agentworkshop 0.7.48 → 0.7.50

package/server/services/workshop/plugin-driver-registry.ts

@@ -0,0 +1,108 @@
+/**
+ * 插件驱动注册表工厂 —— 数采(daq)与写控(dcw)两侧共用的插件驱动装配语义:
+ * 注册(同名覆盖内置时告警)/ meta 自描述目录维护(重注册不带 meta 时一并清除)/
+ * 清空(插件宿主热重载前调用)/ 目录合并(内置 + 插件,同名插件条目覆盖内置)。
+ *
+ * globalThis 键由调用方指定(防 HMR 双实例,两侧沿用既有键名);
+ * 插件驱动在 driver 上携带可选 meta(label/status/configFields)进自描述目录。
+ */
+import type { DriverConfigField } from '../../../shared/daq-protocol'
+
+export interface PluginDriverMetaLike {
+  kind: string
+  label: string
+  status: 'builtin' | 'real' | 'planned'
+  configFields?: DriverConfigField[]
+  /** true = 来自插件协议插件(前端展示「插件」徽标) */
+  plugin: true
+}
+
+export interface BuiltinCatalogEntry {
+  kind: string
+  label: string
+  status: 'builtin' | 'real' | 'planned'
+  configFields: DriverConfigField[]
+}
+
+/** 插件驱动最小结构(kind + 可选自描述 meta) */
+interface DriverWithOptionalMeta {
+  kind: string
+  meta?: { label?: unknown, status?: unknown, configFields?: unknown }
+}
+
+export function createPluginDriverRegistry<T extends DriverWithOptionalMeta>(opts: {
+  /** 内置 kind 集合(对象映射或 Set;插件同名注册时触发覆盖告警) */
+  builtinKinds: Readonly<Record<string, unknown>> | ReadonlySet<string>
+  /** globalThis 字段名(驱动表) */
+  driversKey: string
+  /** globalThis 字段名(meta 目录表) */
+  metasKey: string
+  /** 覆盖内置时的告警回调(入参 = kind;文案由调用方定,daq/dcw 措辞各异) */
+  onOverrideBuiltin: (kind: string) => void
+}) {
+  const g = globalThis as typeof globalThis & Record<string, unknown>
+  const isBuiltin = (kind: string): boolean =>
+    opts.builtinKinds instanceof Set ? opts.builtinKinds.has(kind) : kind in opts.builtinKinds
+
+  function pluginRegistry(): Map<string, T> {
+    if (!(g[opts.driversKey] instanceof Map)) g[opts.driversKey] = new Map<string, T>()
+    return g[opts.driversKey] as Map<string, T>
+  }
+
+  function pluginMetaRegistry(): Map<string, PluginDriverMetaLike> {
+    if (!(g[opts.metasKey] instanceof Map)) g[opts.metasKey] = new Map<string, PluginDriverMetaLike>()
+    return g[opts.metasKey] as Map<string, PluginDriverMetaLike>
+  }
+
+  function register(driver: T): void {
+    if (isBuiltin(driver.kind)) opts.onOverrideBuiltin(driver.kind)
+    pluginRegistry().set(driver.kind, driver)
+    const meta = (driver as DriverWithOptionalMeta).meta
+    if (meta && typeof meta.label === 'string') {
+      pluginMetaRegistry().set(driver.kind, {
+        kind: driver.kind,
+        label: meta.label,
+        status: meta.status === 'builtin' || meta.status === 'planned' ? meta.status : 'real',
+        configFields: Array.isArray(meta.configFields) ? meta.configFields as DriverConfigField[] : [],
+        plugin: true,
+      })
+    }
+    else {
+      // 同名驱动重注册(热重载)可能这次不带 meta:旧 meta 一并清除,保持两边一致
+      pluginMetaRegistry().delete(driver.kind)
+    }
+  }
+
+  function listKeys(): string[] {
+    return [...pluginRegistry().keys()]
+  }
+
+  function listMetas(): PluginDriverMetaLike[] {
+    return [...pluginMetaRegistry().values()]
+  }
+
+  /** 清空插件驱动与自描述目录(插件宿主热重载前调用;停用/卸载的插件驱动随之失效) */
+  function clear(): void {
+    pluginRegistry().clear()
+    pluginMetaRegistry().clear()
+  }
+
+  /** 目录合并(内置目录 + 插件自描述;同名插件条目覆盖内置并标记 plugin) */
+  function mergedCatalog(builtin: ReadonlyArray<BuiltinCatalogEntry>): Array<BuiltinCatalogEntry & { plugin?: boolean }> {
+    const out: Array<BuiltinCatalogEntry & { plugin?: boolean }> = builtin.map(d => ({
+      kind: d.kind,
+      label: d.label,
+      status: d.status,
+      configFields: d.configFields,
+    }))
+    for (const m of listMetas()) {
+      const i = out.findIndex(d => d.kind === m.kind)
+      const entry = { kind: m.kind, label: m.label, status: m.status, configFields: m.configFields ?? [], plugin: true }
+      if (i >= 0) out[i] = entry
+      else out.push(entry)
+    }
+    return out
+  }
+
+  return { pluginRegistry, pluginMetaRegistry, register, listKeys, listMetas, clear, mergedCatalog }
+}

