agentworkshop 0.7.66 → 0.7.70

package/server/api/workshop/daq/[id]/ingest.post.ts

@@ -0,0 +1,166 @@
+/**
+ * POST /api/workshop/daq/:id/ingest —— 外部 API 推送多源异构数采样本。
+ *
+ * 适用:第三方/边缘系统每次调用返回一张图片或一个数组(如膜厚模头点位数组),
+ * 由调用方主动推入本平台,走与网关采样完全相同的队列/入库/打标/告警链路。
+ *
+ * body:
+ *   { at?: ISO, value?: number, points?: number[], metrics?: {k:number},
+ *     state?: 'ok'|'warn'|'alarm'|'offline',
+ *     image?: { base64|data: string, mime?: string, width?: number, height?: number } | string }
+ *
+ * 鉴权:
+ *   - 配置了 AW_DAQ_INGEST_TOKEN 时,要求 x-aw-daq-token 头匹配(外部系统接入);
+ *   - 未配置时退回仪表盘用户会话(resolveUser)。
+ * 约束:
+ *   - 节点必须存在且启用;载荷形态必须与模板 signalKind 一致(scalar/vector/image);
+ *   - 向量 1..4096 个有限数;图像 ≤10MB 且 MIME image/*;
+ *   - at 缺省=当前时间,允许范围为 ±7 天。
+ */
+import { createHash } from 'node:crypto'
+import { getHeader, getRouterParam, readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getDaqController } from '@/server/services/workshop/daq/daq-controller'
+import { findDaqTemplate } from '@/server/services/workshop/daq/daq-templates'
+import { getDaqQueue } from '@/server/services/workshop/daq/bus'
+import { getObjectStore } from '@/server/services/workshop/daq/objectstore'
+import { daqObjectKey } from '@/server/services/workshop/daq/objectstore/objectstore-port'
+import type { DaqSampleEnvelope } from '@/server/services/workshop/daq/bus/queue-port'
+import { AppError } from '@/server/utils/errors'
+
+const IMAGE_MAX_BYTES = 10 * 1024 * 1024
+const VECTOR_MAX_POINTS = 4096
+const AT_RANGE_MS = 7 * 24 * 3600_000
+
+interface IngestBody {
+  at?: string
+  value?: number | string
+  points?: unknown
+  values?: unknown
+  metrics?: Record<string, unknown>
+  state?: string
+  image?: { base64?: string, data?: string, mime?: string, width?: number, height?: number } | string
+}
+
+function finiteList(raw: unknown): number[] | null {
+  if (!Array.isArray(raw)) return null
+  const out: number[] = []
+  for (const x of raw) {
+    const n = Number(x)
+    if (!Number.isFinite(n)) return null
+    out.push(n)
+  }
+  return out
+}
+
+function metricsOf(raw: unknown): Record<string, number> {
+  if (raw === null || raw === undefined || typeof raw !== 'object' || Array.isArray(raw)) return {}
+  const out: Record<string, number> = {}
+  for (const [k, v] of Object.entries(raw as Record<string, unknown>).slice(0, 64)) {
+    const n = Number(v)
+    if (Number.isFinite(n) && k.trim()) out[k.trim().slice(0, 80)] = n
+  }
+  return out
+}
+
+export default defineApiHandler(async (event) => {
+  const id = getRouterParam(event, 'id') ?? ''
+  const expected = process.env.AW_DAQ_INGEST_TOKEN
+  if (expected) {
+    if (String(getHeader(event, 'x-aw-daq-token') ?? '') !== expected) {
+      throw new AppError(401, 'UNAUTHORIZED', '数采推送鉴权失败:请提供正确的 x-aw-daq-token(AW_DAQ_INGEST_TOKEN)。')
+    }
+  }
+  else {
+    resolveUser(event)
+  }
+
+  const node = getDaqController().byId(id)
+  if (!node) throw new AppError(404, 'NOT_FOUND', `数采节点不存在: ${id}`)
+  if (!node.enabled) throw new AppError(409, 'CONFLICT', `数采节点「${node.name}」已停用,不接受推送。`)
+  const tpl = findDaqTemplate(node.templateKey)
+  const kind = tpl?.signalKind ?? 'scalar'
+  const body = await readBody<IngestBody>(event) ?? {}
+
+  const now = Date.now()
+  const atRaw = String(body.at ?? '').trim()
+  const atMs = atRaw ? Date.parse(atRaw) : now
+  if (!Number.isFinite(atMs)) throw new AppError(400, 'VALIDATION_ERROR', `at 不是合法时间: ${atRaw}(示例 2026-10-19T12:00:00+08:00)`)
