agentworkshop 0.7.38 → 0.7.40

package/server/api/workshop/dcw/params/[id]/read.post.ts

@@ -0,0 +1,17 @@
+/**
+ * POST /api/workshop/dcw/params/:id/read —— 工艺参数读取(读执行节点 PLC 值,物理量纲)。
+ * 被动观测免审批;返回 PLC 实时读数 + 当前设定值。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const id = getRouterParam(event, 'id') ?? ''
+  const read = await getDcwController().readParam(id)
+  return { read }
+})

package/server/api/workshop/dcw/params/[id]/write.post.ts

@@ -0,0 +1,21 @@
+/**
+ * POST /api/workshop/dcw/params/:id/write —— 工艺参数写入(用户/Agent 的标准写入口)。
+ * body: { value: number }(工程量纲)。限界联锁(参数基准 ∩ 产品 ∩ 配方 ∩ 节点安全量程)
+ * 在 DcwController.write 咽喉点统一生效,越界 400 并点名约束层。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const id = getRouterParam(event, 'id') ?? ''
+  const body = await readBody<{ value?: number }>(event) ?? {}
+  requireLineMode(user, getDcwController().paramById(id).lineId, 'operate')
+  const outcome = await getDcwController().writeParam(id, Number(body.value), { source: 'manual', actor: user.id, actorName: user.name })
+  return { outcome }
+})

package/server/api/workshop/dcw/params/[id].delete.ts

@@ -0,0 +1,19 @@
+/**
+ * DELETE /api/workshop/dcw/params/:id —— 删除工艺参数映射(仅删语义面,执行节点不受影响)。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { getDcwParamRepo } from '@/server/services/workshop/dcw/param-map.repo'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const id = getRouterParam(event, 'id') ?? ''
+  requireLineMode(user, getDcwController().paramById(id).lineId, 'operate')
+  getDcwParamRepo().remove(id)
+  return { removed: id }
+})

package/server/api/workshop/dcw/params/[id].patch.ts

@@ -0,0 +1,23 @@
+/**
+ * PATCH /api/workshop/dcw/params/:id —— 编辑工艺参数映射(语义面/基准限界)。
+ * nodeId 映射目标不可变(换绑请删建,避免账本悬空引用)。
+ */
+import { getRouterParam, readBody } from 'h3'
+import type { DcwParamInput } from '#shared/dcw-protocol'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { getDcwParamRepo } from '@/server/services/workshop/dcw/param-map.repo'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const id = getRouterParam(event, 'id') ?? ''
+  const body = await readBody<Partial<DcwParamInput>>(event) ?? {}
+  // 产线权限:参数执行节点所在产线需「可操控」(限界是写控安全配置)
+  requireLineMode(user, getDcwController().paramById(id).lineId, 'operate')
+  const row = getDcwParamRepo().update(id, body)
+  return { param: getDcwController().paramById(row.id) }
+})

package/server/api/workshop/dcw/params/index.get.ts

@@ -0,0 +1,27 @@
+/**
+ * GET /api/workshop/dcw/params —— 工艺参数映射列表(登录用户)。
+ * 仅语义面(key/单位/限界/当前值/驱动类别);寄存器等 PLC 寻址细节不透出。
+ * ?lineId= 过滤产线;?limits=1 附带各参数的有效限界剖面(分层 + 交集)。
+ */
+import { getQuery } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { filterByLine } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const ctrl = getDcwController()
+  const q = getQuery(event)
+  const lineFilter = q.lineId ? String(q.lineId) : ''
+  let params = ctrl.listParamViews()
+  params = filterByLine(user, params, p => p.lineId)
+  if (lineFilter) params = params.filter(p => p.lineId === lineFilter)
+  const withLimits = q.limits === '1'
+  return {
+    params,
+    limits: withLimits ? params.map(p => ctrl.paramLimitsOf(p.id)) : undefined,
+  }
+})

