agentworkshop 0.2.1

package/scripts/e2e-agent-channel-task.ts

@@ -0,0 +1,151 @@
+/**
+ * 端到端验证:Agent 模板 → Channel → 克隆实例 → 提交任务 → 监控执行过程。
+ *
+ * 流程:
+ *  1. createAgent(name, harness, config)         → 创建 Agent 模板(可复用)
+ *  2. createChannel({ name, leadAgent })          → 创建 Channel(内部:lead 模板 + 克隆实例)
+ *  3. addAgentToChannel({ channelId, agentId })   → 把 Agent 模板克隆进 Channel(独立身份 id)
+ *  4. ensureChannelActive + submitChannelTask      → 提交任务,lead 调度,worker 执行
+ *  5. monitorChannel → 实时观察 task.status / task.progress / agent.status / agent.event
+ *
+ * 运行: npx tsx scripts/e2e-agent-channel-task.ts
+ */
+import type { DatabaseSync } from 'node:sqlite'
+import { openWorkshopDb } from '../server/services/workshop/db/database'
+import { createChannelRepo } from '../server/services/workshop/db/channel.repo'
+import { createAgentRepo } from '../server/services/workshop/db/agent.repo'
+import { createChannelAgentRepo } from '../server/services/workshop/db/channel-agent.repo'
+import { createTaskRepo } from '../server/services/workshop/db/task.repo'
+import { createMemoryRepo } from '../server/services/workshop/db/memory.repo'
+import { createChannelEventRepo } from '../server/services/workshop/db/channel-event.repo'
+import { createTeamRepo } from '../server/services/workshop/db/team.repo'
+import { createTeamMemberRepo } from '../server/services/workshop/db/team-member.repo'
+import { createMessageRepo } from '../server/services/workshop/db/message.repo'
+import { createSubscriptionRepo } from '../server/services/workshop/db/subscription.repo'
+import { createAgentChannelManager } from '../server/services/workshop/runtime/manager'
+import type { AgentChannelManager } from '../server/services/workshop/runtime/manager'
+import { createAgentImpl } from '../server/services/workshop/agents/factory'
+import { monitorChannel } from '../server/services/workshop/runtime/monitor'
+
+let failures = 0
+
+function check(name: string, ok: boolean, detail = ''): void {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+function makeManager(db: DatabaseSync): AgentChannelManager {
+  return createAgentChannelManager({
+    repos: {
+      channels: createChannelRepo(db),
+      agents: createAgentRepo(db),
+      channelAgents: createChannelAgentRepo(db),
+      messages: createMessageRepo(db),
+      subscriptions: createSubscriptionRepo(db),
+      tasks: createTaskRepo(db),
+      memories: createMemoryRepo(db),
+
+      channelEvents: createChannelEventRepo(db),
+
+      teams: createTeamRepo(db),
+
+      teamMembers: createTeamMemberRepo(db),
+    },
+    implFactory: createAgentImpl,
+    db,
+  })
+}
+
+async function main(): Promise<void> {
+  console.log('━━━ 端到端:Agent 模板 → Channel → 任务执行 → 监控 ━━━')
+  const db = openWorkshopDb(':memory:')
+  const manager = makeManager(db)
+  try {
+    // ---- 1. 创建 Agent 模板(可复用数据结构)----
+    console.log('\n--- 1. 创建 Agent 模板 ---')
+    const workerTpl = await manager.createAgent({
+      name: 'worker-执行者',
+      harness: 'mock',
+      config: { delayMs: 60 },
+    })
+    check('创建 Agent 模板成功', !!workerTpl.id)
+    check('模板无 channel 绑定(纯定义)', workerTpl.instances.length === 0)
+
