@hupan56/wlkj 3.1.32 → 3.3.0

package/templates/qoder/scripts/engine/poller.py

@@ -0,0 +1,219 @@
+"""引擎轮询器：后台轮询平台 pending 触发 → 认领 → 执行 → 回流 → 回填结果。
+
+这是"平台→引擎→平台"真闭环的引擎侧执行器：
+1. 轮询 GET /trigger/pending（带项目令牌）
+2. 认领 POST /trigger/{tid}/claim（原子锁）
+3. 执行：根据 command 调 MCP 取知识 + 生成产出（简化版：rag_search + 模板拼接）
+4. 回流：create_prd/submit_return
+5. 回填：PATCH /trigger/{tid}（mcp_tools_called/knowledge_used）
+
+用法：
+  python poller.py --config ../mcp_config.json --interval 10
+
+注：完整版需要接 LLM（qwen-plus）生成 PRD/原型。当前是简化版（rag_search + 模板），
+验证闭环链路。接 LLM 后把 _execute 里的模板拼接换成 cap.mcp.call("ask_corpus",...) 生成。
+"""
+import json
+import time
+import urllib.request
+import urllib.error
+import argparse
+import os
+import sys
+from pathlib import Path
+
+
+def _load_config(config_path: str) -> dict:
+    with open(config_path, encoding="utf-8") as f:
+        return json.load(f)
+
+
+def _get_token(cfg: dict) -> str:
+    for srv in (cfg.get("mcpServers") or {}).values():
+        return srv.get("token", "")
+    return ""
+
+
+def _get_pid(cfg: dict) -> str:
+    for srv in (cfg.get("mcpServers") or {}).values():
+        env = srv.get("env") or {}
+        return env.get("WLKJ_PROJECT_ID", "")
+    return ""
+
+
+def _get_base(cfg: dict) -> str:
+    ep = cfg.get("return_endpoint") or {}
+    url = ep.get("url", "")
+    # 从 return_endpoint.url 提取 base（/api/projects 前面那段）
+    if "/api/" in url:
+        return url.split("/api/")[0]
+    for srv in (cfg.get("mcpServers") or {}).values():
+        u = srv.get("url", "")
+        if "/mcp" in u:
+            return u.split("/mcp")[0]
+    return "http://127.0.0.1:10010"
+
+
+def _api(base, method, path, token, body=None):
+    url = base + path
+    data = json.dumps(body).encode() if body else None
+    req = urllib.request.Request(url, data=data, method=method)
+    req.add_header("Content-Type", "application/json")
+    if token:
+        req.add_header("X-Engine-Token", token)
+    try:
+        with urllib.request.urlopen(req, timeout=30) as resp:
+            return resp.status, json.loads(resp.read().decode())
+    except urllib.error.HTTPError as e:
+        return e.code, json.loads(e.read().decode() or "{}")
+    except Exception as e:
+        return 0, {"error": str(e)}
+
+
+def _mcp_call(base, token, tool, args):
+    """通过 MCP JSON-RPC 调工具。"""
+    body = {"jsonrpc": "2.0", "id": 1, "method": "tools/call",
+            "params": {"name": tool, "arguments": args}}
+    data = json.dumps(body).encode()
+    req = urllib.request.Request(base + "/mcp", data=data, method="POST")
+    req.add_header("Content-Type", "application/json")
+    req.add_header("X-MCP-Token", token)
+    try:
+        with urllib.request.urlopen(req, timeout=60) as resp:
+            r = json.loads(resp.read().decode())
+            text = r.get("result", {}).get("content", [{}])[0].get("text", "")
+            return json.loads(text) if text else {}
+    except Exception as e:
+        return {"error": str(e)}
+
+
+def _execute(base, token, pid, command, args):
+    """执行触发的工作流（简化版：rag_search 取知识 + 模板拼 PRD + learn 写回）。
+    完整版应接 LLM（ask_corpus）生成自然语言 PRD。"""
+    query = (args or {}).get("query", "")
+    tools_called = []
+    knowledge_used = []
+
+    # 1) rag_search 取知识
+    if query:
+        r = _mcp_call(base, token, "rag_search", {"query": query, "top_k": 8})
+        tools_called.append("rag_search")
+        knowledge_used = [it.get("entity_id", "") for it in r.get("items", [])[:5]]
+        knowledge_text = "\n".join(
+            "- %s (%s)" % (it.get("text", "")[:60], it.get("entity_id", "")[:30])
+            for it in r.get("items", [])[:8]
+        )
+        # 1b) get_learnings 查之前学到的（反哺）
+        lr = _mcp_call(base, token, "get_learnings", {"project_id": pid, "limit": 5})
+        tools_called.append("get_learnings")
+        learnings_text = "\n".join(
+            "- [%s] %s" % (l.get("category",""), (l.get("pattern","")[:60]))
+            for l in (lr.get("items") or [])[:5]
