agentworkshop 0.7.51 → 0.7.52

package/scripts/_audit/kb-team-omp-e2e.mjs

@@ -0,0 +1,229 @@
+#!/usr/bin/env node
+/**
+ * scripts/_audit/kb-team-omp-e2e.mjs —— 知识库集成通用闭环优化频道 × 真实 omp × 多 PLC 模拟场景。
+ *
+ * 每个 scenario:
+ *   ① 模拟器建场(ensureScenarioLine) + 平台建线开跑(provisionScenarioLine,真实协议链路);
+ *   ② 实例化「通用闭环优化频道(标准)」模板,enableKnowledgeBase=true(频道加载 rag-bridge);
+ *   ③ lead 绑定 PV 数采节点 + 调节数控节点(auto);
+ *   ④ 提交优化 goal(要求:先查知识库 → lead 委派节点权限 → 治理小步下发复测 → 判定 → 经验沉淀);
+ *   ⑤ 期间轮询任务/消息/事件,全程转录落盘(transcript.md + 原始 JSON);
+ *   ⑥ 验收:根任务收口 + worker 确实被授予节点(grantedBy 溯源) + 发生过治理写入
+ *      + PV 回带 + 知识库经验新增(kb_agent 异步落库)。
+ *
+ * 用法:
+ *   node scripts/_audit/kb-team-omp-e2e.mjs --base http://127.0.0.1:3456 --scenarios injection,wwtp
+ * 前置:目标实例为本仓库构建(内置通用模板 + rag-bridge);rag-bridge token 已配置(启 KB 鉴权时);
+ *       omp CLI 在 PATH 且可用;模拟器可自举(bench/lib/sim.mjs ensureSimulator)。
+ */
+import { join, dirname, resolve } from 'node:path'
+import { writeFileSync, appendFileSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+import { makeApi, ensureDir, sleep } from '../../bench/lib/util.mjs'
+import { ensureSimulator, simUp } from '../../bench/lib/sim.mjs'
+import { SCENARIOS, ensureScenarioLine, provisionScenarioLine, readPvMean } from '../../bench/lib/scenarios.mjs'
+
+const HERE = dirname(fileURLToPath(import.meta.url))
+const REPO = resolve(HERE, '../..')
+const args = process.argv.slice(2)
+const arg = (k, d) => { const i = args.indexOf(`--${k}`); return i >= 0 ? (args[i + 1] ?? '') : d }
+
+const BASE = arg('base', process.env.AW_BASE ?? 'http://127.0.0.1:3456')
+const list = (arg('scenarios', 'injection') || 'injection').split(',').map(s => s.trim()).filter(id => SCENARIOS[id])
+const TASK_TIMEOUT_MS = Number(arg('timeout-min', '32')) * 60_000
+const KB_WAIT_MS = Number(arg('kb-wait-min', '6')) * 60_000
+const POLL_MS = 20_000
+const sfx = arg('sfx', `kb${new Date().toISOString().slice(5, 16).replace(/[-T:]/g, '')}`)
+
+const rid = `kb-team-omp-${new Date().toISOString().slice(0, 19).replace(/[-T:]/g, '')}`
+const outDir = ensureDir(join(REPO, 'bench', 'results', rid))
+console.log(`=== kb-team × omp 闭环优化 × 多场景 ===\nbase=${BASE} scenarios=${list.join(',')} out=${outDir}\n`)
+
+// ── 自举 ──
+if (!(await simUp())) {
+  const r = await ensureSimulator({ log: console.log })
+  if (!r.started && !(await simUp())) { console.error(`✘ 模拟器自举失败: ${r.reason}`); process.exit(1) }
+}
+const api = makeApi(BASE)
+const login = await api.login(process.env.AW_ADMIN_EMAIL ?? 'admin@awshop.local', process.env.AW_ADMIN_PASSWORD ?? 'Awshop@123!')
+if (!login.ok) { console.error('✘ 平台登录失败'); process.exit(1) }
+console.log(`平台就绪(${login.how},role=${login.role});模拟器就绪\n`)
+
+const globalResult = { rid, base: BASE, scenarios: [] }
+
+for (const id of list) {
+  const scen = SCENARIOS[id]
+  const dir = ensureDir(join(outDir, id))
+  const res = { scenario: id, zh: scen.zh, checks: {}, errors: [] }
+  globalResult.scenarios.push(res)
+  const log = (line) => { console.log(`[${id}] ${line}`); appendFileSync(join(dir, 'transcript.md'), `${line}\n`) }
+  writeFileSync(join(dir, 'transcript.md'), `# ${scen.zh}(kb-team × omp)作业转录\n\n- 开始: ${new Date().toISOString()}\n- 频道模板: chtl-generic-optimize-default(enableKnowledgeBase=true)\n\n`)
