agentworkshop 0.8.4 → 0.8.6

package/scripts/_audit/_live-mqtt-e2e-20261028.mjs

@@ -0,0 +1,219 @@
+#!/usr/bin/env node
+/**
+ * MQTT 全链真实 E2E(2026-10-28;真实 broker 127.0.0.1:1883):
+ *  场景:独立平台实例 + 模拟网关(node 客户端,复用仓库 mqtt 依赖)
+ *   - 网关每 2s 向 mqtte2e/<TAG>/temp 发布 {"data":{"temperature":X,"humidity":Y}}(温度缓升,湿度乱摆——验证 jsonPath 单字段提取)
+ *   - 网关订阅 mqtte2e/<TAG>/setpoint(控制主题),收到设定值后向 mqtte2e/<TAG>/state 回显 {"data":{"setpoint":X}}(模拟设备回显,供写后回读升级 verified)
+ *  断言:
+ *   T1 DAQ:平台订阅 temp 主题,jsonPath=data.temperature 提取入库;daq_query 点数随发布增长,数值=温度序列(非湿度)
+ *   T2 DCW:recipe_trial(手动 HITL 批准)下发 238 → 网关控制主题收到 {"setpoint":238}(jsonKey 封装)→ 回显 → 写后回读升级 readback-verified(设备证实✓)
+ *   T3 稳定性:持续 90s 泡水,daq 点数单调增长、节点保持在线、journal 锚点齐全
+ * 运行:node scripts/_audit/_live-mqtt-e2e-20261028.mjs
+ */
+import { spawn } from 'node:child_process'
+import net from 'node:net'
+import { mkdirSync, openSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..')
+const EVID = join(REPO, 'docs', 'audit', 'evidence', '2026-10-28-mqtt-live')
+mkdirSync(EVID, { recursive: true })
+const ROOT = join(tmpdir(), 'aw-mqtt-e2e')
+rmSync(join(ROOT, 'home'), { recursive: true, force: true })
+mkdirSync(join(ROOT, 'home'), { recursive: true })
+const TAG = `mq${Date.now().toString(36).slice(-4)}`
+const T_TEMP = `mqtte2e/${TAG}/temp`
+const T_SET = `mqtte2e/${TAG}/setpoint`
+const T_STATE = `mqtte2e/${TAG}/state`
+const BASE = 'http://127.0.0.1:3986'
+const log = (s) => { console.log(`[${new Date().toISOString().slice(11, 19)}] ${s}`) }
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+// ── 前置:broker 探活 ──
+const brokerUp = await new Promise((res) => {
+  const s = net.connect(1883, '127.0.0.1')
+  s.setTimeout(2000)
+  s.on('connect', () => { s.end(); res(true) })
+  s.on('error', () => res(false))
+  s.on('timeout', () => { s.destroy(); res(false) })
+})
+if (!brokerUp) {
+  console.log('✖ 127.0.0.1:1883 无 MQTT broker —— 先启动 broker(mosquitto -v -p 1883)')
+  process.exit(1)
+}
+log('broker 127.0.0.1:1883 在线')
+
+// ── 模拟网关:发布温度 JSON + 订阅控制主题回显状态 ──
+const mqtt = (await import('mqtt')).default
+const receivedWrites = []
+let tempVal = 22.5
+const gateway = mqtt.connect('mqtt://127.0.0.1:1883', { connectTimeout: 4000 })
+await new Promise((res, rej) => { gateway.once('connect', res); gateway.once('error', rej) })
+gateway.subscribe(T_SET, { qos: 1 })
+gateway.on('message', (topic, payload) => {
+  if (topic !== T_SET) return
+  try {
+    const msg = JSON.parse(payload.toString())
+    receivedWrites.push({ at: Date.now(), raw: payload.toString(), setpoint: msg.setpoint })
+    gateway.publish(T_STATE, JSON.stringify({ data: { setpoint: msg.setpoint } }), { qos: 1 })
+    log(`网关收到控制令牌:${payload.toString()} → 回显状态主题`)
+  }
+  catch { /* 非 JSON */ }
+})
+// 温度缓升(22.5 起 +0.3/次),湿度独立乱摆——两者可区分
+const pubTimer = setInterval(() => {
+  tempVal = Math.round((tempVal + 0.3) * 100) / 100
+  const hum = Math.round(40 + Math.random() * 20)
+  gateway.publish(T_TEMP, JSON.stringify({ data: { temperature: tempVal, humidity: hum } }), { qos: 1 })
+}, 2000)
+log(`模拟网关上线:每 2s → ${T_TEMP} = {"data":{"temperature":…,"humidity":…}};订阅 ${T_SET}`)
+
+// ── 平台实例 ──
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const logFd = openSync(join(ROOT, 'dev.log'), 'a')
+// build 产物跑(无 nitro 文件监听):并行会话写盘不再触发 HMR 重载风暴(验收 skill 标准跑法)
+const child = spawn(process.execPath, [join(REPO, '.output', 'server', 'index.mjs')], {
+  cwd: REPO,
+  env: { ...process.env, AW_MODE: 'home', AW_HOME: join(ROOT, 'home'), PORT: '3986', AW_RATE_LIMIT_OFF: '1', NUXT_SESSION_PASSWORD: 'MqttE2e#2026-session-key-0321', NO_PROXY: '127.0.0.1,localhost' },
+  stdio: ['ignore', logFd, logFd],
+  windowsHide: true,
+})
+let healthy = false
+for (let i = 0; i < 90; i++) {
+  await sleep(2000)