+        ) or "(暂无学习记录)"
+    else:
+        knowledge_text = "(无关键词)"
+        learnings_text = ""
+
+    # 2) 根据 command 生成产出
+    if "prd" in command.lower():
+        prd_md = f"# {query} PRD（引擎自动生成）\n\n## 概述\n基于知识层自动生成的「{query}」需求文档。\n\n## 相关知识\n{knowledge_text}\n\n## 历史学习\n{learnings_text}\n\n## 功能\n（根据上述知识补充）"
+        # 回流
+        r = _mcp_call(base, token, "create_prd", {
+            "project_id": pid, "title": f"{query}PRD(引擎触发)", "content_md": prd_md, "status": "planning"
+        })
+        tools_called.append("create_prd")
+        # 学习写回：把这次的关键认知沉淀
+        _mcp_call(base, token, "learn", {"project_id": pid, "category": "rule",
+            "pattern": f"{query}: PRD已生成，涉及知识{len(knowledge_used)}条", "source": "wlkj-poller"})
+        tools_called.append("learn")
+        output = f"生成PRD: {query}PRD(引擎触发) + 学习沉淀"
+    elif "design" in command.lower():
+        html = f"<html><body><h1>{query}</h1><p>引擎自动生成原型</p></body></html>"
+        r = _mcp_call(base, token, "create_prototype", {
+            "project_id": pid, "feature": f"{query}(引擎触发)", "platform": "web", "html": html
+        })
+        tools_called.append("create_prototype")
+        output = f"生成原型: {query}(引擎触发)"
+    else:
+        # learn 写回
+        _mcp_call(base, token, "learn", {
+            "project_id": pid, "category": "rule", "pattern": f"{query}相关规则(引擎触发)",
+            "source": "wlkj-poller"
+        })
+        tools_called.append("learn")
+        output = f"执行命令: {command}"
+
+    return {"output": output, "tools": tools_called, "knowledge": knowledge_used}
+
+
+def poll_once(cfg):
+    """轮询一次：取 pending → 认领 → 执行 → 回填。"""
+    token = _get_token(cfg)
+    pid = _get_pid(cfg)
+    base = _get_base(cfg)
+    if not token or not pid:
+        print("[poller] 配置缺 token/project_id，跳过")
+        return
+
+    # 1) 查 pending
+    _, pending = _api(base, "GET", f"/api/projects/{pid}/trigger/pending", token)
+    items = pending.get("pending", [])
+    if not items:
+        return  # 无待执行
+
+    for item in items[:1]:  # 一次只处理 1 条
+        tid = item.get("triggerId")
+        cmd = item.get("command", "")
+        args = item.get("args", {})
+        print(f"[poller] 认领: {tid} {cmd} {args}")
+
+        # 2) claim
+        code, resp = _api(base, "POST", f"/api/projects/{pid}/trigger/workflow/{tid}/claim",
+                          token, {"engine_id": "poller-001"})
+        if code != 200:
+            print(f"[poller] 认领失败({code}): {resp}")
+            continue
+
+        # 3) 执行
+        t0 = time.time()
+        try:
+            result = _execute(base, token, pid, cmd, args)
+            status = "success"
+        except Exception as e:
+            result = {"output": str(e), "tools": [], "knowledge": []}
+            status = "failed"
+
+        # 4) patch 回填
+        _api(base, "PATCH", f"/api/projects/{pid}/trigger/workflow/{tid}", token, {
+            "status": status,
+            "output_summary": result["output"],
+            "knowledge_used": result["knowledge"],
+            "mcp_tools_called": result["tools"],
+            "duration_sec": int(time.time() - t0),
+        })
+        print(f"[poller] 完成: {status} → {result['output']} (tools={result['tools']})")
+
+
+def main():
+    parser = argparse.ArgumentParser(description="wlkj 引擎轮询器")
+    parser.add_argument("--config", default=str(Path(__file__).parent.parent.parent / "mcp_config.json"))
+    parser.add_argument("--interval", type=int, default=10, help="轮询间隔(秒)")
+    parser.add_argument("--once", action="store_true", help="只跑一次")
+    args = parser.parse_args()
+
+    cfg = _load_config(args.config)
+    print(f"[poller] 启动: project={_get_pid(cfg)} interval={args.interval}s")
+    print(f"[poller] 按 Ctrl+C 停止")
+
+    while True:
+        try:
+            poll_once(cfg)
+        except Exception as e:
+            print(f"[poller] 异常: {e}")
+        if args.once:
+            break
+        time.sleep(args.interval)
+
+
+if __name__ == "__main__":
+    main()

