agentworkshop 0.7.54 → 0.7.59

package/server/api/metrics.ts

@@ -1,78 +1,89 @@
-/**
- * GET /api/metrics —— 运维指标端点(R4,production-readiness-plan)。
- *
- * text/plain 简易指标格式(键值行,Prometheus 可用 textfile/自定义采集器接入)。
- * 鉴权:任意有效用户 token(Bearer)——聚合计数与时间戳不含业务数据,
- * 但公网部署下不向匿名暴露运行面信息;采集器配 Token 头即可接入。
- * 只读 globalThis 单例(不主动实例化),服务未装配时输出 0 —— 首次抓取即合法。
- */
-import { defineEventHandler, setResponseHeader } from 'h3'
-import { getOps } from '../services/workshop/ops/ops'
-import { resolveUser } from './workshop/caller'
-
-interface MetricLine { name: string, help: string, value: number | string }
-
-function fmt(lines: MetricLine[]): string {
-  return lines.map(l => `# HELP ${l.name} ${l.help}\n# TYPE ${l.name} gauge\n${l.name} ${l.value}`).join('\n') + '\n'
-}
-
-export default defineEventHandler(async (event) => {
-  resolveUser(event)
-  const g = globalThis as typeof globalThis & {
-    __daqController?: { controllerState(): Record<string, number | boolean>, running?: boolean }
-    __daqQueue?: { lost?: number }
-    __daqQueueBackend?: string
-    __toolApprovals?: { listPending(agentId?: string): unknown[] }
-    __wsDbFlushFails?: number
-    __awBackupLastAt?: string
-  }
-
-  const lines: MetricLine[] = []
-
-  // ---- DAQ 数据链路(未运行/未装配时 controllerState 仍可读,计数为 0) ----
-  const ctrl = g.__daqController
-  if (ctrl) {
-    const s = ctrl.controllerState()
-    const num = (v: unknown): number => (typeof v === 'number' ? v : 0)
-    lines.push(
-      { name: 'awshop_daq_running', help: 'DAQ controller running(1=运行中)', value: s.running ? 1 : 0 },
-      { name: 'awshop_daq_nodes_total', help: 'DAQ nodes registered', value: num(s.nodesTotal) },
-      { name: 'awshop_daq_nodes_online', help: 'DAQ nodes enabled', value: num(s.nodesOnline) },
-      { name: 'awshop_daq_produced_total', help: 'Samples produced by runtimes', value: num(s.produced) },
-      { name: 'awshop_daq_consumed_total', help: 'Samples consumed from queue', value: num(s.consumed) },
-      { name: 'awshop_daq_dropped_total', help: 'Samples dropped(queue lost + late frames)', value: num(s.dropped) },
-      { name: 'awshop_daq_samples_stored_total', help: 'Samples persisted to tsdb', value: num(s.samplesStored) },
-      { name: 'awshop_daq_tsdb_dropped_total', help: 'Samples dropped by tsdb writer', value: num(s.tsdbDropped) },
-      { name: 'awshop_daq_alarms_raised_total', help: 'Alarms raised(edge-trigger, idempotent)', value: num(s.alarmsRaised) },
-    )
-  }
-  else {
-    lines.push(
-      { name: 'awshop_daq_running', help: 'DAQ controller running(1=运行中)', value: 0 },
-      { name: 'awshop_daq_produced_total', help: 'Samples produced by runtimes', value: 0 },
-      { name: 'awshop_daq_samples_stored_total', help: 'Samples persisted to tsdb', value: 0 },
-      { name: 'awshop_daq_alarms_raised_total', help: 'Alarms raised(edge-trigger, idempotent)', value: 0 },
-    )
-  }
-  lines.push(
-    { name: 'awshop_daq_queue_lost_total', help: 'Frames lost at queue adapter(mqtt断连/inproc拥塞)', value: g.__daqQueue?.lost ?? 0 },
-    { name: 'awshop_daq_queue_backend_info', help: 'Queue backend(inproc=0 / mqtt=1)', value: (g.__daqQueueBackend ?? 'inproc') === 'mqtt' ? 1 : 0 },
-  )
-
-  // ---- WS 实时通道(落库失败静默重试,只能靠计数观测) ----
-  lines.push({ name: 'awshop_ws_db_flush_fails_total', help: 'Channel event batch DB-insert failures', value: g.__wsDbFlushFails ?? 0 })
-
-  // ---- HITL:工具审批 + 高危操作复核待办 ----
-  const toolPending = g.__toolApprovals?.listPending().length ?? 0
-  const opsPending = getOps()?.approvalRequests.listPending().length ?? 0
-  lines.push(
-    { name: 'awshop_tool_approvals_pending', help: 'Pending agent tool approvals(HITL)', value: toolPending },
-    { name: 'awshop_operation_approvals_pending', help: 'Pending dangerous-operation approval requests(maker-checker)', value: opsPending },
-  )
-
-  // ---- 备份(S6) ----
-  lines.push({ name: 'awshop_backup_last_success_timestamp', help: 'Last successful backup ISO time(0=从未)', value: g.__awBackupLastAt ?? 0 })
-
-  setResponseHeader(event, 'content-type', 'text/plain; charset=utf-8')
-  return fmt(lines)
-})
+/**
+ * GET /api/metrics —— 运维指标端点(R4,production-readiness-plan)。
+ *
+ * text/plain 简易指标格式(键值行,Prometheus 可用 textfile/自定义采集器接入)。
+ * 鉴权:任意有效用户 token(Bearer)——聚合计数与时间戳不含业务数据,
+ * 但公网部署下不向匿名暴露运行面信息;采集器配 Token 头即可接入。
+ * 只读 globalThis 单例(不主动实例化),服务未装配时输出 0 —— 首次抓取即合法。
