agentworkshop 0.7.24 → 0.7.33

package/sdk/index.mjs

@@ -1,41 +1,44 @@
-// ============================================================
-// AgentWorkShop SDK — 门面
-// ------------------------------------------------------------
-// 插件作者两种写法:
-//   1) 零依赖(推荐,全局安装零解析链约束下的标准形态):
-//        export default { name, version, setup(ctx), client: './client.mjs', routes: [...] }
-//      —— ctx 由宿主注入,本 SDK 对插件运行时非必需。
-//   2) 显式糖(本地开发/单体使用时):
-//        import { definePlugin } from 'agentworkshop/sdk'
-//        export default definePlugin({ ... })
-// 生命周期(宿主触发):
-//   服务端: setup(ctx) → plugin:host:init → event:*/daq:sample/dcw:write/line:start|stop
-//           → server:close
-//   客户端: client.mjs setup(ctx) → client:init → event:*/page:change
-// ============================================================
-import { SDK_VERSION, definePlugin, createPluginContext, createRouteTable, validatePluginModule, pluginKvExists } from './context.mjs'
-import { HookBus } from './hooks.mjs'
-import { createPlatformClient } from './api.mjs'
-import { CLIENT_SDK_VERSION, createClientContext } from './client.mjs'
-import { LIFECYCLE_EVENTS, CLIENT_EVENTS } from './lifecycle.mjs'
-
-export { SDK_VERSION, definePlugin, createPluginContext, createRouteTable, validatePluginModule, pluginKvExists } from './context.mjs'
-export { HookBus } from './hooks.mjs'
-export { createPlatformClient } from './api.mjs'
-export { CLIENT_SDK_VERSION, createClientContext } from './client.mjs'
-export { LIFECYCLE_EVENTS, CLIENT_EVENTS } from './lifecycle.mjs'
-
-export default {
-  SDK_VERSION,
-  definePlugin,
-  HookBus,
-  createPluginContext,
-  createRouteTable,
-  validatePluginModule,
-  pluginKvExists,
-  createPlatformClient,
-  CLIENT_SDK_VERSION,
-  createClientContext,
-  LIFECYCLE_EVENTS,
-  CLIENT_EVENTS,
-}
+// ============================================================
+// AgentWorkShop SDK — 门面
+// ------------------------------------------------------------
+// 插件作者两种写法:
+//   1) 零依赖(推荐,全局安装零解析链约束下的标准形态):
+//        export default { name, version, setup(ctx), client: './client.mjs', routes: [...] }
+//      —— ctx 由宿主注入,本 SDK 对插件运行时非必需。
+//   2) 显式糖(本地开发/单体使用时):
+//        import { definePlugin } from 'agentworkshop/sdk'
+//        export default definePlugin({ ... })
+// 生命周期(宿主触发):
+//   服务端: setup(ctx) → plugin:host:init → event:*/daq:sample/dcw:write/line:start|stop
+//           → server:close
+//   客户端: client.mjs setup(ctx) → client:init → event:*/page:change
+// ============================================================
+import { SDK_VERSION, definePlugin, createPluginContext, createRouteTable, validatePluginModule, validatePluginSettings, validatePluginGroups, resolvePluginGroupId, pluginKvExists } from './context.mjs'
+import { HookBus } from './hooks.mjs'
+import { createPlatformClient } from './api.mjs'
+import { CLIENT_SDK_VERSION, createClientContext } from './client.mjs'
+import { LIFECYCLE_EVENTS, CLIENT_EVENTS } from './lifecycle.mjs'
+
+export { SDK_VERSION, definePlugin, createPluginContext, createRouteTable, validatePluginModule, validatePluginSettings, validatePluginGroups, resolvePluginGroupId, pluginKvExists, isPathInside } from './context.mjs'
+export { HookBus } from './hooks.mjs'
+export { createPlatformClient } from './api.mjs'
+export { CLIENT_SDK_VERSION, createClientContext } from './client.mjs'
+export { LIFECYCLE_EVENTS, CLIENT_EVENTS } from './lifecycle.mjs'
+
+export default {
+  SDK_VERSION,
+  definePlugin,
+  HookBus,
+  createPluginContext,
+  createRouteTable,
+  validatePluginModule,
+  validatePluginSettings,
+  validatePluginGroups,
+  resolvePluginGroupId,
+  pluginKvExists,
+  createPlatformClient,
+  CLIENT_SDK_VERSION,
+  createClientContext,
+  LIFECYCLE_EVENTS,
+  CLIENT_EVENTS,
+}

