agentworkshop 0.7.24 → 0.7.33

package/scripts/production-closed-loop-e2e.mjs

@@ -0,0 +1,300 @@
+/**
+ * 生产环境增强闭环 e2e — 数采/数控 × 自动诊断 × 知识沉淀(AgentWorkShop 3001 生产实例)
+ *
+ * 场景(对应「闭环控制增强」验收):
+ *   A 生产就绪        3001 生产实例 + 两桥接插件启用 + 外部服务(KB/诊断/RAG)健康
+ *   B 数采+绑定       产线节点可见、daq 绑定、daq_query/快照导出取到实时数据
+ *   C 事件自动诊断    kv 配置越限规则 → daq:sample 命中 → 插件自动发起深度诊断(source=auto)
+ *                     → 关闭开关(避免持续触发);在跑诊断由轮询器继续跟踪
+ *   D 知识辅助决策    kb_search 历史经验 → dcw_control 优化设定(HITL 批准)→
+ *                     dcw_judge 落 keep 判定 → kb_store 优化方案入库 → kb_search 复核
+ *   E 沉淀验证        rag-bridge /experience 与 two-stage 检索确认知识可查
+ *
+ * 运行:AW_BASE=http://localhost:3001 node scripts/production-closed-loop-e2e.mjs
+ * 前置:scripts/three-system-e2e.mjs 已跑过(演示账号/团队/绑定/授权已就绪)。
+ */
+import { DatabaseSync } from 'node:sqlite'
+import { readFileSync, writeFileSync, renameSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { dirname, join, resolve } from 'node:path'
+
+const __dirname = dirname(fileURLToPath(import.meta.url))
+const ROOT = resolve(__dirname, '..')
+const BASE = process.env.AW_BASE ?? 'http://localhost:3001'
+const KB = process.env.KB_BASE ?? 'http://127.0.0.1:8770'
+const DIAG = process.env.DIAG_BASE ?? 'http://127.0.0.1:3210'
+const LINE = process.env.E2E_LINE ?? 'ln-af002514'
+const DCW_NODE = process.env.E2E_DCW_NODE ?? 'dw-e92bb0e7'
+
+let pass = 0
+let fail = 0
+const failures = []
+function ok(cond, label, detail = '') {
+  if (cond) {
+    pass++
+    console.log(`  ✔ ${label}${detail ? ` —— ${detail}` : ''}`)
+  }
+  else {
+    fail++
+    failures.push(label)
+    console.error(`  ✘ ${label}${detail ? ` —— ${detail}` : ''}`)
+  }
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+async function raw(method, url, { body, token, agent, timeoutMs = 20000 } = {}, retried = 0) {
+  const headers = {}
+  if (body !== undefined) headers['content-type'] = 'application/json'
+  if (token) headers.authorization = `Bearer ${token}`
+  if (agent) headers['x-aw-agent-token'] = agent.token
+  let res
+  try {
+    res = await fetch(url, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined, signal: AbortSignal.timeout(timeoutMs) })
+  }
+  catch (e) {
+    if (retried < 1) {
+      await sleep(1500)
+      return raw(method, url, { body, token, agent, timeoutMs }, retried + 1)
+    }
+    throw e
+  }
+  return { status: res.status, json: await res.json().catch(() => null) }
+}
+const api = (method, path, opts = {}) => raw(method, `${BASE}${path}`, opts)
+const resultText = r => String(r?.json?.data?.result?.text ?? '')
+const invoke = (agent, tool, args, timeoutMs = 60000) => api('POST', '/api/workshop/agent-tools/invoke', { agent, timeoutMs, body: { agentId: agent.id, tool, args } })
+
+// ── 0. 演示账号/团队(复用 three-system-e2e 的持久化状态)─────────────────
+const tokenFile = join(ROOT, '.AgentWorkShop', 'data', '.three-system-e2e-token.json')
+const saved = JSON.parse(readFileSync(tokenFile, 'utf8'))
+const userToken = process.env.AW_E2E_TOKEN ?? saved.token
+const userId = saved.uid ?? ''
+ok(Boolean(userToken), '复用演示账号 token')
+// 夹具:确保产线 operate 授权(users.sqlite 直插,测试专用)
+{
+  const db = new DatabaseSync(join(ROOT, '.AgentWorkShop', 'data', 'users.sqlite'))
+  db.exec('PRAGMA busy_timeout=4000')
+  const row = userId ? { id: userId } : db.prepare('SELECT id FROM users ORDER BY created_at DESC LIMIT 1').get()
+  if (row?.id) {
+    db.prepare(`INSERT OR REPLACE INTO user_line_grants (user_id, line_id, mode, granted_by, granted_at) VALUES (?, ?, 'operate', 'production-e2e', ?)`).run(row.id, LINE, new Date().toISOString())
+    console.log(`  · 产线授权夹具就绪(user=${row.id})`)
+  }
+  db.close()
+}
+const chsRaw = await api('GET', '/api/workshop/channels', { token: userToken }).catch(() => null)