package/server/services/workshop/runtime/manager/admin-channel.ts

@@ -139,6 +139,19 @@ export abstract class ManagerAdminChannel extends ManagerNotifications {
     return updated!
   }
 
+  /** AML 解耦:读 Channel 的用户场景提示(prompt-composer 组装输入) */
+  channelScenarioPrompt(channelId: string): string {
+    return this.deps.repos.channels.findById(channelId)?.scenarioPrompt ?? ''
+  }
+
+  /** AML 解耦:twin-profile 变更(模式/绑定模型)后回收成员,重新装配注入新工况提示词 */
+  async recycleChannelForTwinProfile(channelId: string): Promise<void> {
+    const channel = this.deps.repos.channels.findById(channelId)
+    if (!channel) return
+    await this.unloadChannelAgents(channelId)
+    if (channel.leadAgentId) this.ensureChannelActive(channelId)
+  }
+
   protected async unloadChannelAgents(channelId: string): Promise<void> {
     const cr = this.channels.get(channelId)
     if (cr) {

package/server/services/workshop/runtime/manager/channel-templates.ts

@@ -101,7 +101,7 @@ export abstract class ManagerChannelTemplates extends ManagerTeams {
    * 场景/工作目录照搬;lead 内联创建;成员逐个克隆(引用模板时校验操作者可读)。
    * 返回 createChannel 同构结果 + 成员实例数。
    */
-  async instantiateChannelTemplate(templateId: string, user: ActingUser, nameOverride?: string, options?: { scene?: Record<string, unknown>, promptVariables?: Record<string, unknown>, objective?: Record<string, unknown>, toolProfile?: string, controlPolicy?: 'recommendation_only' | 'hitl_governed' | 'bounded_auto' }): Promise<{ channelId: string, workspace: string, agentCount: number, leadAgentId?: string, agents: Array<{ id: string, templateId?: string | null, name: string, role: string }> }> {
+  async instantiateChannelTemplate(templateId: string, user: ActingUser, nameOverride?: string, options?: { scene?: Record<string, unknown>, promptVariables?: Record<string, unknown>, objective?: Record<string, unknown>, toolProfile?: string, controlPolicy?: 'recommendation_only' | 'hitl_governed' | 'bounded_auto', providerId?: string, providerVersion?: string, providerHash?: string, scenePackId?: string, optimizationMode?: 'exploration' | 'aml', boundModelId?: string }): Promise<{ channelId: string, workspace: string, agentCount: number, leadAgentId?: string, agents: Array<{ id: string, templateId?: string | null, name: string, role: string }> }> {
     const tpl = this.deps.repos.channelTemplates.findById(templateId)
     if (!tpl) throw new AppError(404, 'NOT_FOUND', `Channel 模板不存在: ${templateId}`)
     this.requireTemplateReadable(tpl, user, 'Channel 模板')
@@ -139,7 +139,34 @@ export abstract class ManagerChannelTemplates extends ManagerTeams {
     const hybrid = options?.toolProfile === 'hybrid_twin' || tpl.id === 'chtpl-hybrid-twin-mpc-default'
     if (hybrid) {
       const scene = options?.scene ?? (defaultInjectionScene('channel-template') as unknown as Record<string, unknown>)
-      await Promise.resolve(setHybridChannelProfile({ channelId: created.channelId, profile: 'hybrid_twin', capability: { twin: true, amlTraining: true, trial: true, mpcRecommendation: true }, sceneId: String(scene.sceneId ?? 'injection-hold-control'), sceneVersion: String(scene.sceneVersion ?? '1.0.0'), sceneContract: scene, objective: options?.objective ?? {}, controlPolicy: options?.controlPolicy ?? 'recommendation_only', createdBy: user.id }))
+      await Promise.resolve(setHybridChannelProfile({ channelId: created.channelId, profile: 'hybrid_twin', capability: { twin: true, amlTraining: true, trial: true, mpcRecommendation: true, explorationWrite: true, phase: 'exploration', controlMode: 'safe_small_step' }, sceneId: String(scene.sceneId ?? 'injection-hold-control'), sceneVersion: String(scene.sceneVersion ?? '1.0.0'), sceneContract: scene, objective: options?.objective ?? {}, controlPolicy: options?.controlPolicy ?? 'recommendation_only', providerId: options?.providerId ?? String((scene as Record<string, unknown>).physicsProfileId ?? 'injection-greybox-v1'), providerVersion: options?.providerVersion ?? '1.0.0', providerHash: options?.providerHash, scenePackId: options?.scenePackId ?? String(scene.sceneId ?? 'injection-hold-control'), createdBy: user.id }))
+    }
+    // AML 解耦模板:训练通道 / 工艺优化通道(实例化时可带 scene/objective/optimizationMode/boundModelId)
+    const trainingProfile = options?.toolProfile === 'aml_training' || tpl.id === 'chtpl-aml-training-default'
+    const optimizationProfile = options?.toolProfile === 'aml_optimization' || tpl.id === 'chtpl-aml-optimization-default'
+    if (trainingProfile || optimizationProfile) {
+      const scene = options?.scene ?? (defaultInjectionScene('channel-template') as unknown as Record<string, unknown>)
+      const sceneId = String(scene.sceneId ?? 'injection-hold-control')
+      const sceneVersion = String(scene.sceneVersion ?? '1.0.0')
+      const mode = optimizationProfile ? (options?.optimizationMode === 'aml' ? 'aml' : 'exploration') : undefined
+      await Promise.resolve(setHybridChannelProfile({
+        channelId: created.channelId,
+        profile: trainingProfile ? 'aml_training' : 'aml_optimization',
+        capability: trainingProfile
+          ? { datasets: true, training: true, evaluation: true, plans: true, phase: 'training' }
+          : { exploration: true, modelBinding: mode === 'aml', trial: mode === 'aml', mpcRecommendation: mode === 'aml', bayes: mode === 'aml', phase: mode === 'aml' ? 'model_backed' : 'exploration' },
+        sceneId, sceneVersion, sceneContract: scene,
+        objective: options?.objective ?? {},
+        controlPolicy: options?.controlPolicy ?? 'recommendation_only',
+        providerId: options?.providerId ?? String((scene as Record<string, unknown>).physicsProfileId ?? 'injection-greybox-v1'),
+        providerVersion: options?.providerVersion ?? '1.0.0',
+        providerHash: options?.providerHash,
+        scenePackId: options?.scenePackId ?? sceneId,
+        optimizationMode: mode,
+        boundModelId: options?.boundModelId,
+        boundAt: options?.boundModelId ? new Date().toISOString() : undefined,
+        createdBy: user.id,
+      }))
     }
     return { channelId: created.channelId, workspace: created.workspace, agentCount, leadAgentId: created.leadAgentId, agents }
   }

