agentworkshop 0.7.59 → 0.7.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentworkshop",
-  "version": "0.7.59",
+  "version": "0.7.61",
   "type": "module",
   "description": "AgentWorkShop 软件开发系统 - 基于 Nuxt 4 的配置驱动运行范式",
   "license": "Apache-2.0",
@@ -136,7 +136,7 @@
     "minio": "^8.0.7",
     "modbus-serial": "^8.0.25",
     "mqtt": "^5.15.2",
-    "node-opcua": "^2.178.0",
+    "node-opcua": "2.178.0",
     "nuxt": "^4.0.0",
     "nuxt-auth-utils": "^0.5.0",
     "pg": "^8.23.0",

package/scripts/onboarding/onboard.mjs

@@ -35,6 +35,7 @@ if (!configPath) {
 const cfg = JSON.parse(readFileSync(configPath, 'utf8'))
 
 let pass = 0, fail = 0
+let smokeRunId = null
 const ok = (name, cond, detail = '') => {
   console.log(`${cond ? '✅' : '❌'} ${name}${detail ? ` — ${String(detail).slice(0, 150)}` : ''}`)
   cond ? pass++ : fail++
@@ -178,8 +179,8 @@ if (smoke) {
       }
     }
   }
-  const runId = /runId[:：]\s*(rr-[\w-]+)/.exec(propTxt)?.[1] ?? ''
-  ok('冒烟闭环步(自动 HITL):批准→下发→设备证实', okDispatch, `${propTxt.split('\n')[0]?.slice(0, 90)} runId=${runId}`)
+  smokeRunId = /runId[:：]\s*(rr-[\w-]+)/.exec(propTxt)?.[1] ?? null
+  ok('冒烟闭环步(自动 HITL):批准→下发→设备证实', okDispatch, `${propTxt.split('\n')[0]?.slice(0, 90)} runId=${smokeRunId}`)
 }
 
 // ---------- 交接声明 ----------
@@ -192,5 +193,7 @@ console.log(`
   ③ 由人裁决首批真实提案后,方可视为正式投用。
 (对产线负责:任何不确定 —— 量程/步限/SP-PV 判定/认证方式/场景目标 —— skill 必须先询问用户,禁止猜测。)
 =====================================================`)
+// 机器可读摘要(末行 JSON;与 provision-line/forge-channel 摘要惯例对齐,供管道解析)
+console.log(JSON.stringify({ summary: true, lineId: prov.lineId, recipeId: prov.recipeId, channelId: chSummary.channelId, smokeRunId, pass, fail }))
 console.log(`\n======== 一键接入: ${pass} 通过 / ${fail} 失败 ========`)
 process.exit(fail === 0 ? 0 : 1)

