agentworkshop 0.5.2 → 0.5.4

package/server/plugins/backup.ts

@@ -1,13 +1,13 @@
 /**
  * 备份定时插件(S6,production-readiness-plan)。
  *
- * 对 data/ 下三库(workshop/users/daq-timeseries)每日 VACUUM INTO 快照到
+ * 对 data/ 下三库(workshop/users/daq-timeseries)每日 serialize 镜像快照到
  * data/backups/,按 BACKUP_KEEP(默认 7)轮转;调度模式复用 ws.ts 保留期清理的
  * setInterval + globalThis key 防 HMR 重复 + unref()。dev 与生产均生效
  * (备份无副作用,始终开启;BACKUP_DISABLED=1 可关)。
  */
 import { DatabaseSync } from 'node:sqlite'
-import { existsSync, mkdirSync, readdirSync, rmSync } from 'node:fs'
+import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs'
 import { resolve } from 'node:path'
 import { ensureDataDir } from '@/shared/config/home.mjs'
 
@@ -15,7 +15,23 @@ const g = globalThis as typeof globalThis & { __awBackupTimer?: NodeJS.Timeout,
 
 const DB_FILES = ['workshop.sqlite', 'users.sqlite', 'daq-timeseries.sqlite'] as const
 
-function backupOnce(dataDir: string): void {
+/**
+ * 单库在线快照(hardening ST-2):node:sqlite serialize() 一致性数据库镜像 → 落盘。
+ * 纯读操作,不与主写者抢锁(VACUUM INTO 会与写事务竞争 SQLITE_BUSY,已实测);
+ * 产物为标准 SQLite 文件,与历史 .bak 结构兼容。失败只记录不抛出。
+ */
+async function backupOne(src: string, target: string): Promise<void> {
+  const db = new DatabaseSync(src)
+  try {
+    const image = db.serialize()
+    writeFileSync(target, image)
+  }
+  finally {
+    db.close()
+  }
+}
+
+async function backupOnce(dataDir: string): Promise<void> {
   const backupDir = resolve(dataDir, 'backups')
   mkdirSync(backupDir, { recursive: true })
   const stamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
@@ -24,14 +40,8 @@ function backupOnce(dataDir: string): void {
     if (!existsSync(src)) continue
     const target = resolve(backupDir, `${file}.${stamp}.bak`)
     try {
-      const db = new DatabaseSync(src)
-      try {
-        // VACUUM INTO:在线一致性快照(WAL 下安全),不阻塞长事务
-        db.exec(`VACUUM INTO '${target.replace(/\\/g, '/')}'`)
-      }
-      finally {
-        db.close()
-      }
+      await backupOne(src, target)
+      console.log('[backup]', file, '快照完成(serialize)')
     }
     catch (err) {
       console.error(`[backup] ${file} 快照失败:`, err instanceof Error ? err.message : err)

package/server/plugins/dev-stability-guard.ts

@@ -7,6 +7,9 @@
  * 依赖异常中止进程,绝不能被护栏吞掉。
  */
 const SOCKET_NOISE = /ECONNRESET|EPIPE|ECONNABORTED|ETIMEDOUT|ERR_STREAM_PREMATURE_CLOSE/
+// SQLite 忙/锁(hardening ST-1):多写竞争的瞬态错误,记录并继续;
+// 真正的库损坏/磁盘错误不经此路径,仍走致命语义。
+const SQLITE_BUSY = /SQLITE_BUSY|SQLITE_LOCKED|database is locked/i
 
 function isSocketNoise(reason: unknown): boolean {
   if (reason == null) return false
@@ -22,11 +25,16 @@ function describe(reason: unknown): string {
 }
 
