agentworkshop 0.7.38 → 0.7.40

package/scripts/ui/shot-hero.mjs

@@ -0,0 +1,25 @@
+/**
+ * 把 docs/readme-assets/hero.html 渲成 2 倍图 hero.png(README 首屏).
+ * hero.html 里的截图是同目录下的真实运行截图(town.png / daq.png),
+ * 所以出图前必须先跑 scripts/ui/shots.mjs 更新它们。
+ */
+import puppeteer from 'puppeteer-core'
+import path from 'node:path'
+import { CHROME } from './lib.mjs'
+
+const dir = path.resolve('docs/readme-assets')
+const browser = await puppeteer.launch({
+  executablePath: CHROME,
+  headless: true,
+  args: ['--no-sandbox', '--force-color-profile=srgb', '--font-render-hinting=none'],
+  defaultViewport: { width: 1300, height: 520, deviceScaleFactor: 2 },
+})
+const page = await browser.newPage()
+const errs = []
+page.on('pageerror', e => errs.push(e.message))
+page.on('requestfailed', r => errs.push('failed: ' + r.url()))
+await page.goto('file:///' + path.join(dir, 'hero.html').replace(/\\/g, '/'), { waitUntil: 'networkidle0' })
+await new Promise(r => setTimeout(r, 400))
+await page.screenshot({ path: path.join(dir, 'hero.png'), type: 'png' })
+console.log('hero.png written', errs.length ? '⚠ ' + errs.join(' | ') : '')
+await browser.close()

package/scripts/ui/shots.mjs

@@ -0,0 +1,75 @@
+/**
+ * 全站视觉走查截图 —— 视口 × 主题 矩阵批量出图。
+ *   node scripts/ui/shots.mjs [--out .e2e-shots/new/base] [--theme dark|light|both]
+ *                             [--vp 1440x900] [--routes workshop,daq,...] [--wait 6000]
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+import { ensureVisualUser, launch, openPage, gotoReady, ROUTES } from './lib.mjs'
+
+const argv = process.argv.slice(2)
+const arg = (k, d) => {
+  const i = argv.indexOf(`--${k}`)
+  return i >= 0 ? argv[i + 1] : d
+}
+const OUT = arg('out', '.e2e-shots/new/base')
+const THEME = arg('theme', 'dark')
+const VP = arg('vp', '1440x900')
+const ONLY = arg('routes', '')
+const WAIT = Number(arg('wait', 6500))
+const [WV, HV] = VP.split('x').map(Number)
+
+const themes = THEME === 'both' ? [true, false] : [THEME === 'dark']
+// 'all' 与不传等价:两个验收脚本的参数语义必须一致,
+// 否则 `--routes all` 会被当成"找一个名叫 all 的路由"而筛出空集(实测踩过:
+// 跑完只留下一份空报告,还打印了 "saved")。
+const picks = (!ONLY || ONLY === 'all')
+  ? ROUTES
+  : ROUTES.filter(r => ONLY.split(',').includes(r.name))
+
+fs.mkdirSync(OUT, { recursive: true })
+const token = await ensureVisualUser()
+const browser = await launch({ width: WV, height: HV })
+const report = []
+
+for (const dark of themes) {
+  for (const r of picks) {
+    const page = await openPage(browser, { token, dark, width: WV, height: HV })
+    const errs = []
+    const consoleErrs = []
+    page.on('pageerror', e => errs.push(String(e.message).slice(0, 200)))
+    page.on('console', (m) => {
+      if (m.type() === 'error') consoleErrs.push(m.text().slice(0, 200))
+    })
+    try {
+      await gotoReady(page, r.path, { wait: WAIT })
+      const geo = await page.evaluate(() => {
+        const de = document.documentElement
+        return {
+          scrollW: de.scrollWidth,
+          clientW: de.clientWidth,
+          scrollH: de.scrollHeight,
+          clientH: de.clientHeight,
+          url: location.pathname,
+        }
+      })
+      const file = path.join(OUT, `${dark ? 'dark' : 'light'}__${r.name}.png`)
+      await page.screenshot({ path: file })
+      report.push({
+        route: r.name, path: r.path, theme: dark ? 'dark' : 'light',
+        landed: geo.url, overflowX: geo.scrollW - geo.clientW,
+        scrollH: geo.scrollH, pageErrors: errs, consoleErrors: consoleErrs.slice(0, 3), file,
+      })
+      console.log(`  ${dark ? 'dark ' : 'light'} ${r.name.padEnd(12)} overflowX=${geo.scrollW - geo.clientW} landed=${geo.url} errs=${errs.length}`)
+    }
+    catch (e) {
+      report.push({ route: r.name, theme: dark ? 'dark' : 'light', error: String(e.message).slice(0, 200) })
+      console.log(`  FAIL ${r.name}: ${String(e.message).slice(0, 120)}`)
+    }
+    await page.close()
+  }
+}
+
+fs.writeFileSync(path.join(OUT, '_report.json'), JSON.stringify(report, null, 2))
+await browser.close()
+console.log('\nsaved ->', OUT)