+
+  try {
+    // ── ① 建场 + 建线 ──
+    log(`① 模拟器建场 ${scen.key} …`)
+    const ensure = await ensureScenarioLine(scen)
+    log(`   设备=${ensure.verified.devices}/${ensure.verified.expectDevices} SP=${ensure.verified.sp} PV=${ensure.verified.pv} 协议=${ensure.verified.protocols.join('/')}`)
+    const line = await provisionScenarioLine(api, scen, { sfx: `${sfx}-${id}` })
+    if (line.errors?.length || !line.ids?.lineId) throw new Error(`建线失败: ${line.errors?.join(';')}`)
+    res.line = { lineId: line.ids.lineId, recipeId: line.ids.recipeId, started: line.ids.started, reused: line.reused }
+    log(`① 平台建线 ${line.lineName} started=${line.ids.started} dcw=${Object.keys(line.dcw).length} daq=${Object.keys(line.daq).length}`)
+
+    // ── ② 实例化 KB 通用频道 ──
+    const inst = (await api.call('POST', '/api/workshop/channel-templates/chtpl-generic-optimize-default/instantiate', {
+      name: `KB闭环优化-${scen.zh}-${sfx}-${id}`,
+      enableKnowledgeBase: true,
+    }))
+    const channelId = inst.data?.channelId
+    if (!channelId) throw new Error(`频道实例化失败: ${inst.message}`)
+    const agents = (await api.call('GET', `/api/workshop/channels/${channelId}/agents`)).data ?? []
+    const lead = agents.find(a => a.role === 'lead')
+    res.channel = { channelId, leadId: lead?.id, leadHarness: lead?.harness }
+    log(`② 频道 ${channelId} 已实例化(lead=${lead?.name}/${lead?.harness},成员=${agents.length})`)
+
+    // ── ③ lead 绑定 PV 数采 + 调节数控(auto) ──
+    const pvNode = line.daq[scen.pv.sig]
+    const knobSigs = (scen.knobs ?? []).map(k => k.sig).slice(0, 2)
+    const knobNodes = knobSigs.map(s => line.dcw[s]).filter(Boolean)
+    if (!pvNode || !knobNodes.length) throw new Error(`关键节点缺失: pv=${pvNode} knobs=${knobNodes}`)
+    for (const [nodeId, kind] of [[pvNode, 'daq'], ...knobNodes.map(n => [n, 'dcw'])]) {
+      const r = await api.call('POST', '/api/workshop/agent-tools/bindings', { agentId: lead.id, nodeId, kind, mode: 'auto' })
+      if (r.status !== 200) throw new Error(`lead 绑定失败 ${kind} ${nodeId}: ${r.message}`)
+    }
+    res.leadBindings = { pvNode, knobNodes }
+    log(`③ lead 绑定:daq(${scen.pv.sig})=${pvNode} dcw=${knobNodes.join(',')}`)
+
+    // ── ④ 提交 goal ──
+    const knobText = (scen.knobs ?? []).slice(0, 2).map(k => `${k.sig}`).join('、')
+    const guardText = (scen.guards ?? []).map(g => `${g.label}≤${g.max}`).join('、') || '无'
+    const goal = [
+      `【产线闭环优化】${scen.zh}:${scen.story}`,
+      `目标:把「${scen.pv.label}(${scen.pv.sig})」稳定控制回 ${scen.pv.target}±${scen.pv.tol}${scen.pv.unit} 目标带;守卫约束:${guardText}。`,
+      `可调手段(数控节点,治理下发):${knobText}。`,
+      `作业要求:`,
+      `1. 开工先查知识库:lead 用 kb_agent(mode=sync) 检索「${scen.zh} 数据分析」「${scen.pv.label} 物理机理与设定影响」,把检索结论作为寻优方向与步长依据;`,
+      `2. lead 把自己已绑定的节点授权授予 worker(dispatch_task 带 grant_node_ids 随任务授予,或 team_grant_nodes),确保工艺工程师与数据分析师各自拿到所需节点权限,不要无权限空转;`,
+      `3. 工艺工程师单变量小步调整(每步 ≤ 量程 2%,尊重单步限幅与写入间隔),每次调整后等 ${Math.round(scen.settleMs / 1000)}s 再 daq_query 复测「${scen.pv.label}」;`,
+      `4. 进入目标带且复测稳定后 dcw_judge 落判定(keep),lead 用 kb_agent(mode=async) 把本次经验沉淀入知识库(含调整前后参数值与响应数据),随后完成收口汇报。`,
