agentworkshop 0.7.65 → 0.7.70

package/scripts/ui/lib.mjs

@@ -37,6 +37,9 @@ export const ROUTES = [
   { path: '/workshop/agents', name: 'agents', title: 'Agent 管理' },
   { path: '/workshop/teams', name: 'teams', title: '团队/频道' },
   { path: '/workshop/channel-templates', name: 'templates', title: '频道模板' },
+  { path: '/workshop/schedules', name: 'schedules', title: '定时任务' },
+  { path: '/operations', name: 'operations', title: '产线操作' },
+  { path: '/analysis', name: 'analysis', title: '数据分析' },
   { path: '/monitor', name: 'monitor', title: '实时监控 & HITL' },
   { path: '/daq', name: 'daq', title: '数采中心' },
   { path: '/dcw', name: 'dcw', title: '产线作业' },

package/sdk/client.mjs

@@ -88,7 +88,14 @@ export function createClientContext({ name, eventBridge, baseUrl = '', ui, t, ge
       rootEl ??= (() => {
         const found = document.getElementById(`aw-plugin-${name}`)
         if (found) return found
-        const box = el('div', { id: `aw-plugin-${name}`, style: 'position:fixed;right:16px;bottom:16px;z-index:2147483000;font:12px/1.6 ui-monospace,monospace' })
+        // 右下角插件坞:抬到页脚之上(56px 顶栏/46px 页脚的系统里 bottom:16
+        // 会压住内容表头),纵向堆叠多个插件徽标,宽度受视口约束。
+        const box = el('div', {
+          id: `aw-plugin-${name}`,
+          style: 'position:fixed;right:20px;bottom:58px;z-index:2147483000;'
+            + 'display:flex;flex-direction:column;align-items:flex-end;gap:8px;'
+            + 'max-width:min(360px,calc(100vw - 40px));font:12px/1.6 ui-monospace,monospace',
+        })
         document.body.append(box)
         return box
       })()

