agentworkshop 0.2.1

package/scripts/_dbg-agent-tools-audit.mjs

@@ -0,0 +1,154 @@
+/** Agent 工业工具审计:绑定鉴权/物理语义/联锁校验/手动审批/数据查询/孪生绑定 UI */
+import puppeteer from 'puppeteer-core'
+
+const TOKEN = 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c'
+const ROOT = 'http://127.0.0.1:3000'
+const H = { authorization: `Bearer ${TOKEN}`, 'content-type': 'application/json' }
+const sleep = (ms) => new Promise(r => setTimeout(r, ms))
+const fail = (m) => { console.error('FAIL:', m); process.exitCode = 1 }
+const jpost = (u, b) => fetch(ROOT + u, { method: 'POST', headers: H, body: JSON.stringify(b ?? {}) }).then(r => r.json())
+const jget = (u) => fetch(ROOT + u, { headers: H }).then(r => r.json())
+const jdel = (u) => fetch(ROOT + u, { method: 'DELETE', headers: H }).then(r => r.json())
+
+// 工具调用经 HTTP 桥(与 omp host tools 同一服务层函数:industrial-tools.ts)
+const invoke = async (tool, args, agentId = AGENT) =>
+  (await jpost('/api/workshop/agent-tools/invoke', { agentId, tool, args })).data.result
+
+// ===== 1. 产线/节点/配方夹具 =====
+const line = (await jpost('/api/workshop/dcw/lines', { name: '工具审计线' })).data.line
+const twins = (await jget('/api/workshop/device-twins')).data.twins.filter(t => t.kind !== 'daq')
+const dev = twins[0]
+const dq = (await jpost('/api/workshop/daq', { templateRef: 'daq-temp-tc', name: '工具审计-温度采集', lineId: line.id, intervalMs: 500 })).data.node
+const dw = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: '工具审计-温度设定', lineId: line.id })).data.node
+const prod = (await jpost('/api/workshop/dcw/products', { name: '工具审计产品', lineId: line.id })).data.product
+const rc = (await jpost('/api/workshop/dcw/recipes', {
+  productId: prod.id, name: '工具审计配方',
+  params: [{ templateRef: 'dcw-temp-sp', nodeId: dw.id, value: 180, min: 176, max: 188 }],
+  daqWindows: [{ nodeId: dq.id, min: 100, max: 260 }],
+})).data.recipe
+const AGENT = 'agt-audit-1'
+// 清理历史运行残留绑定(固定 agentId 跨轮复用)
+for (const b of (await jget(`/api/workshop/agent-tools/bindings?agentId=${AGENT}`)).data.bindings) {
+  await jdel(`/api/workshop/agent-tools/bindings/${b.id}`)
+}
+await jpost(`/api/workshop/dcw/lines/${line.id}/start`, { recipeId: rc.id })
+await sleep(2500)
+console.log('fixture ready:', line.name, '| daq', dq.id, '| dcw', dw.id)
+
+// ===== 2. REST 绑定 CRUD =====
+const bDcw = (await jpost('/api/workshop/agent-tools/bindings', { agentId: AGENT, nodeId: dw.id, kind: 'dcw', mode: 'manual' })).data.binding
+const bDaq = (await jpost('/api/workshop/agent-tools/bindings', { agentId: AGENT, nodeId: dq.id, kind: 'daq', mode: 'auto' })).data.binding
+const list = (await jget(`/api/workshop/agent-tools/bindings?agentId=${AGENT}`)).data.bindings
+if (list.length === 2 && bDcw.mode === 'manual') console.log('PASS 绑定 CRUD:数控(manual)+ 数采(auto)')
+else fail(`绑定 CRUD 异常: ${JSON.stringify(list)}`)
+
+// ===== 3. 工具语义(HTTP 桥 = omp host tool 同路径) =====
+{
+  // 3.1 未绑定节点 → 鉴权拒绝
+  const denied = await invoke('dcw_control', { node_id: 'dw-nonexist', value: 180 })
+  if (denied.isError && denied.text.includes('无权')) console.log('PASS dcw_control 鉴权:未绑定节点拒绝')
+  else fail(`鉴权失效: ${denied.text.slice(0, 60)}`)
+
+  // 3.2 my_industrial_nodes:物理语义 + 窗口 + 模式
+  const mine = await invoke('my_industrial_nodes', {})
+  const okMine = mine.text.includes('数控') && mine.text.includes('数采') && mine.text.includes('[176, 188]') && mine.text.includes('手动确认')
+  if (okMine) console.log('PASS my_industrial_nodes:物理含义/配方窗口/控制模式齐备')
