agentworkshop 0.7.48 → 0.7.50

package/server/plugins/workshop.ts

@@ -52,6 +52,8 @@ import { AppError } from '../utils/errors'
 import { workshopSettings } from '../services/workshop/settings'
 import { configureAmlRuntime } from '../services/workshop/aml/runtime'
 import { recoverInterruptedJobs, shutdownOrchestrator } from '../services/workshop/aml/job-orchestrator'
+import { envStatus, startCreateVenv } from '../services/workshop/aml/env-manager'
+import { attachOmpPluginBridge } from '../services/workshop/agents/plugin-tools'
 import { startAmlRetentionTimer, stopAmlRetentionTimer } from '../services/workshop/aml/retention'
 
 declare global {
@@ -147,6 +149,25 @@ export default function workshopPlugin(nitroApp: {
   recoverInterruptedJobs()
   startAmlRetentionTimer()
 
+  // 插件 omp 工具注册桥:启动即接管 pending 队列(此前首次 spawn omp agent 才挂桥,
+  // 全新实例未 spawn 前 kb_agent/diag_run 等插件工具会一直"未知工具")
+  attachOmpPluginBridge()
+
+  // AML 训练环境启动预热(用户规约:启动时检测 uv,有则在运行时目录 <configRoot>/aml/.venv
+  // 直接创建训练环境;异步执行不阻塞启动;失败只记日志,可在「运行环境」面板重试)
+  void (async () => {
+    try {
+      const st = await envStatus()
+      if (!st.venv.ready && (st.uv.ok || st.python.ok)) {
+        console.info(`[aml] 启动预热:${st.uv.ok ? `检测到 uv ${st.uv.version}(来源=${st.uv.source}),` : '未检测到 uv,回退 python -m venv,'}后台创建训练环境(${st.dirs.venv})...`)
+        startCreateVenv()
+      }
+    }
+    catch (err) {
+      console.warn('[aml] 启动预热失败(不阻塞启动):', err instanceof Error ? err.message : err)
+    }
+  })()
+
   // 创建 manager → 挂全局单例(后续 REST/A2A/WS 经 getWorkshopManager() 读取)
   const manager = createAgentChannelManager(deps)
   globalThis.__workshopManager = manager

package/server/plugins-builtin/twin-injection-default/index.mjs

@@ -0,0 +1,23 @@
+/** System default Hybrid Twin plugin: the injection greybox is loaded through
+ * the same external provider contract used by third-party industrial scenes. */
+export default {
+  name: 'twin-injection-default',
+  version: '1.0.0',
+  description: '系统自带注塑 Hybrid Twin 灰箱 Provider 与 ScenePack',
+  auth: 'none',
+  async setup(ctx) {
+    const core = await ctx.services.get('twinCore')
+    const provider = core.createInjectionProvider()
+    const scene = core.defaultInjectionScene('twin-injection-default')
+    ctx.twin.registerPhysicsProvider(provider)
+    ctx.twin.registerScenePack({
+      sceneKind: 'injection',
+      sceneSchemaVersion: scene.sceneVersion,
+      compile: () => scene,
+      constraints: scene.constraints,
+      datasetSchema: { controls: scene.controls, states: scene.states, observations: scene.observations },
+    })
+    ctx.logger.info(`默认注塑 Twin Provider 已注册:${provider.manifest.physicsModelId}@${provider.manifest.version}`)
+  },
+
+}