package/sdk/lifecycle.mjs

@@ -2,13 +2,16 @@
 // AgentWorkShop SDK — 生命周期事件清单(宿主触发;单一事实源)
 // ============================================================
 
-/** 服务端生命周期事件清单(宿主触发;文档见 docs/plugins.md) */
+/** 服务端生命周期事件清单(宿主触发;文档见 docs/plugins.md 与文档站 /sdk/lifecycle)。
+ *  daq:frame 与 daq:sample 同由数采管线发射(host.mjs emitDaqFrame,帧入账路径),
+ *  入册使清单与实际发射面一致。 */
 export const LIFECYCLE_EVENTS = Object.freeze([
   'plugin:host:init',
   'config:changed',
   'permissions:changed',
   'event:*',
   'daq:sample',
+  'daq:frame',
   'dcw:write',
   'line:start',
   'line:stop',

package/server/api/plugins/[name]/[...path].ts

@@ -1,31 +1,46 @@
-/**
- * /api/plugins/:name/** —— 插件自注册 API 的转发层(exact-match)。
- * 插件经 ctx.route(method, path, handler) 注册;handler(event) 返回值由 nitro 序列化。
- * 鉴权由插件自行处理(v1 不强制;可经 resolveUser 复用业务鉴权)。
- * 错误隔离:插件 handler 抛错 → 结构化日志(带插件归属)+ 干净 500 信封,不裸传堆栈。
- */
-import { defineEventHandler, createError, readBody } from 'h3'
-import { getPluginHost } from '@/server/services/workshop/plugins/host.mjs'
-
-export default defineEventHandler(async (event) => {
-  const host = getPluginHost()
-  if (!host) throw createError({ statusCode: 503, statusMessage: 'plugin host not ready' })
-  const name = String(event.context.params?.name ?? '')
-  const path = '/' + (event.context.params?.path ?? '').replace(/^\/+/, '')
-  const handler = host.routes.resolve(name, event.method, path)
-  if (!handler) {
-    throw createError({ statusCode: 404, statusMessage: `plugin route not found: ${event.method} /api/plugins/${name}${path}` })
-  }
-  // 预读 body 挂到 event(插件 handler 无 h3 导入能力,经 event.awBody 消费)
-  const awBody = await readBody(event).catch(() => undefined)
-  ;(event as Record<string, unknown>).awBody = awBody
-  try {
-    return await handler(event)
-  }
-  catch (err) {
-    // 问题日志:插件归属 + 路由 + 原始原因(运维按 name 即可定位到具体插件目录)
-    const reason = err instanceof Error ? err.message : String(err)
-    host.logger?.error?.(`插件路由处理失败 [${name}] ${event.method} /api/plugins/${name}${path}: ${reason}`)
-    throw createError({ statusCode: 500, statusMessage: `插件路由处理失败(${name}): ${reason}` })
-  }
-})
+/**
+ * /api/plugins/:name/** —— 插件自注册 API 的转发层(exact-match)。
+ * 插件经 ctx.route(method, path, handler) 注册;handler(event) 返回值由 nitro 序列化。
+ * 鉴权:插件在入口声明 auth:'user' | 'admin' | 'agent-or-user' 时由转发层统一校验
+ *   (缺省 'none' 保持开放,兼容既有插件/浏览器面板)。
+ * 错误隔离:插件 handler 抛错 → 结构化日志(带插件归属)+ 干净 500 信封,不裸传堆栈。
+ */
+import { defineEventHandler, createError, readBody } from 'h3'
+import { getPluginHost } from '@/server/services/workshop/plugins/host.mjs'
+import { resolveUser, resolveAgentOrUser, requireAdmin } from '../../workshop/caller'
+
+export default defineEventHandler(async (event) => {
+  const host = getPluginHost()
+  if (!host) throw createError({ statusCode: 503, statusMessage: 'plugin host not ready' })
+  const name = String(event.context.params?.name ?? '')
+  const path = '/' + (event.context.params?.path ?? '').replace(/^\/+/, '')
+  const rec = host.plugins.get(name)
+  // 声明式鉴权门:在进入插件 handler 前统一校验(禁用插件的路由表已不含其路由,天然 404)
+  const authMode = String(rec?.auth ?? 'none')
+  if (authMode !== 'none') {
+    try {
+      if (authMode === 'admin') await requireAdmin(event)
+      else if (authMode === 'agent-or-user') await resolveAgentOrUser(event)
+      else await resolveUser(event)
+    }
+    catch {
+      throw createError({ statusCode: 401, statusMessage: '需要有效的用户 token(Authorization: Bearer <用户token>)' })
+    }
+  }
+  const handler = host.routes.resolve(name, event.method, path)
+  if (!handler) {
+    throw createError({ statusCode: 404, statusMessage: `plugin route not found: ${event.method} /api/plugins/${name}${path}` })
+  }
+  // 预读 body 挂到 event(插件 handler 无 h3 导入能力,经 event.awBody 消费)
+  const awBody = await readBody(event).catch(() => undefined)
+  ;(event as unknown as Record<string, unknown>).awBody = awBody
+  try {
+    return await handler(event)
+  }
+  catch (err) {
+    // 问题日志:插件归属 + 路由 + 原始原因(运维按 name 即可定位到具体插件目录)
+    const reason = err instanceof Error ? err.message : String(err)
+    host.logger?.error?.(`插件路由处理失败 [${name}] ${event.method} /api/plugins/${name}${path}: ${reason}`)
+    throw createError({ statusCode: 500, statusMessage: `插件路由处理失败(${name}): ${reason}` })
+  }
+})

