agentworkshop 0.7.54 → 0.7.59

package/scripts/onboarding/forge-channel.mjs

@@ -0,0 +1,157 @@
+/**
+ * scripts/onboarding/forge-channel.mjs —— 按场景锻造作业频道(skill 阶段4)。
+ * 职责:模板实例化(或直建)→ 团队级插件开关 → Agent 绑定节点/配方(权限模型v2) →
+ *      线域授权 → 种子任务派发。scenario 决定默认模板/治理档位/HITL 策略。
+ * 输入 JSON:
+ * {
+ *   "scenario": "optimize" | "diagnose" | "tuning",
+ *   "name": "注塑闭环优化频道",
+ *   "lineId": "ln-xxxx",              // provision-line 输出
+ *   "templateId": "chtpl-...",        // 可省:按 scenario 取默认
+ *   "plugins": {"idd-closedloop-bridge": true, "rag-bridge": true},
+ *   "bindings": [                      // agentRole: lead|worker:N(第N个worker,0起)
+ *     {"agentRole":"worker:2","kind":"recipe","nodeId":"$RECIPE","mode":"manual"},
+ *     {"agentRole":"worker:0","kind":"daq","nodeId":"$DAQ:熔体温度PV","mode":"auto"}
+ *   ],
+ *   "provision": {...},               // 可选:内联 provision-line 摘要,用于 $DAQ:名字/$RECIPE 引用
+ *   "seedTask": {"title":"...","description":"...","budget_minutes":90}
+ * }
+ * 场景默认(可被 templateId 覆盖):
+ *   optimize → chtpl-generic-optimize-default(4人闭环;controlPolicy=hitl_governed)
+ *   diagnose → chtpl-line-doctor-default(零写只读档;recommendation_only)
+ *   tuning   → chtpl-generic-optimize-default + 全部绑定强制 manual(小步长微调)
+ * 用法:node scripts/onboarding/forge-channel.mjs <config.json|->
+ */
+import { api, login, ok, summary, readConfig, fingerprint, assertNotProtected } from './lib.mjs'
+
+const DEFAULT_TEMPLATE = {
+  optimize: 'chtpl-generic-optimize-default',
+  diagnose: 'chtpl-line-doctor-default',
+  tuning: 'chtpl-generic-optimize-default',
+}
+const DEFAULT_POLICY = { optimize: 'hitl_governed', diagnose: 'recommendation_only', tuning: 'hitl_governed' }
+
+const cfg = await readConfig()
+const tok = await login()
+const scenario = cfg.scenario ?? 'optimize'
+assertNotProtected(cfg.lineId, '目标产线')
+const tag = fingerprint('CH', cfg.name)
+
+// ---------- 1. 频道(模板实例化;同名指纹复用) ----------
+const chList = await api('GET', '/api/workshop/channels', undefined, tok)
+const chItems = chList.data?.items ?? chList.data ?? []
+let channel = (Array.isArray(chItems) ? chItems : []).find(c => String(c.description ?? '').includes(tag))
+  ?? (Array.isArray(chItems) ? chItems : []).find(c => c.name === cfg.name && c.lineId === cfg.lineId)
+let channelId
+if (channel) {
+  channelId = channel.id
+  ok('频道已存在(复用)', true, channelId)
+}
+else {
+  const j = await api('POST', `/api/workshop/channel-templates/${cfg.templateId ?? DEFAULT_TEMPLATE[scenario]}/instantiate`, {
+    name: cfg.name,
+    bindLineId: cfg.lineId,
+    controlPolicy: DEFAULT_POLICY[scenario],
+    ...(cfg.scene ? { scene: cfg.scene } : {}),
+    ...(cfg.promptVariables ? { promptVariables: cfg.promptVariables } : {}),
+  }, tok)
+  channelId = j.data?.channelId
+  ok(`模板实例化(${scenario})`, !!channelId, channelId ?? j.message ?? '')
+}
+if (!channelId) process.exit(1)
+
+// ---------- 2. 团队级插件开关 ----------
+const plugins = Object.entries(cfg.plugins ?? {}).filter(([, en]) => en).map(([name]) => ({ name, enabled: true }))
+if (plugins.length) {
+  const j = await api('PUT', `/api/workshop/channels/${channelId}/plugins`, { plugins }, tok)
+  ok('插件开关', j.code === 0 || !!j.data, j.message ?? (plugins.map(p => p.name).join(',')))
+}
+
+// ---------- 3. Agent 绑定(成员实例 id;权限模型 v2) ----------
+const members = await api('GET', `/api/workshop/channels/${channelId}/agents`, undefined, tok)
+const agents = members.data ?? []
+const workers = agents.filter(a => a.role === 'worker')
+const resolveAgent = (role) => {
+  if (role === 'lead') return agents.find(a => a.role === 'lead')?.id ?? agents.find(a => a.role === 'lead')?.agentId
