@qingflow-tech/qingflow-cli 1.1.47-beta.5 → 1.1.48

package/README.md

@@ -7,7 +7,7 @@ Qingflow CLI 是轻流面向开发者和 AI Agent 的命令行工具。它把轻
 ## 安装
 
 ```bash
-npm install @qingflow-tech/qingflow-cli@1.1.47-beta.5
+npm install @qingflow-tech/qingflow-cli@1.1.48
 ```
 
 推荐从官网复制这一条一键安装 Qingflow CLI：
@@ -21,7 +21,7 @@ npx qingflow-cli@latest install
 ## 运行
 
 ```bash
-npx -y -p @qingflow-tech/qingflow-cli@1.1.47-beta.5 qingflow
+npx -y -p @qingflow-tech/qingflow-cli@1.1.48 qingflow
 ```
 
 全局安装后可以直接运行：
@@ -62,7 +62,7 @@ qingflow-skills install --agent codex --scope user
 如果你通过一次性 `npx -p` 执行 skills 安装，建议加 `--copy`，避免 symlink 指向 npm 临时执行缓存：
 
 ```bash
-npx -y -p @qingflow-tech/qingflow-cli@1.1.47-beta.5 qingflow-skills install --agent codex --scope user --copy
+npx -y -p @qingflow-tech/qingflow-cli@1.1.48 qingflow-skills install --agent codex --scope user --copy
 ```
 
 `qingflow-skills install` 默认使用 symlink，且遇到同名 skill 不会覆盖；只有显式传入 `--force` 才会替换。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qingflow-tech/qingflow-cli",
-  "version": "1.1.47-beta.5",
+  "version": "1.1.48",
   "description": "Human-friendly Qingflow command line interface for auth, record operations, import, tasks, and stable builder flows.",
   "license": "MIT",
   "type": "module",

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "qingflow-mcp"
-version = "1.1.47b5"
+version = "1.1.48"
 description = "User-authenticated MCP server for Qingflow"
 readme = "README.md"
 license = "MIT"

package/skills/qingflow-cli/SKILL.md

@@ -124,27 +124,6 @@ qingflow auth login \
 qingflow --json auth whoami
 ```
 
-### 交付网页资源链接
-
-创建、修改或安装轻流资源后，最终回复主动提供主要结果的可点击页面入口，无需等待用户再次索要。采用“完成结果 + 查看入口”，文案使用“在轻流中查看应用／应用包／视图”，不默认称为“继续编辑”。
-
-默认只交付用户请求的主要结果：安装方案默认提供应用包入口；直接创建或修改应用、视图时提供对应入口；用户明确要求多个主要对象时分别提供。使用业务结果中的稳定 `uri`，按 URI 去重，不为全部子资源预签票据。主要对象没有可靠 URI 时说明限制，不猜地址，也不替换为不相关页面。
-
-CLI 返回的稳定 `uri` 以 `QINGFLOW_BASE_URL` 为当前环境来源：去除末尾 API 路径后使用同一 HTTP(S) 域名；仅当该变量为空时回退 `https://qingflow.com`。若非空配置非法，保留 URI 不可用诊断，不自行替换或拼接其他环境地址。
-
-部分成功时仅交付已确认成功且可定位的主要结果，保留失败或未验证说明。纯数据问答、中间读取、失败资源和删除操作不自动签发；用户明确要求不提供链接时遵从。用户明确要求查看或打开页面时也使用已确认的路径。
-
-目标浏览器登录态未知时，临近交付取主要结果稳定 `uri` 的完整 pathname 执行，不得丢失应用包、应用或视图层级；视图任务不得退化成应用入口：
-
-```bash
-qingflow auth login-link --redirect-path "<主要结果 uri 的完整 pathname>"
-# 自定义视图 pathname 示例：/resources/ws/<WS_ID>/app/<APP_KEY>/view/custom/<VIEW_KEY>
-```
-
-对每个实际展示的入口分别签发，使用本次返回的完整 URL，不额外追问登录态，不复用已消费链接。只有已有用户确认同一浏览器、网页域名、账号和工作区已登录、没有失效信号的事实，才直接交付稳定 `uri`。CLI 已登录、自动化浏览器已登录或曾经成功签发票据都不能证明目标浏览器已登录。
-
-用户未要求打开时不要提前打开或消费链接；签发失败时说明免登录链接未生成，并提供标注“需登录”的稳定 `uri` 作为备用入口，不重做业务操作。机器结果继续保留稳定 URI，临时登录链接仅用于面向用户交付。
-
 常用参数：`--credential-stdin`、`--password-stdin`、`--persist` / `--forget-persisted`；详见 `qingflow auth --help`。
 
 ---
@@ -470,18 +449,17 @@ qingflow auth logout --forget-persisted
 
 ### 临时网页登录链接
 
-按上文“交付网页资源链接”规则，在创建、修改或安装完成后主动为主要结果提供查看入口；用户明确要求进入页面时也适用，纯数据问答不自动调用：
+仅在用户需要进入网页查看或继续操作时生成，纯数据查询不自动调用：
 
 ```bash
 qingflow --json auth login-link
-qingflow --profile default --json auth login-link --redirect-path "<主要结果 uri 的完整 pathname>"
-# 自定义视图 pathname 示例：/resources/ws/<WS_ID>/app/<APP_KEY>/view/custom/<VIEW_KEY>
