@hupan56/wlkj 3.3.0 → 3.3.1

package/templates/qoder/scripts/capability/caps/__init__.py

@@ -11,9 +11,9 @@ from .repo import RepoCap, NoOpRepoCap
 from .identity import IdentityCap, NoOpIdentityCap
 from .context import ContextCap, NoOpContextCap
 from .cron import CronCap, NoOpCronCap
-from .notify import NotifyCap, NoOpNotifyCap
+from .notify import NotifyCap, NoOpNotifyCap, WebhookNotifyCap, default_notify
 from .present import PresentCap, NoOpPresentCap
-from .sandbox import SandboxCap, NoOpSandboxCap
+from .sandbox import SandboxCap, NoOpSandboxCap, SubprocessSandboxCap, default_sandbox
 
 __all__ = [
     "MemoryCap", "NoOpMemoryCap",
@@ -21,7 +21,7 @@ __all__ = [
     "IdentityCap", "NoOpIdentityCap",
     "ContextCap", "NoOpContextCap",
     "CronCap", "NoOpCronCap",
-    "NotifyCap", "NoOpNotifyCap",
+    "NotifyCap", "NoOpNotifyCap", "WebhookNotifyCap", "default_notify",
     "PresentCap", "NoOpPresentCap",
-    "SandboxCap", "NoOpSandboxCap",
+    "SandboxCap", "NoOpSandboxCap", "SubprocessSandboxCap", "default_sandbox",
 ]

package/templates/qoder/scripts/capability/caps/notify.py

@@ -11,6 +11,9 @@ NotifyCap —— IM 通知能力契约。
 """
 from __future__ import annotations
 
+import json
+import os
+import urllib.request
 from typing import Protocol, runtime_checkable
 
 
@@ -39,3 +42,64 @@ class NoOpNotifyCap:
 
     def list_channels(self) -> list[dict]:
         return []
+
+
+class WebhookNotifyCap:
+    """真实通知 adapter（#17）：POST 消息到配置的 IM webhook（飞书/企业微信/钉钉）。
+
+    webhook 从 env WLKJ_NOTIFY_WEBHOOKS 解析：
+      "default=https://open.feishu.cn/...,review=https://..." 或 JSON '{"default":"..."}'
+    用 stdlib urllib（宿主脚本可能无 httpx/requests），POST 通用 text payload。
+    available 仅当至少配了一个 webhook，否则 False（优雅降级 NoOp，不谎报）。
+    """
+
+    def __init__(self) -> None:
+        self._channels: dict[str, str] = self._load()
+
+    def _load(self) -> dict[str, str]:
+        raw = os.environ.get("WLKJ_NOTIFY_WEBHOOKS", "").strip()
+        if not raw:
+            return {}
+        if raw.startswith("{"):  # JSON 形式
+            try:
+                d = json.loads(raw)
+                return {str(k): str(v) for k, v in d.items() if v}
+            except Exception:
+                return {}
+        out: dict[str, str] = {}
+        for pair in raw.split(","):
+            if "=" in pair:
+                k, v = pair.split("=", 1)
+                k, v = k.strip(), v.strip()
+                if v:
+                    out[k] = v
+        return out
+
+    @property
+    def available(self) -> bool:
+        return len(self._channels) > 0
+
+    def send(self, channel: str, message: str) -> bool:
+        url = self._channels.get(channel) or self._channels.get("default")
+        if not url:
+            return False
+        try:
+            # 通用 text payload（飞书 msg_type/content；钉钉/企微也兼容 text 字段）
+            payload = json.dumps({"msg_type": "text", "content": {"text": message}}).encode("utf-8")
+            req = urllib.request.Request(url, data=payload,
+                                         headers={"Content-Type": "application/json"})
+            with urllib.request.urlopen(req, timeout=5) as r:
+                return getattr(r, "status", 200) == 200
+        except Exception:
+            return False  # IM 不可达不阻塞工作流
+
+    def list_channels(self) -> list[dict]:
+        return [{"channel": k, "configured": bool(v)} for k, v in self._channels.items()]
+
+
+def default_notify() -> NotifyCap:
+    """工厂：配了 webhook→WebhookNotifyCap；否则 NoOpNotifyCap。"""
+    cap = WebhookNotifyCap()
+    if cap.available:
+        return cap  # type: ignore[return-value]
+    return NoOpNotifyCap()  # type: ignore[return-value]

package/templates/qoder/scripts/capability/caps/sandbox.py

@@ -13,6 +13,8 @@ SandboxCap —— 安全执行能力契约。
 """
 from __future__ import annotations
 
