agentworkshop 0.7.54 → 0.7.59

package/server/api/workshop/channels.post.ts

@@ -15,6 +15,8 @@ const createChannelSchema = z.object({
   description: z.string().optional(),
   /** channel 级作业场景 prompt(注入全部成员 harness;用户场景 × 系统设计组合) */
   scenarioPrompt: z.string().optional(),
+  /** 创建时绑定产线(可选;须对该线有 grant,admin 天然放行;不绑 = 纯协作频道) */
+  lineId: z.string().trim().optional(),
   /** channel 独立工作目录(omp 子进程 cwd);缺省 data/workspaces/<channelId> */
   workspace: z.string().optional(),
   /** 团队级插件开关(创建时即写入;未选中的插件其工具不注入该团队 Agent) */
@@ -55,6 +57,17 @@ export default defineApiHandler(async (event) => {
       body.plugins.filter(p => p && typeof p.name === 'string' && registered.has(p.name)),
     )
   }
+  // 权限模型 v3:创建时绑线(可选)——须对该产线有 grant 且产线存在(与 line.put 同口径)
+  if (body.lineId) {
+    const { requireLineMode } = await import('@/server/services/workshop/permissions')
+    const { getDcwLineRepo } = await import('@/server/services/workshop/dcw/dcw-line.repo')
+    if (!getDcwLineRepo().byId(body.lineId)) {
+      const { AppError, ErrorCodes } = await import('@/server/utils/errors')
+      throw new AppError(404, ErrorCodes.NOT_FOUND, `产线不存在: ${body.lineId}`)
+    }
+    requireLineMode(user, body.lineId, 'readonly')
+    await manager.bindChannelLine(result.channelId, body.lineId)
+  }
   // 全时事件录制:新 channel 即时建立常驻流(server 驱动落库,与订阅者无关)
   const { ensureStream } = await import('./ws')
   ensureStream(manager, result.channelId)

package/server/api/workshop/daq/index.post.ts

@@ -11,11 +11,16 @@ import { bindDaqHost } from '@/server/services/workshop/daq/host-bindings'
 import { getDaqController, type DaqCreateInput } from '@/server/services/workshop/daq/daq-controller'
 import { broadcastSceneEvent } from '../../../services/workshop/scene-events'
 import { recordOps } from '../../../services/workshop/ops/ops'
+import { getDcwLineRepo } from '../../../services/workshop/dcw/dcw-line.repo'
+import { AppError, ErrorCodes } from '../../../utils/errors'
 
 export default defineApiHandler(async (event) => {
-  const user = requireRole(event, ['admin', 'editor'])
+  const user = requireRole(event)
   bindDaqHost(broadcastSceneEvent)
   const body = await readBody<DaqCreateInput>(event) ?? {}
+  if (body.lineId && !getDcwLineRepo().byId(body.lineId)) {
+    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, `产线不存在: ${body.lineId}`)
+  }
   const node = getDaqController().create(body)
   recordOps({
     actor: user.id,

package/server/api/workshop/daq/test-driver.post.ts

@@ -7,10 +7,10 @@
 import { readBody } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
-import { bindDaqHost } from '@/server/services/workshop/daq/host-bindings'
+import { bindDaqHost } from '@/server/services/workshop/daq/host-bindings'
 import { getDaqController } from '@/server/services/workshop/daq/daq-controller'
 import { broadcastSceneEvent } from '../../../services/workshop/scene-events'
-import { normalizeDriverKind } from '@/server/services/workshop/daq/drivers'
+import { requireDriverKind } from '@/server/services/workshop/daq/drivers'
 import type { DaqDriverKind } from '#shared/daq-protocol'
 
 export default defineApiHandler(async (event) => {
@@ -18,6 +18,6 @@ export default defineApiHandler(async (event) => {
   bindDaqHost(broadcastSceneEvent)
   const body = await readBody<{ driver?: DaqDriverKind, driverConfig?: Record<string, string | number | boolean> }>(event) ?? {}
   if (!body.driver) return { ok: false, message: '缺少 driver' }
-  const result = await getDaqController().testDriver(normalizeDriverKind(body.driver), body.driverConfig ?? {})
+  const result = await getDaqController().testDriver(requireDriverKind(body.driver), body.driverConfig ?? {})
   return { test: result }
 })

