agentworkshop 0.7.66 → 0.7.70

package/server/services/workshop/db/database/schema.ts

@@ -263,7 +263,8 @@ CREATE TABLE IF NOT EXISTS audit_log (
   recipe_id   TEXT NOT NULL DEFAULT '',
   kind        TEXT NOT NULL DEFAULT '',     -- write|manual|alarm|line|recipe|rollback|daq|system
   summary     TEXT NOT NULL DEFAULT '',
-  level       TEXT NOT NULL DEFAULT 'info'  -- 严重级:info|warn|error(写控 ACK 鉴定;2026-10-08)
+  level       TEXT NOT NULL DEFAULT 'info', -- 严重级:info|warn|error(写控 ACK 鉴定;2026-10-08)
+  scope       TEXT NOT NULL DEFAULT 'system' -- 显式域标识:line(产线域,必须有 line_id)|system(全局审计)
 );
 CREATE INDEX IF NOT EXISTS idx_audit_log_at ON audit_log(at DESC);
 -- v14:高危管理操作双人复核(R3:maker-checker;config 开关默认关)
@@ -779,7 +780,46 @@ CREATE TABLE IF NOT EXISTS analysis_reports (
   updated_by_name TEXT NOT NULL DEFAULT ''
 );
 CREATE INDEX IF NOT EXISTS idx_analysis_reports_line ON analysis_reports(line_id, created_at DESC);
-CREATE INDEX IF NOT EXISTS idx_analysis_reports_recipe ON analysis_reports(recipe_id);`
+CREATE INDEX IF NOT EXISTS idx_analysis_reports_recipe ON analysis_reports(recipe_id);
+
+-- v28: 工具目录 + Channel 级工具治理(2026-10-20)
+-- tool_registry 是内置/插件工具定义的元数据快照;执行代码仍在 host-tools.json / 插件进程里。
+CREATE TABLE IF NOT EXISTS tool_registry (
+  name             TEXT PRIMARY KEY,
+  source           TEXT NOT NULL,                 -- 'builtin' | 'plugin'
+  plugin_name      TEXT NOT NULL DEFAULT '',
+  plugin_scope     TEXT NOT NULL DEFAULT '',      -- 'builtin' | 'project' | 'user'
+  label            TEXT NOT NULL DEFAULT '',
+  description      TEXT NOT NULL DEFAULT '',
+  parameters_json  TEXT NOT NULL DEFAULT '{}',
+  roles_json       TEXT NOT NULL DEFAULT '["lead","worker"]',
+  group_name       TEXT NOT NULL DEFAULT '',
+  metadata_json    TEXT NOT NULL DEFAULT '{}',
+  definition_hash  TEXT NOT NULL DEFAULT '',
+  available        INTEGER NOT NULL DEFAULT 1,
+  first_seen_at    TEXT NOT NULL,
+  last_seen_at     TEXT NOT NULL,
+  updated_at       TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_source ON tool_registry(source, available);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_plugin ON tool_registry(plugin_name);
+
+CREATE TABLE IF NOT EXISTS channel_tool_policies (
+  channel_id   TEXT PRIMARY KEY,
+  mode         TEXT NOT NULL DEFAULT 'all',       -- 'all' | 'selected'
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS channel_tool_settings (
+  channel_id   TEXT NOT NULL,
+  tool_name    TEXT NOT NULL,
+  enabled      INTEGER NOT NULL DEFAULT 1,
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL,
+  PRIMARY KEY (channel_id, tool_name)
+);
+CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled);`
 
