agentworkshop 0.7.34 → 0.7.38

package/scripts/.mimosa/hook-state/sess_aeaecb58-8833-4b83-b93c-050467d21e03.mtxwtxme-61028-1f4519fbc4.baseline/ffb4e3aa548cfdadabaa44ab599f9b6a3ca6288176a2cc7a4b2fc2a12b5fb848.source

@@ -0,0 +1,101 @@
+/**
+ * 动态记忆感知测试:按需抓取(recallRows scope 过滤/原文还原/touch)、
+ * 主动沉淀(save 私有/共享分流 + 共享域 dedupKey 命名空间)、
+ * 记忆引子(小预算 primer + 工具提示行)。
+ * 运行: npx tsx scripts/test-memory-dynamic.ts
+ */
+import type { DatabaseSync } from 'node:sqlite'
+import { openWorkshopDb } from '../server/services/workshop/db/database'
+import { createMemoryRepo, TEAM_AGENT_ID } from '../server/services/workshop/db/memory.repo'
+import { AgentMemory } from '../server/services/workshop/runtime/memory'
+
+let failures = 0
+function check(name: string, ok: boolean, detail = ''): void {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+const db: DatabaseSync = openWorkshopDb(':memory:')
+const repo = createMemoryRepo(db)
+const seg = (s: string): string => s.replace(/([\u4e00-\u9fff])/g, ' $1 ')
+
+// 播种:a1 私有 × 2、a2 私有 × 1、team 公共 × 1、他 channel 的 team 行 × 1(隔离守卫)
+repo.upsert({ channelId: 'ch1', agentId: 'a1', kind: 'episodic-task', title: '网关限流方案', titleFts: seg('网关限流方案'), content: seg('最终采用令牌桶算法限流,阈值100qps'), importance: 0.8, taskId: 't1', dedupKey: 'task:t1' })
+repo.upsert({ channelId: 'ch1', agentId: 'a1', kind: 'episodic-task', title: '部署脚本草稿', titleFts: seg('部署脚本草稿'), content: seg('deploy.sh 需要先source env'), importance: 0.4, taskId: 't2', dedupKey: 'task:t2' })
+repo.upsert({ channelId: 'ch1', agentId: 'a2', kind: 'episodic-task', title: '他人限流笔记', titleFts: seg('他人限流笔记'), content: seg('a2自己的限流杂记'), importance: 0.8, taskId: 't3', dedupKey: 'task:t3' })
+repo.upsert({ channelId: 'ch1', agentId: TEAM_AGENT_ID, kind: 'semantic', title: 'channel 限流约定', titleFts: seg('channel 限流约定'), content: seg('全channel统一用令牌桶,禁用计数器'), importance: 0.9, taskId: null, dedupKey: 'conv:ratelimit' })
+repo.upsert({ channelId: 'ch2', agentId: TEAM_AGENT_ID, kind: 'semantic', title: '他channel限流约定', titleFts: seg('他channel限流约定'), content: seg('ch2专属公共记忆不应被ch1看到'), importance: 0.9, taskId: null, dedupKey: 'conv:other' })
+
+const memA1 = new AgentMemory(repo, { channelId: 'ch1', agentId: 'a1' })
+
+console.log('--- 按需抓取 recallRows ---')
+{
+  const auto = await memA1.recallRows('限流 令牌桶')
+  check('auto 域命中本人 + 公共记忆', auto.some(s => s.title === '网关限流方案') && auto.some(s => s.title === 'channel 限流约定'), JSON.stringify(auto.map(s => s.title)))
+  check('auto 域不含他人私有记忆', auto.every(s => s.title !== '他人限流笔记'))
+  check('auto 域不含他 channel 公共记忆', auto.every(s => s.title !== '他channel限流约定'))
+  check('source 标注 private/shared', auto.some(s => s.source === 'private') && auto.some(s => s.source === 'shared'))
+  const own = auto.find(s => s.title === '网关限流方案')
+  check('content 还原为未切分原文', own !== undefined && !/\s/.test(own.content.slice(0, 4)) && own.content.includes('令牌桶'), own?.content.slice(0, 20))
+  check('返回综合分 score', auto.every(s => typeof s.score === 'number' && s.score > 0))
+
+  const sharedOnly = await memA1.recallRows('限流', { scope: 'shared' })
+  check('shared 域仅公共记忆', sharedOnly.length > 0 && sharedOnly.every(s => s.source === 'shared'), JSON.stringify(sharedOnly.map(s => s.title)))
+  check('shared 域严格本 channel', sharedOnly.every(s => s.title !== '他channel限流约定'))
+
+  const privOnly = await memA1.recallRows('限流', { scope: 'private' })
+  check('private 域仅本人记忆', privOnly.length > 0 && privOnly.every(s => s.source === 'private'), JSON.stringify(privOnly.map(s => s.title)))