+qingflow --profile default --json auth login-link --redirect-path "/index/app/123?view=abc"
 ```
 
-- 默认使用当前会话和已选工作区；缺失时按实际错误恢复，不额外预查或重新登录。pathname 必须保留主要对象的完整层级，视图任务不得改用应用 pathname。
+- 默认使用当前会话和已选工作区；缺失时按实际错误恢复，不额外预查或重新登录。
 - `--redirect-path` 可选，仅接受已确认的站内业务路径，可包含 query/hash；不接受外域或认证入口。示例 ID 仅作格式展示，不得照抄或编造实际目标；省略时进入工作区首页。
 - 将返回的 `url` 作为可点击链接交付，不修改或拼造。链接短时有效且仅可使用一次，失效后重新获取，不写入公共文档或日志。
-- 命令不会自动打开浏览器；用户未要求打开时不提前打开或消费链接，明确要求打开时才调用浏览器。
+- 命令不会自动打开浏览器；用户仅索取链接时不提前打开，明确要求打开时才调用浏览器。
 
 **高发必败**：旧应用搜索入口 · **`record list`/`browse`/`access` 缺 `--view-id`** · **`task report` 缺 `--report-id`** · **`record update` 批量与单条参数混用**。
 

package/skills/qingflow-common/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: qingflow-common
-description: Explain shared Qingflow concepts, choose the CLI or MCP surface, and route resource work or page-link delivery to the relevant domain Skill.
+description: 解释轻流公共业务概念并选择 CLI 或 MCP 入口。用于能力比较、记录与任务操作、表单与流程搭建的任务分流，以及从 AI 对话进入页面查看结果、继续编辑、处理业务或进入工作区的场景。
 ---
 
 # Qingflow Common Concepts
@@ -31,7 +31,7 @@ Do not require both surfaces. If only one is installed, complete the workflow on
 | Form schema/read/apply/delete | `qingflow --json builder app-form ...` / `builder app delete` | `app_form_schema`, `app_form_get`, `app_form_apply`, `app_delete` |
 | AppForm static validation | `qingflow --json builder app-form validate --file ...` | Performed inside `app_form_apply`; no separate tool |
 | Record and task work | `qingflow --json record ...` / `task ...` | Qingflow MCP record and task tools |
-| Open a workspace or confirmed business page | `qingflow --json auth login-link [--redirect-path PATH]` | `get_login_link` |
+| 免登录打开网页或指定业务页面 | `qingflow --json auth login-link [--redirect-path PATH]` | `get_login_link` |
 | Package, view, portal, chart, workflow | `qingflow --json builder ...` | Qingflow MCP configuration tools |
 
 The operation names and payload schemas are defined by the public surface. Use the current Schema or tool input schema as the source of truth, not a legacy command name or backend payload.
@@ -43,10 +43,20 @@ The operation names and payload schemas are defined by the public surface. Use t
 
 Each package includes this common Skill. The CLI package installs its CLI guidance; the MCP package installs every MCP domain Skill. The source of every packaged Skill is `qingflow-support/mcp-server/skills/`.
 
-## Deliver Qingflow Page Links
+## 从 AI 对话进入轻流页面
 
-- After creating, changing, or installing resources, finish with the result and a clickable entry for each requested primary result. Use confirmed stable `uri` values, deduplicate them, and link only confirmed successes. Do not auto-issue links for data-only answers, intermediate reads, failed or deleted resources, or when the user declines links.
-- When browser login is unknown, issue one fresh link per displayed destination near delivery through the installed surface. Never guess, replace, open, or consume a destination unless authorized. If issuance fails, keep the business result and offer the stable URI as requiring login when available. Follow the CLI Skill or MCP tool description for signing details.