package/server/services/system-config/helpers.ts

@@ -1,41 +1,42 @@
-/**
- * SystemConfigService 的模块级纯工具/常量(原 server/services/system-config.ts 类外声明,含类体之后与类无关的部分)。
- */
-import type { RuntimeConfigView } from './types'
-import type { SystemConfigService } from './facade'
-
-export const PUBLIC_FIELDS: Record<string, string> = {
-  'server.host': 'serverHost',
-  'server.dev.port': 'devPort',
-  'server.prod.port': 'prodPort',
-  'app.title': 'appTitle',
-  'app.description': 'description',
-  'api.baseURL': 'apiBase',
-  'api.timeout': 'apiTimeout',
-  'theme.primaryColor': 'primaryColor',
-  'theme.mode': 'themeMode',
-  'i18n.defaultLocale': 'defaultLocale',
-}
-export const ROOT_FIELDS: Record<string, string> = {
-  'api.pageSize': 'apiPageSize',
-  'api.maxPageSize': 'apiMaxPageSize',
-  'security.approvalGate': 'approvalGate',
-}
-export const DAQ_PREFIX = 'daq.'
-
-export function errorText(err: unknown): string {
-  return String((err as { message?: unknown } | null | undefined)?.message ?? err)
-}
-
-/** 以可写记录视图取 runtimeConfig.daq:缺失/非对象时就地落一个空对象(与原先的兜底赋值等价) */
-export function daqView(rc: RuntimeConfigView): Record<string, unknown> {
-  const current = rc.daq
-  if (current && typeof current === 'object') return current as Record<string, unknown>
-  const created: Record<string, unknown> = {}
-  rc.daq = created
-  return created
-}
-
-declare global {
-  var __systemConfig: SystemConfigService | undefined
-}
+/**
+ * SystemConfigService 的模块级纯工具/常量(原 server/services/system-config.ts 类外声明,含类体之后与类无关的部分)。
+ */
+import type { RuntimeConfigView } from './types'
+import type { SystemConfigService } from './facade'
+
+export const PUBLIC_FIELDS: Record<string, string> = {
+  'server.host': 'serverHost',
+  'server.dev.port': 'devPort',
+  'server.prod.port': 'prodPort',
+  'app.title': 'appTitle',
+  'app.description': 'description',
+  'api.baseURL': 'apiBase',
+  'api.timeout': 'apiTimeout',
+  'theme.primaryColor': 'primaryColor',
+  'theme.mode': 'themeMode',
+  'i18n.defaultLocale': 'defaultLocale',
+}
+export const ROOT_FIELDS: Record<string, string> = {
+  'api.pageSize': 'apiPageSize',
+  'api.maxPageSize': 'apiMaxPageSize',
+  'security.approvalGate': 'approvalGate',
+  'time.timeZone': 'timeZone',
+}
+export const DAQ_PREFIX = 'daq.'
+
+export function errorText(err: unknown): string {
+  return String((err as { message?: unknown } | null | undefined)?.message ?? err)
+}
+
+/** 以可写记录视图取 runtimeConfig.daq:缺失/非对象时就地落一个空对象(与原先的兜底赋值等价) */
+export function daqView(rc: RuntimeConfigView): Record<string, unknown> {
+  const current = rc.daq
+  if (current && typeof current === 'object') return current as Record<string, unknown>
+  const created: Record<string, unknown> = {}
+  rc.daq = created
+  return created
+}
+
+declare global {
+  var __systemConfig: SystemConfigService | undefined
+}

