agentworkshop 0.6.1 → 0.7.1

package/i18n/locales/en.ts

@@ -120,44 +120,90 @@ export default {
     disabled: 'Disabled',
   },
   settings: {
-    title: 'System Settings',
-    subtitle: 'Configure app basics, theme appearance and notifications',
-    basic: 'General',
-    basicDesc: 'Application name, description and other basics',
-    theme: 'Appearance',
-    themeDesc: 'Customize primary color and display mode',
-    notification: 'Notifications',
-    notificationDesc: 'Manage how system messages are delivered',
-    appName: 'App Name',
-    appDesc: 'Description',
-    primaryColor: 'Primary Color',
-    themeMode: 'Display Mode',
-    appearanceDesc: 'Accent color, dark mode and language, applied live and persisted automatically (localStorage).',
-    accentDesc: 'Warm-editorial defaults to the ink pill; pick a muted preset to preview instantly.',
-    accentInk: 'Ink',
-    accentStone: 'Amber',
-    accentMoss: 'Moss',
-    accentSlate: 'Slate',
-    accentPlum: 'Plum',
-    accentClay: 'Clay',
-    accentApplied: 'Accent applied',
-    accentReset: 'Reset to default ink (follows config.yml)',
-    accentResetAction: 'Reset to default ink',
-    darkDesc: 'Deep-navy control-room dark ramp; light mode keeps the editorial paper look.',
-    languageDesc: 'Interface language (zh-CN / en); applies immediately.',
-    systemTab: 'System',
-    systemDesc: 'Read-only runtime parameters (sourced from config.yml via nuxt.config runtimeConfig).',
-    identity: 'Signed in as',
-    identityGuest: 'Not signed in (workshop data requires sign-in)',
-    emailNotify: 'Email Notifications',
-    emailNotifyDesc: 'Push important events to administrators via email',
-    smsNotify: 'SMS Notifications',
-    smsNotifyDesc: 'Deliver urgent alerts instantly via SMS',
-    pushNotify: 'In-App Push',
-    pushNotifyDesc: 'Real-time message alerts in the browser',
-    saveSuccess: 'Settings saved',
-    runtimeTab: 'Runtime config',
-    runtime: {
+    'runtime.groupMemory': 'Memory',
+    'runtime.groupOmp': 'Agent Harness',
+    'runtime.groupDcw': 'Write Control',
+    'runtime.groupWorkshop': 'Workshop',
+    'runtime.groupBackup': 'Backup',
+    'runtime.groupRetention': 'Retention',
+    'runtime.groupLog': 'Logs',
+    'runtime.memory.primerTokens': 'Memory primer budget',
+    'runtime.memory.injectTotal': 'Memory inject cap',
+    'runtime.memory.maintenanceMs': 'Memory maintenance (ms)',
+    'runtime.memory.expireDays': 'Episodic expiry (days)',
+    'runtime.memory.expireSessionDays': 'Session expiry (days)',
+    'runtime.memory.cap': 'Memory entry cap',
+    'runtime.memory.reflectTrigger': 'Reflection trigger',
+    'runtime.memory.embedBaseUrl': 'Embedding endpoint',
+    'runtime.memory.embedModel': 'Embedding model',
+    'runtime.memory.embedApiKey': 'Embedding key',
+    'runtime.omp.compactEnabled': 'Auto compaction',
+    'runtime.omp.compactThreshold': 'Compaction threshold',
+    'runtime.omp.compactMinIntervalMs': 'Min compaction interval (ms)',
+    'runtime.omp.compactWaitMs': 'Compaction wait timeout (ms)',
