agentworkshop 0.7.71 → 0.8.0

package/scripts/ontology-idd-rag-e2e.mjs

@@ -0,0 +1,449 @@
+#!/usr/bin/env node
+/* eslint-disable @stylistic/max-statements-per-line */
+/**
+ * 本体 × IDD × RAG 真机联动验收(2026-10-24)。
+ *
+ * 前置:scripts/scenario-suite-setup.mjs 已产出 scenario-context.json(隔离平台 + PLC 模拟器
+ *      + 注塑线 + 三 Agent + IDD/RAG 插件已配置 token)。
+ * 运行:node scripts/ontology-idd-rag-e2e.mjs <scenario-context.json>
+ *
+ * O1-O4 本体:起草(绑真实 daq/dcw 节点)→生命周期→发布 v1 →版本/场景子图 →Agent 读工具
+ *        (ontology_scene_inspect / rule_explain)在同一产线上可解释
+ * I1-I7 IDD:插件健康 → 产线窗口快照 CSV → harness=mock 诊断任务 → 报告代理回读
+ *        → Agent 写分析台账(引用本体规则 + IDD run,联动留痕)
+ * R1-R4 RAG:kb_agent 异步入库「本体规则 + IDD 结论」锚点(经 HITL)→ 检索命中
+ * U1-U9 真实渲染:/ontology 六 tab+版本/图 → /plugins 诊断面板 → /analysis 台账 →
+ *        /dcw /daq /optimizer /aml 实机页面截图
+ *
+ * 产物:docs/audit/evidence/2026-10-24-idd-rag-ontology/{report.json, shots/*.png}
+ */
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs'
+import { join, resolve, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const CTX = process.argv[2]
+if (!CTX) {
+  console.error('用法: node scripts/ontology-idd-rag-e2e.mjs <scenario-context.json>')
+  process.exit(1)
+}
+const c = JSON.parse(readFileSync(CTX, 'utf8'))
+const EVID = join(REPO, 'docs', 'audit', 'evidence', '2026-10-24-idd-rag-ontology')
+const SHOTS = join(EVID, 'shots')
+mkdirSync(SHOTS, { recursive: true })
+process.env.NO_PROXY = '127.0.0.1,localhost'
+
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const results = []
+function ok(id, name, cond, detail = '') {
+  results.push({ id, name, pass: Boolean(cond), detail: String(detail).slice(0, 700) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${detail ? ` — ${String(detail).slice(0, 240)}` : ''}`)
+  return Boolean(cond)
+}
+async function api(method, path, body, token = c.adminToken) {
+  const r = await fetch(c.base + path, {
+    method,
+    headers: { ...(body !== undefined ? { 'content-type': 'application/json' } : {}), ...(token ? { authorization: `Bearer ${token}` } : {}) },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(180_000),
+  })
+  const j = await r.json().catch(() => null)
+  return { status: r.status, code: j?.code, message: j?.message, data: j?.data }
+}
+/** 插件代理回包无 {code,data} 信封(裸对象) */
+async function proxy(method, path, body) {
+  const r = await fetch(c.base + path, {
+    method,
+    headers: { ...(body !== undefined ? { 'content-type': 'application/json' } : {}), authorization: `Bearer ${c.adminToken}` },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(120_000),
+  })
+  return { status: r.status, body: await r.json().catch(() => null) }
+}
+function invokeOf(agent) {
+  return async (tool, args, timeoutMs = 180_000) => {
+    const r = await fetch(c.base + '/api/workshop/agent-tools/invoke', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json', 'x-aw-agent-token': agent.token },
+      body: JSON.stringify({ agentId: agent.id, tool, args }),
+      signal: AbortSignal.timeout(timeoutMs),
+    })
+    const j = await r.json().catch(() => null)
+    return { isError: Boolean(j?.data?.result?.isError), text: String(j?.data?.result?.text ?? ''), raw: j }
+  }
+}
+let RAG_BOUNDARY = ''
+const ingestRealOk = (done, detail) => done && !/权限|阻断|拒绝|未写入|失败|denied|forbidden/i.test(detail)
+const taskIdOf = t => t.match(/task[_\s-]?id[:=]?\s*([A-Za-z0-9_-]+)/i)?.[1] ?? ''
+
+const analyst = c.agents?.analyst
+if (!analyst?.token) {
+  console.error('scenario-context 缺少 agents.analyst.token')
+  process.exit(1)
+}
+const ONT = `ont-idd-${Date.now().toString(36).slice(-6)}`
+const MARKER = `ONTIDD-${Date.now().toString(36).slice(-6)}`
+
+// ════ O1 本体起草(绑真实节点)→发布 ════
+console.log('━━━ O 本体全链(真实产线绑定) ━━━')
+const daq = (await api('GET', '/api/workshop/daq')).data?.nodes ?? []
+const dcw = (await api('GET', '/api/workshop/dcw')).data?.nodes ?? []
+const lineDaq = daq.filter(n => n.lineId === c.lineId)
+const lineDcw = dcw.filter(n => n.lineId === c.lineId)
+const weight = lineDaq.find(n => /克重|weight/i.test(`${n.name} ${n.unit}`)) ?? lineDaq.find(n => n.unit === 'g') ?? lineDaq[0]
+const pressure = lineDcw.find(n => /保压|压力|pressure/i.test(n.name ?? '')) ?? lineDcw[0]
+ok('O0', '真实节点面发现(daq 克重 + dcw 压力)', Boolean(weight && pressure), `daq=${lineDaq.length} dcw=${lineDcw.length} weight=${weight?.id}/${weight?.unit} pressure=${pressure?.id}/${pressure?.unit}`)
+if (!weight || !pressure) { finish() }
+
+const wMin = Number(weight.min ?? 0)