+用户需要查看结果、继续编辑、处理业务或进入工作区页面时，MCP 调用 `get_login_link`，CLI 调用 `qingflow --json auth login-link`。纯数据查询无需页面，不自动生成链接。
+
+- 目标路径使用用户提供或业务工具确认的站内路径，不根据应用、记录标识猜测地址。
+- 用户明确指定页面但路径未知时继续定位或说明限制，不猜测，也不静默替换成首页。搜索未命中时继续搜索 `login` 或查看服务工具列表，不擅自打开固定正式站点；失败时如实说明。
+
+- 默认使用当前会话及已选工作区；需要指定会话时使用 MCP 的 `profile` 或 CLI 的 `--profile`。
+- `redirect_path` 可选，默认空：省略时进入工作区首页；传入时仅支持以单个 `/` 开头的站内业务路径，可带 query/hash。不得传完整 URL、外部地址、认证入口或多层编码路径。
+- 示例：`get_login_link({})`；指定目标示例：`get_login_link({"redirect_path":"/index/app/123?view=abc"})`。示例标识仅作格式展示，实际目标必须来自用户提供或已经确认的页面信息，不得编造应用、记录标识。
+- 临近交付时再生成，使用返回的 `url`，文案贴合“查看记录”“继续编辑”等上下文，不展示工作区数字 ID 或原始 JSON。
+- CLI 示例：`qingflow --json auth login-link`；指定目标使用 `qingflow --profile default --json auth login-link --redirect-path "/index/app/123?view=abc"`，同样不得编造实际路径。
+- 链接短时有效且仅可使用一次，失效后重新获取，不修改或拼造链接；只交付给请求用户，不写入公共文档或日志。
+- 用户要求“给我链接”时仅交付，不提前消费；要求“打开”时才使用可用浏览器打开。浏览器不可用时提供可点击链接，不假称已经打开。
 
 ## Route Next
 

package/src/qingflow_mcp/builder_facade/service.py

@@ -19,7 +19,6 @@ from ..backend_client import BackendRequestContext
 from ..errors import QingflowApiError, backend_code_int, backend_code_value_int, is_auth_like_error
 from ..json_types import JSONObject
 from ..list_type_labels import RECORD_LIST_TYPE_LABELS, SYSTEM_VIEW_ID_TO_LIST_TYPE
-from ..resource_uri import validate_positive_resource_id, validate_resource_identity
 from ..solution.build_assembly_store import BuildAssemblyStore, default_artifacts, default_manifest
 from ..solution.compiler.chart_compiler import qingbi_workspace_visible_auth
 from ..solution.compiler.form_compiler import build_question, default_form_payload, default_member_auth
@@ -1492,74 +1491,6 @@ class AiBuilderFacade:
                 details={"solution_key": requested_solution_key},
                 suggested_next_call={"tool_name": "solution_install", "arguments": {"profile": profile, **normalized_args}},
             )
-        raw_result = created.get("result") if isinstance(created.get("result"), dict) else {}
-        raw_tag_ids = raw_result.get("tagIds")
-        raw_app_keys = raw_result.get("appKeys")
-        tag_ids, tag_ids_complete = _unique_resource_tag_ids(raw_tag_ids)
-        app_keys, app_keys_complete = _unique_resource_app_keys(raw_app_keys)
-        resource_list_complete = tag_ids_complete and app_keys_complete
-        resources: list[JSONObject] = []
-        warnings: list[JSONObject] = []
-
-        for tag_id in tag_ids:
-            name = None
-            try:
-                detail = self.packages.package_get(profile=profile, tag_id=tag_id, include_raw=False)
-                package = detail.get("result") if isinstance(detail.get("result"), dict) else {}
-                name = str(package.get("tagName") or package.get("tag_name") or "").strip() or None
-            except (QingflowApiError, RuntimeError):
-                pass
-            if not name:
-                warnings.append(_warning("RESOURCE_NAME_UNAVAILABLE", "installed package name could not be read", package_id=tag_id))
-            resources.append(
-                _compact_dict(
-                    {
-                        "resource_type": "package",
-                        "operation": "installed",
-                        "status": "success",
-                        "id": tag_id,
-                        "key": str(tag_id),
-                        "name": name,
-                        "ids": {"package_id": tag_id},
-                    }
-                )
-            )
-
-        for app_key in app_keys:
-            name = None
-            parent = None
-            try:
-                detail = self.apps.app_get_base(profile=profile, app_key=app_key, include_raw=False)
-                app = detail.get("result") if isinstance(detail.get("result"), dict) else {}
-                name = str(app.get("formTitle") or app.get("appName") or "").strip() or None
-                matching_tag_ids = [tag_id for tag_id in _unique_positive_ints(app.get("tagIds")) if tag_id in tag_ids]
-                if len(matching_tag_ids) == 1:
-                    parent = {"resource_type": "package", "id": matching_tag_ids[0], "key": str(matching_tag_ids[0])}
-            except (QingflowApiError, RuntimeError):
-                pass
-            if not name:
-                warnings.append(_warning("RESOURCE_NAME_UNAVAILABLE", "installed application name could not be read", app_key=app_key))
-            resources.append(
-                _compact_dict(
-                    {
-                        "resource_type": "app",
-                        "operation": "installed",