+
+  const before = repo.listByAgent('a1', 10).find(r => r.title === '网关限流方案')!.accessCount
+  await memA1.recallRows('网关 限流')
+  const after = repo.listByAgent('a1', 10).find(r => r.title === '网关限流方案')!.accessCount
+  check('recallRows 触发 touch(强化后续排序)', after === before + 1, `before=${before} after=${after}`)
+
+  // scope 域内完全无记忆才真正返回空(全新 channel;有记忆时弱命中/时近兜底会返回行,by design)
+  const none = await new AgentMemory(repo, { channelId: 'ch-empty', agentId: 'nobody' }).recallRows('完全不存在的关键词xyzq')
+  check('无命中返回空数组(无记忆 agent)', Array.isArray(none) && none.length === 0)
+  const fallback = await memA1.recallRows('完全不存在的关键词xyzq')
+  check('FTS 无命中走时近兜底(有记忆 agent 返回最近行)', fallback.length > 0, JSON.stringify(fallback.map(s => s.title)))
+}
+
+console.log('\n--- 主动沉淀 save(私有/共享分流)---')
+{
+  const priv = await memA1.save({ title: 'SQLite 并发写坑', content: '并发写会 SQLITE_BUSY,须串行化写入', scope: 'private', dedupKey: 'note:sqlite' })
+  check('私有沉淀落入本人域', repo.findByAgentDedup('ch1', 'a1', 'note:sqlite') !== null && priv.scope === 'private')
+
+  const shared = await memA1.save({ title: '限流阈值结论', content: '全队统一令牌桶阈值100qps', scope: 'shared', dedupKey: 'conv:threshold' })
+  const teamRow = repo.findByAgentDedup('ch1', TEAM_AGENT_ID, `agent:a1:conv:threshold`)
+  check('共享沉淀落入 team 公共域(来源命名空间 dedupKey)', teamRow !== null && shared.dedupKey === 'agent:a1:conv:threshold')
+
+  // 同 raw key 不同 agent:命名空间隔离互不覆盖
+  const memA2 = new AgentMemory(repo, { channelId: 'ch1', agentId: 'a2' })
+  await memA2.save({ title: 'a2 的阈值结论', content: 'a2认为阈值应按服务分级', scope: 'shared', dedupKey: 'conv:threshold' })
+  const teamRows = repo.listByAgentChannel('ch1', TEAM_AGENT_ID, 100).filter(r => r.content.includes('阈值') || r.title.includes('阈值'))
+  check('多 agent 同 raw key 共享沉淀互不覆盖', repo.findByAgentDedup('ch1', TEAM_AGENT_ID, 'agent:a1:conv:threshold') !== null && repo.findByAgentDedup('ch1', TEAM_AGENT_ID, 'agent:a2:conv:threshold') !== null, `rows=${teamRows.length}`)
+
+  // 共享沉淀即时对全员可检索
+  const a2sees = await memA2.recallRows('阈值 令牌桶', { scope: 'shared' })
+  check('共享沉淀对其他 agent 即时可检索', a2sees.some(s => s.title === '限流阈值结论'), JSON.stringify(a2sees.map(s => s.title)))
+
+  // 稳定 dedupKey 幂等刷新不重复
+  await memA1.save({ title: '限流阈值结论', content: '修订:阈值升到200qps', scope: 'shared', dedupKey: 'conv:threshold' })
+  const count = repo.listByAgentChannel('ch1', TEAM_AGENT_ID, 100).filter(r => r.dedupKey === undefined && r.title === '限流阈值结论').length
+  const refreshed = repo.listByAgentChannel('ch1', TEAM_AGENT_ID, 100).some(r => r.title === '限流阈值结论')
+  check('稳定 dedupKey 幂等刷新', refreshed && count <= 1)
+}
+
+console.log('\n--- 记忆引子 primer(小预算注入)---')
+{
+  const block = await memA1.recall('限流 令牌桶 部署', { touch: false })
+  check('primer 返回记忆块', block !== null)
+  check('primer 含按需抓取工具提示', block !== null && block.includes('search_memory'), block?.slice(-80))
+  // v2 三层注入:L0 简报(save(shared) 后自动存在)+ L1 引子 + 提示,同在 300 tok 引子预算 + 500 tok 总预算内
+  check('primer 含 L0 会话简报', block !== null && block.includes('会话简报'))
+  check('primer 小预算(行数受限)', block !== null && block.split('\n').length < 16, `lines=${block?.split('\n').length}`)
+
+  const memTiny = new AgentMemory(repo, { channelId: 'ch1', agentId: 'a1', budgetTokens: 5 })
+  check('极小预算 primer 无行则 null', (await memTiny.recall('限流')) === null)
+}
+
+console.log(failures === 0 ? '\nALL PASS' : `\n${failures} FAILED`)
+process.exit(failures === 0 ? 0 : 1)

