agentworkshop 0.7.70 → 0.7.71

package/server/services/workshop/agents/host-tool-bridge/dispatch.ts

@@ -12,14 +12,18 @@
  */
 import { getChannelPluginsRepo } from '../../db/channel-plugins.repo'
 import { getChannelTwinProfile, modelBackedToolPolicyFor, type AmlChannelProfileKind } from '../../aml/twin/channel-profile'
+import { getAmlRuntime } from '../../aml/runtime'
+import { getDcwLineRepo } from '../../dcw/dcw-line.repo'
 import { AML_TRAINING_TOOL_NAMES, AML_MODEL_BACKED_TOOL_NAMES, HOST_TOOLS } from './catalog'
 import { twinWriteGuard } from '../../aml/twin/feature-flags'
 import { listPluginTools, pluginOfTool } from '../plugin-tools'
+import { auditPluginToolCall, governPluginToolCall } from '../plugin-governance'
 import type { HostToolBridgeContext, HostToolCall, HostToolResult } from './types'
 import { INDUSTRIAL_TOOL_NAMES, dispatchIndustrialTool } from './tools/industrial'
 import { guardIndustrialToolGrant } from '../industrial/grant-guard'
 import { verifyIndustrialToolCall } from '../industrial/tool-verify'
 import { checkToolAgainstScope } from '../../runtime/permission-scope'
+import { optimizerDispatchGate, legacyMpcAliasGate } from './optimizer-gate'
 import { channelToolGate } from '../../tools/policy'
 import type { WorkshopPermissionScope } from '../../../../../shared/workshop-protocol'
 import { handleCompleteTask, handleReportProgress } from './tools/progress'
@@ -41,6 +45,56 @@ export async function dispatchHostTool(ctx: HostToolBridgeContext, req: HostTool
 /** 内置工具名(插件同名注册不参与分发:注入面已显示内置定义,执行面必须同源) */
 const BUILTIN_TOOL_NAMES = new Set(HOST_TOOLS.map(t => t.name))
 
+/** 优化器绑定 id 列表(不存在/表未建 → 空,fail-closed 由调用方处理)。 */
+function listBindingIds(agentId: string): string[] {
+  try {
+    return (getAmlRuntime().db.prepare('SELECT id FROM optimizer_bindings WHERE channel_agent_id = ?').all(agentId) as Array<{ id: string }>).map(r => r.id)
+  }
+  catch {
+    return []
+  }
+}
+
+/**
+ * 已绑定 AML 模型是否存在通过的优化资格报告(旧 mpc_optimize 迁移门控)。
+ * 资格必须**按模型自身谱系**溯源,不能按产线放行:
+ *   model → dataset.spec_ref/spec_version → process_model_eligibility(同 spec/version)。
+ * 作用域由产线性质决定(simulated → simulation,否则 real),模拟资格不得授权真实线。
+ */
+export function boundModelHasEligibility(modelId: string): boolean {
+  try {
+    const db = getAmlRuntime().db
+    const model = db.prepare(
+      `SELECT m.line_id AS lineId, m.product_id AS productId, m.recipe_id AS recipeId,
+              d.spec_ref AS specRef, d.spec_version AS specVersion
+       FROM aml_models m JOIN aml_datasets d ON d.id = m.dataset_id
+       WHERE m.id = ?`,
+    ).get(modelId) as { lineId: string, productId: string, recipeId: string, specRef: string, specVersion: number | null } | undefined
+    if (!model?.specRef) return false
+    const line = getDcwLineRepo().byId(model.lineId)
+    const scope = line?.simulated === true ? 'simulation' : 'real'
+    const rows = db.prepare(
+      `SELECT e.report_json AS report FROM process_model_eligibility e
+       JOIN process_model_specs s ON s.id = e.spec_id AND s.version = e.spec_version
+       WHERE e.spec_id = ? AND e.spec_version = ? AND e.scope = ?
+         AND s.line_id = ? AND s.product_id = ? AND s.recipe_id = ?
+         AND e.optimization_eligible = 1
+       ORDER BY e.created_at DESC LIMIT 50`,
+    ).all(model.specRef, model.specVersion ?? 1, scope, model.lineId, model.productId, model.recipeId) as Array<{ report: string }>
+    return rows.some((r) => {
+      try {
+        return JSON.parse(r.report || '{}').optimizationEligible === true
+      }
+      catch {
+        return false
+      }
+    })
+  }
+  catch {
+    return false
+  }
+}
+
 /** 工具结果统一出口上限:超长文本截断+尾注(2026-10-05 评审;export/diag 类可经 optOut 放行) */
 const TOOL_RESULT_MAX_CHARS = 16_000
 const TRUNCATE_OPT_OUT_TOOLS = new Set(['daq_export', 'diag_run'])
@@ -97,10 +151,16 @@ async function dispatchHostToolInner(ctx: HostToolBridgeContext, req: HostToolCa
         isError: true,
       }
     }
+    // 平台侧插件治理(WP4b/WP8):kb 入库 HITL + 声明式引用校验;原生/REST/MCP 同源
+    const governed = await governPluginToolCall(identity, req.toolName, req.arguments ?? {}, pluginTool)
+    if (governed) return governed
     try {
-      return await pluginTool.handler(req.arguments ?? {}, identity)
+      const result = await pluginTool.handler(req.arguments ?? {}, identity)
+      auditPluginToolCall(identity, req.toolName, result)
+      return result
     }
     catch (err) {
+      auditPluginToolCall(identity, req.toolName, { text: err instanceof Error ? err.message : String(err), isError: true })
       return {
         text: `工具执行异常(${req.toolName}): ${err instanceof Error ? err.message : String(err)}`,
         isError: true,
@@ -117,6 +177,17 @@ async function dispatchHostToolInner(ctx: HostToolBridgeContext, req: HostToolCa
   //  - 场景/spec/校准请求族:hybrid_twin + 训练 Channel;
   //  - 训练族(aml_job/dataset 等):工艺优化 Channel 拒绝(边训边优被结构禁止)。
   const twinKind: AmlChannelProfileKind = getChannelTwinProfile(identity.channelId).profile
+  // G4.6:旧 mpc_optimize 在既无 Profile 绑定也无 AML 模型绑定时不再返回调参方案
+  {
+    const profile = getChannelTwinProfile(identity.channelId)
+    const legacy = legacyMpcAliasGate({
+      toolName: req.toolName,
+      hasOptimizerBinding: listBindingIds(identity.agentId).length > 0,
+      hasBoundModel: Boolean(profile.boundModelId),
+      hasEligibleModel: profile.boundModelId ? boundModelHasEligibility(profile.boundModelId) : false,
+    })
+    if (!legacy.allowed) return { text: `${legacy.code}: ${legacy.message}`, isError: true }
+  }
   const isTwinTool = req.toolName.startsWith('twin_') || ['mpc_optimize', 'optimization_explore'].includes(req.toolName)
   if (isTwinTool) {
     const isSceneFamily = /^twin_(scene|physics|provider|calibration)/.test(req.toolName)
@@ -149,6 +220,17 @@ async function dispatchHostToolInner(ctx: HostToolBridgeContext, req: HostToolCa
     return { text: `工艺优化 Channel 不承担建模与训练(职责解耦):${req.toolName} 仅限 AML 训练 Channel 使用。请在此专注 goal 探索与模型驱动寻优。`, isError: true }
   }
 