+  else fail(`节点语义缺失: ${mine.text.slice(0, 200)}`)
+
+  // 3.3 manual 模式:挂起审批 → 批准 → 执行成功
+  const pendingP = invoke('dcw_control', { node_id: dw.id, value: 182 })
+  await sleep(600)
+  const pending = (await jget(`/api/workshop/agent-tools/approvals?agentId=${AGENT}`)).data.approvals
+  if (pending.length !== 1) fail(`审批未挂起: ${pending.length}`)
+  else console.log('PASS manual 模式:下发挂起待审批(', pending[0].detail.slice(0, 40), ')')
+  const dec = await jpost(`/api/workshop/agent-tools/approvals/${pending[0].id}/decide`, { approved: true, comment: '同意,按工艺执行' })
+  const result = await pendingP
+  if (dec.data?.approval?.status === 'approved' && result.text.includes('下发成功') && result.text.includes('182')) console.log('PASS 批准后执行成功,回读语义齐备')
+  else fail(`批准执行异常: ${result.text.slice(0, 120)}`)
+
+  // 3.4 拒绝 + 备注 → 返回 tool result
+  const pendingP2 = invoke('dcw_control', { node_id: dw.id, value: 185 })
+  await sleep(600)
+  const pending2 = (await jget(`/api/workshop/agent-tools/approvals?agentId=${AGENT}`)).data.approvals
+  await jpost(`/api/workshop/agent-tools/approvals/${pending2[0].id}/decide`, { approved: false, comment: '窗口上沿太近,不要动' })
+  const result2 = await pendingP2
+  if (!result2.text.includes('下发成功') && result2.text.includes('窗口上沿太近')) console.log('PASS 拒绝 + 用户备注回给 tool result')
+  else fail(`拒绝备注缺失: ${result2.text.slice(0, 120)}`)
+
+  // 3.5 模式切 auto → 直接执行;越窗 195 联锁拒绝
+  await jpatchWrap(bDcw.id)
+  async function jpatchWrap(id) {
+    await fetch(`${ROOT}/api/workshop/agent-tools/bindings/${id}`, { method: 'PATCH', headers: H, body: JSON.stringify({ mode: 'auto' }) })
+  }
+  const auto = await invoke('dcw_control', { node_id: dw.id, value: 182 })
+  if (auto.text.includes('下发成功')) console.log('PASS auto 模式直接执行(无需批准)')
+  else fail(`auto 模式异常: ${auto.text.slice(0, 100)}`)
+  const over = await invoke('dcw_control', { node_id: dw.id, value: 195 })
+  if (over.isError && over.text.includes('195')) console.log('PASS 工具联锁:越配方窗口 195 被拒(物理语义回给 AI)')
+  else fail(`联锁失效: ${over.text.slice(0, 100)}`)
+
+  // 3.6 daq_query:最近数据 + 物理语义
+  const q = await invoke('daq_query', { last_minutes: 5 })
+  const okQ = q.text.includes('熔体/箱体温度') && q.text.includes('最新') && q.text.includes('工具审计-温度采集')
+  if (okQ) console.log('PASS daq_query:物理语义 + 统计 + 序列')
+  else fail(`daq_query 异常: ${q.text.slice(0, 200)}`)
+  const qForb = await invoke('daq_query', { node_id: 'dn-nonexist' })
+  if (qForb.isError) console.log('PASS daq_query 鉴权:未绑定节点拒绝')
+  else fail('daq_query 鉴权失效')
+}
+
+// ===== 4. 孪生 UI:Agent 检查器绑定面板 =====
+// 取一个真实 Channel agent id
+const chans = (await jget('/api/workshop/channels')).data
+const firstCh = (chans ?? [])[0]
+const chanAgents = firstCh ? (await jget(`/api/workshop/channels/${firstCh.id}/agents`)).data : []
+const agentId = chanAgents[0]?.id ?? ''
+if (agentId) {
+  const browser = await puppeteer.launch({
+    executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe',
+    headless: 'new',
+    args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1200'],
+  })
+  const page = await browser.newPage()
+  await page.setViewport({ width: 1600, height: 1200 })
+  await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+  await page.goto(`${ROOT}/town`, { waitUntil: 'domcontentloaded', timeout: 90000 })
+  for (let i = 0; i < 40; i++) {
+    if (await page.evaluate(() => (window.__town?.scene?.deviceNodes?.size ?? 0) > 0)) break
+    await sleep(1000)
+  }
+  for (let i = 0; i < 30; i++) {