 export default defineNitroPlugin(() => {
+  const isTransientDbBusy = (reason: unknown): boolean => SQLITE_BUSY.test(describe(reason))
   process.on('unhandledRejection', (reason) => {
     if (isSocketNoise(reason)) {
       console.warn(`[stability-guard] socket noise suppressed: ${describe(reason).slice(0, 120)}`)
       return
     }
+    if (isTransientDbBusy(reason)) {
+      console.warn(`[stability-guard] sqlite busy(瞬态,不退出): ${describe(reason).slice(0, 120)}`)
+      return
+    }
     console.error(`[stability-guard] fatal unhandledRejection, exiting:\n${describe(reason)}`)
     process.exit(1)
   })
@@ -35,8 +43,12 @@ export default defineNitroPlugin(() => {
       console.warn(`[stability-guard] socket noise suppressed: ${describe(err).slice(0, 120)}`)
       return
     }
+    if (isTransientDbBusy(err)) {
+      console.warn(`[stability-guard] sqlite busy(瞬态,不退出): ${describe(err).slice(0, 120)}`)
+      return
+    }
     console.error(`[stability-guard] fatal uncaughtException, exiting:\n${describe(err)}`)
     process.exit(1)
   })
-  console.warn('[stability-guard] armed (socket disconnects → log & continue; real errors → exit 1)')
+  console.warn('[stability-guard] armed (socket 断连与 sqlite 瞬态忙 → 记录继续;真实错误 → exit 1)')
 })

package/server/plugins/retention.ts

@@ -0,0 +1,57 @@
+/**
+ * 保留期定时插件(hardening GROW-1)。
+ *
+ * 每 24h 对 workshop.sqlite 的 messages/audit_log/approval_history 做分批保留
+ * 清理(策略见 db/retention.ts;RETENTION_DISABLED=1 可整体关闭)。
+ * 调度模式同 backup.ts:setInterval + globalThis key 防 HMR 重复 + unref()。
+ * 启动 90s 后首跑(避开启动风暴,且错峰于 backup 的 30s 首备)。
+ */
+import { DatabaseSync } from 'node:sqlite'
+import { existsSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { runRetentionSweep } from '@/server/services/workshop/db/retention'
+import { ensureDataDir } from '@/shared/config/home.mjs'
+
+const g = globalThis as typeof globalThis & { __awRetentionTimer?: NodeJS.Timeout }
+
+function sweepOnce(dataDir: string): void {
+  const dbPath = resolve(dataDir, 'workshop.sqlite')
+  if (!existsSync(dbPath)) return
+  const db = new DatabaseSync(dbPath)
+  try {
+    const results = runRetentionSweep(db)
+    for (const r of results) {
+      if (r.removed > 0) console.log(`[retention] ${r.table} 清理 ${r.removed} 行(>${r.days}d)`)
+    }
+  }
+  finally {
+    db.close()
+  }
+}
+
+export default function retentionPlugin() {
+  if (process.env.RETENTION_DISABLED === '1' || process.env.AW_RETENTION_DISABLED === '1') return
+  if (g.__awRetentionTimer) return
+  const dataDir = ensureDataDir()
+
+  const first = setTimeout(() => {
+    try {
+      sweepOnce(dataDir)
+    }
+    catch (err) {
+      console.error('[retention] 首轮清理失败:', err instanceof Error ? err.message : err)
+    }
+  }, 90_000)
+  first.unref?.()
+
+  const timer = setInterval(() => {
+    try {
+      sweepOnce(dataDir)
+    }
+    catch (err) {
+      console.error('[retention] 定时清理失败:', err instanceof Error ? err.message : err)
+    }
+  }, 24 * 3_600_000)
+  timer.unref?.()
+  g.__awRetentionTimer = timer
+}

package/server/services/workshop/agents/node-bindings.repo.ts

@@ -10,7 +10,7 @@
 import { createLogger } from '../logger'
 import { randomUUID } from 'node:crypto'
 import fs from 'node:fs'
-import { join } from 'node:path'
+import { dirname, join } from 'node:path'
 import { ensureDataDir } from '@/shared/config/home.mjs'
 import { AppError, ErrorCodes } from '../../../utils/errors'
 