 // ===== 默认种子数据(首轮初始化注入;owner NULL = 公共资源,所有登录用户只读共享) =====
 

package/server/services/workshop/db/ops.repo.ts

@@ -178,33 +178,54 @@ export interface AuditEntry {
   summary?: string
   /** 严重级(2026-10-08 写控 ACK 鉴定):info 缺省 / warn(未证实) / error(写入失败);日志页红黄标 */
   level?: 'info' | 'warn' | 'error'
+  /** 显式域标识:line(产线域)| system(全局审计);缺省按 lineId 推导,line 无 lineId 时 fail-closed 降级 system */
+  scope?: 'line' | 'system'
+}
+
+/**
+ * 域标识归一(写入侧单一事实源):显式 scope 优先;缺省按 lineId 推导;
+ * scope=line 但无 lineId → fail-closed 降级 system。recordOps 与仓储 append 共用。
+ */
+export function normalizeAuditScope(lineId: string | null | undefined, requested?: 'line' | 'system'): 'line' | 'system' {
+  const anchor = String(lineId ?? '').trim()
+  const scope = requested ?? (anchor ? 'line' : 'system')
+  return scope === 'line' && !anchor ? 'system' : scope
 }
 
 const AUDIT_COLS = `id, actor, actor_name AS actorName, actor_kind AS actorKind, action,
   target_kind AS targetKind, target_id AS targetId, detail_json AS detailJson, at,
-  line_id AS lineId, product_id AS productId, recipe_id AS recipeId, kind, summary, level`
+  line_id AS lineId, product_id AS productId, recipe_id AS recipeId, kind, summary, level, scope`
 
 export function createAuditRepo(db: DatabaseSync) {
   const insertStmt = db.prepare(
     `INSERT INTO audit_log (actor, actor_name, actor_kind, action, target_kind, target_id, detail_json, at,
-       line_id, product_id, recipe_id, kind, summary, level)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+       line_id, product_id, recipe_id, kind, summary, level, scope)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
   )
   const stmtCache = new Map<string, ReturnType<DatabaseSync['prepare']>>()
 
   return {
     append(e: AuditEntry): void {
+      const lineId = String(e.lineId ?? '').trim()
+      // 不变量:line 域必须有产线锚点;缺锚点降级 system,避免无归属行混入产线日志
+      const scope = normalizeAuditScope(lineId, e.scope)
       insertStmt.run(
         e.actor, e.actorName ?? '', e.actorKind ?? 'user', e.action,
         e.targetKind ?? '', e.targetId ?? '', JSON.stringify(e.detail ?? {}),
         e.at ?? new Date().toISOString(),
-        e.lineId ?? '', e.productId ?? '', e.recipeId ?? '', e.kind ?? '', e.summary ?? '', e.level ?? 'info',
+        lineId, e.productId ?? '', e.recipeId ?? '', e.kind ?? '', e.summary ?? '', e.level ?? 'info', scope,
       )
     },
     query(opts: {
       actor?: string
       targetId?: string
       action?: string
+      /** 动作前缀(如 recipe. / dcw.write.):跨越 kind 归类取同一族事件 */
+      actionPrefix?: string
+      /** 显式域过滤:line=产线日志 / system=全局审计;省略=全部 */
+      scope?: 'line' | 'system'
+      /** @deprecated 兼容旧调用:等价于 scope='line' */
+      lineOnly?: boolean
       lineId?: string
       productId?: string
       recipeId?: string
@@ -218,6 +239,13 @@ export function createAuditRepo(db: DatabaseSync) {
     }): Array<Record<string, unknown>> {
       const where: string[] = []
       const args: SQLInputValue[] = []
+      if (opts.scope) {
+        where.push('scope = ?')
+        args.push(opts.scope)
+      }
+      else if (opts.lineOnly) {
+        where.push('scope = \'line\'')
+      }
       if (opts.actor) {
         where.push('actor = ?')
         args.push(opts.actor)
@@ -230,6 +258,10 @@ export function createAuditRepo(db: DatabaseSync) {
         where.push('action = ?')
         args.push(opts.action)
       }
+      if (opts.actionPrefix) {
+        where.push('action LIKE ? ESCAPE \'\\\'')
+        args.push(`${opts.actionPrefix.replace(/[\\%_]/g, m => `\\${m}`)}%`)
+      }
       if (opts.lineId) {
         where.push('line_id = ?')
         args.push(opts.lineId)
@@ -260,22 +292,25 @@ export function createAuditRepo(db: DatabaseSync) {
         args.push(like, like, like, like)
       }
       if (opts.from) {
-        where.push('at >= ?')
+        // 用 julianday 比较绝对时刻:at 是带偏移的本地 ISO,跨时区历史行不能按字符串比大小
+        where.push('julianday(at) >= julianday(?)')
         args.push(opts.from)
       }
       if (opts.to) {
-        where.push('at <= ?')
+        where.push('julianday(at) <= julianday(?)')
         args.push(opts.to)
       }
       const key = `${where.join('|')}`
       let stmt = stmtCache.get(key)
       if (!stmt) {
         const sql = `SELECT ${AUDIT_COLS}
-          FROM audit_log ${where.length ? `WHERE ${where.join(' AND ')}` : ''} ORDER BY at DESC LIMIT ?`
+          FROM audit_log ${where.length ? `WHERE ${where.join(' AND ')}` : ''} ORDER BY julianday(at) DESC, id DESC LIMIT ?`
         stmt = db.prepare(sql)
         stmtCache.set(key, stmt)
       }
-      return stmt.all(...args, (opts.limit ?? 200) as SQLInputValue) as Array<Record<string, unknown>>
+      // limit 在仓储层再收一次口:调用方漏校验时也不产生负数/超大结果集
+      const limit = Math.max(1, Math.min(1000, Number(opts.limit) || 200))
+      return stmt.all(...args, limit as SQLInputValue) as Array<Record<string, unknown>>
     },
   }
 }

