agentworkshop 0.7.8 → 0.7.11

package/app/stores/workshop/user.ts

@@ -55,7 +55,8 @@ export const useUserStore = defineStore('workshop.user', {
       // 请求上下文已丢失,useCookie 会抛 NUXT_E1001(useNuxtApp outside context);
       // 请求期写 Set-Cookie 在响应完成后也无实效。客户端 useCookie 不依赖请求上下文。
       if (import.meta.server) return
-      const cookie = useCookie<string | null>('token', { maxAge: 60 * 60 * 24 * 365 })
+      // maxAge 与服务端 token TTL(30 天)对齐:365 天会让浏览器带着必死 token 往返
+      const cookie = useCookie<string | null>('token', { maxAge: 60 * 60 * 24 * 30 })
       cookie.value = this.user?.token ?? null
     },
     /** 以 me 响应补全 tokenId（注册/登录签发的新 token 尚未绑定 id） */
@@ -171,6 +172,18 @@ export const useUserStore = defineStore('workshop.user', {
     },
   },
   persist: {
+    // localStorage 不持久化 token(长命明文凭据,XSS 可读且跨标签页漂移):
+    // token 真源是 30 天 cookie;hydration 后从 cookie 回填,无 cookie 即回登出态
     pick: ['user'],
+    afterHydrate: (ctx) => {
+      const store = ctx.store as { user?: { token?: string } | null, user?: CurrentUser | null, applyCookie?: () => void }
+      if (!store.user) return
+      try {
+        const cookie = useCookie<string | null>('token')
+        if (cookie.value) store.user.token = cookie.value
+        else (store as { user?: CurrentUser | null }).user = null
+      }
+      catch { /* SSR 上下文:跳过(session-restore.client 负责) */ }
+    },
   },
 })

package/app/utils/api-error.ts

@@ -0,0 +1,75 @@
+/**
+ * 统一错误文案解析 —— 任何 fetch/axios/业务异常 → 面向用户的可读提示。
+ *
+ * 项目约定:API 错误一律走 {code, message} 信封(defineApiHandler/AppError),
+ * 服务端 message 本就是人话;但 ofetch/axios 抛出的错误对象把 "[POST] /api/x
+ * 403 (forbidden)" 这类码式文本放在 err.message 上,信封在 err.data 里。
+ * 本解析器统一取值顺序:
+ *   1. 服务端信封 message(人话,优先);
+ *   2. HTTP 状态码 → 本地化映射(errors.* i18n,取不到回退内置中文);
+ *   3. 网络层失败特征 → "无法连接服务器";
+ *   4. 原始 message(最后兜底,通常已可读)。
+ * 永远返回非空字符串;message.error(messageError(err)) 即可替换一切裸 err.message 渲染。
+ */
+interface ErrLike {
+  data?: unknown
+  statusCode?: number
+  status?: number
+  message?: string
+  code?: string | number
+}
+
+/** i18n 取不到时的内置回退(与 locales errors.* 保持一致,zh 优先项目) */
+const FALLBACK: Record<string, string> = {
+  http400: '请求参数有误,请检查后重试',
+  http401: '登录已过期,请重新登录',
+  http403: '权限不足:该操作需要管理员权限',
+  http404: '目标不存在或已被删除',
+  http409: '操作冲突:资源已存在或状态不允许',
+  http5xx: '服务器内部错误,请稍后重试',
+  network: '无法连接服务器,请检查网络与服务状态',
+  fallback: '操作失败,请稍后重试',
+}
+
+/** 事件回调里 useI18n 不可靠,经 nuxt app 取 $i18n;任何失败静默回退内置文案 */
+function tt(key: string): string | null {
+  try {
+    const nuxt = useNuxtApp()
+    const i18n = (nuxt as { $i18n?: { t?: (k: string) => string } }).$i18n
+    const v = i18n?.t?.(key)
+    return typeof v === 'string' && v && !v.startsWith('errors.') ? v : null
+  }
+  catch {
+    return null
+  }
+}
+
+function statusKey(status: number): keyof typeof FALLBACK | null {
+  if (status === 400) return 'http400'
+  if (status === 401) return 'http401'
+  if (status === 403) return 'http403'
+  if (status === 404) return 'http404'
+  if (status === 409) return 'http409'
+  if (status >= 500) return 'http5xx'
+  return null
+}
+
+export function apiErrorMessage(err: unknown, fallback?: string): string {
+  const e = (err ?? {}) as ErrLike
+  // 1. 服务端信封(ofetch: err.data = {code,message};axios: err.response.data)
+  const data = (e.data ?? null) as { message?: unknown } | null
+  if (data && typeof data.message === 'string' && data.message.trim()) return data.message.trim()
+  // 2. HTTP 状态码 → 本地化映射
+  const status = Number(e.statusCode ?? e.status ?? 0)
+  const key = statusKey(status)
+  if (key) return tt(`errors.${key}`) ?? FALLBACK[key]
+  // 3. 网络层失败(fetch failed / ECONNREFUSED / 超时)
+  const raw = String(e.message ?? '')
+  if (/fetch failed|network|ECONNREFUSED|ENOTFOUND|ECONNRESET|aborted|timeout/i.test(raw)) {
+    return tt('errors.network') ?? FALLBACK.network
+  }
+  // 4. 原始 message 兜底(裸 Error 等通常已可读;剥掉 "Error: " 前缀)
+  const cleaned = raw.replace(/^Error:\s*/, '').trim()
+  if (cleaned) return cleaned
+  return fallback ?? tt('errors.fallback') ?? FALLBACK.fallback
+}