+    // ---- 2. 创建 Channel(带 lead)----
+    console.log('\n--- 2. 创建 Channel ---')
+    const ch = await manager.createChannel({
+      name: '端到端演示频道',
+      description: 'Agent 模板复用 → Channel 克隆实例 → 任务监控',
+      leadAgent: { name: 'lead-主理人', harness: 'mock', config: { delayMs: 60 } },
+    })
+    check('创建 Channel 成功', !!ch.channelId && !!ch.leadAgentId)
+    check('lead 是独立实例(与 worker 模板 id 不同)', ch.leadAgentId !== workerTpl.id)
+
+    // ---- 3. 把 Agent 模板放入 Channel(克隆独立身份 id)----
+    console.log('\n--- 3. Agent 模板放入 Channel(克隆)---')
+    const worker = await manager.addAgentToChannel({
+      channelId: ch.channelId,
+      agentId: workerTpl.id,
+      role: 'worker',
+    })
+    check('克隆出独立实例 id(≠ 模板 id)', worker.id !== workerTpl.id, `inst=${worker.id.slice(0, 8)} tpl=${workerTpl.id.slice(0, 8)}`)
+    check('实例复制模板 name/harness', worker.name === 'worker-执行者' && worker.harness === 'mock')
+    const members = await manager.listChannelAgents(ch.channelId)
+    check('Channel 成员 = 1 lead + 1 worker', members.length === 2 && members.some(a => a.role === 'lead') && members.some(a => a.role === 'worker'))
+
+    // ---- 4. 激活 channel + 挂监控 ----
+    console.log('\n--- 4. 激活 channel + 挂监控 ---')
+    manager.ensureChannelActive(ch.channelId, { tickMs: 50 })
+    check('channel 已激活', manager.runtimeStatus().activeChannels.includes(ch.channelId))
+    const mon = monitorChannel(manager, ch.channelId)
+    check('监控器已启动', mon.events.some(e => e.kind === 'lifecycle'))
+
+    // ---- 5. 提交任务 ----
+    console.log('\n--- 5. 提交任务 ---')
+    const task = await manager.submitChannelTask({
+      channelId: ch.channelId,
+      title: '端到端验证任务',
+      description: '从模板创建 Agent → 克隆进 Channel → 执行任务',
+    })
+    check('任务已提交(SUBMITTED)', !!task.id && task.state === 'SUBMITTED', `state=${task.state}`)
+
+    // ---- 6. 监控执行过程(等待 COMPLETED)----
+    console.log('\n--- 6. 监控执行过程 ---')
+    const done = await mon.waitFor(e => e.kind === 'task.status' && e.state === 'COMPLETED', 10_000)
+    check('任务执行完成(COMPLETED)', done !== null)
+
+    const seenBusy = mon.events.some(e => e.kind === 'agent.status' && e.state === 'busy')
+    const seenIdle = mon.events.some(e => e.kind === 'agent.status' && e.state === 'idle')
+    const seenAssigned = mon.events.some(e => e.kind === 'task.status' && e.state === 'ASSIGNED')
+    const seenWorking = mon.events.some(e => e.kind === 'task.status' && e.state === 'WORKING')
+    const seenArtifact = mon.events.some(e => e.kind === 'agent.event' && e.event.kind === 'artifact')
+    const seenProgress = mon.events.some(e => e.kind === 'task.progress' && e.progress > 0)
+    check('监控到成员 busy → idle 状态流转', seenBusy && seenIdle)
+    check('监控到 lead dispatch(ASSIGNED 子任务)', seenAssigned)
+    check('监控到任务进入 WORKING', seenWorking)
+    check('监控到进度上报(progress > 0)', seenProgress)
+    check('监控到产物 artifact 产出', seenArtifact)
+
+    // 终态校验:主任务 COMPLETED + 有汇总成果
+    const finalTask = await manager.getTask(ch.channelId, worker.id, task.id)
+    check('主任务终态 COMPLETED', finalTask?.state === 'COMPLETED', `state=${finalTask?.state}`)
+    check('主任务有成果(artifacts)', (finalTask?.artifacts.length ?? 0) > 0, `n=${finalTask?.artifacts.length}`)