package/sdk/examples/line-sentinel/client.mjs

@@ -1,38 +1,55 @@
-// line-sentinel — 客户端徽标(实时显示采样计数与告警态)
-export function setup(ctx) {
-  const badge = ctx.el('div', {
-    id: 'line-sentinel-badge',
-    style: 'display:flex;align-items:center;gap:8px;padding:8px 12px;'
-      + 'border:1px solid rgba(53,224,160,.5);border-radius:10px;'
-      + 'background:rgba(6,18,14,.85);color:#35e0a0;'
-      + 'font:600 12px/1 ui-monospace,monospace;letter-spacing:.4px;'
-      + 'box-shadow:0 4px 18px rgba(0,0,0,.35);cursor:default',
-  }, ['🛡 line-sentinel · 待机'])
-
-  ctx.root().append(badge)
-
-  let n = 0
-  let alarms = 0
-
-  // ctx.on(type) 的 type 是 **scene 事件名本身**(浏览器可见的那一类),内部装到 `event:<type>`。
-  // 真实 scene 事件清单见 daq-controller.ts 的 broadcast 调用点:
-  //   daq.reading / daq.frame / daq.alarm / daq.alarm.changed / daq.node.changed /
-  //   daq.controller / device.updated / error
-  // ⚠️ 服务端生命周期钩子(daq:sample / line:start / line:stop)不会过桥到浏览器,
-  //    在客户端订阅它们只会得到永不触发的静默空订阅。
-  ctx.on('daq.reading', () => {
-    n++
-    badge.textContent = `🛡 line-sentinel · ${n} 样本 · ${alarms} 告警`
-  })
-
-  ctx.on('daq.alarm', () => {
-    alarms++
-    badge.style.borderColor = '#ff6b6b'
-    badge.textContent = `🛡 line-sentinel · ${n} 样本 · ${alarms} 告警`
-  })
-  ctx.on('daq.alarm.changed', () => {
-    badge.style.borderColor = 'rgba(53,224,160,.5)'
-  })
-
-  ctx.log.info('哨兵徽标已挂载(右下角)')
-}
+// line-sentinel — 客户端徽标(实时显示采样计数与告警态)
+//
+// 视觉契约与平台工业台一致:实心浮层底 + 1px 状态边 + 等宽读数,不用 emoji。
+// 徽标由 SDK 插件坞定位(右下角、页脚之上),这里只负责自身形态。
+export function setup(ctx) {
+  const dot = ctx.el('span', {
+    style: 'flex:none;width:6px;height:6px;border-radius:50%;'
+      + 'background:var(--tone-success-dot,#45e2a8)',
+  })
+  const label = ctx.el('span', {}, ['line-sentinel · 待机'])
+  const badge = ctx.el('div', {
+    id: 'line-sentinel-badge',
+    style: 'display:flex;align-items:center;gap:8px;padding:6px 10px;'
+      + 'border:1px solid color-mix(in srgb, var(--tone-success-dot,#45e2a8) 42%, transparent);border-radius:8px;'
+      + 'background:var(--mat-float-bg,rgba(13,21,33,.96));color:var(--ink-soft,#b6c3d5);'
+      + 'font:500 11px/1 var(--font-mono,ui-monospace,monospace);letter-spacing:.04em;'
+      + 'box-shadow:var(--shadow-lift-1,0 1px 2px rgba(0,0,0,.35));cursor:default;white-space:nowrap',
+  }, [dot, label])
+
+  ctx.root().append(badge)
+
+  let n = 0
+  let alarms = 0
+  const render = () => {
+    // 常驻 HUD 只显示"计数";告警数非零才追加,避免长期占满一行遮挡内容
+    label.textContent = alarms > 0
+      ? `line-sentinel ${n} · ${alarms} 告警`
+      : `line-sentinel ${n}`
+    badge.title = `line-sentinel · ${n} 样本 · ${alarms} 告警`
+  }
+
+  // ctx.on(type) 的 type 是 **scene 事件名本身**(浏览器可见的那一类),内部装到 `event:<type>`。
+  // 真实 scene 事件清单见 daq-controller.ts 的 broadcast 调用点:
+  //   daq.reading / daq.frame / daq.alarm / daq.alarm.changed / daq.node.changed /
+  //   daq.controller / device.updated / error
+  // ⚠️ 服务端生命周期钩子(daq:sample / line:start / line:stop)不会过桥到浏览器,
+  //    在客户端订阅它们只会得到永不触发的静默空订阅。
+  ctx.on('daq.reading', () => {
+    n++
+    render()
+  })
+
+  ctx.on('daq.alarm', () => {
+    alarms++
+    dot.style.background = 'var(--tone-danger-dot,#ff8080)'
+    badge.style.borderColor = 'color-mix(in srgb, var(--tone-danger-dot,#ff8080) 52%, transparent)'
+    render()
+  })
+  ctx.on('daq.alarm.changed', () => {
+    dot.style.background = 'var(--tone-success-dot,#45e2a8)'
+    badge.style.borderColor = 'color-mix(in srgb, var(--tone-success-dot,#45e2a8) 42%, transparent)'
+  })
+
+  ctx.log.info('哨兵徽标已挂载(右下角)')
+}

package/sdk/examples/ops-notifier/client.mjs

@@ -1,25 +1,29 @@
-// ops-notifier — 客户端通知(最近一次写控 toast)
-export function setup(ctx) {
-  const toast = ctx.el('div', {
-    style: 'display:none;padding:10px 14px;border:1px solid rgba(244,197,66,.6);'
-      + 'border-radius:10px;background:rgba(20,16,4,.88);color:#f4c542;'
-      + 'font:600 12px/1.5 ui-monospace,monospace;box-shadow:0 4px 18px rgba(0,0,0,.35)',
-  })
-  ctx.root().prepend(toast)
-
-  let timer = null
-  // scene 事件名是 'dcw.written'(写控 ACK 后对浏览器广播);服务端钩子 'dcw:write'
-  // 不过桥到浏览器,在这里订阅它只会得到永不触发的空订阅。
-  ctx.on('dcw.written', (w) => {
-    toast.textContent = w.ok
-      ? `✔ 写入 ${w.name} → ${w.eng}${w.source ? `(${w.source})` : ''}`
-      : `✖ 写入失败 ${w.name}`
-    toast.style.display = 'block'
-    clearTimeout(timer)
-    timer = setTimeout(() => {
-      toast.style.display = 'none'
-    }, 4000)
-  })
-
-  ctx.log.info('写控通知已就绪')
-}
+// ops-notifier — 客户端通知(最近一次写控 toast)
+export function setup(ctx) {
+  const toast = ctx.el('div', {
+    style: 'display:none;padding:8px 12px;border:1px solid color-mix(in srgb, var(--tone-warning-dot,#f6c453) 55%, transparent);'
+      + 'border-radius:8px;background:var(--mat-float-bg,rgba(13,21,33,.96));color:var(--ink-soft,#b6c3d5);'
+      + 'font:500 11.5px/1.5 var(--font-mono,ui-monospace,monospace);box-shadow:var(--shadow-lift-1,0 1px 2px rgba(0,0,0,.35))',
+  })
+  ctx.root().prepend(toast)
+
+  let timer = null
+  // scene 事件名是 'dcw.written'(写控 ACK 后对浏览器广播);服务端钩子 'dcw:write'
+  // 不过桥到浏览器,在这里订阅它只会得到永不触发的空订阅。
+  ctx.on('dcw.written', (w) => {
+    // 事件载荷在不同写控链路下字段名不完全一致(name/point/tag);缺字段时给出
+    // 可读的兜底,不让 "undefined" 直接出现在 HUD 上。
+    const target = w.name ?? w.point ?? w.tag ?? w.nodeName ?? '节点'
+    const value = w.eng ?? w.value ?? '—'
+    toast.textContent = w.ok
+      ? `写入 ${target} → ${value}${w.source ? `(${w.source})` : ''}`
+      : `写入失败 ${target}${w.error ? `: ${w.error}` : ''}`
+    toast.style.display = 'block'
+    clearTimeout(timer)
+    timer = setTimeout(() => {
+      toast.style.display = 'none'
+    }, 4000)
+  })
+
+  ctx.log.info('写控通知已就绪')
+}

