agentworkshop 0.7.27 → 0.7.34

package/server/api/workshop/aml/jobs/[id]/logs.get.ts

@@ -0,0 +1,23 @@
+/**
+ * GET /api/workshop/aml/jobs/:id/logs —— 运行日志尾随(?lines=80;活跃作业读内存环,终态读 run.log)。
+ * 需产线只读权限。
+ */
+import { getQuery, getRouterParam } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { jobLogsTail } from '@/server/services/workshop/aml/job-orchestrator'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const rt = getAmlRuntime()
+  const job = rt.repo.job.get(id)
+  if (!job) throw new AppError(404, 'AML_JOB_MISSING', `作业 ${id} 不存在`)
+  requireLineMode(user, rt.repo.dataset.get(job.datasetId)?.lineId, 'readonly')
+  const q = getQuery(event)
+  const lines = Math.min(500, Math.max(10, Number(q.lines) || 80))
+  return { logs: jobLogsTail(id, lines) }
+})

package/server/api/workshop/aml/jobs/[id]/retry.post.ts

@@ -0,0 +1,20 @@
+/**
+ * POST /api/workshop/aml/jobs/:id/retry —— 重试失败/中断作业(retry_count<2;需产线可操控权限)。
+ */
+import { getRouterParam } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { retryJob } from '@/server/services/workshop/aml/job-orchestrator'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const rt = getAmlRuntime()
+  const job = rt.repo.job.get(id)
+  if (!job) throw new AppError(404, 'AML_JOB_MISSING', `作业 ${id} 不存在`)
+  requireLineMode(user, rt.repo.dataset.get(job.datasetId)?.lineId, 'operate')
+  return { job: retryJob(id) }
+})

package/server/api/workshop/aml/jobs/[id].get.ts

@@ -0,0 +1,23 @@
+/**
+ * GET /api/workshop/aml/jobs/:id —— 作业详情(含门禁报告与指标;需产线只读权限)。
+ */
+import { getRouterParam } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const rt = getAmlRuntime()
+  const job = rt.repo.job.get(id)
+  if (!job) throw new AppError(404, 'AML_JOB_MISSING', `作业 ${id} 不存在`)
+  requireLineMode(user, rt.repo.dataset.get(job.datasetId)?.lineId, 'readonly')
+  return {
+    job,
+    metrics: job.metricsJson ? JSON.parse(job.metricsJson) : null,
+    gates: job.gatesJson ? JSON.parse(job.gatesJson) : null,
+  }
+})

package/server/api/workshop/aml/jobs/index.get.ts

@@ -0,0 +1,26 @@
+/**
+ * GET /api/workshop/aml/jobs —— 作业列表(status/datasetId 过滤;产线可见性过滤)。
+ */
+import { getQuery } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { filterByLine } from '@/server/services/workshop/permissions'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const rt = getAmlRuntime()
+  const jobs = rt.repo.job.list({
+    status: typeof q.status === 'string' && q.status ? q.status : undefined,
+    datasetId: typeof q.datasetId === 'string' && q.datasetId ? q.datasetId : undefined,
+    limit: 100,
+  })
+  // datasetId → lineId 映射(产线可见性过滤;避免逐作业重复查询)
+  const lineByDataset = new Map<string, string | null>()
+  const lineOf = (datasetId: string): string | null => {
+    if (!lineByDataset.has(datasetId)) lineByDataset.set(datasetId, rt.repo.dataset.get(datasetId)?.lineId ?? null)
+    return lineByDataset.get(datasetId) ?? null
+  }
+  return { jobs: filterByLine(user, jobs, j => lineOf(j.datasetId)) }
+})

