agentworkshop 0.7.71 → 0.8.1

package/server/services/workshop/daq/storage/sqlite.adapter.ts

@@ -90,6 +90,13 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
     }
   }
 
+  /** 惰性自愈:占位适配器的浮空 init(未 await)若失败/未完成,读路径在此补初始化。
+   *  没有它,查询会静默返回空(数据面 fail-open)—— 2026-10-24 真机验收抓到。 */
+  private async ensureDb(): Promise<DatabaseSync> {
+    if (!this.db) await this.init()
+    return this.db!
+  }
+
   /** 保留期清理:分批 DELETE(单批 5000 行,避免长事务锁库)
    *  C6:迟到但新鲜的点不能被事件时间误删 —— 需要 ts_ms 与 ingested_at 都过期才删。 */
   private sweepRetention(): void {
@@ -151,7 +158,8 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
   }
 
   async query(nodeId: string, opts: DaqQueryOpts): Promise<TsdbPoint[]> {
-    if (!this.db) return []
+    if (!this.db) await this.init()
+    const db = this.db as DatabaseSync
     const limit = Math.max(1, Math.min(opts.limit ?? 500, 5000))
     const from = opts.fromMs ?? 0
     const to = opts.toMs ?? Date.now()
@@ -160,7 +168,7 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
       // node:sqlite 把整数值参数绑为 REAL 时 ts_ms/:b 走浮点除,同桶样本得到互不
       // 相同的浮点桶键,GROUP BY 塌不了(输出≈原始点)。整数字面量保证整数除法。
       const bucket = Math.round(Number(opts.bucketMs))
-      const rows = this.db.prepare(`
+      const rows = db.prepare(`
         SELECT (ts_ms / ${bucket}) * ${bucket} AS b_at,
                AVG(value) AS avg, MIN(value) AS min, MAX(value) AS max, COUNT(*) AS cnt
         FROM daq_samples
@@ -169,7 +177,7 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
       `).all({ ':id': nodeId, ':from': from, ':to': to, ':lim': limit }) as Array<{ b_at: number, avg: number, min: number, max: number, cnt: number }>
       return rows.map(r => ({ at: Number(r.b_at), avg: r.avg, min: r.min, max: r.max, cnt: Number(r.cnt) }))
     }
-    const rows = this.db.prepare(`
+    const rows = db.prepare(`
       SELECT ts_ms, value, state FROM daq_samples
       WHERE node_id = :id AND ts_ms >= :from AND ts_ms <= :to
       ORDER BY ts_ms ASC LIMIT :lim
@@ -178,8 +186,9 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
   }
 
   async queryTagged(q: import('./tsdb-port').TsdbTagQuery): Promise<Map<string, import('./tsdb-port').TsdbPoint[]>> {
+    if (!this.db) await this.init()
+    const db = this.db as DatabaseSync
     const out = new Map<string, import('./tsdb-port').TsdbPoint[]>()
-    if (!this.db) return out
     const where: string[] = []
     const params: Array<string | number> = []
     if (q.lineId) {
@@ -212,7 +221,7 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
     if (q.bucketMs && q.bucketMs >= 100) {
       // 桶宽内插(整数,同 query():绑定参数会走 REAL 浮点除,塌不了桶)
       const bucket = Math.round(Number(q.bucketMs))
-      const rows2 = (this.db.prepare(`
+      const rows2 = (db.prepare(`
         SELECT node_id, (ts_ms / ${bucket}) * ${bucket} AS b_at, AVG(value) AS avg, MIN(value) AS min, MAX(value) AS max, COUNT(*) AS cnt
         FROM daq_samples WHERE ${where.join(' AND ')}
         GROUP BY node_id, b_at ORDER BY b_at ASC LIMIT ?
@@ -224,7 +233,7 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
       }
       return out
     }
-    const rows = (this.db.prepare(`
+    const rows = (db.prepare(`
       SELECT node_id, ts_ms, value, state, ingested_at FROM daq_samples WHERE ${where.join(' AND ')}
       ORDER BY ts_ms ASC LIMIT ?