package/scripts/ui/sim-ui-shot.mjs

@@ -0,0 +1,16 @@
+import puppeteer from 'puppeteer-core'
+import { CHROME, sleep } from './lib.mjs'
+import fs from 'node:fs'
+
+fs.mkdirSync('.e2e-shots/admin', { recursive: true })
+const b = await puppeteer.launch({ executablePath: CHROME, headless: true, args: ['--no-sandbox', '--no-proxy-server'], defaultViewport: { width: 1600, height: 1000, deviceScaleFactor: 2 } })
+const p = await b.newPage()
+const errs = []
+p.on('pageerror', e => errs.push(String(e.message).slice(0, 140)))
+await p.goto('http://127.0.0.1:4010/', { waitUntil: 'networkidle0', timeout: 60000 })
+await sleep(6000)
+const info = await p.evaluate(() => ({ title: document.title, text: document.body.innerText.replace(/\s+/g, ' ').slice(0, 260), nodes: document.querySelectorAll('*').length }))
+console.log('sim UI:', JSON.stringify(info))
+console.log('errs:', errs.length, errs.slice(0, 3))
+await p.screenshot({ path: '.e2e-shots/admin/00-plc-simulator.png' })
+await b.close()

package/scripts/ui/verify-nav.mjs

@@ -0,0 +1,51 @@
+/**
+ * 抽屉导航交互验收 —— 断言"汉堡能开、遮罩能关、Esc 能关、路由跳转自动收"。
+ * 这些是布局量测不到的行为,必须真的点。
+ */
+import { ensureVisualUser, launch, openPage, gotoReady, sleep } from './lib.mjs'
+
+const token = await ensureVisualUser()
+const browser = await launch()
+const page = await openPage(browser, { token, dark: true, width: 390, height: 844, deviceScaleFactor: 1 })
+const errs = []
+page.on('pageerror', e => errs.push(String(e.message).slice(0, 160)))
+const results = []
+const check = (name, ok, detail = '') => {
+  results.push({ name, ok, detail })
+  console.log(`${ok ? ' ok ' : 'FAIL'} ${name} ${detail}`)
+}
+
+await gotoReady(page, '/daq', { wait: 2500 })
+const siderX = () => page.evaluate(() => {
+  const s = document.querySelector('.app-sider')
+  return s ? Math.round(s.getBoundingClientRect().x) : null
+})
+check('窄屏侧栏初始在画布外', (await siderX()) < 0, `x=${await siderX()}`)
+check('body 带 nav-drawer', await page.evaluate(() => document.body.classList.contains('nav-drawer')))
+
+await page.click('.collapse-btn')
+await sleep(600)
+check('点汉堡后抽屉进入画布', (await siderX()) >= -2, `x=${await siderX()}`)
+check('遮罩出现', await page.evaluate(() => !!document.querySelector('.nav-scrim')))
+check('画面滚动被锁', await page.evaluate(() => document.body.style.overflow === 'hidden'))
+
+await page.keyboard.press('Escape')
+await sleep(600)
+check('Esc 关闭抽屉', (await siderX()) < 0, `x=${await siderX()}`)
+check('滚动锁解除', await page.evaluate(() => document.body.style.overflow !== 'hidden'))
+
+await page.click('.collapse-btn')
+await sleep(500)
+await page.evaluate(() => {
+  const el = Array.from(document.querySelectorAll('.menu-item')).find(e => (e.textContent || '').includes('产线运营'))
+  el?.click()
+})
+await sleep(2200)
+check('点菜单后路由跳转', page.url().includes('/dcw'), page.url())
+check('跳转后抽屉自动收起', (await siderX()) < 0, `x=${await siderX()}`)
+check('无 pageerror', errs.length === 0, errs.join(' | ').slice(0, 200))
+
+await browser.close()
+const failed = results.filter(r => !r.ok).length
+console.log(`\n=== 抽屉交互:${results.length - failed} 通过 / ${failed} 失败 ===`)
+process.exit(failed ? 1 : 0)