+  try {
+    const h = await fetch(`${BASE}/api/health`, { signal: AbortSignal.timeout(3000) }).then(r => r.json()).catch(() => null)
+    if (h?.data?.status === 'ok' && h?.data?.workshop === 'ready') { healthy = true; break }
+  }
+  catch { /* 未就绪 */ }
+}
+log(`平台实例:${healthy ? '就绪' : '未就绪'}`)
+if (!healthy) process.exit(1)
+
+const reg = await fetch(`${BASE}/api/users/register`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ name: `mq-admin-${TAG}`, email: `mq-${TAG}@awshop.local`, password: 'MqE2e#2026' }) }).then(r => r.json())
+const H = () => reg.data.token
+const api = async (method, path, body, timeoutMs = 120_000) => {
+  // 兼容旧调用形参:第 4 参可能传的是 token(H())——非数字视为缺省超时
+  const timeout = typeof timeoutMs === 'number' ? timeoutMs : 120_000
+  const res = await fetch(BASE + path, { method, headers: { 'content-type': 'application/json', 'authorization': `Bearer ${H()}` }, body: body === undefined ? undefined : JSON.stringify(body), signal: AbortSignal.timeout(timeout) })
+  let json = null
+  try { json = await res.json() } catch { /* 非 JSON */ }
+  return { status: res.status, ...json }
+}
+const invText = r => String(r?.data?.result?.text ?? r?.data?.text ?? '')
+const invErr = r => Boolean(r?.data?.result?.isError ?? r?.data?.isError)
+let lead = ''
+const invoke = (tool, args) => api('POST', '/api/workshop/agent-tools/invoke', { agentId: lead, tool, args }, H())
+const results = []
+const ok = (id, name, cond, detail = '') => {
+  results.push({ id, pass: Boolean(cond) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${cond ? '' : ` — ${String(detail).slice(0, 260)}`}`)
+}
+
+try {
+  // ── 场景供给 ──
+  const line = (await api('POST', '/api/workshop/dcw/lines', { name: `MQTT实测线-${TAG}` }, H())).data?.line?.id
+  const spNode = (await api('POST', '/api/workshop/dcw', {
+    templateRef: 'dcw-temp-sp', name: `MQTT设定-${TAG}`, driver: 'mqtt', lineId: line,
+    min: 160, max: 300, stepLimit: 20,
+    driverConfig: { host: '127.0.0.1', port: 1883, topic: T_SET, jsonKey: 'setpoint', qos: 1, readTopic: T_STATE, readJsonPath: 'data.setpoint' },
+  }, H())).data?.node?.id
+  const pvNode = (await api('POST', '/api/workshop/daq', {
+    templateRef: 'daq-temp-tc', name: `MQTT温度-${TAG}`, driver: 'mqtt', lineId: line, intervalMs: 2000, publishIntervalMs: 0,
+    min: 10, max: 60,
+    driverConfig: { host: '127.0.0.1', port: 1883, topic: T_TEMP, jsonPath: 'data.temperature', qos: 1 },
+  }, H())).data?.node?.id
+  const product = (await api('POST', '/api/workshop/dcw/products', { lineId: line, name: `MQTT产品-${TAG}` }, H())).data?.product?.id
+  const recipe = (await api('POST', '/api/workshop/dcw/recipes', { productId: product, name: `MQTT配方-${TAG}`, params: [{ nodeId: spNode, value: 240, min: 160, max: 300 }] }, H())).data?.recipe?.id
+  await api('POST', '/api/workshop/dcw/controller', { action: 'start' }, H())
+  await api('POST', '/api/workshop/daq/controller', { action: 'start' }, H())
+  const ch = (await api('POST', '/api/workshop/channels', { name: `MQTT频道-${TAG}`, leadAgent: { name: `mq-lead-${TAG}`, harness: 'omp' } }, H())).data
+  lead = ch.leadAgentId
+  await api('PUT', `/api/workshop/channels/${ch.channelId}/line`, { lineId: line }, H())
+  await api('POST', `/api/workshop/channels/${ch.channelId}/activate`, {}, H())
+  await api('POST', '/api/workshop/agent-tools/bindings', { agentId: ch.leadAgentId, nodeId: pvNode, kind: 'daq' }, H())
+  const rb = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: ch.leadAgentId, nodeId: recipe, kind: 'recipe' }, H())
+  const bindingId = rb?.data?.binding?.id
+  ok('S1', '场景供给(线/MQTT 数采节点/MQTT 设定节点/配方/频道/绑定)', Boolean(line && spNode && pvNode && recipe && ch?.channelId && bindingId),
+    JSON.stringify({ line, spNode, pvNode, recipe }).slice(0, 200))