package/server/api/plugins/i18n.get.ts

@@ -0,0 +1,12 @@
+/**
+ * GET /api/plugins/i18n —— 全部插件的 i18n 消息包(免鉴权只读)。
+ * 返回 { "<plugin>": { "<locale>": { key: value } } };前端 loader 启动/热重载时
+ * 拉取,按 vue-i18n 命名空间 `plugin.<plugin>` 合并 —— 插件设置标签、面板文案
+ * 由此获得多语言支持。仅 UI 文案:插件作者不得把敏感信息放进 i18n.json。
+ */
+import { defineEventHandler } from 'h3'
+import { pluginI18nBundle } from '@/server/services/workshop/plugins/host.mjs'
+
+export default defineEventHandler(() => {
+  return { i18n: pluginI18nBundle(), locales: ['zh-CN', 'en'] }
+})

package/server/api/system/config-groups/[id].delete.ts

@@ -0,0 +1,21 @@
+/**
+ * DELETE /api/system/config-groups/[id] —— 删除「管理员自建」分组。
+ *
+ * 拒绝删除内置分组(source=builtin)与插件分组(source=plugin);
+ * 组内仍有字段时拒绝(字段的 group 由描述符声明,运行时不可改写 → 不允许静默丢字段),
+ * 可用 ?reassignTo=<groupId> 显式声明迁移目标后再删。
+ *
+ * 鉴权:仅 admin。
+ */
+import { getQuery } from 'h3'
+import { defineApiHandler } from '../../../utils/response'
+import { requireRole } from '../../workshop/caller'
+import { getSystemConfigService } from '../../../services/system-config'
+
+export default defineApiHandler((event) => {
+  requireRole(event, ['admin'])
+  const id = String(event.context.params?.id ?? '').trim()
+  const reassignTo = String(getQuery(event).reassignTo ?? '').trim() || undefined
+  const res = getSystemConfigService().deleteGroup(id, reassignTo)
+  return { ok: true, ...res }
+})

