agentworkshop 0.7.54 → 0.7.59

package/scripts/onboarding/verify-line.mjs

@@ -0,0 +1,95 @@
+/**
+ * scripts/onboarding/verify-line.mjs —— 接入验收(skill 阶段5;未全绿不得宣告完成)。
+ * 断言面:
+ *  V1 数采落库:每个 daq 节点 2 分钟窗内 samples 有点(五协议真实在采)
+ *  V2 量程联锁:对每个 dcw 节点做越界写(max+步长量级)必须被 400 拒(NODE_RANGE/RANGE 类)
+ *  V3 合法写回环:max- 步长量级的合法值写成功且回读一致(manual 来源,审计留痕)
+ *  V4 配方在册:recipeId 在 /dcw 聚合可见且参数节点映射正确
+ *  V5 频道绑定:频道 lineId 正确、成员≥2、插件开启生效
+ *  V6 演示线零扰动:受保护线上没有任何本次新节点的写痕(以 dcw journal 新锚点核对)
+ * 输入 JSON:
+ * {
+ *   "lineId":"ln-..","recipeId":"rc-..","channelId":"<uuid>",
+ *   "dcw":[{"id":"dw-..","name":"..","min":120,"max":300,"stepLimit":5,"probeValue":180}],
+ *   "daq":["dn-..","dn-.."],
+ *   "plugins":["idd-closedloop-bridge","rag-bridge"]
+ * }
+ * 用法:node scripts/onboarding/verify-line.mjs <config.json|->
+ */
+import { api, login, ok, summary, readConfig, pollUntil } from './lib.mjs'
+
+const cfg = await readConfig()
+const tok = await login()
+
+// V1 数采落库(滑动窗口:每次轮询重算 now,避免 to=启动时刻冻结导致新样本落窗外)。
+// 多形态节点(向量/图像)数据在 daq_frames 不在 daq_samples:标量面 60s 内无点时回查帧面。
+for (const id of cfg.daq ?? []) {
+  try {
+    await pollUntil(async () => {
+      const now = Date.now()
+      const j = await api('GET', `/api/workshop/daq/${id}/samples?from=${now - 90000}&to=${now}&bucketMs=30000`, undefined, tok)
+      if ((j.data?.points ?? []).length > 0) return true
+      const f = await api('GET', `/api/workshop/daq/${id}/frames?from=${now - 120000}&to=${now}&limit=1`, undefined, tok).catch(() => null)
+      return (f?.data?.frames ?? f?.data ?? []).length > 0
+    }, { timeoutMs: 120000, label: `采样[${id}]` })
+    ok(`V1 数采落库[${id}]`, true)
+  }
+  catch (e) {
+    ok(`V1 数采落库[${id}]`, false, String(e).slice(0, 80))
+  }
+}
+
+// V2/V3 量程联锁 + 合法回环
+for (const n of cfg.dcw ?? []) {
+  const span = Math.max(1, (n.max - n.min) / 10)
+  const bad = await api('POST', `/api/workshop/dcw/${n.id}/write`, { value: n.max + span }, tok)
+  const rejected = bad.code !== 0 || bad.code === 'RANGE' || /RANGE|LIMIT|越界|超|400|VALIDATION/i.test(String(bad.message ?? '') + String(bad.code ?? ''))
+  ok(`V2 越界拒[${n.name}]`, rejected, `value=${n.max + span} → ${String(bad.message ?? bad.code).slice(0, 60)}`)
+  // V3 探针必须在写前实时取值:开批次后引擎/配方会驱动 SP,配置期探针会过期。
+  // 只写命令点(如 mqtt commandTopic)read 返 null → 回退用最近一次写锚点值当现值。
+  let probe = n.probeValue
+  const rd = await api('POST', `/api/workshop/dcw/${n.id}/read`, {}, tok).catch(() => null)
+  let cur = rd?.data?.read?.value
+  if (typeof cur !== 'number') {
+    const jr = await api('GET', '/api/workshop/dcw/journal?limit=30', undefined, tok)
+    const lastAnchor = (jr.data?.anchors ?? []).filter(a => a.nodeId === n.id)
+      .sort((a, b) => Date.parse(b.at ?? 0) - Date.parse(a.at ?? 0))[0]
+    if (lastAnchor && typeof lastAnchor.newValue === 'number') cur = lastAnchor.newValue
+  }
+  if (typeof cur === 'number') probe = Math.min(n.max - n.stepLimit, Math.max(n.min + n.stepLimit, Math.round((cur + n.stepLimit) * 10) / 10))
+  // V3 可能撞 60s 写间隔限速(上一轮验收刚写过)——等待限速窗过后重试一次
+  let good = await api('POST', `/api/workshop/dcw/${n.id}/write`, { value: probe }, tok)
+  if (good.code !== 0 && /间隔|60s|WRITE_INTERVAL/i.test(String(good.message ?? ''))) {
+    await new Promise(r => setTimeout(r, 65000))
+    good = await api('POST', `/api/workshop/dcw/${n.id}/write`, { value: probe }, tok)
+  }
+  const goodOk = good.code === 0 || !!good.data?.outcome
+  ok(`V3 合法写回环[${n.name}]`, goodOk, `cur=${cur ?? '?'} probe=${probe} ${goodOk ? (good.data?.outcome?.readback ?? 'ok') : String(good.message ?? good.code).slice(0, 80)}`)
+}
+
+// V4 配方在册
+const agg = await api('GET', '/api/workshop/dcw', undefined, tok)
+const rec = (agg.data?.recipes ?? []).find(r => r.id === cfg.recipeId)
+ok('V4 配方在册', !!rec, rec ? `${rec.name} v${rec.version} params=${(rec.params ?? []).length}` : (cfg.recipeId ?? '未提供'))
+
+// V5 频道绑定与插件
+const ch = await api('GET', `/api/workshop/channels/${cfg.channelId}`, undefined, tok)
+const c = ch.data?.channel ?? ch.data
+ok('V5 频道绑线', c?.lineId === cfg.lineId, `${c?.lineId} vs ${cfg.lineId}`)
+const members = await api('GET', `/api/workshop/channels/${cfg.channelId}/agents`, undefined, tok)
+ok('V5 频道成员≥2', (members.data ?? []).length >= 2, `members=${(members.data ?? []).length}`)
+if (cfg.plugins?.length) {