+const chs = Array.isArray(chsRaw?.json?.data) ? chsRaw.json.data : []
+const chA = chs.find(c => c?.name?.startsWith('产线数据分析组'))
+const chB = chs.find(c => c?.name?.startsWith('闭环控制组'))
+// 插件宿主稳定门控:前序 e2e 的 Stage4 启停可能留下二次热重载在途 —— 等清单稳定再断言
+{
+  let stable = 0
+  for (let i = 0; i < 30 && stable < 3; i++) {
+    const plugsNow = await api('GET', '/api/workshop/plugins', { token: userToken }).catch(() => null)
+    const listNow = plugsNow?.json?.plugins ?? plugsNow?.json?.data?.plugins ?? []
+    const bothOn = listNow.filter(p => ['rag-bridge', 'diag-bridge'].includes(p?.name) && p?.enabled !== false).length
+    stable = bothOn === 2 ? stable + 1 : 0
+    if (stable < 3) await sleep(1500)
+  }
+  console.log(`  · 插件宿主已稳定(连续 3 次双桥接启用)`)
+}
+const membersOf = async id => (await api('GET', `/api/workshop/channels/${id}/agents`, { token: userToken })).json?.data ?? []
+const mA = await membersOf(chA.id)
+const mB = await membersOf(chB.id)
+const execA = mA.find(m => m?.name === '数据分析执行器')
+const execB = mB.find(m => m?.name === '控制执行器')
+ok(Boolean(execA?.token && execB?.token), '两个 omp 执行器就绪', `${execA?.name} / ${execB?.name}`)
+
+// ══ Stage A:生产就绪 ══════════════════════════════════════════════════════
+console.log('\n── Stage A 生产就绪(3001)──')
+{
+  const gate = await raw('GET', `${BASE}/api/workshop/plugins`)
+  ok(gate.status === 401, '生产实例存活(无 token 401 信封)', `status=${gate.status}`)
+  const plugs = await api('GET', '/api/workshop/plugins', { token: userToken })
+  const list = plugs.json?.plugins ?? plugs.json?.data?.plugins ?? []
+  const on = n => list.find(p => p?.name === n)?.enabled === true
+  ok(on('rag-bridge') && on('diag-bridge'), '两桥接插件在生产实例启用', `count=${list.length}`)
+  const ragH = await api('GET', '/api/plugins/rag-bridge/health', { token: userToken })
+  ok(ragH.status === 200 && ragH.json?.outbound === true, 'rag-bridge 健康', `kb=${ragH.json?.kb?.id?.slice(0, 8)}`)
+  const diagH = await api('GET', '/api/plugins/diag-bridge/health', { token: userToken })
+  ok(diagH.status === 200 && diagH.json?.remote?.status === 'ok', 'diag-bridge 健康', `activeRuns=${diagH.json?.remote?.activeRuns}`)
+  const kbH = await raw('GET', `${KB}/api/v1/health`)
+  const dgH = await raw('GET', `${DIAG}/api/health`)
+  ok(kbH.json?.status === 'healthy' && dgH.json?.status === 'ok', 'KB 8770 / 诊断 3210 外部服务健康')
+}
+
+// ══ Stage B:数采 + 绑定 ════════════════════════════════════════════════════
+console.log('\n── Stage B 数采与绑定 ──')
+let freshNode = ''
+{
+  const daq = await api('GET', '/api/workshop/daq', { token: userToken })
+  const nodes = (daq.json?.data?.nodes ?? daq.json?.nodes ?? []).filter(n => n?.lineId === LINE)
+  ok(nodes.length > 0, `产线 ${LINE} 数采节点可见`, `count=${nodes.length}`)
+  // 选最近有样本的节点(逐节点探 60min 窗)
+  let bestAt = 0
+  for (const n of nodes.slice(0, 12)) {
+    const s = await api('GET', `/api/workshop/daq/${n.id}/samples?last_minutes=60&limit=1`, { token: userToken }).catch(() => null)
+    const at = s?.json?.data?.points?.[0]?.at ?? 0
+    if (at > bestAt) {
+      bestAt = at
+      freshNode = n.id
+    }
+  }
+  ok(Boolean(freshNode), '定位最近在采样的节点', `${freshNode} (lastAt=${bestAt ? new Date(bestAt).toISOString() : 'n/a'})`)
+
+  const bind = await api('POST', '/api/workshop/agent-tools/bindings', {
+    token: userToken,
+    body: { agentId: execA.id, nodeId: freshNode, kind: 'daq', mode: 'auto' },
+  })
+  ok(bind.status === 200, '分析执行器绑定数采节点(daq)', bind.status === 200 ? 'ok' : JSON.stringify(bind.json).slice(0, 120))
+
+  const snap = await api('POST', '/api/plugins/diag-bridge/snapshot', {
+    token: userToken,
+    body: { line: LINE, from_ms: Date.now() - 24 * 60 * 60_000, to_ms: Date.now() },
+  })