package/sdk/examples/sample-insight/client.mjs

@@ -1,25 +1,25 @@
-// sample-insight — 客户端增强(自包含 ESM,无裸导入)
-// 右下角徽标实时显示采样计数(事件与 WS 同源)
-export function setup(ctx) {
-  const badge = ctx.el('div', {
-    style: 'padding:8px 12px;border:1px solid #35e0a0;border-radius:10px;color:#35e0a0;'
-      + 'background:rgba(8,20,16,.82);font:600 12px/1 ui-monospace,monospace;'
-      + 'box-shadow:0 4px 16px rgba(0,0,0,.35);letter-spacing:.4px',
-  }, ['⌁ sample-insight · 0'])
-
-  ctx.root().append(badge)
-
-  let n = 0
-  // scene 事件名直传('daq.reading' 是 DAQ 采样对浏览器广播的真实事件名)
-  ctx.on('daq.reading', () => {
-    n++
-    badge.textContent = `⌁ sample-insight · ${n} 样本`
-  })
-
-  // 生命周期钩子(含 page:change)不走 ctx.on —— 它只装 scene 事件。走 ctx.hooks 直订。
-  ctx.hooks.on('page:change', ({ path }) => {
-    ctx.log.info('page →', path)
-  })
-
-  ctx.log.info('client ready — 右下角徽标已挂载')
-}
+// sample-insight — 客户端增强(自包含 ESM,无裸导入)
+// 右下角徽标实时显示采样计数(事件与 WS 同源)
+export function setup(ctx) {
+  const badge = ctx.el('div', {
+    style: 'padding:6px 10px;border:1px solid var(--line,#1d2a3d);border-radius:8px;color:var(--ink-soft,#b6c3d5);'
+      + 'background:var(--mat-float-bg,rgba(13,21,33,.96));font:500 11px/1 var(--font-mono,ui-monospace,monospace);'
+      + 'box-shadow:var(--shadow-lift-1,0 1px 2px rgba(0,0,0,.35));letter-spacing:.04em',
+  }, ['sample-insight · 0'])
+
+  ctx.root().append(badge)
+
+  let n = 0
+  // scene 事件名直传('daq.reading' 是 DAQ 采样对浏览器广播的真实事件名)
+  ctx.on('daq.reading', () => {
+    n++
+    badge.textContent = `sample-insight · ${n} 样本`
+  })
+
+  // 生命周期钩子(含 page:change)不走 ctx.on —— 它只装 scene 事件。走 ctx.hooks 直订。
+  ctx.hooks.on('page:change', ({ path }) => {
+    ctx.log.info('page →', path)
+  })
+
+  ctx.log.info('client ready — 右下角徽标已挂载')
+}