+  // Optimizer 工具显式门控(G4.3 / B.8.2 #3-#4):
+  // 注入面隐藏不是安全边界 —— REST/MCP 直调必须在这里被同样拒绝。
+  {
+    const gate = optimizerDispatchGate({
+      toolName: req.toolName,
+      twinKind,
+      bindingCount: req.toolName.startsWith('optimizer_') ? listBindingIds(identity.agentId).length : 0,
+    })
+    if (!gate.allowed) return { text: `${gate.code}: ${gate.message}`, isError: true }
+  }
+
   // 所有真实写入口在统一分发层再做一次服务端 fail-closed 守卫；工具目录隐藏不是安全边界。
   if (['dcw_control', 'param_control', 'dcw_rollback', 'recipe_create', 'recipe_update', 'recipe_rollback', 'recipe_trial', 'recipe_apply'].includes(req.toolName)) {
     // Profile 级写面(2026-10-18):观察面零写、训练面无产线写、优化面只认 optimization_explore。

package/server/services/workshop/agents/host-tool-bridge/optimizer-gate.ts

@@ -0,0 +1,72 @@
+/**
+ * Optimizer 工具门控(纯函数,无 Nitro/DB 依赖):
+ * dispatch 与验收脚本共用同一判定,避免"注入面隐藏但当 REST/MCP 直调仍可执行"。
+ */
+export const OPTIMIZER_PREFIX = 'optimizer_'
+
+export interface OptimizerGateInput {
+  toolName: string
+  /** Channel 档位(legacy / aml_training / aml_optimization / hybrid_twin / exp-miner / line-doctor) */
+  twinKind: string
+  /** 该 Agent 实例的有效绑定数(capabilities 允许 0) */
+  bindingCount: number
+}
+
+export interface OptimizerGateResult {
+  allowed: boolean
+  /** 拒绝时的可判定错误码(前缀)与可读指引 */
+  code?: 'OPTIMIZER_CHANNEL_DISABLED' | 'OPTIMIZER_PROFILE_DENIED' | 'BINDING_NOT_FOUND' | 'OPTIMIZATION_NOT_ELIGIBLE'
+  message?: string
+}
+
+export function optimizerDispatchGate(input: OptimizerGateInput): OptimizerGateResult {
+  const { toolName, twinKind, bindingCount } = input
+  if (!toolName.startsWith(OPTIMIZER_PREFIX)) return { allowed: true }
+  if (twinKind === 'legacy') {
+    return {
+      allowed: false,
+      code: 'OPTIMIZER_CHANNEL_DISABLED',
+      message: 'Channel 未启用 Twin profile,优化器工具拒绝执行。请先把 Channel 档位切到 aml_optimization(工艺优化)或 hybrid_twin。',
+    }
+  }
+  if (twinKind !== 'aml_optimization' && twinKind !== 'hybrid_twin') {
+    return {
+      allowed: false,
+      code: 'OPTIMIZER_PROFILE_DENIED',
+      message: `${toolName} 仅在工艺优化(aml_optimization)或 hybrid_twin Channel 可用(当前 profile=${twinKind})。`,
+    }
+  }
+  // capabilities 允许无绑定(用于解释为什么不可用);其余四个必须存在有效绑定
+  if (toolName !== 'optimizer_capabilities' && bindingCount < 1) {
+    return {
+      allowed: false,
+      code: 'BINDING_NOT_FOUND',
+      message: `该 Agent 未绑定优化器 Profile;先在 Channel 设置中绑定后再调用 ${toolName}。`,
+    }
+  }
+  return { allowed: true }
+}
+
+/**
+ * 旧 `mpc_optimize` 别名迁移(G4.6):
+ *  - 有优化器绑定 → 允许(新 Profile 路径仍应优先用 optimizer_solve);
+ *  - 无绑定但有已绑定的 AML 模型**且该模型有优化资格** → 允许(既有 AML 模型驱动流程);
+ *  - 有模型但无优化资格 / 两者皆无 → 拒绝并给"先绑定/先辨识"引导,不再返回可操作调参方案。
+ */
+export function legacyMpcAliasGate(input: { toolName: string, hasOptimizerBinding: boolean, hasBoundModel: boolean, hasEligibleModel?: boolean }): OptimizerGateResult {
+  if (input.toolName !== 'mpc_optimize') return { allowed: true }
+  if (input.hasOptimizerBinding) return { allowed: true }
+  if (input.hasBoundModel && input.hasEligibleModel) return { allowed: true }
+  if (input.hasBoundModel) {
+    return {
+      allowed: false,
+      code: 'OPTIMIZATION_NOT_ELIGIBLE',
+      message: '当前绑定的 AML 模型没有通过的优化资格报告(辨识不足/OOD/动作证据缺失)。请先完成 AML 数据集资格评估与模型晋级,或绑定优化器 Profile 后用 optimizer_solve。',
+    }
+  }
+  return {
+    allowed: false,
+    code: 'BINDING_NOT_FOUND',
+    message: 'mpc_optimize 需要已绑定优化器 Profile 或已绑定且具备优化资格的 AML 模型;当前两者皆无。请先在 Channel 设置中绑定 Profile,或完成 AML 训练与资格评估后再寻优。',
+  }
+}

