agentworkshop 0.7.5 → 0.7.7

package/server/data/line-runs.json

@@ -7,7 +7,7 @@
     "productId": "pd-6348a595",
     "productName": "0.8mm 光学膜",
     "startedAt": "2026-09-03T11:18:01.213Z",
-    "taggedSamples": 5708
+    "taggedSamples": 39445
   },
   {
     "lineId": "ln-9a60a0cd",
@@ -57,6 +57,56 @@
     "productId": "pd-db432902",
     "productName": "探针产品",
     "startedAt": "2026-09-04T05:08:10.103Z",
-    "taggedSamples": 470
+    "taggedSamples": 11032
+  },
+  {
+    "lineId": "ln-6a34fbc7",
+    "runId": "rr-6a0c3b60",
+    "recipeId": "rc-15b027a7",
+    "recipeName": "全协议配方-mtnynfph",
+    "productId": "pd-10cfc2b3",
+    "productName": "全协议产品-mtnynfph",
+    "startedAt": "2026-09-05T05:47:26.453Z",
+    "taggedSamples": 23264
+  },
+  {
+    "lineId": "ln-419463e0",
+    "runId": "rr-08f535dc",
+    "recipeId": "rc-2e7f586c",
+    "recipeName": "全协议配方-mtnzg090",
+    "productId": "pd-b9b15b64",
+    "productName": "全协议产品-mtnzg090",
+    "startedAt": "2026-09-05T06:09:36.931Z",
+    "taggedSamples": 23247
+  },
+  {
+    "lineId": "ln-3548f325",
+    "runId": "rr-d667a896",
+    "recipeId": "rc-814248c6",
+    "recipeName": "runp3-recipe",
+    "productId": "pd-fd822802",
+    "productName": "runp3-prod",
+    "startedAt": "2026-09-05T07:23:51.972Z",
+    "taggedSamples": 1694
+  },
+  {
+    "lineId": "ln-c3a7ba01",
+    "runId": "rr-a41a21fd",
+    "recipeId": "rc-c362b721",
+    "recipeName": "全协议配方-mto2w44t",
+    "productId": "pd-4de49ca3",
+    "productName": "全协议产品-mto2w44t",
+    "startedAt": "2026-09-05T07:46:23.423Z",
+    "taggedSamples": 0
+  },
+  {
+    "lineId": "ln-871ac52d",
+    "runId": "rr-ecf1b5fb",
+    "recipeId": "rc-57a42339",
+    "recipeName": "pp-recipe",
+    "productId": "pd-d547a376",
+    "productName": "pp-prod",
+    "startedAt": "2026-09-05T09:47:55.526Z",
+    "taggedSamples": 71
   }
 ]

