agentworkshop 0.7.70 → 0.7.71

package/server/services/workshop/db/database/schema.ts

@@ -302,7 +302,12 @@ CREATE TABLE IF NOT EXISTS aml_datasets (
   created_by    TEXT NOT NULL DEFAULT '',
   created_by_kind TEXT NOT NULL DEFAULT 'user',
   note          TEXT NOT NULL DEFAULT '',
-  created_at    TEXT NOT NULL
+  created_at    TEXT NOT NULL,
+  -- ProcessModelSpec 构建谱系(空 = 旧 AML 数据集,无工艺规格来源;绑定模型资格门据此溯源)
+  spec_ref      TEXT NOT NULL DEFAULT '',
+  spec_version  INTEGER,
+  -- 数据谱系核验(D18):0=未核验(旧/无 confirmed segment;禁优化资格);1=每 run 均有已确认 segment 且版本匹配
+  lineage_verified INTEGER NOT NULL DEFAULT 0
 );
 CREATE INDEX IF NOT EXISTS idx_aml_datasets_recipe ON aml_datasets(recipe_id, created_at DESC);
 CREATE TABLE IF NOT EXISTS aml_jobs (
@@ -819,7 +824,202 @@ CREATE TABLE IF NOT EXISTS channel_tool_settings (
   updated_at   TEXT NOT NULL,
   PRIMARY KEY (channel_id, tool_name)
 );
-CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled);`
+CREATE INDEX IF NOT EXISTS idx_channel_tool_settings_channel ON channel_tool_settings(channel_id, enabled);
+
+-- v29: Optimizer Manager + Process Model Service(2026-10-22 计划 G1)
+-- 设计要点:新表全部进主库(不复制 EDA 的独立连接模式),由 backup/retention 统一覆盖。
+-- published 的 spec/profile 由服务层拒绝 UPDATE;版本变更 = 新行,不原地改。
+CREATE TABLE IF NOT EXISTS process_model_specs (
+  id              TEXT NOT NULL,
+  version         INTEGER NOT NULL DEFAULT 1,
+  line_id         TEXT NOT NULL,
+  product_id      TEXT NOT NULL,
+  recipe_id       TEXT NOT NULL,
+  recipe_version  INTEGER NOT NULL DEFAULT 0,
+  content_hash    TEXT NOT NULL,
+  spec_json       TEXT NOT NULL,
+  status          TEXT NOT NULL DEFAULT 'draft',   -- draft|published|retired
+  owner_user_id   TEXT NOT NULL DEFAULT '',
+  created_at      TEXT NOT NULL,
+  updated_at      TEXT NOT NULL,
+  PRIMARY KEY (id, version)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_process_model_specs_content
+  ON process_model_specs(line_id, product_id, recipe_id, recipe_version, content_hash);
+CREATE INDEX IF NOT EXISTS idx_process_model_specs_line ON process_model_specs(line_id, created_at DESC);
+
+-- 配方版本/工况谱系:半开区间 [from_ts, to_ts);运行中切换拆段,训练窗口不得跨版本。
+CREATE TABLE IF NOT EXISTS process_context_segments (
+  id                   TEXT PRIMARY KEY,
+  line_id              TEXT NOT NULL,
+  run_id               TEXT NOT NULL DEFAULT '',
+  from_ts              INTEGER NOT NULL,
+  to_ts                INTEGER,
+  recipe_id            TEXT NOT NULL,
+  recipe_version       INTEGER NOT NULL DEFAULT 0,
+  recipe_content_hash  TEXT NOT NULL,
+  condition_id         TEXT NOT NULL DEFAULT '',
+  source               TEXT NOT NULL DEFAULT 'line_run',  -- line_run|recipe_edit|manual
+  confirmed            INTEGER NOT NULL DEFAULT 0,
+  created_at           TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_process_context_segments_run_from ON process_context_segments(run_id, from_ts);
+CREATE INDEX IF NOT EXISTS idx_process_context_segments_line ON process_context_segments(line_id, from_ts);
+
+CREATE TABLE IF NOT EXISTS process_model_eligibility (
+  id                     TEXT PRIMARY KEY,
+  spec_id                TEXT NOT NULL,
+  spec_version           INTEGER NOT NULL DEFAULT 1,
+  scope                  TEXT NOT NULL DEFAULT 'simulation',  -- simulation|real
+  condition_id           TEXT NOT NULL DEFAULT '',
+  prediction_eligible    INTEGER NOT NULL DEFAULT 0,
+  optimization_eligible  INTEGER NOT NULL DEFAULT 0,
+  report_json            TEXT NOT NULL DEFAULT '{}',
+  evidence_version       TEXT NOT NULL DEFAULT '',