+    'runtime.dcw.rollbackCooldownMs': 'Rollback cooldown (ms)',
+    'runtime.dcw.rollbackMinWindowMs': 'Min observe window (ms)',
+    'runtime.dcw.rollbackBaselineMs': 'Baseline window (ms)',
+    'runtime.dcw.rollbackStaleMs': 'Open record staleness (ms)',
+    'runtime.workshop.idleSweepMs': 'Idle sweep (ms)',
+    'runtime.workshop.idleGraceMs': 'Idle grace (ms)',
+    'runtime.backup.disabled': 'Disable auto backup',
+    'runtime.backup.intervalHours': 'Backup interval (h)',
+    'runtime.backup.keep': 'Backups to keep',
+    'runtime.retention.disabled': 'Disable retention sweep',
+    'runtime.retention.eventsDays': 'Events retention (days)',
+    'runtime.retention.messagesDays': 'Messages retention (days)',
+    'runtime.retention.auditDays': 'Audit retention (days)',
+    'runtime.retention.approvalDays': 'Approval history retention (days)',
+    'runtime.log.level': 'Log level',
+    'runtime.daq.mqttQos': 'MQTT QoS',
+    'runtime.daq.mqttUsername': 'MQTT username',
+    'runtime.daq.mqttPassword': 'MQTT password',
+    'runtime.daq.mqttCaFile': 'MQTT CA certificate',
+    'runtime.daq.mqttRejectUnauthorized': 'MQTT verify certificate',
+    'runtime.daq.tsRetentionH': 'Scalar TS retention (h)',
+    'runtime.daq.frameRetentionH': 'Frame retention (h)',
+    'runtime.daq.alarmWebhookUrl': 'Alarm webhook',
+    'runtime.daq.alarmEscalateMinutes': 'Alarm escalate (min)',
+    'runtime.security.hitlTimeoutMs': 'HITL approval timeout (ms)',
+    'title': 'System Settings',
+    'subtitle': 'Configure app basics, theme appearance and notifications',
+    'basic': 'General',
+    'basicDesc': 'Application name, description and other basics',
+    'theme': 'Appearance',
+    'themeDesc': 'Customize primary color and display mode',
+    'notification': 'Notifications',
+    'notificationDesc': 'Manage how system messages are delivered',
+    'appName': 'App Name',
+    'appDesc': 'Description',
+    'primaryColor': 'Primary Color',
+    'themeMode': 'Display Mode',
+    'appearanceDesc': 'Accent color, dark mode and language, applied live and persisted automatically (localStorage).',
+    'accentDesc': 'Warm-editorial defaults to the ink pill; pick a muted preset to preview instantly.',
+    'accentInk': 'Ink',
+    'accentStone': 'Amber',
+    'accentMoss': 'Moss',
+    'accentSlate': 'Slate',
+    'accentPlum': 'Plum',
+    'accentClay': 'Clay',
+    'accentApplied': 'Accent applied',
+    'accentReset': 'Reset to default ink (follows config.yml)',
+    'accentResetAction': 'Reset to default ink',
+    'darkDesc': 'Deep-navy control-room dark ramp; light mode keeps the editorial paper look.',
+    'languageDesc': 'Interface language (zh-CN / en); applies immediately.',
+    'systemTab': 'System',
+    'systemDesc': 'Read-only runtime parameters (sourced from config.yml via nuxt.config runtimeConfig).',
+    'identity': 'Signed in as',
+    'identityGuest': 'Not signed in (workshop data requires sign-in)',
+    'emailNotify': 'Email Notifications',
+    'emailNotifyDesc': 'Push important events to administrators via email',