package/server/harness/aw-mcp-bridge.mjs

@@ -0,0 +1,153 @@
+#!/usr/bin/env node
+/**
+ * aw-mcp-bridge.mjs —— AgentWorkShop 全量 host tools 的 stdio MCP 桥。
+ *
+ * 被 codex(config.toml [mcp_servers.aw])/ dsh(profile MCP 配置)/ opencode
+ * (POST /mcp 运行时注册)作为本地 MCP server 拉起,把平台的 host tool 面
+ * (host-tools.json + 插件工具,与 omp set_host_tools 同源)以 MCP 工具注入引擎;
+ * 工具调用经 HTTP 回程落到 /api/workshop/agent-tools/*(agent token 鉴权)→
+ * manager.invokeHostTool → impl.dispatchHostTool(共享 host-tool-bridge)。
+ *
+ * 环境变量(由各 harness impl 装配时注入):
+ *   AW_BASE_URL      平台地址(如 http://127.0.0.1:3000)
+ *   AW_AGENT_ID      agent 实例 id(channel_agents.id)
+ *   AW_AGENT_TOKEN   agent token(channel_agents.token;鉴权事实源)
+ *   AW_MCP_TOOL_TIMEOUT_MS  工具调用 HTTP 超时(默认 200000;poll_messages 可阻塞 180s)
+ *
+ * 协议:MCP stdio(JSON-RPC 2.0,逐行)。实现刻意零依赖 —— 本脚本由外部引擎
+ * 子进程拉起,不得假设仓库 node_modules 的解析路径。
+ */
+import { createInterface } from 'node:readline'
+
+const BASE_URL = (process.env.AW_BASE_URL ?? 'http://127.0.0.1:3000').replace(/\/$/, '')
+const AGENT_ID = process.env.AW_AGENT_ID ?? ''
+const AGENT_TOKEN = process.env.AW_AGENT_TOKEN ?? ''
+const TOOL_TIMEOUT_MS = Number(process.env.AW_MCP_TOOL_TIMEOUT_MS ?? 200_000)
+const LIST_TTL_MS = 10_000
+
+if (!AGENT_ID || !AGENT_TOKEN) {
+  process.stderr.write('[aw-mcp-bridge] 缺少 AW_AGENT_ID / AW_AGENT_TOKEN 环境变量\n')
+  process.exit(1)
+}
+
+/** 工具面缓存(短 TTL:插件热注册 10s 内传导;失败时沿用旧表) */
+let toolCache = { at: 0, tools: [] }
+
+async function fetchTools() {
+  if (toolCache.tools.length > 0 && Date.now() - toolCache.at < LIST_TTL_MS) return toolCache.tools
+  const res = await fetch(`${BASE_URL}/api/workshop/agent-tools/list?agentId=${encodeURIComponent(AGENT_ID)}`, {
+    headers: { 'x-aw-agent-token': AGENT_TOKEN },
+    signal: AbortSignal.timeout(15_000),
+  })
+  if (!res.ok) throw new Error(`tools/list HTTP ${res.status}`)
+  const body = await res.json()
+  const tools = body?.data?.tools ?? []
+  if (Array.isArray(tools) && tools.length > 0) toolCache = { at: Date.now(), tools }
+  return toolCache.tools
+}
+
+async function callTool(name, args) {
+  const res = await fetch(`${BASE_URL}/api/workshop/agent-tools/invoke`, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', 'x-aw-agent-token': AGENT_TOKEN },
+    body: JSON.stringify({ agentId: AGENT_ID, tool: name, args: args ?? {} }),
+    signal: AbortSignal.timeout(TOOL_TIMEOUT_MS),
+  })
+  const body = await res.json().catch(() => null)
+  if (!res.ok) {
+    const detail = body?.message ?? body?.statusMessage ?? `HTTP ${res.status}`
+    return { content: [{ type: 'text', text: `工具调用失败(${name}): ${detail}` }], isError: true }
+  }
+  const result = body?.data?.result ?? { text: '(空结果)' }
+  return {
