agentworkshop 0.7.66 → 0.7.71

package/server/services/workshop/db/database/schema.ts

@@ -263,7 +263,8 @@ CREATE TABLE IF NOT EXISTS audit_log (
   recipe_id   TEXT NOT NULL DEFAULT '',
   kind        TEXT NOT NULL DEFAULT '',     -- write|manual|alarm|line|recipe|rollback|daq|system
   summary     TEXT NOT NULL DEFAULT '',
-  level       TEXT NOT NULL DEFAULT 'info'  -- 严重级:info|warn|error(写控 ACK 鉴定;2026-10-08)
+  level       TEXT NOT NULL DEFAULT 'info', -- 严重级:info|warn|error(写控 ACK 鉴定;2026-10-08)
+  scope       TEXT NOT NULL DEFAULT 'system' -- 显式域标识:line(产线域,必须有 line_id)|system(全局审计)
 );
 CREATE INDEX IF NOT EXISTS idx_audit_log_at ON audit_log(at DESC);
 -- v14:高危管理操作双人复核(R3:maker-checker;config 开关默认关)
@@ -301,7 +302,12 @@ CREATE TABLE IF NOT EXISTS aml_datasets (
   created_by    TEXT NOT NULL DEFAULT '',
   created_by_kind TEXT NOT NULL DEFAULT 'user',
   note          TEXT NOT NULL DEFAULT '',
-  created_at    TEXT NOT NULL
+  created_at    TEXT NOT NULL,
+  -- ProcessModelSpec 构建谱系(空 = 旧 AML 数据集,无工艺规格来源;绑定模型资格门据此溯源)
+  spec_ref      TEXT NOT NULL DEFAULT '',
+  spec_version  INTEGER,
+  -- 数据谱系核验(D18):0=未核验(旧/无 confirmed segment;禁优化资格);1=每 run 均有已确认 segment 且版本匹配
+  lineage_verified INTEGER NOT NULL DEFAULT 0
 );
 CREATE INDEX IF NOT EXISTS idx_aml_datasets_recipe ON aml_datasets(recipe_id, created_at DESC);
 CREATE TABLE IF NOT EXISTS aml_jobs (
@@ -779,7 +785,241 @@ CREATE TABLE IF NOT EXISTS analysis_reports (
   updated_by_name TEXT NOT NULL DEFAULT ''
 );
 CREATE INDEX IF NOT EXISTS idx_analysis_reports_line ON analysis_reports(line_id, created_at DESC);
-CREATE INDEX IF NOT EXISTS idx_analysis_reports_recipe ON analysis_reports(recipe_id);`
+CREATE INDEX IF NOT EXISTS idx_analysis_reports_recipe ON analysis_reports(recipe_id);
+
+-- v28: 工具目录 + Channel 级工具治理(2026-10-20)
+-- tool_registry 是内置/插件工具定义的元数据快照;执行代码仍在 host-tools.json / 插件进程里。
+CREATE TABLE IF NOT EXISTS tool_registry (
+  name             TEXT PRIMARY KEY,
+  source           TEXT NOT NULL,                 -- 'builtin' | 'plugin'
+  plugin_name      TEXT NOT NULL DEFAULT '',
+  plugin_scope     TEXT NOT NULL DEFAULT '',      -- 'builtin' | 'project' | 'user'
+  label            TEXT NOT NULL DEFAULT '',
+  description      TEXT NOT NULL DEFAULT '',
+  parameters_json  TEXT NOT NULL DEFAULT '{}',
+  roles_json       TEXT NOT NULL DEFAULT '["lead","worker"]',
+  group_name       TEXT NOT NULL DEFAULT '',
+  metadata_json    TEXT NOT NULL DEFAULT '{}',
+  definition_hash  TEXT NOT NULL DEFAULT '',
+  available        INTEGER NOT NULL DEFAULT 1,
+  first_seen_at    TEXT NOT NULL,
+  last_seen_at     TEXT NOT NULL,
+  updated_at       TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_source ON tool_registry(source, available);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_plugin ON tool_registry(plugin_name);
+
+CREATE TABLE IF NOT EXISTS channel_tool_policies (
+  channel_id   TEXT PRIMARY KEY,
+  mode         TEXT NOT NULL DEFAULT 'all',       -- 'all' | 'selected'
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS channel_tool_settings (
+  channel_id   TEXT NOT NULL,
+  tool_name    TEXT NOT NULL,
+  enabled      INTEGER NOT NULL DEFAULT 1,
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL,
+  PRIMARY KEY (channel_id, tool_name)
+);
+CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled);
+
+-- v29: Optimizer Manager + Process Model Service(2026-10-22 计划 G1)
+-- 设计要点:新表全部进主库(不复制 EDA 的独立连接模式),由 backup/retention 统一覆盖。
+-- published 的 spec/profile 由服务层拒绝 UPDATE;版本变更 = 新行,不原地改。
+CREATE TABLE IF NOT EXISTS process_model_specs (
+  id              TEXT NOT NULL,
+  version         INTEGER NOT NULL DEFAULT 1,
+  line_id         TEXT NOT NULL,
+  product_id      TEXT NOT NULL,
+  recipe_id       TEXT NOT NULL,
+  recipe_version  INTEGER NOT NULL DEFAULT 0,
+  content_hash    TEXT NOT NULL,
+  spec_json       TEXT NOT NULL,
+  status          TEXT NOT NULL DEFAULT 'draft',   -- draft|published|retired
+  owner_user_id   TEXT NOT NULL DEFAULT '',
+  created_at      TEXT NOT NULL,
+  updated_at      TEXT NOT NULL,
+  PRIMARY KEY (id, version)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_process_model_specs_content
+  ON process_model_specs(line_id, product_id, recipe_id, recipe_version, content_hash);
+CREATE INDEX IF NOT EXISTS idx_process_model_specs_line ON process_model_specs(line_id, created_at DESC);
