agentworkshop 0.7.66 → 0.7.71

package/server/api/workshop/agent-tools/approvals/[id]/decide.post.ts

@@ -1,90 +1,124 @@
-/**
- * POST /api/workshop/agent-tools/approvals/:id/decide —— 批准/拒绝一次工具执行。
- * body: { approved: boolean, comment?: string }(备注随 tool result 返回给 Agent)
- *
- * v17 安全修复(主计划 §13.2):
- *  ① `approved` 必须是**显式布尔值**:旧实现 `body.approved !== false` 让字段缺失
- *     (=客户端漏传/构造请求)自动变成"批准" —— 高危数控下发的静默放行,现已 400 拒绝;
- *  ② 决策前先做 Channel 归属 + 可见性 + 审批资格校验(与列表端点同口径),
- *     越权/跨 Channel 一律 403;
- *  ③ decide() 的"审批不存在或已处理"从裸 Error(→500)映射为 **409 ALREADY_RESOLVED**,
- *     与 hitl/respond 的并发语义一致。
- */
-import { readBody, getRouterParam } from 'h3'
-import { resolveUser } from '@/server/api/workshop/caller'
-import { defineApiHandler } from '@/server/utils/response'
-import { AppError } from '@/server/utils/errors'
-import { getWorkshopManager } from '@/server/plugins/workshop'
-import { getToolApprovals, normalizeRecipeProposeDecision } from '@/server/services/workshop/agents/tool-approvals'
-import { assertCanDecideHitlChannel, snapshotOfRow } from '@/server/services/workshop/agents/hitl-decision'
-import { audit } from '@/server/services/workshop/ops/ops'
-
-export default defineApiHandler(async (event) => {
-  const user = resolveUser(event)
-  const id = getRouterParam(event, 'id')!
-  const body = await readBody<{ approved?: unknown, comment?: string, choice?: unknown }>(event) ?? {}
-
-  // ① 显式布尔:禁止"缺省即批准"
-  if (typeof body.approved !== 'boolean') {
-    throw new AppError(400, 'BAD_REQUEST', 'body.approved 必须是显式布尔值(true=批准 / false=拒绝);字段缺失不再默认为批准')
-  }
-  const approved = body.approved
-  const comment = String(body.comment ?? '')
-  // ④ 多方案裁决序号(产线 Co-Pilot P2):仅接受整数(结构化审批单「批准此方案」);
-  //    其余输入一律按未携带处理,由 fail-closed 归一收敛为拒绝(不做静默取整/默认包)
-  const choice = Number.isInteger(body.choice) ? (body.choice as number) : undefined
-
-  const manager = getWorkshopManager()
-  const acting = { id: user.id, name: user.name, role: user.role }
-  const row = manager.groupChat.hitl.findById(id)
-  const pending = getToolApprovals().listPending().find(a => a.id === id)
-  const agentId = row?.agentId || pending?.agentId || ''
-
-  if (agentId) {
-    const channelId = manager.findChannelAgentById(agentId)?.channelId
-    if (channelId) {
-      // ② 与列表端点同口径:可见性 + 审批策略 + 创建时资格快照
-      assertCanDecideHitlChannel(channelId, acting, row ? { policy: row.policy, snapshot: snapshotOfRow(row) } : {})
-    }
-    else if (user.role !== 'admin') {
-      // 归属无法解析(Agent 已删除/未落库):非管理员不放行
-      throw new AppError(403, 'SCOPE_VIOLATION', '该审批的 Agent 已不属于任何 Channel,仅管理员可处理')
-    }
-  }
-  else if (pending && user.role !== 'admin') {
-    throw new AppError(403, 'SCOPE_VIOLATION', '无法确定审批归属的 Channel,仅管理员可处理')
-  }
-
-  // 产线 Co-Pilot P2:结构化审批单(recipe-propose,payload.schemaVersion=1)先经 fail-closed
-  // 归一 —— 无有效 choice 的「批准」一律按拒绝收敛;legacy 审批单(无 payload)完全不干预。
-  // (pending 即上方归属判定用的同一条 listPending 查询)
-  const normalized = normalizeRecipeProposeDecision(pending, { approved, choice })
-
-  let approval
-  try {
-    approval = getToolApprovals().decide(id, normalized.approved, comment, user.id, user.name, normalized.choice)
-  }
-  catch (err) {
-    // ③ 非 pending(已被他人处理/超时/被取消)→ 409(不再 500)
-    throw new AppError(409, 'ALREADY_RESOLVED', err instanceof Error ? err.message : String(err))
-  }
-
-  // R1:HITL 裁决审计(闭环中的人为决策留痕;choice 与 fail-closed 收敛随行落审计)
-  audit({
-    actor: user.id,
-    actorName: user.name,
-    actorKind: 'user',
-    action: normalized.approved ? 'approval.approve' : 'approval.reject',
-    targetKind: 'tool-approval',
-    targetId: id,
-    detail: {
-      comment,
-      choice: normalized.choice,
-      ...(normalized.rejectedReason ? { failClosedReason: normalized.rejectedReason } : {}),
-      via: 'agent-tools/decide',
-      agentId,
-      channelId: manager.findChannelAgentById(agentId)?.channelId ?? '',
-    },
-  })
-  return { approval }
-})
+/**
+ * POST /api/workshop/agent-tools/approvals/:id/decide —— 批准/拒绝一次工具执行。
+ * body: { approved: boolean, comment?: string }(备注随 tool result 返回给 Agent)
+ *
+ * v17 安全修复(主计划 §13.2):
+ *  ① `approved` 必须是**显式布尔值**:旧实现 `body.approved !== false` 让字段缺失
+ *     (=客户端漏传/构造请求)自动变成"批准" —— 高危数控下发的静默放行,现已 400 拒绝;
+ *  ② 决策前先做 Channel 归属 + 可见性 + 审批资格校验(与列表端点同口径),
+ *     越权/跨 Channel 一律 403;
+ *  ③ decide() 的"审批不存在或已处理"从裸 Error(→500)映射为 **409 ALREADY_RESOLVED**,