package/scripts/ui/verify-responsive.mjs

@@ -0,0 +1,285 @@
+/**
+ * 自适应验收门 —— 全站 × 视口矩阵 × 明暗双主题的**可判定**检查。
+ *
+ * 和 audit-layout.mjs 的区别:audit 是"体检报告"(尽量多报,供人工判断),
+ * verify 是"门禁"(只报确定是缺陷的,并给出通过/失败)。
+ * 判定阈值都在下面 THRESHOLDS 里,改阈值必须写理由 —— 这是全站验收的唯一口径。
+ *
+ * 用法: node scripts/ui/verify-responsive.mjs [--routes all] [--theme both] [--json out.json]
+ */
+import fs from 'node:fs'
+import path from 'node:path'
+import { ensureVisualUser, launch, openPage, gotoReady, ROUTES, VIEWPORTS } from './lib.mjs'
+
+const argv = process.argv.slice(2)
+const arg = (k, d) => {
+  const i = argv.indexOf(`--${k}`)
+  return i >= 0 ? argv[i + 1] : d
+}
+const ROUTE_ARG = arg('routes', 'all')
+const THEME = arg('theme', 'both')
+const VP_ARG = arg('vp', '')
+const WAIT = Number(arg('wait', 3500))
+const JSON_OUT = arg('json', '.e2e-shots/verify/verify.json')
+const routes = ROUTE_ARG === 'all' ? ROUTES : ROUTES.filter(r => ROUTE_ARG.split(',').includes(r.name))
+const themes = THEME === 'both' ? [true, false] : [THEME === 'dark']
+// --vp 收窄视口矩阵(联调期用;终验不带该参数,跑全矩阵)
+const viewports = VP_ARG
+  ? VP_ARG.split(',').map((s) => {
+      const [w, h] = s.split('x').map(Number)
+      return VIEWPORTS.find(v => v.width === w && v.height === h) ?? { name: `${w}x${h}`, width: w, height: h, label: `${w}×${h}` }
+    })
+  : VIEWPORTS
+
+/**
+ * 验收阈值(唯一口径)。
+ * - minFontPhone 11:窄屏(≤640)手持视距下,10px mono 标签只剩 6px 有效字号,读不了。
+ * - minFontDesktop 9.5:桌面保留"仪器铭牌"的 10px mono 微字是刻意的设计语言,
+ *   但低于 9.5px 连铭牌都算不上,一律判失败。
+ * - contrast AA:WCAG 2.1 正文 4.5:1。小字号的 mono 标签没有"large text"豁免。
+ */
+const THRESHOLDS = {
+  minFontPhone: 11,
+  minFontDesktop: 9.5,
+  minTouch: 30,
+  minContrast: 4.5,
+}
+
+const AUDIT = function (th) {
+  const VW = window.innerWidth
+  const issues = []
+  const isSvg = el => el.namespaceURI === 'http://www.w3.org/2000/svg'
+  const describe = (el) => {
+    const cls = (typeof el.className === 'string' && el.className)
+      ? '.' + el.className.trim().split(/\s+/).slice(0, 2).join('.')
+      : ''
+    return `${el.tagName.toLowerCase()}${el.id ? '#' + el.id : ''}${cls}`
+  }
+  const txt = el => (el.innerText || el.textContent || '').trim().replace(/\s+/g, ' ').slice(0, 50)
+  const rect = el => el.getBoundingClientRect()
+  const visible = (el) => {
+    const r = rect(el)
+    if (r.width < 1 || r.height < 1) return false
+    const cs = getComputedStyle(el)
+    if (cs.visibility === 'hidden' || cs.display === 'none' || Number(cs.opacity) < 0.05) return false
+    if (el.closest('[aria-hidden="true"]')) return false
+    // 被祖先的 overflow:hidden 整体推出可视区 = 看不见。
+    // 缺这一条会把 antd Switch 的"另一态文案"也算成可见文本(它在轨道外,被裁掉),
+    // 于是稳定报出 1.83:1 的假阳性(实测)。
+    for (let p = el.parentElement; p && p !== document.body; p = p.parentElement) {
+      const pcs = getComputedStyle(p)
+      if (pcs.overflow === 'visible' && pcs.overflowX === 'visible' && pcs.overflowY === 'visible') continue
+      const pr = p.getBoundingClientRect()
+      if (
+        r.right <= pr.left + 0.5 || r.left >= pr.right - 0.5
+        || r.bottom <= pr.top + 0.5 || r.top >= pr.bottom - 0.5
+      ) return false
+    }
+    return true
+  }
+  const inScroller = (el) => {
+    let p = el.parentElement
+    while (p && p !== document.body) {
+      const cs = getComputedStyle(p)
+      if (['auto', 'scroll', 'hidden'].includes(cs.overflowX)) return p
+      p = p.parentElement
+    }
+    return null
+  }
+
+  const de = document.documentElement
+  if (de.scrollWidth - de.clientWidth > 1) issues.push({ kind: 'doc-overflow-x', px: de.scrollWidth - de.clientWidth })
+
+  const all = Array.from(document.querySelectorAll('body *'))
+
+  // 侧栏形态(结构性断言:窄屏必须在文档流外)
+  const sider = document.querySelector('.app-sider')
+  const siderCs = sider ? getComputedStyle(sider) : null
+  const expectDrawer = VW < 900
+  if (sider && siderCs) {
+    const isFixed = siderCs.position === 'fixed'