+
+  // ── T0 开线(HITL):配方参数 240 会经 MQTT 驱动发布到控制主题 ──
+  const known0 = new Set((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items?.map(x => x.id) ?? [])
+  const p0 = invoke('line_start', { recipe_id: recipe, reason: `MQTT E2E 开线(${TAG})` })
+  let card0 = null
+  for (let i = 0; i < 40 && !card0; i++) {
+    await sleep(1000)
+    card0 = ((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items ?? []).find(x => !known0.has(x.id))
+  }
+  if (card0) await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: card0.id, confirmed: true, choice: 0, comment: 'MQTT E2E 批准开线' }, H())
+  const r0 = await p0
+  ok('T0', '开线成功且参数设备证实(readback-verified:网关回显经 readTopic)', !invErr(r0) && /readback|设备证实|verified/.test(invText(r0)), invText(r0).slice(0, 200))
+  const sawLineStartWrite = receivedWrites.find(w => w.setpoint === 240)
+  ok('T0b', '开线下发经 jsonKey 封装为 JSON 到控制主题({"setpoint":240})', Boolean(sawLineStartWrite), JSON.stringify(receivedWrites.slice(0, 3)))
+
+  // ── T1 DAQ:jsonPath 单字段提取实时入库 ──
+  await sleep(16_000)
+  const q1 = await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=1`, undefined, H())
+  const pts1 = (q1.data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)
+  const pointOf = p => Number(p?.v ?? p?.avg ?? p?.value ?? Number.NaN)
+  if (pts1 > 0) writeFileSync(join(EVID, `daq-point-shape-${TAG}.json`), JSON.stringify((q1.data?.series ?? [])[0]?.points?.slice(0, 2) ?? []))
+  const vals1 = (q1.data?.series ?? []).flatMap(s => (s.points ?? []).map(pointOf)).filter(Number.isFinite)
+  // 数值应落在温度序列区间(22.5 起缓升),而非湿度区间(40-60)
+  const inTempRange = vals1.filter(v => v >= 22 && v <= 40).length
+  ok('T1a', `DAQ jsonPath 提取:单条 JSON 报文取 data.temperature 入库(${pts1} 点)`, pts1 > 0, `points=${pts1}`)
+  ok('T1b', '取的是温度字段而非同报文湿度字段(22~40 区间)', pts1 > 0 && inTempRange === pts1, `vals=${vals1.slice(0, 6)} humidity-range hits=${pts1 - inTempRange}`)
+
+  // ── T2 DCW:recipe_trial 手动批准 → JSON 下发 + 回读升级 verified ──
+  const writesBefore = receivedWrites.length
+  const known = new Set((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items?.map(x => x.id) ?? [])
+  const p = invoke('recipe_trial', { recipe_id: recipe, params: [{ node_id: spNode, value: 238 }], hypothesis: `MQTT E2E:试 238℃(${TAG})` })
+  let card = null
+  for (let i = 0; i < 40 && !card; i++) {
+    await sleep(1000)
+    card = ((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items ?? []).find(x => !known.has(x.id))
+  }
+  ok('T2a', 'recipe_trial 生成 HITL 审批卡(recipe 只管参数值,封装交给节点配置)', Boolean(card), card?.id ?? '未出现')
+  if (card) await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: card.id, confirmed: true, choice: 0, comment: 'MQTT E2E 批准 238' }, H())
+  const r = await p
+  const txt = invText(r)
+  ok('T2b', '批准后执行:写后回读经状态主题升级 readback-verified(设备证实✓)', !invErr(r) && /设备证实|readback/.test(txt), txt.slice(0, 220))
+  await sleep(1500)
+  const w238 = receivedWrites.filter(w => w.setpoint === 238)
+  ok('T2c', '我方订阅端收到 JSON 写报文 {"setpoint":238}', w238.length > 0 && w238[0].raw === '{"setpoint":238}', JSON.stringify(receivedWrites.slice(writesBefore).map(w => w.raw)))
+  writeFileSync(join(EVID, `received-writes-${TAG}.json`), JSON.stringify(receivedWrites, null, 2))
+
+  // ── T3 稳定性泡水 90s:点数持续增长、节点在线 ──
+  const qA = await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=10`, undefined, H())
+  const nA = (qA.data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)
+  let staleErr = 0
+  for (let i = 0; i < 9; i++) {
+    await sleep(10_000)
+    const d = await api('GET', '/api/workshop/daq', undefined, H())
+    const node = (d.data?.nodes ?? []).find(x => x.id === pvNode)
+    if (node && (node.state === 'offline' || node.lastError)) staleErr++