+ *     与 hitl/respond 的并发语义一致。
+ */
+import { readBody, getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getToolApprovals, normalizeRecipeProposeDecision } from '@/server/services/workshop/agents/tool-approvals'
+import { assertCanDecideHitlChannel, snapshotOfRow } from '@/server/services/workshop/agents/hitl-decision'
+import { audit } from '@/server/services/workshop/ops/ops'
+import { decideOptimizerDispatch, isOptimizerDispatchCard } from '@/server/services/workshop/optimization/dispatch.service'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = getRouterParam(event, 'id')!
+  const body = await readBody<{ approved?: unknown, comment?: string, choice?: unknown }>(event) ?? {}
+
+  // ① 显式布尔:禁止"缺省即批准"
+  if (typeof body.approved !== 'boolean') {
+    throw new AppError(400, 'BAD_REQUEST', 'body.approved 必须是显式布尔值(true=批准 / false=拒绝);字段缺失不再默认为批准')
+  }
+  const approved = body.approved
+  const comment = String(body.comment ?? '')
+  // ④ 多方案裁决序号(产线 Co-Pilot P2):仅接受整数(结构化审批单「批准此方案」);
+  //    其余输入一律按未携带处理,由 fail-closed 归一收敛为拒绝(不做静默取整/默认包)
+  const choice = Number.isInteger(body.choice) ? (body.choice as number) : undefined
+
+  const manager = getWorkshopManager()
+  const acting = { id: user.id, name: user.name, role: user.role }
+  const row = manager.groupChat.hitl.findById(id)
+  const pending = getToolApprovals().listPending().find(a => a.id === id)
+  const agentId = row?.agentId || pending?.agentId || ''
+
+  if (agentId) {
+    const channelId = manager.findChannelAgentById(agentId)?.channelId
+    if (channelId) {
+      // ② 与列表端点同口径:可见性 + 审批策略 + 创建时资格快照
+      assertCanDecideHitlChannel(channelId, acting, row ? { policy: row.policy, snapshot: snapshotOfRow(row) } : {})
+    }
+    else if (user.role !== 'admin') {
+      // 归属无法解析(Agent 已删除/未落库):非管理员不放行
+      throw new AppError(403, 'SCOPE_VIOLATION', '该审批的 Agent 已不属于任何 Channel,仅管理员可处理')
+    }
+  }
+  else if (pending && user.role !== 'admin') {
+    throw new AppError(403, 'SCOPE_VIOLATION', '无法确定审批归属的 Channel,仅管理员可处理')
+  }
+
+  // 产线 Co-Pilot P2:结构化审批单(recipe-propose,payload.schemaVersion=1)先经 fail-closed
+  // 归一 —— 无有效 choice 的「批准」一律按拒绝收敛;legacy 审批单(无 payload)完全不干预。
+  // (pending 即上方归属判定用的同一条 listPending 查询)
+  const normalized = normalizeRecipeProposeDecision(pending, { approved, choice })
+
+  // SW5/D13 单一咽喉:optimizer-recipe:* 卡一律走 dispatch 链(八项重验→抢占→写→回读→审计)。
+  // 业务拒绝 {approved:false,code,comment} 在咽喉内已 decide() 落定;此处不再走通用 decide。
+  if (pending && isOptimizerDispatchCard(pending.nodeId)) {
+    const result = await decideOptimizerDispatch({
+      cardId: id,
+      approved: normalized.approved,
+      comment,
+      choice: normalized.choice,
+      actingUser: { id: user.id, name: user.name },
+      via: 'agent-tools/decide',
+    })
+    if (result.handled) {
+      audit({
+        actor: user.id,
+        actorName: user.name,
+        actorKind: 'user',
+        action: result.approved ? 'approval.approve' : 'approval.reject',
+        targetKind: 'tool-approval',
+        targetId: id,
+        detail: {
+          comment,
+          choice: normalized.choice,
+          dispatchCode: result.code,
+          execution: result.execution,
+          via: 'agent-tools/decide:optimizer-dispatch',
+          agentId,
+          channelId: manager.findChannelAgentById(agentId)?.channelId ?? '',
+        },
+      })
+      return { dispatch: { approved: result.approved, comment: result.comment, code: result.code, execution: result.execution } }
+    }
+  }
+
+  let approval
+  try {
+    approval = getToolApprovals().decide(id, normalized.approved, comment, user.id, user.name, normalized.choice)
+  }
+  catch (err) {
+    // ③ 非 pending(已被他人处理/超时/被取消)→ 409(不再 500)
+    throw new AppError(409, 'ALREADY_RESOLVED', err instanceof Error ? err.message : String(err))
+  }
+
+  // R1:HITL 裁决审计(闭环中的人为决策留痕;choice 与 fail-closed 收敛随行落审计)
+  audit({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: normalized.approved ? 'approval.approve' : 'approval.reject',
+    targetKind: 'tool-approval',
+    targetId: id,
+    detail: {
+      comment,
+      choice: normalized.choice,
+      ...(normalized.rejectedReason ? { failClosedReason: normalized.rejectedReason } : {}),
+      via: 'agent-tools/decide',
+      agentId,
+      channelId: manager.findChannelAgentById(agentId)?.channelId ?? '',
+    },
+  })
+  return { approval }
+})