package/templates/qoder/scripts/foundation/core/paths.py

@@ -640,6 +640,108 @@ def get_module_spec_dir(module: Optional[str] = None) -> Path:
     return spec_dir
 
 
+# ── spec 检测 (v3.x wl-code 门禁依据) ──────────────────────────
+# 设计原则: 纯读函数, 不写文件不改状态, 任何调用都安全。
+# spec 只存 2 处: workspace/specs/REQ-{ID}-*.spec.md (全局) + 当前任务目录 spec.md。
+# status 从契约头读 (@contract spec v1 / status: draft|confirmed), 无头视同 draft。
+# ─────────────────────────────────────────────────────────────
+
+def get_spec_status(spec_path) -> str:
+    """读 spec 文件契约头的 status 字段。
+
+    返回: 'draft' | 'confirmed' | None(文件不存在/无法解析)
+    - 无 status 字段 或 无契约头 → 视同 'draft' (wl-code 走确认环节, 不直接写码)
+    - 文件不存在 → None (wl-code 视为无 spec, 触发生成)
+    """
+    import re
+    try:
+        text = open(spec_path, encoding="utf-8").read()
+    except (OSError, IOError, TypeError):
+        return None
+    # 直接正则取 @contract spec 头里的 status (不依赖 contract.py, 避免循环 import)
+    m = re.search(r"<!--\s*@contract\s+spec(?:\s+v\d+)?\s*(.*?)-->", text, re.S)
+    if not m:
+        return "draft"  # 无契约头 → 视同 draft (安全: 走确认环节)
+    body = m.group(1)
+    sm = re.search(r"^\s*status\s*:\s*(\S+)\s*$", body, re.M)
+    if not sm:
+        return "draft"  # 有头但无 status 字段 → draft
+    val = sm.group(1).strip().lower()
+    return val if val in ("draft", "confirmed") else "draft"
+
+
+def find_spec(req_id=None, developer_name=None, repo_root=None) -> list:
+    """按 REQ-ID 或当前任务找 spec 文件 (wl-code gate 的核心检测)。
+
+    查 2 处 (spec 不存时间桶):
+      A. workspace/specs/REQ-{ID}-*.spec.md  (全局 specs, glob 前缀匹配)
+      B. 当前任务目录的 spec.md             (无 req_id 时, 读 .current-task)
+
+    Args:
+        req_id: REQ-YYYY-NNN 形式。传了就只查 A; 不传则查 B (当前任务)。
+    Returns:
+        [{path, status, source-req}, ...] 按优先级 (confirmed 优先)
+        status: 'draft' | 'confirmed' (从契约头读, 无头=draft)
+    """
+    import re
+    if repo_root is None:
+        repo_root = PROJECT_ROOT
+    results = []
+
+    def _inspect(p):
+        """读一个 spec 文件, 返回它的元信息 dict 或 None。"""
+        try:
+            text = open(p, encoding="utf-8").read()
+        except (OSError, IOError):
+            return None
+        m = re.search(r"<!--\s*@contract\s+spec(?:\s+v\d+)?\s*(.*?)-->", text, re.S)
+        body = m.group(1) if m else ""
+        status_m = re.search(r"^\s*status\s*:\s*(\S+)\s*$", body, re.M)
+        status = status_m.group(1).strip().lower() if status_m else "draft"
+        status = status if status in ("draft", "confirmed") else "draft"