package/server/services/workshop/db/schema.sql

@@ -389,3 +389,41 @@ CREATE TABLE IF NOT EXISTS analysis_reports (
 );
 CREATE INDEX IF NOT EXISTS idx_analysis_reports_line ON analysis_reports(line_id, created_at DESC);
 CREATE INDEX IF NOT EXISTS idx_analysis_reports_recipe ON analysis_reports(recipe_id);
+
+-- v28: 工具目录 + Channel 级工具治理(2026-10-20)
+CREATE TABLE IF NOT EXISTS tool_registry (
+  name             TEXT PRIMARY KEY,
+  source           TEXT NOT NULL,
+  plugin_name      TEXT NOT NULL DEFAULT '',
+  plugin_scope     TEXT NOT NULL DEFAULT '',
+  label            TEXT NOT NULL DEFAULT '',
+  description      TEXT NOT NULL DEFAULT '',
+  parameters_json  TEXT NOT NULL DEFAULT '{}',
+  roles_json       TEXT NOT NULL DEFAULT '["lead","worker"]',
+  group_name       TEXT NOT NULL DEFAULT '',
+  metadata_json    TEXT NOT NULL DEFAULT '{}',
+  definition_hash  TEXT NOT NULL DEFAULT '',
+  available        INTEGER NOT NULL DEFAULT 1,
+  first_seen_at    TEXT NOT NULL,
+  last_seen_at     TEXT NOT NULL,
+  updated_at       TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_source ON tool_registry(source, available);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_plugin ON tool_registry(plugin_name);
+
+CREATE TABLE IF NOT EXISTS channel_tool_policies (
+  channel_id   TEXT PRIMARY KEY,
+  mode         TEXT NOT NULL DEFAULT 'all',
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS channel_tool_settings (
+  channel_id   TEXT NOT NULL,
+  tool_name    TEXT NOT NULL,
+  enabled      INTEGER NOT NULL DEFAULT 1,
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL,
+  PRIMARY KEY (channel_id, tool_name)
+);
+CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled);

