agentworkshop 0.7.64 → 0.7.66

package/server/plugins-builtin/rag-bridge/client.mjs

@@ -1,108 +1,182 @@
-/**
- * rag-bridge 客户端面板 —— 经 ctx.ui.registerPanel 注入 'plugins.page' 插槽。
- * 自包含 ESM(零导入);ctx 由宿主 loader 注入(fetch 带鉴权/t 命名空间翻译)。
- * 健康徽标(后端/Web/知识库) + 快捷检索框,30s 自动刷新,返回清理函数供卸载回收。
- */
-export function setup(ctx) {
-  // 面板样式(自包含注入,幂等;不依赖宿主页面样式表)
-  const styleId = 'aw-rb-styles'
-  if (!document.getElementById(styleId)) {
-    document.head.append(ctx.el('style', { id: styleId }, [`
-      .aw-rb { display:flex; flex-direction:column; gap:8px; font-size:12px; }
-      .aw-rb-row { display:flex; gap:8px; align-items:center; flex-wrap:wrap; }
-      .aw-rb-cell { display:inline-flex; align-items:center; gap:4px; }
-      .aw-rb-dot { width:8px; height:8px; border-radius:50%; display:inline-block; }
-      .aw-rb-dot-ok { background:#35e0a0; }
-      .aw-rb-dot-bad { background:#e05a5a; }
-      .aw-rb-input { flex:1; min-width:200px; padding:5px 9px; border:1px solid color-mix(in srgb, currentColor 24%, transparent); border-radius:7px; background:transparent; color:inherit; }
-      .aw-rb-btn { padding:5px 13px; border:1px solid color-mix(in srgb, currentColor 28%, transparent); border-radius:7px; background:transparent; color:inherit; cursor:pointer; }
-      .aw-rb-btn:disabled { opacity:.5; cursor:default; }
-      .aw-rb-results { display:flex; flex-direction:column; gap:6px; }
-      .aw-rb-empty { opacity:.6; }
-      .aw-rb-hit { padding:6px 8px; border:1px solid color-mix(in srgb, currentColor 12%, transparent); border-radius:7px; }
-      .aw-rb-hit-head { font-size:11px; opacity:.85; }
-      .aw-rb-hit-brief { opacity:.7; margin-top:2px; }
-    `]))
-  }
-
-  ctx.ui.registerPanel({
-    slot: 'plugins.page',
-    name: 'kb-panel',
-    titleKey: 'panel.title',
-    order: 10,
-    mount(el) {
-      const t = k => ctx.t(`panel.${k}`)
-      const timer = setInterval(refresh, 30_000)
-
-      function dot(ok) {
-        return ctx.el('span', {
-          class: `aw-rb-dot ${ok ? 'aw-rb-dot-ok' : 'aw-rb-dot-bad'}`,
-          title: ok ? t('ok') : t('bad'),
-        })
-      }
-
-      const backendCell = ctx.el('span', { class: 'aw-rb-cell' }, [dot(false), ` ${t('backend')}`])
-      const webCell = ctx.el('span', { class: 'aw-rb-cell' }, [dot(false), ` ${t('web')}`])
-      const kbCell = ctx.el('span', { class: 'aw-rb-cell aw-mono' }, [dot(false), ` ${t('kb')}: -`])
-      const counterCell = ctx.el('span', { class: 'aw-rb-cell faint' }, [
-        `${t('counters')}: ${t('store')} 0 · ${t('index')} 0`,
-      ])
-      const statusRow = ctx.el('div', { class: 'aw-rb-row' }, [backendCell, webCell, kbCell, counterCell])
-
-      const input = ctx.el('input', {
-        class: 'aw-rb-input',
-        placeholder: t('searchPlaceholder'),
-      })
-      input.addEventListener('keydown', (e) => {
-        if (e.key === 'Enter') void runSearch()
-      })
-      const btn = ctx.el('button', { class: 'aw-rb-btn' }, [t('searchBtn')])
-      btn.addEventListener('click', () => void runSearch())
-      const results = ctx.el('div', { class: 'aw-rb-results' })
-
-      el.append(
-        ctx.el('div', { class: 'aw-rb' }, [
-          statusRow,
-          ctx.el('div', { class: 'aw-rb-row' }, [input, btn]),
-          results,
-        ]),
-      )
-
-      async function refresh() {
-        const h = await ctx.fetch('/api/plugins/rag-bridge/health').catch(() => null)
-        backendCell.replaceChildren(dot(Boolean(h?.backend?.ok)), ` ${t('backend')}`)