+  const idx = Number(String(role).split(':')[1] ?? 0)
+  return workers[idx]?.id ?? workers[idx]?.agentId
+}
+const prov = cfg.provision ?? {}
+const resolveNode = (ref) => {
+  if (ref === '$RECIPE') return prov.recipeId
+  if (String(ref).startsWith('$DAQ:')) return prov.daq?.[String(ref).slice(5)]
+  if (String(ref).startsWith('$DCW:')) return prov.dcw?.[String(ref).slice(5)]
+  return ref
+}
+for (const b of cfg.bindings ?? []) {
+  const agentId = resolveAgent(b.agentRole)
+  const nodeId = resolveNode(b.nodeId)
+  if (!agentId || !nodeId) {
+    ok(`绑定[${b.agentRole}→${b.nodeId}]`, false, `agentId=${agentId} nodeId=${nodeId}(检查 provision 摘要与 worker 序号)`)
+    continue
+  }
+  const mode = scenario === 'tuning' && b.kind === 'recipe' ? 'manual' : (b.mode ?? 'manual') // 微调场景仅写面(配方)强制 manual,daq 只读绑定不受影响
+  const j = await api('POST', '/api/workshop/agent-tools/bindings', { agentId, nodeId, kind: b.kind, mode }, tok)
+  ok(`绑定[${b.agentRole}→${b.kind}:${String(b.nodeId).slice(0, 24)} mode=${mode}]`, !!j.data?.binding?.id || j.code === 0, j.data?.binding?.id ?? j.message ?? '')
+}
+
+// ---------- 3b. MES 取数授权配方(可见面 = dcw 存量绑定 ∪ 配方参数节点;kind='dcw' 绑定已废弃,
+//              history-only mes 节点的正道 = 参数面授权配方,只取数不下发) ----------
+if (Array.isArray(cfg.mesFetchGrants) && cfg.mesFetchGrants.length > 0) {
+  const recipes = await api('GET', '/api/workshop/dcw/recipes', undefined, tok)
+  const baseRecipe = (recipes.data?.recipes ?? []).find(r => r.id === prov.recipeId)
+  for (const g of cfg.mesFetchGrants) {
+    const agentId = resolveAgent(g.agentRole)
+    const nodeIds = (g.nodeIds ?? []).map(resolveNode).filter(Boolean)
+    if (!agentId || nodeIds.length === 0) {
+      ok(`MES授权[${g.agentRole}]`, false, `agentId=${agentId} nodeIds=${nodeIds.length}`)
+      continue
+    }
+    const grantName = g.name ?? `MES取数授权配方(${cfg.name})`
+    const dup = (recipes.data?.recipes ?? []).find(r => r.name === grantName)
+    let grantRecipeId = dup?.id
+    if (grantRecipeId) {
+      ok('MES授权配方复用', true, grantRecipeId)
+    }
+    else {
+      const j = await api('POST', '/api/workshop/dcw/recipes', {
+        name: grantName, productId: baseRecipe?.productId, lineId: cfg.lineId, opIntervalMs: 0,
+        params: nodeIds.map(id => ({ nodeId: id, value: 0 })),
+        reason: 'MES 直取节点可见面授权(仅取数面;不下发本配方)',
+      }, tok)
+      grantRecipeId = j.data?.recipe?.id ?? j.data?.id
+      ok('MES授权配方', !!grantRecipeId, grantRecipeId ?? j.message ?? '')
+    }
+    if (grantRecipeId) {
+      const b = await api('POST', '/api/workshop/agent-tools/bindings', { agentId, nodeId: grantRecipeId, kind: 'recipe', mode: 'manual' }, tok)
+      ok(`MES授权绑定[${g.agentRole}→${nodeIds.length} 点]`, !!b.data?.binding?.id || b.code === 0, b.data?.binding?.id ?? b.message ?? '')
+    }
+  }
+}
+
+// ---------- 4. 线域授权(权限 v3:频道成员可见/可操作) ----------
+const userIds = [...new Set(agents.map(a => a.userId).filter(Boolean))]
+for (const uid of userIds) {
+  const j = await api('PUT', '/api/workshop/permissions', { userId: uid, grants: [{ lineId: cfg.lineId, mode: 'operate' }] }, tok)
+  ok(`线域授权[${String(uid).slice(0, 8)}]`, j.code === 0 || !!j.data, j.message ?? '')
+}
+
+// ---------- 5. 种子任务(同题幂等:频道复用时不得重复派发) ----------
+if (cfg.seedTask) {
+  const existing = await api('GET', `/api/workshop/channels/${channelId}/tasks`, undefined, tok)
+  const dup = (existing.data ?? []).find(t => t.title === cfg.seedTask.title)
+  if (dup) {
+    ok('种子任务已存在(同题跳过)', true, dup.id)
+  }
+  else {
+    const j = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
+      title: cfg.seedTask.title,
+      description: cfg.seedTask.description,