package/server/services/workshop/db/tool-registry.repo.ts

@@ -0,0 +1,395 @@
+/**
+ * ToolRegistry 仓储:工具目录 + Channel 级工具策略。
+ *
+ * 三张表:
+ *  - tool_registry          内置 + 插件注册工具的元数据快照(执行代码不入库)
+ *  - channel_tool_policies  Channel 选择模式(all | selected)
+ *  - channel_tool_settings  Channel × 工具显式选择行
+ *
+ * 语义:
+ *  - 无 policy 行 = mode='all' + 无显式行 = 全部合格工具启用(向后兼容);
+ *  - all 模式只存 enabled=0 的行(deny-list);
+ *  - selected 模式按提交的全量视图存行(allow-list;缺行=不启用)。
+ *
+ * 与 channel_plugins.repo.ts 同模式:自持连接、无外键、删除 Channel 时由 manager 显式清理。
+ * 所有外部输入一律走 prepared statement 参数绑定;动态 IN 只拼占位符。
+ */
+import { DatabaseSync } from 'node:sqlite'
+import { join } from 'node:path'
+import { ensureDataDir } from '@/shared/config/home.mjs'
+
+const DB_PATH = join(ensureDataDir(), 'workshop.sqlite')
+
+let db: DatabaseSync | null = null
+
+function ensureSchema(d: DatabaseSync): void {
+  d.prepare(`CREATE TABLE IF NOT EXISTS tool_registry (
+    name             TEXT PRIMARY KEY,
+    source           TEXT NOT NULL,
+    plugin_name      TEXT NOT NULL DEFAULT '',
+    plugin_scope     TEXT NOT NULL DEFAULT '',
+    label            TEXT NOT NULL DEFAULT '',
+    description      TEXT NOT NULL DEFAULT '',
+    parameters_json  TEXT NOT NULL DEFAULT '{}',
+    roles_json       TEXT NOT NULL DEFAULT '["lead","worker"]',
+    group_name       TEXT NOT NULL DEFAULT '',
+    metadata_json    TEXT NOT NULL DEFAULT '{}',
+    definition_hash  TEXT NOT NULL DEFAULT '',
+    available        INTEGER NOT NULL DEFAULT 1,
+    first_seen_at    TEXT NOT NULL,
+    last_seen_at     TEXT NOT NULL,
+    updated_at       TEXT NOT NULL
+  )`).run()
+  d.prepare('CREATE INDEX IF NOT EXISTS idx_tool_registry_source ON tool_registry(source, available)').run()
+  d.prepare('CREATE INDEX IF NOT EXISTS idx_tool_registry_plugin ON tool_registry(plugin_name)').run()
+  d.prepare(`CREATE TABLE IF NOT EXISTS channel_tool_policies (
+    channel_id   TEXT PRIMARY KEY,
+    mode         TEXT NOT NULL DEFAULT 'all',
+    updated_by   TEXT NOT NULL DEFAULT '',
+    updated_at   TEXT NOT NULL
+  )`).run()
+  d.prepare(`CREATE TABLE IF NOT EXISTS channel_tool_settings (
+    channel_id   TEXT NOT NULL,
+    tool_name    TEXT NOT NULL,
+    enabled      INTEGER NOT NULL DEFAULT 1,
+    updated_by   TEXT NOT NULL DEFAULT '',
+    updated_at   TEXT NOT NULL,
+    PRIMARY KEY (channel_id, tool_name)
+  )`).run()
+  d.prepare('CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled)').run()
+}
+
+function getDb(): DatabaseSync {
+  if (!db) {
+    db = new DatabaseSync(DB_PATH)
+    db.prepare('PRAGMA busy_timeout=4000').run()
+    ensureSchema(db)
+  }
+  return db
+}
+
+export type ToolSource = 'builtin' | 'plugin'
+export type ToolPolicyMode = 'all' | 'selected'
+export type ToolRole = 'lead' | 'worker'
+
+export interface ToolRegistryRow {
+  name: string
+  source: ToolSource
+  pluginName: string
+  pluginScope: string
+  label: string
+  description: string
+  parameters: Record<string, unknown>
+  roles: ToolRole[]
+  group: string
+  metadata: Record<string, unknown>
+  definitionHash: string
+  available: boolean
+  firstSeenAt: string
+  lastSeenAt: string
+  updatedAt: string
+}
+
+export interface ToolRegistryUpsert {
+  name: string
+  source: ToolSource
+  pluginName?: string
+  pluginScope?: string
+  label?: string
+  description: string
+  parameters?: Record<string, unknown>
+  roles?: ToolRole[]
+  group?: string
