agentworkshop 0.7.51 → 0.7.53

package/server/plugins/backup.ts

@@ -53,7 +53,41 @@ async function backupOne(src: string, target: string): Promise<void> {
   }
 }
 
-async function backupOnce(dataDir: string): Promise<void> {
+/** 数据目录内的 JSON 仓储/状态文件(kv、参数面、节点绑定、插件 kv 等)+ 上级配置根的 config.yml/runtime-settings.json */
+async function backupFlatFiles(dataDir: string, backupDir: string, stamp: string): Promise<void> {
+  const bundleDir = resolve(backupDir, `files-${stamp}`)
+  mkdirSync(bundleDir, { recursive: true })
+  const targets: Array<{ src: string, name: string }> = []
+  // dataDir 下所有 .json(逐文件拷贝,目录型子树由各自仓储自轮转,不整树递归)
+  try {
+    for (const f of readdirSync(dataDir, { withFileTypes: true })) {
+      if (f.isFile() && f.name.endsWith('.json')) targets.push({ src: resolve(dataDir, f.name), name: f.name })
+    }
+  }
+  catch { /* 数据目录不可读时跳过 JSON 面 */ }
+  // 配置根(config.yml + runtime-settings.json)——重建实例的"怎么做"半边
+  try {
+    const homeMod = await import('@/shared/config/home.mjs')
+    const rm = homeMod.resolveRunMode({ cwd: process.cwd(), env: process.env })
+    for (const cfg of ['config.yml', 'runtime-settings.json']) {
+      const p = resolve(rm.configRoot, cfg)
+      if (existsSync(p)) targets.push({ src: p, name: cfg })
+    }
+  }
+  catch { /* 模式解析失败只降级 JSON 面 */ }
+  for (const t of targets) {
+    try {
+      const tmp = resolve(bundleDir, `${t.name}.tmp`)
+      await copyFileAsync(t.src, tmp)
+      renameSync(tmp, resolve(bundleDir, t.name))
+    }
+    catch (err) {
+      console.error(`[backup] ${t.name} 快照失败:`, err instanceof Error ? err.message : err)
+    }
+  }
+}
+
+export async function backupOnce(dataDir: string): Promise<void> {
   const backupDir = resolve(dataDir, 'backups')
   mkdirSync(backupDir, { recursive: true })
   const stamp = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19)
@@ -69,6 +103,8 @@ async function backupOnce(dataDir: string): Promise<void> {
       console.error(`[backup] ${file} 快照失败:`, err instanceof Error ? err.message : err)
     }
   }
+  // JSON 仓储 + 配置面快照(三库之外的可重建性半边)
+  await backupFlatFiles(dataDir, backupDir, stamp)
   // 轮转:每库仅保留最近 backup.keep 份(按文件名内时间戳倒序;env BACKUP_KEEP 兼容)
   const keep = Math.max(1, backupSettings().keep)
   for (const file of DB_FILES) {
@@ -83,9 +119,28 @@ async function backupOnce(dataDir: string): Promise<void> {
       catch { /* 轮转失败不致命 */ }
     }
   }
+  // files-<stamp>/ 目录同 keep 轮转
+  const fileBundles = readdirSync(backupDir)
+    .filter(f => f.startsWith('files-') && !f.includes('.'))
+    .sort()
+    .reverse()
+  for (const stale of fileBundles.slice(keep)) {
+    try {
+      rmSync(resolve(backupDir, stale), { recursive: true })
+    }
+    catch { /* 轮转失败不致命 */ }
+  }
   console.log('[backup] 快照完成 →', backupDir)
   // R4:记录最近一次成功备份时间,供 /api/metrics 观测
   g.__awBackupLastAt = new Date().toISOString()
+  // 备份成败留痕(audit_log;动态导入避免插件装载期循环依赖)
+  void import('../services/workshop/ops/ops').then(({ recordOps }) => {
+    recordOps({
+      actor: 'system', actorName: 'backup', actorKind: 'system',
+      action: 'system.backup.run', kind: 'system',
+      summary: `数据库快照完成(${DB_FILES.length} 库 + JSON/配置)→ ${backupDir}`,
+    })
+  }).catch(() => {})
 }
 