+    if (await page.evaluate(() => typeof window.__town?.scene?.setSelected === 'function')) break
+    await sleep(1000)
+  }
+  await page.evaluate(() => {
+    const btns = [...document.querySelectorAll('button')]
+    btns.find(b => b.textContent.trim() === '编辑')?.click()
+  })
+  await sleep(400)
+  await page.evaluate((id) => { window.__town.scene.setSelected({ kind: 'agent', id }) }, agentId)
+  await sleep(900)
+  const ui = await page.evaluate(() => ({
+    hasSect: document.body.textContent.includes('工业节点绑定'),
+    hasEmpty: document.body.textContent.includes('未绑定工业节点'),
+    hasBindBar: document.body.textContent.includes('选择节点…'),
+  }))
+  console.log('agent inspector:', JSON.stringify(ui))
+  if (ui.hasSect && ui.hasBindBar) console.log('PASS 孪生侧栏 Agent 绑定面板渲染')
+  else fail(`绑定面板缺失: ${JSON.stringify(ui)}`)
+  await page.screenshot({ path: 'docs/audit/screenshots/agent-bind-panel.png' })
+  await browser.close()
+}
+else {
+  console.log('[warn] 无运行时 Agent,跳过 UI 段(REST/工具段已覆盖)')
+}
+
+// ===== 清理 =====
+await jpost(`/api/workshop/dcw/lines/${line.id}/stop`, {})
+await jdel(`/api/workshop/daq/${dq.id}`)
+await jdel(`/api/workshop/dcw/${dw.id}`)
+await jdel(`/api/workshop/dcw/recipes/${rc.id}`)
+await jdel(`/api/workshop/dcw/products/${prod.id}`)
+await jdel(`/api/workshop/dcw/lines/${line.id}`)
+console.log(process.exitCode ? 'AUDIT FAILED' : 'AUDIT ALL PASS')
+process.exit(process.exitCode ?? 0)

package/scripts/_dbg-agent-workflow-audit.mjs

@@ -0,0 +1,177 @@
+/** mock 真实作业流审计:多 Agent × 多节点绑定/读写/越权矩阵/HITL 并发/解绑失效/级联清理 */
+const TOKEN = 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c'
+const ROOT = 'http://127.0.0.1:3000'
+const H = { authorization: `Bearer ${TOKEN}`, 'content-type': 'application/json' }
+const sleep = (ms) => new Promise(r => setTimeout(r, ms))
+const fail = (m) => { console.error('FAIL:', m); process.exitCode = 1 }
+const jpost = (u, b) => fetch(ROOT + u, { method: 'POST', headers: H, body: JSON.stringify(b ?? {}) }).then(r => r.json())
+const jget = (u) => fetch(ROOT + u, { headers: H }).then(r => r.json())
+const jdel = (u) => fetch(ROOT + u, { method: 'DELETE', headers: H }).then(r => r.json())
+const invoke = (agentId, tool, args) => jpost('/api/workshop/agent-tools/invoke', { agentId, tool, args }).then(r => r.data.result)
+const bindings = (agentId) => jget(`/api/workshop/agent-tools/bindings?agentId=${agentId}`).then(d => d.data.bindings)
+const bind = (agentId, nodeId, kind, mode) => jpost('/api/workshop/agent-tools/bindings', { agentId, nodeId, kind, mode })
+const daqNodes = () => jget('/api/workshop/daq').then(d => d.data.nodes)
+
+const cleanup = []
+async function main() {
+  // ===== 场景搭建:一条产线,两个工艺位(温度 + 压力),两个 Agent 分工 =====
+  const line = (await jpost('/api/workshop/dcw/lines', { name: '作业流审计线' })).data.line
+  cleanup.push(['line', line.id])
+  const prod = (await jpost('/api/workshop/dcw/products', { name: '作业流审计产品', lineId: line.id })).data.product
+  cleanup.push(['prod', prod.id])
+  // 3 个数控 + 2 个数采(多节点绑定场景)
+  const dw1 = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: '作业-温度设定', lineId: line.id })).data.node
+  const dw2 = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-pressure-sp', name: '作业-压力设定', lineId: line.id })).data.node
+  const dw3 = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-speed-sp', name: '作业-速度设定', lineId: line.id })).data.node
+  const dq1 = (await jpost('/api/workshop/daq', { templateRef: 'daq-temp-tc', name: '作业-温度采集', lineId: line.id, intervalMs: 500 })).data.node