-                        "status": "success",
-                        "key": app_key,
-                        "name": name,
-                        "ids": {"app_key": app_key},
-                        "parent": parent,
-                    }
-                )
-            )
-
-        if not resource_list_complete:
-            warnings.append(
-                _warning(
-                    "RESOURCE_LIST_INCOMPLETE",
-                    "solution installation succeeded, but its returned package/application identity list was incomplete",
-                )
-            )
         return {
             "status": "success",
             "error_code": None,
@@ -1572,15 +1503,9 @@ class AiBuilderFacade:
             "request_id": created.get("request_id"),
             "suggested_next_call": None,
             "noop": False,
-            "warnings": warnings,
-            "verified": False,
-            "verification": {
-                "resource_list_complete": resource_list_complete,
-                "business_verified": False,
-            },
+            "verification": {},
             "write_executed": True,
             "safe_to_retry": False,
-            "resources": resources,
         }
 
     def package_list(self, *, profile: str, trial_status: str = "all", query: str = "") -> JSONObject:
@@ -17223,49 +17148,6 @@ def _coerce_positive_int(value: Any) -> int | None:
     return None
 
 
-def _unique_positive_ints(value: Any) -> list[int]:
-    if not isinstance(value, list):
-        return []
-    result: list[int] = []
-    for item in value:
-        number = _coerce_positive_int(item)
-        if number is not None and number not in result:
-            result.append(number)
-    return result
-
-
-def _unique_resource_tag_ids(value: Any) -> tuple[list[int], bool]:
-    if not isinstance(value, list):
-        return [], False
-    result: list[int] = []
-    complete = True
-    for item in value:
-        try:
-            tag_id = validate_positive_resource_id(item, "package_id")
-        except (ValueError, UnicodeError):
-            complete = False
-            continue
-        if tag_id not in result:
-            result.append(tag_id)
-    return result, complete
-
-
-def _unique_resource_app_keys(value: Any) -> tuple[list[str], bool]:
-    if not isinstance(value, list):
-        return [], False
-    result: list[str] = []
-    complete = True
-    for item in value:
-        try:
-            app_key = validate_resource_identity(item, "app_key")
-        except (ValueError, UnicodeError):
-            complete = False
-            continue
-        if app_key not in result:
-            result.append(app_key)
-    return result, complete
-
-
 def _coerce_nonnegative_int(value: Any) -> int | None:
     if isinstance(value, bool) or value is None:
         return None

package/src/qingflow_mcp/cli/commands/__init__.py

@@ -2,7 +2,7 @@ from __future__ import annotations
 
 import argparse
 
-from . import app, auth, builder, chart, data, exports, imports, portal, record, task, view, workspace
+from . import app, auth, builder, chart, exports, imports, portal, record, task, view, workspace
 
 
 def register_all_commands(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) -> None:
@@ -13,7 +13,6 @@ def register_all_commands(subparsers: argparse._SubParsersAction[argparse.Argume
     view.register(subparsers)
     chart.register(subparsers)
     record.register(subparsers)
-    data.register(subparsers)
     imports.register(subparsers)
     exports.register(subparsers)
     task.register(subparsers)

package/src/qingflow_mcp/cli/commands/auth.py

@@ -41,7 +41,7 @@ def register(subparsers: argparse._SubParsersAction[argparse.ArgumentParser]) ->
     whoami.set_defaults(handler=_handle_whoami, format_hint="auth_whoami")
 
     login_link = auth_subparsers.add_parser("login-link", help="生成当前工作区的临时一次性登录链接（不自动打开）")
-    login_link.add_argument("--redirect-path", default="", help="登录后跳转的站内路径；资源路径必须属于当前工作区，其他业务路径可包含查询参数和锚点")
+    login_link.add_argument("--redirect-path", default="", help="登录后跳转的站内路径，可包含查询参数和锚点")
     login_link.set_defaults(handler=_handle_login_link, format_hint="login_link")
 
     logout = auth_subparsers.add_parser("logout", help="退出登录")

package/src/qingflow_mcp/cli/context.py

@@ -10,13 +10,12 @@ from ..session_store import SessionStore
 from ..tools.ai_builder_tools import AiBuilderTools
 from ..tools.app_tools import AppTools
 from ..tools.auth_tools import AuthTools
+from ..tools.login_link_tools import LoginLinkTools