-        webCell.replaceChildren(dot(Boolean(h?.web?.ok)), ` ${t('web')}`)
-        kbCell.replaceChildren(dot(Boolean(h?.kb?.id)), ` ${t('kb')}: ${h?.kb?.id ? String(h.kb.id).slice(0, 8) : '-'}(${h?.auth === 'bearer' ? t('bearer') : t('anonymous')})`)
-        counterCell.replaceChildren(`${t('counters')}: ${t('store')} ${h?.counters?.store ?? 0} · ${t('index')} ${h?.counters?.index ?? 0}`)
-      }
-
-      async function runSearch() {
-        const q = String(input.value ?? '').trim()
-        if (!q) return
-        btn.disabled = true
-        btn.textContent = t('searching')
-        results.replaceChildren()
-        const r = await ctx.fetch(`/api/plugins/rag-bridge/search?q=${encodeURIComponent(q)}&top_k=5`).catch(() => null)
-        btn.disabled = false
-        btn.textContent = t('searchBtn')
-        const items = Array.isArray(r?.results) ? r.results.slice(0, 5) : []
-        if (!items.length) {
-          results.append(ctx.el('div', { class: 'aw-rb-empty' }, [t('empty')]))
-          return
-        }
-        for (const [i, h] of items.entries()) {
-          const brief = String(h?.content ?? '').replace(/\s+/g, ' ').trim().slice(0, 140)
-          results.append(ctx.el('div', { class: 'aw-rb-hit' }, [
-            ctx.el('div', { class: 'aw-rb-hit-head aw-mono' }, [
-              `${i + 1}. [${Number(h?.score ?? 0).toFixed(3)}] ${h?.doc_path ?? '-'}`,
-            ]),
-            ctx.el('div', { class: 'aw-rb-hit-brief' }, [brief]),
-          ]))
-        }
-      }
-
-      void refresh()
-      return () => clearInterval(timer)
-    },
-  })
-}
+/**
+ * rag-bridge 客户端面板 —— 经 ctx.ui.registerPanel 注入 'plugins.page' 插槽。
+ * 自包含 ESM(零导入);ctx 由宿主 loader 注入(fetch 带鉴权/t 命名空间翻译)。
+ * 健康徽标(后端/Web/知识库,30s 自动刷新) + 「检测连接」显式检测(调 /health,
+ * 含用户配置 token 的实测三态,结构化渲染) + 快捷检索框;返回清理函数供卸载回收。
+ */
+export function setup(ctx) {
+  // 面板样式(自包含注入,幂等;不依赖宿主页面样式表)
+  const styleId = 'aw-rb-styles'
+  if (!document.getElementById(styleId)) {
+    document.head.append(ctx.el('style', { id: styleId }, [`
+      .aw-rb { display:flex; flex-direction:column; gap:8px; font-size:12px; }
+      .aw-rb-row { display:flex; gap:8px; align-items:center; flex-wrap:wrap; }
+      .aw-rb-cell { display:inline-flex; align-items:center; gap:4px; }
+      .aw-rb-dot { width:8px; height:8px; border-radius:50%; display:inline-block; }
+      .aw-rb-dot-ok { background:#35e0a0; }
+      .aw-rb-dot-bad { background:#e05a5a; }
+      .aw-rb-dot-na { background:#9aa4ad; }
+      .aw-rb-btn { padding:5px 13px; border:1px solid color-mix(in srgb, currentColor 28%, transparent); border-radius:7px; background:transparent; color:inherit; cursor:pointer; }
+      .aw-rb-btn:disabled { opacity:.5; cursor:default; }
+      .aw-rb-input { flex:1; min-width:200px; padding:5px 9px; border:1px solid color-mix(in srgb, currentColor 24%, transparent); border-radius:7px; background:transparent; color:inherit; }
+      .aw-rb-results { display:flex; flex-direction:column; gap:6px; }
+      .aw-rb-empty { opacity:.6; }
+      .aw-rb-hit { padding:6px 8px; border:1px solid color-mix(in srgb, currentColor 12%, transparent); border-radius:7px; }
+      .aw-rb-hit-head { font-size:11px; opacity:.85; }
+      .aw-rb-hit-brief { opacity:.7; margin-top:2px; }
+      .aw-rb-check { padding:8px 10px; border:1px dashed color-mix(in srgb, currentColor 20%, transparent); border-radius:8px; display:flex; flex-direction:column; gap:5px; }
+      .aw-rb-check-rows { display:flex; flex-direction:column; gap:3px; }
+      .aw-rb-check-row { display:flex; gap:6px; align-items:baseline; flex-wrap:wrap; }