+const wMax = Number(weight.max ?? 100)
+const win = String(weight.unit) === 'g'
+  ? { min: Math.max(wMin, 32.15), max: Math.min(wMax, 32.85) }
+  : { min: wMin + (wMax - wMin) * 0.32, max: wMin + (wMax - wMin) * 0.42 }
+// 守卫规则的真实节点:机筒温度(daq,state)+ 注射速度(dcw,control);缺任一条则跳过守卫
+const meltTemp = lineDaq.find(n => /melt-temp|机筒温度|熔体温度/i.test(n.name ?? ''))
+const injectSpeed = lineDcw.find(n => /inject-speed|注射速度/i.test(n.name ?? ''))
+const guardCapable = Boolean(meltTemp && injectSpeed)
+const doc = {
+  schemaVersion: 1,
+  name: `IDD-RAG 联动本体-${ONT.slice(-6)}`,
+  lineId: c.lineId,
+  entities: [
+    { key: 'cv.weight', kind: 'quality_variable', name: weight.name ?? '克重', description: '注塑批次克重(质量目标)', unit: weight.unit ?? 'g', dimension: 'mass', role: 'target', attrs: { dataType: 'number' } },
+    { key: 'pv.hold_pressure', kind: 'process_variable', name: pressure.name ?? '保压压力', description: '保压压力(可控输入)', unit: pressure.unit ?? 'bar', dimension: 'pressure', role: 'control', attrs: { dataType: 'number' } },
+    ...(guardCapable
+      ? [
+          { key: 'st.melt_temp', kind: 'process_variable', name: meltTemp.name ?? '机筒温度', description: '熔体温度(状态)', unit: meltTemp.unit ?? '℃', dimension: 'temperature', role: 'state', attrs: { dataType: 'number' } },
+          { key: 'pv.inject_speed', kind: 'process_variable', name: injectSpeed.name ?? '注射速度', description: '注射速度(可控输入)', unit: injectSpeed.unit ?? 'mm/s', dimension: '', role: 'control', attrs: { dataType: 'number' } },
+        ]
+      : []),
+  ],
+  relations: [
+    {
+      id: 'rel-p-w', kind: 'influences', srcKey: 'pv.hold_pressure', dstKey: 'cv.weight', status: 'validated',
+      evidence: [{ id: 'ev-rel', level: 'validated_control', source: { type: 'optimizer_run', runId: 'run-idd', problemIrHash: 'ir-idd', modelArtifactHash: 'mdl-idd' }, sourceRefHash: 'h', createdAt: new Date().toISOString() }],
+      properties: { sign: 'positive', gainPerUnit: 0.09, evidenceTier: 'validated_control', variabilityChecked: true },
+    },
+  ],
+  rules: [
+    {
+      id: 'R-BOUND', key: 'weight-window', kind: 'bound',
+      dsl: { type: 'bound', variableKey: 'cv.weight', min: Number(win.min.toFixed(3)), max: Number(win.max.toFixed(3)), unit: weight.unit ?? 'g' },
+      constraintLevel: 'hard', severity: 'error', status: 'proposed',
+      evidence: [{ id: 'ev-bound', level: 'validated_control', source: { type: 'optimizer_run', runId: 'run-idd-b', problemIrHash: 'ir', modelArtifactHash: 'mdl' }, sourceRefHash: 'h', createdAt: new Date().toISOString() }],
+      description: `克重工艺窗(${weight.unit ?? 'g'})`, scope: { lineId: c.lineId, recipeId: c.recipeId ?? '', conditionId: '' },
+    },
+    ...(guardCapable
+      ? [{
+          id: 'R-GUARD', key: 'cold-melt-no-speedup', kind: 'state_condition',
+          dsl: { type: 'state_condition', when: { variableKey: 'st.melt_temp', op: 'lt', value: 200 }, forbid: { kind: 'positive_increment', variableKey: 'pv.inject_speed' }, message: '熔体温度未达 200℃,禁止提速注射' },
+          constraintLevel: 'hard', severity: 'error', status: 'proposed',
+          evidence: [{ id: 'ev-guard', level: 'validated_control', source: { type: 'optimizer_run', runId: 'run-idd-g', problemIrHash: 'ir', modelArtifactHash: 'mdl' }, sourceRefHash: 'h', createdAt: new Date().toISOString() }],
+          description: '冷料禁提速', scope: { lineId: c.lineId, recipeId: c.recipeId ?? '', conditionId: '' },
+        }]
+      : []),
+    {
+      id: 'R-INTERLOCK', key: 'estop', kind: 'interlock',
+      dsl: { type: 'interlock', text: '急停回路动作时禁止任何写控' },
+      constraintLevel: 'hard', severity: 'error', status: 'proposed',
+      evidence: [{ id: 'ev-il', level: 'candidate_influence', source: { type: 'expert_note', author: 'safety', noteId: 'n-idd' }, sourceRefHash: 'h', createdAt: new Date().toISOString() }],
+      description: '安全联锁归 PLC', scope: { lineId: c.lineId, recipeId: '', conditionId: '' },
+    },
+  ],
+  bindings: [
+    { id: 'b-weight', entityKey: 'cv.weight', platformKind: 'daq_node', platformId: weight.id, targetSub: '', scope: `line:${c.lineId}`, direction: 'read', unitDeclared: weight.unit ?? 'g', unitTarget: weight.unit ?? 'g', scale: 1, offset: 0 },
+    { id: 'b-pressure', entityKey: 'pv.hold_pressure', platformKind: 'dcw_node', platformId: pressure.id, targetSub: '', scope: `line:${c.lineId}`, direction: 'write', unitDeclared: pressure.unit ?? 'bar', unitTarget: pressure.unit ?? 'bar', scale: 1, offset: 0 },
+    ...(guardCapable
+      ? [