+      ...(cfg.seedTask.budget_minutes ? { budget_minutes: cfg.seedTask.budget_minutes } : {}),
+    }, tok)
+    ok('种子任务派发', !!j.data?.id, j.data?.id ?? j.message ?? '')
+  }
+}
+
+console.log('\n' + JSON.stringify({ channelId, scenario }))
+summary('频道锻造')

package/scripts/onboarding/lib.mjs

@@ -0,0 +1,78 @@
+/**
+ * scripts/onboarding/lib.mjs —— 产线接入 skill 的共享库(fetch/断言/幂等指纹/登录)。
+ * 设计分工:skill 指令(aw-line-onboarding)做文档理解与 driverConfig 生成;
+ * 本目录脚本只做**确定性 REST 调用+断言**,输入是配置 JSON,永不理解文档。
+ * 风格对齐 scripts/testing/api-full-loop.mjs(ok 计数断言 + 信封 {code,data})。
+ */
+import { createHash } from 'node:crypto'
+
+export const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3001'
+
+let pass = 0, fail = 0
+export const ok = (name, cond, detail = '') => {
+  console.log(`${cond ? '✅' : '❌'} ${name}${detail ? ' — ' + detail : ''}`)
+  cond ? pass++ : fail++
+  return cond
+}
+export const summary = (label) => {
+  console.log(`\n=== ${label}: ${pass} 通过 / ${fail} 失败 ===`)
+  if (fail > 0) process.exit(1)
+}
+
+export const api = async (m, u, body, tok) => {
+  const r = await fetch(BASE + u, {
+    method: m,
+    headers: { 'content-type': 'application/json', ...(tok ? { authorization: `Bearer ${tok}` } : {}) },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  })
+  return r.json()
+}
+
+export async function login() {
+  if (process.env.AW_TOKEN) return process.env.AW_TOKEN
+  const email = process.env.AW_EMAIL ?? 'admin@awshop.local'
+  const password = process.env.AW_PASS ?? 'admin123'
+  const j = await api('POST', '/api/users/login', { email, password })
+  if (!j.data?.token) throw new Error(`登录失败:${j.message ?? '未知'}(可用 AW_TOKEN/AW_EMAIL/AW_PASS 覆盖)`)
+  return j.data.token
+}
+
+/** 幂等指纹:同输入 → 同标签(写进 description,建前先查列表复用) */
+export function fingerprint(kind, ...parts) {
+  const h = createHash('sha1').update(parts.join('|')).digest('base64url').slice(0, 10)
+  return `AW-${kind}:${h}`
+}
+
+/** 按 description 指纹在列表中找既有资源(幂等复用) */
+export function findByTag(items, tag) {
+  return (items ?? []).find(x => String(x.description ?? '').includes(tag))
+}
+
+/** 读 JSON 配置文件(process.argv[2]),带 --stdin 支持 */
+export async function readConfig() {
+  const arg = process.argv[2]
+  if (!arg || arg === '--stdin') {
+    const chunks = []
+    for await (const c of process.stdin) chunks.push(c)
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  }
+  const { readFileSync } = await import('node:fs')
+  return JSON.parse(readFileSync(arg, 'utf8'))
+}
+
+/** 守护红线:演示线1 及既有关键资源绝不允许出现在本次写入目标里 */
+export const PROTECTED = ['ln-d7e0a2a2']
+export function assertNotProtected(id, what = '资源') {
+  if (PROTECTED.includes(id)) throw new Error(`红线:${what} ${id} 是受保护演示资源,禁止操作`)
+}
+
+/** 轮询直到 cond 或超时(验收用:采样落库/HITL 卡出现) */
+export async function pollUntil(fn, { timeoutMs = 30000, stepMs = 2000, label = 'poll' } = {}) {
+  const t0 = Date.now()
+  while (Date.now() - t0 < timeoutMs) {
+    const v = await fn()
+    if (v) return v
+    await new Promise(r => setTimeout(r, stepMs))
+  }
+  throw new Error(`${label}: ${Math.round(timeoutMs / 1000)}s 内未达成`)
+}

package/scripts/onboarding/onboard.mjs

@@ -0,0 +1,196 @@
+/**
+ * scripts/onboarding/onboard.mjs —— 一键接入编排器(skill 全阶段流水;2026-10-10 优化轮)。
+ *
+ * 从**一份统一配置 JSON**直接创建:连通性预检 → 产线供给(线/节点/上下限/配方/开跑)→
+ * 场景化频道锻造(模板/插件/绑定/MES 授权配方/种子任务)→ V1-V6 验收 →(可选)冒烟闭环步
+ * (自动 HITL 裁决)→ 交接声明。**投入使用必须由用户 judge & taste,本脚本只到"可投用"为止**。
+ *
+ * 统一配置 JSON(provision-line / forge-channel / verify-line 的输入并集):
+ * {
+ *   "line":{"name":..,"description":..}, "nodes":[...同 provision...], "recipe":{...},
+ *   "startLine":true, "product":{"name":..}?,