+ */
+import { defineEventHandler, setResponseHeader } from 'h3'
+import { getOps } from '../services/workshop/ops/ops'
+import { resolveUser } from './workshop/caller'
+
+interface MetricLine { name: string, help: string, value: number | string }
+
+function fmt(lines: MetricLine[]): string {
+  return lines.map(l => `# HELP ${l.name} ${l.help}\n# TYPE ${l.name} gauge\n${l.name} ${l.value}`).join('\n') + '\n'
+}
+
+export default defineEventHandler(async (event) => {
+  resolveUser(event)
+  const g = globalThis as typeof globalThis & {
+    __daqController?: { controllerState(): Record<string, number | boolean>, running?: boolean }
+    __daqQueue?: { lost?: number }
+    __daqQueueBackend?: string
+    __toolApprovals?: { listPending(agentId?: string): unknown[] }
+    __wsDbFlushFails?: number
+    __awBackupLastAt?: string
+  }
+
+  const lines: MetricLine[] = []
+
+  // ---- DAQ 数据链路(未运行/未装配时 controllerState 仍可读,计数为 0) ----
+  const ctrl = g.__daqController
+  if (ctrl) {
+    const s = ctrl.controllerState()
+    const num = (v: unknown): number => (typeof v === 'number' ? v : 0)
+    lines.push(
+      { name: 'awshop_daq_running', help: 'DAQ controller running(1=运行中)', value: s.running ? 1 : 0 },
+      { name: 'awshop_daq_nodes_total', help: 'DAQ nodes registered', value: num(s.nodesTotal) },
+      { name: 'awshop_daq_nodes_online', help: 'DAQ nodes enabled', value: num(s.nodesOnline) },
+      { name: 'awshop_daq_produced_total', help: 'Samples produced by runtimes', value: num(s.produced) },
+      { name: 'awshop_daq_consumed_total', help: 'Samples consumed from queue', value: num(s.consumed) },
+      { name: 'awshop_daq_dropped_total', help: 'Samples dropped(queue lost + late frames)', value: num(s.dropped) },
+      { name: 'awshop_daq_samples_stored_total', help: 'Samples persisted to tsdb', value: num(s.samplesStored) },
+      { name: 'awshop_daq_tsdb_dropped_total', help: 'Samples dropped by tsdb writer', value: num(s.tsdbDropped) },
+      { name: 'awshop_daq_alarms_raised_total', help: 'Alarms raised(edge-trigger, idempotent)', value: num(s.alarmsRaised) },
+    )
+  }
+  else {
+    lines.push(
+      { name: 'awshop_daq_running', help: 'DAQ controller running(1=运行中)', value: 0 },
+      { name: 'awshop_daq_produced_total', help: 'Samples produced by runtimes', value: 0 },
+      { name: 'awshop_daq_samples_stored_total', help: 'Samples persisted to tsdb', value: 0 },
+      { name: 'awshop_daq_alarms_raised_total', help: 'Alarms raised(edge-trigger, idempotent)', value: 0 },
+    )
+  }
+  lines.push(
+    { name: 'awshop_daq_queue_lost_total', help: 'Frames lost at queue adapter(mqtt断连/inproc拥塞)', value: g.__daqQueue?.lost ?? 0 },
+    { name: 'awshop_daq_queue_backend_info', help: 'Queue backend(inproc=0 / mqtt=1)', value: (g.__daqQueueBackend ?? 'inproc') === 'mqtt' ? 1 : 0 },
+  )
+
+  // ---- WS 实时通道(落库失败静默重试,只能靠计数观测) ----
+  lines.push({ name: 'awshop_ws_db_flush_fails_total', help: 'Channel event batch DB-insert failures', value: g.__wsDbFlushFails ?? 0 })
+
+  // ---- P0-4 进程内存水位(exit 134 = 堆耗尽,heapUsed 与其同源;limit 来自 --max-old-space-size) ----
+  {
+    const { getHeapStatistics } = await import('node:v8')
+    const mu = process.memoryUsage()
+    lines.push(
+      { name: 'awshop_process_heap_used_bytes', help: 'Process V8 heap used bytes', value: mu.heapUsed },
+      { name: 'awshop_process_heap_limit_bytes', help: 'Process V8 heap limit bytes(--max-old-space-size)', value: getHeapStatistics().heap_size_limit },
+      { name: 'awshop_process_rss_bytes', help: 'Process resident set size bytes', value: mu.rss },
+    )
+  }
+
+  // ---- HITL:工具审批 + 高危操作复核待办 ----
+  const toolPending = g.__toolApprovals?.listPending().length ?? 0
+  const opsPending = getOps()?.approvalRequests.listPending().length ?? 0
+  lines.push(
+    { name: 'awshop_tool_approvals_pending', help: 'Pending agent tool approvals(HITL)', value: toolPending },
+    { name: 'awshop_operation_approvals_pending', help: 'Pending dangerous-operation approval requests(maker-checker)', value: opsPending },
+  )
+
+  // ---- 备份(S6) ----
+  lines.push({ name: 'awshop_backup_last_success_timestamp', help: 'Last successful backup ISO time(0=从未)', value: g.__awBackupLastAt ?? 0 })
+
+  setResponseHeader(event, 'content-type', 'text/plain; charset=utf-8')
+  return fmt(lines)
+})

