agentworkshop 0.8.5 → 0.8.6

package/.output/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentworkshop-prod",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "type": "module",
   "private": true,
   "dependencies": {

package/README-zh.md

@@ -28,7 +28,7 @@
 
 **[English](./README.md)** · **[在线文档](https://kingdol666.github.io/AgentWorkShop)** · **[版本发布](https://github.com/kingdol666/AgentWorkShop/releases)** · **[更新日志](./changelog.md)** · **[插件 API](./docs/plugins.md)** · **[SDK](./docs/sdk.md)**
 
-<sub><b>v0.8.5</b> · 14 个执行引擎 · 6 种现场协议（5 内置 + 串口插件）+ MES REST 集成（镜像与直连双路径）· 数据分析台账（产线级权限隔离）· 工艺参数优化器（过程模型 → AML → OSQP 求解 → 治理下发）· **本体服务 + AI 先行模型闭环**（本体 · 孪生 · 求解器 · AML 采纳）· 104 个宿主工具 · 128 个运行时设置项 · 双语文档（简体中文 / English）</sub>
+<sub><b>v0.8.6</b> · 14 个执行引擎 · 6 种现场协议（5 内置 + 串口插件）+ MES REST 集成（镜像与直连双路径）· 数据分析台账（产线级权限隔离）· 工艺参数优化器（过程模型 → AML → OSQP 求解 → 治理下发）· **本体服务 + AI 先行模型闭环**（本体 · 孪生 · 求解器 · AML 采纳）· 104 个宿主工具 · 128 个运行时设置项 · 双语文档（简体中文 / English）</sub>
 
 <br />
 
@@ -408,7 +408,7 @@ aw update --check                      # 只报告，不安装
 npm install -g agentworkshop@latest    # 手动等效
 ```
 
-版本遵循 semver。每次 `aw start` 都会校验配置根，并把 `home` 之前的旧版 `data/` 布局迁移进来（以最新文件为准），因此数据可以跨版本存活。SQLite schema 迁移在服务端启动时执行。当前版本：**v0.8.4**——见[版本发布](https://github.com/kingdol666/AgentWorkShop/releases)。
+版本遵循 semver。每次 `aw start` 都会校验配置根，并把 `home` 之前的旧版 `data/` 布局迁移进来（以最新文件为准），因此数据可以跨版本存活。SQLite schema 迁移在服务端启动时执行。当前版本：**v0.8.6**——见[版本发布](https://github.com/kingdol666/AgentWorkShop/releases)。
 
 ### 第一次「Agent × 产线」会话（约 2 分钟）
 
@@ -580,6 +580,7 @@ curl http://localhost:3000/api/workshop/channels \
 - `admin` / `editor` 为运营角色，不受授权约束（全量全权）。
 - 普通用户**默认无权**——未授权前看不到任何产线数据。
 - 强制点在数据面：列表接口按授权过滤，写控/下发接口返回人类可读的 403，Agent↔节点绑定校验产线授权（数采需仅查看+，写控需可操控）。
+- Agent 写授权双轨：`kind='dcw'` 节点绑定 = 点位写授权（trial/apply 的覆盖集须 ⊆ 绑定节点面，跟设备走、换配方不停摆）；`kind='recipe'` 配方绑定 = 配方操作权（含版本写入/回退）。两种绑定取并集；节点绑定不授予配方版本权，直写工具仍恒拒，全部写入仍经四层限界/运行门/HITL/逐参数 ACK。
 - 插件经 `ctx.permissions`（`lineMode` / `visibleLineIds` / `listGrants` / `setGrants`）获得同一能力面，并有 `permissions:changed` 生命周期钩子；SDK REST 客户端提供 `client.permissions.overview()` / `client.permissions.set(...)`。
 
 ### 执行模式
@@ -635,6 +636,7 @@ SUBMITTED ─▶ ASSIGNED ─▶ WORKING ─▶ WAITING ─▶ COMPLETED
 
 | 套件 | 最新结果 | 覆盖 | 复现 |
 |---|---|---|---|
+| `e2e-multiexpert-remediation-real.mjs` | **17 / 17**（2026-10-28，`.output` 生产构建 + 真实 `omp` + 本机 **Qwen3.5-9B**，**worker 身份**） | 建 AgentChannel(lead+worker) → worker 绑 DAQ/DCW → **运行时提示词注入**(执行模式卡 + 节点语义卡:量程/单步/手动确认) → 工具注入面按绑定差异化 → `daq_query` 真实取数 → `recipe_trial` 挂 HITL → 人工批准 → **ACK 设备证实** → 节点值变更/版本不变/账本新增/数采可查 | `node scripts/e2e-multiexpert-remediation-real.mjs`（需 LM Studio `127.0.0.1:1234`） |
 | `real-injection-closed-loop.mjs` | **双 goal 全部 COMPLETED / 0 失败**（2026-09-24，真实 PLC 模拟器 + 真实 `omp` 团队） | 从模拟器供给注塑产线（11 个数控 + 14 个数采节点）→ 真实 AgentTeam(lead/分析/优化) → 受治理写入且**间隔 65.8s ≥ 60s 策略** → 数采复测 → `qualityOk`、判定 `keep` | `AW_BASE=<base> SIM_BASE=http://127.0.0.1:4010 AW_TOKEN=<token> node scripts/real-injection-closed-loop.mjs` |
 | `_run-real-injection-fifo-goals.mjs` | exit 0（2026-09-24） | **FIFO 根队列多任务串行**：GOAL-2 仅在 GOAL-1 收口后派发；角色门控切换；两次受治理写入间隔 65.04s；两条记录均判定；账本 4 条锚 | `AW_BASE=<base> SIM_BASE=… AW_TOKEN=<token> node scripts/_run-real-injection-fifo-goals.mjs` |
 | `e2e-plc-plugin-closedloop.mjs` | 核心 Stage A–D 全绿（2026-09-24） | PLC 模拟器 Modbus 16040 真实供给 → 数采交叉核对（AW 采样 197 vs 模拟器寄存器 197.37）→ HITL 闭环写 3 区（寄存器 40021/40023/40025 = 210，真实写穿）→ `dcw_judge` keep；插件段 E–H 需外部诊断服务，按约定显式 SKIP | `AW_BASE=<base> KB_BASE=http://127.0.0.1:8771 AW_E2E_USERS_DB=<home>/data/users.sqlite node scripts/e2e-plc-plugin-closedloop.mjs` |

package/README.md

@@ -28,7 +28,7 @@
 
 **[简体中文](./README-zh.md)** · **[Documentation](https://kingdol666.github.io/AgentWorkShop)** · **[Releases](https://github.com/kingdol666/AgentWorkShop/releases)** · **[Changelog](./changelog.md)** · **[Plugin API](./docs/plugins.md)** · **[SDK](./docs/sdk.md)**
 
-<sub><b>v0.8.5</b> · 14 engines · 6 field protocols (5 built-in + serial plugin) + MES REST integration (mirror & live) · data-analysis ledger with line-scoped permissions · process optimizer (process model → AML → OSQP solver → governed dispatch) · **ontology service + AI-first model loop** (ontology · twin · solver · AML adoption) · 104 host tools · 128 runtime settings · bilingual docs (简体中文 / English)</sub>
+<sub><b>v0.8.6</b> · 14 engines · 6 field protocols (5 built-in + serial plugin) + MES REST integration (mirror & live) · data-analysis ledger with line-scoped permissions · process optimizer (process model → AML → OSQP solver → governed dispatch) · **ontology service + AI-first model loop** (ontology · twin · solver · AML adoption) · 104 host tools · 128 runtime settings · bilingual docs (简体中文 / English)</sub>
 
 <br />
 
@@ -399,7 +399,7 @@ aw update --check                      # only report; nothing is installed
 npm install -g agentworkshop@latest    # manual equivalent
 ```
 
