aims-workstation 0.1.6 → 0.1.8

package/server.js

@@ -3,7 +3,7 @@
 // Agent 层基于 @earendil-works/pi-ai（统一 LLM API），前端为 web/ 预构建的 shadcn/ui 应用（web/dist）
 'use strict';
 // TLS 证书校验关闭（用户决策：内网私有部署自签证书常见，能访问优先）
-// 覆盖所有出站 fetch（ARM REST/MCP、LLM、面板代理）。本工具面向内网/本机使用。
+// 覆盖所有出站 fetch（ARM REST、LLM、面板代理）。本工具面向内网/本机使用。
 process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
 const http = require('http');
 const fs = require('fs');
@@ -76,7 +76,7 @@ const PORT = +(process.env.PORT || env.PORT || 5600);
 const HOST = process.env.AIMS_HOST || '0.0.0.0'; // 默认局域网可达（团队共用）；仅本机使用可设 AIMS_HOST=127.0.0.1
 // ── 运行时配置（ARM 源与 LLM 均可私有化部署：在「系统设置」页切换，存 AIMS_HOME/config/platform.json，优先级 运行时 > 环境变量 > .env）──
 const CFG_FILE = path.join(AIMS_HOME, 'config/platform.json');
-const cfg = { arm_api_base: '', arm_mcp_url: '', arm_token: '', llm_base_url: '', llm_api_key: '', llm_model: '', scene_profile: '', access_token: '' };
+const cfg = { arm_api_base: '', arm_token: '', llm_base_url: '', llm_api_key: '', llm_model: '', scene_profile: '', access_token: '' };
 // 守护栏默认策略（可在「系统设置·守护栏」维护，存 platform.json，保存即热生效）：deny=正则源串（命中即永久拒绝，任何级别不豁免）；
 // ro=只读白名单命令名（免确认直行）；sudo_u_l2=true 时 `sudo -u <用户>` 降权形式不再永久拒绝、按写命令走 L2 人工确认（裸 sudo 仍拒绝）
 const GUARD_DEFAULT = {
@@ -92,14 +92,14 @@ function normalizeGuard(g) {
     sudo_u_l2: !!g.sudo_u_l2,
   };
 }
-function loadCfg() { try { Object.assign(cfg, JSON.parse(fs.readFileSync(CFG_FILE, 'utf8'))); } catch { } cfg.guard = normalizeGuard(cfg.guard); }
+function loadCfg() { try { Object.assign(cfg, JSON.parse(fs.readFileSync(CFG_FILE, 'utf8'))); } catch { } delete cfg.arm_mcp_url; /* MCP 通道已退役：剥离旧配置残留 */ cfg.guard = normalizeGuard(cfg.guard); }
 loadCfg();
 const guardNow = () => cfg.guard;
 function saveCfg() { fs.writeFileSync(CFG_FILE, JSON.stringify(cfg, null, 2)); }
-// ARM 站点地址：运行时配置 > ARM_API_BASE(env) > 从 MCP URL 推导 > 公司内网默认（内网可达即开箱可用）；MCP 端点：显式配置 > 跟随站点地址
+// ARM 站点地址：运行时配置 > ARM_API_BASE(env) > 公司内网默认（内网可达即开箱可用）
+//（2026-10-21 全面切换新版 ARM：仅 REST 通道，MCP 通道及旧版兼容回落已退役）
 const ARM_DEFAULT_BASE = 'http://arm.agent-platform.dev.aimstek.cn';
-const armApiBase = () => cfg.arm_api_base || process.env.ARM_API_BASE || env.ARM_API_BASE || (env.ARM_MCP_URL ? String(env.ARM_MCP_URL).replace(/\/api\/mcp$/, '') : ARM_DEFAULT_BASE);
-const armMcpUrl = () => cfg.arm_mcp_url || `${armApiBase()}/api/mcp`;
+const armApiBase = () => cfg.arm_api_base || process.env.ARM_API_BASE || env.ARM_API_BASE || ARM_DEFAULT_BASE;
 const armApiToken = () => cfg.arm_token || env.ARM_API_TOKEN || ARM_PAT;
 // LLM：OpenAI 兼容端点（baseUrl/模型/密钥），缺省公司内网 bifrost 网关（内网可达即可用，无需配置）
 const LLM_DEFAULT_BASE = 'http://bifrost.infra.dev.aimstek.cn/v1';
@@ -186,26 +186,7 @@ const world = { devices: [], alarms: [], kpi: {}, work_orders: [], inspections:
 function audit(entry) { entry.ts = new Date().toISOString(); fs.appendFileSync(AUDIT_LOG, JSON.stringify(entry) + '\n'); }
 function metric(entry) { entry.ts = new Date().toISOString(); fs.appendFileSync(METRICS_LOG, JSON.stringify(entry) + '\n'); }
 
-// ── ARM MCP 客户端（调用链 + 回流链）─────────────────────
-async function mcpCall(name, args, { pat = false, timeout_ms = 20000 } = {}) {
-  const headers = { 'Content-Type': 'application/json', 'Accept': 'application/json, text/event-stream' };
-  if (pat && ARM_PAT) headers['Authorization'] = `Bearer ${ARM_PAT}`;
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), timeout_ms); // 离线快速失败（降级本地库）
-  let data;
-  try {
-    const res = await fetch(armMcpUrl(), {
-      method: 'POST', headers, signal: ctrl.signal,
-      body: JSON.stringify({ jsonrpc: '2.0', id: crypto.randomUUID(), method: 'tools/call', params: { name, arguments: args } }),
-    });
-    data = await res.json();
-  } finally { clearTimeout(timer); }
-  if (data.error) throw new Error(`ARM MCP ${name}: ${data.error.message}`);
-  if ((data.result || {}).isError) throw new Error(`ARM MCP ${name} 拒绝: ${((data.result).content || []).map(c => c.text).join('').slice(0, 150)}`);
-  return ((data.result || {}).content || []).map(c => c.text || '').join('\n');
-}
-
-// ARM REST 客户端（v2 开发版结构化通道；{ ok, data, msg } 包络，ok=false 抛错）
+// ARM REST 客户端（v2 开发版结构化通道；{ ok, data, msg } 包络，ok=false 抛错）——目录/检索/下载/回流全链路唯一通道
 async function armRest(pathname, init = {}, timeout_ms = 20000) {
   const headers = { 'Content-Type': 'application/json', ...(init.headers || {}) };
   const token = armApiToken();
@@ -232,6 +213,11 @@ async function armRest(pathname, init = {}, timeout_ms = 20000) {
     throw e;
   } finally { clearTimeout(timer); }
 }
+// 知识写入（经验回流链）：REST v2，令牌走 armApiToken() 三级回落（设置页 > env > ~/.arm PAT）
+// 返回 data: { id, name, shareUrl, … }——id 为 UUID，供指标留痕与回流记录定位
+async function armCreateKnowledge({ name, description, content, tags }) {
+  return armRest('/api/v1/knowledges', { method: 'POST', body: JSON.stringify({ name, description, content, tags }) }, 25000);
+}
 const vVer = (v) => (String(v || '').startsWith('v') ? String(v) : `v${v || '0.0.0'}`); // REST 无 v 前缀，统一内部表示
 
 const agentCache = new Map();
@@ -240,30 +226,14 @@ async function getArmAgent(agentId) {
   if (lm) return { name: lm.name, version: lm.version, prompt: lm.prompt, knowledges: (lm.knowledges || []).map(k => k.ref) };
   const hit = agentCache.get(agentId);
   if (hit && Date.now() - hit.at < 5 * 60_000) return hit.data;
-  const text = await mcpCall('get_agent', { id: agentId });
-  const name = (text.match(/^#\s+(.+?)\s+\(/m) || [])[1] || agentId;
-  const version = (text.match(/^#\s+.+?\s+\((v[\d.]+)\)/m) || [])[1] || '';
-  const prompt = (text.match(/## Prompt\n([\s\S]*?)(\n## |\n*$)/) || [])[1]?.trim() || '';
-  const knowledges = [...text.matchAll(/^- (.+?) v[\d.]+（(\w+)）/gm)].map(m => m[1]);
-  const data = { name, version, prompt, knowledges };
+  const d = await armRest(`/api/v1/agents/${agentId}`);
+  const knowledges = (d.knowledges || []).map(kb => (kb.knowledge && kb.knowledge.name) || kb.knowledgeId || '').filter(Boolean);
+  const data = { name: d.name || agentId, version: vVer(d.version), prompt: d.prompt || '', knowledges };
   agentCache.set(agentId, { data, at: Date.now() });
   return data;
 }
 