+        sreq_m = re.search(r"^\s*source-req\s*:\s*(\S+)\s*$", body, re.M)
+        source_req = sreq_m.group(1).strip() if sreq_m else None
+        return {"path": str(p), "status": status, "source-req": source_req}
+
+    # A. 时间桶 REQ-ID 容器 (spec-generator 主写入位置, 优先查)
+    #    复用 find_req_dirs 跨桶找到容器, 再在容器里找 *.spec.md
+    if req_id:
+        clean_m = re.match(r"(REQ-\d{4}-\d{3,})", str(req_id))
+        clean = clean_m.group(1) if clean_m else str(req_id)
+        # A1. 时间桶容器 (members/{dev}/{drafts|outputs}/{桶}/{REQ-ID}/)
+        for hit in find_req_dirs(clean, developer_name=developer_name, repo_root=repo_root):
+            for f in sorted(Path(hit["path"]).glob("*.spec.md")):
+                info = _inspect(f)
+                if info:
+                    results.append(info)
+        # A2. 兜底: 全局 .qoder/workspace/specs/ (老 spec 或不在桶里的)
+        specs_root = QODER_DIR / "workspace" / "specs"
+        if specs_root.is_dir():
+            for f in sorted(specs_root.glob("%s-*.spec.md" % clean)):
+                info = _inspect(f)
+                if info:
+                    results.append(info)
+            for f in sorted(specs_root.glob("*.spec.md")):
+                info = _inspect(f)
+                if info and info not in results and info.get("source-req") == clean:
+                    results.append(info)
+
+    # B. 当前任务目录的 spec.md (无 req_id 时主路径)
+    if not results:
+        ct = get_current_task()
+        if ct:
+            # ct 是相对 repo_root 的路径(如 workspace/tasks/xx), 但实际在 .qoder/ 下
+            task_spec = QODER_DIR / ct / "spec.md"
+            if task_spec.is_file():
+                info = _inspect(task_spec)
+                if info:
+                    results.append(info)
+
+    # 排序: confirmed 优先 (让 wl-code gate 先看到可放行的)
+    results.sort(key=lambda x: 0 if x["status"] == "confirmed" else 1)
+    return results
+
+
 def get_task_dir(slug: str) -> Path:
     """Get task directory by slug."""
     from datetime import datetime

package/templates/qoder/scripts/foundation/integrations/active_task.py

@@ -44,7 +44,8 @@ try:
     )
 except ImportError:
     _ENV_SESSION_KEYS = (
-        ("qoderwork", ("QODER_SESSION_ID",)),
+        ("qoder-desktop", ("QODER_DESKTOP", "QODER_IDE")),
+        ("qoder-work", ("QODER_SESSION_ID",)),
         ("codex", ("CODEX_SESSION_ID", "CODEX_THREAD_ID")),
         ("claude", ("CLAUDE_SESSION_ID", "CLAUDE_CODE_SESSION_ID")),
         ("cursor", ("CURSOR_SESSION_ID",)),