+  metadata?: Record<string, unknown>
+  definitionHash: string
+}
+
+export interface ChannelToolPolicySnapshot {
+  channelId: string
+  mode: ToolPolicyMode
+  source: 'default' | 'explicit'
+  updatedBy: string
+  updatedAt: string | null
+  /** 显式行:all 模式只有 enabled=0 的行有意义;selected 模式 enabled=1 为选中 */
+  settings: Map<string, boolean>
+}
+
+export interface ChannelToolPolicyEntry {
+  name: string
+  enabled: boolean
+}
+
+interface RegistryDbRow {
+  name: string
+  source: string
+  plugin_name: string
+  plugin_scope: string
+  label: string
+  description: string
+  parameters_json: string
+  roles_json: string
+  group_name: string
+  metadata_json: string
+  definition_hash: string
+  available: number
+  first_seen_at: string
+  last_seen_at: string
+  updated_at: string
+}
+
+function parseJsonObject(text: unknown): Record<string, unknown> {
+  try {
+    const parsed = JSON.parse(String(text ?? '{}'))
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed as Record<string, unknown> : {}
+  }
+  catch {
+    return {}
+  }
+}
+
+function parseRoles(text: unknown): ToolRole[] {
+  try {
+    const parsed = JSON.parse(String(text ?? '[]'))
+    if (!Array.isArray(parsed)) return ['lead', 'worker']
+    const roles = parsed.filter((r): r is ToolRole => r === 'lead' || r === 'worker')
+    return roles.length > 0 ? roles : ['lead', 'worker']
+  }
+  catch {
+    return ['lead', 'worker']
+  }
+}
+
+function rowToRegistry(row: RegistryDbRow): ToolRegistryRow {
+  return {
+    name: row.name,
+    source: row.source === 'plugin' ? 'plugin' : 'builtin',
+    pluginName: row.plugin_name,
+    pluginScope: row.plugin_scope,
+    label: row.label,
+    description: row.description,
+    parameters: parseJsonObject(row.parameters_json),
+    roles: parseRoles(row.roles_json),
+    group: row.group_name,
+    metadata: parseJsonObject(row.metadata_json),
+    definitionHash: row.definition_hash,
+    available: row.available === 1,
+    firstSeenAt: row.first_seen_at,
+    lastSeenAt: row.last_seen_at,
+    updatedAt: row.updated_at,
+  }
+}
+
+function placeholders(count: number): string {
+  return Array.from({ length: count }, () => '?').join(',')
+}
+
+export class ToolRegistryRepo {
+  /** 批量 upsert 当前快照;first_seen_at 保留,hash 未变时不推进 updated_at。 */
+  upsertMany(rows: ToolRegistryUpsert[], now = new Date().toISOString()): number {
+    if (rows.length === 0) return 0
+    const d = getDb()
+    const stmt = d.prepare(`INSERT INTO tool_registry (
+      name, source, plugin_name, plugin_scope, label, description, parameters_json, roles_json,
+      group_name, metadata_json, definition_hash, available, first_seen_at, last_seen_at, updated_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 1, ?, ?, ?)
+    ON CONFLICT(name) DO UPDATE SET
+      source = excluded.source,
+      plugin_name = excluded.plugin_name,
+      plugin_scope = excluded.plugin_scope,
+      label = excluded.label,
+      description = excluded.description,
+      parameters_json = excluded.parameters_json,
+      roles_json = excluded.roles_json,
+      group_name = excluded.group_name,
+      metadata_json = excluded.metadata_json,
+      definition_hash = excluded.definition_hash,
+      available = 1,
+      last_seen_at = excluded.last_seen_at,
+      updated_at = CASE
+        WHEN tool_registry.definition_hash <> excluded.definition_hash THEN excluded.updated_at