package/server/services/workshop/runtime/manager/runtime-wiring.ts

@@ -13,6 +13,7 @@ import { Mailbox } from '../mailbox'
 import { SchedulerLoop } from '../scheduler-loop'
 import { buildMessage, instanceToAgentInfo, log, parseChannelLlm, rowToChannelMail, runtimeKey } from './helpers'
 import { harnessContinuityEnabled, workshopSettings } from '../../settings'
+import { composeChannelSystemPrompt } from '../../aml/twin/prompt-composer'
 
 export abstract class ManagerRuntimeWiring extends ManagerBus {
   /** 按实例装配 AgentRuntime(每个实例一个独立运行时) */
@@ -29,6 +30,13 @@ export abstract class ManagerRuntimeWiring extends ManagerBus {
     const scenarioPrompt = this.deps.repos.channels.findById(m.channelId)?.scenarioPrompt ?? ''
     const configWithCtx: Record<string, unknown> = { ...agent.config }
     if (scenarioPrompt) configWithCtx.scenarioPrompt = scenarioPrompt
+    // AML 解耦:训练/工艺优化 Channel 的动态工况提示词(模式+goal+绑定节点调试元数据组装;
+    // 模式/绑定变更经 twin-profile PATCH 回收成员运行时生效,与 scenarioPrompt 同链路)。
+    try {
+      const composed = composeChannelSystemPrompt(m.channelId, agent.id, scenarioPrompt)
+      if (composed) configWithCtx.systemPromptPrefix = composed
+    }
+    catch { /* 非工业 Channel/组装依赖未就绪:不注入 */ }
     if (chWorkspace.length > 0) configWithCtx.cwd = chWorkspace
     // channel 级默认 LLM(v11):成员 config 未显式指定 model/provider 时按引擎注入;
     // effort 语义按引擎映射(omp thinkingLevel / opencode variant / codex effort / dsh 暂不支持)

package/server/services/workshop/runtime/manager/state.ts

@@ -221,12 +221,18 @@ export abstract class ManagerState extends ManagerContracts {
     }
   }
 