     `).all(...params, limit)) as Array<{ node_id: string, ts_ms: number, value: number, state: string, ingested_at: number | null }>
@@ -239,18 +248,19 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
 
   /** 逐节点 raw 分页(新增;C7):稳定 ASC、游标严格大于、每页限额、无漏无重。 */
   async queryTaggedPage(nodeId: string, q: import('./tsdb-port').TsdbPageQuery = {}): Promise<import('./tsdb-port').TsdbPage> {
-    if (!this.db) return { nodeId, points: [], nextCursor: null, done: true }
+    if (!this.db) await this.init()
+    const db = this.db as DatabaseSync
     const limit = Math.max(1, Math.min(q.limit ?? 5000, 500_000))
     const from = Math.max(q.fromMs ?? 0, (q.afterTs ?? -1) + 1)
     const to = q.toMs ?? Date.now()
     const withState = q.withState !== false
     const rows = (withState
-      ? this.db.prepare(`
+      ? db.prepare(`
           SELECT ts_ms, value, state, ingested_at FROM daq_samples
           WHERE node_id = ? AND ts_ms >= ? AND ts_ms <= ?
           ORDER BY ts_ms ASC LIMIT ?
         `).all(nodeId, from, to, limit)
-      : this.db.prepare(`
+      : db.prepare(`
           SELECT ts_ms, value FROM daq_samples
           WHERE node_id = ? AND ts_ms >= ? AND ts_ms <= ?
           ORDER BY ts_ms ASC LIMIT ?
@@ -266,10 +276,11 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
   }
 
   async latest(): Promise<Map<string, DaqSampleRow>> {
+    if (!this.db) await this.init()
+    const db = this.db as DatabaseSync
     const out = new Map<string, DaqSampleRow>()
-    if (!this.db) return out
     // SQLite 裸列保证:GROUP BY + MAX() 时裸列取自 max 所在行(命中 idx_daq_node_ts,免相关子查询)
-    const rows = this.db.prepare(`
+    const rows = db.prepare(`
       SELECT node_id, MAX(ts_ms) AS ts_ms, value, state, ingested_at FROM daq_samples GROUP BY node_id
     `).all() as Array<{ node_id: string, ts_ms: number, value: number, state: string, ingested_at: number | null }>
     for (const r of rows) {
@@ -305,9 +316,10 @@ export class SqliteTimeSeriesAdapter implements TsdbPort {
   }
 
   async queryFrames(nodeId: string, opts: import('./tsdb-port').DaqFrameQueryOpts): Promise<import('./tsdb-port').DaqFrameRecord[]> {
-    if (!this.db) return []
+    if (!this.db) await this.init()
+    const db = this.db as DatabaseSync
     const limit = Math.max(1, Math.min(opts.limit ?? 100, 1000))
-    const rows = this.db.prepare(`
+    const rows = db.prepare(`
       SELECT ts_ms, kind, meta, metrics, device_binding_id, line_id, product_id, recipe_id, run_id
       FROM daq_frames
       WHERE node_id = :id AND (:kind IS NULL OR kind = :kind) AND ts_ms >= :from AND ts_ms <= :to

package/server/services/workshop/db/database/open.ts

@@ -1,95 +1,97 @@
-/**
- * 打开/初始化数据库(PRAGMA、建表、种子、sqlite-vec)
- * (由 server/services/workshop/db/database.ts 按职责拆出;内容逐行原文搬运)
- */
-import type * as sqliteVec from 'sqlite-vec'
-import { DatabaseSync } from 'node:sqlite'
-import { SCHEMA_SQL } from './schema'
-import { createRequire } from 'node:module'