+        ELSE tool_registry.updated_at
+      END`)
+    d.prepare('BEGIN IMMEDIATE').run()
+    try {
+      for (const row of rows) {
+        stmt.run(
+          row.name,
+          row.source,
+          row.pluginName ?? '',
+          row.pluginScope ?? '',
+          row.label ?? '',
+          row.description ?? '',
+          JSON.stringify(row.parameters ?? {}),
+          JSON.stringify(row.roles && row.roles.length > 0 ? row.roles : ['lead', 'worker']),
+          row.group ?? '',
+          JSON.stringify(row.metadata ?? {}),
+          row.definitionHash,
+          now,
+          now,
+          now,
+        )
+      }
+      d.prepare('COMMIT').run()
+      return rows.length
+    }
+    catch (err) {
+      try {
+        d.prepare('ROLLBACK').run()
+      }
+      catch { /* ignore */ }
+      throw err
+    }
+  }
+
+  /**
+   * 把本轮未出现的工具标记为 unavailable。
+   * names 可能为空(插件全部卸载):此时全部置 0;动态 IN 只拼占位符。
+   */
+  markUnavailableExcept(names: string[]): number {
+    const d = getDb()
+    if (names.length === 0) {
+      return Number(d.prepare('UPDATE tool_registry SET available = 0 WHERE available = 1').run().changes ?? 0)
+    }
+    const sql = `UPDATE tool_registry SET available = 0
+      WHERE available = 1 AND name NOT IN (${placeholders(names.length)})`
+    return Number(d.prepare(sql).run(...names).changes ?? 0)
+  }
+
+  list(): ToolRegistryRow[] {
+    return (getDb().prepare('SELECT * FROM tool_registry ORDER BY source ASC, name ASC').all() as unknown as RegistryDbRow[])
+      .map(rowToRegistry)
+  }
+
+  get(name: string): ToolRegistryRow | null {
+    const row = getDb().prepare('SELECT * FROM tool_registry WHERE name = ?').get(name) as unknown as RegistryDbRow | undefined
+    return row ? rowToRegistry(row) : null
+  }
+
+  counts(): { total: number, builtin: number, plugin: number, available: number } {
+    const row = getDb().prepare(`SELECT
+      COUNT(*) AS total,
+      SUM(CASE WHEN source = 'builtin' THEN 1 ELSE 0 END) AS builtin,
+      SUM(CASE WHEN source = 'plugin' THEN 1 ELSE 0 END) AS plugin,
+      SUM(CASE WHEN available = 1 THEN 1 ELSE 0 END) AS available
+      FROM tool_registry`).get() as { total?: number, builtin?: number, plugin?: number, available?: number } | undefined
+    return {
+      total: Number(row?.total ?? 0),
+      builtin: Number(row?.builtin ?? 0),
+      plugin: Number(row?.plugin ?? 0),
+      available: Number(row?.available ?? 0),
+    }
+  }
+
+  lastSyncedAt(): string | null {
+    const row = getDb().prepare('SELECT MAX(last_seen_at) AS at FROM tool_registry').get() as { at?: string | null } | undefined
+    return row?.at ?? null
+  }
+
+  snapshot(channelId: string): ChannelToolPolicySnapshot {
+    const policy = getDb().prepare('SELECT mode, updated_by, updated_at FROM channel_tool_policies WHERE channel_id = ?')
+      .get(channelId) as { mode?: string, updated_by?: string, updated_at?: string } | undefined
+    const rows = getDb().prepare('SELECT tool_name, enabled FROM channel_tool_settings WHERE channel_id = ?')
+      .all(channelId) as Array<{ tool_name: string, enabled: number }>
+    const mode: ToolPolicyMode = policy?.mode === 'selected' ? 'selected' : 'all'
+    return {
+      channelId,
+      mode,
+      source: policy || rows.length > 0 ? 'explicit' : 'default',
+      updatedBy: policy?.updated_by ?? '',
+      updatedAt: policy?.updated_at ?? null,