+  const dq2 = (await jpost('/api/workshop/daq', { templateRef: 'daq-pressure-tx', name: '作业-压力采集', lineId: line.id, intervalMs: 500 })).data.node
+  for (const id of [dw1.id, dw2.id, dw3.id]) cleanup.push(['dcw', id])
+  for (const id of [dq1.id, dq2.id]) cleanup.push(['daq', id])
+
+  // Agent-1(操作员):数控 temp(manual) + 数控 pressure(auto) + 数采 temp
+  // Agent-2(质检员):仅数采 temp + 数采 pressure(只读角色)
+  const A1 = 'agt-op-1'
+  const A2 = 'agt-qc-1'
+  for (const b of [...await bindings(A1), ...await bindings(A2)]) await jdel(`/api/workshop/agent-tools/bindings/${b.id}`)
+  await bind(A1, dw1.id, 'dcw', 'manual')
+  await bind(A1, dw2.id, 'dcw', 'auto')
+  await bind(A1, dq1.id, 'daq', 'auto')
+  await bind(A2, dq1.id, 'daq', 'auto')
+  await bind(A2, dq2.id, 'daq', 'auto')
+  console.log('scenario: A1=dw1(manual)+dw2(auto)+dq1 | A2=dq1+dq2(只读)')
+
+  // 配方:控制参数只含温度;数采窗口含两个采集节点
+  const rc = (await jpost('/api/workshop/dcw/recipes', {
+    productId: prod.id, name: '作业流审计配方',
+    params: [{ templateRef: 'dcw-temp-sp', nodeId: dw1.id, value: 180, min: 176, max: 188 }],
+    daqWindows: [{ nodeId: dq1.id, min: 100, max: 260 }, { nodeId: dq2.id, min: 0.5, max: 1.2 }],
+  })).data.recipe
+  cleanup.push(['recipe', rc.id])
+  const st = await jpost(`/api/workshop/dcw/lines/${line.id}/start`, { recipeId: rc.id })
+  if (!st.data?.line?.active) { fail('line start'); process.exit(1) }
+  await sleep(2500)
+
+  // ===== 1. my_industrial_nodes:A1 多节点清单 =====
+  const mine1 = await invoke(A1, 'my_industrial_nodes', {})
+  const ok1 = mine1.text.includes('温度设定') && mine1.text.includes('压力设定') && mine1.text.includes('温度采集')
+    && mine1.text.includes('176') && mine1.text.includes('188') && mine1.text.includes('手动确认') && mine1.text.includes('自动')
+  if (ok1) console.log('PASS A1 多节点清单:3 绑定(2 数控 + 1 数采),窗口/模式齐备')
+  else fail(`A1 清单异常: ${mine1.text.slice(0, 200)}`)
+  const mine2 = await invoke(A2, 'my_industrial_nodes', {})
+  if (mine2.text.includes('数采') && !mine2.text.includes('[数控]')) console.log('PASS A2 只读清单:仅数采')
+  else fail(`A2 清单异常: ${mine2.text.slice(0, 120)}`)
+
+  // ===== 2. 读写作业流:A1 manual 批准下发 + auto 直接下发 =====
+  const p1 = invoke(A1, 'dcw_control', { node_id: dw1.id, value: 182 })
+  await sleep(600)
+  let pend = (await jget(`/api/workshop/agent-tools/approvals?agentId=${A1}`)).data.approvals
+  // 并发场景:同一节点重复下发 → 去重拒绝
+  const dup = await invoke(A1, 'dcw_control', { node_id: dw1.id, value: 183 })
+  if (dup.isError && dup.text.includes('待审批')) console.log('PASS HITL 并发去重:同节点 pending 期间拒绝新下发')
+  else fail(`并发去重失效: ${dup.text.slice(0, 80)}`)
+  // 用户批准第一条
+  await jpost(`/api/workshop/agent-tools/approvals/${pend[0].id}/decide`, { approved: true, comment: '按配方执行' })
+  const r1 = await p1
+  if (r1.text.includes('下发成功') && r1.text.includes('182')) console.log('PASS A1 dw1(manual) 批准后下发成功')
+  else fail(`manual 下发异常: ${r1.text.slice(0, 120)}`)
+
+  const r2 = await invoke(A1, 'dcw_control', { node_id: dw2.id, value: 0.92 })
+  if (r2.text.includes('下发成功')) console.log('PASS A1 dw2(auto) 直接下发成功')
+  else fail(`auto 下发异常: ${r2.text.slice(0, 120)}`)
+
+  // ===== 3. 越权矩阵 =====
+  // 3.1 A2 试图数控下发(只读角色,无 dcw 绑定)
+  const x1 = await invoke(A2, 'dcw_control', { node_id: dw1.id, value: 185 })
+  if (x1.isError && x1.text.includes('尚未绑定')) console.log('PASS 越权①:A2(只读)数控下发被拒')
+  else fail(`越权①失效: ${x1.text.slice(0, 80)}`)
+  // 3.2 A1 试图操控未绑定的 dw3(同产线但未授权)