+  created_at             TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_process_model_eligibility_spec ON process_model_eligibility(spec_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS process_model_experiments (
+  id          TEXT PRIMARY KEY,
+  line_id     TEXT NOT NULL,
+  plan_json   TEXT NOT NULL,
+  status      TEXT NOT NULL DEFAULT 'planned',  -- planned|running|done|cancelled|failed
+  budget_json TEXT NOT NULL DEFAULT '{}',
+  created_by  TEXT NOT NULL DEFAULT '',
+  created_at  TEXT NOT NULL,
+  updated_at  TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_process_model_experiments_line ON process_model_experiments(line_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS optimizer_profiles (
+  id                    TEXT NOT NULL,
+  version               INTEGER NOT NULL DEFAULT 1,
+  name                  TEXT NOT NULL DEFAULT '',
+  model_ref             TEXT NOT NULL,
+  model_artifact_hash   TEXT NOT NULL DEFAULT '',
+  model_artifact_kind   TEXT NOT NULL DEFAULT '',
+  model_interface       TEXT NOT NULL DEFAULT '',
+  problem_template_ref  TEXT NOT NULL,
+  problem_config_json   TEXT NOT NULL DEFAULT '{}',
+  process_spec_ref      TEXT NOT NULL DEFAULT '',
+  solver_ref            TEXT NOT NULL,
+  solver_version        TEXT NOT NULL DEFAULT '',
+  condition_ids_json    TEXT NOT NULL DEFAULT '[]',
+  status                TEXT NOT NULL DEFAULT 'draft',  -- draft|validated|published|retired
+  owner_user_id         TEXT NOT NULL DEFAULT '',
+  problem_ir_hash       TEXT NOT NULL DEFAULT '',
+  content_hash          TEXT NOT NULL DEFAULT '',
+  created_at            TEXT NOT NULL,
+  updated_at            TEXT NOT NULL,
+  PRIMARY KEY (id, version)
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_profiles_model ON optimizer_profiles(model_ref, status);
+
+-- 作用域 = (workspace, channel, channel_agent, profile);channel_agent_id 是 channel_agents.id
+-- (实例身份),绝不用 agents.id 模板 id。多绑定 = 同一实例绑多个 Profile。
+CREATE TABLE IF NOT EXISTS optimizer_bindings (
+  id                TEXT PRIMARY KEY,
+  workspace_id      TEXT NOT NULL,
+  channel_id        TEXT NOT NULL REFERENCES channels(id) ON DELETE CASCADE,
+  channel_agent_id  TEXT NOT NULL REFERENCES channel_agents(id) ON DELETE CASCADE,
+  profile_id        TEXT NOT NULL,
+  profile_version   INTEGER NOT NULL,
+  capabilities_json TEXT NOT NULL DEFAULT '[]',
+  mode              TEXT NOT NULL DEFAULT 'recommendation',  -- shadow|recommendation
+  valid_from        TEXT NOT NULL,
+  valid_to          TEXT,
+  revision          INTEGER NOT NULL DEFAULT 1,
+  created_by        TEXT NOT NULL DEFAULT '',
+  created_at        TEXT NOT NULL,
+  updated_at        TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_optimizer_bindings_agent_profile
+  ON optimizer_bindings(channel_agent_id, profile_id, profile_version);
+CREATE INDEX IF NOT EXISTS idx_optimizer_bindings_channel ON optimizer_bindings(channel_id, channel_agent_id);
+
+CREATE TABLE IF NOT EXISTS optimizer_runs (
+  id                      TEXT PRIMARY KEY,
+  binding_id              TEXT NOT NULL,
+  binding_revision        INTEGER NOT NULL DEFAULT 1,
+  profile_id              TEXT NOT NULL,
+  profile_version         INTEGER NOT NULL,
+  problem_ir_hash         TEXT NOT NULL,
+  context_snapshot_json   TEXT NOT NULL DEFAULT '{}',
+  problem_ir_json         TEXT NOT NULL DEFAULT '{}',
+  status                  TEXT NOT NULL DEFAULT 'running',
+  diagnostics_json        TEXT NOT NULL DEFAULT '{}',
+  independent_cost        REAL,
+  started_at              TEXT NOT NULL,
+  finished_at             TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_runs_binding ON optimizer_runs(binding_id, started_at DESC);