package/cli/commands/plugin.mjs

@@ -158,8 +158,8 @@ function findPluginDir(ctx, name) {
 
 function scopes(ctx) {
   return [
-    { scope: 'project', dir: ctx.root ? join(ctx.root, '.AgentWorkShop', 'plugins') : null, label: '项目级' },
-    { scope: 'user', dir: ctx.commandsDir?.global ? join(ctx.home, 'plugins') : join(ctx.home, 'plugins'), label: '用户级' },
+    { scope: 'project', dir: ctx.root ? join(ctx.root, '.AgentWorkShop', 'plugins') : null, label: '内置示例' },
+    { scope: 'user', dir: ctx.commandsDir?.global ? join(ctx.home, 'plugins') : join(ctx.home, 'plugins'), label: '用户级扩展' },
   ]
 }
 

package/config.yml

@@ -10,7 +10,7 @@
 app:
   name: AgentWorkShop
   title: AgentWorkShop
-  version: 0.7.8
+  version: 0.7.9
   description: 基于 Nuxt 4 的配置驱动运行范式
 
 # 运行模式（dev/prod 实际由启动命令决定，此处仅作运行时展示）

package/i18n/locales/en.ts

@@ -25,6 +25,7 @@ export default {
     monitor: 'Runtime Monitor',
     plugins: 'Plugins',
     settings: 'Settings',
+    permissions: 'Permissions',
   },
   header: {
     collapse: 'Collapse menu',
@@ -225,6 +226,15 @@ export default {
       groupI18n: 'i18n',
       groupSecurity: 'Security',
       groupDaq: 'DAQ',
+      groupApi: 'API',
+      groupMemory: 'Memory',
+      groupOmp: 'Agent Harness',
+      groupHarness: 'Harness Adapters',
+      groupDcw: 'Write Control',
+      groupWorkshop: 'Workshop',
+      groupBackup: 'Backup',
+      groupRetention: 'Retention',
+      groupLog: 'Logs',
       server: {
         host: 'Listen address',
         devPort: 'Dev port',
@@ -1872,12 +1882,15 @@ export default {
   },
   plugins: {
     title: 'Plugins',
-    subtitle: 'Config-root plugins/ · toggles hot-reload instantly',
+    subtitle: 'Built-in samples & user extensions · toggles hot-reload instantly',
     refresh: 'Refresh',
     enabled: 'Enabled',
     disabled: 'Disabled',
-    scopeProject: 'Project',
-    scopeUser: 'User',
+    scopeProject: 'Built-in sample',
+    scopeUser: 'User extension',
+    scopeBuiltinHint: 'Built-in sample plugin: shipped with the project checkout (repo .AgentWorkShop/plugins), can be toggled',
+    scopeUserHint: 'User extension plugin: lives in ~/.AgentWorkShop/plugins, created and maintained by you',
+    loadFail: 'Failed to load plugin list',
     hasClient: 'Client enhancer',
     routes: 'API routes',
     empty: 'No plugins yet — aw plugin create <name>, or aw plugin enable to turn on examples',
@@ -1886,6 +1899,43 @@ export default {
     enableFail: 'Toggle failed',
     detail: 'Plugin detail',
   },
+  errors: {
+    http400: 'Invalid request, please check and retry',
+    http401: 'Session expired, please sign in again',
+    http403: 'Insufficient permission: this action requires an administrator',
+    http404: 'Target not found or already removed',
+    http409: 'Conflict: resource already exists or state does not allow it',
+    http5xx: 'Server error, please retry later',
+    network: 'Cannot reach the server, check network and service status',
+    fallback: 'Action failed, please retry later',
+  },
+  permissions: {
+    title: 'Permissions',
+    subtitle: 'User × line three-state grants: none / read-only (DAQ) / operate (DAQ+DCW); users default to none',
+    search: 'Search name or email',
+    loadFail: 'Failed to load permission data',
+    saveFail: 'Failed to save grants',
+    saved: 'Saved {n} grant change(s)',
+    colUser: 'User',
+    colEmail: 'Email',
+    colRole: 'Role',
+    colStatus: 'Status',
+    colChannels: 'Channels',
+    colGrants: 'Line grants',
+    colOps: 'Actions',
+    active: 'Active',
+    manage: 'Manage',
+    detail: 'Permission detail',
+    secProfile: 'Profile',
+    secChannels: 'Created channels',
+    noChannels: 'No channels created by this user',
+    secMatrix: 'Line grant matrix',
+    save: 'Save ({n})',
+    matrixHint: 'none = line data is withheld server-side (invisible in UI & digital twin); read-only = DAQ read; operate = full DAQ read + DCW write.',
+    none: 'None',
+    readonly: 'Read-only',
+    operate: 'Operate',
+  },
   error: {
     backHome: 'Back to Home',
     lost: 'Page lost',