package/server/.mimosa/hook-state/sess_869e5bfd-07f4-4b6e-a991-6221fcf6b7d2.json

@@ -0,0 +1 @@
+{"touched":["D:\\codes\\ABO\\AgentWorkShop\\server\\services\\workshop\\eda\\vm.ts","D:\\codes\\ABO\\AgentWorkShop\\server\\api\\workshop\\eda\\derived\\index.post.ts"],"bashMutation":true,"reportedFindings":[],"findingEvents":[],"baseline":{"storageId":"mvhn1irp-99488-e3fdc1cbfc","createdAt":"2026-10-21T04:54:49.669Z","files":{"services/workshop/eda/vm.ts":{"existed":true,"snapshot":"dd617a82339d2c61e49e28e416aabeb2fc100fb3cb1beca18d02dfb833214af6.source"},"api/workshop/eda/derived/index.post.ts":{"existed":true,"snapshot":"942d2679b87b96c612b4f2a425c3ccc5b6f3234f0cf589a8441602f866fbe277.source"}},"complete":false,"candidateLimit":5000,"discoveredFiles":0,"capturedFiles":2,"truncated":false,"omittedAtLeast":0,"firstOmitted":"","errors":[{"stage":"baseline-capture","target":".","reason":"global task baseline was unavailable; captured only the touched file"}]},"stateErrors":[],"omittedReportedFindings":0,"omittedFindingEvents":0,"processing":null,"updatedAt":"2026-10-21T04:54:52.984Z"}

package/server/.mimosa/hook-state/sess_869e5bfd-07f4-4b6e-a991-6221fcf6b7d2.mvhn1irp-99488-e3fdc1cbfc.baseline/942d2679b87b96c612b4f2a425c3ccc5b6f3234f0cf589a8441602f866fbe277.source

@@ -0,0 +1,41 @@
+/**
+ * POST /api/workshop/eda/derived —— 创建派生数据集(M3 自动数据处理落点)。
+ * body: { title?, line_id?, node_ids[], from, to, bucket_ms?, agg?, ops:[{kind,window?,period?}] }
+ * 产物 CSV/manifest 经 GET /api/workshop/daq/export-file?job=<jobId>&path=data.csv 下载。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { createDerivedDataset, DERIVED_OPS } from '@/server/services/workshop/eda/derived'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const nodeIds = Array.isArray(body.node_ids) ? body.node_ids.map(String) : String(body.node_ids ?? '').split(',').map(s => s.trim()).filter(Boolean)
+  if (!nodeIds.length) throw new AppError(400, 'VALIDATION_ERROR' as never, 'node_ids 必填。')
+  const toMs = Number(body.to) || Date.now()
+  const fromMs = Number(body.from) || toMs - 3600_000
+  const ops = Array.isArray(body.ops) ? body.ops as Array<{ kind: string, window?: number, period?: number }> : []
+  for (const o of ops) {
+    if (!DERIVED_OPS.includes(o.kind as never)) {
+      throw new AppError(400, 'VALIDATION_ERROR' as never, `算子 ${String(o.kind)} 不在白名单(${DERIVED_OPS.join('/')})。`)
+    }
+  }
+  try {
+    const r = await createDerivedDataset(user, {
+      lineId: body.line_id ? String(body.line_id) : undefined,
+      nodeIds,
+      fromMs,
+      toMs,
+      bucketMs: body.bucket_ms == null ? undefined : Number(body.bucket_ms),
+      agg: body.agg === 'min' || body.agg === 'max' ? body.agg : 'avg',
+      ops,
+    }, String(body.title ?? `派生集 ${new Date().toISOString().slice(0, 16)}`))
+    return r
+  }
+  catch (err) {
+    const e = err as { status?: number, message?: string }
+    throw new AppError(e.status ?? 400, 'VALIDATION_ERROR' as never, e.message ?? '派生失败')
+  }
+})

package/server/.mimosa/hook-state/sess_869e5bfd-07f4-4b6e-a991-6221fcf6b7d2.mvhn1irp-99488-e3fdc1cbfc.baseline/dd617a82339d2c61e49e28e416aabeb2fc100fb3cb1beca18d02dfb833214af6.source