+    content: [{ type: 'text', text: String(result.text ?? '') }],
+    ...(result.isError ? { isError: true } : {}),
+  }
+}
+
+function write(msg) {
+  process.stdout.write(JSON.stringify(msg) + '\n')
+}
+
+function respond(id, result) {
+  write({ jsonrpc: '2.0', id, result })
+}
+
+function respondError(id, code, message) {
+  write({ jsonrpc: '2.0', id, error: { code, message } })
+}
+
+const rl = createInterface({ input: process.stdin })
+rl.on('line', (line) => {
+  const trimmed = line.trim()
+  if (!trimmed) return
+  let msg
+  try {
+    msg = JSON.parse(trimmed)
+  }
+  catch {
+    return // 非 JSON 行忽略(MCP stdio 不应有;防御引擎 stderr 混流)
+  }
+  const { id, method, params } = msg
+  const isRequest = id !== undefined && id !== null
+  try {
+    switch (method) {
+      case 'initialize':
+        respond(id, {
+          protocolVersion: params?.protocolVersion ?? '2024-11-05',
+          capabilities: { tools: { listChanged: false } },
+          serverInfo: { name: 'aw-host-tools', title: 'AgentWorkShop host tools', version: '1.0.0' },
+        })
+        break
+      case 'notifications/initialized':
+      case 'initialized':
+        break // 通知,无响应
+      case 'ping':
+        if (isRequest) respond(id, {})
+        break
+      case 'tools/list':
+        fetchTools()
+          .then((tools) => {
+            respond(id, {
+              tools: tools.map(t => ({
+                name: t.name,
+                description: t.description,
+                inputSchema: t.parameters ?? { type: 'object', properties: {} },
+              })),
+            })
+          })
+          .catch((err) => {
+            respondError(id, -32603, `tools/list 失败: ${err?.message ?? err}`)
+          })
+        break
+      case 'tools/call': {
+        const name = params?.name
+        if (!name) {
+          if (isRequest) respondError(id, -32602, 'tools/call 缺少 name')
+          break
+        }
+        callTool(name, params?.arguments ?? {})
+          .then((r) => {
+            if (isRequest) respond(id, r)
+          })
+          .catch((err) => {
+            // 工具执行 HTTP 异常:按 MCP 约定返回 isError 结果而非协议错误(不中断回合)
+            if (isRequest) {
+              respond(id, { content: [{ type: 'text', text: `工具调用异常(${name}): ${err?.message ?? err}` }], isError: true })
+            }
+          })
+        break
+      }
+      default:
+        if (isRequest) respondError(id, -32601, `方法不存在: ${method}`)
+    }
+  }
+  catch (err) {
+    if (isRequest) respondError(id, -32603, err?.message ?? String(err))
+  }
+})
+
+// stdin EOF → 优雅退出(宿主引擎关闭 MCP 连接)
+process.stdin.on('end', () => process.exit(0))
+// stdout 断裂(引擎被杀)→ 退出,防僵尸
+process.stdout.on('error', () => process.exit(0))