+import os
+import subprocess
 from typing import Protocol, runtime_checkable
 
 
@@ -41,3 +43,39 @@ class NoOpSandboxCap:
 
     def approval_mode(self) -> str:
         return "suggest"
+
+
+class SubprocessSandboxCap:
+    """真实沙箱 adapter（#17）：子进程执行 + 超时强杀 + stdout/stderr/returncode 捕获。
+
+    无 docker 时的进程级隔离（超时强杀 + 输出捕获 + cwd 隔离），全平台可用。
+    docker 容器级隔离（FS/网络限制）后续可加 DockerSandboxCap，工厂按 env 切换。
+    available=True（subprocess 全平台可用）。
+    """
+
+    available = True
+
+    def run(self, command: str, cwd: str | None = None, timeout: int = 60) -> dict:
+        try:
+            # errors='replace' 健壮化：Windows 命令常输出 GBK 中文，UTF-8 解码会崩；
+            # replace 不崩（个别字符显示?），比 exec_error 丢全部输出好。
+            p = subprocess.run(command, shell=True, cwd=cwd, timeout=timeout,
+                               capture_output=True, text=True, errors="replace")
+            return {"ok": p.returncode == 0, "stdout": p.stdout,
+                    "stderr": p.stderr, "returncode": p.returncode}
+        except subprocess.TimeoutExpired:
+            return {"ok": False, "reason": "timeout(%ds)" % timeout, "returncode": -1}
+        except Exception as e:  # 命令不存在 / 权限 等
+            return {"ok": False, "reason": "exec_error: %s" % str(e)[:200], "returncode": -1}
+
+    def approval_mode(self) -> str:
+        return os.environ.get("WLKJ_APPROVAL_MODE", "suggest")
+
+
+def default_sandbox() -> SandboxCap:
+    """工厂：env WLKJ_SANDBOX=off→NoOp；docker(占位)→Subprocess 兜底；默认 Subprocess。"""
+    mode = os.environ.get("WLKJ_SANDBOX", "subprocess").lower()
+    if mode == "off":
+        return NoOpSandboxCap()  # type: ignore[return-value]
+    # docker 模式暂未实现容器隔离，先兜底 Subprocess（避免谎报容器级安全）
+    return SubprocessSandboxCap()  # type: ignore[return-value]

package/templates/qoder/scripts/capability/present_html.py

@@ -0,0 +1,68 @@
+# -*- coding: utf-8 -*-
+"""present_html.py — 富展示 HTML 统一入口（cap.present 双轨）。
+
+模式（抄 usability_score.py --html）：
+  1. QoderWork（cap.present.available）→ cap.present.widget(html) 嵌入对话流
+  2. 降级 → 落盘 workspace/members/{dev}/journal/{name}-{ts}.html
+  3. 最终兜底 → stdout
+
+所有命令的富展示（impact/coverage/feature/report 看板）统一调 present(html, name)，
+不在各自脚本重复 widget+落盘逻辑。复用点：caps/present.py PresentCap + adapters/qw.py QwPresentCap。
+"""
+import os
+import sys
+from pathlib import Path
+
+
+def _resolve_repo(repo_root=None):
+    if repo_root:
+        return Path(repo_root)
+    env = os.environ.get("QODER_REPO") or os.environ.get("WLKJ_REPO")
+    if env:
+        return Path(env)
+    p = Path(__file__).resolve()
+    for parent in p.parents:
+        if (parent / ".qoder").is_dir() or (parent / "packages").is_dir():
+            return parent
+    return p.parent
+
+
+def _read_dev(repo):
+    f = repo / ".qoder" / ".developer"
+    if f.is_file():
+        for line in f.read_text(encoding="utf-8").splitlines():
+            if "name=" in line:
+                return line.split("name=", 1)[1].strip().split()[0]
+    return os.environ.get("QODER_DEV", "") or "shared"
+
+
+def present(html, name="dashboard", repo_root=None, dev=None):
+    """展示 HTML：QoderWork 嵌入对话；降级落盘 journal；兜底 stdout。返回 (sinked, path)。"""
+    repo = _resolve_repo(repo_root)
+    # 1. QoderWork widget（富宿主嵌入对话流）
+    try:
+        scripts_dir = str(repo / ".qoder" / "scripts")
+        if scripts_dir not in sys.path:
+            sys.path.insert(0, scripts_dir)
+        from capability.registry import resolve
+        cap = resolve()
+        if getattr(cap.present, "available", False):
+            if cap.present.widget(html):
+                return True, None
+    except Exception:
+        pass
+    # 2. 降级落盘
+    try:
+        out_dev = dev or _read_dev(repo)
+        out = repo / "workspace" / "members" / out_dev / "journal"
+        out.mkdir(parents=True, exist_ok=True)
+        from datetime import datetime
+        import re
+        safe_name = re.sub(r'[\\/:*?"<>|]', "_", name)  # Windows 非法字符清洗
+        fp = out / ("%s-%s.html" % (safe_name, datetime.now().strftime("%Y%m%d-%H%M%S")))
+        fp.write_text(html, encoding="utf-8")
+        print("[HTML] 已落盘: %s" % fp)
+        return False, str(fp)
+    except Exception:
+        print(html)
+        return False, None