+    'smsNotify': 'SMS Notifications',
+    'smsNotifyDesc': 'Deliver urgent alerts instantly via SMS',
+    'pushNotify': 'In-App Push',
+    'pushNotifyDesc': 'Real-time message alerts in the browser',
+    'saveSuccess': 'Settings saved',
+    'runtimeTab': 'Runtime config',
+    'runtime': {
       title: 'Runtime config',
       desc: 'Server-backed runtime parameters: live keys apply instantly over SSE (no reload); restart keys take effect on the next launch of the matching mode. Same channel as the `aw config` CLI.',
       live: 'live',
@@ -593,6 +639,52 @@ export default {
     k3lha20031: 'Raw points',
   },
   logs: {
+    'src.user': '用户',
+    'src.system': 'System',
+    'kind.write': 'Apply',
+    'kind.manual': '人工',
+    'kind.alarm': 'Alarm',
+    'kind.line': 'Line',
+    'kind.recipe': 'Recipe',
+    'kind.rollback': '回退',
+    'kind.daq': 'DAQ',
+    'kind.system': 'System',
+    'title': '运维日志',
+    'sub': '全操作统一记录:下发了什么控制、用户与 Agent 做了什么操作;按产线/产品/Recipe 隔离查询',
+    'live': '实时',
+    'liveHint': 'WS 实时接收操作事件(仅摘要渲染;完整详情查询于下表)',
+    'all': 'All',
+    'fLine': 'Line',
+    'fProduct': 'Product',
+    'fSource': '来源',
+    'fKind': '分类',
+    'fKeyword': '关键词',
+    'fKeywordPh': '搜索摘要/操作/操作者…',
+    'query': 'Query',
+    'reset': 'Reset',
+    'thTime': 'Time',
+    'thActor': '操作者',
+    'thSummary': '事件摘要',
+    'thScope': '归属(产线/产品/Recipe)',
+    'thDetail': 'Details',
+    'expand': 'Details',
+    'fold': 'Collapse',
+    'loading': 'Querying…',
+    'empty': '无匹配日志',
+    'src.user': '用户',
+    'src.system': 'System',
+    'kind.write': 'Apply',
+    'kind.manual': '人工',
+    'kind.alarm': 'Alarm',
+    'kind.line': 'Line',
+    'kind.recipe': 'Recipe',
+    'kind.rollback': '回退',
+    'kind.daq': 'DAQ',
+    'kind.system': 'System',
+    'mSummary': '记录内容',
+    'mSummaryPh': '如:更换 3 号烘箱加热丝,当前批次延长保温 10 分钟',
+    'mSubmit': '入册',
+    'mOk': '已入册',
     'src.user': '用户',
     'src.system': 'System',
     'kind.write': 'Apply',
@@ -726,6 +818,14 @@ export default {
     k1bphrb3048: 'Delete failed',
   },
   dcwDetail: {
+    k9r7d4e016: 'Poll read (ms)',
+    k9r7d4e017: 'Default 5000ms; 0 = manual read only',
+    k9r7d4e018: 'PLC reading',
+    k9r7d4e019: 'No reading yet (poll read off or driver lacks read support)',
+    k9r7d4e020: 'Read current PLC value',
+    k9r7d4e021: 'Read',
+    k9r7d4e022: 'Manual',
+    k9r7d4e023: 'Default 5s',
     k1lzfi4g180: '({p0} params)',
     k6vgks7181: 'Batch {p0}',
     k1alcbyu182: 'Node {p0} write OK: {p1}',
@@ -1320,6 +1420,7 @@ export default {
     k15mwzt7031: 'Type a message/notice ({\'@\'} to target a member, defaults to lead)…  ⌘/Ctrl+Enter to send',
   },
   deviceTwinPanel: {
+    k9r7d4e030: 'Current PLC reading (actual)',
     kq2jssk008: 'Recipe Process Window',
     k1iwj796009: 'Node Range',
     kxddket010: '超出{p0} {p1}',

package/i18n/locales/zh-CN.ts

@@ -120,44 +120,90 @@ export default {
     disabled: '已禁用',
   },
   settings: {
-    title: '系统设置',
-    subtitle: '配置应用基本信息、主题外观与通知偏好',
-    basic: '基本设置',