package/server/api/workshop/aml/jobs/index.post.ts

@@ -0,0 +1,44 @@
+/**
+ * POST /api/workshop/aml/jobs —— 提交训练作业(可内联 train.py 代码,平台写入作业工作区)。
+ * body: { datasetId, purpose?, parentExperimentId?, changeNote?, params?, seed?, budget?, code? }
+ */
+import { readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { submitJob } from '@/server/services/workshop/aml/job-orchestrator'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<{
+    datasetId?: string
+    purpose?: 'mpc_surrogate' | 'quality_predict'
+    parentExperimentId?: string
+    changeNote?: string
+    params?: Record<string, unknown>
+    seed?: number
+    budget?: { maxExperiments?: number }
+    code?: string
+  }>(event) ?? {}
+  if (!body.datasetId) throw new AppError(422, 'AML_SPEC_INVALID', '缺少 datasetId')
+  if (body.code && body.code.length > 512_000) throw new AppError(422, 'AML_CODE_TOO_LARGE', '训练代码超过 500KB 上限')
+  const rt = getAmlRuntime()
+  const ds = rt.repo.dataset.get(body.datasetId)
+  if (!ds) throw new AppError(404, 'AML_DATASET_MISSING', `数据集 ${body.datasetId} 不存在`)
+  requireLineMode(user, ds.lineId, 'readonly')
+  const job = submitJob({
+    datasetId: body.datasetId,
+    purpose: body.purpose,
+    parentExperimentId: body.parentExperimentId ?? null,
+    changeNote: body.changeNote ?? '',
+    params: body.params ?? {},
+    seed: body.seed,
+    budget: body.budget,
+    code: body.code,
+    agent: { id: user.id },
+    byKind: 'user',
+  })
+  return { job }
+})

package/server/api/workshop/aml/models/[id]/predict.post.ts

@@ -0,0 +1,24 @@
+/**
+ * POST /api/workshop/aml/models/:id/predict —— what-if 预测(显式模型;需产线只读权限)。
+ * body: { history: number[][], controls?: number[][], steps? }
+ */
+import { getRouterParam, readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { predictWithModel } from '@/server/services/workshop/aml/predictor'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const body = await readBody<{ history?: number[][], controls?: number[][], steps?: number }>(event) ?? {}
+  const rt = getAmlRuntime()
+  const model = rt.repo.model.get(id)
+  if (!model) throw new AppError(404, 'AML_MODEL_MISSING', `模型 ${id} 不存在`)
+  const ds = rt.repo.dataset.get(model.datasetId)
+  if (!ds) throw new AppError(404, 'AML_DATASET_MISSING', `模型 ${id} 关联的数据集已被清理`)
+  requireLineMode(user, ds.lineId, 'readonly')
+  return { prediction: await predictWithModel(id, { history: body.history ?? [], controls: body.controls, steps: body.steps }) }
+})

package/server/api/workshop/aml/models/[id]/promote.post.ts

@@ -0,0 +1,30 @@
+/**
+ * POST /api/workshop/aml/models/:id/promote —— 阶段晋升/退役(人工操作;body: {toStage})。
+ * 权限 = 产线 operate;production 晋升前做 ONNX 深检;同组旧 production 自动 retired。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { transitionModel } from '@/server/services/workshop/aml/model-registry'
+import { verifyModelArtifact } from '@/server/services/workshop/aml/predictor'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const body = await readBody<{ toStage?: 'shadow' | 'production' | 'retired' }>(event) ?? {}
+  if (!body.toStage) throw new AppError(422, 'AML_SPEC_INVALID', '缺少 toStage(shadow|production|retired)')
+  const rt = getAmlRuntime()
+  const model = rt.repo.model.get(id)
+  if (!model) throw new AppError(404, 'AML_MODEL_MISSING', `模型 ${id} 不存在`)
+  const ds = rt.repo.dataset.get(model.datasetId)
+  requireLineMode(user, ds?.lineId, 'operate')
+  if (body.toStage === 'production') {
+    const check = await verifyModelArtifact(id)
+    if (!check.ok) throw new AppError(422, 'AML_ARTIFACT_INVALID', `生产晋升前工件深检失败:${check.detail}`)
+  }
+  const result = transitionModel(id, body.toStage, user.name || user.id, 'user')
+  return result
+})