-import { migrateAddColumn, migrateAgentTeamExecutionLeaseColumns, migrateAgentTeamTaskGuardrailColumns, migrateAgentTeamTaskGuardrails, migrateAgentTeamTaskQueueColumns, migrateAmlChannelOptimizationColumns, migrateAmlModelIdentityColumns, migrateAnalysisEditColumns, migrateApprovalPayloadColumns, migrateAuditQueryIndexes, migrateAuditScopeColumn, migrateDropOwnerFks, migrateDualDriveColumns, migrateGroupChatV17, migrateLegacySchema, migrateMissingForeignKeys, migrateAmlTwinProviderColumns, migrateOptimizerFoundationColumns, migrateAgentTokenGraceColumns } from './migrations'
-import { seedDefaultWorkshopData } from './seed'
-
-export const require = createRequire(import.meta.url)
-export function openWorkshopDb(path: string): DatabaseSync {
-  // allowExtension + 尝试加载 sqlite-vec(向量检索);失败静默降级纯 FTS(受控环境可能禁扩展)
-  const db = new DatabaseSync(path, { allowExtension: true })
-  // busy_timeout:retention/backup 等第二连接持写锁时,主连接等待而非立即 SQLITE_BUSY
-  db.exec('PRAGMA busy_timeout = 5000')
-  try {
-    const { getLoadablePath } = require('sqlite-vec') as typeof sqliteVec
-    db.loadExtension(getLoadablePath())
-  }
-  catch {
-    // 扩展不可用:记忆系统自动退化为 FTS-only(vecInit 将失败并禁用向量)
-  }
-  initWorkshopDb(db)
-  return db
-}
-
-/** 对已打开的库执行初始化:WAL + 外键约束 + 建表 + 增量迁移 */
-export function initWorkshopDb(db: DatabaseSync): void {
-  db.exec('PRAGMA journal_mode = WAL;')
-  // S6:synchronous=NORMAL(WAL 推荐档)——与 TSDB 仿真库对齐;断电最多丢最后一个事务,不损坏库
-  db.exec('PRAGMA synchronous = NORMAL;')
-  db.exec('PRAGMA foreign_keys = ON;')
-  db.exec(SCHEMA_SQL)
-  // Add guardrail metadata before any legacy tasks-table rebuild so values can be copied safely.
-  migrateAgentTeamTaskGuardrailColumns(db)
-  migrateAgentTeamTaskQueueColumns(db)
-  migrateLegacySchema(db)
-  migrateAddColumn(db, 'channels', 'scenario_prompt', 'TEXT NOT NULL DEFAULT \'\'')
-  // v11:channel 级默认 LLM(四引擎统一注入面;成员 config 显式指定时优先)
-  migrateAddColumn(db, 'channels', 'llm_json', 'TEXT NOT NULL DEFAULT \'\'')
-  // 派发路由理由(koda RouteDecision 借鉴):lead 派发留痕"为什么派给他",供审计与前端呈现
-  migrateAddColumn(db, 'tasks', 'route_reason', 'TEXT NOT NULL DEFAULT \'\'')
-  // v10:模板可见性列(既有库补列;默认 private,仅属主可见)
-  migrateAddColumn(db, 'agents', 'visibility', 'TEXT NOT NULL DEFAULT \'private\'')
-  migrateAddColumn(db, 'teams', 'visibility', 'TEXT NOT NULL DEFAULT \'private\'')
-  // 回填:内置/遗留公共模板(owner NULL)强制 public —— 升级后保持全员可读可用
-  db.exec('UPDATE agents SET visibility = \'public\' WHERE owner_user_id IS NULL')
-  db.exec('UPDATE teams SET visibility = \'public\' WHERE owner_user_id IS NULL')
-  // 运维日志(OpsLog)维度列:既有库补列(新库由上方 DDL 直建)
-  migrateAddColumn(db, 'audit_log', 'line_id', 'TEXT NOT NULL DEFAULT \'\'')
-  migrateAddColumn(db, 'audit_log', 'product_id', 'TEXT NOT NULL DEFAULT \'\'')
-  migrateAddColumn(db, 'audit_log', 'recipe_id', 'TEXT NOT NULL DEFAULT \'\'')
-  migrateAddColumn(db, 'audit_log', 'kind', 'TEXT NOT NULL DEFAULT \'\'')
-  migrateAddColumn(db, 'audit_log', 'summary', 'TEXT NOT NULL DEFAULT \'\'')
-  // 2026-10-08 写控 ACK 鉴定:严重级列(info/warn/error;既有库补列,历史行按 info 语义)
-  migrateAddColumn(db, 'audit_log', 'level', 'TEXT NOT NULL DEFAULT \'info\'')
-  // 2026-10-19 产线日志显式域标识(scope=line|system;老库按 line_id 回填并强制不变量)
-  migrateAuditScopeColumn(db)
-  // 2026-10-19 产线日志查询索引(必须在补列之后:老库缺列时建索引会中断初始化)
-  migrateAuditQueryIndexes(db)
-  migrateMissingForeignKeys(db)
-  // Run after legacy task-table rebuilds so guardrail metadata and its index survive upgrades.