package/server/services/workshop/agents/host-tool-bridge/per-agent.ts

@@ -9,10 +9,12 @@
  * 只读装配:不改变工具集合(角色/插件/档位过滤仍由 hostToolsForRole 决定),
  * 仅在描述尾部追加可见资源清单。无绑定 → 原样返回,零行为变化。
  */
-import { hostToolsForRole } from './catalog'
+import { hostToolsForRole, OPTIMIZER_TOOL_NAMES } from './catalog'
 import { getAgentNodeBindingRepo } from '../node-bindings.repo'
 import { getDaqController } from '../../daq/daq-controller'
 import { getDcwController } from '../../dcw/dcw-controller'
+import { listBindingsForAgent } from '../../optimization/binding.service'
+import { foldList as foldListImpl, sortedById } from './description-budget'
 
 /** 需要追加“可见资源”描述的工具族 */
 const DAQ_TOOLS = new Set(['daq_query', 'daq_frames', 'daq_export'])
@@ -83,32 +85,65 @@ export function agentToolResources(agentId: string): AgentToolResourceView {
   return out
 }
 
-const listText = (items: Array<{ id: string, name: string, unit?: string }>): string =>
-  items.map(x => `${x.name}(${x.id}${x.unit ? `,${x.unit}` : ''})`).join('、')
+/**
+ * WP6 描述预算:大绑定面不再全量拼进 description(撑上下文 + 放大 10s 轮询载荷 + 触发
+ * 无意义 list_changed)。折叠确定性由 description-budget 叶子模块保证。
+ * env AW_DESC_BUDGET=0 关闭折叠(回退原行为)。
+ */
+const foldList = (prefix: string, items: string[]): string => foldListImpl(prefix, items)
 
-/** 在角色过滤后的工具面上追加 Agent 绑定资源描述 */
+/** 在角色过滤后的工具面上追加 Agent 绑定资源描述 + 优化器绑定裁剪 */
 export function hostToolsForAgent(agentId: string, role: 'lead' | 'worker', channelId?: string) {
   const tools = hostToolsForRole(role, channelId)
+  // G4.3 #10:无有效绑定时移除 solve/status/cancel/plan_get(保留 capabilities 作解释入口);
+  // 多绑定时在描述中列出 bindingId(solve 需显式选择)。过滤不改变返回类型。
+  const bindings = listOptimizerBindings(agentId)
+  const filtered = bindings.length
+    ? tools
+    : tools.filter(t => !OPTIMIZER_REQUIRES_BINDING.has(t.name))
+  const optimizerLine = bindings.length
+    ? `\n\n本 Agent 的优化器绑定:${bindings.map(b => `${b.id}(profile ${b.profileVersion},${b.mode};能力:${b.capabilities.join('/')})`).join('; ')}${bindings.length > 1 ? '\n多绑定:调用 optimizer_solve 必须显式传 binding_id。' : ''}`
+    : ''
   const res = agentToolResources(agentId)
-  const lineOnlyDaq = res.daqLineNodes.filter(n => !res.daqNodes.some(x => x.id === n.id))
-  if (res.daqNodes.length === 0 && lineOnlyDaq.length === 0 && res.recipes.length === 0) return tools
+  // WP6:排序保证同一绑定面确定性输出(折叠/不折叠都稳定)
+  const sortedDaq = sortedById(res.daqNodes)
+  const sortedRecipes = sortedById(res.recipes)
+  const sortedMes = sortedById(res.mesNodes)
+  const lineOnlyDaq = sortedById(res.daqLineNodes.filter(n => !sortedDaq.some(x => x.id === n.id)))
+  if (sortedDaq.length === 0 && lineOnlyDaq.length === 0 && sortedRecipes.length === 0 && !bindings.length) return filtered
   const daqParts = [
-    res.daqNodes.length > 0 ? `本 Agent 直接绑定的数采节点(仅这些可查):${listText(res.daqNodes)}` : '',
-    lineOnlyDaq.length > 0 ? `频道绑线只读数采节点(可查):${listText(lineOnlyDaq)}` : '',
+    sortedDaq.length > 0 ? foldList(`本 Agent 直接绑定的数采节点(仅这些可查):`, sortedDaq.map(x => `${x.name}(${x.id}${x.unit ? `,${x.unit}` : ''})`)) : '',
+    lineOnlyDaq.length > 0 ? foldList(`频道绑线只读数采节点(可查):`, lineOnlyDaq.map(x => `${x.name}(${x.id}${x.unit ? `,${x.unit}` : ''})`)) : '',
   ].filter(Boolean)
   const daqLine = daqParts.length > 0 ? `\n\n${daqParts.join('\n')}` : ''
-  const recipeLine = res.recipes.length > 0
-    ? `\n\n本 Agent 已绑定的配方(仅这些可写/下发):${res.recipes.map(r => `${r.name}(${r.id},v${r.version};参数:${r.params.map(p => `${p.name}(${p.nodeId})`).join('、') || '无'})`).join(';')}`
+  const recipeLine = sortedRecipes.length > 0
+    ? foldList(
+        `\n\n本 Agent 已绑定的配方(仅这些可写/下发):`,
+        sortedRecipes.map(r => `${r.name}(${r.id},v${r.version};参数:${r.params.map(p => `${p.name}(${p.nodeId})`).join('、') || '无'})`),
+      )
     : ''
-  const mesLine = res.mesNodes.length > 0
-    ? `\n\n本 Agent 可经配方参数面取数的 MES 点位:${listText(res.mesNodes)}`
+  const mesLine = sortedMes.length > 0
+    ? foldList(`\n\n本 Agent 可经配方参数面取数的 MES 点位:`, sortedMes.map(x => `${x.name}(${x.id}${x.unit ? `,${x.unit}` : ''})`))
     : ''
-  return tools.map((t) => {
+  return filtered.map((t) => {
     let suffix = ''
     if (DAQ_TOOLS.has(t.name)) suffix = daqLine
     else if (RECIPE_TOOLS.has(t.name)) suffix = recipeLine
     else if (MES_TOOLS.has(t.name)) suffix = mesLine
+    else if (OPTIMIZER_TOOL_NAMES.has(t.name)) suffix = optimizerLine
     if (!suffix) return t
     return { ...t, description: `${t.description ?? ''}${suffix}` }
   })
 }
+
+/** 优化器中必须绑定才能注入/调用的四个工具(capabilities 始终保留)。 */
+const OPTIMIZER_REQUIRES_BINDING = new Set(['optimizer_solve', 'optimizer_status', 'optimizer_cancel', 'optimizer_plan_get'])
+
+function listOptimizerBindings(agentId: string): Array<{ id: string, profileVersion: string, mode: string, capabilities: string[] }> {
+  try {
+    return listBindingsForAgent(agentId).map(b => ({ id: b.id, profileVersion: b.profileVersion, mode: b.mode, capabilities: b.capabilities as string[] }))
+  }
+  catch {
+    return []
+  }
+}