+    if (expectDrawer && !isFixed) issues.push({ kind: 'nav-should-be-drawer', actual: siderCs.position, vw: VW })
+    if (!expectDrawer && isFixed) issues.push({ kind: 'nav-should-be-inline', actual: siderCs.position, vw: VW })
+    if (expectDrawer) {
+      const r = rect(sider)
+      if (r.right > 1) issues.push({ kind: 'drawer-not-offcanvas', right: Math.round(r.right) })
+    }
+  }
+
+  for (const el of all) {
+    if (isSvg(el)) continue // SVG 内部(ECharts 轴标签等)不是布局缺陷来源
+    if (!visible(el)) continue
+    const cs = getComputedStyle(el)
+    const r = rect(el)
+    const scroller = inScroller(el)
+
+    if (!scroller && cs.position !== 'fixed' && r.right > VW + 2) {
+      issues.push({ kind: 'el-overflow-right', el: describe(el), text: txt(el), over: Math.round(r.right - VW) })
+    }
+    if (el.children.length === 0) {
+      const t = (el.textContent || '').trim()
+      if (t.length > 1) {
+        const fs = parseFloat(cs.fontSize)
+        const floor = VW <= 640 ? th.minFontPhone : th.minFontDesktop
+        if (fs && fs < floor) issues.push({ kind: 'font-too-small', el: describe(el), text: t.slice(0, 30), px: fs, floor })
+      }
+    }
+    if (VW <= 900) {
+      const clickable = el.matches('button, a[href], [role="button"], .ant-switch, .ant-segmented-item, .ant-checkbox-wrapper')
+      // 命中区可以被伪元素外扩(把 16×16 的图标变成 40px 可点目标 —— 这是正当做法,
+      // 而且比"把图标本身画大"更尊重既有密度)。只看 rect 会把"做得对"判成"做得错",
+      // 所以要连伪元素一起量:要么它有实际的宽高,要么它用负 inset 撑开四边。
+      const hit = (pseudo) => {
+        const cs2 = getComputedStyle(el, pseudo)
+        if (!cs2 || cs2.content === 'none' || cs2.position !== 'absolute') return false
+        const w = Number.parseFloat(cs2.width)
+        const h = Number.parseFloat(cs2.height)
+        if (Number.isFinite(w) && Number.isFinite(h) && w >= th.minTouch && h >= th.minTouch) return true
+        const inset = ['top', 'left', 'right', 'bottom'].map(s => Number.parseFloat(cs2[s]))
+        return inset.every(v => Number.isFinite(v) && v <= -8)
+      }
+      const expanded = hit('::after') || hit('::before')
+      // 带文字的按钮/链接:宽度由文案决定,不该按 40px 判死;真正的要求是**高度**够。
+      // 纯图标控件(无文字)才要求两个方向都够,或已被伪元素外扩。
+      const hasText = txt(el).length > 0
+      const tooSmall = hasText
+        ? r.height < th.minTouch
+        : (r.width < th.minTouch || r.height < th.minTouch)
+      if (clickable && el.children.length === 0 && !expanded && tooSmall) {
+        issues.push({ kind: 'touch-target-small', el: describe(el), text: txt(el), w: Math.round(r.width), h: Math.round(r.height) })
+      }
+    }
+    if (cs.position === 'fixed' && (r.right > VW + 2 || r.left < -2) && el !== sider && !el.closest('.app-sider')) {
+      issues.push({ kind: 'fixed-out-of-view', el: describe(el), text: txt(el), left: Math.round(r.left), right: Math.round(r.right) })
+    }
+  }
+
+  // 对比度
+  const parseColor = (s) => {
+    const m = s.match(/rgba?\(([^)]+)\)/)
+    if (!m) return null
+    const p = m[1].split(',').map(Number)
+    return { r: p[0], g: p[1], b: p[2], a: p[3] === undefined ? 1 : p[3] }
+  }
+  const over = (fg, bg) => ({
+    r: fg.r * fg.a + bg.r * (1 - fg.a), g: fg.g * fg.a + bg.g * (1 - fg.a), b: fg.b * fg.a + bg.b * (1 - fg.a), a: 1,
+  })
+  const effBg = (el) => {
+    let p = el, acc = null
+    while (p && p !== document.documentElement.parentElement) {
+      const c = parseColor(getComputedStyle(p).backgroundColor)
+      if (c && c.a > 0.01) acc = acc ? over(acc, c) : c
+      if (acc && acc.a >= 0.999) break
+      if (c && c.a >= 0.999) break
+      p = p.parentElement
+    }
+    return acc ?? { r: 255, g: 255, b: 255, a: 1 }
+  }
+  const lum = (c) => {
+    const f = (v) => {
+      const x = v / 255
+      return x <= 0.03928 ? x / 12.92 : ((x + 0.055) / 1.055) ** 2.4
+    }
+    return 0.2126 * f(c.r) + 0.7152 * f(c.g) + 0.0722 * f(c.b)
+  }
+  const ratio = (a, b) => {
+    const l1 = lum(a)