-  migrateAgentTeamTaskQueueColumns(db)
-  migrateAgentTeamExecutionLeaseColumns(db)
-  migrateAgentTeamTaskGuardrails(db)
-  migrateDropOwnerFks(db)
-  migrateGroupChatV17(db)
-  migrateAmlTwinProviderColumns(db)
-  migrateAmlModelIdentityColumns(db)
-  migrateAmlChannelOptimizationColumns(db)
-  // 产线 Co-Pilot P2:审批历史结构化载荷列(payload_json/choice;既有库补列,新库 DDL 已含)
-  migrateApprovalPayloadColumns(db)
-  // v27:数据分析报告人工修订列(updated_*;既有库补列,新库 DDL 已含)
-  migrateAnalysisEditColumns(db)
-  // v29:Optimizer/Process Model 地基列(工件类型判别、谱系引用、legacy 标记)
-  migrateOptimizerFoundationColumns(db)
-  // v30:双驱动收敛列(下发状态机/谱系/多工况 hash/资格谱系;总计划 SW2–SW5)
-  migrateDualDriveColumns(db)
-  // v31(WP3):agent token 轮换宽限列(prev_token/prev_token_until;既有库补列)
-  migrateAgentTokenGraceColumns(db)
-  seedDefaultWorkshopData(db)
-}
-
-/**
- * v17 迁移:群聊/成员/HITL 相关列与不变量回填。
- *
- * 规则(主计划 §3.1 / §13.7):
- * - 既有 owner 非 NULL 的 Channel 一律 private + owner_approve + owner_only + chat_enabled=0,
- *   即**默认不改变任何既有可见性/权限行为**。
- * - owner 为 NULL 的遗留 Channel 同样保持 private + chat_enabled=0:不能被自动变成公开群聊;
- *   必须由 admin 显式认领(写 owner_user_id)后再由 owner 开启群聊。
- * - 每个 owner 非 NULL 的 Channel 必须恰好一条 active owner 成员记录(缺失则补写)。
- */
+/**
+ * 打开/初始化数据库(PRAGMA、建表、种子、sqlite-vec)
+ * (由 server/services/workshop/db/database.ts 按职责拆出;内容逐行原文搬运)
+ */
+import type * as sqliteVec from 'sqlite-vec'
+import { DatabaseSync } from 'node:sqlite'
+import { SCHEMA_SQL } from './schema'
+import { createRequire } from 'node:module'
+import { migrateAddColumn, migrateAgentTeamExecutionLeaseColumns, migrateAgentTeamTaskGuardrailColumns, migrateAgentTeamTaskGuardrails, migrateAgentTeamTaskQueueColumns, migrateAmlChannelOptimizationColumns, migrateAmlModelIdentityColumns, migrateAnalysisEditColumns, migrateApprovalPayloadColumns, migrateAuditQueryIndexes, migrateAuditScopeColumn, migrateDropOwnerFks, migrateDualDriveColumns, migrateGroupChatV17, migrateLegacySchema, migrateMissingForeignKeys, migrateAmlTwinProviderColumns, migrateOptimizerFoundationColumns, migrateAgentTokenGraceColumns } from './migrations'
+import { seedDefaultWorkshopData } from './seed'
+
+export const require = createRequire(import.meta.url)
+export function openWorkshopDb(path: string): DatabaseSync {
+  // allowExtension + 尝试加载 sqlite-vec(向量检索);失败静默降级纯 FTS(受控环境可能禁扩展)
+  const db = new DatabaseSync(path, { allowExtension: true })
+  // busy_timeout:retention/backup 等第二连接持写锁时,主连接等待而非立即 SQLITE_BUSY
+  db.exec('PRAGMA busy_timeout = 5000')
+  try {
+    const { getLoadablePath } = require('sqlite-vec') as typeof sqliteVec
+    db.loadExtension(getLoadablePath())
+  }
+  catch {
+    // 扩展不可用:记忆系统自动退化为 FTS-only(vecInit 将失败并禁用向量)
+  }
+  initWorkshopDb(db)
+  return db
+}
+
+/** 对已打开的库执行初始化:WAL + 外键约束 + 建表 + 增量迁移 */
+export function initWorkshopDb(db: DatabaseSync): void {
+  db.exec('PRAGMA journal_mode = WAL;')
+  // S6:synchronous=NORMAL(WAL 推荐档)——与 TSDB 仿真库对齐;断电最多丢最后一个事务,不损坏库
+  db.exec('PRAGMA synchronous = NORMAL;')
+  db.exec('PRAGMA foreign_keys = ON;')
+  db.exec(SCHEMA_SQL)
+  // Add guardrail metadata before any legacy tasks-table rebuild so values can be copied safely.