package/server/api/workshop/dcw/index.post.ts

@@ -1,20 +1,26 @@
-/**
- * POST /api/workshop/dcw —— 创建写控制节点。
- */
-import { readBody } from 'h3'
-import type { DcwCreateInput } from '@/server/services/workshop/dcw/dcw-controller'
-import { resolveUser } from '@/server/api/workshop/caller'
-import { defineApiHandler } from '@/server/utils/response'
-import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
-import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
-import { audit } from '@/server/services/workshop/ops/ops'
-
-export default defineApiHandler(async (event) => {
-  const user = resolveUser(event)
-  bindDcwBroadcast(broadcastSceneEvent)
-  const body = await readBody<DcwCreateInput>(event) ?? {}
-  const node = getDcwController().create(body)
-  // R1:创建写控制节点(获得直写物理设备能力的入口)留痕
-  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'dcw.create', targetKind: 'dcw-node', targetId: node.id, detail: { name: node.name } })
-  return { node: node.toView() }
-})
+/**
+ * POST /api/workshop/dcw —— 创建写控制节点。
+ * 权限模型 v3:仅 admin(直写物理设备的入口);lineId 提供时校验产线存在。
+ */
+import { readBody } from 'h3'
+import type { DcwCreateInput } from '@/server/services/workshop/dcw/dcw-controller'
+import { requireRole } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+import { audit } from '@/server/services/workshop/ops/ops'
+import { getDcwLineRepo } from '@/server/services/workshop/dcw/dcw-line.repo'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  const user = requireRole(event)
+  bindDcwBroadcast(broadcastSceneEvent)
+  const body = await readBody<DcwCreateInput>(event) ?? {}
+  if (body.lineId && !getDcwLineRepo().byId(body.lineId)) {
+    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, `产线不存在: ${body.lineId}`)
+  }
+  const node = getDcwController().create(body)
+  // R1:创建写控制节点(获得直写物理设备能力的入口)留痕
+  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'dcw.create', targetKind: 'dcw-node', targetId: node.id, detail: { name: node.name } })
+  return { node: node.toView() }
+})

package/server/api/workshop/dcw/lines/[id].delete.ts

@@ -4,7 +4,7 @@
  * 否则仅解除挂载(lineId=''),历史数据保留。
  */
 import { getQuery, getRouterParam } from 'h3'
-import { resolveUser } from '@/server/api/workshop/caller'
+import { requireRole } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
@@ -12,7 +12,8 @@ import { getDcwLineRepo } from '@/server/services/workshop/dcw/dcw-line.repo'
 import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
-  const user = resolveUser(event)
+  // 权限模型 v3:删除产线(可级联清理)仅 admin
+  const user = requireRole(event)
   bindDcwBroadcast(broadcastSceneEvent)
   const id = getRouterParam(event, 'id')!
   const q = getQuery(event).purge

package/server/api/workshop/dcw/lines/[id].patch.ts

@@ -1,14 +1,16 @@
 /**
- * PATCH /api/workshop/dcw/lines/:id —— 编辑产线(名称/光晕色/描述)。
+ * PATCH /api/workshop/dcw/lines/:id —— 编辑产线(名称/光晕色/描述/控制模式总闸)。
+ * controlMode:manual→auto 摘人工审批闸门,须显式 confirm:true(服务端强制;MODE_CONFIRM_REQUIRED)。
  */
 import { getRouterParam, readBody } from 'h3'
-import { resolveUser } from '@/server/api/workshop/caller'
+import { requireRole } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import type { LineInput } from '#shared/dcw-protocol'
 
 export default defineApiHandler(async (event) => {
-  resolveUser(event)
+  // 权限模型 v3:产线元数据编辑仅 admin(operate 用户可启停/写控,但不能改线)
+  requireRole(event)
   const id = getRouterParam(event, 'id')!
   const body = await readBody<Partial<LineInput>>(event) ?? {}
   return { line: getDcwController().updateLine(id, body) }

package/server/api/workshop/dcw/lines/index.post.ts

@@ -11,7 +11,7 @@ import { recordOps } from '@/server/services/workshop/ops/ops'
 import type { LineInput } from '#shared/dcw-protocol'
 
 export default defineApiHandler(async (event) => {
-  const user = requireRole(event, ['admin', 'editor'])
+  const user = requireRole(event)
   bindDcwBroadcast(broadcastSceneEvent)
   const body = await readBody<LineInput>(event) ?? { name: '' }
   const line = getDcwController().createLine(body)