package/server/api/system/config-groups/[id].patch.ts

@@ -0,0 +1,26 @@
+/**
+ * PATCH /api/system/config-groups/[id] —— 更新分组(标题/说明/排序/默认折叠/图标)。
+ *
+ * 允许改内置分组(source=builtin)的展示元数据 —— 管理员可重排、改名、默认折叠,
+ * 但 source 与 id 不可改,内置分组也不可删除(避免字段无家可归)。
+ * 插件声明的分组(id=plugin-*)由插件权威,本接口拒绝,请在插件侧修改。
+ *
+ * 鉴权:仅 admin。
+ */
+import { readBody } from 'h3'
+import { defineApiHandler } from '../../../utils/response'
+import { requireRole } from '../../workshop/caller'
+import { getSystemConfigService } from '../../../services/system-config'
+
+export default defineApiHandler(async (event) => {
+  requireRole(event, ['admin'])
+  const id = String(event.context.params?.id ?? '').trim()
+  const body = (await readBody(event)) ?? {}
+  // id/source/plugin 是身份字段,不接受伪造
+  const patch = { ...body }
+  delete patch.id
+  delete patch.source
+  delete patch.plugin
+  const group = getSystemConfigService().updateGroup(id, patch)
+  return { ok: true, group }
+})

package/server/api/system/config-groups/index.get.ts

@@ -0,0 +1,21 @@
+/**
+ * GET /api/system/config-groups —— 配置分组列表(设置页分区的唯一渲染权威)。
+ *
+ * 返回有序分组(内置 / 管理员自建 / 插件声明),每项带 fieldCount。
+ * 前端设置页不再自行按描述符猜分组,而是完全按本接口的顺序与元数据渲染,
+ * 从而做到「后端 API 控制前端渲染」。
+ *
+ * 鉴权:admin/editor(与设置快照同权;含插件分组与字段数,属管理面信息)。
+ */
+import { defineApiHandler } from '../../../utils/response'
+import { requireRole } from '../../workshop/caller'
+import { getSystemConfigService } from '../../../services/system-config'
+
+export default defineApiHandler((event) => {
+  requireRole(event, ['admin', 'editor'])
+  const svc = getSystemConfigService()
+  return {
+    groups: svc.listGroups(),
+    registryPath: svc.groupRegistryPath,
+  }
+})

package/server/api/system/config-groups/index.post.ts

@@ -0,0 +1,33 @@
+/**
+ * POST /api/system/config-groups —— 新建配置分组(设置页隔离分区)。
+ *
+ * body: { id?, label, labelKey?, description?, order?, collapsed?, collapsible?, icon? }
+ *   id 省略时由 label 派生化名(耗时仍非法 → 400)。id 永久不可改(描述符按 id 归属)。
+ * 新建分组落在 user 来源(管理员自建),可改可删。
+ * 插件请走声明式通道(ctx.config.defineGroup / manifest.configGroups),
+ * 那样插件卸载时分组会被自动摘除,不会残留空分区。
+ *
+ * 鉴权:仅 admin(改的是全局设置页结构)。
+ */
+import { readBody } from 'h3'
+import { defineApiHandler } from '../../../utils/response'
+import { requireRole } from '../../workshop/caller'
+import { getSystemConfigService } from '../../../services/system-config'
+
+/** 由展示名派生合法 id(中文等非 ASCII 直接丢弃,A…Z0-9_- 保留) */
+function slugify(label: string): string {
+  const ascii = label
+    .toLowerCase()
+    .replace(/[^a-z0-9_-]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .slice(0, 32)
+  return ascii || `group-${Date.now().toString(36)}`
+}
+
+export default defineApiHandler(async (event) => {
+  requireRole(event, ['admin'])
+  const body = (await readBody(event)) ?? {}
+  const id = String(body.id ?? '').trim() || slugify(String(body.label ?? ''))
+  const group = getSystemConfigService().createGroup({ ...body, id })
+  return { ok: true, group }
+})