+  if (Math.abs(atMs - now) > AT_RANGE_MS) throw new AppError(400, 'VALIDATION_ERROR', 'at 超出允许范围(±7 天),请检查时区/时钟。')
+  const at = new Date(atMs).toISOString()
+  const state = ['ok', 'warn', 'alarm', 'offline'].includes(String(body.state ?? '')) ? String(body.state) : 'ok'
+  const metrics = metricsOf(body.metrics)
+  let env: DaqSampleEnvelope
+
+  if (kind === 'image') {
+    const img = body.image
+    const base64 = typeof img === 'string'
+      ? img
+      : String(img?.base64 ?? img?.data ?? '').trim()
+    if (!base64) throw new AppError(400, 'VALIDATION_ERROR', '图像节点的载荷必须提供 image.base64(或 image.data)。')
+    const mime = typeof img === 'object' && img?.mime ? String(img.mime) : 'image/png'
+    if (!/^image\//i.test(mime)) throw new AppError(400, 'VALIDATION_ERROR', `image.mime 必须是 image/*(收到 ${mime})`)
+    let buf: Buffer
+    try {
+      buf = Buffer.from(base64.replace(/^data:[^,]+,/, ''), 'base64')
+    }
+    catch {
+      throw new AppError(400, 'VALIDATION_ERROR', 'image.base64 解码失败。')
+    }
+    if (buf.length === 0) throw new AppError(400, 'VALIDATION_ERROR', '图像内容为空。')
+    if (buf.length > IMAGE_MAX_BYTES) throw new AppError(413, 'PAYLOAD_TOO_LARGE', `图像超过 ${IMAGE_MAX_BYTES / 1024 / 1024}MB 上限。`)
+    const objectKey = daqObjectKey(node.id, atMs, mime.includes('jpeg') ? '.jpg' : mime.includes('webp') ? '.webp' : '.png')
+    await getObjectStore().put(objectKey, buf, mime)
+    const sha256 = createHash('sha256').update(buf).digest('hex')
+    const width = Number(body.image && typeof body.image === 'object' ? body.image.width : NaN)
+    const height = Number(body.image && typeof body.image === 'object' ? body.image.height : NaN)
+    env = {
+      nodeId: node.id,
+      templateRef: node.templateRef,
+      value: Number((metrics.avg ?? 0).toFixed(node.decimals)),
+      state,
+      at,
+      frame: {
+        kind: 'image',
+        objectKey,
+        mime,
+        width: Number.isFinite(width) ? width : undefined,
+        height: Number.isFinite(height) ? height : undefined,
+        sha256,
+        size: buf.length,
+        metrics,
+      },
+    }
+  }
+  else if (kind === 'vector') {
+    const points = finiteList(body.points ?? body.values)
+    if (!points || points.length === 0) throw new AppError(400, 'VALIDATION_ERROR', '向量节点的载荷必须提供 points 数组。')
+    if (points.length > VECTOR_MAX_POINTS) throw new AppError(413, 'PAYLOAD_TOO_LARGE', `向量点数 ${points.length} 超过 ${VECTOR_MAX_POINTS} 上限。`)
+    const avg = points.reduce((a, b) => a + b, 0) / points.length
+    env = {
+      nodeId: node.id,
+      templateRef: node.templateRef,
+      value: Number((metrics.avg ?? avg).toFixed(node.decimals)),
+      state,
+      at,
+      frame: { kind: 'vector', points, metrics },
+    }
+  }
+  else {
+    const value = Number(body.value)
+    if (!Number.isFinite(value)) throw new AppError(400, 'VALIDATION_ERROR', '标量节点的载荷必须提供数值 value。')
+    env = { nodeId: node.id, templateRef: node.templateRef, value, state, at }
+  }
+
+  await getDaqQueue().then(q => q.publish(env))
+  return {
+    accepted: true,
+    nodeId: node.id,
+    kind,
+    at,
+    lineId: node.lineId ?? null,
+    ...(env.frame?.kind === 'image' ? { objectKey: env.frame.objectKey, bytes: env.frame.size } : {}),
+    ...(env.frame?.kind === 'vector' ? { points: env.frame.points?.length } : {}),
+  }
+})