+ *   "connectivity":{"tests":[...]}?,            // 缺省=跳过预检(--skip-connectivity 同效)
+ *   "channel":{"scenario":"optimize","name":..,"plugins":{..},"bindings":[..],
+ *              "mesFetchGrants":[{agentRole,nodeIds:[..]}]?, "seedTask":{..},
+ *              "scene"?:{..}, "promptVariables"?:{..}},
+ *   "smoke":{"param":"线速SP","delta":4}?,       // 可选:冒烟闭环步(自动 HITL;建议测试期用)
+ *   "verify":{"plugins":[..]}?                   // 其余字段由供给摘要自动推导
+ * }
+ * 用法:node scripts/onboarding/onboard.mjs <config.json> [--skip-connectivity] [--smoke]
+ * 交接红线:冒烟=测试语义(自动裁决);正式投用由用户在界面上做 judge & taste 后自行放行。
+ */
+import { execFileSync } from 'node:child_process'
+import { writeFileSync, readFileSync, mkdtempSync, openSync, closeSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join, resolve } from 'node:path'
+
+const args = process.argv.slice(2)
+const configPath = args.find(a => !a.startsWith('--'))
+const skipConnectivity = args.includes('--skip-connectivity')
+const smoke = args.includes('--smoke')
+if (!configPath) {
+  console.error('用法:node scripts/onboarding/onboard.mjs <config.json> [--skip-connectivity] [--smoke]')
+  process.exit(1)
+}
+const cfg = JSON.parse(readFileSync(configPath, 'utf8'))
+
+let pass = 0, fail = 0
+const ok = (name, cond, detail = '') => {
+  console.log(`${cond ? '✅' : '❌'} ${name}${detail ? ` — ${String(detail).slice(0, 150)}` : ''}`)
+  cond ? pass++ : fail++
+  return cond
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+/** 跑子脚本:输出落临时文件,返回 {code, out};末行 JSON 摘要由调用方解析 */
+function runScript(script, configObj, label) {
+  const dir = mkdtempSync(join(tmpdir(), 'aw-onboard-'))
+  const cfgFile = join(dir, 'cfg.json')
+  const outFile = join(dir, 'out.log')
+  writeFileSync(cfgFile, JSON.stringify(configObj, null, 1))
+  const code = (() => {
+    const outFd = openSync(outFile, 'a')
+    try {
+      execFileSync(process.execPath, [resolve('scripts/onboarding', script), cfgFile], {
+        stdio: ['ignore', outFd, outFd],
+        timeout: 15 * 60_000,
+      })
+      return 0
+    }
+    catch (e) {
+      return e.status ?? 1
+    }
+    finally {
+      closeSync(outFd)
+    }
+  })()
+  const out = readFileSync(outFile, 'utf8')
+  console.log(out.split('\n').filter(l => l.trim()).slice(-4).join('\n'))
+  ok(label, code === 0, `exit=${code}`)
+  const last = out.split('\n').map(l => l.trim()).filter(l => l.startsWith('{')).at(-1)
+  let summary = {}
+  try {
+    summary = last ? JSON.parse(last) : {}
+  }
+  catch { /* 无摘要行 */ }
+  return { code, out, summary }
+}
+
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3001'
+async function api(m, u, b, tok) {
+  return (await fetch(BASE + u, { method: m, headers: { 'content-type': 'application/json', ...(tok ? { authorization: `Bearer ${tok}` } : {}) }, body: b === undefined ? undefined : JSON.stringify(b) })).json()
+}
+async function login() {
+  if (process.env.AW_TOKEN) return process.env.AW_TOKEN
+  const j = await api('POST', '/api/users/login', { email: process.env.AW_EMAIL ?? 'admin@awshop.local', password: process.env.AW_PASS ?? 'admin123' })
+  return j.data?.token
+}
+
+// ---------- 阶段 1:连通性预检(未全绿不供给) ----------
+if (cfg.connectivity?.tests?.length && !skipConnectivity) {
+  const r = runScript('test-connection.mjs', { tests: cfg.connectivity.tests }, '阶段1 连通性预检')
+  if (r.code !== 0) {
+    console.error('连通性未全绿 —— 按 skill 铁律不进入供给;请修正 driverConfig 或向用户确认连接信息后重跑。')
+    process.exit(1)
+  }
+}
+else ok('阶段1 连通性预检', true, skipConnectivity ? '显式跳过' : '配置无 tests,跳过')
+
+// ---------- 阶段 2:产线供给 ----------
+const provRun = runScript('provision-line.mjs', {
+  line: cfg.line, nodes: cfg.nodes, recipe: cfg.recipe, product: cfg.product,