package/templates/qoder/scripts/capability/registry.py

@@ -196,7 +196,9 @@ def _resolve_cron(host: str):
 
 
 def _resolve_notify(host: str):
-    return NoOpNotifyCap()
+    """L2 通知 —— 配了 WLKJ_NOTIFY_WEBHOOKS→WebhookNotifyCap(飞书/企微/钉钉);否则 NoOp 降级。"""
+    from .caps.notify import default_notify
+    return default_notify()
 
 
 def _resolve_present(host: str):
@@ -211,7 +213,9 @@ def _resolve_present(host: str):
 
 
 def _resolve_sandbox(host: str):
-    return NoOpSandboxCap()
+    """L2 安全执行 —— env WLKJ_SANDBOX≠off→SubprocessSandboxCap(进程级隔离+超时);off→NoOp。"""
+    from .caps.sandbox import default_sandbox
+    return default_sandbox()
 
 
 def _resolve_mcp(host: str):

package/templates/qoder/scripts/capability/registry_mcp.py

@@ -39,7 +39,7 @@ from protocol.transports import get_transport, Transport, NoOpTransport, ToolRes
 # -----------------------------------------------------------------------------
 # 历史 bug: mcp_config.json / registry_mcp_config.json 是"死配置"（全仓 0 读取），
 # registry 用硬编码 SERVERS。改配置文件不生效。
-# 现在: 优先读 wlinkj-workflow/mcp_config.json 的 mcpServers，读不到才 fallback。
+# 现在: 优先读 .qoder/mcp_config.json 的 mcpServers，读不到才 fallback。
 # =============================================================================
 # 配置文件中知识层 server 的别名映射（统一命名，两边都支持）：
 #   mcp_config.json 里叫 "wlinkj-knowledge"，本地硬编码叫 "qoder-knowledge-graph"。
@@ -51,7 +51,7 @@ _KNOWLEDGE_SERVER_ALIASES = ["wlinkj-knowledge", "qoder-knowledge-graph"]
 SERVERS: dict[str, dict] = {
     "qoder-knowledge-graph": {
         "kind": "http",
-        "url": "http://127.0.0.1:10010/mcp",
+        "url": os.environ.get("WLKJ_BASE_URL", "http://10.89.7.120") + "/mcp",
         "note": "知识图谱。已改为 http 模式，指向资产平台 MCP 服务（POST /mcp JSON-RPC）",
     },
     "qoder-zentao": {
@@ -73,13 +73,11 @@ SERVERS: dict[str, dict] = {
 
 
 def _mcp_config_path() -> Path:
-    """定位 wlinkj-workflow/mcp_config.json（在仓库根下）。"""
+    """定位 mcp_config.json（在仓库根/宿主下）。"""
     repo = _get_repo_root()
-    # registry_mcp.py 在 .../scripts/capability/, mcp_config.json 在 wlinkj-workflow/
-    # 仓库根可能就是 wlinkj-workflow/, 或是其上层。两级查找。
+    # registry_mcp.py 在 .../scripts/capability/, mcp_config.json 在宿主根（.qoder）。
     for cand in [
         repo / "mcp_config.json",
-        repo / "wlinkj-workflow" / "mcp_config.json",
         repo / "registry_mcp_config.json",
     ]:
         if cand.is_file():

