client = ZentaoClient.from_config()
+    if client is None:
+        print("✗ 禅道未配置(凭据/内网)。先 /wl-init 或检查 ~/.qoderwork/.secrets/zentao.env")
+        return 3
+    ok, msg = client.check_intranet()
+    if not ok:
+        print("✗ 禅道不可达: %s" % msg)
+        return 3
+
+    # 3a. 建 story
+    payload = {"title": meta["title"] or req_id, "spec": meta["spec"], "pri": 3, "category": "feature"}
+    r = client.api("POST", "/products/%s/stories" % pid, payload)
+    if r.status_code not in (200, 201):
+        print("✗ 建需求失败: %s %s" % (r.status_code, r.text[:120]))
+        return 3
+    story_id = r.json().get("id")
+    if not story_id:
+        print("✗ 建需求异常(无id): %s" % str(r.json())[:150])
+        return 3
+    print("  ✅ 需求已建 #%s" % story_id)
+
+    # 3b. 关联计划 (可选)
+    if plan:
+        r2 = client.api("POST", "/plans/%s/linkStory" % plan, {"stories": [story_id]})
+        if r2.status_code in (200, 201):
+            print("  ✅ 已关联计划 #%s" % plan)
+        else:
+            print("  ⚠️ 关联计划#%s 失败: %s (不影响,可手动)" % (plan, r2.status_code))
+
+    # 3c. 纳入版本 (可选)
+    if build:
+        r3 = client.api("POST", "/builds/%s/linkStory" % build, {"stories": [story_id]})
+        if r3.status_code in (200, 201):
+            print("  ✅ 已纳入版本 #%s" % build)
+        else:
+            print("  ⚠️ 纳入版本#%s 失败: %s (不影响,可手动)" % (build, r3.status_code))
+
+    # 3d. 回写 story_id 到 PRD (留痕, 防重复建)
+    try:
+        with open(prd_file, "a", encoding="utf-8") as fh:
+            fh.write("\n\n<!-- zentao: product=%s story=%s plan=%s build=%s -->\n" % (
+                pid, story_id, plan or 0, build or 0))
+    except Exception:
+        pass
+
+    print("\n🎉 发布完成! 禅道需求 #%s" % story_id)
+    return 0
 
 
 def main():
@@ -211,10 +306,21 @@ def main():
         return cmd_list()
     req_id = args[0]
     action = args[1] if len(args) > 1 else "show"
-    if action == "show":
+    # 发布支持 --product/--plan/--build/--confirm
+    if action in ("发布", "publish", "fabu"):
+        opts = {"product_id": None, "plan_id": None, "build_id": None, "confirm": False}
+        for a in args[2:]:
+            if a == "--confirm":
+                opts["confirm"] = True
+            elif a.startswith("--product="):
+                opts["product_id"] = int(a.split("=", 1)[1])
+            elif a.startswith("--plan="):
+                opts["plan_id"] = int(a.split("=", 1)[1])
+            elif a.startswith("--build="):
+                opts["build_id"] = int(a.split("=", 1)[1])
+        return cmd_publish(req_id, **opts)
+    elif action == "show":
         return cmd_show(req_id)
-    elif action in ("发布", "publish", "fabu"):
-        return cmd_publish(req_id)
     elif action == "promote":
         return cmd_promote(req_id)
     elif action == "list":