agentworkshop 0.7.34 → 0.7.37

package/scripts/_audit/town-focus-shot.mjs

@@ -0,0 +1,129 @@
+/**
+ * town-focus-shot.mjs —— 只拍数字孪生,并尝试把 3D 视角调到能看清设备
+ * 用 window.__townStats 读真实渲染指标(设备数/实例数/FPS)作为"模型真的在场"的判据,
+ * 而不是靠肉眼看截图。
+ */
+import { existsSync, mkdirSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import puppeteer from 'puppeteer-core'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const REPO = resolve(HERE, '..', '..')
+const arg = (k, d) => {
+  const i = process.argv.indexOf(`--${k}`)
+  return i > 0 && process.argv[i + 1] ? process.argv[i + 1] : d
+}
+const BASE = arg('base', 'http://127.0.0.1:3112').replace(/\/$/, '')
+const OUT = arg('out', join(REPO, '.e2e-shots', 'plc-clean'))
+const EDGE = 'C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe'
+const CHROME = 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe'
+const EXEC = existsSync(EDGE) ? EDGE : CHROME
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+mkdirSync(OUT, { recursive: true })
+const login = await fetch(`${BASE}/api/users/login`, {
+  method: 'POST',
+  headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({ email: 'plant@awshop.local', password: 'Plant!2026' }),
+}).then(r => r.json()).catch(() => null)
+const token = login?.data?.token ?? ''
+if (!token) { console.error('✖ 登录失败'); process.exit(2) }
+
+const browser = await puppeteer.launch({
+  executablePath: EXEC,
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-dev-shm-usage', '--force-device-scale-factor=1', '--hide-scrollbars', '--use-gl=angle', '--enable-unsafe-swiftshader'],
+  defaultViewport: { width: 1920, height: 1200 },
+})
+try {
+  const page = await browser.newPage()
+  await page.goto(`${BASE}/town`, { waitUntil: 'domcontentloaded', timeout: 60_000 })
+  await page.evaluate((tok) => {
+    document.cookie = `token=${encodeURIComponent(tok)}; path=/`
+    document.cookie = 'aw-theme=light; path=/'
+    localStorage.setItem('app', JSON.stringify({ isDark: false, sidebarCollapsed: true, accent: '', themeTouched: true }))
+  }, token)
+  await page.reload({ waitUntil: 'networkidle2', timeout: 60_000 })
+  // 3D 首帧 + 模型 GLB 异步加载,给足时间
+  await sleep(12000)
+
+  const stats = await page.evaluate(() => {
+    const s = globalThis.__townStats
+    return s ? JSON.parse(JSON.stringify(s)) : null
+  })
+  console.log('window.__townStats =', JSON.stringify(stats))
+
+  // 尝试点「复位视角」把相机拉到能看全设备的位置(按钮存在才点)
+  const resetBtn = await page.evaluateHandle(() => {
+    const els = [...document.querySelectorAll('button, .ant-btn, [role="button"]')]
+    return els.find(e => /复位视角|重置视角|复位/.test(e.textContent ?? '')) ?? null
+  })
+  const el = resetBtn.asElement()
+  if (el) {
+    await el.click().catch(() => {})
+    console.log('已点击「复位视角」')
+    await sleep(3500)
+  }
+  else {
+    console.log('未找到「复位视角」按钮,跳过')
+  }
+
+  // 相机默认拉得很远,设备只有几十像素;点几次放大让设备读得清
+  const zoomIn = await page.evaluateHandle(() => {
+    const els = [...document.querySelectorAll('button, .ant-btn, [role="button"], [class*="zoom"]')]
+    return els.find((e) => {
+      const txt = (e.textContent ?? '').trim()
+      const title = `${e.getAttribute('title') ?? ''} ${e.getAttribute('aria-label') ?? ''}`
+      return txt === '+' || txt === '＋' || /放大|zoom in/i.test(title)
+    }) ?? null
+  })
+  const z = zoomIn.asElement()
+  const ZOOM_CLICKS = Number(arg('zoom', '2'))
+  if (z) {
+    for (let i = 0; i < ZOOM_CLICKS; i++) {
+      await z.click().catch(() => {})
+      await sleep(700)
+    }
+    console.log(`已放大 ${ZOOM_CLICKS} 档`)
+  }
+  else {
+    console.log('未找到放大按钮,保持默认视角')
+  }
+  await sleep(1500)
+
+  const file = join(OUT, '数字孪生小镇-1920.png')
+  await page.screenshot({ path: file, fullPage: false })
+  console.log(`截图 → ${file}`)
+
+  // 再出一张只含 3D 视口的图:全页截图里场景只占一小块,细节看不出来
+  const viewport = await page.evaluate(() => {
+    const canvases = [...document.querySelectorAll('canvas')].map((c) => {
+      const r = c.getBoundingClientRect()
+      return { w: r.width, h: r.height, x: r.x, y: r.y }
+    }).filter(c => c.w > 200 && c.h > 200)
+    canvases.sort((a, b) => b.w * b.h - a.w * a.h)
+    const c = canvases[0]
+    if (!c) return null
+    // 把 HUD(统计条/趋势/控制面板)也算进去,给出完整场景区
+    return { x: Math.max(0, c.x - 10), y: Math.max(0, c.y - 60), width: c.w + 20, height: c.h + 80 }
+  })
+  if (viewport) {
+    const sceneFile = join(OUT, '数字孪生小镇-3D视口.png')
+    await page.screenshot({ path: sceneFile, clip: viewport })
+    console.log(`3D 视口截图 → ${sceneFile}  ${JSON.stringify(viewport)}`)
+  }
+
+  const canvasInfo = await page.evaluate(() => {
+    const cs = [...document.querySelectorAll('canvas')].map((c) => {
+      const r = c.getBoundingClientRect()
+      return `${c.width}x${c.height} css ${Math.round(r.width)}x${Math.round(r.height)}`
+    })
+    return cs
+  })
+  console.log('canvases:', JSON.stringify(canvasInfo))
+  console.log(stats && (stats.devices ?? stats.deviceCount) ? '✅ 场景内确有设备实例' : '⚠ __townStats 未暴露设备计数,以截图为准')
+}
+finally {
+  await browser.close()
+}