package/server/api/workshop/agent-tools/bindings/[id].delete.ts

@@ -1,7 +1,7 @@
 /**
  * DELETE /api/workshop/agent-tools/bindings/:id —— 解除绑定。
  *
- * 鉴权:解绑会顺带 cancelPendingFor 掉该 Agent 对该节点的挂起审批,
+ * 鉴权:解绑会顺带取消该 Agent 对该绑定(含配方参数/配方审批单)的挂起审批,
  * 等于**否决他人正在等待的控制权**,因此与 PATCH 一样必须先验产线权限。
  */
 import { createError, getRouterParam } from 'h3'
@@ -20,7 +20,7 @@ export default defineApiHandler(async (event) => {
   if (!binding) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
   requireBindingAccess(user, binding)
   if (!repo.unbind(id)) throw createError({ statusCode: 404, statusMessage: 'binding not found' })
-  // 解绑即失效:该 Agent 对该节点的挂起审批按拒绝收敛(tool result 注明原因)
-  getToolApprovals().cancelPendingFor(binding.agentId, binding.nodeId)
+  // 解绑即失效:该 Agent 对该绑定(含配方/配方参数/配方审批单)的挂起审批按拒绝收敛
+  getToolApprovals().cancelPendingForBinding(binding.agentId, binding)
   return { ok: true }
 })