+CREATE INDEX IF NOT EXISTS idx_optimizer_runs_status ON optimizer_runs(status, started_at DESC);
+
+CREATE TABLE IF NOT EXISTS optimizer_candidates (
+  id                 TEXT PRIMARY KEY,
+  run_id             TEXT NOT NULL REFERENCES optimizer_runs(id) ON DELETE CASCADE,
+  seq                INTEGER NOT NULL,
+  controls_json      TEXT NOT NULL DEFAULT '[]',
+  predicted_json     TEXT NOT NULL DEFAULT '[]',
+  cost               REAL,
+  constraints_json   TEXT NOT NULL DEFAULT '[]',
+  verified           INTEGER NOT NULL DEFAULT 0,
+  verify_report_json TEXT NOT NULL DEFAULT '{}'
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_candidates_run ON optimizer_candidates(run_id, seq);
+
+CREATE TABLE IF NOT EXISTS optimizer_recommendations (
+  id                 TEXT PRIMARY KEY,
+  run_id             TEXT NOT NULL REFERENCES optimizer_runs(id) ON DELETE CASCADE,
+  candidate_id       TEXT NOT NULL REFERENCES optimizer_candidates(id) ON DELETE CASCADE,
+  problem_ir_hash    TEXT NOT NULL,
+  model_artifact_hash TEXT NOT NULL DEFAULT '',
+  evidence_source    TEXT NOT NULL DEFAULT 'unassessed',
+  uq_evidence_json   TEXT,
+  status             TEXT NOT NULL DEFAULT 'unverified',  -- verified|unverified|expired
+  status_label       TEXT NOT NULL DEFAULT '',
+  legacy             TEXT NOT NULL DEFAULT '',
+  valid_until        TEXT NOT NULL,
+  created_at         TEXT NOT NULL
+);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_optimizer_recommendations_candidate ON optimizer_recommendations(candidate_id);
+CREATE INDEX IF NOT EXISTS idx_optimizer_recommendations_run ON optimizer_recommendations(run_id);
+
+CREATE TABLE IF NOT EXISTS optimizer_outcomes (
+  id                TEXT PRIMARY KEY,
+  recommendation_id TEXT NOT NULL REFERENCES optimizer_recommendations(id) ON DELETE CASCADE,
+  applied_at        TEXT,
+  observed_json     TEXT NOT NULL DEFAULT '{}',
+  delta_json        TEXT NOT NULL DEFAULT '{}',
+  verdict           TEXT NOT NULL DEFAULT 'pending',  -- pending|improved|regressed|inconclusive
+  created_at        TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_outcomes_recommendation ON optimizer_outcomes(recommendation_id);
+
+-- 双驱动候选互校(SW4/D6/D25):同一工件双实现逐 CV 无量纲一致性;不可变追加行
+CREATE TABLE IF NOT EXISTS optimizer_candidate_crosschecks (
+  id                            TEXT PRIMARY KEY,
+  recommendation_id             TEXT NOT NULL REFERENCES optimizer_recommendations(id) ON DELETE CASCADE,
+  run_id                        TEXT NOT NULL,
+  model_id                      TEXT NOT NULL DEFAULT '',
+  model_artifact_hash           TEXT NOT NULL DEFAULT '',
+  context_hash                  TEXT NOT NULL DEFAULT '',
+  input_distance_snapshot_json  TEXT NOT NULL DEFAULT '{}',
+  predicted_json                TEXT NOT NULL DEFAULT '[]',
+  replayed_json                 TEXT NOT NULL DEFAULT '[]',
+  dev_per_cv_json               TEXT NOT NULL DEFAULT '[]',
+  tol                           REAL NOT NULL DEFAULT 0.000001,
+  max_dev_dimensionless         REAL,
+  qhat_per_cv_json              TEXT NOT NULL DEFAULT '[]',
+  verdict                       TEXT NOT NULL DEFAULT 'fail',  -- pass|fail|not_applicable
+  condition_changed             INTEGER NOT NULL DEFAULT 0,
+  stale                         INTEGER NOT NULL DEFAULT 0,
+  reason                        TEXT NOT NULL DEFAULT '',
+  row_hash                      TEXT NOT NULL DEFAULT '',
+  created_at                    TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_optimizer_crosschecks_rec ON optimizer_candidate_crosschecks(recommendation_id, created_at DESC, id DESC);`
 