package/scripts/_audit/town-reposition.mjs

@@ -0,0 +1,85 @@
+/**
+ * town-reposition.mjs —— 把设备孪生收拢到默认相机取景范围内
+ * 起因:posX/posZ 用的是场景世界坐标,初版按"米"给了 ±14,实际远在默认视锥之外 ——
+ * __townStats 显示 devices=12(实例确实存在),但画面里几乎看不到。
+ * 这里按小坐标重新落位,并顺带把频道领地收紧。
+ */
+const BASE = (() => {
+  const i = process.argv.indexOf('--base')
+  return (i > 0 ? process.argv[i + 1] : 'http://127.0.0.1:3112').replace(/\/$/, '')
+})()
+
+let TOKEN = null
+const api = async (method, path, { body } = {}) => {
+  const headers = { 'content-type': 'application/json' }
+  if (TOKEN) headers.authorization = `Bearer ${TOKEN}`
+  const res = await fetch(`${BASE}${path}`, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined })
+  return { status: res.status, ...(await res.json().catch(() => ({}))) }
+}
+const data = r => r?.data ?? {}
+
+TOKEN = data(await api('POST', '/api/users/login', { body: { email: 'plant@awshop.local', password: 'Plant!2026' } })).token
+if (!TOKEN) { console.error('✖ 登录失败'); process.exit(2) }
+
+/**
+ * 三组工艺设备:围绕**世界中心**一字排开。
+ * ⚠️ 这里是世界坐标,不是"米":shared/town-scene-math.ts 里
+ * WORLD_W=3200 / WORLD_H=2400,相机看向 (WORLD_CX, WORLD_CZ) = (1600, 1200)。
+ * 初版按 ±14 给坐标 → 设备落在世界原点那一角,相机根本看不到
+ * (__townStats 仍报 devices=12,但画面里只有一个位于世界中心的物体)。
+ */
+const CX = 1600
+const CZ = 1200
+const PLAN = [
+  { match: /挤出主机/, posX: CX - 120, posZ: CZ - 70 },
+  { match: /收卷机组/, posX: CX, posZ: CZ - 70 },
+  { match: /MDO/, posX: CX + 120, posZ: CZ - 70 },
+  { match: /配电柜/, posX: CX - 120, posZ: CZ + 80 },
+  { match: /机械臂/, posX: CX, posZ: CZ + 80 },
+  { match: /测厚仪/, posX: CX + 120, posZ: CZ + 80 },
+]
+/** 数采/数控节点也参与场景渲染(伪孪生),它们的 posX/posZ 同样要对齐世界中心 */
+const NODE_PLAN = [
+  { match: /温度采集/, posX: CX - 120, posZ: CZ - 70 },
+  { match: /速度采集/, posX: CX, posZ: CZ - 70 },
+  { match: /张力采集/, posX: CX + 120, posZ: CZ - 70 },
+  { match: /温度设定/, posX: CX - 120, posZ: CZ + 80 },
+  { match: /速度设定/, posX: CX, posZ: CZ + 80 },
+  { match: /张力设定/, posX: CX + 120, posZ: CZ + 80 },
+]
+
+const twins = data(await api('GET', '/api/workshop/device-twins')).twins ?? []
+console.log(`孪生实体 ${twins.length} 个`)
+let moved = 0
+for (const tw of twins) {
+  const plan = PLAN.find(p => p.match.test(tw.name))
+  if (!plan) continue
+  const r = await api('PATCH', `/api/workshop/device-twins/${tw.id}`, { body: { posX: plan.posX, posZ: plan.posZ, rotationY: 0 } })
+  const okr = r.code === 0 || (r.status >= 200 && r.status < 300)