package/server/api/workshop/dcw/mes-artifacts/file.get.ts

@@ -0,0 +1,50 @@
+/**
+ * GET /api/workshop/dcw/mes-artifacts/file?node_id=&name= —— 读单个 MES 产物文件。
+ * 目录遍历防护:name 只取 basename,拼出的路径必须仍解析回该节点产物目录内;
+ * 图像/SVG 以 inline 呈现(UI 弹窗预览),其余文本按 text/plain 返回。
+ * 注意:二进制路由不走 defineApiHandler(JSON 信封会把 Buffer 序列化成
+ * {type:'Buffer',data:[…]} 文本),与 daq 帧内容路由同纪律。
+ */
+import { createError, defineEventHandler, getQuery, setResponseHeader } from 'h3'
+import { readFileSync, statSync } from 'node:fs'
+import { basename, join, resolve, sep } from 'node:path'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { mesArtifactsRoot } from '@/server/services/workshop/mes/mes-hook'
+
+const MIME_OF = (name: string): string => {
+  const n = name.toLowerCase()
+  if (n.endsWith('.png')) return 'image/png'
+  if (n.endsWith('.jpg') || n.endsWith('.jpeg')) return 'image/jpeg'
+  if (n.endsWith('.svg')) return 'image/svg+xml'
+  if (n.endsWith('.json')) return 'application/json'
+  if (n.endsWith('.csv')) return 'text/csv'
+  return 'text/plain; charset=utf-8'
+}
+
+export default defineEventHandler(async (event) => {
+  resolveUser(event)
+  const q = getQuery(event)
+  const nodeId = String(q.node_id ?? '').trim().slice(0, 64)
+  const name = basename(String(q.name ?? '').trim())
+  if (!nodeId || !name) {
+    throw createError({ statusCode: 400, statusMessage: 'node_id 与 name 必填' })
+  }
+  const root = resolve(join(mesArtifactsRoot(), nodeId))
+  const file = resolve(join(root, name))
+  if (file !== root && !file.startsWith(root + sep)) {
+    throw createError({ statusCode: 403, statusMessage: '路径越界:只允许读取该点位产物目录内的文件' })
+  }
+  let buf: Buffer
+  try {
+    const st = statSync(file)
+    if (!st.isFile()) throw new Error('not a file')
+    buf = readFileSync(file)
+  }
+  catch {
+    throw createError({ statusCode: 404, statusMessage: `产物不存在:${nodeId}/${name}` })
+  }
+  setResponseHeader(event, 'content-type', MIME_OF(name))
+  setResponseHeader(event, 'content-disposition', `inline; filename="${encodeURIComponent(name)}"`)
+  setResponseHeader(event, 'cache-control', 'no-store')
+  return buf
+})

package/server/api/workshop/dcw/mes-artifacts/index.get.ts

@@ -0,0 +1,27 @@
+/**
+ * GET /api/workshop/dcw/mes-artifacts?node_id=&limit= —— MES 点位产物清单。
+ * 返回 <数据根>/mes-artifacts/<node_id>/ 下产物(mtime 新→旧,≤limit 条):
+ * { artifacts: [{name, bytes, mime, mtime}] }(不含文件内容;内容走 /file)
+ */
+import { getQuery } from 'h3'
+import { statSync } from 'node:fs'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { listMesArtifacts } from '@/server/services/workshop/mes/mes-hook'
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const q = getQuery(event)
+  const nodeId = String(q.node_id ?? '').trim()
+  const limit = Math.max(1, Math.min(Number(q.limit) || 50, 200))
+  if (!nodeId) return { artifacts: [], message: '缺少 node_id' }
+  const artifacts = listMesArtifacts(nodeId, limit).map((a) => {
+    let mtime: string | null = null
+    try {
+      mtime = statSync(a.file).mtime.toISOString()
+    }
+    catch { /* 已被清理 */ }
+    return { name: a.name, bytes: a.bytes, mime: a.mime, mtime }
+  })
+  return { artifacts, count: artifacts.length }
+})