-Releases follow semver. `aw start` verifies the config root on every launch and migrates the legacy pre-`home` `data/` layout into it (newest file wins), so data survives upgrades. SQLite schema migrations run server-side at boot. Current version: **v0.8.4** — see [Releases](https://github.com/kingdol666/AgentWorkShop/releases).
+Releases follow semver. `aw start` verifies the config root on every launch and migrates the legacy pre-`home` `data/` layout into it (newest file wins), so data survives upgrades. SQLite schema migrations run server-side at boot. Current version: **v0.8.6** — see [Releases](https://github.com/kingdol666/AgentWorkShop/releases).
 
 ### Your first agent × line session (~2 minutes)
 
@@ -574,6 +574,12 @@ in the built-in **Permissions** page (`/permissions`, admin-only in the sidebar)
 - Enforcement lives in the data plane: list endpoints filter by grant, write/dispatch
   endpoints return a human-readable 403, and Agent↔node bindings validate the line grant
   (DAQ needs read-only+, DCW needs operate).
+- Agent write authorization is two-track: a `kind='dcw'` node binding is a point-level
+  write grant (trial/apply coverage must stay within the bound node face; it follows the
+  device and survives recipe switches), while a `kind='recipe'` binding is a recipe-level
+  operation right (including version writes/rollback). The two are unioned; node bindings
+  never grant recipe version rights, direct-write tools stay rejected, and every write
+  still passes the four-layer limits / run gate / HITL / per-parameter ACK.
 - Plugins get the same surface via `ctx.permissions` (`lineMode` / `visibleLineIds` /
   `listGrants` / `setGrants`) plus a `permissions:changed` lifecycle hook; the SDK REST
   client exposes `client.permissions.overview()` / `client.permissions.set(...)`.
@@ -640,6 +646,7 @@ in [`docs/audit/e2e-2026-09-24-all-features.md`](./docs/audit/e2e-2026-09-24-all
 