+      .aw-rb-check-k { opacity:.65; min-width:86px; }
+      .aw-rb-check-err { color:#e05a5a; }
+      .aw-rb-check-ok { color:#35e0a0; }
+    `]))
+  }
+
+  ctx.ui.registerPanel({
+    slot: 'plugins.page',
+    name: 'kb-panel',
+    titleKey: 'panel.title',
+    order: 10,
+    mount(el) {
+      const t = k => ctx.t(`panel.${k}`)
+      const timer = setInterval(refresh, 30_000)
+
+      function dot(ok, na = false) {
+        return ctx.el('span', {
+          class: `aw-rb-dot ${na ? 'aw-rb-dot-na' : ok ? 'aw-rb-dot-ok' : 'aw-rb-dot-bad'}`,
+          title: na ? t('tokenUnknown') : ok ? t('ok') : t('bad'),
+        })
+      }
+
+      const backendCell = ctx.el('span', { class: 'aw-rb-cell' }, [dot(false), ` ${t('backend')}`])
+      const webCell = ctx.el('span', { class: 'aw-rb-cell' }, [dot(false), ` ${t('web')}`])
+      const kbCell = ctx.el('span', { class: 'aw-rb-cell aw-mono' }, [dot(false), ` ${t('kb')}: -`])
+      const counterCell = ctx.el('span', { class: 'aw-rb-cell faint' }, [
+        `${t('counters')}: ${t('store')} 0 · ${t('index')} 0`,
+      ])
+      const statusRow = ctx.el('div', { class: 'aw-rb-row' }, [backendCell, webCell, kbCell, counterCell])
+
+      // ---- 连接检测:显式动作,调 /health(宿主后端会拿用户配置的 token 实测受保护端点) ----
+      const checkBtn = ctx.el('button', { class: 'aw-rb-btn' }, [t('checkBtn')])
+      const checkRows = ctx.el('div', { class: 'aw-rb-check-rows' })
+      const checkBox = ctx.el('div', { class: 'aw-rb-check' }, [checkRows])
+      checkBtn.addEventListener('click', () => void runCheck())
+
+      const input = ctx.el('input', {
+        class: 'aw-rb-input',
+        placeholder: t('searchPlaceholder'),
+      })
+      input.addEventListener('keydown', (e) => {
+        if (e.key === 'Enter') void runSearch()
+      })
+      const btn = ctx.el('button', { class: 'aw-rb-btn' }, [t('searchBtn')])
+      btn.addEventListener('click', () => void runSearch())
+      const results = ctx.el('div', { class: 'aw-rb-results' })
+
+      el.append(
+        ctx.el('div', { class: 'aw-rb' }, [
+          statusRow,
+          ctx.el('div', { class: 'aw-rb-row' }, [checkBtn]),
+          checkBox,
+          ctx.el('div', { class: 'aw-rb-row' }, [input, btn]),
+          results,
+        ]),
+      )
+
+      /** 检测明细行:label + 状态点(true 绿/false 红/null 灰) + 值片段 */
+      function checkRow(label, okState, value) {
+        const val = ctx.el('span')
+        for (const seg of (Array.isArray(value) ? value : [{ text: String(value) }])) {
+          val.append(ctx.el('span', { class: seg.cls ?? '' }, [String(seg.text)]))
+        }
+        return ctx.el('div', { class: 'aw-rb-check-row' }, [
+          ctx.el('span', { class: 'aw-rb-check-k' }, [label]),
+          dot(okState === true, okState == null),
+          val,
+        ])
+      }
+
+      async function runCheck() {
+        checkBtn.disabled = true
+        checkBtn.textContent = t('checking')
+        const t0 = Date.now()
+        const h = await ctx.fetch('/api/plugins/rag-bridge/health').catch(() => null)
+        const ms = Date.now() - t0
+        const rows = []
+        if (!h) {
+          rows.push(checkRow(t('checkBtn'), false, [{ text: t('checkFail'), cls: 'aw-rb-check-err' }]))
+        }
+        else {
+          const beOk = h?.backend?.ok === true
+          rows.push(checkRow(t('backend'), beOk, beOk
+            ? [{ text: `${h.backend.url} · ${h.backend.status ?? 'ok'}` }]
+            : [{ text: `${h?.backend?.url ?? '-'} · ${h?.backend?.error ?? h?.backend?.status ?? t('bad')}`, cls: 'aw-rb-check-err' }]))