-    basicDesc: '应用的名称、描述等基础信息',
-    theme: '主题设置',
-    themeDesc: '自定义主色调与显示模式',
-    notification: '通知设置',
-    notificationDesc: '管理系统消息通知的推送方式',
-    appName: '应用名称',
-    appDesc: '应用描述',
-    primaryColor: '主题色',
-    themeMode: '显示模式',
-    appearanceDesc: '主题色、深浅模式与语言偏好,实时生效并自动持久化(localStorage)。',
-    accentDesc: '默认品牌绿,与 Digital Twin 控制室同源;可选低饱和预设,悬停预览即时生效。',
-    accentInk: '品牌',
-    accentStone: '琥珀',
-    accentMoss: '苔绿',
-    accentSlate: '靛蓝',
-    accentPlum: '紫檀',
-    accentClay: '陶赭',
-    accentApplied: '主题色已应用',
-    accentReset: '已恢复默认主题色(跟随 config.yml)',
-    accentResetAction: '恢复默认',
-    darkDesc: '深海军蓝控制室暗阶,与数字孪生空间同一视觉语言;亮色模式保留编辑风格。',
-    languageDesc: '界面语言(zh-CN / en),选择即生效。',
-    systemTab: '系统',
-    systemDesc: '只读运行参数(同源 config.yml,经 nuxt.config runtimeConfig 注入)。',
-    identity: '当前身份',
-    identityGuest: '当前未登录(工作台数据需登录后查看)',
-    emailNotify: '邮件通知',
-    emailNotifyDesc: '重要事件通过邮件推送给管理员',
-    smsNotify: '短信通知',
-    smsNotifyDesc: '紧急告警通过短信即时送达',
-    pushNotify: '站内推送',
-    pushNotifyDesc: '浏览器内实时消息提醒',
-    saveSuccess: '设置已保存',
-    runtimeTab: '运行配置',
-    runtime: {
+    'runtime.groupMemory': '记忆系统',
+    'runtime.groupOmp': 'Agent Harness',
+    'runtime.groupDcw': '数控写控',
+    'runtime.groupWorkshop': '车间运行',
+    'runtime.groupBackup': '数据备份',
+    'runtime.groupRetention': '数据保留',
+    'runtime.groupLog': '日志',
+    'runtime.memory.primerTokens': '记忆引子预算',
+    'runtime.memory.injectTotal': '记忆注入硬顶',
+    'runtime.memory.maintenanceMs': '记忆维护周期(ms)',
+    'runtime.memory.expireDays': '情景记忆过期(天)',
+    'runtime.memory.expireSessionDays': '会话记忆过期(天)',
+    'runtime.memory.cap': '记忆条目上限',
+    'runtime.memory.reflectTrigger': '反思触发阈值',
+    'runtime.memory.embedBaseUrl': 'Embedding 端点',
+    'runtime.memory.embedModel': 'Embedding 模型',
+    'runtime.memory.embedApiKey': 'Embedding 密钥',
+    'runtime.omp.compactEnabled': '上下文自动压缩',
+    'runtime.omp.compactThreshold': '压缩阈值',
+    'runtime.omp.compactMinIntervalMs': '压缩最小间隔(ms)',
+    'runtime.omp.compactWaitMs': '压缩等待超时(ms)',
+    'runtime.dcw.rollbackCooldownMs': '回退冷却(ms)',
+    'runtime.dcw.rollbackMinWindowMs': '回退最小观察窗(ms)',
+    'runtime.dcw.rollbackBaselineMs': '基线稳定窗(ms)',
+    'runtime.dcw.rollbackStaleMs': 'open 记录过期(ms)',
+    'runtime.workshop.idleSweepMs': '空产线扫描(ms)',
+    'runtime.workshop.idleGraceMs': '空闲宽限(ms)',
+    'runtime.backup.disabled': '禁用自动备份',
+    'runtime.backup.intervalHours': '备份间隔(h)',
+    'runtime.backup.keep': '备份保留份数',
+    'runtime.retention.disabled': '禁用数据保留策略',
+    'runtime.retention.eventsDays': '事件保留(天)',
+    'runtime.retention.messagesDays': '消息保留(天)',
+    'runtime.retention.auditDays': '审计日志保留(天)',
+    'runtime.retention.approvalDays': '审批历史保留(天)',
+    'runtime.log.level': '日志级别',
+    'runtime.daq.mqttQos': 'MQTT QoS',
+    'runtime.daq.mqttUsername': 'MQTT 用户名',
+    'runtime.daq.mqttPassword': 'MQTT 密码',
+    'runtime.daq.mqttCaFile': 'MQTT CA 证书',
+    'runtime.daq.mqttRejectUnauthorized': 'MQTT 校验证书',
+    'runtime.daq.tsRetentionH': '标量时序保留(h)',