package/server/api/workshop/dcw/mes-hook-test.post.ts

@@ -0,0 +1,105 @@
+/**
+ * POST /api/workshop/dcw/mes-hook-test —— MES 数据钩子试运行(body: { driverConfig, param? })。
+ * 供驱动表单调试 historyMap 格式映射 + dataHook:
+ *   ① 用 historyMap 实拉最近 30min 的 ≤50 行样本(格式感知);
+ *   ② 已配 dataHook 则真实执行一次(产物落盘),回传 summary/context/产物清单。
+ * 另回 requestHook 的请求构造覆盖(已配时),不触达网络。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { historyFormatOf } from '@/server/services/workshop/dcw/drivers/mes-rest'
+import { resolveDcwDriver } from '@/server/services/workshop/dcw/drivers'
+import { mesDataHookCode, mesRequestHookCode, runMesDataHook, runMesRequestHook } from '@/server/services/workshop/mes/mes-hook'
+
+/** 试运行行数上限(护栏:试运行绝不大批量拉数;窗口由 window_minutes 参数控制,缺省 30 分钟) */
+const TEST_MAX_ROWS = 50
+
+export default defineApiHandler(async (event) => {
+  resolveUser(event)
+  const body = await readBody<{
+    driverConfig?: Record<string, unknown>
+    param?: unknown
+    /** 试运行用的节点 id(产物目录隔离;缺省 test-node) */
+    node_id?: string
+    /** 试拉窗口分钟(缺省 30,上限 1440;批次/事件类建议 ≥2h) */
+    window_minutes?: number
+  }>(event) ?? {}
+  const windowMs = Math.max(1, Math.min(Number(body.window_minutes) || 30, 1440)) * 60_000
+  const cfg = body.driverConfig ?? {}
+  const nodeId = String(body.node_id ?? 'test-node').slice(0, 64)
+
+  // ① 格式解析(坏 historyMap 在此报配置错)
+  const format = historyFormatOf(cfg)
+  if (!cfg.historyMap) {
+    throw new AppError(400, 'BAD_REQUEST', '未配置 historyMap(历史映射);钩子试运行以历史取数为前提')
+  }
+
+  // ② requestHook 请求构造覆盖(不触网,纯校验执行)
+  let requestOverrides: Record<string, unknown> | null = null
+  const reqCode = mesRequestHookCode(cfg)
+  if (reqCode) {
+    const o = await runMesRequestHook(reqCode, body.param, { nodeId })
+    requestOverrides = { ...o }
+  }
+
+  // ③ 小窗口实拉样本
+  const to = new Date()
+  const from = new Date(to.getTime() - windowMs)
+  const driver = resolveDcwDriver('mes-rest')
+  if (typeof driver.fetchHistory !== 'function') throw new AppError(500, 'INTERNAL_ERROR', 'mes-rest 驱动未提供历史原语')
+  const rows: Array<Record<string, unknown>> = []
+  const hookRows: Array<Record<string, unknown>> = []
+  await driver.fetchHistory({
+    driverConfig: cfg,
+    fromIso: from.toISOString(),
+    toIso: to.toISOString(),
+    maxRows: TEST_MAX_ROWS,
+    onRows: (batch) => {
+      for (const r of batch ?? []) {
+        hookRows.push(r as unknown as Record<string, unknown>)
+        rows.push({
+          ts: r.ts,
+          ...(r.value !== undefined ? { value: r.value } : {}),
+          ...(r.values !== undefined ? { values: r.values } : {}),
+          ...(r.data !== undefined ? { data: `${String(r.data).slice(0, 48)}…(${String(r.data).length}b64字符)` } : {}),
+          ...(r.mime !== undefined ? { mime: r.mime } : {}),
+          ...(r.record !== undefined ? { record: r.record } : {}),
+        })
+        if (rows.length >= TEST_MAX_ROWS) break
+      }
+    },
+  })
+
+  // ④ dataHook 真实执行(产物落盘;无钩子则跳过)。行数据给完整原文(hook 是数据的主人)
+  let hook: Record<string, unknown> | null = null
+  const hookCode = mesDataHookCode(cfg)
+  if (hookCode) {
+    const outcome = await runMesDataHook(hookCode, body.param, {
+      node: { id: nodeId, name: String(cfg.desc ?? nodeId), lineId: '', unit: '' },
+      format,
+      rows: hookRows,
+      window: { from: from.toISOString(), to: to.toISOString() },
+    }, { nodeId })
+    hook = {
+      ok: outcome.ok,
+      summary: outcome.summary ?? null,
+      context: outcome.context ?? null,
+      stats: outcome.stats ?? null,
+      logs: outcome.logs,
+      error: outcome.error ?? null,
+      artifacts: outcome.artifacts.map(a => ({ name: a.name, bytes: a.bytes, mime: a.mime })),
+    }
+  }
+
+  return {
+    ok: true,
+    format,
+    rows: rows.length,
+    sample: rows.slice(0, 3),
+    requestOverrides,
+    hook,
+    message: `试拉 ${rows.length} 行(格式 ${format},窗口最近 ${Math.round(windowMs / 60000)} 分钟)${hook ? ';dataHook 已真实执行,产物落盘' : ''}`,
+  }
+})