package/server/api/workshop/daq/export/[id].get.ts

@@ -0,0 +1,17 @@
+/**
+ * GET /api/workshop/daq/export/:id —— 导出任务详情(ready 后带产物清单;目录被保留
+ * 策略清理时 result.missing=true 如实呈现)。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError, ErrorCodes } from '@/server/utils/errors'
+import { getExportJobFor } from '@/server/services/workshop/eda/data-export'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const job = getExportJobFor(user, id)
+  if (!job) throw new AppError(404, ErrorCodes.NOT_FOUND, `导出任务不存在或不可见: ${id}`)
+  return { job }
+})

package/server/api/workshop/daq/export/index.get.ts

@@ -0,0 +1,15 @@
+/**
+ * GET /api/workshop/daq/export —— 我的可见导出任务台账(新→旧)。
+ */
+import { getQuery } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { visibleExportJobs } from '@/server/services/workshop/eda/data-export'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const limit = Number(q.limit) || 50
+  const jobs = visibleExportJobs(user, limit)
+  return { jobs, count: jobs.length }
+})

package/server/api/workshop/daq/export/index.post.ts

@@ -0,0 +1,42 @@
+/**
+ * POST /api/workshop/daq/export —— 用户面批量导出(异步任务,并发=1 队列)。
+ * body: { line_id?, node_ids?, from?, to?, last_minutes?, title?, note?, merge? }
+ * 返回 job 台账行;进度经 GET /api/workshop/daq/export/:id 查询。
+ */
+import { readBody } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { startDaqExport } from '@/server/services/workshop/eda/data-export'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const num = (k: string): number | undefined => {
+    const v = body[k]
+    if (v == null || String(v).trim() === '') return undefined
+    const n = Number(v)
+    return Number.isFinite(n) ? n : undefined
+  }
+  try {
+    const job = startDaqExport(user, {
+      lineId: body.line_id ? String(body.line_id) : undefined,
+      nodeIds: Array.isArray(body.node_ids)
+        ? body.node_ids.map(x => String(x))
+        : (body.node_ids ? String(body.node_ids).split(',').map(s => s.trim()).filter(Boolean) : undefined),
+      fromMs: num('from'),
+      toMs: num('to'),
+      lastMinutes: num('last_minutes'),
+      title: body.title ? String(body.title) : undefined,
+      note: body.note ? String(body.note) : undefined,
+      merge: body.merge === true || body.merge === 'true',
+      runId: body.run_id ? String(body.run_id) : undefined,
+    })
+    return { job }
+  }
+  catch (err) {
+    const e = err as { status?: number, code?: string, message?: string }
+    if (e.status && e.code) throw new AppError(e.status, e.code as never, e.message ?? '导出失败')
+    throw err
+  }
+})

package/server/api/workshop/daq/export-file.get.ts

@@ -0,0 +1,26 @@
+/**
+ * GET /api/workshop/daq/export-file?job=&path= —— 导出产物安全下载。
+ * 二进制响应**必须**走裸 defineEventHandler(过 defineApiHandler 会把 Buffer 序列化成
+ * {type:'Buffer',...} 文本 —— frames/content.get.ts 记录的 84 字节事故)。
+ * path 白名单:manifest.json | README.md | merged.csv | nodes/<safeId>.csv。
+ */
+import { getQuery, setHeader, defineEventHandler, createError } from 'h3'
+import { readFileSync } from 'node:fs'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { resolveExportFile } from '@/server/services/workshop/eda/data-export'
+
+export default defineEventHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const jobId = String(q.job ?? '')
+  const rel = String(q.path ?? '')
+  const hit = resolveExportFile(user, jobId, rel)
+  if (!hit) {
+    throw createError({ statusCode: 404, statusMessage: 'file not found' })
+  }
+  const buf = readFileSync(hit.abs)
+  setHeader(event, 'content-type', hit.mime)
+  setHeader(event, 'content-disposition', `attachment; filename="${rel.split('/').pop()}"`)
+  setHeader(event, 'cache-control', 'no-store')
+  return buf
+})