package/server/services/workshop/agents/host-tool-bridge/tools/industrial.ts

@@ -1,101 +1,111 @@
-/**
- * 工业工具族(my_industrial_nodes / aml_* / dcw_* / param_* / daq_* / ops_log / recipe_* / line_context / analysis_*)。
- *
- * 原 dispatchHostTool 首个 switch 的 26 个转发分支按行搬运到本模块:每个分支都只是
- * 「按 agentId 查绑定与节点后转交 industrial 模块的同名函数」,因此把闭包捕获的
- * (identity.agentId, args) 收敛为显式参数,并整理成「工具名 → 处理器」一张表。
- * 工具名集合与处理器表同源(INDUSTRIAL_TOOL_NAMES 由表键导出),不会出现有名字无处理器的分支。
- *
- * 该族**不依赖 workspace**,由 dispatch 在 workspace 门控之前分流(保持原分发顺序)。
- */
-import type { HostToolResult } from '../types'
-import { toolLineStart, toolLineStop, toolLineStatus, toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqExport, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRollback, toolLineContext, toolMesCatalog, toolMesDatasetRead, toolMesDatasets, toolMesExport, toolMesFetch, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolRecipeApply, toolRecipeCatalog, toolRecipeCreate, toolRecipeLog, toolRecipeRollback, toolRecipeTrial, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest, toolAnalysisSave, toolAnalysisQuery } from '../../industrial'
-
-import { toolExpCollect } from '../../industrial/exp-tools'
-import { toolRecipePropose } from '../../industrial/recipe-propose-tools'
-import { toolAmlActivity } from '../../industrial/aml-activity'
-
-type IndustrialToolHandler = (agentId: string, args: Record<string, unknown>, channelId?: string) => Promise<HostToolResult>
-
-/** 工具名 → 转发处理器(顺序与原 dispatch 首个 switch 的分支顺序一致) */
-const INDUSTRIAL_HANDLERS = new Map<string, IndustrialToolHandler>([
-  ['my_industrial_nodes', agentId => toolMyIndustrialNodes(agentId)],
-  ['aml_node_catalog', agentId => toolAmlNodeCatalog(agentId)],
-  ['aml_dataset_build', (agentId, args) => toolAmlDatasetBuild(agentId, args as Parameters<typeof toolAmlDatasetBuild>[1])],
-  ['aml_dataset_stats', (agentId, args) => toolAmlDatasetStats(agentId, args as Parameters<typeof toolAmlDatasetStats>[1])],
-  ['aml_job_submit', (agentId, args) => toolAmlJobSubmit(agentId, args as Parameters<typeof toolAmlJobSubmit>[1])],
-  ['aml_job_status', (agentId, args) => toolAmlJobStatus(agentId, args as Parameters<typeof toolAmlJobStatus>[1])],
-  ['aml_job_logs', (agentId, args) => toolAmlJobLogs(agentId, args as Parameters<typeof toolAmlJobLogs>[1])],
-  ['aml_job_cancel', (agentId, args) => toolAmlJobCancel(agentId, args as Parameters<typeof toolAmlJobCancel>[1])],
-  ['aml_leaderboard', (agentId, args) => toolAmlLeaderboard(agentId, args as Parameters<typeof toolAmlLeaderboard>[1])],
-  ['aml_model_find', (agentId, args) => toolAmlModelFind(agentId, args as Parameters<typeof toolAmlModelFind>[1])],
-  ['aml_model_promote', (agentId, args) => toolAmlModelPromote(agentId, args as Parameters<typeof toolAmlModelPromote>[1])],
-  ['aml_model_reference', (agentId, args) => toolAmlModelReference(agentId, args as Parameters<typeof toolAmlModelReference>[1])],
-  ['aml_training_plan_list', (agentId, args) => toolAmlTrainingPlanList(agentId, args)],
-  ['aml_training_plan_create', (agentId, args) => toolAmlTrainingPlanCreate(agentId, args as Parameters<typeof toolAmlTrainingPlanCreate>[1])],
-  ['aml_training_plan_train', (agentId, args) => toolAmlTrainingPlanTrain(agentId, args as Parameters<typeof toolAmlTrainingPlanTrain>[1])],
-  ['twin_provider_catalog', (agentId, args) => toolTwinProviderCatalog(agentId, args)],
-  ['twin_scene_discover', (agentId, args) => toolTwinSceneDiscover(agentId, args)],
-  ['twin_scene_compile', (agentId, args) => toolTwinSceneCompile(agentId, args)],
-  ['twin_scene_freeze', (agentId, args) => toolTwinSceneFreeze(agentId, args)],
-  ['twin_physics_spec_draft', (agentId, args) => toolTwinPhysicsSpecDraft(agentId, args)],
-  ['twin_physics_spec_validate', (agentId, args) => toolTwinPhysicsSpecValidate(agentId, args)],
-  ['twin_physics_spec_compile', (agentId, args) => toolTwinPhysicsSpecCompile(agentId, args)],
-  ['twin_scene_read', (agentId, args) => toolTwinSceneRead(agentId, args)],
-  ['twin_snapshot_create', (agentId, args) => toolTwinSnapshotCreate(agentId, args)],
-  ['twin_trial_run', (agentId, args) => toolTwinTrialRun(agentId, args)],
-  ['mpc_optimize', (agentId, args) => toolMpcOptimize(agentId, args)],
-  ['twin_gate_evaluate', (agentId, args) => toolTwinGateEvaluate(agentId, args)],
-  ['twin_calibration_request', (agentId, args) => toolTwinCalibrationRequest(agentId, args)],
-  ['optimization_explore', (agentId, args, channelId) => toolOptimizationExplore(agentId, args as Parameters<typeof toolOptimizationExplore>[1], channelId)],
-  ['twin_bayes_optimize', (agentId, args) => toolTwinBayesOptimize(agentId, args)],
-  ['dcw_control', (agentId, args, channelId) => toolDcwControl(agentId, args as { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string }, channelId)],
-  ['param_control', (agentId, args, channelId) => toolParamControl(agentId, args as { param?: string, value?: number | string, hypothesis?: string, task_id?: string, line_id?: string }, channelId)],