-// search_agents 目录解析（大厅/同步共用）
-function parseAgentCards(raw) {
-  const cards = [];
-  for (const block of raw.split(/\n(?=## )/)) {
-    const m = block.match(/^## (.+?) \((v[\d.]+)\)\nID: ([0-9a-f-]{36})/);
-    if (!m) continue;
-    const bind = block.match(/绑定：(\d+) Skill \/ (\d+) Knowledge/);
-    const desc = (block.split('\n').filter(l => l && !l.startsWith('#') && !l.startsWith('ID:') && !l.startsWith('绑定'))[0] || '').trim();
-    cards.push({ name: m[1], version: m[2], agent_id: m[3], skills: +(bind?.[1] || 0), knowledges: +(bind?.[2] || 0), description: desc.slice(0, 120) });
-  }
-  return cards;
-}
-
-// 助手目录：REST 分页结构化优先（可全量），旧版 ARM 回落 MCP markdown 解析（limit 上限 20）
+// 助手目录：REST 分页结构化（可全量）
 async function armListAgents(keyword = '') {
   const out = [];
   for (let page = 1; page <= 5; page++) {
@@ -274,26 +244,16 @@ async function armListAgents(keyword = '') {
   return out.map(a => ({ agent_id: a.id, name: a.name, version: vVer(a.version), skills: a.skillsCount || 0, knowledges: a.knowledgesCount || 0, description: String(a.description || '').slice(0, 120), status: a.status || 'active', created_by: a.creatorName || a.createdBy || '' }));
 }
 
-// 知识检索（全局经验库）：REST 混合检索（RAG 语义 ⊕ 关键词）优先，回落 MCP RAG
+// 知识检索（全局经验库）：REST 混合检索（RAG 语义 ⊕ 关键词）；不可达由调用方降级（本地知识关键词命中）
 async function searchKnowledgeItems(query, topK = 5) {
-  try {
-    const d = await armRest('/api/v1/knowledges/search', { method: 'POST', body: JSON.stringify({ query, topK }) });
-    return {
-      via: `rest:${d.mode || 'hybrid'}${d.degraded ? ':degraded' : ''}`,
-      items: (d.items || []).map(it => ({ title: it.name, similarity: it.score != null ? Math.round(it.score * 100) : null, snippet: String(it.snippet || '').slice(0, 320), id: it.knowledgeId })),
-    };
-  } catch {
-    const text = await mcpCall('search_knowledges', { query, limit: topK });
-    const items = text.split(/\n(?=## )/).filter(Boolean).map(b => {
-      const title = (b.match(/^## (.+?)(?:（相似度 (\d+)%）)?/) || [])[1] || b.slice(0, 40);
-      return { title: title.trim(), similarity: +((b.match(/相似度 (\d+)%/) || [])[1] || 0) || null, snippet: b.replace(/^## .*\n?/, '').split('[完整内容')[0].slice(0, 320) };
-    });
-    return { via: 'mcp', items };
-  }
+  const d = await armRest('/api/v1/knowledges/search', { method: 'POST', body: JSON.stringify({ query, topK }) });
+  return {
+    via: `rest:${d.mode || 'hybrid'}${d.degraded ? ':degraded' : ''}`,
+    items: (d.items || []).map(it => ({ title: it.name, similarity: it.score != null ? Math.round(it.score * 100) : null, snippet: String(it.snippet || '').slice(0, 320), id: it.knowledgeId })),
+  };
 }
 
 // ── 本地助手库（07-助手本地化：下载物化 → 离线可用；按版本目录存档，升级原子切指针）──
-const armSourceTag = (base) => { try { return `arm://${new URL(base).host}`; } catch { return 'arm://unknown'; } };
 const regFile = () => path.join(ARM_AGENTS_DIR, 'registry.json');
 function loadRegistry() {
   try { return JSON.parse(fs.readFileSync(regFile(), 'utf8')); } catch { return { agents: [], last_sync_at: null }; }
@@ -319,13 +279,7 @@ function cmpVersion(a, b) { // 'v1.10.0' vs 'v1.9.3' 语义化比较
 }
 const slug = (s) => String(s).trim().replace(/[\\/:*?"<>|\s]+/g, '-').slice(0, 60) || 'knowledge';
 
-// 下载物化：REST 主路径（结构化详情 + knowledgeId 直取全文），旧版 ARM 回落 MCP 解析
-async function downloadAgent(agentId) {
-  try { return await downloadAgentRest(agentId); }
-  catch { return await downloadAgentMcp(agentId); }
-}
-
-// 注册表提交（两路下载共用）：写版本目录后原子切指针
+// 注册表提交：写版本目录后原子切指针
 function commitDownload(manifest) {
   const reg = loadRegistry();
   let e = reg.agents.find(a => a.agent_id === manifest.agent_id);
@@ -349,7 +303,8 @@ function uninstallLocalAgent(agentId, purge_workspaces) {
   return true;
 }
 
-async function downloadAgentRest(agentId) {
+// 下载物化：REST 结构化详情 + knowledgeId 直取全文
+async function downloadAgent(agentId) {
   const d = await armRest(`/api/v1/agents/${agentId}`);
   const version = vVer(d.version);
   const verDir = path.join(ARM_AGENTS_DIR, agentId, 'versions', version);
@@ -366,62 +321,39 @@ async function downloadAgentRest(agentId) {
     } catch (e) { note = `知识拉取失败: ${String(e.message).slice(0, 80)}`; }
     knowledges.push({ ref: name, version: vVer(kb.version), kind: kb.kind || '', file, note });
   }
+  // UI 绑定物化（三资产模型：助手上岗自带工位）——面板过校验器入库、workbench 直接线上 v1（可回滚）
+  const ui_bindings = [];
+  for (const ub of d.uiBindings || []) {
+    const an = ub.asset && ub.asset.name;
+    const ver = ub.assetVersion || (ub.asset && ub.asset.latestVersion) || 'v1';
+    if (!an) continue;
+    let note = '';
+    try {
+      const { buf } = await armDownload(`/api/v1/ui-assets/${encodeURIComponent(an)}/versions/${encodeURIComponent(ver)}/download`);
+      fs.mkdirSync(path.join(verDir, 'ui'), { recursive: true });
+      fs.writeFileSync(path.join(verDir, 'ui', `${slug(an)}-${ver}.zip`), buf);
+      const r = installAssetFiles(unzipFiles(buf), { agentId, mode: 'live' });
+      note = `panels×${r.panels.length}${r.workbench ? ' + workbench' : ''}`;
+    } catch (e) { note = `UI 资产物化失败: ${String(e.message).slice(0, 80)}`; }
+    ui_bindings.push({ ref: an, version: ver, note });
+  }
   const manifest = {
     agent_id: agentId, name: d.name, version, description: d.description || '',
     downloaded_at: new Date().toISOString(), source: `arm-rest://${(armApiBase() || '').replace(/^https?:\/\//, '').split('/')[0]}`,
     prompt: d.prompt || '',
     skills: (d.skills || []).map(s => ({ ref: (s.skill && s.skill.name) || s.skillId || s.id, version: vVer(s.version), kind: 'skill', description: String((s.skill && s.skill.description) || '').slice(0, 200) })),
-    knowledges,
+    knowledges, ui_bindings,
   };
   fs.writeFileSync(path.join(verDir, 'prompt.md'), manifest.prompt);
   fs.writeFileSync(path.join(verDir, 'manifest.json'), JSON.stringify(manifest, null, 2));
   commitDownload(manifest);
-  audit({ actor: 'arm-library', agentId, action: 'download', via: 'rest', version, knowledges_local: knowledges.filter(k => k.file).length });
-  return manifest;
-}
-
-// 旧版 ARM 兼容：get_agent markdown 解析 + 知识 ID 经检索定位
-async function downloadAgentMcp(agentId) {
-  const text = await mcpCall('get_agent', { id: agentId }, { timeout_ms: 25000 });
-  const section = (h) => (text.match(new RegExp(`## ${h}\\n([\\s\\S]*?)(\\n## |\\n*$)`)) || [])[1] || '';
-  const parseList = (s) => [...s.matchAll(/^- (.+?) (v[\d.]+)（(\w+)）/gm)].map(m => ({ ref: m[1].trim(), version: m[2], kind: m[3] }));
-  const name = (text.match(/^#\s+(.+?)\s+\(/m) || [])[1] || agentId;
-  const version = (text.match(/^#\s+.+?\s+\((v[\d.]+)\)/m) || [])[1] || 'v0.0.0';
-  const prompt = (text.match(/## Prompt\n([\s\S]*?)(\n## |\n*$)/) || [])[1]?.trim() || '';
-  const description = section('描述').trim();
-  const skills = parseList(section('Skills'));
-  const verDir = path.join(ARM_AGENTS_DIR, agentId, 'versions', version);
-  fs.mkdirSync(path.join(verDir, 'knowledges'), { recursive: true });
-  const knowledges = [];
-  for (const k of parseList(section('Knowledges'))) {
-    let file = null, note = '';
-    try { // 知识 ID 经检索定位（ARM 无按名直取接口），再拉全文。注意：知识正文自身含 "## " 内部标题，不可按标题切块——须按「标题→首个 [完整内容] 标记」成对匹配
-      const sres = await mcpCall('search_knowledges', { query: k.ref, limit: 5 }, { timeout_ms: 20000 });
-      const pairs = [...sres.matchAll(/^## (.+?)(?:（相似度 \d+%）)?\n[\s\S]*?\[完整内容: get_knowledge id=([0-9a-f-]{36})\]/gm)];
-      const kid = pairs.find(m => m[1].trim() === k.ref)?.[2];
-      if (kid) {
-        const full = await mcpCall('get_knowledge', { id: kid }, { timeout_ms: 20000 });
-        file = `knowledges/${slug(k.ref)}.md`;
-        fs.writeFileSync(path.join(verDir, file), full);
-      } else note = 'ARM 检索未命中该知识，离线不可用';
-    } catch (e) { note = `知识拉取失败: ${String(e.message).slice(0, 80)}`; }
-    knowledges.push({ ...k, file, note });
-  }
-  const manifest = {
-    agent_id: agentId, name, version, description,
-    downloaded_at: new Date().toISOString(), source: armSourceTag(armMcpUrl()), prompt,
-    skills, knowledges,
-  };
-  fs.writeFileSync(path.join(verDir, 'prompt.md'), prompt);
-  fs.writeFileSync(path.join(verDir, 'manifest.json'), JSON.stringify(manifest, null, 2));
-  commitDownload(manifest);
-  audit({ actor: 'arm-library', agentId, action: 'download', via: 'mcp', version, knowledges_local: knowledges.filter(k => k.file).length });
+  audit({ actor: 'arm-library', agentId, action: 'download', via: 'rest', version, knowledges_local: knowledges.filter(k => k.file).length, ui_bindings: ui_bindings.length });
   return manifest;
 }
 