package/scripts/onboarding/sim-twin.mjs

@@ -0,0 +1,312 @@
+#!/usr/bin/env node
+/**
+ * scripts/onboarding/sim-twin.mjs —— PLC 模拟器孪生生成器(aw-plc-sim-twin skill 的执行体)。
+ *
+ * 两种模式:
+ *   A. 从平台既有节点反向构造孪生(最常用:虚拟预演/割接前演练):
+ *      node scripts/onboarding/sim-twin.mjs --from-platform --line <lineId> [--sim-port 4034] \
+ *        [--dynamics <dynamics.json>] [--shadow <dir>] [--keep-if-up]
+ *      拉取该线全部 DCW(SV)+ DAQ(PV),按协议族归并成孪生设备写入模拟器:
+ *      SV→manual(可写),PV→hook 一阶滞后跟随同名 SP(无 SP 则有界随机游走);
+ *      --dynamics 可对指定 PV 覆盖因果(base/follows[{sp,gain}]/tau/noise)。
+ *   B. 从文档蓝图直接构造(文档协议/API 输入输出已提炼成蓝图 JSON):
+ *      node scripts/onboarding/sim-twin.mjs --blueprint <blueprint.json> [--sim-port 4034]
+ *
+ * 蓝图 JSON 形状(模式 B;devices[] 同模式 A 的内部设备模型):
+ * { "simPort": 4034, "shadowDir": "..", "mqttPort": 41830?,
+ *   "devices": [ { "id":"wb-machine", "name":"键合主机", "protocol":"modbus-tcp"|"modbus-rtu"|"mqtt",
+ *                  "port": 37532?, "unitId": 1?,
+ *                  "signals": [ { "id":"usPower-sp","name":"超声功率SP","unit":"%","min":20,"max":100,
+ *                                 "decimals":0,"kind":"sp","initial":60 },
+ *                               { "id":"pullForce-pv","name":"拉力强度","unit":"gf","min":0,"max":120,
+ *                                 "decimals":2,"kind":"pv",
+ *                                 "dynamics":{ "base":18,"tau":8,"noise":1.1,
+ *                                              "follows":[{"sp":"超声功率SP","gain":0.55}] } } ] } ] }
+ *
+ * 输出(末行 JSON):{simBase, shadowDir, devices:[{id,protocol,port,signals}],
+ *   driverSource:"sim-export", next:"对每设备 GET /api/nodes/:id/export 取 driverConfig 喂给 provision-line/onboard"}
+ *
+ * 纪律:本脚本只写模拟器(影子树),绝不写平台;平台侧接入走 onboard.mjs/provision-line.mjs。
+ * 孪生协议归一:mes-rest/http/opcua 族节点映射到 modbus-tcp 孪生设备(语义/量程保留;
+ *   协议真实性由 onboard 期的 export driverConfig 保证——模拟器 export 什么,平台就接什么)。
+ */
+import { spawnSync } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..')
+const args = process.argv.slice(2)
+const argOf = (k, d = '') => {
+  const i = args.indexOf(k)
+  return i >= 0 && args[i + 1] && !args[i + 1].startsWith('--') ? args[i + 1] : d
+}
+const SIM_PORT = Number(argOf('--sim-port', '4034'))
+const SIM = `http://127.0.0.1:${SIM_PORT}`
+const SIM_DIR = resolve(argOf('--shadow', join(REPO, '..', `plc-node-simulator-twin-${SIM_PORT}`)))
+const AW_BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3001'
+process.env.NO_PROXY = '127.0.0.1,localhost'
+process.env.HTTP_PROXY = ''
+process.env.HTTPS_PROXY = ''
+
+let pass = 0
+const fails = []
+const ok = (name, cond, detail = '') => {
+  if (cond) {
+    pass++
+    console.log(`  ✔ ${name}`)
+  }
+  else {
+    fails.push(name)
+    console.log(`  ✖ ${name}${detail ? ` — ${String(detail).slice(0, 200)}` : ''}`)
+  }
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+/* ── 平台 REST ── */
+let TOKEN = process.env.AW_TOKEN ?? ''
+async function platformLogin() {
+  if (TOKEN) return
+  const email = process.env.AW_EMAIL
+  const passW = process.env.AW_PASS
+  if (!email || !passW) throw new Error('未鉴权:设 AW_TOKEN 或 AW_EMAIL/AW_PASS')
+  const r = await fetch(`${AW_BASE}/api/users/login`, {
+    method: 'POST', headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ email, password: passW }), signal: AbortSignal.timeout(20000),
+  })
+  const j = await r.json()
+  TOKEN = j?.data?.token ?? ''
+  if (!TOKEN) throw new Error(`登录失败:${j?.message ?? r.status}`)
+}
+const platform = async (method, path) => {
+  await platformLogin()
+  const r = await fetch(AW_BASE + path, {
+    method, headers: { 'content-type': 'application/json', 'authorization': `Bearer ${TOKEN}` }, signal: AbortSignal.timeout(60000),
+  })
+  return { status: r.status, ...(await r.json().catch(() => ({}))) }
