agentworkshop 0.7.66 → 0.7.71

package/scripts/onboarding/sim-twin.mjs

@@ -14,15 +14,20 @@
  *
  * 蓝图 JSON 形状(模式 B;devices[] 同模式 A 的内部设备模型):
  * { "simPort": 4034, "shadowDir": "..", "mqttPort": 41830?,
- *   "devices": [ { "id":"wb-machine", "name":"键合主机", "protocol":"modbus-tcp"|"modbus-rtu"|"mqtt",
- *                  "port": 37532?, "unitId": 1?,
+ *   "devices": [ { "id":"wb-machine", "name":"键合主机",
+ *                  "protocol":"modbus-tcp"|"modbus-rtu"|"mqtt"|"opcua"|"http",
+ *                  "port": 37532?, "unitId": 1?, "config": { ...协议覆盖... }?,
  *                  "signals": [ { "id":"usPower-sp","name":"超声功率SP","unit":"%","min":20,"max":100,
  *                                 "decimals":0,"kind":"sp","initial":60 },
  *                               { "id":"pullForce-pv","name":"拉力强度","unit":"gf","min":0,"max":120,
- *                                 "decimals":2,"kind":"pv",
+ *                                 "decimals":2,"kind":"pv","format":"scalar"|"vector"|"image",
+ *                                 "code":"返回 number / {points} / {png} 的 hook 函数体"?,
  *                                 "dynamics":{ "base":18,"tau":8,"noise":1.1,
  *                                              "follows":[{"sp":"超声功率SP","gain":0.55}] } } ] } ] }
  *
+ * OPC UA 自动生成可写 SP 变量与 ns=2;s=<device>.<signal>;HTTP 自动生成
+ * /sim-http/<device>/api/<signal>(标量/向量/图像),供平台 http DAQ/DCW 驱动直接接入。
+ *
  * 输出(末行 JSON):{simBase, shadowDir, devices:[{id,protocol,port,signals}],
  *   driverSource:"sim-export", next:"对每设备 GET /api/nodes/:id/export 取 driverConfig 喂给 provision-line/onboard"}
  *
@@ -117,6 +122,7 @@ async function ensureSim() {
   if (Number.isInteger(pid) && pid > 0) spawnSync('taskkill', ['/PID', String(pid), '/T', '/F'], { stdio: 'ignore' })
   await sleep(1500)
   process.env.SIM_BASE = SIM
+  process.env.SIM_PORT = String(SIM_PORT)
   process.env.SIM_SHADOW_DIR = SIM_DIR
   const { ensureSimulator } = await import('../../bench/lib/sim.mjs')
   await ensureSimulator({ log: () => {} })
@@ -199,10 +205,13 @@ function fromBlueprint(file) {
     port: d.port,
     unitId: d.unitId ?? 1,
     mqtt: d.mqtt,
+    config: d.config ?? {},
     signals: (d.signals ?? []).map(s => ({
       id: s.id, name: s.name, unit: s.unit ?? '', min: Number(s.min ?? 0), max: Number(s.max ?? 100),
       decimals: s.decimals ?? 2, kind: s.kind ?? (String(s.id).endsWith('-sp') ? 'sp' : 'pv'),
+      format: s.format ?? 'scalar',
       initial: s.initial, code: s.code, dynamics: s.dynamics ?? {},
+      ...(s.strategy ? { strategy: s.strategy } : {}),
     })),
   }))
   return { devices, mqttPort: bp.mqttPort }
@@ -215,7 +224,7 @@ async function materialize(devices, mqttPort) {
   for (const dev of devices) {
     const id = dev.id ?? `twin-${dev.family}-${created.length + 1}`
     const protocol = dev.family
-    const config = {}
+    const config = { ...(dev.config ?? {}) }
     if (protocol === 'modbus-tcp' || protocol === 'modbus-rtu') {
       config.host = '0.0.0.0'
       config.port = dev.port ?? (port += 2)
@@ -223,23 +232,51 @@ async function materialize(devices, mqttPort) {
