agentworkshop 0.2.1

package/server/api/workshop/agents/[id].patch.ts

@@ -0,0 +1,30 @@
+/**
+ * PATCH /api/workshop/agents/:id —— 更新 agent(name/harness/config/enabled/visibility)。
+ * 权限:属主或 admin;内置模板(owner NULL)任何人不可修改(TEMPLATE_BUILTIN)。
+ */
+import { z } from 'zod'
+import { resolveUser } from '../caller'
+import { getRouterParam, readValidatedBody } from 'h3'
+import { zValidator } from '../../../utils/validate'
+import { defineApiHandler } from '../../../utils/response'
+import { AppError } from '../../../utils/errors'
+import { getWorkshopManager } from '../../../plugins/workshop'
+
+const patchAgentSchema = z.object({
+  name: z.string().min(1).optional(),
+  harness: z.string().min(1).optional(),
+  config: z.record(z.string(), z.unknown()).optional(),
+  enabled: z.number().int().min(0).max(1).optional(),
+  visibility: z.enum(['private', 'public']).optional(),
+})
+
+export default defineApiHandler(async (event) => {
+  const agentId = getRouterParam(event, 'id')!
+  const user = resolveUser(event)
+  const body = await readValidatedBody(event, zValidator(patchAgentSchema))
+  const manager = getWorkshopManager()
+  const agent = manager.getAgent(agentId)
+  if (!agent) throw new AppError(404, 'NOT_FOUND', `Agent 不存在: ${agentId}`)
+  manager.requireWritable(agent.ownerUserId, user, 'Agent 模板')
+  return manager.updateAgent(agentId, body)
+})

package/server/api/workshop/agents/index.get.ts

@@ -0,0 +1,13 @@
+/**
+ * GET /api/workshop/agents —— 可见性感知的 Agent 模板列表。
+ * 普通用户:本人(任意可见性)+ 全部 public(含内置);admin:全量(附创建者名)。
+ */
+import { defineApiHandler } from '../../../utils/response'
+import { resolveUser, withOwnerNames } from '../caller'
+import { getWorkshopManager } from '../../../plugins/workshop'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const templates = await getWorkshopManager().listAgentsVisibleTo(user)
+  return withOwnerNames(templates)
+})

package/server/api/workshop/agents/index.post.ts

@@ -0,0 +1,29 @@
+/**
+ * POST /api/workshop/agents —— 创建全局 Agent 定义(与 channel 无关,可复用)。
+ * visibility 缺省 private(仅本人可见);public = 全员可读可用,仅本人/admin 可改删。
+ */
+import { z } from 'zod'
+import { resolveUser } from '../caller'
+import { readValidatedBody } from 'h3'
+import { zValidator } from '../../../utils/validate'
+import { defineApiHandler } from '../../../utils/response'
+import { getWorkshopManager } from '../../../plugins/workshop'
+
+const createAgentSchema = z.object({
+  name: z.string().min(1, 'name 必填'),
+  harness: z.string().min(1, 'harness 必填'),
+  config: z.record(z.string(), z.unknown()).optional(),
+  visibility: z.enum(['private', 'public']).optional(),
+})
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readValidatedBody(event, zValidator(createAgentSchema))
+  return getWorkshopManager().createAgent({
+    name: body.name,
+    harness: body.harness,
+    config: body.config,
+    visibility: body.visibility,
+    ownerUserId: user.id,
+  })
+})

package/server/api/workshop/agents/subscribe.post.ts

@@ -0,0 +1,21 @@
+/**
+ * POST /api/workshop/agents/subscribe —— caller 订阅同事产出(REST 作业面,与 MCP workshop.a2a.subscribe 同语义)。
+ * - 需要 Bearer token;目标必须同 channel(manager 校验)
+ */
+import { z } from 'zod'
+import { readValidatedBody } from 'h3'
+import { zValidator } from '../../../utils/validate'
+import { defineApiHandler } from '../../../utils/response'
+import { getWorkshopManager } from '../../../plugins/workshop'
+import { resolveCaller } from '../caller'
+
+const subscribeSchema = z.object({
+  agentIds: z.array(z.string()).optional(),
+})
+
+export default defineApiHandler(async (event) => {
+  const caller = resolveCaller(event)
+  const body = await readValidatedBody(event, zValidator(subscribeSchema))
+  await getWorkshopManager().subscribe(caller.channelId, caller.id, { agentIds: body.agentIds })
+  return { subscribed: true, agentId: caller.id }
+})