@@ -148,7 +148,7 @@ export class AgentNodeBindingRepo {
 
   private flush(): void {
     try {
-      fs.mkdirSync(path.dirname(DB_PATH), { recursive: true })
+      fs.mkdirSync(dirname(DB_PATH), { recursive: true })
       fs.writeFileSync(DB_PATH, JSON.stringify(this.list, null, 2), 'utf-8')
     }
     catch (err) {

package/server/services/workshop/daq/daq-controller.ts

@@ -476,12 +476,14 @@ class DaqController {
   controllerState(): AepDaqControllerState & { produced?: number, consumed?: number, dropped?: number, samplesStored?: number, tsdbDropped?: number } {
     // 丢弃 = 队列层真实丢弃(inproc 拥塞/mqtt 断连)+ 消费侧乱序迟到帧(诚实可见)
     const queueLost = g_queueLost()
+    // 单次遍历(hardening PERF-1):status 高频路径不再对全表多次 all()
+    const nodes = this.repo.all()
     return {
       running: this.running,
       defaultIntervalMs: this.defaultIntervalMs,
       defaultPublishIntervalMs: this.defaultPublishIntervalMs,
-      nodesTotal: this.repo.all().length,
-      nodesOnline: this.onlineCount(),
+      nodesTotal: nodes.length,
+      nodesOnline: this.running ? nodes.filter(n => n.enabled).length : 0,
       produced: this.producedCount,
       consumed: this.consumedCount,
       dropped: Math.max(0, this.producedCount - this.consumedCount) + queueLost + this.lateDropped,

package/server/services/workshop/db/retention.ts

@@ -0,0 +1,50 @@
+/**
+ * 增长治理保留策略(hardening GROW-1)。
+ *
+ * 为无保留机制的只增表做分批清理(每批 ≤5000,循环到 0,避免长事务持锁):
+ *   messages          默认 30d   (AW_MESSAGES_RETENTION_D)
+ *   audit_log         默认 90d   (AW_AUDIT_RETENTION_D;合规观察期,从严保留)
+ *   approval_history  默认 180d  (AW_APPROVAL_RETENTION_D;历史裁决主张不可变,放宽)
+ * AW_RETENTION_DISABLED=1 整体逃生门。时间列均为 TEXT ISO,可字典序比较。
+ * channel_events 与 daq_samples 已有各自保留机制,此处不重复覆盖。
+ */
+type DatabaseSyncLike = {
+  prepare: (sql: string) => { run: (...args: unknown[]) => { changes: number | bigint } }
+}
+
+const DAY_MS = 86_400_000
+const BATCH = 5000
+
+const TARGETS = [
+  { table: 'messages', column: 'created_at', days: 30, envKey: 'AW_MESSAGES_RETENTION_D' },
+  { table: 'audit_log', column: 'at', days: 90, envKey: 'AW_AUDIT_RETENTION_D' },
+  { table: 'approval_history', column: 'created_at', days: 180, envKey: 'AW_APPROVAL_RETENTION_D' },
+] as const
+
+function retentionDays(envKey: string, fallback: number): number {
+  const n = Number(process.env[envKey])
+  return Number.isFinite(n) && n > 0 ? n : fallback
+}
+
+export interface RetentionResult { table: string, removed: number, days: number }
+
+/** 对单库执行一轮保留清理;返回各表删除行数(调用方负责 try/catch 与日志)。 */
+export function runRetentionSweep(db: DatabaseSyncLike): RetentionResult[] {
+  if (process.env.AW_RETENTION_DISABLED === '1') return []
+  const out: RetentionResult[] = []
+  for (const t of TARGETS) {
+    const days = retentionDays(t.envKey, t.days)
+    const before = new Date(Date.now() - days * DAY_MS).toISOString()
+    let removed = 0
+    for (;;) {
+      const res = db.prepare(
+        `DELETE FROM ${t.table} WHERE rowid IN (SELECT rowid FROM ${t.table} WHERE ${t.column} < ? LIMIT ${BATCH})`,
+      ).run(before)
+      const n = Number(res.changes)
+      removed += n
+      if (n < BATCH) break
+    }
+    out.push({ table: t.table, removed, days })
+  }
+  return out
+}