+  migrateAgentTeamTaskGuardrailColumns(db)
+  migrateAgentTeamTaskQueueColumns(db)
+  migrateLegacySchema(db)
+  migrateAddColumn(db, 'channels', 'scenario_prompt', 'TEXT NOT NULL DEFAULT \'\'')
+  // v11:channel 级默认 LLM(四引擎统一注入面;成员 config 显式指定时优先)
+  migrateAddColumn(db, 'channels', 'llm_json', 'TEXT NOT NULL DEFAULT \'\'')
+  // 派发路由理由(koda RouteDecision 借鉴):lead 派发留痕"为什么派给他",供审计与前端呈现
+  migrateAddColumn(db, 'tasks', 'route_reason', 'TEXT NOT NULL DEFAULT \'\'')
+  // v10:模板可见性列(既有库补列;默认 private,仅属主可见)
+  migrateAddColumn(db, 'agents', 'visibility', 'TEXT NOT NULL DEFAULT \'private\'')
+  migrateAddColumn(db, 'teams', 'visibility', 'TEXT NOT NULL DEFAULT \'private\'')
+  // 回填:内置/遗留公共模板(owner NULL)强制 public —— 升级后保持全员可读可用
+  db.exec('UPDATE agents SET visibility = \'public\' WHERE owner_user_id IS NULL')
+  db.exec('UPDATE teams SET visibility = \'public\' WHERE owner_user_id IS NULL')
+  // 运维日志(OpsLog)维度列:既有库补列(新库由上方 DDL 直建)
+  migrateAddColumn(db, 'audit_log', 'line_id', 'TEXT NOT NULL DEFAULT \'\'')
+  migrateAddColumn(db, 'audit_log', 'product_id', 'TEXT NOT NULL DEFAULT \'\'')
+  migrateAddColumn(db, 'audit_log', 'recipe_id', 'TEXT NOT NULL DEFAULT \'\'')
+  migrateAddColumn(db, 'audit_log', 'kind', 'TEXT NOT NULL DEFAULT \'\'')
+  migrateAddColumn(db, 'audit_log', 'summary', 'TEXT NOT NULL DEFAULT \'\'')
+  // 2026-10-08 写控 ACK 鉴定:严重级列(info/warn/error;既有库补列,历史行按 info 语义)
+  migrateAddColumn(db, 'audit_log', 'level', 'TEXT NOT NULL DEFAULT \'info\'')
+  // 2026-10-19 产线日志显式域标识(scope=line|system;老库按 line_id 回填并强制不变量)
+  migrateAuditScopeColumn(db)
+  // 2026-10-19 产线日志查询索引(必须在补列之后:老库缺列时建索引会中断初始化)
+  migrateAuditQueryIndexes(db)
+  migrateMissingForeignKeys(db)
+  // Run after legacy task-table rebuilds so guardrail metadata and its index survive upgrades.