+    log(`泡水 ${((i + 1) * 10)}s:已入库点数 ${((await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=10`, undefined, H())).data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)}`)
+  }
+  const qB = await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=10`, undefined, H())
+  const nB = (qB.data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)
+  const valsB = (qB.data?.series ?? []).flatMap(s => (s.points ?? []).map(pointOf)).filter(Number.isFinite)
+  ok('T3a', `90s 泡水:点数持续增长(${nA} → ${nB})`, nB > nA + 20, `delta=${nB - nA}`)
+  ok('T3b', '泡水期间节点无 offline/无 lastError(陈值看门狗未误报)', staleErr === 0, `offline polling hits=${staleErr}`)
+  ok('T3c', '长程数值仍为温度序列且严格递增(缓升序列无乱序/无冻值)', valsB.length > 10 && valsB.every((v, i) => i === 0 || v >= valsB[i - 1]), `head=${valsB.slice(0, 5)} tail=${valsB.slice(-5)}`)
+
+  // 归档
+  writeFileSync(join(EVID, `summary-${TAG}.json`), JSON.stringify({ tag: TAG, topics: { temp: T_TEMP, setpoint: T_SET, state: T_STATE }, line, spNode, pvNode, recipe, receivedWrites, daqPoints: { atT1: pts1, atT3: nB }, results }, null, 2))
+  const pass = results.every(r => r.pass)
+  console.log(`\n===== MQTT 全链实测:${results.filter(r => r.pass).length}/${results.length} PASS =====`)
+  process.exitCode = pass ? 0 : 1
+}
+catch (err) {
+  log(`FATAL ${err instanceof Error ? err.message : String(err)}`)
+  process.exitCode = 1
+}
+finally {
+  clearInterval(pubTimer)
+  try { gateway.end(true) } catch { /* ignore */ }
+  try { child.kill() } catch { /* ignore */ }
+}

package/scripts/_audit/_mission-coupling-probe-20261028.mjs

@@ -0,0 +1,27 @@
+/**
+ * 耦合实验:直接经模拟器 REST 写 hold-pressure-sp → 观测 part-weight 响应。
+ * 判定:Δweight/Δpressure 是否接近模型增益 0.052 g/bar(65s 窗)。
+ */
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const SIM = 'http://127.0.0.1:4020'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const nodes = await fetch(`${SIM}/api/nodes`).then(r => r.json())
+const ns = nodes.data?.nodes ?? nodes.data ?? nodes
+const inj = (Array.isArray(ns) ? ns : []).find(n => /inject/i.test(n.id))
+const sig = id => (inj.signals ?? []).find(s => s.id === id)?.value
+const setSp = async (id, v) => {
+  const r = await fetch(`${SIM}/api/nodes/${inj.id}/signals/${id}/manual`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ value: v }) })
+  return r.status
+}
+console.log('baseline: press=', sig('hold-pressure-sp'), 'time=', sig('hold-time-sp'), 'weight=', sig('part-weight'))
+await setSp('hold-pressure-sp', 85)
+console.log('set 85bar →', await setSp('hold-pressure-sp', 85))
+for (const t of [20, 40, 65, 90]) {
+  await sleep(t === 20 ? 20000 : t === 40 ? 20000 : t === 65 ? 25000 : 25000)
+  console.log(`t+${t}s: press=${sig('hold-pressure-sp')} weight=${sig('part-weight')}`)
+}
+const nd = await fetch(`${SIM}/api/nodes`).then(r => r.json())
+const ns2 = nd.data?.nodes ?? nd.data ?? nd
+const inj2 = (Array.isArray(ns2) ? ns2 : []).find(n => /inject/i.test(n.id))
+const sig2 = id => (inj2.signals ?? []).find(s => s.id === id)?.value
+console.log('final: press=', sig2('hold-pressure-sp'), 'weight=', sig2('part-weight'))

package/scripts/_audit/_mission-f1-evidence-20261028.mjs

@@ -0,0 +1,56 @@
+/**
+ * 2026-10-28 缺陷取证:F1 平台 DCW(OPC UA)写与模拟器 signal 存储双向失联。
+ * 复现三步(全部落 JSON 证据):
+ *  1) REST manual 写 85 → signal=85, 但 OPC UA 变量读仍 55(旧值)
+ *  2) 平台 DCW 写 56.5 → 回读"一致"(变量 echo), signal 仍 85(植物未收到)
+ *  3) 物理验证: signal 真到 85 时 weight=33.45(模型一致) → 植物链路本身正常
+ * 证据: docs/audit/evidence/2026-10-28-full-acceptance-run2/f1-opcua-signal-divergence.json
+ */
+import { writeFileSync, mkdirSync } from 'node:fs'
+
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const SIM = 'http://127.0.0.1:4020'
+const BASE = 'http://127.0.0.1:3470'
+const NODE = 'inj-inject-opcua'