package/server/services/workshop/dcw/dcw-controller.ts

@@ -218,10 +218,12 @@ class DcwController {
   }
 
   controllerState() {
+    // 单次遍历(hardening PERF-1):status 高频路径不再对全表多次 all()
+    const nodes = this.repo.all()
     return {
       running: this.running,
-      nodesTotal: this.repo.all().length,
-      nodesOnline: this.running ? this.repo.all().filter(n => n.enabled).length : 0,
+      nodesTotal: nodes.length,
+      nodesOnline: this.running ? nodes.filter(n => n.enabled).length : 0,
       writesTotal: this.writesTotal,
       writesFailed: this.writesFailed,
     }

package/shared/config/home.mjs

@@ -38,16 +38,34 @@ export function findRepoRoot(startDir = process.cwd()) {
   }
 }
 
+/** 从 cwd 向上找项目级配置根(<dir>/.AgentWorkShop 目录真实存在);找不到返回 null。
+ *  向上不超过用户主目录——~/.AgentWorkShop 是回退根,不能被误判为某项目的运行时根 */
+export function findLocalConfigRoot(startDir = process.cwd()) {
+  const home = homedir()
+  let dir = resolve(startDir)
+  for (;;) {
+    const candidate = join(dir, HOME_DIRNAME)
+    if (dir !== home && existsSync(candidate) && statSync(candidate).isDirectory()) return candidate
+    const parent = dirname(dir)
+    if (parent === dir || dir === home) return null
+    dir = parent
+  }
+}
+
 /**
  * 解析当前运行模式与全部路径。
- * 优先级：env.AW_MODE === 'home' 显式强制 home 模式（启动器对全局安装的
- * 应用载荷注入;否则包目录自身含 config.yml+nuxt.config.ts 会被误判为检出）
- * > cwd 向上找检出 > home 模式。
+ * 配置根优先级（用户规约：项目 ./.AgentWorkShop > ~/.AgentWorkShop）：
+ *   ① env.AW_MODE === 'home' 显式强制 home 模式（启动器对全局安装的应用载荷注入;
+ *      否则包目录自身含 config.yml+nuxt.config.ts 会被误判为检出）
+ *   ② cwd 向上找到真实存在的 ./.AgentWorkShop 目录 → 项目运行时根(检出或纯工作区皆可)
+ *   ③ cwd 向上找到项目检出(config.yml+nuxt.config.ts)但无 ./.AgentWorkShop
+ *      → 按规约回退 ~/.AgentWorkShop 作为运行时根(工厂默认 config.yml 仍取检出根)
+ *   ④ 其余任意目录 → home 模式(~/.AgentWorkShop,AW_HOME 可重定向)
  * @returns {{
  *   mode: 'repo'|'home',
  *   root: string,            // repo=检出根; home=应用载荷根(本包)
  *   home: string,            // 用户级根 ~/.AgentWorkShop(AW_HOME 可重定向;用户级指令/全局配置)
- *   configRoot: string,      // 当前生效配置根(repo=<repo>/.AgentWorkShop; home=~/.AgentWorkShop)
+ *   configRoot: string,      // 当前生效配置根(项目运行时=<项目>/.AgentWorkShop; 否则 ~/.AgentWorkShop)
  *   configPath: string,      // 生效的 config.yml(工厂默认;repo 在检出根,home 在配置根)
  *   settingsPath: string,    // 生效的 runtime-settings.json(两种模式都在配置根)
  *   dataDir: string,         // 运行数据目录(两种模式都在配置根)
@@ -55,20 +73,44 @@ export function findRepoRoot(startDir = process.cwd()) {
  */
 export function resolveRunMode({ cwd, packageRoot, env = process.env } = {}) {
   const home = awHome(env)
+  const startDir = cwd ?? process.cwd()
   const forceHome = env.AW_MODE === 'home'
-  const repoRoot = forceHome ? null : findRepoRoot(cwd ?? process.cwd())
+
+  // ② 项目级 ./.AgentWorkShop 显式存在 → 它就是运行时根(最高优先)
+  if (!forceHome) {
+    const localConfigRoot = findLocalConfigRoot(startDir)
+    if (localConfigRoot) {
+      const projectRoot = dirname(localConfigRoot)
+      const repoRoot = isRepoRoot(projectRoot) ? projectRoot : null
+      return {
+        mode: 'repo',
+        root: repoRoot ?? projectRoot,
+        home,
+        configRoot: localConfigRoot,
+        configPath: repoRoot
+          ? join(repoRoot, 'config.yml')
+          : (existsSync(join(localConfigRoot, 'config.yml')) ? join(localConfigRoot, 'config.yml') : join(packageRoot ?? '', 'config.yml')),
+        settingsPath: join(localConfigRoot, 'runtime-settings.json'),
+        dataDir: join(localConfigRoot, 'data'),
+      }
+    }
+  }
+
+  // ③ 检出内运行但无 ./.AgentWorkShop → 回退 ~/.AgentWorkShop(工厂默认配置仍在检出根)
+  const repoRoot = forceHome ? null : findRepoRoot(startDir)
   if (repoRoot) {
-    const configRoot = join(repoRoot, HOME_DIRNAME)
     return {
       mode: 'repo',
       root: repoRoot,
       home,
-      configRoot,
+      configRoot: home,
       configPath: join(repoRoot, 'config.yml'),
-      settingsPath: join(configRoot, 'runtime-settings.json'),
-      dataDir: join(configRoot, 'data'),
+      settingsPath: join(home, 'runtime-settings.json'),
+      dataDir: join(home, 'data'),
     }
   }
+
+  // ④ home 模式
   return {
     mode: 'home',
     root: packageRoot ?? repoRoot,
@@ -82,16 +124,16 @@ export function resolveRunMode({ cwd, packageRoot, env = process.env } = {}) {
 