+    const l2 = lum(b)
+    return (Math.max(l1, l2) + 0.05) / (Math.min(l1, l2) + 0.05)
+  }
+  const seen = new Set()
+  let worst = { ratio: 99, el: '', text: '' }
+  for (const el of all) {
+    if (isSvg(el) || el.children.length > 0) continue
+    const t = (el.textContent || '').trim()
+    if (t.length < 2 || !visible(el)) continue
+    // 非活动控件豁免:WCAG 1.4.3 明确把"未激活的界面组件"排除在对比度要求之外,
+    // 而 antd 的 disabled 文本用的是 ~25% 不透明度(实测 2.2:1 是**设计如此**)。
+    // 把它们算作失败,等于要求一个不存在的标准。
+    if (el.closest('[disabled], .ant-btn-disabled, [aria-disabled="true"], .ant-select-disabled')) continue
+    const cs = getComputedStyle(el)
+    const fg = parseColor(cs.color)
+    if (!fg) continue
+    // 背景是渐变/图片时对比度**无法**从计算样式推导(背景色只是垫底那一层)。
+    // 把这种元素报成"不达标"是假阳性 —— 实测 .avatar-fallback(绿青渐变 + 墨字)
+    // 被算成 1.06:1,而真实观感远高于 AA。宁可漏报,不要制造噪音。
+    let onImage = false
+    for (let p = el; p && p !== document.documentElement; p = p.parentElement) {
+      if (getComputedStyle(p).backgroundImage !== 'none') {
+        onImage = true
+        break
+      }
+    }
+    if (onImage) continue
+    const bg = effBg(el)
+    const cr = ratio(over(fg, bg), bg)
+    const fs = parseFloat(cs.fontSize) || 14
+    const bold = Number(cs.fontWeight) >= 700
+    const large = fs >= 24 || (fs >= 18.66 && bold)
+    const need = large ? 3 : th.minContrast
+    if (cr < worst.ratio) worst = { ratio: +cr.toFixed(2), el: describe(el), text: t.slice(0, 30) }
+    if (cr < need) {
+      const key = describe(el) + t.slice(0, 10)
+      if (seen.has(key)) continue
+      seen.add(key)
+      const hex = (c) => {
+        const h = v => Math.round(Math.max(0, Math.min(255, v))).toString(16).padStart(2, '0')
+        return '#' + h(c.r) + h(c.g) + h(c.b)
+      }
+      issues.push({
+        kind: 'contrast', el: describe(el), text: t.slice(0, 30),
+        ratio: +cr.toFixed(2), need, px: fs, fg: hex(over(fg, bg)), bg: hex(bg),
+      })
+    }
+  }
+
+  const counts = {}
+  for (const i of issues) counts[i.kind] = (counts[i.kind] || 0) + 1
+  return {
+    vw: VW, counts, total: issues.length, worstContrast: worst,
+    issues: issues.slice(0, 60),
+    nav: siderCs ? { pos: siderCs.position, w: Math.round(rect(sider).width) } : null,
+  }
+}
+
+fs.mkdirSync(path.dirname(JSON_OUT), { recursive: true })
+const token = await ensureVisualUser()
+const browser = await launch()
+const rows = []
+let failures = 0
+
+for (const vp of viewports) {
+  for (const dark of themes) {
+    for (const r of routes) {
+      const page = await openPage(browser, { token, dark, width: vp.width, height: vp.height, deviceScaleFactor: 1 })
+      const errs = []
+      page.on('pageerror', e => errs.push(String(e.message).slice(0, 160)))
+      try {
+        await gotoReady(page, r.path, { wait: WAIT })
+        const res = await page.evaluate(AUDIT, THRESHOLDS)
+        res.route = r.name
+        res.path = r.path
+        res.vp = vp.name
+        res.theme = dark ? 'dark' : 'light'
+        res.pageErrors = errs
+        const bad = res.total + errs.length
+        if (bad) failures++
+        rows.push(res)
+        console.log(`${bad ? 'FAIL' : ' ok '} ${vp.name.padEnd(16)} ${(dark ? 'dark' : 'light').padEnd(5)} ${r.name.padEnd(12)} ${JSON.stringify(res.counts)}${errs.length ? ' errs=' + errs.length : ''}`)
+      }
+      catch (e) {
+        failures++
+        rows.push({ route: r.name, vp: vp.name, theme: dark ? 'dark' : 'light', error: String(e.message).slice(0, 200) })
+        console.log(`FAIL ${vp.name} ${r.name} — ${String(e.message).slice(0, 90)}`)
+      }
+      await page.close()
+    }
+  }
+}
+
+await browser.close()
+fs.writeFileSync(JSON_OUT, JSON.stringify({ thresholds: THRESHOLDS, failures, rows }, null, 2))
+const total = rows.length
+console.log(`\n=== ${total} 个组合:${total - failures} 通过 / ${failures} 失败 ===`)
+console.log('报告 →', JSON_OUT)
+process.exit(failures ? 1 : 0)