package/server/api/users/change-password.post.ts

@@ -0,0 +1,18 @@
+import { extractBearerToken } from '../../utils/auth'
+import { userChangePasswordSchema, type UserChangePassword } from '../../schemas/user.schema'
+import { resolveUserByToken, userService } from '../../services/user.service'
+import { AppError } from '../../utils/errors'
+import { defineApiHandler } from '../../utils/response'
+import { zValidator } from '../../utils/validate'
+import { readValidatedBody } from 'h3'
+
+/** POST /api/users/change-password —— 本人修改密码（当前密码验证；首登强制改密同一入口） */
+export default defineApiHandler(async (event) => {
+  const token = extractBearerToken(event)
+  const me = resolveUserByToken(token)
+  if (!me) {
+    throw new AppError(401, 'USER_UNAUTHORIZED', '未登录或 token 已失效')
+  }
+  const body = await readValidatedBody(event, zValidator(userChangePasswordSchema)) as UserChangePassword
+  return userService.changePassword(me.id, body.currentPassword, body.newPassword)
+})

package/server/api/users/setup-status.get.ts

@@ -1,8 +1,13 @@
-import { userRepository } from '../../repositories/user.repository'
-import { defineApiHandler } from '../../utils/response'
-
-/** GET /api/users/setup-status —— 公开:系统是否处于初始化状态。
- * true = 无活跃管理员 → 登录门呈现"注册管理员"表单,首个注册账号自动成为 admin */
-export default defineApiHandler(async () => {
-  return { needsSetup: !userRepository.hasActiveAdmin() }
-})
+import { userRepository } from '../../repositories/user.repository'
+import { settingOf } from '../../services/workshop/settings'
+import { defineApiHandler } from '../../utils/response'
+
+/** GET /api/users/setup-status —— 公开:登录门初始化探测。
+ * needsSetup = true 表示无活跃管理员 → 登录门呈现"注册管理员"表单,首个注册账号自动成为 admin。
+ * allowRegistration = false 表示自助注册已关(security.allowRegistration=false 且首管理员已就位)
+ * → 登录门隐藏注册页签(与 register 端点的 403 闸门同一复合条件,前端呈现层对齐)。 */
+export default defineApiHandler(async () => {
+  const needsSetup = !userRepository.hasActiveAdmin()
+  const allowRegistration = !(settingOf('security.allowRegistration') === false && !needsSetup)
+  return { needsSetup, allowRegistration }
+})

package/server/api/workshop/agent-tools/approvals/[id]/decide.post.ts

@@ -15,14 +15,14 @@ import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { AppError } from '@/server/utils/errors'
 import { getWorkshopManager } from '@/server/plugins/workshop'
-import { getToolApprovals } from '@/server/services/workshop/agents/tool-approvals'
+import { getToolApprovals, normalizeRecipeProposeDecision } from '@/server/services/workshop/agents/tool-approvals'
 import { assertCanDecideHitlChannel, snapshotOfRow } from '@/server/services/workshop/agents/hitl-decision'
 import { audit } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
   const id = getRouterParam(event, 'id')!
-  const body = await readBody<{ approved?: unknown, comment?: string }>(event) ?? {}
+  const body = await readBody<{ approved?: unknown, comment?: string, choice?: unknown }>(event) ?? {}
 