package/templates/qoder/scripts/domain/integration/return_to_platform.py

@@ -7,7 +7,7 @@ integration.return_to_platform —— 引擎产出回流平台的统一通道。
 历史断点（已修）:
     引擎产出 PRD/原型只写本地 workspace/members/{dev}/drafts/，永不回平台，
     平台 AI回流 Tab 永远空。原因: 全仓 grep submit_return/create_prd/create_prototype
-    在 wlinkj-workflow 下 0 匹配 —— 引擎根本不知道有回流这回事。
+    在 .qoder 下 0 匹配 —— 引擎根本不知道有回流这回事。
 
 本模块提供两条回流路径，任一可用即回流成功:
     1. MCP 写工具（首选）: cap.mcp.call("submit_return"|"create_prd"|"create_prototype")
@@ -20,11 +20,12 @@ integration.return_to_platform —— 引擎产出回流平台的统一通道。
 """
 from __future__ import annotations
 
+import os
 from typing import Optional
 
 
 def _load_mcp_config() -> dict:
-    """读 wlinkj-workflow/mcp_config.json，失败返回空 dict。"""
+    """读 .qoder/mcp_config.json，失败返回空 dict。"""
     import json as _json
     from pathlib import Path
 
@@ -35,7 +36,6 @@ def _load_mcp_config() -> dict:
         repo = Path(__file__).resolve().parent.parent.parent.parent.parent
     for cand in [
         repo / "mcp_config.json",
-        repo / "wlinkj-workflow" / "mcp_config.json",
     ]:
         try:
             if cand.is_file():
@@ -122,7 +122,7 @@ def _via_http(payload: dict) -> tuple[bool, str]:
 
 
 def _platform_base() -> str:
-    """平台 base url（http://127.0.0.1:10010），从 mcp_config server url 推导。"""
+    """平台 base url（默认 http://10.89.7.120 云），从 mcp_config server url 推导。"""
     from urllib.parse import urlparse
     cfg = _load_mcp_config()
     for srv in (cfg.get("mcpServers") or {}).values():
@@ -134,7 +134,7 @@ def _platform_base() -> str:
     if ep:
         p = urlparse(ep)
         return "%s://%s" % (p.scheme, p.netloc)
-    return "http://127.0.0.1:10010"
+    return os.environ.get("WLKJ_BASE_URL", "http://10.89.7.120")
 
 
 def _engine_token() -> Optional[str]:
@@ -175,7 +175,8 @@ def _post_to_platform(path: str, payload: dict, timeout: int = 15) -> tuple[bool
 def submit_prd(prd_path: str, title: str, source: str = "wlkj/wl-prd",
                platform: Optional[str] = None,
                version_id: Optional[str] = None,
-               requirement_id: Optional[str] = None) -> dict:
+               requirement_id: Optional[str] = None,
+               confidence: Optional[float] = None) -> dict:
     """回流一份 PRD 到平台。
 
     优先 create_prd（写 PRD 表），失败再 submit_return（写 returns 待审核），
@@ -202,6 +203,8 @@ def submit_prd(prd_path: str, title: str, source: str = "wlkj/wl-prd",
         "content_full": content_md,
         "target_location": "PRD草稿",
     }
+    if confidence is not None:
+        return_args["confidence"] = confidence  # #20 回流质量分级
     if version_id:
         return_args["relations"] = "version_id=%s" % version_id
     if requirement_id:

package/templates/qoder/scripts/domain/integration/spec_upload.py

@@ -25,7 +25,6 @@ def _load_mcp_config() -> dict:
     except Exception:
         repo = Path(__file__).resolve().parent.parent.parent.parent.parent
     for cand in [repo / "mcp_config.json",
-                 repo / "wlinkj-workflow" / "mcp_config.json",
                  repo / ".qoder" / "mcp_config.json"]:
         try:
             if cand.is_file():
@@ -49,7 +48,7 @@ def _resolve_endpoint() -> Tuple[str, str, str]:
                 u = srv.get("url", "")
                 if "/mcp" in u:
                     base = u.split("/mcp")[0]; break
-    base = (base or "http://127.0.0.1:10010").rstrip("/")
+    base = (base or os.environ.get("WLKJ_BASE_URL", "http://10.89.7.120")).rstrip("/")
     token = os.environ.get("WLKJ_MCP_TOKEN", "")
     if not token:
         for srv in (cfg.get("mcpServers") or {}).values():