+  console.log(`  ${okr ? '✔' : '✖'} ${tw.name} → (${plan.posX}, ${plan.posZ})`)
+  if (okr) moved++
+}
+
+// 数采/数控节点:它们的 posX/posZ 决定场景里的伪孪生落点
+let movedNodes = 0
+for (const [ep, plan] of [['daq', NODE_PLAN], ['dcw', NODE_PLAN]]) {
+  const nodes = data(await api('GET', `/api/workshop/${ep}`)).nodes ?? []
+  for (const n of nodes) {
+    const p = plan.find(x => x.match.test(n.name))
+    if (!p) continue
+    const r = await api('PATCH', `/api/workshop/${ep}/${n.id}`, { body: { posX: p.posX, posZ: p.posZ } })
+    const okr = r.code === 0 || (r.status >= 200 && r.status < 300)
+    if (okr) movedNodes++
+    console.log(`  ${okr ? '✔' : '✖'} [${ep}] ${n.name} → (${p.posX}, ${p.posZ})`)
+  }
+}
+
+// 频道领地铺在世界中心,让地面环与设备尺度匹配
+const chans = data(await api('GET', '/api/workshop/channels'))
+const ch = (Array.isArray(chans) ? chans : (chans.channels ?? []))[0]
+if (ch) {
+  const r = await api('PUT', `/api/workshop/scene/layouts/${ch.id}`, { body: { x: CX, z: CZ, radiusX: 260, radiusZ: 180, shape: 'ellipse' } })
+  console.log(`  领地铺在世界中心 (${CX}, ${CZ}) radius 260×180 (code=${r.code})`)
+}
+
+console.log(`\n${moved === PLAN.length && movedNodes === 6 ? '✅' : '⚠'} 孪生 ${moved}/${PLAN.length} · 节点 ${movedNodes}/6 已重排`)

package/scripts/_audit/ts-resolve-hook.mjs

@@ -1,41 +1,76 @@
 /**
- * Node 原生 TS 运行辅助(仅 scripts/_audit 只读审计实验用):
- *  1) 解析扩展名省略的相对导入(仓库源码风格 './dcw-node');
- *  2) 解析 Nuxt 别名 '@/' '~/' '#shared/'(仓库根 / shared 目录)。
- * tsx/esbuild 在本沙箱内 spawn 子进程被拒(EPERM),故改用 Node 原生类型擦除。
- * 用法:node scripts/_audit/run.mjs scripts/_audit/<entry>.ts
+ * Node ESM 解析钩子 —— 让**纯 node**(无 tsx、无打包)直接加载 server 侧 TS 源码。
+ *
+ * 为什么需要它:
+ *  仓库内 server/**\/*.ts 使用两种 tsc/nuxt 约定,Node 原生 ESM 都不认:
+ *    ① 省略扩展名的相对导入:`import { amlSettings } from '../settings'`
+ *    ② 路径别名:`import { ensureDataDir } from '@/shared/config/home.mjs'`
+ *  同类测试若改用 tsx,在某些沙箱里会因 spawn 被拒而不可用(见 run.mjs 注释),
+ *  因此这些回归脚本走 `node --import/register 本钩子` 的路线。
+ *
+ * 做四件事:
+ *  - `@/x`   → 仓库根
+ *  - `#shared/x` → 仓库根 shared/(Nuxt 的 #shared 子路径别名,node 原生不认)
+ *  - 相对/绝对路径缺扩展名 → 依次试 .ts/.mts/.js/.mjs/index.ts/index.mjs
+ *  - nextResolve 抛 ERR_MODULE_NOT_FOUND 时再用同一套后缀兜底一次
+ *
+ * TS 语法本身由 Node 24 内建的类型擦除处理(strip-types),本钩子只解决"找得到文件"。
  */
 import { existsSync } from 'node:fs'
-import { fileURLToPath } from 'node:url'
+import { dirname, resolve as pathResolve } from 'node:path'
+import { fileURLToPath, pathToFileURL } from 'node:url'
 