package/templates/qoder/scripts/orchestration/wlkj.py

@@ -57,6 +57,9 @@ DISPATCH = {
     # ── 需求 / PRD ──
     'req': 'domain/requirement/req.py',
     'archive-prd': 'domain/requirement/archive_prd.py',
+    # ── 回流平台 (引擎产出 → 平台 AI回流Tab) ──
+    # 用法: wlkj.py return prd <路径> <标题> | return prototype <路径> <功能名> [--platform web]
+    'return': 'domain/integration/return_to_platform.py',
     # ── 设计 ──
     'fill-prototype': 'domain/design/fill_prototype.py',
     'design-doc': 'domain/design/gen_design_doc.py',
@@ -118,6 +121,7 @@ def _usage():
         '  同步:      sync pull|push       (team_sync.py)',
         '  需求:      req <子命令>         (req.py, 需求生命周期)',
         '             archive-prd          (PRD 归档)',
+        '  回流平台:  return prd|prototype <文件> <标题> [--platform web]  (PRD/原型回流到平台 AI回流Tab)',
         '  设计:      fill-prototype <tpl> (真实数据预填原型)',
         '             design-doc           (生成 DESIGN.md)',
         '  评估/学习: eval <prd.md>        (eval_prd.py, EVA 评分)',

package/templates/qoder/scripts/protocol/mcp/zentao_mcp_server.py

@@ -190,7 +190,7 @@ class ZentaoMCPServer(BaseMCPServer):
             # fail-closed: 共享账号下无法判定归属 → 拒绝写, 防改错队友
             return ('🚫 未识别禅道身份, 无法校验归属, 已拒绝写操作(防改错队友)。\n'
                     '  修复: /wl-init 配置禅道账号, 或 member.json 加 "zentao_account"。')
-        r = _api('GET', '/%ss/%s' % (kind, item_id))
+        r = _api('GET', '/%s/%s' % ({'task': 'tasks', 'bug': 'bugs', 'story': 'stories'}.get(kind, kind + 's'), item_id))
         if r.status_code not in (200, 201):
             return None  # 查询失败不阻塞 (禅道权限兜底)
         data = r.json()
@@ -691,13 +691,23 @@ class ZentaoMCPServer(BaseMCPServer):
             pid = args.get('product_id', 1)
             path = '/products/%s/builds' % pid
             scope = '产品 %s' % pid
-        return self._safe_get(
-            path, None,
-            '%s 的版本 (%%d 个):' % scope,
-            lambda b: '  [%s] %s (date=%s)' % (
-                b.get('id'), str(b.get('name', ''))[:20], b.get('date', '')),
-            empty_msg='%s 暂无版本(build)。' % scope,
-        )
+        r = _api('GET', path, None)
+        # 禅道部分维度可能不支持 builds 端点(404 not found) → 给明确引导而非裸"查询失败"
+        if r.status_code == 404 and not (args.get('project_id') or args.get('execution_id') or args.get('product_id')):
+            return ('⚠️ 查版本需要指定维度(禅道无"全量版本"端点)。\n'
+                    '  常用: list_builds(project_id=N) 看项目级按周版本\n'
+                    '  或: list_builds(product_id=N) / list_builds(execution_id=N)')
+        if r.status_code not in (200, 201):
+            return '查询失败: %s (该维度可能无版本)' % r.status_code
+        data = r.json()
+        items = data.get('builds') if isinstance(data, dict) else None
+        if not isinstance(items, list) or not items:
+            return '%s 暂无版本(build)。' % scope
+        lines = ['%s 的版本 (%d 个):' % (scope, len(items))]
+        for b in items:
+            lines.append('  [%s] %s (date=%s)' % (
+                b.get('id'), str(b.get('name', ''))[:20], b.get('date', '')))
+        return '\n'.join(lines)
 