 // 同步：比对远端目录与本地库，产出 new/update/delisted 事件；顺带冲账离线经验 outbox
 async function armSync() {
-  const remote = await armListAgents(); // REST 全量优先，旧版 ARM 内部回落 MCP（≤20）
+  const remote = await armListAgents();
   const reg = loadRegistry();
   const remoteIds = new Set(remote.map(r => r.agent_id));
   const events = { new: [], update: [], delisted: [] };
@@ -449,7 +381,7 @@ async function flushExperienceOutbox() {
   const lines = fs.readFileSync(OUTBOX_FILE, 'utf8').split('\n').filter(Boolean);
   const remain = []; let ok = 0;
   for (const line of lines) {
-    try { const it = JSON.parse(line); await mcpCall('create_knowledge', it.args, { pat: true }); ok++; }
+    try { const it = JSON.parse(line); await armCreateKnowledge(it.args); ok++; }
     catch { remain.push(line); }
   }
   fs.writeFileSync(OUTBOX_FILE, remain.length ? remain.join('\n') + '\n' : '');
@@ -671,16 +603,15 @@ const TOOLS = {
       const content = ['---', 'kind: experience', 'source: aims-platform-mvp', `agent: ${arm.name || agentId}@${arm.version || ''}`, 'scenario: 立库A区智能运维@mvp', '---', '', markdown].join('\n');
       const args = { name: title, description: `MVP回流：${title}`, content, tags: ['MVP回流'] };
       let r;
-      try { r = await mcpCall('create_knowledge', args, { pat: true }); }
+      try { r = await armCreateKnowledge(args); }
       catch (e) { // 离线：入 outbox 缓写，恢复连接后经「检查更新」自动回流
         fs.appendFileSync(OUTBOX_FILE, JSON.stringify({ at: new Date().toISOString(), agentId, args }) + '\n');
         audit({ actor: 'experience-reflow', target: 'outbox', title });
         return `ARM 不可达（${String(e.message).slice(0, 60)}），经验已存本地待回流队列；恢复连接后在助手大厅点「检查更新」将自动回流。`;
       }
-      const kid = (r.match(/id:\s*([0-9a-f-]{36})/) || [])[1] || '';
-      metric({ kind: 'experience', agentId, title, knowledge_id: kid });
+      metric({ kind: 'experience', agentId, title, knowledge_id: r.id });
       audit({ actor: 'experience-reflow', target: 'ARM', title });
-      return `经验已沉淀到 ARM 知识库：\n${r}`;
+      return `经验已沉淀到 ARM 知识库：${r.name}（id: ${r.id}${r.shareUrl ? `，${r.shareUrl}` : ''}）`;
     },
   },
 };
@@ -747,10 +678,15 @@ function openDb(file) {
     const db = new DatabaseSync(path.join(DATA_DIR, file));
     db.exec('CREATE TABLE IF NOT EXISTS docs (collection TEXT NOT NULL, id TEXT PRIMARY KEY, data TEXT NOT NULL, created TEXT, updated TEXT)');
     db.exec('CREATE INDEX IF NOT EXISTS idx_docs_collection ON docs(collection)');
+    db.exec('CREATE TABLE IF NOT EXISTS _meta (k TEXT PRIMARY KEY, v TEXT NOT NULL)'); // 变更版本计数（面板订阅用，08 契约 §4）
     _dbs.set(file, db);
   }
   return _dbs.get(file);
 }
+// 记录写入后自增 ver:<collection>（持久化，重启不归零）——REST 与助手 data_write 同源，面板 watch 据此联动
+function bumpVer(db, coll) {
+  db.prepare("INSERT INTO _meta (k, v) VALUES (?, '1') ON CONFLICT(k) DO UPDATE SET v = CAST(v AS INTEGER) + 1").run(`ver:${coll}`);
+}
 const DB = openDb('store.db'); // 兼容旧引用（迁移后即空）
 // 作用域语义：agent=助手私有（默认，存归属助手×工作区的独立库）；shared=跨助手共享（存共享库）
 const scopeOf = (m) => (m.scope === 'shared' || m.scope === 'global') ? 'shared' : 'agent'; // legacy global→shared, workbench→agent
@@ -800,6 +736,7 @@ function insertDoc(m, doc, wsId = 'default') {
   const now = new Date().toISOString();
   dbFor(m, wsId).prepare('INSERT OR REPLACE INTO docs (collection, id, data, created, updated) VALUES (?,?,?,?,?)')
     .run(collKey(m), id, JSON.stringify(doc), now, now);
+  bumpVer(dbFor(m, wsId), collKey(m));
   return { ...doc, _id: id, _created: now, _updated: now };
 }
 function updateDoc(m, id, patch, wsId = 'default') {
@@ -808,11 +745,13 @@ function updateDoc(m, id, patch, wsId = 'default') {
   const merged = { ...JSON.parse(row.data), ...patch };
   validateDoc(m, merged);
   dbFor(m, wsId).prepare('UPDATE docs SET data = ?, updated = ? WHERE collection = ? AND id = ?').run(JSON.stringify(merged), new Date().toISOString(), collKey(m), id);
+  bumpVer(dbFor(m, wsId), collKey(m));
   return merged;
 }
 function deleteDoc(m, id, wsId = 'default') {
   const r = dbFor(m, wsId).prepare('DELETE FROM docs WHERE collection = ? AND id = ?').run(collKey(m), id);
   if (!r.changes) throw new Error(`记录 ${id} 不存在`);
+  bumpVer(dbFor(m, wsId), collKey(m));
 }
 