   // ① 显式布尔:禁止"缺省即批准"
   if (typeof body.approved !== 'boolean') {
@@ -30,6 +30,9 @@ export default defineApiHandler(async (event) => {
   }
   const approved = body.approved
   const comment = String(body.comment ?? '')
+  // ④ 多方案裁决序号(产线 Co-Pilot P2):仅接受整数(结构化审批单「批准此方案」);
+  //    其余输入一律按未携带处理,由 fail-closed 归一收敛为拒绝(不做静默取整/默认包)
+  const choice = Number.isInteger(body.choice) ? (body.choice as number) : undefined
 
   const manager = getWorkshopManager()
   const acting = { id: user.id, name: user.name, role: user.role }
@@ -52,24 +55,36 @@ export default defineApiHandler(async (event) => {
     throw new AppError(403, 'SCOPE_VIOLATION', '无法确定审批归属的 Channel,仅管理员可处理')
   }
 
+  // 产线 Co-Pilot P2:结构化审批单(recipe-propose,payload.schemaVersion=1)先经 fail-closed
+  // 归一 —— 无有效 choice 的「批准」一律按拒绝收敛;legacy 审批单(无 payload)完全不干预。
+  // (pending 即上方归属判定用的同一条 listPending 查询)
+  const normalized = normalizeRecipeProposeDecision(pending, { approved, choice })
+
   let approval
   try {
-    approval = getToolApprovals().decide(id, approved, comment, user.id, user.name)
+    approval = getToolApprovals().decide(id, normalized.approved, comment, user.id, user.name, normalized.choice)
   }
   catch (err) {
     // ③ 非 pending(已被他人处理/超时/被取消)→ 409(不再 500)
     throw new AppError(409, 'ALREADY_RESOLVED', err instanceof Error ? err.message : String(err))
   }
 
-  // R1:HITL 裁决审计(闭环中的人为决策留痕)
+  // R1:HITL 裁决审计(闭环中的人为决策留痕;choice 与 fail-closed 收敛随行落审计)
   audit({
     actor: user.id,
     actorName: user.name,
     actorKind: 'user',
-    action: approved ? 'approval.approve' : 'approval.reject',
+    action: normalized.approved ? 'approval.approve' : 'approval.reject',
     targetKind: 'tool-approval',
     targetId: id,
-    detail: { comment, via: 'agent-tools/decide', agentId, channelId: manager.findChannelAgentById(agentId)?.channelId ?? '' },
+    detail: {
+      comment,
+      choice: normalized.choice,
+      ...(normalized.rejectedReason ? { failClosedReason: normalized.rejectedReason } : {}),
+      via: 'agent-tools/decide',
+      agentId,
+      channelId: manager.findChannelAgentById(agentId)?.channelId ?? '',
+    },
   })
   return { approval }
 })