+const OUT = 'docs/audit/evidence/2026-10-28-full-acceptance-run2/f1-opcua-signal-divergence.json'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const getNodes = async () => {
+  const j = await fetch(`${SIM}/api/nodes`).then(r => r.json())
+  const ns = j.data?.nodes ?? j.data ?? j
+  return (Array.isArray(ns) ? ns : []).find(n => n.id === NODE)
+}
+const signalOf = (n, id) => (n?.signals ?? []).find(s => s.id === id)?.value
+const login = await fetch(`${BASE}/api/users/login`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ email: 'admin@mission.local', password: 'Mission#2026Acc' }) }).then(r => r.json())
+const TOK = login.data.token
+
+const evidence = { finding: 'F1 OPC UA 变量与 signal 存储双向失联(疑似未提交子模块回归)', at: new Date().toISOString(), steps: [] }
+
+// 步骤 0:当前状态
+let n = await getNodes()
+evidence.steps.push({ step: 0, note: '初态', signal_hold_pressure: signalOf(n, 'hold-pressure-sp'), signal_weight: signalOf(n, 'part-weight') })
+
+// 步骤 1:REST manual 写 85(已是 85) → 读平台侧(OPC UA 变量)
+await fetch(`${SIM}/api/nodes/${NODE}/signals/hold-pressure-sp/manual`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ value: 85 }) })
+n = await getNodes()
+await sleep(4000)
+const platRd1 = await fetch(`${BASE}/api/workshop/dcw/dw-05bba123/read`, { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${TOK}` }, body: '{}' }).then(r => r.json())
+evidence.steps.push({ step: 1, note: 'REST 写 85 后:signal vs 平台读', simSignal: signalOf(n, 'hold-pressure-sp'), platformRead: platRd1.data?.read?.value, diverged: signalOf(n, 'hold-pressure-sp') !== platRd1.data?.read?.value })
+
+// 步骤 2:平台写 57(合规小步) → 读 signal
+const w = await fetch(`${BASE}/api/workshop/dcw/dw-05bba123/write`, { method: 'POST', headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${TOK}` }, body: JSON.stringify({ value: 57 }) }).then(r => r.json())
+await sleep(6000)
+n = await getNodes()
+evidence.steps.push({ step: 2, note: '平台写 57 后:平台回读 vs signal', platformOutcome: w.data?.outcome?.message?.slice(0, 80), platformReadback: w.data?.outcome?.readback, simSignal: signalOf(n, 'hold-pressure-sp'), diverged: signalOf(n, 'hold-pressure-sp') !== 57 })
+
+// 步骤 3:物理验证记录(此前实验:signal=85 时 weight=33.45)
+evidence.steps.push({ step: 3, note: '物理验证(前序实验)', simSignal85_weight: 33.45, modelExpected: '31.0+0.052×45+0.05×4+melt修正 ≈ 33.5', conclusion: '植物模型链路正常;失联发生在 OPC UA 变量↔signal 同步层' })
+
+// 清理:恢复基线 55
+await fetch(`${SIM}/api/nodes/${NODE}/signals/hold-pressure-sp/manual`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ value: 55 }) })
+n = await getNodes()
+evidence.cleanup = { simSignal: signalOf(n, 'hold-pressure-sp') }
+
+mkdirSync('docs/audit/evidence/2026-10-28-full-acceptance-run2', { recursive: true })
+writeFileSync(OUT, JSON.stringify(evidence, null, 2))
+for (const s of evidence.steps) console.log(JSON.stringify(s).slice(0, 200))
+console.log(`→ ${OUT}`)

package/scripts/_audit/_mission-idd-remint-20261028.mjs

@@ -0,0 +1,32 @@
+// 一次性:IDD 重启后重铸 token(mission 账号不存在则注册),分发到 mission 设置与套件文件
+import fs from 'node:fs'
+
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const IDD = 'http://127.0.0.1:3210'
+const post = async (p, body, tok) => {
+  const r = await fetch(IDD + p, { method: 'POST', headers: { 'Content-Type': 'application/json', ...(tok ? { Authorization: `Bearer ${tok}` } : {}) }, body: body ? JSON.stringify(body) : undefined })
+  return r.json()
+}
+let login = await post('/api/auth/login', { username: 'mission-acc-20261028', password: 'MissionAcc#2026' })
+if (!login.success) {
+  console.log('login fail → register:', login.error ?? '')
+  await post('/api/auth/register', { username: 'mission-acc-20261028', password: 'MissionAcc#2026', email: 'mission-acc-20261028@awshop.local' })