+  const x2 = await invoke(A1, 'dcw_control', { node_id: dw3.id, value: 300 })
+  if (x2.isError && x2.text.includes('无权操作') && x2.text.includes(dw3.id)) console.log('PASS 越权②:A1 操控未绑定节点 dw3 被拒')
+  else fail(`越权②失效: ${x2.text.slice(0, 80)}`)
+  // 3.3 A2 试图查询未绑定的节点(不存在节点)
+  const x3 = await invoke(A2, 'daq_query', { node_id: 'dn-xxx' })
+  if (x3.isError && x3.text.includes('无权查询')) console.log('PASS 越权③:A2 查询陌生节点被拒')
+  else fail(`越权③失效: ${x3.text.slice(0, 80)}`)
+  // 3.4 A1 用 A2 的数采视角?不适用——A1 有 dq1;验证 A1 不可查 dq2(未绑定)
+  const x4 = await invoke(A1, 'daq_query', { node_id: dq2.id })
+  if (x4.isError && x4.text.includes('无权查询')) console.log('PASS 越权④:A1 查询未绑定 dq2 被拒')
+  else fail(`越权④失效: ${x4.text.slice(0, 80)}`)
+
+  // ===== 4. 数据读取:A1 不传 node_id = 全部自己的数采节点;A2 全部(2 个) =====
+  const q1 = await invoke(A1, 'daq_query', { last_minutes: 5 })
+  const q2 = await invoke(A2, 'daq_query', { last_minutes: 5 })
+  if (q1.text.includes('作业-温度采集') && q1.text.includes('1 个节点') && !q1.text.includes('作业-压力采集'))
+    console.log('PASS 数据读取:A1 仅见自己绑定的 dq1')
+  else fail(`A1 读取范围异常: ${q1.text.slice(0, 150)}`)
+  if (q2.text.includes('作业-温度采集') && q2.text.includes('作业-压力采集') && q2.text.includes('2 个节点'))
+    console.log('PASS 数据读取:A2 见绑定的 dq1+dq2')
+  else fail(`A2 读取范围异常: ${q2.text.slice(0, 150)}`)
+  // 数值确实来自产线运行(mock 波动数据)
+  const live = (await daqNodes()).find(n => n.id === dq1.id)
+  if (q1.text.includes(`最新 ${live?.value}`) || q1.text.match(/最新 \d/)) console.log('PASS 读取数据来自真实采集流(数值随产线波动)')
+  else console.log('  [info] 数值比对:' + (live?.value ?? '?'))
+
+  // ===== 5. HITL 拒绝路径 + 解绑失效 =====
+  const p5 = invoke(A1, 'dcw_control', { node_id: dw1.id, value: 186 })
+  await sleep(600)
+  pend = (await jget(`/api/workshop/agent-tools/approvals?agentId=${A1}`)).data.approvals
+  await jpost(`/api/workshop/agent-tools/approvals/${pend[0].id}/decide`, { approved: false, comment: '温度稳定期,不要动' })
+  const r5 = await p5
+  if (r5.text.includes('拒绝了') && r5.text.includes('温度稳定期')) console.log('PASS HITL 拒绝:备注回传 tool result')
+  else fail(`拒绝路径异常: ${r5.text.slice(0, 100)}`)
+
+  // 解绑 dw1 → 挂起中的审批取消 + 后续下发无权
+  const p6 = invoke(A1, 'dcw_control', { node_id: dw1.id, value: 184 })
+  await sleep(600)
+  pend = (await jget(`/api/workshop/agent-tools/approvals?agentId=${A1}`)).data.approvals
+  if (pend.length > 0) {
+    const bList = await bindings(A1)
+    const dw1b = bList.find(b => b.nodeId === dw1.id && b.kind === 'dcw')
+    await jdel(`/api/workshop/agent-tools/bindings/${dw1b.id}`)
+    const r6 = await p6
+    if (r6.text.includes('绑定已解除')) console.log('PASS 解绑失效:挂起审批被取消(备注注明原因)')
+    else fail(`解绑失效异常: ${r6.text.slice(0, 100)}`)
+  }
+  else {
+    console.log('  [info] dw1 无挂起(可能已决),直接验证解绑后无权')
+    const bList = await bindings(A1)
+    const dw1b = bList.find(b => b.nodeId === dw1.id && b.kind === 'dcw')
+    await jdel(`/api/workshop/agent-tools/bindings/${dw1b.id}`)
+  }
+  const x5 = await invoke(A1, 'dcw_control', { node_id: dw1.id, value: 180 })
+  if (x5.isError && x5.text.includes('无权操作')) console.log('PASS 解绑后:A1 对 dw1 无权下发')
+  else fail(`解绑后仍可操作: ${x5.text.slice(0, 80)}`)
+
+  // ===== 6. 节点删除级联:删 dw3 → 任何残留绑定自动消失 =====
+  const ghost = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-tension-sp', name: '作业-幽灵设定', lineId: line.id })).data.node
+  cleanup.push(['dcw', ghost.id])
+  await bind(A2, ghost.id, 'dcw', 'auto')
+  await jdel(`/api/workshop/dcw/${ghost.id}`)
+  await sleep(400)