-const ROOT = new URL('../../', import.meta.url)
-const ALIASES = [['@/', ROOT], ['~/', ROOT], ['#shared/', new URL('shared/', ROOT)]]
+/** 仓库根(本文件位于 <repo>/scripts/_audit/) */
+const REPO = pathResolve(dirname(fileURLToPath(import.meta.url)), '..', '..')
 
-function tryExts(href, context, nextResolve) {
-  for (const ext of ['', '.ts', '.mts', '.mjs', '.js', '/index.ts']) {
-    const cand = `${href}${ext}`
-    if (existsSync(fileURLToPath(cand)))
-      return nextResolve(cand, context)
+/** 别名前缀 → 仓库内的实际目录 */
+const ALIASES = [
+  ['@/', ''],
+  ['#shared/', 'shared/'],
+]
+
+const SUFFIXES = ['', '.ts', '.mts', '.js', '.mjs', '.cjs', '/index.ts', '/index.mts', '/index.js', '/index.mjs']
+
+/** 逐后缀试探,命中返回 file: URL,否则 null */
+function probe(absBase) {
+  for (const suffix of SUFFIXES) {
+    const candidate = absBase + suffix
+    try {
+      if (existsSync(candidate)) return pathToFileURL(candidate).href
+    }
+    catch { /* 非法路径字符等忽略 */ }
   }
   return null
 }
 
+function isPathLike(spec) {
+  return spec.startsWith('.') || spec.startsWith('/') || /^[A-Za-z]:[\\/]/.test(spec)
+}
+
 export async function resolve(specifier, context, nextResolve) {
-  for (const [prefix, base] of ALIASES) {
-    if (specifier.startsWith(prefix)) {
-      const hit = tryExts(new URL(specifier.slice(prefix.length), base).href, context, nextResolve)
-      if (hit) return hit
+  // ① 别名:@/x → <repo>/x,#shared/x → <repo>/shared/x
+  for (const [prefix, target] of ALIASES) {
+    if (!specifier.startsWith(prefix)) continue
+    const hit = probe(pathResolve(REPO, target + specifier.slice(prefix.length)))
+    if (hit) return { url: hit, shortCircuit: true }
+  }
+  // ② 路径式且缺扩展名:先自己补
+  if (isPathLike(specifier)) {
+    const abs = specifier.startsWith('/') || /^[A-Za-z]:[\\/]/.test(specifier)
+      ? specifier
+      : pathResolve(context.parentURL ? dirname(fileURLToPath(context.parentURL)) : process.cwd(), specifier)
+    if (!existsSync(abs)) {
+      const hit = probe(abs)
+      if (hit) return { url: hit, shortCircuit: true }
     }
   }
   try {
     return await nextResolve(specifier, context)
   }
   catch (err) {
-    if (!specifier.startsWith('.') && !specifier.startsWith('/'))
-      throw err
-    const base = context.parentURL ?? ROOT.href
-    const hit = tryExts(new URL(specifier, base).href, context, nextResolve)
-    if (hit) return hit
+    if (err?.code !== 'ERR_MODULE_NOT_FOUND' || !isPathLike(specifier) || !context.parentURL) throw err
+    const hit = probe(pathResolve(dirname(fileURLToPath(context.parentURL)), specifier))
+    if (hit) return { url: hit, shortCircuit: true }
     throw err
   }
 }