+    ].join('\n')
+    const task = (await api.call('POST', `/api/workshop/channels/${channelId}/tasks`, { title: `${scen.zh}(KB 闭环)`, description: goal })).data
+    if (!task?.id) throw new Error(`根任务提交失败`)
+    res.rootTaskId = task.id
+    log(`④ 根任务 ${task.id} 已提交,开始作业(超时 ${Math.round(TASK_TIMEOUT_MS / 60000)}min)…\n`)
+
+    // ── ⑤ 轮询转录 ──
+    let seenMsg = new Set()
+    let seenTaskState = new Map()
+    let lastEventSeq = 0
+    let toolEvidence = { kbAgent: 0, grant: 0 }
+    const t0 = Date.now()
+    let terminal = null
+    const dump = async () => {
+      const msgs = (await api.call('GET', `/api/workshop/channels/${channelId}/messages?limit=200`)).data ?? []
+      for (const m of [...msgs].reverse()) {
+        const key = m.id ?? `${m.createdAt}:${m.fromAgentName}`
+        if (seenMsg.has(key)) continue
+        seenMsg.add(key)
+        const who = m.fromAgentName ?? m.from ?? '?'
+        const text = String(m.text ?? m.preview ?? '').slice(0, 600)
+        if (text.trim()) appendFileSync(join(dir, 'transcript.md'), `\n> **${who}** @ ${m.createdAt ?? ''}\n>\n${text.split('\n').map(l => `> ${l}`).join('\n')}\n`)
+      }
+      const tasks = (await api.call('GET', `/api/workshop/channels/${channelId}/tasks`)).data ?? []
+      const arr = Array.isArray(tasks) ? tasks : (tasks.tasks ?? [])
+      for (const t of arr) {
+        const st = `${t.id}:${t.state}:${t.progress ?? 0}`
+        if (seenTaskState.get(t.id) !== st) {
+          seenTaskState.set(t.id, st)
+          appendFileSync(join(dir, 'transcript.md'), `\n- [任务] ${t.id} 「${t.title}」 state=${t.state} progress=${t.progress ?? 0}% assignee=${t.assigneeId ?? '-'}`)
+        }
+      }
+      // 事件流:记录工具调用证据(kb_agent / team_grant_nodes / grant_node_ids)与 lead 进度报告
+      const ev = (await api.call('GET', `/api/workshop/channels/${channelId}/events?limit=200&afterSeq=${lastEventSeq}`)).data ?? {}
+      for (const item of (ev.items ?? [])) {
+        lastEventSeq = Math.max(lastEventSeq, Number(item.seq ?? 0))
+        const text = String(item.payload?.text ?? item.payload?.summary ?? '')
+        if (!text) continue
+        const kbHits = (text.match(/kb_agent/g) ?? []).length
+        const grantHits = (text.match(/team_grant_nodes|grant_node_ids/g) ?? []).length
+        toolEvidence.kbAgent += kbHits
+        toolEvidence.grant += grantHits
+        if (kbHits || grantHits) {
+          appendFileSync(join(dir, 'transcript.md'), `\n- [工具证据] @ ${(item.at ?? item.createdAt ?? '').slice(11, 19)} ${text.replace(/\n+/g, ' ').slice(0, 220)}`)
+        }
+      }
+      return { tasks: arr, msgs }
+    }
+    while (Date.now() - t0 < TASK_TIMEOUT_MS) {
+      await sleep(POLL_MS)
+      try {
+        const { tasks } = await dump()
+        const root = tasks.find(t => t.id === task.id)
+        if (root && ['COMPLETED', 'FAILED', 'CANCELED'].includes(root.state)) { terminal = root; break }
+        log(`… 作业中(${Math.round((Date.now() - t0) / 60000)}min)root=${root?.state ?? '?'}`)
+      }
+      catch (err) {
+        log(`… 轮询抖动(忽略): ${err?.message ?? err}`)
+      }
+    }
+    await dump()
+    if (!terminal) { res.errors.push(`根任务超时(${Math.round(TASK_TIMEOUT_MS / 60000)}min)未收口`) }