package/server/api/workshop/dcw/products/index.post.ts

@@ -3,14 +3,18 @@
  */
 import { readBody } from 'h3'
 import type { ProductInput } from '#shared/dcw-protocol'
-import { requireRole } from '@/server/api/workshop/caller'
+import { requireRole, resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
+import { requireLineMode } from '@/server/services/workshop/permissions'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
 
 export default defineApiHandler(async (event) => {
-  requireRole(event, ['admin', 'editor'])
+  // 权限模型 v3:挂到产线的产品 → 对该线要求 operate;未挂线的全局产品 → 仅 admin
+  const user = resolveUser(event)
   bindDcwBroadcast(broadcastSceneEvent)
   const body = await readBody<ProductInput>(event) ?? { name: '' }
+  if (body.lineId) requireLineMode(user, body.lineId, 'operate')
+  else requireRole(event)
   return { product: getDcwController().createProduct(body) }
 })

package/server/api/workshop/dcw/recipes/[id]/apply.post.ts

@@ -4,7 +4,8 @@
  * 另一 admin 批准后申请人携 approvalId 重放放行)。
  */
 import { getRouterParam, readBody, setResponseStatus } from 'h3'
-import { requireRole } from '@/server/api/workshop/caller'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
 import { defineApiHandler } from '@/server/utils/response'
 import { gateDangerous } from '@/server/utils/approval-gate'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
@@ -12,9 +13,12 @@ import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
 import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
-  const user = requireRole(event)
+  const user = resolveUser(event)
   bindDcwBroadcast(broadcastSceneEvent)
   const id = getRouterParam(event, 'id') ?? ''
+  // 权限模型 v3:线域操作切 grant 制 —— 对该配方产线要求 operate(admin 天然放行)
+  const recipe = getDcwController().listRecipes().find(r => r.id === id)
+  requireLineMode(user, recipe?.lineId, 'operate')
   const body = await readBody<{ approvalId?: string }>(event) ?? {}
   const gate = gateDangerous(useRuntimeConfig(event).approvalGate === true, user, { action: 'recipe.apply', targetId: id, summary: `一键下发配方 ${id}` }, body.approvalId)
   if (gate.pending) {

package/server/api/workshop/dcw/recipes/[id]/mark-good.post.ts

@@ -3,15 +3,19 @@
  * body: { runId: string }
  */
 import { getRouterParam, readBody } from 'h3'
-import { requireRole } from '@/server/api/workshop/caller'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
 import { defineApiHandler } from '@/server/utils/response'
 import { AppError, ErrorCodes } from '@/server/utils/errors'
 import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
 import { audit } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
-  const user = requireRole(event)
+  const user = resolveUser(event)
   const id = getRouterParam(event, 'id') ?? ''
+  // 权限模型 v3:线域操作切 grant 制 —— 对该配方产线要求 operate(admin 天然放行)
+  const recipe = getDcwRecipeRepo().byId(id)
+  requireLineMode(user, recipe?.lineId, 'operate')
   const body = await readBody<{ runId?: string }>(event) ?? {}
   if (!body.runId)
     throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'runId 必填')