+          const webOk = h?.web?.ok === true
+          rows.push(checkRow(t('web'), webOk, webOk
+            ? [{ text: `${h.web.url} · ${t('webDocs')} ${h.web.knowledgeBases ?? '-'}` }]
+            : [{ text: `${h?.web?.url ?? '-'} · ${h?.web?.error ?? t('bad')}`, cls: 'aw-rb-check-err' }]))
+          const acc = h?.token?.accepted
+          const tokenTxt = !h?.token?.configured
+            ? t('tokenNone')
+            : acc === true ? t('tokenAccepted') : acc === false ? t('tokenRejected') : t('tokenUnknown')
+          rows.push(checkRow(t('tokenCfg'), h?.token?.configured ? acc : null,
+            [{ text: tokenTxt, cls: acc === false ? 'aw-rb-check-err' : '' },
+              ...(h?.token?.hint ? [{ text: ` · ${h.token.hint}`, cls: 'aw-rb-check-err' }] : []),
+              ...(h?.auth ? [{ text: ` · ${h.auth === 'bearer' ? t('bearer') : t('anonymous')}` }] : [])]))
+          rows.push(checkRow(t('kb'), Boolean(h?.kb?.id),
+            [{ text: `${h?.kb?.name ?? '-'}${h?.kb?.id ? ` · ${String(h.kb.id).slice(0, 8)}` : ''}` }]))
+          const allOk = beOk && webOk && acc !== false
+          rows.push(ctx.el('div', { class: 'aw-rb-check-row' }, [
+            ctx.el('span', { class: allOk ? 'aw-rb-check-ok' : 'aw-rb-check-err' },
+              [allOk ? `✔ ${t('allOk')}` : `✖ ${t('allBad')}`]),
+            ctx.el('span', { class: 'faint' }, [` · ${t('latency')} ${ms}ms`]),
+          ]))
+        }
+        checkRows.replaceChildren(...rows)
+        checkBtn.disabled = false
+        checkBtn.textContent = t('checkBtn')
+      }
+
+      async function refresh() {
+        const h = await ctx.fetch('/api/plugins/rag-bridge/health').catch(() => null)
+        backendCell.replaceChildren(dot(Boolean(h?.backend?.ok)), ` ${t('backend')}`)
+        webCell.replaceChildren(dot(Boolean(h?.web?.ok)), ` ${t('web')}`)
+        kbCell.replaceChildren(dot(Boolean(h?.kb?.id)), ` ${t('kb')}: ${h?.kb?.id ? String(h.kb.id).slice(0, 8) : '-'}(${h?.auth === 'bearer' ? t('bearer') : t('anonymous')})`)
+        counterCell.replaceChildren(`${t('counters')}: ${t('store')} ${h?.counters?.store ?? 0} · ${t('index')} ${h?.counters?.index ?? 0}`)
+      }
+
+      async function runSearch() {
+        const q = String(input.value ?? '').trim()
+        if (!q) return
+        btn.disabled = true
+        btn.textContent = t('searching')
+        results.replaceChildren()
+        const r = await ctx.fetch(`/api/plugins/rag-bridge/search?q=${encodeURIComponent(q)}&top_k=5`).catch(() => null)
+        btn.disabled = false
+        btn.textContent = t('searchBtn')
+        const items = Array.isArray(r?.results) ? r.results.slice(0, 5) : []
+        if (!items.length) {
+          results.append(ctx.el('div', { class: 'aw-rb-empty' }, [t('empty')]))
+          return
+        }
+        for (const [i, h] of items.entries()) {
+          const brief = String(h?.content ?? '').replace(/\s+/g, ' ').trim().slice(0, 140)
+          results.append(ctx.el('div', { class: 'aw-rb-hit' }, [
+            ctx.el('div', { class: 'aw-rb-hit-head aw-mono' }, [
+              `${i + 1}. [${Number(h?.score ?? 0).toFixed(3)}] ${h?.doc_path ?? '-'}`,
+            ]),
+            ctx.el('div', { class: 'aw-rb-hit-brief' }, [brief]),
+          ]))
+        }
+      }
+
+      void refresh()
+      const offLocale = ctx.hooks.on('i18n:changed', () => void refresh())
+      return () => {
+        clearInterval(timer)
+        offLocale()
+      }
+    },
+  })
+}