 from ..tools.code_block_tools import CodeBlockTools
-from ..tools.data_tools import DataTools
 from ..tools.export_tools import ExportTools
 from ..tools.feedback_tools import FeedbackTools
 from ..tools.file_tools import FileTools
 from ..tools.import_tools import ImportTools
-from ..tools.login_link_tools import LoginLinkTools
 from ..tools.record_tools import RecordTools
 from ..tools.resource_read_tools import ResourceReadTools
 from ..tools.task_context_tools import TaskContextTools
@@ -34,7 +33,6 @@ class CliContext:
     app: AppTools
     resource: ResourceReadTools
     record: RecordTools
-    data: DataTools
     code_block: CodeBlockTools
     imports: ImportTools
     exports: ExportTools
@@ -66,7 +64,6 @@ def build_cli_context() -> CliContext:
         app=AppTools(sessions, backend),
         resource=ResourceReadTools(sessions, backend),
         record=RecordTools(sessions, backend),
-        data=DataTools(sessions, backend),
         code_block=CodeBlockTools(sessions, backend),
         imports=ImportTools(sessions, backend),
         exports=ExportTools(sessions, backend),

package/src/qingflow_mcp/cli/formatters.py

@@ -191,10 +191,9 @@ def _format_app_items(result: dict[str, Any]) -> str:
                 str(item.get("app_key") or item.get("appKey") or ""),
                 str(item.get("app_name") or item.get("name") or item.get("title") or ""),
                 str(item.get("package_name") or item.get("tag_name") or ""),
-                str(item.get("uri") or ""),
             ]
         )
-    return _render_titled_table("Apps", ["app_key", "app_name", "package", "uri"], rows)
+    return _render_titled_table("Apps", ["app_key", "app_name", "package"], rows)
 
 
 def _format_app_get(result: dict[str, Any]) -> str:
@@ -202,7 +201,6 @@ def _format_app_get(result: dict[str, Any]) -> str:
     lines = [
         f"App: {data.get('app_name') or '-'}",
         f"App Key: {data.get('app_key') or '-'}",
-        f"URI: {data.get('uri') or '-'}",
         f"Can Create: {data.get('can_create')}",
     ]
     import_capability = data.get("import_capability")
@@ -226,7 +224,7 @@ def _format_app_get(result: dict[str, Any]) -> str:
     lines.append(f"Accessible Views: {len(views)}")
     for item in views[:10]:
         if isinstance(item, dict):
-            lines.append(f"- {item.get('view_id')}: {item.get('name')} / {item.get('uri') or '-'}")
+            lines.append(f"- {item.get('view_id')}: {item.get('name')}")
     _append_warnings(lines, result.get("warnings"))
     return "\n".join(lines) + "\n"
 
@@ -298,7 +296,6 @@ def _format_view_get(result: dict[str, Any]) -> str:
         f"View Key: {data.get('view_key') or '-'}",
         f"App Key: {data.get('app_key') or '-'}",
         f"View Type: {data.get('view_type') or '-'}",
-        f"URI: {data.get('uri') or '-'}",
         f"Analysis Supported: {data.get('analysis_supported')}",
     ]
     if export_capability:
@@ -1187,7 +1184,6 @@ def _format_builder_summary(result: dict[str, Any]) -> str:
         ("view_key", "View Key"),
         ("chart_id", "Chart ID"),
         ("package_id", "Package ID"),
-        ("uri", "URI"),
         ("verified", "Verified"),
         ("write_executed", "Write Executed"),
         ("delete_executed", "Delete Executed"),
@@ -1220,7 +1216,6 @@ def _format_builder_summary(result: dict[str, Any]) -> str:
         "associations",
         "package_ids",
         "app_keys",
-        "resources",
     ):
         value = result.get(key)
         if not isinstance(value, list) and isinstance(data, dict):
@@ -1231,15 +1226,6 @@ def _format_builder_summary(result: dict[str, Any]) -> str:
                 lines.append("- " + _builder_item_summary(item))
             if len(value) > 8:
                 lines.append(f"... {len(value) - 8} more")
-            if key == "apps":
-                uri_lines = [
-                    line
-                    for item in value
-                    for line in _builder_batch_item_uri_lines(item)
-                ]
-                if uri_lines:
-                    lines.append("Resource URIs:")
-                    lines.extend(f"- {line}" for line in uri_lines)
     components = result.get("components") if isinstance(result.get("components"), list) else []
     if components:
         lines.append("Component Refs:")
@@ -1308,7 +1294,6 @@ def _builder_item_summary(item: Any) -> str:
         "uid",
         "userId",
         "email",
-        "uri",
     )
     parts = [
         f"{key}={item.get(key)}"
@@ -1320,50 +1305,6 @@ def _builder_item_summary(item: Any) -> str:
     return " / ".join(parts) if parts else json.dumps(item, ensure_ascii=False)
 
 
-def _builder_batch_item_uri_lines(item: Any) -> list[str]:
-    if not isinstance(item, dict):
-        return []
-    item_status = str(item.get("status") or "").lower()
-    if item_status not in {"success", "partial_success"}:
-        return []
-    data = item.get("data") if isinstance(item.get("data"), dict) else item.get("result")
-    if not isinstance(data, dict) or not _builder_uri_is_confirmed(data, fallback_status=item_status):
-        return []
-    lines: list[str] = []
-    if data.get("uri"):
-        lines.append(f"URI: {data['uri']}")
-    views = data.get("views") if isinstance(data.get("views"), list) else []
-    for view in views:
-        if (
-            isinstance(view, dict)
-            and view.get("uri")
-            and _builder_uri_is_confirmed(view, fallback_status=item_status)
-        ):
-            lines.append(f"View URI: {view['uri']}")
-    return lines
-
-
-def _builder_uri_is_confirmed(value: dict[str, Any], *, fallback_status: str) -> bool:
-    status = str(value.get("status") or fallback_status).lower()
-    operation = str(value.get("operation") or "").lower()
-    return (
-        status in {"success", "partial_success", "unchanged", "verified"}
-        and operation
-        not in {
-            "failed",
-            "pending",
-            "planned",
-            "readback_pending",
-            "pending_readback",
-            "unknown",
-            "remove",
-            "removed",
-            "delete",
-            "deleted",
-        }
-    )
-
-
 def _format_file_upload_local(result: dict[str, Any]) -> str:
     lines = [
         f"Upload Kind: {result.get('upload_kind') or result.get('requested_upload_kind') or '-'}",
@@ -1626,7 +1567,7 @@ def _task_action_debug_lines(result: dict[str, Any]) -> list[str]:
 
 
 def _format_login_link(result: dict[str, Any]) -> str:
-    return f"登录链接：{result['url']}\n过期时间（Unix 毫秒）：{result['expires_at']}\n链接只能使用一次，请勿泄露；仅在用户要求打开时才打开。\n"
+    return f"登录链接：{result['url']}\n过期时间（Unix 毫秒）：{result['expires_at']}\n链接仅可使用一次，请勿泄露。\n"
 
 
 _FORMATTERS = {

package/src/qingflow_mcp/cli/main.py

@@ -2,13 +2,11 @@ from __future__ import annotations
 
 import argparse
 import json
-import os
 import sys
 from typing import Any, Callable, TextIO
 
 from ..errors import QingflowApiError, backend_code_value_int, message_looks_like_invalid_token
 from ..public_surface import cli_public_tool_spec_from_namespace
-from ..resource_uri import cli_resource_base_url
 from ..response_trim import resolve_cli_tool_name, trim_error_response, trim_public_response
 from ..tools.ai_builder_tools import _attach_builder_apply_envelope
 from ..version import get_cli_version, get_cli_version_info
@@ -96,8 +94,7 @@ def run(
         context = context_factory()
         if not bool(args.json):
             _emit_cli_effective_context_notice(args, context, stream=err)
-        with cli_resource_base_url(os.getenv("QINGFLOW_BASE_URL") or ""):
-            result = handler(args, context)
+        result = handler(args, context)
     except SystemExit as exc:
         return int(exc.code or 0)
     except RuntimeError as exc:

package/src/qingflow_mcp/public_surface.py

@@ -40,11 +40,6 @@ USER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
     PublicToolSpec(USER_DOMAIN, "workspace_select", ("workspace_select",), ("workspace", "select")),
     PublicToolSpec(USER_DOMAIN, "app_list", ("app_list",), ("app", "list"), cli_show_effective_context=True),
     PublicToolSpec(USER_DOMAIN, "app_get", ("app_get",), ("app", "get"), cli_show_effective_context=True),
-    PublicToolSpec(USER_DOMAIN, "data_query", ("data_query",), ("data", "query"), cli_show_effective_context=True),
-    PublicToolSpec(USER_DOMAIN, "data_get", ("data_get",), ("data", "get"), cli_show_effective_context=True),
-    PublicToolSpec(USER_DOMAIN, "data_insert", ("data_insert",), ("data", "insert"), cli_show_effective_context=True, cli_context_write=True),
-    PublicToolSpec(USER_DOMAIN, "data_update", ("data_update",), ("data", "update"), cli_show_effective_context=True, cli_context_write=True),
-    PublicToolSpec(USER_DOMAIN, "data_delete", ("data_delete",), ("data", "delete"), cli_show_effective_context=True, cli_context_write=True),
     PublicToolSpec(USER_DOMAIN, "portal_list", ("portal_list",), ("portal", "list"), cli_show_effective_context=True),
     PublicToolSpec(USER_DOMAIN, "portal_get", ("portal_get",), ("portal", "get"), cli_show_effective_context=True),