+    'runtime.daq.frameRetentionH': '帧元数据保留(h)',
+    'runtime.daq.alarmWebhookUrl': '告警 Webhook',
+    'runtime.daq.alarmEscalateMinutes': '告警升级时限(min)',
+    'runtime.security.hitlTimeoutMs': 'HITL 审批超时(ms)',
+    'title': '系统设置',
+    'subtitle': '配置应用基本信息、主题外观与通知偏好',
+    'basic': '基本设置',
+    'basicDesc': '应用的名称、描述等基础信息',
+    'theme': '主题设置',
+    'themeDesc': '自定义主色调与显示模式',
+    'notification': '通知设置',
+    'notificationDesc': '管理系统消息通知的推送方式',
+    'appName': '应用名称',
+    'appDesc': '应用描述',
+    'primaryColor': '主题色',
+    'themeMode': '显示模式',
+    'appearanceDesc': '主题色、深浅模式与语言偏好,实时生效并自动持久化(localStorage)。',
+    'accentDesc': '默认品牌绿,与 Digital Twin 控制室同源;可选低饱和预设,悬停预览即时生效。',
+    'accentInk': '品牌',
+    'accentStone': '琥珀',
+    'accentMoss': '苔绿',
+    'accentSlate': '靛蓝',
+    'accentPlum': '紫檀',
+    'accentClay': '陶赭',
+    'accentApplied': '主题色已应用',
+    'accentReset': '已恢复默认主题色(跟随 config.yml)',
+    'accentResetAction': '恢复默认',
+    'darkDesc': '深海军蓝控制室暗阶,与数字孪生空间同一视觉语言;亮色模式保留编辑风格。',
+    'languageDesc': '界面语言(zh-CN / en),选择即生效。',
+    'systemTab': '系统',
+    'systemDesc': '只读运行参数(同源 config.yml,经 nuxt.config runtimeConfig 注入)。',
+    'identity': '当前身份',
+    'identityGuest': '当前未登录(工作台数据需登录后查看)',
+    'emailNotify': '邮件通知',
+    'emailNotifyDesc': '重要事件通过邮件推送给管理员',
+    'smsNotify': '短信通知',
+    'smsNotifyDesc': '紧急告警通过短信即时送达',
+    'pushNotify': '站内推送',
+    'pushNotifyDesc': '浏览器内实时消息提醒',
+    'saveSuccess': '设置已保存',
+    'runtimeTab': '运行配置',
+    'runtime': {
       title: '运行配置',
       desc: '服务端持久化的运行参数：live 键保存即热重载生效（无需刷新），restart 键下次启动生效。与 CLI(aw config)同源同通道。',
       live: '实时',
@@ -593,6 +639,52 @@ export default {
     k3lha20031: '原始点',
   },
   logs: {
+    'src.user': '用户',
+    'src.system': '系统',
+    'kind.write': '下发',
+    'kind.manual': '人工',
+    'kind.alarm': '告警',
+    'kind.line': '产线',
+    'kind.recipe': '配方',
+    'kind.rollback': '回退',
+    'kind.daq': '数采',
+    'kind.system': '系统',
+    'title': '运维日志',
+    'sub': '全操作统一记录:下发了什么控制、用户与 Agent 做了什么操作;按产线/产品/Recipe 隔离查询',
+    'live': '实时',
+    'liveHint': 'WS 实时接收操作事件(仅摘要渲染;完整详情查询于下表)',
+    'all': '全部',
+    'fLine': '产线',
+    'fProduct': '产品',
+    'fSource': '来源',
+    'fKind': '分类',
+    'fKeyword': '关键词',
+    'fKeywordPh': '搜索摘要/操作/操作者…',
+    'query': '查询',
+    'reset': '重置',
+    'thTime': '时间',
+    'thActor': '操作者',
+    'thSummary': '事件摘要',
+    'thScope': '归属(产线/产品/Recipe)',
+    'thDetail': '详情',
+    'expand': '详情',
+    'fold': '收起',
+    'loading': '查询中…',
+    'empty': '无匹配日志',
+    'src.user': '用户',
+    'src.system': '系统',
+    'kind.write': '下发',
+    'kind.manual': '人工',
+    'kind.alarm': '告警',
+    'kind.line': '产线',
+    'kind.recipe': '配方',
+    'kind.rollback': '回退',
+    'kind.daq': '数采',
+    'kind.system': '系统',
+    'mSummary': '记录内容',
+    'mSummaryPh': '如:更换 3 号烘箱加热丝,当前批次延长保温 10 分钟',
+    'mSubmit': '入册',
+    'mOk': '已入册',
     'src.user': '用户',
     'src.system': '系统',
     'kind.write': '下发',
@@ -725,6 +817,14 @@ export default {
     k1bphrb3048: '删除失败',
   },
   dcwDetail: {
+    k9r7d4e016: '周期读(ms)',