package/server/api/workshop/agent-tools/list.get.ts

@@ -1,25 +1,70 @@
 /**
  * GET /api/workshop/agent-tools/list?agentId= —— 工具面 schema(stdio MCP 桥 tools/list 源)。
  * 按 agent 角色装配(host-tools.json + 插件工具),与 omp set_host_tools 注入面同源。
- * 鉴权:agent token(x-aw-agent-token)或仪表盘用户。
+ * 鉴权:agent token(x-aw-agent-token)自证;仪表盘用户路径必须可读该 Agent 所属 Channel
+ * (admin / owner / 成员),与 invoke 的授权口径对齐 —— 登录不等于可读取任意 Agent 的
+ * 绑定节点/配方描述(C15 提权泄漏修复)。
+ *
+ * WP6:响应带 ETag(工具面签名)。桥轮询带 If-None-Match 时命中 → 304 空体,
+ * 无变更时不再传输整张工具面(含 per-agent 绑定描述)。
  */
-import { getQuery, getHeader } from 'h3'
+import { createHash } from 'node:crypto'
+import { getQuery, getHeader, setHeader, setResponseStatus, defineEventHandler } from 'h3'
 import { resolveUser } from '@/server/api/workshop/caller'
-import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
 import { getWorkshopManager } from '@/server/plugins/workshop'
 
-export default defineApiHandler(async (event) => {
-  const agentToken = getHeader(event, 'x-aw-agent-token')
-  if (!agentToken) resolveUser(event)
-  const q = getQuery(event)
-  const agentId = String(q.agentId ?? '')
-  if (!agentId) throw createError({ statusCode: 400, statusMessage: 'agentId required' })
-  if (agentToken) {
-    const resolved = getWorkshopManager().resolveAgentByToken(String(agentToken))
-    if (!resolved || resolved.agentId !== agentId) {
-      throw createError({ statusCode: 401, statusMessage: 'agent token 校验失败' })
+/** 稳定序列化(键排序;数组保序)+ 弱 ETag */
+function weakEtagOf(tools: unknown): string {
+  const stable = JSON.stringify(tools, (_k, v) => {
+    if (v && typeof v === 'object' && !Array.isArray(v)) {
+      return Object.fromEntries(Object.keys(v as Record<string, unknown>).sort().map(k => [k, (v as Record<string, unknown>)[k]]))
     }
+    return v
+  })
+  return `W/"${createHash('sha256').update(stable).digest('hex').slice(0, 32)}"`
+}
+
+export default defineEventHandler(async (event) => {
+  try {
+    const agentToken = getHeader(event, 'x-aw-agent-token')
+    const user = agentToken ? null : resolveUser(event)
+    const q = getQuery(event)
+    const agentId = String(q.agentId ?? '')
+    if (!agentId) throw new AppError(400, 'BAD_REQUEST', 'agentId required')
+    const manager = getWorkshopManager()
+    if (agentToken) {
+      const resolved = manager.resolveAgentByToken(String(agentToken))
+      if (!resolved || resolved.agentId !== agentId) {
+        throw new AppError(401, 'UNAUTHORIZED', 'agent token 校验失败')
+      }
+    }
+    else if (user) {
+      const row = manager.deps.repos.channelAgents.findById(agentId)
+      if (!row) throw new AppError(404, 'NOT_FOUND', `agent 不存在: ${agentId}`)
+      const permissions = manager.channelPermissionsOf(row.channelId, user)
+      if (!permissions.isAdmin && !permissions.isMember) {
+        throw new AppError(403, 'SCOPE_VIOLATION', '该 Agent 所属 Channel 对你不可见,无权读取其工具面')
+      }
+    }
+    const tools = manager.hostToolDefsFor(agentId)
+    const etag = weakEtagOf(tools)
+    setHeader(event, 'ETag', etag)
+    setHeader(event, 'Cache-Control', 'no-cache')
+    const inm = String(getHeader(event, 'if-none-match') ?? '')
+    if (inm && inm.split(',').map(s => s.trim()).includes(etag)) {
+      setResponseStatus(event, 304)
+      return null
+    }
+    return { code: 0, message: 'ok', data: { tools } }
+  }
+  catch (error) {
+    if (error instanceof AppError) {
+      setResponseStatus(event, error.status)
+      return { code: error.code, message: error.message, data: null }
+    }
+    const status = Number((error as { statusCode?: number })?.statusCode ?? 500)
+    setResponseStatus(event, status)
+    return { code: status === 401 ? 'UNAUTHORIZED' : 'REQUEST_ERROR', message: (error as Error)?.message ?? '请求失败', data: null }
   }
-  const tools = getWorkshopManager().hostToolDefsFor(agentId)
-  return { tools }
 })