package/server/plugins-builtin/rag-bridge/i18n.json

@@ -1,60 +1,84 @@
-{
-  "zh-CN": {
-    "settings": {
-      "base_url": "rag-knowledge 后端地址",
-      "web_url": "rag-knowledge Web 地址",
-      "token": "rag-knowledge API Token"
-    },
-    "group": {
-      "conn": "rag-knowledge 连接",
-      "auth": "rag-knowledge 鉴权"
-    },
-    "panel": {
-      "title": "工业知识库(rag-knowledge)",
-      "backend": "后端",
-      "web": "Web",
-      "kb": "知识库",
-      "counters": "累计",
-      "store": "经验沉淀",
-      "index": "文档入库",
-      "searchPlaceholder": "检索工业知识(诊断报告/经验/规范)…",
-      "searchBtn": "检索",
-      "searching": "检索中…",
-      "empty": "未检索到相关内容",
-      "refresh": "刷新",
-      "ok": "正常",
-      "bad": "不可达",
-      "anonymous": "匿名",
-      "bearer": "鉴权"
-    }
-  },
-  "en": {
-    "settings": {
-      "base_url": "rag-knowledge backend URL",
-      "web_url": "rag-knowledge Web URL",
-      "token": "rag-knowledge API token"
-    },
-    "group": {
-      "conn": "rag-knowledge connection",
-      "auth": "rag-knowledge auth"
-    },
-    "panel": {
-      "title": "Industrial knowledge base (rag-knowledge)",
-      "backend": "Backend",
-      "web": "Web",
-      "kb": "Knowledge base",
-      "counters": "Total",
-      "store": "Experiences",
-      "index": "Documents",
-      "searchPlaceholder": "Search industrial knowledge (reports/lessons/specs)…",
-      "searchBtn": "Search",
-      "searching": "Searching…",
-      "empty": "No results",
-      "refresh": "Refresh",
-      "ok": "Up",
-      "bad": "Down",
-      "anonymous": "Anonymous",
-      "bearer": "Auth"
-    }
-  }
-}
+{
+  "zh-CN": {
+    "settings": {
+      "base_url": "rag-knowledge 后端地址",
+      "web_url": "rag-knowledge Web 地址",
+      "token": "rag-knowledge API Token"
+    },
+    "panel": {
+      "title": "工业知识库(rag-knowledge)",
+      "backend": "后端",
+      "web": "Web",
+      "kb": "知识库",
+      "counters": "累计",
+      "store": "经验沉淀",
+      "index": "文档入库",
+      "searchPlaceholder": "检索工业知识(诊断报告/经验/规范)…",
+      "searchBtn": "检索",
+      "searching": "检索中…",
+      "empty": "未检索到相关内容",
+      "refresh": "刷新",
+      "ok": "正常",
+      "bad": "不可达",
+      "anonymous": "匿名",
+      "bearer": "鉴权",
+      "checkBtn": "检测连接",
+      "checking": "检测中…",
+      "checkFail": "检测请求失败(插件路由不可达)",
+      "tokenCfg": "API Token",
+      "tokenNone": "未配置(匿名)",
+      "tokenAccepted": "已配置并被服务接受",
+      "tokenRejected": "已配置但被拒绝(401/403)",
+      "tokenUnknown": "未知(网络不可达)",
+      "webDocs": "知识库数",
+      "allOk": "连接正常:API 可达,token 有效",
+      "allBad": "连接异常:按上行明细排查",
+      "latency": "耗时"
+    },
+    "group": {
+      "conn": "rag-knowledge 连接",
+      "auth": "rag-knowledge 鉴权"
+    }
+  },
+  "en": {
+    "settings": {
+      "base_url": "rag-knowledge backend URL",
+      "web_url": "rag-knowledge Web URL",
+      "token": "rag-knowledge API token"
+    },
+    "panel": {
+      "title": "Industrial knowledge base (rag-knowledge)",
+      "backend": "Backend",
+      "web": "Web",
+      "kb": "Knowledge base",
+      "counters": "Total",
+      "store": "Experiences",
+      "index": "Documents",
+      "searchPlaceholder": "Search industrial knowledge (reports/lessons/specs)…",
+      "searchBtn": "Search",
+      "searching": "Searching…",
+      "empty": "No results",
+      "refresh": "Refresh",
+      "ok": "Up",
+      "bad": "Down",
+      "anonymous": "Anonymous",
+      "bearer": "Auth",
+      "checkBtn": "Test connection",
+      "checking": "Checking…",
+      "checkFail": "Check request failed (plugin route unreachable)",
+      "tokenCfg": "API Token",
+      "tokenNone": "Not set (anonymous)",
+      "tokenAccepted": "Configured and accepted",
+      "tokenRejected": "Configured but rejected (401/403)",
+      "tokenUnknown": "Unknown (unreachable)",
+      "webDocs": "KBs",
+      "allOk": "Connection OK: API reachable, token valid",
+      "allBad": "Connection problem: see details above",
+      "latency": "Latency"
+    },
+    "group": {
+      "conn": "rag-knowledge connection",
+      "auth": "rag-knowledge auth"
+    }
+  }
+}