+  const pj = await api('GET', `/api/workshop/channels/${cfg.channelId}/plugins`, undefined, tok)
+  const enabled = new Set((pj.data?.plugins ?? []).filter(p => p.enabled).map(p => p.name))
+  for (const name of cfg.plugins) ok(`V5 插件[${name}]`, enabled.has(name), enabled.has(name) ? 'enabled' : `实际=${[...enabled].join(',')}`)
+}
+
+// V6 演示线零扰动:本验收的写锚点必须全部落在新线上,受保护线(ln-d7e0a2a2)零新增锚点
+const journal = await api('GET', '/api/workshop/dcw/journal?limit=20', undefined, tok)
+const mine = new Set([...(cfg.dcw ?? []).map(n => n.id)])
+const touched = (journal.data?.anchors ?? []).filter(a => mine.has(a.nodeId))
+const onProtected = touched.filter(a => a.lineId === 'ln-d7e0a2a2')
+ok('V6 受保护线零扰动(写锚点全落新线)', onProtected.length === 0,
+  `本线锚点=${touched.length} 溢出到受保护线=${onProtected.length}`)
+
+summary('接入验收')

package/scripts/perm-isolation-e2e.mjs

@@ -0,0 +1,188 @@
+/**
+ * 产线级权限隔离 e2e(权限模型 v3 全量验收)
+ * 覆盖:W1 admin 独占创建 / G4 grant 制线域操作 / W2+Δ2 Channel 绑线与一致性 /
+ *      W3 可见性过滤 / W4+Δ3 HITL 定向 / Δ1 收权即失活 / editor 降级
+ * 运行:node scripts/perm-isolation-e2e.mjs <adminToken>
+ */
+const BASE = 'http://localhost:3000'
+const ADMIN_TOKEN = process.argv[2] ?? ''
+const PW = 'PermTest@123'
+let pass = 0
+const fails = []
+const ok = (name, cond, detail = '') => {
+  console.log(`  ${cond ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (cond) pass++
+  else fails.push(name)
+}
+const api = async (m, u, b, token) => {
+  const r = await fetch(BASE + u, {
+    method: m,
+    headers: { 'content-type': 'application/json', ...(token ? { authorization: `Bearer ${token}` } : {}) },
+    body: b === undefined ? undefined : JSON.stringify(b),
+    signal: AbortSignal.timeout(120_000),
+  })
+  return { status: r.status, ...(await r.json().catch(() => ({}))) }
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const A = ADMIN_TOKEN
+
+// ── 0. 准备 ──
+console.log('═══ 0. 准备:产线/用户/授权 ═══')
+const lines = (await api('GET', '/api/workshop/dcw/lines', undefined, A)).data?.lines ?? []
+const lineA = lines.find(l => l.id === 'ln-d7e0a2a2')
+const mkLine = await api('POST', '/api/workshop/dcw/lines', { name: `隔离线B-${Date.now() % 100000}` }, A)
+const lineB = mkLine.data?.line
+ok('admin 建产线 B', !!lineB?.id, lineB?.id)
+const mkProdB = await api('POST', '/api/workshop/dcw/products', { name: '隔离产品B', lineId: lineB.id }, A)
+ok('admin 建产品 B(挂线 B)', !!mkProdB.data?.product?.id)
+const nodeB = (await api('POST', '/api/workshop/dcw', {
+  templateRef: 'dcw-temp-sp', name: '隔离线B·温度SP', driver: 'mock',
+  unit: '℃', decimals: 1, min: 0, max: 300, lineId: lineB.id,
+}, A)).data?.node
+ok('admin 建线 B DCW 节点', !!nodeB?.id, nodeB?.id)
+const daqB = (await api('POST', '/api/workshop/daq', {
+  templateRef: 'daq-temp-tc', name: '隔离线B·温度PV', driver: 'mock', unit: '℃', min: 0, max: 300, lineId: lineB.id,
+}, A)).data?.node
+ok('admin 建线 B DAQ 节点', !!daqB?.id, daqB?.id)
+const recipeB = (await api('POST', '/api/workshop/dcw/recipes', {
+  productId: mkProdB.data.product.id, name: '隔离配方B',
+  params: [{ nodeId: nodeB.id, value: 100, min: 0, max: 300 }],
+}, A)).data?.recipe
+ok('admin 建线 B 配方', !!recipeB?.id, recipeB?.id)
+
+const mkUser = async (name, email, role) => {
+  const created = (await api('POST', '/api/users', { name, email, password: PW, role }, A)).data
+  if (created?.id) return created
+  // 已存在(上一轮残留)→ 从用户列表捞 id
+  const list = (await api('GET', `/api/users?keyword=${encodeURIComponent(email)}`, undefined, A)).data
+  return (list.items ?? []).find(u => u.email === email)
+}
+const userA = await mkUser('userA-线A', 'perm-usera@test.local', 'user')
+const userB = await mkUser('userB-线B', 'perm-userb@test.local', 'user')
+const userC = await mkUser('userC-无授权', 'perm-userc@test.local', 'user')
+const editorE = await mkUser('editorE-降级', 'perm-editore@test.local', 'editor')
+ok('建 4 个测试用户', !!userA?.id && !!userB?.id && !!userC?.id && !!editorE?.id)
+const login = async email => (await api('POST', '/api/users/login', { email, password: PW })).data?.token
+const tA = await login('perm-usera@test.local')
+const tB = await login('perm-userb@test.local')
+const tC = await login('perm-userc@test.local')
+const tE = await login('perm-editore@test.local')
+ok('4 用户登录', !!tA && !!tB && !!tC && !!tE)
+
+const grant = (userId, grants) => api('PUT', '/api/workshop/permissions', { userId, grants }, A)