@@ -0,0 +1,51 @@
+/**
+ * E6 Virtual Metrology 适配面 —— 特征向量 → 模型推理。
+ *
+ * POST /api/workshop/eda/vm/predict  body: { model_id, run_id, node_ids? }
+ *  - 从 eda_run_features 取该批次的 per-node mean 特征,按 node_ids(缺省按模型数据集
+ *    的 feature 节点序)拼成 1×N 输入,调既有 predictor(ONNX 推理 + UQ/OOD 拒判)。
+ *  - 模型 purpose 须为 'virtual_metrology'(E6 扩展枚举);产线只读权限照旧。
+ *  - OOD/越权等由 predictor 拒判语义透传(响应带 reject 语义而非数值,验收 ③)。
+ *
+ * 说明:训练侧仍走既有 AML 作业链(数据集由特征仓库导出构建);本面只补
+ * 「per-run 特征向量 → predict」的对齐薄适配(企业 EDA 评审 A-6②)。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '../aml/runtime'
+import { predictWithModel } from '../aml/predictor'
+import { listFeatures } from './features'
+import { edaRunById } from './eda-run.repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<{ model_id?: string, run_id?: string, node_ids?: string[] }>(event) ?? {}
+  const modelId = String(body.model_id ?? '')
+  const runId = String(body.run_id ?? '')
+  if (!modelId || !runId) throw new AppError(400, 'VALIDATION_ERROR' as never, 'model_id 与 run_id 必填。')
+  const rt = getAmlRuntime()
+  const model = rt.repo.model.get(modelId)
+  if (!model) throw new AppError(404, 'AML_MODEL_MISSING' as never, `模型 ${modelId} 不存在`)
+  if (model.purpose !== 'virtual_metrology') {
+    throw new AppError(400, 'VALIDATION_ERROR' as never, `模型 ${modelId} 的 purpose=${model.purpose},非 virtual_metrology;VM 推理请用 VM 模型。`)
+  }
+  const ds = rt.repo.dataset.get(model.datasetId)
+  if (!ds) throw new AppError(404, 'AML_DATASET_MISSING' as never, `模型 ${modelId} 关联的数据集已被清理`)
+  requireLineMode(user, ds.lineId, 'readonly')
+  const run = edaRunById(runId)
+  if (!run) throw new AppError(404, 'NOT_FOUND' as never, `批次不存在: ${runId}`)
+  if (lineMode(user, run.lineId) === 'none') throw new AppError(403, 'SCOPE_VIOLATION' as never, '批次不在你的可读产线上。')
+  // 特征向量:node_ids 优先,否则按数据集 feature 节点序;缺特征按 0 占位并如实标注
+  const wanted = (body.node_ids ?? []).filter(Boolean)
+  const feats = listFeatures({ runId, limit: 500 }).filter(f => f.segment === '' && f.mean != null)
+  const byNode = new Map(feats.map(f => [f.nodeId, f.mean as number]))
+  const vectorNodes = wanted.length ? wanted : feats.map(f => f.nodeId)
+  const vector = vectorNodes.map(id => byNode.get(id) ?? 0)
+  const missing = vectorNodes.filter(id => !byNode.has(id))
+  if (!vector.length) throw new AppError(400, 'VALIDATION_ERROR' as never, `批次 ${runId} 无特征行;请先跑特征提取(关账自动或 POST /eda/features/run)。`)
+  const prediction = await predictWithModel(modelId, { history: [vector], steps: 1 })
+  return { runId, vectorNodes, missing, vector, prediction }
+})

package/server/.mimosa/hook-status/sess_869e5bfd-07f4-4b6e-a991-6221fcf6b7d2-e67b6b91bf.json

@@ -0,0 +1,14 @@
+{
+  "schemaVersion": "mimosa-hook-status/v1",
+  "recordedAt": "2026-10-21T04:54:52.987Z",
+  "sessionId": "sess_869e5bfd-07f4-4b6e-a991-6221fcf6b7d2",
+  "event": "PostToolUse",
+  "toolName": "Edit",
+  "file": "api/workshop/eda/derived/index.post.ts",
+  "outcome": "clear",
+  "coverage": "complete",
+  "findingCount": 0,
+  "durationMs": 8,
+  "hostState": "hook_complete",
+  "reportHint": ".mimosa/reports/"
+}