+  ok(snap.json?.success === true && snap.json?.rows > 0, '生产实例导出 DAQ 宽表快照', `rows=${snap.json?.rows} nodes=${snap.json?.nodes}`)
+}
+
+// ══ Stage C:事件自动诊断(daq:sample → 自动 diag_run)══════════════════════
+console.log('\n── Stage C 事件驱动自动诊断 ──')
+let autoRunId = ''
+{
+  const kvPath = join(ROOT, '.AgentWorkShop', 'data', 'plugins', 'diag-bridge', 'kv.json')
+  const statePath = join(process.env.USERPROFILE ?? process.env.HOME ?? '', '.AgentWorkShop', 'plugins-state.json')
+  const touchReload = () => {
+    const st = JSON.parse(readFileSync(statePath, 'utf8'))
+    st.updatedAt = new Date().toISOString()
+    writeFileSync(`${statePath}.tmp`, JSON.stringify(st, null, 2))
+    renameSync(`${statePath}.tmp`, statePath)
+  }
+  const kv = JSON.parse(readFileSync(kvPath, 'utf8'))
+  // 基线:启用前已存在的 auto run(历史遗留)不算新触发
+  const runs0 = await api('GET', '/api/plugins/diag-bridge/runs', { token: userToken })
+  const preAuto = new Set((runs0.json?.runs ?? []).filter(x => x.source === 'auto').map(x => x.runId))
+  // 清本线冷却(测试夹具语义:历史战役的 auto 触发会留 30 分钟冷却,不清则本次必不触发)
+  delete kv[`cooldown:${LINE}`]
+  kv.auto_diag_enabled = 'true'
+  kv.auto_rules = JSON.stringify({ [freshNode]: { op: 'gt', value: 0 } }) // 阈值 0 → 下一拍样本必命中(确定性触发)
+  writeFileSync(kvPath, JSON.stringify(kv, null, 2))
+  touchReload()
+  console.log('  · 已启用 auto_diag(规则:节点 ' + freshNode + ' > 0)并触发热重载')
+
+  // 等待窗 4 分钟:重装载(~20s)+ 下一采样拍 + 上传/启动;mock 引擎可能在窗内就跑完,
+  // 所以 running/completed 均算命中
+  for (let i = 0; i < 48 && !autoRunId; i++) {
+    await sleep(5000)
+    const runs = await api('GET', '/api/plugins/diag-bridge/runs', { token: userToken })
+    const hit = (runs.json?.runs ?? []).find(x => x.source === 'auto' && !preAuto.has(x.runId) && (x.status === 'running' || x.status === 'completed'))
+    if (hit) autoRunId = hit.runId
+  }
+  ok(Boolean(autoRunId), 'daq:sample 越限命中 → 插件自动发起深度诊断(source=auto)', `runId=${autoRunId}`)
+
+  // 关闭开关(避免持续触发);在跑诊断由轮询器重水化继续跟踪
+  const kv2 = JSON.parse(readFileSync(kvPath, 'utf8'))
+  kv2.auto_diag_enabled = 'false'
+  writeFileSync(kvPath, JSON.stringify(kv2, null, 2))
+  touchReload()
+  console.log('  · auto_diag 已关闭(冷却+去重仍在,防重复触发)')
+  const runs2 = await api('GET', '/api/plugins/diag-bridge/runs', { token: userToken })
+  const still = (runs2.json?.runs ?? []).find(x => x.runId === autoRunId)
+  ok(still?.status === 'running' || still?.status === 'completed', '热重载后轮询器重水化,自动诊断仍被跟踪', still?.status)
+}
+
+// ══ Stage D:知识辅助决策 + 优化闭环 + 方案入库 ═════════════════════════════
+console.log('\n── Stage D 知识辅助决策与优化闭环 ──')
+{
+  const hist = await invoke(execA, 'kb_search', { query: '压力设定器 优化 经验 判定 keep' })
+  ok(resultText(hist).startsWith('检索到'), '知识辅助:检索到历史经验/文档', resultText(hist).split('\n')[0].slice(0, 80))
+
+  const dcwView = await api('GET', '/api/workshop/dcw', { token: userToken })
+  const node = (dcwView.json?.data?.nodes ?? []).find(n => n?.id === DCW_NODE)
+  ok(Boolean(node), '数控节点可见', `value=${node?.value} range=${node?.min}~${node?.max}`)
+  const span = Number(node?.max) - Number(node?.min)
+  const step = span > 0 ? Math.min(span * 0.03, 1) : 0.05
+  let target = Number(node?.value) + step
+  if (target > Number(node?.max) - span * 0.05) target = Number(node?.value) - step
+
+  // 发起写控(manual → HITL 挂起),脚本扮演人类在待办出现后批准。
+  // 配方工艺窗口联锁是生产语义:3% 步长越出活动配方窗口时,按拒绝消息回读的工艺
+  // 上/下限取界内值自适应重试 —— 与真实 Agent 的调参行为同构
+  const attemptWrite = async (value) => {
+    const pendingInvoke = invoke(execB, 'dcw_control', {
+      node_id: DCW_NODE,
+      value: Number(value.toFixed(4)),
+      hypothesis: `依据知识库历史经验(${resultText(hist).split('\n')[1]?.slice(0, 60) ?? '历史经验'})与数采趋势,优化设定至 ${Number(value).toFixed(4)}`,
+    }, 300000)
+    let approved = false
+    let pendRaw = '[]'
+    for (let i = 0; i < 30 && !approved; i++) {