+  productId: cfg.productId, startLine: cfg.startLine !== false,
+}, '阶段2 产线供给')
+if (provRun.code !== 0) process.exit(1)
+const prov = provRun.summary
+
+// ---------- 阶段 3:场景化频道锻造 ----------
+const ch = cfg.channel ?? {}
+const forgeRun = runScript('forge-channel.mjs', {
+  scenario: ch.scenario ?? 'optimize', name: ch.name ?? `${cfg.line.name}闭环频道`,
+  lineId: prov.lineId, plugins: ch.plugins ?? {}, bindings: ch.bindings ?? [],
+  mesFetchGrants: (ch.mesFetchGrants ?? []).map(g => ({ ...g, nodeIds: (g.nodeIds ?? []).map(n => prov.dcw[n] ?? n) })),
+  seedTask: ch.seedTask, provision: prov, scene: ch.scene, promptVariables: ch.promptVariables,
+}, '阶段3 频道锻造')
+if (forgeRun.code !== 0) process.exit(1)
+const chSummary = forgeRun.summary
+
+// ---------- 阶段 4:V1-V6 验收(verify 配置自动推导) ----------
+const verifyCfg = {
+  lineId: prov.lineId, recipeId: prov.recipeId, channelId: chSummary.channelId,
+  dcw: cfg.nodes.filter(n => n.kind === 'dcw' && n.driver !== 'mes-rest').map((n) => {
+    const id = prov.dcw[n.name]
+    const step = Number(n.stepLimit ?? Math.max(1, Math.round((n.max - n.min) / 20)))
+    const probe = n.probeValue ?? Math.round(n.min + (n.max - n.min) * 0.35)
+    return { id, name: n.name, min: n.min, max: n.max, stepLimit: step, probeValue: probe }
+  }),
+  daq: cfg.nodes.filter(n => n.kind === 'daq').map(n => prov.daq[n.name]).filter(Boolean),
+  plugins: Object.keys((cfg.channel?.plugins ?? {}).filter?.call(cfg.channel.plugins) ?? cfg.channel?.plugins ?? {}).filter(k => cfg.channel.plugins[k]),
+}
+const verifyRun = runScript('verify-line.mjs', verifyCfg, '阶段4 V1-V6 验收')
+if (verifyRun.code !== 0) {
+  console.error('验收未全绿 —— 不得交付投用;按报告修复后重跑。')
+  process.exit(1)
+}
+
+// ---------- 阶段 5(可选):冒烟闭环步(自动 HITL 裁决;测试语义) ----------
+if (smoke) {
+  const tok = await login()
+  const bs = await api('GET', '/api/workshop/agent-tools/bindings', undefined, tok)
+  const workerId = (bs?.data?.bindings ?? []).find(b => b.kind === 'recipe' && b.nodeId === prov.recipeId)?.agentId ?? ''
+  ok('冒烟:持配方绑定 Agent', !!workerId, workerId.slice(0, 8))
+  const agg = await api('GET', '/api/workshop/dcw', undefined, tok)
+  const smokeParam = cfg.smoke?.param ?? Object.entries(prov.dcw).find(([k]) => k.includes('SP'))?.[0]
+  const node = (agg?.data?.nodes ?? []).find(n => n.id === prov.dcw[smokeParam])
+  const cur = Math.round(Number(node?.value ?? (node?.min + node?.max) / 2))
+  const target = cur + Number(cfg.smoke?.delta ?? 1)
+  let okDispatch = false
+  let propTxt = ''
+  for (let attempt = 1; attempt <= 4 && !okDispatch; attempt++) {
+    const pkg = { name: `SM-冒烟步(${attempt})`, params: [{ node_id: node.id, to: target, basis: `投用冒烟(测试语义,自动裁决):${cur}→${target}(≤步限)`, exp_ref: 'onboard --smoke 自动 HITL' }] }
+    const propP = api('POST', '/api/workshop/agent-tools/invoke', { agentId: workerId, tool: 'recipe_propose', args: { recipe_id: prov.recipeId, packages: [pkg], emergency: true } }, tok).then(r => r?.data?.result ?? { text: '' })
+    let card = null
+    for (let i = 0; i < 60 && !card; i++) {
+      await sleep(2000)
+      const pend = await api('GET', '/api/workshop/hitl/pending', undefined, tok)
+      const items = pend?.data?.items ?? []
+      card = items.filter(x => x.kind === 'dcw-approval' && /^recipe-propose:/.test(String(x.nodeId ?? '')))
+        .sort((a, b) => String(b.createdAt ?? '').localeCompare(String(a.createdAt ?? '')))[0]
+    }
+    if (card) await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: card.id, confirmed: true, comment: `冒烟自动裁决(测试语义,attempt ${attempt})`, choice: 0 }, tok)
+    const prop = await propP