package/i18n/locales/zh-CN.ts

@@ -25,6 +25,7 @@ export default {
     monitor: '运行时监控',
     plugins: '插件管理',
     settings: '系统设置',
+    permissions: '权限管理',
   },
   header: {
     collapse: '折叠菜单',
@@ -225,6 +226,15 @@ export default {
       groupI18n: '国际化',
       groupSecurity: '安全',
       groupDaq: '数采',
+      groupApi: 'API',
+      groupMemory: '记忆系统',
+      groupOmp: 'Agent Harness',
+      groupHarness: 'Harness 接入',
+      groupDcw: '数控写控',
+      groupWorkshop: '车间运行',
+      groupBackup: '数据备份',
+      groupRetention: '数据保留',
+      groupLog: '日志',
       server: {
         host: '监听地址',
         devPort: '开发端口',
@@ -1871,12 +1881,15 @@ export default {
   },
   plugins: {
     title: '插件管理',
-    subtitle: '配置根 plugins/ 目录 · 启停即时热重载',
+    subtitle: '内置示例与用户级扩展插件 · 启停即时热重载',
     refresh: '刷新',
     enabled: '已启用',
     disabled: '已停用',
-    scopeProject: '项目级',
-    scopeUser: '用户级',
+    scopeProject: '内置示例',
+    scopeUser: '用户级扩展',
+    scopeBuiltinHint: '内置示例插件:随项目检出提供(仓库 .AgentWorkShop/plugins),可启停',
+    scopeUserHint: '用户级扩展插件:位于 ~/.AgentWorkShop/plugins,由使用者自行创建维护',
+    loadFail: '插件列表加载失败',
     hasClient: '浏览器增强',
     routes: 'API 路由',
     empty: '暂无插件 —— aw plugin create <name> 创建,或 aw plugin enable 开启示例',
@@ -1885,6 +1898,43 @@ export default {
     enableFail: '启停操作失败',
     detail: '插件详情',
   },
+  errors: {
+    http400: '请求参数有误,请检查后重试',
+    http401: '登录已过期,请重新登录',
+    http403: '权限不足:该操作需要管理员权限',
+    http404: '目标不存在或已被删除',
+    http409: '操作冲突:资源已存在或状态不允许',
+    http5xx: '服务器内部错误,请稍后重试',
+    network: '无法连接服务器,请检查网络与服务状态',
+    fallback: '操作失败,请稍后重试',
+  },
+  permissions: {
+    title: '权限管理',
+    subtitle: '用户 × 产线三态授权:无权 / 仅查看(数采只读) / 可操控(数采+数控全量);普通用户默认无权',
+    search: '搜索用户名或邮箱',
+    loadFail: '权限数据加载失败',
+    saveFail: '保存授权失败',
+    saved: '已保存 {n} 项授权变更',
+    colUser: '用户',
+    colEmail: '邮箱',
+    colRole: '角色',
+    colStatus: '状态',
+    colChannels: 'Channel 数',
+    colGrants: '产线授权',
+    colOps: '操作',
+    active: '正常',
+    manage: '授权管理',
+    detail: '权限详情',
+    secProfile: '基本信息',
+    secChannels: '创建的 Channel',
+    noChannels: '该用户尚未创建 Channel',
+    secMatrix: '产线授权矩阵',
+    save: '保存变更({n})',
+    matrixHint: '无权=后端不返回该产线数据(前端/数字孪生不可见);仅查看=数采节点只读;可操控=数采读取+数控写控全量。',
+    none: '无权',
+    readonly: '仅查看',
+    operate: '可操控',
+  },
   error: {
     backHome: '返回首页',
     lost: '页面走失了',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentworkshop",
-  "version": "0.7.8",
+  "version": "0.7.11",
   "type": "module",
   "description": "AgentWorkShop 软件开发系统 - 基于 Nuxt 4 的配置驱动运行范式",
   "license": "PolyForm-Noncommercial-1.0.0",

package/scripts/_dbg-acc-1-setup.mjs

@@ -0,0 +1,57 @@
+// 验收阶段1:setup 门注册 admin 账户(凭据经 argv 传入,不落源码)
+// 用法:node scripts/_dbg-acc-1-setup.mjs <base> <adminUser> <adminPass>
+import puppeteer from 'puppeteer-core'
+import { mkdirSync } from 'node:fs'
+
+const BASE = process.argv[2] ?? 'http://127.0.0.1:3021'
+const [USER, PASS] = [process.argv[3], process.argv[4]]
+const EMAIL = `${USER}@awshop.local`
+mkdirSync('.e2e-shots', { recursive: true })
+
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+
+const s0 = await api('/api/users/setup-status')
+console.log(s0.body?.data?.needsSetup === true ? '✔ setup 状态:true(零用户)' : `✖ setup 状态异常: ${JSON.stringify(s0.body)}`)
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--no-proxy-server', '--window-size=1600,1000'],
+})
+try {
+  const page = await browser.newPage()
+  await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+  await page.goto(`${BASE}/workshop`, { waitUntil: 'networkidle2', timeout: 60000 })
+  await page.waitForFunction(() => document.body.innerText.includes('创建管理员账号'), { timeout: 30000 })
+  console.log('✔ setup 登录门呈现')
+
+  await page.waitForSelector('.auth-card input')
+  const nameInput = (await page.$$('.auth-card input'))[0]
+  await nameInput.click({ clickCount: 3 })
+  await nameInput.type(USER)
+  const emailInput = await page.$('.auth-card input[type="email"]')
+  await emailInput.click({ clickCount: 3 })
+  await emailInput.type(EMAIL)
+  const pwInput = await page.$('.auth-card input[type="password"]')
+  await pwInput.click({ clickCount: 3 })
+  await pwInput.type(PASS)
+  await page.keyboard.press('Enter')
+  await page.waitForFunction(() => document.body.innerText.includes('Workshop'), { timeout: 30000 })
+  console.log('✔ 注册并自动进入项目')
+
+  // 登录态确认:me 返回 admin
+  const cookie = await page.cookies()
+  const token = cookie.find(c => c.name === 'token')?.value
+  const me = await api('/api/users/me', { headers: { authorization: `Bearer ${token}` } })
+  console.log(me.body?.data?.role === 'admin' ? `✔ me=${me.body.data.name} role=admin` : `✖ me 异常: ${JSON.stringify(me.body)}`)
+  await page.screenshot({ path: '.e2e-shots/acc-1-admin-entered.png' })
+
+  const s1 = await api('/api/users/setup-status')
+  console.log(s1.body?.data?.needsSetup === false ? '✔ setup 状态收敛:false' : '✖ setup 未收敛')
+}
+finally {
+  await browser.close()
+}