+
+-- 配方版本/工况谱系:半开区间 [from_ts, to_ts);运行中切换拆段,训练窗口不得跨版本。
+CREATE TABLE IF NOT EXISTS process_context_segments (
+  id                   TEXT PRIMARY KEY,
+  line_id              TEXT NOT NULL,
+  run_id               TEXT NOT NULL DEFAULT '',
+  from_ts              INTEGER NOT NULL,
+  to_ts                INTEGER,
+  recipe_id            TEXT NOT NULL,
+  recipe_version       INTEGER NOT NULL DEFAULT 0,
+  recipe_content_hash  TEXT NOT NULL,
+  condition_id         TEXT NOT NULL DEFAULT '',
+  source               TEXT NOT NULL DEFAULT 'line_run',  -- line_run|recipe_edit|manual
+  confirmed            INTEGER NOT NULL DEFAULT 0,
+  created_at           TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_process_context_segments_run_from ON process_context_segments(run_id, from_ts);
+CREATE INDEX IF NOT EXISTS idx_process_context_segments_line ON process_context_segments(line_id, from_ts);
+
+CREATE TABLE IF NOT EXISTS process_model_eligibility (
+  id                     TEXT PRIMARY KEY,
+  spec_id                TEXT NOT NULL,
+  spec_version           INTEGER NOT NULL DEFAULT 1,
+  scope                  TEXT NOT NULL DEFAULT 'simulation',  -- simulation|real
+  condition_id           TEXT NOT NULL DEFAULT '',
+  prediction_eligible    INTEGER NOT NULL DEFAULT 0,
+  optimization_eligible  INTEGER NOT NULL DEFAULT 0,
+  report_json            TEXT NOT NULL DEFAULT '{}',
+  evidence_version       TEXT NOT NULL DEFAULT '',
+  created_at             TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_process_model_eligibility_spec ON process_model_eligibility(spec_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS process_model_experiments (
+  id          TEXT PRIMARY KEY,
+  line_id     TEXT NOT NULL,
+  plan_json   TEXT NOT NULL,
+  status      TEXT NOT NULL DEFAULT 'planned',  -- planned|running|done|cancelled|failed
+  budget_json TEXT NOT NULL DEFAULT '{}',
+  created_by  TEXT NOT NULL DEFAULT '',
+  created_at  TEXT NOT NULL,
+  updated_at  TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_process_model_experiments_line ON process_model_experiments(line_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS optimizer_profiles (
+  id                    TEXT NOT NULL,
+  version               INTEGER NOT NULL DEFAULT 1,
+  name                  TEXT NOT NULL DEFAULT '',
+  model_ref             TEXT NOT NULL,
+  model_artifact_hash   TEXT NOT NULL DEFAULT '',
+  model_artifact_kind   TEXT NOT NULL DEFAULT '',
+  model_interface       TEXT NOT NULL DEFAULT '',
+  problem_template_ref  TEXT NOT NULL,
+  problem_config_json   TEXT NOT NULL DEFAULT '{}',
+  process_spec_ref      TEXT NOT NULL DEFAULT '',
+  solver_ref            TEXT NOT NULL,
+  solver_version        TEXT NOT NULL DEFAULT '',
+  condition_ids_json    TEXT NOT NULL DEFAULT '[]',
+  status                TEXT NOT NULL DEFAULT 'draft',  -- draft|validated|published|retired
+  owner_user_id         TEXT NOT NULL DEFAULT '',
+  problem_ir_hash       TEXT NOT NULL DEFAULT '',
+  content_hash          TEXT NOT NULL DEFAULT '',
+  created_at            TEXT NOT NULL,
+  updated_at            TEXT NOT NULL,
+  PRIMARY KEY (id, version)
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_profiles_model ON optimizer_profiles(model_ref, status);
+
+-- 作用域 = (workspace, channel, channel_agent, profile);channel_agent_id 是 channel_agents.id
+-- (实例身份),绝不用 agents.id 模板 id。多绑定 = 同一实例绑多个 Profile。
+CREATE TABLE IF NOT EXISTS optimizer_bindings (
+  id                TEXT PRIMARY KEY,
+  workspace_id      TEXT NOT NULL,
+  channel_id        TEXT NOT NULL REFERENCES channels(id) ON DELETE CASCADE,
+  channel_agent_id  TEXT NOT NULL REFERENCES channel_agents(id) ON DELETE CASCADE,
+  profile_id        TEXT NOT NULL,
+  profile_version   INTEGER NOT NULL,
+  capabilities_json TEXT NOT NULL DEFAULT '[]',
+  mode              TEXT NOT NULL DEFAULT 'recommendation',  -- shadow|recommendation
+  valid_from        TEXT NOT NULL,
+  valid_to          TEXT,
+  revision          INTEGER NOT NULL DEFAULT 1,
+  created_by        TEXT NOT NULL DEFAULT '',
+  created_at        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_optimizer_bindings_agent_profile
+  ON optimizer_bindings(channel_agent_id, profile_id, profile_version);
+CREATE INDEX IF NOT EXISTS idx_optimizer_bindings_channel ON optimizer_bindings(channel_id, channel_agent_id);