package/scripts/_audit/verify-cleanup.mjs

@@ -0,0 +1,67 @@
+// 删除后校验:确认没有任何"存活文件"仍引用被删除的脚本 / 截图
+// 用法:node scripts/_audit/verify-cleanup.mjs
+import { execSync } from 'node:child_process'
+import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'
+import { join, sep } from 'node:path'
+
+const ROOT = process.cwd()
+const deleted = execSync('git status --porcelain', { cwd: ROOT, maxBuffer: 1 << 28 })
+  .toString().split(/\r?\n/)
+  .filter(l => /^ ?D /.test(l))
+  .map(l => l.slice(3).replace(/\\/g, '/'))
+  .filter(p => /\.(mjs|ts|cjs|js|py|sh|cmd)$/.test(p))
+
+const SKIP = new Set(['node_modules', '.output', '.nuxt', '.git', '.mimosa', '.crush', '.agent-teams', 'paper', 'paper-show', '.zcode'])
+function walk(rel, out = []) {
+  const full = join(ROOT, rel.split('/').join(sep))
+  if (!existsSync(full)) return out
+  if (statSync(full).isFile()) { out.push(rel); return out }
+  for (const n of readdirSync(full)) {
+    if (SKIP.has(n)) continue
+    walk(rel ? `${rel}/${n}` : n, out)
+  }
+  return out
+}
+
+const alive = walk('').filter(p =>
+  /\.(mjs|ts|cjs|js|json|yml|yaml|md|vue|py|sh|cmd|rs|toml)$/.test(p)
+  && !p.startsWith('docs/site/.vitepress/')
+  && !p.startsWith('pnpm-lock')
+  && !p.startsWith('.omc/')) // 已完成的会话计划草稿,非上游依赖
+
+const deletedSet = new Set(deleted.map(p => p.split('/').pop()))
+const bad = new Map()
+for (const f of alive) {
+  let text
+  try { text = readFileSync(join(ROOT, f.split('/').join(sep)), 'utf8') } catch { continue }
+  for (const d of deleted) {
+    const base = d.split('/').pop()
+    if (!deletedSet.has(base)) continue
+    if (text.includes(base) || text.includes(d)) {
+      if (!bad.has(d)) bad.set(d, [])
+      bad.get(d).push(f)
+    }
+  }
+}
+
+console.log(`被删除脚本 ${deleted.length} 个`)
+console.log(`仍有引用的 ${bad.size} 个:`)
+for (const [d, refs] of bad) console.log(`  ${d}\n      <- ${refs.slice(0, 5).join(', ')}${refs.length > 5 ? ` (+${refs.length - 5})` : ''}`)
+
+// 额外:检查 docs/**/*.md 里对截图的 markdown/HTML 引用是否还指向存在的文件
+const mdFiles = alive.filter(p => p.endsWith('.md'))
+const brokenImg = []
+for (const f of mdFiles) {
+  const text = readFileSync(join(ROOT, f.split('/').join(sep)), 'utf8')
+  for (const m of text.matchAll(/!\[[^\]]*\]\(([^)]+)\)|<img[^>]+src="([^"]+)"/g)) {
+    const src = m[1] ?? m[2]
+    if (!src || /^https?:/.test(src)) continue
+    // 站点绝对路径(/xxx.png)由 docs/site/public 提供
+    const target = src.startsWith('/')
+      ? join(ROOT, 'docs/site/public', src.slice(1).split('/').join(sep))
+      : join(ROOT, f.split('/').slice(0, -1).join(sep), src.split('/').join(sep))
+    if (!existsSync(target)) brokenImg.push(`${f} -> ${src}`)
+  }
+}
+console.log(`\ndocs 中失效图片引用: ${brokenImg.length}`)
+for (const b of brokenImg.slice(0, 20)) console.log('  ' + b)