package/scripts/.mimosa/hook-status/sess_aeaecb58-8833-4b83-b93c-050467d21e03-d944d71bb3.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "mimosa-hook-status/v1",
+  "recordedAt": "2026-09-12T02:04:56.653Z",
+  "sessionId": "sess_aeaecb58-8833-4b83-b93c-050467d21e03",
+  "event": "PostToolUse",
+  "toolName": "Write",
+  "file": "D:\\codes\\ABO\\AgentWorkShop\\docs\\full-test-plan.md",
+  "outcome": "clear",
+  "coverage": "complete",
+  "findingCount": 0,
+  "durationMs": 4,
+  "hostState": "hook_complete",
+  "reportHint": ".mimosa/reports/"
+}

package/scripts/_audit/aml-layout-diag.mjs

@@ -0,0 +1,83 @@
+/**
+ * /aml 布局错位定点定位 —— 复刻 review-fix-verify 的完整上下文
+ * (新建 browser context + 模态交互 + 多跳导航),然后打印祖先链与几何。
+ */
+import { existsSync } from 'node:fs'
+import puppeteer from 'puppeteer-core'
+
+const BASE = 'http://127.0.0.1:3111'
+const EDGE = 'C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe'
+const CHROME = 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe'
+const EXEC = existsSync(EDGE) ? EDGE : CHROME
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+const chainOf = `(el) => { const out = []; let e = el; while (e && e.tagName !== 'BODY') {
+  const r = e.getBoundingClientRect(); const cs = getComputedStyle(e)
+  out.push({ t: e.tagName + '.' + e.className.toString().split(' ').filter(c => !c.startsWith('css-')).slice(0, 3).join('.'),
+    top: Math.round(r.top), left: Math.round(r.left), w: Math.round(r.width), h: Math.round(r.height),
+    disp: cs.display, dir: cs.flexDirection, pos: cs.position })
+  e = e.parentElement } return out }`
+
+async function main() {
+  const browser = await puppeteer.launch({ executablePath: EXEC, headless: 'new', args: ['--no-sandbox', '--hide-scrollbars'], defaultViewport: { width: 1680, height: 1050 } })
+  const lg = await fetch(`${BASE}/api/users/login`, {
+    method: 'POST', headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ email: 'admin@awshop.local', password: 'admin123' }),
+  }).then(r => r.json())
+  const token = lg.data.token
+
+  const ctx = await browser.createBrowserContext()
+  const page = await ctx.newPage()
+  await page.goto(`${BASE}/daq`, { waitUntil: 'domcontentloaded' })
+  await page.evaluate((t) => {
+    document.cookie = `token=${encodeURIComponent(t)}; path=/`
+    document.cookie = 'aw-theme=light; path=/'
+    // 与 review-fix-verify 一致的 pinia 持久化预置(唯一未复刻的变量)
+    localStorage.setItem('app', JSON.stringify({ isDark: false, sidebarCollapsed: false, accent: '', themeTouched: true }))
+  }, token)
+  await page.goto(`${BASE}/daq`, { waitUntil: 'networkidle2' })
+  await sleep(900)
+  // 模态交互
+  await page.evaluate(() => {
+    const btns = [...document.querySelectorAll('button, .aw-pill, .line-pill')]
+    const b = btns.find(x => /添加|新建|add/i.test(x.textContent ?? ''))
+    b?.click()
+  })
+  await sleep(500)
+  await page.keyboard.press('Escape')
+  await sleep(500)
+  // 多跳
+  await page.goto(`${BASE}/`, { waitUntil: 'networkidle2' })
+  await sleep(1200)
+  await page.goto(`${BASE}/dcw`, { waitUntil: 'networkidle2' })
+  await sleep(400)
+  await page.goto(`${BASE}/aml`, { waitUntil: 'networkidle2' })
+  await sleep(2000)
+
+  const dump = await page.evaluate(`(() => {
+    const chainOf = ${chainOf}
+    const main = document.querySelector('.app-main')
+    const sider = document.querySelector('.app-sider')
+    const layouts = [...document.querySelectorAll('.ant-layout')].map(e => {
+      const r = e.getBoundingClientRect(); const cs = getComputedStyle(e)
+      return { cls: e.className.toString().slice(0, 50), top: Math.round(r.top), left: Math.round(r.left),
+        w: Math.round(r.width), h: Math.round(r.height), dir: cs.flexDirection, wrap: cs.flexWrap }
+    })
+    return {
+      docH: document.documentElement.scrollHeight,
+      layouts,
+      mainChain: chainOf(main),
+      siderChain: chainOf(sider),
+      sider: (() => { const r = sider?.getBoundingClientRect(); const cs = sider ? getComputedStyle(sider) : null
+        return sider ? { top: Math.round(r.top), left: Math.round(r.left), w: Math.round(r.width), h: Math.round(r.height),
+          display: cs.display, position: cs.position, flex: cs.flex, cssFloat: cs.cssFloat } : null })(),
+      layoutDisplay: (() => { const L = document.querySelector('.app-layout'); const cs = getComputedStyle(L)
+        return { display: cs.display, dir: cs.flexDirection, wrap: cs.flexWrap, w: Math.round(L.getBoundingClientRect().width) } })(),
+      mainParentHTMLHead: main?.parentElement?.outerHTML.slice(0, 260),
+    }
+  })()`)
+  console.log(JSON.stringify(dump, null, 1))
+  await browser.close()
+}
+
+main().catch((e) => { console.error(e); process.exit(1) })