package/server/api/workshop/agent-tools/bindings/[id].patch.ts

@@ -1,22 +1,33 @@
 /**
  * PATCH /api/workshop/agent-tools/bindings/:id —— 切换控制模式(auto/manual)/设置调试元数据。
- * body: { mode?, tuning?: { min?, max?, step?, note? } }
+ * body: { mode?, confirm?, tuning?: { min?, max?, step?, note? } }
  * tuning = 绑定级调试元数据(工况提示词与探索步长来源,优先于节点自带元数据)。
  *
  * 鉴权(与 index.post.ts 同口径):manual→auto 等于**摘掉人类审批闸门**,
  * 所以必须先证明调用者可支配该绑定所属产线的节点,否则任意登录用户都能
  * 关掉别人的 HITL。早先此处只有 resolveUser。
+ *
+ * auto 治理(产线 Co-Pilot P2,计划 §5.4 铁律 2):
+ *  - body 无 mode 字段 → **不变更 mode**(消掉旧实现 `?? 'auto'` 的静默缺省:
+ *    空 body 曾会一言不发地把绑定切到 auto);
+ *  - manual→auto 必须携带显式 `confirm: true`(严格全等),缺失返回 400
+ *    MODE_CONFIRM_REQUIRED(前端可凭该 code 识别"缺确认");auto→manual 与
+ *    同名 mode 免 confirm;
+ *  - 判定逻辑抽在 server/services/workshop/agents/binding-mode.ts(纯函数,可单测)。
  */
 import { createError, getRouterParam, readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
 import { getAgentNodeBindingRepo, type AgentNodeBindingTuning } from '@/server/services/workshop/agents/node-bindings.repo'
 import { requireBindingAccess } from '@/server/services/workshop/agents/binding-authz'
+import { resolveModeChange } from '@/server/services/workshop/agents/binding-mode'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
   const id = getRouterParam(event, 'id')!
-  const body = await readBody<{ mode?: 'auto' | 'manual', tuning?: AgentNodeBindingTuning }>(event) ?? {}
+  const body = await readBody<{ mode?: 'auto' | 'manual', confirm?: unknown, tuning?: AgentNodeBindingTuning }>(event) ?? {}
   const repo = getAgentNodeBindingRepo()
   const binding = repo.all().find(b => b.id === id)
   if (!binding) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
@@ -24,5 +35,27 @@ export default defineApiHandler(async (event) => {
   if (body.tuning !== undefined) {
     return { binding: repo.setTuning(id, body.tuning) }
   }
-  return { binding: repo.setMode(id, body.mode ?? 'auto') }
+  // 模式切换判定:无 mode 字段/同名 → 不变更;manual→auto 无显式 confirm → 400
+  const decision = resolveModeChange(binding.mode, body.mode, body.confirm)
+  if (!decision.ok) {
+    throw new AppError(400, 'MODE_CONFIRM_REQUIRED', decision.error ?? '切换到 auto 需要风险确认')
+  }
+  if (decision.noop) {
+    return { binding }
+  }
+  const fromMode = binding.mode
+  const updated = repo.setMode(id, body.mode!)
+  // 模式切换留痕(产线 Co-Pilot P1:绑定 mode 切换此前无审计盲区)
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'binding.mode',
+    kind: 'system',
+    summary: `节点绑定控制模式切换 ${fromMode}→${updated.mode}`,
+    targetKind: 'agent_node_binding',
+    targetId: id,
+    detail: { nodeId: binding.nodeId, bindingKind: binding.kind, agentId: binding.agentId, fromMode, toMode: updated.mode },
+  })
+  return { binding: updated }
 })

package/server/api/workshop/agent-tools/bindings/index.post.ts

@@ -1,8 +1,15 @@
 /**
  * POST /api/workshop/agent-tools/bindings —— 绑定 Agent ↔ 工业节点。
- * body: { agentId, nodeId, kind: 'dcw'|'daq', mode: 'auto'|'manual' }
+ * body: { agentId, nodeId, kind: 'dcw'|'daq', mode?: 'auto'|'manual' }
  * 产线权限:普通用户仅可绑定自己有权产线的节点——daq 绑定需「仅查看」及以上,
  * dcw(写控)绑定需「可操控」;admin/editor 不受限。
+ *
+ * auto 治理(产线 Co-Pilot P2,计划 §5.4 铁律 2):**dcw 绑定首绑强制 manual**——
+ * dcw 写控面挂着逐次人工审批闸,创建即 auto 等于免审上线(旧实现 body.mode 缺省
+ * 还是 'auto'),故 body.mode 对 dcw 一律忽略;显式传 auto 不静默吞掉,响应附
+ * modeForced + notice 提示(响应形状向后兼容,多余字段无害)。如需 auto,应在
+ * 绑定创建后走 PATCH 携 confirm:true 显式切换(见 [id].patch.ts)。
+ * daq 绑定仅授权 daq_query 读(工具面无写族、mode 无审批语义可摘),维持原样。
  */
 import { readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
@@ -16,18 +23,26 @@ import { AppError, ErrorCodes } from '@/server/utils/errors'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
-  const body = await readBody<{ agentId?: string, nodeId?: string, kind?: 'dcw' | 'daq', mode?: 'auto' | 'manual' }>(event) ?? {}
-  const kind = body.kind ?? 'dcw'
+  const body = await readBody<{ agentId?: string, nodeId?: string, kind?: 'dcw' | 'daq' | 'recipe', mode?: 'auto' | 'manual' }>(event) ?? {}
+  const kind = body.kind ?? 'daq'
   const nodeId = String(body.nodeId ?? '')
   const agentId = String(body.agentId ?? '')
 