+
+    // ---- 7. 打印监控时间线 ----
+    console.log('\n--- 监控时间线 ---')
+    console.log(mon.summary())
+    mon.stop()
+  }
+  finally {
+    await manager.shutdown()
+    db.close()
+  }
+
+  console.log(`\n${failures === 0 ? 'ALL PASS' : `${failures} FAILED`}`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((e) => {
+  console.error(e)
+  process.exit(1)
+})

package/scripts/e2e-agent-team.mjs

@@ -0,0 +1,168 @@
+/**
+ * AgentTeam 端到端真实测试(对运行中的 dev server):
+ *  1. 创建 Agent 模板(mock harness,真实任务执行)
+ *  2. AgentTeam CRUD + 成员加入/移除(含 409 冲突)
+ *  3. 批量部署 AgentTeam → Channel(一次部署 3 实例,免逐个放置)
+ *  4. 向 channel 提交任务 → lead 分发 → worker 真实执行 → COMPLETED
+ *  5. 成员移除 / team 更新 / 删除
+ * 运行: node scripts/e2e-agent-team.mjs [--base http://127.0.0.1:3000]
+ */
+const BASE = (process.argv.find(a => a.startsWith('--base='))?.slice(7) ?? 'http://127.0.0.1:3000') + '/api/workshop'
+
+let pass = 0
+let fail = 0
+const results = []
+
+function check(name, ok, detail = '') {
+  const line = `  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`
+  results.push(line)
+  console.log(line)
+  ok ? pass++ : fail++
+}
+
+// 用户级隔离:注册测试用户;管理面 API 全程携带用户 token
+const __user = await fetch(BASE + '/users/register', {
+  method: 'POST', headers: { 'content-type': 'application/json' },
+  body: JSON.stringify({ name: 'e2e-' + Math.random().toString(36).slice(2, 10) }),
+}).then(r => r.json()).catch(() => null)
+const __userToken = __user?.data?.token
+if (!__userToken) {
+  console.error('用户注册失败')
+  process.exit(1)
+}
+
+async function req(method, path, body) {
+  const res = await fetch(`${BASE}${path}`, {
+    method,
+    headers: {
+      authorization: `Bearer ${__userToken}`,
+      ...(body ? { 'content-type': 'application/json' } : {}),
+    },
+    body: body ? JSON.stringify(body) : undefined,
+  })
+  return { status: res.status, json: await res.json().catch(() => null) }
+}
+
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+async function waitTaskTerminal(taskId, timeoutMs) {
+  const start = Date.now()
+  let state = ''
+  while (Date.now() - start < timeoutMs) {
+    const { json } = await req('GET', `/tasks/${taskId}`)
+    state = json?.data?.state ?? ''
+    if (['COMPLETED', 'FAILED', 'CANCELED'].includes(state)) return { state, json }
+    await sleep(500)
+  }
+  return { state, json: null }
+}
+
+const cleanup = { channelId: null, agentIds: [], teamId: null }
+
+async function main() {
+  console.log('━━━ 1. 创建 Agent 模板(mock harness)━━━')
+  const lead = await req('POST', '/agents', { name: 'team-lead', harness: 'mock' })
+  const w1 = await req('POST', '/agents', { name: 'team-worker-1', harness: 'mock' })
+  const w2 = await req('POST', '/agents', { name: 'team-worker-2', harness: 'mock' })
+  const LEAD = lead.json.data.id, W1 = w1.json.data.id, W2 = w2.json.data.id
+  cleanup.agentIds = [LEAD, W1, W2]
+  check('创建 3 个模板', !!LEAD && !!W1 && !!W2, `lead=${LEAD.slice(0, 8)}…`)
+
+  console.log('━━━ 2. AgentTeam CRUD + 成员管理 ━━━')
+  const team = await req('POST', '/teams', { name: 'E2E Team', description: 'e2e test team' })
+  const TEAM = team.json.data.id