 // ===== 默认种子数据(首轮初始化注入;owner NULL = 公共资源,所有登录用户只读共享) =====
 

package/server/services/workshop/db/retention.ts

@@ -6,6 +6,8 @@
  *   audit_log         默认 90d   (retention.audit_days;合规观察期,从严保留)
  *   approval_history  默认 180d  (retention.approval_days;历史裁决主张不可变,放宽)
  *   analysis_reports  默认 365d  (retention.analysis_days;数据分析留痕台账,最宽松)
+ *   optimizer_runs    默认 365d  (retention.optimizer_days;运行/建议/收益台账)
+ *   process_model_eligibility / process_model_experiments 默认 365d (retention.process_model_days)
  * retention.disabled 整体逃生门(env AW_RETENTION_DISABLED / RETENTION_DISABLED 兼容别名)。
  * 覆盖链:config.yml < runtime-settings < env(AW_<键> 或历史别名)。时间列均为 TEXT ISO。
  * channel_events 与 daq_samples 已有各自保留机制,此处不重复覆盖。
@@ -29,6 +31,10 @@ const TARGETS = [
   { table: 'audit_log', column: 'at', days: 90, cfgKey: 'audit_days' },
   { table: 'approval_history', column: 'created_at', days: 180, cfgKey: 'approval_days' },
   { table: 'analysis_reports', column: 'created_at', days: 365, cfgKey: 'analysis_days' },
+  // Optimizer 台账(候选/建议/收益经 FK CASCADE 随 run 清理)
+  { table: 'optimizer_runs', column: 'started_at', days: 365, cfgKey: 'optimizer_days' },
+  { table: 'process_model_eligibility', column: 'created_at', days: 365, cfgKey: 'process_model_days' },
+  { table: 'process_model_experiments', column: 'created_at', days: 365, cfgKey: 'process_model_days' },
 ] as const
 
 export interface RetentionResult { table: string, removed: number, days: number }
@@ -40,6 +46,9 @@ export function runRetentionSweep(db: DatabaseSyncLike): RetentionResult[] {
   const out: RetentionResult[] = []
   for (const t of TARGETS) {
     const days = retention[t.cfgKey]
+    // 新表可能尚未建(半初始化库/旧部署):跳过而不是让整轮清理失败。
+    const exists = db.prepare('SELECT name FROM sqlite_master WHERE type = \'table\' AND name = ?').get(t.table)
+    if (!exists) continue
     const before = new Date(Date.now() - days * DAY_MS).toISOString()
     let removed = 0
     for (;;) {

package/server/services/workshop/db/tool-registry.repo.ts

@@ -107,11 +107,15 @@ export interface ToolRegistryUpsert {
 export interface ChannelToolPolicySnapshot {
   channelId: string
   mode: ToolPolicyMode
-  source: 'default' | 'explicit'
+  source: 'default' | 'explicit' | 'cached' | 'degraded'
   updatedBy: string
   updatedAt: string | null
   /** 显式行:all 模式只有 enabled=0 的行有意义;selected 模式 enabled=1 为选中 */
   settings: Map<string, boolean>
+  /** WP7:降级标记(true = 读取失败后使用了最近已知快照或降级全拒) */
+  stale?: boolean
+  /** 快照年龄(ms;仅 cached 时有意义) */
+  ageMs?: number
 }
 
 export interface ChannelToolPolicyEntry {

package/server/services/workshop/dcw/dcw-controller/lines.ts

@@ -103,10 +103,17 @@ export abstract class DcwControllerLines extends DcwControllerRecipes {
       catch { /* 单行清理失败不阻断开跑 */ }
     }
     const run = repo.createRun(recipe)
+    // 配方版本/工况谱系:开跑即开段(C8);落段失败不阻断开跑主链
+    try {
+      const { openContextSegment } = await import('../../process-model/context')
+      openContextSegment(run)
+    }
+    catch { /* 谱系不可用只降级 */ }
     setActiveLineRun({
       lineId,
       runId: run.id,
       recipeId: recipe.id,
+      recipeVersion: run.recipeVersion ?? recipe.version ?? 0,
       recipeName: recipe.name,
       productId: product.id,
       productName: product.name,
@@ -125,6 +132,10 @@ export abstract class DcwControllerLines extends DcwControllerRecipes {
     const prev = clearActiveLineRun(lineId)
     if (!prev) throw new AppError(400, ErrorCodes.VALIDATION_ERROR, `产线「${line.name}」未在运行`)
     const run = getDcwRecipeRepo().closeRun(prev.runId)
+    // 谱系关段(时间窗闭合;失败不阻断停线)
+    void import('../../process-model/context').then(({ closeContextSegment }) => {
+      closeContextSegment(run.id, run.endedAt ? Date.parse(run.endedAt) : Date.now())
+    }).catch(() => {})
     // 运行门防僵尸:结清本产线**全部**未结束批次(多次 apply/崩溃/重启会泄漏
     // endedAt=null 的历史行;只结清注册表批次会让运行门被僵尸批次永久放行)
     for (const stale of getDcwRecipeRepo().listRuns().filter(r => r.lineId === lineId && !r.endedAt && r.id !== run.id)) {