 // ── 一次性迁移：旧单库 → 按助手分库（按归属切分记录）──
@@ -880,8 +819,8 @@ function deleteDoc(m, id, wsId = 'default') {
 // 占位清理：旧类型残留保护
 (function migrateBuiltinPanels() {
   const MAP = {
-    realtime_list: { plugin: 'system-alarm-stream', slot: 'left', keep: ['refresh', 'device_type'] },
-    status_grid: { plugin: 'system-device-grid', slot: 'center', keep: ['refresh', 'device_type', 'context_inject'] },
+    realtime_list: { plugin: 'system-alarm-stream', slot: 'left', keep: ['device_type'] },
+    status_grid: { plugin: 'system-device-grid', slot: 'center', keep: ['device_type', 'context_inject'] },
     kpi_strip: { plugin: 'system-kpi-strip', slot: 'center', keep: [] },
     inspection_report: { plugin: 'system-inspection-report', slot: 'left', keep: [] },
     action_group: { plugin: 'system-action-group', slot: 'right', keep: ['actions'] },
@@ -1036,22 +975,233 @@ function pluginCenterData() {
     system: systemPluginStatus().map((s) => ({ ...s, usage: usage[`system:${s.id}`] || [] })),
     library: listPanelPlugins().map((pl) => {
       const full = loadPanelPlugin(pl.id);
-      return { ...pl, status: full?.status || 'active', usage: usage[`plugin:${pl.id}`] || [], lastCheck: full?.lastCheck || null };
+      return { ...pl, status: full?.status || 'active', usage: usage[`plugin:${pl.id}`] || [], lastCheck: full?.lastCheck || null, arm_ref: full?.arm_ref || null };
     }),
   };
 }
 // 代理域名白名单：从在库插件代码中提取其声明访问的主机（含 deprecated，保守起见全量）
+// 存主机名（剥离端口）——检查侧用 URL.hostname 比对；带端口声明的 host 此前永远匹配不上（45.36 实例排查）
 function proxyAllowedHosts() {
   const hosts = new Set(['localhost', '127.0.0.1']);
   for (const f of fs.readdirSync(PANELS_DIR).filter((f) => f.endsWith('.json'))) {
     try {
       const code = JSON.parse(fs.readFileSync(path.join(PANELS_DIR, f), 'utf8')).code || '';
-      for (const m of code.matchAll(/https?:\/\/([a-z0-9.-]+(?::\d+)?)/gi)) hosts.add(m[1].toLowerCase());
+      for (const m of code.matchAll(/https?:\/\/([a-z0-9.-]+)(?::\d+)?/gi)) hosts.add(m[1].toLowerCase());
     } catch { }
   }
   return hosts;
 }
 