+      await sleep(2000)
+      const pend = await api('GET', '/api/workshop/hitl/pending', { token: userToken })
+      const pd = pend?.json?.data
+      const arr = Array.isArray(pd) ? pd : (pd?.items ?? pd?.pending ?? [])
+      pendRaw = JSON.stringify(arr)
+      const item = arr.find(x => x?.kind === 'dcw-approval' && x?.agentId === execB.id)
+      if (item?.id) {
+        const resp = await api('POST', '/api/workshop/hitl/respond', {
+          token: userToken,
+          body: { kind: 'dcw-approval', id: item.id, confirmed: true, comment: 'production-e2e 批准' },
+        })
+        approved = resp.status === 200
+      }
+    }
+    const w = await pendingInvoke
+    return { approved, pendRaw, wText: resultText(w) }
+  }
+
+  let attempt = await attemptWrite(target)
+  ok(attempt.approved, 'HITL 待办出现并经 respond 批准', attempt.approved ? 'ok' : `pending=${attempt.pendRaw.slice(0, 160)}`)
+  const capMatch = attempt.wText.match(/工艺上限 ([\d.]+)/)
+  const floorMatch = attempt.wText.match(/工艺下限 ([\d.]+)/)
+  if (!attempt.wText.includes('下发成功') && capMatch) {
+    target = Number(capMatch[1]) * 0.98
+    attempt = await attemptWrite(target)
+  }
+  else if (!attempt.wText.includes('下发成功') && floorMatch) {
+    target = Number(floorMatch[1]) * 1.02
+    attempt = await attemptWrite(target)
+  }
+  const wText = attempt.wText
+  ok(wText.includes('下发成功'), '优化设定经 HITL 批准并写回成功', wText.split('\n')[0].slice(0, 110))
+  const recordId = (wText.match(/优化记录 (\S+) 已开窗/) ?? [])[1] ?? ''
+
+  if (recordId) {
+    const j = await invoke(execB, 'dcw_judge', {
+      record_id: recordId,
+      verdict: 'keep',
+      reason: `写入后 ${freshNode} 数采回读与设定一致、无越配方告警,判定 keep(production-e2e)`,
+    })
+    ok(resultText(j).includes('keep') || !resultText(j).includes('失败'), 'dcw_judge 落 keep 判定(经验固化)', resultText(j).split('\n')[0].slice(0, 100))
+
+    const store = await invoke(execA, 'kb_store', {
+      title: `优化方案:压力设定器 ${node?.value}→${target.toFixed(4)}(判定 keep)`,
+      category: 'optimization',
+      problem: '压力设定偏离经验最优区,需要在不触发越限的前提下上调设定',
+      solution: `按配方窗口内 ${step.toFixed(4)} 步进上调;写入后观察 ${freshNode} 回读稳定,dcw_judge=keep(记录 ${recordId}),可标 lastGood`,
+      key_lessons: ['小步进+回读确认再判定', 'keep 判定须引用数采证据'],
+      tags: [LINE, '闭环优化', `record:${recordId}`, 'production-e2e'],
+    })
+    ok(resultText(store).includes('已沉淀'), '优化方案写入知识库(经验沉淀)', resultText(store).slice(0, 90))
+  }
+
+  const s2 = await invoke(execA, 'kb_search', { query: `压力设定器 优化方案 keep ${LINE}` })
+  ok(resultText(s2).startsWith('检索到'), 'kb_search 复核:优化方案可检索', resultText(s2).split('\n')[1]?.slice(0, 100) ?? resultText(s2).slice(0, 100))
+}
+
+// ══ Stage E:沉淀验证 ══════════════════════════════════════════════════════
+console.log('\n── Stage E 知识沉淀验证 ──')
+{
+  const exp = await api('GET', '/api/plugins/rag-bridge/experience?limit=50', { token: userToken })
+  const count = exp.json?.count ?? 0
+  const hasOpt = JSON.stringify(exp.json?.experiences ?? []).includes('optimization')
+  ok(count > 0, '经验库可读', `count=${count}`)
+  ok(hasOpt, '经验库含 optimization 类目(优化方案在册)')
+
+  const s3 = await api('GET', `/api/plugins/rag-bridge/search?q=${encodeURIComponent('闭环优化 设定 判定')}&top_k=3`, { token: userToken })
+  ok(s3.json?.success === true && (s3.json?.results?.length ?? 0) > 0, 'two-stage 检索命中闭环优化知识', `results=${s3.json?.results?.length}`)
+}
+
+console.log(`\n══ 生产增强闭环结果:${pass} 通过 / ${fail} 失败 ══`)
+if (failures.length) for (const f of failures) console.error(`  - ${f}`)
+process.exit(fail > 0 ? 1 : 0)

package/scripts/team-plugins-api-smoke.mjs

@@ -0,0 +1,149 @@
+/**
+ * 团队级插件开关 + 内置插件 + 配置化 API — 轻量 HTTP 冒烟(AgentWorkShop 3001)。
+ * 覆盖:内置识别 / 建队带 plugins / 团队插件 GET+PUT / 工具清单团队过滤 /
+ * dispatch 拒绝 / 系统配置 plugins 组读写与热更新 / 插件健康检测。