 | Suite | Latest result | What it covers | Reproduce |
 |---|---|---|---|
+| `e2e-multiexpert-remediation-real.mjs` | **17 / 17** (2026-10-28, `.output` production build + real `omp` + local **Qwen3.5-9B**, **worker identity**) | create AgentChannel (lead + worker) → worker binds DAQ/DCW → **runtime prompt injection** (execution-mode card + node semantic cards: range / step cap / manual-approval) → tool surface differs by binding → `daq_query` on live samples → `recipe_trial` raises HITL → human approval → **ACK verified by device** → node value changed / version unchanged / ledger anchor appended / samples queryable | `node scripts/e2e-multiexpert-remediation-real.mjs` (needs LM Studio at `127.0.0.1:1234`) |
 | `real-injection-closed-loop.mjs` | **2 goals COMPLETED / 0 failed** (2026-09-24, real PLC simulator + real `omp` team) | injection line provisioned from the simulator (11 DCW + 14 DAQ nodes) → real AgentTeam lead/analyst/optimizer → governed writes with a **65.8 s gap ≥ 60 s policy** → DAQ re-measurement → `qualityOk`, verdict `keep` | `AW_BASE=<base> SIM_BASE=http://127.0.0.1:4010 AW_TOKEN=<token> node scripts/real-injection-closed-loop.mjs` |
 | `_run-real-injection-fifo-goals.mjs` | exit 0 (2026-09-24) | **FIFO root queue with multi-task serialization**: goal 2 dispatched only after goal 1 closed, role gate flip, two governed writes 65.04 s apart, two judged records, 4-anchor ledger | `AW_BASE=<base> SIM_BASE=… AW_TOKEN=<token> node scripts/_run-real-injection-fifo-goals.mjs` |
 | `e2e-plc-plugin-closedloop.mjs` | core stages A–D all green (2026-09-24) | PLC simulator supply over Modbus 16040 → DAQ cross-check (AW sample 197 vs simulator register 197.37) → HITL closed-loop write to 3 zones (registers 40021/40023/40025 = 210, verified write-through) → `dcw_judge` keep; plugin stages E–H need the external diagnosis service and are reported as SKIP | `AW_BASE=<base> KB_BASE=http://127.0.0.1:8771 AW_E2E_USERS_DB=<home>/data/users.sqlite node scripts/e2e-plc-plugin-closedloop.mjs` |

package/config.yml

@@ -12,7 +12,7 @@
 app:
   name: AgentWorkShop
   title: AgentWorkShop
-  version: 0.8.4
+  version: 0.8.6
   description: 基于 Nuxt 4 的配置驱动运行范式
 
 # 运行模式（dev/prod 实际由启动命令决定，此处仅作运行时展示）

package/docker-compose.yml

@@ -12,10 +12,12 @@ services:
   daq-mosquitto:
     image: eclipse-mosquitto:2
     container_name: awshop-daq-mosquitto
-    # no-auth 配置:内网/开发态;生产请挂载自定义 mosquitto.conf 启用鉴权/TLS
+    # no-auth 配置:内网/开发态;生产请挂载自定义 mosquitto.conf 启用鉴权/TLS。
+    # 2026-10-28(S13):默认只绑 127.0.0.1,避免同网段任意主机向队列注入样本;
+    # 跨机部署请显式改回 0.0.0.0 并同时启用 broker 账号/TLS。
     command: ["mosquitto", "-c", "/mosquitto-no-auth.conf"]
     ports:
-      - "1883:1883"   # 与 config.yml daq.mqtt.port 一致
+      - "127.0.0.1:1883:1883"   # 与 config.yml daq.mqtt.port 一致
     restart: unless-stopped
 
   daq-timescale:

package/docs/cli.en.md

@@ -62,7 +62,7 @@ pnpm tui             # the terminal workbench
 ### 3. Quick use via npx (no global install)
 
 ```bash
-npx agentworkshop start            # fetch and start (pin a version with: npx agentworkshop@0.8.4 start)
+npx agentworkshop start            # fetch and start (pin a version with: npx agentworkshop@0.8.6 start)
 npx agentworkshop doctor           # subcommands work as usual
 npx -p agentworkshop aw doctor     # use -p when you want the name aw
 ```
@@ -79,7 +79,7 @@ npx -p agentworkshop aw doctor     # use -p when you want the name aw
 | Package manager | `pnpm@11.9.0` (`packageManager`, needed only for source development) |
 | Module format | ESM (`type: module`) |
 | License | `Apache-2.0` |
-| Current version | `0.8.4` (`package.json`) |
+| Current version | `0.8.6` (`package.json`) |
 
 ## 2. First start (the Claude Code experience)
 

package/docs/cli.md

@@ -60,7 +60,7 @@ pnpm tui             # 终端工作台
 ### 3. npx 快速使用（免全局安装）
 
 ```bash
-npx agentworkshop start            # 拉取并启动(可锁定版本: npx agentworkshop@0.8.4 start)
+npx agentworkshop start            # 拉取并启动(可锁定版本: npx agentworkshop@0.8.6 start)
 npx agentworkshop doctor           # 子命令照常可用
 npx -p agentworkshop aw doctor     # 需要 aw 这个名字时用 -p 指定包
 ```
@@ -76,7 +76,7 @@ npx -p agentworkshop aw doctor     # 需要 aw 这个名字时用 -p 指定包
 | 包管理器 | `pnpm@11.9.0`（`packageManager`，仅源码开发需要） |
 | 模块形态 | ESM（`type: module`） |
 | 许可证 | `Apache-2.0` |
-| 当前版本 | `0.8.4`（`package.json`） |
+| 当前版本 | `0.8.6`（`package.json`） |
 
 ## 二、首次启动（Claude Code 式）
 

package/docs/plugins.en.md

@@ -9,7 +9,7 @@
 >
 > Applies to: plugin system v2 has been available since **v0.7.29** (frontend component
 > injection / plugin settings / plugin i18n / runtime services surface); this document
-> describes **v0.8.4**. `ctx.sdkVersion` is currently `0.3.0`.
+> describes **v0.8.6**. `ctx.sdkVersion` is currently `0.3.0`.
 