package/server/api/system/settings/events.get.ts

@@ -13,14 +13,18 @@ export default defineEventHandler(async (event) => {
   const service = getSystemConfigService()
   const stream = createEventStream(event)
 
-  const listener = (payload: ConfigEventPayload): void => {
-    void stream.push(JSON.stringify(payload))
+  // push 是对已断开 socket 的写:浏览器换页/关标签时必然失败。
+  // 不吞掉这个 rejection,它会以 unhandledRejection 逃逸 —— dev 下 nuxt CLI 的处理器
+  // 会据此结束整个 dev server(实测:审计浏览器翻页即把 dev server 打死)。
+  // 断流是这里的正常终态,不是错误。
+  const safePush = (payload: ConfigEventPayload): void => {
+    stream.push(JSON.stringify(payload)).catch(() => {})
   }
-  const unsubscribe = service.subscribe(listener)
+  const unsubscribe = service.subscribe(safePush)
 
   stream.onClosed(async () => {
     unsubscribe()
-    await stream.close()
+    await stream.close().catch(() => {})
   })
 
   return stream.send()

package/server/api/workshop/agent-tools/bindings/[id].delete.ts

@@ -1,19 +1,24 @@
 /**
  * DELETE /api/workshop/agent-tools/bindings/:id —— 解除绑定。
+ *
+ * 鉴权:解绑会顺带 cancelPendingFor 掉该 Agent 对该节点的挂起审批,
+ * 等于**否决他人正在等待的控制权**,因此与 PATCH 一样必须先验产线权限。
  */
 import { createError, getRouterParam } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getAgentNodeBindingRepo } from '@/server/services/workshop/agents/node-bindings.repo'
+import { requireBindingAccess } from '@/server/services/workshop/agents/binding-authz'
 import { getToolApprovals } from '@/server/services/workshop/agents/tool-approvals'
 
 export default defineApiHandler(async (event) => {
-  resolveUser(event)
+  const user = resolveUser(event)
   const id = getRouterParam(event, 'id')!
   const repo = getAgentNodeBindingRepo()
   const all = repo.all()
   const binding = all.find(b => b.id === id)
   if (!binding) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
+  requireBindingAccess(user, binding)
   if (!repo.unbind(id)) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
   // 解绑即失效:该 Agent 对该节点的挂起审批按拒绝收敛(tool result 注明原因)
   getToolApprovals().cancelPendingFor(binding.agentId, binding.nodeId)

package/server/api/workshop/agent-tools/bindings/[id].patch.ts

@@ -1,14 +1,23 @@
 /**
  * PATCH /api/workshop/agent-tools/bindings/:id —— 切换控制模式(auto/manual)。
+ *
+ * 鉴权(与 index.post.ts 同口径):manual→auto 等于**摘掉人类审批闸门**,
+ * 所以必须先证明调用者可支配该绑定所属产线的节点,否则任意登录用户都能
+ * 关掉别人的 HITL。早先此处只有 resolveUser。
  */
-import { getRouterParam, readBody } from 'h3'
+import { createError, getRouterParam, readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getAgentNodeBindingRepo } from '@/server/services/workshop/agents/node-bindings.repo'
+import { requireBindingAccess } from '@/server/services/workshop/agents/binding-authz'
 