+    let txt = String(prop?.text ?? '')
+    const flying = /已有在飞方案审批单\((ap-[\w-]+)\)/.exec(txt)?.[1]
+    if (flying) {
+      await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: flying, confirmed: true, comment: '冒烟:批准在飞单', choice: 0 }, tok)
+      await sleep(5000)
+      const r2 = await api('POST', '/api/workshop/agent-tools/invoke', { agentId: workerId, tool: 'recipe_propose', args: { recipe_id: prov.recipeId, packages: [pkg], emergency: true } }, tok)
+      txt = String(r2?.data?.result?.text ?? '')
+    }
+    propTxt = txt
+    okDispatch = /已获批准|已批准/.test(txt) && /设备证实/.test(txt) && !/失败|超时未批|未获批准/.test(txt)
+    if (!okDispatch) {
+      const w = Number(/请等待约?\s*(\d+)s/.exec(txt)?.[1] ?? 0)
+      if (w > 0 && attempt < 4) {
+        console.log(`  ⏳ 治理窗(${w}s),等 ${w + 10}s 重提…`)
+        await sleep((w + 10) * 1000)
+        continue
+      }
+    }
+  }
+  const runId = /runId[:：]\s*(rr-[\w-]+)/.exec(propTxt)?.[1] ?? ''
+  ok('冒烟闭环步(自动 HITL):批准→下发→设备证实', okDispatch, `${propTxt.split('\n')[0]?.slice(0, 90)} runId=${runId}`)
+}
+
+// ---------- 交接声明 ----------
+console.log(`
+================ 交接声明(投用前必读)================
+落袋 id:线=${prov.lineId} 配方=${prov.recipeId} 频道=${chSummary.channelId}
+冒烟语义 = 测试(自动 HITL 裁决)。**投入使用前请产线负责人在界面上做 judge & taste**:
+  ① 复核绑定矩阵与 HITL 策略(配方绑定当前 manual,每步下发需人工批准);
+  ② 确认量程/步长/安全限与工艺规程一致;
+  ③ 由人裁决首批真实提案后,方可视为正式投用。
+(对产线负责:任何不确定 —— 量程/步限/SP-PV 判定/认证方式/场景目标 —— skill 必须先询问用户,禁止猜测。)
+=====================================================`)
+console.log(`\n======== 一键接入: ${pass} 通过 / ${fail} 失败 ========`)
+process.exit(fail === 0 ? 0 : 1)

package/scripts/onboarding/provision-line.mjs

@@ -0,0 +1,179 @@
+/**
+ * scripts/onboarding/provision-line.mjs —— 产线供给(skill 阶段3):建线+DCW/DAQ 节点+量程+配方。
+ * 幂等:以指纹标签(AW-LINE:<hash>)写入线 description,重跑复用既有线并按"线+节点名"匹配节点;
+ *      量程/步长与配置不一致时 PATCH 对齐(配置为权威)。
+ * 红线:受保护演示线(ln-d7e0a2a2)绝不可命中;配方参数的 node 用名字引用,脚本负责解析。
+ * 输入 JSON:
+ * {
+ *   "line":  {"name":"注塑验收线", "description":"可选补充"},
+ *   "nodes": [
+ *     {"kind":"dcw","name":"机筒1区SP","driver":"modbus-tcp","driverConfig":{...},
+ *      "unit":"℃","min":120,"max":300,"decimals":1,"stepLimit":5,"holdIntervalMs":120000,
+ *      "templateRef":"dcw-temp-sp"},
+ *     {"kind":"daq","name":"熔体温度PV","driver":"modbus-tcp","driverConfig":{...},
+ *      "unit":"℃","min":0,"max":350,"warnLow":150,"warnHigh":290,"intervalMs":2000}
+ *   ],
+ *   "recipe":  {"name":"注塑基线配方","params":[{"node":"机筒1区SP","value":180}]},
+ *   "startLine": false
+ * }
+ * 结束时向 stdout 打印一行 JSON 摘要({lineId,dcw,daq,recipeId,reused})供后续脚本管道使用。
+ * 用法:node scripts/onboarding/provision-line.mjs <config.json|->
+ */
+import { api, login, ok, summary, readConfig, fingerprint, findByTag, assertNotProtected } from './lib.mjs'
+
+const cfg = await readConfig()
+const tok = await login()
+const tag = fingerprint('LINE', cfg.line.name)
+
+// ---------- 1. 产线(幂等) ----------
+const linesList = await api('GET', '/api/workshop/dcw/lines', undefined, tok)
+let line = findByTag(linesList.data?.lines, tag)
+let reused = !!line
+if (!line) {
+  const j = await api('POST', '/api/workshop/dcw/lines', {
+    name: cfg.line.name,
+    description: `${tag}${cfg.line.description ? ' ' + cfg.line.description : ''}`,
+  }, tok)
+  ok('建产线', j.code === 0 && !!j.data?.line?.id, j.message ?? '')
+  line = j.data?.line
+}
+else ok('产线已存在(指纹复用)', true, `${line.id} ${line.name}`)
+assertNotProtected(line.id, '产线')
+const lineId = line.id
+
+// ---------- 2. 节点(DCW 写控 / DAQ 数采;名字匹配幂等) ----------
+const agg = await api('GET', '/api/workshop/dcw', undefined, tok)
+const dcwAll = agg.data?.nodes ?? []