package/server/api/workshop/dcw/params/index.post.ts

@@ -0,0 +1,25 @@
+/**
+ * POST /api/workshop/dcw/params —— 创建工艺参数映射。
+ * 路径一(nodeId):映射指向既有写控制执行节点;
+ * 路径二(access):设备连接 + 寄存器 + 标准转换模式一键建映射
+ *   (系统按转换模式自动创建执行节点,用户不手工拼装驱动配置)。
+ */
+import { readBody } from 'h3'
+import type { DcwParamInput } from '#shared/dcw-protocol'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const body = await readBody<Partial<DcwParamInput>>(event) ?? {}
+  // 产线权限:目标产线(access 自动建节点)或执行节点所在产线需「可操控」
+  const lineId = body.access
+    ? (body.lineId ?? '')
+    : (body.nodeId ? getDcwController().byId(String(body.nodeId))?.lineId : undefined)
+  requireLineMode(user, lineId, 'operate')
+  return { param: getDcwController().createParamMapping(body) }
+})

package/server/api/workshop/permissions/index.get.ts

@@ -23,7 +23,9 @@ export default defineApiHandler(async (event) => {
   // channel 列表按 owner 归并(每用户一次轻量查询;channel 行自带 ownerUserId)
   const out = users.map(u => ({
     ...u,
-    channels: manager.listChannelsForUser(u.id).map(c => ({ id: c.channelId, name: c.name, createdAt: c.createdAt })),
+    // ChannelRow 的 channel 主键列名是 id(SELECT 'id, name, ...');原写的 c.channelId 运行时恒 undefined,
+    // 与前端 UserRow.channels: Array<{ id, name, createdAt }>(app/pages/permissions/index.vue)不一致
+    channels: manager.listChannelsForUser(u.id).map(c => ({ id: c.id, name: c.name, createdAt: c.createdAt })),
     grants: grantsByUser.get(u.id) ?? [],
   }))
   return { lines, users: out }

package/server/plugins/aw-plugins.ts

@@ -19,9 +19,20 @@ const candidates = [
 const packageRoot = candidates.find(r => existsSync(resolve(r, 'server', 'plugins-builtin'))) ?? process.cwd()
 
 export default defineNitroPlugin((nitroApp) => {
-  void initPluginHost({ cwd: process.cwd(), packageRoot }).then((host) => {
-    // 实际监听端口回填(nitro listen 后 ctx.api 自环 origin 才准确)
-    nitroApp.hooks.hookOnce('listen', (listener: { port?: number }) => {
+  // host.mjs 是未类型化的 JS:TS 从 `{ cwd = process.cwd(), packageRoot } = {}` 推断形参类型时只保留了
+  // 带默认值的 cwd,丢掉了没有默认值的 shorthand 属性 packageRoot(host.mjs 内部确实会解构并使用它,
+  // 见 host.mjs 的 host.packageRoot / resolveRunMode({ cwd, packageRoot }))。按真实形参给局部变量
+  // 加注解即可,调用本身逐字不变。
+  const hostOptions: { cwd?: string, packageRoot?: string } = { cwd: process.cwd(), packageRoot }
+  void initPluginHost(hostOptions).then((host) => {
+    // 实际监听端口回填(nitro listen 后 ctx.api 自环 origin 才准确)。
+    // nitro 的运行时 hook 类型 NitroRuntimeHooks 未声明 'listen'(nitro 2.13 的 node 预设运行时只派发
+    // request/beforeResponse/afterResponse/render:*/error/close),故对一个只读视图做局部拓宽;
+    // 注册行为与原代码逐字相同(有派发则回填端口,无派发则空转),运行时零变化。
+    const hooks = nitroApp.hooks as typeof nitroApp.hooks & {
+      hookOnce(name: 'listen', fn: (listener: { port?: number }) => void): unknown
+    }
+    hooks.hookOnce('listen', (listener) => {
       if (listener?.port)
         host.setSelfOrigin(listener.port)
     })