+  migrateAgentTeamTaskQueueColumns(db)
+  migrateAgentTeamExecutionLeaseColumns(db)
+  migrateAgentTeamTaskGuardrails(db)
+  migrateDropOwnerFks(db)
+  migrateGroupChatV17(db)
+  migrateAmlTwinProviderColumns(db)
+  migrateAmlModelIdentityColumns(db)
+  migrateAmlChannelOptimizationColumns(db)
+  // 产线 Co-Pilot P2:审批历史结构化载荷列(payload_json/choice;既有库补列,新库 DDL 已含)
+  migrateApprovalPayloadColumns(db)
+  // v27:数据分析报告人工修订列(updated_*;既有库补列,新库 DDL 已含)
+  migrateAnalysisEditColumns(db)
+  // v29:Optimizer/Process Model 地基列(工件类型判别、谱系引用、legacy 标记)
+  migrateOptimizerFoundationColumns(db)
+  // v30:双驱动收敛列(下发状态机/谱系/多工况 hash/资格谱系;总计划 SW2–SW5)
+  migrateDualDriveColumns(db)
+  // v31(WP3):agent token 轮换宽限列(prev_token/prev_token_until;既有库补列)
+  migrateAgentTokenGraceColumns(db)
+  // v32(ONT):Profile 冻结本体引用摘要(缺省 [] = 无本体约束域;只前滚,不回填)
+  migrateAddColumn(db, 'optimizer_profiles', 'ontology_refs_json', 'TEXT NOT NULL DEFAULT \'[]\'')
+  seedDefaultWorkshopData(db)
+}
+
+/**
+ * v17 迁移:群聊/成员/HITL 相关列与不变量回填。
+ *
+ * 规则(主计划 §3.1 / §13.7):
+ * - 既有 owner 非 NULL 的 Channel 一律 private + owner_approve + owner_only + chat_enabled=0,
+ *   即**默认不改变任何既有可见性/权限行为**。
+ * - owner 为 NULL 的遗留 Channel 同样保持 private + chat_enabled=0:不能被自动变成公开群聊;
+ *   必须由 admin 显式认领(写 owner_user_id)后再由 owner 开启群聊。
+ * - 每个 owner 非 NULL 的 Channel 必须恰好一条 active owner 成员记录(缺失则补写)。
+ */

package/server/services/workshop/db/database/schema.ts

@@ -896,6 +896,7 @@ CREATE TABLE IF NOT EXISTS optimizer_profiles (
   id                    TEXT NOT NULL,
   version               INTEGER NOT NULL DEFAULT 1,
   name                  TEXT NOT NULL DEFAULT '',
+  description           TEXT NOT NULL DEFAULT '',
   model_ref             TEXT NOT NULL,
   model_artifact_hash   TEXT NOT NULL DEFAULT '',
   model_artifact_kind   TEXT NOT NULL DEFAULT '',
@@ -1019,7 +1020,161 @@ CREATE TABLE IF NOT EXISTS optimizer_candidate_crosschecks (
   row_hash                      TEXT NOT NULL DEFAULT '',
   created_at                    TEXT NOT NULL
 );
-CREATE INDEX IF NOT EXISTS idx_optimizer_crosschecks_rec ON optimizer_candidate_crosschecks(recommendation_id, created_at DESC, id DESC);`
+CREATE INDEX IF NOT EXISTS idx_optimizer_crosschecks_rec ON optimizer_candidate_crosschecks(recommendation_id, created_at DESC, id DESC);
+
+-- ===== ontology (ONT) =====
+-- 工业本体与语义中枢(docs/plans/2026-10-24-ontology-service-plan.md)。
+-- 铁律:本体不是第二控制权威(编译产物只收紧);不复制系统对象(绑定锚 daq/dcw/recipe id);
+-- 知识≠执行授权(approved_for_control 必须经审批)。daq/dcw 节点不在本库(JSON 落盘),
+-- 绑定目标一律无 FK,存在性/归属/单位由 semantic-binding 服务实时校验。
+CREATE TABLE IF NOT EXISTS ontology_versions (
+  id              TEXT NOT NULL,                   -- ontology 身份(如 'ont-pva-line01')
+  version         INTEGER NOT NULL,
+  name            TEXT NOT NULL DEFAULT '',
+  line_id         TEXT NOT NULL DEFAULT '',        -- 授权锚;空=全局本体(仅 admin 可发布)
+  parent_version  INTEGER,
+  content_hash    TEXT NOT NULL DEFAULT '',
+  compiled_json   TEXT NOT NULL DEFAULT '{}',
+  changelog_json  TEXT NOT NULL DEFAULT '{}',
+  status          TEXT NOT NULL DEFAULT 'draft',   -- draft|published|retired(published 服务层拒改)
+  owner_user_id   TEXT NOT NULL DEFAULT '',
+  published_by    TEXT NOT NULL DEFAULT '',
+  created_at      TEXT NOT NULL,
