PDD：Prompt作为第一等制品

class PromptReviewer:
    def review(self, prompt: Prompt) -> ReviewReport:
        report = ReviewReport()
        
        # 使用LLM检查完整性
        completeness = self.llm.check_completeness(prompt)
        if not completeness.ok:
            report.add_issue("完整性", completeness.suggestions)
        
        # 检查与现有Prompt的一致性
        conflicts = self.check_consistency(prompt)
        for conflict in conflicts:
            report.add_issue("一致性", conflict)
        
        # 生成测试用例验证Prompt
        test_results = self.validate_with_tests(prompt)
        if test_results.failure_rate > 0.1:
            report.add_issue("可靠性", f"测试失败率: {test_results.failure_rate}")
        
        return report

# tests/test_auth_login_prompt.py

import pytest
from prompt_tester import PromptTester

tester = PromptTester()

class TestAuthLoginPrompt:
    """测试登录Prompt的输出质量"""
    
    def test_prompt_generates_required_files(self):
        """验证生成了所有必要文件"""
        result = tester.run_prompt("auth/login.yaml")
        
        assert "controller.ts" in result.files
        assert "service.ts" in result.files
        assert "dto.ts" in result.files
        assert "test.spec.ts" in result.files
    
    def test_jwt_implementation_correct(self):
        """验证JWT实现符合要求"""
        result = tester.run_prompt("auth/login.yaml")
        code = result.get_file("service.ts")
        
        assert "jwt.sign" in code
        assert "refreshToken" in code
        assert "30m" in code or "30 * 60" in code  # 30分钟过期
    
    def test_rate_limit_implemented(self):
        """验证速率限制已实现"""
        result = tester.run_prompt("auth/login.yaml")
        code = result.get_file("controller.ts")
        
        assert "@Throttle" in code or "rateLimit" in code
        assert "5" in code  # 5次限制
    
    def test_security_considerations(self):
        """验证安全考虑"""
        result = tester.run_prompt("auth/login.yaml")
        code = result.get_file("service.ts")
        
        # 不暴露用户存在性
        assert "Invalid credentials" in code
        assert "User not found" not in code
        
        # 使用bcrypt
        assert "bcrypt" in code or "bcryptjs" in code
    
    def test_regression_no_auth_bypass(self):
        """回归测试：确保没有认证绕过漏洞"""
        result = tester.run_prompt("auth/login.yaml")
        
        vulnerabilities = tester.security_scan(result)
        assert not vulnerabilities.critical

# 搜索可复用的Prompt
prompts = registry.search(
    domain="e-commerce",
    language="typescript",
    tags=["payment", "security"],
    quality_score>=4.5
)

# 基于现有Prompt创建变体
base_prompt = registry.get("auth/login@2.1.0")
custom_prompt = base_prompt.fork()
custom_prompt.add_constraint("支持OAuth2.0登录")
custom_prompt.add_constraint("支持多因素认证")