package/server/api/workshop/aml/models/[id].delete.ts

@@ -1,35 +1,38 @@
-/**
- * DELETE /api/workshop/aml/models/:id —— 删除模型(元数据行 + 实体目录)。
- * 保护:production 阶段的模型拒绝直接删除(在线预测依赖它),须先退役为 retired。
- * 权限:admin/editor + 产线 operate。
- */
-import { getRouterParam } from 'h3'
-import { defineApiHandler } from '@/server/utils/response'
-import { requireRole } from '@/server/api/workshop/caller'
-import { requireLineMode } from '@/server/services/workshop/permissions'
-import { AppError } from '@/server/utils/errors'
-import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
-import { removeEntityDir } from '@/server/services/workshop/aml/entity'
-import { recordOps } from '@/server/services/workshop/ops/ops'
-
-export default defineApiHandler(async (event) => {
-  const user = requireRole(event, ['admin', 'editor'])
-  const id = getRouterParam(event, 'id') ?? ''
-  const rt = getAmlRuntime()
-  const model = rt.repo.model.get(id)
-  if (!model) throw new AppError(404, 'AML_MODEL_MISSING', `模型 ${id} 不存在`)
-  requireLineMode(user, rt.repo.dataset.get(model.datasetId)?.lineId, 'operate')
-  if (model.stage === 'production') {
-    throw new AppError(409, 'AML_MODEL_IN_PRODUCTION',
-      `模型 ${id} 处于 production 阶段,在线预测依赖它,拒绝删除。请先晋升同组新模型或将其退役(retired)后再删。`)
-  }
-  const ent = removeEntityDir(rt, 'model', id)
-  rt.repo.model.remove(id)
-  recordOps({
-    actor: user.id, actorName: user.name, actorKind: 'user',
-    action: 'aml.model.delete', kind: 'system',
-    summary: `删除模型 ${id}(阶段 ${model.stage})${ent.removed ? ',含实体目录' : ''}`,
-    targetKind: 'aml_model', targetId: id,
-  })
-  return { deleted: true, entityRemoved: ent.removed, dir: ent.dir }
-})
+/**
+ * DELETE /api/workshop/aml/models/:id —— 删除模型(元数据行 + 实体目录)。
+ * 保护:production 阶段的模型拒绝直接删除(在线预测依赖它),须先退役为 retired。
+ * 权限:admin/editor + 产线 operate。
+ */
+import { getRouterParam } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { requireRole } from '@/server/api/workshop/caller'
+import { requireLineMode } from '@/server/services/workshop/permissions'
+import { AppError } from '@/server/utils/errors'
+import { getAmlRuntime } from '@/server/services/workshop/aml/runtime'
+import { removeEntityDir } from '@/server/services/workshop/aml/entity'
+import { assertModelNotReferenced } from '@/server/services/workshop/aml/model-references'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const user = requireRole(event, ['admin', 'editor'])
+  const id = getRouterParam(event, 'id') ?? ''
+  const rt = getAmlRuntime()
+  const model = rt.repo.model.get(id)
+  if (!model) throw new AppError(404, 'AML_MODEL_MISSING', `模型 ${id} 不存在`)
+  requireLineMode(user, rt.repo.dataset.get(model.datasetId)?.lineId, 'operate')
+  if (model.stage === 'production') {
+    throw new AppError(409, 'AML_MODEL_IN_PRODUCTION',
+      `模型 ${id} 处于 production 阶段,在线预测依赖它,拒绝删除。请先晋升同组新模型或将其退役(retired)后再删。`)
+  }
+  // C13/A19:被 Channel profile / 训练计划 / Optimizer Profile / 在途租约引用时拒绝删除
+  assertModelNotReferenced(rt.db, id)
+  const ent = removeEntityDir(rt, 'model', id)
+  rt.repo.model.remove(id)
+  recordOps({
+    actor: user.id, actorName: user.name, actorKind: 'user',
+    action: 'aml.model.delete', kind: 'system',
+    summary: `删除模型 ${id}(阶段 ${model.stage})${ent.removed ? ',含实体目录' : ''}`,
+    targetKind: 'aml_model', targetId: id,
+  })
+  return { deleted: true, entityRemoved: ent.removed, dir: ent.dir }
+})