+  cleanup.teamId = TEAM
+  check('创建 team', team.json.code === 0 && !!TEAM, `team=${TEAM.slice(0, 8)}…`)
+
+  const addLead = await req('POST', `/teams/${TEAM}/members`, { agentId: LEAD, role: 'lead' })
+  check('加入 lead 成员', addLead.json.data.members.length === 1 && addLead.json.data.members[0].role === 'lead')
+  await req('POST', `/teams/${TEAM}/members`, { agentId: W1 })
+  const addW2 = await req('POST', `/teams/${TEAM}/members`, { agentId: W2 })
+  check('加入 2 个 worker 成员', addW2.json.data.members.length === 3, `members=${addW2.json.data.members.length}`)
+
+  const dup = await req('POST', `/teams/${TEAM}/members`, { agentId: W1 })
+  check('重复加入 → 409 ALREADY_MEMBER', dup.json.code === 'ALREADY_MEMBER')
+
+  const dupLead = await req('POST', `/teams/${TEAM}/members`, { agentId: W2, role: 'lead' })
+  check('重复 lead → 409', dupLead.json.code === 'LEAD_EXISTS' || dupLead.json.code === 'ALREADY_MEMBER', `code=${dupLead.json.code}`)
+
+  const missingTpl = await req('POST', `/teams/${TEAM}/members`, { agentId: '00000000-0000-0000-0000-000000000000' })
+  check('加入不存在的模板 → 404', missingTpl.json.code === 'NOT_FOUND')
+
+  const got = await req('GET', `/teams/${TEAM}`)
+  check('GET team 详情', got.json.data.name === 'E2E Team' && got.json.data.members.length === 3)
+
+  const membersList = await req('GET', `/teams/${TEAM}/members`)
+  check('GET team 成员列表', membersList.json.data.length === 3)
+
+  const listAll = await req('GET', '/teams')
+  check('GET teams 列表含新 team', listAll.json.data.some(t => t.id === TEAM))
+
+  console.log('━━━ 3. 批量部署 AgentTeam → Channel ━━━')
+  const ch = await req('POST', '/channels', { name: 'team-channel', description: 'deployed from team' })
+  const CH = ch.json.data.channelId
+  cleanup.channelId = CH
+  check('创建空 channel', ch.json.code === 0 && !!CH, `channel=${CH.slice(0, 8)}…`)
+
+  const deploy = await req('POST', `/teams/${TEAM}/deploy`, { channelId: CH })
+  const agents = deploy.json.data?.agents ?? []
+  check('一次部署 3 实例', agents.length === 3, JSON.stringify(agents.map(a => `${a.name}:${a.role}`)))
+  const chLead = agents.find(a => a.role === 'lead')
+  check('部署结果含 lead 实例', !!chLead)
+
+  const chDetail = await req('GET', `/channels/${CH}`)
+  check('channel 含 3 个 agent 实例', chDetail.json.data.agents.length === 3)
+  check('channel leadAgentId 已设定', chDetail.json.data.leadAgentId === chLead?.id)
+
+  const redeploy = await req('POST', `/teams/${TEAM}/deploy`, { channelId: CH })
+  check('二次部署 → 409 LEAD_EXISTS', redeploy.json.code === 'LEAD_EXISTS')
+
+  const deploy404 = await req('POST', `/teams/00000000-0000-0000-0000-000000000000/deploy`, { channelId: CH })
+  check('部署不存在的 team → 404', deploy404.json.code === 'NOT_FOUND')
+
+  console.log('━━━ 4. 通过 channel 提交任务 → 真实执行 ━━━')
+  const task = await req('POST', `/channels/${CH}/tasks`, {
+    title: 'team e2e task',
+    description: 'verify team-deployed channel executes tasks',
+  })
+  const TASK = task.json.data?.id
+  check('提交任务到 channel', task.json.code === 0 && !!TASK, `task=${TASK?.slice(0, 8)}…`)
+
+  const { state, json } = await waitTaskTerminal(TASK, 30_000)
+  check('任务真实执行至 COMPLETED', state === 'COMPLETED', `state=${state}`)