+}
+
+/* ── 模拟器 REST(带就绪/HTML 容错) ── */
+const simApi = async (method, path, body, tries = 5) => {
+  for (let i = 0; i < tries; i++) {
+    try {
+      const r = await fetch(SIM + path, {
+        method, headers: { 'content-type': 'application/json' },
+        body: body === undefined ? undefined : JSON.stringify(body), signal: AbortSignal.timeout(30000),
+      })
+      if (!String(r.headers.get('content-type') ?? '').includes('json')) {
+        await sleep(3000)
+        continue
+      }
+      return await r.json()
+    }
+    catch (e) {
+      if (i === tries - 1) return { code: -1, message: e.message }
+      await sleep(3000)
+    }
+  }
+  return { code: -1, message: 'sim 未就绪' }
+}
+
+/* ── 模拟器保活(影子树复用 bench/lib/sim.mjs 的 spawn 纪律) ── */
+async function ensureSim() {
+  const psi = spawnSync('powershell', ['-NoProfile', '-Command',
+    `Get-NetTCPConnection -LocalPort ${SIM_PORT} -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1 -ExpandProperty OwningProcess`], { encoding: 'utf8' })
+  const pid = Number(psi.stdout.trim())
+  if (Number.isInteger(pid) && pid > 0 && !args.includes('--restart')) return
+  if (Number.isInteger(pid) && pid > 0) spawnSync('taskkill', ['/PID', String(pid), '/T', '/F'], { stdio: 'ignore' })
+  await sleep(1500)
+  process.env.SIM_BASE = SIM
+  process.env.SIM_SHADOW_DIR = SIM_DIR
+  const { ensureSimulator } = await import('../../bench/lib/sim.mjs')
+  await ensureSimulator({ log: () => {} })
+  let ready = false
+  for (let i = 0; i < 30 && !ready; i++) {
+    const probe = await simApi('GET', '/api/nodes', undefined, 2)
+    if (probe?.code === 0) ready = true
+    else await sleep(2000)
+  }
+  if (!ready) throw new Error('模拟器路由未就绪(端口已开但 API 非 JSON)')
+}
+
+/* ── 信号动力学(hook 代码生成;首拍 state.v=undefined → 两项都必须取 fallback,否则 NaN 永久毒化) ── */
+const lagHook = (spName, tau, noise, fallback) =>
+  `const cur = Number.isFinite(state.v)?state.v:${fallback};`
+  + `const tgt = Number.isFinite(vars['${spName}']) ? vars['${spName}'] : ${fallback};`
+  + `const k = Math.min(1, dt/1000/${tau}); state.v = cur + (tgt-cur)*k + (rand()-0.5)*${noise}; return state.v`
+const causalHook = (d, fallback, nominals = {}) => {
+  // 偏差语义:base=标称点输出,每项增益作用于 (SP 当前值 − SP 标称值) —— 与文档「工艺耦合」公式同构
+  const terms = (d.follows ?? []).map((f) => {
+    const nom = Number.isFinite(f.at) ? f.at : (nominals[f.sp] ?? 0)
+    return `${f.gain}*((Number.isFinite(vars['${f.sp}'])?vars['${f.sp}']:0) - ${nom})`
+  })
+  const base = d.base ?? fallback
+  return `const tgt = ${base}${terms.length ? ' + ' + terms.join(' + ') : ''};`
+    + `const cur = Number.isFinite(state.v)?state.v:${fallback};`
+    + `const k = Math.min(1, dt/1000/${d.tau ?? 8}); state.v = cur + (tgt-cur)*k + (rand()-0.5)*${d.noise ?? 1}; return state.v`
+}
+const wanderHook = (mid, span) =>
+  `state.v = (Number.isFinite(state.v)?state.v:${mid}) + (rand()-0.5)*${span}; `
+  + `if (state.v > ${mid + span * 4}) state.v = ${mid + span * 4}; if (state.v < ${mid - span * 4}) state.v = ${mid - span * 4}; return state.v`
+
+const norm = n => String(n).replace(/(PV|实测|实际|回读|-回读|值)$/g, '').trim()
+
+/* ── 模式 A:平台节点 → 孪生设备 ── */
+async function fromPlatform(lineId, dynamicsFile) {
+  const dyn = dynamicsFile && existsSync(dynamicsFile) ? JSON.parse(readFileSync(dynamicsFile, 'utf8')) : {}
+  const dcw = (await platform('GET', '/api/workshop/dcw?limit=200'))?.data?.nodes?.filter(n => n.lineId === lineId) ?? []
+  const daq = (await platform('GET', '/api/workshop/daq?limit=300'))?.data?.nodes?.filter(n => n.lineId === lineId) ?? []
+  if (!dcw.length && !daq.length) throw new Error(`线 ${lineId} 无节点(dcw=${dcw.length} daq=${daq.length})`)
+  // 协议族归并(mes-rest/http/opcua → modbus-tcp 孪生;语义/量程保留)