package/server/api/system/config-groups/[id].patch.ts

@@ -15,7 +15,7 @@ import { getSystemConfigService } from '../../../services/system-config'
 export default defineApiHandler(async (event) => {
   requireRole(event, ['admin'])
   const id = String(event.context.params?.id ?? '').trim()
-  const body = (await readBody(event)) ?? {}
+  const body = (await readBody<Record<string, unknown>>(event)) ?? {}
   // id/source/plugin 是身份字段,不接受伪造
   const patch = { ...body }
   delete patch.id

package/server/api/system/config-groups/index.post.ts

@@ -26,7 +26,7 @@ function slugify(label: string): string {
 
 export default defineApiHandler(async (event) => {
   requireRole(event, ['admin'])
-  const body = (await readBody(event)) ?? {}
+  const body = (await readBody<Record<string, unknown>>(event)) ?? {}
   const id = String(body.id ?? '').trim() || slugify(String(body.label ?? ''))
   const group = getSystemConfigService().createGroup({ ...body, id })
   return { ok: true, group }

package/server/api/system/settings/events.get.ts

@@ -4,7 +4,7 @@
  * 服务端任何写入（UI / CLI / 文件监听）都会 push { type, changed, restartRequired, effective }。
  * 连接前先鉴权（无效 token 直接 401，不开流）。
  */
-import { createEventStream } from 'h3'
+import { createEventStream, defineEventHandler } from 'h3'
 import { resolveUser } from '../../workshop/caller'
 import { getSystemConfigService, type ConfigEventPayload } from '../../../services/system-config'
 

package/server/api/system/settings/index.patch.ts

@@ -13,7 +13,7 @@ import { getSystemConfigService } from '../../../services/system-config'
 
 export default defineApiHandler(async (event) => {
   requireRole(event, ['admin'])
-  const body = (await readBody(event)) ?? {}
+  const body = (await readBody<Record<string, unknown>>(event)) ?? {}
   const overrides = body.override ?? body.overrides ?? body
   if (!overrides || typeof overrides !== 'object' || Array.isArray(overrides)) {
     return { ok: false, message: '请求体应为 { "override": { key: value } }' }