package/server/services/workshop/dcw/dcw-controller/recipes.ts

@@ -210,6 +210,33 @@ export abstract class DcwControllerRecipes extends DcwControllerParams {
       : recipe.params
     const run = repo.createRun(recipe, effective)
     await this.writeRecipeParams({ ...recipe, params: effective }, run)
+    // 运行中应用新配方版本 → 谱系拆段(A13):旧段在 now 闭合,新段记录新版本/内容 hash。
+    try {
+      const { getActiveLineRun, setActiveLineRun } = await import('../line-run')
+      const active = getActiveLineRun(recipe.lineId)
+      if (active) {
+        const switchedAt = Date.now()
+        const { closeContextSegment, openContextSegment } = await import('../../process-model/context')
+        closeContextSegment(active.runId, switchedAt)
+        // 活动窗口的配方身份同步切换:DAQ 入库打标、配方数采窗口都从活动窗口取值,
+        // 只拆段不换身份会让切换后的样本仍带旧 recipeId(段与数据标签互相矛盾)。
+        const { getDcwProductRepo } = await import('../dcw-product.repo')
+        const product = getDcwProductRepo().byId(recipe.productId)
+        setActiveLineRun({
+          ...active,
+          recipeId: recipe.id,
+          recipeVersion: recipe.version ?? 0,
+          recipeName: recipe.name,
+          productId: product?.id ?? active.productId,
+          productName: product?.name ?? active.productName,
+        })
+        openContextSegment({
+          id: active.runId, lineId: recipe.lineId, recipeId: recipe.id,
+          startedAt: new Date(switchedAt).toISOString(), recipeVersion: recipe.version ?? 0, paramsSnapshot: effective,
+        })
+      }
+    }
+    catch { /* 谱系不可用只降级,不阻断下发 */ }
     // ACK 鉴定判定落账(单一咽喉点:REST 手动/Agent 工具/回退/系统路径全覆盖):
     // failed≥1 → error;仅 unverified(链路受理未证实)→ warn;全部设备证实 → info。
     // error/warn 同时向该线 operate 授权用户定向告警(生产化:假成功必须有人看到)。

package/server/services/workshop/dcw/dcw-line.repo.ts

@@ -54,6 +54,9 @@ export class DcwLineRepo {
       color: String(input.color ?? '').trim() || dcwLineColorFor(this.list.length),
       description: String(input.description ?? '').trim(),
       controlMode: mode,
+      // 模拟产线标记(C9):仅显式 true 生效;真实线缺省 false
+      simulated: input.simulated === true,
+      ...(input.simSceneId ? { simSceneId: String(input.simSceneId).trim() } : {}),
       createdAt: new Date().toISOString(),
     }
     this.list.push(line)

package/server/services/workshop/dcw/dcw-recipe.repo.ts

@@ -408,6 +408,8 @@ class DcwRecipeRepo {
       recipeName: recipe.name,
       productId: recipe.productId,
       lineId: recipe.lineId,
+      // 配方版本谱系(C8):开跑即冻结版本,历史样本才有版本证据;旧数据缺省 0 = unknown
+      recipeVersion: recipe.version ?? 0,
       startedAt: new Date().toISOString(),
       endedAt: null,
       results: [],
@@ -423,7 +425,7 @@ class DcwRecipeRepo {
     void (async () => {
       try {
         const { mirrorRunCreated } = await import('../eda/eda-run.repo')
-        mirrorRunCreated({ id: run.id, lineId: run.lineId, productId: run.productId, recipeId: run.recipeId, recipeName: run.recipeName, startedAt: run.startedAt, endedAt: run.endedAt })
+        mirrorRunCreated({ id: run.id, lineId: run.lineId, productId: run.productId, recipeId: run.recipeId, recipeName: run.recipeName, recipeVersion: run.recipeVersion ?? 0, startedAt: run.startedAt, endedAt: run.endedAt })
       }
       catch { /* EDA 台账不可用 */ }
     })()
@@ -439,7 +441,7 @@ class DcwRecipeRepo {
     void (async () => {
       try {
         const { mirrorRunClosed } = await import('../eda/eda-run.repo')
-        mirrorRunClosed({ id: run.id, lineId: run.lineId, productId: run.productId, recipeId: run.recipeId, recipeName: run.recipeName, startedAt: run.startedAt, endedAt: run.endedAt })
+        mirrorRunClosed({ id: run.id, lineId: run.lineId, productId: run.productId, recipeId: run.recipeId, recipeName: run.recipeName, recipeVersion: run.recipeVersion ?? 0, startedAt: run.startedAt, endedAt: run.endedAt })
       }
       catch { /* EDA 台账不可用 */ }
     })()