       config.registerMaps = dev.signals.map((s, i) => ({ address: 40001 + i * 2, area: 'holding', signalId: s.id, dataType: 'float32', byteOrder: 'big' }))
     }
     else if (protocol === 'mqtt') {
-      config.brokerUrl = `mqtt://127.0.0.1:${mqttPort}`
-      config.topics = dev.signals.filter(s => s.kind === 'pv').map(s => ({ topic: `aw/twin/${id}/${s.id}`, signalId: s.id, payloadTemplate: `{"data":{"${s.id}":\${value}}}`, qos: 0 }))
+      config.brokerUrl ??= `mqtt://127.0.0.1:${mqttPort}`
+      config.topics ??= dev.signals.filter(s => s.kind === 'pv').map(s => ({ topic: `aw/twin/${id}/${s.id}`, signalId: s.id, payloadTemplate: `{"data":{"${s.id}":\${value}}}`, qos: 0 }))
       const sp = dev.signals.find(s => s.kind === 'sp')
-      if (sp) {
+      if (sp && !config.commandTopic) {
         config.commandTopic = `aw/twin/${id}/set`
         config.commandSignalId = sp.id
       }
     }
+    else if (protocol === 'opcua') {
+      config.host ??= '127.0.0.1'
+      config.port ??= dev.port ?? (port += 2)
+      config.namespaceUri ??= `urn:aw:twin:${id}`
+      config.opcVars ??= dev.signals.map(s => ({
+        nodeId: `ns=2;s=${id}.${s.id}`,
+        signalId: s.id,
+        dataType: 'Double',
+        writable: s.kind === 'sp',
+      }))
+    }
+    else if (protocol === 'http') {
+      config.paths ??= dev.signals.map(s => ({
+        path: `/api/${s.id}`,
+        signalId: s.id,
+        writable: s.kind === 'sp',
+        responseTemplate: s.format === 'vector'
+          ? '{"points":${points},"value":${value}}'
+          : s.format === 'image'
+            ? '${image}'
+            : '{"value":${value}}',
+      }))
+    }
+    else {
+      throw new Error(`不支持的蓝图协议:${protocol}(支持 modbus-tcp/modbus-rtu/mqtt/opcua/http)`)
+    }
     const nominals = Object.fromEntries(dev.signals.filter(s => s.kind === 'sp').map(s => [s.name, Number(s.initial ?? (s.min + s.max) / 2)]))
     const signals = dev.signals.map(s => ({
       id: s.id, name: s.name, description: `孪生:${s.name}`, unit: s.unit, min: s.min, max: s.max, decimals: s.decimals,
-      strategy: s.kind === 'sp'
-        ? { kind: 'manual', value: s.initial ?? (s.min + s.max) / 2 }
-        : { kind: 'hook', code: s.code
-          ?? (s.dynamics && (s.dynamics.follows?.length || s.dynamics.base != null)
-            ? causalHook(s.dynamics, (s.min + s.max) / 2, nominals)
-            : wanderHook((s.min + s.max) / 2, Math.max((s.max - s.min) / 200, 0.2))) },
+      format: s.format ?? 'scalar',
+      strategy: s.strategy
+        ?? (s.kind === 'sp'
+          ? { kind: 'manual', value: s.initial ?? (s.min + s.max) / 2 }
+          : { kind: 'hook', code: s.code
+            ?? (s.dynamics && (s.dynamics.follows?.length || s.dynamics.base != null)
+              ? causalHook(s.dynamics, (s.min + s.max) / 2, nominals)
+              : wanderHook((s.min + s.max) / 2, Math.max((s.max - s.min) / 200, 0.2))) }),
     }))
     const r = await simApi('POST', '/api/nodes', { id, name: `${id}(孪生)`, description: `aw-plc-sim-twin 生成:${dev.signals.length} 信号`, protocol, enabled: true, tickMs: 1000, signals, config })
     ok(`设备 ${id}(${protocol},${signals.length} 信号)`, r?.code === 0, r?.message ?? '')