package/server/api/workshop/channels/[id]/agents/[agentId]/rotate-token.post.ts

@@ -0,0 +1,45 @@
+/**
+ * POST /api/workshop/channels/:id/agents/:agentId/rotate-token —— 轮换 Agent 实例 token(WP3)。
+ *
+ * 权限:channel 属主或 admin(requireWritable,与 Agent 实例管理面同口径)。
+ * 语义:新 token 立即生效;旧 token 进入宽限窗(缺省 60s,env AW_TOKEN_GRACE_MS 可调),
+ *      窗内四路调用点(桥 invoke / 桥 list / 面A Bearer / manager)双接受,桥进程自动重连过渡。
+ * 响应:仅本次一次性返回全量新 token(与仪表盘 tokenTail 策略配套;全量不在列表/详情回显)。
+ * 审计:agent.token.rotate(targetId=agentId,detail 不含 token 明文)。
+ */
+import { getRouterParam } from 'h3'
+import { resolveUser } from '@/server/api/workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { AppError } from '@/server/utils/errors'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+
+export default defineApiHandler(async (event) => {
+  const channelId = getRouterParam(event, 'id')!
+  const agentId = getRouterParam(event, 'agentId')!
+  const user = resolveUser(event)
+  const manager = getWorkshopManager()
+  const ch = manager.getChannelForUser(channelId, user.id)
+  manager.requireWritable(ch.ownerUserId, user, 'channel')
+  if (!agentId) throw new AppError(400, 'BAD_REQUEST', 'agentId 必填')
+  const rotated = manager.rotateChannelAgentToken(channelId, agentId)
+  recordOps({
+    actor: user.id,
+    actorName: user.name ?? '',
+    actorKind: 'user',
+    action: 'agent.token.rotate',
+    kind: 'system',
+    level: 'warn',
+    targetKind: 'agent',
+    targetId: agentId,
+    summary: `轮换 Agent token(宽限至 ${rotated.prevTokenUntil})`,
+    detail: { channelId, agentId, prevTokenUntil: rotated.prevTokenUntil },
+  })
+  return {
+    agentId: rotated.agentId,
+    channelId: rotated.channelId,
+    token: rotated.token,
+    prevTokenUntil: rotated.prevTokenUntil,
+    note: '全量 token 仅此一次返回;旧 token 在 prevTokenUntil 前仍可用(桥进程重连过渡),之后彻底失效。',
+  }
+})

package/server/api/workshop/channels/[id]/tools/index.get.ts

@@ -0,0 +1,17 @@
+/**
+ * GET /api/workshop/channels/:id/tools —— Channel 工具透明化视图。
+ * 返回全部注册工具 + 硬规则资格(lead/worker)+ 本 Channel 选择 + 统计。
+ * 鉴权:Channel 属主或 admin;遗留公共 Channel(owner null)需 admin。
+ */
+import { resolveUser, requireAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { buildChannelToolView } from '@/server/services/workshop/tools/catalog-view'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const channel = getWorkshopManager().getChannelForUser(id, user.id)
+  if (channel.ownerUserId === null) requireAdmin(event)
+  return buildChannelToolView(id)
+})