package/scripts/_audit/bump-version.mjs

@@ -0,0 +1,51 @@
+// 发版版本号同步:把"当前版本"类声明改到 package.json 的版本
+// 只改 live 声明,不动历史记录(run 报告日期、能力交付表等)
+import { readFileSync, writeFileSync } from 'node:fs'
+import { join, sep } from 'node:path'
+
+const ROOT = process.cwd()
+const NEXT = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8')).version
+const PREV = process.argv[2] ?? '0.7.36'
+
+const JOBS = [
+  // [文件, 正则, 替换文本]
+  ['README-zh.md', /当前版本：\*\*v0\.7\.\d+\*\*/g, () => `当前版本：**v${NEXT}**`],
+  ['README.md', /Current version: \*\*v0\.7\.\d+\*\*/g, () => `Current version: **v${NEXT}**`],
+  ['docs/cli.md', /agentworkshop@0\.7\.\d+/g, () => `agentworkshop@${NEXT}`],
+  ['docs/cli.md', /\| 当前版本 \| `0\.7\.\d+`/, () => `| 当前版本 | \`${NEXT}\``],
+  ['docs/cli.en.md', /agentworkshop@0\.7\.\d+/g, () => `agentworkshop@${NEXT}`],
+  ['docs/cli.en.md', /\| Current version \| `0\.7\.\d+`/, () => `| Current version | \`${NEXT}\``],
+  ['docs/sdk.md', /`version`,当前 0\.7\.\d+\)/, () => `\`version\`,当前 ${NEXT})`],
+  ['docs/sdk.en.md', /`package\.json`, currently 0\.7\.\d+\)/, () => `\`package.json\`, currently ${NEXT})`],
+  ['docs/plugins.md', /对应当前版本 \*\*v0\.7\.\d+\*\*/, () => `对应当前版本 **v${NEXT}**`],
+  ['docs/plugins.en.md', /describes \*\*v0\.7\.\d+\*\*/, () => `describes **v${NEXT}**`],
+  ['docs/full-test-plan.md', /撰写时基线 v0\.7\.\d+/, () => `撰写时基线 v${PREV}`],
+]
+
+// 站点孪生文件必须与单一事实源逐字节一致:同步复制
+const TWINS = [
+  ['docs/cli.md', 'docs/site/cli/index.md'],
+  ['docs/cli.en.md', 'docs/site/en/cli/index.md'],
+  ['docs/plugins.md', 'docs/site/plugins/guide.md'],
+  ['docs/plugins.en.md', 'docs/site/en/plugins/guide.md'],
+  ['docs/sdk.md', 'docs/site/sdk/guide.md'],
+  ['docs/sdk.en.md', 'docs/site/en/sdk/guide.md'],
+]
+
+let changed = 0
+for (const [file, re, to] of JOBS) {
+  const p = join(ROOT, file.split('/').join(sep))
+  let text
+  try { text = readFileSync(p, 'utf8') } catch { console.log(`  跳过(不存在) ${file}`); continue }
+  const before = text
+  text = text.replace(re, to)
+  if (text !== before) { writeFileSync(p, text, 'utf8'); changed++; console.log(`  ✔ ${file}`) }
+}
+for (const [src, dst] of TWINS) {
+  const a = readFileSync(join(ROOT, src.split('/').join(sep)), 'utf8')
+  const p = join(ROOT, dst.split('/').join(sep))
+  const b = readFileSync(p, 'utf8')
+  if (a !== b) { writeFileSync(p, a, 'utf8'); changed++; console.log(`  ⇄ 孪生同步 ${dst}`) }
+}
+
+console.log(`\n版本 → ${NEXT}(原 live 声明 ${PREV});改动 ${changed} 处`)