+
+CREATE TABLE IF NOT EXISTS optimizer_runs (
+  id                      TEXT PRIMARY KEY,
+  binding_id              TEXT NOT NULL,
+  binding_revision        INTEGER NOT NULL DEFAULT 1,
+  profile_id              TEXT NOT NULL,
+  profile_version         INTEGER NOT NULL,
+  problem_ir_hash         TEXT NOT NULL,
+  context_snapshot_json   TEXT NOT NULL DEFAULT '{}',
+  problem_ir_json         TEXT NOT NULL DEFAULT '{}',
+  status                  TEXT NOT NULL DEFAULT 'running',
+  diagnostics_json        TEXT NOT NULL DEFAULT '{}',
+  independent_cost        REAL,
+  started_at              TEXT NOT NULL,
+  finished_at             TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_runs_binding ON optimizer_runs(binding_id, started_at DESC);
+CREATE INDEX IF NOT EXISTS idx_optimizer_runs_status ON optimizer_runs(status, started_at DESC);
+
+CREATE TABLE IF NOT EXISTS optimizer_candidates (
+  id                 TEXT PRIMARY KEY,
+  run_id             TEXT NOT NULL REFERENCES optimizer_runs(id) ON DELETE CASCADE,
+  seq                INTEGER NOT NULL,
+  controls_json      TEXT NOT NULL DEFAULT '[]',
+  predicted_json     TEXT NOT NULL DEFAULT '[]',
+  cost               REAL,
+  constraints_json   TEXT NOT NULL DEFAULT '[]',
+  verified           INTEGER NOT NULL DEFAULT 0,
+  verify_report_json TEXT NOT NULL DEFAULT '{}'
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_candidates_run ON optimizer_candidates(run_id, seq);
+
+CREATE TABLE IF NOT EXISTS optimizer_recommendations (
+  id                 TEXT PRIMARY KEY,
+  run_id             TEXT NOT NULL REFERENCES optimizer_runs(id) ON DELETE CASCADE,
+  candidate_id       TEXT NOT NULL REFERENCES optimizer_candidates(id) ON DELETE CASCADE,
+  problem_ir_hash    TEXT NOT NULL,
+  model_artifact_hash TEXT NOT NULL DEFAULT '',
+  evidence_source    TEXT NOT NULL DEFAULT 'unassessed',
+  uq_evidence_json   TEXT,
+  status             TEXT NOT NULL DEFAULT 'unverified',  -- verified|unverified|expired
+  status_label       TEXT NOT NULL DEFAULT '',
+  legacy             TEXT NOT NULL DEFAULT '',
+  valid_until        TEXT NOT NULL,
+  created_at         TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_optimizer_recommendations_candidate ON optimizer_recommendations(candidate_id);
+CREATE INDEX IF NOT EXISTS idx_optimizer_recommendations_run ON optimizer_recommendations(run_id);
+
+CREATE TABLE IF NOT EXISTS optimizer_outcomes (
+  id                TEXT PRIMARY KEY,
+  recommendation_id TEXT NOT NULL REFERENCES optimizer_recommendations(id) ON DELETE CASCADE,
+  applied_at        TEXT,
+  observed_json     TEXT NOT NULL DEFAULT '{}',
+  delta_json        TEXT NOT NULL DEFAULT '{}',
+  verdict           TEXT NOT NULL DEFAULT 'pending',  -- pending|improved|regressed|inconclusive
+  created_at        TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_outcomes_recommendation ON optimizer_outcomes(recommendation_id);
+
+-- 双驱动候选互校(SW4/D6/D25):同一工件双实现逐 CV 无量纲一致性;不可变追加行
+CREATE TABLE IF NOT EXISTS optimizer_candidate_crosschecks (
+  id                            TEXT PRIMARY KEY,
+  recommendation_id             TEXT NOT NULL REFERENCES optimizer_recommendations(id) ON DELETE CASCADE,
+  run_id                        TEXT NOT NULL,
+  model_id                      TEXT NOT NULL DEFAULT '',
+  model_artifact_hash           TEXT NOT NULL DEFAULT '',
+  context_hash                  TEXT NOT NULL DEFAULT '',
+  input_distance_snapshot_json  TEXT NOT NULL DEFAULT '{}',
+  predicted_json                TEXT NOT NULL DEFAULT '[]',
+  replayed_json                 TEXT NOT NULL DEFAULT '[]',
+  dev_per_cv_json               TEXT NOT NULL DEFAULT '[]',
+  tol                           REAL NOT NULL DEFAULT 0.000001,
+  max_dev_dimensionless         REAL,
+  qhat_per_cv_json              TEXT NOT NULL DEFAULT '[]',
+  verdict                       TEXT NOT NULL DEFAULT 'fail',  -- pass|fail|not_applicable
+  condition_changed             INTEGER NOT NULL DEFAULT 0,
+  stale                         INTEGER NOT NULL DEFAULT 0,
+  reason                        TEXT NOT NULL DEFAULT '',
+  row_hash                      TEXT NOT NULL DEFAULT '',
+  created_at                    TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_crosschecks_rec ON optimizer_candidate_crosschecks(recommendation_id, created_at DESC, id DESC);`
 