+  /**
+   * 按需装配频道(lead 运行时 + SchedulerLoop,幂等)。实现位于装配层
+   * `ManagerRuntimeWiring.ensureChannelActive`;基类只声明,调用点在任务事件钩子里。
+   */
+  protected abstract ensureChannelActive(channelId: string): void
+
   protected getTaskEngine(): TaskEngine {
     if (!this.taskEngine) {
       const factory = this.deps.taskEngineFactory ?? (r => new TaskEngineImpl(r, {
         onTaskChange: (e) => {
-          // 全字段转发(含 progress):TaskEngine 内部进度变化(applyEvent 分块折算 /
-          // complete 置 100)须经总线 → WS task.progress 实时同步,否则前端实体进度滞后
+        // 全字段转发(含 progress):TaskEngine 内部进度变化(applyEvent 分块折算 /
+        // complete 置 100)须经总线 → WS task.progress 实时同步,否则前端实体进度滞后
           this.buses.get(e.channelId)?.notifyTask({
             taskId: e.taskId,
             state: e.state,
@@ -237,8 +243,19 @@ export abstract class ManagerState extends ManagerContracts {
             reassignFrom: e.reassignFrom,
             reason: e.reason,
           })
-          // 事件驱动调度:任务状态变化即唤醒该频道调度循环(空闲退避即刻恢复快节奏)
-          this.channels.get(e.channelId)?.scheduler?.wake()
+          // 事件驱动调度:任务状态变化即唤醒该频道调度循环(空闲退避即刻恢复快节奏)。
+          //
+          // ⚠️ 只 wake 不够:lead 运行时因空闲被清扫卸载后 `cr.scheduler` 会被置空
+          // (见 runtime-wiring.attachScheduler 注释),此后新建的根任务只落库,
+          // `scheduler?.wake()` 变成空操作 —— 任务永久停在 SUBMITTED,直到
+          // ROOT_TIMEOUT(~18 分钟)被判 FAILED(实测复现:mock Channel 第一条根任务
+          // COMPLETED,后续两条一直 SUBMITTED;omp Channel 同样如此)。
+          // `reviveScheduler` 只在"lead 正在被装配"的窗口里被调用,没有别的事件会重建
+          // 调度循环,所以这里补上**重新挂载**的分支:没有 scheduler 就按需装配 lead +
+          // 调度循环(ensureChannelActive 幂等;频道停用/无 lead 时内部直接返回)。
+          const cr = this.channels.get(e.channelId)
+          if (cr?.scheduler) cr.scheduler.wake()
+          else if (e.state === 'SUBMITTED' || e.state === 'ASSIGNED') ((this as unknown) as { ensureChannelActive: (channelId: string) => void }).ensureChannelActive(e.channelId)
         },
       }))
       this.taskEngine = factory({ tasks: this.deps.repos.tasks, messages: this.deps.repos.messages })