+  const afterGhost = (await invoke(A2, 'my_industrial_nodes', {})).text
+  if (!afterGhost.includes('幽灵')) console.log('PASS 节点删除级联:绑定随删除自动清理')
+  else fail(`级联清理失效: ${afterGhost.slice(0, 100)}`)
+
+  // ===== 7. 停线:写入仍受全局量程约束(工具语义提示无活动配方) =====
+  await jpost(`/api/workshop/dcw/lines/${line.id}/stop`, {})
+  await sleep(500)
+  const r7 = await invoke(A1, 'dcw_control', { node_id: dw2.id, value: 0.7 })
+  if (r7.text.includes('下发成功') && r7.text.includes('无活动配方')) console.log('PASS 停线后下发:全局量程约束 + 语义提示')
+  else fail(`停线下发异常: ${r7.text.slice(0, 100)}`)
+}
+
+main()
+  .then(async () => {
+    // cleanup(LIFO)
+    for (const [kind, id] of [...cleanup].reverse()) {
+      if (kind === 'line') await jpost(`/api/workshop/dcw/lines/${id}/stop`, {}).catch(() => {})
+      const base = kind === 'daq' ? '/api/workshop/daq' : kind === 'dcw' ? '/api/workshop/dcw' : `/api/workshop/dcw/${kind === 'prod' ? 'products' : kind === 'recipe' ? 'recipes' : 'lines'}`
+      await jdel(`${base}/${id}`).catch(() => {})
+    }
+    console.log(process.exitCode ? 'AUDIT FAILED' : 'AUDIT ALL PASS')
+    process.exit(process.exitCode ?? 0)
+  })
+  .catch((err) => {
+    console.error('FATAL:', err.message)
+    process.exit(1)
+  })

package/scripts/_dbg-anim-verify.mjs

@@ -0,0 +1,81 @@
+/** 三处动画/空态验证:/daq 手风琴、/dcw 弹窗、/town Inspector + 右轨空态。 */
+import puppeteer from 'puppeteer-core'
+
+const ROOT = 'http://127.0.0.1:3000'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+const login = await fetch(`${ROOT}/api/users/login`, {
+  method: 'POST',
+  headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+}).then(r => r.json())
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'],
+})
+
+// ---- A. /daq 手风琴 ----
+const p1 = await browser.newPage()
+await p1.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+await p1.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+await p1.goto(`${ROOT}/daq`, { waitUntil: 'domcontentloaded', timeout: 45000 })
+await sleep(6000)
+const bodyBox0 = await p1.evaluate(() => document.querySelector('.opt-body')?.getBoundingClientRect().height)
+await p1.click('.opt-head')
+await sleep(500)
+const bodyBox1 = await p1.evaluate(() => document.querySelector('.opt-body')?.getBoundingClientRect().height)
+console.log('[daq] opt-body 高度 收起→展开:', bodyBox0, '→', bodyBox1, bodyBox1 > 100 ? 'PASS' : 'FAIL')
+await p1.click('.opt-head')
+await sleep(500)
+const bodyBox2 = await p1.evaluate(() => document.querySelector('.opt-body')?.getBoundingClientRect().height)
+console.log('[daq] 再收起:', bodyBox2, bodyBox2 < 5 ? 'PASS(对称收合)' : 'FAIL')
+
+// ---- B. /dcw 弹窗 ----
+const p2 = await browser.newPage()
+await p2.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+await p2.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+await p2.goto(`${ROOT}/dcw`, { waitUntil: 'domcontentloaded', timeout: 45000 })
+await sleep(6000)
+await p2.evaluate(() => {
+  const btn = [...document.querySelectorAll('.aw-page-head button, .page button')].find(b => b.textContent.includes('新建产线') || b.textContent.includes('New'))
+  btn?.click()
+})
+await sleep(400)
+const modalOn = await p2.evaluate(() => {
+  const m = document.querySelector('.modal')
+  if (!m) return null
+  const cs = getComputedStyle(m)
+  return { opacity: cs.opacity, transform: cs.transform, visible: m.getBoundingClientRect().height > 100 }
+})
+console.log('[dcw] 弹窗展开后:', JSON.stringify(modalOn), modalOn?.visible && modalOn.opacity === '1' ? 'PASS(终态正确)' : 'FAIL')