package/server/plugins/00-local-time.ts

@@ -0,0 +1,10 @@
+/**
+ * 本地时间安装(nitro 最早装载,文件名 00- 前缀保证排序第一):
+ * 全项目 ISO 时间输出统一为本地系统时区(见 shared/local-time.mjs)。
+ * 必须先于一切业务插件/路由/日志装载,否则启动期日志仍会输出 UTC。
+ */
+import { installLocalIso } from '@/shared/local-time.mjs'
+
+export default function localTimePlugin(): void {
+  installLocalIso()
+}

package/server/plugins/aw-plugins.ts

@@ -17,6 +17,9 @@ export default defineNitroPlugin((nitroApp) => {
       if (listener?.port)
         host.setSelfOrigin(listener.port)
     })
+  }).catch((err: unknown) => {
+    // 插件发现/装载失败不应成为 unhandled rejection(dev-stability-guard 会因此退进程)
+    console.error('[aw-plugins] 插件宿主初始化失败(服务继续运行):', err instanceof Error ? err.message : err)
   })
   nitroApp.hooks.hookOnce('close', () => {
     void shutdownPluginHost()

package/server/plugins/backup.ts

@@ -1,97 +1,116 @@
-/**
- * 备份定时插件(S6,production-readiness-plan)。
- *
- * 对 data/ 下三库(workshop/users/daq-timeseries)每日 serialize 镜像快照到
- * data/backups/,按 BACKUP_KEEP(默认 7)轮转;调度模式复用 ws.ts 保留期清理的
- * setInterval + globalThis key 防 HMR 重复 + unref()。dev 与生产均生效
- * (备份无副作用,始终开启;BACKUP_DISABLED=1 可关)。
- */
-import { DatabaseSync } from 'node:sqlite'
-import { existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs'
-import { resolve } from 'node:path'
-import { ensureDataDir } from '@/shared/config/home.mjs'
-import { backupSettings } from '../services/workshop/settings'
-
-const g = globalThis as typeof globalThis & { __awBackupTimer?: NodeJS.Timeout, __awBackupLastAt?: string }
-
-const DB_FILES = ['workshop.sqlite', 'users.sqlite', 'daq-timeseries.sqlite'] as const
-
-/**
- * 单库在线快照(hardening ST-2):node:sqlite serialize() 一致性数据库镜像 → 落盘。
- * 纯读操作,不与主写者抢锁(VACUUM INTO 会与写事务竞争 SQLITE_BUSY,已实测);
- * 产物为标准 SQLite 文件,与历史 .bak 结构兼容。失败只记录不抛出。
- */
-async function backupOne(src: string, target: string): Promise<void> {
-  const db = new DatabaseSync(src)
-  try {
-    const image = db.serialize()
-    writeFileSync(target, image)
-  }
-  finally {
-    db.close()
-  }
-}
-
-async function backupOnce(dataDir: string): Promise<void> {
-  const backupDir = resolve(dataDir, 'backups')
-  mkdirSync(backupDir, { recursive: true })
-  const stamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
-  for (const file of DB_FILES) {
-    const src = resolve(dataDir, file)
-    if (!existsSync(src)) continue
-    const target = resolve(backupDir, `${file}.${stamp}.bak`)
-    try {
-      await backupOne(src, target)
-      console.log('[backup]', file, '快照完成(serialize)')
-    }
-    catch (err) {
-      console.error(`[backup] ${file} 快照失败:`, err instanceof Error ? err.message : err)
-    }
-  }
-  // 轮转:每库仅保留最近 backup.keep 份(按文件名内时间戳倒序;env BACKUP_KEEP 兼容)
-  const keep = Math.max(1, backupSettings().keep)
-  for (const file of DB_FILES) {
-    const own = readdirSync(backupDir)
-      .filter(f => f.startsWith(`${file}.`) && f.endsWith('.bak'))
-      .sort()
-      .reverse()
-    for (const stale of own.slice(keep)) {
-      try {
-        rmSync(resolve(backupDir, stale))
-      }
-      catch { /* 轮转失败不致命 */ }
-    }
-  }
-  console.log('[backup] 快照完成 →', backupDir)
-  // R4:记录最近一次成功备份时间,供 /api/metrics 观测
-  g.__awBackupLastAt = new Date().toISOString()
-}
-
-export default function backupPlugin() {
-  const backupCfg = backupSettings()
-  if (backupCfg.disabled) return
-  if (g.__awBackupTimer) return
-  const dataDir = ensureDataDir()
-
-  // 启动 30s 后首备(避开启动风暴),此后每 backup.interval_hours(默认 24h)
-  const first = setTimeout(() => {
-    try {
-      backupOnce(dataDir)
-    }
-    catch (err) {
-      console.error('[backup] 首备失败:', err instanceof Error ? err.message : err)
-    }
-  }, 30_000)
-  first.unref?.()
-  const hours = Math.max(1, backupCfg.interval_hours)
-  const timer = setInterval(() => {
-    try {
-      backupOnce(dataDir)
-    }
-    catch (err) {
-      console.error('[backup] 定时备份失败:', err instanceof Error ? err.message : err)
-    }
-  }, hours * 3_600_000)
-  timer.unref?.()
-  g.__awBackupTimer = timer