package/server/services/workshop/runtime/permission-scope.ts

@@ -1,81 +1,79 @@
-/**
- * 人类发起者权限上下文的服务端判定(主计划 §13.3)。
- *
- * 合同(类型/解析/交集)在 `shared/workshop-protocol.ts`;本模块只放**服务端执行语义**:
- * 哪些工具属于「管理面」、哪些属于「高危写」,以及给定作用域下是否放行。
- *
- * 分类**不发明新清单**,而是复用既有授权概念:
- *  - 管理面 = `LEAD_ONLY_TOOL_NAMES`(host-tool-bridge 里已存在的 lead 专属工具集合:
- *    派活/改派/改题/建删 agent/模型晋升)。这些工具本身就要求 lead 身份;
- *    由普通成员 @Agent 触发的运行不得因为 Agent 身份更高而绕过。
- *  - 高危写 = 工业/工艺写与控制类工具(改现场参数、下发控制、回滚、提交训练/数据任务)。
- *    这些工具的正常使用路径是 owner 显式授予(§13.3「跨 Channel、私有 memory、
- *    工业/高危工具需 owner 明确授予」)。
- */
-import { LEAD_ONLY_TOOL_NAMES } from '../agents/host-tool-bridge'
-import type { WorkshopPermissionScope } from '../../../../shared/workshop-protocol'
-
-/** 管理面工具(Channel/Agent/Task/Plugin 的管理动作) */
-export const MANAGEMENT_TOOL_NAMES: ReadonlySet<string> = LEAD_ONLY_TOOL_NAMES
-
-/**
- * 高危写/控制工具。
- * 取值来自 host-tool-bridge 的 dispatch 分支(dcw_control/param_control/dcw_rollback/
- * aml_job_submit/aml_model_promote/aml_dataset_build)与工业工具族(包括配方写入/回退)
- * —— 这些都是"会让现场设备或数据发生变化"的动作,只读的 *_read/_query/_frames/_status 不在其中。
- */
-export const HIGH_RISK_TOOL_NAMES: ReadonlySet<string> = new Set([
-  'dcw_control',
-  'dcw_rollback',
-  'param_control',
-  'recipe_update',
-  'recipe_rollback',
-  'aml_job_submit',
-  'aml_job_cancel',
-  'aml_dataset_build',
-  'aml_model_promote',
-])
-
-export type ToolScopeVerdict
-  = | { allowed: true }
-    | { allowed: false, reason: 'MANAGEMENT_TOOL_DENIED' | 'HIGH_RISK_TOOL_DENIED', message: string }
-
-/**
- * 该作用域下是否允许调用该工具。
- * 无作用域(undefined/null)→ 放行:这不是人类触发的调用(系统/agent 自发),沿用既有授权。
- * 作用域存在但能力位为 false → 拒绝(§13.5「未知 response 枚举直接拒绝,不得默认允许」
- * 的同一精神:权限判定默认收紧)。
- */
-export function checkToolAgainstScope(
-  scope: WorkshopPermissionScope | null | undefined,
-  tool: string,
-): ToolScopeVerdict {
-  if (!scope) return { allowed: true }
-  if (scope.canManageChannel !== true && MANAGEMENT_TOOL_NAMES.has(tool)) {
-    return {
-      allowed: false,
-      reason: 'MANAGEMENT_TOOL_DENIED',
-      message: `工具 ${tool} 属于 Channel 管理面;本次调用由群成员(${scope.requesterUserId || '未知用户'})发起,`
-        + '未获管理授权(§13.3:发起者权限不得因 Agent 身份更高而放大)。请 Channel owner 直接操作。',
-    }
-  }
-  if (scope.canUseHighRiskTools !== true && HIGH_RISK_TOOL_NAMES.has(tool)) {
-    return {
-      allowed: false,
-      reason: 'HIGH_RISK_TOOL_DENIED',
-      message: `工具 ${tool} 属于工业/高危写操作;本次调用由群成员(${scope.requesterUserId || '未知用户'})发起,`
-        + '未获高危授权(§13.3:工业/高危工具需 owner 明确授予)。请 Channel owner 直接操作或显式授权。',
-    }
-  }
-  return { allowed: true }
-}
-
-/** 从 mailbox 元数据里取作用域(宽容:非法值按"无作用域"处理,不抛错) */
-export function scopeFromMetadata(
-  metadata: Record<string, unknown> | undefined | null,
-  parse: (raw: unknown) => WorkshopPermissionScope | null,
-  header: string,
-): WorkshopPermissionScope | null {
-  if (!metadata) return null
-  return parse(metadata[header])
-}
+/**
+ * 人类发起者权限上下文的服务端判定(主计划 §13.3)。
+ *