package/scripts/_dbg-acc-2-diag.mjs

@@ -0,0 +1,14 @@
+// 诊断:settings 页文本结构
+import puppeteer from 'puppeteer-core'
+const browser = await puppeteer.launch({ executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe', headless: 'new', args: ['--no-sandbox', '--no-proxy-server'] })
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 1000 })
+const login = await fetch('http://127.0.0.1:3021/api/users/login', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'admin@awshop.local', password: 'admin123' }) }).then(r => r.json())
+await page.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+await page.goto('http://127.0.0.1:3021/settings', { waitUntil: 'networkidle2', timeout: 60000 })
+await new Promise(r => setTimeout(r, 2500))
+console.log('BODY-HEAD:', await page.evaluate(() => document.body.innerText.slice(0, 400).replace(/\n/g, ' / ')))
+console.log('TITLES:', await page.evaluate(() => [...document.querySelectorAll('.section-title,h3,h4,.ant-tabs-tab')].map(e => e.textContent?.trim()).filter(Boolean).slice(0, 30).join(' | ')))
+console.log('HAS-DAQ-LABEL:', await page.evaluate(() => document.body.innerText.includes('节点采样默认间隔')))
+console.log('RT-ROWS:', await page.evaluate(() => document.querySelectorAll('.rt-row').length))
+await browser.close()