-  ['daq_query', (agentId, args) => toolDaqQuery(agentId, args as Parameters<typeof toolDaqQuery>[1])],
-  ['daq_export', (agentId, args) => toolDaqExport(agentId, args as Parameters<typeof toolDaqExport>[1])],
-  ['daq_frames', (agentId, args) => toolDaqFrames(agentId, args as Parameters<typeof toolDaqFrames>[1])],
-  ['dcw_judge', (agentId, args) => toolDcwJudge(agentId, args as { record_id?: string, verdict?: string, reason?: string })],
-  ['dcw_rollback', (agentId, args) => toolDcwRollback(agentId, args as { record_id?: string, node_id?: string, to?: string })],
-  ['dcw_journal', (agentId, args) => toolDcwJournal(agentId, args as { node_id?: string, recipe_id?: string, limit?: number | string })],
-  ['ops_log', (agentId, args) => toolOpsLog(agentId, args as Parameters<typeof toolOpsLog>[1])],
-  // 显式别名:line_log 与 ops_log 同一 handler,便于 Agent 直接把「产线日志」与产线对象关联
-  ['line_log', (agentId, args) => toolOpsLog(agentId, args as Parameters<typeof toolOpsLog>[1])],
-  ['recipe_log', (agentId, args) => toolRecipeLog(agentId, args as Parameters<typeof toolRecipeLog>[1])],
-  ['recipe_catalog', (agentId, args) => toolRecipeCatalog(agentId, args as Parameters<typeof toolRecipeCatalog>[1])],
-  ['recipe_create', (agentId, args) => toolRecipeCreate(agentId, args as Parameters<typeof toolRecipeCreate>[1])],
-  ['line_context', (agentId, args) => toolLineContext(agentId, args as { line_id?: string })],
-  ['recipe_versions', (agentId, args) => toolRecipeVersions(agentId, args as { recipe_id?: string, limit?: number | string })],
-  ['recipe_update', (agentId, args) => toolRecipeUpdate(agentId, args as Parameters<typeof toolRecipeUpdate>[1])],
-  ['recipe_rollback', (agentId, args) => toolRecipeRollback(agentId, args as Parameters<typeof toolRecipeRollback>[1])],
-  ['recipe_trial', (agentId, args) => toolRecipeTrial(agentId, args as Parameters<typeof toolRecipeTrial>[1])],
-  ['recipe_apply', (agentId, args) => toolRecipeApply(agentId, args as Parameters<typeof toolRecipeApply>[1])],
-  ['mes_catalog', (agentId, args) => toolMesCatalog(agentId, args as Parameters<typeof toolMesCatalog>[1])],
-  ['mes_fetch', (agentId, args) => toolMesFetch(agentId, args as Parameters<typeof toolMesFetch>[1])],
-  ['mes_export', (agentId, args) => toolMesExport(agentId, args as Parameters<typeof toolMesExport>[1])],
-  ['mes_dataset_read', (agentId, args) => toolMesDatasetRead(agentId, args as Parameters<typeof toolMesDatasetRead>[1])],
-  ['mes_datasets', (agentId, args) => toolMesDatasets(agentId, args as Parameters<typeof toolMesDatasets>[1])],
-  ['exp_collect', (agentId, args) => toolExpCollect(agentId, args as { line_id?: string, lineId?: string })],
-  // 产线 Co-Pilot P2(诊断工程师下发面):整包方案审批 + AML 活动硬闸自查
-  ['recipe_propose', (agentId, args) => toolRecipePropose(agentId, args as Parameters<typeof toolRecipePropose>[1])],
-  ['line_start', (agentId, args, channelId) => toolLineStart(agentId, args as Parameters<typeof toolLineStart>[1], channelId)],
-  ['line_stop', (agentId, args, channelId) => toolLineStop(agentId, args as Parameters<typeof toolLineStop>[1], channelId)],
-  ['line_status', (agentId, args, channelId) => toolLineStatus(agentId, args as Parameters<typeof toolLineStatus>[1], channelId)],
-  ['aml_activity', (agentId, args) => toolAmlActivity(agentId, args as { line_id?: string })],
-  // 数据分析系统:分析结果留痕台账(save 可写台账(非产线写);query 查历史留痕)
-  ['analysis_save', (agentId, args, channelId) => toolAnalysisSave(agentId, args as Parameters<typeof toolAnalysisSave>[1], channelId)],
-  ['analysis_query', (agentId, args) => toolAnalysisQuery(agentId, args as Parameters<typeof toolAnalysisQuery>[1])],
-])
-
-/** 工业工具名集合(与 INDUSTRIAL_HANDLERS 同源;dispatch 据此在 workspace 门控前分流) */
-export const INDUSTRIAL_TOOL_NAMES: ReadonlySet<string> = new Set(INDUSTRIAL_HANDLERS.keys())
-
-/**
- * 工业工具族分发:按工具名转交 industrial 模块(调用参数与该族原分支逐字一致)。
- * 调用方先经 INDUSTRIAL_TOOL_NAMES 判断,故「未登记的工具名」不可达 —— 仍然显式拒绝,
- * 避免静默返回与未知工具混淆。
- */
-export function dispatchIndustrialTool(agentId: string, toolName: string, args: Record<string, unknown>, channelId?: string): Promise<HostToolResult> {
-  const handler = INDUSTRIAL_HANDLERS.get(toolName)
-  if (!handler) return Promise.reject(new Error(`未知工业工具: ${toolName}`))
-  return handler(agentId, args, channelId)
-}
+/**
+ * 工业工具族(my_industrial_nodes / aml_* / dcw_* / param_* / daq_* / ops_log / recipe_* / line_context / analysis_*)。
+ *
+ * 原 dispatchHostTool 首个 switch 的 26 个转发分支按行搬运到本模块:每个分支都只是
+ * 「按 agentId 查绑定与节点后转交 industrial 模块的同名函数」,因此把闭包捕获的
+ * (identity.agentId, args) 收敛为显式参数,并整理成「工具名 → 处理器」一张表。
+ * 工具名集合与处理器表同源(INDUSTRIAL_TOOL_NAMES 由表键导出),不会出现有名字无处理器的分支。
+ *
+ * 该族**不依赖 workspace**,由 dispatch 在 workspace 门控之前分流(保持原分发顺序)。
+ */
+import type { HostToolResult } from '../types'