package/scripts/_audit/verify-release-pack.mjs

@@ -0,0 +1,82 @@
+/**
+ * 发布包验收:解包 tarball → 用解包后的产物做 CLI 与资产自检。
+ * 不安装依赖(上游 registry 偶发缺版本),只验证产物本身是否自洽可启动。
+ * 版本号从 package.json 读取,不写死 —— 写死的话每次发版这个脚本自己先坏掉。
+ */
+import { execFileSync, spawnSync } from 'node:child_process'
+import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const REPO = resolve(HERE, '..', '..')
+const VERSION = JSON.parse(readFileSync(join(REPO, 'package.json'), 'utf8')).version
+const TGZ_NAME = `agentworkshop-${VERSION}.tgz`
+const TGZ = join(REPO, TGZ_NAME)
+const WORK = resolve(REPO, '..', 'aw-pack-verify')
+
+let pass = 0
+let fail = 0
+const check = (name, ok, detail = '') => {
+  console.log(`  ${ok ? '✔' : '✘'} ${name}${detail ? ` — ${detail}` : ''}`)
+  ok ? pass++ : fail++
+}
+
+rmSync(WORK, { recursive: true, force: true })
+mkdirSync(WORK, { recursive: true })
+check('tarball 存在', existsSync(TGZ), TGZ)
+// 在仓库根解包:用相对文件名,避开 GNU tar 把 "D:\..." 当远程主机解析
+execFileSync('tar', ['-xzf', TGZ_NAME], { cwd: REPO, stdio: 'inherit' })
+const PKG = join(WORK, 'package')
+const extracted = join(REPO, 'package')
+execFileSync('cmd', ['/c', 'move', extracted, PKG], { stdio: 'inherit' })
+
+console.log('\n=== 产物结构 ===')
+for (const rel of [
+  'package.json', 'bin/aw.mjs', 'cli/core/meta.mjs', 'cli/core/child-lifecycle.mjs', 'cli/core/post-build.mjs',
+  '.output/server/index.mjs', '.output/.AgentWorkShop/schema.json',
+  '.output/.AgentWorkShop/aml-python/amlkit.py', '.output/.AgentWorkShop/aml-python/requirements.txt',
+  '.AgentWorkShop/prompts/host-tools.json', 'server/services/workshop/aml/entity.ts',
+]) {
+  check(rel, existsSync(join(PKG, rel)))
+}
+const ver = JSON.parse(readFileSync(join(PKG, 'package.json'), 'utf8')).version
+check(`包内版本 = package.json 版本(${VERSION})`, ver === VERSION, ver)
+
+console.log('\n=== CLI 冒烟(管道 stdio:验证退出码与输出都不丢)===')
+const bin = join(PKG, 'bin', 'aw.mjs')
+// --version/--help 在 createContext 之前返回,无需依赖;其余指令要走配置引擎(js-yaml)。
+// 本脚本刻意不装依赖(上游 registry 偶发缺版本),故对需要依赖的用例显式标注为跳过,
+// 而不是伪装成通过 —— 需要在真实安装环境补跑。
+const hasDeps = existsSync(join(PKG, 'node_modules', 'js-yaml'))
+if (!hasDeps) console.log('  · 未安装依赖(node_modules 缺失):跳过需要配置引擎的用例')
+const CASES = [
+  ['aw --version → 0 + 版本号', ['--version'], 0, new RegExp(VERSION.replace(/\./g, '\\.')), false],
+  ['aw --help → 0 + 帮助正文', ['--help'], 0, /AgentWorkShop CLI/, false],
+  ['aw(无指令)→ 2 用法错误', [], 2, /AgentWorkShop CLI/, true],
+  ['aw 未知指令 → 2', ['definitely-not-a-command'], 2, /未知指令/, true],
+]
+for (const [label, args, wantCode, wantOut, needsDeps] of CASES) {
+  if (needsDeps && !hasDeps) {
+    console.log(`  · ${label} — 跳过(需 js-yaml)`)
+    continue
+  }
+  const r = spawnSync(process.execPath, [bin, ...args], {
+    cwd: PKG,
+    stdio: ['ignore', 'pipe', 'pipe'],
+    env: { ...process.env, NO_COLOR: '1' },
+    encoding: 'utf8',
+  })
+  const out = `${r.stdout ?? ''}${r.stderr ?? ''}`
+  check(label, r.status === wantCode && wantOut.test(out), `code=${r.status} out=${out.length}B`)
+}
+
+console.log('\n=== 产物自检:import-meta 占位符必须已修 ===')
+const nitro = readFileSync(join(PKG, '.output/server/chunks/_/nitro.mjs'), 'utf8')
+check('无 file:///_entry.js 占位符残留', !nitro.includes('file:///_entry.js'))
+check('已改为 import.meta.url 兜底', nitro.includes('url:import.meta.url,env:process.env'))
+const entry = readFileSync(join(PKG, '.output/server/chunks/virtual/entry.mjs'), 'utf8')
+check('虚拟入口同样已修', !entry.includes('file:///_entry.js'))
+
+console.log(`\n结果:${pass} 通过 / ${fail} 失败`)
+process.exit(fail === 0 ? 0 : 1)