package/templates/qoder/scripts/domain/kg/switch_project.py

@@ -6,7 +6,7 @@
     python switch_project.py --email a@b.c --pw xxx  # 非交互：直接指定
     python switch_project.py --project-uuid <UUID>   # 非交互：直接指定项目
 
-需工作台后端在跑（默认 http://127.0.0.1:10010）。
+需工作台后端在跑（默认 http://10.89.7.120 云）。
 """
 import json
 import os
@@ -14,16 +14,15 @@ import sys
 import urllib.request
 import urllib.error
 
-# 宿主根：脚本部署在 {host}/scripts/domain/kg/，4 级 dirname = {host}（.qoder 或 wlinkj-workflow）
+# 宿主根：脚本部署在 {host}/scripts/domain/kg/，4 级 dirname = {host}（.qoder）
 HOST_DIR = os.path.dirname(os.path.dirname(os.path.dirname(os.path.dirname(os.path.abspath(__file__)))))
 REPO_ROOT = os.path.dirname(HOST_DIR)  # qoderAll/
 
 
 def _find_config_path():
-    """按宿主探测 mcp_config.json：当前宿主根 → wlinkj-workflow → .qoder（适配多宿主部署）。"""
+    """按宿主探测 mcp_config.json：当前宿主根 → .qoder。"""
     for p in (
-        os.path.join(HOST_DIR, "mcp_config.json"),                       # 当前宿主根(.qoder 或 wlinkj-workflow)
-        os.path.join(REPO_ROOT, "wlinkj-workflow", "mcp_config.json"),
+        os.path.join(HOST_DIR, "mcp_config.json"),        # 当前宿主根
         os.path.join(REPO_ROOT, ".qoder", "mcp_config.json"),
     ):
         if os.path.isfile(p):
@@ -34,7 +33,7 @@ def _find_config_path():
 CONFIG_PATH = _find_config_path()
 
 # 平台地址（默认 10010，可 env 覆盖）
-BASE_URL = os.environ.get("WLKJ_BASE_URL", "http://127.0.0.1:10010")
+BASE_URL = os.environ.get("WLKJ_BASE_URL", "http://10.89.7.120")
 
 
 def bind(email, password, base_url=BASE_URL):

package/templates/qoder/scripts/engine/poller.py

@@ -51,7 +51,7 @@ def _get_base(cfg: dict) -> str:
         u = srv.get("url", "")
         if "/mcp" in u:
             return u.split("/mcp")[0]
-    return "http://127.0.0.1:10010"
+    return os.environ.get("WLKJ_BASE_URL", "http://10.89.7.120")
 
 
 def _api(base, method, path, token, body=None):