     @tool("get_build",
           "查版本/构建详情。例: get_build(build_id=8)",
@@ -1288,7 +1298,9 @@ class ZentaoMCPServer(BaseMCPServer):
             '可能权限不足或字段缺失')
 
     @tool("update_task",
-          "修改任务(名称/指派/工时/截止等)。权限不足返回提示不报错。例: update_task(task_id=301, name='导出PDF接口(改)', left=3)",
+          "修改任务(名称/指派/工时/截止/描述等)。权限不足返回提示不报错。"
+          "★spec 回填: 确认后的 spec 摘要可通过 desc 写入任务描述, 让禅道里能看到开发规格要点。"
+          "例: update_task(task_id=301, name='导出PDF接口(改)', left=3, desc='spec摘要...')",
           {"type": "object", "properties": {
               "task_id": {"type": "integer", "description": "任务ID"},
               "name": {"type": "string", "description": "新名称(可选)"},
@@ -1296,6 +1308,7 @@ class ZentaoMCPServer(BaseMCPServer):
               "estimate": {"type": "number", "description": "预计工时(可选)"},
               "left": {"type": "number", "description": "剩余工时(可选)"},
               "deadline": {"type": "string", "description": "截止日期(可选)"},
+              "desc": {"type": "string", "description": "任务描述(可选)。spec 回填用: 写 spec 摘要(接口清单/关键表/异常/AC映射) + 本地 spec 路径"},
           }, "required": ["task_id"]})
     def _t_update_task(self, args):
         tid = args.get('task_id', 0)
@@ -1303,11 +1316,11 @@ class ZentaoMCPServer(BaseMCPServer):
         if guard:
             return guard
         payload = {}
-        for k in ('name', 'assignedTo', 'estimate', 'left', 'deadline'):
+        for k in ('name', 'assignedTo', 'estimate', 'left', 'deadline', 'desc'):
             if args.get(k) is not None:
                 payload[k] = args[k]
         if not payload:
-            return '⚠️ 没有要更新的字段(可选: name/assignedTo/estimate/left/deadline)。'
+            return '⚠️ 没有要更新的字段(可选: name/assignedTo/estimate/left/deadline/desc)。'
         return self._safe_write(
             'PUT', '/tasks/%s' % tid, payload,
             '✅ 任务 #%s 已更新' % tid,

package/templates/qoder/scripts/protocol/transports/http.py

@@ -72,7 +72,11 @@ class RemoteHttpTransport:
             body["params"] = params
 
         data = json.dumps(body, ensure_ascii=False).encode("utf-8")
-        endpoint = self._url + "/mcp"
+        # 修复双重 /mcp：若 url 已含 /mcp 后缀则直接用，否则拼接。
+        # 历史问题: registry 配的 url 已是 http://host/mcp, 这里又拼 /mcp → /mcp/mcp → 404。
+        # 现在两端都安全: url 配 base 或带 /mcp 都能落到正确的 endpoint。
+        low = self._url.lower()
+        endpoint = self._url if low.endswith("/mcp") else (self._url + "/mcp")
 
         req = urllib.request.Request(
             endpoint,
@@ -81,6 +85,8 @@ class RemoteHttpTransport:
             method="POST",
         )
         if self._token:
+            # 平台 MCP 校验 X-MCP-Token（项目级令牌）；同时带 Authorization Bearer 兼容标准 MCP 客户端
+            req.add_header("X-MCP-Token", self._token)
             req.add_header("Authorization", "Bearer %s" % self._token)
 
         try:

package/templates/qoder/scripts/validation/eval/qwork_harness.py

@@ -15,7 +15,7 @@ qwork_harness.py — QoderWork 命令自动化测试框架 (P2)
   python qwork_harness.py "/wl-search 考勤"
   python qwork_harness.py "/wl-search 考勤" --auto-answer=0   # 选第1个
   python qwork_harness.py "/wl-search 考勤" --no-answer        # 只跑不等答
-  python qwork_harness.py "/wl-prd-full 用户管理" --auto-answer=1
+  python qwork_harness.py "/wl-prd 用户管理" --auto-answer=1
 