package/scripts/onboarding/test-connection.mjs

@@ -15,8 +15,14 @@ import { api, login, ok, summary, readConfig } from './lib.mjs'
 
 const cfg = await readConfig()
 const tok = await login()
-
-for (const tt of cfg.tests ?? []) {
+// 兼容 onboard 统一配置:顶层 tests 或 connectivity.tests;空测试集必须显式失败,
+// 不得以 0 通过/0 失败“静默全绿”放行(2026-10-20 实测踩坑)
+const tests = Array.isArray(cfg.tests) ? cfg.tests : (Array.isArray(cfg.connectivity?.tests) ? cfg.connectivity.tests : [])
+if (tests.length === 0) {
+  ok('连接性预检配置', false, '未找到 tests 或 connectivity.tests;拒绝以空测试集放行')
+  summary('连接性预检')
+}
+for (const tt of tests) {
   const label = tt.label ?? tt.driver
   const isMes = tt.driver === 'mes-rest'
   const endpoint = isMes ? '/api/workshop/dcw/mes-test-read' : '/api/workshop/daq/test-driver'

package/scripts/onboarding/verify-line.mjs

@@ -4,13 +4,17 @@
  *  V1 数采落库:每个 daq 节点 2 分钟窗内 samples 有点(五协议真实在采)
  *  V2 量程联锁:对每个 dcw 节点做越界写(max+步长量级)必须被 400 拒(NODE_RANGE/RANGE 类)
  *  V3 合法写回环:max- 步长量级的合法值写成功且回读一致(manual 来源,审计留痕)
+ *    命令通道本身无读能力的协议(MQTT commandTopic 等)按平台 ACK 口径显式声明
+ *    `ackMode:"transport-ack"` + `observeDaqId`:断言写被 broker 受理,并用独立 DAQ
+ *    节点观测物理量跟随到目标值(设备侧生效由观测面证实,而非虚报回读)。
  *  V4 配方在册:recipeId 在 /dcw 聚合可见且参数节点映射正确
  *  V5 频道绑定:频道 lineId 正确、成员≥2、插件开启生效
  *  V6 演示线零扰动:受保护线上没有任何本次新节点的写痕(以 dcw journal 新锚点核对)
  * 输入 JSON:
  * {
  *   "lineId":"ln-..","recipeId":"rc-..","channelId":"<uuid>",
- *   "dcw":[{"id":"dw-..","name":"..","min":120,"max":300,"stepLimit":5,"probeValue":180}],
+ *   "dcw":[{"id":"dw-..","name":"..","min":120,"max":300,"stepLimit":5,"probeValue":180,
+ *           "ackMode":"transport-ack","observeDaqId":"dn-.."}],
  *   "daq":["dn-..","dn-.."],
  *   "plugins":["idd-closedloop-bridge","rag-bridge"]
  * }
@@ -43,7 +47,10 @@ for (const id of cfg.daq ?? []) {
 for (const n of cfg.dcw ?? []) {
   const span = Math.max(1, (n.max - n.min) / 10)
   const bad = await api('POST', `/api/workshop/dcw/${n.id}/write`, { value: n.max + span }, tok)
-  const rejected = bad.code !== 0 || bad.code === 'RANGE' || /RANGE|LIMIT|越界|超|400|VALIDATION/i.test(String(bad.message ?? '') + String(bad.code ?? ''))
+  const badMsg = String(bad.message ?? '') + String(bad.code ?? '')
+  // 必须命中量程/限界拒绝语义;超时/网络失败不是“量程联锁通过”
+  const rejected = bad.code === 'NODE_RANGE_EXCEEDED'
+    || (/RANGE|LIMIT|越界|量程|上限|下限|VALIDATION/i.test(badMsg) && !/超时|timeout|ECONN|网络/i.test(badMsg))
   ok(`V2 越界拒[${n.name}]`, rejected, `value=${n.max + span} → ${String(bad.message ?? bad.code).slice(0, 60)}`)
   // V3 探针必须在写前实时取值:开批次后引擎/配方会驱动 SP,配置期探针会过期。
   // 只写命令点(如 mqtt commandTopic)read 返 null → 回退用最近一次写锚点值当现值。
@@ -56,21 +63,75 @@ for (const n of cfg.dcw ?? []) {
       .sort((a, b) => Date.parse(b.at ?? 0) - Date.parse(a.at ?? 0))[0]
     if (lastAnchor && typeof lastAnchor.newValue === 'number') cur = lastAnchor.newValue
   }
-  if (typeof cur === 'number') probe = Math.min(n.max - n.stepLimit, Math.max(n.min + n.stepLimit, Math.round((cur + n.stepLimit) * 10) / 10))
-  // V3 可能撞 60s 写间隔限速(上一轮验收刚写过)——等待限速窗过后重试一次
+  // 探针必须同时落在「节点量程 ∩ 活动配方窗口」内,且尽量朝窗口内侧走:
+  // 当前值可能已被冒烟步推到窗口上沿,cur+step 会越配方窗口(实测 47+2>48 被拒)。
+  const rp = (cfg.recipeParams ?? []).find(p => p.nodeId === n.id)
+  const upper = Math.min(n.max, rp?.max ?? n.max)
+  const lower = Math.max(n.min, rp?.min ?? n.min)
+  const step = Math.max(0.1, Number(n.stepLimit) || 1)
+  if (typeof cur === 'number') {
+    const up = Math.round((cur + step) * 10) / 10
+    const down = Math.round((cur - step) * 10) / 10
+    probe = up < upper && up >= lower ? up : (down >= lower && down < upper ? down : Math.min(upper, Math.max(lower, cur)))
+  }
+  else if (probe < lower || probe > upper) {
+    probe = Math.min(upper, Math.max(lower, probe))
+  }
+  // V3 可能撞 60s 写间隔/保持窗(上一轮验收/冒烟刚写过)——最多等待 3 次,每次 65s
   let good = await api('POST', `/api/workshop/dcw/${n.id}/write`, { value: probe }, tok)
-  if (good.code !== 0 && /间隔|60s|WRITE_INTERVAL/i.test(String(good.message ?? ''))) {
+  for (let i = 0; i < 3 && good.code !== 0 && /间隔|60s|WRITE_INTERVAL|保持窗口|写入频繁/i.test(String(good.message ?? '')); i++) {
     await new Promise(r => setTimeout(r, 65000))
     good = await api('POST', `/api/workshop/dcw/${n.id}/write`, { value: probe }, tok)
   }
-  const goodOk = good.code === 0 || !!good.data?.outcome
-  ok(`V3 合法写回环[${n.name}]`, goodOk, `cur=${cur ?? '?'} probe=${probe} ${goodOk ? (good.data?.outcome?.readback ?? 'ok') : String(good.message ?? good.code).slice(0, 80)}`)
+  // transport-ack 协议(MQTT commandTopic 等无读通道):按平台 ACK 口径断言 broker 受理,
+  // 再用独立 DAQ 观测节点证实物理量真的跟随。不允许把“链路受理”当“设备证实”。
+  if (n.ackMode === 'transport-ack') {
+    const ack = good.data?.outcome?.ack
+    const writeOk = (good.code === 0 || !!good.data?.outcome) && ack === 'transport-ack'
+    let followed = null
+    if (writeOk && n.observeDaqId) {
+      const tol = Number(n.observeTolerance ?? Math.max(0.5, Math.abs(probe) * 0.02))
+      try {
+        followed = await pollUntil(async () => {
+          const now = Date.now()
+          const j = await api('GET', `/api/workshop/daq/${n.observeDaqId}/samples?from=${now - 90000}&to=${now}&bucketMs=5000`, undefined, tok)
+          const pts = j.data?.points ?? []
+          const last = pts[pts.length - 1]
+          return last && Number.isFinite(last.avg) && Math.abs(last.avg - probe) <= tol ? last.avg : null
+        }, { timeoutMs: Number(n.observeTimeoutMs ?? 45000), stepMs: 3000, label: `观测[${n.name}]` })
+      }
+      catch { followed = null }
+    }
+    const okd = writeOk && (n.observeDaqId ? followed != null : true)
+    ok(`V3 合法写生效(transport-ack)[${n.name}]`, okd,
+      `cur=${cur ?? '?'} probe=${probe} ack=${ack ?? '缺失'} DAQ观测=${followed ?? '未跟随'} ${okd ? '' : String(good.message ?? good.code).slice(0, 80)}`)
+    continue
+  }
+  const rb = good.data?.outcome?.readback
+  const rbOk = typeof rb === 'number' && Number.isFinite(rb) && Math.abs(rb - probe) <= Math.max(0.5, Math.abs(probe) * 0.002)
+  const goodOk = (good.code === 0 || !!good.data?.outcome) && rbOk
+  ok(`V3 合法写回环[${n.name}]`, goodOk,
+    `cur=${cur ?? '?'} probe=${probe} readback=${rb ?? '缺失'} ${goodOk ? '一致' : String(good.message ?? good.code).slice(0, 80)}`)
 }
 