 export default defineApiHandler(async (event) => {
-  resolveUser(event)
+  const user = resolveUser(event)
   const id = getRouterParam(event, 'id')!
   const body = await readBody<{ mode?: 'auto' | 'manual' }>(event) ?? {}
-  return { binding: getAgentNodeBindingRepo().setMode(id, body.mode ?? 'auto') }
+  const repo = getAgentNodeBindingRepo()
+  const binding = repo.all().find(b => b.id === id)
+  if (!binding) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
+  requireBindingAccess(user, binding)
+  return { binding: repo.setMode(id, body.mode ?? 'auto') }
 })

package/server/api/workshop/agent-tools/bindings/index.get.ts

@@ -1,14 +1,41 @@
 /**
  * GET /api/workshop/agent-tools/bindings?agentId= —— Agent 工业节点绑定列表。
+ *
+ * 鉴权:不带 agentId 时**不再返回全量授权表** —— 那是控制面数据(谁被允许动哪台设备),
+ * 且是「PATCH 摘 HITL 闸门」的枚举原语。改为按调用者可见产线过滤:
+ * admin/editor 全量,普通用户只看自己有权产线对应的绑定。
  */
 import { getQuery } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getAgentNodeBindingRepo } from '@/server/services/workshop/agents/node-bindings.repo'
+import { requireBindingAccess, lineIdOfBinding } from '@/server/services/workshop/agents/binding-authz'
+import { visibleLineIds } from '@/server/services/workshop/permissions'
 
 export default defineApiHandler(async (event) => {
-  resolveUser(event)
+  const user = resolveUser(event)
   const q = getQuery(event)
   const agentId = typeof q.agentId === 'string' ? q.agentId : ''
-  return { bindings: agentId ? getAgentNodeBindingRepo().byAgent(agentId) : getAgentNodeBindingRepo().all() }
+  if (agentId) {
+    // 指定 agent:逐条校验(顺带暴露悬空绑定,便于前端提示)
+    const rows = getAgentNodeBindingRepo().byAgent(agentId)
+    const visible = rows.filter((b) => {
+      try {
+        requireBindingAccess(user, b)
+        return true
+      }
+      catch {
+        return false
+      }
+    })
+    return { bindings: visible, filtered: visible.length !== rows.length }
+  }
+  const visible = visibleLineIds(user)
+  if (!visible) return { bindings: getAgentNodeBindingRepo().all() }
+  // 普通用户:只返回自己授权产线所属的绑定(节点→产线经控制器解析)
+  const rows = getAgentNodeBindingRepo().all().filter((b) => {
+    const lineId = lineIdOfBinding(b)
+    return lineId != null && visible.has(lineId)
+  })
+  return { bindings: rows }
 })

package/server/api/workshop/agent-tools/invoke.post.ts

@@ -3,25 +3,50 @@
  * 全量 host tool 分发(协作/任务/记忆/工业全族,与 omp set_host_tools 同源):
  * manager.invokeHostTool → impl.dispatchHostTool(共享 host-tool-bridge)。
  *
- * 鉴权(双通道):
- *  - 仪表盘用户:authorization Bearer(resolveUser);
- *  - agent 自证:x-aw-agent-token 头(channel_agents.token,stdio MCP 桥回程)。
+ * 鉴权(双通道,**两条都必须自证身份**):
+ *  - agent 自证:x-aw-agent-token 头(channel_agents.token)→ 该 token 必须属于
+ *    body.agentId 本身,否则 401(与 list.get.ts 同口径);
+ *  - 仪表盘用户:authorization Bearer(resolveUser)→ 必须能访问该 agent 所属 channel
+ *    (channel 属主,或 admin),否则 403。
+ * 早先用户路径只做 resolveUser 就把 body.agentId 透传给 manager.invokeHostTool,
+ * 而 manager 的 token 校验是 `input.token !== undefined` 才生效 —— 不带 agent token 时
+ * 校验被整段跳过,于是**任意登录用户可冒用任意 agent 调工具**(继承其节点绑定与 channel)。
  * body: { agentId, tool, args }
  */
 import { readBody, getHeader } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
 import { getWorkshopManager } from '@/server/plugins/workshop'
 