+  const fam = n => (['modbus-tcp', 'modbus-rtu', 'mqtt'].includes(n.driver) ? n.driver : 'modbus-tcp')
+  const families = {}
+  for (const n of [...dcw, ...daq]) (families[fam(n)] ??= []).push(n)
+  const devices = []
+  for (const [family, nodes] of Object.entries(families)) {
+    const spNodes = nodes.filter(n => n.templateRef?.startsWith('dcw') || dcw.some(d => d.id === n.id))
+    const spNames = spNodes.map(n => norm(n.name))
+    const nominals = Object.fromEntries(spNodes.map(n => [norm(n.name), Number(n.value ?? ((Number(n.min ?? 0) + Number(n.max ?? 100)) / 2).toFixed(3))]))
+    const signals = []
+    for (const n of nodes) {
+      const isSp = dcw.some(d => d.id === n.id)
+      const min = Number(n.min ?? 0), max = Number(n.max ?? 100)
+      const mid = Number(((min + max) / 2).toFixed(3))
+      if (isSp) {
+        signals.push({ id: n.id, name: n.name, unit: n.unit ?? '', min, max, decimals: n.decimals ?? 2, kind: 'sp', initial: Number(n.value ?? mid) })
+      }
+      else {
+        const d = dyn[n.name] ?? {}
+        // 同设备同名 SP 归属:strip 后缀匹配
+        const spHit = spNames.find(sp => sp === norm(n.name))
+        let code
+        if (d.follows?.length || d.base != null) code = causalHook(d, mid, nominals)
+        else if (spHit) code = lagHook(spHit, d.tau ?? 10, d.noise ?? 0.8, mid)
+        else code = wanderHook(mid, Math.max((max - min) / 200, 0.2))
+        signals.push({ id: n.id, name: n.name, unit: n.unit ?? '', min, max, decimals: n.decimals ?? 3, kind: 'pv', code, dynamics: { tau: d.tau ?? 10, noise: d.noise ?? 0.8, sp: spHit ?? null } })
+      }
+    }
+    devices.push({ family, nodes, signals })
+  }
+  return { devices }
+}
+
+/* ── 蓝图 → 设备(模式 B 归一到同一内部模型) ── */
+function fromBlueprint(file) {
+  const bp = JSON.parse(readFileSync(file, 'utf8'))
+  const devices = (bp.devices ?? []).map(d => ({
+    id: d.id,
+    family: d.protocol ?? 'modbus-tcp',
+    port: d.port,
+    unitId: d.unitId ?? 1,
+    mqtt: d.mqtt,
+    signals: (d.signals ?? []).map(s => ({
+      id: s.id, name: s.name, unit: s.unit ?? '', min: Number(s.min ?? 0), max: Number(s.max ?? 100),
+      decimals: s.decimals ?? 2, kind: s.kind ?? (String(s.id).endsWith('-sp') ? 'sp' : 'pv'),
+      initial: s.initial, code: s.code, dynamics: s.dynamics ?? {},
+    })),
+  }))
+  return { devices, mqttPort: bp.mqttPort }
+}
+
+/* ── 设备写入模拟器 ── */
+let port = 37540
+async function materialize(devices, mqttPort) {
+  const created = []
+  for (const dev of devices) {
+    const id = dev.id ?? `twin-${dev.family}-${created.length + 1}`
+    const protocol = dev.family
+    const config = {}
+    if (protocol === 'modbus-tcp' || protocol === 'modbus-rtu') {
+      config.host = '0.0.0.0'
+      config.port = dev.port ?? (port += 2)
+      config.unitId = dev.unitId ?? 1
+      config.registerMaps = dev.signals.map((s, i) => ({ address: 40001 + i * 2, area: 'holding', signalId: s.id, dataType: 'float32', byteOrder: 'big' }))
+    }
+    else if (protocol === 'mqtt') {
+      config.brokerUrl = `mqtt://127.0.0.1:${mqttPort}`
+      config.topics = dev.signals.filter(s => s.kind === 'pv').map(s => ({ topic: `aw/twin/${id}/${s.id}`, signalId: s.id, payloadTemplate: `{"data":{"${s.id}":\${value}}}`, qos: 0 }))
+      const sp = dev.signals.find(s => s.kind === 'sp')
+      if (sp) {
+        config.commandTopic = `aw/twin/${id}/set`
+        config.commandSignalId = sp.id
+      }
+    }
+    const nominals = Object.fromEntries(dev.signals.filter(s => s.kind === 'sp').map(s => [s.name, Number(s.initial ?? (s.min + s.max) / 2)]))
+    const signals = dev.signals.map(s => ({
+      id: s.id, name: s.name, description: `孪生:${s.name}`, unit: s.unit, min: s.min, max: s.max, decimals: s.decimals,