-// V4 配方在册
+// V4 配方在册 + 参数逐项映射(不能只看 id 存在)
 const agg = await api('GET', '/api/workshop/dcw', undefined, tok)
 const rec = (agg.data?.recipes ?? []).find(r => r.id === cfg.recipeId)
-ok('V4 配方在册', !!rec, rec ? `${rec.name} v${rec.version} params=${(rec.params ?? []).length}` : (cfg.recipeId ?? '未提供'))
+const expectedParams = cfg.recipeParams ?? []
+const recParams = rec?.params ?? []
+const paramMismatch = expectedParams.filter((e) => {
+  const p = recParams.find(x => x.nodeId === e.nodeId)
+  if (!p) return true
+  return p.value !== e.value
+    || (e.min !== undefined && p.min !== e.min)
+    || (e.max !== undefined && p.max !== e.max)
+    || (e.stepLimit !== undefined && p.stepLimit !== e.stepLimit)
+})
+ok('V4 配方在册', !!rec, rec ? `${rec.name} v${rec.version} params=${recParams.length}` : (cfg.recipeId ?? '未提供'))
+if (expectedParams.length > 0) {
+  ok('V4 配方参数映射正确', paramMismatch.length === 0,
+    paramMismatch.length === 0 ? `${expectedParams.length} 项逐项一致` : `不匹配:${paramMismatch.map(p => p.nodeId).join(',')}`)
+}
 
 // V5 频道绑定与插件
 const ch = await api('GET', `/api/workshop/channels/${cfg.channelId}`, undefined, tok)
@@ -82,6 +143,8 @@ if (cfg.plugins?.length) {
   const pj = await api('GET', `/api/workshop/channels/${cfg.channelId}/plugins`, undefined, tok)
   const enabled = new Set((pj.data?.plugins ?? []).filter(p => p.enabled).map(p => p.name))
   for (const name of cfg.plugins) ok(`V5 插件[${name}]`, enabled.has(name), enabled.has(name) ? 'enabled' : `实际=${[...enabled].join(',')}`)
+  const unexpected = [...enabled].filter(n => !cfg.plugins.includes(n))
+  ok('V5 插件隔离(未配置插件不得被默认启用)', unexpected.length === 0, unexpected.length ? `意外启用:${unexpected.join(',')}` : '仅配置项启用')
 }
 