package/server/services/system-config/recompute.ts

@@ -1,66 +1,68 @@
-/**
- * SystemConfigServiceRecompute —— 有效值重算与磁盘重载
- * (拆分层,承 SystemConfigServicePlugins;方法体与原文件逐行一致)
- */
-import { SystemConfigServicePlugins } from './plugins'
-import { readSettings, validateValue } from '@/shared/config/engine.mjs'
-
-export abstract class SystemConfigServiceRecompute extends SystemConfigServicePlugins {
-  /** 全部描述符重算 effective + sources（base = runtimeConfig 构建值）
-   *  并可选地把 live 键应用到 runtimeConfig */
-  protected recompute({ applyLive = true } = {}): void {
-    const effective: Record<string, unknown> = {}
-    const sources: Record<string, 'config.yml' | 'runtime' | 'env'> = {}
-    for (const desc of this.allDescriptors) {
-      let value: unknown
-      let source: 'config.yml' | 'runtime' | 'env'
-      if (this.envOverrides[desc.key] !== undefined) {
-        value = this.envOverrides[desc.key]
-        source = 'env'
-      }
-      else if (this.overrides[desc.key] !== undefined) {
-        value = this.overrides[desc.key]
-        source = 'runtime'
-      }
-      else {
-        const base = this.readBase(desc.key)
-        value = base !== undefined ? base : desc.default
-        source = 'config.yml'
-      }
-      effective[desc.key] = value
-      sources[desc.key] = source
-      if (applyLive || this.overrides[desc.key] !== undefined) this.applyToRuntime(desc.key, value)
-    }
-    this.effective = effective
-    this.sources = sources
-  }
-
-  /** 从磁盘重读设置文件 → 校验 → recompute → 广播 */
-  reloadFromDisk(): { changed: string[] } {
-    const before = this.overrides
-    const raw = readSettings(this.settingsPath)
-    const validated: Record<string, unknown> = {}
-    const changed: string[] = []
-    for (const [key, value] of Object.entries(raw)) {
-      const desc = this.map[key]
-      if (!desc) continue // 未知键：忽略（schema 演进容错）
-      const errs = validateValue(desc, value)
-      if (errs.length) {
-        console.warn(`[system-config] 忽略无效运行时覆盖 ${key}=${JSON.stringify(value)}: ${errs.join('; ')}`)
-        continue
-      }
-      validated[key] = value
-      if (before[key] !== value) changed.push(key)
-    }
-    for (const key of Object.keys(before)) {
-      if (!(key in validated) && key in before) changed.push(key)
-    }
-    this.overrides = validated
-    this.recompute()
-    // 运行语义设置读取层(settings.ts effective 3s TTL)即时失效:live 键热重载零延迟
-    void import('../workshop/settings').then(m => m.invalidateRuntimeSettingsCache()).catch(() => {})
-    return { changed }
-  }
-
-  /* ---------------- 文件监听（外部写入热重载） ---------------- */
-}
+/**
+ * SystemConfigServiceRecompute —— 有效值重算与磁盘重载
+ * (拆分层,承 SystemConfigServicePlugins;方法体与原文件逐行一致)
+ */
+import { SystemConfigServicePlugins } from './plugins'
+import { readSettings, validateValue } from '@/shared/config/engine.mjs'
+import { setConfiguredTimeZone } from '@/shared/local-time.mjs'
+
+export abstract class SystemConfigServiceRecompute extends SystemConfigServicePlugins {
+  /** 全部描述符重算 effective + sources（base = runtimeConfig 构建值）
+   *  并可选地把 live 键应用到 runtimeConfig */
+  protected recompute({ applyLive = true } = {}): void {
+    const effective: Record<string, unknown> = {}
+    const sources: Record<string, 'config.yml' | 'runtime' | 'env'> = {}
+    for (const desc of this.allDescriptors) {
+      let value: unknown
+      let source: 'config.yml' | 'runtime' | 'env'
+      if (this.envOverrides[desc.key] !== undefined) {
+        value = this.envOverrides[desc.key]
+        source = 'env'
+      }
+      else if (this.overrides[desc.key] !== undefined) {
+        value = this.overrides[desc.key]
+        source = 'runtime'
+      }
+      else {
+        const base = this.readBase(desc.key)
+        value = base !== undefined ? base : desc.default
+        source = 'config.yml'
+      }
+      effective[desc.key] = value
+      sources[desc.key] = source
+      if (desc.key === 'time.timeZone' && typeof value === 'string') setConfiguredTimeZone(value)
+      if (applyLive || this.overrides[desc.key] !== undefined) this.applyToRuntime(desc.key, value)
+    }
+    this.effective = effective
+    this.sources = sources
+  }
+
+  /** 从磁盘重读设置文件 → 校验 → recompute → 广播 */
+  reloadFromDisk(): { changed: string[] } {
+    const before = this.overrides
+    const raw = readSettings(this.settingsPath)
+    const validated: Record<string, unknown> = {}
+    const changed: string[] = []
+    for (const [key, value] of Object.entries(raw)) {
+      const desc = this.map[key]
+      if (!desc) continue // 未知键：忽略（schema 演进容错）
+      const errs = validateValue(desc, value)
+      if (errs.length) {
+        console.warn(`[system-config] 忽略无效运行时覆盖 ${key}=${JSON.stringify(value)}: ${errs.join('; ')}`)
+        continue
+      }
+      validated[key] = value
+      if (before[key] !== value) changed.push(key)
+    }
+    for (const key of Object.keys(before)) {
+      if (!(key in validated) && key in before) changed.push(key)
+    }
+    this.overrides = validated
+    this.recompute()
+    // 运行语义设置读取层(settings.ts effective 3s TTL)即时失效:live 键热重载零延迟
+    void import('../workshop/settings').then(m => m.invalidateRuntimeSettingsCache()).catch(() => {})
+    return { changed }
+  }
+
+  /* ---------------- 文件监听（外部写入热重载） ---------------- */
+}