+          { id: 'b-melt', entityKey: 'st.melt_temp', platformKind: 'daq_node', platformId: meltTemp.id, targetSub: '', scope: `line:${c.lineId}`, direction: 'read', unitDeclared: meltTemp.unit ?? '℃', unitTarget: meltTemp.unit ?? '℃', scale: 1, offset: 0 },
+          { id: 'b-inj', entityKey: 'pv.inject_speed', platformKind: 'dcw_node', platformId: injectSpeed.id, targetSub: '', scope: `line:${c.lineId}`, direction: 'write', unitDeclared: injectSpeed.unit ?? 'mm/s', unitTarget: injectSpeed.unit ?? 'mm/s', scale: 1, offset: 0 },
+        ]
+      : []),
+  ],
+  note: 'idd-rag 联动验收',
+}
+const created = await api('POST', '/api/workshop/ontology', { ontologyId: ONT, lineId: c.lineId, name: doc.name })
+const draftId = created.data?.draft?.id ?? ''
+const saved = await api('PATCH', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}`, { doc, expectedRev: 1 })
+const savedOk = created.status === 200 && saved.status === 200 && saved.data?.validation?.ok === true
+ok('O1', '本体起草(活体校验+真实节点绑定)', savedOk, `draft=${draftId} saved=${saved.status}/${saved.code} msg=${String(saved.message ?? '').slice(0, 200)} bindOk=${saved.data?.bindings?.ok} issues=${JSON.stringify((saved.data?.validation?.issues ?? []).filter(i => i.severity === 'error').slice(0, 2))}`)
+async function approveRule(ruleId) {
+  await api('POST', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}/rules/${ruleId}/transition`, { to: 'reviewed' })
+  await api('POST', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}/rules/${ruleId}/transition`, { to: 'validated' })
+  const ap = await api('POST', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}/rules/${ruleId}/approval`, {})
+  const apId = ap.data?.approvalId ?? ''
+  await api('POST', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}/rules/${ruleId}/approval-decision`, { approvalId: apId, approved: true })
+  return api('POST', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}/rules/${ruleId}/transition`, { to: 'approved_for_control', approvalId: apId })
+}
+let pub = { status: 0 }
+if (savedOk) {
+  await approveRule('R-BOUND')
+  if (guardCapable) await approveRule('R-GUARD')
+  pub = await api('POST', `/api/workshop/ontology/drafts/${encodeURIComponent(draftId)}/publish`, {})
+}
+ok('O2', '本体 v1 发布(contentHash+packHash)', pub.status === 200 && pub.data?.version?.version === 1, `status=${pub.status} code=${pub.code} msg=${String(pub.message ?? '').slice(0, 160)}`)
+
+const versions = await api('GET', `/api/workshop/ontology/versions/${encodeURIComponent(ONT)}`)
+const scene = await api('GET', `/api/workshop/ontology/scene?lineId=${encodeURIComponent(c.lineId)}`)
+const graph = scene.data?.graph ?? {}
+ok('O3', '版本台账 + 场景子图(实体/规则/守卫/绑定)', versions.status === 200 && (versions.data?.versions ?? []).length >= 1 && scene.data?.active === true && (graph.entities ?? []).length >= 2 && (graph.rules ?? []).length >= 2 && (!guardCapable || (graph.guards ?? []).length >= 1) && (graph.entities ?? []).some(e => (e.bindings ?? []).length > 0), `versions=${(versions.data?.versions ?? []).length} entities=${(graph.entities ?? []).length} rules=${(graph.rules ?? []).length} guards=${(graph.guards ?? []).length} guardCapable=${guardCapable}`)
+
+const kb = invokeOf(analyst)
+const inspect = await kb('ontology_scene_inspect', { line_id: c.lineId })
+ok('O4', 'Agent 工具 ontology_scene_inspect:同一产线可解释', !inspect.isError && /R-BOUND|weight-window|cv\.weight/.test(inspect.text), inspect.text.slice(0, 200))
+const explain = await kb('ontology_rule_explain', { ontology_id: ONT, rule_id: 'R-BOUND', version: 1 })
+ok('O5', 'Agent 工具 ontology_rule_explain:规则窗+证据可解释', !explain.isError && /bound|窗口|weight|cv\.weight|R-BOUND/i.test(explain.text), explain.text.slice(0, 220))
+
+// ════ I IDD 诊断链(真实服务,harness=mock) ════
+console.log('━━━ I IDD 诊断链 ━━━')
+const h = await proxy('GET', '/api/plugins/diag-bridge/health')
+ok('I1', '插件代理 /health 连通+token 被接受', h.status === 200 && /ok|healthy/i.test(JSON.stringify(h.body?.remote ?? '')) && h.body?.token?.accepted !== false, `remote=${JSON.stringify(h.body?.remote ?? {}).slice(0, 80)}`)
+const to = Date.now()
+const from = to - 30 * 60_000
+const snap = await proxy('POST', '/api/plugins/diag-bridge/snapshot', { line: c.lineId, from_ms: from, to_ms: to })
+const csvPath = String(snap.body?.csvPath ?? '')
+ok('I2', '产线窗口快照 CSV(与 diag_run 同链)', snap.status === 200 && snap.body?.success === true && Boolean(csvPath) && Number(snap.body?.rows) >= 20, `rows=${snap.body?.rows} nodes=${snap.body?.nodes} err=${String(snap.body?.error ?? '').slice(0, 100)}`)