+// ── UI 资产分发（ARM 三资产模型：UIAsset = 面板/工作台的版本化分发，docs/08 §7、docs/09）──
+const zlib = require('node:zlib');
+// ZIP 读写器（零依赖：CRC32 查表 + local header + central directory + EOCD，deflate 走 zlib 内置）
+const CRC_TABLE = (() => { const t = new Int32Array(256); for (let n = 0; n < 256; n++) { let c = n; for (let k = 0; k < 8; k++) c = c & 1 ? (0xEDB88320 ^ (c >>> 1)) : c >>> 1; t[n] = c; } return t; })();
+function crc32(buf) { let c = -1; for (let i = 0; i < buf.length; i++) c = CRC_TABLE[(c ^ buf[i]) & 0xFF] ^ (c >>> 8); return (c ^ -1) >>> 0; }
+const dosTime = (d) => ((d.getHours() << 11) | (d.getMinutes() << 5) | (d.getSeconds() >> 1)) & 0xFFFF;
+const dosDate = (d) => (((d.getFullYear() - 1980) << 9) | ((d.getMonth() + 1) << 5) | d.getDate()) & 0xFFFF;
+function zipFiles(files) { // files: [{path, data: Buffer|string}] → Buffer（兼容系统 unzip：deflate/stored 自适应 + UTF-8 名）
+  const parts = [], central = []; let offset = 0; const now = new Date();
+  for (const f of files) {
+    const name = Buffer.from(f.path, 'utf8');
+    const raw = Buffer.isBuffer(f.data) ? f.data : Buffer.from(String(f.data), 'utf8');
+    const comp = zlib.deflateRawSync(raw, { level: 9 });
+    const useDeflate = comp.length < raw.length;
+    const data = useDeflate ? comp : raw;
+    const crc = crc32(raw);
+    const lh = Buffer.alloc(30);
+    lh.writeUInt32LE(0x04034b50, 0); lh.writeUInt16LE(20, 4); lh.writeUInt16LE(0x0800, 6);
+    lh.writeUInt16LE(useDeflate ? 8 : 0, 8); lh.writeUInt16LE(dosTime(now), 10); lh.writeUInt16LE(dosDate(now), 12);
+    lh.writeUInt32LE(crc, 14); lh.writeUInt32LE(data.length, 18); lh.writeUInt32LE(raw.length, 22);
+    lh.writeUInt16LE(name.length, 26); lh.writeUInt16LE(0, 28);
+    parts.push(lh, name, data);
+    const ch = Buffer.alloc(46);
+    ch.writeUInt32LE(0x02014b50, 0); ch.writeUInt16LE(20, 4); ch.writeUInt16LE(20, 6); ch.writeUInt16LE(0x0800, 8);
+    ch.writeUInt16LE(useDeflate ? 8 : 0, 10); ch.writeUInt16LE(dosTime(now), 12); ch.writeUInt16LE(dosDate(now), 14);
+    ch.writeUInt32LE(crc, 16); ch.writeUInt32LE(data.length, 20); ch.writeUInt32LE(raw.length, 24);
+    ch.writeUInt16LE(name.length, 28);
+    ch.writeUInt32LE(offset, 42);
+    central.push(Buffer.concat([ch, name]));
+    offset += 30 + name.length + data.length;
+  }
+  const cd = Buffer.concat(central);
+  const eocd = Buffer.alloc(22);
+  eocd.writeUInt32LE(0x06054b50, 0); eocd.writeUInt16LE(files.length, 8); eocd.writeUInt16LE(files.length, 10);
+  eocd.writeUInt32LE(cd.length, 12); eocd.writeUInt32LE(offset, 16);
+  return Buffer.concat([...parts, cd, eocd]);
+}
+function unzipFiles(buf) { // → [{path, data: Buffer}]（支持 stored/deflate）
+  let eocd = -1;
+  for (let i = buf.length - 22; i >= Math.max(0, buf.length - 22 - 65536); i--) {
+    if (buf.readUInt32LE(i) === 0x06054b50) { eocd = i; break; }
+  }
+  if (eocd < 0) throw new Error('ZIP 解析失败：未找到目录尾');
+  const count = buf.readUInt16LE(eocd + 10);
+  let p = buf.readUInt32LE(eocd + 16);
+  const out = [];
+  for (let n = 0; n < count; n++) {
+    if (buf.readUInt32LE(p) !== 0x02014b50) throw new Error('ZIP 解析失败：目录损坏');
+    const method = buf.readUInt16LE(p + 10);
+    const compSize = buf.readUInt32LE(p + 20);
+    const nameLen = buf.readUInt16LE(p + 28), extraLen = buf.readUInt16LE(p + 30), commentLen = buf.readUInt16LE(p + 32);
+    const lho = buf.readUInt32LE(p + 42);
+    const zipPath = buf.slice(p + 46, p + 46 + nameLen).toString('utf8');
+    const lnameLen = buf.readUInt16LE(lho + 26), lextraLen = buf.readUInt16LE(lho + 28);
+    const dStart = lho + 30 + lnameLen + lextraLen;
+    const comp = buf.slice(dStart, dStart + compSize);
+    if (!zipPath.endsWith('/')) out.push({ path: zipPath, data: method === 8 ? zlib.inflateRawSync(comp) : Buffer.from(comp) });
+    p += 46 + nameLen + extraLen + commentLen;
+  }
+  return out;
+}
+// ARM multipart 上传（FormData+Blob，零依赖 fetch 原生支持；复用 armRest 的 token 体系与错误提示）
+async function armUpload(pathname, formData, timeout_ms = 30000) {
+  const token = armApiToken();
+  const ctrl = new AbortController(); const t = setTimeout(() => ctrl.abort(), timeout_ms);
+  try {
+    const res = await fetch(armApiBase() + pathname, { method: 'POST', headers: token ? { Authorization: `Bearer ${token}` } : {}, body: formData, signal: ctrl.signal });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok || data.ok === false) {
+      const noAuth = res.status === 401 || res.status === 403;
+      throw new Error(`ARM 上传 ${pathname}: ${data.msg || res.status}${noAuth ? '——令牌未配置或无权限：到「系统设置 · ARM 源」配置访问令牌（arm_pat_…）' : ''}`);
+    }
+    return data.data;
+  } finally { clearTimeout(t); }
+}
+// ARM 二进制下载（资产包 ZIP）：返回 Buffer + X-File-Hash（完整性校验）
+async function armDownload(pathname, timeout_ms = 30000) {
+  const token = armApiToken();
+  const ctrl = new AbortController(); const t = setTimeout(() => ctrl.abort(), timeout_ms);
+  try {
+    const res = await fetch(armApiBase() + pathname, { headers: token ? { Authorization: `Bearer ${token}` } : {}, signal: ctrl.signal });
+    if (!res.ok) {
+      const j = await res.json().catch(() => ({}));
+      const noAuth = res.status === 401 || res.status === 403;
+      throw new Error(`ARM 下载 ${pathname.split('?')[0]}: ${j.msg || res.status}${noAuth ? '——令牌未配置或无权限：到「系统设置 · ARM 源」配置访问令牌（arm_pat_…）' : ''}`);
+    }
+    return { buf: Buffer.from(await res.arrayBuffer()), hash: res.headers.get('x-file-hash') || '' };
+  } finally { clearTimeout(t); }
+}
+const assetSlug = (s) => String(s || '').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '').slice(0, 40) || 'asset';
+// 组包：panel=单插件三件套；workbench=线上 DSL（无则草稿）+依赖插件+数据集 schema+requires 声明（08 契约 §7）
+function buildAssetBundle(type, key, nameOverride) {
+  const files = [];
+  const requires = { apis: [], actions: [], collections: [] };
+  const plugins = []; const collections = [];
+  const addPlugin = (id) => {
+    if (plugins.some((p) => p.id === id)) return;
+    const plugin = loadPanelPlugin(id);
+    if (!plugin) return;
+    plugins.push(plugin);
+    files.push({ path: `panels/${plugin.id}.json`, data: JSON.stringify({ id: plugin.id, name: plugin.name, description: plugin.description, code: plugin.code }, null, 2) });
+    for (const m of (plugin.code || '').matchAll(/https?:\/\/([a-z0-9.-]+)(?::\d+)?/gi)) { // 外部依赖声明：代码即事实（与 proxyAllowedHosts 同源正则），分享时提取
+      const host = m[1].toLowerCase();
+      if (host !== 'localhost' && host !== '127.0.0.1' && !requires.apis.some((x) => x.host === host)) requires.apis.push({ host, usage: `插件 ${plugin.id} 跨域取数`, via: 'proxy' });
+    }
+    for (const m of (plugin.code || '').matchAll(/store\.(?:list|create|update|remove|watch)\(\s*['"`]([a-z0-9_-]+)['"`]/g)) {
+      const manifest = loadCollection(m[1]);
+      if (manifest && !collections.some((c) => c.name === manifest.name)) collections.push(manifest);
+    }
+  };
+  let wbName = '';
+  if (type === 'panel') {
+    addPlugin(key);
+    if (!plugins.length) throw new Error(`插件 ${key} 不存在`);
+  } else {
+    const dsl = loadWorkbench(key) || loadDraft(key);
+    if (!dsl) throw new Error(`助手 ${key} 无工作台（线上与草稿均为空）`);
+    wbName = dsl.workbench || '';
+    for (const p of dsl.panels || []) {
+      if (p.type === 'custom_panel' && p.panel) addPlugin(p.panel);
+      for (const a of (p.params && p.params.actions) || []) { // 交互脚本全文明示（凭据风险人审，红线③）
+        requires.actions.push({ panel: p.id, id: a.id, label: a.label, exec: String(a.exec), has_credentials: /pass|-p\s|pwd|token|secret|apikey|key=/i.test(String(a.exec)) });
+      }
+    }
+    for (const m of loadCollections()) { // 归属助手的数据集 schema（数据永不入包，红线②）
+      if (m.owner_agent === key && !collections.some((c) => c.name === m.name)) collections.push(m);
+    }
+    const wb = JSON.parse(JSON.stringify(dsl));
+    delete wb.owner_agent; wb.version = 'v1';
+    files.push({ path: 'workbench.json', data: JSON.stringify(wb, null, 2) });
+  }
+  for (const m of collections) {
+    files.push({ path: `collections/${m.name}.json`, data: JSON.stringify({ name: m.name, title: m.title, description: m.description, schema: m.schema, required: m.required || [], scope: m.scope === 'shared' ? 'shared' : 'agent' }, null, 2) });
+  }
+  const first = type === 'panel' ? plugins[0] : null;
+  const dep = type === 'workbench' ? loadDeployment(key) : null;
+  const wbSlug = assetSlug(dep?.name || wbName || '');
+  // 中文名 slug 化后为空 → 以 agentId 前 8 位兜底（全局唯一锚）
+  const name = nameOverride || (type === 'panel' ? `aims-panel-${first.id}` : `aims-workbench-${wbSlug !== 'asset' ? wbSlug : String(key).slice(0, 8)}`);
+  const manifest = {
+    name, description: (first ? first.description : `${dep?.name || wbName}的工作台模板`).slice(0, 500),
+    asset_type: type, version: type === 'panel' ? first.version : 'v1', source: 'aims-workstation', shared_at: new Date().toISOString(),
+    provides: { panels: plugins.map((p) => p.id), collections: collections.map((c) => c.name), workbench: type === 'workbench' },
+    requires, compatibility: { 'aims-workstation': '>=0.1.5' },
+  };
+  files.push({ path: 'asset.json', data: JSON.stringify(manifest, null, 2) });
+  files.push({
+    path: 'SKILL.md',
+    data: `---\nname: ${name}\ndescription: ${manifest.description.replace(/\n/g, ' ').slice(0, 200)}\n---\n\n# ${name}\n\nAIMS 工作台资产（${type === 'panel' ? '面板插件' : '工作台模板'}）。\n\n## 包含\n\n- 面板插件：${plugins.map((p) => `${p.name}（${p.id}@${p.version}）`).join('、') || '无'}\n- 数据集 schema：${collections.map((c) => c.name).join('、') || '无'}${type === 'workbench' ? '\n- 工作台 DSL：workbench.json' : ''}\n${requires.apis.length ? `\n## 外部 API 依赖（requires.apis）\n\n${requires.apis.map((a) => `- ${a.host}：${a.usage}`).join('\n')}` : ''}${requires.actions.length ? `\n## 交互脚本（requires.actions，含真实 shell 命令）\n\n${requires.actions.map((a) => `- [${a.panel}/${a.id}] ${a.label}：\`${a.exec.slice(0, 160)}\`${a.has_credentials ? ' ⚠️疑似含凭据' : ''}`).join('\n')}` : ''}\n\n## 安装\n\nAIMS 平台「插件中心 → 从 ARM 安装」按名搜索安装；面板代码过平台校验器后入库。\n`,
+  });
+  return { name, manifest, files };
+}
+// 解包安装：panels 过校验器入库；collections 同名保留本地仅新增缺失；workbench 按模式落草稿（人审）或直接线上（下载物化）
+function installAssetFiles(files, { agentId, mode = 'draft' } = {}) {
+  const manifest = JSON.parse(String(files.find((f) => f.path === 'asset.json' || f.path.endsWith('/asset.json'))?.data || 'null'));
+  if (!manifest || !manifest.name) throw new Error('资产包缺少 asset.json');
+  const armRefOf = (hash) => ({ skill_name: manifest.name, version: manifest.version || null, file_hash: hash, shared_at: manifest.shared_at || null });
+  const result = { name: manifest.name, asset_type: manifest.asset_type, panels: [], collections: [], workbench: null, skipped_collections: [] };
+  for (const f of files.filter((x) => /^panels\/[a-z0-9-]+\.json$/.test(x.path))) {
+    const p = JSON.parse(String(f.data));
+    const saved = savePanelPlugin({ id: p.id, name: p.name, description: p.description, code: p.code, author: 'arm' });
+    // savePanelPlugin 已写盘，补 arm_ref 后再写一次（不重复升版本）
+    const full = loadPanelPlugin(p.id);
+    Object.assign(full, { arm_ref: armRefOf(null) });
+    fs.writeFileSync(path.join(PANELS_DIR, `${p.id}.json`), JSON.stringify(full, null, 2));
+    result.panels.push({ id: saved.id, version: saved.version });
+  }
+  if (agentId) {
+    for (const f of files.filter((x) => /^collections\/[a-z0-9_-]+\.json$/.test(x.path))) {
+      const m = JSON.parse(String(f.data));
+      if (loadCollection(m.name)) { result.skipped_collections.push(m.name); continue; } // 冲突保留本地（数据在现场，不静默换表）
+      saveCollection({ name: m.name, title: m.title, description: m.description, schema: m.schema, required: m.required || [], scope: m.scope === 'shared' ? 'shared' : 'agent', owner_agent: m.scope === 'shared' ? undefined : agentId });
+      result.collections.push(m.name);
+    }
+    const wbFile = files.find((x) => x.path === 'workbench.json');
+    if (wbFile) {
+      const dsl = JSON.parse(String(wbFile.data));
+      dsl.owner_agent = agentId;
+      if (mode === 'live') {
+        dsl.version = `v${Math.max(0, ...workbenchVersions(agentId).map((x) => +String(x.version || '').replace(/^v/, '') || 0)) + 1}`;
+        saveWorkbench(agentId, dsl); // 下载物化：直接线上（三道信任关后开箱即用，版本前进可回滚）
+      } else {
+        saveDraft(agentId, dsl); // 手动安装：进草稿，人审发布
+      }
+      const target = mode === 'live' ? path.join(WB_DIR, `${agentId}.json`) : draftPath(agentId);
+      const cur = JSON.parse(fs.readFileSync(target, 'utf8'));
+      cur.arm_ref = armRefOf(null);
+      fs.writeFileSync(target, JSON.stringify(cur, null, 2));
+      result.workbench = { mode, version: cur.version };
+    }
+  }
+  audit({ actor: 'asset-install', target: 'ARM', name: manifest.name, ...result });
+  return result;
+}
+// 本地 arm_ref 索引：插件库 + 各工作台 DSL（列表页 installed/upgrade_available 判定）
+function localArmRefs() {
+  const refs = {};
+  for (const pl of listPanelPlugins()) {
+    const full = loadPanelPlugin(pl.id);
+    if (full?.arm_ref?.skill_name) (refs[full.arm_ref.skill_name] = refs[full.arm_ref.skill_name] || []).push({ kind: 'plugin', id: pl.id, file_hash: full.arm_ref.file_hash });
+  }
+  for (const f of fs.readdirSync(WB_DIR).filter((f) => f.endsWith('.json'))) {
+    try {
+      const dsl = JSON.parse(fs.readFileSync(path.join(WB_DIR, f), 'utf8'));
+      if (dsl.arm_ref?.skill_name) (refs[dsl.arm_ref.skill_name] = refs[dsl.arm_ref.skill_name] || []).push({ kind: 'workbench', id: dsl.owner_agent || f.replace(/\.(draft\.)?json$/, ''), file_hash: dsl.arm_ref.file_hash });
+    } catch { }
+  }
+  return refs;
+}
+
 // ── 工作台工程师 Agent（对话式开发工作台的 skill：工具即扩展点）──
 const DEV_TOOLS = {
   list_workbench: {
@@ -1154,6 +1304,25 @@ const DEV_TOOLS = {
 const devCtx = { agentId: null };
 const devSessions = new Map();
 