+    k9r7d4e017: '缺省 5000ms;0 = 仅手动读取',
+    k9r7d4e018: 'PLC 读数',
+    k9r7d4e019: '暂无读数(周期读未开启或驱动不支持读取)',
+    k9r7d4e020: '读取 PLC 当前值',
+    k9r7d4e021: '读取',
+    k9r7d4e022: '手动',
+    k9r7d4e023: '默认 5s',
     k1lzfi4g180: '({p0} 参数)',
     k6vgks7181: '批次 {p0}',
     k1alcbyu182: '节点 {p0} 下发成功:{p1}',
@@ -1319,6 +1419,7 @@ export default {
     k15mwzt7031: '输入消息/通知({\'@\'} 成员指定目标,缺省 lead)…  ⌘/Ctrl+Enter 发送',
   },
   deviceTwinPanel: {
+    k9r7d4e030: 'PLC 当前读数(实际值)',
     kq2jssk008: '配方工艺窗口',
     k1iwj796009: '节点量程',
     kxddket010: '超出{p0} {p1}',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentworkshop",
-  "version": "0.6.1",
+  "version": "0.7.1",
   "type": "module",
   "description": "AgentWorkShop 软件开发系统 - 基于 Nuxt 4 的配置驱动运行范式",
   "license": "PolyForm-Noncommercial-1.0.0",

package/scripts/_dbg-agent-dcw-rw.ts

@@ -0,0 +1,131 @@
+/**
+ * Agent 数控读写真机验证(协议级):
+ * ①真实 omp --mode rpc 子进程接受含 dcw_read/dcw_control 的 set_host_tools
+ * ②真实 OmpRpcAgentImpl.handleHostTool 分发 → toolDcwRead/toolDcwControl 执行体:
+ *   mock 节点写读对照 / 真实 Modbus TCP(1502 从站 40023)写读 roundtrip / 越权与量程联锁。
+ * 数据目录 AW_HOME 隔离,不触碰检出内 .AgentWorkShop。
+ * 运行: npx tsx --tsconfig .nuxt/tsconfig.server.json scripts/_dbg-agent-dcw-rw.ts
+ */
+import { spawn } from 'node:child_process'
+import { mkdtempSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+// 进程级隔离:配置根落在一次性目录(须在业务模块 import 前设置)
+const awHome = mkdtempSync(join(tmpdir(), 'aw-agent-dcw-rw-'))
+process.env.AW_MODE = 'home'
+process.env.AW_HOME = awHome
+process.env.NO_PROXY = '127.0.0.1,localhost'
+
+let failures = 0
+const check = (name: string, ok: boolean, detail = ''): void => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+// ===== 环境准备(隔离配置根内):mock 节点 + 真实 Modbus 节点 + Agent 绑定 =====
+const { getDcwController } = await import('../server/services/workshop/dcw/dcw-controller')
+const { getAgentNodeBindingRepo } = await import('../server/services/workshop/agents/node-bindings.repo')
+const AGENT = 'agent-rw-verify'
+const mockNode = getDcwController().create({ templateRef: 'dcw-temp-sp', name: 'Agent验证·mock', driver: 'mock', driverConfig: { key: 'agent-rw-mock' }, readIntervalMs: 0 })
+const modbusNode = getDcwController().create({
+  templateRef: 'dcw-temp-sp', name: 'Agent验证·Modbus真实', driver: 'modbus-tcp', readIntervalMs: 0,
+  min: 0, max: 300,
+  driverConfig: { host: '127.0.0.1', port: 1502, unitId: 1, register: 40023, dataType: 'float32', byteOrder: 'big' },
+})
+const repo = getAgentNodeBindingRepo()
+repo.bind(AGENT, mockNode.id, 'dcw', 'auto')
+repo.bind(AGENT, modbusNode.id, 'dcw', 'auto')
+console.log(`mock=${mockNode.id} modbus=${modbusNode.id}(40023)\n`)
+
+// ===== ① 真实 omp 子进程:set_host_tools 含 dcw_read/dcw_control → 协议接受 =====
+console.log('--- ① 真实 omp 子进程工具面注入 ---')
+const { hostToolsForRole, OmpRpcAgentImpl } = await import('../server/services/workshop/agents/omp-agent')
+
+{
+  const tools = hostToolsForRole('worker')
+  const child = spawn('omp', ['--mode', 'rpc'], { stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true })
+  let buf = ''