+await grant(userA.id, [{ lineId: lineA.id, mode: 'operate' }])
+await grant(userB.id, [{ lineId: lineB.id, mode: 'operate' }])
+await sleep(1)
+ok('admin 授权: A→线A operate,B→线B operate,C 无', true)
+
+// ── 1. W1:admin 独占创建/删除 ──
+console.log('═══ 1. W1 admin 独占创建 ═══')
+ok('userA 建产线 → 403', (await api('POST', '/api/workshop/dcw/lines', { name: 'x' }, tA)).status === 403)
+ok('editorE 建产线 → 403(降级)', (await api('POST', '/api/workshop/dcw/lines', { name: 'x' }, tE)).status === 403)
+ok('userA 建 DCW 节点 → 403', (await api('POST', '/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: 'x', driver: 'mock', unit: '℃', min: 0, max: 10 }, tA)).status === 403)
+ok('userA 建 DAQ 节点 → 403', (await api('POST', '/api/workshop/daq', { name: 'x', driver: 'mock', unit: '℃', min: 0, max: 10 }, tA)).status === 403)
+ok('userA 删产线 → 403', (await api('DELETE', `/api/workshop/dcw/lines/${lineB.id}`, undefined, tA)).status === 403)
+ok('userA 改产线名 → 403', (await api('PATCH', `/api/workshop/dcw/lines/${lineB.id}`, { name: 'hack' }, tA)).status === 403)
+ok('admin 建 DCW 仍可用(lineId 不存在 → 400)', (await api('POST', '/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: 'x', driver: 'mock', unit: '℃', min: 0, max: 10, lineId: 'ln-not-exist' }, A)).status === 400)
+
+// ── 2. G4:线域操作 grant 制 ──
+console.log('═══ 2. G4 线域 grant 制 ═══')
+const apA = await api('POST', `/api/workshop/dcw/recipes/rc-bbab24bc/apply`, {}, tA)
+ok('userA(线A operate) 开跑线A 配方 → 200/202', [200, 202].includes(apA.status))
+const runIdA = apA.data?.run?.id ?? 'rr-any'
+ok('userA 对线B 配方 apply → 403', (await api('POST', `/api/workshop/dcw/recipes/${recipeB.id}/apply`, {}, tA)).status === 403)
+ok('userB 对线B 配方 apply → 200/202', [200, 202].includes((await api('POST', `/api/workshop/dcw/recipes/${recipeB.id}/apply`, {}, tB)).status))
+ok('userC 对线A 配方 apply → 403', (await api('POST', `/api/workshop/dcw/recipes/rc-bbab24bc/apply`, {}, tC)).status === 403)
+ok('userA(线A) mark-good 线A 配方 → 200', (await api('POST', `/api/workshop/dcw/recipes/rc-bbab24bc/mark-good`, { runId: runIdA }, tA)).status === 200)
+ok('userB 对线A 配方 mark-good → 403', (await api('POST', `/api/workshop/dcw/recipes/rc-bbab24bc/mark-good`, { runId: 'x' }, tB)).status === 403)
+const nodeA = (await api('GET', '/api/workshop/dcw', undefined, A)).data?.nodes?.find(n => n.id === 'dw-679bb3d2')
+ok('userA 启停线A 节点 → 200', (await api('PATCH', `/api/workshop/dcw/${nodeA.id}`, { enabled: true }, tA)).status === 200)
+ok('userA 启停线B 节点 → 403', (await api('PATCH', `/api/workshop/dcw/${nodeB.id}`, { enabled: true }, tA)).status === 403)
+ok('userB 启停线B 节点 → 200', (await api('PATCH', `/api/workshop/dcw/${nodeB.id}`, { enabled: true }, tB)).status === 200)
+ok('userC 启停线A 节点 → 403', (await api('PATCH', `/api/workshop/dcw/${nodeA.id}`, { enabled: true }, tC)).status === 403)
+ok('userB(线B) 建线B 产品 → 200', (await api('POST', '/api/workshop/dcw/products', { name: 'B线产品2', lineId: lineB.id }, tB)).status === 200)
+ok('userA 建线B 产品 → 403', (await api('POST', '/api/workshop/dcw/products', { name: 'x', lineId: lineB.id }, tA)).status === 403)
+ok('userA 建线A 配方 → 200', (await api('POST', '/api/workshop/dcw/recipes', { productId: 'pd-787a4188', name: 'A线用户新配方' }, tA)).status === 200)
+ok('userB 建线A 配方 → 403', (await api('POST', '/api/workshop/dcw/recipes', { productId: 'pd-787a4188', name: 'x' }, tB)).status === 403)
+
+// ── 3. W2+Δ2:Channel 绑线与一致性 ──
+console.log('═══ 3. W2+Δ2 Channel 绑线 ═══')
+const chA = (await api('POST', '/api/workshop/channels', {
+  name: `A线工作区-${Date.now() % 100000}`, lineId: lineA.id,
+  // 注意:mock 引擎无工具桥(既有设计,mock 闭环 13/13 断言"工具桥显式拒绝"),
+  // 工具/审批链路测试必须 real harness;omp lead 不派发任务即零额度
+  leadAgent: { name: 'a-lead', harness: 'omp', config: { rpcMode: 'rpc' } },
+}, tA)).data
+ok('userA 建绑线A频道 → 成功', !!chA?.channelId, chA?.channelId?.slice(0, 8))
+ok('userA 建频道绑线B → 403', (await api('POST', '/api/workshop/channels', { name: 'x', lineId: lineB.id }, tA)).status === 403)
+ok('userC 建频道绑线A → 403', (await api('POST', '/api/workshop/channels', { name: 'x', lineId: lineA.id }, tC)).status === 403)
+const chC = (await api('POST', '/api/workshop/channels', { name: `C纯协作-${Date.now() % 100000}`, leadAgent: { name: 'c-lead', harness: 'mock' } }, tC)).data
+ok('userC 建纯协作频道(不绑线) → 成功', !!chC?.channelId)