package/server/services/workshop/agents/host-tool-bridge/catalog.ts

@@ -5,32 +5,44 @@
 import type { RpcHostToolDefinition } from '../adapters/omp-rpc-client'
 import { loadHostToolDefs } from '../../prompts/loader'
 import { daqRuntimeSettings } from '../../settings'
+import { HYBRID_TWIN_DIRECT_WRITE_TOOL_NAMES, LEAD_ONLY_TOOL_NAMES } from '../tool-classes'
 import { listPluginTools, pluginOfTool } from '../plugin-tools'
 import { getChannelPluginsRepo } from '../../db/channel-plugins.repo'
-import { isHybridTwinChannel } from '../../aml/twin/channel-profile'
+import { getChannelTwinProfile } from '../../aml/twin/channel-profile'
+import { amlTwinFeatureFlags } from '../../aml/twin/feature-flags'
 
 /** host tool 定义(外置 .AgentWorkShop/prompts/host-tools.json;加载器缓存) */
 export const HOST_TOOLS: RpcHostToolDefinition[] = loadHostToolDefs()
 
-/** 仅 lead 可见的工具名(dispatch/调度/团队管理面 + AML 模型治理面;worker 注册时剔除,压缩工具上下文) */
-export const LEAD_ONLY_TOOL_NAMES = new Set([
-  'submit_task',
-  'dispatch_task',
-  'get_queue_overview',
-  'read_channel_mail',
-  'reassign_task',
-  'update_task',
-  'create_team_agent',
-  'update_team_agent',
-  'remove_team_agent',
-  'aml_model_promote',
-])
+// 工具分类常量已上收零依赖叶子模块 agents/tool-classes(权限面/测试在 nitro 之外可用);此处 re-export 保持导入路径兼容
+export { LEAD_ONLY_TOOL_NAMES, HYBRID_TWIN_DIRECT_WRITE_TOOL_NAMES } from '../tool-classes'
 
 /** Hybrid Twin 工具只对显式 profile=hybrid_twin 的 Channel 注入。 */
 export const HYBRID_TWIN_TOOL_NAMES = new Set([
-  'twin_scene_read', 'twin_snapshot_create', 'twin_trial_run', 'mpc_optimize', 'twin_gate_evaluate',
+  'twin_provider_catalog', 'twin_scene_discover', 'twin_scene_compile', 'twin_scene_freeze', 'twin_physics_spec_draft', 'twin_physics_spec_validate', 'twin_physics_spec_compile', 'twin_scene_read', 'twin_snapshot_create', 'twin_trial_run', 'mpc_optimize', 'twin_gate_evaluate',
+])
+
+/**
+ * AML 解耦(2026-09-26 计划 v3):训练 Channel 与工艺优化 Channel 工具面。
+ * 训练面=建模/训练/评估(数据集/作业/谱系/场景编译/物理 spec/建模任务);
+ * 优化面=探索/验证/寻优(快照/试验/门禁/MPC/贝叶斯/探索步)。
+ * 两面互斥注入:训练 Channel 无产线写与 MPC;优化 Channel 无训练族(边训边优被结构禁止)。
+ */
+export const AML_TRAINING_TOOL_NAMES = new Set([
+  'aml_node_catalog', 'aml_dataset_build', 'aml_dataset_stats', 'aml_job_submit', 'aml_job_status', 'aml_job_logs', 'aml_job_cancel', 'aml_leaderboard', 'aml_model_find', 'aml_model_reference', 'twin_provider_catalog', 'twin_scene_discover', 'twin_scene_compile', 'twin_scene_freeze', 'twin_physics_spec_draft', 'twin_physics_spec_validate', 'twin_physics_spec_compile', 'twin_scene_read', 'twin_calibration_request', 'aml_training_plan_list', 'aml_training_plan_create', 'aml_training_plan_train',
+])
+
+export const AML_OPTIMIZATION_TOOL_NAMES = new Set([
+  'twin_snapshot_create', 'twin_trial_run', 'mpc_optimize', 'twin_gate_evaluate', 'optimization_explore', 'twin_bayes_optimize',
 ])
 