package/server/services/workshop/agents/host-tool-bridge/dispatch.ts

@@ -18,6 +18,7 @@ import { listPluginTools, pluginOfTool } from '../plugin-tools'
 import type { HostToolBridgeContext, HostToolCall, HostToolResult } from './types'
 import { INDUSTRIAL_TOOL_NAMES, dispatchIndustrialTool } from './tools/industrial'
 import { guardIndustrialToolGrant } from '../industrial/grant-guard'
+import { verifyIndustrialToolCall } from '../industrial/tool-verify'
 import { handleCompleteTask, handleReportProgress } from './tools/progress'
 import { handleCancelTask, handleDispatchTask, handleGetMyTaskQueue, handleGetTaskDetails, handleListChannelTasks, handleReassignTask, handleRefuseTask, handleSubmitTask, handleUpdateTask } from './tools/tasks'
 import { handleGrantNodes, handleRevokeNodes } from './tools/team-delegation'
@@ -129,6 +130,10 @@ async function dispatchHostToolInner(ctx: HostToolBridgeContext, req: HostToolCa
     // 权限模型 v3:运行时 grant 复核(收权即失活;绑定面是静态授权,撤销后此处拦截)
     const denied = await guardIndustrialToolGrant(identity, req.toolName, args)
     if (denied) return denied
+    // 统一预检:参数形状 + 引用归属(node_id/line_id/recipe_id/dataset_id… 必须落在
+    // 调用者的绑定面内;越界拒绝并把「你的绑定面 + 下一步」返回给 Agent)
+    const verifyDenied = verifyIndustrialToolCall(identity.agentId, req.toolName, args)
+    if (verifyDenied) return verifyDenied
     return await dispatchIndustrialTool(identity.agentId, req.toolName, args, identity.channelId)
   }
 