package/scripts/_dbg-acc-2-intervals.mjs

@@ -0,0 +1,81 @@
+// 验收阶段2:前端设置页修改数采采样间隔 + 时序查询默认间隔,验证生效
+// 用法:node scripts/_dbg-acc-2-intervals.mjs <base> <user> <pass> <samplingMs> <bucketMs>
+import puppeteer from 'puppeteer-core'
+import { mkdirSync } from 'node:fs'
+
+const BASE = process.argv[2] ?? 'http://127.0.0.1:3021'
+const [USER, PASS, SAMPLE_MS, BUCKET_MS] = [process.argv[3], process.argv[4], Number(process.argv[5]), Number(process.argv[6])]
+const TAG = process.argv[7] ?? 'change'
+mkdirSync('.e2e-shots', { recursive: true })
+
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+const login = await api('/api/users/login', { method: 'POST', body: JSON.stringify({ email: `${USER}@awshop.local`, password: PASS }) })
+const TOKEN = login.body?.data?.token
+if (!TOKEN) { console.error('✖ admin 登录失败'); process.exit(1) }
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--no-proxy-server', '--window-size=1600,1000'],
+})
+try {
+  const page = await browser.newPage()
+  await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+  await page.setCookie({ name: 'token', value: TOKEN, domain: new URL(BASE).hostname, path: '/' })
+  await page.goto(`${BASE}/settings`, { waitUntil: 'networkidle2', timeout: 60000 })
+  await new Promise(r => setTimeout(r, 1200))
+  // 切到「运行配置」tab(runtime 设置区)
+  await page.evaluate(() => {
+    const tab = [...document.querySelectorAll('.ant-tabs-tab,[role=tab],button,.section-title')].find(e => (e.textContent ?? '').trim() === '运行配置')
+    tab?.dispatchEvent(new MouseEvent('click', { bubbles: true }))
+  })
+  await page.waitForFunction(() => document.body.innerText.includes('节点采样默认间隔'), { timeout: 30000 })
+  console.log('✔ 设置页呈现数采间隔项')
+
+  // 定位行:rt-row 内 rt-title 含目标文本 → 行内 .ant-input-number input
+  const setNumber = async (titleText, value) => {
+    const ok = await page.evaluate((t, v) => {
+      const rows = [...document.querySelectorAll('.rt-row')]
+      const row = rows.find(r => r.querySelector('.rt-title')?.textContent?.includes(t))
+      if (!row) return false
+      const input = row.querySelector('.ant-input-number input')
+      if (!input) return false
+      input.focus()
+      document.execCommand('selectAll', false, null)
+      document.execCommand('insertText', false, String(v))
+      input.dispatchEvent(new Event('input', { bubbles: true }))
+      input.blur()
+      input.dispatchEvent(new Event('change', { bubbles: true }))
+      return true
+    }, titleText, value)
+    if (!ok) throw new Error(`未找到输入框: ${titleText}`)
+    await new Promise(r => setTimeout(r, 400))
+  }
+  await setNumber('节点采样默认间隔', SAMPLE_MS)
+  console.log(`✔ 采样默认间隔 → ${SAMPLE_MS}ms`)
+  await setNumber('时序查询默认间隔', BUCKET_MS)
+  console.log(`✔ 时序查询默认间隔 → ${BUCKET_MS}ms`)
+
+  // 全局保存
+  await page.evaluate(() => {
+    const btn = [...document.querySelectorAll('button')].find(b => /保\s*存|Save/.test(b.textContent ?? ''))