package/server/api/workshop/dcw/recipes/[id]/revert.post.ts

@@ -1,29 +1,33 @@
-/**
- * POST /api/workshop/dcw/recipes/:id/revert —— 回退配方参数到指定历史版本/已知良好批次。
- * 生成新版本(非破坏;历史完整保留)。body: { version?: number, toLastGood?: boolean, reason: string }。
- */
-import { getRouterParam, readBody } from 'h3'
-import { requireRole } from '@/server/api/workshop/caller'
-import { defineApiHandler } from '@/server/utils/response'
-import { getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
-import { AppError, ErrorCodes } from '@/server/utils/errors'
-
-export default defineApiHandler(async (event) => {
-  // 与 apply/rollback-good 同一角色门:配方回退是产线写操作,admin/editor 专属
-  const user = requireRole(event)
-  const id = getRouterParam(event, 'id') ?? ''
-  const body = await readBody<{ version?: number, toLastGood?: boolean, reason?: string }> (event) ?? {}
-  if (!body.toLastGood && body.version == null) {
-    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, '需提供 version(历史版本号)或 toLastGood=true')
-  }
-  const recipe = getDcwController().revertRecipe(id, {
-    version: body.version,
-    toLastGood: body.toLastGood === true,
-  }, {
-    by: 'user',
-    actorName: user.name,
-    actor: user.id,
-    description: body.reason?.trim() || '界面回退',
-  })
-  return { recipe }
-})
+/**
+ * POST /api/workshop/dcw/recipes/:id/revert —— 回退配方参数到指定历史版本/已知良好批次。
+ * 生成新版本(非破坏;历史完整保留)。body: { version?: number, toLastGood?: boolean, reason: string }。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  // 与 apply/rollback-good 同一角色门:配方回退是产线写操作,admin/editor 专属
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  // 权限模型 v3:线域操作切 grant 制 —— 对该配方产线要求 operate(admin 天然放行)
+  const recipeForGrant = getDcwController().listRecipes().find(r => r.id === id)
+  requireLineMode(user, recipeForGrant?.lineId, 'operate')
+  const body = await readBody<{ version?: number, toLastGood?: boolean, reason?: string }> (event) ?? {}
+  if (!body.toLastGood && body.version == null) {
+    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, '需提供 version(历史版本号)或 toLastGood=true')
+  }
+  const recipe = getDcwController().revertRecipe(id, {
+    version: body.version,
+    toLastGood: body.toLastGood === true,
+  }, {
+    by: 'user',
+    actorName: user.name,
+    actor: user.id,
+    description: body.reason?.trim() || '界面回退',
+  })
+  return { recipe }
+})

package/server/api/workshop/dcw/recipes/[id]/rollback-good.post.ts

@@ -2,17 +2,21 @@
  * POST /api/workshop/dcw/recipes/:id/rollback-good —— 基准恢复:重新下发 lastGood 批次冻结参数集。
  */
 import { getRouterParam } from 'h3'
-import { requireRole } from '@/server/api/workshop/caller'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
 import { defineApiHandler } from '@/server/utils/response'
-import { bindDcwBroadcast } from '@/server/services/workshop/dcw/dcw-controller'
+import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
 import { getRecipeRollBackManager } from '@/server/services/workshop/dcw/recipe-rollback-manager'
 import { audit } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
-  const user = requireRole(event)
+  const user = resolveUser(event)
   bindDcwBroadcast(broadcastSceneEvent)
   const id = getRouterParam(event, 'id') ?? ''
+  // 权限模型 v3:线域操作切 grant 制 —— 对该配方产线要求 operate(admin 天然放行)
+  const recipe = getDcwController().listRecipes().find(r => r.id === id)
+  requireLineMode(user, recipe?.lineId, 'operate')
   const outcomes = await getRecipeRollBackManager().rollbackRecipeGood(id, user.id)
   audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'recipe.rollback-good', targetKind: 'recipe', targetId: id, detail: { outcomes } })
   return { outcomes }

package/server/api/workshop/dcw/recipes/index.post.ts

@@ -1,15 +1,27 @@
-/**
- * POST /api/workshop/dcw/recipes —— 创建配方(body: { name, description?, params? })。
- */
-import { readBody } from 'h3'
-import type { RecipeInput } from '#shared/dcw-protocol'
-import { resolveUser } from '@/server/api/workshop/caller'
-import { defineApiHandler } from '@/server/utils/response'
-import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
-
-export default defineApiHandler(async (event) => {
-  resolveUser(event)
-  const body = await readBody<RecipeInput>(event) ?? { name: '' }
-  const recipe = getDcwRecipeRepo().create(body)
-  return { recipe }
-})
+/**
+ * POST /api/workshop/dcw/recipes —— 创建配方(body: { name, description?, params? })。
+ * 权限模型 v3:配方归属产线(经 product.lineId),要求对该线 operate;无 productId 的孤儿配方仅 admin。
+ */
+import { readBody } from 'h3'
+import type { RecipeInput } from '#shared/dcw-protocol'
+import { requireRole, resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
+import { getDcwProductRepo } from '@/server/services/workshop/dcw/dcw-product.repo'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<RecipeInput>(event) ?? { name: '' }
+  if (body.productId) {
+    const product = getDcwProductRepo().byId(body.productId)
+    if (!product) throw new AppError(404, ErrorCodes.NOT_FOUND, `产品不存在: ${body.productId}`)
+    requireLineMode(user, product.lineId, 'operate')
+  }
+  else {
+    requireRole(event)
+  }
+  const recipe = getDcwRecipeRepo().create(body)
+  return { recipe }
+})