package/scripts/_audit/channel-inspect.mjs

@@ -0,0 +1,49 @@
+/**
+ * channel-inspect.mjs —— 按名字看某个 Channel 的任务与消息(排障常用)
+ * 用法:node scripts/_audit/channel-inspect.mjs --base http://127.0.0.1:3112 --match 矩阵-A [--full]
+ */
+const arg = (k, d) => {
+  const i = process.argv.indexOf(`--${k}`)
+  return i > 0 && process.argv[i + 1] ? process.argv[i + 1] : d
+}
+const BASE = arg('base', 'http://127.0.0.1:3112').replace(/\/$/, '')
+const MATCH = arg('match', '')
+const FULL = process.argv.includes('--full')
+
+let TOKEN = null
+const api = async (method, path, { body } = {}) => {
+  const headers = { 'content-type': 'application/json' }
+  if (TOKEN) headers.authorization = `Bearer ${TOKEN}`
+  const res = await fetch(`${BASE}${path}`, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined })
+  return { status: res.status, ...(await res.json().catch(() => ({}))) }
+}
+const data = r => r?.data ?? {}
+
+TOKEN = data(await api('POST', '/api/users/login', { body: { email: 'plant@awshop.local', password: 'Plant!2026' } })).token
+if (!TOKEN) { console.error('✖ 登录失败'); process.exitCode = 2; throw new Error('login') }
+
+const raw = data(await api('GET', '/api/workshop/channels'))
+const chans = Array.isArray(raw) ? raw : (raw.channels ?? [])
+const targets = MATCH ? chans.filter(c => new RegExp(MATCH).test(c.name)) : chans
+if (!targets.length) {
+  console.log(`没有匹配「${MATCH}」的 Channel。现有:${chans.map(c => c.name).join(' | ')}`)
+  process.exitCode = 1
+}
+else {
+  for (const ch of targets) {
+    console.log(`\n═══ ${ch.name}  (${ch.id})  lead=${String(ch.leadAgentId).slice(0, 8)} ═══`)
+    const tasks = data(await api('GET', `/api/workshop/channels/${ch.id}/tasks`)) ?? []
+    for (const t of (Array.isArray(tasks) ? tasks : [])) {
+      console.log(`  TASK ${t.id.slice(0, 8)} ${String(t.state).padEnd(10)} progress=${String(t.progress ?? 0).padEnd(4)} retry=${t.retryCount ?? 0} history=${(t.history ?? []).length} assignee=${String(t.assigneeId).slice(0, 8)}  ${t.title}`)
+    }
+    const m = data(await api('GET', `/api/workshop/channels/${ch.id}/messages?limit=60`))
+    const msgs = Array.isArray(m) ? m : (m.messages ?? [])
+    console.log(`  ── 消息 ${msgs.length} 条 ──`)
+    for (const x of msgs.slice(-10)) {
+      const text = (x.parts ?? []).map(p => String(p.text ?? '')).join(' ').replace(/\s+/g, ' ')
+      const meta = x.metadata ? ` meta=${JSON.stringify(x.metadata)}` : ''
+      console.log(`  · ${(x.kind ?? x.role ?? '?')}${meta}`)
+      console.log(`    ${FULL ? text : text.slice(0, 400)}`)
+    }
+  }
+}