 依赖: websocket-client (pip install websocket-client)
 """

package/templates/qoder/scripts/validation/eval/report-commands.md

@@ -143,7 +143,7 @@ AskUserQuestion 在 transcript 里的真实生命周期:
 python qwork_harness.py "/wl-search 考勤"
 
 # 强制选项序号(0-based)
-python qwork_harness.py "/wl-prd-full 用户管理" --auto-answer=0
+python qwork_harness.py "/wl-prd 用户管理" --auto-answer=0
 
 # 只跑不代答(遇到提问就停)
 python qwork_harness.py "/wl-search 考勤" --no-answer
@@ -214,7 +214,7 @@ python qwork_harness.py "/wl-search 考勤" --json
 # 或直接 python qwork_harness.py "/wl-search 考勤" (注意 / 在 bash 下的转义)
 
 python qwork_harness.py "/wl-search 考勤"
-python qwork_harness.py "/wl-prd-full 用户管理" --auto-answer=0   # 强制选项序号
+python qwork_harness.py "/wl-prd 用户管理" --auto-answer=0   # 强制选项序号
 python qwork_harness.py "/wl-search 考勤" --no-answer              # 不代答
 python qwork_harness.py "/wl-search 考勤" --json                   # JSON 输出
 ```

package/templates/qoder/settings.json

@@ -1,15 +1,33 @@
 {
   "permissions": {
+    "defaultMode": "acceptEdits",
     "allow": [
-      "Bash(*)",
-      "Read(*)",
-      "Write(*)",
-      "Edit(*)",
-      "Glob(*)",
-      "Grep(*)",
-      "WebFetch(*)",
-      "WebSearch(*)",
-      "mcp__*"
+      "Read",
+      "Write",
+      "Edit",
+      "Glob",
+      "Grep",
+      "WebFetch",
+      "WebSearch",
+      "mcp__*",
+      "Bash(python:*)",
+      "Bash(python3:*)",
+      "Bash(py:*)",
+      "Bash(git:*)",
+      "Bash(npm:*)",
+      "Bash(npx:*)",
+      "Bash(node:*)",
+      "Bash(ls:*)",
+      "Bash(cat:*)",
+      "Bash(echo:*)",
+      "Bash(test:*)",
+      "Bash(mkdir:*)",
+      "Bash(cp:*)",
+      "Bash(mv:*)",
+      "Bash(find:*)",
+      "Bash(grep:*)",
+      "Bash(sed:*)",
+      "Bash(cd:*)"
     ],
     "deny": []
   },

package/templates/qoder/skills/design-import/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: design-import
-description: "把设计师的 Figma/Axure 设计稿录入工作流，生成设计规范 spec.json 并存入知识图谱。Import designer's Figma/Axure design into the pipeline as a style spec. "
-trigger: "user invokes /wl-* command explicitly"
+description: "把设计师的设计稿录入工作流，生成设计规范 spec.json 并存入知识图谱。蓝湖链接直读为主(精确提取颜色/尺寸/字体/切图)，无蓝湖可截图口述降级。/wl-design 预览模式走这里。"
+trigger: "被 /wl-design 预览模式内部调用(实现层)"
 ---
 
 
@@ -48,7 +48,7 @@ ls "$R/data/style/"*-design-spec.json 2>/dev/null   # 列所有 spec
 
 ## Step 0: 确认平台
 
-跟 /wl-prd-full 一样，先问：Web 管理端 / APP 移动端 / 两端都要？
+跟 /wl-prd 一样，先问：Web 管理端 / APP 移动端 / 两端都要？
 **问了就停，等设计师回答。**
 
 ## Step 1: 收集设计信息

package/templates/qoder/skills/design-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: design-review
 description: "评审设计交付物的完整性。Review design artifacts for completeness. "
-trigger: "user invokes /wl-* command explicitly"