package/scripts/_audit/watchdog-recovery-test.mjs

@@ -0,0 +1,127 @@
+/**
+ * watchdog-recovery-test.mjs —— 确定性验证「停滞裁决不丢成果」
+ * ------------------------------------------------------------
+ * 改动:scheduler-loop 的 WORKING 停滞裁决,原先 notify 一次后**无条件 cancel**,
+ * 会把 progress>0、交付物齐全的任务整单作废。现在按有无产出分流:
+ *   有产出(progress>0 或存在 input 以外的交付物)→ complete(成果保留)
+ *   完全无产出                                  → cancel(防永挂)
+ *
+ * 怎么做到确定性(踩过两次坑后定的方案):
+ *   · 看门狗**不回收 busy 成员**(设计如此),所以必须让 worker 的回合真的结束;
+ *   · `report_progress` 是 agent 运行期工具,参数只有 {progress,message},没有 task id ——
+ *     脱离回合调用是空操作,不能用来造状态;
+ *   ⇒ 用 mock worker 的 delayMs 控制"上报到第几档就被打断":
+ *       delayMs=1000 → 1s 报 25% → 2s 报 50% → … → 4s 收口
+ *     在 ~1.5s 调 stop 打断它,任务就停在 WORKING + progress=25,成员转 idle。
+ *     再等 stall_ms×2,看门狗应当**收口**而不是取消。
+ *   ⇒ 对照组 delayMs 调到极大(600s),任务 progress 恒为 0,成员被 stop 后
+ *     看门狗应当**取消**(没干过活不留永挂)。
+ *
+ * 需要先把 workshop.stall_ms 调到最小(10s),否则要等 10 分钟。
+ * 用法:
+ *   node scripts/_audit/watchdog-recovery-test.mjs --base http://127.0.0.1:3112
+ */
+const arg = (k, d) => {
+  const i = process.argv.indexOf(`--${k}`)
+  return i > 0 && process.argv[i + 1] ? process.argv[i + 1] : d
+}
+const BASE = arg('base', 'http://127.0.0.1:3112').replace(/\/$/, '')
+const WAIT_MS = Number(arg('wait', 150_000))
+const INTERRUPT_MS = Number(arg('interrupt', 1500))
+
+let TOKEN = null
+const api = async (method, path, { body } = {}) => {
+  const headers = { 'content-type': 'application/json' }
+  if (TOKEN) headers.authorization = `Bearer ${TOKEN}`
+  const res = await fetch(`${BASE}${path}`, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined })
+  return { status: res.status, ...(await res.json().catch(() => ({}))) }
+}
+const data = r => r?.data ?? {}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+let pass = 0
+let fail = 0
+const check = (n, ok, d = '') => { console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${n}${d ? `  — ${d}` : ''}`); ok ? pass++ : fail++ }
+
+TOKEN = data(await api('POST', '/api/users/login', { body: { email: 'plant@awshop.local', password: 'Plant!2026' } })).token
+if (!TOKEN) { console.error('✖ 登录失败'); process.exitCode = 2; throw new Error('login') }
+
+const cfg = data(await api('GET', '/api/system/settings'))
+const stallMs = cfg.effective?.['workshop.stall_ms']
+console.log(`workshop.stall_ms = ${stallMs ?? '(未读到)'}(看门狗需要 2× 该值才会收口)`)
+
+async function makeChannel(tag, workerDelayMs) {
+  const created = await api('POST', '/api/workshop/channels', {
+    body: { name: `停滞-${tag}`, description: 'watchdog 回收验证', leadAgent: { name: `调度长W-${tag}`, harness: 'mock', config: { delayMs: 40 } } },
+  })
+  const channelId = data(created).channelId ?? data(created).id
+  const tpl = data(await api('POST', '/api/workshop/agents', {
+    body: { name: `慢执行员-${tag}`, harness: 'mock', config: { delayMs: workerDelayMs } },
+  }))
+  await api('POST', `/api/workshop/channels/${channelId}/agents`, { body: { agentId: tpl.id, role: 'worker' } })
+  const membersRaw = data(await api('GET', `/api/workshop/channels/${channelId}/agents`))