 export default defineApiHandler(async (event) => {
   const agentToken = getHeader(event, 'x-aw-agent-token')
-  if (!agentToken) resolveUser(event) // 桥路径免用户鉴权,由 token 校验兜底
+  // 用户路径:必须校验「该用户可支配该 agent」(桥路径由 token 自证兜底)
+  let user = null
+  if (!agentToken) user = resolveUser(event)
   const body = await readBody<{ agentId?: string, tool?: string, args?: Record<string, unknown> }>(event) ?? {}
   const agentId = String(body.agentId ?? '')
   const tool = String(body.tool ?? '')
   const args = body.args ?? {}
   if (!agentId) throw createError({ statusCode: 400, statusMessage: 'agentId required' })
   if (!tool) throw createError({ statusCode: 400, statusMessage: 'tool required' })
-  const result = await getWorkshopManager().invokeHostTool({ agentId, tool, args, token: agentToken || undefined })
+  const manager = getWorkshopManager()
+  if (agentToken) {
+    const resolved = manager.resolveAgentByToken(String(agentToken))
+    if (!resolved || resolved.agentId !== agentId) {
+      throw new AppError(401, 'UNAUTHORIZED', 'agent token 校验失败(与 agentId 不匹配)')
+    }
+  }
+  else if (user) {
+    const row = manager.deps.repos.channelAgents.findById(agentId)
+    if (!row) throw new AppError(404, 'NOT_FOUND', `agent 不存在: ${agentId}`)
+    if (user.role !== 'admin') {
+      const channel = manager.deps.repos.channels.findById(row.channelId)
+      if (!channel || channel.ownerUserId !== user.id) {
+        throw new AppError(403, 'SCOPE_VIOLATION', '该 agent 不属于当前用户,无权代为调用其工具')
+      }
+    }
+  }
+  const result = await manager.invokeHostTool({ agentId, tool, args, token: agentToken || undefined })
   return { result }
 })

package/server/api/workshop/aml/datasets/[id]/preview.get.ts

@@ -0,0 +1,68 @@
+/**
+ * GET /api/workshop/aml/datasets/:id/preview —— 目标/特征序列预览(≤512 窗,画图用)。
+ * query: node?(缺省第一个 target;可为 target/feature/control 节点)、limit?
+ */
+import { getQuery, getRouterParam } from 'h3'
+import { existsSync, closeSync, openSync, readSync } from 'node:fs'
+import { join } from 'node:path'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { loadManifest } from '@/server/services/workshop/aml/dataset-builder'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const rt = getAmlRuntime()
+  const ds = rt.repo.dataset.get(id)
+  if (!ds) throw new AppError(404, 'AML_DATASET_MISSING', `数据集 ${id} 不存在`)
+  requireLineMode(user, ds.lineId, 'readonly')
+
+  const manifest = loadManifest(ds)
+  const q = getQuery(event)
+  const node = (typeof q.node === 'string' && q.node) || manifest.targetNodes[0] || ''
+  if (!node || !manifest.allNodes.includes(node)) {
+    throw new AppError(422, 'AML_NODE_NOT_IN_DATASET', `节点 ${node || '(缺省)'} 不在该数据集中(可用:${manifest.targetNodes.join(',')})`)
+  }
+  const limit = Math.min(512, Math.max(16, Number(q.limit) || 256))
+
+  const total = manifest.shapes.x[0]
+  const stride = Math.max(1, Math.floor(total / limit))
+  const series: { w: number, values: (number | null)[] }[] = []
+  const j = manifest.allNodes.indexOf(node)
+  const ti = manifest.targetNodes.indexOf(node)
+
+  // 目标节点读 y(窗口未来段);其余读 x 历史末拍
+  const buf = Buffer.alloc(4)
+  const readF32 = (file: string, index: number): number => {
+    if (!existsSync(file)) return Number.NaN
+    const f = openSync(file, 'r')
+    try {
+      readSync(f, buf, 0, 4, index * 4)
+      return buf.readFloatLE(0)
+    }
+    finally { closeSync(f) }
+  }
+  const yFile = join(ds.path, 'arrays', 'y.f32')
+  const xFile = join(ds.path, 'arrays', 'x.f32')
+  const F = manifest.shapes.y[1]
+  const nTgt = manifest.shapes.y[2]
+  const nAll = manifest.shapes.x[2]
+  for (let w = 0; w < total; w += stride) {
+    if (ti >= 0) {
+      const values: (number | null)[] = []
+      for (let k = 0; k < F; k++) {
+        const v = readF32(yFile, (w * F + k) * nTgt + ti)
+        values.push(Number.isFinite(v) ? v : null)
+      }
+      series.push({ w, values })
+    }
+    else {
+      const v = readF32(xFile, (w * manifest.shapes.x[1] + manifest.shapes.x[1] - 1) * nAll + j)
+      series.push({ w, values: [Number.isFinite(v) ? v : null] })
+    }
+  }
+  return { node, role: ti >= 0 ? 'target' : manifest.controlNodes.includes(node) ? 'control' : 'feature', stride, total, series, norm: manifest.norm.y }
+})