+// 定制会话上下文裁剪：前端 sessionId 固定为 dev-<agentId前缀>，会话跨请求长存——不裁剪会无限增长，
+// 最终超过模型上下文窗口被网关整单拒绝（2026-10-21 海立实例"发消息没反应"根因）。
+// 超预算从最旧轮次整轮丢弃；下刀点只选 user 消息边界，剩余前缀不会出现孤儿 toolResult（转换层要求其紧跟 assistant 的 toolCall）；当前轮永不裁。
+const DEV_CTX_CHAR_BUDGET = 150_000; // 字符预算：混合中英/代码转录按 ~0.4 token/char 估 ≈ 60K token，对 128K 窗口留足余量
+function trimDevContext(ctx) {
+  const msgs = ctx.messages;
+  const size = () => msgs.reduce((n, m) => n + JSON.stringify(m.content ?? '').length, 0);
+  if (size() <= DEV_CTX_CHAR_BUDGET) return 0;
+  const lastUser = msgs.length - 1 - [...msgs].reverse().findIndex((m) => m.role === 'user');
+  let dropped = 0;
+  while (size() > DEV_CTX_CHAR_BUDGET) {
+    const cut = msgs.slice(1, lastUser - dropped).findIndex((m) => m.role === 'user');
+    if (cut < 0) break; // 当前轮之前再无完整轮次可丢（单轮就超预算只能放行，交由模型侧报错）
+    dropped += cut + 1;
+    msgs.splice(0, cut + 1);
+  }
+  return dropped;
+}
+
 function devSystemPrompt() {
   const live = loadWorkbench(devCtx.agentId);
   const plugins = listPanelPlugins();
@@ -1235,12 +1404,24 @@ async function devChatLoop(session, emit, signal = null) {
     if (interrupted()) { emit('interrupted', { at: `第 ${round + 1} 轮` }); return { reply: '（已被用户中断）', events }; }
     emit('status', { text: `第 ${round + 1} 轮` });
     const stream = models.stream(model, session.context, signal ? { signal } : undefined);
-    for await (const ev of stream) {
-      if (interrupted()) break;
-      if (ev.type === 'text_delta') emit('text_delta', { delta: ev.delta });
-      else if (ev.type === 'toolcall_end') emit('status', { text: `调用工具 ${ev.toolCall?.name || ''}` });
+    let final = null;
+    try {
+      for await (const ev of stream) {
+        if (interrupted()) break;
+        if (ev.type === 'text_delta') emit('text_delta', { delta: ev.delta });
+        else if (ev.type === 'toolcall_end') emit('status', { text: `调用工具 ${ev.toolCall?.name || ''}` });
+        else if (ev.type === 'error') {
+          if (interrupted()) break; // 中断引发的流错误按中断处理，不报错
+          throw new Error(`LLM 流错误: ${ev.error?.errorMessage || JSON.stringify(ev.error).slice(0, 200)}`);
+        }
+      }
+      final = await stream.result();
+      // pi-ai 把认证/请求失败表现为 stopReason=error 而非异常（同 llmProbe 判定）——不检查会被吞成静默空回复
+      if (final?.stopReason === 'error') throw new Error(`LLM 请求失败: ${final.error?.errorMessage || JSON.stringify(final.error || {}).slice(0, 200) || final.stopReason}`);
+    } catch (e) {
+      if (!interrupted()) throw e; // 真实错误上抛给路由 catch → SSE error → 前端 toast；中断路径用占位消息兜底
     }
-    const final = await stream.result();
+    if (!final) final = { role: 'assistant', content: [], timestamp: Date.now() };
     session.context.messages.push(final);
     const calls = (final.content || []).filter(b => b.type === 'toolCall');
     const text = (final.content || []).filter(b => b.type === 'text').map(b => b.text).join('');
@@ -1445,7 +1626,7 @@ const server = http.createServer(async (req, res) => {
       if (pathname === '/api/health') return json(res, 200, { ok: true, auth_required: true }); // 前端据此弹登录门
       return json(res, 401, { error: '需要访问令牌', code: 'AUTH_REQUIRED' });
     }
-    if (req.method === 'GET' && pathname === '/api/health') return json(res, 200, { ok: true, model: model?.id, arm: armMcpUrl(), pat: !!ARM_PAT, local_agents: loadRegistry().agents.length });
+    if (req.method === 'GET' && pathname === '/api/health') return json(res, 200, { ok: true, model: model?.id, arm: armApiBase(), pat: !!ARM_PAT, local_agents: loadRegistry().agents.length });
 