+    else if (terminal.state !== 'COMPLETED') { res.errors.push(`根任务终态=${terminal.state}`) }
+    res.checks.rootTaskClosed = terminal?.state === 'COMPLETED'
+    log(`\n⑤ 根任务终态=${terminal?.state ?? 'TIMEOUT'}`)
+
+    // ── ⑥ 验收 ──
+    const workers = agents.filter(a => a.role === 'worker')
+    let delegated = 0
+    for (const w of workers) {
+      const bs = (await api.call('GET', `/api/workshop/agent-tools/bindings?agentId=${w.id}`)).data
+      const flat = Array.isArray(bs) ? bs : (bs?.bindings ?? [])
+      if (flat.some(b => b.grantedByAgentId === lead.id)) delegated++
+    }
+    res.checks.workerDelegated = delegated > 0
+    log(`⑥ 委派核验:${delegated}/${workers.length} 个 worker 持有 lead 授予的节点授权`)
+
+    const dcwNow = (await api.call('GET', '/api/workshop/dcw')).data?.nodes ?? []
+    const myDcw = dcwNow.filter(n => Object.values(line.dcw).includes(n.id))
+    const wrote = myDcw.some(n => n.lastWriteAt)
+    res.checks.governedWriteHappened = wrote
+    res.dcAfter = myDcw.map(n => ({ id: n.id, name: n.name, value: n.value, lastWriteAt: n.lastWriteAt ?? null }))
+    log(`⑥ 治理写入核验:${wrote ? '发生过 dcw 治理写入' : '无 dcw 写入痕迹'}`)
+
+    const pvMean = await readPvMean(api, pvNode, 5).catch(() => null)
+    const inBand = pvMean != null && Math.abs(Number(pvMean) - scen.pv.target) <= scen.pv.tol
+    res.checks.pvInBand = inBand
+    res.pvMean = pvMean
+    log(`⑥ PV 复测:均值=${pvMean} 目标带=${scen.pv.target}±${scen.pv.tol} → ${inBand ? '达标' : '未达标'}`)
+
+    res.toolEvidence = toolEvidence
+    res.checks.kbToolUsed = toolEvidence.kbAgent > 0
+    res.checks.grantToolUsed = toolEvidence.grant > 0 || delegated > 0
+    log(`⑥ 工具证据(事件流):kb_agent×${toolEvidence.kbAgent} 委派×${toolEvidence.grant}`)
+
+    log(`⑥ 等待知识库经验沉淀可检索(≤${Math.round(KB_WAIT_MS / 60000)}min)…`)
+    const kbQuery = encodeURIComponent(`${scen.zh.slice(0, 6)} ${scen.pv.label} 经验`)
+    const kbDeadline = Date.now() + KB_WAIT_MS
+    let kbHit = false
+    while (Date.now() < kbDeadline) {
+      await sleep(45_000)
+      const sr = (await api.call('GET', `/api/plugins/rag-bridge/search?q=${kbQuery}&top_k=5`).catch(() => null))?.data
+      if ((sr?.total_results ?? 0) > 0 || (sr?.results ?? []).length > 0) { kbHit = true; break }
+      log(`   … 检索暂未命中(累计等待 ${Math.round((kbDeadline - Date.now()) / 60000)}min)`)
+    }
+    res.checks.kbExperience = kbHit
+    log(`⑥ 知识库经验检索:${kbHit ? '已检出本场景经验内容' : '超时未检出(检索面后端索引漂移时以转录工具证据为准)'}`)
+  }
+  catch (err) {
+    res.errors.push(String(err?.message ?? err))
+    log(`✘ 异常: ${err?.message ?? err}`)
+  }
+
+  res.ok = res.errors.length === 0 && Object.values(res.checks).every(Boolean)
+  log(`\n════ [${id}] 结果: ${res.ok ? 'PASS' : 'FAIL'} checks=${JSON.stringify(res.checks)}${res.errors.length ? ` errors=${res.errors.join(';')}` : ''}`)
+  writeFileSync(join(dir, 'final.json'), JSON.stringify(res, null, 2))
+}
+
+writeFileSync(join(outDir, 'kb-team-omp-result.json'), JSON.stringify(globalResult, null, 2))
+const allOk = globalResult.scenarios.every(s => s.ok)
+console.log(`\n════ 总结果: ${allOk ? '✅ 全场景 PASS' : '❌ 存在 FAIL'}(明细: ${outDir})`)
+process.exit(allOk ? 0 : 1)