+await p2.screenshot({ path: 'docs/audit/screenshots/redesign0831/dcw-modal-anim.png' })
+
+// ---- C. /town Inspector + 空态 ----
+const p3 = await browser.newPage()
+await p3.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+await p3.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+await p3.goto(`${ROOT}/town`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+await sleep(20000)
+const emptyIco = await p3.evaluate(() => document.querySelectorAll('.rail-empty .re-ico').length)
+console.log('[town] 右轨空态徽记数:', emptyIco, emptyIco >= 1 ? 'PASS' : '(有告警/事件时为 0,不判失败)')
+// 点选场景中一台设备(在左轨数采树里点一个已落位节点 → Inspector 出现)
+const clicked = await p3.evaluate(() => {
+  const node = [...document.querySelectorAll('.daq-node.placed')][0]
+  if (!node) return false
+  node.click()
+  return true
+})
+await sleep(600)
+const insVisible = await p3.evaluate(() => {
+  const el = document.querySelector('.panel.inspector')
+  if (!el) return null
+  const cs = getComputedStyle(el)
+  return { opacity: cs.opacity, transform: cs.transform, h: el.getBoundingClientRect().height }
+})
+console.log('[town] Inspector:', clicked ? '已点击落位节点' : '无落位节点可点', JSON.stringify(insVisible), insVisible?.h > 100 ? 'PASS' : 'SKIP(需场景内落位实体)')
+await p3.screenshot({ path: 'docs/audit/screenshots/redesign0831/town-inspector.png' })
+
+await browser.close()
+console.log('DONE')

package/scripts/_dbg-audit-all-pages.mjs

@@ -0,0 +1,43 @@
+/** 全站巡检截图:8 个主页面一次采齐。 */
+import puppeteer from 'puppeteer-core'
+
+const ROOT = 'http://127.0.0.1:3000'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+const login = await fetch(`${ROOT}/api/users/login`, {
+  method: 'POST',
+  headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+}).then(r => r.json())
+if (!login.data?.token) { console.error('login failed'); process.exit(1) }
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'],
+})
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+await page.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+
+const shots = [
+  ['/', 'audit-home'],
+  ['/daq', 'audit-daq'],
+  ['/dcw', 'audit-dcw'],
+  ['/workshop', 'audit-workshop'],
+  ['/monitor', 'audit-monitor'],
+  ['/users', 'audit-users'],
+  ['/settings', 'audit-settings'],
+]
+for (const [path, name] of shots) {
+  try {
+    await page.goto(`${ROOT}${path}`, { waitUntil: 'domcontentloaded', timeout: 45000 })
+    await sleep(name === 'audit-workshop' ? 9000 : 5000)
+    await page.screenshot({ path: `docs/audit/screenshots/redesign0831/${name}.png`, fullPage: name !== 'audit-workshop' })
+    console.log('ok', name)
+  } catch (e) {
+    console.error('FAIL', name, e.message.slice(0, 80))
+  }
+}
+await browser.close()
+console.log('DONE')

package/scripts/_dbg-autoframe.mjs

@@ -0,0 +1,103 @@
+import puppeteer from 'puppeteer-core'
+
+const BASE = process.env.AW_PAGE_BASE ?? 'http://127.0.0.1:3000'
+const TOKEN = process.env.AW_PAGE_TOKEN ?? ''
+const browser = await puppeteer.launch({
+  executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe',
+  headless: 'new', args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'],
+})
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 1000 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+const errors = []
+page.on('pageerror', e => errors.push(String(e).slice(0, 160)))
+await page.goto(`${BASE}/town`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+for (let i = 0; i < 30; i++) {
+  if (await page.evaluate(() => !!window.__town?.scene?.agents?.size)) break