package/server/api/workshop/channels/[id]/tools/index.put.ts

@@ -0,0 +1,117 @@
+/**
+ * PUT /api/workshop/channels/:id/tools —— 保存 Channel 工具选择(全量替换)。
+ *
+ * body: { mode: 'all'|'selected', tools: [{ name, enabled }] }
+ *  - all: 全部合格工具启用;只持久化 enabled=false 的行(deny-list)
+ *  - selected: 仅勾选工具启用;持久化提交的全量行(allow-list)
+ *
+ * 硬规则不可覆盖:selected 模式下显式启用一个对 lead/worker 都不合格的工具 → 409。
+ * 鉴权:Channel 属主或 admin;遗留公共 Channel 需 admin。
+ */
+import { readBody } from 'h3'
+import { resolveUser, requireAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getToolRegistryRepo, type ChannelToolPolicyEntry, type ToolPolicyMode } from '@/server/services/workshop/db/tool-registry.repo'
+import { buildChannelToolView } from '@/server/services/workshop/tools/catalog-view'
+import { notifyToolChange } from '@/server/services/workshop/agents/plugin-tools'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+import { AppError } from '@/server/utils/errors'
+
+const TOOL_NAME_RE = /^[a-z][a-z0-9_]{1,63}$/
+const MAX_TOOLS = 500
+
+interface ToolInput { name?: unknown, enabled?: unknown }
+interface Body { mode?: unknown, tools?: unknown }
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const manager = getWorkshopManager()
+  const channel = manager.getChannelForUser(id, user.id)
+  if (channel.ownerUserId === null) requireAdmin(event)
+
+  const body = (await readBody<Body>(event)) ?? {}
+  if (body.mode !== undefined && body.mode !== 'all' && body.mode !== 'selected') {
+    throw new AppError(400, 'VALIDATION_ERROR', 'mode 只能是 all 或 selected')
+  }
+  const mode: ToolPolicyMode = body.mode === 'selected' ? 'selected' : 'all'
+  if (!Array.isArray(body.tools)) {
+    throw new AppError(400, 'VALIDATION_ERROR', 'body 应为 { mode, tools: [{ name, enabled }] }')
+  }
+  if (body.tools.length > MAX_TOOLS) {
+    throw new AppError(400, 'VALIDATION_ERROR', `tools 最多 ${MAX_TOOLS} 条`)
+  }
+
+  const view = buildChannelToolView(id)
+  const byName = new Map(view.tools.map(t => [t.name, t]))
+  const seen = new Set<string>()
+  const entries: ChannelToolPolicyEntry[] = []
+  const unknown: string[] = []
+  const unavailable: string[] = []
+  const ineligible: Array<{ name: string, reason: string }> = []
+
+  for (const raw of body.tools as ToolInput[]) {
+    const name = typeof raw?.name === 'string' ? raw.name : ''
+    if (raw?.enabled !== undefined && typeof raw.enabled !== 'boolean') {
+      throw new AppError(400, 'VALIDATION_ERROR', `工具 ${name || '(空)'} 的 enabled 必须是 boolean`)
+    }
+    if (!TOOL_NAME_RE.test(name)) unknown.push(name || '(空)')
+    if (seen.has(name)) throw new AppError(400, 'DUPLICATE_TOOL', `工具重复提交: ${name}`)
+    seen.add(name)
+    const enabled = raw?.enabled === true
+    const tool = byName.get(name)
+    if (!tool) {
+      unknown.push(name)
+      continue
+    }
+    if (enabled) {
+      // all 模式下 enabled=true 只是“默认启用”(不落库),不可用/被硬规则挡住的工具仍不会生效;
+      // selected 模式是显式 allow-list,启用一个不可用或永不合格的工具必须拒绝并说明原因。
+      if (mode === 'selected' && !tool.available) unavailable.push(name)
+      const hardBlocked = !tool.eligibility.lead.eligible && !tool.eligibility.worker.eligible
+      if (mode === 'selected' && hardBlocked) {
+        const reason = tool.eligibility.lead.reason !== 'OK' ? tool.eligibility.lead.reason : tool.eligibility.worker.reason
+        ineligible.push({ name, reason })
+      }
+    }
+    entries.push({ name, enabled })
+  }
+
+  if (unknown.length > 0) {
+    throw new AppError(400, 'UNKNOWN_TOOL', `未知工具: ${unknown.slice(0, 10).join(', ')}${unknown.length > 10 ? ' …' : ''}`)
+  }
+  if (unavailable.length > 0) {
+    throw new AppError(409, 'TOOL_UNAVAILABLE', `工具当前未注册/插件未启用: ${unavailable.slice(0, 10).join(', ')}`)
+  }
+  if (ineligible.length > 0) {
+    const first = ineligible[0]!
+    throw new AppError(409, 'TOOL_NOT_ELIGIBLE', `工具 ${first.name} 被硬规则排除(${first.reason});Channel 开关不能绕过角色/档位/写守卫。`)
+  }
+
+  try {
+    getToolRegistryRepo().savePolicy(id, mode, entries, user.id)
+  }
+  catch (err) {
+    throw new AppError(503, 'TOOL_REGISTRY_UNAVAILABLE', `工具策略保存失败: ${err instanceof Error ? err.message : String(err)}`)
+  }
+
+  // 在跑 omp 会话立即重发 set_host_tools;pi 下一回合;MCP 引擎由执行闸门兜底。
+  notifyToolChange()
+
+  const disabled = entries.filter(e => !e.enabled).length
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'tool_policy.update',
+    targetKind: 'channel',
+    targetId: id,
+    kind: 'system',
+    scope: 'system',
+    summary: `Channel 工具策略已更新: mode=${mode}, 启用=${entries.length - disabled}, 停用=${disabled}`,
+    detail: { mode, tools: entries },
+  })
+
+  return buildChannelToolView(id)
+})