package/server/api/workshop/daq/query.get.ts

@@ -0,0 +1,41 @@
+/**
+ * GET /api/workshop/daq/query —— 产线级多节点批量时序查询(数据管理台核心端点)。
+ *
+ * query: line_id? node_ids?(逗号分隔,≤8) from/to(epoch ms) 或 last_minutes;
+ *        bucket_ms?(自动抬升保证 桶数/节点 ≤2000) agg?(avg|min|max,缺省 avg)
+ *        run_id?/recipe_id?/product_id?(打标过滤) include_band?(1=min/max 包络)
+ * 权限:节点/产线 readonly 及以上;并发 ≤2/用户;TTL 缓存按桶宽分档。
+ */
+import { getQuery } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { dataQuery, DataQueryError, activeRunHintOf } from '@/server/services/workshop/eda/data-query'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const num = (k: string): number | undefined => (q[k] != null && String(q[k]).trim() !== '' && !Number.isNaN(Number(q[k])) ? Number(q[k]) : undefined)
+  try {
+    const result = await dataQuery(user, {
+      lineId: q.line_id ? String(q.line_id) : undefined,
+      nodeIds: q.node_ids ? String(q.node_ids).split(',').map(s => s.trim()).filter(Boolean) : undefined,
+      fromMs: num('from'),
+      toMs: num('to'),
+      lastMinutes: num('last_minutes'),
+      bucketMs: num('bucket_ms'),
+      agg: q.agg === 'min' || q.agg === 'max' ? q.agg : 'avg',
+      runId: q.run_id ? String(q.run_id) : undefined,
+      recipeId: q.recipe_id ? String(q.recipe_id) : undefined,
+      productId: q.product_id ? String(q.product_id) : undefined,
+      includeBand: String(q.include_band ?? '') === '1',
+    })
+    return { ...result, activeRun: activeRunHintOf(result.lineId) }
+  }
+  catch (err) {
+    if (err instanceof DataQueryError) {
+      throw new AppError(err.status, err.code as never, err.message)
+    }
+    throw err
+  }
+})

package/server/api/workshop/dcw/[id].delete.ts

@@ -8,7 +8,7 @@ import { defineApiHandler } from '@/server/utils/response'
 import { gateDangerous } from '@/server/utils/approval-gate'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
-import { audit } from '@/server/services/workshop/ops/ops'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
   const user = requireRole(event)
@@ -26,8 +26,16 @@ export default defineApiHandler(async (event) => {
     setResponseStatus(event, 202)
     return { pending: true, requestId: gate.requestId }
   }
+  // 删除前取归属产线(remove 后节点不可读),产线日志才能归档到正确产线
+  const node0 = getDcwController().byId(id)
   getDcwController().remove(id)
   // R1:删除写控制节点留痕
-  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'dcw.delete', targetKind: 'dcw-node', targetId: id })
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'dcw.delete', kind: 'line', targetKind: 'dcw-node', targetId: id,
+    lineId: node0?.lineId ?? '',
+    summary: `删除数控节点「${node0?.name ?? id}」${node0?.lineId ? `(产线 ${node0.lineId})` : ''}`,
+    detail: { name: node0?.name ?? '', lineId: node0?.lineId ?? '' },
+  })
   return { deleted: true }
 })