package/server/api/workshop/aml/models/index.get.ts

@@ -0,0 +1,48 @@
+/**
+ * GET /api/workshop/aml/models —— 模型注册表(stage/product/recipe 过滤;产线可见性过滤)。
+ */
+import { getQuery } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { filterByLine } from '@/server/services/workshop/permissions'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const s = (k: string): string | undefined => (typeof q[k] === 'string' && q[k] ? (q[k] as string) : undefined)
+  const rt = getAmlRuntime()
+  const models = rt.repo.model.list({
+    stage: s('stage'),
+    productId: s('productId'),
+    recipeId: s('recipeId'),
+    limit: 200,
+  })
+  const lineByDataset = new Map<string, string | null>()
+  const lineOf = (datasetId: string): string | null => {
+    if (!lineByDataset.has(datasetId)) lineByDataset.set(datasetId, rt.repo.dataset.get(datasetId)?.lineId ?? null)
+    return lineByDataset.get(datasetId) ?? null
+  }
+  const visible = filterByLine(user, models, m => lineOf(m.datasetId))
+  return {
+    models: visible.map(m => ({
+      ...m,
+      metrics: (() => {
+        try {
+          return JSON.parse(m.metricsJson)
+        }
+        catch {
+          return null
+        }
+      })(),
+      ioSpec: (() => {
+        try {
+          return JSON.parse(m.ioSpecJson)
+        }
+        catch {
+          return null
+        }
+      })(),
+    })),
+  }
+})

package/server/api/workshop/daq/[id].delete.ts

@@ -1,9 +1,13 @@
 /**
  * DELETE /api/workshop/daq/:id —— 删除数采节点(广播 removed;绑定设备不受影响)。
+ * 鉴权:与 PATCH 同口径 —— 删除会级联清理该节点的全部 Agent 绑定与配方监控窗口,
+ * 属控制面写操作,须对产线有「可操控」权限(早先此处只 resolveUser,
+ * 任何登录用户可删任意节点,而它的兄弟 PATCH 却已校验 —— 前后不一致)。
  */
 import { getRouterParam } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
+import { requireLineMode } from '@/server/services/workshop/permissions'
 import { bindDaqHost } from '@/server/services/workshop/daq/host-bindings'
 import { getDaqController } from '@/server/services/workshop/daq/daq-controller'
 import { broadcastSceneEvent } from '../../../services/workshop/scene-events'
@@ -14,6 +18,8 @@ export default defineApiHandler((event) => {
   bindDaqHost(broadcastSceneEvent)
   const id = getRouterParam(event, 'id') ?? ''
   const node = getDaqController().byId(id)
+  // 节点不存在时保持原有的幂等删除语义(返回 id),但不得借不存在绕过权限
+  if (node) requireLineMode(user, node.lineId, 'operate')
   getDaqController().remove(id)
   recordOps({
     actor: user.id,

package/server/api/workshop/dcw/[id].patch.ts

@@ -1,18 +1,30 @@
 /**
  * PATCH /api/workshop/dcw/:id —— 单节点参数(名称/驱动/保写周期/量程/启停/落点)。
+ *
+ * 鉴权:与 write/test/bind 同口径 requireLineMode(..., 'operate')。
+ * 本端点可改 driverConfig(落点 host:register)、min/max(直接决定 writeTolerance)、
+ * holdIntervalMs(保写心跳周期)与 enabled —— 改完之后**网关自己的心跳**就会把
+ * 该节点的既有设定值写进攻击者指定的目标。即「改参数」等价于「远程写 PLC」,
+ * 早先此处只有 resolveUser,任何登录用户(零产线授权)都能改任意节点。
  */
-import { getRouterParam, readBody } from 'h3'
+import { createError, getRouterParam, readBody } from 'h3'
 import type { DcwPatchInput } from '@/server/services/workshop/dcw/dcw-controller'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
+import { requireLineMode } from '@/server/services/workshop/permissions'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
 