+  // 权限模型 v2:数控节点不再直接绑定 —— Agent 只对 recipe 做参数写入与下发;
+  // 节点级写控/dcw 绑定一律拒绝(存量绑定仅历史兼容,工具层已全部收敛到 recipe 面)。
+  if (kind === 'dcw') {
+    throw new AppError(400, 'BINDING_KIND_DEPRECATED',
+      `数控节点(dcw)不再支持直接绑定:Agent 通过绑定 recipe(kind='recipe',nodeId=配方id)获得该配方参数写入与下发能力;数采观察用 kind='daq'。`)
+  }
+
   // 绑定主体必须是**已部署的 Channel 成员实例**(运行时就是它持这条绑定做工具鉴权)。
   // 传 Agent 模板 id 是极易发生的误用:旧实现照单全收,绑定落在模板 id 上,
   // 成员侧 daq_query / dcw_control 一律报"尚未绑定节点" —— 一条**静默失效**的授权,
   // 排查成本极高(实测:脚本按 /api/workshop/agents 返回的 id 绑定,任务全被拒绝)。
   // 这里把无声错误变成可执行提示:模板 id → 告知应改用哪个成员 id;两者都不是 → 404。
   const manager = getWorkshopManager()
-  if (!manager.findChannelAgentById(agentId)) {
+  const memberRow = manager.findChannelAgentById(agentId)
+  if (!memberRow) {
     const instances = manager.listChannelAgentInstances(agentId)
     if (instances.length > 0) {
       const hint = instances.map(i => `${i.id}(频道「${i.name}」)`).join('、')
@@ -38,6 +53,41 @@ export default defineApiHandler(async (event) => {
       `Agent 成员不存在: ${agentId || '(空)'}(需传频道成员 id,可经 GET /api/workshop/channels/:id/agents 获取)`)
   }
 
+  // 权限模型 v3:绑线 channel 的产线一致性 —— channel 绑了产线后,其成员 agent 只能
+  // 绑定同产线的节点/配方(产线隔离的工作空间语义;未绑线的纯协作频道不受此限)。
+  const nodeLineOf = (nid: string, k: 'daq' | 'recipe'): string | null | undefined => {
+    if (k === 'recipe') return getDcwController().listRecipes().find(r => r.id === nid)?.lineId
+    return k === 'daq' ? getDaqController().byId(nid)?.lineId : getDcwController().byId(nid)?.lineId
+  }
+  const targetLine = nodeLineOf(nodeId, kind)
+  const channelRow = manager.deps.repos.channels.findById(memberRow.channelId)
+  if (channelRow?.lineId && targetLine && channelRow.lineId !== targetLine) {
+    throw new AppError(403, 'LINE_SCOPE_MISMATCH',
+      `该频道已绑定产线「${channelRow.lineId}」,成员 agent 只能绑定同产线的节点/配方(目标 ${nodeId} 属于产线「${targetLine}」)。请改绑同产线对象,或将频道解绑/换绑。`)
+  }
+
+  if (kind === 'recipe') {
+    // recipe 绑定:nodeId 字段 = 配方 id;要求调用者对该配方所在产线「可操控」
+    const recipe = getDcwController().listRecipes().find(r => r.id === nodeId)
+    if (!recipe) throw new AppError(404, ErrorCodes.NOT_FOUND, `配方不存在: ${nodeId}`)
+    const mode = lineMode(user, recipe.lineId)
+    if (mode !== 'operate') {
+      throw new AppError(403, 'LINE_FORBIDDEN', `无该产线权限:绑定配方需对产线「${recipe.lineId}」拥有可操控权限`)
+    }
+    // recipe 绑定恒 manual(默认要认证):每次参数写入/下发都挂 HITL 等人工批准;
+    // auto 一律走 PATCH { mode: "auto", confirm: true } 显式确认切换(body.mode 恒忽略,
+    // 避免"再绑一个新配方即免审"的旁路 —— 逐配方默认安全)
+    const binding = getAgentNodeBindingRepo().bind(agentId, nodeId, 'recipe', 'manual')
+    if (body.mode === 'auto') {
+      return {
+        binding,
+        modeForced: 'manual',
+        notice: 'recipe 绑定默认 manual(每次写入/下发需人工批准并附理由),body.mode=auto 已被忽略;如需 auto 请对该绑定 PATCH { mode: "auto", confirm: true } 显式确认切换',
+      }
+    }
+    return { binding }
+  }
+
   // 绑定前置:节点必须存在,且用户对其所属产线有足额权限
   const lineId = kind === 'daq'
     ? getDaqController().byId(nodeId)?.lineId
@@ -46,10 +96,11 @@ export default defineApiHandler(async (event) => {
     throw new AppError(404, ErrorCodes.NOT_FOUND, `${kind === 'daq' ? '数采' : '写控'}节点不存在: ${nodeId}`)
   }
   const mode = lineMode(user, lineId)
-  const needOperate = kind === 'dcw'
-  if (mode === 'none' || (needOperate && mode !== 'operate')) {
-    throw new AppError(403, 'LINE_FORBIDDEN', `无该产线权限:绑定${kind === 'daq' ? '数采' : '写控'}节点需对产线「${lineId}」拥有${needOperate ? '可操控' : '仅查看'}及以上权限`)
+  if (mode === 'none') {
+    throw new AppError(403, 'LINE_FORBIDDEN', `无该产线权限:绑定数采节点需对产线「${lineId}」拥有仅查看及以上权限`)
   }
-  const binding = getAgentNodeBindingRepo().bind(agentId, nodeId, kind, body.mode ?? 'auto')
+  // daq 维持 body.mode ?? 'auto' 缺省
+  const bindingMode = body.mode ?? 'auto'
+  const binding = getAgentNodeBindingRepo().bind(agentId, nodeId, kind, bindingMode)
   return { binding }
-})
+})

package/server/api/workshop/caller.ts

@@ -87,8 +87,9 @@ export function requireAdmin(event: H3Event): ResolvedUser {
   return user
 }
 