+      strategy: s.kind === 'sp'
+        ? { kind: 'manual', value: s.initial ?? (s.min + s.max) / 2 }
+        : { kind: 'hook', code: s.code
+          ?? (s.dynamics && (s.dynamics.follows?.length || s.dynamics.base != null)
+            ? causalHook(s.dynamics, (s.min + s.max) / 2, nominals)
+            : wanderHook((s.min + s.max) / 2, Math.max((s.max - s.min) / 200, 0.2))) },
+    }))
+    const r = await simApi('POST', '/api/nodes', { id, name: `${id}(孪生)`, description: `aw-plc-sim-twin 生成:${dev.signals.length} 信号`, protocol, enabled: true, tickMs: 1000, signals, config })
+    ok(`设备 ${id}(${protocol},${signals.length} 信号)`, r?.code === 0, r?.message ?? '')
+    created.push({ id, protocol, port: config.port ?? null, signals: signals.length, sourceNodes: dev.nodes?.map(n => n.id) ?? null })
+  }
+  return created
+}
+
+/* ── 孪生活性自检(PV 应随时间波动;只查本轮创建的设备) ── */
+async function livenessCheck(createdIds) {
+  await sleep(8000)
+  const a = await simApi('GET', '/api/nodes')
+  const devs = (a?.data ?? []).filter(n => createdIds.includes(n.id))
+  const snap = devs.map(n => ({ id: n.id, v: (n.signals ?? []).map(s => s.value) }))
+  await sleep(6000)
+  const b = await simApi('GET', '/api/nodes')
+  const devs2 = (b?.data ?? []).filter(n => createdIds.includes(n.id))
+  let moved = 0
+  const dead = []
+  for (const d2 of devs2) {
+    const before = snap.find(x => x.id === d2.id)
+    const pv = (d2.signals ?? []).filter(s => s.strategy?.kind === 'hook' || s.strategy?.kind === 'expression')
+    const changed = pv.some((s, i) => Number(s.value) !== Number(before?.v?.[before.v.length - pv.length + i]))
+    if (changed) moved++
+    else dead.push(d2.id)
+  }
+  ok(`孪生 tick 活性(${moved}/${devs2.length} 设备 PV 在动)`, moved === devs2.length && devs2.length > 0, dead.length ? `冻结:${dead.join(',')} — 处方:整树重启模拟器(POST 不可修)` : '')
+  return { devices: devs2.length, signals: devs2.reduce((a, n) => a + (n.signals ?? []).length, 0) }
+}
+
+/* ── 主流程 ── */
+console.log(`[sim-twin] 模拟器 :${SIM_PORT} 影子树 ${SIM_DIR}`)
+await ensureSim()
+let created, liveness
+if (args.includes('--from-platform')) {
+  const lineId = argOf('--line')
+  if (!lineId) {
+    console.error('用法:--from-platform 需要 --line <lineId>')
+    process.exit(1)
+  }
+  console.log(`[sim-twin] 从平台线 ${lineId} 反向构造孪生…`)
+  const { devices } = await fromPlatform(lineId, argOf('--dynamics'))
+  console.log(`  协议族归并:${devices.map(d => `${d.family}×${d.signals.length}`).join(' + ')}`)
+  created = await materialize(devices, Number(argOf('--mqtt-port', String(18830 + (SIM_PORT - 4010) * 1000))))
+}
+else if (args.includes('--blueprint')) {
+  const bpFile = argOf('--blueprint')
+  if (!bpFile || !existsSync(bpFile)) {
+    console.error('用法:--blueprint <file.json>')
+    process.exit(1)
+  }
+  const { devices, mqttPort } = fromBlueprint(bpFile)
+  created = await materialize(devices, Number(argOf('--mqtt-port', mqttPort ?? String(18830 + (SIM_PORT - 4010) * 1000))))
+}
+else {
+  console.error('用法:sim-twin.mjs --from-platform --line <id> | --blueprint <file> [--sim-port 4034] [--dynamics file]')
+  process.exit(1)
+}
+liveness = await livenessCheck(created.map(c => c.id))
+console.log('')
+console.log('════════════════════════════════════════')
+console.log(`  sim-twin:${pass} PASS / ${fails.length} FAIL`)
+for (const f of fails) console.log(`  ✖ ${f}`)
+const summary = {
+  simBase: SIM, shadowDir: SIM_DIR, devices: created, totalSignals: liveness.signals,
+  driverSource: 'sim-export',
+  next: `对每设备 GET ${SIM}/api/nodes/<id>/export 取 items[].driverConfig,喂给 provision-line/onboard(driverConfig 替换为模拟器 export,量程/stepLimit 保留)`,
+}
+console.log(JSON.stringify(summary))
+if (fails.length) process.exit(1)