package/server/api/workshop/approvals/[id]/decide.post.ts

@@ -0,0 +1,30 @@
+/**
+ * POST /api/workshop/approvals/:id/decide —— 复核裁决(R3 maker-checker 的 checker 一步)。
+ * 仅 admin;硬校验申请人≠批核人;裁决后申请人携 approvalId 重放原高危请求放行。
+ * body: { approved: boolean, comment?: string }
+ */
+import { readBody, getRouterParam } from 'h3'
+import { requireAdmin } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { getOps, audit } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const user = requireAdmin(event)
+  const id = getRouterParam(event, 'id')!
+  const body = await readBody<{ approved?: boolean, comment?: string }>(event) ?? {}
+  const repo = getOps()?.approvalRequests
+  if (!repo) throw new AppError(503, 'UNAVAILABLE', '复核持久化未就绪')
+  const req = repo.get(id)
+  if (!req) throw new AppError(404, 'NOT_FOUND', '复核记录不存在')
+  if (req.status !== 'pending') throw new AppError(409, 'ALREADY_DECIDED', '该复核已裁决')
+  // maker-checker 硬校验:申请人不能自审自批
+  if (req.requestedBy === user.id) {
+    throw new AppError(403, 'SELF_APPROVAL_FORBIDDEN', '申请人不能批核自己的请求(双人复核)')
+  }
+  const approved = body.approved !== false
+  const decided = repo.decide(id, approved, user.id, user.name, String(body.comment ?? ''), new Date().toISOString())
+  // R1:复核裁决留痕
+  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: approved ? 'approval.approve' : 'approval.deny', targetKind: 'approval-request', targetId: id, detail: { action: req.action, targetId: req.targetId, requestedBy: req.requestedName, comment: String(body.comment ?? '') } })
+  return { request: decided }
+})

package/server/api/workshop/approvals/index.get.ts

@@ -0,0 +1,22 @@
+/**
+ * GET /api/workshop/approvals —— 高危操作复核记录列表(R3)。
+ * admin/editor 可见全部;其他角色仅本人发起的记录(与 R1 审计查询同一可见性口径)。
+ * ?scope=pending(默认,待审) | all(近 200 条含已裁决)
+ */
+import { getQuery } from 'h3'
+import { resolveUser, isAdmin } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getOps } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const repo = getOps()?.approvalRequests
+  if (!repo) return { requests: [] }
+  const q = getQuery(event)
+  const scope = q.scope === 'all' ? 'all' : 'pending'
+  const rows = scope === 'pending' ? repo.listPending() : repo.list(200)
+  const visible = isAdmin(user) || user.role === 'editor'
+    ? rows
+    : rows.filter(r => r.requestedBy === user.id)
+  return { requests: visible }
+})

package/server/api/workshop/assets/character/[id].delete.ts

@@ -0,0 +1,33 @@
+/**
+ * DELETE /api/workshop/assets/character/:id —— 删除模型(引删保护)。
+ * - Bearer 用户 token;仍被 N 个 Agent 绑定 → 不硬删,返回 used>0 提示
+ * - 未绑定 → 移除注册表记录 + 磁盘文件
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { defineApiHandler } from '@/server/utils/response'
+import { getCharacterAssetRepo } from '@/server/services/workshop/assets/character-asset.repo'
+import fs from 'node:fs'
+import path from 'node:path'
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const id = getRouterParam(event, 'id')!
+  const repo = getCharacterAssetRepo()
+  const asset = repo.findById(id)
+  if (!asset) throw new AppError(404, 'NOT_FOUND', `模型不存在: ${id}`)
+
+  const res = repo.remove(id)
+  if (!res.kept && !res.used) {
+    // 硬删文件(从 public 路径还原磁盘路径)
+    // 从 public 路径还原磁盘路径:file 形如 /assets/game/character/<id>.png → public/assets/...
+    const rel = asset.file.replace(/^\//, '')
+    const abs = path.join(process.cwd(), 'public', rel)
+    try {
+      fs.unlinkSync(abs)
+    }
+    catch { /* 文件可能已不在,忽略 */ }
+  }
+  return { deleted: !res.kept, used: res.used, asset: asset.file }
+})