package/server/api/workshop/agent-tools/bindings/[id].delete.ts

@@ -1,7 +1,7 @@
 /**
  * DELETE /api/workshop/agent-tools/bindings/:id —— 解除绑定。
  *
- * 鉴权:解绑会顺带 cancelPendingFor 掉该 Agent 对该节点的挂起审批,
+ * 鉴权:解绑会顺带取消该 Agent 对该绑定(含配方参数/配方审批单)的挂起审批,
  * 等于**否决他人正在等待的控制权**,因此与 PATCH 一样必须先验产线权限。
  */
 import { createError, getRouterParam } from 'h3'
@@ -20,7 +20,7 @@ export default defineApiHandler(async (event) => {
   if (!binding) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
   requireBindingAccess(user, binding)
   if (!repo.unbind(id)) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
-  // 解绑即失效:该 Agent 对该节点的挂起审批按拒绝收敛(tool result 注明原因)
-  getToolApprovals().cancelPendingFor(binding.agentId, binding.nodeId)
+  // 解绑即失效:该 Agent 对该绑定(含配方/配方参数/配方审批单)的挂起审批按拒绝收敛
+  getToolApprovals().cancelPendingForBinding(binding.agentId, binding)
   return { ok: true }
 })

package/server/api/workshop/channels/[id]/tools/index.get.ts

@@ -0,0 +1,17 @@
+/**
+ * GET /api/workshop/channels/:id/tools —— Channel 工具透明化视图。
+ * 返回全部注册工具 + 硬规则资格(lead/worker)+ 本 Channel 选择 + 统计。
+ * 鉴权:Channel 属主或 admin;遗留公共 Channel(owner null)需 admin。
+ */
+import { resolveUser, requireAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { buildChannelToolView } from '@/server/services/workshop/tools/catalog-view'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const channel = getWorkshopManager().getChannelForUser(id, user.id)
+  if (channel.ownerUserId === null) requireAdmin(event)
+  return buildChannelToolView(id)
+})