package/server/api/workshop/channels/[id]/tools/reset.post.ts

@@ -0,0 +1,39 @@
+/**
+ * POST /api/workshop/channels/:id/tools/reset —— 清除 Channel 工具策略,恢复默认全启用。
+ * 鉴权:Channel 属主或 admin;遗留公共 Channel 需 admin。
+ */
+import { resolveUser, requireAdmin } from '../../../../workshop/caller'
+import { defineApiHandler } from '@/server/utils/response'
+import { getWorkshopManager } from '@/server/plugins/workshop'
+import { getToolRegistryRepo } from '@/server/services/workshop/db/tool-registry.repo'
+import { buildChannelToolView } from '@/server/services/workshop/tools/catalog-view'
+import { notifyToolChange } from '@/server/services/workshop/agents/plugin-tools'
+import { recordOps } from '@/server/services/workshop/ops/ops'
+import { AppError } from '@/server/utils/errors'
+
+export default defineApiHandler(async (event) => {
+  const user = resolveUser(event)
+  const id = String(event.context.params?.id ?? '')
+  const channel = getWorkshopManager().getChannelForUser(id, user.id)
+  if (channel.ownerUserId === null) requireAdmin(event)
+
+  try {
+    getToolRegistryRepo().resetPolicy(id)
+  }
+  catch (err) {
+    throw new AppError(503, 'TOOL_REGISTRY_UNAVAILABLE', `工具策略重置失败: ${err instanceof Error ? err.message : String(err)}`)
+  }
+  notifyToolChange()
+  recordOps({
+    actor: user.id,
+    actorName: user.name,
+    actorKind: 'user',
+    action: 'tool_policy.reset',
+    targetKind: 'channel',
+    targetId: id,
+    kind: 'system',
+    scope: 'system',
+    summary: 'Channel 工具策略已重置为默认(全部合格工具启用)',
+  })
+  return buildChannelToolView(id)
+})