吸收数字员工管理端服务恢复运营预览

qimingclaw/crates/agent-electron-client/scripts/check-digital-employee.js

@@ -2053,15 +2053,29 @@ function checkDigitalAdminServiceOperationsWorkbench() {
     [service, "service_operations", "backend service operations view"],
     [service, "isServiceOperationsRow", "backend service operations matcher"],
     [service, "managed_service", "backend managed service classifier"],
+    [service, "managed_service_snapshot", "backend managed service snapshot classifier"],
+    [service, "service_lease", "backend service lease classifier"],
     [service, "service_restart", "backend service restart classifier"],
+    [service, "service_recovery", "backend service recovery classifier"],
     [dto, "service_id", "backend service id row field"],
+    [dto, "service_lease_id", "backend service lease row field"],
+    [dto, "restart_record_id", "backend service restart record row field"],
+    [dto, "recovery_policy_id", "backend service recovery policy row field"],
+    [dto, "auto_recovery_status", "backend auto recovery status row field"],
     [test, "queryAdminWorkbenchServiceOperationsReturnsServiceHealthAndRestartRowsOnly", "backend service operations test"],
+    [test, "queryAdminWorkbenchServiceOperationsReturnsLeaseRestartAndRecoveryRowsOnly", "backend service recovery operations test"],
     [qimingTypes, "service_operations", "qiming service operations view type"],
     [qimingTypes, "service_id", "qiming service id field"],
+    [qimingTypes, "service_lease_id", "qiming service lease id field"],
+    [qimingTypes, "restart_record_id", "qiming restart record id field"],
+    [qimingTypes, "recovery_policy_id", "qiming recovery policy id field"],
+    [qimingTypes, "auto_recovery_status", "qiming auto recovery status field"],
     [qimingOps, "服务运营", "qiming service operations tab"],
     [qimingOps, "只记录复核/忽略意图", "qiming service operations safety copy"],
     [qimingOps, "不开放 start/stop", "qiming service start stop guard copy"],
-    [docs, "正式外部管理端服务运营台预览", "docs service operations absorption"],
+    [qimingOps, "不接管 lease", "qiming service lease takeover guard copy"],
+    [qimingOps, "不自动恢复服务", "qiming service auto recovery guard copy"],
+    [docs, "正式管理端服务恢复运营预览", "docs service recovery absorption"],
   ];
   const missing = requiredSnippets
     .filter(([content, snippet]) => !content.includes(snippet))

qimingclaw/docs/digital-employee-frontend-integration-plan.md

@@ -573,8 +573,8 @@ GET /api/digital-employee/approvals
    - 建议：下一轮围绕正式管理端治理策略和 ACP 硬中断安全设计，把本地治理审计推进到完整跨端裁决与执行控制。
 
 5. **ManagedService 控制面**
-   - 已吸收：Agent、MCP、Computer Server、Lanproxy、File Server、GUI Server 状态已进入 snapshot / projection；File Server 与 GUI Server 已开放白名单式 restart bridge，并会写入 `managed_service_restart` / `managed_service_restart_rejected` 事件，安全服务 restart bridge 已开始闭环。完整人机介入入口已开始吸收，embedded 新增“处置台”聚合服务异常、诊断风险、审计风险和策略拉取错误，支持批量标记已看、忽略、策略重拉和白名单服务安全重启。正式外部管理端服务运营台预览已开始吸收，qiming-backend 新增 `service_operations` 运营台视图聚合 managed service 快照、服务诊断和重启审计，qiming“数字员工运营台”新增“服务运营” tab，并只开放复核/忽略等低风险动作意图，不开放 start/stop。
-   - 缺口：仍缺少 start / stop、lease 持久化、重启历史、自动恢复策略和完整外部管理端服务运营台；Agent、MCP、Computer Server、Lanproxy 等高风险服务不暴露数字员工重启动作。
+   - 已吸收：Agent、MCP、Computer Server、Lanproxy、File Server、GUI Server 状态已进入 snapshot / projection；File Server 与 GUI Server 已开放白名单式 restart bridge，并会写入 `managed_service_restart` / `managed_service_restart_rejected` 事件，安全服务 restart bridge 已开始闭环。完整人机介入入口已开始吸收，embedded 新增“处置台”聚合服务异常、诊断风险、审计风险和策略拉取错误，支持批量标记已看、忽略、策略重拉和白名单服务安全重启。正式外部管理端服务运营台预览已开始吸收，qiming-backend 新增 `service_operations` 运营台视图聚合 managed service 快照、服务诊断和重启审计，qiming“数字员工运营台”新增“服务运营” tab，并只开放复核/忽略等低风险动作意图，不开放 start/stop。正式管理端服务恢复运营预览已开始吸收，`service_operations` 继续聚合 service lease、restart record、recovery policy 和 doctor service issue，qiming 详情可展示 lease holder/到期时间、重启次数/最近重启、恢复策略和自动恢复状态，并明确不接管 lease、不自动恢复服务。
+   - 缺口：仍缺少真实 start / stop、lease 接管执行、自动恢复执行和完整外部管理端服务运营台；Agent、MCP、Computer Server、Lanproxy 等高风险服务不暴露数字员工重启动作。
    - 建议：先沉淀安全重启审计和人工确认体验，再评估更细粒度的服务恢复策略。
 
 6. **技能生命周期与策略**