package/server/api/workshop/assets/character/index.get.ts

@@ -0,0 +1,17 @@
+/**
+ * GET /api/workshop/assets/character —— 列出角色模型库(内置 + workspace 私有)。
+ * - Bearer 用户 token;workspaceId 可选(query,缺省返回全局库)
+ * - 返回 { assets: CharacterAsset[] }
+ */
+import { getQuery } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getCharacterAssetRepo } from '@/server/services/workshop/assets/character-asset.repo'
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const q = getQuery(event)
+  const workspaceId = typeof q.workspaceId === 'string' ? q.workspaceId : ''
+  const repo = getCharacterAssetRepo()
+  return { assets: repo.listAll(workspaceId) }
+})

package/server/api/workshop/assets/character/index.post.ts

@@ -0,0 +1,87 @@
+/**
+ * POST /api/workshop/assets/character —— 上传角色模型(单帧 PNG 或精灵表)。
+ * - Bearer 用户 token;multipart: file(图片)+ name + workspaceId + kind/sheet/anims(可选)
+ * - 校验:type 白名单(png/webp/gif)+ 尺寸上限(5MB)+ 像素尺寸读取
+ * - 写入 public/assets/game/character/<id>.png;注册表登记
+ * - 返回 { asset: CharacterAsset }
+ */
+import { readMultipartFormData } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { defineApiHandler } from '@/server/utils/response'
+import { getCharacterAssetRepo } from '@/server/services/workshop/assets/character-asset.repo'
+import fs from 'node:fs'
+import path from 'node:path'
+
+const ALLOWED = new Set(['image/png', 'image/webp', 'image/gif', 'model/gltf-binary', 'model/gltf+json', 'application/octet-stream'])
+const MAX_BYTES = 5 * 1024 * 1024
+/** 精灵表:读取 IHDR 宽高(大端) */
+function readPngSize(buf: Uint8Array): { w: number, h: number } | null {
+  if (buf.length < 24) return null
+  // PNG signature 8 + IHDR len/type 8 → width at 16, height at 20(big-endian)
+  const sig = (buf[12]! << 24) | (buf[13]! << 16) | (buf[14]! << 8) | buf[15]!
+  if (sig !== 0x49484452) return null
+  const rd16 = (o: number) => (buf[o]! << 24) | (buf[o + 1]! << 16) | (buf[o + 2]! << 8) | buf[o + 3]!
+  return { w: rd16(16), h: rd16(20) }
+}
+/** 是否为 3D 模型(.glb/.gltf) */
+function is3dKind(type: string): boolean {
+  return type === 'model/gltf-binary' || type === 'model/gltf+json' || type === 'application/octet-stream'
+}
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const parts = await readMultipartFormData(event)
+  if (!parts || parts.length === 0) throw new AppError(400, 'BAD_REQUEST', '缺少上传文件(multipart form-data)')
+
+  let file: { data: Uint8Array, name: string, type: string } | null = null
+  let name = ''
+  let workspaceId = ''
+  let kind = 'sheet'
+  let frameWidth = 48
+  let frameHeight = 88
+  let frames = 4
+  for (const p of parts) {
+    if (p.name === 'file' && p.data) {
+      file = { data: p.data, name: p.filename ?? 'model.png', type: p.type ?? '' }
+    }
+    else if (p.name === 'name') name = (p.data?.toString() ?? '').trim()
+    else if (p.name === 'workspaceId') workspaceId = (p.data?.toString() ?? '').trim()
+    else if (p.name === 'kind') kind = (p.data?.toString() ?? '').trim() || 'sheet'
+    else if (p.name === 'frameWidth') frameWidth = Number(p.data?.toString() ?? 48) || 48
+    else if (p.name === 'frameHeight') frameHeight = Number(p.data?.toString() ?? 88) || 88
+    else if (p.name === 'frames') frames = Number(p.data?.toString() ?? 4) || 4
+  }
+  if (!file) throw new AppError(400, 'BAD_REQUEST', '缺 file 字段')
+  if (!file.type || !ALLOWED.has(file.type)) throw new AppError(400, 'UNSUPPORTED_TYPE', `不支持的文件类型: ${file.type}(仅 png/webp/gif/glb/gltf)`)
+  if (file.data.length > MAX_BYTES) throw new AppError(400, 'TOO_LARGE', '文件超过 5MB 上限')
+
+  const is3d = is3dKind(file.type) || /\.(glb|gltf)$/i.test(file.name)
+
+  // 像素校验(仅 png 可读 IHDR;webp/gif 跳过尺寸读取,靠浏览器渲染;glb/gltf 不校验像素)
+  let dims: { w: number, h: number } | null = null
+  if (file.type === 'image/png') dims = readPngSize(file.data)
+  if (file.type === 'image/png' && !dims) throw new AppError(400, 'BAD_PIXEL', 'PNG 像素尺寸读取失败(文件损坏或非标准 PNG)')
+
+  const id = `up-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 7)}`
+  const ext = is3d
+    ? (/\.gltf$/i.test(file.name) ? 'gltf' : 'glb')
+    : file.type === 'image/png' ? 'png' : file.type === 'image/webp' ? 'webp' : 'gif'
+  const charDir = path.join(process.cwd(), 'public', 'assets', 'game', 'character')
+  fs.mkdirSync(charDir, { recursive: true })
+  const filePath = path.join(charDir, `${id}.${ext}`)
+  fs.writeFileSync(filePath, file.data)
+
+  const publicFile = `/assets/game/character/${id}.${ext}`
+  const repo = getCharacterAssetRepo()
+  const asset = repo.create({
+    id,
+    workspaceId,
+    name: name || file.name.replace(/\.[^.]+$/, ''),
+    file: publicFile,
+    kind: (is3d ? 'glb' : kind === 'single' ? 'single' : kind === 'zip' ? 'zip' : 'sheet') as 'single' | 'sheet' | 'zip' | 'glb',
+    sheet: !is3d && kind !== 'single' ? { frameWidth, frameHeight, frames } : undefined,
+    author: 'user',
+  })
+  return { asset }
+})