     PublicToolSpec(USER_DOMAIN, "view_get", ("view_get",), ("view", "get"), cli_show_effective_context=True),
@@ -133,7 +128,6 @@ BUILDER_PUBLIC_TOOL_SPECS: tuple[PublicToolSpec, ...] = (
     PublicToolSpec(BUILDER_DOMAIN, "auth_use_credential", ("auth_use_credential",), ("builder", "auth", "use-credential"), cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "auth_whoami", ("auth_whoami",), ("builder", "auth", "whoami"), cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "auth_logout", ("auth_logout",), ("builder", "auth", "logout"), cli_public=False),
-    PublicToolSpec(BUILDER_DOMAIN, "get_login_link", ("get_login_link",), mcp_public=True, cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "workspace_list", ("workspace_list",), ("builder", "workspace", "list"), cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "workspace_get", ("workspace_get",), ("builder", "workspace", "get"), cli_public=False),
     PublicToolSpec(BUILDER_DOMAIN, "file_upload_local", ("file_upload_local",), ("builder", "file", "upload-local"), has_contract=True, cli_show_effective_context=True, cli_context_write=True),

package/src/qingflow_mcp/response_trim.py

@@ -326,7 +326,7 @@ def _trim_workspace_get(payload: JSONObject) -> None:
 
 def _trim_app_list_like(payload: JSONObject) -> None:
     payload.pop("apps", None)
-    _trim_item_list(payload, "items", allowed=("app_key", "app_name", "package_name", "uri"))
+    _trim_item_list(payload, "items", allowed=("app_key", "app_name", "package_name"))
 
 
 def _trim_app_get(payload: JSONObject) -> None:
@@ -334,7 +334,7 @@ def _trim_app_get(payload: JSONObject) -> None:
     _trim_nested_item_list(
         payload,
         ("data", "accessible_views"),
-        allowed=("view_id", "name", "analysis_supported", "list_supported", "kind", "uri"),
+        allowed=("view_id", "name", "analysis_supported", "list_supported", "kind"),
     )
 
 
@@ -1148,6 +1148,7 @@ def _register_policy(domains: tuple[str, ...], names: tuple[str, ...], transform
 
 
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("auth_use_credential", "auth_whoami"), _trim_auth_payload)
+_register_policy((USER_DOMAIN,), ("get_login_link",), _trim_login_link)
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("auth_logout",), _trim_auth_logout)
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("workspace_list",), _trim_workspace_list)
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("workspace_get", "workspace_select"), _trim_workspace_get)
@@ -1222,7 +1223,6 @@ _register_policy(
     _trim_directory,
 )
 _register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("feedback_submit",), _trim_feedback)
-_register_policy((USER_DOMAIN, BUILDER_DOMAIN), ("get_login_link",), _trim_login_link)
 _register_policy(
     (USER_DOMAIN,),
     (

package/src/qingflow_mcp/server.py

@@ -7,7 +7,6 @@ from mcp.server.fastmcp import FastMCP
 from .backend_client import BackendClient
 from .session_store import SessionStore
 from .tools.app_tools import AppTools
-from .tools.data_tools import DataTools
 from .tools.auth_tools import AuthTools
 from .tools.code_block_tools import CodeBlockTools
 from .tools.feedback_tools import FeedbackTools
@@ -250,7 +249,6 @@ If the current MCP capability is unsupported, the workflow is awkward, or the us
     TaskContextTools(sessions, backend).register(server)
     RoleTools(sessions, backend).register(server)
     AppTools(sessions, backend).register(server)
-    DataTools(sessions, backend).register(server)
     QingbiReportTools(sessions, backend).register(server)
     PackageTools(sessions, backend).register(server)
     NavigationTools(sessions, backend).register(server)

package/src/qingflow_mcp/server_app_builder.py

@@ -9,7 +9,6 @@ from .config import DEFAULT_PROFILE
 from .response_trim import BUILDER_SERVER_METHOD_MAP, trim_error_response, trim_public_response, wrap_trimmed_methods
 from .session_store import SessionStore
 from .tools.ai_builder_tools import AiBuilderTools
-from .tools.login_link_tools import LOGIN_LINK_DESCRIPTION, LoginLinkTools
 from .tools.auth_tools import AuthTools
 from .tools.feedback_tools import FeedbackTools
 from .tools.file_tools import FileTools
@@ -42,16 +41,6 @@ def build_builder_server() -> FastMCP:
             "member_search/role_search/role_create when workflow assignees must come from the directory or role catalog, preferring roles over explicit members unless the user explicitly names members, "