+  await new Promise(r => setTimeout(r, 1000))
+}
+await new Promise(r => setTimeout(r, 2500))
+await page.evaluate(() => {
+  const s = window.__town.scene
+  s.setMode('edit')
+  const b = [...s.blocks.values()][0]
+  window.__cid = b.channelId
+  s.selectChannel(b.channelId)
+  s.focusTo(b.x, b.z)
+})
+await new Promise(r => setTimeout(r, 1000))
+
+// API 直驱:模拟 channelEdge 拖拽 3.2 倍等比放大(走真实 movePointerDrag 路径)
+const r1 = await page.evaluate(() => {
+  const s = window.__town.scene
+  const b = s.blocks.get(window.__cid)
+  const before = { rx: b.radiusX, rz: b.radiusZ, dolly: s.dolly }
+  const rect0 = s.canvas.getBoundingClientRect()
+  s.tryStartPointerDrag(rect0.left + rect0.width / 2, rect0.top + rect0.height / 2)
+  const kind = s.pointerDrag?.kind
+  // 若命中的是 channel/beacon 而非 channelEdge,直接驱动内部序列等价验证:
+  return { kind, before, cx: b.x, cz: b.z }
+})
+console.log('start:', JSON.stringify(r1))
+if (r1.kind !== 'channelEdge') {
+  // 未抓到边界线(屏幕中心是领地中心):退化为直接等价 API 序列(与真实拖拽同一函数链)
+  await page.evaluate(() => {
+    window.__town.scene.endPointerDrag()
+  })
+}
+// 逐帧放大:直接调用内部等价序列(applyResize 所走路径) via updateChannelLayout + autoFrameTo 由拖拽分支触发…
+// 为走完整 autoFrame 路径,用 channelEdge 的 pointerDrag 结构驱动:
+// 构造 channelEdge 拖拽:镜头对准 边界45°点,使该点位于屏幕中心(精确)
+await page.evaluate(() => {
+  const s = window.__town.scene
+  const b = s.blocks.get(window.__cid)
+  const k = 0.707
+  s.focusTo(b.x + b.radiusX * k, b.z + b.radiusZ * k)
+})
+await new Promise(r => setTimeout(r, 1000))
+const r3 = await page.evaluate(() => {
+  const s = window.__town.scene
+  const rect = s.canvas.getBoundingClientRect()
+  const cx = rect.left + rect.width / 2, cy = rect.top + rect.height / 2
+  // 屏幕中心 = 边界45°点(精确) → tryStartPointerDrag 应命中 channelEdge
+  const started = s.tryStartPointerDrag(cx, cy)
+  const kind = s.pointerDrag?.kind
+  if (!started) return { started, kind }
+  // 逐帧向外拖:每步沿 45° 外推(屏幕上向右下拉 —— 45° 世界方向在此视角下近似右下)
+  for (let i = 1; i <= 12; i++) {
+    s.movePointerDrag(cx + 42 * i, cy + 30 * i)
+  }
+  s.endPointerDrag()
+  const b = s.blocks.get(window.__cid)
+  return { started, kind, after: { rx: Math.round(b.radiusX), rz: Math.round(b.radiusZ) }, dollyAfter: +s.dolly.toFixed(2) }
+})
+console.log('edge drag:', JSON.stringify(r3))
+await new Promise(r => setTimeout(r, 1500))
+// 视口适配检查:领地 8 个极值点 + 中心投影都在 canvas 视口内
+const fit = await page.evaluate(() => {
+  const s = window.__town.scene
+  const b = s.blocks.get(window.__cid)
+  const rect = s.canvas.getBoundingClientRect()
+  const pts = []
+  if (b.shape === 'rect') {
+    for (const [sx, sz] of [[1, 1], [-1, 1], [-1, -1], [1, -1]]) pts.push([b.x + sx * b.radiusX, b.z + sz * b.radiusZ])
+  }
+  else {
+    for (const [sx, sz] of [[1, 0], [-1, 0], [0, 1], [0, -1]]) pts.push([b.x + sx * b.radiusX, b.z + sz * b.radiusZ])
+  }
+  void pts
+  // 可靠估计:读相机 dolly 推可视跨度,与领地尺寸对比
+  const aspect = rect.width / rect.height
+  const spanX = 2 * 613 * aspect * s.dolly * 0.82
+  const spanZ = 2 * 950 * s.dolly * 0.82
+  return {
+    dolly: +s.dolly.toFixed(2),
+    rx: Math.round(b.radiusX), rz: Math.round(b.radiusZ),
+    spanX: Math.round(spanX), spanZ: Math.round(spanZ),
+    fitsX: spanX > b.radiusX * 2.15, fitsZ: spanZ > b.radiusZ * 2.15,
+  }
+})
+console.log('viewport fit:', JSON.stringify(fit))
+console.log('errors:', errors.slice(0, 5))
+await page.screenshot({ path: 'docs/audit/screenshots/autoframe.png' })
+await browser.close()