+    btn?.click()
+  })
+  await new Promise(r => setTimeout(r, 1500))
+  await page.screenshot({ path: `.e2e-shots/acc-2-intervals-${TAG}.png` })
+}
+finally {
+  await browser.close()
+}
+
+// API 确认 effective 生效
+const cfg = await api('/api/system/config', { headers: { authorization: `Bearer ${await (async () => TOKEN)()}` } })
+const eff = cfg.body?.data?.effective ?? {}
+const sampleOk = eff['daq.sampling.defaultIntervalMs'] === SAMPLE_MS
+const bucketOk = eff['daq.query.defaultBucketMs'] === BUCKET_MS
+console.log(sampleOk ? `✔ effective daq.sampling.defaultIntervalMs=${SAMPLE_MS}` : `✖ sampling=${JSON.stringify(eff['daq.sampling.defaultIntervalMs'])}`)
+console.log(bucketOk ? `✔ effective daq.query.defaultBucketMs=${BUCKET_MS}` : `✖ bucket=${JSON.stringify(eff['daq.query.defaultBucketMs'])}`)
+process.exit(sampleOk && bucketOk ? 0 : 1)

package/scripts/_dbg-acc-3-daq.mjs

@@ -0,0 +1,48 @@
+// 验收阶段3:数采中心可视化(列表状态 + 节点详情图表渲染)
+// 用法:node scripts/_dbg-acc-3-daq.mjs <base> <user> <pass> <liveNodeId>
+import puppeteer from 'puppeteer-core'
+import { mkdirSync } from 'node:fs'
+
+const BASE = process.argv[2] ?? 'http://127.0.0.1:3021'
+const [USER, PASS, NODE_ID] = [process.argv[3], process.argv[4], process.argv[5]]
+mkdirSync('.e2e-shots', { recursive: true })
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+const login = await api('/api/users/login', { method: 'POST', body: JSON.stringify({ email: `${USER}@awshop.local`, password: PASS }) })
+const TOKEN = login.body?.data?.token
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--no-proxy-server', '--window-size=1600,1000'],
+})
+try {
+  const page = await browser.newPage()
+  await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+  await page.setCookie({ name: 'token', value: TOKEN, domain: new URL(BASE).hostname, path: '/' })
+
+  // 1) 数采中心列表
+  await page.goto(`${BASE}/daq`, { waitUntil: 'networkidle2', timeout: 60000 })
+  await new Promise(r => setTimeout(r, 2500))
+  const listText = await page.evaluate(() => document.body.innerText)
+  const hasStats = /在线|online|节点/i.test(listText)
+  console.log(hasStats ? '✔ 数采中心列表渲染' : '✖ 数采中心列表空')
+  await page.screenshot({ path: '.e2e-shots/acc-3-daq-list.png' })
+
+  // 2) 节点详情 + 图表
+  await page.goto(`${BASE}/daq/${NODE_ID}`, { waitUntil: 'networkidle2', timeout: 60000 })
+  await new Promise(r => setTimeout(r, 6000)) // 等实时数据+图表渲染
+  const chart = await page.evaluate(() => ({
+    canvases: document.querySelectorAll('canvas').length,
+    svgs: document.querySelectorAll('svg').length,
+    text: document.body.innerText.slice(0, 200).replace(/\n/g, ' '),
+  }))
+  console.log(`图表渲染: canvas=${chart.canvases} svg=${chart.svgs}`)
+  console.log(chart.canvases + chart.svgs > 0 ? '✔ 图表已渲染' : '✖ 未见图表')
+  await page.screenshot({ path: '.e2e-shots/acc-3-daq-detail.png' })
+}
+finally {
+  await browser.close()
+}