+const daqList = await api('GET', '/api/workshop/daq', undefined, tok)
+const daqAll = daqList.data?.nodes ?? []
+const dcwMap = {}, daqMap = {}
+
+// ---------- 1b. 跨线写点冲突预检(对产线负责:两个产线的写控节点打到同一物理寄存器
+// = 双保写心跳互打,必然猎振 —— 2026-10-10 注塑二线推演实证发现,故设硬闸) ----------
+function writeFingerprint(n) {
+  const c = n.driverConfig ?? {}
+  switch (n.driver) {
+    case 'modbus-tcp':
+    case 'modbus-rtu':
+    case 'serial':
+      return `${n.driver}://${c.host}:${c.port}/${c.unitId ?? 1}:${c.register}:${c.registerType ?? 'holding'}`
+    case 'opcua':
+      return `opcua://${c.endpoint}::${c.nodeId}`
+    case 'mqtt':
+      return `mqtt://${c.host}:${c.port}::${c.topic}`
+    case 'http':
+      return `http://${c.url}`
+    default:
+      return null // mes-rest/mock 等共享面不参与
+  }
+}
+if (cfg.allowSharedSignals !== true) {
+  const existing = dcwAll.filter(x => x.lineId !== lineId)
+  const fpIndex = new Map()
+  for (const x of existing) {
+    const fp = writeFingerprint(x)
+    if (fp) fpIndex.set(fp, x)
+  }
+  const collisions = []
+  for (const n of cfg.nodes ?? []) {
+    if (n.kind !== 'dcw') continue
+    const fp = writeFingerprint(n)
+    const hit = fp ? fpIndex.get(fp) : null
+    if (hit) collisions.push(`${n.name} ↔ ${hit.name}(线 ${hit.lineId})@ ${fp}`)
+  }
+  if (collisions.length > 0) {
+    console.error(`✖ 跨线写点冲突(${collisions.length}):新线写控节点与既有产线命中同一物理点位,双线保写必然互打猎振:`)
+    for (const c of collisions) console.error('   ·', c)
+    console.error('  处置:改选不冲突信号,或确认两线共用同一物理点后配置 "allowSharedSignals": true 显式豁免。')
+    process.exit(1)
+  }
+  ok('跨线写点冲突预检', true, `既有他线写控 ${existing.length} 节点,冲突 0`)
+}
+
+for (const n of cfg.nodes ?? []) {
+  const pool = n.kind === 'daq' ? daqAll : dcwAll
+  const found = pool.find(x => x.lineId === lineId && x.name === n.name)
+  if (found) {
+    ;(n.kind === 'daq' ? daqMap : dcwMap)[n.name] = found.id
+    ok(`节点复用[${n.name}]`, true, found.id)
+    // 量程漂移对齐(配置为权威):dcw 用 PATCH,daq 也走 PATCH
+    const drift = n.kind === 'daq'
+      ? (found.min !== n.min || found.max !== n.max)
+      : (found.min !== n.min || found.max !== n.max || (n.stepLimit && found.stepLimit !== n.stepLimit))
+    if (drift) {
+      const p = await api('PATCH', `/api/workshop/${n.kind === 'daq' ? 'daq' : 'dcw'}/${found.id}`,
+        Object.fromEntries(Object.entries({ min: n.min, max: n.max, stepLimit: n.stepLimit }).filter(([, v]) => v !== undefined)), tok)
+      ok(`量程对齐[${n.name}]`, p.code === 0 || !!p.data, p.message ?? '')
+    }
+    continue
+  }
+  // mes-rest 映射面自动字符串化(2026-10-10 投用轮坑:readMap/writeMap/historyMap/headers
+  // 必须是 JSON 字符串存 driverConfig —— 输入面允许写对象,这里统一转换,消灭编码坑)
+  const driverConfig = { ...(n.driverConfig ?? {}) }
+  if (n.driver === 'mes-rest') {
+    for (const key of ['readMap', 'writeMap', 'historyMap', 'headers']) {
+      if (driverConfig[key] != null && typeof driverConfig[key] === 'object') {
+        driverConfig[key] = JSON.stringify(driverConfig[key])
+      }
+    }
+  }
+  const body = n.kind === 'daq'
+    ? {
+        name: n.name, lineId, driver: n.driver, driverConfig,
+        templateRef: n.templateRef,
+        unit: n.unit ?? '', decimals: n.decimals ?? 1, min: n.min, max: n.max,
+        warnLow: n.warnLow, warnHigh: n.warnHigh, intervalMs: n.intervalMs,
+      }
+    : {
+        name: n.name, lineId, driver: n.driver, driverConfig,
+        unit: n.unit ?? '', decimals: n.decimals ?? 1, min: n.min, max: n.max,
+        stepLimit: n.stepLimit, holdIntervalMs: n.holdIntervalMs ?? 120000,
+        templateRef: n.templateRef, transform: n.transform,
+      }
+  const j = await api('POST', n.kind === 'daq' ? '/api/workshop/daq' : '/api/workshop/dcw', body, tok)