package/server/services/workshop/agents/industrial/aml-dataset-tools.ts

@@ -180,6 +180,20 @@ export async function toolAmlDatasetBuild(agentId: string, args: {
       return amlErr(`节点 ${amlNodeName(n.nodeId)}(${n.nodeId})归属产线 ${nodeLine || '未分配'},与 line_id=${lineId} 不一致;数据集节点必须全部归属同一条产线(绑定只缩不放)。`)
     }
   }
+  // 2026-10-17 补强:隔离三元组的存在性与同线一致性(此前 product/recipe/run_ids 无校验,
+  // 可用他线配方/批次 id 构造数据集 —— 谱系污染训练数据)
+  const recipe = getDcwRecipeRepo().byId(recipeId)
+  if (!recipe) return amlErr(`配方 ${recipeId} 不存在。line_context 可查看当前批次的三个 id。`)
+  if (recipe.lineId !== lineId) return amlErr(`配方「${recipe.name}」归属产线 ${recipe.lineId || '未分配'},与 line_id=${lineId} 不一致(隔离三元组必须同线)。`)
+  const product = getDcwProductRepo().byId(productId)
+  if (!product) return amlErr(`产品 ${productId} 不存在。line_context 可查看当前批次的三个 id。`)
+  if (product.lineId && product.lineId !== lineId) return amlErr(`产品「${product.name}」归属产线 ${product.lineId},与 line_id=${lineId} 不一致(隔离三元组必须同线)。`)
+  const runIdsArg = Array.isArray(args.run_ids) ? args.run_ids.map(r => String(r)).filter(Boolean) : []
+  for (const rid of runIdsArg) {
+    const run = getDcwRecipeRepo().listRuns().find(x => x.id === rid)
+    if (!run) return amlErr(`批次 ${rid} 不存在(仅可引用已落库批次;line_context 可查当前批次 id)。`)
+    if (run.lineId !== lineId) return amlErr(`批次 ${rid} 归属产线 ${run.lineId},与 line_id=${lineId} 不一致(隔离三元组必须同线)。`)
+  }
   const purpose = args.purpose === 'quality_predict' ? 'quality_predict' : 'mpc_surrogate'
   try {
     const spec = parseDatasetSpec({

package/server/services/workshop/agents/industrial/dcw-judge-tools.ts

@@ -141,8 +141,13 @@ export async function toolDcwJournal(agentId: string, args: { node_id?: string,
   const limit = Math.min(Number(args.limit) || 20, 100)
   const repo = getAgentNodeBindingRepo()
   const bound = new Set(repo.byAgent(agentId).map(b => b.nodeId))
-  if (nodeId && !bound.has(nodeId))
-    return { text: `无权查询节点 ${nodeId} 的账本(仅可查自己绑定的节点)。`, isError: true }
+  if (nodeId && !bound.has(nodeId)) {
+    const mine = [...bound]
+    return {
+      text: `无权查询节点 ${nodeId} 的账本(仅可查你绑定范围内的对象:${mine.length ? mine.join(', ') : '(当前无绑定,请先绑定节点/配方,或改传 recipe_id 查配方面记录)'})。`,
+      isError: true,
+    }
+  }
   const records = rb.records({ nodeId: nodeId || undefined, recipeId: recipeId || undefined, limit })
   if (records.length === 0)
     return { text: '窗口内无优化记录(该节点/配方尚无 Agent 调控历史)。' }

package/server/services/workshop/agents/industrial/dcw-tools.ts

@@ -102,11 +102,13 @@ export async function toolDcwControl(agentId: string, args: { node_id?: string,
  * profile 门控)的写入委托它执行 —— Agent 可调用面依然收敛在配方面,此处非 Agent 入口。
  */
 export async function dcwControlGovernedInternal(agentId: string, args: { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string }, channelId?: string): Promise<{ text: string, isError?: boolean }> {
-  return _toolDcwControlDisabled(agentId, args, channelId)
+  return dcwControlGovernedLegacy(agentId, args, channelId)
 }
 
-/** v2 前的直写实现(已停用;保留供回溯/内部审计阅读,不再被任何入口调用) */
-async function _toolDcwControlDisabled(agentId: string, args: { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string }, channelId?: string): Promise<{ text: string, isError?: boolean }> {
+/** v2 前的直写实现(治理链完整:四层限界/HITL/60s 联锁/journal/open 记录)。
+ *  非任何 Agent 工具入口 —— 仅由 dcwControlGovernedInternal 承载平台内部治理写
+ *  (optimization_explore 闭环探索的写入委托),Agent 可调用面依然收敛在配方面。 */
+async function dcwControlGovernedLegacy(agentId: string, args: { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string }, channelId?: string): Promise<{ text: string, isError?: boolean }> {
   const twinGuard = guardTwinWrite(agentId, channelId)
   if (!twinGuard.allowed) return { text: `${twinGuard.code}: ${twinGuard.message}`, isError: true }
   const nodeId = String(args.node_id ?? '').trim()

package/server/services/workshop/agents/industrial/line-tools.ts

@@ -14,6 +14,7 @@ import { agentBadgeLabel } from '../agent-badge'
 import { getDcwController } from '../../dcw/dcw-controller'
 import { getDcwLineRepo } from '../../dcw/dcw-line.repo'
 import { recordOps } from '../../ops/ops'
+import { resolveRefFaces } from './tool-verify'
 
 export interface LineStartInput { recipe_id?: string, reason?: string }
 export interface LineStopInput { reason?: string }
@@ -133,13 +134,25 @@ export async function toolLineStop(agentId: string, args: LineStopInput, channel
 