package/server/api/workshop/assets/devices/[id].delete.ts

@@ -0,0 +1,43 @@
+/**
+ * DELETE /api/workshop/assets/devices/:id —— 删除设备模型文件(从模型库移除)。
+ * - Bearer 用户 token;id 为 `dev-folder-<base>`(或裸 base 名);仅允许删除 devices 目录内文件。
+ * - 已被设备孪生引用的模型删除后,对应场景节点在刷新/同步时因缺模型被跳过(不影响其余)。
+ * - 返回 { deleted, file }
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { defineApiHandler } from '@/server/utils/response'
+import fs from 'node:fs'
+import path from 'node:path'
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const raw = getRouterParam(event, 'id')!
+  const base = raw.replace(/^dev-folder-/, '')
+  // 路径穿越与非法名防护:仅允许安全的文件基名
+  if (!/^[A-Za-z0-9._ -]+$/.test(base) || base === '.' || base === '..') {
+    throw new AppError(400, 'BAD_REQUEST', '非法模型 id')
+  }
+  const devDir = path.join(process.cwd(), 'public', 'assets', 'game', 'devices')
+  const target = path.join(devDir, base)
+  if (!target.startsWith(devDir + path.sep)) throw new AppError(400, 'BAD_REQUEST', '非法路径')
+
+  // 文件可能带任意受支持扩展名:按基名匹配目录内文件
+  let deleted = ''
+  let entries: string[] = []
+  try {
+    entries = fs.readdirSync(devDir)
+  }
+  catch { /* 目录不存在:无文件可删 */ }
+  for (const name of entries) {
+    const ext = name.slice(name.lastIndexOf('.')).toLowerCase()
+    if ((ext === '.glb' || ext === '.gltf' || ext === '.obj' || ext === '.fbx') && name.slice(0, name.lastIndexOf('.')) === base) {
+      fs.rmSync(path.join(devDir, name), { force: true })
+      deleted = name
+      break
+    }
+  }
+  if (!deleted) throw new AppError(404, 'NOT_FOUND', `设备模型不存在: ${base}`)
+  return { deleted: true, file: `/assets/game/devices/${deleted}` }
+})