+import { toolLineStart, toolLineStop, toolLineStatus, toolAmlDatasetBuild, toolAmlDatasetStats, toolAmlJobCancel, toolAmlJobLogs, toolAmlJobStatus, toolAmlJobSubmit, toolAmlLeaderboard, toolAmlModelFind, toolAmlModelPromote, toolAmlModelReference, toolAmlNodeCatalog, toolAmlTrainingPlanCreate, toolAmlTrainingPlanList, toolAmlTrainingPlanTrain, toolDaqExport, toolDaqFrames, toolDaqQuery, toolDcwControl, toolDcwJudge, toolDcwJournal, toolDcwRollback, toolLineContext, toolMesCatalog, toolMesDatasetRead, toolMesDatasets, toolMesExport, toolMesFetch, toolMyIndustrialNodes, toolOpsLog, toolParamControl, toolRecipeApply, toolRecipeCatalog, toolRecipeCreate, toolRecipeLog, toolRecipeRollback, toolRecipeTrial, toolRecipeUpdate, toolRecipeVersions, toolOptimizationExplore, toolTwinProviderCatalog, toolTwinSceneDiscover, toolTwinSceneCompile, toolTwinSceneFreeze, toolTwinSceneRead, toolTwinPhysicsSpecDraft, toolTwinPhysicsSpecValidate, toolTwinPhysicsSpecCompile, toolTwinSnapshotCreate, toolTwinTrialRun, toolMpcOptimize, toolTwinGateEvaluate, toolTwinBayesOptimize, toolTwinCalibrationRequest, toolAnalysisSave, toolAnalysisQuery } from '../../industrial'
+
+import { toolExpCollect } from '../../industrial/exp-tools'
+import { toolRecipePropose } from '../../industrial/recipe-propose-tools'
+import { toolAmlActivity } from '../../industrial/aml-activity'
+import { toolOptimizerCancel, toolOptimizerCapabilities, toolOptimizerPlanGet, toolOptimizerSolve, toolOptimizerStatus } from '../../industrial/optimizer-tools'
+import { toolIndustrialResources } from '../../industrial/resources-tools'
+
+type IndustrialToolHandler = (agentId: string, args: Record<string, unknown>, channelId?: string) => Promise<HostToolResult>
+
+/** 工具名 → 转发处理器(顺序与原 dispatch 首个 switch 的分支顺序一致) */
+const INDUSTRIAL_HANDLERS = new Map<string, IndustrialToolHandler>([
+  ['my_industrial_nodes', agentId => toolMyIndustrialNodes(agentId)],
+  // WP6:绑定面按需分页查询(工具描述折叠后的配套读面;只读、无引用参数)
+  ['industrial_resources', (agentId, args) => toolIndustrialResources(agentId, args)],
+  ['aml_node_catalog', agentId => toolAmlNodeCatalog(agentId)],
+  ['aml_dataset_build', (agentId, args) => toolAmlDatasetBuild(agentId, args as Parameters<typeof toolAmlDatasetBuild>[1])],
+  ['aml_dataset_stats', (agentId, args) => toolAmlDatasetStats(agentId, args as Parameters<typeof toolAmlDatasetStats>[1])],
+  ['aml_job_submit', (agentId, args) => toolAmlJobSubmit(agentId, args as Parameters<typeof toolAmlJobSubmit>[1])],
+  ['aml_job_status', (agentId, args) => toolAmlJobStatus(agentId, args as Parameters<typeof toolAmlJobStatus>[1])],
+  ['aml_job_logs', (agentId, args) => toolAmlJobLogs(agentId, args as Parameters<typeof toolAmlJobLogs>[1])],
+  ['aml_job_cancel', (agentId, args) => toolAmlJobCancel(agentId, args as Parameters<typeof toolAmlJobCancel>[1])],
+  ['aml_leaderboard', (agentId, args) => toolAmlLeaderboard(agentId, args as Parameters<typeof toolAmlLeaderboard>[1])],
+  ['aml_model_find', (agentId, args) => toolAmlModelFind(agentId, args as Parameters<typeof toolAmlModelFind>[1])],
+  ['aml_model_promote', (agentId, args) => toolAmlModelPromote(agentId, args as Parameters<typeof toolAmlModelPromote>[1])],
+  ['aml_model_reference', (agentId, args) => toolAmlModelReference(agentId, args as Parameters<typeof toolAmlModelReference>[1])],
+  ['aml_training_plan_list', (agentId, args) => toolAmlTrainingPlanList(agentId, args)],
+  ['aml_training_plan_create', (agentId, args) => toolAmlTrainingPlanCreate(agentId, args as Parameters<typeof toolAmlTrainingPlanCreate>[1])],
+  ['aml_training_plan_train', (agentId, args) => toolAmlTrainingPlanTrain(agentId, args as Parameters<typeof toolAmlTrainingPlanTrain>[1])],
+  ['twin_provider_catalog', (agentId, args) => toolTwinProviderCatalog(agentId, args)],
+  ['twin_scene_discover', (agentId, args) => toolTwinSceneDiscover(agentId, args)],
+  ['twin_scene_compile', (agentId, args) => toolTwinSceneCompile(agentId, args)],
+  ['twin_scene_freeze', (agentId, args) => toolTwinSceneFreeze(agentId, args)],
+  ['twin_physics_spec_draft', (agentId, args) => toolTwinPhysicsSpecDraft(agentId, args)],
+  ['twin_physics_spec_validate', (agentId, args) => toolTwinPhysicsSpecValidate(agentId, args)],
+  ['twin_physics_spec_compile', (agentId, args) => toolTwinPhysicsSpecCompile(agentId, args)],
+  ['twin_scene_read', (agentId, args) => toolTwinSceneRead(agentId, args)],
+  ['twin_snapshot_create', (agentId, args) => toolTwinSnapshotCreate(agentId, args)],
+  ['twin_trial_run', (agentId, args) => toolTwinTrialRun(agentId, args)],
+  ['mpc_optimize', (agentId, args) => toolMpcOptimize(agentId, args)],
+  ['twin_gate_evaluate', (agentId, args) => toolTwinGateEvaluate(agentId, args)],
+  ['twin_calibration_request', (agentId, args) => toolTwinCalibrationRequest(agentId, args)],
+  ['optimization_explore', (agentId, args, channelId) => toolOptimizationExplore(agentId, args as Parameters<typeof toolOptimizationExplore>[1], channelId)],
+  ['twin_bayes_optimize', (agentId, args) => toolTwinBayesOptimize(agentId, args)],
+  ['dcw_control', (agentId, args, channelId) => toolDcwControl(agentId, args as { node_id?: string, value?: number | string, hypothesis?: string, task_id?: string }, channelId)],