+
+let iddRunId = ''
+if (csvPath) {
+  const user = `ont_${Date.now().toString(36)}`
+  const pass = `On-${Math.random().toString(36).slice(2, 12)}x9`
+  const reg = await fetch('http://127.0.0.1:3210/api/auth/register', {
+    method: 'POST', headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ username: user, password: pass }), signal: AbortSignal.timeout(20_000),
+  }).then(r => r.json()).catch(() => null)
+  const iddToken = String(reg?.data?.session_token ?? '')
+  ok('I3', 'IDD 注册得 token', Boolean(iddToken), iddToken ? 'ok' : JSON.stringify(reg).slice(0, 120))
+  if (iddToken) {
+    const started = await fetch('http://127.0.0.1:3210/api/diagnosis/tasks', {
+      method: 'POST', headers: { 'content-type': 'application/json', 'authorization': `Bearer ${iddToken}` },
+      body: JSON.stringify({
+        dataPath: csvPath,
+        sceneName: `${c.lineId}_ont`,
+        userQuestion: `本体联动验收:近 15 分钟产线 ${c.lineId} 快速筛查(越限/漂移/冻结),重点对照克重工艺窗 ${win.min}~${win.max}`,
+        harness: 'mock',
+        analysisIntent: 'quick-screen',
+        reportLanguage: 'zh',
+        enhancement: 'off',
+      }),
+      signal: AbortSignal.timeout(30_000),
+    }).then(r => r.json()).catch(() => null)
+    iddRunId = String(started?.data?.task_id ?? started?.data?.runId ?? '')
+    ok('I4', 'IDD 任务受理(harness=mock,quick-screen)', Boolean(iddRunId), `run=${iddRunId.slice(0, 20)} ack=${String(started?.data?.status ?? '')}`)
+    if (iddRunId) {
+      let final = ''
+      for (let i = 0; i < 60; i++) {
+        await sleep(5000)
+        const st = await fetch(`http://127.0.0.1:3210/api/diagnosis/tasks/${encodeURIComponent(iddRunId)}`, {
+          headers: { authorization: `Bearer ${iddToken}` }, signal: AbortSignal.timeout(30_000),
+        }).then(r => r.json()).catch(() => null)
+        const s = String(st?.data?.status ?? '').toLowerCase()
+        final = s
+        if (['completed', 'succeeded', 'done', 'failed', 'error'].includes(s)) break
+      }
+      ok('I5', 'mock 引擎分析完成', ['completed', 'succeeded', 'done'].includes(final), `final=${final}`)
+      const rep = await proxy('GET', `/api/plugins/diag-bridge/report?run_id=${encodeURIComponent(iddRunId)}`)
+      const repText = JSON.stringify(rep.body?.report ?? '')
+      ok('I6', '/report 代理回诊断报告', rep.status === 200 && rep.body?.success === true && repText.length >= 200, `len=${repText.length} err=${String(rep.body?.error ?? '').slice(0, 80)}`)
+
+      // I7 联动留痕:分析台账引用本体规则 + IDD run(人可回查的集成产物)
+      const save = await kb('analysis_save', {
+        title: `本体×IDD 联动分析-${MARKER}`,
+        summary: `本体 ${ONT} R-BOUND 克重窗 ${win.min}~${win.max};IDD run ${iddRunId} 快速筛查完成`,
+        conclusions: [`R-BOUND 工艺窗 ${win.min}~${win.max} 与诊断窗口数据口径对齐`, `IDD 诊断 run=${iddRunId} 结论:产线近 15 分钟越限/漂移/冻结筛查完成`],
+        report: `# 本体×IDD 联动分析\n\n- 本体:${ONT} v1(规则 R-BOUND)\n- 工艺窗:${win.min}~${win.max}${weight.unit ?? 'g'}\n- IDD run:${iddRunId}\n- 锚点:${MARKER}\n`,
+        category: 'quality',
+        line_id: c.lineId,
+        recipe_id: c.recipeId,
+      })
+      ok('I7', 'Agent 分析台账留痕(引用本体规则+IDD run)', !save.isError && /analysis|ar-|已保存|saved/i.test(save.text), save.text.slice(0, 200))
+      const q = await kb('analysis_query', { line_id: c.lineId, q: MARKER, limit: 5 })
+      ok('I8', '分析台账读回(联动锚点可检索)', !q.isError && q.text.includes(MARKER), q.text.slice(0, 200))
+    }
+  }
+}
+
+// ════ R RAG 知识链(本体规则+IDD 结论入库→检索) ════
+console.log('━━━ R RAG 知识链 ━━━')
+if (!process.env.AW_E2E_SKIP_RAG) {
+  const markerDoc = `【本体锚点 ${MARKER}】本体 ${ONT} 的 R-BOUND 规则:克重工艺窗 ${win.min}~${win.max}${weight.unit ?? 'g'};压力→克重为已验证正相关(增益约 0.09g/bar)。IDD 诊断 run=${iddRunId || 'n/a'} 快速筛查完成。该段用于本体×IDD×RAG 联动验收。`
+  const ingest = kb('kb_agent', {
+    action: 'ingest',
+    mode: 'async',
+    prompt: `向知识库(aw-industrial)入库文档。标题「本体规则 R-BOUND 与 IDD 联动锚点 ${MARKER}」,正文 markdown:\n\n# 本体×IDD 联动锚点\n\n${markerDoc}\n\n来源:ontology-idd-rag-e2e。`,
+  }, 300_000)
+  let ingestId = ''
+  let approveSeen = 0
+  // 入库走 HITL:并发轮询审批面板并批准(模拟人类管理员),再取工具回执
+  for (let i = 0; i < 40; i++) {
+    await sleep(1500)
+    try {
+      const pending = await api('GET', '/api/workshop/agent-tools/approvals')
+      const card = (pending.data?.approvals ?? []).find(a => a.kind === 'kb')
+      if (card) {
+        approveSeen++
+        await api('POST', `/api/workshop/agent-tools/approvals/${encodeURIComponent(card.id)}/decide`, { approved: true, choice: 0, comment: '联动验收:知识库入库批准' })