-}
+/**
+ * 备份定时插件(S6,production-readiness-plan)。
+ *
+ * 对 data/ 下三库(workshop/users/daq-timeseries)每日 serialize 镜像快照到
+ * data/backups/,按 BACKUP_KEEP(默认 7)轮转;调度模式复用 ws.ts 保留期清理的
+ * setInterval + globalThis key 防 HMR 重复 + unref()。dev 与生产均生效
+ * (备份无副作用,始终开启;BACKUP_DISABLED=1 可关)。
+ */
+import { copyFileSync, existsSync, mkdirSync, readdirSync, renameSync, rmSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { ensureDataDir } from '@/shared/config/home.mjs'
+import { backupSettings } from '../services/workshop/settings'
+import { backupRegistry } from '../services/workshop/db/backup-registry'
+
+const g = globalThis as typeof globalThis & { __awBackupTimer?: NodeJS.Timeout, __awBackupLastAt?: string }
+
+const DB_FILES = ['workshop.sqlite', 'users.sqlite', 'daq-timeseries.sqlite'] as const
+
+/**
+ * 单库在线快照(hardening ST-2 终版:零侵入文件拷贝)。
+ *
+ * 真实事故两连(Windows + node:sqlite):
+ *  1) 对活库开第二连接 serialize/close → 主连接 prepared statements 全部失效;
+ *  2) 对主连接 serialize() → 该连接上全部语句被 finalize(20 分钟后 Mailbox 一用即炸)。
+ * 结论:node:sqlite 上 serialize 路线对常驻服务不可行。终版:PASSIVE checkpoint
+ * (尽力把 WAL 并回主文件,失败不影响服务)→ 拷贝主文件。得到的是「最后一次
+ * checkpoint 时刻」的有效 SQLite 镜像;备份语义为日级韧性的兜底,允许略旧。
+ */
+async function backupOne(src: string, target: string): Promise<void> {
+  const db = backupRegistry.get(src)
+  if (db) {
+    try {
+      db.exec('PRAGMA wal_checkpoint(PASSIVE)')
+    }
+    catch { /* 忙时跳过 checkpoint,拷出的镜像退回上次 checkpoint 点,仍有效 */ }
+  }
+  // 原子落盘:快照写一半被杀会留下截断 .bak(轮转后还被当作有效备份)
+  const tmp = `${target}.tmp`
+  copyFileSync(src, tmp)
+  try {
+    renameSync(tmp, target)
+  }
+  catch {
+    // rename 失败(目标被占用等):退回直写,可用性优先
+    copyFileSync(src, target)
+    try {
+      rmSync(tmp)
+    }
+    catch { /* ignore */ }
+  }
+}
+
+async function backupOnce(dataDir: string): Promise<void> {
+  const backupDir = resolve(dataDir, 'backups')
+  mkdirSync(backupDir, { recursive: true })
+  const stamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
+  for (const file of DB_FILES) {
+    const src = resolve(dataDir, file)
+    if (!existsSync(src) || !backupRegistry.has(src)) continue
+    const target = resolve(backupDir, `${file}.${stamp}.bak`)
+    try {
+      await backupOne(src, target)
+      console.log('[backup]', file, '快照完成(serialize)')
+    }
+    catch (err) {
+      console.error(`[backup] ${file} 快照失败:`, err instanceof Error ? err.message : err)
+    }
+  }
+  // 轮转:每库仅保留最近 backup.keep 份(按文件名内时间戳倒序;env BACKUP_KEEP 兼容)
+  const keep = Math.max(1, backupSettings().keep)
+  for (const file of DB_FILES) {
+    const own = readdirSync(backupDir)
+      .filter(f => f.startsWith(`${file}.`) && f.endsWith('.bak'))
+      .sort()
+      .reverse()
+    for (const stale of own.slice(keep)) {
+      try {
+        rmSync(resolve(backupDir, stale))
+      }
+      catch { /* 轮转失败不致命 */ }
+    }
+  }
+  console.log('[backup] 快照完成 →', backupDir)
+  // R4:记录最近一次成功备份时间,供 /api/metrics 观测
+  g.__awBackupLastAt = new Date().toISOString()
+}
+
+export default function backupPlugin() {
+  const backupCfg = backupSettings()
+  if (backupCfg.disabled) return
+  if (g.__awBackupTimer) return
+  const dataDir = ensureDataDir()
+
+  // 启动 30s 后首备(避开启动风暴),此后每 backup.interval_hours(默认 24h)
+  const first = setTimeout(() => {
+    try {
+      // backupOnce 是 async:同步 try/catch 接不住内部 rejection(会变成 unhandled
+      // rejection 触发 dev-stability-guard 退进程),必须显式 .catch
+      backupOnce(dataDir).catch((err: unknown) => {
+        console.error('[backup] 首备失败:', err instanceof Error ? err.message : err)
+      })
+    }
+    catch (err) {
+      console.error('[backup] 首备失败:', err instanceof Error ? err.message : err)
+    }
+  }, 30_000)
+  first.unref?.()
+  const hours = Math.max(1, backupCfg.interval_hours)
+  const timer = setInterval(() => {
+    backupOnce(dataDir).catch((err: unknown) => {
+      console.error('[backup] 定时备份失败:', err instanceof Error ? err.message : err)
+    })
+  }, hours * 3_600_000)
+  timer.unref?.()
+  g.__awBackupTimer = timer
+}