+  ['param_control', (agentId, args, channelId) => toolParamControl(agentId, args as { param?: string, value?: number | string, hypothesis?: string, task_id?: string, line_id?: string }, channelId)],
+  ['daq_query', (agentId, args) => toolDaqQuery(agentId, args as Parameters<typeof toolDaqQuery>[1])],
+  ['daq_export', (agentId, args) => toolDaqExport(agentId, args as Parameters<typeof toolDaqExport>[1])],
+  ['daq_frames', (agentId, args) => toolDaqFrames(agentId, args as Parameters<typeof toolDaqFrames>[1])],
+  ['dcw_judge', (agentId, args) => toolDcwJudge(agentId, args as { record_id?: string, verdict?: string, reason?: string })],
+  ['dcw_rollback', (agentId, args) => toolDcwRollback(agentId, args as { record_id?: string, node_id?: string, to?: string })],
+  ['dcw_journal', (agentId, args) => toolDcwJournal(agentId, args as { node_id?: string, recipe_id?: string, limit?: number | string })],
+  ['ops_log', (agentId, args) => toolOpsLog(agentId, args as Parameters<typeof toolOpsLog>[1])],
+  // 显式别名:line_log 与 ops_log 同一 handler,便于 Agent 直接把「产线日志」与产线对象关联
+  ['line_log', (agentId, args) => toolOpsLog(agentId, args as Parameters<typeof toolOpsLog>[1])],
+  ['recipe_log', (agentId, args) => toolRecipeLog(agentId, args as Parameters<typeof toolRecipeLog>[1])],
+  ['recipe_catalog', (agentId, args) => toolRecipeCatalog(agentId, args as Parameters<typeof toolRecipeCatalog>[1])],
+  ['recipe_create', (agentId, args) => toolRecipeCreate(agentId, args as Parameters<typeof toolRecipeCreate>[1])],
+  ['line_context', (agentId, args) => toolLineContext(agentId, args as { line_id?: string })],
+  ['recipe_versions', (agentId, args) => toolRecipeVersions(agentId, args as { recipe_id?: string, limit?: number | string })],
+  ['recipe_update', (agentId, args) => toolRecipeUpdate(agentId, args as Parameters<typeof toolRecipeUpdate>[1])],
+  ['recipe_rollback', (agentId, args) => toolRecipeRollback(agentId, args as Parameters<typeof toolRecipeRollback>[1])],
+  ['recipe_trial', (agentId, args) => toolRecipeTrial(agentId, args as Parameters<typeof toolRecipeTrial>[1])],
+  ['recipe_apply', (agentId, args) => toolRecipeApply(agentId, args as Parameters<typeof toolRecipeApply>[1])],
+  ['mes_catalog', (agentId, args) => toolMesCatalog(agentId, args as Parameters<typeof toolMesCatalog>[1])],
+  ['mes_fetch', (agentId, args) => toolMesFetch(agentId, args as Parameters<typeof toolMesFetch>[1])],
+  ['mes_export', (agentId, args) => toolMesExport(agentId, args as Parameters<typeof toolMesExport>[1])],
+  ['mes_dataset_read', (agentId, args) => toolMesDatasetRead(agentId, args as Parameters<typeof toolMesDatasetRead>[1])],
+  ['mes_datasets', (agentId, args) => toolMesDatasets(agentId, args as Parameters<typeof toolMesDatasets>[1])],
+  ['exp_collect', (agentId, args) => toolExpCollect(agentId, args as { line_id?: string, lineId?: string })],
+  // 产线 Co-Pilot P2(诊断工程师下发面):整包方案审批 + AML 活动硬闸自查
+  ['recipe_propose', (agentId, args) => toolRecipePropose(agentId, args as Parameters<typeof toolRecipePropose>[1])],
+  ['line_start', (agentId, args, channelId) => toolLineStart(agentId, args as Parameters<typeof toolLineStart>[1], channelId)],
+  ['line_stop', (agentId, args, channelId) => toolLineStop(agentId, args as Parameters<typeof toolLineStop>[1], channelId)],
+  ['line_status', (agentId, args, channelId) => toolLineStatus(agentId, args as Parameters<typeof toolLineStatus>[1], channelId)],
+  ['aml_activity', (agentId, args) => toolAmlActivity(agentId, args as { line_id?: string })],
+  // 数据分析系统:分析结果留痕台账(save 可写台账(非产线写);query 查历史留痕)
+  ['analysis_save', (agentId, args, channelId) => toolAnalysisSave(agentId, args as Parameters<typeof toolAnalysisSave>[1], channelId)],
+  ['analysis_query', (agentId, args) => toolAnalysisQuery(agentId, args as Parameters<typeof toolAnalysisQuery>[1])],
+  // Optimizer(零写设备;绑定/资格/工况逐次重校验在 dispatch + verify + manager)
+  ['optimizer_capabilities', agentId => toolOptimizerCapabilities(agentId)],
+  ['optimizer_solve', (agentId, args) => toolOptimizerSolve(agentId, args)],
+  ['optimizer_status', (agentId, args) => toolOptimizerStatus(agentId, args)],
+  ['optimizer_cancel', (agentId, args) => toolOptimizerCancel(agentId, args)],
+  ['optimizer_plan_get', (agentId, args) => toolOptimizerPlanGet(agentId, args)],
+])
+
+/** 工业工具名集合(与 INDUSTRIAL_HANDLERS 同源;dispatch 据此在 workspace 门控前分流) */
+export const INDUSTRIAL_TOOL_NAMES: ReadonlySet<string> = new Set(INDUSTRIAL_HANDLERS.keys())
+
+/**
+ * 工业工具族分发:按工具名转交 industrial 模块(调用参数与该族原分支逐字一致)。
+ * 调用方先经 INDUSTRIAL_TOOL_NAMES 判断,故「未登记的工具名」不可达 —— 仍然显式拒绝,
+ * 避免静默返回与未知工具混淆。
+ */
+export function dispatchIndustrialTool(agentId: string, toolName: string, args: Record<string, unknown>, channelId?: string): Promise<HostToolResult> {
+  const handler = INDUSTRIAL_HANDLERS.get(toolName)
+  if (!handler) return Promise.reject(new Error(`未知工业工具: ${toolName}`))
+  return handler(agentId, args, channelId)
+}