-/** 角色 守卫(R3):高危控制面操作(配方应用/网关启停/节点删除)仅 admin/editor 可执行 */
-export function requireRole(event: H3Event, roles: string[] = ['admin', 'editor']): ResolvedUser {
+/** 角色 守卫(R3):高危控制面操作(产线/节点创建删除/配方应用/网关启停)仅 admin 可执行;
+ *  editor 已收紧为普通角色(线域操作走 requireLineMode 的产线 grant 制,不再天然全权) */
+export function requireRole(event: H3Event, roles: string[] = ['admin']): ResolvedUser {
   const user = resolveUser(event)
   if (!roles.includes(user.role)) {
     throw new AppError(403, 'FORBIDDEN_ROLE', `该操作需要 ${roles.join('/')} 权限(当前角色 ${user.role})`)

package/server/api/workshop/channel-templates/[id]/instantiate.post.ts

@@ -15,7 +15,7 @@ const instantiateSchema = z.object({
   scene: z.record(z.unknown()).optional(),
   promptVariables: z.record(z.unknown()).optional(),
   objective: z.record(z.unknown()).optional(),
-  toolProfile: z.enum(['legacy', 'hybrid_twin', 'aml_training', 'aml_optimization']).optional(),
+  toolProfile: z.enum(['legacy', 'hybrid_twin', 'aml_training', 'aml_optimization', 'exp-miner', 'line-doctor']).optional(),
   controlPolicy: z.enum(['recommendation_only', 'hitl_governed', 'bounded_auto']).optional(),
   providerId: z.string().min(1).optional(),
   providerVersion: z.string().min(1).optional(),

package/server/api/workshop/channels/[id]/line.put.ts

@@ -1,30 +1,41 @@
-/**
- * PUT /api/workshop/channels/:id/line —— 绑定/解绑产线(v18)。
- * body: { "lineId": "<产线id>" | null }  (null/缺省 = 解绑)
- *
- * 只读扩权语义:绑定后频道成员无需节点绑定即可读取该产线的运维日志(ops_log)、
- * 配方变更史(recipe_log/recipe_versions)与实时全景(line_context:运行状态/活动
- * 批次/当前配方);参数下发等写操作仍必须走节点授权,不受绑定影响。
- * 权限:channel owner / admin(与 PATCH channel 同一守卫)。
- * 绑定变更回收成员运行时,下次装配注入产线简报(与场景 prompt 变更同链路)。
- */
-import { z } from 'zod'
-import { getRouterParam, readValidatedBody } from 'h3'
-import { resolveUser } from '../../caller'
-import { zValidator } from '../../../../utils/validate'
-import { defineApiHandler } from '../../../../utils/response'
-import { getWorkshopManager } from '../../../../plugins/workshop'
-
-const bindLineSchema = z.object({
-  lineId: z.string().trim().nullable().optional(),
-})
-
-export default defineApiHandler(async (event) => {
-  const channelId = getRouterParam(event, 'id')!
-  const user = resolveUser(event)
-  const body = await readValidatedBody(event, zValidator(bindLineSchema))
-  const manager = getWorkshopManager()
-  manager.requireChannelOwner(channelId, user, 'channel')
-  const channel = await manager.bindChannelLine(channelId, body.lineId ?? '')
-  return { ok: true, lineId: channel.lineId, channel }
-})
+/**
+ * PUT /api/workshop/channels/:id/line —— 绑定/解绑产线(v18)。
+ * body: { "lineId": "<产线id>" | null }  (null/缺省 = 解绑)
+ *
+ * 只读扩权语义:绑定后频道成员无需节点绑定即可读取该产线的运维日志(ops_log)、
+ * 配方变更史(recipe_log/recipe_versions)与实时全景(line_context:运行状态/活动
+ * 批次/当前配方);参数下发等写操作仍必须走节点授权,不受绑定影响。
+ * 权限:channel owner / admin(与 PATCH channel 同一守卫)。
+ * 绑定变更回收成员运行时,下次装配注入产线简报(与场景 prompt 变更同链路)。
+ */
+import { z } from 'zod'
+import { getRouterParam, readValidatedBody } from 'h3'
+import { resolveUser } from '../../caller'
+import { zValidator } from '../../../../utils/validate'
+import { defineApiHandler } from '../../../../utils/response'
+import { getWorkshopManager } from '../../../../plugins/workshop'
+import { requireLineMode } from '../../../../services/workshop/permissions'
+import { getDcwLineRepo } from '../../../../services/workshop/dcw/dcw-line.repo'
+import { AppError, ErrorCodes } from '../../../../utils/errors'
+
+const bindLineSchema = z.object({
+  lineId: z.string().trim().nullable().optional(),
+})
+
+export default defineApiHandler(async (event) => {
+  const channelId = getRouterParam(event, 'id')!
+  const user = resolveUser(event)
+  const body = await readValidatedBody(event, zValidator(bindLineSchema))
+  const manager = getWorkshopManager()
+  manager.requireChannelOwner(channelId, user, 'channel')
+  // 权限模型 v3:绑线者须对该产线有 grant(readonly 即可绑,成员仅只读上下文;
+  // operate 才可经此 channel 管理产线);admin 天然放行;产线必须存在
+  if (body.lineId) {
+    if (!getDcwLineRepo().byId(body.lineId)) {
+      throw new AppError(404, ErrorCodes.NOT_FOUND, `产线不存在: ${body.lineId}`)
+    }
+    requireLineMode(user, body.lineId, 'readonly')
+  }
+  const channel = await manager.bindChannelLine(channelId, body.lineId ?? '')
+  return { ok: true, lineId: channel.lineId, channel }
+})