package/server/api/workshop/aml/datasets/[id].get.ts

@@ -0,0 +1,24 @@
+/**
+ * GET /api/workshop/aml/datasets/:id —— 数据集详情(注册表行 + 统计/清洗报告)。
+ */
+import { getRouterParam } from 'h3'
+import { existsSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const ds = getAmlRuntime().repo.dataset.get(id)
+  if (!ds) throw new AppError(404, 'AML_DATASET_MISSING', `数据集 ${id} 不存在`)
+  requireLineMode(user, ds.lineId, 'readonly')
+  const reportPath = join(ds.path, 'report.json')
+  const report = existsSync(reportPath)
+    ? JSON.parse(readFileSync(reportPath, 'utf8'))
+    : null
+  return { dataset: ds, report }
+})

package/server/api/workshop/aml/datasets/index.get.ts

@@ -0,0 +1,20 @@
+/**
+ * GET /api/workshop/aml/datasets —— 数据集列表(产线可见性过滤;line/product/recipe 可选过滤)。
+ */
+import { getQuery } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { filterByLine } from '@/server/services/workshop/permissions'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const s = (k: string): string | undefined => (typeof q[k] === 'string' && q[k] ? (q[k] as string) : undefined)
+  const datasets = filterByLine(
+    user,
+    getAmlRuntime().repo.dataset.list({ lineId: s('lineId'), productId: s('productId'), recipeId: s('recipeId'), limit: 200 }),
+    ds => ds.lineId,
+  )
+  return { datasets }
+})

package/server/api/workshop/aml/datasets/index.post.ts

@@ -0,0 +1,27 @@
+/**
+ * POST /api/workshop/aml/datasets —— 构建数据集快照(同步;隔离三元组必填)。
+ * body: AmlDatasetSpec(见 spec.ts);权限 = 产线 readonly + 节点产线一致(构建器内校验)。
+ */
+import { readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+import { parseDatasetSpec } from '@/server/services/workshop/aml/spec'
+import { buildDataset } from '@/server/services/workshop/aml/dataset-builder'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const spec = parseDatasetSpec(body)
+  requireLineMode(user, spec.lineId, 'readonly')
+  const { dataset, report } = await buildDataset(spec, { id: user.id, kind: 'user' })
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'aml.dataset.build', kind: 'system',
+    summary: `构建数据集 ${dataset.id}(${dataset.rowCount} 行 / ${dataset.runIds.length} 批次)`,
+    targetKind: 'aml_dataset', targetId: dataset.id,
+    lineId: dataset.lineId, productId: dataset.productId, recipeId: dataset.recipeId,
+  })
+  return { dataset, report: { ...report, nodeSummaries: report.nodeSummaries.slice(0, 64) } }
+})