+const chLinePut = await api('PUT', `/api/workshop/channels/${chC.channelId}/line`, { lineId: lineA.id }, tC)
+ok('userC 给自己频道绑线A → 403', chLinePut.status === 403)
+const chA2 = (await api('POST', '/api/workshop/channels', { name: `B线工作区-${Date.now() % 100000}`, lineId: lineB.id, leadAgent: { name: 'b-lead', harness: 'mock' } }, tB)).data
+ok('userB 建绑线B频道 → 成功', !!chA2?.channelId)
+
+const leadA = chA.leadAgentId
+// Δ2:一致性
+ok('userA 在绑线A频道绑线B DAQ → 403 SCOPE_MISMATCH', (await api('POST', '/api/workshop/agent-tools/bindings', { agentId: leadA, nodeId: daqB.id, kind: 'daq' }, tA)).status === 403)
+const bindOk = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: leadA, nodeId: 'dn-0183240d', kind: 'daq' }, tA)
+ok('userA 在绑线A频道绑线A DAQ → 200', bindOk.status === 200, bindOk.message ?? '')
+const bindR = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: leadA, nodeId: 'rc-bbab24bc', kind: 'recipe' }, tA)
+ok('userA 绑线A配方 → 200', bindR.status === 200)
+
+// ── 4. W3:可见性 ──
+console.log('═══ 4. W3 可见性过滤 ═══')
+const visA = (await api('GET', '/api/workshop/channels', undefined, tA)).data
+const listA = Array.isArray(visA) ? visA : visA.channels ?? visA.items ?? []
+ok('userA 看不到线B频道', !listA.some(c => c.id === chA2.channelId))
+const visC = (await api('GET', '/api/workshop/channels', undefined, tC)).data
+const listC = Array.isArray(visC) ? visC : visC.channels ?? visC.items ?? []
+ok('userC 看不到线A频道也不看到线B频道', !listC.some(c => c.id === chA.channelId) && !listC.some(c => c.id === chA2.channelId))
+const visAdm = (await api('GET', '/api/workshop/channels', undefined, A)).data
+const listAdm = Array.isArray(visAdm) ? visAdm : visAdm.channels ?? visAdm.items ?? []
+ok('admin 全量可见', listAdm.some(c => c.id === chA.channelId) && listAdm.some(c => c.id === chA2.channelId))
+
+// ── 5. Δ1:工具运行时 grant 复核(收权即失活) ──
+console.log('═══ 5. Δ1 收权即失活 ═══')
+const invoke = (agentId, tool, args, token) => api('POST', '/api/workshop/agent-tools/invoke', { agentId, tool, args }, token)
+const q1 = await invoke(leadA, 'daq_query', { node_id: 'dn-0183240d', limit: 2 }, tA)
+ok('撤权前 userA 的 agent 可查线A 数采', q1.data?.result?.text?.includes('样本') ?? false)
+await grant(userA.id, [{ lineId: lineA.id, mode: null }])
+await sleep(300)
+const q2 = await invoke(leadA, 'daq_query', { node_id: 'dn-0183240d', limit: 2 }, tA)
+ok('撤权后 userA 的 agent 立即被拒', q2.data?.result?.isError === true && q2.data?.result?.text?.includes('权限模型 v3'), (q2.data?.result?.text ?? '').slice(0, 60))
+const p2 = await invoke(leadA, 'recipe_propose', { recipe_id: 'rc-bbab24bc', packages: [{ name: 'x', params: [{ node_id: 'dw-679bb3d2', to: 196, basis: 'x', exp_ref: 'x' }] }] }, tA)
+ok('撤权后 recipe_propose 也被拒', p2.data?.result?.isError === true)
+await grant(userA.id, [{ lineId: lineA.id, mode: 'operate' }])
+await sleep(300)
+const q3 = await invoke(leadA, 'daq_query', { node_id: 'dn-0183240d', limit: 2 }, tA)
+ok('重新授权后恢复可用', q3.data?.result?.text?.includes('样本') ?? false)
+
+// ── 6. W4+Δ3:HITL 定向 ──
+console.log('═══ 6. W4+Δ3 HITL 定向 ═══')
+// userA 的 manual recipe_propose 挂审批单(后台),随即比对三方快照
+;(async () => {
+  await invoke(leadA, 'recipe_propose', {
+    recipe_id: 'rc-bbab24bc',
+    packages: [{ name: 'HITL定向验证包', rationale: 'e2e', params: [{ node_id: 'dw-679bb3d2', to: 197, unit: '℃', basis: '定向推送验证', exp_ref: 'e2e' }] }],
+  }, tA)
+})()
+await sleep(4000)
+const snapA = (await api('GET', '/api/workshop/hitl/pending', undefined, tA)).data?.items ?? []
+const snapB = (await api('GET', '/api/workshop/hitl/pending', undefined, tB)).data?.items ?? []
+const snapC = (await api('GET', '/api/workshop/hitl/pending', undefined, tC)).data?.items ?? []
+const hitForA = snapA.some(i => i.channelId === chA.channelId && i.kind === 'dcw-approval')
+ok('userA(线A operate) 收到该审批待办', hitForA)
+ok('userB(仅线B) 不收到线A 审批', !snapB.some(i => i.channelId === chA.channelId))
+ok('userC(无授权) 不收到', !snapC.some(i => i.channelId === chA.channelId))
+// 批准清理(避免残留挂起单)
+const apRow = snapA.find(i => i.channelId === chA.channelId && i.kind === 'dcw-approval')
+if (apRow) {
+  await api('POST', `/api/workshop/agent-tools/approvals/${apRow.id}/decide`, { approved: true, choice: 0, comment: 'e2e 清理' }, tA)
+}
+
+// ── 汇总 ──
+console.log(`\n${fails.length ? '❌' : '✅'} 权限隔离 e2e:${pass} 通过 / ${fails.length} 失败`)