package/server/services/workshop/dcw/line-run.ts

@@ -19,6 +19,8 @@ export interface ActiveLineRun {
   lineId: string
   runId: string
   recipeId: string
+  /** 开跑时冻结的配方版本(历史样本的版本证据;0 = 未知/旧数据) */
+  recipeVersion?: number
   recipeName: string
   productId: string
   productName: string

package/server/services/workshop/eda/eda-run.repo.ts

@@ -33,6 +33,8 @@ interface RunMirrorInput {
   productId: string
   recipeId: string
   recipeName: string
+  /** 建批时冻结的配方版本(0/缺省 = 历史未知;不再恒写 NULL) */
+  recipeVersion?: number
   startedAt: string
   endedAt: string | null
 }
@@ -66,9 +68,9 @@ function safeJson<T>(text: unknown, fallback: T): T {
 /** 开账镜像(run 创建即落;幂等,重复触发不覆盖) */
 export function mirrorRunCreated(run: RunMirrorInput): void {
   edaDb().prepare(`INSERT INTO eda_runs (id, line_id, product_id, recipe_id, recipe_name, recipe_version, started_at, ended_at, outcome, created_at)
-    VALUES (?, ?, ?, ?, ?, NULL, ?, ?, 'open', ?)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'open', ?)
     ON CONFLICT(id) DO NOTHING`).run(
-    run.id, run.lineId, run.productId, run.recipeId, run.recipeName, run.startedAt, run.endedAt, new Date().toISOString(),
+    run.id, run.lineId, run.productId, run.recipeId, run.recipeName, run.recipeVersion ?? null, run.startedAt, run.endedAt, new Date().toISOString(),
   )
 }
 
@@ -77,9 +79,10 @@ export function mirrorRunClosed(run: RunMirrorInput): void {
   const now = new Date().toISOString()
   const ended = run.endedAt ?? now
   edaDb().prepare(`INSERT INTO eda_runs (id, line_id, product_id, recipe_id, recipe_name, recipe_version, started_at, ended_at, outcome, created_at)
-    VALUES (?, ?, ?, ?, ?, NULL, ?, ?, 'open', ?)
-    ON CONFLICT(id) DO UPDATE SET ended_at = COALESCE(eda_runs.ended_at, excluded.ended_at), recipe_name = excluded.recipe_name`)
-    .run(run.id, run.lineId, run.productId, run.recipeId, run.recipeName, run.startedAt, ended, now)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'open', ?)
+    ON CONFLICT(id) DO UPDATE SET ended_at = COALESCE(eda_runs.ended_at, excluded.ended_at), recipe_name = excluded.recipe_name,
+      recipe_version = COALESCE(eda_runs.recipe_version, excluded.recipe_version)`)
+    .run(run.id, run.lineId, run.productId, run.recipeId, run.recipeName, run.recipeVersion ?? null, run.startedAt, ended, now)
   edaDb().prepare('UPDATE eda_runs SET ended_at = ? WHERE id = ? AND (ended_at IS NULL OR ended_at = \'\')').run(ended, run.id)
   void backfillSampleCount(run.id, run.lineId, run.startedAt, ended)
   // E3 联动:关账即入特征提取队列(FDC 主链;失败不阻断关账)