package/server/plugins/dev-stability-guard.ts

@@ -23,7 +23,9 @@ export default defineNitroPlugin(() => {
       console.error(`[stability-guard] fatal ${kind}, exiting:\n${describeReason(reason)}`)
       process.exit(1)
     }
-    counts[severity] += 1
+    // counts 的四个 key 装配时已全部初始化为 0,且 'fatal' 已在上面提前 return;
+    // `?? 0` 只是 noUncheckedIndexedAccess 下的写法,取值口径与 `+= 1` 完全一致
+    counts[severity] = (counts[severity] ?? 0) + 1
     const line = `[stability-guard] ${severity}(累计 ${counts[severity]},不退出): ${describeReason(reason).slice(0, 200).replace(/\n/g, ' ')}`
     // 外部设备不可达与引擎边界属"要有人知道"的信号 → error;其余瞬态噪声 → warn
     if (severity === 'upstream' || severity === 'engine') console.error(line)

package/server/plugins/system-config.ts

@@ -11,6 +11,11 @@ import { resolve } from 'node:path'
 import { resolveRunMode } from '@/shared/config/home.mjs'
 import { getSystemConfigService } from '../services/system-config'
 
+/** 错误消息提取(catch 变量为 unknown;与原先 `String(err?.message ?? err)` 逐字等价) */
+function errorMessage(err: unknown): string {
+  return String((err as { message?: unknown } | null | undefined)?.message ?? err)
+}
+
 export default function systemConfigPlugin(nitroApp: {
   hooks: { hook(name: string, fn: (...args: unknown[]) => void | Promise<void>): void }
 }): void {
@@ -28,7 +33,7 @@ export default function systemConfigPlugin(nitroApp: {
   }
   catch (err) {
     // 初始化失败不阻断服务（设置系统降级为只读构建配置）
-    console.warn('[system-config] 初始化失败(设置系统降级):', String(err?.message ?? err))
+    console.warn('[system-config] 初始化失败(设置系统降级):', errorMessage(err))
   }
 
   nitroApp.hooks.hook('close', () => {

package/server/plugins-builtin/rag-bridge/index.mjs

@@ -349,10 +349,17 @@ export default {
         outbound: state.outbound,
         auth: kbToken() ? 'bearer' : 'anonymous',
         // token 配置与「实测是否被接受」分开呈现:401/403 = 明确被拒(运维一眼看出 token 配错),
-        // 网络不通/超时为 null(未知),2xx 或非鉴权类失败为 true(未被拒)
+        // 网络不通/超时为 null(未知),2xx 或非鉴权类失败为 true(未被拒)。
+        // 实测打受保护 GET /api/v1/auth/me —— rag 后端 GET 只读端点公开(/health 匿名可过,
+        // 测不出 token 对错),/auth/me 无 token/错 token 均 401。
         token: {
           configured: Boolean(kbToken()),
-          accepted: backend.ok ? true : (backend.status === 401 || backend.status === 403 ? false : null),
+          accepted: await (async () => {
+            if (!state.outbound) return null
+            if (!kbToken()) return backend.ok ? true : null
+            const me = await callJson('GET', `${base()}/api/v1/auth/me`, null, { timeoutMs: 5000, retries: 0 })
+            return me.ok ? true : (me.status === 401 || me.status === 403 ? false : null)
+          })(),
         },
         kb: { name: KB_NAME, id: kbId() || null },
         backend: { url: base(), ok: backend.ok, ...(backend.ok ? { status: backend.body?.status ?? null } : { status: backend.status ?? null, error: backend.error }) },

package/server/services/system-config.ts

@@ -44,8 +44,10 @@ export interface ConfigGroup {
   label: string
   labelKey?: string
   description: string
-  /** 排序权重(小在前);内置分组按 schema 声明顺序 ×10 */
-  order: number
+  /** 排序权重(小在前);内置分组按 schema 声明顺序 ×10。
+   *  可缺省:持久化条目与插件声明允许不写 order,由 shared/config/groups.mjs 的
+   *  mergeGroups 沿用内置声明顺序兜底(消费侧见 nextGroupOrder/updateGroup 均按可缺省处理)。 */
+  order?: number
   /** 前端默认折叠态(用户本地展开偏好优先) */
   collapsed: boolean
   collapsible: boolean
@@ -105,6 +107,23 @@ export interface ConfigEventPayload {
 