+if (fails.length) console.log('失败项:', fails.join(' | '))
+process.exit(fails.length ? 1 : 0)

package/scripts/render-opt-curve.mjs

@@ -0,0 +1,97 @@
+/**
+ * 闭环调优优化曲线生成器 —— 拉取熔体温度全窗口采样,渲染 SVG(SPV 阶跃 + 事件标注)。
+ * 用法:node scripts/render-opt-curve.mjs <adminToken> <outSvg>
+ */
+const BASE = 'http://localhost:3001'
+const token = process.argv[2] ?? ''
+const out = process.argv[3] ?? 'opt-curve.svg'
+
+const NODE = 'dn-0183240d' // 熔体温度(modbus PV)
+const WINDOW_MS = 80 * 60_000
+const to = Date.now()
+const from = to - WINDOW_MS
+
+const r = await fetch(`${BASE}/api/workshop/daq/${NODE}/samples?from=${from}&to=${to}&bucketMs=15000&limit=400`, {
+  headers: { authorization: `Bearer ${token}` },
+})
+const j = await r.json()
+const points = (j.data?.points ?? j.data?.samples ?? j.data ?? [])
+  .map(p => ({ t: Number(p.t ?? p.ts ?? p.at), v: Number(p.v ?? p.value ?? p.avg) }))
+  .filter(p => Number.isFinite(p.t) && Number.isFinite(p.v))
+  .sort((a, b) => a.t - b.t)
+if (points.length < 5) {
+  console.error('采样不足:', JSON.stringify(j).slice(0, 200))
+  process.exit(1)
+}
+console.log(`采样点: ${points.length}, 窗口 ${new Date(points[0].t).toISOString()} ~ ${new Date(points.at(-1).t).toISOString()}`)
+
+// DOE 阶梯事件(审计核验的审批下发时刻,+08 本地)
+const events = [
+  { t: Date.parse('2026-10-02T16:46:44Z'), label: 'R1 SP→197', color: '#41c8f4' },
+  { t: Date.parse('2026-10-03T01:01:17+08:00'), label: 'R2 SP→200', color: '#f4a941' },
+  { t: Date.parse('2026-10-03T01:08:07+08:00'), label: 'R3 SP→205', color: '#e06060' },
+  { t: Date.parse('2026-10-03T01:16:49+08:00'), label: 'R4 SP→210', color: '#b58cf0' },
+  { t: Date.parse('2026-10-03T01:35:00+08:00'), label: '回基线 193', color: '#35e0a0' },
+].filter(e => e.t >= from && e.t <= to)
+
+// SP 阶跃(DOE 五级梯度和回基线;时刻 = 审计下发时刻)
+const spStep = [
+  { t: points[0].t, v: 195 },
+  { t: Date.parse('2026-10-02T16:46:44Z'), v: 195 },
+  { t: Date.parse('2026-10-02T16:46:44Z'), v: 197 },
+  { t: Date.parse('2026-10-03T01:01:17+08:00'), v: 197 },
+  { t: Date.parse('2026-10-03T01:01:17+08:00'), v: 200 },
+  { t: Date.parse('2026-10-03T01:08:07+08:00'), v: 200 },
+  { t: Date.parse('2026-10-03T01:08:07+08:00'), v: 205 },
+  { t: Date.parse('2026-10-03T01:16:49+08:00'), v: 205 },
+  { t: Date.parse('2026-10-03T01:16:49+08:00'), v: 210 },
+  { t: Date.parse('2026-10-03T01:35:00+08:00'), v: 210 },
+  { t: Date.parse('2026-10-03T01:35:00+08:00'), v: 193 },
+  { t: points.at(-1).t, v: 193 },
+].filter(p => p.t >= from)
+
+// ── SVG 几何 ──
+const W = 960, H = 420
+const ML = 64, MR = 24, MT = 46, MB = 56
+const iw = W - ML - MR, ih = H - MT - MB
+const tMin = points[0].t, tMax = points.at(-1).t
+const vs = points.map(p => p.v)
+const spVs = spStep.map(p => p.v)
+const vLo = Math.min(...vs, ...spVs) - 0.4
+const vHi = Math.max(...vs, ...spVs) + 0.4
+const X = t => ML + ((t - tMin) / (tMax - tMin)) * iw
+const Y = v => MT + (1 - (v - vLo) / (vHi - vLo)) * ih
+
+const path = points.map((p, i) => `${i ? 'L' : 'M'}${X(p.t).toFixed(1)},${Y(p.v).toFixed(1)}`).join(' ')
+const spPath = spStep.map((p, i) => `${i ? 'L' : 'M'}${X(p.t).toFixed(1)},${Y(p.v).toFixed(1)}`).join(' ')
+const hhmm = (t) => {
+  const d = new Date(t + 8 * 3600e3)
+  return `${String(d.getUTCHours()).padStart(2, '0')}:${String(d.getUTCMinutes()).padStart(2, '0')}`
+}
+const gridVals = []
+for (let v = Math.ceil(vLo); v <= Math.floor(vHi); v++) gridVals.push(v)
+const grid = gridVals.map(v => `<line x1="${ML}" y1="${Y(v).toFixed(1)}" x2="${W - MR}" y2="${Y(v).toFixed(1)}" stroke="#eee"/><text x="${ML - 8}" y="${(Y(v) + 4).toFixed(1)}" font-size="11" fill="#888" text-anchor="end">${v}</text>`).join('')
+const xticks = [0, 0.25, 0.5, 0.75, 1].map((f) => {
+  const t = tMin + f * (tMax - tMin)
+  return `<line x1="${X(t).toFixed(1)}" y1="${MT + ih}" x2="${X(t).toFixed(1)}" y2="${MT + ih + 5}" stroke="#999"/><text x="${X(t).toFixed(1)}" y="${MT + ih + 20}" font-size="11" fill="#888" text-anchor="middle">${hhmm(t)}</text>`
+}).join('')
+const eventLines = events.map(e => `<line x1="${X(e.t).toFixed(1)}" y1="${MT}" x2="${X(e.t).toFixed(1)}" y2="${MT + ih}" stroke="${e.color}" stroke-dasharray="4 3" opacity="0.8"/><text x="${(X(e.t) + 5).toFixed(1)}" y="${MT + 14}" font-size="11" fill="${e.color}">${e.label}</text>`).join('')
+const mean = (vs.reduce((a, b) => a + b, 0) / vs.length).toFixed(3)