package/server/api/workshop/assets/devices/index.get.ts

@@ -0,0 +1,103 @@
+/**
+ * GET /api/workshop/assets/devices —— 设备/角色 3D 模型资源扫描(真实文件系统)。
+ *
+ * 扫描 public/assets/game/devices 与 public/assets/game/character 目录下的模型文件
+ * (glb/gltf/obj/fbx),为每个文件生成资源元数据清单。浏览器侧经此 API 发现模型——
+ * 运行期新增文件即时可见(不依赖 Vite 构建期 glob)。
+ *
+ * - 目录缺失/不可读 → 空数组(不报错,前端走内置兜底);
+ * - 不支持的格式不会被静默收录(扩展名白名单外忽略);
+ * - 返回 { devices: ModelAsset[], characters: ModelAsset[] },ModelAsset 见下方 type。
+ */
+import { readdirSync, statSync } from 'node:fs'
+import { join } from 'node:path'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+
+/** 扫描产出的模型资源元数据(前端模型库卡片消费) */
+export interface SceneModelAsset {
+  id: string
+  name: string
+  /** 浏览器可访问 URL(/assets/...;与上传资产同源) */
+  file: string
+  /** 资源类别:device = 设备实体模型,character = 角色模型 */
+  category: 'device' | 'character'
+  fileType: 'glb' | 'gltf' | 'obj' | 'fbx'
+  /** 缺省缩放倍率(拖入场景时的 baseline;3D 渲染层再按包围盒归一化) */
+  defaultScale: number
+  /** 文件字节数 */
+  size: number
+  /** 缩略图(无则缺省;3D 模型不生成预览) */
+  thumbnailPath: string | null
+  /** 绑定的绑定键(与前端 dev-folder-<name>/character-folder-<name> 对齐) */
+  key: string
+}
+
+const SUPPORTED = new Set(['.glb', '.gltf', '.obj', '.fbx'])
+const BASE_DIRS = {
+  device: 'public/assets/game/devices',
+  character: 'public/assets/game/character',
+}
+
+/** 薄膜双拉产线基础设备元数据(basename → 展示名 + 相对高度系数)。
+ *  高度系数以 TD 拉幅机为 1.0 基准(与设计稿一致的比例关系):
+ *  渲染层把每个 GLB 归一化到基准高度 × 系数 —— 产线设备高矮错落,不做等高强归一。 */
+const DEVICE_META: Record<string, { label: string, hFactor: number }> = {
+  'extruder': { label: '挤出机 · EXT', hFactor: 0.69 },
+  'caster': { label: '流延冷却单元 · CST', hFactor: 0.87 },
+  'mdo': { label: 'MD 纵拉机 · MDO', hFactor: 1.08 },
+  'tdo': { label: 'TD 拉幅机 · TDO', hFactor: 1.0 },
+  'winder': { label: '收卷机 · WND', hFactor: 0.78 },
+  'thickness-scanner': { label: '厚度扫描仪 · THK', hFactor: 0.82 },
+  'agv': { label: 'AGV 搬运车 · AGV', hFactor: 0.38 },
+  'power-cabinet': { label: '配电柜 · PWR', hFactor: 0.62 },
+  'device-console': { label: '控制台 · CON', hFactor: 0.5 },
+  'device-robot-arm': { label: '机械臂单元 · ARM', hFactor: 0.5 },
+  'device-scanner': { label: '扫描仪 · SCN', hFactor: 1.0 },
+  'pump': { label: '循环泵 · PMP', hFactor: 1.0 },
+}
+
+function scanDir(category: 'device' | 'character', folder: string): SceneModelAsset[] {
+  const abs = join(process.cwd(), folder)
+  let entries: string[]
+  try {
+    entries = readdirSync(abs)
+  }
+  catch {
+    // 目录未建立:空清单(前端兜底内置)
+    return []
+  }
+  const out: SceneModelAsset[] = []
+  for (const name of entries.sort()) {
+    const ext = name.slice(name.lastIndexOf('.')).toLowerCase()
+    if (!SUPPORTED.has(ext)) continue
+    let size = 0
+    try {
+      size = statSync(join(abs, name)).size
+    }
+    catch { /* 无权限等;仅元数据缺省 */ }
+    const base = name.replace(/\.[^.]+$/, '')
+    const id = `${category === 'device' ? 'dev-folder-' : 'ch-folder-'}${base}`
+    const meta = category === 'device' ? DEVICE_META[base] : undefined
+    out.push({
+      id,
+      name: meta?.label ?? base.replace(/[-_]/g, ' '),
+      file: `/assets/game/${category === 'device' ? 'devices' : 'character'}/${name}`,
+      category,
+      fileType: ext.slice(1) as SceneModelAsset['fileType'],
+      defaultScale: meta?.hFactor ?? 1,
+      size,
+      thumbnailPath: null,
+      key: base,
+    })
+  }
+  return out
+}
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  return {
+    devices: scanDir('device', BASE_DIRS.device),
+    characters: scanDir('character', BASE_DIRS.character).filter(a => a.fileType === 'glb' || a.fileType === 'gltf'),
+  }
+})