 type Listener = (payload: ConfigEventPayload) => void
 
+/** runtimeConfig 的动态视图:PUBLIC_FIELDS(public.*)/ROOT_FIELDS(根字段)/daq.* 三处动态读写共用 */
+type RuntimeConfigView = Record<string, unknown> & { public: Record<string, unknown> }
+
+/** 从 catch 的 unknown 值取可读错误文本(与原先的 String(err?.message ?? err) 运行时完全等价) */
+function errorText(err: unknown): string {
+  return String((err as { message?: unknown } | null | undefined)?.message ?? err)
+}
+
+/** 以可写记录视图取 runtimeConfig.daq:缺失/非对象时就地落一个空对象(与原先的兜底赋值等价) */
+function daqView(rc: RuntimeConfigView): Record<string, unknown> {
+  const current = rc.daq
+  if (current && typeof current === 'object') return current as Record<string, unknown>
+  const created: Record<string, unknown> = {}
+  rc.daq = created
+  return created
+}
+
 declare global {
   var __systemConfig: SystemConfigService | undefined
 }
@@ -169,7 +188,7 @@ export class SystemConfigService {
       }
     }
     catch (err) {
-      console.warn('[system-config] 遗留设置迁移失败(不阻断启动):', String(err?.message ?? err))
+      console.warn('[system-config] 遗留设置迁移失败(不阻断启动):', errorText(err))
     }
   }
 
@@ -217,7 +236,7 @@ export class SystemConfigService {
       saveGroups(toSave, this.groupsPath)
     }
     catch (err) {
-      console.warn('[system-config] 分组注册表落盘失败(本次仅内存生效):', String(err?.message ?? err))
+      console.warn('[system-config] 分组注册表落盘失败(本次仅内存生效):', errorText(err))
     }
   }
 
@@ -345,7 +364,8 @@ export class SystemConfigService {
 
   /** 从当前 runtimeConfig 读取某 key 的构建期基准值 */
   private readBase(key: string): unknown {
-    const rc = useRuntimeConfig() as Record<string, unknown>
+    const rc = useRuntimeConfig() as RuntimeConfigView
+    // 保留 ?.:public 缺失时按 undefined 处理(与改动前一致,不引入抛错路径)
     if (PUBLIC_FIELDS[key]) return rc.public?.[PUBLIC_FIELDS[key]]
     if (ROOT_FIELDS[key]) return rc[ROOT_FIELDS[key]]
     if (key.startsWith(DAQ_PREFIX)) return getPath(rc.daq, key.slice(DAQ_PREFIX.length))
@@ -357,7 +377,7 @@ export class SystemConfigService {
    *  视图以本服务内存 effective 为唯一实时源，前端经 SSE 消费；SSR 读取在下次启动后对齐。 */
   private applyToRuntime(key: string, value: unknown): void {
     try {
-      const rc = useRuntimeConfig() as Record<string, unknown>
+      const rc = useRuntimeConfig() as RuntimeConfigView
       if (PUBLIC_FIELDS[key]) {
         rc.public[PUBLIC_FIELDS[key]] = value
         return
@@ -367,8 +387,7 @@ export class SystemConfigService {
         return
       }
       if (key.startsWith(DAQ_PREFIX)) {
-        if (!rc.daq || typeof rc.daq !== 'object') rc.daq = {}
-        setPath(rc.daq, key.slice(DAQ_PREFIX.length), value)
+        setPath(daqView(rc), key.slice(DAQ_PREFIX.length), value)
       }
     }
     catch {
@@ -456,7 +475,7 @@ export class SystemConfigService {
       if (existsSync(this.root)) this.watcher.push(watch(this.root, { persistent: false }, handler))
     }
     catch (err) {
-      console.warn('[system-config] 文件监听不可用（外部写入将不热重载）:', String(err?.message ?? err))
+      console.warn('[system-config] 文件监听不可用（外部写入将不热重载）:', errorText(err))
     }
   }
 

package/server/services/workshop/agents/adapters/one-shot-cli-agent.ts

@@ -19,6 +19,7 @@ import type { ChildProcess } from 'node:child_process'
 import { createLogger } from '../../logger'
 import type {
   AgentEvent,
+  AgentInterface,
   AgentRunContext,
   AgentRunRequest,
 } from '../agent-interface'
@@ -183,7 +184,7 @@ export class OneShotCliAgentImpl extends BaseAgentImpl implements AgentInterface
   }
 