+const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" font-family="system-ui,sans-serif">
+<rect width="${W}" height="${H}" fill="#fff"/>
+<text x="${W / 2}" y="22" font-size="15" font-weight="600" fill="#222" text-anchor="middle">闭环调优实验 · 熔体温度 PV 响应曲线(2026-10-02,混合产线 PLC+MES)</text>
+<text x="${W / 2}" y="38" font-size="11" fill="#888" text-anchor="middle">dn-0183240d(modbus-tcp)· ${points.length} 采样点 · 窗口均值 ${mean}℃ · 采样 15s 降采样</text>
+${grid}${xticks}${eventLines}
+<path d="${spPath}" stroke="#e06060" stroke-width="1.6" fill="none" stroke-dasharray="6 3"/>
+<path d="${path}" stroke="#3565e0" stroke-width="1.4" fill="none"/>
+<circle cx="${X(points.at(-1).t).toFixed(1)}" cy="${Y(points.at(-1).v).toFixed(1)}" r="3" fill="#3565e0"/>
+<rect x="${ML}" y="${H - MB + 26}" width="12" height="3" fill="#3565e0"/><text x="${ML + 18}" y="${H - MB + 30}" font-size="11" fill="#555">熔体温度 PV(daq 实采)</text>
+<rect x="${ML + 190}" y="${H - MB + 26}" width="12" height="3" fill="#e06060"/><text x="${ML + 208}" y="${H - MB + 30}" font-size="11" fill="#555">加热区1SP(配方下发阶跃)</text>
+<text x="${ML + 420}" y="${H - MB + 30}" font-size="11" fill="#888">DOE 五级梯度 195→197→200→205→210 全经 HITL 审批由 omp Agent 提案下发 · 残差分析:zone1-SP 耦合≈0</text>
+</svg>`
+
+const { writeFileSync, mkdirSync } = await import('node:fs')
+const { dirname } = await import('node:path')
+mkdirSync(dirname(out), { recursive: true })
+writeFileSync(out, svg)
+console.log('SVG 已生成:', out, `(${svg.length} bytes)`)

package/scripts/render-pressure-curve.mjs

@@ -0,0 +1,89 @@
+/**
+ * 泵压闭环寻优曲线(实测点汇总版)
+ * 数据源:daq 序列实采(08:26-08:37 基线段) + 编排器轮询实读(审计时刻锚定)
+ * 用法:node scripts/render-pressure-curve.mjs <adminToken> [outSvg]
+ */
+const out = process.argv[3] ?? 'docs/audit/assets/opt-curve-2026-10-03-pressure.svg'
+const GOAL = 16.6
+
+// 实测点(+08 时刻,来源:daq 序列实采与编排器轮询,SP 阶段按审计下发时刻归属)
+const P = (hhmm, v, phase) => ({ t: Date.parse(`2026-10-03T${hhmm}:00+08:00`), v, phase })
+const points = [
+  // 基线段(screw=125,daq 序列实采)
+  P('08:26', 15.89, 'base'), P('08:27', 15.91, 'base'), P('08:28', 15.93, 'base'),
+  P('08:29', 15.89, 'base'), P('08:30', 15.9, 'base'), P('08:31', 15.9, 'base'),
+  P('08:32', 15.2, 'base'), P('08:33', 15.09, 'base'), P('08:34', 15.05, 'base'),
+  P('08:35', 15.02, 'base'), P('08:36', 15.02, 'base'), P('08:37', 15.07, 'base'),
+  // R2 段(screw=131,09:04:38 审批下发,轮询实读)
+  P('09:19', 15.755, 'r2'), P('09:29', 15.84, 'r2'), P('09:39', 15.78, 'r2'),
+  P('09:49', 15.756, 'r2'), P('09:59', 15.784, 'r2'),
+  // R3 段(screw=135,10:10:16 审批下发,轮询实读)
+  P('10:21', 16.443, 'r3'), P('10:31', 16.263, 'r3'), P('10:41', 16.344, 'r3'), P('10:51', 16.344, 'r3'),
+].sort((a, b) => a.t - b.t)
+
+// 事件(审计核验)
+const events = [
+  { t: Date.parse('2026-10-03T09:04:38+08:00'), label: 'R2 125→131(HITL)', color: '#41c8f4' },
+  { t: Date.parse('2026-10-03T10:10:16+08:00'), label: 'R3 131→135(HITL)', color: '#f4a941' },
+  { t: Date.parse('2026-10-03T10:10:33+08:00'), label: 'admin revert v3(交错留痕)', color: '#e06060' },
+]
+
+// ScrewSpeedSP 阶跃
+const spStep = [
+  { t: points[0].t, v: 125 },
+  { t: Date.parse('2026-10-03T09:04:38+08:00'), v: 125 },
+  { t: Date.parse('2026-10-03T09:04:38+08:00'), v: 131 },
+  { t: Date.parse('2026-10-03T10:10:16+08:00'), v: 131 },
+  { t: Date.parse('2026-10-03T10:10:16+08:00'), v: 135 },
+  { t: points.at(-1).t, v: 135 },
+]
+
+const W = 960, H = 430
+const ML = 64, MR = 24, MT = 46, MB = 56
+const iw = W - ML - MR, ih = H - MT - MB
+const tMin = points[0].t, tMax = points.at(-1).t
+const vs = points.map(p => p.v)
+const spVs = spStep.map(p => p.v)
+const vLo = Math.floor(Math.min(...vs, ...spVs, GOAL) - 0.4)
+const vHi = Math.ceil(Math.max(...vs, ...spVs, GOAL) + 0.4)
+const X = t => ML + ((t - tMin) / (tMax - tMin)) * iw
+const Y = v => MT + (1 - (v - vLo) / (vHi - vLo)) * ih
+
+const segColor = { base: '#8899aa', r2: '#3565e0', r3: '#5a3fd4' }
+let path = ''
+for (let i = 0; i < points.length; i++) {
+  path += `${i ? 'L' : 'M'}${X(points[i].t).toFixed(1)},${Y(points[i].v).toFixed(1)} `
+}
+const spPath = spStep.map((p, i) => `${i ? 'L' : 'M'}${X(p.t).toFixed(1)},${Y(p.v).toFixed(1)}`).join(' ')
+const hhmm = (t) => {
+  const d = new Date(t + 8 * 3600e3)
+  return `${String(d.getUTCHours()).padStart(2, '0')}:${String(d.getUTCMinutes()).padStart(2, '0')}`