package/server/services/workshop/optimization/access.ts

@@ -0,0 +1,210 @@
+/**
+ * Optimizer / Process-Model 统一操作授权(D16)。
+ *
+ * 口径:登录 + 角色只是入口;每一次资源读/写前必须经此函数判定"该主体能否触达该资源"。
+ * 三类资源三种归属:
+ *   - Profile:用户私有(owner_user_id;admin 全读) —— 配置管理权
+ *   - 规格/数据集/资格/试验/训练:产线可见性(requireLineMode readonly) —— 产线配置权
+ *   - 绑定/运行/建议/互校/下发/能力:Channel 成员(agent 实例归属) —— 成员调用权
+ *
+ * 授权性拒绝(403)统一写 1 条 `tool.call.denied` 审计(resource/op/actor/reason),
+ * 与 grant-guard 同口径;/logs 可追溯越权尝试。404/422(资源不存在/形状非法)不算授权失败,不审计。
+ *
+ * 直接经 rest-auth 读 globalThis.__workshopManager:避免静态 import plugins/workshop,
+ * 便于单测注入假管理器(与 rest-auth 同约束)。
+ */
+import { AppError } from '../../../utils/errors'
+import type { ResolvedUser } from '../../../api/workshop/caller'
+import { lineMode } from '../permissions'
+import { recordOps } from '../ops/ops'
+import { getProfileRepo } from './profile.repo'
+import { getProcessModelSpecRepo } from '../process-model/spec.repo'
+import { getAmlRuntime } from '../aml/runtime'
+import { getBindingRepo } from './binding.repo'
+import { getRunRepo } from './run.repo'
+import { assertAgentAccess } from './rest-auth'
+
+export type OptimizationOperation
+  = | 'read' | 'write' | 'publish' | 'evaluate' | 'solve' | 'crosscheck' | 'dispatch' | 'cancel'
+
+export type OptimizationResource
+  = | { kind: 'profile', id: string, version?: number }
+    | { kind: 'spec', id: string, version?: number }
+    | { kind: 'dataset', id: string }
+    | { kind: 'eligibility', specId: string }
+    | { kind: 'experiment', lineId?: string }
+    | { kind: 'train', lineId: string }
+    | { kind: 'binding' | 'capabilities', agentInstanceId: string }
+    | { kind: 'run' | 'recommendation' | 'crosscheck' | 'dispatch', runId?: string, agentInstanceId?: string }
+
+export interface OptimizationAccessContext {
+  lineId?: string
+  agentInstanceId?: string
+  channelId?: string
+}
+
+/** 授权性拒绝:先落审计再抛 403(审计失败不影响拒绝语义,与 grant-guard 同) */
+function deny(user: ResolvedUser, resource: OptimizationResource, operation: OptimizationOperation, reason: string): never {
+  try {
+    recordOps({
+      actor: user.id,
+      actorName: user.name,
+      actorKind: 'user',
+      action: 'tool.call.denied',
+      kind: 'system',
+      level: 'warn',
+      targetKind: 'optimizer',
+      targetId: `${resource.kind}:${'id' in resource ? String(resource.id) : 'agentInstanceId' in resource ? String(resource.agentInstanceId) : 'runId' in resource ? String(resource.runId ?? '') : 'specId' in resource ? String(resource.specId) : ''}`,
+      summary: `Optimizer 访问被拒(${resource.kind}/${operation}):${reason}`,
+      detail: { resource: resource.kind, operation, reason, userId: user.id },
+    })
+  }
+  catch { /* 审计失败不影响拒绝语义 */ }
+  throw new AppError(403, 'AUTHZ_DENIED', reason)
+}
+
+/** Profile 可见性:owner 或 admin(列表过滤同口径,静默过滤不审计) */
+export function canSeeProfile(user: ResolvedUser, row: { ownerUserId?: string, owner_user_id?: string } | undefined): boolean {
+  if (!row) return false
+  if (user.role === 'admin') return true
+  const owner = row.ownerUserId ?? row.owner_user_id ?? ''
+  return owner === user.id
+}
+
+function resolveSpecLineId(specId: string, version?: number): { lineId: string, ownerId: string } {
+  const row = getProcessModelSpecRepo().get(specId, version)
+  if (!row) throw new AppError(404, 'SPEC_NOT_FOUND', `ProcessModelSpec ${specId} 不存在`)
+  return { lineId: row.lineId, ownerId: row.ownerUserId ?? '' }
+}
+
+function resolveDatasetLineId(datasetId: string): { lineId: string, ownerId: string } {
+  let row: { lineId?: string, createdBy?: string } | undefined
+  try {
+    row = getAmlRuntime().repo.dataset.get(datasetId)
+  }
+  catch {
+    // AML 未初始化(单测/插件未启动)→ 按不存在处理
+    row = undefined
+  }
+  if (!row) throw new AppError(404, 'DATASET_NOT_FOUND', `数据集 ${datasetId} 不存在`)
+  return { lineId: row.lineId ?? '', ownerId: row.createdBy ?? '' }
+}
+