   /** HITL:一次性 CLI 家族无程序化审批面(能力面如实声明 hitl:false) */
-  async respondHitl(): Promise<void> {
+  override async respondHitl(): Promise<void> {
     throw new Error(`${this.spec.harnessId} 无 HITL 应答面`)
   }
 

package/server/services/workshop/agents/agent-interface.ts

@@ -72,8 +72,10 @@ export interface AgentWorkspace {
     toChannelName: string
     toLeadAgentId: string
   }>
-  /** (仅 lead)其他团队概览:同主其余 channel 的场景任务(进行中/近期完成)——跨团队协同的观察面 */
-  listOtherTeams(): Promise<Array<{
+  /** (仅 lead)其他团队概览:同主其余 channel 的场景任务(进行中/近期完成)——跨团队协同的观察面。
+   *  同步返回:唯一实现(manager.listOtherTeamsOverview)与工具桥直调方(manager.invokeAgentWorkspaceTool)均按数组消费;
+   *  声明为 Promise 会与实现漂移(await 同步值仍合法,故异步消费方不受影响)。 */
+  listOtherTeams(): Array<{
     channelId: string
     name: string
     description: string
@@ -82,16 +84,16 @@ export interface AgentWorkspace {
     sharedMemories: number
     activeTasks: Array<{ id: string, title: string, state: string }>
     recentCompleted: Array<{ title: string }>
-  }>>
-  /** (全员)跨团队共享记忆检索:其他 channel 的 __team__ 公共域,只读,带团队归属 */
-  searchOtherTeamsMemory(input: { query: string, limit?: number }): Promise<Array<{
+  }>
+  /** (全员)跨团队共享记忆检索:其他 channel 的 __team__ 公共域,只读,带团队归属。同步返回,同 listOtherTeams */
+  searchOtherTeamsMemory(input: { query: string, limit?: number }): Array<{
     channelId: string
     channelName: string
     title: string
     content: string
     importance: number
     createdAt: string
-  }>>
+  }>
   /**
    * 拒绝指派给自己的任务(能力/范畴不匹配):任务置 FAILED(调度器改派他人),
    * 并向派发方(任务创建者,缺省 channel lead)回执拒绝原因。

package/server/services/workshop/agents/base-agent.ts

@@ -43,11 +43,24 @@ export interface BaseAgentIdentity {
   channelId?: string
 }
 
+/**
+ * configRecord() 的视图类型:基类真正读取的公共配置键。
+ * 各 harness 的强类型配置(XxxAgentConfig)均以可选键声明这三项 → 子类直接 `return this.config` 即满足。
+ * 刻意不用 Record<string, unknown> 当返回类型:那会逼迫子类配置类型打开 index signature,
+ * 让子类内部配置键的拼写错误静默退化为 unknown(类型洞),而基类实际只用这三个键。
+ */
+export interface BaseAgentConfigView {
+  superviseTimeoutMs?: number
+  systemPromptPrefix?: string
+  scenarioPrompt?: string
+}
+
 export abstract class BaseAgentImpl implements AgentInterface {
   protected workspace: AgentRunContext['workspace'] | null = null
   protected readonly toolState: HostToolSessionState = createSessionState()
   protected readonly bridgeCtx: HostToolBridgeContext
-  protected roster: ReturnType<typeof createRosterCache>
+  /** 名册缓存:仅由 refreshIdentity() 装配(构造函数必经路径),故用明确赋值断言 */
+  protected roster!: ReturnType<typeof createRosterCache>
 
   protected selfAgentId = ''
   protected agentName = 'agent'
@@ -70,8 +83,8 @@ export abstract class BaseAgentImpl implements AgentInterface {
   /** 引擎标识(日志/登记;如 'dsh'/'pi') */
   protected abstract get harnessId(): string
 