package/server/services/workshop/agents/industrial/grant-guard.ts

@@ -77,6 +77,24 @@ async function resolveTargetLines(agentId: string, toolName: string, args: Recor
     const l = await nodeIdLine(id)
     if (l) lines.add(l)
   }
+  // Optimizer 绑定 → 目标产线(Profile → ProcessModelSpec.lineId);只读工具同样受线授权约束
+  const bindingId = one(args.binding_id ?? args.bindingId)
+  if (bindingId) {
+    const { getAmlRuntime } = await import('@/server/services/workshop/aml/runtime')
+    const db = getAmlRuntime().db
+    const binding = db.prepare('SELECT profile_id AS profileId, profile_version AS profileVersion FROM optimizer_bindings WHERE id = ? AND channel_agent_id = ?')
+      .get(bindingId, agentId) as { profileId: string, profileVersion: number } | undefined
+    if (binding) {
+      const profile = db.prepare('SELECT process_spec_ref AS specRef FROM optimizer_profiles WHERE id = ? AND version = ?')
+        .get(binding.profileId, binding.profileVersion) as { specRef: string } | undefined
+      const [specId, specVersion] = (profile?.specRef ?? '').split('@')
+      if (specId) {
+        const spec = db.prepare('SELECT line_id AS lineId FROM process_model_specs WHERE id = ? AND version = ?')
+          .get(specId, Number(specVersion || '1')) as { lineId: string } | undefined
+        if (spec?.lineId) lines.add(spec.lineId)
+      }
+    }
+  }
   if (lines.size > 0) return [...lines]
 
   // 无显式目标(如全节点 daq_query)→ 回退 agent 绑定面涉及的全部产线

package/server/services/workshop/agents/industrial/line-tools.ts

@@ -8,7 +8,6 @@
  *   - line_status:只读,lead/worker 均可(复用工业工具的 grant 复核,channel 线 ≥readonly)。
  * 理由强制:reason 必填(启停理由入审计与审批卡,人要看懂为什么启停)。
  */
-import { getWorkshopManager } from '@/server/plugins/workshop'
 import { getToolApprovals } from '../tool-approvals'
 import { agentBadgeLabel } from '../agent-badge'
 import { getDcwController } from '../../dcw/dcw-controller'
@@ -20,10 +19,16 @@ export interface LineStartInput { recipe_id?: string, reason?: string }
 export interface LineStopInput { reason?: string }
 export interface LineStatusInput { line_id?: string }
 
+/** 懒加载 manager:静态 import plugins/workshop 会拖入 Nitro #imports,使本模块无法被单测/脚本直接加载 */
+async function workshopManager() {
+  const { getWorkshopManager } = await import('@/server/plugins/workshop')
+  return getWorkshopManager()
+}
+
 /** 解析「频道 lead + 绑线」上下文;line_start/line_stop 共用 */
 async function requireBoundLineLead(agentId: string, channelId: string | undefined): Promise<{ lineId: string, lineName: string } | { error: string }> {
   if (!channelId) return { error: 'line_start/line_stop 仅限频道内使用(缺频道上下文)。' }
-  const manager = getWorkshopManager()
+  const manager = await workshopManager()
   const ch = manager.deps.repos.channels.findById(channelId)
   if (!ch) return { error: `频道不存在: ${channelId}` }
   if (ch.leadAgentId !== agentId) return { error: '产线启停仅限频道 lead 操作(你是 worker;如需启停请向 lead 提出)。' }
@@ -264,7 +269,7 @@ export async function toolLineStop(agentId: string, args: LineStopInput, channel
 /** 工具:line_status —— 本频道绑定产线的运行状态(只读)。 */
 export async function toolLineStatus(agentId: string, args: LineStatusInput, channelId?: string): Promise<{ text: string, isError?: boolean }> {
   const ctrl = getDcwController()
-  const manager = getWorkshopManager()
+  const manager = await workshopManager()
   const ch = channelId ? manager.deps.repos.channels.findById(channelId) : undefined
   const faces = resolveRefFaces(agentId)
   const readable = [...faces.readableLines]