+  const t = json?.data
+  if (t) {
+    console.log(`  task: state=${t.state} progress=${t.progress} artifacts=${t.artifacts.length} history=${t.history.length}`)
+  }
+  // 部署的 worker 实例应消费了子任务:channel 内应有 COMPLETED 的子任务且 assignee 非 lead
+  const chTasks = await req('GET', `/channels/${CH}/tasks`)
+  const childDone = (chTasks.json.data ?? []).filter(x => x.state === 'COMPLETED' && x.id !== TASK)
+  check('lead 分发子任务且 worker 完成', childDone.length >= 1, `completed children=${childDone.length}`)
+
+  console.log('━━━ 5. 成员移除 + team 更新/删除 ━━━')
+  const rm = await req('DELETE', `/teams/${TEAM}/members/${W2}`)
+  check('移除成员 → 剩 2 个', rm.json.data.members.length === 2)
+
+  const rmAgain = await req('DELETE', `/teams/${TEAM}/members/${W2}`)
+  check('再删同成员 → 404', rmAgain.json.code === 'NOT_FOUND')
+
+  const patch = await req('PATCH', `/teams/${TEAM}`, { name: 'E2E Team v2' })
+  check('PATCH team 改名', patch.json.data.name === 'E2E Team v2')
+
+  const del = await req('DELETE', `/teams/${TEAM}`)
+  check('DELETE team', del.json.data.removed === true)
+  const gone = await req('GET', `/teams/${TEAM}`)
+  check('删除后 GET → 404', gone.json.code === 'NOT_FOUND')
+
+  console.log(`\n━━━ 结果: PASS=${pass} FAIL=${fail} ━━━`)
+}
+
+try {
+  await main()
+}
+finally {
+  // 清理测试数据(channel 级联清实例/任务;再删模板)
+  if (cleanup.channelId) await req('DELETE', `/channels/${cleanup.channelId}`)
+  for (const id of cleanup.agentIds) await req('DELETE', `/agents/${id}`)
+}
+process.exit(fail === 0 ? 0 : 1)

package/scripts/e2e-auth-matrix.mjs

@@ -0,0 +1,119 @@
+/**
+ * API 鉴权矩阵端到端验证
+ * ============================================================
+ * 原则:业务 API 必须 401(无 token)/ 正常(有效 token);公开 API(认证入口/A2A card)免 token。
+ *
+ * 矩阵:
+ *  1. 公开面(无需 token):register/login(workshop 遗留注册)、a2a agent card(协议公开发现)
+ *  2. 业务面(无 token → 401 USER_UNAUTHORIZED / ADMIN_REQUIRED):
+ *     - workshop: agents/teams/channel-templates/channels/workspaces/runtime/fs
+ *     - system: config/monitor
+ *     - game: brain/cmd
+ *     - users: 管理面(admin 门,无 token 同样 401)
+ *  3. 有效 token 下抽检关键路由返回 200/预期
+ */
+const BASE = process.env.BASE_URL ?? 'http://localhost:3001'
+
+let pass = 0
+let fail = 0
+function check(name, ok, detail = '') {
+  console.log(`${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (ok) {
+    pass++
+  }
+  else {
+    fail++
+  }
+}
+
+const api = async (method, path, { body, token } = {}) => {
+  const headers = { 'content-type': 'application/json' }
+  if (token) headers.authorization = `Bearer ${token}`
+  const res = await fetch(`${BASE}${path}`, {
+    method,
+    headers,
+    body: body ? JSON.stringify(body) : undefined,
+  })
+  let json
+  try {
+    json = await res.json()
+  }
+  catch {
+    json = {}
+  }
+  return { status: res.status, code: json.code, message: json.message, data: json.data }
+}
+
+/** 业务路由清单(方法, 路径, 有效 token 下预期状态码) */
+const BUSINESS_ROUTES = [
+  ['GET', '/api/system/config', 200],
+  ['GET', '/api/system/monitor', 200],
+  ['GET', '/api/workshop/agents', 200],
+  ['POST', '/api/workshop/agents', 200],
+  ['GET', '/api/workshop/teams', 200],
+  ['GET', '/api/workshop/channel-templates', 200],