 export default function backupPlugin() {

package/server/plugins-builtin/diag-bridge/host/plugin.mjs

@@ -68,17 +68,24 @@ export default {
         if (Date.now() - last < AUTO_COOLDOWN_MS) return
         const now = Date.now()
         ctx.kv.set(`cooldown:${line}`, now) // 先占冷却,防同窗连发
-        startDiagnosis(ctx, {
-          line,
-          fromMs: now - 60 * MIN,
-          toMs: now,
-          question: `${line} 产线该时窗数据深度根因诊断(自动触发:节点 ${s.nodeId} 采样值 ${s.value} ${rule.op === 'lt' ? '<' : '>'} ${rule.value})`,
-          scene: `${line}_auto`,
-          source: 'auto',
-        }).then((r) => {
-          if (r.ok) ctx.logger.warn(`自动诊断已发起:产线 ${line} runId=${r.runId}(节点 ${s.nodeId}=${s.value} 越限)`)
-          else ctx.logger.warn(`自动诊断发起失败(产线 ${line}): ${r.error}`)
-        }).catch(() => {})
+        // 首拍竞态:开线后首个越限样本即刻触发,快照查询早于 tsdb 首次刷盘(TSDB_FLUSH_MS=500ms)
+        // → 时窗查空失败。空窗失败定向重试(≤3 次、间隔 5s,总窗 ≤20s);冷却不回滚,仍只此一次派发。
+        const question = `${line} 产线该时窗数据深度根因诊断(自动触发:节点 ${s.nodeId} 采样值 ${s.value} ${rule.op === 'lt' ? '<' : '>'} ${rule.value})`
+        const attempt = (n) => {
+          startDiagnosis(ctx, {
+            line,
+            fromMs: now - 60 * MIN,
+            toMs: now,
+            question,
+            scene: `${line}_auto`,
+            source: 'auto',
+          }).then((r) => {
+            if (r.ok) ctx.logger.warn(`自动诊断已发起:产线 ${line} runId=${r.runId}(节点 ${s.nodeId}=${s.value} 越限)`)
+            else if (n < 3 && String(r.error ?? '').includes('无数采样本')) setTimeout(() => attempt(n + 1), 5000)
+            else ctx.logger.warn(`自动诊断发起失败(产线 ${line}): ${r.error}`)
+          }).catch(() => {})
+        }
+        attempt(0)
       }
       catch { /* 钩子内绝不抛 */ }
     })

package/server/repositories/user.repository.ts

@@ -139,7 +139,8 @@ function importLegacyWorkshopUsers(d: DatabaseSync): void {
     insertUser.run(row.id, row.name, email, hashPassword(randomPassword()), 'user', 'active', row.created_at ?? now())
     const hash = hashToken(row.token)
     if (!tokenExists.get(hash)) {
-      insertToken.run(randomUUID(), row.id, 'legacy', hash, row.token, row.created_at ?? now())
+      // 安全基线:token_plain 不落明文(哈希即可鉴权;明文列仅为旧库形状兼容,恒 NULL)
+      insertToken.run(randomUUID(), row.id, 'legacy', hash, null, row.created_at ?? now())
     }
   }
 }
@@ -241,17 +242,21 @@ function toUser(row: Record<string, unknown>): User {
 export const userRepository = {
   list({ page, pageSize, keyword }: UserListQuery): Paginated<User> {
     const d = getDb()
-    const kw = keyword?.toLowerCase() ?? ''
+    // 分页边界钳制:超大/非法分页参数在 SQL 外收口(OFFSET 1e20 会打穿 sqlite 抛 500)
+    const safePage = Number.isSafeInteger(page) && page >= 1 ? page : 1
+    const safeSize = Number.isSafeInteger(pageSize) && pageSize >= 1 ? Math.min(pageSize, 200) : 20
+    // LIKE 通配符转义:用户关键词里的 %/_ 按字面匹配,不放大匹配面(ESCAPE 子句配套)
+    const kw = keyword?.toLowerCase() ? keyword.toLowerCase().replace(/[\\%_]/g, ch => `\\${ch}`) : ''
     const where = kw
-      ? `WHERE LOWER(name) LIKE ? OR LOWER(email) LIKE ?`
+      ? `WHERE LOWER(name) LIKE ? ESCAPE '\\' OR LOWER(email) LIKE ? ESCAPE '\\'`
       : ''
     const params = kw ? [`%${kw}%`, `%${kw}%`] : []
     const total = (d.prepare(`SELECT COUNT(*) AS n FROM users ${where}`).get(...params) as { n: number }).n
     const rows = d.prepare(
       `SELECT id, name, email, role, status, created_at AS createdAt FROM users ${where}
        ORDER BY created_at DESC LIMIT ? OFFSET ?`,
-    ).all(...params, pageSize, (page - 1) * pageSize) as Array<Record<string, unknown>>
-    return { items: rows.map(toUser), total, page, pageSize }
+    ).all(...params, safeSize, (safePage - 1) * safeSize) as Array<Record<string, unknown>>
+    return { items: rows.map(toUser), total, page: safePage, pageSize: safeSize }
   },
 