+ * 无真实诊断、无 LLM 会话消耗。
+ */
+import { readFileSync } from 'node:fs'
+import { DatabaseSync } from 'node:sqlite'
+
+const BASE = process.env.AW_BASE ?? 'http://localhost:3001'
+const saved = JSON.parse(readFileSync(new URL('../.AgentWorkShop/data/.three-system-e2e-token.json', import.meta.url), 'utf8'))
+const T = process.env.AW_E2E_TOKEN ?? saved.token
+
+// admin 夹具:settings API 需要 admin/editor;临时把 e2e 夹具用户全升为 editor,结束还原
+const db = new DatabaseSync(new URL('../.AgentWorkShop/data/users.sqlite', import.meta.url))
+db.exec('PRAGMA busy_timeout=4000')
+const fixtureIds = (db.prepare('SELECT id FROM users WHERE name = \'three-system-demo\' OR name LIKE \'e2e3sys-%\'').all() ?? [])
+  .map(r => r.id)
+const upgraded = []
+for (const id of fixtureIds) {
+  const role = db.prepare('SELECT role FROM users WHERE id = ?').get(id)?.role
+  if (role && role !== 'admin') {
+    upgraded.push({ id, role })
+    db.prepare('UPDATE users SET role = ? WHERE id = ?').run('admin', id)
+  }
+}
+
+let pass = 0
+let fail = 0
+const ok = (cond, label, detail = '') => {
+  if (cond) {
+    pass++
+    console.log(`  ✔ ${label}${detail ? ` —— ${detail}` : ''}`)
+  }
+  else {
+    fail++
+    console.error(`  ✘ ${label}${detail ? ` —— ${detail}` : ''}`)
+  }
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+async function api(method, path, { body, token, timeoutMs = 20000 } = {}) {
+  const headers = {}
+  if (body !== undefined) headers['content-type'] = 'application/json'
+  if (token) headers.authorization = `Bearer ${token}`
+  const res = await fetch(`${BASE}${path}`, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined, signal: AbortSignal.timeout(timeoutMs) })
+  return { status: res.status, json: await res.json().catch(() => null) }
+}
+
+console.log('\n══ 团队插件开关 + 内置插件 + 配置化 API 冒烟 ══')
+// 1) 内置识别
+const plugs = await api('GET', '/api/workshop/plugins', { token: T })
+const list = plugs.json?.plugins ?? plugs.json?.data?.plugins ?? []
+const bridges = list.filter(p => ['rag-bridge', 'diag-bridge'].includes(p?.name))
+ok(list.length > 0, '插件清单可读', `count=${list.length}`)
+ok(bridges.length === 2 && bridges.every(p => p.builtin && p.enabled && p.scope === 'builtin'), '两桥接插件以内置作用域识别且启用', bridges.map(p => `${p.name}(${p.scope})`).join(','))
+
+// 2) 健康检测
+const ragH = await api('GET', '/api/plugins/rag-bridge/health', { token: T })
+ok(ragH.status === 200 && ragH.json?.backend?.ok === true && ragH.json?.web?.ok === true, 'rag-bridge 健康检测(backend+web)', `kb=${ragH.json?.kb?.name}`)
+const dgH = await api('GET', '/api/plugins/diag-bridge/health', { token: T })
+ok(dgH.status === 200 && dgH.json?.remote?.status === 'ok', 'diag-bridge 健康检测(3210 可达)', `activeRuns=${dgH.json?.remote?.activeRuns}`)
+
+// 3) 系统配置 plugins 组(读 + 写 + 热更新)
+const cfg = await api('GET', '/api/system/settings', { token: T })
+const eff = cfg.json?.data?.effective ?? cfg.json?.effective ?? {}
+ok(eff['plugins.kb.base_url'] === 'http://127.0.0.1:8770' && eff['plugins.diag.base_url'] === 'http://127.0.0.1:3210', '系统配置 plugins 组可读(schema 驱动)', `kb=${eff['plugins.kb.base_url']} diag=${eff['plugins.diag.base_url']}`)
+const patch = await api('PATCH', '/api/system/settings', { token: T, body: { override: { 'plugins.kb.web_url': 'http://127.0.0.1:6789' } } })
+const pRes = patch.json?.data ?? patch.json ?? {}
+ok(pRes.ok === true, 'plugins 配置项可写(热生效)', `changed=${(pRes.changed ?? []).join(',') || '-'}`)
+
+// 4) 建队带 plugins(默认全启用)与关闭插件团队
+const nameA = `冒烟-全启用-${Date.now().toString(36)}`
+const cA = await api('POST', '/api/workshop/channels', {
+  token: T,
+  body: { name: nameA, leadAgent: { name: '冒烟组长', harness: 'mock' } },
+})
+const chA = cA.json?.data?.channelId
+ok(Boolean(chA), '建队(未传 plugins → 默认全启用)')