-  /** 子类强类型配置的 Record 视图(基类只读公共键) */
-  protected abstract configRecord(): Record<string, unknown>
+  /** 子类强类型配置的公共键视图(基类只读;子类 `return this.config` 即可) */
+  protected abstract configRecord(): BaseAgentConfigView
 
   protected makeRoster(): ReturnType<typeof createRosterCache> {
     return createRosterCache({
@@ -141,7 +154,8 @@ export abstract class BaseAgentImpl implements AgentInterface {
 
   // ===== lead 调度回合(模板方法) =====
 
-  private supervising = false
+  /** supervise 互斥位(子类 supervise 实现与本字段共享同一实例字段,故为 protected;纯可见性修饰,无运行时差异) */
+  protected supervising = false
 
   async supervise(snapshot: SupervisionSnapshot, ctx: AgentRunContext, opts?: { signal?: AbortSignal }): Promise<SupervisionDecision[]> {
     if (this.supervising) return []

package/server/services/workshop/agents/claude-agent.ts

@@ -75,7 +75,9 @@ type PermissionVerdict
 export class ClaudeSdkAgentImpl extends BaseAgentImpl implements AgentInterface {
   private readonly config: ClaudeAgentConfig
 
-  private agentRole: 'lead' | 'worker' = 'worker'
+  // agentRole 由 BaseAgentImpl 持有(protected):子类再声明同名私有字段会以字段初始化器
+  // 覆盖基类 identity 装配的角色(lead 身份丢失)。此处仅收窄可见性声明,运行时代码不变。
+  protected override agentRole: 'lead' | 'worker' = 'worker'
   /** SDK 会话句柄(动态类型:依赖包可能未安装) */
   // eslint-disable-next-line @typescript-eslint/no-explicit-any
   private session: any = null
@@ -162,7 +164,7 @@ export class ClaudeSdkAgentImpl extends BaseAgentImpl implements AgentInterface
   }
 
   /** HITL 应答:canUseTool 挂起的权限请求 → allow/deny(fail-closed) */
-  async respondHitl(kind: string, id: string, outcome: {
+  override async respondHitl(kind: string, id: string, outcome: {
     confirmed?: boolean
     cancelled?: boolean
     comment?: string
@@ -544,7 +546,9 @@ export class ClaudeSdkAgentImpl extends BaseAgentImpl implements AgentInterface
       agentId: this.selfAgentId,
       agentName: this.agentName,
       channelId: this.channelId,
-      pid: null,
+      // claude SDK 是进程内 harness(无子进程 pid):HitlRegisterInput.pid 缺省即"无终端路由"。
+      // 唯一的 pid 消费方 /api/workshop/hitl/respond 只在 omp-dialog 分支用 item.pid 且按真值判定,
+      // 故省略等价于原 pid:null(null 与 undefined 同为假值,协议 AepHitlItem.pid?: number 本不允许 null)。
       method: 'confirm',
       title: `claude 权限请求:${toolName}`,
       detail: JSON.stringify(input).slice(0, 500),

package/server/services/workshop/agents/codex-agent.ts

@@ -27,7 +27,7 @@ import { peerPrompt, systemManual, toolArgsPreview, workerPrompt } from './promp
 import { getHitlRegistry } from './hitl-registry'
 import { harnessSettings } from '../settings'
 import { StdioJsonRpcClient } from './adapters/stdio-jsonrpc'
-import { BaseAgentImpl } from './base-agent'
+import { BaseAgentImpl, type BaseAgentConfigView } from './base-agent'
 import { generateMcpBridgeEnv } from './harness-env'
 
 const log = createLogger('workshop.codex')
@@ -115,7 +115,7 @@ export class CodexAgentImpl extends BaseAgentImpl implements AgentInterface {
     return 'codex'
   }
 