 /** 工具:line_status —— 本频道绑定产线的运行状态(只读)。 */
 export async function toolLineStatus(agentId: string, args: LineStatusInput, channelId?: string): Promise<{ text: string, isError?: boolean }> {
-  void agentId
   const ctrl = getDcwController()
   const manager = getWorkshopManager()
   const ch = channelId ? manager.deps.repos.channels.findById(channelId) : undefined
+  const faces = resolveRefFaces(agentId)
+  const readable = [...faces.readableLines]
   const wantLine = String(args.line_id ?? '').trim() || String(ch?.lineId ?? '').trim()
-  const lines = ctrl.listLines().filter(l => !wantLine || l.id === wantLine)
-  const states = ctrl.allLineStates().filter(s => !wantLine || s.lineId === wantLine)
+  // 2026-10-17 补强:产线参数必须落在可读面内(此前无 channelId 时任意 line_id 可查、缺省列全平台产线)
+  if (wantLine && !faces.readableLines.has(wantLine)) {
+    return {
+      text: `无权查看产线 ${wantLine}(你的可读产线:${readable.join(', ') || '(无)'}${faces.channelLineId ? `;频道绑线「${faces.channelLineId}」为只读来源` : ''})。如需访问,请让用户授予对应产线权限(权限管理),或把当前频道绑定到该产线;也可以改用上述可读产线重试。`,
+      isError: true,
+    }
+  }
+  if (!wantLine && readable.length === 0) {
+    return { text: '你当前没有可读产线(未绑定任何节点/配方,频道也未绑定产线)。请先让用户或 lead 完成绑定后重试。', isError: true }
+  }
+  const scopeLines = wantLine ? [wantLine] : readable
+  const lines = ctrl.listLines().filter(l => scopeLines.includes(l.id))
+  const states = ctrl.allLineStates().filter(s => scopeLines.includes(s.lineId))
   if (lines.length === 0) return { text: `产线不存在或不在你的可见范围: ${wantLine || '(未指定)'}`, isError: true }
   const rows = lines.map((l) => {
     const s = states.find(x => x.lineId === l.id)

package/server/services/workshop/agents/industrial/optimization-tools.ts

@@ -17,6 +17,7 @@ import { getDaqController } from '../../daq/daq-controller'
 import { getDcwController } from '../../dcw/dcw-controller'
 import type { HostToolResult } from '../host-tool-bridge/types'
 import { dcwControlGovernedInternal } from './dcw-tools'
+import { resolveRefFaces } from './tool-verify'
 
 const sleep = (ms: number) => new Promise(r => setTimeout(r, ms))
 
@@ -81,6 +82,15 @@ export async function toolOptimizationExplore(agentId: string, args: {
     const daqBindings = repo.byAgent(agentId).filter(b => b.kind === 'daq')
     const targetNodeId = String(args.target_node_id ?? '').trim() || daqBindings[0]?.nodeId || ''
     if (!targetNodeId) return { text: '未指定目标观测节点且当前无数采绑定;请传 target_node_id 或先绑定数采节点。', isError: true }
+    // 2026-10-17 补强:目标观测节点必须在数采可见面内(绑定数采 ∪ 频道绑线只读,与 daq_query 同源;
+    // 此前任意 daq 节点 id 都能被读取均值并写入探索记录 —— 跨线数据会进训练回流)
+    const faces = resolveRefFaces(agentId)
+    if (!faces.daqBoundNodes.has(targetNodeId) && !faces.channelLineNodes.has(targetNodeId)) {
+      return {
+        text: `目标观测节点 ${targetNodeId} 不在你的数采可见范围(绑定数采节点:${[...faces.daqBoundNodes].join(', ') || '(无)'}${faces.channelLineNodes.size > 0 ? `;频道绑线只读节点:${[...faces.channelLineNodes].join(', ')}` : ''})。请让用户或 lead 绑定该数采节点,或改用上述节点重试。`,
+        isError: true,
+      }
+    }
 
     const targetBefore = await readTargetMean(targetNodeId)