+      settings: new Map(rows.map(r => [r.tool_name, r.enabled === 1])),
+    }
+  }
+
+  /** 全量替换 Channel 策略。all 模式只落 enabled=0;selected 模式落全部提交行。 */
+  savePolicy(channelId: string, mode: ToolPolicyMode, entries: ChannelToolPolicyEntry[], updatedBy: string): void {
+    const d = getDb()
+    const now = new Date().toISOString()
+    const rows = mode === 'all'
+      ? entries.filter(e => e.enabled === false)
+      : entries
+    d.prepare('BEGIN IMMEDIATE').run()
+    try {
+      d.prepare(`INSERT INTO channel_tool_policies (channel_id, mode, updated_by, updated_at)
+        VALUES (?, ?, ?, ?)
+        ON CONFLICT(channel_id) DO UPDATE SET mode = excluded.mode, updated_by = excluded.updated_by, updated_at = excluded.updated_at`)
+        .run(channelId, mode, updatedBy, now)
+      d.prepare('DELETE FROM channel_tool_settings WHERE channel_id = ?').run(channelId)
+      const ins = d.prepare(`INSERT INTO channel_tool_settings (channel_id, tool_name, enabled, updated_by, updated_at)
+        VALUES (?, ?, ?, ?, ?)`)
+      for (const entry of rows) {
+        ins.run(channelId, entry.name, entry.enabled ? 1 : 0, updatedBy, now)
+      }
+      d.prepare('COMMIT').run()
+    }
+    catch (err) {
+      try {
+        d.prepare('ROLLBACK').run()
+      }
+      catch { /* ignore */ }
+      throw err
+    }
+  }
+
+  resetPolicy(channelId: string): void {
+    const d = getDb()
+    d.prepare('BEGIN IMMEDIATE').run()
+    try {
+      d.prepare('DELETE FROM channel_tool_settings WHERE channel_id = ?').run(channelId)
+      d.prepare('DELETE FROM channel_tool_policies WHERE channel_id = ?').run(channelId)
+      d.prepare('COMMIT').run()
+    }
+    catch (err) {
+      try {
+        d.prepare('ROLLBACK').run()
+      }
+      catch { /* ignore */ }
+      throw err
+    }
+  }
+
+  removeForChannel(channelId: string): void {
+    this.resetPolicy(channelId)
+  }
+
+  /** 全部显式策略(全局透明化页统计用) */
+  listPolicies(): Array<{ channelId: string, mode: ToolPolicyMode, updatedBy: string, updatedAt: string }> {
+    const rows = getDb().prepare('SELECT channel_id, mode, updated_by, updated_at FROM channel_tool_policies')
+      .all() as Array<{ channel_id: string, mode: string, updated_by: string, updated_at: string }>
+    return rows.map(r => ({
+      channelId: r.channel_id,
+      mode: r.mode === 'selected' ? 'selected' : 'all',
+      updatedBy: r.updated_by,
+      updatedAt: r.updated_at,
+    }))
+  }
+
+  listAllSettings(): Array<{ channelId: string, toolName: string, enabled: boolean }> {
+    const rows = getDb().prepare('SELECT channel_id, tool_name, enabled FROM channel_tool_settings')
+      .all() as Array<{ channel_id: string, tool_name: string, enabled: number }>
+    return rows.map(r => ({ channelId: r.channel_id, toolName: r.tool_name, enabled: r.enabled === 1 }))
+  }
+
+  /** Channel 名称映射(全局页展示“被哪些 Channel 停用”;不存在/已删的悬挂 id 返回空名) */
+  channelNames(): Map<string, string> {
+    const rows = getDb().prepare('SELECT id, name FROM channels').all() as Array<{ id: string, name: string }>
+    return new Map(rows.map(r => [r.id, r.name]))
+  }
+}
+
+let repo: ToolRegistryRepo | null = null
+
+export function getToolRegistryRepo(): ToolRegistryRepo {
+  repo ??= new ToolRegistryRepo()
+  return repo
+}
+
+/** 单测用:关闭连接并重置单例(隔离临时 AW_HOME 时调用) */
+export function closeToolRegistryRepoForTests(): void {
+  try {
+    db?.close()
+  }
+  catch { /* ignore */ }
+  db = null
+  repo = null
+}