 /**
  * 运行数据目录（服务端/CLI 通用）：
- *   AW_DATA_DIR 环境变量 > home 模式(AW_MODE=home) 配置根/data
- *   > repo 模式(cwd 有 config.yml) cwd/.AgentWorkShop/data > cwd/data 兜底。
+ *   AW_DATA_DIR 环境变量 > resolveRunMode 的配置根/data
+ *   (项目 ./.AgentWorkShop 显式存在 > 检出内无 .AgentWorkShop 回退 ~/.AgentWorkShop
+ *   > home 模式 ~/.AgentWorkShop/data > cwd/data 兜底)。
  * 启动器(scripts/start.mjs / dev-guard.mjs)会经 resolveRunMode 注入 AW_DATA_DIR;
  * 本函数为其兜底(直接 node .output/server/index.mjs 等无启动器场景)。
  */
 export function dataDirFor(cwd = process.cwd(), env = process.env) {
   if (env.AW_DATA_DIR && String(env.AW_DATA_DIR).trim()) return resolve(String(env.AW_DATA_DIR).trim())
-  if (env.AW_MODE === 'home') return join(awHome(env), 'data')
-  if (existsSync(join(cwd, 'config.yml'))) return join(cwd, HOME_DIRNAME, 'data')
-  return join(cwd, 'data')
+  const rm = resolveRunMode({ cwd, env })
+  return rm.dataDir
 }
 
 /**
@@ -102,7 +144,9 @@ export function dataDirFor(cwd = process.cwd(), env = process.env) {
 export function ensureDataDir(cwd = process.cwd(), env = process.env) {
   const dir = dataDirFor(cwd, env)
   mkdirSync(dir, { recursive: true })
-  if (env.AW_MODE === 'home') return dir
+  // 旧位置迁移仅当配置根就在 cwd 内(本地 ./.AgentWorkShop);回退 ~/.AgentWorkShop
+  // 时不得把检出仓库的旧数据搬进用户全局根(跨项目污染)
+  if (env.AW_MODE === 'home' || !resolve(dir).startsWith(resolve(cwd))) return dir
   const legacyDirs = [join(cwd, 'data'), join(cwd, 'server', 'data')]
   for (const legacy of legacyDirs) {
     if (resolve(legacy) === resolve(dir) || !existsSync(legacy)) continue
@@ -140,6 +184,7 @@ export default {
   awHome,
   isRepoRoot,
   findRepoRoot,
+  findLocalConfigRoot,
   resolveRunMode,
   dataDirFor,
   ensureDataDir,