+}
+const gridVals = []
+for (let v = vLo; v <= vHi; v++) gridVals.push(v)
+const grid = gridVals.map(v => `<line x1="${ML}" y1="${Y(v).toFixed(1)}" x2="${W - MR}" y2="${Y(v).toFixed(1)}" stroke="#eee"/><text x="${ML - 8}" y="${(Y(v) + 4).toFixed(1)}" font-size="11" fill="#888" text-anchor="end">${v}</text>`).join('')
+const xticks = [0, 0.25, 0.5, 0.75, 1].map((f) => {
+  const t = tMin + f * (tMax - tMin)
+  return `<line x1="${X(t).toFixed(1)}" y1="${MT + ih}" x2="${X(t).toFixed(1)}" y2="${MT + ih + 5}" stroke="#999"/><text x="${X(t).toFixed(1)}" y="${MT + ih + 20}" font-size="11" fill="#888" text-anchor="middle">${hhmm(t)}</text>`
+}).join('')
+const eventLines = events.map(e => `<line x1="${X(e.t).toFixed(1)}" y1="${MT}" x2="${X(e.t).toFixed(1)}" y2="${MT + ih}" stroke="${e.color}" stroke-dasharray="4 3" opacity="0.8"/><text x="${(X(e.t) + 5).toFixed(1)}" y="${MT + 14}" font-size="11" fill="${e.color}">${e.label}</text>`).join('')
+const goalLine = `<line x1="${ML}" y1="${Y(GOAL).toFixed(1)}" x2="${W - MR}" y2="${Y(GOAL).toFixed(1)}" stroke="#35e0a0" stroke-dasharray="8 4" stroke-width="1.2"/><text x="${W - MR - 6}" y="${(Y(GOAL) - 5).toFixed(1)}" font-size="11" fill="#35e0a0" text-anchor="end">GOAL ${GOAL} MPa</text>`
+const dots = points.map(p => `<circle cx="${X(p.t).toFixed(1)}" cy="${Y(p.v).toFixed(1)}" r="2.2" fill="${segColor[p.phase] ?? '#3565e0'}"/>`).join('')
+const svg = `<svg xmlns="http://www.w3.org/2000/svg" width="${W}" height="${H}" font-family="system-ui,sans-serif">
+<rect width="${W}" height="${H}" fill="#fff"/>
+<text x="${W / 2}" y="22" font-size="15" font-weight="600" fill="#222" text-anchor="middle">泵压闭环寻优 · OPC UA MeltPressure 响应曲线(2026-10-03,线2 螺杆因子 DOE)</text>
+<text x="${W / 2}" y="38" font-size="11" fill="#888" text-anchor="middle">dn-121838ac(opcua)· ${points.length} 个实测点(daq 序列实采 + 审计时刻锚定轮询)· 全程测厚护栏正常</text>
+${grid}${xticks}${eventLines}${goalLine}
+<path d="${spPath}" stroke="#e06060" stroke-width="1.6" fill="none" stroke-dasharray="6 3"/>
+<path d="${path}" stroke="#3565e0" stroke-width="1.2" fill="none" opacity="0.85"/>
+${dots}
+<rect x="${ML}" y="${H - MB + 26}" width="12" height="3" fill="#3565e0"/><text x="${ML + 18}" y="${H - MB + 30}" font-size="11" fill="#555">泵压 PV(实采/轮询)</text>
+<rect x="${ML + 180}" y="${H - MB + 26}" width="12" height="3" fill="#e06060"/><text x="${ML + 198}" y="${H - MB + 30}" font-size="11" fill="#555">ScrewSpeedSP(配方下发阶跃)</text>
+<text x="${ML + 430}" y="${H - MB + 30}" font-size="11" fill="#888">R2/R3 均经 HITL 审批由 omp Agent 提案下发 · 全链审计留痕</text>
+</svg>`
+
+const { writeFileSync, mkdirSync } = await import('node:fs')
+const { dirname } = await import('node:path')
+mkdirSync(dirname(out), { recursive: true })
+writeFileSync(out, svg)
+console.log('SVG 已生成:', out, `(${svg.length} bytes, ${points.length} 实测点)`)

package/scripts/start.mjs

@@ -8,6 +8,7 @@
 // 注入,绝不写入 config.yml/仓库;已导出的真实环境变量优先）。
 // ============================================================
 import { existsSync, readFileSync, writeFileSync } from 'node:fs'
+import { spawn } from 'node:child_process'
 import { dirname, join, resolve } from 'node:path'
 import { fileURLToPath } from 'node:url'
 import { resolveRunMode } from '../shared/config/home.mjs'
@@ -68,7 +69,7 @@ const portSource = eff.sources['server.prod.port']
 
 // ---- 单实例互斥(hardening ST-1):同配置根双开直接退出码 2,防 SQLite 锁崩溃 ----
 // ---- 单实例互斥 + 自动顶替:同配置根已有实例 → 自动停止后重启新实例(防 SQLite 锁崩溃) ----
-const { acquireLock, checkPort, terminatePid } = await import('../shared/config/single-instance.mjs')
+const { acquireLock, checkPort, terminatePid, enforceLockHeartbeat } = await import('../shared/config/single-instance.mjs')
 let requestedPort = argPort ? Number(argPort) : prodPort
 // CLI 传参校验:--port -1 之类会被 parseArgs 弄成怪值,这里显式拒绝而非绑定到端口 1
 if (!Number.isInteger(requestedPort) || requestedPort < 1 || requestedPort > 65535) {
@@ -90,6 +91,8 @@ if (!lock.ok) {
     process.exit(2)
   }
 }
+// 锁心跳:持锁期间锁被他人接管(多写者=JSON 快照互相毁灭,2026-10-04 实测事故)→ 本进程主动退出
+enforceLockHeartbeat(lock, rm.configRoot)
 
 // ---- 端口顺延:配置端口被任意进程占用(含其他配置根的实例)→ 逐个 +1(最多 10 次) ----
 let port = requestedPort
@@ -123,4 +126,125 @@ process.env.NITRO_PORT = process.env.PORT
 
 console.log(`[config] 生产服务启动 -> http://${process.env.HOST}:${process.env.PORT}  (模式: ${rm.mode}, port source: ${portSource}${bumped > 0 ? ' + 顺延' : ''})`)
 