 // ===== 默认种子数据(首轮初始化注入;owner NULL = 公共资源,所有登录用户只读共享) =====
 

package/server/services/workshop/db/ops.repo.ts

@@ -178,33 +178,54 @@ export interface AuditEntry {
   summary?: string
   /** 严重级(2026-10-08 写控 ACK 鉴定):info 缺省 / warn(未证实) / error(写入失败);日志页红黄标 */
   level?: 'info' | 'warn' | 'error'
+  /** 显式域标识:line(产线域)| system(全局审计);缺省按 lineId 推导,line 无 lineId 时 fail-closed 降级 system */
+  scope?: 'line' | 'system'
+}
+
+/**
+ * 域标识归一(写入侧单一事实源):显式 scope 优先;缺省按 lineId 推导;
+ * scope=line 但无 lineId → fail-closed 降级 system。recordOps 与仓储 append 共用。
+ */
+export function normalizeAuditScope(lineId: string | null | undefined, requested?: 'line' | 'system'): 'line' | 'system' {
+  const anchor = String(lineId ?? '').trim()
+  const scope = requested ?? (anchor ? 'line' : 'system')
+  return scope === 'line' && !anchor ? 'system' : scope
 }
 
 const AUDIT_COLS = `id, actor, actor_name AS actorName, actor_kind AS actorKind, action,
   target_kind AS targetKind, target_id AS targetId, detail_json AS detailJson, at,
-  line_id AS lineId, product_id AS productId, recipe_id AS recipeId, kind, summary, level`
+  line_id AS lineId, product_id AS productId, recipe_id AS recipeId, kind, summary, level, scope`
 