package/shared/config/single-instance.mjs

@@ -0,0 +1,86 @@
+// ============================================================
+// 单实例互斥(hardening ST-1)—— 零依赖,CLI / 启动脚本通用。
+// 锁文件 <configRoot>/.runtime/aw.lock 原子创建(wx):
+//   { pid, startedAt, mode, port }
+// 已存在且 PID 存活 → 视为已有实例(返回冲突信息,调用方以退出码 2 退出);
+// PID 已死(崩溃/强杀残留) → 自动接管重写。进程退出时 releaseLock 兜底清理。
+// ============================================================
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+function pidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false
+  try {
+    // signal 0 探活:进程存在但不发信号;ESRCH=不存在,EPERM=存在(他人进程)
+    process.kill(pid, 0)
+    return true
+  }
+  catch (err) {
+    return err?.code === 'EPERM'
+  }
+}
+
+/**
+ * 尝试获取单实例锁。
+ * @returns {{ ok: true, lockPath: string, release: () => void }
+ *   | { ok: false, lockPath: string, holder: { pid: number, startedAt: string, mode: string, port: number | null } }}
+ */
+export function acquireLock(configRoot, { mode = 'prod', port = null } = {}) {
+  const runtimeDir = join(configRoot, '.runtime')
+  const lockPath = join(runtimeDir, 'aw.lock')
+  mkdirSync(runtimeDir, { recursive: true })
+  if (existsSync(lockPath)) {
+    let holder = null
+    try {
+      holder = JSON.parse(readFileSync(lockPath, 'utf8'))
+    }
+    catch { /* 损坏锁文件按残留处理 */ }
+    if (holder && pidAlive(holder.pid)) {
+      return { ok: false, lockPath, holder: { ...holder, port: holder.port ?? null } }
+    }
+    try { rmSync(lockPath) } catch { /* 抢不掉则下方 wx 再失败 */ }
+  }
+  const me = { pid: process.pid, startedAt: new Date().toISOString(), mode, port }
+  try {
+    writeFileSync(lockPath, JSON.stringify(me, null, 2), { flag: 'wx' })
+  }
+  catch (err) {
+    // 与并发启动者竞态:按冲突处理
+    let holder = null
+    try { holder = JSON.parse(readFileSync(lockPath, 'utf8')) } catch { /* ignore */ }
+    if (holder && pidAlive(holder.pid)) {
+      return { ok: false, lockPath, holder: { ...holder, port: holder.port ?? null } }
+    }
+    throw err
+  }
+  let released = false
+  const release = () => {
+    if (released) return
+    released = true
+    try {
+      const cur = JSON.parse(readFileSync(lockPath, 'utf8'))
+      if (cur?.pid !== process.pid) return // 锁已被他人接管,不误删
+      rmSync(lockPath)
+    }
+    catch { /* 已不存在/损坏,忽略 */ }
+  }
+  process.once('exit', release)
+  process.once('SIGINT', () => { release(); process.exit(130) })
+  process.once('SIGTERM', () => { release(); process.exit(143) })
+  return { ok: true, lockPath, release }
+}
+
+/** 端口占用探测:返回占用进程 PID(未占用返回 null)。TCP try-listen 后立刻释放。 */
+export async function checkPort(host, port) {
+  const net = await import('node:net')
+  return new Promise((resolveProbe) => {
+    const srv = net.createServer()
+    srv.once('error', (err) => {
+      resolveProbe(err?.code === 'EADDRINUSE' ? port : null)
+      srv.close()
+    })
+    srv.listen(port, host, () => {
+      srv.close(() => resolveProbe(null))
+    })
+  })
+}

package/.output/public/_nuxt/builds/meta/eede1532-1366-486a-bdab-4d27fa03a1d8.json

@@ -1 +0,0 @@
-{"id":"eede1532-1366-486a-bdab-4d27fa03a1d8","timestamp":1788336798647,"prerendered":[]}