package/server/api/workshop/agent-tools/bindings/grant.post.ts

@@ -0,0 +1,45 @@
+/**
+ * POST /api/workshop/agent-tools/bindings/grant —— lead 把自己绑定的节点授权给同频道 worker。
+ * body: { channelId, agentId(worker 成员实例), nodeIds: string[], mode?: 'auto'|'manual' }
+ * 硬约束:nodeIds 每一个都必须在频道 lead 的绑定面内(权限不可超越授予者);全成全败。
+ * 产线权限随绑定继承(lead 绑定建立时已校验);绑定带 grantedByAgentId/grantedAt 溯源。
+ * 鉴权:channel 归属者(遗留公共 channel 需 admin)。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+import { applyDelegation, planDelegation } from '@/server/services/workshop/agents/node-delegation'
+import type { DelegationMember } from '@/server/services/workshop/agents/node-delegation'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<{ channelId?: string, agentId?: string, nodeIds?: string[], mode?: 'auto' | 'manual' }>(event) ?? {}
+  const channelId = String(body.channelId ?? '')
+  const agentId = String(body.agentId ?? '')
+  const nodeIds = Array.isArray(body.nodeIds) ? body.nodeIds.map(x => String(x ?? '').trim()).filter(Boolean) : []
+  if (!channelId || !agentId || !nodeIds.length) {
+    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'channelId / agentId / nodeIds 必填')
+  }
+  const manager = getWorkshopManager()
+  const channel = manager.getChannelForUser(channelId, user.id)
+  if (channel?.ownerUserId === null) {
+    const { requireAdmin } = await import('@/server/api/workshop/caller')
+    requireAdmin(event)
+  }
+  const row = (await manager.listChannels()).find(c => c.id === channelId)
+  if (!row?.leadAgentId) throw new AppError(404, ErrorCodes.NOT_FOUND, `频道不存在或没有 lead: ${channelId}`)
+
+  const members = await manager.listChannelAgents(channelId) as unknown as DelegationMember[]
+  const plan = planDelegation({
+    leaderAgentId: row.leadAgentId,
+    channelId,
+    targetAgentId: agentId,
+    nodeIds,
+    members,
+    mode: body.mode,
+  })
+  const bindings = applyDelegation(plan, row.leadAgentId)
+  return { granted: bindings }
+})

package/server/api/workshop/agent-tools/bindings/revoke.post.ts

@@ -0,0 +1,42 @@
+/**
+ * POST /api/workshop/agent-tools/bindings/revoke —— lead 收回授予给 worker 的节点授权。
+ * body: { channelId, agentId(worker 成员实例), nodeIds: string[] }
+ * 可收回:lead 自己授予的(grantedByAgentId=lead)或 lead 也持有的节点绑定;
+ * 其余绑定原样保留并在结果中标注 revoked=false。
+ * 鉴权:channel 归属者(遗留公共 channel 需 admin)。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+import { revokeDelegation } from '@/server/services/workshop/agents/node-delegation'
+import type { DelegationMember } from '@/server/services/workshop/agents/node-delegation'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<{ channelId?: string, agentId?: string, nodeIds?: string[] }>(event) ?? {}
+  const channelId = String(body.channelId ?? '')
+  const agentId = String(body.agentId ?? '')
+  const nodeIds = Array.isArray(body.nodeIds) ? body.nodeIds.map(x => String(x ?? '').trim()).filter(Boolean) : []
+  if (!channelId || !agentId || !nodeIds.length) {
+    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'channelId / agentId / nodeIds 必填')
+  }
+  const manager = getWorkshopManager()
+  const channel = manager.getChannelForUser(channelId, user.id)
+  if (channel?.ownerUserId === null) {
+    const { requireAdmin } = await import('@/server/api/workshop/caller')
+    requireAdmin(event)
+  }
+  const row = (await manager.listChannels()).find(c => c.id === channelId)
+  if (!row?.leadAgentId) throw new AppError(404, ErrorCodes.NOT_FOUND, `频道不存在或没有 lead: ${channelId}`)
+
+  const members = await manager.listChannelAgents(channelId) as unknown as DelegationMember[]
+  const results = revokeDelegation({
+    leaderAgentId: row.leadAgentId,
+    targetAgentId: agentId,
+    nodeIds,
+    members,
+  })
+  return { results }
+})

package/server/api/workshop/channel-templates/[id]/instantiate.post.ts

@@ -23,6 +23,7 @@ const instantiateSchema = z.object({
   scenePackId: z.string().min(1).optional(),
   optimizationMode: z.enum(['exploration', 'aml']).optional(),
   boundModelId: z.string().min(1).optional(),
+  enableKnowledgeBase: z.boolean().optional(),
 })
 