package/server/api/workshop/analysis/[id].delete.ts

@@ -0,0 +1,30 @@
+/**
+ * DELETE /api/workshop/analysis/:id —— 删除分析报告(仅 admin;台账 Agent 面无删,清污数据走此口)。
+ */
+import { getRouterParam } from 'h3'
+import { requireRole } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { getAnalysisRepo } from '@/server/services/workshop/analysis/analysis.repo'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const user = requireRole(event)
+  const id = getRouterParam(event, 'id')!
+  const report = getAnalysisRepo().get(id)
+  if (!report) throw new AppError(404, 'NOT_FOUND', `分析报告不存在: ${id}`)
+  getAnalysisRepo().remove(id)
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'analysis.delete',
+    kind: 'analysis',
+    targetKind: 'analysis',
+    targetId: id,
+    lineId: report.lineId,
+    recipeId: report.recipeId,
+    summary: `删除分析报告「${report.title}」(产线「${report.lineName || report.lineId || '-'}」)`,
+  })
+  return { ok: true }
+})

package/server/api/workshop/analysis/[id].get.ts

@@ -0,0 +1,25 @@
+/**
+ * GET /api/workshop/analysis/:id —— 分析报告详情(含完整正文;产线可见性校验)。
+ */
+import { getRouterParam } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { visibleLineIds, lineMode } from '@/server/services/workshop/permissions'
+import { getAnalysisRepo } from '@/server/services/workshop/analysis/analysis.repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id')!
+  const report = getAnalysisRepo().get(id)
+  if (!report) throw new AppError(404, 'NOT_FOUND', `分析报告不存在: ${id}`)
+  if (report.lineId) {
+    const visible = visibleLineIds(user)
+    if (visible && !visible.has(report.lineId)) {
+      throw new AppError(403, 'LINE_FORBIDDEN', `无权查看产线「${report.lineName || report.lineId}」的分析报告`)
+    }
+  }
+  // v27 编辑能力位(与列表端点同口径:admin 或产线 operate)
+  const canEdit = user.role === 'admin' || (Boolean(report.lineId) && lineMode(user, report.lineId) === 'operate')
+  return { report: { ...report, canEdit } }
+})

package/server/api/workshop/analysis/[id].patch.ts

@@ -0,0 +1,100 @@
+/**
+ * PATCH /api/workshop/analysis/:id —— 人工修订分析报告(v27 编辑面)。
+ * 权限:admin,或对该报告产线有「可操控」(operate)的用户;readonly/无授权 403。
+ * 可编辑字段:title/category/summary/conclusions/report/metrics/recipe_id/recipe_version/
+ * window_from/window_to/data_sources(缺省 = 保留原值);修订归因固化进 updated_*。
+ * Agent 面仍无改删 —— 编辑是带审计的人类管理操作(recordOps analysis.update)。
+ */
+import { getQuery, getRouterParam, readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { lineMode } from '@/server/services/workshop/permissions'
+import { getAnalysisRepo } from '@/server/services/workshop/analysis/analysis.repo'
+import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id')!
+  const repo = getAnalysisRepo()
+  const report = repo.get(id)
+  if (!report) throw new AppError(404, 'NOT_FOUND', `分析报告不存在: ${id}`)
+
+  // 编辑权限:admin 或产线 operate(readonly/无授权不可改)
+  const isAdmin = user.role === 'admin'
+  if (!isAdmin && (!report.lineId || lineMode(user, report.lineId) !== 'operate')) {
+    throw new AppError(403, 'ANALYSIS_FORBIDDEN', `无权修订该分析报告:需要产线「可操控」权限或 admin(报告产线 ${report.lineName || report.lineId || '-'})`)
+  }
+
+  const body = (await readBody<Record<string, unknown>>(event)) ?? {}
+  const str = (k: string): string | undefined => (body[k] === undefined ? undefined : String(body[k] ?? '').trim())
+  const title = str('title')
+  const summary = str('summary')
+  if (title !== undefined && !title) throw new AppError(400, 'VALIDATION_ERROR', 'title 不能为空')
+  if (summary !== undefined && !summary) throw new AppError(400, 'VALIDATION_ERROR', 'summary 不能为空')
+
+  // 配方校验(与保存面同口径:存在且归属该产线)
+  const recipeId = str('recipe_id')
+  if (recipeId) {
+    const recipe = getDcwRecipeRepo().list().find(r => r.id === recipeId)
+    if (!recipe) throw new AppError(404, 'NOT_FOUND', `配方不存在: ${recipeId}`)
+    if (recipe.lineId && report.lineId && recipe.lineId !== report.lineId) {
+      throw new AppError(400, 'VALIDATION_ERROR', `配方「${recipe.name}」不属于该报告的产线`)
+    }
+  }
+
+  // 时间窗归一:列内为本地 ISO(平台 toISOString 补丁),外部 Z 格式/epoch ms 归一后入库
+  const timeArg = (k: string): string | null | undefined => {
+    if (body[k] === undefined) return undefined
+    const raw = String(body[k] ?? '').trim()
+    if (!raw) return null
+    const ms = /^\d{10,}$/.test(raw) ? Number(raw) : Date.parse(raw)
+    if (!Number.isFinite(ms)) throw new AppError(400, 'VALIDATION_ERROR', `${k} 时间格式无效(ISO 8601 或 epoch ms)`)
+    return new Date(ms).toISOString()
+  }
+
+  const conclusions = body.conclusions === undefined
+    ? undefined
+    : (Array.isArray(body.conclusions) ? body.conclusions : String(body.conclusions ?? '').split('\n'))
+        .map((x: unknown) => String(x).replace(/^[-*\d.\s]+/, '').trim())
+        .filter(Boolean)
+  let metrics: Record<string, unknown> | undefined
+  if (body.metrics !== undefined && body.metrics !== null && String(body.metrics).trim() !== '') {
+    try {
+      metrics = typeof body.metrics === 'object' && !Array.isArray(body.metrics)
+        ? (body.metrics as Record<string, unknown>)
+        : JSON.parse(String(body.metrics))
+    }
+    catch {
+      throw new AppError(400, 'VALIDATION_ERROR', 'metrics 需为 JSON 对象(或留空保留原值)')
+    }
+  }
+
+  const updated = repo.update(id, {
+    title: title ?? undefined,
+    category: str('category') ?? undefined,
+    summary: summary ?? undefined,
+    conclusions,
+    report: body.report === undefined ? undefined : String(body.report ?? ''),
+    metrics,
+    recipeId,
+    recipeVersion: str('recipe_version'),
+    windowFrom: timeArg('window_from'),
+    windowTo: timeArg('window_to'),
+    dataSources: str('data_sources'),
+  }, { id: user.id, name: user.name })
+  if (!updated) throw new AppError(404, 'NOT_FOUND', `分析报告不存在: ${id}`)
+
+  try {
+    recordOps({
+      actor: user.id, actorName: user.name, actorKind: 'user',
+      action: 'analysis.update', kind: 'analysis', targetKind: 'analysis', targetId: id,
+      lineId: updated.lineId, recipeId: updated.recipeId,
+      summary: `人工修订分析报告「${updated.title}」(产线「${updated.lineName || updated.lineId || '-'}」)`,
+    })
+  }
+  catch { /* 审计失败不阻断 */ }
+
+  return { report: updated }
+})