 // V6 演示线零扰动:本验收的写锚点必须全部落在新线上,受保护线(ln-d7e0a2a2)零新增锚点

package/scripts/ops-plugins-e2e.mjs

@@ -0,0 +1,85 @@
+/**
+ * 产线管理 + 插件集成 实机验收(US-305/US-306)——固化上轮内联检查为可复跑脚本。
+ *
+ * 用法: node scripts/ops-plugins-e2e.mjs <scenario-context.json>
+ * 产物: docs/audit/evidence/2026-10-21-acceptance/ops-plugins.json
+ *
+ * US-306 产线: REST stop→start(带配方)→状态翻转 + ops-logs 审计留痕。
+ * US-305 插件: Channel 插件启用面(IDD+RAG)+ Agent 工具面含 rag-bridge 注入工具
+ *   (kb_agent/sentinel_*;diag_run 走 omp 引擎注入面,独立机制,不在此面)。
+ */
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs'
+import { join, resolve, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const CTX = process.argv[2]
+if (!CTX) {
+  console.error('用法: node scripts/ops-plugins-e2e.mjs <scenario-context.json>')
+  process.exit(1)
+}
+const c = JSON.parse(readFileSync(CTX, 'utf8'))
+const EVID = join(REPO, 'docs', 'audit', 'evidence', '2026-10-21-acceptance')
+mkdirSync(EVID, { recursive: true })
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+const results = []
+function ok(id, name, cond, detail = '') {
+  results.push({ id, name, pass: Boolean(cond), detail: String(detail).slice(0, 600) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${detail ? ` — ${String(detail).slice(0, 220)}` : ''}`)
+}
+
+async function api(method, path, body) {
+  const r = await fetch(c.base + path, {
+    method,
+    headers: { ...(body !== undefined ? { 'content-type': 'application/json' } : {}), authorization: `Bearer ${c.adminToken}` },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(60_000),
+  })
+  return { status: r.status, j: await r.json().catch(() => null) }
+}
+
+// ── US-306 产线 stop → start(带配方) ──
+const stop = await api('POST', `/api/workshop/dcw/lines/${c.lineId}/stop`)
+ok('US306.1', '产线 stop 受理', stop.status === 200, `${stop.status} ${stop.j?.message ?? ''}`)
+
+const start = await api('POST', `/api/workshop/dcw/lines/${c.lineId}/start`, { recipeId: c.recipeId })
+ok('US306.2', '产线 start 受理(带配方)', start.status === 200, `${start.status} ${start.j?.message ?? ''}`)
+
+// 状态翻转确认(active 恢复 true)
+let activeAgain = false
+for (let i = 0; i < 10 && !activeAgain; i++) {
+  await sleep(1500)
+  const snap = (await api('GET', '/api/workshop/dcw')).j?.data
+  activeAgain = Boolean(snap?.lineStates?.find(l => l.lineId === c.lineId)?.active)
+}
+ok('US306.2b', '产线恢复运行态(active=true)', activeAgain)
+
+// ops-logs 留痕(line.stop + line.start)
+await sleep(1000)
+const logs = (await api('GET', `/api/workshop/ops-logs?scope=line&lineId=${c.lineId}&limit=100`)).j?.data?.logs ?? []
+const actions = [...new Set(logs.map(l => l.action).filter(a => /^line\./.test(a)))]
+ok('US306.3', 'ops-logs 含 line.start/line.stop 记录', actions.includes('line.start') && actions.includes('line.stop'), actions.join(','))
+
+// ── US-305 插件 ──
+const plugins = (await api('GET', `/api/workshop/channels/${c.channelId}/plugins`)).j?.data?.plugins ?? []
+const enabled = plugins.filter(p => p.enabled).map(p => p.name)
+ok('US305.1', 'Channel 插件启用 IDD+RAG', enabled.includes('idd-closedloop-bridge') && enabled.includes('rag-bridge'), enabled.join(','))
+
+// 工具面:lead 成员(host 面与 omp 注入面同源装配)
+const lead = c.agents?.lead
+const list = lead?.token
+  ? await fetch(`${c.base}/api/workshop/agent-tools/list?agentId=${lead.id}`, { headers: { 'x-aw-agent-token': lead.token } })
+  : null
+const tools = list && list.status === 200 ? ((await list.json())?.data?.tools ?? []) : []
+const names = tools.map(t => t.name)
+const kb = names.includes('kb_agent')
+const sentinel = names.filter(n => /^sentinel_/.test(n))
+ok('US305.2', 'Agent 工具面含 rag-bridge 插件工具(kb_agent/sentinel_*)——diag_run 走 omp 引擎注入面(独立机制)',
+  kb && sentinel.length >= 1, `n=${names.length} kb=${kb} sentinel×${sentinel.length}`)
+
+const pass = results.filter(r => r.pass).length
+const out = { at: new Date().toISOString(), context: { base: c.base, lineId: c.lineId, channelId: c.channelId }, results, pluginEnabled: enabled, toolCount: names.length }
+writeFileSync(join(EVID, 'ops-plugins.json'), JSON.stringify(out, null, 2))
+console.log(`\n═══ ops+plugins: ${pass}/${results.length} PASS ═══`)
+process.exit(pass === results.length ? 0 : 1)

package/scripts/real-injection-closed-loop.mjs

@@ -1,6 +1,14 @@
+/**
+ * @deprecated 2026-10-18:本脚本仍调用权限模型 v2 已禁用的 `dcw_control`/`dcw_judge`
+ * 直写路径,在真实平台会正确返回「直接节点写控已禁用」。请改用配方面闭环:
+ * `scripts/e2e-injection-recipe-closedloop.mjs`(`npm run test:e2e-injection`)。
+ * 保留本文件仅作历史 AgentTeam/FIFO 任务流参考。
+ */
 import { mkdirSync, appendFileSync, writeFileSync } from 'node:fs'
 import { join, resolve } from 'node:path'
 