 export default defineApiHandler(async (event) => {
@@ -30,7 +31,7 @@ export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
   const body = await readValidatedBody(event, zValidator(instantiateSchema))
   const manager = getWorkshopManager()
-  const result = await manager.instantiateChannelTemplate(templateId, user, body.name, { scene: body.scene, promptVariables: body.promptVariables, objective: body.objective, toolProfile: body.toolProfile, controlPolicy: body.controlPolicy, providerId: body.providerId, providerVersion: body.providerVersion, providerHash: body.providerHash, scenePackId: body.scenePackId, optimizationMode: body.optimizationMode, boundModelId: body.boundModelId })
+  const result = await manager.instantiateChannelTemplate(templateId, user, body.name, { scene: body.scene, promptVariables: body.promptVariables, objective: body.objective, toolProfile: body.toolProfile, controlPolicy: body.controlPolicy, providerId: body.providerId, providerVersion: body.providerVersion, providerHash: body.providerHash, scenePackId: body.scenePackId, optimizationMode: body.optimizationMode, boundModelId: body.boundModelId, enableKnowledgeBase: body.enableKnowledgeBase })
   // 模板含 lead 时直接启动调度循环(可提交任务)
   if (result.leadAgentId) {
     ensureLeadSchedulerLoop(manager, result.channelId)

package/server/services/workshop/agents/host-tool-bridge/dispatch.ts

@@ -19,6 +19,7 @@ import type { HostToolBridgeContext, HostToolCall, HostToolResult } from './type
 import { INDUSTRIAL_TOOL_NAMES, dispatchIndustrialTool } from './tools/industrial'
 import { handleCompleteTask, handleReportProgress } from './tools/progress'
 import { handleCancelTask, handleDispatchTask, handleGetMyTaskQueue, handleGetTaskDetails, handleListChannelTasks, handleReassignTask, handleRefuseTask, handleSubmitTask, handleUpdateTask } from './tools/tasks'
+import { handleGrantNodes, handleRevokeNodes } from './tools/team-delegation'
 import { handleBroadcastMessage, handleListOtherTeams, handlePollMessages, handleReadChannelMail, handleSearchOtherTeamsMemory, handleSendCrossChannelMessage, handleSendMessageToAgent } from './tools/messaging'
 import { handleSaveMemory, handleSearchMemory } from './tools/memory'
 import { handleCreateTeamAgent, handleGetQueueOverview, handleListTeamAgents, handleRemoveTeamAgent, handleUpdateTeamAgent } from './tools/team'
@@ -121,7 +122,11 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
       case 'submit_task':
         return await handleSubmitTask(args, state, ws)
       case 'dispatch_task':
-        return await handleDispatchTask(args, ws)
+        return await handleDispatchTask(args, ws, identity)
+      case 'team_grant_nodes':
+        return await handleGrantNodes(identity, args, ws)
+      case 'team_revoke_nodes':
+        return await handleRevokeNodes(identity, args, ws)
       case 'send_message_to_agent':
         return await handleSendMessageToAgent(args, state, ws)
       case 'send_cross_channel_message':

package/server/services/workshop/agents/host-tool-bridge/tools/tasks.ts

@@ -23,12 +23,25 @@ export async function handleSubmitTask(args: Record<string, unknown>, state: Hos
   }
 }
 
-export async function handleDispatchTask(args: Record<string, unknown>, ws: AgentWorkspace): Promise<HostToolResult> {
+export async function handleDispatchTask(args: Record<string, unknown>, ws: AgentWorkspace, identity?: HostToolBridgeContext['identity']): Promise<HostToolResult> {
   const assigneeId = args.assignee_id as string
   const title = args.title as string
   const description = args.description as string | undefined
   const parentTaskId = args.parent_task_id as string | undefined
   const routeReason = args.route_reason as string | undefined
+  // 派发时随任务授予节点权限(lead 专属;grant_node_ids ⊆ lead 自身绑定面,fail-closed):
+  // 任一节点不满足则整单拒绝,任务不创建 —— 避免 worker 拿到任务却没有节点权限的半途态。
+  let grantNote = ''
+  const rawGrant = args.grant_node_ids ?? args.grantNodeIds
+  if (rawGrant != null && identity) {
+    const { grantNodesForDispatch } = await import('./team-delegation')
+    const grantNodeIds = (Array.isArray(rawGrant) ? rawGrant : String(rawGrant).split(',')).map(x => String(x ?? '').trim()).filter(Boolean)
+    if (!grantNodeIds.length) return { text: 'grant_node_ids 为空:要么不传,要么给出至少一个节点 id。', isError: true }
+    const grantMode = args.grant_mode === 'manual' || args.grant_mode === 'auto' ? (args.grant_mode as 'auto' | 'manual') : undefined
+    const grant = await grantNodesForDispatch(identity, assigneeId, grantNodeIds, grantMode, ws)
+    if (!grant.ok) return { text: `未派发:${grant.text}\n请先用 team_grant_nodes 确认你持有这些节点,或修正 node id 后重试。`, isError: true }
+    grantNote = `\n${grant.text}`
+  }
   // 重复派发守卫(真实场景实测:lead 模型可能对同一目标重复派发,引发协调风暴):
   // 同父任务下已存在同标题非终态子任务 → 不再创建,直接指路既有任务
   const dup = await ws.listTasks()
@@ -42,7 +55,7 @@ export async function handleDispatchTask(args: Record<string, unknown>, ws: Agen
     }
   }
   const task = await ws.dispatchTask({ assigneeId, title, description, parentTaskId, routeReason })
-  return { text: `子任务 ${task.id} 已创建并指派 → ${assigneeId}(父任务 ${parentTaskId ?? '无'},标题: ${title}${routeReason ? `,路由理由: ${routeReason}` : ''})` }
+  return { text: `子任务 ${task.id} 已创建并指派 → ${assigneeId}(父任务 ${parentTaskId ?? '无'},标题: ${title}${routeReason ? `,路由理由: ${routeReason}` : ''})${grantNote}` }
 }
 