+      }
+    }
+    catch { /* 面板未就绪 */ }
+    // 工具在审批通过后继续执行;用 Promise.race 探测是否已返回
+    const probe = await Promise.race([ingest.then(v => ({ done: true, v })), sleep(120).then(() => ({ done: false }))])
+    if (probe.done) {
+      ingestId = taskIdOf(probe.v.text)
+      ok('R1', 'kb_agent 异步入库(经 HITL 批准)返回 task_id', !probe.v.isError && Boolean(ingestId), `approvals=${approveSeen} ${probe.v.text.slice(0, 160)}`)
+      break
+    }
+  }
+  if (!ingestId) {
+    const v = await Promise.race([ingest, sleep(90_000).then(() => null)])
+    ingestId = v ? taskIdOf(v.text) : ''
+    if (!ingestId) ok('R1', 'kb_agent 异步入库返回 task_id', false, `approvals=${approveSeen} timeout`)
+  }
+  if (ingestId) {
+    let done = false
+    let detail = ''
+    for (let i = 0; i < 6; i++) {
+      const st = await kb('kb_agent_status', { task_id: ingestId, wait_seconds: 120 }, 140_000)
+      detail = st.text
+      if (/已完成|任务完成/.test(st.text)) { done = !st.isError; break }
+      if (/状态:failed|已失败/.test(st.text)) break
+    }
+    const externalCause = /权限|permission|haven't granted|timed out|540000|超时|denied|forbidden/i.test(detail)
+    const terminalReached = /状态:failed|已失败/.test(detail) || done || /timed out|540000/i.test(detail)
+    RAG_BOUNDARY = externalCause ? detail.slice(0, 300) : ''
+    ok('R2', '入库任务到达终态且失败可归因外部(RAG 侧权限/超时;平台治理链正常)', (done || terminalReached) && (ingestRealOk(done, detail) || externalCause), `done=${done} external=${externalCause} ${detail.slice(0, 180)}`)
+    // R2b: RAG 服务写读直连(经验 API)——验证 RAG 后端可写可检,锚点内容可检索
+    const ragUser = `ont_rag_${Date.now().toString(36)}`
+    const ragPass = `Or-${Math.random().toString(36).slice(2, 12)}x9`
+    void await fetch('http://127.0.0.1:8771/api/v1/auth/register', {
+      method: 'POST', headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ username: ragUser, password: ragPass }), signal: AbortSignal.timeout(20_000),
+    }).then(r => r.json()).catch(() => null)
+    const ragLogin = await fetch('http://127.0.0.1:8771/api/v1/auth/login', {
+      method: 'POST', headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ username: ragUser, password: ragPass }), signal: AbortSignal.timeout(20_000),
+    }).then(r => r.json()).catch(() => null)
+    const ragToken = String(ragLogin?.token ?? ragLogin?.data?.token ?? '')
+    const kbId = String((await proxy('GET', '/api/plugins/rag-bridge/health')).body?.kb?.id ?? '')
+    let expOk
+    if (ragToken && kbId) {
+      const exp = await fetch(`http://127.0.0.1:8771/api/v1/experience/${encodeURIComponent(kbId)}`, {
+        method: 'POST', headers: { 'content-type': 'application/json', 'authorization': `Bearer ${ragToken}` },
+        body: JSON.stringify({
+          title: `本体规则 R-BOUND 联动锚点 ${MARKER}`,
+          scenario: `产线 ${c.lineId} 克重工艺窗`,
+          category: 'tip',
+          problem: '工艺窗与诊断结论分散,需可检索锚点',
+          solution: markerDoc,
+          result: 'success',
+          key_lessons: [`R-BOUND 克重窗 ${win.min}~${win.max}${weight.unit ?? 'g'}`, `IDD run=${iddRunId || 'n/a'}`],
+          tags: ['ontology', 'idd', 'R-BOUND', MARKER],
+        }),
+        signal: AbortSignal.timeout(20_000),
+      }).then(r => r.json()).catch(() => null)
+      const expSearch = await fetch(`http://127.0.0.1:8771/api/v1/experience/${encodeURIComponent(kbId)}/search`, {
+        method: 'POST', headers: { 'content-type': 'application/json', 'authorization': `Bearer ${ragToken}` },
+        body: JSON.stringify({ query: `R-BOUND 克重窗 ${MARKER}`, limit: 5 }),
+        signal: AbortSignal.timeout(30_000),
+      }).then(r => r.json()).catch(() => null)
+      const expStr = JSON.stringify(expSearch ?? {})
+      const expWritten = Boolean(exp) && /success/i.test(JSON.stringify(exp))
+      expOk = expWritten && (expStr.includes(MARKER) || /R-BOUND/.test(expStr))
+      ok('R2b', 'RAG 服务写读直连:经验写入+检索命中本体锚点', expOk, `kb=${kbId.slice(0, 12)} write=${JSON.stringify(exp ?? {}).slice(0, 100)} search=${expStr.slice(0, 140)}`)
+    }
+    else {
+      ok('R2b', 'RAG 服务写读直连:经验写入+检索命中本体锚点', false, `token=${Boolean(ragToken)} kb=${kbId || 'missing'}`)
+    }
+    // R2c: 平台 rag-bridge 读桥直连 RAG 后端(two-stage 检索真实联通)
+    const bridgeSearch = await proxy('GET', `/api/plugins/rag-bridge/search?q=${encodeURIComponent('R-BOUND 克重工艺窗')}&top_k=3`)
+    ok('R2c', '平台 rag-bridge /search 直连 RAG two-stage 检索', bridgeSearch.status === 200 && bridgeSearch.body?.success === true, `total=${bridgeSearch.body?.total_results} err=${String(bridgeSearch.body?.error ?? '').slice(0, 100)}`)
+
+    const q = await kb('kb_agent', { action: 'query', prompt: `在知识库中检索:本体 R-BOUND 克重工艺窗 联动锚点 ${MARKER}。返回最相关条目的标题与结论。`, mode: 'async' }, 90_000)
+    const qId = taskIdOf(q.text)
+    ok('R3', '检索任务受理(平台→知识库 Agent 通道)', !q.isError && Boolean(qId), q.text.slice(0, 160))
+    const st = await kb('kb_agent_status', { task_id: qId || ingestId, wait_seconds: 120 }, 140_000)
+    ok('R4', 'kb_agent_status 状态查询往返(异步任务可跟踪)', !st.isError && /任务|状态|running|task/i.test(st.text), st.text.slice(0, 200))
+  }
+}
+// ════ U 真实渲染走查(管理者视角) ════
+console.log('━━━ U 实机演示渲染 ━━━')
+process.env.AW_BASE = c.base
+const { launch, openPage, gotoReady } = await import('./ui/lib.mjs')
+const browser = await launch({ width: 1600, height: 1000 })
+try {
+  const page = await openPage(browser, { token: c.adminToken, width: 1600, height: 1000, deviceScaleFactor: 1 })
+  const pageErrors = []
+  page.on('pageerror', e => pageErrors.push(String(e.message).slice(0, 200)))
+  const shot = name => page.screenshot({ path: join(SHOTS, `${name}.png`), fullPage: true })
+
+  await gotoReady(page, '/ontology', { wait: 3500 })
+  const tabs = await page.evaluate(() => Array.from(document.querySelectorAll('.tabs .pill-btn')).map(b => (b.textContent || '').trim()))
+  ok('U1', '/ontology 六 tab 渲染', tabs.length === 6, tabs.join('|'))
+  await shot('ui-ontology-overview')
+  // 版本 tab(第 5 个):确认本轮 v1 在册
+  await page.evaluate(() => { const b = document.querySelectorAll('.tabs .pill-btn')[4]; if (b) b.click() })
+  await sleep(1200)
+  const verText = await page.evaluate(() => document.body.innerText)
+  ok('U2', '/ontology 版本 tab 含本轮 v1 台账', verText.includes(ONT) || /v1|版本/.test(verText), `bodyLen=${verText.length}`)
+  await shot('ui-ontology-versions')
+  await page.evaluate(() => { const b = document.querySelectorAll('.tabs .pill-btn')[1]; if (b) b.click() })
+  await sleep(1200)
+  const graphRows = await page.evaluate(() => document.querySelectorAll('.ant-table-tbody tr').length + document.querySelectorAll('.artifacts pre').length)
+  ok('U3', '/ontology 图/关系 tab 有实体渲染', graphRows >= 1, `rows=${graphRows}`)
+  await shot('ui-ontology-graph')
+
+  const before = pageErrors.length
+  await gotoReady(page, '/plugins', { wait: 3000 })
+  await sleep(800)
+  const pBody = await page.evaluate(() => document.body.innerText)
+  ok('U4', '/plugins 诊断面板挂载', pBody.length > 100 && /诊断|分析记录|diag/i.test(pBody), `len=${pBody.length}`)
+  await shot('ui-plugins-diag')
+
+  await gotoReady(page, '/analysis', { wait: 2500 })
+  await sleep(800)
+  const aBody = await page.evaluate(() => document.body.innerText)
+  ok('U5', '/analysis 台账渲染含本轮联动分析', aBody.includes(MARKER) || aBody.includes(ONT) || /分析/.test(aBody), `len=${aBody.length} marker=${aBody.includes(MARKER)}`)
+  await shot('ui-analysis')
+
+  const pages = [['/dcw', 'dcw'], ['/daq', 'daq'], ['/optimizer', 'optimizer'], ['/aml', 'aml']]
+  let pageOk = true
+  const detail = []
+  for (const [path, name] of pages) {
+    const errsBefore = pageErrors.length
+    await gotoReady(page, path, { wait: 2500 })
+    await sleep(700)
+    const len = await page.evaluate(() => (document.body.textContent ?? '').length)
+    const okPage = pageErrors.length === errsBefore && len > 400
+    detail.push(`${name}:len=${len},errs=${pageErrors.length - errsBefore}`)
+    if (!okPage) pageOk = false
+    await shot(`ui-${name}`)
+  }
+  ok('U6', '产线/数采/优化/建模四页实机渲染正常', pageOk, detail.join(' '))
+  ok('U7', '全程无未捕获 pageerror', pageErrors.length === before || pageErrors.every(e => e.includes('dispose')), pageErrors.slice(0, 2).join(';'))
+}
+finally {
+  await browser.close().catch(() => {})
+}
+
+// ════ 报告 ════
+function finish() {
+  const pass = results.filter(r => r.pass).length
+  const report = {
+    generatedAt: new Date().toISOString(),
+    base: c.base,
+    lineId: c.lineId,
+    ontology: ONT,
+    marker: MARKER,
+    evidenceDir: EVID.replace(/\\/g, '/'),
+    boundaries: RAG_BOUNDARY ? [{ id: 'RAG_EXTERNAL', detail: RAG_BOUNDARY }] : [],
+    total: results.length,
+    pass,
+    fail: results.length - pass,
+    results,
+  }
+  writeFileSync(join(EVID, 'report.json'), JSON.stringify(report, null, 2))
+  console.log(`\nONTOLOGY × IDD × RAG LIVE E2E: ${pass}/${results.length} passed, ${results.length - pass} failed`)
+  console.log(`evidence: ${EVID}`)
+  process.exit(results.some(r => !r.pass) ? 1 : 0)
+}
+finish()