package/scripts/_audit/cleanup-apply.mjs

@@ -0,0 +1,89 @@
+// 按引用索引执行清理(默认 dry-run,加 --apply 才真删)
+// 口径:
+//   A 生成产物 / 一次性走查截图 / scratch
+//   B/C/D scripts/ 下零引用脚本(白名单与全功能测试手册用到的脚本一律排除)
+import { existsSync, readFileSync, readdirSync, rmSync, statSync, unlinkSync } from 'node:fs'
+import { join, sep } from 'node:path'
+
+const ROOT = process.cwd()
+const APPLY = process.argv.includes('--apply')
+
+function walk(rel, out = []) {
+  const full = join(ROOT, rel.split('/').join(sep))
+  if (!existsSync(full)) return out
+  if (statSync(full).isFile()) { out.push(rel); return out }
+  for (const n of readdirSync(full)) walk(`${rel}/${n}`, out)
+  return out
+}
+
+// ---------- A 类:生成产物 / scratch ----------
+const A_DIRS = [
+  'docs/audit/screenshots',
+  'docs/experiments/results',
+  'gui-test-screenshots',
+  '.e2e-shots',
+  '.design-verify',
+  'aw-pack-verify',
+  'docs/site/.vitepress/dist',
+  'docs/site/.vitepress/cache',
+]
+const A_FILES = [
+  'agentworkshop-0.7.36.tgz',
+  '.e2e-dev-restart.log',
+  '.tmp-lint.json',
+  'app-server-readme.md',
+  'repo-exec.md',
+]
+
+// ---------- B/C/D 类:零引用脚本 ----------
+const usage = JSON.parse(readFileSync(join(ROOT, 'scripts/_audit/script-usage.json'), 'utf8'))
+const KEEP_ALWAYS = new Set([
+  'scripts/test-memory-month-query.mjs', // 常备回归(本轮验收全绿)
+  'scripts/test-plugin-hardening.mjs', // 常备回归(本轮验收全绿)
+  'scripts/_rtu-mini-slave.mjs', // 被协议矩阵等脚本 spawn 的夹具
+])
+const orphanScripts = usage.orphans.map(r => r.script).filter(p => !KEEP_ALWAYS.has(p))
+
+// ---------- 安全闸:全功能测试手册里出现的路径必须全部保留 ----------
+const plan = readFileSync(join(ROOT, 'docs/full-test-plan.md'), 'utf8')
+const planPaths = [...plan.matchAll(/scripts\/[A-Za-z0-9_\-./]+\.(?:mjs|ts|cjs|py|sh)/g)].map(m => m[0])
+const planSet = new Set(planPaths.map(p => p.replace(/\/+$/, '')))
+const killed = orphanScripts.filter(p => planSet.has(p) || [...planSet].some(x => p.startsWith(x + '/')))
+if (killed.length) {
+  console.error('中止:以下脚本被 docs/full-test-plan.md 引用,不允许删除:')
+  for (const k of killed) console.error('  ' + k)
+  process.exitCode = 1
+  throw new Error('safety gate')
+}
+
+// ---------- 执行 ----------
+const dirsToRemove = A_DIRS.filter(d => existsSync(join(ROOT, d.split('/').join(sep))))
+const filesToRemove = [
+  ...A_FILES.filter(f => existsSync(join(ROOT, f.split('/').join(sep)))),
+  ...orphanScripts.filter(p => existsSync(join(ROOT, p.split('/').join(sep)))),
+]
+
+const dirBytes = dirsToRemove.reduce((s, d) => s + walk(d).reduce((a, r) => {
+  try { return a + statSync(join(ROOT, r.split('/').join(sep))).size } catch { return a }
+}, 0), 0)
+const fileBytes = filesToRemove.reduce((s, p) => {
+  try { return s + statSync(join(ROOT, p.split('/').join(sep))).size } catch { return s }
+}, 0)
+
+const mb = bytes => bytes / 1048576 >= 1
+  ? `${(bytes / 1048576).toFixed(1)} MB`
+  : `${(bytes / 1024).toFixed(1)} KB`
+
+console.log(`A 目录 ${dirsToRemove.length} 个(${mb(dirBytes)})`)
+for (const d of dirsToRemove) console.log(`   - ${d}/  (${walk(d).length} 文件)`)
+console.log(`文件 ${filesToRemove.length} 个(${mb(fileBytes)})`)
+console.log(`  其中孤立脚本 ${orphanScripts.length} 个,散落产物 ${filesToRemove.length - orphanScripts.length} 个`)
+console.log(`合计 ${mb(dirBytes + fileBytes)}`)
+console.log(`docs/full-test-plan.md 引用脚本 ${planSet.size} 个 —— 全部保留`)
+
+if (!APPLY) { console.log('\n[dry-run] 加 --apply 才真正删除'); process.exit(0) }
+
+for (const d of dirsToRemove) rmSync(join(ROOT, d.split('/').join(sep)), { recursive: true, force: true })
+let n = 0
+for (const p of filesToRemove) { unlinkSync(join(ROOT, p.split('/').join(sep))); n++ }
+console.log(`\n✔ 已删除 ${dirsToRemove.length} 个目录 + ${n} 个文件`)