             "then app_form_apply for complete app form targets, explicit app_delete for application deletion, and app_flow_apply/app_views_apply/app_associated_resources_apply/app_charts_apply/portal_apply/portal_delete for non-form patches. app_custom_buttons_apply is maintenance-only for explicit standalone button work outside normal view design. These apply/delete tools perform validation, normalization, writes, and readback verification where applicable. AppForm publishes only after a draft change or when the published form lags behind; views noop requests skip publish, app_custom_buttons_apply and app_associated_resources_apply publish after at least one write succeeds and expose no draft-only parameter, charts are immediate-live without publish and resolve targets by chart_id first then exact unique chart name, portal updates use replace semantics only when sections are supplied and edit-mode base-info-only updates may omit sections, portal delete separates DELETE execution from readback verification, portal pc layout is a 24-column grid and mobile is a 6-column grid so omit position or use layout_preset when unsure, publish=false only guarantees draft/base-info updates for tools that still expose that parameter, and flow should use publish=false whenever you only want draft/precheck behavior. "
             "Builder apply/write outputs include schema_version, operation, summary, and resources[]; use resources[].id/key/name/ids/parent as the stable UI and agent display entry, and keep legacy fields such as field_diff/views_diff/chart_results only for compatibility or troubleshooting. "
-            "创建、修改或安装轻流资源后，最终回复主动提供主要结果的可点击页面入口，无需等待用户再次索要。"
-            "采用“完成结果 + 查看入口”，文案使用“在轻流中查看应用／应用包／视图”，不默认称为“继续编辑”。"
-            "默认只交付用户请求的主要结果：安装方案默认提供应用包入口；直接创建或修改应用、视图时提供对应入口；用户明确要求多个主要对象时分别提供。"
-            "使用业务结果中的稳定 `uri`，按 URI 去重，不为全部子资源预签票据；主要对象没有可靠 URI 时说明限制，不猜地址，也不替换为不相关页面。"
-            "部分成功时仅交付已确认成功且可定位的主要结果，保留失败或未验证说明。"
-            "纯数据问答、中间读取、失败资源和删除操作不自动签发；用户明确要求不提供链接时遵从。用户明确要求查看或打开页面时也使用已确认的路径。"
-            "目标浏览器登录态未知时，临近交付用资源 URI 的同源 pathname 调用 get_login_link，为每个实际展示的入口分别签发，使用返回的完整 URL，不额外追问登录态。"
-            "只有已有用户确认同一浏览器、网页域名、账号和工作区已登录且无失效信号的事实时，才直接交付稳定 URI；调用过票据工具、自动化浏览器已登录或之前签发过票据均不能证明用户浏览器已登录，已消费链接不可复用。"
-            "用户未要求打开时不提前打开或消费链接；浏览器不可用时提供可点击链接，不假称已经打开。"
-            "签发失败时说明免登录链接未生成，提供标注“需登录”的稳定 URI 作为备用入口，不重做业务操作。机器结果继续保留稳定 URI，临时登录链接仅用于面向用户交付。 "
             "For existing object parameter replacement, prefer patch_views, patch_buttons, patch_resources, and patch_charts with set/unset; the tool reads current config and full-saves internally, while upsert_* is for creation or full target configuration and should not be used as an incomplete partial update. "
             "For builder delete/remove apply results, separate delete execution from readback verification: after DELETE is sent, resources expose delete_executed, readback_status, and safe_to_retry_delete=false. If readback_status is unavailable or still_exists, do not blindly repeat the delete; confirm later with app_get/view_get/chart_get or the relevant apply readback. Views/buttons use single-item readback; associated resources use one app-level resource-pool readback because there is no confirmed single-item GET. "
             "For builder write/apply results, separate write execution from final readback verification: status=partial_success with write_executed=true and safe_to_retry=false means the write was sent or succeeded, while final readback, publish verification, or metadata confirmation is pending or permission-restricted. Report it as written but unverified; do not repeat the same write blindly. "
@@ -75,7 +64,6 @@ def build_builder_server() -> FastMCP:
     workspace = wrap_trimmed_methods(WorkspaceTools(sessions, backend), BUILDER_SERVER_METHOD_MAP)
     files = wrap_trimmed_methods(FileTools(sessions, backend), BUILDER_SERVER_METHOD_MAP)
     ai_builder = wrap_trimmed_methods(AiBuilderTools(sessions, backend), BUILDER_SERVER_METHOD_MAP)
-    login_link = LoginLinkTools(sessions, backend)
     feedback = FeedbackTools(backend, mcp_side="App Builder MCP")
 
     @server.tool()
@@ -102,10 +90,6 @@ def build_builder_server() -> FastMCP:
     def auth_logout(profile: str = DEFAULT_PROFILE, forget_persisted: bool = False) -> dict:
         return auth.auth_logout(profile=profile, forget_persisted=forget_persisted)
 
-    @server.tool(description=LOGIN_LINK_DESCRIPTION)
-    def get_login_link(profile: str = DEFAULT_PROFILE, redirect_path: str = "") -> dict:
-        return login_link.get_login_link(profile=profile, redirect_path=redirect_path)
-
     @server.tool()
     def workspace_list(
         profile: str = DEFAULT_PROFILE,