-  protected configRecord(): Record<string, unknown> {
+  protected configRecord(): BaseAgentConfigView {
     return this.config
   }
 
@@ -180,7 +180,7 @@ export class CodexAgentImpl extends BaseAgentImpl implements AgentInterface {
   }
 
   /** HITL 应答:审批请求 → JSON-RPC 应答(decision) */
-  async respondHitl(kind: string, id: string, outcome: {
+  override async respondHitl(kind: string, id: string, outcome: {
     confirmed?: boolean
     cancelled?: boolean
     value?: string

package/server/services/workshop/agents/dsh-agent.ts

@@ -26,7 +26,7 @@ import { peerPrompt, systemManual, toolArgsPreview, workerPrompt } from './promp
 import { getHitlRegistry } from './hitl-registry'
 import { harnessSettings } from '../settings'
 import { StdioJsonRpcClient, type JsonRpcRequestIncoming } from './adapters/stdio-jsonrpc'
-import { BaseAgentImpl } from './base-agent'
+import { BaseAgentImpl, type BaseAgentConfigView } from './base-agent'
 import { generateMcpBridgeEnv } from './harness-env'
 
 const log = createLogger('workshop.dsh')
@@ -106,7 +106,7 @@ export class DshAgentImpl extends BaseAgentImpl implements AgentInterface {
     return 'dsh'
   }
 
-  protected configRecord(): Record<string, unknown> {
+  protected configRecord(): BaseAgentConfigView {
     return this.config
   }
 
@@ -159,7 +159,7 @@ export class DshAgentImpl extends BaseAgentImpl implements AgentInterface {
   }
 
   /** HITL 应答:session/request_permission → allow/reject/cancelled(fail-closed) */
-  async respondHitl(kind: string, id: string, outcome: {
+  override async respondHitl(kind: string, id: string, outcome: {
     confirmed?: boolean
     cancelled?: boolean
     value?: string

package/server/services/workshop/agents/goose-agent.ts

@@ -42,7 +42,6 @@ const spec: OneShotEngineSpec = {
     return args
   },
   promptDelivery: 'arg',
-  promptDelivery: 'arg',
   promptArgFlag: '-t',
   engineEnv: (config) => {
     const key = typeof config.apiKey === 'string' ? config.apiKey : ''

package/server/services/workshop/agents/harness-terminal.ts

@@ -33,9 +33,22 @@ import {
 
 const log = createLogger('workshop.harness-terminal')
 
+/**
+ * 会话 meta:本 hub 只接纳已完成身份绑定的 harness 进程(attachTerminalTap 的入参全为非空字符串),
+ * 故内部用比协议层更窄的类型 —— TermSessionMeta 允许 null 是为了容忍"未绑定进程"的通用视图,
+ * 而此处消费方(hitl-registry.register 要求 agentId: string)不必被迫处理不存在的 null。
+ * 纯类型收窄:任何写入本字段的值本来就只有 attachTerminalTap 一处,且其中无 null。
+ */
+type BoundSessionMeta = Omit<TermSessionMeta, 'agentId' | 'channelId' | 'name' | 'role'> & {
+  agentId: string
+  channelId: string
+  name: string
+  role: 'lead' | 'worker'
+}
+
 /** 终端会话(一个 pid 一份;进程退出后保留缓冲供事后查看) */
 interface TerminalSession {
-  meta: TermSessionMeta
+  meta: BoundSessionMeta
   client: OmpRpcClient
   seq: number
   ring: TermFrame[]

package/server/services/workshop/agents/hermes-agent.ts

@@ -64,7 +64,9 @@ export interface HermesAgentConfig {
 export class HermesAgentImpl extends BaseAgentImpl implements AgentInterface {
   private readonly config: HermesAgentConfig
 