package/server/api/workshop/analysis/index.get.ts

@@ -0,0 +1,39 @@
+/**
+ * GET /api/workshop/analysis —— 分析报告台账列表(线/配方/分类/关键词/时间窗过滤;产线可见性过滤)。
+ */
+import { getQuery } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { filterByLine, lineMode } from '@/server/services/workshop/permissions'
+import { getAnalysisRepo } from '@/server/services/workshop/analysis/analysis.repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const s = (k: string): string | undefined => (typeof q[k] === 'string' && q[k] ? (q[k] as string) : undefined)
+  // 时间窗归一:列内 created_at 是本地时区 ISO(平台 toISOString 补丁),外部传入的
+  // Z 格式/epoch ms 必须归一到同一文本形态,否则 SQL 文本比较错位
+  const timeArg = (k: string): string | undefined => {
+    const raw = s(k)
+    if (!raw) return undefined
+    const ms = /^\d{10,}$/.test(raw) ? Number(raw) : Date.parse(raw)
+    return Number.isFinite(ms) ? new Date(ms).toISOString() : undefined
+  }
+  const rows = getAnalysisRepo().list({
+    lineId: s('lineId'),
+    recipeId: s('recipeId'),
+    category: s('category'),
+    q: s('q'),
+    from: timeArg('from'),
+    to: timeArg('to'),
+    limit: Math.min(500, Math.max(1, Number(q.limit) || 100)),
+  })
+  const visible = filterByLine(user, rows, r => r.lineId || null)
+  // v27 编辑能力位:admin 或产线 operate(与 PATCH 端点同口径,前端据此显隐编辑入口)
+  const canEdit = (lineId: string): boolean =>
+    user.role === 'admin' || (Boolean(lineId) && lineMode(user, lineId) === 'operate')
+  return {
+    reports: visible.map(r => ({ ...r, canEdit: canEdit(r.lineId) })),
+    count: visible.length,
+  }
+})

package/server/plugins/workshop.ts

@@ -56,6 +56,7 @@ import { envStatus, startCreateVenv } from '../services/workshop/aml/env-manager
 import { attachOmpPluginBridge } from '../services/workshop/agents/plugin-tools'
 import { startAmlRetentionTimer, stopAmlRetentionTimer } from '../services/workshop/aml/retention'
 import { configureMesDatasets, defaultDatasetsDir } from '../services/workshop/mes/mes-datasets'
+import { configureAnalysisRepo } from '../services/workshop/analysis/analysis.repo'
 import { configureMesHooks } from '../services/workshop/mes/mes-hook'
 
 declare global {
@@ -156,6 +157,9 @@ export default function workshopPlugin(nitroApp: {
   // MES 数据下沉 hook 运行时(产物落 <configRoot>/data/mes-artifacts/<nodeId>/)
   configureMesHooks(dataDir)
 