package/server/api/workshop/dcw/[id].patch.ts

@@ -14,6 +14,7 @@ import { defineApiHandler } from '@/server/utils/response'
 import { requireLineMode } from '@/server/services/workshop/permissions'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
@@ -26,5 +27,14 @@ export default defineApiHandler(async (event) => {
   const targetLine = body.lineId !== undefined ? String(body.lineId || '') || null : node0.lineId
   requireLineMode(user, targetLine, 'operate')
   const node = getDcwController().patch(id, body)
+  // 节点参数/落点/量程/启停变更 = 产线可写面变更,必须进产线日志(含跨线迁移)
+  const changed = Object.keys(body)
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'dcw.patch', kind: 'line', targetKind: 'dcw-node', targetId: id,
+    lineId: node.lineId ?? '',
+    summary: `修改数控节点「${node.name}」(${changed.join('/') || '无变更'})${node0.lineId !== node.lineId ? `:产线 ${node0.lineId || '(无)'} → ${node.lineId || '(无)'}` : ''}`,
+    detail: { keys: changed, fromLine: node0.lineId ?? '', toLine: node.lineId ?? '' },
+  })
   return { node: node.toView() }
 })

package/server/api/workshop/dcw/index.post.ts

@@ -8,7 +8,7 @@ import { requireRole } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
-import { audit } from '@/server/services/workshop/ops/ops'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 import { getDcwLineRepo } from '@/server/services/workshop/dcw/dcw-line.repo'
 import { AppError, ErrorCodes } from '@/server/utils/errors'
 
@@ -20,7 +20,13 @@ export default defineApiHandler(async (event) => {
     throw new AppError(400, ErrorCodes.VALIDATION_ERROR, `产线不存在: ${body.lineId}`)
   }
   const node = getDcwController().create(body)
-  // R1:创建写控制节点(获得直写物理设备能力的入口)留痕
-  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'dcw.create', targetKind: 'dcw-node', targetId: node.id, detail: { name: node.name } })
+  // R1:创建写控制节点(获得直写物理设备能力的入口)留痕;归属产线随行,产线日志可检索
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'dcw.create', kind: 'line', targetKind: 'dcw-node', targetId: node.id,
+    lineId: node.lineId ?? '',
+    summary: `创建数控节点「${node.name}」${node.lineId ? `(产线 ${node.lineId})` : '(未分配产线)'}`,
+    detail: { name: node.name, lineId: node.lineId ?? '' },
+  })
   return { node: node.toView() }
 })

package/server/api/workshop/dcw/lines/[id].patch.ts

@@ -6,12 +6,23 @@ import { getRouterParam, readBody } from 'h3'
 import { requireRole } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 import type { LineInput } from '#shared/dcw-protocol'
 
 export default defineApiHandler(async (event) => {
   // 权限模型 v3:产线元数据编辑仅 admin(operate 用户可启停/写控,但不能改线)
-  requireRole(event)
+  const user = requireRole(event)
   const id = getRouterParam(event, 'id')!
   const body = await readBody<Partial<LineInput>>(event) ?? {}
-  return { line: getDcwController().updateLine(id, body) }
+  const line = getDcwController().updateLine(id, body)
+  // 改线名/描述/控制模式总闸都是产线域变更(controlMode 直接改变人工审批闸门)
+  const changed = Object.keys(body)
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'line.update', kind: 'line', targetKind: 'line', targetId: id,
+    lineId: id,
+    summary: `编辑产线「${line.name}」(${changed.join('/') || '无变更'})`,
+    detail: { keys: changed },
+  })
+  return { line }
 })

package/server/api/workshop/dcw/recipes/[id]/apply.post.ts

@@ -36,7 +36,8 @@ export default defineApiHandler(async (event) => {
     targetKind: 'recipe',
     targetId: id,
     summary: `一键下发配方批次 ${((run as { id?: string }).id ?? '')},逐参数写命令已执行`,
-    productId: (run as { productId?: string }).productId ?? '',
+    lineId: recipe?.lineId ?? '',
+    productId: (run as { productId?: string }).productId ?? recipe?.productId ?? '',
     recipeId: id,
     detail: { runId: (run as { id?: string }).id },
   })