package/server/api/workshop/channels/[id]/members/join.post.ts

@@ -1,30 +1,35 @@
-/**
- * POST /api/workshop/channels/:id/members/join —— 加入群聊。
- *
- * 资格(requireCanJoinChannel):
- *  - Channel 必须已开启群聊(chat_enabled=1)→ 否则 409 CHAT_DISABLED
- *  - 遗留无归属 Channel(owner NULL)→ 403 FORBIDDEN_LEGACY(不可自行加入)
- *  - visibility=private → 403 CHANNEL_PRIVATE(需 owner 邀请)
- *  - visibility=public:
- *      joinPolicy=open          → 直接 active
- *      joinPolicy=owner_approve → pending(需 owner 调 approve)
- *
- * 幂等:已是 active 成员时重复调用返回 active(不降级、不重置 generation)。
- * 退出后重新加入 → generation+1(旧 HITL 审批资格不恢复,§13.7)。
- */
-import { getRouterParam } from 'h3'
-import { resolveUser } from '@/server/api/workshop/caller'
-import { defineApiHandler } from '@/server/utils/response'
-import { getWorkshopManager } from '@/server/plugins/workshop'
-
-export default defineApiHandler(async (event) => {
-  const channelId = getRouterParam(event, 'id')!
-  const user = resolveUser(event)
-  const manager = getWorkshopManager()
-  const result = manager.joinChannel(channelId, user)
-  const row = manager.groupChat.members.findOne(channelId, user.id)
-  if (row) {
-    manager.publishChatMember(channelId, row, result.status === 'pending' ? 'joined' : 'approved', user.id)
-  }
-  return { ...result, permissions: manager.channelPermissionsOf(channelId, user) }
-})
+/**
+ * POST /api/workshop/channels/:id/members/join —— 加入群聊。
+ *
+ * 资格(requireCanJoinChannel):
+ *  - Channel 必须已开启群聊(chat_enabled=1)→ 否则 409 CHAT_DISABLED
+ *  - 遗留无归属 Channel(owner NULL)→ 403 FORBIDDEN_LEGACY(不可自行加入)
+ *  - visibility=private → 403 CHANNEL_PRIVATE(需 owner 邀请)
+ *  - visibility=public:
+ *      joinPolicy=open          → 直接 active
+ *      joinPolicy=owner_approve → pending(需 owner 调 approve)
+ *
+ * 幂等:已是 active 成员时重复调用返回 active(不降级、不重置 generation)。
+ * 退出后重新加入 → generation+1(旧 HITL 审批资格不恢复,§13.7)。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+
+export default defineApiHandler(async (event) => {
+  const channelId = getRouterParam(event, 'id')!
+  const user = resolveUser(event)
+  const manager = getWorkshopManager()
+  // 权限模型 v3:绑线频道的加入须对该产线有授权(readonly 及以上;admin 天然放行)
+  // —— 与可见性/订阅同口径,防止无权用户绕过订阅闸成为成员
+  const channel = manager.deps.repos.channels.findById(channelId)
+  if (channel?.lineId) requireLineMode(user, channel.lineId, 'readonly')
+  const result = manager.joinChannel(channelId, user)
+  const row = manager.groupChat.members.findOne(channelId, user.id)
+  if (row) {
+    manager.publishChatMember(channelId, row, result.status === 'pending' ? 'joined' : 'approved', user.id)
+  }
+  return { ...result, permissions: manager.channelPermissionsOf(channelId, user) }
+})