package/server/api/workshop/assets/devices/index.post.ts

@@ -0,0 +1,53 @@
+/**
+ * POST /api/workshop/assets/devices —— 上传设备/实体 3D 模型(拖入小镇生成数字孪生)。
+ * - Bearer 用户 token;multipart: file(.glb/.gltf)+ name(可选)
+ * - 校验:扩展名白名单(glb/gltf/obj/fbx)+ 尺寸上限(30MB,3D 模型比贴图大)
+ * - 写入 public/assets/game/devices/<id>.<ext>,运行期扫描接口即时可见
+ * - 返回 { asset: SceneModelAsset }
+ */
+import { readMultipartFormData } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { defineApiHandler } from '@/server/utils/response'
+import fs from 'node:fs'
+import path from 'node:path'
+
+const ALLOWED_EXT = new Set(['.glb', '.gltf', '.obj', '.fbx'])
+const MAX_BYTES = 30 * 1024 * 1024
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const parts = await readMultipartFormData(event)
+  if (!parts || parts.length === 0) throw new AppError(400, 'BAD_REQUEST', '缺少上传文件(multipart form-data)')
+
+  let file: { data: Uint8Array, name: string } | null = null
+  let name = ''
+  for (const p of parts) {
+    if (p.name === 'file' && p.data) file = { data: p.data, name: p.filename ?? 'device.glb' }
+    else if (p.name === 'name') name = (p.data?.toString() ?? '').trim()
+  }
+  if (!file) throw new AppError(400, 'BAD_REQUEST', '缺 file 字段')
+  const ext = path.extname(file.name).toLowerCase()
+  if (!ALLOWED_EXT.has(ext)) throw new AppError(400, 'UNSUPPORTED_TYPE', `不支持的模型类型: ${ext}(仅 ${[...ALLOWED_EXT].join('/')})`)
+  if (file.data.length > MAX_BYTES) throw new AppError(400, 'TOO_LARGE', '文件超过 30MB 上限')
+
+  const id = `dev-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 7)}`
+  const devDir = path.join(process.cwd(), 'public', 'assets', 'game', 'devices')
+  fs.mkdirSync(devDir, { recursive: true })
+  const filePath = path.join(devDir, `${id}${ext}`)
+  fs.writeFileSync(filePath, file.data)
+
+  return {
+    asset: {
+      id: `dev-folder-${id}`,
+      name: name || file.name.replace(/\.[^.]+$/, ''),
+      file: `/assets/game/devices/${id}${ext}`,
+      category: 'device',
+      fileType: ext.slice(1),
+      defaultScale: 1,
+      size: file.data.length,
+      thumbnailPath: null,
+      key: id,
+    },
+  }
+})

package/server/api/workshop/audit.get.ts

@@ -0,0 +1,43 @@
+/**
+ * GET /api/workshop/audit —— 审计日志查询(R1)。
+ * admin 可查全部(可按 action/targetId 过滤);其他角色仅限本人条目(行为透明,越权不可见他人)。
+ */
+import { getQuery } from 'h3'
+import { resolveUser, isAdmin } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getOps } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const repo = getOps()?.audit
+  if (!repo) return { entries: [] }
+  const q = getQuery(event)
+  const limit = Math.min(500, Math.max(1, Number(q.limit) || 100))
+  const rows = repo.query({
+    actor: isAdmin(user) ? undefined : user.id,
+    action: typeof q.action === 'string' && q.action ? q.action : undefined,
+    targetId: typeof q.targetId === 'string' && q.targetId ? q.targetId : undefined,
+    limit,
+  })
+  const entries = rows.map((r) => {
+    let detail: unknown
+    try {
+      detail = JSON.parse(String(r.detailJson ?? '{}'))
+    }
+    catch {
+      detail = {}
+    }
+    return {
+      id: r.id,
+      actor: r.actor,
+      actorName: r.actorName,
+      actorKind: r.actorKind,
+      action: r.action,
+      targetKind: r.targetKind,
+      targetId: r.targetId,
+      detail,
+      at: r.at,
+    }
+  })
+  return { entries }
+})