   /** 全量用户(不分页;管理面授权矩阵用,避免分页截断) */

package/server/services/user.service.ts

@@ -23,6 +23,12 @@ export function resolveUserByToken(token: string): UserProfile | null {
 }
 
 export const userService = {
+  /**
+   * 登录防爆破:同 IP+邮箱在 15 分钟窗口内累计失败 ≥5 次 → 锁到窗口结束(429)。
+   * 内存态,重启即清;多实例部署由反代层限流补齐。计数表封顶 5000 条防内存滥用。
+   */
+  _loginFails: new Map<string, { count: number, firstAt: number }>(),
+
   // ===== 管理面（与既有契约一致）=====
 
   list(input: UserListInput) {
@@ -104,9 +110,25 @@ export const userService = {
   },
 
   /** 登录：密码校验通过后签发新 token（每次登录生成一个可独立吊销的会话 token） */
-  login(input: UserLogin): AuthResult {
+  login(input: UserLogin, opts: { ip?: string } = {}): AuthResult {
+    const FAIL_WINDOW_MS = 15 * 60_000
+    const LOCK_THRESHOLD = 5
+    const lockKey = `${opts.ip ?? 'local'}|${input.email.toLowerCase()}`
+    const fails = this._loginFails
+    if (fails.size > 5000) {
+      const oldest = fails.keys().next().value
+      if (oldest) fails.delete(oldest)
+    }
+    const rec = fails.get(lockKey)
+    // 已达阈值且窗口未过 → 锁定;偶发失败(1-4 次)不锁,窗口滑过即重置
+    if (rec && rec.count >= LOCK_THRESHOLD && Date.now() - rec.firstAt < FAIL_WINDOW_MS) {
+      const waitMin = Math.ceil((FAIL_WINDOW_MS - (Date.now() - rec.firstAt)) / 60_000)
+      throw new AppError(429, 'LOGIN_LOCKED', `失败次数过多,账号已临时锁定,请约 ${waitMin} 分钟后再试`)
+    }
     const { id, hash } = userRepository.getPasswordHash(input.email) ?? {}
     if (!id || !hash || !verifyPassword(input.password, hash)) {
+      if (!rec || Date.now() - rec.firstAt >= FAIL_WINDOW_MS) fails.set(lockKey, { count: 1, firstAt: Date.now() })
+      else rec.count += 1
       throw new AppError(401, 'UNAUTHORIZED', '邮箱或密码错误')
     }
     const user = userRepository.findById(id)
@@ -116,6 +138,7 @@ export const userService = {
     if (user.status !== 'active') {
       throw new AppError(403, 'FORBIDDEN', '账号已禁用')
     }
+    fails.delete(lockKey)
     const { raw } = userRepository.createToken(id, `session-${Date.now()}`)
     return { user: this.publicProfile(user), token: raw }
   },

package/server/services/workshop/agents/host-tool-bridge/dispatch.ts

@@ -19,6 +19,7 @@ import type { HostToolBridgeContext, HostToolCall, HostToolResult } from './type
 import { INDUSTRIAL_TOOL_NAMES, dispatchIndustrialTool } from './tools/industrial'
 import { handleCompleteTask, handleReportProgress } from './tools/progress'
 import { handleCancelTask, handleDispatchTask, handleGetMyTaskQueue, handleGetTaskDetails, handleListChannelTasks, handleReassignTask, handleRefuseTask, handleSubmitTask, handleUpdateTask } from './tools/tasks'
+import { handleGrantNodes, handleRevokeNodes } from './tools/team-delegation'
 import { handleBroadcastMessage, handleListOtherTeams, handlePollMessages, handleReadChannelMail, handleSearchOtherTeamsMemory, handleSendCrossChannelMessage, handleSendMessageToAgent } from './tools/messaging'
 import { handleSaveMemory, handleSearchMemory } from './tools/memory'
 import { handleCreateTeamAgent, handleGetQueueOverview, handleListTeamAgents, handleRemoveTeamAgent, handleUpdateTeamAgent } from './tools/team'
@@ -95,7 +96,7 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
   }
 