+  login = await post('/api/auth/login', { username: 'mission-acc-20261028', password: 'MissionAcc#2026' })
+}
+if (!login.success) { console.error('login failed', JSON.stringify(login).slice(0, 150)); process.exit(1) }
+const st = login.data.session_token
+const mint = await post('/api/auth/tokens', { name: `mission-accept-${Date.now().toString(36)}`, expires_days: 7 }, st)
+const tok = mint?.data?.token
+if (!tok) { console.error('mint failed', JSON.stringify(mint).slice(0, 150)); process.exit(1) }
+fs.writeFileSync('.e2e-tmp/live-mission-3470/idd-token.txt', `${tok}\n`)
+fs.copyFileSync('.e2e-tmp/live-mission-3470/idd-token.txt', 'D:/tmp/idd-token.txt')
+const me = await fetch(`${IDD}/api/auth/me`, { headers: { Authorization: `Bearer ${tok}` } }).then(r => r.json())
+console.log('token ok, me=', me?.data?.username ?? JSON.stringify(me).slice(0, 80))
+// 热更平台设置
+const plat = await fetch('http://127.0.0.1:3470/api/users/login', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ email: 'admin@mission.local', password: 'Mission#2026Acc' }) }).then(r => r.json())
+await fetch('http://127.0.0.1:3470/api/system/settings', {
+  method: 'PATCH',
+  headers: { 'Content-Type': 'application/json', 'Authorization': `Bearer ${plat.data.token}` },
+  body: JSON.stringify({ 'plugins.diag-bridge.token': tok }),
+})
+console.log('platform settings patched + suite file written')

package/scripts/_audit/_mission-ui-shots-20261028.mjs

@@ -0,0 +1,56 @@
+/**
+ * 2026-10-28 全功能验收:实机 UI 走查截图(3470 实例)。
+ * 模式:REST 登录 → token cookie → gotoReady 水合等待(lib 同款判据) → 截图。
+ * 输出: docs/audit/evidence/2026-10-28-full-acceptance-run2/ui-*.png (≥6 张)
+ */
+import { launch } from '../ui/lib.mjs'
+import { mkdirSync } from 'node:fs'
+
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3470'
+const OUT = 'docs/audit/evidence/2026-10-28-full-acceptance-run2'
+process.env.NO_PROXY = '127.0.0.1,localhost'
+mkdirSync(OUT, { recursive: true })
+
+const login = await fetch(`${BASE}/api/users/login`, {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({ email: 'admin@mission.local', password: 'Mission#2026Acc' }),
+}).then(r => r.json())
+const TOKEN = login?.data?.token
+if (!TOKEN) { console.error('登录失败'); process.exit(1) }
+
+const browser = await launch({ width: 1600, height: 950 })
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 950 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+await page.setCookie({ name: 'aw-theme', value: 'dark', domain: '127.0.0.1', path: '/' })
+
+const gotoReady = async (path, wait = 3800) => {
+  await page.goto(`${BASE}${path}`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+  await page.waitForFunction(() => document.documentElement.getAttribute('data-vp-tier'), { timeout: 45000 }).catch(() => {})
+  await new Promise(r => setTimeout(r, wait))
+}
+
+const shots = [
+  ['ui-01-dashboard', '/'],
+  ['ui-02-daq', '/daq'],
+  ['ui-03-dcw', '/dcw'],
+  ['ui-04-ontology', '/ontology'],
+  ['ui-05-channel', '/workshop'],
+  ['ui-06-operations', '/operations'],
+]
+let okCount = 0
+for (const [name, path] of shots) {
+  try {
+    await gotoReady(path)
+    await page.screenshot({ path: `${OUT}/${name}.png` })
+    console.log(`✔ ${name} ← ${path}`)
+    okCount++
+  }
+  catch (e) {
+    console.log(`✘ ${name}: ${String(e).slice(0, 120)}`)
+  }
+}
+await browser.close()
+console.log(`UI shots: ${okCount}/${shots.length}`)
+process.exit(okCount >= 5 ? 0 : 1)

package/scripts/_audit/_mission-us10-timeline-20261028.mjs

@@ -0,0 +1,65 @@
+/**
+ * 2026-10-28 全功能验收 US-010 证据:真实 Agent harness 优化下发与监控时间线。
+ * 汇集:频道任务链(含状态机)、HITL 审批留痕、DCW 写控 journal、DAQ 复测窗口、消息流统计。
+ * 证据: docs/audit/evidence/2026-10-28-full-acceptance-run2/us10-harness-timeline.json
+ */
+import { writeFileSync, mkdirSync } from 'node:fs'
+
+const BASE = 'http://127.0.0.1:3470'