     // ── ARM 连接与同步（07：大厅双视图 = 本地助手库 ∪ 远端目录）──
     if (req.method === 'GET' && pathname === '/api/settings') {
@@ -1454,7 +1635,6 @@ const server = http.createServer(async (req, res) => {
       return json(res, 200, {
         arm: {
           api_base: armApiBase(), api_base_runtime: !!cfg.arm_api_base, default_base: ARM_DEFAULT_BASE,
-          mcp_url: armMcpUrl(), mcp_explicit: !!cfg.arm_mcp_url,
           token_set: !!t, token_masked: t ? `${t.slice(0, 10)}…${t.slice(-4)}` : '',
           token_source: cfg.arm_token ? 'runtime' : (env.ARM_API_TOKEN ? 'env' : (ARM_PAT ? 'pat' : 'none')),
         },
@@ -1470,7 +1650,7 @@ const server = http.createServer(async (req, res) => {
       });
     }
     if (req.method === 'PUT' && pathname === '/api/settings') {
-      const { arm_api_base, arm_mcp_url, arm_token, llm_base_url, llm_api_key, llm_model, scene_profile, access_token, guard } = await body(req);
+      const { arm_api_base, arm_token, llm_base_url, llm_api_key, llm_model, scene_profile, access_token, guard } = await body(req);
       // 守护栏维护：deny 正则可编译 / ro 须为单命令名；保存即热生效（classifyExec 每次调用现读配置）；删减危险规则记入审计
       let guardAudit = null;
       if (guard !== undefined) {
@@ -1501,11 +1681,6 @@ const server = http.createServer(async (req, res) => {
         if (u && !/^https?:\/\/[^\s/]+/.test(u)) return json(res, 400, { error: `站点地址须为 http(s) URL：${u}` });
         cfg.arm_api_base = u;
       }
-      if (arm_mcp_url !== undefined) {
-        const u = normUrl(arm_mcp_url);
-        if (u && !/^https?:\/\/[^\s/]+/.test(u)) return json(res, 400, { error: `MCP 端点须为 http(s) URL：${u}` });
-        cfg.arm_mcp_url = u;
-      }
       if (arm_token !== undefined) cfg.arm_token = String(arm_token || '').trim(); // 置空 = 回落 env/PAT
       if (llm_base_url !== undefined) {
         const u = normUrl(llm_base_url);
@@ -1531,10 +1706,10 @@ const server = http.createServer(async (req, res) => {
         try { llm_probe = await llmProbe(); } catch (e) { llm_probe = { online: false, error: String(e.message).slice(0, 150) }; }
       }
       saveCfg();
-      audit({ actor: 'settings', action: 'save', arm_api_base: cfg.arm_api_base, mcp_explicit: !!cfg.arm_mcp_url, llm_model: cfg.llm_model, llm_base_changed: llm_base_url !== undefined, token_changed: arm_token !== undefined || llm_api_key !== undefined, scene_profile_changed: sceneChanged, scene_profile_len: sceneProfile().length, auth_changed: authChanged, guard_changed: guardAudit });
+      audit({ actor: 'settings', action: 'save', arm_api_base: cfg.arm_api_base, llm_model: cfg.llm_model, llm_base_changed: llm_base_url !== undefined, token_changed: arm_token !== undefined || llm_api_key !== undefined, scene_profile_changed: sceneChanged, scene_profile_len: sceneProfile().length, auth_changed: authChanged, guard_changed: guardAudit });
       // ARM 保存后即时探测（失败不回滚：允许先配置后启动 ARM）
       let probe = { online: false, error: '' };
-      if ([arm_api_base, arm_mcp_url, arm_token].some((v) => v !== undefined)) {
+      if ([arm_api_base, arm_token].some((v) => v !== undefined)) {
         try {
           const t0 = Date.now();
           await armRest('/api/v1/agents?page=1&pageSize=1', {}, 6000);
@@ -1542,7 +1717,7 @@ const server = http.createServer(async (req, res) => {
         } catch (e) { probe = { online: false, error: String(e.message).slice(0, 120) }; }
       }
       const notes = [];
-      if (probe.error) notes.push('ARM 当前源不可达（目录/检索将回落 MCP 或本地库，源恢复后自动可用）');
+      if (probe.error) notes.push('ARM 当前源不可达（目录/检索将回落本地库，源恢复后自动可用）');
       if (llm_probe && !llm_probe.online) notes.push('LLM 已保存但探针未通过（密钥/端点/模型可用性待确认，对话可能失败，可再试或改回）');
       return json(res, 200, { saved: true, probe, llm_probe, note: notes.join('；') });
     }
@@ -1552,14 +1727,9 @@ const server = http.createServer(async (req, res) => {
       try {
         await armRest('/api/v1/agents?page=1&pageSize=1', {}, 6000);
         online = true; latency_ms = Date.now() - t0;
-      } catch {
-        try { // 旧版 ARM 无 REST：回落 MCP 探测
-          await mcpCall('search_agents', { keyword: '', limit: 1 }, { timeout_ms: 6000 });
-          online = true; latency_ms = Date.now() - t0;
-        } catch { }
-      }
+      } catch { }
       const reg = loadRegistry();
-      return json(res, 200, { online, latency_ms, url: armMcpUrl(), api: armApiBase(), pat: !!ARM_PAT, last_sync_at: reg.last_sync_at || null, local_count: reg.agents.length, outbox_pending: outboxCount() });
+      return json(res, 200, { online, latency_ms, api: armApiBase(), pat: !!ARM_PAT, last_sync_at: reg.last_sync_at || null, local_count: reg.agents.length, outbox_pending: outboxCount() });
     }
     if (req.method === 'POST' && pathname === '/api/arm/sync') {
       try { return json(res, 200, await armSync()); }
@@ -1571,7 +1741,7 @@ const server = http.createServer(async (req, res) => {
       const kw = (url.searchParams.get('keyword') || '').trim().toLowerCase();
       const reg = loadRegistry();
       let online = true, remoteCards = [], authError = false;
-      try { remoteCards = await armListAgents(url.searchParams.get('keyword') || ''); } // REST 全量优先，旧版回落 MCP
+      try { remoteCards = await armListAgents(url.searchParams.get('keyword') || ''); } // REST 全量
       catch (e) { online = false; authError = /令牌未配置或无权限/.test(String(e.message)); } // 区分"未授权"与"不可达"，前端引导配置令牌
       const byId = new Map();
       for (const e of reg.agents) {
@@ -1845,7 +2015,7 @@ const server = http.createServer(async (req, res) => {
       if (!dep) return json(res, 400, { error: '助手未上岗' });
       const arm = await getArmAgent(agent_id);
       const toolsAvail = dep.toolset.map(t => t.tool).join(', ');
-      const sys = '你是工业智能体平台的工作台设计师。根据助手档案生成工作台 DSL（JSON）。面板类型只允许: realtime_list(实时告警流)/status_grid(设备状态矩阵)/agent_dialog(诊断对话)/action_group(操作区)/kpi_strip(指标条)/inspection_report(自检报告)。结构: {"workbench":"名称","owner_agent":"agentId","version":"v0.1-draft","layout":[...],"panels":[{"id","type","title","refresh"}...]}。action_group 的 panels 含 "actions":[{"id","label","orchestration","autonomy","confirm":{"text","double_check"}}]，orchestration 只能引用这些: logic://设备复位流程@mock / logic://告警派工@mock / logic://服务滚动重启@mock / logic://环境自检@mock。只输出 JSON，不要 markdown 代码围栏。';
+      const sys = '你是工业智能体平台的工作台设计师。根据助手档案生成工作台 DSL（JSON）。面板类型只允许: realtime_list(实时告警流)/status_grid(设备状态矩阵)/agent_dialog(诊断对话)/action_group(操作区)/kpi_strip(指标条)/inspection_report(自检报告)。结构: {"workbench":"名称","owner_agent":"agentId","version":"v0.1-draft","layout":[...],"panels":[{"id","type","title"}...]}。action_group 的 panels 含 "actions":[{"id","label","orchestration","autonomy","confirm":{"text","double_check"}}]，orchestration 只能引用这些: logic://设备复位流程@mock / logic://告警派工@mock / logic://服务滚动重启@mock / logic://环境自检@mock。只输出 JSON，不要 markdown 代码围栏。';
       const user = `助手: ${arm.name} ${arm.version}\n职责: ${arm.prompt}\n可用工具: ${toolsAvail}\n默认自主级别: ${dep.default_autonomy}\n请生成 4-6 个面板，含一个 agent_dialog 和一个 action_group。`;
       const out = await llmComplete(sys, user);
       const cleaned = out.replace(/```json|```/g, '').trim();
@@ -1950,6 +2120,17 @@ const server = http.createServer(async (req, res) => {
       try { const m = saveCollection(await body(req)); return json(res, 200, { collection: m }); }
       catch (e) { return json(res, 400, { error: e.message }); }
     }
+    if (req.method === 'GET' && pathname === '/api/store/version') { // 变更版本轻端点：面板 watch 轮询（08 契约 §4）
+      const manifest = loadCollection(String(url.searchParams.get('name') || ''));
+      if (!manifest) return json(res, 404, { error: '数据集不存在' });
+      const wb = url.searchParams.get('wb') || undefined;
+      const ws = url.searchParams.get('ws') || 'default';
+      if (scopeOf(manifest) === 'agent' && wb && wb !== manifest.owner_agent) {
+        return json(res, 403, { error: '数据集为助手私有' });
+      }
+      const row = dbFor(manifest, ws).prepare('SELECT v FROM _meta WHERE k = ?').get(`ver:${manifest.name}`);
+      return json(res, 200, { version: +(row ? row.v : 0) });
+    }
     let mStore = pathname.match(/^\/api\/store\/([a-z0-9_-]+)\/records$/);
     if (mStore) {
       const manifest = loadCollection(mStore[1]);
@@ -2051,6 +2232,94 @@ const server = http.createServer(async (req, res) => {
       return json(res, 400, { error: 'kind 须为 system|plugin' });
     }
 