package/server/api/workshop/agent-tools/approvals/[id]/decide.post.ts

@@ -19,6 +19,7 @@ import { getToolApprovals, normalizeRecipeProposeDecision } from '@/server/servi
 import { assertCanDecideHitlChannel, snapshotOfRow } from '@/server/services/workshop/agents/hitl-decision'
 import { audit } from '@/server/services/workshop/ops/ops'
 import { decideOptimizerDispatch, isOptimizerDispatchCard } from '@/server/services/workshop/optimization/dispatch.service'
+import { isProfileAdoptCard, decideProfileAdoption } from '@/server/services/workshop/optimization/profile-adopt.service'
 
 export default defineApiHandler(async (event) => {
   const user = resolveUser(event)
@@ -63,6 +64,21 @@ export default defineApiHandler(async (event) => {
 
   // SW5/D13 单一咽喉:optimizer-recipe:* 卡一律走 dispatch 链(八项重验→抢占→写→回读→审计)。
   // 业务拒绝 {approved:false,code,comment} 在咽喉内已 decide() 落定;此处不再走通用 decide。
+  // OW-adopt 单一咽喉:optimizer-profile:* 卡 → 采纳裁决(批准=发布+重绑)
+  if (pending && isProfileAdoptCard(pending.nodeId)) {
+    const result = await decideProfileAdoption({
+      cardId: id,
+      nodeId: pending.nodeId,
+      approved: normalized.approved,
+      comment,
+      actingUser: user ? { id: user.id, name: user.name ?? user.id } : { id: 'system' },
+      via: 'decide-endpoint',
+    })
+    if (result.handled) {
+      return { via: 'profile-adopt', result: { approved: result.approved, comment: result.comment, code: result.code, published: result.published } }
+    }
+  }
+
   if (pending && isOptimizerDispatchCard(pending.nodeId)) {
     const result = await decideOptimizerDispatch({
       cardId: id,

package/server/api/workshop/ontology/drafts/[draftId]/compile.ts

@@ -0,0 +1,39 @@
+/**
+ * POST /api/workshop/ontology/drafts/:draftId/compile — 编译预览(四类产物 + Rule Trace;不落库)
+ *
+ * body.currentBounds 可选(现行权威界):提供时强制「只收紧」。
+ * body.approvedOnly 可选:true 时模拟发布路径(未获批硬约束将被拒)。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { requireRole } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { actorFromUser, compileDraft } from '@/server/services/workshop/ontology/ontology.service'
+import type { CompileOptions } from '@/server/services/workshop/ontology/contracts'
+
+export default defineApiHandler(async (event) => {
+  const draftId = getRouterParam(event, 'draftId') ?? ''
+  if (!draftId) throw new AppError(422, 'DRAFT_ID_REQUIRED', 'draftId 缺失')
+  const user = requireRole(event, ['admin', 'editor'])
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const currentBounds = body.currentBounds as CompileOptions['currentBounds'] | undefined
+  const preview = compileDraft(draftId, actorFromUser(user), {
+    approvedOnly: body.approvedOnly === true,
+    currentBounds,
+  })
+  return {
+    status: preview.result.status,
+    contentHash: preview.contentHash,
+    packHash: preview.packHash,
+    rulePackHash: preview.result.rulePackHash,
+    counts: {
+      compiled: preview.result.compiledCount,
+      guard: preview.result.guardCount,
+      explained: preview.result.explainedCount,
+      rejected: preview.result.rejectedCount,
+    },
+    artifacts: preview.result.artifacts,
+    traces: preview.result.traces,
+    issues: preview.result.issues,
+  }
+})

package/server/api/workshop/ontology/drafts/[draftId]/evidence.ts

@@ -0,0 +1,33 @@
+/**
+ * POST /api/workshop/ontology/drafts/:draftId/evidence — 登记证据(追加账本 + 写回草稿)
+ */
+import { getRouterParam, readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { requireRole } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { actorFromUser, appendEvidence } from '@/server/services/workshop/ontology/ontology.service'
+
+const TARGET_KINDS = new Set(['entity', 'relation', 'rule', 'binding'])
+const LEVELS = new Set(['candidate_influence', 'observed_correlation', 'validated_control'])
+
+export default defineApiHandler(async (event) => {
+  const draftId = getRouterParam(event, 'draftId') ?? ''
+  if (!draftId) throw new AppError(422, 'DRAFT_ID_REQUIRED', 'draftId 缺失')
+  const user = requireRole(event, ['admin', 'editor'])
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const targetKind = String(body.targetKind ?? '')
+  const level = String(body.level ?? '')
+  if (!TARGET_KINDS.has(targetKind)) throw new AppError(422, 'EVIDENCE_TARGET_INVALID', `targetKind 必须是 entity|relation|rule|binding(收到 ${targetKind})`)
+  if (!LEVELS.has(level)) throw new AppError(422, 'EVIDENCE_LEVEL_INVALID', `level 必须是 candidate_influence|observed_correlation|validated_control(收到 ${level})`)
+  const source = body.source