package/server/api/workshop/agent-tools/invoke.post.ts

@@ -18,6 +18,19 @@ import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { AppError } from '@/server/utils/errors'
 import { getWorkshopManager } from '@/server/plugins/workshop'
+import type { AgentChannelManager } from '@/server/services/workshop/runtime/manager'
+
+/**
+ * manager 依赖仓储视图。
+ * 公开面没有「按 id 取 channel 行(含 ownerUserId、不抛错)」的等价方法:
+ * getChannelForUser 对遗留公共 channel(owner NULL)判放行、对缺失行抛 404,
+ * 与本路由「非属主一律 403」的既有口径不同,故直接读 manager.deps.repos
+ * (AgentChannelManager 的 deps 已声明为 public readonly —— 见其构造函数;
+ *  原写法用 `as unknown as { deps }` 断言绕过 private,现已不需要)。
+ */
+function reposOf(manager: AgentChannelManager): AgentChannelManager['deps']['repos'] {
+  return manager.deps.repos
+}
 
 export default defineApiHandler(async (event) => {
   const agentToken = getHeader(event, 'x-aw-agent-token')
@@ -38,10 +51,11 @@ export default defineApiHandler(async (event) => {
     }
   }
   else if (user) {
-    const row = manager.deps.repos.channelAgents.findById(agentId)
+    const repos = reposOf(manager)
+    const row = repos.channelAgents.findById(agentId)
     if (!row) throw new AppError(404, 'NOT_FOUND', `agent 不存在: ${agentId}`)
     if (user.role !== 'admin') {
-      const channel = manager.deps.repos.channels.findById(row.channelId)
+      const channel = repos.channels.findById(row.channelId)
       if (!channel || channel.ownerUserId !== user.id) {
         throw new AppError(403, 'SCOPE_VIOLATION', '该 agent 不属于当前用户,无权代为调用其工具')
       }

package/server/api/workshop/aml/datasets/[id].get.ts

@@ -37,7 +37,14 @@ export default defineApiHandler(async (event) => {
     }
   }
   catch (err) {
-    if (err instanceof AppError && err.statusCode === 410) {
+    // ⚠️ 类型漂移记录:AppError 的权威定义只有 status(见 server/utils/errors.ts),没有 statusCode。
+    // 原判定读的是不存在的属性 ⇒ 运行时恒为 undefined,这段「实体丢失 → 200 + 元数据告警」兜底
+    // **从未命中**(实际行为:loadDatasetEntity 抛 AppError(410) → defineApiHandler 统一转 410 错误信封)。
+    // 依「不改变运行时行为」约束,这里只把该事实写实、判定结果保持不变;
+    // 若要启用本兜底(与上方文件注释「实体缺失时返回 410 + 元数据行」及前端 report: ... | null 一致),
+    // 把下面的 legacyStatusCode 换成 err.status 即可(一行)。
+    const legacyStatusCode = (err as { statusCode?: number } | undefined)?.statusCode
+    if (err instanceof AppError && legacyStatusCode === 410) {
       // 元数据仍在但实体丢了:仍然 200 返回元数据 + 明确的实体告警,便于 UI 展示与清理引导
       return { dataset: ds, report: null, manifest: null, spec: null, entity: { dir: null, arrays: [], sizeBytes: 0, healthy: false, specFromEntity: false, warning: err.message } }
     }

package/server/api/workshop/daq/infra/reconnect.post.ts

@@ -3,7 +3,7 @@
  */
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
-import { daqInfraConfig, daqInfraStatus } from '@/server/services/workshop/daq/infra'
+import { daqInfraConfig, daqInfraStatus, type DaqInfraConfig } from '@/server/services/workshop/daq/infra'
 
 export default defineApiHandler(async (event) => {
   resolveUser(event)

package/server/api/workshop/daq/templates/[key].delete.ts

@@ -2,6 +2,7 @@
  * DELETE /api/workshop/daq/templates/:key —— 删除自定义信号模板(内置模板拒绝)。
  * 成功后广播 daq.template.changed(op=removed);已建节点不受影响(域已落节点)。
  */
+import { getRouterParam } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDaqTemplateRegistry } from '@/server/services/workshop/daq/daq-templates'

package/server/api/workshop/daq/templates/[key].patch.ts

@@ -2,6 +2,7 @@
  * PATCH /api/workshop/daq/templates/:key —— 编辑自定义信号模板(内置模板拒绝)。
  * 成功后广播 daq.template.changed(op=updated)。
  */
+import { getRouterParam, readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDaqTemplateRegistry } from '@/server/services/workshop/daq/daq-templates'

package/server/api/workshop/daq/templates/index.post.ts

@@ -2,6 +2,7 @@
  * POST /api/workshop/daq/templates —— 新建自定义信号模板(登录用户)。
  * 成功后广播 daq.template.changed(op=added)收敛全部客户端。
  */
+import { readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDaqTemplateRegistry } from '@/server/services/workshop/daq/daq-templates'