   // 所有真实写入口在统一分发层再做一次服务端 fail-closed 守卫；工具目录隐藏不是安全边界。
-  if (['dcw_control', 'param_control', 'dcw_rollback', 'recipe_update', 'recipe_rollback'].includes(req.toolName)) {
+  if (['dcw_control', 'param_control', 'dcw_rollback', 'recipe_update', 'recipe_rollback', 'recipe_trial', 'recipe_apply'].includes(req.toolName)) {
     const profile = getChannelTwinProfile(identity.channelId)
     const guard = twinWriteGuard(identity.channelId, profile)
     if (!guard.allowed) return { text: `${guard.code}: ${guard.message}`, isError: true }
@@ -121,7 +122,11 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
       case 'submit_task':
         return await handleSubmitTask(args, state, ws)
       case 'dispatch_task':
-        return await handleDispatchTask(args, ws)
+        return await handleDispatchTask(args, ws, identity)
+      case 'team_grant_nodes':
+        return await handleGrantNodes(identity, args, ws)
+      case 'team_revoke_nodes':
+        return await handleRevokeNodes(identity, args, ws)
       case 'send_message_to_agent':
         return await handleSendMessageToAgent(args, state, ws)
       case 'send_cross_channel_message':

package/server/services/workshop/agents/host-tool-bridge/tools/industrial.ts

@@ -9,7 +9,7 @@
  * 该族**不依赖 workspace**,由 dispatch 在 workspace 门控之前分流(保持原分发顺序)。
  */
 import type { HostToolResult } from '../types'
-import { toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeLog, toolRecipeRollback, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest } from '../../industrial'
+import { toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeApply, toolRecipeLog, toolRecipeRollback, toolRecipeTrial, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest } from '../../industrial'
 
 type IndustrialToolHandler = (agentId: string, args: Record<string, unknown>, channelId?: string) => Promise<HostToolResult>
 
@@ -59,7 +59,9 @@ const INDUSTRIAL_HANDLERS = new Map<string, IndustrialToolHandler>([
   ['line_context', (agentId, args) => toolLineContext(agentId, args as { line_id?: string })],
   ['recipe_versions', (agentId, args) => toolRecipeVersions(agentId, args as { recipe_id?: string, limit?: number | string })],
   ['recipe_update', (agentId, args) => toolRecipeUpdate(agentId, args as Parameters<typeof toolRecipeUpdate>[1])],
-  ['recipe_rollback', (agentId, args) => toolRecipeRollback(agentId, args as Parameters<typeof toolRecipeRollback>[1])],
+  ['recipe_rollback', (agentId, args) => toolRecipeRollback(agentId, args as Parameters<typeof toolRecipeRollback>[1])],
+  ['recipe_trial', (agentId, args) => toolRecipeTrial(agentId, args as Parameters<typeof toolRecipeTrial>[1])],
+  ['recipe_apply', (agentId, args) => toolRecipeApply(agentId, args as Parameters<typeof toolRecipeApply>[1])],
 ])
 
 /** 工业工具名集合(与 INDUSTRIAL_HANDLERS 同源;dispatch 据此在 workspace 门控前分流) */

package/server/services/workshop/agents/host-tool-bridge/tools/tasks.ts

@@ -23,12 +23,25 @@ export async function handleSubmitTask(args: Record<string, unknown>, state: Hos
   }
 }
 