+/** 仅 aml 模式(已绑定模型)可执行的工具;探索模式下 dispatch 层 fail-closed 拒绝。 */
+export const AML_MODEL_BACKED_TOOL_NAMES = new Set([
+  'twin_trial_run', 'mpc_optimize', 'twin_bayes_optimize',
+])
+
+/** AML 治理/重负载动作之外,产线直接写工具的声明源已上收 agents/tool-classes(见文件头 re-export)。 */
+
 /** 占位符动态注入:工具描述里的运行时配置值(每次装配实时计算,配置热重载后 Agent 拿到新值) */
 function applyDescriptionPlaceholders(tools: RpcHostToolDefinition[]): RpcHostToolDefinition[] {
   let q: { defaultBucketMs: number, minBucketMs: number } | null = null
@@ -54,15 +66,35 @@ function applyDescriptionPlaceholders(tools: RpcHostToolDefinition[]): RpcHostTo
  * 按角色装配 host tools:lead = 全量;worker = 剔除 lead 专属(执行面 + 通信面 + 记忆面);
  * 尾部合并插件注册工具(roles 过滤,缺省双角色可用;channelId 给定且该团队有显式
  * 插件开关时,关闭的插件其工具不注入 —— 防不需要插件的 channel 上下文被污染)。
+ * AML 解耦:aml_training/aml_optimization Channel 按面注入(训练族与优化族互斥);
+ * hybrid_twin 保持全功能面;legacy 无 twin 工具。
  * 全 harness 共用:omp 经 set_host_tools 下发;其余引擎经 MCP 桥 tools/list 拉取。
  */
 export function hostToolsForRole(role: 'lead' | 'worker', channelId?: string): RpcHostToolDefinition[] {
   const base = role === 'lead'
     ? HOST_TOOLS
     : HOST_TOOLS.filter(t => !LEAD_ONLY_TOOL_NAMES.has(t.name))
-  const hybrid = channelId ? isHybridTwinChannel(channelId) : false
-  const scoped = hybrid ? base : base.filter(t => !HYBRID_TWIN_TOOL_NAMES.has(t.name))
-  const out = [...scoped]
+  const profile = channelId ? getChannelTwinProfile(channelId) : null
+  const kind = profile?.profile ?? 'legacy'
+  const flags = amlTwinFeatureFlags()
+  let scoped: RpcHostToolDefinition[]
+  if (kind === 'aml_training') {
+    // 训练面:剔除优化族(gate 保留 —— 模型晋升前需门禁评估);训练族显式补齐(host-tools.json 全量已含)
+    scoped = base.filter(t => !AML_OPTIMIZATION_TOOL_NAMES.has(t.name) || t.name === 'twin_gate_evaluate')
+  }
+  else if (kind === 'aml_optimization') {
+    // 优化面:剔除训练族(gate 保留 —— 绑定校验需门禁);优化族显式补齐(含新工具)
+    scoped = base.filter(t => !AML_TRAINING_TOOL_NAMES.has(t.name) || t.name === 'twin_gate_evaluate')
+  }
+  else {
+    const hybrid = channelId ? kind === 'hybrid_twin' : false
+    scoped = hybrid ? base : base.filter(t => !HYBRID_TWIN_TOOL_NAMES.has(t.name))
+  }
+  // 直写工具守卫:hybrid 沿用 bounded_auto 开关;工艺优化 Channel 一律不给 dcw 直写
+  // (真实写入统一走 optimization_explore 的治理链),训练 Channel 无写语义。
+  const writesBlocked = Boolean(profile?.profile === 'hybrid_twin' && (!flags.governedWriteEnabled || !flags.boundedAutoEnabled || profile.controlPolicy !== 'bounded_auto'))
+    || kind === 'aml_optimization' || kind === 'aml_training'
+  const out = writesBlocked ? scoped.filter(t => !HYBRID_TWIN_DIRECT_WRITE_TOOL_NAMES.has(t.name)) : [...scoped]
   // 团队级插件开关:显式配置过的 channel 按行过滤;未配置(无行)= 全启用,向后兼容
   const channelOff = channelId
     ? getChannelPluginsRepo().explicitFor(channelId)