+trigger: "被 /wl-design 评审模式内部调用(实现层)"
 ---
 
 

package/templates/qoder/skills/prd-generator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prd-generator
-description: "生成 PRD + 平台匹配的原型。Generate PRD with platform-aware prototype. "
-trigger: "user invokes /wl-* command explicitly"
+description: "/wl-prd 完整档/快速档的实现层。生成 PRD + 平台匹配的原型,带 EVA 质量门禁。"
+trigger: "被 /wl-prd 完整/快速模式内部调用(实现层,不直接响应自然语言)"
 ---
 
 
@@ -16,8 +16,8 @@ PY=$(python --version >/dev/null 2>&1 && echo python || echo python3)
 
 # PRD Generator Skill
 
-> 📌 **主入口：`/wl-prd-full`（正经需求）/ `/wl-prd-quick`（小改动）命令。** 本 skill 是它们的实现层 + Quest/QoderWork 自然语言路由。
-> 两者功能等价，优先用 `/wl-prd-full` 或 `/wl-prd-quick`（参数提示更全、更稳定）。
+> 📌 **主入口：`/wl-prd` 命令（完整档 / 快速档 / 评审 三模式）。** 本 skill 是完整/快速模式的实现层 + Quest/QoderWork 自然语言路由。
+> 命令见 `.qoder/commands/wl-prd.md`（参数提示更全、更稳定）。
 > **模块契约**（输入/输出/校验）：`.qoder/contracts/prd.md`
 > **第一性原理：又快又准**（快=并行+砍模式，准=语义归档+质量锁）
 > **定位：专注"已确定需求"的落地。** 探索/调研/规划/对标已移交 `/wl-insight`，

package/templates/qoder/skills/prd-review/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prd-review
 description: "评审 PRD 完整性与质量。Review PRD for completeness and quality. "
-trigger: "user invokes /wl-* command explicitly"
+trigger: "被 /wl-prd 评审模式内部调用(实现层)"
 ---
 
 

package/templates/qoder/skills/prototype-generator/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: prototype-generator
 description: "生成匹配项目 UI 风格的交互式 HTML 原型（Web 端 fywl-ui 用 Vben Admin + Ant Design Vue；APP 端 Carmg-H5 用 Vant 3）。Generate interactive HTML prototypes matching project UI style. "
-trigger: "user invokes /wl-* command explicitly"
+trigger: "被 /wl-prd 或 /wl-design 原型生成内部调用(实现层)"
 ---
 
 
@@ -37,7 +37,7 @@ Generate production-ready HTML prototypes that match the project's actual UI sty
 
 本 skill **只在用户明确选择"画原型"后才进入**。
 
-- 如果上游 `/wl-prd-full` 或 `/wl-prd` 在「批量确认」环节已决定**不画**（PRD 第 1 行
+- 如果上游 `/wl-prd` 在「批量确认」环节已决定**不画**（PRD 第 1 行
   `@contract` 头标记 `prototype: none`），**立即退出本 skill**，不生成任何 HTML。
 - 如果上游没有 contract 头（独立调用本 skill），**先问用户**：
   `这个需求要画原型吗？(画 / 不画)`
@@ -50,7 +50,7 @@ Generate production-ready HTML prototypes that match the project's actual UI sty
 ---
 ## Step 0: Know the Platform
 
-The platform MUST already be decided (asked by /wl-prd-full Step 0).
+The platform MUST already be decided (asked by /wl-prd Step 0).
 If you don't know it, STOP and ask the user (Web 管理端 / APP 移动端 / 两端都要).
 
 | Platform | Project | Template | Design Tokens |

package/templates/qoder/skills/spec-coder/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: spec-coder
 description: "严格按开发 Spec 实现代码。Implement code strictly following development Spec. 需用户确认（DANGEROUS）。"
-trigger: "user invokes /wl-* command explicitly"
+trigger: "被 /wl-code 内部调用(实现层)"
 ---