package/scripts/_audit/cleanup-plan.mjs

@@ -0,0 +1,82 @@
+// 列出"计划删除"的清单(只读预览),供人工确认;支持 --class=A|B|C|D
+import { existsSync, readFileSync, statSync, readdirSync } from 'node:fs'
+import { join, sep } from 'node:path'
+
+const ROOT = process.cwd()
+const arg = (k) => { const i = process.argv.indexOf(k); return i >= 0 ? process.argv[i + 1] : undefined }
+const cls = (arg('--class') ?? 'ALL').toUpperCase()
+
+function walk(rel, out = []) {
+  const full = join(ROOT, rel)
+  if (!existsSync(full)) return out
+  const st = statSync(full)
+  if (st.isFile()) { out.push(rel); return out }
+  for (const n of readdirSync(full)) walk(rel + '/' + n, out)
+  return out
+}
+const size = list => list.reduce((s, r) => {
+  try { return s + statSync(join(ROOT, r.split('/').join(sep))).size } catch { return s }
+}, 0)
+
+// A 类:纯生成产物 / 一次性走查截图 / scratch(文档零引用)
+const A_DIRS = [
+  'docs/audit/screenshots',
+  'docs/experiments/results',
+  'gui-test-screenshots',
+  '.e2e-shots',
+  '.design-verify',
+  'aw-pack-verify',
+  'docs/site/.vitepress/dist',
+  'docs/site/.vitepress/cache',
+]
+// A 类文件:仓库根的散落产物
+const A_FILES = [
+  'agentworkshop-0.7.36.tgz',
+  '.e2e-dev-restart.log',
+  '.tmp-lint.json',
+  'app-server-readme.md',
+  'repo-exec.md',
+]
+
+// B 类:孤立测试脚本(无任何引用)
+const usage = JSON.parse(readFileSync(join(ROOT, 'scripts/_audit/script-usage.json'), 'utf8'))
+const B = usage.orphans.map(r => r.script)
+// 例外白名单:即便孤立也保留(常备回归脚本 / 库 / 基础设施)
+const KEEP_ALWAYS = new Set([
+  'scripts/test-memory-month-query.mjs',
+  'scripts/test-plugin-hardening.mjs',
+  'scripts/_rtu-mini-slave.mjs',
+])
+const Bfinal = B.filter(p => !KEEP_ALWAYS.has(p))
+
+// C 类:孤立调试脚本(scripts/_dbg-* 无引用)
+const C = Bfinal.filter(p => /\/_dbg-/.test(p))
+
+// D 类:scripts/_audit 下一次性命中类探针(无引用、非文档引用)
+const D = Bfinal.filter(p => /\/_audit\//.test(p))
+
+const groups = {
+  A: [...A_DIRS.flatMap(d => walk(d)), ...A_FILES.filter(f => existsSync(join(ROOT, f.split('/').join(sep))))],
+  B: Bfinal.filter(p => !C.includes(p) && !D.includes(p)),
+  C,
+  D,
+}
+
+const want = cls === 'ALL' ? ['A', 'B', 'C', 'D'] : [cls]
+let total = 0
+let totalBytes = 0
+for (const k of want) {
+  const list = groups[k]
+  const bytes = size(list)
+  total += list.length
+  totalBytes += bytes
+  console.log(`### ${k} 类: ${list.length} 项, ${(bytes / 1024 / 1024).toFixed(1)} MB`)
+}
+console.log(`总计 ${total} 项, ${(totalBytes / 1024 / 1024).toFixed(1)} MB`)
+console.log('')
+for (const k of want) {
+  console.log(`===== ${k} =====`)
+  const list = groups[k].slice().sort()
+  for (const p of list) console.log('  ' + p)
+  console.log('')
+}