package/scripts/_dbg-acc-4-team.mjs

@@ -0,0 +1,92 @@
+// 验收阶段4:多 Harness 团队 + 设备绑定 + 极简任务
+// 用法:node scripts/_dbg-acc-4-team.mjs <base> <user> <pass>
+import { mkdirSync } from 'node:fs'
+const BASE = process.argv[2] ?? 'http://127.0.0.1:3021'
+const [USER, PASS] = [process.argv[3], process.argv[4]]
+mkdirSync('.e2e-shots', { recursive: true })
+const stamp = Date.now().toString(36)
+
+const api = async (path, opts = {}) => {
+  const res = await fetch(`${BASE}${path}`, { ...opts, headers: { 'content-type': 'application/json', ...opts.headers } })
+  return { status: res.status, body: await res.json().catch(() => null) }
+}
+const login = await api('/api/users/login', { method: 'POST', body: JSON.stringify({ email: `${USER}@awshop.local`, password: PASS }) })
+const H = { authorization: `Bearer ${login.body.data.token}`, 'content-type': 'application/json' }
+const post = (p, b) => api(p, { method: 'POST', headers: H, body: JSON.stringify(b) })
+
+// 1) 三个不同 harness 的 agent 模板
+const mk = async (name, harness) => {
+  const r = await post('/api/workshop/agents', { name, harness, visibility: 'private' })
+  if (r.status !== 0 && r.body?.code !== 0) throw new Error(`建 agent ${name}: ${JSON.stringify(r.body)}`)
+  console.log(`✔ agent 模板 ${name} harness=${harness} id=${r.body.data.id.slice(0, 10)}`)
+  return r.body.data
+}
+const leadTpl = await mk(`acc-lead-${stamp}`, 'omp')
+const wMock = await mk(`acc-w-mock-${stamp}`, 'mock')
+const wCodex = await mk(`acc-w-codex-${stamp}`, 'codex')
+
+// 2) team + 成员
+const team = await post('/api/workshop/teams', { name: `验收团队-${stamp}`, description: '多 harness 验收' })
+const teamId = team.body.data.id
+console.log('✔ team 创建', teamId.slice(0, 10))
+for (const [tpl, role] of [[leadTpl, 'lead'], [wMock, 'worker'], [wCodex, 'worker']]) {
+  const r = await post(`/api/workshop/teams/${teamId}/members`, { agentId: tpl.id, role })
+  console.log(`${r.body?.code === 0 ? '✔' : '✖'} member ${tpl.name} role=${role}`, r.body?.code === 0 ? '' : JSON.stringify(r.body))
+}
+
+// 3) channel(不带 lead,由 deploy 带入) + deploy
+const ch = await post('/api/workshop/channels', { name: `验收频道-${stamp}`, description: '多 harness 团队验收' })
+const channelId = ch.body.data.channelId ?? ch.body.data.id
+console.log('✔ channel 创建', channelId.slice(0, 10))
+const dep = await post(`/api/workshop/teams/${teamId}/deploy`, { channelId })
+if (dep.body?.code !== 0) { console.error('✖ deploy 失败:', JSON.stringify(dep.body)); process.exit(1) }
+const deployed = dep.body.data
+console.log('✔ team 部署到 channel:', JSON.stringify(deployed).slice(0, 200))
+
+// 部署后实例 id(克隆体):channel agents 列表