+  let sent = false
+  let accepted: unknown = null
+  await new Promise<unknown>((resolve) => {
+    const timer = setTimeout(() => resolve('timeout'), 30_000)
+    child.stdout!.setEncoding('utf-8')
+    child.stdout!.on('data', (chunk: string) => {
+      buf += chunk
+      let idx: number
+      while ((idx = buf.indexOf('\n')) >= 0) {
+        const line = buf.slice(0, idx)
+        buf = buf.slice(idx + 1)
+        if (!line.trim()) continue
+        try {
+          const frame = JSON.parse(line)
+          if (frame.type === 'ready' && !sent) {
+            sent = true
+            child.stdin!.write(`${JSON.stringify({ id: 'req_tools', type: 'set_host_tools', tools })}\n`)
+          }
+          else if (frame.type === 'response' && frame.id === 'req_tools') {
+            clearTimeout(timer)
+            accepted = frame
+            resolve(frame)
+          }
+        }
+        catch { /* 非 JSON 行忽略 */ }
+      }
+    })
+    child.on('exit', () => resolve(accepted ?? 'exit'))
+  })
+  child.kill()
+  const resp = accepted as { success?: boolean, data?: { toolNames?: string[] } } | null
+  const names = resp?.data?.toolNames ?? []
+  check('①真实 omp 接受含 dcw_read/dcw_control 的 set_host_tools',
+    !!resp && resp.success === true && names.includes('dcw_read') && names.includes('dcw_control'),
+    `工具数=${names.length}`)
+}
+
+// ===== ② 真实分发 + 执行:handleHostTool → dcw_read / dcw_control =====
+console.log('\n--- ② Agent 工具真实执行(mock) ---')
+{
+  const impl = new OmpRpcAgentImpl({ agentId: AGENT, name: '读写验证员', role: 'worker', channelId: 'ch-rw-v' })
+  // 真实 server 里 workspace 由 run 上下文注入 ensureClient;工具执行体不依赖 workspace
+  // 内函数 —— harness 注入最小桩以通过就绪门(与 server 行为一致:非空即放行)
+  ;(impl as unknown as { workspace: unknown }).workspace = { listAgents: async () => [] }
+  const handle = (impl as unknown as Record<string, (req: unknown) => Promise<{ text: string, isError?: boolean }>>).handleHostTool.bind(impl)
+
+  const r0 = await handle({ toolName: 'dcw_read', arguments: { node_id: mockNode.id } })
+  check('②dcw_read:mock 未写入如实报失败(鉴权通过)', r0.isError === true && /读取失败/.test(r0.text) && !/无权/.test(r0.text), r0.text.slice(0, 90))
+
+  const w = await handle({ toolName: 'dcw_control', arguments: { node_id: mockNode.id, value: 175.5, hypothesis: 'Agent 真机验证写入' } })
+  check('②Agent 下发 175.5 成功(开优化记录)', !w.isError && /下发成功/.test(w.text), w.text.replace(/\n/g, ' ').slice(0, 100))
+  const r1 = await handle({ toolName: 'dcw_read', arguments: { node_id: mockNode.id } })
+  check('②dcw_read 读回 ACT=175.5 且与 SET 一致', !r1.isError && /175\.5/.test(r1.text) && /一致/.test(r1.text), r1.text.replace(/\n/g, ' ').slice(0, 120))
+
+  // 越权:未绑定节点读取/写入均拒
+  const rDeny = await handle({ toolName: 'dcw_read', arguments: { node_id: 'dw-not-bound' } })
+  const wDeny = await handle({ toolName: 'dcw_control', arguments: { node_id: 'dw-not-bound', value: 1 } })
+  check('②未绑定节点读取/写入均被拒', rDeny.isError === true && wDeny.isError === true && /无权/.test(rDeny.text) && /无权/.test(wDeny.text))
+
+  // 量程联锁:越工艺安全量程下发被拒