package/scripts/_audit/contrast-check.mjs

@@ -0,0 +1,43 @@
+/**
+ * 对比度核算(WCAG 2.1) —— 校验"微标签用色"是否达 AA。
+ * 用法:node scripts/_audit/contrast-check.mjs
+ */
+const hex = (h) => {
+  const s = h.replace('#', '')
+  return [0, 2, 4].map(i => parseInt(s.slice(i, i + 2), 16) / 255)
+}
+const lin = c => (c <= 0.04045 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4)
+const lum = (h) => {
+  const [r, g, b] = hex(h).map(lin)
+  return 0.2126 * r + 0.7152 * g + 0.0722 * b
+}
+const ratio = (a, b) => {
+  const [x, y] = [lum(a), lum(b)].sort((m, n) => n - m)
+  return (x + 0.05) / (y + 0.05)
+}
+
+/** 背景取"该文字实际落上的表面" */
+const CASES = [
+  // 亮阶:文字层
+  ['亮 · --ink 于暖纸', '#0c0a09', '#f6f4f1', 4.5],
+  ['亮 · --ink-soft 于暖纸', '#4b463f', '#f6f4f1', 4.5],
+  ['亮 · --ink-faint 于暖纸(文字最淡档)', '#6f6860', '#f6f4f1', 4.5],
+  ['亮 · --ink-faint 于 raised', '#6f6860', '#fffefc', 4.5],
+  ['亮 · --focus-ring 于暖纸(焦点环落点)', '#3f6094', '#f6f4f1', 3],
+  // 暗阶:文字层
+  ['暗 · --ink-faint 于暗面板(文字最淡档)', '#8fa0b5', '#111a28', 4.5],
+  ['暗 · --focus-ring 于暗画布', '#6fb3ff', '#0a101a', 3],
+  // 回归护栏:装饰令牌**故意**不达 AA —— 记录在案,防止它被重新用作 color
+  ['亮 · --ink-fainter 仅装饰(不要求达标)', '#a29a90', '#f6f4f1', 0],
+  ['暗 · --ink-fainter 仅装饰(不要求达标)', '#5f6e84', '#111a28', 0],
+]
+
+let bad = 0
+for (const [name, fg, bg, need] of CASES) {
+  const r = ratio(fg, bg)
+  const ok = r >= need
+  if (!ok) bad++
+  console.log(`  ${ok ? '✔' : '✘'} ${name.padEnd(34)} ${r.toFixed(2)}:1  (阈值 ${need}:1)`)
+}
+console.log(`\n${bad === 0 ? '全部达标' : `${bad} 项未达标`}`)
+process.exit(bad === 0 ? 0 : 1)

package/scripts/_audit/dcw-unrecorded-write.ts

@@ -122,7 +122,7 @@ console.log('\n=== A. 回读陈旧值:写已落到寄存器,但 ACK 判定失败
 
   // 账本语义复刻:dcw-controller.ts:536「仅成功写记锚」→ ok=false 时 afterWrite 不被调用
   const repo = new RecipeRollBackRepo()
-  const seeded = repo.appendAnchor({ lineId: 'ln', nodeId: 'dw-1', prevValue: 5, newValue: 10, source: 'manual', actor: 'user', recipeRunId: null })
+  repo.appendAnchor({ lineId: 'ln', nodeId: 'dw-1', prevValue: 5, newValue: 10, source: 'manual', actor: 'user', recipeRunId: null })
   const outcome = res
   let ledgerAppends = 0
   if (outcome.ok !== false) { // ← 与 dcw-controller.ts:532-536 同构