+const nameB = `冒烟-关闭KB-${Date.now().toString(36)}`
+const cB = await api('POST', '/api/workshop/channels', {
+  token: T,
+  body: {
+    name: nameB,
+    leadAgent: { name: '冒烟组长B', harness: 'mock' },
+    plugins: [{ name: 'rag-bridge', enabled: false }, { name: 'diag-bridge', enabled: true }],
+  },
+})
+const chB = cB.json?.data?.channelId
+ok(Boolean(chB), '建队带 plugins 勾选(rag-bridge 关闭)')
+
+// 5) 团队插件视图
+const viewA = await api('GET', `/api/workshop/channels/${chA}/plugins`, { token: T })
+ok(viewA.json?.data?.source === 'default' && viewA.json?.data?.plugins?.every(p => p.enabled), 'A 团队视图:source=default 全启用', `count=${viewA.json?.data?.plugins?.length}`)
+const viewB = await api('GET', `/api/workshop/channels/${chB}/plugins`, { token: T })
+const kbView = (viewB.json?.data?.plugins ?? []).find(p => p.name === 'rag-bridge')
+const dgView = (viewB.json?.data?.plugins ?? []).find(p => p.name === 'diag-bridge')
+ok(viewB.json?.data?.source === 'explicit' && kbView?.enabled === false && dgView?.enabled === true, 'B 团队视图:显式配置(rag 关/diag 开)', `source=${viewB.json?.data?.source}`)
+
+// 工具直调用 omp 执行器(mock lead 无 dispatch 面);建队后补执行器成员
+const mkExec = async (ch, name) => {
+  const members = (await api('GET', `/api/workshop/channels/${ch}/agents`, { token: T })).json?.data ?? []
+  if (!members.some(m => m?.name === name)) {
+    await api('POST', `/api/workshop/channels/${ch}/agents`, { token: T, body: { name, harness: 'omp', role: 'worker' } })
+  }
+  return ((await api('GET', `/api/workshop/channels/${ch}/agents`, { token: T })).json?.data ?? []).find(m => m?.name === name)
+}
+const execA = await mkExec(chA, '冒烟执行器A')
+const execB = await mkExec(chB, '冒烟执行器B')
+
+// 6) 工具清单团队过滤(A 团队执行器含 kb_*;B 团队执行器无 kb_*)
+const toolsA = (await api('GET', `/api/workshop/agent-tools/list?agentId=${execA.id}`, { token: T })).json?.data?.tools ?? []
+const toolsB = (await api('GET', `/api/workshop/agent-tools/list?agentId=${execB.id}`, { token: T })).json?.data?.tools ?? []
+ok(toolsA.some(t => t.name === 'kb_search') && toolsA.some(t => t.name === 'diag_run'), 'A 团队工具清单含 kb_*/diag_*(插件工具注入)', `total=${toolsA.length}`)
+ok(!toolsB.some(t => t.name === 'kb_search') && !toolsB.some(t => t.name === 'kb_store'), 'B 团队工具清单无 kb_*(关闭插件不注入,防上下文污染)', `total=${toolsB.length}`)
+ok(toolsB.some(t => t.name === 'diag_run'), 'B 团队 diag_* 仍在(diag-bridge 开启)')
+
+// 7) dispatch 拒绝:B 团队调 kb_search → isError
+const invB = await api('POST', '/api/workshop/agent-tools/invoke', {
+  token: T,
+  body: { agentId: execB.id, tool: 'kb_search', args: { query: '冒烟' } },
+})
+const rB = invB.json?.data?.result
+ok(rB?.isError === true && String(rB?.text).includes('未启用插件'), 'B 团队调用被拒插件工具 → isError + 引导开启', String(rB?.text).slice(0, 70))
+// A 团队正常
+const invA = await api('POST', '/api/workshop/agent-tools/invoke', {
+  token: T, timeoutMs: 60000,
+  body: { agentId: execA.id, tool: 'kb_search', args: { query: '冒烟验证' } },
+})
+const rA = invA.json?.data?.result
+ok(rA && rA.isError !== true, 'A 团队调用插件工具正常(工具桥链路通)', String(rA?.text ?? '').slice(0, 60))
+
+// 8) 团队设置切换:PUT 开回 rag-bridge → 工具回来
+const put = await api('PUT', `/api/workshop/channels/${chB}/plugins`, {
+  token: T,
+  body: { plugins: [{ name: 'rag-bridge', enabled: true }, { name: 'diag-bridge', enabled: true }] },
+})
+ok(put.status === 200 && put.json?.data?.saved === 2, '团队设置 PUT 切换开关', `saved=${put.json?.data?.saved}`)
+await sleep(1000)
+const toolsB2 = (await api('GET', `/api/workshop/agent-tools/list?agentId=${execB.id}`, { token: T })).json?.data?.tools ?? []
+ok(toolsB2.some(t => t.name === 'kb_search'), '开回后 kb_search 回到 B 团队工具清单(热生效)')
+
+// 9) 清理:还原角色、删冒烟频道(删除级联 channel_plugins)
+for (const u of upgraded) db.prepare('UPDATE users SET role = ? WHERE id = ?').run(u.role, u.id)