package/server/api/workshop/dcw/recipes/[id]/mark-good.post.ts

@@ -8,7 +8,7 @@ import { requireLineMode } from '@/server/services/workshop/permissions'
 import { defineApiHandler } from '@/server/utils/response'
 import { AppError, ErrorCodes } from '@/server/utils/errors'
 import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
-import { audit } from '@/server/services/workshop/ops/ops'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
@@ -20,6 +20,19 @@ export default defineApiHandler(async (event) => {
   if (!body.runId)
     throw new AppError(400, ErrorCodes.VALIDATION_ERROR, 'runId 必填')
   const updated = getDcwRecipeRepo().markGood(id, String(body.runId))
-  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'recipe.mark-good', targetKind: 'recipe', targetId: id, detail: { runId: body.runId } })
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'recipe.mark-good',
+    kind: 'recipe',
+    targetKind: 'recipe',
+    targetId: id,
+    lineId: updated.lineId ?? '',
+    productId: updated.productId ?? '',
+    recipeId: id,
+    summary: `标记配方「${updated.name}」已知良好批次 ${String(body.runId).slice(0, 8)}`,
+    detail: { runId: body.runId },
+  })
   return { recipe: updated }
 })

package/server/api/workshop/dcw/recipes/[id]/rollback-good.post.ts

@@ -8,7 +8,7 @@ import { defineApiHandler } from '@/server/utils/response'
 import { bindDcwBroadcast, getDcwController } from '@/server/services/workshop/dcw/dcw-controller'
 import { broadcastSceneEvent } from '@/server/services/workshop/scene-events'
 import { getRecipeRollBackManager } from '@/server/services/workshop/dcw/recipe-rollback-manager'
-import { audit } from '@/server/services/workshop/ops/ops'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
@@ -18,6 +18,19 @@ export default defineApiHandler(async (event) => {
   const recipe = getDcwController().listRecipes().find(r => r.id === id)
   requireLineMode(user, recipe?.lineId, 'operate')
   const outcomes = await getRecipeRollBackManager().rollbackRecipeGood(id, user.id)
-  audit({ actor: user.id, actorName: user.name, actorKind: 'user', action: 'recipe.rollback-good', targetKind: 'recipe', targetId: id, detail: { outcomes } })
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'recipe.rollback-good',
+    kind: 'recipe',
+    targetKind: 'recipe',
+    targetId: id,
+    lineId: recipe?.lineId ?? '',
+    productId: recipe?.productId ?? '',
+    recipeId: id,
+    summary: `按已知良好批次恢复配方「${recipe?.name ?? id}」(${outcomes.filter(o => o.ok).length}/${outcomes.length} 参数成功)`,
+    detail: { outcomes },
+  })
   return { outcomes }
 })

package/server/api/workshop/dcw/recipes/[id].delete.ts

@@ -5,10 +5,21 @@ import { getRouterParam } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
 import { defineApiHandler } from '@/server/utils/response'
 import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 
 export default defineApiHandler(async (event) => {
-  resolveUser(event)
+  const user = resolveUser(event)
   const id = getRouterParam(event, 'id') ?? ''
+  // 删除前取归属维度(remove 后不可读),产线日志按线/配方归档
+  const recipe = getDcwRecipeRepo().byId(id)
   getDcwRecipeRepo().remove(id)
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'recipe.delete', kind: 'recipe', targetKind: 'recipe', targetId: id,
+    lineId: recipe?.lineId ?? '',
+    productId: recipe?.productId ?? '',
+    recipeId: id,
+    summary: `删除配方「${recipe?.name ?? id}」${recipe?.lineId ? `(产线 ${recipe.lineId})` : ''}`,
+  })
   return { deleted: true }
 })