 export default defineApiHandler(async (event) => {
-  resolveUser(event)
+  const user = resolveUser(event)
   bindDcwBroadcast(broadcastSceneEvent)
   const id = getRouterParam(event, 'id') ?? ''
   const body = await readBody<DcwPatchInput>(event) ?? {}
+  const node0 = getDcwController().byId(id)
+  if (!node0) throw createError({ statusCode: 404, statusMessage: `控制节点不存在: ${id}` })
+  // 目标产线:允许本次 PATCH 迁移产线,则新产线也须有操控权(防止把节点搬到无权产线)
+  const targetLine = body.lineId !== undefined ? String(body.lineId || '') || null : node0.lineId
+  requireLineMode(user, targetLine, 'operate')
   const node = getDcwController().patch(id, body)
   return { node: node.toView() }
 })

package/server/api/workshop/hitl/respond.post.ts

@@ -7,6 +7,8 @@
  *  - codex-approval      → impl.respondHitl:JSON-RPC 应答回 app-server(accept/decline)
  *  - opencode-permission → impl.respondHitl:POST permissions {once|always|reject} / question 回答
  *  - dsh-permission      → impl.respondHitl:ACP session/request_permission 应答(allow/reject)
+ *  - claude-permission   → impl.respondHitl:SDK canUseTool 裁决(allow/deny)
+ *  - qwen-permission     → impl.respondHitl:旧版 ACP requestToolCallConfirmation 应答
  *
  * 幂等:待办不在登记处(已被他端处理/超时/撤销)→ 409 ALREADY_RESOLVED。
  * 鉴权:用户 token + channel 所有权(与 pending.get 同口径)。
@@ -21,7 +23,7 @@ import { getToolApprovals } from '@/server/services/workshop/agents/tool-approva
 import { respondTerminalUi } from '@/server/services/workshop/agents/harness-terminal'
 import { audit } from '@/server/services/workshop/ops/ops'
 
-const RESPONDABLE_KINDS = ['omp-dialog', 'dcw-approval', 'codex-approval', 'opencode-permission', 'dsh-permission'] as const
+const RESPONDABLE_KINDS = ['omp-dialog', 'dcw-approval', 'codex-approval', 'opencode-permission', 'dsh-permission', 'claude-permission', 'qwen-permission', 'hermes-permission'] as const
 
 interface RespondBody {
   kind?: string

package/server/api/workshop/teams/[id]/plugins/index.get.ts

@@ -0,0 +1,36 @@
+/**
+ * GET /api/workshop/teams/:id/plugins —— 该 AgentTeam 的插件开关视图。
+ * 返回全部已注册插件的团队级 enabled(显式配置/默认全启用)+ source 标记。
+ * 以 team id 为键读 channel_plugins(建队勾选/团队设置写入;部署时传导到 channel)。
+ * 鉴权:team 属主或 admin;public team 全员可读。
+ */
+import { resolveUser, isAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getChannelPluginsRepo } from '@/server/services/workshop/db/channel-plugins.repo'
+import { getPluginHost, pluginManifest } from '@/server/services/workshop/plugins/host.mjs'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const manager = getWorkshopManager()
+  const team = manager.getTeam(id)
+  if (!team) throw new AppError(404, ErrorCodes.NOT_FOUND, `AgentTeam 不存在: ${id}`)
+  const readable = user.role === 'admin' || team.visibility === 'public' || team.ownerUserId === user.id
+  if (!readable) throw new AppError(403, 'SCOPE_VIOLATION', 'AgentTeam 不属于当前用户')
+
+  const host = getPluginHost()
+  const manifest = host ? pluginManifest().filter(p => p.enabled) : []
+  const explicit = getChannelPluginsRepo().explicitFor(id)
+  return {
+    plugins: manifest.map(p => ({
+      name: p.name,
+      description: p.description,
+      builtin: p.builtin,
+      enabled: explicit ? explicit.get(p.name) !== false : true,
+    })),
+    source: explicit ? 'explicit' : 'default',
+    isAdmin: isAdmin(user),
+  }
+})