+ * 合同(类型/解析/交集)在 `shared/workshop-protocol.ts`;本模块只放**服务端执行语义**:
+ * 哪些工具属于「管理面」、哪些属于「高危写」,以及给定作用域下是否放行。
+ *
+ * 分类**不发明新清单**,而是复用既有授权概念:
+ *  - 管理面 = `LEAD_ONLY_TOOL_NAMES`(host-tool-bridge 里已存在的 lead 专属工具集合:
+ *    派活/改派/改题/建删 agent/模型晋升)。这些工具本身就要求 lead 身份;
+ *    由普通成员 @Agent 触发的运行不得因为 Agent 身份更高而绕过。
+ *  - 高危写 = 工业/工艺写与控制类工具(改现场参数、下发控制、回滚、提交训练/数据任务)。
+ *    这些工具的正常使用路径是 owner 显式授予(§13.3「跨 Channel、私有 memory、
+ *    工业/高危工具需 owner 明确授予」)。
+ */
+import { HYBRID_TWIN_DIRECT_WRITE_TOOL_NAMES, LEAD_ONLY_TOOL_NAMES } from '../agents/tool-classes'
+import type { WorkshopPermissionScope } from '../../../../shared/workshop-protocol'
+
+/** 管理面工具(Channel/Agent/Task/Plugin 的管理动作) */
+export const MANAGEMENT_TOOL_NAMES: ReadonlySet<string> = LEAD_ONLY_TOOL_NAMES
+
+/** AML 治理/重负载动作(训练作业与数据面、模型晋升;不在直接写声明源内,单独列举) */
+const AML_HIGH_RISK_TOOL_NAMES = ['aml_job_submit', 'aml_job_cancel', 'aml_dataset_build', 'aml_model_promote'] as const
+
+/**
+ * 高危写/控制工具。
+ * 直接写族(dcw_control/param_control/dcw_rollback/recipe_update/recipe_rollback)取自
+ * host-tool-bridge 的单一声明源 HYBRID_TWIN_DIRECT_WRITE_TOOL_NAMES —— dispatch 与
+ * twin 网关的 fail-closed 亦同源于该集合,三处不再各自维护清单;
+ * AML 治理动作(重负载作业/数据构建/模型晋升)为单独列举。
+ * 这些都是"会让现场设备或数据发生变化"的动作,只读的 *_read/_query/_frames/_status 不在其中。
+ */
+export const HIGH_RISK_TOOL_NAMES: ReadonlySet<string> = new Set([
+  ...HYBRID_TWIN_DIRECT_WRITE_TOOL_NAMES,
+  ...AML_HIGH_RISK_TOOL_NAMES,
+])
+
+export type ToolScopeVerdict
+  = | { allowed: true }
+    | { allowed: false, reason: 'MANAGEMENT_TOOL_DENIED' | 'HIGH_RISK_TOOL_DENIED', message: string }
+
+/**
+ * 该作用域下是否允许调用该工具。
+ * 无作用域(undefined/null)→ 放行:这不是人类触发的调用(系统/agent 自发),沿用既有授权。
+ * 作用域存在但能力位为 false → 拒绝(§13.5「未知 response 枚举直接拒绝,不得默认允许」
+ * 的同一精神:权限判定默认收紧)。
+ */
+export function checkToolAgainstScope(
+  scope: WorkshopPermissionScope | null | undefined,
+  tool: string,
+): ToolScopeVerdict {
+  if (!scope) return { allowed: true }
+  if (scope.canManageChannel !== true && MANAGEMENT_TOOL_NAMES.has(tool)) {
+    return {
+      allowed: false,
+      reason: 'MANAGEMENT_TOOL_DENIED',
+      message: `工具 ${tool} 属于 Channel 管理面;本次调用由群成员(${scope.requesterUserId || '未知用户'})发起,`
+        + '未获管理授权(§13.3:发起者权限不得因 Agent 身份更高而放大)。请 Channel owner 直接操作。',
+    }
+  }
+  if (scope.canUseHighRiskTools !== true && HIGH_RISK_TOOL_NAMES.has(tool)) {
+    return {
+      allowed: false,
+      reason: 'HIGH_RISK_TOOL_DENIED',
+      message: `工具 ${tool} 属于工业/高危写操作;本次调用由群成员(${scope.requesterUserId || '未知用户'})发起,`
+        + '未获高危授权(§13.3:工业/高危工具需 owner 明确授予)。请 Channel owner 直接操作或显式授权。',
+    }
+  }
+  return { allowed: true }
+}
+
+/** 从 mailbox 元数据里取作用域(宽容:非法值按"无作用域"处理,不抛错) */
+export function scopeFromMetadata(
+  metadata: Record<string, unknown> | undefined | null,
+  parse: (raw: unknown) => WorkshopPermissionScope | null,
+  header: string,
+): WorkshopPermissionScope | null {
+  if (!metadata) return null
+  return parse(metadata[header])
+}