 ## 1. Folder layout & quick start
 

package/docs/plugins.md

@@ -6,7 +6,7 @@
 > 本文是唯一权威参考;`docs/site/plugins/` 的分页文档与本文同源。
 >
 > 适用版本:插件系统 v2 自 **v0.7.29** 起可用(前端组件注入 / 插件设置 / 插件 i18n /
-> 运行时服务面);本文档对应当前版本 **v0.8.4**。`ctx.sdkVersion` 当前为 `0.3.0`。
+> 运行时服务面);本文档对应当前版本 **v0.8.6**。`ctx.sdkVersion` 当前为 `0.3.0`。
 
 ## 一、目录结构与快速开始
 

package/docs/sdk.en.md

@@ -7,7 +7,7 @@
 
 **SDK version constants**: server-side `SDK_VERSION = '0.3.0'`, browser-side `CLIENT_SDK_VERSION = '0.3.0'`.
 These two constants are the **interface version of the SDK itself** and evolve **independently**
-from the npm package version (the `version` field in `package.json`, currently 0.8.4) —
+from the npm package version (the `version` field in `package.json`, currently 0.8.6) —
 them being out of sync is expected. Never use `SDK_VERSION` to infer the package version, or the reverse.
 **Module format**: ESM only (only `import` / `export`; there is no CJS entry).
 **Types**: `sdk/index.d.mts` and `sdk/client.d.mts` ship with the package, so TypeScript projects

package/docs/sdk.md

@@ -5,7 +5,7 @@
 > 零第三方运行时依赖,Node ≥ 23.4 与现代浏览器双端可用。
 
 **SDK 版本常量**:服务端 `SDK_VERSION = '0.3.0'`,浏览器端 `CLIENT_SDK_VERSION = '0.3.0'`。
-这两个常量是 **SDK 自身接口的版本号**,与 npm 包版本(`package.json` 的 `version`,当前 0.8.4)
+这两个常量是 **SDK 自身接口的版本号**,与 npm 包版本(`package.json` 的 `version`,当前 0.8.6)
 **各自独立演进** —— 常数不同步是预期行为,不要拿 `SDK_VERSION` 去推断包版本,反之亦然。
 **模块形态**:ESM only(只有 `import` / `export`,没有 CJS 入口)。
 **类型**:`sdk/index.d.mts`、`sdk/client.d.mts` 随包发布,TS 项目零配置获得提示(覆盖范围见 §7)。

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentworkshop",
-  "version": "0.8.5",
+  "version": "0.8.6",
   "type": "module",
   "description": "AgentWorkShop 软件开发系统 - 基于 Nuxt 4 的配置驱动运行范式",
   "license": "Apache-2.0",