package/server/plugins/dev-stability-guard.ts

@@ -10,12 +10,20 @@ const SOCKET_NOISE = /ECONNRESET|EPIPE|ECONNABORTED|ETIMEDOUT|ERR_STREAM_PREMATU
 // SQLite 忙/锁(hardening ST-1):多写竞争的瞬态错误,记录并继续;
 // 真正的库损坏/磁盘错误不经此路径,仍走致命语义。
 const SQLITE_BUSY = /SQLITE_BUSY|SQLITE_LOCKED|database is locked/i
+// Agent 引擎边界错误(harness 容错):opencode/omp/codex/dsh 等外部引擎 RPC 失败
+// (HTTP 4xx/5xx、连接拒绝)只影响对应 agent 会话,应降级重试而非退进程 ——
+// 服务端同时承载 DAQ 数采/DCW 写控,引擎故障带走监控平台属于可用性事故。
+const ENGINE_BOUNDARY = /\b(opencode|omp|codex|dsh) API\b/i
 
 function isSocketNoise(reason: unknown): boolean {
   if (reason == null) return false
   const err = reason as NodeJS.ErrnoException
-  if (typeof err.code === 'string') return SOCKET_NOISE.test(err.code)
-  return SOCKET_NOISE.test(String(reason))
+  // code 命中即噪声(经典 errno 形态)
+  if (typeof err.code === 'string' && SOCKET_NOISE.test(err.code)) return true
+  // undici 等包装错误:code 可能是 UND_ERR_*/undefined,但 message/stack 仍带
+  // "read ECONNRESET" 文本 —— 全文兜底再测一次(四引擎并发下 keep-alive socket
+  // 复位是高频瞬态,不可判死进程)
+  return SOCKET_NOISE.test(describe(reason))
 }
 
 function describe(reason: unknown): string {
@@ -26,7 +34,9 @@ function describe(reason: unknown): string {
 
 export default defineNitroPlugin(() => {
   const isTransientDbBusy = (reason: unknown): boolean => SQLITE_BUSY.test(describe(reason))
-  process.on('unhandledRejection', (reason) => {
+  const isEngineBoundary = (reason: unknown): boolean => ENGINE_BOUNDARY.test(describe(reason).split('\n')[0] ?? '')
+  let engineFaults = 0
+  const onFatalCandidate = (kind: string, reason: unknown): void => {
     if (isSocketNoise(reason)) {
       console.warn(`[stability-guard] socket noise suppressed: ${describe(reason).slice(0, 120)}`)
       return
@@ -35,20 +45,19 @@ export default defineNitroPlugin(() => {
       console.warn(`[stability-guard] sqlite busy(瞬态,不退出): ${describe(reason).slice(0, 120)}`)
       return
     }
-    console.error(`[stability-guard] fatal unhandledRejection, exiting:\n${describe(reason)}`)
-    process.exit(1)
-  })
-  process.on('uncaughtException', (err) => {
-    if (isSocketNoise(err)) {
-      console.warn(`[stability-guard] socket noise suppressed: ${describe(err).slice(0, 120)}`)
+    if (isEngineBoundary(reason)) {
+      engineFaults += 1
+      console.error(`[stability-guard] 引擎边界错误(累计 ${engineFaults},不退出): ${describe(reason).slice(0, 400)}`)
       return
     }
-    if (isTransientDbBusy(err)) {
-      console.warn(`[stability-guard] sqlite busy(瞬态,不退出): ${describe(err).slice(0, 120)}`)
-      return
-    }
-    console.error(`[stability-guard] fatal uncaughtException, exiting:\n${describe(err)}`)
+    console.error(`[stability-guard] fatal ${kind}, exiting:\n${describe(reason)}`)
     process.exit(1)
+  }
+  process.on('unhandledRejection', (reason) => {
+    onFatalCandidate('unhandledRejection', reason)
+  })
+  process.on('uncaughtException', (err) => {
+    onFatalCandidate('uncaughtException', err)
   })
-  console.warn('[stability-guard] armed (socket 断连与 sqlite 瞬态忙 → 记录继续;真实错误 → exit 1)')
+  console.warn('[stability-guard] armed (socket 断连/sqlite 瞬态忙/引擎边界错误 → 记录继续;其余真实错误 → exit 1)')
 })