+  const id = j.data?.node?.id ?? j.data?.id ?? j.data?.daqNode?.id
+  ok(`建${n.kind === 'daq' ? '数采' : '写控'}节点[${n.name}]`, !!id, id ?? j.message ?? '')
+  if (id) (n.kind === 'daq' ? daqMap : dcwMap)[n.name] = id
+}
+
+// ---------- 3. 配方(参数 node 名字解析;同名单线复用) ----------
+let recipeId
+if (cfg.recipe) {
+  const recipes = agg.data?.recipes ?? []
+  const found = recipes.find(r => r.name === cfg.recipe.name && (r.lineId ?? lineId) === lineId)
+  const params = (cfg.recipe.params ?? []).map((p) => {
+    const nodeId = dcwMap[p.node] ?? p.node // 允许直接传 id
+    if (!nodeId || !String(nodeId).startsWith('dw-')) throw new Error(`配方参数引用的节点不存在:${p.node}(先在 nodes 里定义 dcw 节点)`)
+    return { nodeId, value: p.value, min: p.min, max: p.max, stepLimit: p.stepLimit }
+  })
+  if (found) {
+    recipeId = found.id
+    ok('配方复用', true, `${recipeId} v${found.version}`)
+  }
+  else {
+    // 产品:配方必须归属产品;缺省自动建一个"线名+默认产品"
+    let productId = cfg.productId
+    if (!productId) {
+      const pj = await api('POST', '/api/workshop/dcw/products', {
+        name: cfg.product?.name ?? `${cfg.line.name}·默认产品`, lineId,
+      }, tok)
+      productId = pj.data?.product?.id ?? pj.data?.id
+      ok('建产品', !!productId, productId ?? pj.message ?? '')
+      if (!productId) process.exit(1)
+    }
+    const j = await api('POST', '/api/workshop/dcw/recipes', {
+      name: cfg.recipe.name, productId, params, lineId,
+    }, tok)
+    recipeId = j.data?.recipe?.id ?? j.data?.id
+    ok('建配方', !!recipeId, recipeId ?? j.message ?? '')
+  }
+}
+
+// ---------- 4. 可选开跑(运行门语义;已在跑会 CONFLICT,视为通过) ----------
+if (cfg.startLine && recipeId) {
+  const j = await api('POST', `/api/workshop/dcw/lines/${lineId}/start`, { recipeId }, tok)
+  ok('开跑批次', j.code === 0 || j.code === 'CONFLICT', j.data?.run?.id ?? j.message ?? '')
+}
+
+console.log('\n' + JSON.stringify({ lineId, dcw: dcwMap, daq: daqMap, recipeId, reused }))
+summary('产线供给')

package/scripts/onboarding/test-connection.mjs

@@ -0,0 +1,42 @@
+/**
+ * scripts/onboarding/test-connection.mjs —— 逐驱动连接性预检(skill 阶段2)。
+ * 输入 JSON:
+ * {
+ *   "tests": [
+ *     {"label":"机筒SP(modbus-tcp)", "driver":"modbus-tcp", "driverConfig":{...}},
+ *     {"label":"冷却水(mqtt)",       "driver":"mqtt",       "driverConfig":{...}},
+ *     {"label":"MES读点",            "driver":"mes-rest",   "driverConfig":{...}, "domain":{"min":0,"max":100}}
+ *   ]
+ * }
+ * 全部 ok 才退出 0——任一失败即停(skill 规定:连通性未全绿不得进入供给阶段)。
+ * 用法:node scripts/onboarding/test-connection.mjs <config.json|-> (默认读 stdin)
+ */
+import { api, login, ok, summary, readConfig } from './lib.mjs'
+
+const cfg = await readConfig()
+const tok = await login()
+
+for (const tt of cfg.tests ?? []) {
+  const label = tt.label ?? tt.driver
+  const isMes = tt.driver === 'mes-rest'
+  const endpoint = isMes ? '/api/workshop/dcw/mes-test-read' : '/api/workshop/daq/test-driver'
+  const body = isMes
+    ? { driverConfig: tt.driverConfig, domain: tt.domain ?? { min: 0, max: 100 } }
+    : { driver: tt.driver, driverConfig: tt.driverConfig ?? {} }
+  const t0 = Date.now()
+  let j
+  try {
+    j = await api('POST', endpoint, body, tok)
+  }
+  catch (e) {
+    ok(`连通[${label}]`, false, String(e).slice(0, 120))
+    continue
+  }
+  const d = j.data ?? {}
+  const res = d.test ?? d // 新信封 {test:{ok,...}};旧信封直接平铺
+  const okFlag = isMes ? res.ok === true : (res.ok === true || res.sampleValue !== undefined)
+  ok(`连通[${label}](${tt.driver})`, okFlag === true,
+    `latency=${res.latencyMs ?? Date.now() - t0}ms ${res.message ?? (res.sampleValue !== undefined ? `sample=${res.sampleValue}` : '')}`.slice(0, 140))
+}
+
+summary('连接性预检')