package/templates/qoder/scripts/validation/metrics/present_board.py

@@ -0,0 +1,180 @@
+# -*- coding: utf-8 -*-
+"""present_board.py — 知识层富展示看板（cap.present.widget / 落盘降级）。
+
+子命令（数据走 MCP，HTML 自包含，复用 capability.present_html.present）：
+  impact   — get_impact 影响传播树（分层 upstream/downstream 可折叠）
+  coverage — coverage_matrix 覆盖热力图（功能×测试 有/无）
+  feature  — feature_overview 功能画像卡（端点+按钮+用例+页面+PRD）
+
+用法：
+  python present_board.py impact --entity handleExport --project-id <UUID>
+  python present_board.py coverage --project-id <UUID>
+  python present_board.py feature --feature 资产管理 --project-id <UUID>
+
+QoderWork 桌面端 → HTML 嵌入对话流；CLI/IDE → 落盘 workspace/members/{dev}/journal/。
+"""
+import argparse
+import json
+import os
+import sys
+from pathlib import Path
+
+
+def _resolve_repo():
+    env = os.environ.get("QODER_REPO") or os.environ.get("WLKJ_REPO")
+    if env:
+        return Path(env)
+    p = Path(__file__).resolve()
+    for parent in p.parents:
+        if (parent / ".qoder").is_dir() or (parent / "packages").is_dir():
+            return parent
+    return p.parent
+
+
+def _cap():
+    repo = _resolve_repo()
+    sd = str(repo / ".qoder" / "scripts")
+    if sd not in sys.path:
+        sys.path.insert(0, sd)
+    from capability.registry import resolve
+    return resolve(), repo
+
+
+def _unpack(r):
+    """cap.mcp.call 返回 ToolResult（.text 是 JSON 字符串），解包成 dict。"""
+    if isinstance(r, dict):
+        return r
+    if getattr(r, "is_error", False):
+        return {"error": getattr(r, "text", str(r))}
+    txt = getattr(r, "text", None)
+    if txt is None:
+        return r
+    try:
+        return json.loads(txt)
+    except Exception:
+        return {"raw": txt}
+
+
+_CSS = """
+body{font-family:-apple-system,'Segoe UI',sans-serif;margin:0;padding:20px;background:#f7f8fa;color:#1f2329}
+h1{font-size:20px;margin:0 0 8px} h3{font-size:14px;margin:12px 0 6px;color:#4e5969}
+p{color:#86909c;font-size:13px;margin:4px 0}
+details{background:#fff;border:1px solid #e5e6eb;border-radius:6px;padding:8px 12px;margin:6px 0}
+summary{cursor:pointer;font-weight:600;font-size:13px}
+ul{margin:6px 0;padding-left:20px} li{font-size:13px;line-height:1.8} small{color:#86909c}
+.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(160px,1fr));gap:8px}
+.cell{padding:10px;border-radius:6px;font-size:13px;text-align:center}
+.covered{background:#e8ffea;color:#00b42a;border:1px solid #b9f0c6}
+.gap{background:#fff2f0;color:#f53f3f;border:1px solid #ffd4d4}
+.cards{display:grid;grid-template-columns:repeat(auto-fill,minmax(240px,1fr));gap:12px}
+.card{background:#fff;border:1px solid #e5e6eb;border-radius:8px;padding:12px}
+.card h3{margin-top:0}
+"""
+
+
+def _wrap(title, body):
+    return ("<!DOCTYPE html><html><head><meta charset='utf-8'>"
+            "<meta name='viewport' content='width=device-width,initial-scale=1'>"
+            "<title>%s</title><style>%s</style></head><body>%s</body></html>"
+            % (title, _CSS, body))
+
+
+def cmd_impact(args):
+    cap, repo = _cap()
+    impact = _unpack(cap.mcp.call("get_impact", {"project_id": args.project_id or "",
+                                                 "entity": args.entity, "depth": args.depth}))
+    from capability.present_html import present
+    if "error" in impact:
+        body = "<h1>影响分析 · %s</h1><p class='gap'>取数失败: %s</p>" % (args.entity, impact["error"][:200])
+        present(_wrap("影响分析-" + args.entity, body), name="impact-" + args.entity[:20], repo_root=repo)
+        return
+    sections = []
+    for direction, label in [("upstream", "↑ 谁依赖我（改动影响范围）"),
+                             ("downstream", "↓ 我依赖谁")]:
+        layers = impact.get(direction) or []
+        items_html = ""
+        for i, lay in enumerate(layers):
+            its = lay.get("items", []) if isinstance(lay, dict) else []
+            lis = "".join("<li>%s <small>%s</small></li>"
+                          % (it.get("id", "?"), it.get("type", "")) for it in its)
+            items_html += "<details open><summary>第%d层 (%d)</summary><ul>%s</ul></details>" % (i + 1, len(its), lis)