package/server/services/workshop/agents/host-tool-bridge/dispatch.ts

@@ -11,7 +11,9 @@
  *  - 工业工具族在 `getWorkspace()` 门控**之前**分流(只依赖 agentId)。
  */
 import { getChannelPluginsRepo } from '../../db/channel-plugins.repo'
-import { isHybridTwinChannel } from '../../aml/twin/channel-profile'
+import { getChannelTwinProfile, modelBackedToolPolicyFor, type AmlChannelProfileKind } from '../../aml/twin/channel-profile'
+import { AML_TRAINING_TOOL_NAMES, AML_MODEL_BACKED_TOOL_NAMES } from './catalog'
+import { twinWriteGuard } from '../../aml/twin/feature-flags'
 import { listPluginTools, pluginOfTool } from '../plugin-tools'
 import type { HostToolBridgeContext, HostToolCall, HostToolResult } from './types'
 import { INDUSTRIAL_TOOL_NAMES, dispatchIndustrialTool } from './tools/industrial'
@@ -52,14 +54,57 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
   }
   const args = req.arguments ?? {}
 
-  if ((req.toolName.startsWith('twin_') || req.toolName === 'mpc_optimize') && !isHybridTwinChannel(identity.channelId)) {
-    return { text: `Channel ${identity.channelId} 未启用 hybrid_twin profile，Twin/MPC 工具拒绝执行。`, isError: true }
+  // AML 解耦门控(fail-closed,与注入过滤同源;目录隐藏不是安全边界):
+  //  - legacy:全部 twin/explore 工具拒绝(原始行为);
+  //  - trial/mpc/bayes:仅 hybrid_twin,或 aml_optimization 的 aml 模式(已绑定模型);
+  //    探索模式给「探索阶段」明确指引而非裸报错;
+  //  - optimization_explore:仅工艺优化 Channel;
+  //  - 场景/spec/校准请求族:hybrid_twin + 训练 Channel;
+  //  - 训练族(aml_job/dataset 等):工艺优化 Channel 拒绝(边训边优被结构禁止)。
+  const twinKind: AmlChannelProfileKind = getChannelTwinProfile(identity.channelId).profile
+  const isTwinTool = req.toolName.startsWith('twin_') || ['mpc_optimize', 'optimization_explore'].includes(req.toolName)
+  if (isTwinTool) {
+    const isSceneFamily = /^twin_(scene|physics|provider|calibration)/.test(req.toolName)
+    if (req.toolName === 'optimization_explore') {
+      if (twinKind !== 'aml_optimization') {
+        return { text: `optimization_explore 仅适用于工艺优化 Channel(当前 profile=${twinKind})。`, isError: true }
+      }
+    }
+    else if (AML_MODEL_BACKED_TOOL_NAMES.has(req.toolName)) {
+      const policy = modelBackedToolPolicyFor(identity.channelId)
+      if (!policy.allowed) {
+        return {
+          text: policy.reason === 'EXPLORATION_MODE_NO_MODEL'
+            ? `当前为探索模式:Channel 尚未绑定 AML 模型,${req.toolName}(孪生验证/贝叶斯寻优)暂不可用。\n请继续用 optimization_explore 做真实激励探索并积累数据;待 AML 训练出合格模型并在 Channel 设置中绑定后,本工具自动启用。`
+            : `${req.toolName} 要求模型受控状态(hybrid_twin 或 aml_optimization 的 aml 模式;当前 ${twinKind}${policy.reason ? `/${policy.reason}` : ''})。`,
+          isError: true,
+        }
+      }
+    }
+    else if (isSceneFamily) {
+      if (twinKind !== 'hybrid_twin' && twinKind !== 'aml_training') {
+        return { text: `场景/物理 spec 工具仅对 hybrid_twin 或训练 Channel(aml_training)开放(当前 profile=${twinKind})。`, isError: true }
+      }
+    }
+    else if (twinKind === 'legacy') {
+      return { text: `Channel ${identity.channelId} 未启用 Twin profile，Twin/MPC 工具拒绝执行。`, isError: true }
+    }
+  }
+  if (AML_TRAINING_TOOL_NAMES.has(req.toolName) && twinKind === 'aml_optimization') {
+    return { text: `工艺优化 Channel 不承担建模与训练(职责解耦):${req.toolName} 仅限 AML 训练 Channel 使用。请在此专注 goal 探索与模型驱动寻优。`, isError: true }
+  }
+
+  // 所有真实写入口在统一分发层再做一次服务端 fail-closed 守卫；工具目录隐藏不是安全边界。
+  if (['dcw_control', 'param_control', 'dcw_rollback', 'recipe_update', 'recipe_rollback'].includes(req.toolName)) {
+    const profile = getChannelTwinProfile(identity.channelId)
+    const guard = twinWriteGuard(identity.channelId, profile)
+    if (!guard.allowed) return { text: `${guard.code}: ${guard.message}`, isError: true }
   }
 