package/server/api/workshop/dcw/recipes/index.post.ts

@@ -9,19 +9,30 @@ import { defineApiHandler } from '@/server/utils/response'
 import { requireLineMode } from '@/server/services/workshop/permissions'
 import { getDcwRecipeRepo } from '@/server/services/workshop/dcw/dcw-recipe.repo'
 import { getDcwProductRepo } from '@/server/services/workshop/dcw/dcw-product.repo'
+import { recordOps } from '@/server/services/workshop/ops/ops'
 import { AppError, ErrorCodes } from '@/server/utils/errors'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
   const body = await readBody<RecipeInput>(event) ?? { name: '' }
+  let lineId = ''
   if (body.productId) {
     const product = getDcwProductRepo().byId(body.productId)
     if (!product) throw new AppError(404, ErrorCodes.NOT_FOUND, `产品不存在: ${body.productId}`)
     requireLineMode(user, product.lineId, 'operate')
+    lineId = product.lineId
   }
   else {
     requireRole(event)
   }
   const recipe = getDcwRecipeRepo().create(body)
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'recipe.create', kind: 'recipe', targetKind: 'recipe', targetId: recipe.id,
+    lineId: recipe.lineId ?? lineId,
+    productId: recipe.productId ?? body.productId ?? '',
+    recipeId: recipe.id,
+    summary: `创建配方「${recipe.name}」${(recipe.lineId ?? lineId) ? `(产线 ${recipe.lineId ?? lineId})` : '(未分配产线)'}`,
+  })
   return { recipe }
 })

package/server/api/workshop/eda/charts/[id].delete.ts

@@ -0,0 +1,23 @@
+/**
+ * DELETE /api/workshop/eda/charts/:id —— 删除(owner/admin;级联清看板关联)。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { deleteChart } from '@/server/services/workshop/eda/chart-repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  try {
+    const ok = deleteChart(user, id)
+    if (!ok) throw new AppError(404, 'NOT_FOUND' as never, `图表不存在: ${id}`)
+    return { deleted: true }
+  }
+  catch (err) {
+    const msg = err instanceof Error ? err.message : String(err)
+    if (/仅 owner/.test(msg)) throw new AppError(403, 'SCOPE_VIOLATION' as never, msg)
+    throw err
+  }
+})

package/server/api/workshop/eda/charts/[id].get.ts

@@ -0,0 +1,16 @@
+/**
+ * GET /api/workshop/eda/charts/:id —— 单图(B4:private 仅 owner/admin;line 需产线可读)。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { chartById } from '@/server/services/workshop/eda/chart-repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const chart = chartById(user, id)
+  if (!chart) throw new AppError(404, 'NOT_FOUND' as never, `图表不存在或不可见: ${id}`)
+  return { chart }
+})

package/server/api/workshop/eda/charts/[id].patch.ts

@@ -0,0 +1,33 @@
+/**
+ * PATCH /api/workshop/eda/charts/:id —— 更新(owner/admin;version 自增)。
+ */
+import { readBody, getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { updateChart } from '@/server/services/workshop/eda/chart-repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id') ?? ''
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  try {
+    const chart = updateChart(user, id, {
+      title: body.title == null ? undefined : String(body.title).trim().slice(0, 200),
+      vizType: body.viz_type == null ? undefined : String(body.viz_type),
+      datasource: body.datasource as Record<string, unknown> | undefined,
+      encoding: body.encoding as Record<string, unknown> | undefined,
+      transform: body.transform as Record<string, unknown> | undefined,
+      options: body.options as Record<string, unknown> | undefined,
+      annotations: body.annotations as unknown[] | undefined,
+      lineId: body.line_id === undefined ? undefined : (body.line_id ? String(body.line_id) : null),
+      visibility: body.visibility == null ? undefined : String(body.visibility),
+    })
+    return { chart }
+  }
+  catch (err) {
+    const msg = err instanceof Error ? err.message : String(err)
+    const status = /仅 owner/.test(msg) ? 403 : /不存在/.test(msg) ? 404 : 400
+    throw new AppError(status, 'VALIDATION_ERROR' as never, msg)
+  }
+})

package/server/api/workshop/eda/charts/index.get.ts

@@ -0,0 +1,19 @@
+/**
+ * GET /api/workshop/eda/charts —— 图表清单(B4 可见性:owner∪产线可读)。
+ * query: line_id? mine?(1=只看我的) limit?
+ */
+import { getQuery } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { listChartsFor } from '@/server/services/workshop/eda/chart-repo'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const q = getQuery(event)
+  const charts = listChartsFor(user, {
+    lineId: q.line_id ? String(q.line_id) : undefined,
+    mine: String(q.mine ?? '') === '1',
+    limit: Number(q.limit) || 100,
+  })
+  return { charts, count: charts.length }
+})