package/server/api/workshop/teams/[id]/plugins/index.put.ts

@@ -0,0 +1,42 @@
+/**
+ * PUT /api/workshop/teams/:id/plugins —— 写入该 AgentTeam 的插件开关。
+ * body: { plugins: [{ name, enabled }] }(未知插件名忽略;全量替换语义)
+ * 以 team id 为键写 channel_plugins(团队作用域偏好);部署 deployTeamToChannel 时
+ * 传导到目标 channel,传导后该团队在跑 Agent 经 notifyToolChange 热刷新工具清单。
+ * 鉴权:team 属主或 admin。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getChannelPluginsRepo, type ChannelPluginToggle } from '@/server/services/workshop/db/channel-plugins.repo'
+import { getPluginHost, pluginManifest } from '@/server/services/workshop/plugins/host.mjs'
+import { notifyToolChange } from '@/server/services/workshop/agents/plugin-tools'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const manager = getWorkshopManager()
+  const team = manager.getTeam(id)
+  if (!team) throw new AppError(404, ErrorCodes.NOT_FOUND, `AgentTeam 不存在: ${id}`)
+  if (team.ownerUserId !== user.id && user.role !== 'admin') {
+    throw new AppError(403, 'SCOPE_VIOLATION', '仅 team 属主或 admin 可修改插件开关')
+  }
+
+  const body = (await readBody<{ plugins?: Array<{ name?: string, enabled?: boolean }> }>(event)) ?? {}
+  const entries = Array.isArray(body?.plugins) ? body.plugins : null
+  if (!entries) throw new AppError(400, 'VALIDATION_ERROR', 'body 应为 { plugins: [{ name, enabled }] }')
+
+  // 只接受已注册且启用的插件名(停用插件无工具可注入,写入无意义)
+  const host = getPluginHost()
+  const registered = new Set(host ? pluginManifest().filter(p => p.enabled).map(p => p.name) : [])
+  const clean: ChannelPluginToggle[] = entries
+    .filter((e): e is { name: string, enabled?: boolean } => Boolean(e) && typeof e.name === 'string' && registered.has(e.name as string))
+    .map(e => ({ name: e.name as string, enabled: e.enabled !== false }))
+
+  getChannelPluginsRepo().setMany(id, clean)
+  // 热通知:该 team 已部署到各 channel 的在跑 Agent 重发工具清单(轻量广播)
+  notifyToolChange()
+  return { saved: clean.length, plugins: clean }
+})

package/server/api/workshop/teams/index.post.ts

@@ -1,6 +1,7 @@
 /**
  * POST /api/workshop/teams —— 创建 AgentTeam(Agent 模板编组容器)。
  * visibility 缺省 private;public = 全员可读可用,仅属主/admin 可改删。
+ * plugins 可选(建队勾选启用哪些插件):以 team id 为键落团队偏好,部署时传导到 channel。
  */
 import { z } from 'zod'
 import { resolveUser } from '../caller'
@@ -8,20 +9,32 @@ import { readValidatedBody } from 'h3'
 import { zValidator } from '../../../utils/validate'
 import { defineApiHandler } from '../../../utils/response'
 import { getWorkshopManager } from '../../../plugins/workshop'
+import { getPluginHost, pluginManifest } from '@/server/services/workshop/plugins/host.mjs'
+import type { ChannelPluginToggle } from '@/server/services/workshop/db/channel-plugins.repo'
 
 const createTeamSchema = z.object({
   name: z.string().min(1, 'name 必填'),
   description: z.string().optional(),
   visibility: z.enum(['private', 'public']).optional(),
+  plugins: z.array(z.object({ name: z.string(), enabled: z.boolean() })).optional(),
 })
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
   const body = await readValidatedBody(event, zValidator(createTeamSchema))
+  // 只接受已注册且启用的插件名(与 teams/:id/plugins PUT 同语义;停用插件写入无意义)
+  const host = getPluginHost()
+  const registered = new Set(host ? pluginManifest().filter(p => p.enabled).map(p => p.name) : [])
+  const plugins: ChannelPluginToggle[] | undefined = body.plugins
+    ? body.plugins
+        .filter(p => registered.has(p.name))
+        .map(p => ({ name: p.name, enabled: p.enabled !== false }))
+    : undefined
   return getWorkshopManager().createTeam({
     name: body.name,
     description: body.description,
     visibility: body.visibility,
     ownerUserId: user.id,
+    ...(plugins?.length ? { plugins } : {}),
   })
 })