package/server/services/workshop/dcw/dcw-controller/recipes.ts

@@ -14,6 +14,22 @@ import { summarizeAck, verifyRecipeWrite } from './write-verify'
 import { writeTolerance } from '../dcw-runtime'
 import { notifyLineOperators } from '../../runtime/line-notify'
 
+/**
+ * 试验节拍 env 解析(显式 0 = 关闭;空/非法 = 默认 5 分钟)。
+ * 独立导出供单测锁定「0 不能被 falsy 默认值翻回 5 分钟」。
+ */
+export function resolveTrialIntervalMs(raw: string | undefined): number {
+  if (raw == null || String(raw).trim() === '') return 5 * 60_000
+  const n = Number(raw)
+  if (!Number.isFinite(n)) return 5 * 60_000
+  if (n === 0) {
+    // 显式关闭防震荡节拍:允许测试/基准,但生产误设 0 必须留下启动告警
+    console.warn('[dcw] AW_TRIAL_INTERVAL_MS=0:试验防震荡节拍已关闭(仅用于测试/基准;生产环境请勿设置)')
+    return 0
+  }
+  return Math.max(0, n)
+}
+
 export abstract class DcwControllerRecipes extends DcwControllerParams {
   listRecipes() {
     return getDcwRecipeRepo().list()
@@ -139,7 +155,7 @@ export abstract class DcwControllerRecipes extends DcwControllerParams {
 
   /** v19 试验节拍:同产线两次 trial 的最小间隔(防连发震荡;env 可调)。
    *  P1-5 落盘:重启读盘续算(防"重启即绕试验节拍")。 */
-  private static readonly TRIAL_INTERVAL_MS = Math.max(0, Number(process.env.AW_TRIAL_INTERVAL_MS) || 5 * 60_000)
+  private static readonly TRIAL_INTERVAL_MS = resolveTrialIntervalMs(process.env.AW_TRIAL_INTERVAL_MS)
   private trialLastAt = new Map<string, number>(
     Object.entries(hydrateTrialLastAt()).map(([k, v]) => [k, Number(v)]),
   )
@@ -210,6 +226,7 @@ export abstract class DcwControllerRecipes extends DcwControllerParams {
         targetId: recipeId,
         recipeId,
         lineId: recipe.lineId ?? '',
+        productId: recipe.productId ?? '',
         level,
         summary: `批次 ${run.id.slice(0, 8)} ACK 鉴定:证实 ${acks.verified}/${acks.total},未证实 ${acks.unverified},失败 ${acks.failed}${level === 'error' ? '(存在写入失败)' : level === 'warn' ? '(部分参数仅链路受理,设备侧未证实)' : ''}`,
         detail: { runId: run.id, ackSummary: acks, trial: opts.trial === true, agentDispatch: opts.agentDispatch === true },

package/server/services/workshop/dcw/dcw-controller/write.ts

@@ -12,6 +12,7 @@ import { requireDcwDriverKind, resolveDcwDriver } from '../drivers'
 import { recordDcwWriteOps } from './write-audit'
 import { setWriteLockUntil } from './gate-persist'
 import { recordOps } from '../../ops/ops'
+import { getActiveLineRun } from '../line-run'
 
 // ================================================================
 // 只读预检谓词(产线 Co-Pilot P2:recipe_propose 整包方案的预审批校验)
@@ -74,9 +75,12 @@ export abstract class DcwControllerWrite extends DcwControllerBindings {
     // 安全审计需要"谁在何时试图把参数写到哪、被哪条防线拦下";给调用方的反馈由错误消息承担。
     const reject = (err: AppError): never => {
       try {
+        const runNow = getActiveLineRun(node.lineId)
         recordOps({
           actor: meta?.actor ?? 'system', actorName: meta?.actorName ?? '', actorKind: meta?.source === 'agent' ? 'agent' : (meta?.source === 'manual' ? 'user' : 'system'),
           action: 'dcw.write.rejected', kind: 'write', targetKind: 'dcw', targetId: id, lineId: node.lineId,
+          productId: runNow?.productId ?? '',
+          recipeId: runNow?.recipeId ?? recipeRunId ?? '',
           summary: `设定 ${eng}${node.unit || ''} 被拒:${err.message}`,
         })
       }