-await import('../.output/server/index.mjs')
+// ---- P0-4 子进程监管(spawn + respawn)----
+// 此前 `await import(.output)` 同进程直载:OOM(exit 134)= start.mjs 自身死亡,无人重启。
+// 现由本父进程 spawn 服务子进程并监管:崩溃/健康失联/堆水位持续越限自动 respawn
+// (退避 2s→60s,滑动 1h 窗口最多 10 次);父进程任何退出路径先杀子进程 ——
+// 孤儿子进程占端口会让新实例顺延 +1(双实例假象);子进程侧另有 parent-watch 插件双保险。
+
+const outputEntry = join(packageRoot, '.output', 'server', 'index.mjs')
+if (!existsSync(outputEntry)) {
+  console.error('✖ 未找到构建产物 .output/server/index.mjs —— 请先执行 aw build')
+  process.exit(1)
+}
+
+const childEnv = { ...process.env, AW_PARENT_PID: String(process.pid) }
+// 堆限额固化:父进程未带 --max-old-space-size 时给子进程补默认 4096MB(3GB 事故线以上)
+if (!/max-old-space-size/.test(String(childEnv.NODE_OPTIONS ?? ''))) {
+  const cfg = Number(childEnv.AW_HEAP_LIMIT_MB ?? 4096)
+  const heapMb = Number.isFinite(cfg) && cfg >= 1024 ? cfg : 4096
+  childEnv.NODE_OPTIONS = `${childEnv.NODE_OPTIONS ? `${childEnv.NODE_OPTIONS} ` : ''}--max-old-space-size=${heapMb}`
+}
+
+const HEALTH_URL = `http://127.0.0.1:${process.env.PORT}/api/health`
+const RESTART_WINDOW_MS = 3_600_000
+const MAX_RESTARTS_PER_WINDOW = 10
+const START_GRACE_MS = 45_000
+const PROACTIVE_HEAP_RATIO = 0.94
+
+let serviceChild = null
+let givingUp = false
+let restartTimes = []
+let healthFailStreak = 0
+let heapHotStreak = 0
+
+function killChild(sig = 'SIGTERM') {
+  const c = serviceChild
+  if (!c || c.exitCode !== null || c.signalCode) return
+  try {
+    c.kill(sig)
+  }
+  catch { /* 已死 */ }
+}
+
+function spawnServiceChild() {
+  const gen = restartTimes.length + 1
+  const heapMb = String(childEnv.NODE_OPTIONS ?? '').match(/max-old-space-size=(\d+)/)?.[1] ?? 'default'
+  console.log(`[start] 拉起服务子进程 #${gen}(heap ${heapMb}MB)`)
+  const c = spawn(process.execPath, [outputEntry], { stdio: 'inherit', env: childEnv })
+  c.spawnTime = Date.now()
+  serviceChild = c
+  c.on('exit', (code, signal) => {
+    if (givingUp || serviceChild !== c) return
+    const now = Date.now()
+    restartTimes = restartTimes.filter(t => now - t < RESTART_WINDOW_MS)
+    restartTimes.push(now)
+    if (restartTimes.length > MAX_RESTARTS_PER_WINDOW) {
+      givingUp = true
+      console.error(`[start] 子进程 1 小时内第 ${restartTimes.length} 次退出,超出上限 —— 放弃重启,请人工排查(exit=${code} signal=${signal})`)
+      process.exit(1)
+    }
+    const backoff = Math.min(60_000, 2000 * 2 ** Math.min(restartTimes.length - 1, 5))
+    console.error(`[start] 服务子进程 #${gen} 退出 code=${code} signal=${signal} —— ${Math.round(backoff / 1000)}s 后自动重启`)
+    setTimeout(() => {
+      if (!givingUp) spawnServiceChild()
+    }, backoff)
+  })
+}
+
+async function probeHealth() {
+  try {
+    const ac = new AbortController()
+    const t = setTimeout(() => ac.abort(), 3000)
+    const res = await fetch(HEALTH_URL, { signal: ac.signal })
+    clearTimeout(t)
+    if (!res.ok) return null
+    const body = await res.json().catch(() => null)
+    return body?.data?.memory ?? body?.memory ?? null
+  }
+  catch {
+    return null
+  }
+}
+
+const healthTimer = setInterval(async () => {
+  const c = serviceChild
+  if (!c || c.exitCode !== null || givingUp) return
+  if (Date.now() - (c.spawnTime ?? 0) < START_GRACE_MS) return
+  const mem = await probeHealth()
+  if (!mem) {
+    healthFailStreak++
+    if (healthFailStreak >= 3) {
+      console.error('[start] 健康探针连续 3 次失联 —— 判定服务僵死,重启子进程')
+      healthFailStreak = 0
+      heapHotStreak = 0
+      killChild('SIGKILL') // Windows = TerminateProcess;启动对账链自愈(crash-safe)
+    }
+    return
+  }
+  healthFailStreak = 0
+  if (typeof mem?.heapRatio === 'number' && mem.heapRatio >= PROACTIVE_HEAP_RATIO) {
+    heapHotStreak++
+    if (heapHotStreak >= 3) {
+      console.error(`[start] 堆水位 ${Math.round(mem.heapRatio * 100)}% 连续 ${heapHotStreak} 拍越限 —— 主动重启(先于 V8 OOM abort)`)
+      heapHotStreak = 0
+      killChild('SIGTERM')
+    }
+  }
+  else {
+    heapHotStreak = 0
+  }
+}, 30_000)
+healthTimer.unref?.()
+
+// 父进程任何退出路径先杀子进程(含锁心跳自杀 process.exit → 'exit' 事件)
+for (const sig of ['SIGINT', 'SIGTERM', 'SIGBREAK']) {
+  process.on(sig, () => {
+    killChild('SIGTERM')
+    const t = setTimeout(() => process.exit(0), 500)
+    t.unref?.()
+  })
+}
+process.on('exit', () => killChild('SIGKILL'))
+
+spawnServiceChild()