+const ags = await api(`/api/workshop/channels/${channelId}/agents`, { headers: H })
+const chanAgents = ags.body?.data ?? []
+const find = (harness) => chanAgents.find(a => a.harness === harness)
+const leadInst = find('omp')
+const mockInst = find('mock')
+const codexInst = find('codex')
+console.log('实例:', [leadInst, mockInst, codexInst].map(a => a ? `${a.name}(${a.harness})=${a.id.slice(0, 10)}` : '(缺)').join(' '))
+
+// 4) 设备绑定:worker ↔ daq 节点 / worker ↔ dcw 写控节点
+for (const [inst, nodeId, kind] of [[mockInst, 'dn-43f55a32', 'daq'], [codexInst, 'dw-322b1978', 'dcw']]) {
+  if (!inst) { console.log(`✖ 绑定跳过:实例缺失 kind=${kind}`); continue }
+  const r = await post('/api/workshop/agent-tools/bindings', { agentId: inst.id, nodeId, kind, mode: 'auto' })
+  console.log(`${r.body?.code === 0 ? '✔' : '✖'} 绑定 ${inst.name}(${kind}) ↔ ${nodeId}`, r.body?.code === 0 ? '' : JSON.stringify(r.body))
+}
+const bl = await api('/api/workshop/agent-tools/bindings', { headers: H })
+const mine = (bl.body?.data?.bindings ?? []).filter(b => [mockInst?.id, codexInst?.id].includes(b.agentId))
+console.log(`✔ 绑定清单(${mine.length} 条新建):`, mine.map(b => `${b.kind}:${b.nodeId}`).join(', '))
+
+// 5) 极简任务(省 token):发消息给 lead,要求派发给各 worker 单句回复
+const msg = await post(`/api/workshop/channels/${channelId}/messages`, {
+  toAgentId: leadInst?.id,
+  text: '团队自检任务:请把下面这句话原样转交给每个 worker 执行——「用一句不超过 15 字的话报告你的引擎名并说 ok,不要调用任何工具」。收齐后向人类汇总。',
+  fromLabel: 'admin',
+  priority: 'task',
+})
+console.log(`${msg.body?.code === 0 ? '✔' : '✖'} 任务消息下发`, msg.body?.code === 0 ? '' : JSON.stringify(msg.body))
+
+// 6) 轮询 channel 消息(最多 90s),统计各 harness 回复
+console.log('等待 worker 回复(轮询 90s)...')
+const seen = new Map()
+for (let i = 0; i < 30; i++) {
+  await new Promise(r => setTimeout(r, 3000))
+  const ms = await api(`/api/workshop/channels/${channelId}/messages?limit=50`, { headers: H })
+  const items = ms.body?.data?.items ?? ms.body?.data ?? []
+  for (const m of (Array.isArray(items) ? items : [])) {
+    if (i === 0 && seen.size === 0) console.log('  [msg 样例]', JSON.stringify(m).slice(0, 220))
+    const from = m.fromAgentName ?? m.fromAgentId ?? m.from ?? '?'
+    if (!seen.has(from)) seen.set(from, String(m.text ?? '').slice(0, 60))
+  }
+  const harnessHits = ['mock', 'omp', 'codex'].filter(h => [...seen.keys()].some(k => String(k).toLowerCase().includes(h)) || [...seen.values()].some(v => v.toLowerCase().includes(h)))
+  process.stdout.write(`  t=${(i + 1) * 3}s 发言者=${seen.size} 命中=${harnessHits.join(',')}\r`)
+  if (harnessHits.length >= 2 && seen.size >= 3) break
+}
+console.log('')
+for (const [k, v] of seen) console.log(`  [${k}] ${v}`)
+console.log('CHANNEL_ID=' + channelId)