+  // 数据分析系统:分析报告台账(v26 新表由 SCHEMA_SQL 启动建出)
+  configureAnalysisRepo(db)
+
   // 插件 omp 工具注册桥:启动即接管 pending 队列(此前首次 spawn omp agent 才挂桥,
   // 全新实例未 spawn 前 kb_agent/diag_run 等插件工具会一直"未知工具")
   attachOmpPluginBridge()

package/server/repositories/user.repository.ts

@@ -398,7 +398,7 @@ export const userRepository = {
     const current = this.findById(id)
     if (!current) return undefined
     const fields: string[] = []
-    const params: string[] = []
+    const params: Array<string | number> = []
     if (input.name !== undefined) {
       fields.push('name = ?')
       params.push(input.name)
@@ -496,7 +496,7 @@ export const userRepository = {
   /** 吊销某用户全部会话 token(管理面重置密码后强制重新登录,旧会话即死) */
   revokeAllTokens(userId: string): number {
     const d = getDb()
-    return d.prepare('DELETE FROM user_tokens WHERE user_id = ?').run(userId).changes
+    return Number(d.prepare('DELETE FROM user_tokens WHERE user_id = ?').run(userId).changes)
   },
 
   /** 测试钩子：替换内部 DB（重开内存库等） */

package/server/services/workshop/agents/host-tool-bridge/catalog.ts

@@ -48,7 +48,8 @@ export const AML_MODEL_BACKED_TOOL_NAMES = new Set([
  * 直接写族(agents/tool-classes 清单)在尾部 writesBlocked 再兜底过滤一道。
  * kb_agent/diag_run/diag_status 等 KB/诊断工具走 rag-bridge/diag-bridge 插件面,照常按频道插件开关注入,不进本白名单。
  */
-/** 只读观察读面(两档共用,全部只读;exp_collect 由经验采集底座注册,此处按名引用) */
+/** 只读观察读面(两档共用,全部只读;exp_collect 由经验采集底座注册,此处按名引用;
+ *  analysis_save/query 为数据分析留痕台账面 —— 台账写入非产线写,观察档位同样要留痕诊断结论) */
 export const OBSERVER_READ_TOOL_NAMES = new Set([
   'ops_log',
   'recipe_log',
@@ -57,6 +58,8 @@ export const OBSERVER_READ_TOOL_NAMES = new Set([
   'dcw_journal',
   'daq_query',
   'exp_collect',
+  'analysis_save',
+  'analysis_query',
 ])
 
 /**

package/server/services/workshop/agents/host-tool-bridge/tools/industrial.ts

@@ -1,5 +1,5 @@
 /**
- * 工业工具族(my_industrial_nodes / aml_* / dcw_* / param_* / daq_* / ops_log / recipe_* / line_context)。
+ * 工业工具族(my_industrial_nodes / aml_* / dcw_* / param_* / daq_* / ops_log / recipe_* / line_context / analysis_*)。
  *
  * 原 dispatchHostTool 首个 switch 的 26 个转发分支按行搬运到本模块:每个分支都只是
  * 「按 agentId 查绑定与节点后转交 industrial 模块的同名函数」,因此把闭包捕获的
@@ -9,7 +9,7 @@
  * 该族**不依赖 workspace**,由 dispatch 在 workspace 门控之前分流(保持原分发顺序)。
  */
 import type { HostToolResult } from '../types'
-import { toolLineStart, toolLineStop, toolLineStatus, toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqExport, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMesCatalog, toolMesDatasetRead, toolMesDatasets, toolMesFetch, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeApply, toolRecipeLog, toolRecipeRollback, toolRecipeTrial, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest } from '../../industrial'
+import { toolLineStart, toolLineStop, toolLineStatus, toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqExport, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRead, toolDcwRollback, toolLineContext, toolMesCatalog, toolMesDatasetRead, toolMesDatasets, toolMesFetch, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolParamRead, toolRecipeApply, toolRecipeLog, toolRecipeRollback, toolRecipeTrial, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest, toolAnalysisSave, toolAnalysisQuery } from '../../industrial'
 
 import { toolExpCollect } from '../../industrial/exp-tools'
 import { toolRecipePropose } from '../../industrial/recipe-propose-tools'
@@ -78,6 +78,9 @@ const INDUSTRIAL_HANDLERS = new Map<string, IndustrialToolHandler>([
   ['line_stop', (agentId, args, channelId) => toolLineStop(agentId, args as Parameters<typeof toolLineStop>[1], channelId)],
   ['line_status', (agentId, args, channelId) => toolLineStatus(agentId, args as Parameters<typeof toolLineStatus>[1], channelId)],
   ['aml_activity', (agentId, args) => toolAmlActivity(agentId, args as { line_id?: string })],
+  // 数据分析系统:分析结果留痕台账(save 可写台账(非产线写);query 查历史留痕)
+  ['analysis_save', (agentId, args, channelId) => toolAnalysisSave(agentId, args as Parameters<typeof toolAnalysisSave>[1], channelId)],
+  ['analysis_query', (agentId, args) => toolAnalysisQuery(agentId, args as Parameters<typeof toolAnalysisQuery>[1])],
 ])
 
 /** 工业工具名集合(与 INDUSTRIAL_HANDLERS 同源;dispatch 据此在 workspace 门控前分流) */