+  const members = Array.isArray(membersRaw) ? membersRaw : (membersRaw.agents ?? [])
+  return { channelId, worker: members.find(m => m.role === 'worker') }
+}
+
+const getTask = async (channelId, taskId) => {
+  const list = data(await api('GET', `/api/workshop/channels/${channelId}/tasks`)) ?? []
+  return (Array.isArray(list) ? list : []).find(x => x.id === taskId)
+}
+
+async function waitTerminal(channelId, taskId, budget) {
+  const deadline = Date.now() + budget
+  let last = null
+  while (Date.now() < deadline) {
+    await sleep(2500)
+    const t = await getTask(channelId, taskId)
+    if (!t) continue
+    if (`${t.state}:${t.progress}` !== last) {
+      last = `${t.state}:${t.progress}`
+      console.log(`     · ${t.state} progress=${t.progress}`)
+    }
+    if (['COMPLETED', 'FAILED', 'CANCELED'].includes(t.state)) return t
+  }
+  return await getTask(channelId, taskId)
+}
+
+// ── 用例 1:干过活(progress>0)却没收口 → 应收口保存成果 ──
+console.log('\n━━━ 用例 1:progress>0 的停滞任务应被**收口**(成果保留)━━━')
+{
+  const { channelId, worker } = await makeChannel('keep', 1000)
+  const taskRes = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
+    body: { title: '停滞-有产出', parts: [{ text: '上报进度后被打断。' }], assigneeId: worker.id },
+  })
+  const taskId = data(taskRes).task?.id ?? data(taskRes).id
+  console.log(`  任务 ${String(taskId).slice(0, 8)} 下发;${INTERRUPT_MS}ms 后打断 worker(它 4s 才会自己收口)`)
+  await sleep(INTERRUPT_MS)
+  await api('POST', `/api/workshop/channels/${channelId}/agents/${worker.id}/stop`)
+  const cur = await getTask(channelId, taskId)
+  console.log(`  打断后:state=${cur?.state} progress=${cur?.progress}`)
+  check('已构造 WORKING + progress>0 且成员已 idle 的停滞态', cur?.state === 'WORKING' && cur?.progress > 0,
+    `state=${cur?.state} progress=${cur?.progress}`)
+  const final = await waitTerminal(channelId, taskId, WAIT_MS)
+  check('停滞任务被收口为 COMPLETED(而非 CANCELED)', final?.state === 'COMPLETED',
+    `state=${final?.state} progress=${final?.progress}`)
+}
+
+// ── 用例 2:零产出 → 仍应取消(防永挂)──
+console.log('\n━━━ 用例 2:零产出的停滞任务应**取消**(防永挂)━━━')
+{
+  const { channelId, worker } = await makeChannel('drop', 600_000)
+  const taskRes = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
+    body: { title: '停滞-无产出', parts: [{ text: '什么都不做。' }], assigneeId: worker.id },
+  })
+  const taskId = data(taskRes).task?.id ?? data(taskRes).id
+  console.log(`  任务 ${String(taskId).slice(0, 8)} 下发(worker delayMs=600s,不会上报任何进度)`)
+  await sleep(2500)
+  await api('POST', `/api/workshop/channels/${channelId}/agents/${worker.id}/stop`)
+  const cur = await getTask(channelId, taskId)
+  console.log(`  打断后:state=${cur?.state} progress=${cur?.progress}`)
+  check('已构造 WORKING + progress=0 且成员已 idle 的停滞态', (cur?.progress ?? -1) === 0,
+    `state=${cur?.state} progress=${cur?.progress}`)
+  const final = await waitTerminal(channelId, taskId, WAIT_MS)
+  check('零产出停滞任务被取消(未误判为完成)', final?.state === 'CANCELED', `state=${final?.state}`)
+}
+
+console.log(`\n${fail ? '✖' : '✅'} 看门狗回收:${pass} 通过 / ${fail} 失败`)
+process.exitCode = fail ? 1 : 0