+    // ── UI 资产分发（ARM 三资产模型）：预览 / 发布 / 市场列表 / 安装 ──
+    if (req.method === 'GET' && pathname === '/api/assets/preview') { // 分享确认框数据：组包预览（requires 全文明示，红线③）
+      const type = url.searchParams.get('type');
+      const key = type === 'panel' ? url.searchParams.get('id') : url.searchParams.get('agentId');
+      if (!['panel', 'workbench'].includes(type) || !key) return json(res, 400, { error: 'type 须为 panel|workbench，且提供 id 或 agentId' });
+      try {
+        const bundle = buildAssetBundle(type, key);
+        return json(res, 200, { name: bundle.name, manifest: bundle.manifest, files: bundle.files.map((f) => f.path) });
+      } catch (e) { return json(res, 400, { error: String(e.message).slice(0, 300) }); }
+    }
+    if (req.method === 'POST' && pathname === '/api/assets/share') {
+      const { type, id, agentId, name, bind_agent } = await body(req); // type: panel|workbench；panel 用 id=插件id，workbench 用 agentId
+      const key = type === 'panel' ? id : agentId;
+      if (!['panel', 'workbench'].includes(type) || !key) return json(res, 400, { error: 'type 须为 panel|workbench，且提供 id（插件）或 agentId（工作台）' });
+      try {
+        const bundle = buildAssetBundle(type, key, name);
+        // 分享预检（红字提示用）：requires 全文回传前端人审确认
+        const fd = new FormData();
+        fd.append('file', new Blob([zipFiles(bundle.files)], { type: 'application/zip' }), `${bundle.name}.zip`);
+        const uploaded = await armUpload('/api/v1/ui-assets', fd);
+        const armRef = { skill_name: bundle.name, version: uploaded.version, file_hash: uploaded.fileHash, shared_at: new Date().toISOString() };
+        if (type === 'panel') {
+          const full = loadPanelPlugin(id);
+          full.arm_ref = armRef;
+          fs.writeFileSync(path.join(PANELS_DIR, `${id}.json`), JSON.stringify(full, null, 2));
+        } else {
+          const target = loadDraft(agentId) ? draftPath(agentId) : path.join(WB_DIR, `${agentId}.json`);
+          const dsl = JSON.parse(fs.readFileSync(target, 'utf8'));
+          dsl.arm_ref = armRef;
+          fs.writeFileSync(target, JSON.stringify(dsl, null, 2));
+        }
+        let bound = null;
+        if (bind_agent) { // 发布后顺手绑定到当前助手（三资产组合：员工自带工位）
+          const r = await armRest(`/api/v1/agents/${bind_agent}/ui-assets`, { method: 'POST', body: JSON.stringify({ name: bundle.name }) });
+          bound = r && r.version;
+        }
+        metric({ kind: 'asset_share', type, name: bundle.name, version: uploaded.version });
+        audit({ actor: 'asset-share', target: 'ARM', type, name: bundle.name, version: uploaded.version, bound });
+        return json(res, 200, { name: bundle.name, version: uploaded.version, requires: bundle.manifest.requires, bound });
+      } catch (e) { return json(res, 400, { error: String(e.message).slice(0, 400) }); }
+    }
+    if (req.method === 'GET' && pathname === '/api/assets/arm-library') {
+      const keyword = url.searchParams.get('keyword') || '';
+      const assetType = url.searchParams.get('asset_type') || '';
+      try {
+        const q = new URLSearchParams({ pageSize: '50', ...(keyword ? { keyword } : {}), ...(assetType ? { assetType } : {}) });
+        const d = await armRest(`/api/v1/ui-assets?${q}`);
+        const refs = localArmRefs();
+        const items = (d.uiAssets || []).map((a) => {
+          const local = refs[a.name] || [];
+          return {
+            name: a.name, description: a.description, asset_type: a.assetType, updated_at: a.updatedAt,
+            download_count: a.downloadCount, latest_version: a.latestVersion ? a.latestVersion.version : null,
+            publisher: a.creatorName,
+            installed: local.length > 0,
+            upgrade_available: !!(a.latestVersion && local.some((l) => l.file_hash && l.file_hash !== a.latestVersion.fileHash)),
+            local,
+          };
+        });
+        return json(res, 200, { items });
+      } catch (e) { return json(res, 400, { error: String(e.message).slice(0, 300) }); }
+    }
+    if (req.method === 'POST' && pathname === '/api/assets/install') {
+      const { name, version, agentId } = await body(req); // agentId：workbench 资产的目标助手（必填）；panel 资产可省
+      if (!name) return json(res, 400, { error: 'name 不能为空' });
+      try {
+        const detail = await armRest(`/api/v1/ui-assets/${encodeURIComponent(name)}`);
+        if (detail.assetType === 'workbench' && !agentId) return json(res, 400, { error: '工作台资产须指定目标助手 agentId' });
+        const ver = version || (detail.versions && detail.versions[0] && detail.versions[0].version) || 'v1';
+        const { buf, hash } = await armDownload(`/api/v1/ui-assets/${encodeURIComponent(name)}/versions/${encodeURIComponent(ver)}/download`);
+        const result = installAssetFiles(unzipFiles(buf), { agentId, mode: 'draft' }); // 手动安装进草稿，人审发布
+        // 回填真实 file_hash（升级判断用）
+        if (result.panels.length) {
+          for (const p of result.panels) {
+            const full = loadPanelPlugin(p.id);
+            if (full?.arm_ref?.skill_name === name) { full.arm_ref.file_hash = hash; fs.writeFileSync(path.join(PANELS_DIR, `${p.id}.json`), JSON.stringify(full, null, 2)); }
+          }
+        }
+        if (agentId && result.workbench) {
+          const target = draftPath(agentId);
+          const cur = JSON.parse(fs.readFileSync(target, 'utf8'));
+          if (cur.arm_ref?.skill_name === name) { cur.arm_ref.file_hash = hash; fs.writeFileSync(target, JSON.stringify(cur, null, 2)); }
+        }
+        metric({ kind: 'asset_install', name, version: ver });
+        return json(res, 200, result);
+      } catch (e) { return json(res, 400, { error: String(e.message).slice(0, 400) }); }
+    }
+
     // ── 草稿管理 ──
     if (req.method === 'DELETE' && pathname === '/api/workbench/draft') {
       const { agent_id } = await body(req);
@@ -2075,6 +2344,8 @@ const server = http.createServer(async (req, res) => {
           s.context.systemPrompt = devSystemPrompt();
         }
         s.context.messages.push({ role: 'user', content: message, timestamp: Date.now() });
+        const dropped = trimDevContext(s.context);
+        if (dropped > 0) emit('status', { text: `会话历史过长，已自动裁剪最早 ${dropped} 条消息` });
         await devChatLoop(s, emit, ctl.signal);
         emit('meta', { hasDraft: !!loadDraft(agentId) });
       } catch (e) { emit('error', { message: e.message }); }
@@ -2206,11 +2477,10 @@ const server = http.createServer(async (req, res) => {
       const { agentId, name, description, content } = await body(req);
       const arm = agentProfileNow(agentId);
       const full = ['---', 'kind: experience', 'source: aims-platform-mvp', `agent: ${arm.name || agentId}@${arm.version || ''}`, 'scenario: 立库A区智能运维@mvp', '---', '', content].join('\n');
-      const r = await mcpCall('create_knowledge', { name, description: description || `工作台人工审阅沉淀`, content: full, tags: ['MVP回流'] }, { pat: true });
-      const kid = (r.match(/id:\s*([0-9a-f-]{36})/) || [])[1] || '';
-      metric({ kind: 'experience', agentId, title: name, knowledge_id: kid });
+      const r = await armCreateKnowledge({ name, description: description || `工作台人工审阅沉淀`, content: full, tags: ['MVP回流'] });
+      metric({ kind: 'experience', agentId, title: name, knowledge_id: r.id });
       audit({ actor: 'experience-reflow', target: 'ARM', name });
-      return json(res, 200, { result: r });
+      return json(res, 200, { result: `已创建 ${r.name}（id: ${r.id}）${r.shareUrl ? `\n${r.shareUrl}` : ''}`, knowledge_id: r.id, share_url: r.shareUrl || '' });
     }
     // ── 自进化看板 ──
     if (req.method === 'GET' && pathname === '/api/evolution') {
@@ -2289,7 +2559,7 @@ applyLLMConfig().then(() => {
   server.listen(PORT, HOST, () => {
     console.log(`[aims-workstation] http://localhost:${PORT}（绑定 ${HOST}） | 模型: ${model.id} @ ${model.baseUrl}`);
     console.log(`[aims-workstation] 数据目录 AIMS_HOME: ${AIMS_HOME}`);
-    console.log(`[aims-workstation] ARM: ${armMcpUrl()} | REST: ${armApiBase()} | PAT: ${ARM_PAT ? '已加载' : '未配置'} | 已上岗助手: ${fs.readdirSync(DEPLOY_DIR).length} | 本地助手库: ${loadRegistry().agents.length}`);
+      console.log(`[aims-workstation] ARM(REST): ${armApiBase()} | PAT: ${ARM_PAT ? '已加载' : '未配置'} | 已上岗助手: ${fs.readdirSync(DEPLOY_DIR).length} | 本地助手库: ${loadRegistry().agents.length}`);
   });
   // 已上岗助手后台物化为本地档案（best-effort；ARM 不可达时静默跳过，待手动同步）
   (async () => {