   // 工业工具族不依赖 workspace(只按 agentId 查绑定与节点),先于 workspace 门控执行 ——
   // 否则 worker 首回合前的 REST/MCP 直调(my_industrial_nodes 等)会被误拒
   if (INDUSTRIAL_TOOL_NAMES.has(req.toolName)) {
-    return await dispatchIndustrialTool(identity.agentId, req.toolName, args)
+    return await dispatchIndustrialTool(identity.agentId, req.toolName, args, identity.channelId)
   }
 
   const ws = ctx.getWorkspace()
@@ -131,6 +176,7 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
       case 'aml_job_logs':
       case 'aml_job_cancel':
       case 'aml_leaderboard':
+      case 'aml_model_find':
       case 'aml_model_promote':
       case 'aml_model_reference':
       case 'twin_scene_read':
@@ -154,7 +200,7 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
       case 'recipe_versions':
       case 'recipe_update':
       case 'recipe_rollback':
-        return await dispatchIndustrialTool(identity.agentId, req.toolName, args)
+        return await dispatchIndustrialTool(identity.agentId, req.toolName, args, identity.channelId)
     }
     return { text: `未知工具: ${req.toolName}`, isError: true }
   }

package/server/services/workshop/agents/host-tool-bridge/tools/industrial.ts

@@ -9,9 +9,9 @@
  * 该族**不依赖 workspace**,由 dispatch 在 workspace 门控之前分流(保持原分发顺序)。
  */
 import type { HostToolResult } from '../types'
-import { toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeLog, toolRecipeRollback, toolRecipeUpdate, toolRecipeVersions, toolTwinSceneRead, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinCalibrationRequest } from '../../industrial'
+import { toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeLog, toolRecipeRollback, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest } from '../../industrial'
 
-type IndustrialToolHandler = (agentId: string, args: Record<string, unknown>) => Promise<HostToolResult>
+type IndustrialToolHandler = (agentId: string, args: Record<string, unknown>, channelId?: string) => Promise<HostToolResult>
 