 export async function handleRefuseTask(args: Record<string, unknown>, ws: AgentWorkspace): Promise<HostToolResult> {

package/server/services/workshop/agents/host-tool-bridge/tools/team-delegation.ts

@@ -0,0 +1,104 @@
+/**
+ * 团队节点权限委派工具(lead 专属):team_grant_nodes / team_revoke_nodes。
+ *
+ * lead 把**自己已绑定**的 DAQ/DCW 节点授权给同频道 worker(派发前、执行中均可),
+ * 授权面不可超越 lead 本人的绑定面(planDelegation fail-closed 校验)。
+ * 校验核心在 agents/node-delegation.ts;本文件只做工具面参数解析与结果文本。
+ */
+import { AppError } from '../../../../../utils/errors'
+import { applyDelegation, planDelegation, revokeDelegation, type DelegationMember } from '../../node-delegation'
+import type { HostToolBridgeContext, HostToolResult } from '../types'
+
+/** workspace 成员视图(listAgents 与本工具面的最小接口;便于单测桩替换) */
+interface MembersView {
+  listAgents(): Promise<Array<{ id: string, role: 'lead' | 'worker', enabled?: number }>>
+}
+
+function membersOf(ws: MembersView): Promise<DelegationMember[]> {
+  return ws.listAgents() as Promise<DelegationMember[]>
+}
+
+function summaryText(bindings: Array<{ nodeId: string, kind: string, mode: string }>): string {
+  const lines = bindings.map(b => `  - ${b.kind === 'daq' ? '数采' : '写控'} ${b.nodeId}(mode=${b.mode})`)
+  return `\n${lines.join('\n')}`
+}
+
+function parseNodeIds(args: Record<string, unknown>): string[] {
+  const raw = args.node_ids ?? args.nodeIds
+  const list = Array.isArray(raw) ? raw : String(raw ?? '').split(',')
+  return list.map(x => String(x ?? '').trim()).filter(Boolean)
+}
+
+/** lead → worker 授予节点(自己绑定面内的节点;fail-closed 全成全败) */
+export async function handleGrantNodes(identity: HostToolBridgeContext['identity'], args: Record<string, unknown>, ws: MembersView): Promise<HostToolResult> {
+  const targetAgentId = String(args.agent_id ?? args.assignee_id ?? '').trim()
+  const nodeIds = parseNodeIds(args)
+  const mode = args.mode === 'manual' || args.mode === 'auto' ? (args.mode as 'auto' | 'manual') : undefined
+  try {
+    const plan = planDelegation({
+      leaderAgentId: identity.agentId,
+      channelId: identity.channelId,
+      targetAgentId,
+      nodeIds,
+      members: await membersOf(ws),
+      mode,
+    })
+    const bindings = applyDelegation(plan, identity.agentId)
+    return {
+      text: `已把 ${bindings.length} 条节点授权授予 ${targetAgentId}:${summaryText(bindings)}\n来源:lead 绑定面内的节点;worker 现在可用 my_industrial_nodes 查看自己的授权。`,
+    }
+  }
+  catch (err) {
+    return { text: err instanceof AppError ? err.message : `节点授权失败: ${err instanceof Error ? err.message : String(err)}`, isError: true }
+  }
+}
+
+/** lead 收回授予给 worker 的节点授权 */
+export async function handleRevokeNodes(identity: HostToolBridgeContext['identity'], args: Record<string, unknown>, ws: MembersView): Promise<HostToolResult> {
+  const targetAgentId = String(args.agent_id ?? args.assignee_id ?? '').trim()
+  const nodeIds = parseNodeIds(args)
+  try {
+    const results = revokeDelegation({
+      leaderAgentId: identity.agentId,
+      targetAgentId,
+      nodeIds,
+      members: await membersOf(ws),
+    })
+    const okList = results.filter(r => r.revoked)
+    const missList = results.filter(r => !r.revoked)
+    const parts = [`已收回 ${okList.length} 条授权`, ...okList.map(r => `  - ${r.kind} ${r.nodeId}`)]
+    if (missList.length) parts.push(`未收回(不在其绑定面或非你授予):${missList.map(r => `${r.kind}:${r.nodeId}`).join('、')}`)
+    return { text: parts.join('\n') }
+  }
+  catch (err) {
+    return { text: err instanceof AppError ? err.message : `收回授权失败: ${err instanceof Error ? err.message : String(err)}`, isError: true }
+  }
+}
+
+export interface DispatchGrantResult {
+  ok: boolean
+  text: string
+}
+
+/**
+ * 派发时随任务授予节点(dispatch_task 的 grant_node_ids;lead 专属)。
+ * fail-closed:任一节点不在 lead 绑定面 → 整单失败,任务不创建。
+ */
+export async function grantNodesForDispatch(identity: HostToolBridgeContext['identity'], assigneeId: string, nodeIds: string[], mode: 'auto' | 'manual' | undefined, ws: MembersView): Promise<DispatchGrantResult> {
+  try {
+    const plan = planDelegation({
+      leaderAgentId: identity.agentId,
+      channelId: identity.channelId,
+      targetAgentId: assigneeId,
+      nodeIds,
+      members: await membersOf(ws),
+      mode,
+    })
+    const bindings = applyDelegation(plan, identity.agentId)
+    return { ok: true, text: `随任务授予 ${bindings.length} 条节点授权 → ${assigneeId}${summaryText(bindings)}` }
+  }
+  catch (err) {
+    const msg = err instanceof AppError ? err.message : `随任务授予节点失败: ${err instanceof Error ? err.message : String(err)}`
+    return { ok: false, text: msg }
+  }
+}