+function resolveRunAgent(runId: string | undefined, agentInstanceId: string | undefined): string {
+  if (agentInstanceId) return agentInstanceId
+  if (!runId) throw new AppError(422, 'RUN_REF_REQUIRED', '必须提供 runId 或 agentInstanceId 以定位归属')
+  const run = getRunRepo().getRun(runId)
+  if (!run) throw new AppError(404, 'RUN_NOT_FOUND', `运行 ${runId} 不存在`)
+  const binding = getBindingRepo().get(run.bindingId)
+  if (!binding) throw new AppError(404, 'BINDING_NOT_FOUND', `运行 ${runId} 的绑定 ${run.bindingId} 不存在`)
+  return binding.channelAgentId
+}
+
+/**
+ * 统一入口:返回解析后的资源上下文(行 lineId / agentInstanceId / channelId),
+ * 供内层闸序(dispatch D10)消费,不得用另一套规则重算归属。
+ */
+export function assertOptimizationAccess(
+  user: ResolvedUser,
+  operation: OptimizationOperation,
+  resource: OptimizationResource,
+): OptimizationAccessContext {
+  switch (resource.kind) {
+    case 'profile': {
+      const row = getProfileRepo().get(resource.id, resource.version)
+      if (!row) throw new AppError(404, 'PROFILE_NOT_FOUND', `Profile ${resource.id} 不存在`)
+      if (!canSeeProfile(user, row)) deny(user, resource, operation, `Profile ${resource.id} 不属于当前用户(仅 owner 或 admin 可访问)`)
+      return { agentInstanceId: undefined }
+    }
+    case 'spec': {
+      const { lineId } = resolveSpecLineId(resource.id, resource.version)
+      try {
+        lineMode(user, lineId)
+      }
+      catch (err) {
+        deny(user, resource, operation, err instanceof AppError ? err.message : `无产线 ${lineId} 权限`)
+      }
+      return { lineId }
+    }
+    case 'dataset': {
+      const { lineId } = resolveDatasetLineId(resource.id)
+      try {
+        lineMode(user, lineId)
+      }
+      catch (err) {
+        deny(user, resource, operation, err instanceof AppError ? err.message : `无产线 ${lineId} 权限`)
+      }
+      return { lineId }
+    }
+    case 'eligibility': {
+      const { lineId } = resolveSpecLineId(resource.specId)
+      try {
+        lineMode(user, lineId)
+      }
+      catch (err) {
+        deny(user, resource, operation, err instanceof AppError ? err.message : `无产线 ${lineId} 权限`)
+      }
+      return { lineId }
+    }
+    case 'experiment': {
+      const lineId = resource.lineId
+      if (!lineId) throw new AppError(422, 'LINE_REQUIRED', 'lineId 必填(试验按产线归属授权)')
+      try {
+        lineMode(user, lineId)
+      }
+      catch (err) {
+        deny(user, resource, operation, err instanceof AppError ? err.message : `无产线 ${lineId} 权限`)
+      }
+      return { lineId }
+    }
+    case 'train': {
+      try {
+        lineMode(user, resource.lineId)
+      }
+      catch (err) {
+        deny(user, resource, operation, err instanceof AppError ? err.message : `无产线 ${resource.lineId} 权限`)
+      }
+      return { lineId: resource.lineId }
+    }
+    case 'binding':
+    case 'capabilities': {
+      const { channelId } = assertAgentAccess(user, resource.agentInstanceId, { manage: operation === 'write' })
+      return { agentInstanceId: resource.agentInstanceId, channelId }
+    }
+    case 'run':
+    case 'recommendation':
+    case 'crosscheck':
+    case 'dispatch': {
+      const agentInstanceId = resolveRunAgent(resource.runId, resource.agentInstanceId)
+      const { channelId } = assertAgentAccess(user, agentInstanceId)
+      return { agentInstanceId, channelId }
+    }
+  }
+}
+
+/** 配置动作审计(SW1.6):每次成功变更恰 1 条,actor 恒为发起用户 */
+export function recordConfigAction(
+  user: ResolvedUser,
+  action: string,
+  target: { kind: string, id: string },
+  summary: string,
+  detail: Record<string, unknown> = {},
+  lineId?: string,
+): void {
+  try {
+    recordOps({
+      actor: user.id,
+      actorName: user.name,
+      actorKind: 'user',
+      action,
+      kind: 'line',
+      level: 'info',
+      targetKind: target.kind,
+      targetId: target.id,
+      lineId: lineId ?? '',
+      summary,
+      detail: { ...detail, userId: user.id },
+    })
+  }
+  catch { /* 审计失败不阻断业务 */ }
+}