+  ['GET', '/api/workshop/channels', 200],
+  ['POST', '/api/workshop/channels', 200],
+  ['GET', '/api/workshop/workspaces', 200],
+  ['GET', '/api/workshop/runtime', 200],
+  ['GET', '/api/workshop/fs/dirs', 200],
+  ['GET', '/api/users', 403], // 有 token 但非 admin → ADMIN_REQUIRED(无 token 401)
+  // 注:game/* 端点已随 2D RPG → 3D 小镇重构移除(2026),其鉴权语义由 town/device 域承担,此处不再断言
+]
+
+async function main() {
+  const stamp = Date.now().toString(36)
+
+  // ===== 1. 公开面 =====
+  console.log('=== 公开路由(免 token) ===')
+  const legacyReg = await api('POST', '/api/workshop/users/register', { body: { name: `authmx-legacy-${stamp}` } })
+  check('P1 workshop 遗留注册免 token 可达', legacyReg.status === 200 && legacyReg.code === 0, legacyReg.message)
+
+  const login = await api('POST', '/api/users/login', { body: { email: 'nonexistent@x.test', password: 'x' } })
+  check('P2 login 免 token 进入认证逻辑(凭据错误 401 而非拦截)', login.status === 401 && login.code === 'UNAUTHORIZED', login.message)
+
+  // a2a card:协议公开发现端点(不存在的 agent → 404,证明未被 401 拦截)
+  const card = await api('GET', '/api/workshop/a2a/none-such-agent/card')
+  check('P3 a2a agent card 免 token(404 而非 401)', card.status === 404, `status=${card.status}`)
+
+  // ===== 2. 业务面:无 token 全部 401 =====
+  console.log('\n=== 业务路由(无 token → 401) ===')
+  for (const [method, path] of BUSINESS_ROUTES) {
+    const r = await api(method, path)
+    check(`401 ${method} ${path}`, r.status === 401 && r.code === 'USER_UNAUTHORIZED', `status=${r.status} code=${r.code}`)
+  }
+
+  // ===== 3. 有效 token 下抽检 =====
+  console.log('\n=== 有效 token 行为抽检 ===')
+  const email = `authmx-user-${stamp}@test.local`
+  const reg = await api('POST', '/api/users/register', { body: { name: `authmx-main-${stamp}`, email, password: 'Passw0rd!123' } })
+  const token = reg.data?.token
+  if (!token) throw new Error(`注册失败: ${reg.message}`)
+
+  for (const [method, path, expectStatus] of BUSINESS_ROUTES) {
+    const body = method === 'POST' && (path.includes('/agents') || path.includes('/channels'))
+      ? (path.includes('/agents') ? { name: `mx-${stamp}`, harness: 'mock' } : { name: `mx-ch-${stamp}` })
+      : (method === 'POST' ? {} : undefined)
+    const r = await api(method, path, { token, body })
+    check(`${expectStatus} ${method} ${path}(带 token)`, r.status === expectStatus, `status=${r.status} code=${r.code}`)
+  }
+
+  // game/cmd 与 game/ws:游戏域端点已随 2D→3D 小镇重构移除(2026),check 从略。
+  // 等价鉴权语义由 workshop/town/device 域用例覆盖(见 test-dual-drive / e2e-rest-robustness)。
+  console.log('SKIP  game/cmd + game/ws(游戏域端点已移除,鉴权语义由 town/device 域覆盖)')
+
+  // ===== 4. users 管理面:无 token 401;普通 token 403 =====
+  console.log('\n=== 用户管理面分层 ===')
+  const noTok = await api('GET', '/api/users')
+  check('U1 /api/users 无 token → 401', noTok.status === 401 && noTok.code === 'USER_UNAUTHORIZED')
+  const userTok = await api('GET', '/api/users', { token })
+  check('U2 /api/users 普通用户 → 403 ADMIN_REQUIRED', userTok.status === 403 && userTok.code === 'ADMIN_REQUIRED')
+
+  console.log(`\n${pass} pass / ${fail} fail`)
+  process.exit(fail > 0 ? 1 : 0)
+}
+
+main().catch((e) => {
+  console.error('E2E 崩溃:', e)
+  process.exit(1)
+})