+  if (!source || typeof source !== 'object') throw new AppError(422, 'EVIDENCE_SOURCE_REQUIRED', 'source 必填(如 {type:"dataset_stats",datasetId,sha256})')
+  const detail = appendEvidence(draftId, actorFromUser(user), {
+    targetKind: targetKind as 'entity' | 'relation' | 'rule' | 'binding',
+    targetKey: String(body.targetKey ?? ''),
+    level: level as 'candidate_influence' | 'observed_correlation' | 'validated_control',
+    source: source as Parameters<typeof appendEvidence>[2]['source'],
+    sourceRef: typeof body.sourceRef === 'string' ? body.sourceRef : undefined,
+    note: typeof body.note === 'string' ? body.note : undefined,
+  })
+  return { draft: { id: detail.draft.id, rev: detail.draft.rev }, validation: detail.validation }
+})

package/server/api/workshop/ontology/drafts/[draftId]/publish.ts

@@ -0,0 +1,44 @@
+/**
+ * POST /api/workshop/ontology/drafts/:draftId/publish — 冻结为不可变版本(仅 admin)
+ *
+ * body.currentBounds 可选(提供时编译期强制「只收紧」)。
+ * 失败语义:422 VALIDATION_BLOCKED / ONTOLOGY_BINDING_INVALID / ONTOLOGY_NOT_APPROVED;
+ *           409 ONTOLOGY_VERSION_CONFLICT(并发发布)。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { requireAdmin } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { actorFromUser, getDraft, publishDraft } from '@/server/services/workshop/ontology/ontology.service'
+import type { CompileOptions } from '@/server/services/workshop/ontology/contracts'
+import { recordConfigAction } from '@/server/services/workshop/optimization/access'
+
+export default defineApiHandler(async (event) => {
+  const draftId = getRouterParam(event, 'draftId') ?? ''
+  if (!draftId) throw new AppError(422, 'DRAFT_ID_REQUIRED', 'draftId 缺失')
+  const user = requireAdmin(event)
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const result = publishDraft(draftId, actorFromUser(user), {
+    currentBounds: body.currentBounds as CompileOptions['currentBounds'] | undefined,
+  })
+  const draft = getDraft(draftId)
+  recordConfigAction(user, 'ontology.publish', { kind: 'ontology_version', id: `${result.version.id}@${result.version.version}` },
+    `发布本体 ${result.version.id}@${result.version.version}(编译 ${result.compile.compiledCount} / 守卫 ${result.compile.guardCount})`,
+    { ontologyId: result.version.id, version: result.version.version, packHash: result.packHash, revision: draft.rev })
+  return {
+    version: {
+      id: result.version.id, version: result.version.version, status: result.version.status,
+      contentHash: result.version.contentHash, parentVersion: result.version.parentVersion,
+      lineId: result.version.lineId, createdAt: result.version.createdAt,
+    },
+    packHash: result.packHash,
+    counts: {
+      compiled: result.compile.compiledCount,
+      guard: result.compile.guardCount,
+      explained: result.compile.explainedCount,
+      rejected: result.compile.rejectedCount,
+    },
+    issues: result.compile.issues,
+    draftRev: result.draft.rev,
+  }
+})

package/server/api/workshop/ontology/drafts/[draftId]/rules/[ruleId]/approval-decision.ts

@@ -0,0 +1,28 @@
+/**
+ * POST /api/workshop/ontology/drafts/:draftId/rules/:ruleId/approval-decision — 裁决批准申请
+ * body: { approvalId, approved, comment? }
+ *
+ * 自审禁止:起草人不能裁决自己的申请(单管理员实例由服务层打 solo_operator 豁免)。
+ */
+import { getRouterParam, readBody } from 'h3'
+import { defineApiHandler } from '@/server/utils/response'
+import { requireRole } from '@/server/api/workshop/caller'
+import { AppError } from '@/server/utils/errors'
+import { actorFromUser, decideRuleApproval } from '@/server/services/workshop/ontology/ontology.service'
+import { recordConfigAction } from '@/server/services/workshop/optimization/access'
+
+export default defineApiHandler(async (event) => {
+  const draftId = getRouterParam(event, 'draftId') ?? ''
+  if (!draftId) throw new AppError(422, 'DRAFT_ID_REQUIRED', 'draftId 缺失')
+  const user = requireRole(event, ['admin', 'editor'])
+  const body = await readBody<Record<string, unknown>>(event) ?? {}
+  const approvalId = String(body.approvalId ?? '')
+  if (!approvalId) throw new AppError(422, 'APPROVAL_ID_REQUIRED', 'approvalId 必填')
+  const result = decideRuleApproval(draftId, approvalId, actorFromUser(user), {
+    approved: body.approved === true,
+    comment: typeof body.comment === 'string' ? body.comment : undefined,
+  })
+  recordConfigAction(user, 'ontology.rule.decide', { kind: 'ontology_approval', id: approvalId },
+    `裁决本体规则批准 ${approvalId}:${result.decision}`)
+  return result
+})