+  updated_at      TEXT NOT NULL,
+  PRIMARY KEY (id, version)
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_versions_line ON ontology_versions(line_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS ontology_entities (
+  version_id      TEXT NOT NULL,
+  version         INTEGER NOT NULL,
+  entity_key      TEXT NOT NULL,                   -- 版本内稳定键(如 'pv.melt_pressure')
+  kind            TEXT NOT NULL,
+  name            TEXT NOT NULL,
+  description     TEXT NOT NULL DEFAULT '',
+  unit            TEXT NOT NULL DEFAULT '',
+  dimension       TEXT NOT NULL DEFAULT '',        -- 量纲注记(shared/dimensions 判定)
+  role            TEXT NOT NULL DEFAULT '',        -- control|target|disturbance|feature|state|guard|observation
+  attributes_json TEXT NOT NULL DEFAULT '{}',
+  created_at      TEXT NOT NULL,
+  PRIMARY KEY (version_id, version, entity_key)
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_entities_kind ON ontology_entities(version_id, version, kind);
+
+CREATE TABLE IF NOT EXISTS ontology_relations (
+  id              TEXT NOT NULL,
+  version_id      TEXT NOT NULL,
+  version         INTEGER NOT NULL,
+  src_key         TEXT NOT NULL,
+  dst_key         TEXT NOT NULL,
+  predicate       TEXT NOT NULL,                   -- influences|measures|actuates|hasPart|precedes|observedBy|constrainedBy|basedOn
+  properties_json TEXT NOT NULL DEFAULT '{}',      -- {sign,gainPerUnit,lagMs,evidenceTier,controlApplicability}
+  status          TEXT NOT NULL DEFAULT 'proposed',
+  created_at      TEXT NOT NULL,
+  PRIMARY KEY (version_id, version, id),
+  UNIQUE(version_id, version, src_key, dst_key, predicate)
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_relations_dst ON ontology_relations(version_id, version, dst_key);
+
+CREATE TABLE IF NOT EXISTS ontology_rules (
+  id               TEXT NOT NULL,
+  version_id       TEXT NOT NULL,
+  version          INTEGER NOT NULL,
+  rule_key         TEXT NOT NULL,
+  kind             TEXT NOT NULL,                  -- bound|rate|linear_coupling|nonlinear|state_condition|interlock|informal
+  dsl_json         TEXT NOT NULL DEFAULT '{}',
+  constraint_level TEXT NOT NULL DEFAULT 'soft',   -- hard|soft(证据不足只能是 soft)
+  severity         TEXT NOT NULL DEFAULT 'error',
+  status           TEXT NOT NULL DEFAULT 'proposed',
+  description      TEXT NOT NULL DEFAULT '',
+  created_at       TEXT NOT NULL,
+  PRIMARY KEY (version_id, version, id),
+  UNIQUE(version_id, version, rule_key)
+);
+
+CREATE TABLE IF NOT EXISTS ontology_evidence (
+  id              TEXT PRIMARY KEY,
+  ontology_id     TEXT NOT NULL,
+  target_kind     TEXT NOT NULL,                   -- entity|relation|rule|binding
+  target_key      TEXT NOT NULL,
+  level           TEXT NOT NULL,                   -- candidate_influence|observed_correlation|validated_control
+  source_type     TEXT NOT NULL,
+  source_ref      TEXT NOT NULL DEFAULT '',
+  source_ref_hash TEXT NOT NULL DEFAULT '',
+  detail_json     TEXT NOT NULL DEFAULT '{}',
+  created_by      TEXT NOT NULL DEFAULT '',
+  created_at      TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_evidence_target ON ontology_evidence(ontology_id, target_kind, target_key, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS ontology_drafts (