+db.close()
+for (const ch of [chA, chB]) {
+  await api('DELETE', `/api/workshop/channels/${ch}`, { token: T }).catch(() => null)
+}
+console.log(`\n══ 冒烟结果:${pass} 通过 / ${fail} 失败 ══`)
+process.exit(fail > 0 ? 1 : 0)

package/scripts/test-aml-integration.ts

@@ -0,0 +1,159 @@
+/**
+ * AML 集成测试(进程内,沙箱 cwd + 沙箱数据目录):
+ *   数据集构建器全流程 —— 批次打标样本 → 清洗/对齐/滑窗 → byRun 切分确定性 → 快照落盘;
+ *   隔离硬约束(跨产线节点拒绝)、配额、GC 引用计数。
+ *
+ * 运行:npx tsx --tsconfig .nuxt/tsconfig.server.json scripts/test-aml-integration.ts
+ * 原理:process.chdir 沙箱目录(dcw JSON 仓库落 <cwd>/server/data)+ AW_DATA_DIR 沙箱
+ *       (tsdb sqlite 回退 + workshop.sqlite);动态 import 避免模块在 chdir 前初始化。
+ */
+import assert from 'node:assert'
+import { mkdirSync, rmSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { tmpdir } from 'node:os'
+
+let passed = 0
+let failed = 0
+function t(name: string, fn: () => void | Promise<void>): Promise<void> {
+  return Promise.resolve()
+    .then(fn)
+    .then(() => {
+      passed++
+      console.log(`  ✓ ${name}`)
+    })
+    .catch((err) => {
+      failed++
+      console.error(`  ✗ ${name}: ${err?.stack ?? String(err)}`)
+    })
+}
+
+const ROOT = join(tmpdir(), `aml-it-${Date.now()}`)
+
+async function main() {
+  rmSync(ROOT, { recursive: true, force: true })
+  mkdirSync(join(ROOT, 'server', 'data'), { recursive: true })
+  mkdirSync(join(ROOT, 'data'), { recursive: true })
+  process.env.AW_DATA_DIR = join(ROOT, 'data')
+  process.chdir(ROOT)
+
+  // ---- 1. 沙箱化服务装配(动态 import:chdir/env 生效后再加载)----
+  const { openWorkshopDb, initWorkshopDb } = await import('../server/services/workshop/db/database')
+  const { configureAmlRuntime } = await import('../server/services/workshop/aml/runtime')
+  const db = openWorkshopDb(join(process.env.AW_DATA_DIR, 'workshop.sqlite'))
+  initWorkshopDb(db)
+  const rt = configureAmlRuntime(db, process.env.AW_DATA_DIR)
+
+  // ---- 2. 伪造批次注册表(dcw JSON 仓库:沙箱 cwd/server/data/dcw-runs.json)----
+  // RecipeRunView 最小字段集(listRuns 按 recipeId 过滤 + endedAt 非空)
+  const mkRun = (id: string, startedAt: string, endedAt: string) => ({
+    id, recipeId: 'rc-it-1', productId: 'pd-it-1', lineId: 'ln-it-1',
+    name: `批次 ${id}`, startedAt, endedAt, params: [], paramsSnapshot: [], results: [],
+  })
+  const now = Date.now()
+  const runs = [0, 1, 2, 3].map(i => mkRun(
+    `rr-it-${i}`,
+    new Date(now - (4 - i) * 3600_000).toISOString(),
+    new Date(now - (4 - i) * 3600_000 + 2400_000).toISOString(),
+  ))
+  writeFileSync(join(ROOT, 'server', 'data', 'dcw-runs.json'), JSON.stringify(runs))
+  writeFileSync(join(ROOT, 'server', 'data', 'dcw-recipes.json'), JSON.stringify([]))
+  // 数采节点夹具(daq-node.repo 读 <cwd>/server/data/daqs.json;构建器按此校验存在性与产线)
+  writeFileSync(join(ROOT, 'server', 'data', 'daqs.json'), JSON.stringify([
+    { id: 'daq-it-ctrl', templateRef: 'daq-temp-tc', name: 'it-ctrl', lineId: 'ln-it-1', min: 0, max: 100 },
+    { id: 'daq-it-tmp', templateRef: 'daq-pressure-tx', name: 'it-tmp', lineId: 'ln-it-1', min: 0, max: 200 },
+  ]))
+
+  // ---- 3. 直接向 tsdb 写合成样本(一阶惯性 + 死区 + 噪声;逐 run 打标)----
+  const { SqliteTimeSeriesAdapter } = await import('../server/services/workshop/daq/storage/sqlite.adapter')
+  const tsdb = new SqliteTimeSeriesAdapter()
+  await tsdb.init()
+  const beatMs = 5000
+  const rows = []
+  for (const [ri, run] of runs.entries()) {
+    const t0 = Date.parse(run.startedAt)
+    const t1 = Date.parse(run.endedAt)
+    let pv = 50 + ri // 各批次不同初值(run 间差异 → byRun 切分有效)
+    for (let t = t0; t <= t1; t += 1000) {
+      const sp = 60 + 10 * Math.sin((t - t0) / 60000)
+      pv = pv + (sp - pv) * 0.02 + (Math.random() - 0.5) * 0.3
+      rows.push({ nodeId: 'daq-it-ctrl', tsMs: t, value: sp + (Math.random() - 0.5) * 0.1, state: 'ok', lineId: 'ln-it-1', productId: 'pd-it-1', recipeId: 'rc-it-1', runId: run.id })