package/server/services/workshop/agents/node-bindings.repo.ts

@@ -38,6 +38,10 @@ export interface AgentNodeBinding {
   kind: AgentNodeBindingKind
   mode: AgentNodeBindingMode
   tuning?: AgentNodeBindingTuning
+  /** 委派来源:lead 经 team_grant_nodes / dispatch_task(grant_node_ids) 授予时 = lead 成员实例 id */
+  grantedByAgentId?: string
+  /** 委派时间(ISO;仅委派产生的绑定携带) */
+  grantedAt?: string
   createdAt: string
 }
 
@@ -83,7 +87,7 @@ export class AgentNodeBindingRepo {
     return this.list.find(b => b.agentId === agentId && b.nodeId === nodeId && b.kind === kind)
   }
 
-  bind(agentId: string, nodeId: string, kind: AgentNodeBindingKind, mode: AgentNodeBindingMode, tuning?: AgentNodeBindingTuning): AgentNodeBinding {
+  bind(agentId: string, nodeId: string, kind: AgentNodeBindingKind, mode: AgentNodeBindingMode, tuning?: AgentNodeBindingTuning, provenance?: { grantedByAgentId?: string }): AgentNodeBinding {
     if (!agentId) throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'agentId 必填')
     if (!nodeId) throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'nodeId 必填')
     if (kind !== 'dcw' && kind !== 'daq') throw new AppError(400, ErrorCodes.VALIDATION_ERROR, `未知节点类型: ${kind}`)
@@ -92,6 +96,10 @@ export class AgentNodeBindingRepo {
     if (prev) {
       prev.mode = mode
       if (tuning !== undefined) prev.tuning = normalizeTuning(tuning)
+      if (provenance?.grantedByAgentId) {
+        prev.grantedByAgentId = provenance.grantedByAgentId
+        prev.grantedAt = new Date().toISOString()
+      }
       this.flush()
       return prev
     }
@@ -102,6 +110,7 @@ export class AgentNodeBindingRepo {
       kind,
       mode,
       ...(tuning ? { tuning: normalizeTuning(tuning) } : {}),
+      ...(provenance?.grantedByAgentId ? { grantedByAgentId: provenance.grantedByAgentId, grantedAt: new Date().toISOString() } : {}),
       createdAt: new Date().toISOString(),
     }
     this.list.push(binding)