package/server/api/workshop/channels/[id]/tools/index.put.ts

@@ -0,0 +1,117 @@
+/**
+ * PUT /api/workshop/channels/:id/tools —— 保存 Channel 工具选择(全量替换)。
+ *
+ * body: { mode: 'all'|'selected', tools: [{ name, enabled }] }
+ *  - all: 全部合格工具启用;只持久化 enabled=false 的行(deny-list)
+ *  - selected: 仅勾选工具启用;持久化提交的全量行(allow-list)
+ *
+ * 硬规则不可覆盖:selected 模式下显式启用一个对 lead/worker 都不合格的工具 → 409。
+ * 鉴权:Channel 属主或 admin;遗留公共 Channel 需 admin。
+ */
+import { readBody } from 'h3'
+import { resolveUser, requireAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getToolRegistryRepo, type ChannelToolPolicyEntry, type ToolPolicyMode } from '@/server/services/workshop/db/tool-registry.repo'
+import { buildChannelToolView } from '@/server/services/workshop/tools/catalog-view'
+import { notifyToolChange } from '@/server/services/workshop/agents/plugin-tools'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+import { AppError } from '@/server/utils/errors'
+
+const TOOL_NAME_RE = /^[a-z][a-z0-9_]{1,63}$/
+const MAX_TOOLS = 500
+
+interface ToolInput { name?: unknown, enabled?: unknown }
+interface Body { mode?: unknown, tools?: unknown }
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const manager = getWorkshopManager()
+  const channel = manager.getChannelForUser(id, user.id)
+  if (channel.ownerUserId === null) requireAdmin(event)
+
+  const body = (await readBody<Body>(event)) ?? {}
+  if (body.mode !== undefined && body.mode !== 'all' && body.mode !== 'selected') {
+    throw new AppError(400, 'VALIDATION_ERROR', 'mode 只能是 all 或 selected')
+  }
+  const mode: ToolPolicyMode = body.mode === 'selected' ? 'selected' : 'all'
+  if (!Array.isArray(body.tools)) {
+    throw new AppError(400, 'VALIDATION_ERROR', 'body 应为 { mode, tools: [{ name, enabled }] }')
+  }
+  if (body.tools.length > MAX_TOOLS) {
+    throw new AppError(400, 'VALIDATION_ERROR', `tools 最多 ${MAX_TOOLS} 条`)
+  }
+
+  const view = buildChannelToolView(id)
+  const byName = new Map(view.tools.map(t => [t.name, t]))
+  const seen = new Set<string>()
+  const entries: ChannelToolPolicyEntry[] = []
+  const unknown: string[] = []
+  const unavailable: string[] = []
+  const ineligible: Array<{ name: string, reason: string }> = []
+
+  for (const raw of body.tools as ToolInput[]) {
+    const name = typeof raw?.name === 'string' ? raw.name : ''
+    if (raw?.enabled !== undefined && typeof raw.enabled !== 'boolean') {
+      throw new AppError(400, 'VALIDATION_ERROR', `工具 ${name || '(空)'} 的 enabled 必须是 boolean`)
+    }
+    if (!TOOL_NAME_RE.test(name)) unknown.push(name || '(空)')
+    if (seen.has(name)) throw new AppError(400, 'DUPLICATE_TOOL', `工具重复提交: ${name}`)
+    seen.add(name)
+    const enabled = raw?.enabled === true
+    const tool = byName.get(name)
+    if (!tool) {
+      unknown.push(name)
+      continue
+    }
+    if (enabled) {
+      // all 模式下 enabled=true 只是“默认启用”(不落库),不可用/被硬规则挡住的工具仍不会生效;
+      // selected 模式是显式 allow-list,启用一个不可用或永不合格的工具必须拒绝并说明原因。
+      if (mode === 'selected' && !tool.available) unavailable.push(name)
+      const hardBlocked = !tool.eligibility.lead.eligible && !tool.eligibility.worker.eligible
+      if (mode === 'selected' && hardBlocked) {
+        const reason = tool.eligibility.lead.reason !== 'OK' ? tool.eligibility.lead.reason : tool.eligibility.worker.reason
+        ineligible.push({ name, reason })
+      }
+    }
+    entries.push({ name, enabled })
+  }
+
+  if (unknown.length > 0) {
+    throw new AppError(400, 'UNKNOWN_TOOL', `未知工具: ${unknown.slice(0, 10).join(', ')}${unknown.length > 10 ? ' …' : ''}`)
+  }
+  if (unavailable.length > 0) {
+    throw new AppError(409, 'TOOL_UNAVAILABLE', `工具当前未注册/插件未启用: ${unavailable.slice(0, 10).join(', ')}`)
+  }
+  if (ineligible.length > 0) {
+    const first = ineligible[0]!
+    throw new AppError(409, 'TOOL_NOT_ELIGIBLE', `工具 ${first.name} 被硬规则排除(${first.reason});Channel 开关不能绕过角色/档位/写守卫。`)
+  }
+
+  try {
+    getToolRegistryRepo().savePolicy(id, mode, entries, user.id)
+  }
+  catch (err) {
+    throw new AppError(503, 'TOOL_REGISTRY_UNAVAILABLE', `工具策略保存失败: ${err instanceof Error ? err.message : String(err)}`)
+  }
+
+  // 在跑 omp 会话立即重发 set_host_tools;pi 下一回合;MCP 引擎由执行闸门兜底。
+  notifyToolChange()
+
+  const disabled = entries.filter(e => !e.enabled).length
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'tool_policy.update',
+    targetKind: 'channel',
+    targetId: id,
+    kind: 'system',
+    scope: 'system',
+    summary: `Channel 工具策略已更新: mode=${mode}, 启用=${entries.length - disabled}, 停用=${disabled}`,
+    detail: { mode, tools: entries },
+  })
+
+  return buildChannelToolView(id)
+})

package/server/api/workshop/channels/[id]/tools/reset.post.ts

@@ -0,0 +1,39 @@
+/**
+ * POST /api/workshop/channels/:id/tools/reset —— 清除 Channel 工具策略,恢复默认全启用。
+ * 鉴权:Channel 属主或 admin;遗留公共 Channel 需 admin。
+ */
+import { resolveUser, requireAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getToolRegistryRepo } from '@/server/services/workshop/db/tool-registry.repo'
+import { buildChannelToolView } from '@/server/services/workshop/tools/catalog-view'
+import { notifyToolChange } from '@/server/services/workshop/agents/plugin-tools'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+import { AppError } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const channel = getWorkshopManager().getChannelForUser(id, user.id)
+  if (channel.ownerUserId === null) requireAdmin(event)
+
+  try {
+    getToolRegistryRepo().resetPolicy(id)
+  }
+  catch (err) {
+    throw new AppError(503, 'TOOL_REGISTRY_UNAVAILABLE', `工具策略重置失败: ${err instanceof Error ? err.message : String(err)}`)
+  }
+  notifyToolChange()
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'tool_policy.reset',
+    targetKind: 'channel',
+    targetId: id,
+    kind: 'system',
+    scope: 'system',
+    summary: 'Channel 工具策略已重置为默认(全部合格工具启用)',
+  })
+  return buildChannelToolView(id)
+})