 export function createAuditRepo(db: DatabaseSync) {
   const insertStmt = db.prepare(
     `INSERT INTO audit_log (actor, actor_name, actor_kind, action, target_kind, target_id, detail_json, at,
-       line_id, product_id, recipe_id, kind, summary, level)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+       line_id, product_id, recipe_id, kind, summary, level, scope)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
   )
   const stmtCache = new Map<string, ReturnType<DatabaseSync['prepare']>>()
 
   return {
     append(e: AuditEntry): void {
+      const lineId = String(e.lineId ?? '').trim()
+      // 不变量:line 域必须有产线锚点;缺锚点降级 system,避免无归属行混入产线日志
+      const scope = normalizeAuditScope(lineId, e.scope)
       insertStmt.run(
         e.actor, e.actorName ?? '', e.actorKind ?? 'user', e.action,
         e.targetKind ?? '', e.targetId ?? '', JSON.stringify(e.detail ?? {}),
         e.at ?? new Date().toISOString(),
-        e.lineId ?? '', e.productId ?? '', e.recipeId ?? '', e.kind ?? '', e.summary ?? '', e.level ?? 'info',
+        lineId, e.productId ?? '', e.recipeId ?? '', e.kind ?? '', e.summary ?? '', e.level ?? 'info', scope,
       )
     },
     query(opts: {
       actor?: string
       targetId?: string
       action?: string
+      /** 动作前缀(如 recipe. / dcw.write.):跨越 kind 归类取同一族事件 */
+      actionPrefix?: string
+      /** 显式域过滤:line=产线日志 / system=全局审计;省略=全部 */
+      scope?: 'line' | 'system'
+      /** @deprecated 兼容旧调用:等价于 scope='line' */
+      lineOnly?: boolean
       lineId?: string
       productId?: string
       recipeId?: string
@@ -218,6 +239,13 @@ export function createAuditRepo(db: DatabaseSync) {
     }): Array<Record<string, unknown>> {
       const where: string[] = []
       const args: SQLInputValue[] = []
+      if (opts.scope) {
+        where.push('scope = ?')
+        args.push(opts.scope)
+      }
+      else if (opts.lineOnly) {
+        where.push('scope = \'line\'')
+      }
       if (opts.actor) {
         where.push('actor = ?')
         args.push(opts.actor)
@@ -230,6 +258,10 @@ export function createAuditRepo(db: DatabaseSync) {
         where.push('action = ?')
         args.push(opts.action)
       }
+      if (opts.actionPrefix) {
+        where.push('action LIKE ? ESCAPE \'\\\'')
+        args.push(`${opts.actionPrefix.replace(/[\\%_]/g, m => `\\${m}`)}%`)
+      }
       if (opts.lineId) {
         where.push('line_id = ?')
         args.push(opts.lineId)
@@ -260,22 +292,25 @@ export function createAuditRepo(db: DatabaseSync) {
         args.push(like, like, like, like)
       }
       if (opts.from) {
-        where.push('at >= ?')
+        // 用 julianday 比较绝对时刻:at 是带偏移的本地 ISO,跨时区历史行不能按字符串比大小
+        where.push('julianday(at) >= julianday(?)')
         args.push(opts.from)
       }
       if (opts.to) {
-        where.push('at <= ?')
+        where.push('julianday(at) <= julianday(?)')
         args.push(opts.to)
       }
       const key = `${where.join('|')}`
       let stmt = stmtCache.get(key)
       if (!stmt) {
         const sql = `SELECT ${AUDIT_COLS}
-          FROM audit_log ${where.length ? `WHERE ${where.join(' AND ')}` : ''} ORDER BY at DESC LIMIT ?`
+          FROM audit_log ${where.length ? `WHERE ${where.join(' AND ')}` : ''} ORDER BY julianday(at) DESC, id DESC LIMIT ?`
         stmt = db.prepare(sql)
         stmtCache.set(key, stmt)
       }
-      return stmt.all(...args, (opts.limit ?? 200) as SQLInputValue) as Array<Record<string, unknown>>
+      // limit 在仓储层再收一次口:调用方漏校验时也不产生负数/超大结果集
+      const limit = Math.max(1, Math.min(1000, Number(opts.limit) || 200))
+      return stmt.all(...args, limit as SQLInputValue) as Array<Record<string, unknown>>
     },
   }
 }