package/server/api/workshop/dcw/[id]/write.post.ts

@@ -3,7 +3,7 @@
  * 工程量安全校验 → 驱动换算/写/回读校验 → ACK。越界 400;在飞 409。
  * R1 留痕由 write() 中央埋点统一完成(manual 来源携带真实用户身份)。
  */
-import { getRouterParam, readBody } from 'h3'
+import { getRouterParam, readBody, getRequestHeader } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { requireLineMode } from '@/server/services/workshop/permissions'
 import { defineApiHandler } from '@/server/utils/response'
@@ -17,6 +17,14 @@ export default defineApiHandler(async (event) => {
   const body = await readBody<{ value?: number }>(event) ?? {}
   // 产线权限:写控设定值需「可操控」(readonly/无权用户 403)
   requireLineMode(user, getDcwController().byId(id)?.lineId, 'operate')
-  const outcome = await getDcwController().write(id, Number(body.value), null, { source: 'manual', actor: user.id, actorName: user.name })
+  // D8 基准消融臂透传(仅 AW_BENCH_MODE=1 时生效;生产模式恒 undefined=full 臂)
+
+  const benchArm = process.env.AW_BENCH_MODE === '1'
+
+    ? (getRequestHeader(event, 'x-aw-bench-arm') || undefined) as 'no-interlock' | 'no-readback' | 'ungated' | undefined
+
+    : undefined
+
+  const outcome = await getDcwController().write(id, Number(body.value), null, { source: 'manual', actor: user.id, actorName: user.name, benchArm })
   return { outcome }
 })

package/server/api/workshop/dcw/[id].delete.ts

@@ -2,7 +2,7 @@
  * DELETE /api/workshop/dcw/:id —— 删除写控制节点。
  * R3:admin/editor 才可执行;approvalGate 开启时走双人复核(同 apply 口径)。
  */
-import { getRouterParam, readBody, setResponseStatus } from 'h3'
+import { getQuery, getRouterParam, readBody, setResponseStatus } from 'h3'
 import { requireRole } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { gateDangerous } from '@/server/utils/approval-gate'
@@ -15,7 +15,10 @@ export default defineApiHandler(async (event) => {
   bindDcwBroadcast(broadcastSceneEvent)
   const id = getRouterParam(event, 'id') ?? ''
   // DELETE 语义下 body 常为空:approvalId 亦接受查询参数(?approvalId=…)
-  const body = await readBody<{ approvalId?: string }>(event).catch(() => ({})) ?? {}
+  // 「无 body」与「body 解析失败」都退化为同一个显式标注的空对象(运行时仍是普通 {} 字面量,
+  // 只被读取、不会被修改),避免裸 {} 把 body.approvalId 的类型抹成 {}。
+  const emptyBody: { approvalId?: string } = {}
+  const body = await readBody<{ approvalId?: string }>(event).catch(() => emptyBody) ?? emptyBody
   const q = getQuery(event)
   const approvalId = body.approvalId ?? (typeof q.approvalId === 'string' ? q.approvalId : undefined)
   const gate = gateDangerous(useRuntimeConfig(event).approvalGate === true, user, { action: 'dcw.delete', targetId: id, summary: `删除写控制节点 ${id}` }, approvalId)

package/server/api/workshop/dcw/index.get.ts

@@ -25,6 +25,8 @@ export default defineApiHandler(async (event) => {
       ? ctrl.controllerState()
       : { running: ctrl.controllerState().running === true },
     nodes: filterByLine(user, ctrl.listViews(), n => n.lineId),
+    /** 工艺参数映射面(用户/Agent 的参数语义读写面;PLC 寻址细节不透出) */
+    params: visible ? ctrl.listParamViews().filter(p => inLine(p.lineId)) : ctrl.listParamViews(),
     templates: listDcwTemplates(),
     recipes: visible ? ctrl.listRecipes().filter(r => inLine(r.lineId)) : ctrl.listRecipes(),
     runs: visible ? ctrl.listRuns().filter(r => inLine(r.lineId)) : ctrl.listRuns(),

package/server/api/workshop/dcw/lines/[id].patch.ts

@@ -1,7 +1,7 @@
 /**
  * PATCH /api/workshop/dcw/lines/:id —— 编辑产线(名称/光晕色/描述)。
  */
-import { readBody } from 'h3'
+import { getRouterParam, readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDcwController } from '@/server/services/workshop/dcw/dcw-controller'