package/server/services/workshop/runtime/schedule-runtime.ts

@@ -17,6 +17,7 @@
  */
 import type { ScheduledTaskRow } from '../db/database'
 import type { ScheduledTaskRepo } from '../db/scheduled-task.repo'
+import { getConfiguredTimeZone, formatIsoInTimeZone } from '@/shared/local-time.mjs'
 
 /** 日志前缀收口(本模块不引 createLogger,保持可被 tsx 单测直跑) */
 const L = { p: '[workshop.schedule]' }
@@ -34,8 +35,30 @@ export function isValidDailyTime(v: string): boolean {
   return DAILY_TIME_RE.test(v)
 }
 
+function wallClockParts(date: Date, timeZone: string): { year: number, month: number, day: number, hour: number, minute: number } {
+  const values = Object.fromEntries(new Intl.DateTimeFormat('en-CA', { timeZone, calendar: 'iso8601', numberingSystem: 'latn', year: 'numeric', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hourCycle: 'h23' }).formatToParts(date).filter(p => p.type !== 'literal').map(p => [p.type, p.value]))
+  return { year: Number(values.year), month: Number(values.month), day: Number(values.day), hour: Number(values.hour), minute: Number(values.minute) }
+}
+
+/** 把配置时区中的本地墙上时间反解为绝对 epoch;通过前后偏移迭代处理 DST。 */
+function instantForWallClock(parts: { year: number, month: number, day: number, hour: number, minute: number }, timeZone: string, reference: Date): Date {
+  const wallAsUtc = Date.UTC(parts.year, parts.month - 1, parts.day, parts.hour, parts.minute, 0, 0)
+  let guess = wallAsUtc
+  for (let i = 0; i < 3; i++) {
+    const actual = wallClockParts(new Date(guess), timeZone)
+    const actualAsUtc = Date.UTC(actual.year, actual.month - 1, actual.day, actual.hour, actual.minute, 0, 0)
+    guess += wallAsUtc - actualAsUtc
+  }
+  // 若 DST 跳过了该本地时刻,迭代结果可能落在过去;交给 next-day 逻辑避免重复触发。
+  return new Date(guess + reference.getSeconds() * 0)
+}
+
+export function configuredTimeZone(): string {
+  return getConfiguredTimeZone()
+}
+
 /**
- * 计算下一次触发时刻(纯函数;本地时区——项目全局 ISO 已本地化,Date 解析双向兼容)。
+ * 计算下一次触发时刻(配置 IANA 时区;interval 仍按绝对 elapsed ms)。
  * @returns ISO 字符串;参数非法返回 null(调用方按「无下次」处理)
  */
 export function computeNextRunAt(
@@ -43,20 +66,24 @@ export function computeNextRunAt(
   intervalMs: number,
   dailyTime: string,
   from: Date,
+  timeZone = getConfiguredTimeZone(),
 ): string | null {
   if (mode === 'interval') {
     if (!Number.isFinite(intervalMs) || intervalMs < SCHEDULE_MIN_INTERVAL_MS) return null
-    return new Date(from.getTime() + intervalMs).toISOString()
+    return formatIsoInTimeZone(new Date(from.getTime() + intervalMs), timeZone)
   }
   if (mode === 'daily') {
     const m = dailyTime.match(DAILY_TIME_RE)
     if (!m) return null
+    const current = wallClockParts(from, timeZone)
     const hh = Number(m[1])
     const mm = Number(m[2])
-    const next = new Date(from)
-    next.setHours(hh, mm, 0, 0)
-    if (next.getTime() <= from.getTime()) next.setDate(next.getDate() + 1)
-    return next.toISOString()
+    const candidate = instantForWallClock({ year: current.year, month: current.month, day: current.day, hour: hh, minute: mm }, timeZone, from)
+    if (candidate.getTime() <= from.getTime()) {
+      const nextWall = new Date(Date.UTC(current.year, current.month - 1, current.day + 1, hh, mm, 0, 0))
+      return formatIsoInTimeZone(instantForWallClock({ year: nextWall.getUTCFullYear(), month: nextWall.getUTCMonth() + 1, day: nextWall.getUTCDate(), hour: hh, minute: mm }, timeZone, from), timeZone)
+    }
+    return formatIsoInTimeZone(candidate, timeZone)
   }
   return null
 }

package/server/utils/errors.ts

@@ -22,5 +22,13 @@ export const ErrorCodes = {
   CONFLICT: 'CONFLICT',
   /** 写入保持窗:节点写成功后的防震荡锁定窗内收到新写(429) */
   WRITE_FREQUENT: 'WRITE_FREQUENT',
+  /** DCW safety interlocks */
+  STEP_LIMIT_EXCEEDED: 'STEP_LIMIT_EXCEEDED',
+  RECIPE_LIMIT_EXCEEDED: 'RECIPE_LIMIT_EXCEEDED',
+  NODE_RANGE_EXCEEDED: 'NODE_RANGE_EXCEEDED',
+  PARAM_LIMIT_EXCEEDED: 'PARAM_LIMIT_EXCEEDED',
+  PRODUCT_LIMIT_EXCEEDED: 'PRODUCT_LIMIT_EXCEEDED',
+  WRITE_INTERVAL_NOT_ELAPSED: 'WRITE_INTERVAL_NOT_ELAPSED',
+  EXPLORATION_SAFE_STEP_REQUIRED: 'EXPLORATION_SAFE_STEP_REQUIRED',
   INTERNAL: 'INTERNAL_ERROR',
 } as const

package/shared/config/engine.mjs

@@ -9,6 +9,7 @@ import { readFileSync, writeFileSync, mkdirSync, renameSync, existsSync } from '
 import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import YAML from 'js-yaml'
+import { isValidTimeZone } from '../local-time.mjs'
 
 export const SETTINGS_FILENAME = 'runtime-settings.json'
 