 /** 工具名 → 转发处理器(顺序与原 dispatch 首个 switch 的分支顺序一致) */
 const INDUSTRIAL_HANDLERS = new Map<string, IndustrialToolHandler>([
@@ -24,17 +24,30 @@ const INDUSTRIAL_HANDLERS = new Map<string, IndustrialToolHandler>([
   ['aml_job_logs', (agentId, args) => toolAmlJobLogs(agentId, args as Parameters<typeof toolAmlJobLogs>[1])],
   ['aml_job_cancel', (agentId, args) => toolAmlJobCancel(agentId, args as Parameters<typeof toolAmlJobCancel>[1])],
   ['aml_leaderboard', (agentId, args) => toolAmlLeaderboard(agentId, args as Parameters<typeof toolAmlLeaderboard>[1])],
+  ['aml_model_find', (agentId, args) => toolAmlModelFind(agentId, args as Parameters<typeof toolAmlModelFind>[1])],
   ['aml_model_promote', (agentId, args) => toolAmlModelPromote(agentId, args as Parameters<typeof toolAmlModelPromote>[1])],
   ['aml_model_reference', (agentId, args) => toolAmlModelReference(agentId, args as Parameters<typeof toolAmlModelReference>[1])],
+  ['aml_training_plan_list', (agentId, args) => toolAmlTrainingPlanList(agentId, args)],
+  ['aml_training_plan_create', (agentId, args) => toolAmlTrainingPlanCreate(agentId, args as Parameters<typeof toolAmlTrainingPlanCreate>[1])],
+  ['aml_training_plan_train', (agentId, args) => toolAmlTrainingPlanTrain(agentId, args as Parameters<typeof toolAmlTrainingPlanTrain>[1])],
+  ['twin_provider_catalog', (agentId, args) => toolTwinProviderCatalog(agentId, args)],
+  ['twin_scene_discover', (agentId, args) => toolTwinSceneDiscover(agentId, args)],
+  ['twin_scene_compile', (agentId, args) => toolTwinSceneCompile(agentId, args)],
+  ['twin_scene_freeze', (agentId, args) => toolTwinSceneFreeze(agentId, args)],
+  ['twin_physics_spec_draft', (agentId, args) => toolTwinPhysicsSpecDraft(agentId, args)],
+  ['twin_physics_spec_validate', (agentId, args) => toolTwinPhysicsSpecValidate(agentId, args)],
+  ['twin_physics_spec_compile', (agentId, args) => toolTwinPhysicsSpecCompile(agentId, args)],
   ['twin_scene_read', (agentId, args) => toolTwinSceneRead(agentId, args)],
   ['twin_snapshot_create', (agentId, args) => toolTwinSnapshotCreate(agentId, args)],
   ['twin_trial_run', (agentId, args) => toolTwinTrialRun(agentId, args)],
   ['mpc_optimize', (agentId, args) => toolMpcOptimize(agentId, args)],
   ['twin_gate_evaluate', (agentId, args) => toolTwinGateEvaluate(agentId, args)],
   ['twin_calibration_request', (agentId, args) => toolTwinCalibrationRequest(agentId, args)],
-  ['dcw_control', (agentId, args) => toolDcwControl(agentId, args as { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string })],
+  ['optimization_explore', (agentId, args, channelId) => toolOptimizationExplore(agentId, args as Parameters<typeof toolOptimizationExplore>[1], channelId)],
+  ['twin_bayes_optimize', (agentId, args) => toolTwinBayesOptimize(agentId, args)],
+  ['dcw_control', (agentId, args, channelId) => toolDcwControl(agentId, args as { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string }, channelId)],
   ['dcw_read', (agentId, args) => toolDcwRead(agentId, args as { node_id?: string })],
-  ['param_control', (agentId, args) => toolParamControl(agentId, args as { param?: string, value?: number | string, hypothesis?: string, task_id?: string, line_id?: string })],
+  ['param_control', (agentId, args, channelId) => toolParamControl(agentId, args as { param?: string, value?: number | string, hypothesis?: string, task_id?: string, line_id?: string }, channelId)],
   ['param_read', (agentId, args) => toolParamRead(agentId, args as { param?: string, line_id?: string })],
   ['daq_query', (agentId, args) => toolDaqQuery(agentId, args as Parameters<typeof toolDaqQuery>[1])],
   ['daq_frames', (agentId, args) => toolDaqFrames(agentId, args as Parameters<typeof toolDaqFrames>[1])],
@@ -57,8 +70,8 @@ export const INDUSTRIAL_TOOL_NAMES: ReadonlySet<string> = new Set(INDUSTRIAL_HAN
  * 调用方先经 INDUSTRIAL_TOOL_NAMES 判断,故「未登记的工具名」不可达 —— 仍然显式拒绝,
  * 避免静默返回与未知工具混淆。
  */
-export function dispatchIndustrialTool(agentId: string, toolName: string, args: Record<string, unknown>): Promise<HostToolResult> {
+export function dispatchIndustrialTool(agentId: string, toolName: string, args: Record<string, unknown>, channelId?: string): Promise<HostToolResult> {
   const handler = INDUSTRIAL_HANDLERS.get(toolName)
   if (!handler) return Promise.reject(new Error(`未知工业工具: ${toolName}`))
-  return handler(agentId, args)
+  return handler(agentId, args, channelId)
 }