+const CH = '28239c1f-2e82-4207-a528-5edfb59b27ca'
+const OUT = 'docs/audit/evidence/2026-10-28-full-acceptance-run2/us10-harness-timeline.json'
+process.env.NO_PROXY = '127.0.0.1,localhost'
+
+const login = await fetch(`${BASE}/api/users/login`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ email: 'admin@mission.local', password: 'Mission#2026Acc' }) }).then(r => r.json())
+const TOK = login.data.token
+const H = { 'Content-Type': 'application/json', 'Authorization': `Bearer ${TOK}` }
+const get = async p => fetch(`${BASE}${p}`, { headers: H }).then(r => r.json()).catch(() => null)
+
+const tasks = await get(`/api/workshop/channels/${CH}/tasks`)
+const taskList = (tasks?.data ?? []).map(t => ({
+  id: t.id, title: (t.title ?? '').slice(0, 60), state: t.state, progress: t.progress, retry: t.retryCount,
+  updatedAt: t.updatedAt,
+}))
+const msgs = await get(`/api/workshop/channels/${CH}/messages?limit=200`)
+const mList = Array.isArray(msgs?.data) ? msgs.data : []
+const byAgent = {}
+for (const m of mList) {
+  const k = m.fromAgentId?.slice(0, 8) ?? 'user'
+  byAgent[k] = (byAgent[k] ?? 0) + 1
+}
+// HITL 审批:dcw 审批台账
+const appr = await get('/api/workshop/hitl/pending')
+// DCW journal(写控留痕;lineId 维度)
+const jrn = await get(`/api/workshop/dcw/journal?lineId=${'ln-e27a1867'}&limit=100`)
+const jrnList = jrn?.data?.anchors ?? jrn?.data?.items ?? []
+const jrnRows = Array.isArray(jrnList)
+  ? jrnList.slice(0, 40).map(x => ({
+      at: x.at, node: x.nodeId, prev: x.prevValue, value: x.newValue,
+      source: x.source, recipeRunId: x.recipeRunId,
+    }))
+  : []
+// DAQ 当前窗口(闭环改善证据:复测值)
+const from = Date.now() - 30 * 60_000
+const daq = await get(`/api/workshop/daq/query?from=${from}&to=${Date.now()}&node_ids=dn-126004d9,dn-9c7b4a7b&limit=300`)
+const series = daq?.data?.series ?? []
+const weight = series.find(s => /part-weight/.test(s.name ?? ''))?.points ?? []
+const cycle = series.find(s => /cycle-time/.test(s.name ?? ''))?.points ?? []
+
+const timeline = {
+  suite: 'US-010 真实 Agent harness 优化下发与监控',
+  base: BASE, channel: CH, at: new Date().toISOString(),
+  engine: 'omp(真实 LLM;deepseek/ark/ustc 供应商池)',
+  taskChain: taskList,
+  taskStateSummary: taskList.reduce((a, t) => ({ ...a, [t.state]: (a[t.state] ?? 0) + 1 }), {}),
+  messageFlow: { total: mList.length, byAgent },
+  dcwJournal: jrnRows,
+  daqWindow: {
+    weightPoints: weight.length, weightFirst: weight[0]?.v ?? null, weightLast: weight.at(-1)?.v ?? null,
+    cyclePoints: cycle.length, cycleLast: cycle.at(-1)?.v ?? null,
+  },
+  hitlPendingNow: (appr?.data?.items ?? []).length,
+}
+mkdirSync('docs/audit/evidence/2026-10-28-full-acceptance-run2', { recursive: true })
+writeFileSync(OUT, JSON.stringify(timeline, null, 2))
+console.log(`tasks=${JSON.stringify(timeline.taskStateSummary)} msgs=${mList.length} journal=${jrnRows.length} weightPts=${weight.length}`)
+console.log(`→ ${OUT}`)

package/scripts/_audit/_mission-us12-tools-20261028.mjs

@@ -0,0 +1,85 @@
+/**
+ * 2026-10-28 全功能验收 US-012:T4 插件装载与工具注册面。
+ * 断言:
+ *  R1 插件面:≥11 插件 enabled 且 failures=[]
+ *  R2 工具注册表:builtin 104 + plugin 21 全 available(允许上浮,下降须解释)
+ *  R3 实调 diag_status(结果库/后端连通)
+ *  R4 实调 aw_dcw_snapshot(节点面回包形状)与 aw_task_list(任务面回包形状)
+ * 证据: docs/audit/evidence/2026-10-28-full-acceptance-run2/us12-tool-registry.json
+ */
+import { writeFileSync, mkdirSync } from 'node:fs'
+
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3470'
+const CH = '28239c1f-2e82-4207-a528-5edfb59b27ca'
+const LEAD = '50283c08-818c-4a7a-af44-78e7359bfb21' // 数据分析师:持有 daq 绑定,节点面可读
+const OUT = 'docs/audit/evidence/2026-10-28-full-acceptance-run2/us12-tool-registry.json'
+process.env.NO_PROXY = '127.0.0.1,localhost'
+
+const checks = []
+const check = (id, name, ok, detail) => {