+  const wRange = await handle({ toolName: 'dcw_control', arguments: { node_id: mockNode.id, value: 999 } })
+  check('②越量程下发被拒(999 ∉ [150,200])', wRange.isError === true && /越出|量程/.test(wRange.text), wRange.text.slice(0, 80))
+}
+
+// ===== ③ 真实 Modbus TCP:Agent 写 → 读(真寄存器 roundtrip) =====
+console.log('\n--- ③ Agent 经真实 Modbus(1502 从站 40023)读写 ---')
+{
+  const impl = new OmpRpcAgentImpl({ agentId: AGENT, name: '读写验证员', role: 'worker', channelId: 'ch-rw-v' })
+  ;(impl as unknown as { workspace: unknown }).workspace = { listAgents: async () => [] }
+  const handle = (impl as unknown as Record<string, (req: unknown) => Promise<{ text: string, isError?: boolean }>>).handleHostTool.bind(impl)
+
+  const wm = await handle({ toolName: 'dcw_control', arguments: { node_id: modbusNode.id, value: 4.5, hypothesis: '真实链路验证' } })
+  check('③Agent 经真实 Modbus 下发 4.5 成功(同址回读一致)', !wm.isError && /下发成功/.test(wm.text), wm.text.replace(/\n/g, ' ').slice(0, 110))
+  const rm = await handle({ toolName: 'dcw_read', arguments: { node_id: modbusNode.id } })
+  check('③Agent 从真实寄存器读回 4.5(ACT=SET)', !rm.isError && /4\.5/.test(rm.text) && /一致/.test(rm.text), rm.text.replace(/\n/g, ' ').slice(0, 130))
+
+  const wm2 = await handle({ toolName: 'dcw_control', arguments: { node_id: modbusNode.id, value: 12.75 } })
+  const rm2 = await handle({ toolName: 'dcw_read', arguments: { node_id: modbusNode.id } })
+  check('③第二轮:写 12.75 → 读回 12.75', !wm2.isError && !rm2.isError && /12\.75/.test(rm2.text), rm2.text.replace(/\n/g, ' ').slice(0, 110))
+}
+
+console.log(failures === 0 ? '\nAGENT-DCW-RW ALL PASS' : `\nAGENT-DCW-RW FAILED(${failures})`)
+process.exit(failures === 0 ? 0 : 1)

package/scripts/_dbg-config-smoke.ts

@@ -0,0 +1,28 @@
+/**
+ * 配置链冒烟:env(AW_* + 历史别名)覆盖 → config.yml → zod 默认。
+ * 运行: AW_MEMORY_PRIMER_TOKENS=222 DAQ_FRAME_RETENTION_H=999 BACKUP_KEEP=3 \
+ *       RETENTION_DISABLED=1 AWSHOP_LOG_LEVEL=debug npx tsx ... scripts/_dbg-config-smoke.ts
+ */
+import { loadConfig } from '../app/config'
+
+const c = loadConfig()
+const rows: Array<[string, unknown, unknown]> = [
+  ['memory.primer_tokens (env 222)', c.memory.primer_tokens, 222],
+  ['memory.inject_total (默认 500)', c.memory.inject_total, 500],
+  ['daq.frameRetentionH (别名 999)', c.daq.frameRetentionH, 999],
+  ['backup.keep (env AW_BACKUP_KEEP 3)', c.backup.keep, 3],
+  ['retention.disabled (别名 RETENTION_DISABLED=1 → true)', c.retention.disabled, true],
+  ['log.level (别名 AWSHOP_LOG_LEVEL=debug)', c.log.level, 'debug'],
+  ['omp.compact_threshold (默认 0.7)', c.omp.compact_threshold, 0.7],
+  ['security.hitl_timeout_ms (默认 180000)', c.security.hitl_timeout_ms, 180000],
+  ['dcw.rollback_cooldown_ms (默认 300000)', c.dcw.rollback_cooldown_ms, 300000],
+  ['workshop.idle_grace_ms (默认 120000)', c.workshop.idle_grace_ms, 120000],
+  ['retention.audit_days (默认 90)', c.retention.audit_days, 90],
+]
+let failed = 0
+for (const [name, got, want] of rows) {
+  const ok = got === want
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name} → ${String(got)}`)
+  if (!ok) failed++
+}
+process.exit(failed === 0 ? 0 : 1)