@@ -141,6 +142,10 @@ export function validateValue(desc, value) {
       if (!desc.options?.includes(value)) errors.push(`须为 ${desc.options?.join(' / ')} 之一`)
       break
     }
+    case 'timezone': {
+      if (typeof value !== 'string' || !isValidTimeZone(value)) errors.push(`${desc.key} 须为有效的 IANA 时区，例如 Asia/Shanghai 或 America/Los_Angeles`)
+      break
+    }
     default:
       break
   }

package/shared/config/home.mjs

@@ -189,36 +189,31 @@ export function ensureDataDir(cwd = process.cwd(), env = process.env) {
 }
 
 /**
- * AML 平台数据根(<amlRoot>)：**项目目录下的 ./aml**，与配置根(.AgentWorkShop)分离。
+ * AML 平台数据根(<amlRoot>)：**运行时目录下的 <configRoot>/aml**,与数据/设置同根。
  *
- * 为什么单独一个根、而不是挂在 <configRoot>/data/aml 下：
- *  - AML 的产物是「可移植的资产」——数据集数组、训练作业工作区、ONNX 模型工件。
- *    这些需要能被 git/rsync/打包带走、被外部 Python 工具直接读取、被人在资源管理器里
- *    打开查看；埋在 .AgentWorkShop/data 里(那是运行时状态目录,常被 GC/清理)不合适。
- *  - uv 虚拟环境固定在 <amlRoot>/.venv,与数据集/模型同级,整个 ./aml 可以整体删除重建。
+ * 为什么收敛进配置根(用户规约):运行期产生的**所有**文件——数据、设置、数据集、
+ * 训练作业、ONNX 模型、uv 环境——都必须持久保存在同一个运行时目录里
+ * (项目 ./.AgentWorkShop 优先,~/.AgentWorkShop 兜底)。这样:
+ *  - 备份/搬迁/清数据只认一个目录;
+ *  - `aw update`(npm -g 更新包)只动应用载荷,配置根里的模型与 venv 原样保留,
+ *    更新后启动即可继续训练(venv 缺失时启动预热自动重建);
+ *  - 仍要外置(如挂大容量盘)时用 AW_AML_DIR 显式指定。
  *
  * 解析优先级：
  *   ① AW_AML_DIR 环境变量(显式覆盖;测试隔离与自定义部署用)
- *   ② repo 模式 → <检出根>/aml            (cwd 向上找 config.yml + nuxt.config.ts)
- *   ③ home 模式(全局安装) → <配置根>/aml  (~/.AgentWorkShop/aml)
- *   ④ 兜底 → <cwd>/aml
+ *   ② 项目运行时根:<cwd 向上找到的 ./.AgentWorkShop>/aml
+ *      (AW_MODE=home 时跳过)
+ *   ③ 兜底:~/.AgentWorkShop/aml(AW_HOME 可重定向)
  *
- * @returns {{ dir: string, mode: 'env'|'repo'|'home'|'cwd', projectRoot: string|null }}
+ * @returns {{ dir: string, mode: 'env'|'repo'|'home', projectRoot: string|null }}
  */
 export function resolveAmlRoot({ cwd = process.cwd(), env = process.env } = {}) {
   if (env.AW_AML_DIR && String(env.AW_AML_DIR).trim()) {
     return { dir: resolve(String(env.AW_AML_DIR).trim()), mode: 'env', projectRoot: null }
   }
-  if (env.AW_MODE !== 'home') {
-    const repoRoot = findRepoRoot(cwd)
-    if (repoRoot) return { dir: join(repoRoot, 'aml'), mode: 'repo', projectRoot: repoRoot }
-  }
-  const forceHome = env.AW_MODE === 'home'
-  if (forceHome) return { dir: join(awHome(env), 'aml'), mode: 'home', projectRoot: null }
-  // 非检出目录(既无 config.yml+nuxt.config.ts):配置根优先,最后才落 cwd
-  const localRoot = findLocalConfigRoot(cwd)
-  if (localRoot) return { dir: join(localRoot, 'aml'), mode: 'home', projectRoot: null }
-  return { dir: join(resolve(cwd), 'aml'), mode: 'cwd', projectRoot: null }
+  const local = env.AW_MODE === 'home' ? null : findLocalConfigRoot(cwd)
+  if (local) return { dir: join(local, 'aml'), mode: 'repo', projectRoot: dirname(local) }
+  return { dir: join(awHome(env), 'aml'), mode: 'home', projectRoot: null }
 }
 
 /** AML 数据根绝对路径(仅解析,不创建) */