+  checks.push({ id, name, ok: !!ok, detail: String(detail).slice(0, 300) })
+  console.log(`${ok ? '✔' : '✘'} [${id}] ${name} — ${String(detail).slice(0, 240)}`)
+}
+const api = async (method, path, body, headers, timeoutMs = 60000) => {
+  const r = await fetch(`${BASE}${path}`, {
+    method,
+    headers: { 'Content-Type': 'application/json', ...(headers ?? {}) },
+    body: body ? JSON.stringify(body) : undefined,
+    signal: AbortSignal.timeout(timeoutMs),
+  })
+  let data = null
+  try { data = await r.json() } catch { /* */ }
+  return { status: r.status, data }
+}
+
+const login = await api('POST', '/api/users/login', { email: 'admin@mission.local', password: 'Mission#2026Acc' })
+const TOK = login.data?.data?.token
+check('R0', '管理员登录', !!TOK, `status=${login.status}`)
+const rot = await api('POST', `/api/workshop/channels/${CH}/agents/${LEAD}/rotate-token`, {}, { Authorization: `Bearer ${TOK}` })
+const ATOK = rot.data?.data?.token
+check('R0b', '轮换 lead token', !!ATOK, `status=${rot.status}`)
+if (!TOK || !ATOK) process.exit(1)
+const AH = { 'x-aw-agent-token': ATOK, 'Authorization': `Bearer ${TOK}` }
+
+// ── R1 插件面 ──
+const plugs = await api('GET', '/api/workshop/plugins', undefined, { Authorization: `Bearer ${TOK}` })
+const plist = plugs.data?.data?.plugins ?? plugs.data?.plugins ?? []
+const enabled = plist.filter(p => p.enabled)
+const failed = plist.filter(p => (p.failures ?? []).length > 0)
+check('R1', `插件 ${plist.length} 个 enabled=${enabled.length} failures=0`, plist.length >= 11 && failed.length === 0, `failed=${failed.map(p => p.name).join(',') || '无'}`)
+
+// ── R2 工具注册表 ──
+const tools = await api('GET', '/api/workshop/tools', undefined, { Authorization: `Bearer ${TOK}` })
+const tlist = tools.data?.data?.tools ?? tools.data?.tools ?? []
+const builtin = tlist.filter(t => t.source === 'builtin')
+const plugin = tlist.filter(t => t.source === 'plugin')
+const unavailable = tlist.filter(t => t.available === false)
+check('R2', `注册表 builtin=${builtin.length}(≥104) plugin=${plugin.length}(≥21) unavailable=0`, builtin.length >= 104 && plugin.length >= 21 && unavailable.length === 0, `total=${tlist.length} unavailable=${unavailable.map(t => t.name).join(',').slice(0, 120) || '无'}`)
+
+// ── invoke 帮手 ──
+const invoke = async (tool, args, timeoutMs = 90000) => {
+  const r = await api('POST', '/api/workshop/agent-tools/invoke', { agentId: LEAD, tool, args: args ?? {} }, AH, timeoutMs)
+  const u = r.data?.data?.result ?? r.data?.data ?? r.data
+  const text = typeof u?.text === 'string' ? u.text : JSON.stringify(u ?? '')
+  return { ok: u?.isError !== true, text }
+}
+
+// ── R3 diag_status 实调 ──
+const ds = await invoke('diag_status', {})
+check('R3', 'diag_status 实调成功', ds.ok && ds.text.length > 10, `resp=${ds.text.slice(0, 180)}`)
+
+// ── R4 节点面/任务面回包形状(真实工具名:my_industrial_nodes / list_channel_tasks) ──
+const snap = await invoke('my_industrial_nodes', {})
+const snapOk = snap.ok && /dw-|dn-|name|节点|hold/i.test(snap.text)
+check('R4a', 'my_industrial_nodes 回包含节点面', snapOk, `resp=${snap.text.slice(0, 180)}`)
+const tl = await invoke('list_channel_tasks', {})
+const tlOk = tl.ok && /task|title|state|任务|COMPLETED|WORKING|WAITING/i.test(tl.text)
+check('R4b', 'list_channel_tasks 回包含任务面', tlOk, `resp=${tl.text.slice(0, 180)}`)
+
+// ── 汇总 ──
+const pass = checks.filter(c => c.ok).length
+const result = { suite: 'US-012 T4 插件装载与工具注册面', base: BASE, at: new Date().toISOString(), checks, verdict: `PASS(${pass}/${checks.length})` }
+mkdirSync('docs/audit/evidence/2026-10-28-full-acceptance-run2', { recursive: true })
+writeFileSync(OUT, JSON.stringify(result, null, 2))
+console.log(`\nUS-012: ${result.verdict} → ${OUT}`)
+process.exit(pass === checks.length ? 0 : 1)