package/scripts/_audit/_live-mqtt-e2e-20261028.mjs

@@ -0,0 +1,219 @@
+#!/usr/bin/env node
+/**
+ * MQTT 全链真实 E2E(2026-10-28;真实 broker 127.0.0.1:1883):
+ *  场景:独立平台实例 + 模拟网关(node 客户端,复用仓库 mqtt 依赖)
+ *   - 网关每 2s 向 mqtte2e/<TAG>/temp 发布 {"data":{"temperature":X,"humidity":Y}}(温度缓升,湿度乱摆——验证 jsonPath 单字段提取)
+ *   - 网关订阅 mqtte2e/<TAG>/setpoint(控制主题),收到设定值后向 mqtte2e/<TAG>/state 回显 {"data":{"setpoint":X}}(模拟设备回显,供写后回读升级 verified)
+ *  断言:
+ *   T1 DAQ:平台订阅 temp 主题,jsonPath=data.temperature 提取入库;daq_query 点数随发布增长,数值=温度序列(非湿度)
+ *   T2 DCW:recipe_trial(手动 HITL 批准)下发 238 → 网关控制主题收到 {"setpoint":238}(jsonKey 封装)→ 回显 → 写后回读升级 readback-verified(设备证实✓)
+ *   T3 稳定性:持续 90s 泡水,daq 点数单调增长、节点保持在线、journal 锚点齐全
+ * 运行:node scripts/_audit/_live-mqtt-e2e-20261028.mjs
+ */
+import { spawn } from 'node:child_process'
+import net from 'node:net'
+import { mkdirSync, openSync, rmSync, writeFileSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..')
+const EVID = join(REPO, 'docs', 'audit', 'evidence', '2026-10-28-mqtt-live')
+mkdirSync(EVID, { recursive: true })
+const ROOT = join(tmpdir(), 'aw-mqtt-e2e')
+rmSync(join(ROOT, 'home'), { recursive: true, force: true })
+mkdirSync(join(ROOT, 'home'), { recursive: true })
+const TAG = `mq${Date.now().toString(36).slice(-4)}`
+const T_TEMP = `mqtte2e/${TAG}/temp`
+const T_SET = `mqtte2e/${TAG}/setpoint`
+const T_STATE = `mqtte2e/${TAG}/state`
+const BASE = 'http://127.0.0.1:3986'
+const log = (s) => { console.log(`[${new Date().toISOString().slice(11, 19)}] ${s}`) }
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+// ── 前置:broker 探活 ──
+const brokerUp = await new Promise((res) => {
+  const s = net.connect(1883, '127.0.0.1')
+  s.setTimeout(2000)
+  s.on('connect', () => { s.end(); res(true) })
+  s.on('error', () => res(false))
+  s.on('timeout', () => { s.destroy(); res(false) })
+})
+if (!brokerUp) {
+  console.log('✖ 127.0.0.1:1883 无 MQTT broker —— 先启动 broker(mosquitto -v -p 1883)')
+  process.exit(1)
+}
+log('broker 127.0.0.1:1883 在线')
+
+// ── 模拟网关:发布温度 JSON + 订阅控制主题回显状态 ──
+const mqtt = (await import('mqtt')).default
+const receivedWrites = []
+let tempVal = 22.5
+const gateway = mqtt.connect('mqtt://127.0.0.1:1883', { connectTimeout: 4000 })
+await new Promise((res, rej) => { gateway.once('connect', res); gateway.once('error', rej) })
+gateway.subscribe(T_SET, { qos: 1 })
+gateway.on('message', (topic, payload) => {
+  if (topic !== T_SET) return
+  try {
+    const msg = JSON.parse(payload.toString())
+    receivedWrites.push({ at: Date.now(), raw: payload.toString(), setpoint: msg.setpoint })
+    gateway.publish(T_STATE, JSON.stringify({ data: { setpoint: msg.setpoint } }), { qos: 1 })
+    log(`网关收到控制令牌:${payload.toString()} → 回显状态主题`)
+  }
+  catch { /* 非 JSON */ }
+})
+// 温度缓升(22.5 起 +0.3/次),湿度独立乱摆——两者可区分
+const pubTimer = setInterval(() => {
+  tempVal = Math.round((tempVal + 0.3) * 100) / 100
+  const hum = Math.round(40 + Math.random() * 20)
+  gateway.publish(T_TEMP, JSON.stringify({ data: { temperature: tempVal, humidity: hum } }), { qos: 1 })
+}, 2000)
+log(`模拟网关上线:每 2s → ${T_TEMP} = {"data":{"temperature":…,"humidity":…}};订阅 ${T_SET}`)
+
+// ── 平台实例 ──
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const logFd = openSync(join(ROOT, 'dev.log'), 'a')
+// build 产物跑(无 nitro 文件监听):并行会话写盘不再触发 HMR 重载风暴(验收 skill 标准跑法)
+const child = spawn(process.execPath, [join(REPO, '.output', 'server', 'index.mjs')], {
+  cwd: REPO,
+  env: { ...process.env, AW_MODE: 'home', AW_HOME: join(ROOT, 'home'), PORT: '3986', AW_RATE_LIMIT_OFF: '1', NUXT_SESSION_PASSWORD: 'MqttE2e#2026-session-key-0321', NO_PROXY: '127.0.0.1,localhost' },
+  stdio: ['ignore', logFd, logFd],
+  windowsHide: true,
+})
+let healthy = false
+for (let i = 0; i < 90; i++) {
+  await sleep(2000)
+  try {
+    const h = await fetch(`${BASE}/api/health`, { signal: AbortSignal.timeout(3000) }).then(r => r.json()).catch(() => null)
+    if (h?.data?.status === 'ok' && h?.data?.workshop === 'ready') { healthy = true; break }
+  }
+  catch { /* 未就绪 */ }
+}
+log(`平台实例:${healthy ? '就绪' : '未就绪'}`)
+if (!healthy) process.exit(1)
+
+const reg = await fetch(`${BASE}/api/users/register`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ name: `mq-admin-${TAG}`, email: `mq-${TAG}@awshop.local`, password: 'MqE2e#2026' }) }).then(r => r.json())