package/server/api/workshop/users/me.get.ts

@@ -1,6 +1,10 @@
 /**
  * GET /api/workshop/users/me —— 当前用户信息(Bearer 用户 token)。
  * 附带资源统计(owned channels/templates/teams/workspaces)。
+ *
+ * role 必须回传:前端据它决定是否渲染「权限管理 / 用户管理 / 配方应用」等
+ * admin/editor 专属入口。早先这里漏了 role,前端只能靠试错(点进去吃 403)
+ * 或另开 /users 列表接口去猜自己的角色。
  */
 import { defineApiHandler } from '../../../utils/response'
 import { getWorkshopManager } from '../../../plugins/workshop'
@@ -13,6 +17,7 @@ export default defineApiHandler(async (event) => {
   return {
     id: user.id,
     name: user.name,
+    role: user.role,
     createdAt: user.createdAt,
     stats: {
       ownedChannels: channels.filter(c => c.ownerUserId === user.id).length,

package/server/api/workshop/ws.ts

@@ -40,8 +40,10 @@ const RING_BYTES_CAP = 4 * 1024 * 1024
 const DB_BUFFER_CAP = 2000
 /** 事件保留期(天;retention.events_days,env AW_EVENTS_RETENTION_D 可覆盖) */
 const EVENTS_RETENTION_DAYS = (): number => retentionSettings().events_days
-/** 单 peer 发送预算(字节/秒):超限视为慢消费者断开(1013),客户端重连快照对齐 */
-const PEER_SEND_BUDGET_BYTES = 32 * 1024 * 1024
+/** 单 peer 发送预算(字节/秒):超限视为慢消费者断开(1013),客户端重连快照对齐。
+ *  实测常态 ~85 帧/秒 ≈ 0.1MB/s,8MB/s 保留 ~80× 余量,同时封住病态积压
+ *  (原 32MB/s 过宽:慢客户端断开前每秒可积压 32MB 序列化帧) */
+const PEER_SEND_BUDGET_BYTES = 8 * 1024 * 1024
 
 /** 最小 peer 接口(h3 2.x 未 re-export crossws 类型,duck typing;与 game/ws.ts 同风格) */
 interface WsPeer {
@@ -229,6 +231,16 @@ function flushDbBuffer(manager: AgentChannelManager, stream: ChannelStream): voi
     })))
   }
   catch (err) {
+    // 频道已被删除(FOREIGN KEY 约束失败 = 永久性错误,常见于 e2e/用户 purge 频道后
+    // hub 缓冲仍有其在途事件):缓冲事件无处可落,丢弃并计数 —— 重试语义只服务瞬态
+    // 故障(SQLITE_BUSY 等),对永久 FK 失败重试只会每 400ms 刷一条错误直到进程结束
+    const msg = err instanceof Error ? err.message : String(err)
+    if (msg.includes('FOREIGN KEY constraint failed')) {
+      const gDropped = globalThis as typeof globalThis & { __wsDbFlushDropped?: number }
+      gDropped.__wsDbFlushDropped = (gDropped.__wsDbFlushDropped ?? 0) + buffered.length
+      log.warn(`[workshop-ws] 频道 ${stream.channelId.slice(0, 8)} 已不存在,丢弃 ${buffered.length} 条缓冲事件(落库无主)`)
+      return
+    }
     // R4:失败计数暴露到 /api/metrics(落库异常静默重试,不能无观测)
     const g = globalThis as typeof globalThis & { __wsDbFlushFails?: number }
     g.__wsDbFlushFails = (g.__wsDbFlushFails ?? 0) + 1