+        sections.append("<h3>%s</h3>%s" % (label, items_html))
+    totals = impact.get("totals", {}) or {}
+    bytype = impact.get("byType", {}) or {}
+    body = ("<h1>影响分析 · %s</h1><p>节点 %s · 类型分布 %s · depth %d</p>"
+            % (args.entity, totals.get("nodes", 0),
+               json.dumps(bytype, ensure_ascii=False), args.depth)) + "".join(sections)
+    present(_wrap("影响分析-" + args.entity, body),
+            name="impact-" + args.entity[:20], repo_root=repo)
+
+
+def cmd_coverage(args):
+    cap, repo = _cap()
+    cov = _unpack(cap.mcp.call("coverage_matrix", {"project_id": args.project_id or ""}))
+    from capability.present_html import present
+    if "error" in cov:
+        present(_wrap("覆盖矩阵", "<h1>测试覆盖矩阵</h1><p class='gap'>取数失败: %s</p>" % cov["error"][:200]),
+                name="coverage", repo_root=repo)
+        return
+    items = cov.get("items") or cov.get("matrix") or cov.get("features") or []
+    cells = "".join(_cov_cell(it) for it in items) or "<p>无覆盖数据</p>"
+    covered = sum(1 for it in items if it.get("has_test") or it.get("covered"))
+    body = ("<h1>测试覆盖矩阵</h1><p>共 %d 项 · 已覆盖 %d · 缺口 %d</p>"
+            % (len(items), covered, len(items) - covered)) + '<div class="grid">%s</div>' % cells
+    present(_wrap("覆盖矩阵", body), name="coverage", repo_root=repo)
+
+
+def _cov_cell(it):
+    name = it.get("feature") or it.get("name") or it.get("canonical") or "?"
+    has = it.get("has_test") or it.get("covered")
+    cls = "covered" if has else "gap"
+    return '<div class="cell %s">%s</div>' % (cls, name)
+
+
+def cmd_feature(args):
+    cap, repo = _cap()
+    feat = _unpack(cap.mcp.call("feature_overview", {"project_id": args.project_id or "",
+                                                     "feature": args.feature}))
+    from capability.present_html import present
+    if "error" in feat:
+        present(_wrap("功能画像-" + args.feature, "<h1>功能画像 · %s</h1><p class='gap'>取数失败: %s</p>" % (args.feature, feat["error"][:200])),
+                name="feature-" + args.feature[:20], repo_root=repo)
+        return
+    cards = []
+    for key, label in [("endpoints", "端点"), ("buttons", "按钮"),
+                       ("tests", "测试用例"), ("pages", "页面"), ("prds", "PRD")]:
+        lst = feat.get(key) or []
+        if not lst:
+            continue
+        lis = "".join("<li>%s</li>" % x for x in (lst if isinstance(lst, list) else [str(lst)])[:20])
+        cards.append('<div class="card"><h3>%s (%d)</h3><ul>%s</ul></div>' % (label, len(lst), lis))
+    complete = "完整" if len(cards) >= 4 else "部分"
+    body = ("<h1>功能画像 · %s</h1><p>覆盖 %d 维 · %s画像</p>"
+            % (args.feature, len(cards), complete)) + '<div class="cards">%s</div>' % "".join(cards)
+    present(_wrap("功能画像-" + args.feature, body),
+            name="feature-" + args.feature[:20], repo_root=repo)
+
+
+def main():
+    ap = argparse.ArgumentParser(description="知识层富展示看板")
+    sub = ap.add_subparsers(dest="cmd", required=True)
+    p_imp = sub.add_parser("impact")
+    p_imp.add_argument("--entity", required=True)
+    p_imp.add_argument("--project-id")
+    p_imp.add_argument("--depth", type=int, default=2)
+    p_cov = sub.add_parser("coverage")
+    p_cov.add_argument("--project-id")
+    p_fea = sub.add_parser("feature")
+    p_fea.add_argument("--feature", required=True)
+    p_fea.add_argument("--project-id")
+    args = ap.parse_args()
+    if args.cmd == "impact":
+        cmd_impact(args)
+    elif args.cmd == "coverage":
+        cmd_coverage(args)
+    elif args.cmd == "feature":
+        cmd_feature(args)
+
+
+if __name__ == "__main__":
+    main()

package/templates/qoder/settings.json

@@ -68,6 +68,16 @@
         ]
       }
     ],
+    "PreToolUse": [
+      {
+        "matcher": "Write|Edit|MultiEdit",
+        "hooks": [
+          {
+            "command": "python .qoder/hooks/pre-tool-use.py || python3 .qoder/hooks/pre-tool-use.py"
+          }
+        ]
+      }
+    ],
     "PostToolUse": [
       {
         "matcher": "*",