+      rows.push({ nodeId: 'daq-it-tmp', tsMs: t, value: pv, state: 'ok', lineId: 'ln-it-1', productId: 'pd-it-1', recipeId: 'rc-it-1', runId: run.id })
+      if (t % 10000 === 5000) {
+        // 离群点(供 Hampel 清洗)与一个非 ok 状态样本(供 state 过滤)
+        rows.push({ nodeId: 'daq-it-tmp', tsMs: t, value: 9999, state: 'ok', lineId: 'ln-it-1', productId: 'pd-it-1', recipeId: 'rc-it-1', runId: run.id })
+      }
+    }
+  }
+  await tsdb.writeSamples(rows)
+
+  const { buildDataset, amlDiskUsageMb } = await import('../server/services/workshop/aml/dataset-builder')
+  const { parseDatasetSpec } = await import('../server/services/workshop/aml/spec')
+
+  const specBase = {
+    lineId: 'ln-it-1', productId: 'pd-it-1', recipeId: 'rc-it-1',
+    nodes: [{ nodeId: 'daq-it-ctrl', role: 'control' }, { nodeId: 'daq-it-tmp', role: 'target' }],
+    beatMs, window: { historySteps: 12, horizonSteps: 6 },
+    cleaning: { hampelK: 5, maxInterpMs: 15000, maxDropRatio: 0.3 },
+    split: { valRatio: 0.25, testRatio: 0.25, seed: 42 },
+    purpose: 'mpc_surrogate' as const,
+  }
+
+  console.log('dataset-builder')
+  let firstSha = ''
+  await t('构建成功:行数/切分/统计报告齐全,清洗管线生效', async () => {
+    const spec = parseDatasetSpec(specBase)
+    const { dataset, report } = await buildDataset(spec, { id: 'tester', kind: 'user' })
+    firstSha = dataset.sha256
+    assert.ok(dataset.rowCount > 100, `行数 ${dataset.rowCount}`)
+    assert.equal(dataset.runIds.length, 4)
+    assert.ok(report.windowCount.train > 0 && report.windowCount.test > 0)
+    assert.ok(report.nodeSummaries.length === 2)
+    // Hampel 清掉离群点(4 个 run × 若干)→ cleanedRatio > 0
+    const tmpStats = report.cleaning['daq-it-tmp']
+    assert.ok(tmpStats && tmpStats.droppedHampel > 0, ` Hampel 应剔除离群点:${JSON.stringify(tmpStats)}`)
+    // 滞后估计存在(控制→目标)
+    assert.ok(report.lagEstimates.length >= 1)
+  })
+  await t('确定性:同 seed 两次构建 sha256 一致', async () => {
+    const { dataset } = await buildDataset(parseDatasetSpec(specBase), { id: 'tester', kind: 'user' })
+    assert.equal(dataset.sha256, firstSha)
+  })
+  await t('隔离:产线/批次归属不一致 → 拒绝(两个守卫任一生效)', async () => {
+    await assert.rejects(
+      () => buildDataset(parseDatasetSpec({
+        ...specBase, nodes: [{ nodeId: 'daq-it-ctrl', role: 'control' }, { nodeId: 'daq-it-tmp', role: 'target' }], lineId: 'ln-other',
+      }), { id: 'tester', kind: 'user' }),
+      (e: unknown) => /^AML_(RUN_MISMATCH|NODE_LINE_MISMATCH)$/.test((e as { code?: string }).code ?? ''),
+    )
+  })
+  await t('隔离:批次归属不一致 → 422 拒绝', async () => {
+    await assert.rejects(
+      () => buildDataset(parseDatasetSpec({ ...specBase, productId: 'pd-other' }), { id: 'tester', kind: 'user' }),
+      (e: unknown) => (e as { code?: string }).code === 'AML_RUN_MISMATCH',
+    )
+  })
+  await t('未知节点 → 404', async () => {
+    await assert.rejects(
+      () => buildDataset(parseDatasetSpec({
+        ...specBase, nodes: [{ nodeId: 'daq-nope', role: 'control' }, { nodeId: 'daq-it-tmp', role: 'target' }],
+      }), { id: 'tester', kind: 'user' }),
+      (e: unknown) => (e as { code?: string }).code === 'AML_NODE_MISSING',
+    )
+  })
+  await t('引用计数与 GC:被引用数据集在册', async () => {
+    const list = rt.repo.dataset.list({ recipeId: 'rc-it-1', limit: 10 })
+    assert.ok(list.length >= 2)
+    const refs = rt.repo.dataset.referenceCount(list[0].id)
+    assert.equal(refs.models, 0)
+    assert.equal(amlDiskUsageMb(rt.root, { force: true }) > 0, true)
+  })
+
+  console.log('\n结果:' + passed + ' 通过 / ' + failed + ' 失败')
+  if (failed > 0) process.exit(1)
+  process.exit(0)
+}
+
+main().catch((err) => {
+  console.error(err)
+  process.exit(1)
+})