package/server/plugins/retention.ts

@@ -19,6 +19,7 @@ function sweepOnce(dataDir: string): void {
   const dbPath = resolve(dataDir, 'workshop.sqlite')
   if (!existsSync(dbPath)) return
   const db = new DatabaseSync(dbPath)
+  db.exec('PRAGMA busy_timeout = 5000')
   try {
     const results = runRetentionSweep(db)
     for (const r of results) {

package/server/plugins/security.ts

@@ -1,8 +1,10 @@
 /**
  * 安全启动插件(S2,production-readiness-plan)。
  *
- * production 下 sessionPassword 仍是仓库默认值 → 拒绝启动(带明确修复指引):
- * dev/测试环境零影响;经反向代理终止 TLS 的部署基线见 config.yml 注释与 README。
+ * production 下以下任一情况 → 拒绝启动(带明确修复指引):
+ *   1. sessionPassword 仍是仓库默认值/空串;
+ *   2. 种子账号仍持发布默认密码(存量库升级场景;新库种子已是随机密码)。
+ * dev/测试环境零影响;紧急豁免:AW_INSECURE_SEED=1(仅跳过第 2 项)。
  *
  * 与 workshop.ts 同风格:defineNitroPlugin 为恒等包装,default 直接导出普通函数。
  */
@@ -15,7 +17,7 @@ const KNOWN_DEFAULT_PASSWORDS = new Set([
   'change-me',
 ])
 
-export default function securityPlugin() {
+export default async function securityPlugin() {
   if (process.env.NODE_ENV !== 'production') return
   const password = (useRuntimeConfig() as { session?: { password?: string } }).session?.password ?? ''
   // 空串同样拒绝:NUXT_SESSION_PASSWORD="" 会把烘焙配置覆盖为空值,不能放行
@@ -26,4 +28,23 @@ export default function securityPlugin() {
       + 'TLS/WSS 部署基线见 README「部署」一节(建议由 caddy/nginx 反向代理终止)。',
     )
   }
+  // 存量库种子账号默认密码检测(动态 import,避免影响插件加载顺序)
+  if (process.env.AW_INSECURE_SEED !== '1') {
+    try {
+      const { anySeedUsingDefaultPassword } = await import('../repositories/user.repository')
+      if (anySeedUsingDefaultPassword()) {
+        throw new Error(
+          '[security] 拒绝启动:种子账号仍使用发布默认密码(该密码随源码/npm 公开,等同于未设防)。'
+          + '请先用旧密码登录并修改 admin 密码,或经管理面重置后重启;'
+          + '无法登录时可删除 <配置根>/data/users.sqlite 重新初始化(会丢失本地账号)。'
+          + '一次性紧急豁免:设置环境变量 AW_INSECURE_SEED=1(不推荐)。',
+        )
+      }
+    }
+    catch (err) {
+      // 拒启错误原样上抛;仅吞"检查本身失败"(库损坏等),不阻断启动
+      if (String((err as Error)?.message ?? '').includes('[security]')) throw err
+      console.warn('[security] 种子密码检查失败(放行):', String((err as Error)?.message ?? err))
+    }
+  }
 }