+  id            TEXT PRIMARY KEY,
+  ontology_id   TEXT NOT NULL,
+  base_version  INTEGER,
+  rev           INTEGER NOT NULL DEFAULT 1,
+  draft_json    TEXT NOT NULL,
+  owner_user_id TEXT NOT NULL DEFAULT '',
+  created_at    TEXT NOT NULL,
+  updated_at    TEXT NOT NULL,
+  UNIQUE(ontology_id, owner_user_id)
+);
+
+CREATE TABLE IF NOT EXISTS ontology_semantic_bindings (
+  id               TEXT NOT NULL,
+  version_id       TEXT NOT NULL,
+  version          INTEGER NOT NULL,
+  entity_key       TEXT NOT NULL,
+  platform_kind    TEXT NOT NULL,                  -- daq_node|dcw_node|recipe_param|device|spec_variable|scene_variable|condition
+  platform_id      TEXT NOT NULL,
+  target_sub       TEXT NOT NULL DEFAULT '',       -- recipe_param 的参数键
+  scope            TEXT NOT NULL DEFAULT 'global', -- global|line:<id>|recipe:<id>@v<n>|scene:<id>@<ver>
+  direction        TEXT NOT NULL DEFAULT 'read',   -- read|write|read_write
+  unit_declared    TEXT NOT NULL DEFAULT '',
+  unit_target      TEXT NOT NULL DEFAULT '',
+  scale            REAL NOT NULL DEFAULT 1,
+  offset           REAL NOT NULL DEFAULT 0,
+  status           TEXT NOT NULL DEFAULT 'active', -- active|drifted|retired
+  last_verified_at TEXT,
+  created_at       TEXT NOT NULL,
+  PRIMARY KEY (version_id, version, id),
+  UNIQUE(version_id, version, entity_key, platform_kind, platform_id)
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_bindings_target ON ontology_semantic_bindings(platform_kind, platform_id);
+
+CREATE TABLE IF NOT EXISTS ontology_publish_log (
+  id            TEXT PRIMARY KEY,
+  ontology_id   TEXT NOT NULL,
+  version       INTEGER NOT NULL DEFAULT 0,
+  action        TEXT NOT NULL,                     -- draft.create|draft.update|compile|transition|publish|retire|drift_detected|reconcile
+  actor         TEXT NOT NULL DEFAULT '',
+  actor_kind    TEXT NOT NULL DEFAULT 'user',      -- user|agent|system
+  solo_operator INTEGER NOT NULL DEFAULT 0,        -- 单管理员实例自审豁免标记
+  approval_id   TEXT,
+  detail_json   TEXT NOT NULL DEFAULT '{}',
+  created_at    TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_publish_log ON ontology_publish_log(ontology_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS ontology_rule_traces (
+  id               TEXT PRIMARY KEY,
+  ontology_id      TEXT NOT NULL,
+  version          INTEGER NOT NULL,
+  rule_pack_hash   TEXT NOT NULL DEFAULT '',
+  rule_id          TEXT NOT NULL,
+  rule_revision    TEXT NOT NULL DEFAULT '',
+  rule_kind        TEXT NOT NULL,
+  evidence_level   TEXT NOT NULL DEFAULT '',
+  constraint_level TEXT NOT NULL DEFAULT 'soft',
+  decision         TEXT NOT NULL,                  -- compiled|guard|explained|rejected
+  decision_code    TEXT NOT NULL DEFAULT '',
+  message          TEXT NOT NULL DEFAULT '',
+  bindings_json    TEXT NOT NULL DEFAULT '[]',
+  artifacts_json   TEXT NOT NULL DEFAULT '[]',
+  scope_json       TEXT NOT NULL DEFAULT '{}',
+  row_hash         TEXT NOT NULL DEFAULT '',
+  created_at       TEXT NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_ontology_traces_version ON ontology_rule_traces(ontology_id, version, created_at DESC);`
 
 // ===== 默认种子数据(首轮初始化注入;owner NULL = 公共资源,所有登录用户只读共享) =====