-  private agentRole: 'lead' | 'worker' = 'worker'
+  // agentRole 由 BaseAgentImpl 持有(protected);同名私有声明会遮蔽基类 identity 角色。
+  // 仅收窄可见性声明,运行时代码不变(ensureClient 仍按 ctx.role 同步)。
+  protected override agentRole: 'lead' | 'worker' = 'worker'
   private client: StdioJsonRpcClient | null = null
   private clientStarting: Promise<void> | null = null
   private sessionId: string | null = null
@@ -138,7 +140,7 @@ export class HermesAgentImpl extends BaseAgentImpl implements AgentInterface {
     return 'deferred'
   }
 
-  async respondHitl(kind: string, id: string, outcome: {
+  override async respondHitl(kind: string, id: string, outcome: {
     confirmed?: boolean
     cancelled?: boolean
   }): Promise<void> {

package/server/services/workshop/agents/host-tool-bridge.ts

@@ -21,7 +21,7 @@ import type { WorkspaceTask } from '../types/task'
 import type { RpcHostToolDefinition } from './adapters/omp-rpc-client'
 import { loadHostToolDefs } from '../prompts/loader'
 import { daqRuntimeSettings } from '../settings'
-import { toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMyIndustrialNodes, toolOpsLog, toolRecipeLog, toolRecipeRollback, toolRecipeUpdate, toolRecipeVersions } from './industrial-tools'
+import { toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeLog, toolRecipeRollback, toolRecipeUpdate, toolRecipeVersions } from './industrial-tools'
 import { listPluginTools, pluginOfTool } from './plugin-tools'
 import { getChannelPluginsRepo } from '../db/channel-plugins.repo'
 import { extractTaskMode } from '../runtime/execution-mode'
@@ -186,6 +186,10 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
       return toolDcwControl(identity.agentId, args as { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string })
     case 'dcw_read':
       return toolDcwRead(identity.agentId, args as { node_id?: string })
+    case 'param_control':
+      return toolParamControl(identity.agentId, args as { param?: string, value?: number | string, hypothesis?: string, task_id?: string, line_id?: string })
+    case 'param_read':
+      return toolParamRead(identity.agentId, args as { param?: string, line_id?: string })
     case 'daq_query':
       return toolDaqQuery(identity.agentId, args as Parameters<typeof toolDaqQuery>[1])
     case 'daq_frames':

package/server/services/workshop/agents/industrial-context.ts

@@ -13,6 +13,7 @@ import { getDcwLineRepo } from '../dcw/dcw-line.repo'
 import { getActiveLineRun } from '../dcw/line-run'
 import { findDcwTemplate } from '../dcw/dcw-templates'
 import { getDaqNodeRepo } from '../daq/daq-node.repo'
+import type { DaqNode } from '../daq/daq-node'
 import { findDaqTemplate } from '../daq/daq-templates'
 import { getDeviceTwinRepo } from '../assets/device-twin.repo'
 import { getRecipeRollBackManager } from '../dcw/recipe-rollback-manager'
@@ -159,9 +160,11 @@ export function buildIndustrialContext(agentId: string): string {
     if (twinNames.size > 0) lines.push(`- 关联设备孪生: ${Array.from(twinNames).join(' | ')}`)
     // 当前报警透出(只报本 Agent 绑定的数采节点):越限即报警是工况里最需要
     // Agent 优先感知的事实 —— 不注入的话,Agent 只能靠 daq_query 事后发现
+    // 类型谓词(不收窄就无法在下游安全读 n.name/n.value/n.unit):
+    // `!!n && ...` 与原 `n && ...` 的真值判定完全一致,只补返回类型标注。
     const alarms = daqIds
       .map(id => getDaqNodeRepo().byId(id))
-      .filter(n => n && n.lineId === lineId && n.state === 'alarm')
+      .filter((n): n is DaqNode => !!n && n.lineId === lineId && n.state === 'alarm')
     if (alarms.length > 0) {
       lines.push(`- **当前报警**: ${alarms.map(n => `${n.name} 实时 ${n.value ?? '?'}${n.unit} 处于报警态(越量程或越配方监控窗口)`)},应优先判读(设定-响应滞后 vs 真实异常)并处置`)
     }