+const H = () => reg.data.token
+const api = async (method, path, body, timeoutMs = 120_000) => {
+  // 兼容旧调用形参:第 4 参可能传的是 token(H())——非数字视为缺省超时
+  const timeout = typeof timeoutMs === 'number' ? timeoutMs : 120_000
+  const res = await fetch(BASE + path, { method, headers: { 'content-type': 'application/json', 'authorization': `Bearer ${H()}` }, body: body === undefined ? undefined : JSON.stringify(body), signal: AbortSignal.timeout(timeout) })
+  let json = null
+  try { json = await res.json() } catch { /* 非 JSON */ }
+  return { status: res.status, ...json }
+}
+const invText = r => String(r?.data?.result?.text ?? r?.data?.text ?? '')
+const invErr = r => Boolean(r?.data?.result?.isError ?? r?.data?.isError)
+let lead = ''
+const invoke = (tool, args) => api('POST', '/api/workshop/agent-tools/invoke', { agentId: lead, tool, args }, H())
+const results = []
+const ok = (id, name, cond, detail = '') => {
+  results.push({ id, pass: Boolean(cond) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${cond ? '' : ` — ${String(detail).slice(0, 260)}`}`)
+}
+
+try {
+  // ── 场景供给 ──
+  const line = (await api('POST', '/api/workshop/dcw/lines', { name: `MQTT实测线-${TAG}` }, H())).data?.line?.id
+  const spNode = (await api('POST', '/api/workshop/dcw', {
+    templateRef: 'dcw-temp-sp', name: `MQTT设定-${TAG}`, driver: 'mqtt', lineId: line,
+    min: 160, max: 300, stepLimit: 20,
+    driverConfig: { host: '127.0.0.1', port: 1883, topic: T_SET, jsonKey: 'setpoint', qos: 1, readTopic: T_STATE, readJsonPath: 'data.setpoint' },
+  }, H())).data?.node?.id
+  const pvNode = (await api('POST', '/api/workshop/daq', {
+    templateRef: 'daq-temp-tc', name: `MQTT温度-${TAG}`, driver: 'mqtt', lineId: line, intervalMs: 2000, publishIntervalMs: 0,
+    min: 10, max: 60,
+    driverConfig: { host: '127.0.0.1', port: 1883, topic: T_TEMP, jsonPath: 'data.temperature', qos: 1 },
+  }, H())).data?.node?.id
+  const product = (await api('POST', '/api/workshop/dcw/products', { lineId: line, name: `MQTT产品-${TAG}` }, H())).data?.product?.id
+  const recipe = (await api('POST', '/api/workshop/dcw/recipes', { productId: product, name: `MQTT配方-${TAG}`, params: [{ nodeId: spNode, value: 240, min: 160, max: 300 }] }, H())).data?.recipe?.id
+  await api('POST', '/api/workshop/dcw/controller', { action: 'start' }, H())
+  await api('POST', '/api/workshop/daq/controller', { action: 'start' }, H())
+  const ch = (await api('POST', '/api/workshop/channels', { name: `MQTT频道-${TAG}`, leadAgent: { name: `mq-lead-${TAG}`, harness: 'omp' } }, H())).data
+  lead = ch.leadAgentId
+  await api('PUT', `/api/workshop/channels/${ch.channelId}/line`, { lineId: line }, H())
+  await api('POST', `/api/workshop/channels/${ch.channelId}/activate`, {}, H())
+  await api('POST', '/api/workshop/agent-tools/bindings', { agentId: ch.leadAgentId, nodeId: pvNode, kind: 'daq' }, H())
+  const rb = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: ch.leadAgentId, nodeId: recipe, kind: 'recipe' }, H())
+  const bindingId = rb?.data?.binding?.id
+  ok('S1', '场景供给(线/MQTT 数采节点/MQTT 设定节点/配方/频道/绑定)', Boolean(line && spNode && pvNode && recipe && ch?.channelId && bindingId),
+    JSON.stringify({ line, spNode, pvNode, recipe }).slice(0, 200))
+
+  // ── T0 开线(HITL):配方参数 240 会经 MQTT 驱动发布到控制主题 ──
+  const known0 = new Set((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items?.map(x => x.id) ?? [])
+  const p0 = invoke('line_start', { recipe_id: recipe, reason: `MQTT E2E 开线(${TAG})` })
+  let card0 = null
+  for (let i = 0; i < 40 && !card0; i++) {
+    await sleep(1000)
+    card0 = ((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items ?? []).find(x => !known0.has(x.id))
+  }
+  if (card0) await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: card0.id, confirmed: true, choice: 0, comment: 'MQTT E2E 批准开线' }, H())
+  const r0 = await p0
+  ok('T0', '开线成功且参数设备证实(readback-verified:网关回显经 readTopic)', !invErr(r0) && /readback|设备证实|verified/.test(invText(r0)), invText(r0).slice(0, 200))
+  const sawLineStartWrite = receivedWrites.find(w => w.setpoint === 240)
+  ok('T0b', '开线下发经 jsonKey 封装为 JSON 到控制主题({"setpoint":240})', Boolean(sawLineStartWrite), JSON.stringify(receivedWrites.slice(0, 3)))
+
+  // ── T1 DAQ:jsonPath 单字段提取实时入库 ──
+  await sleep(16_000)
+  const q1 = await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=1`, undefined, H())
+  const pts1 = (q1.data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)
+  const pointOf = p => Number(p?.v ?? p?.avg ?? p?.value ?? Number.NaN)
+  if (pts1 > 0) writeFileSync(join(EVID, `daq-point-shape-${TAG}.json`), JSON.stringify((q1.data?.series ?? [])[0]?.points?.slice(0, 2) ?? []))
+  const vals1 = (q1.data?.series ?? []).flatMap(s => (s.points ?? []).map(pointOf)).filter(Number.isFinite)
+  // 数值应落在温度序列区间(22.5 起缓升),而非湿度区间(40-60)
+  const inTempRange = vals1.filter(v => v >= 22 && v <= 40).length
+  ok('T1a', `DAQ jsonPath 提取:单条 JSON 报文取 data.temperature 入库(${pts1} 点)`, pts1 > 0, `points=${pts1}`)
+  ok('T1b', '取的是温度字段而非同报文湿度字段(22~40 区间)', pts1 > 0 && inTempRange === pts1, `vals=${vals1.slice(0, 6)} humidity-range hits=${pts1 - inTempRange}`)
+
+  // ── T2 DCW:recipe_trial 手动批准 → JSON 下发 + 回读升级 verified ──
+  const writesBefore = receivedWrites.length
+  const known = new Set((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items?.map(x => x.id) ?? [])
+  const p = invoke('recipe_trial', { recipe_id: recipe, params: [{ node_id: spNode, value: 238 }], hypothesis: `MQTT E2E:试 238℃(${TAG})` })
+  let card = null
+  for (let i = 0; i < 40 && !card; i++) {
+    await sleep(1000)
+    card = ((await api('GET', '/api/workshop/hitl/pending', undefined, H())).data?.items ?? []).find(x => !known.has(x.id))
+  }
+  ok('T2a', 'recipe_trial 生成 HITL 审批卡(recipe 只管参数值,封装交给节点配置)', Boolean(card), card?.id ?? '未出现')
+  if (card) await api('POST', '/api/workshop/hitl/respond', { kind: 'dcw-approval', id: card.id, confirmed: true, choice: 0, comment: 'MQTT E2E 批准 238' }, H())
+  const r = await p
+  const txt = invText(r)
+  ok('T2b', '批准后执行:写后回读经状态主题升级 readback-verified(设备证实✓)', !invErr(r) && /设备证实|readback/.test(txt), txt.slice(0, 220))
+  await sleep(1500)
+  const w238 = receivedWrites.filter(w => w.setpoint === 238)
+  ok('T2c', '我方订阅端收到 JSON 写报文 {"setpoint":238}', w238.length > 0 && w238[0].raw === '{"setpoint":238}', JSON.stringify(receivedWrites.slice(writesBefore).map(w => w.raw)))
+  writeFileSync(join(EVID, `received-writes-${TAG}.json`), JSON.stringify(receivedWrites, null, 2))
+
+  // ── T3 稳定性泡水 90s:点数持续增长、节点在线 ──
+  const qA = await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=10`, undefined, H())
+  const nA = (qA.data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)
+  let staleErr = 0
+  for (let i = 0; i < 9; i++) {
+    await sleep(10_000)
+    const d = await api('GET', '/api/workshop/daq', undefined, H())
+    const node = (d.data?.nodes ?? []).find(x => x.id === pvNode)
+    if (node && (node.state === 'offline' || node.lastError)) staleErr++
+    log(`泡水 ${((i + 1) * 10)}s:已入库点数 ${((await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=10`, undefined, H())).data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)}`)
+  }
+  const qB = await api('GET', `/api/workshop/daq/query?node_ids=${pvNode}&last_minutes=10`, undefined, H())
+  const nB = (qB.data?.series ?? []).reduce((n, s) => n + (s.points?.length ?? 0), 0)
+  const valsB = (qB.data?.series ?? []).flatMap(s => (s.points ?? []).map(pointOf)).filter(Number.isFinite)
+  ok('T3a', `90s 泡水:点数持续增长(${nA} → ${nB})`, nB > nA + 20, `delta=${nB - nA}`)
+  ok('T3b', '泡水期间节点无 offline/无 lastError(陈值看门狗未误报)', staleErr === 0, `offline polling hits=${staleErr}`)
+  ok('T3c', '长程数值仍为温度序列且严格递增(缓升序列无乱序/无冻值)', valsB.length > 10 && valsB.every((v, i) => i === 0 || v >= valsB[i - 1]), `head=${valsB.slice(0, 5)} tail=${valsB.slice(-5)}`)
+
+  // 归档
+  writeFileSync(join(EVID, `summary-${TAG}.json`), JSON.stringify({ tag: TAG, topics: { temp: T_TEMP, setpoint: T_SET, state: T_STATE }, line, spNode, pvNode, recipe, receivedWrites, daqPoints: { atT1: pts1, atT3: nB }, results }, null, 2))
+  const pass = results.every(r => r.pass)
+  console.log(`\n===== MQTT 全链实测:${results.filter(r => r.pass).length}/${results.length} PASS =====`)
+  process.exitCode = pass ? 0 : 1
+}
+catch (err) {
+  log(`FATAL ${err instanceof Error ? err.message : String(err)}`)
+  process.exitCode = 1
+}
+finally {
+  clearInterval(pubTimer)
+  try { gateway.end(true) } catch { /* ignore */ }
+  try { child.kill() } catch { /* ignore */ }
+}

package/scripts/_audit/prompt-injection-probe.mts

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+/**
+ * 提示词注入取证探针(2026-10-28 多专家整改验收用)。
+ *
+ * 以同一 AW_HOME 只读方式装配"运行时提示词"里的工业上下文段(工业语义卡 × 执行模式 ×
+ * 绑定节点),用于证明 worker 绑定节点后**运行时真的把节点卡注入提示词** —— 该函数
+ * (buildIndustrialContext / nodeSemanticCards)就是 prompt-builder 在每回合拼 system
+ * prompt 时调用的同一个。
+ *
+ * 频道执行模式在运行期由 manager 提供(channelIdOfAgent);探针以 channel_agents 表
+ * 复刻同一查表(不伪造任何业务状态)。
+ *
+ * 用法:node --import tsx scripts/_audit/prompt-injection-probe.mts <agentId>
+ */
+import { join } from 'node:path'
+import { DatabaseSync } from 'node:sqlite'
+
+process.env.AW_MODE = process.env.AW_MODE ?? 'home'
+process.env.AW_SKIP_DATA_LOCK = '1'
+
+const agentId = String(process.argv[2] ?? '').trim()
+if (!agentId) {
+  console.error('usage: prompt-injection-probe.mts <agentId>')
+  process.exit(2)
+}
+
+const home = String(process.env.AW_HOME ?? '')
+let channelId: string | null = null
+let profileMode = ''
+try {
+  // 只读连接(不跑迁移、不抢写锁):频道执行模式来自 aml_channel_profiles,
+  // 与运行时 executionModeOfChannel 同一张表/同一归一语义
+  const db = new DatabaseSync(join(home, 'data', 'workshop.sqlite'), { readOnly: true })
+  try {
+    const row = db.prepare('SELECT channel_id FROM channel_agents WHERE id = ?').get(agentId) as { channel_id?: string } | undefined
+    channelId = row?.channel_id ?? null
+    const p = channelId
+      ? db.prepare('SELECT execution_mode FROM aml_channel_profiles WHERE channel_id = ?').get(channelId) as { execution_mode?: string } | undefined
+      : undefined
+    profileMode = String(p?.execution_mode ?? '')
+    const { configureAmlRuntime } = await import('../../server/services/workshop/aml/runtime')
+    configureAmlRuntime(db as never)
+  }
+  catch { /* 读失败 → 模式卡退化为 auto(与运行时异常同语义) */ }
+}
+catch { /* DB 不可读 → 模式卡退化为 auto(与运行时缺 manager 时同语义) */ }
+
+// 运行期由 manager 提供同一查表(探针内等价桩)
+;(globalThis as Record<string, unknown>).__workshopManager = {
+  channelIdOfAgent: (id: string) => (id === agentId ? channelId : null),
+}
+
+const { buildIndustrialContext, nodeSemanticCards } = await import('../../server/services/workshop/agents/industrial-context')
+const { getAgentNodeBindingRepo } = await import('../../server/services/workshop/agents/node-bindings.repo')
+
+const bindings = getAgentNodeBindingRepo().byAgent(agentId).map(b => ({ nodeId: b.nodeId, kind: b.kind, mode: b.mode }))
+let text = ''
+let cards = ''
+let stale = -1
+let error = ''
+try {
+  text = buildIndustrialContext(agentId)
+}
+catch (err) {
+  error += `buildIndustrialContext: ${err instanceof Error ? err.message : String(err)}; `
+}
+try {
+  const c = nodeSemanticCards(agentId)
+  cards = c.text
+  stale = c.stale
+}
+catch (err) {
+  error += `nodeSemanticCards: ${err instanceof Error ? err.message : String(err)}`
+}
+
+process.stdout.write(JSON.stringify({ agentId, channelId, profileMode, bindings, text, cards, stale, error }))

package/scripts/api-live-e2e.mjs

@@ -202,11 +202,17 @@ async function main() {
 
   const members = await api('GET', `/api/workshop/channels/${ids.channel}/agents`)
   check('GET /channels/:id/agents 成员列表', members.code === 0 && members.data.length === 3, `members=${members.data?.length}`)
+  // 2026-10-28 安全修复:列表不再回显 agent token(防 worker 冒充 lead);
+  // 套件改经"轮换端点一次性取全量 token"(owner/admin 可调,响应只此一次)
   const leadInfo = members.data.find(a => a.id === ids.lead)
   const workerInfo = members.data.find(a => a.id === ids.worker)
-  ids.leadToken = leadInfo?.token
-  ids.workerToken = workerInfo?.token
-  check('成员带实例 token(auth 基础)', Boolean(ids.leadToken && ids.workerToken))
+  check('成员列表不回显 token(防冒充)', Boolean(leadInfo) && !('token' in leadInfo) && !('token' in workerInfo))
+  const rotLead = await api('POST', `/api/workshop/channels/${ids.channel}/agents/${ids.lead}/rotate-token`)
+  const rotWorker = await api('POST', `/api/workshop/channels/${ids.channel}/agents/${ids.worker}/rotate-token`)
+  ids.leadToken = rotLead?.data?.token
+  ids.workerToken = rotWorker?.data?.token
+  check('成员实例 token 经轮换端点一次性获取(auth 基础)', Boolean(ids.leadToken && ids.workerToken),
+    `leadRot=${rotLead.status} workerRot=${rotWorker.status}`)
 
   const dupLead = await api('POST', `/api/workshop/channels/${ids.channel}/agents`, { body: { agentId: tpl2.data.id, role: 'lead' } })
   check('第二个 lead → 409 LEAD_EXISTS', dupLead.status === 409 || dupLead.code === 'LEAD_EXISTS', `code=${dupLead.code}`)