+console.warn('[deprecated] real-injection-closed-loop.mjs 使用已禁用的 dcw_control;请改用 npm run test:e2e-injection')
+
 const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3000'
 const SIM = process.env.SIM_BASE ?? 'http://127.0.0.1:4010'
 const TOKEN = process.env.AW_TOKEN ?? 'ut-671bc5fdab1744698b9981a7b13f3967'

package/scripts/run-quality-gates.mjs

@@ -0,0 +1,58 @@
+#!/usr/bin/env node
+/**
+ * A20 质量门禁取证:真实运行 lint/typecheck/unit/i18n/docs,逐条记录 exitCode。
+ * 用法:node scripts/run-quality-gates.mjs
+ * 产物:docs/audit/evidence/2026-10-22-optimizer-process-model/gates.json
+ */
+import { spawn } from 'node:child_process'
+import { mkdirSync, readdirSync, writeFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+const cwd = process.cwd()
+const outDir = join(cwd, 'docs', 'audit', 'evidence', '2026-10-22-optimizer-process-model')
+mkdirSync(outDir, { recursive: true })
+
+const testFiles = readdirSync(join(cwd, 'tests')).filter(f => f.endsWith('.test.ts')).map(f => join('tests', f))
+
+const steps = [
+  { id: 'lint', cmd: process.execPath, args: [join('node_modules', 'eslint', 'bin', 'eslint.js'), '.'] },
+  { id: 'typecheck', cmd: process.execPath, args: [join('scripts', 'typecheck.mjs')] },
+  {
+    id: 'unit',
+    cmd: process.execPath,
+    args: [
+      join('node_modules', 'tsx', 'dist', 'cli.mjs'),
+      '--tsconfig', join('.nuxt', 'tsconfig.server.json'),
+      '--test', '--test-force-exit', ...testFiles,
+    ],
+  },
+  { id: 'i18n', cmd: process.execPath, args: [join('scripts', '_i18n-verify-keys.mjs')] },
+  { id: 'docs', cmd: process.execPath, args: [join('scripts', 'check-docs-sync.mjs')] },
+]
+
+function run(step) {
+  return new Promise((resolve) => {
+    const startedAt = new Date().toISOString()
+    const child = spawn(step.cmd, step.args, { cwd, shell: false, env: { ...process.env, FORCE_COLOR: '0' } })
+    let tail = ''
+    const collect = (chunk) => {
+      tail = (tail + chunk.toString('utf8')).slice(-2000)
+    }
+    child.stdout.on('data', collect)
+    child.stderr.on('data', collect)
+    child.on('error', err => resolve({ id: step.id, exitCode: -1, startedAt, endedAt: new Date().toISOString(), command: [step.cmd, ...step.args].join(' '), tail: String(err) }))
+    child.on('exit', code => resolve({ id: step.id, exitCode: code ?? -1, startedAt, endedAt: new Date().toISOString(), command: [step.cmd, ...step.args].join(' '), tail }))
+  })
+}
+
+const results = []
+for (const step of steps) {
+  console.log(`[gates] ${step.id} …`)
+  const result = await run(step)
+  console.log(`[gates] ${step.id} exit=${result.exitCode}`)
+  results.push(result)
+}
+const ok = results.every(r => r.exitCode === 0)
+writeFileSync(join(outDir, 'gates.json'), JSON.stringify({ at: new Date().toISOString(), ok, results }, null, 2))
+console.log(`[gates] ${ok ? 'ALL PASS' : 'FAILED'} → ${join(outDir, 'gates.json')}`)
+process.exitCode = ok ? 0 : 1