package/server/services/workshop/db/retention.ts

@@ -6,6 +6,8 @@
  *   audit_log         默认 90d   (retention.audit_days;合规观察期,从严保留)
  *   approval_history  默认 180d  (retention.approval_days;历史裁决主张不可变,放宽)
  *   analysis_reports  默认 365d  (retention.analysis_days;数据分析留痕台账,最宽松)
+ *   optimizer_runs    默认 365d  (retention.optimizer_days;运行/建议/收益台账)
+ *   process_model_eligibility / process_model_experiments 默认 365d (retention.process_model_days)
  * retention.disabled 整体逃生门(env AW_RETENTION_DISABLED / RETENTION_DISABLED 兼容别名)。
  * 覆盖链:config.yml < runtime-settings < env(AW_<键> 或历史别名)。时间列均为 TEXT ISO。
  * channel_events 与 daq_samples 已有各自保留机制,此处不重复覆盖。
@@ -29,6 +31,10 @@ const TARGETS = [
   { table: 'audit_log', column: 'at', days: 90, cfgKey: 'audit_days' },
   { table: 'approval_history', column: 'created_at', days: 180, cfgKey: 'approval_days' },
   { table: 'analysis_reports', column: 'created_at', days: 365, cfgKey: 'analysis_days' },
+  // Optimizer 台账(候选/建议/收益经 FK CASCADE 随 run 清理)
+  { table: 'optimizer_runs', column: 'started_at', days: 365, cfgKey: 'optimizer_days' },
+  { table: 'process_model_eligibility', column: 'created_at', days: 365, cfgKey: 'process_model_days' },
+  { table: 'process_model_experiments', column: 'created_at', days: 365, cfgKey: 'process_model_days' },
 ] as const
 
 export interface RetentionResult { table: string, removed: number, days: number }
@@ -40,6 +46,9 @@ export function runRetentionSweep(db: DatabaseSyncLike): RetentionResult[] {
   const out: RetentionResult[] = []
   for (const t of TARGETS) {
     const days = retention[t.cfgKey]
+    // 新表可能尚未建(半初始化库/旧部署):跳过而不是让整轮清理失败。
+    const exists = db.prepare('SELECT name FROM sqlite_master WHERE type = \'table\' AND name = ?').get(t.table)
+    if (!exists) continue
     const before = new Date(Date.now() - days * DAY_MS).toISOString()
     let removed = 0
     for (;;) {

package/server/services/workshop/db/schema.sql

@@ -389,3 +389,41 @@ CREATE TABLE IF NOT EXISTS analysis_reports (
 );
 CREATE INDEX IF NOT EXISTS idx_analysis_reports_line ON analysis_reports(line_id, created_at DESC);
 CREATE INDEX IF NOT EXISTS idx_analysis_reports_recipe ON analysis_reports(recipe_id);
+
+-- v28: 工具目录 + Channel 级工具治理(2026-10-20)
+CREATE TABLE IF NOT EXISTS tool_registry (
+  name             TEXT PRIMARY KEY,
+  source           TEXT NOT NULL,
+  plugin_name      TEXT NOT NULL DEFAULT '',
+  plugin_scope     TEXT NOT NULL DEFAULT '',
+  label            TEXT NOT NULL DEFAULT '',
+  description      TEXT NOT NULL DEFAULT '',
+  parameters_json  TEXT NOT NULL DEFAULT '{}',
+  roles_json       TEXT NOT NULL DEFAULT '["lead","worker"]',
+  group_name       TEXT NOT NULL DEFAULT '',
+  metadata_json    TEXT NOT NULL DEFAULT '{}',
+  definition_hash  TEXT NOT NULL DEFAULT '',
+  available        INTEGER NOT NULL DEFAULT 1,
+  first_seen_at    TEXT NOT NULL,
+  last_seen_at     TEXT NOT NULL,
+  updated_at       TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_source ON tool_registry(source, available);
+CREATE INDEX IF NOT EXISTS idx_tool_registry_plugin ON tool_registry(plugin_name);
+
+CREATE TABLE IF NOT EXISTS channel_tool_policies (
+  channel_id   TEXT PRIMARY KEY,
+  mode         TEXT NOT NULL DEFAULT 'all',
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS channel_tool_settings (
+  channel_id   TEXT NOT NULL,
+  tool_name    TEXT NOT NULL,
+  enabled      INTEGER NOT NULL DEFAULT 1,
+  updated_by   TEXT NOT NULL DEFAULT '',
+  updated_at   TEXT NOT NULL,
+  PRIMARY KEY (channel_id, tool_name)
+);
+CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled);