agentworkshop 0.8.6 → 0.8.8

package/scripts/e2e-security-b2b5.mjs

@@ -0,0 +1,280 @@
+#!/usr/bin/env node
+/**
+ * 安全加固批 HTTP 真机验收(B2–B5 可观测面,2026-10-30)
+ *
+ * 起一个隔离实例(fresh AW_HOME + 限流关闭以免掩盖授权断言),用真实 HTTP 验证:
+ *   M1 P1-3 设置面凭据掩码:editor/admin GET 均得 ***;回传 *** 不覆盖真实值
+ *   M2 P1-8 产线授权:零授权用户写分析报告/运行日志 → 403;admin 全局台账 → 200
+ *   M3 P2-5 DAQ 模板属主:他人改删 → 403;属主 → 200
+ *   M4 P2-6 设备孪生/资产:user 角色操控 → 403;admin → 200
+ *   M5 P2-7 账号加固:7 位密码拒绝;连错 5 次后正确密码仍可登录(账号不被锁死)
+ *   M6 P3-8 A2A AgentCard:关闭公开面后未认证 → 401,恢复后 → 200
+ *
+ * 运行:node scripts/e2e-security-b2b5.mjs
+ * 证据:docs/audit/evidence/2026-10-30-security-b2b5/report.json
+ */
+import { execFileSync, spawn } from 'node:child_process'
+import { existsSync, mkdirSync, openSync, readFileSync, rmSync, writeFileSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const HOME = process.env.AW_B25_HOME ?? 'D:/tmp/aw-security-b2b5-20261030'
+const EVIDENCE_DIR = join(REPO, 'docs', 'audit', 'evidence', '2026-10-30-security-b2b5')
+const TAG = Date.now().toString(36)
+const results = []
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+function check(id, name, cond, detail = '') {
+  results.push({ id, name, pass: Boolean(cond), detail: String(detail).slice(0, 1200) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${cond ? '' : ` — ${String(detail).slice(0, 500)}`}`)
+  return Boolean(cond)
+}
+
+function killTree(pid) {
+  try {
+    spawn('taskkill', ['/PID', String(pid), '/T', '/F'], { stdio: 'ignore', windowsHide: true })
+  }
+  catch { /* 已退出 */ }
+}
+
+async function pickPort() {
+  for (let i = 0; i < 12; i++) {
+    const p = 34000 + Math.floor(Math.random() * 5900)
+    try {
+      await fetch(`http://127.0.0.1:${p}/api/health`, { signal: AbortSignal.timeout(600) })
+      continue
+    }
+    catch { /* 可能空闲 */ }
+    let listening = false
+    try {
+      const out = execFileSync('cmd.exe', ['/c', `netstat -ano | findstr :${p} | findstr LISTENING`]).toString()
+      listening = /\s\d+\s*$/.test(out)
+    }
+    catch { /* 无监听 */ }
+    if (!listening) return p
+    await sleep(200)
+  }
+  throw new Error('无空闲端口')
+}
+
+const PORT = Number(process.env.AW_B25_PORT ?? await pickPort())
+const BASE = `http://127.0.0.1:${PORT}`
+process.env.NO_PROXY = '127.0.0.1,localhost'
+
+async function api(method, path, body, token, headers = {}) {
+  const res = await fetch(BASE + path, {
+    method,
+    headers: {
+      ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
+      ...(token ? { authorization: `Bearer ${token}` } : {}),
+      ...headers,
+    },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(120_000),
+  })
+  let json = null
+  try {
+    json = await res.json()
+  }
+  catch { /* 非 JSON */ }
+  return { status: res.status, ...(json ?? {}) }
+}
+
+async function main() {
+  if (!/aw-security-b2b5/.test(HOME)) throw new Error(`拒绝清理非验收目录:${HOME}`)
+  if (existsSync(join(HOME, 'server.pid'))) {
+    const old = Number(readFileSync(join(HOME, 'server.pid'), 'utf8').trim())
+    if (Number.isInteger(old) && old > 0) killTree(old)
+    await sleep(800)
+  }
+  rmSync(HOME, { recursive: true, force: true })
+  mkdirSync(HOME, { recursive: true })
+  mkdirSync(EVIDENCE_DIR, { recursive: true })
+
+  const logFd = openSync(join(HOME, 'server.log'), 'a')
+  const child = spawn(process.execPath, [join(REPO, 'bin', 'aw.mjs'), 'dev', '--port', String(PORT)], {
+    cwd: REPO,
+    env: {
+      ...process.env,
+      AW_MODE: 'home',
+      AW_HOME: HOME,
+      // 限流关掉:避免 429 掩盖授权断言(限流本身由 B0 脚本专门验证)
+      AW_RATE_LIMIT_OFF: '1',
+      NUXT_SESSION_PASSWORD: `B25#${TAG}-session`,
+      NO_PROXY: '127.0.0.1,localhost',
+    },
+    stdio: ['ignore', logFd, logFd],
+    windowsHide: true,
+  })
+  writeFileSync(join(HOME, 'server.pid'), String(child.pid))
+  console.log(`\n=== boot ${BASE} ===`)
+
+  let ready = false
+  for (let i = 0; i < 150; i++) {
+    await sleep(1500)
+    try {
+      const r = await fetch(`${BASE}/api/health`, { signal: AbortSignal.timeout(2500) })
+      const j = await r.json()
+      if (j?.data?.workshop === 'ready') {
+        ready = true
+        break
+      }
+    }
+    catch { /* 未就绪 */ }
+  }
+  check('BOOT', '隔离实例启动', ready, `port=${PORT}`)
+  if (!ready) throw new Error(`实例未就绪:${join(HOME, 'server.log')}`)
+
+  // ── 账号 ──
+  const adminEmail = `b25-admin-${TAG}@awshop.local`
+  const reg = await api('POST', '/api/users/register', { name: `B25 管理员-${TAG}`, email: adminEmail, password: 'B25Admin#2026' })
+  const admin = reg?.data?.token
+  check('S0.1', '首注册 = admin', Boolean(admin), `status=${reg.status}`)
+
+  const editorEmail = `b25-editor-${TAG}@awshop.local`
+  await api('POST', '/api/users', { name: `B25 编辑-${TAG}`, email: editorEmail, password: 'B25Editor#2026', role: 'editor' }, admin)
+  const editorToken = (await api('POST', '/api/users/login', { email: editorEmail, password: 'B25Editor#2026' }))?.data?.token
+  check('S0.2', 'editor 登录', Boolean(editorToken), '')
+
+  const userEmail = `b25-user-${TAG}@awshop.local`
+  await api('POST', '/api/users', { name: `B25 用户-${TAG}`, email: userEmail, password: 'B25Plain#2026', role: 'user' }, admin)
+  const userToken = (await api('POST', '/api/users/login', { email: userEmail, password: 'B25Plain#2026' }))?.data?.token
+  check('S0.3', 'user 登录', Boolean(userToken), '')
+
+  // ── M1 设置面掩码(P1-3)──
+  const settingsAsEditor = await api('GET', '/api/system/settings', undefined, editorToken)
+  const eff = settingsAsEditor?.data?.effective ?? {}
+  const secretKeys = ['daq.mqtt.password', 'daq.objectstore.secretKey', 'daq.objectstore.accessKey']
+  const maskedAll = secretKeys.every(k => eff[k] === undefined || eff[k] === '' || eff[k] === '***')
+  check('M1.1', 'editor GET settings:凭据键一律掩码/空(无明文)',
+    settingsAsEditor.status === 200 && maskedAll,
+    secretKeys.map(k => `${k}=${String(eff[k]).slice(0, 8)}`).join(' '))
+  const settingsAsAdmin = await api('GET', '/api/system/settings', undefined, admin)
+  const effAdmin = settingsAsAdmin?.data?.effective ?? {}
+  check('M1.2', 'admin GET settings 同样掩码(明文只留服务端)',
+    secretKeys.every(k => effAdmin[k] === undefined || effAdmin[k] === '' || effAdmin[k] === '***'),
+    secretKeys.map(k => `${k}=${String(effAdmin[k]).slice(0, 8)}`).join(' '))
+  // 掩码回传不覆盖:把 *** 原样写回 → 应与"未改变"等价(changed 不含该键)
+  const patchEcho = await api('PATCH', '/api/system/settings', { override: { 'daq.mqtt.password': '***' } }, admin)
+  check('M1.3', '回传 *** 不覆盖真实凭据(不产生变更)',
+    patchEcho.status === 200 && !(patchEcho?.data?.changed ?? []).includes('daq.mqtt.password'),
+    `changed=${JSON.stringify(patchEcho?.data?.changed ?? [])}`)
+
+  // ── M2 产线授权(P1-8)──
+  const line = await api('POST', '/api/workshop/dcw/lines', { name: `B25 线-${TAG}`, color: '#336699' }, admin)
+  const lineId = line?.data?.line?.id ?? line?.data?.id
+  check('M2.0', '建产线(授权断言前置)', Boolean(lineId), `status=${line.status}`)
+  if (lineId) {
+    const noGrant = await api('POST', '/api/workshop/analysis', { line_id: lineId, title: '零授权写报告' }, userToken)
+    check('M2.1', '零授权用户写分析报告 → 403', noGrant.status === 403, `status=${noGrant.status} code=${noGrant.code}`)
+    const noGrantLog = await api('POST', '/api/workshop/ops-logs', { summary: '零授权写日志', lineId }, userToken)
+    check('M2.2', '零授权用户写产线日志 → 403', noGrantLog.status === 403, `status=${noGrantLog.status}`)
+    const globalAsUser = await api('POST', '/api/workshop/ops-logs', { summary: '全局台账尝试' }, userToken)
+    check('M2.3', '非 admin 写全局台账(空 lineId) → 403', globalAsUser.status === 403, `status=${globalAsUser.status}`)
+    const globalAsAdmin = await api('POST', '/api/workshop/ops-logs', { summary: '管理员全局台账' }, admin)
+    check('M2.4', 'admin 写全局台账 → 200', globalAsAdmin.status === 200, `status=${globalAsAdmin.status} code=${globalAsAdmin.code}`)
+    const reportAsAdmin = await api('POST', '/api/workshop/analysis', { line_id: lineId, title: '管理分析报告', report: 'ok' }, admin)
+    check('M2.5', 'admin 写该线分析报告 → 200', reportAsAdmin.status === 200, `status=${reportAsAdmin.status}`)
+  }
+
+  // ── M3 DAQ 模板属主(P2-5)──
+  const mkTpl = (who, token) => api('POST', '/api/workshop/daq/templates', {
+    name: `B25 模板 ${who}-${TAG}`,
+    code: `B25${who}`.slice(0, 8),
+    ch: '测试通道',
+    unit: '%',
+    base: 10,
+    amp: 1,
+    min: 0,
+    max: 100,
+    decimals: 1,
+    icon: 'gauge',
+  }, token)
+  const tplOwner = await mkTpl('A', admin)
+  const tplKey = tplOwner?.data?.template?.key
+  check('M3.0', 'admin 建自定义模板', Boolean(tplKey), `status=${tplOwner.status} ${JSON.stringify(tplOwner).slice(0, 160)}`)
+  if (tplKey) {
+    const foreign = await api('PATCH', `/api/workshop/daq/templates/${encodeURIComponent(tplKey)}`, { unit: 'kPa' }, editorToken)
+    check('M3.1', '他人改模板 → 403', foreign.status === 403, `status=${foreign.status} code=${foreign.code}`)
+    const foreignDel = await api('DELETE', `/api/workshop/daq/templates/${encodeURIComponent(tplKey)}`, undefined, editorToken)
+    check('M3.2', '他人删模板 → 403', foreignDel.status === 403, `status=${foreignDel.status}`)
+    const own = await api('PATCH', `/api/workshop/daq/templates/${encodeURIComponent(tplKey)}`, { unit: 'kPa' }, admin)
+    check('M3.3', '属主改模板 → 200', own.status === 200, `status=${own.status}`)
+    await api('DELETE', `/api/workshop/daq/templates/${encodeURIComponent(tplKey)}`, undefined, admin)
+  }
+
+  // ── M4 设备孪生/资产(P2-6)──
+  const twin = await api('POST', '/api/workshop/device-twins', { name: `B25 设备-${TAG}`, kind: 'device', workspaceId: '' }, admin)
+  const twinId = twin?.data?.twin?.id ?? twin?.data?.id
+  if (twinId) {
+    const denied = await api('POST', `/api/workshop/device-twins/${twinId}/control`, { command: ['power_on', 'power_off', 'stop'].find(c => (twin?.data?.twin?.controls ?? []).includes(c)) ?? 'power_on' }, userToken)
+    check('M4.1', 'user 角色操控设备孪生 → 403', denied.status === 403, `status=${denied.status} code=${denied.code}`)
+    const deniedDel = await api('DELETE', `/api/workshop/device-twins/${twinId}`, undefined, userToken)
+    check('M4.2', 'user 角色删设备孪生 → 403', deniedDel.status === 403, `status=${deniedDel.status}`)
+    const controls = twin?.data?.twin?.controls ?? []
+    // 选一个无需 args 的指令(未知指令会 400,与授权断言无关)
+    const cmd = ['power_on', 'power_off', 'stop'].find(c => controls.includes(c)) ?? controls[0] ?? 'power_on'
+    const allowed = await api('POST', `/api/workshop/device-twins/${twinId}/control`, { command: cmd }, editorToken)
+    check('M4.3', 'editor 操控设备孪生 → 200', allowed.status === 200, `status=${allowed.status}`)
+    await api('DELETE', `/api/workshop/device-twins/${twinId}`, undefined, admin)
+  }
+  else {
+    check('M4.0', '建设备孪生(前置)', false, `status=${twin.status} ${JSON.stringify(twin).slice(0, 200)}`)
+  }
+
+  // ── M5 账号加固(P2-7)──
+  // 自助注册默认关闭(P3-10),故用 admin 建号路径验证密码策略(同 schema)
+  const weak = await api('POST', '/api/users', { name: `B25 弱口令-${TAG}`, email: `b25-weak-${TAG}@awshop.local`, password: 'Abc1234', role: 'user' }, admin)
+  check('M5.1', '7 位密码建号 → 400/422 拒绝', weak.status === 400 || weak.status === 422, `status=${weak.status} code=${weak.code}`)
+
+  const lockEmail = `b25-lock-${TAG}@awshop.local`
+  await api('POST', '/api/users', { name: `B25 锁定-${TAG}`, email: lockEmail, password: 'B25Lock#2026', role: 'user' }, admin)
+  for (let i = 0; i < 5; i++) {
+    await api('POST', '/api/users/login', { email: lockEmail, password: `Wrong#2026${i}` }, undefined, { 'x-forwarded-for': `203.0.113.${i + 10}` })
+  }
+  const correctAfterLock = await api('POST', '/api/users/login', { email: lockEmail, password: 'B25Lock#2026' }, undefined, { 'x-forwarded-for': '198.51.100.77' })
+  check('M5.2', '连错 5 次后正确密码仍可登录(账号不被第三方锁死)',
+    correctAfterLock.status === 200 && Boolean(correctAfterLock?.data?.token),
+    `status=${correctAfterLock.status} code=${correctAfterLock.code}`)
+
+  // ── M6 A2A AgentCard 公开面(P3-8)──
+  const ch = await api('POST', '/api/workshop/channels', { name: `B25 频道-${TAG}`, leadAgent: { name: `b25-lead-${TAG}`, harness: 'mock' } }, admin)
+  const channelId = ch?.data?.channelId
+  const agentId = ch?.data?.leadAgentId ?? (ch?.data?.agents ?? []).find(a => a.role === 'lead')?.id
+  if (agentId) {
+    const pub = await api('GET', `/api/workshop/a2a/${encodeURIComponent(agentId)}/card`)
+    check('M6.1', '默认 AgentCard 公开(向后兼容)', pub.status === 200, `status=${pub.status}`)
+    const setPrivate = await api('PATCH', '/api/system/settings', { override: { 'security.a2aCardPublic': false } }, admin)
+    check('M6.2', '关闭公开面设置生效', setPrivate.status === 200, `status=${setPrivate.status}`)
+    const closed = await api('GET', `/api/workshop/a2a/${encodeURIComponent(agentId)}/card`)
+    check('M6.3', '关闭后未认证 → 401', closed.status === 401, `status=${closed.status}`)
+    const withToken = await api('GET', `/api/workshop/a2a/${encodeURIComponent(agentId)}/card`, undefined, admin)
+    check('M6.4', '关闭后带有效 token → 200', withToken.status === 200, `status=${withToken.status}`)
+    await api('PATCH', '/api/system/settings', { override: { 'security.a2aCardPublic': null } }, admin)
+  }
+  else {
+    check('M6.0', '建频道(前置)', false, `status=${ch.status} ${JSON.stringify(ch).slice(0, 200)}`)
+  }
+
+  const passed = results.filter(r => r.pass).length
+  writeFileSync(join(EVIDENCE_DIR, 'report.json'), `${JSON.stringify({ at: new Date().toISOString(), port: PORT, home: HOME, total: results.length, passed, results }, null, 2)}\n`)
+  writeFileSync(join(EVIDENCE_DIR, 'summary.md'), [
+    '# 安全加固批 B2–B5 真机验收',
+    '',
+    `- 时间:${new Date().toISOString()}`,
+    `- 结果:${passed}/${results.length}`,
+    '',
+    ...results.map(r => `- ${r.pass ? 'PASS' : 'FAIL'} \`${r.id}\` ${r.name}${r.pass ? '' : ` — ${r.detail}`}`),
+    '',
+  ].join('\n'))
+  console.log(`\n=== ${passed}/${results.length} ===`)
+  killTree(child.pid)
+  void channelId
+  process.exit(passed === results.length ? 0 : 1)
+}
+
+main().catch((err) => {
+  console.error(err)
+  process.exit(1)
+})

package/scripts/live-demo-seed.mjs

@@ -0,0 +1,157 @@
+#!/usr/bin/env node
+/**
+ * 实机演示种子脚本(2026-10-28):为浏览器实机操作演示准备一套最小可作业场景。
+ *
+ * 前置:隔离实例已运行(AW_DEMO_BASE,生产构建 .output);本脚本只做供给,不起停实例。
+ * 动作:admin 注册 → 建线(模拟)/DAQ/DCW/参数映射/产品/配方 → 开跑 → 数采网关启动
+ *      → 建 AgentChannel(omp lead)+ worker(omp)→ worker 绑 DAQ(auto)/DCW(manual)
+ * 输出:.omc/live-demo-state.json(演示后续步骤的 id/token 台账;不入库,.omc 已 ignore)
+ */
+import { writeFileSync } from 'node:fs'
+
+const BASE = process.env.AW_DEMO_BASE ?? 'http://127.0.0.1:3415'
+const STATE = process.env.AW_DEMO_STATE ?? '.omc/live-demo-state.json'
+
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+let admin = ''
+async function api(method, path, body, token = admin, extraHeaders = {}, timeoutMs = 120_000) {
+  const res = await fetch(BASE + path, {
+    method,
+    headers: {
+      ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
+      ...(token ? { authorization: `Bearer ${token}` } : {}),
+      ...extraHeaders,
+    },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs),
+  })
+  let json = null
+  try {
+    json = await res.json()
+  }
+  catch { /* 非 JSON */ }
+  return { status: res.status, ...json }
+}
+
+async function health() {
+  try {
+    const r = await fetch(`${BASE}/api/health`, { signal: AbortSignal.timeout(2500) })
+    return r.ok ? (await r.json())?.data ?? null : null
+  }
+  catch {
+    return null
+  }
+}
+
+const h = await health()
+if (!h?.workshop || h.workshop !== 'ready') {
+  console.error(`实例未就绪:${BASE} → ${JSON.stringify(h)}`)
+  process.exit(1)
+}
+console.log(`实例就绪 version=${h.version}`)
+
+const email = `live-demo-${Date.now()}@awshop.local`
+const password = 'Demo#2026'
+const reg = await api('POST', '/api/users/register', { name: '实机演示管理员', email, password })
+admin = reg?.data?.token
+if (!admin) {
+  console.error(`admin 注册失败:${JSON.stringify(reg).slice(0, 300)}`)
+  process.exit(1)
+}
+console.log('admin 注册/登录成功')
+
+// ── 产线 + 设备 + 配方 ──
+const line = (await api('POST', '/api/workshop/dcw/lines', {
+  name: '实机演示-产线', simulated: true, controlMode: 'auto',
+  description: '浏览器实机操作演示线:腔体温度监测 + 温度设定点位(模拟设备)',
+})).data.line
+
+const daqTemp = (await api('POST', '/api/workshop/daq', {
+  name: '腔体温度', templateRef: 'temp-tc', driver: 'mock', lineId: line.id,
+  unit: 'C', decimals: 2, min: 0, max: 100, intervalMs: 1000, publishIntervalMs: 0, enabled: true,
+  semantics: '腔体温度测点;正常工艺窗口 50~70C',
+})).data.node
+
+const dcwSp = (await api('POST', '/api/workshop/dcw', {
+  name: '温度设定', templateRef: 'temp-sp', driver: 'mock', lineId: line.id,
+  unit: 'C', decimals: 2, min: 0, max: 100, enabled: true,
+  holdIntervalMs: 0, readIntervalMs: 0, writeLockSeconds: 0, stepLimit: 5,
+  driverConfig: { key: 'live-demo-temp-sp' },
+  semantics: '腔体温度设定点;单步 <=4C,窗口 50~70C',
+})).data.node
+
+const params = (await api('GET', `/api/workshop/dcw/params?lineId=${line.id}`)).data.params ?? []
+const pm = params.find(p => p.nodeId === dcwSp.id)
+if (!pm) throw new Error(`参数映射不存在: node=${dcwSp.id}`)
+await api('PATCH', `/api/workshop/dcw/params/${pm.id}`, { key: 'temp_sp', desc: '腔体温度设定值(C)', min: 0, max: 100 })
+
+const product = (await api('POST', '/api/workshop/dcw/products', {
+  name: '实机演示产品', lineId: line.id, description: '温度窗口 50~70C',
+  paramLimits: { temp_sp: { min: 50, max: 70 } },
+})).data.product
+
+const recipe = (await api('POST', '/api/workshop/dcw/recipes', {
+  name: '实机演示配方', productId: product.id, description: '温度设定 50~70C,单步 4C',
+  opIntervalMs: 0,
+  params: [{ nodeId: dcwSp.id, value: 60, min: 50, max: 70, stepLimit: 4 }],
+  daqWindows: [{ nodeId: daqTemp.id, min: 50, max: 70 }],
+})).data.recipe
+
+const start = await api('POST', `/api/workshop/dcw/lines/${line.id}/start`, { recipeId: recipe.id })
+if (start.status !== 200) throw new Error(`开线失败: ${JSON.stringify(start).slice(0, 300)}`)
+const daqStart = await api('POST', '/api/workshop/daq/controller', { action: 'start' })
+if (daqStart.status !== 200) throw new Error(`数采网关启动失败: ${daqStart.status}`)
+console.log(`产线已开跑 line=${line.id} recipe=${recipe.id};数采网关已启动`)
+
+// ── AgentChannel:lead + worker(真实 omp) ──
+const MODEL = { provider: 'lm-studio', model: 'qwen3.5-9b-32k' }
+const ch = (await api('POST', '/api/workshop/channels', {
+  name: '实机演示-频道',
+  lineId: line.id,
+  scenarioPrompt: '实机演示频道:worker 绑定节点后按任务执行;手动模式所有下发需人工批准(在数控节点页批准)。',
+  leadAgent: { name: '实机演示-线长', harness: 'omp', config: { rpcMode: 'rpc', args: ['--no-tools'] } },
+})).data
+const channelId = ch?.channelId
+if (!channelId) throw new Error(`频道创建失败: ${JSON.stringify(ch).slice(0, 300)}`)
+await api('PATCH', `/api/workshop/channels/${channelId}`, { llm: MODEL })
+await api('PATCH', `/api/workshop/channels/${channelId}/execution-mode`, { mode: 'manual' })
+await api('PUT', `/api/workshop/channels/${channelId}/tools`, {
+  mode: 'selected',
+  tools: ['my_industrial_nodes', 'daq_query', 'recipe_trial', 'recipe_rollback', 'complete_task', 'report_progress']
+    .map(n => ({ name: n, enabled: true })),
+})
+
+const workerRes = await api('POST', `/api/workshop/channels/${channelId}/agents`, {
+  name: '实机演示-作业员', harness: 'omp', role: 'worker',
+  config: { rpcMode: 'rpc', args: ['--no-tools'] },
+})
+const worker = workerRes?.data?.agent ?? workerRes?.data
+if (!worker?.id) throw new Error(`worker 创建失败: ${JSON.stringify(workerRes).slice(0, 300)}`)
+
+async function bind(agentId, nodeId, kind, mode) {
+  const created = await api('POST', '/api/workshop/agent-tools/bindings', { agentId, nodeId, kind, mode })
+  const b = created?.data?.binding
+  if (!b) throw new Error(`绑定失败(${kind}): ${JSON.stringify(created).slice(0, 300)}`)
+  if (mode === 'auto' && b.mode !== 'auto') {
+    const patched = await api('PATCH', `/api/workshop/agent-tools/bindings/${b.id}`, { mode: 'auto', confirm: true })
+    return patched?.data?.binding ?? b
+  }
+  return b
+}
+const bDaq = await bind(worker.id, daqTemp.id, 'daq', 'auto')
+const bDcw = await bind(worker.id, dcwSp.id, 'dcw', 'manual')
+console.log(`worker=${worker.id} 绑定完成 daq=${bDaq.mode} dcw=${bDcw.mode}`)
+
+// 等首批样本落库(演示页面打开即有实时值)
+await sleep(12_000)
+
+writeFileSync(STATE, `${JSON.stringify({
+  at: new Date().toISOString(),
+  base: BASE, version: h.version,
+  admin: { email, password, token: admin },
+  line: line.id, daq: daqTemp.id, dcw: dcwSp.id, recipe: recipe.id, product: product.id,
+  channel: channelId, worker: worker.id,
+  bindings: { daq: bDaq.id, dcw: bDcw.id },
+}, null, 2)}\n`)
+console.log(`种子完成 → ${STATE}`)

package/scripts/onboarding/preflight.mjs

@@ -0,0 +1,231 @@
+#!/usr/bin/env node
+/**
+ * scripts/onboarding/preflight.mjs —— 协议接入前的生产安全预检(只读)。
+ *
+ * 目的:在“按文档建节点 / 模拟通信 / 插件热加载”之前,先回答三个问题:
+ *   1) 当前是否已有实例在跑?在哪个 home / 端口 / PID?
+ *   2) 这个实例能不能被当成可丢弃的测试实例?
+ *   3) 如果要启动影子实例,哪些端口/home 已经被占用?
+ *
+ * 安全语义:
+ *   - 只读:读锁文件、探 PID、探 TCP 端口;--probe 时才发一次 GET /api/health。
+ *   - 绝不停止、重启、删除、改写任何进程/锁/数据。
+ *   - 默认把“已运行实例”一律按生产对待(treatAsProduction=true);
+ *     只有显式 --test-instance 才允许把它标记为可丢弃测试实例。
+ *
+ * 用法:
+ *   node scripts/onboarding/preflight.mjs [--json] [--port 3300] [--home <dir>]
+ *     [--test-instance] [--probe] [--require-idle]
+ *
+ * 退出码:0=信息输出;2=--require-idle 且发现运行中实例。
+ */
+import { existsSync, readFileSync } from 'node:fs'
+import { createConnection } from 'node:net'
+import { homedir } from 'node:os'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..')
+const args = process.argv.slice(2)
+const flag = name => args.includes(`--${name}`)
+const valueOf = (name) => {
+  const i = args.indexOf(`--${name}`)
+  return i >= 0 ? args[i + 1] : undefined
+}
+const json = flag('json')
+const testInstance = flag('test-instance')
+const probe = flag('probe')
+const requireIdle = flag('require-idle')
+
+const homes = new Set()
+if (process.env.AW_HOME) homes.add(resolve(process.env.AW_HOME))
+const argHome = valueOf('home')
+if (argHome) homes.add(resolve(argHome))
+homes.add(resolve(REPO, '.AgentWorkShop'))
+homes.add(join(homedir(), '.AgentWorkShop'))
+// 直接 `node .output/server/index.mjs` 的 data.lock 落在 <cwd>/.runtime;补扫包根与当前 cwd
+homes.add(resolve(REPO))
+homes.add(resolve(process.cwd()))
+
+const ports = new Set([3300, 3001])
+const argPort = Number(valueOf('port'))
+if (Number.isInteger(argPort) && argPort > 0) ports.add(argPort)
+
+function readJsonFile(path) {
+  try {
+    return JSON.parse(readFileSync(path, 'utf8'))
+  }
+  catch {
+    return null
+  }
+}
+
+function pidAlive(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return false
+  try {
+    process.kill(pid, 0)
+    return true
+  }
+  catch (err) {
+    return err?.code === 'EPERM'
+  }
+}
+
+function portListening(port, host = '127.0.0.1', timeoutMs = 600) {
+  return new Promise((resolvePromise) => {
+    const socket = createConnection({ host, port })
+    const done = (v) => {
+      socket.removeAllListeners()
+      socket.destroy()
+      resolvePromise(v)
+    }
+    socket.setTimeout(timeoutMs, () => done(false))
+    socket.once('connect', () => done(true))
+    socket.once('error', () => done(false))
+  })
+}
+
+async function probeHealth(port) {
+  try {
+    // 仅本机诊断:只允许 http,不跟随重定向,不携带凭据。
+    const res = await fetch(`http://127.0.0.1:${port}/api/health`, {
+      redirect: 'manual',
+      signal: AbortSignal.timeout(2500),
+    })
+    const body = await res.json().catch(() => null)
+    return res.ok ? body?.data ?? body : { status: res.status }
+  }
+  catch (err) {
+    return { error: err?.message ?? String(err) }
+  }
+}
+
+const instances = []
+const seen = new Set()
+
+for (const home of homes) {
+  const runtime = join(home, '.runtime')
+  const awLockPath = join(runtime, 'aw.lock')
+  const dataLockPath = join(runtime, 'data.lock')
+  const awLock = readJsonFile(awLockPath)
+  const dataLock = readJsonFile(dataLockPath)
+  if (!awLock && !dataLock) continue
+
+  const pid = Number(awLock?.pid ?? dataLock?.pid ?? 0)
+  const port = Number(awLock?.port ?? 0)
+  if (port > 0) ports.add(port)
+  const alive = pidAlive(pid)
+  const listening = port > 0 ? await portListening(port) : false
+  const key = `${home}|${pid}|${port}`
+  if (seen.has(key)) continue
+  seen.add(key)
+  instances.push({
+    home,
+    mode: awLock?.mode ?? null,
+    port: port || null,
+    pid: pid || null,
+    startedAt: awLock?.startedAt ?? dataLock?.at ?? null,
+    awLock: existsSync(awLockPath) ? awLock : null,
+    dataLock: existsSync(dataLockPath) ? dataLock : null,
+    pidAlive: alive,
+    portListening: listening,
+    stale: Boolean((pid && !alive) || (port && !listening)),
+    note: !alive && listening
+      ? '锁指向的 PID 已退出,但端口仍在监听:实际写者未知,不要据此杀任何进程;先查端口对应的进程'
+      : (!listening && pid
+          ? '锁存在但端口未监听:可能是崩溃残留;让应用启动时自行接管,不要手动删锁'
+          : undefined),
+  })
+}
+
+// 端口占用但无锁文件的实例(例如别的 home / 手工启动)
+for (const port of ports) {
+  if (instances.some(i => i.port === port && i.portListening)) continue
+  const listening = await portListening(port)
+  if (!listening) continue
+  const key = `port|${port}`
+  if (seen.has(key)) continue
+  seen.add(key)
+  instances.push({
+    home: null,
+    mode: null,
+    port,
+    pid: null,
+    startedAt: null,
+    pidAlive: false,
+    portListening: true,
+    stale: false,
+    note: '端口有监听但未找到对应 aw.lock;可能是其它 home 或容器',
+  })
+}
+
+if (probe) {
+  for (const inst of instances) {
+    if (inst.port && inst.portListening) inst.health = await probeHealth(inst.port)
+  }
+}
+
+const running = instances.some(i => i.pidAlive || i.portListening)
+const liveInstances = instances.filter(i => i.pidAlive || i.portListening)
+const treatAsProduction = running && !testInstance
+const safeToStart = !running
+
+const forbiddenActions = treatAsProduction
+  ? [
+      'aw start / node bin/aw.mjs start(会读 aw.lock 并自动停止既有实例,不是“启动失败”)',
+      'aw stop / node bin/aw.mjs stop',
+      'taskkill / Stop-Process / kill / pkill',
+      'docker compose down / docker stop awshop-*',
+      '在同一个 AW_HOME 或同一端口再启动一个实例(直接启动会被 data.lock 拒绝)',
+      '停止/重启 DAQ 采集总控(POST /api/workshop/daq/controller action=stop)',
+      '修改或删除既有的线/节点/配方/频道',
+      '重启进程来让插件生效(builtin 除外,需先验证 helper 缓存)',
+    ]
+  : []
+
+const out = {
+  at: new Date().toISOString(),
+  repo: REPO,
+  homes: [...homes],
+  ports: [...ports],
+  running,
+  liveInstances,
+  instances,
+  treatAsProduction,
+  testInstance,
+  safeToStart,
+  forbiddenActions,
+  next: running
+    ? [
+        '附加到已运行实例:export AW_BASE=http://127.0.0.1:<port>;然后 aw_status / aw_login',
+        '不要运行 aw start(它会自动停止既有实例)',
+        '只创建本次作业资源(PROTO/E2E 前缀 + 专用测试线),不改不删既有资源',
+        '插件优先 project/user 级热加载;需要重启的改动移交维护窗口',
+        '收尾只清理本次创建的 id',
+      ]
+    : [
+        '无运行实例:可用不同端口 + 不同 AW_HOME 启动影子实例',
+        '启动后先 aw_status 确认 mcpEnabled=true,再进入配置作业',
+      ],
+}
+
+if (json) {
+  console.log(JSON.stringify(out, null, 2))
+}
+else {
+  console.log('═══ AgentWorkShop 协议接入预检(只读)═══')
+  console.log(`运行中: ${running ? '是' : '否'}  |  按生产对待: ${treatAsProduction ? '是' : '否'}  |  可安全启动: ${safeToStart ? '是' : '否'}`)
+  for (const inst of instances) {
+    console.log(`- home=${inst.home ?? '(未知)'} mode=${inst.mode ?? '-'} port=${inst.port ?? '-'} pid=${inst.pid ?? '-'} pidAlive=${inst.pidAlive} listening=${inst.portListening}${inst.stale ? ' stale' : ''}`)
+    if (inst.health) console.log(`  health=${JSON.stringify(inst.health).slice(0, 220)}`)
+    if (inst.note) console.log(`  note=${inst.note}`)
+  }
+  if (forbiddenActions.length) {
+    console.log('\n禁止动作:')
+    for (const a of forbiddenActions) console.log(`  ✖ ${a}`)
+  }
+  console.log('\n下一步:')
+  for (const n of out.next) console.log(`  › ${n}`)
+}
+
+if (requireIdle && running) process.exitCode = 2 // 不用 process.exit:避免 --probe 的 undici socket 关闭中触发 libuv 断言