-export async function handleDispatchTask(args: Record<string, unknown>, ws: AgentWorkspace): Promise<HostToolResult> {
+export async function handleDispatchTask(args: Record<string, unknown>, ws: AgentWorkspace, identity?: HostToolBridgeContext['identity']): Promise<HostToolResult> {
   const assigneeId = args.assignee_id as string
   const title = args.title as string
   const description = args.description as string | undefined
   const parentTaskId = args.parent_task_id as string | undefined
   const routeReason = args.route_reason as string | undefined
+  // 派发时随任务授予节点权限(lead 专属;grant_node_ids ⊆ lead 自身绑定面,fail-closed):
+  // 任一节点不满足则整单拒绝,任务不创建 —— 避免 worker 拿到任务却没有节点权限的半途态。
+  let grantNote = ''
+  const rawGrant = args.grant_node_ids ?? args.grantNodeIds
+  if (rawGrant != null && identity) {
+    const { grantNodesForDispatch } = await import('./team-delegation')
+    const grantNodeIds = (Array.isArray(rawGrant) ? rawGrant : String(rawGrant).split(',')).map(x => String(x ?? '').trim()).filter(Boolean)
+    if (!grantNodeIds.length) return { text: 'grant_node_ids 为空:要么不传,要么给出至少一个节点 id。', isError: true }
+    const grantMode = args.grant_mode === 'manual' || args.grant_mode === 'auto' ? (args.grant_mode as 'auto' | 'manual') : undefined
+    const grant = await grantNodesForDispatch(identity, assigneeId, grantNodeIds, grantMode, ws)
+    if (!grant.ok) return { text: `未派发:${grant.text}\n请先用 team_grant_nodes 确认你持有这些节点,或修正 node id 后重试。`, isError: true }
+    grantNote = `\n${grant.text}`
+  }
   // 重复派发守卫(真实场景实测:lead 模型可能对同一目标重复派发,引发协调风暴):
   // 同父任务下已存在同标题非终态子任务 → 不再创建,直接指路既有任务
   const dup = await ws.listTasks()
@@ -42,7 +55,7 @@ export async function handleDispatchTask(args: Record<string, unknown>, ws: Agen
     }
   }
   const task = await ws.dispatchTask({ assigneeId, title, description, parentTaskId, routeReason })
-  return { text: `子任务 ${task.id} 已创建并指派 → ${assigneeId}(父任务 ${parentTaskId ?? '无'},标题: ${title}${routeReason ? `,路由理由: ${routeReason}` : ''})` }
+  return { text: `子任务 ${task.id} 已创建并指派 → ${assigneeId}(父任务 ${parentTaskId ?? '无'},标题: ${title}${routeReason ? `,路由理由: ${routeReason}` : ''})${grantNote}` }
 }
 
 export async function handleRefuseTask(args: Record<string, unknown>, ws: AgentWorkspace): Promise<HostToolResult> {

package/server/services/workshop/agents/host-tool-bridge/tools/team-delegation.ts