package/server/api/workshop/exp/confirmations/[id]/decide.post.ts

@@ -0,0 +1,41 @@
+/**
+ * POST /api/workshop/exp/confirmations/:id/decide —— 推断动作裁决(产线 Co-Pilot 确认队列)。
+ * body: { ok: boolean } —— true=确认转正(推断转 episode status=pending 进入学习总结),
+ * false=忽略(留档不总结)。鉴权 mirror dcw 写路由(server/api/workshop/dcw/[id]/write.post.ts):
+ * resolveUser + requireLineMode(operate) —— 产线可写者方可确认(计划 §5.1)。
+ * 404=卡片不存在;400=body 非法;409=已裁决;403=无产线操控权。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+import { audit } from '@/server/services/workshop/ops/ops'
+import { getExpStateRepo } from '@/server/services/workshop/exp/exp-state.repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const body = await readBody<{ ok?: boolean }>(event) ?? {}
+  if (typeof body.ok !== 'boolean') {
+    throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'body.ok 必填且为 boolean:true=确认转正,false=忽略')
+  }
+  const repo = getExpStateRepo()
+  const card = repo.listConfirmations().find(c => c.id === id)
+  if (!card) throw new AppError(404, ErrorCodes.NOT_FOUND, `确认卡不存在: ${id}`)
+  // 产线可写者可确认(与 dcw 写控同一 requireLineMode 口径;readonly/none → 403)
+  requireLineMode(user, card.lineId, 'operate')
+  if (card.status !== 'pending') {
+    throw new AppError(409, 'ALREADY_DECIDED', `该确认卡已裁决(${card.status} by ${card.decidedBy || '—'})`)
+  }
+  const decided = repo.decideConfirmation(id, body.ok, user.id)
+  // R1 留痕:确认队列裁决是人工校验闭环的证据面(HITL 通过率用于经验置信降权)
+  audit({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: body.ok ? 'exp.confirmation.confirm' : 'exp.confirmation.ignore',
+    targetKind: 'exp-confirmation', targetId: id, lineId: card.lineId,
+    summary: `推断动作裁决「${card.nodeName}」${card.from ?? '?'}→${card.to}:${body.ok ? '确认转正(进入经验总结)' : '忽略'}`,
+    detail: { evidence: card.evidence, decidedBy: user.id, nodeId: card.nodeId },
+  })
+  return { confirmation: decided?.confirmation, episode: decided?.episode }
+})

package/server/api/workshop/exp/confirmations/index.get.ts

@@ -0,0 +1,25 @@
+/**
+ * GET /api/workshop/exp/confirmations?lineId=&status= —— 推断动作待确认队列(产线 Co-Pilot)。
+ * 登录用户;普通用户仅见授权产线(admin/editor 全量,与 dcw 列表可见性同口径)。
+ * status 缺省 pending(confirmed/ignored 留档可查,传 all 返回全部)。
+ */
+import { getQuery } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { visibleLineIds } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { getExpStateRepo } from '@/server/services/workshop/exp/exp-state.repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const lineId = String(q.lineId ?? '').trim() || undefined
+  const statusQ = String(q.status ?? 'pending').trim().toLowerCase()
+  const status = statusQ === 'all' || statusQ === ''
+    ? undefined
+    : (statusQ as 'pending' | 'confirmed' | 'ignored')
+  const rows = getExpStateRepo().listConfirmations({ lineId, status })
+  // 产线可见性:普通用户仅授权产线(readonly 即可看 —— 确认动作另有 operate 闸)
+  const visible = visibleLineIds(user)
+  const filtered = visible ? rows.filter(c => visible.has(c.lineId)) : rows
+  return { confirmations: filtered }
+})