@@ -0,0 +1,104 @@
+/**
+ * 团队节点权限委派工具(lead 专属):team_grant_nodes / team_revoke_nodes。
+ *
+ * lead 把**自己已绑定**的 DAQ/DCW 节点授权给同频道 worker(派发前、执行中均可),
+ * 授权面不可超越 lead 本人的绑定面(planDelegation fail-closed 校验)。
+ * 校验核心在 agents/node-delegation.ts;本文件只做工具面参数解析与结果文本。
+ */
+import { AppError } from '../../../../../utils/errors'
+import { applyDelegation, planDelegation, revokeDelegation, type DelegationMember } from '../../node-delegation'
+import type { HostToolBridgeContext, HostToolResult } from '../types'
+
+/** workspace 成员视图(listAgents 与本工具面的最小接口;便于单测桩替换) */
+interface MembersView {
+  listAgents(): Promise<Array<{ id: string, role: 'lead' | 'worker', enabled?: number }>>
+}
+
+function membersOf(ws: MembersView): Promise<DelegationMember[]> {
+  return ws.listAgents() as Promise<DelegationMember[]>
+}
+
+function summaryText(bindings: Array<{ nodeId: string, kind: string, mode: string }>): string {
+  const lines = bindings.map(b => `  - ${b.kind === 'daq' ? '数采' : '写控'} ${b.nodeId}(mode=${b.mode})`)
+  return `\n${lines.join('\n')}`
+}
+
+function parseNodeIds(args: Record<string, unknown>): string[] {
+  const raw = args.node_ids ?? args.nodeIds
+  const list = Array.isArray(raw) ? raw : String(raw ?? '').split(',')
+  return list.map(x => String(x ?? '').trim()).filter(Boolean)
+}
+
+/** lead → worker 授予节点(自己绑定面内的节点;fail-closed 全成全败) */
+export async function handleGrantNodes(identity: HostToolBridgeContext['identity'], args: Record<string, unknown>, ws: MembersView): Promise<HostToolResult> {
+  const targetAgentId = String(args.agent_id ?? args.assignee_id ?? '').trim()
+  const nodeIds = parseNodeIds(args)
+  const mode = args.mode === 'manual' || args.mode === 'auto' ? (args.mode as 'auto' | 'manual') : undefined
+  try {
+    const plan = planDelegation({
+      leaderAgentId: identity.agentId,
+      channelId: identity.channelId,
+      targetAgentId,
+      nodeIds,
+      members: await membersOf(ws),
+      mode,
+    })
+    const bindings = applyDelegation(plan, identity.agentId)
+    return {
+      text: `已把 ${bindings.length} 条节点授权授予 ${targetAgentId}:${summaryText(bindings)}\n来源:lead 绑定面内的节点;worker 现在可用 my_industrial_nodes 查看自己的授权。`,
+    }
+  }
+  catch (err) {
+    return { text: err instanceof AppError ? err.message : `节点授权失败: ${err instanceof Error ? err.message : String(err)}`, isError: true }
+  }
+}
+
+/** lead 收回授予给 worker 的节点授权 */
+export async function handleRevokeNodes(identity: HostToolBridgeContext['identity'], args: Record<string, unknown>, ws: MembersView): Promise<HostToolResult> {
+  const targetAgentId = String(args.agent_id ?? args.assignee_id ?? '').trim()
+  const nodeIds = parseNodeIds(args)
+  try {
+    const results = revokeDelegation({
+      leaderAgentId: identity.agentId,
+      targetAgentId,
+      nodeIds,
+      members: await membersOf(ws),
+    })
+    const okList = results.filter(r => r.revoked)
+    const missList = results.filter(r => !r.revoked)
+    const parts = [`已收回 ${okList.length} 条授权`, ...okList.map(r => `  - ${r.kind} ${r.nodeId}`)]
+    if (missList.length) parts.push(`未收回(不在其绑定面或非你授予):${missList.map(r => `${r.kind}:${r.nodeId}`).join('、')}`)
+    return { text: parts.join('\n') }
+  }
+  catch (err) {
+    return { text: err instanceof AppError ? err.message : `收回授权失败: ${err instanceof Error ? err.message : String(err)}`, isError: true }
+  }
+}
+
+export interface DispatchGrantResult {
+  ok: boolean
+  text: string
+}
+
+/**
+ * 派发时随任务授予节点(dispatch_task 的 grant_node_ids;lead 专属)。
+ * fail-closed:任一节点不在 lead 绑定面 → 整单失败,任务不创建。
+ */
+export async function grantNodesForDispatch(identity: HostToolBridgeContext['identity'], assigneeId: string, nodeIds: string[], mode: 'auto' | 'manual' | undefined, ws: MembersView): Promise<DispatchGrantResult> {
+  try {
+    const plan = planDelegation({
+      leaderAgentId: identity.agentId,
+      channelId: identity.channelId,
+      targetAgentId: assigneeId,
+      nodeIds,
+      members: await membersOf(ws),
+      mode,
+    })
+    const bindings = applyDelegation(plan, identity.agentId)
+    return { ok: true, text: `随任务授予 ${bindings.length} 条节点授权 → ${assigneeId}${summaryText(bindings)}` }
+  }
+  catch (err) {
+    const msg = err instanceof AppError ? err.message : `随任务授予节点失败: ${err instanceof Error ? err.message : String(err)}`
+    return { ok: false, text: msg }
+  }
+}

package/server/services/workshop/agents/industrial/index.ts

@@ -17,7 +17,7 @@ export { toolMyIndustrialNodes, toolDcwControl, toolDcwRead } from './dcw-tools'
 export { toolParamControl, toolParamRead } from './param-tools'
 export { toolDaqQuery, toolDaqFrames } from './daq-tools'
 export { toolDcwJudge, toolDcwRollback, toolDcwJournal } from './dcw-judge-tools'
-export { toolOpsLog, toolRecipeLog, toolLineContext, toolRecipeVersions, toolRecipeUpdate, toolRecipeRollback } from './ops-tools'
+export { toolOpsLog, toolRecipeLog, toolLineContext, toolRecipeVersions, toolRecipeUpdate, toolRecipeRollback, toolRecipeTrial, toolRecipeApply } from './ops-tools'
 export { toolAmlNodeCatalog, toolAmlDatasetBuild, toolAmlDatasetStats } from './aml-dataset-tools'
 export { toolAmlJobSubmit, toolAmlJobStatus, toolAmlJobLogs, toolAmlJobCancel, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolAmlTrainingPlanCreate } from './aml-job-tools'