agentworkshop 0.2.1

package/scripts/test-lanes-history-render.mjs

@@ -0,0 +1,138 @@
+/**
+ * Lanes 历史回填渲染验证(浏览器级,dev server 127.0.0.1:3000 + Edge):
+ *  1. REST 建用户/channel(mock lead + worker,streamDemo 流式帧)+ 提交任务产生事件;
+ *  2. UI 登录进入控制台;
+ *  3. 刷新页面(ring 清空,只剩 WS 快照 + lane 回填路径)直达 ?view=lanes;
+ *  4. 断言:泳道渲染出历史事件块(非「暂无事件」)—— lane 历史按需加载生效;
+ *  5. 截图存证 gui-test-screenshots/lanes-history/。
+ * 运行: node scripts/test-lanes-history-render.mjs
+ */
+import puppeteer from 'puppeteer-core'
+import fs from 'node:fs'
+
+const EDGE = 'C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe'
+const BASE = 'http://127.0.0.1:3000'
+const OUT = 'gui-test-screenshots/lanes-history'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+const api = async (method, ep, { body, token } = {}) => {
+  const headers = { 'content-type': 'application/json' }
+  if (token) headers.authorization = `Bearer ${token}`
+  const res = await fetch(`${BASE}${ep}`, { method, headers, body: body ? JSON.stringify(body) : undefined })
+  return res.json()
+}
+
+let failures = 0
+const check = (name, ok, detail = '') => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+async function main() {
+  fs.mkdirSync(OUT, { recursive: true })
+  const tag = Date.now().toString(36)
+  const email = `lanes-${tag}@test.local`
+  const password = 'Passw0rd!123'
+  const reg = await api('POST', '/api/users/register', { body: { name: `lanes-${tag}`, email, password } })
+  const token = reg.data.token
+
+  // channel:mock lead/worker;lead 任务产生 task/状态/消息事件
+  const ch = await api('POST', '/api/workshop/channels', {
+    body: {
+      name: `lanes-hist-${tag}`,
+      leadAgent: { name: 'lead-mock', harness: 'mock', config: { delayMs: 100 } },
+    },
+    token,
+  })
+  const cid = ch.data.channelId
+  await api('POST', `/api/workshop/channels/${cid}/agents`, {
+    body: { name: 'worker-mock', harness: 'mock', role: 'worker', config: { delayMs: 120, streamDemo: true } },
+    token,
+  })
+  const ws = await api('POST', '/api/workshop/workspaces', { body: { name: `ws-${tag}` }, token })
+  await api('POST', `/api/workshop/workspaces/${ws.data.id}/channels/${cid}`, token && { token })
+  await api('POST', `/api/workshop/channels/${cid}/activate`, { token })
+  await api('POST', `/api/workshop/channels/${cid}/tasks`, {
+    body: { title: 'hist', description: ' lanes 历史回填验证', mode: 'goal', modeConfig: { goalCriteria: '全部完成' } },
+    token,
+  })
+  // 等事件落库(WORKING 阶段即产生 task.status/a2a.message/agent.status)
+  await sleep(4000)
+  const ev = await api('GET', `/api/workshop/channels/${cid}/events?limit=500`, { token })
+  const persisted = (ev.data?.items ?? []).length
+  console.log(`channel ${cid.slice(0, 8)} · 持久化事件 ${persisted} 帧`)
+  check('事件已持久化', persisted >= 4, `events=${persisted}`)
+
+  // ── 浏览器:登录 → 刷新后直达 lanes 视图 ──
+  const browser = await puppeteer.launch({
+    executablePath: EDGE,
+    headless: 'new',
+    args: ['--no-sandbox'],
+    defaultViewport: { width: 1600, height: 1000 },
+  })
+  const page = await browser.newPage()
+  const pageErrors = []
+  page.on('pageerror', e => pageErrors.push(e.message.slice(0, 160)))
+
+  await page.goto(`${BASE}/workshop`, { waitUntil: 'domcontentloaded' })
+  await sleep(2500)
+  const setInput = (sel, v) => page.$eval(sel, (el, val) => {
+    const proto = el.tagName === 'TEXTAREA' ? HTMLTextAreaElement.prototype : HTMLInputElement.prototype
+    const set = Object.getOwnPropertyDescriptor(proto, 'value').set
+    set.call(el, val)
+    el.dispatchEvent(new Event('input', { bubbles: true }))
+  }, v)
+  await setInput('input[type="email"]', email)
+  await setInput('input[type="password"]', password)
+  await sleep(200)
+  for (const b of await page.$$('button')) {
+    const txt = ((await b.evaluate(el => el.textContent)) || '').trim()
+    if (txt.replace(/\s/g, '') === '登录') {
+      await b.click()
+      break
+    }
+  }
+  await sleep(4500)
+  if (!page.url().includes('/workshop/w/')) {
+    for (const b of await page.$$('button')) {
+      const txt = ((await b.evaluate(el => el.textContent)) || '').trim()
+      if (txt.includes('进入控制台')) {
+        await b.click()
+        break
+      }
+    }
+    await sleep(3500)
+  }
+  const wsUrl = page.url()
+  console.log('控制台 URL:', wsUrl)
+
+  // 刷新(ring 清空)→ 直达 lanes 视图:历史只能来自 DB 回填路径
+  await page.goto(`${wsUrl.split('?')[0]}?view=lanes`, { waitUntil: 'domcontentloaded' })
+  await sleep(5000)
+  await page.screenshot({ path: `${OUT}/01-lanes-after-reload.png` })
+
+  const lanesInfo = await page.evaluate(() =>
+    [...document.querySelectorAll('.lane')].map(lane => ({
+      name: lane.querySelector('.lane-name')?.textContent?.trim() ?? '?',
+      blocks: lane.querySelectorAll('.event-block').length,
+      emptyText: lane.querySelector('.lane-empty')?.textContent?.trim() ?? '',
+      earlierBtn: !!lane.querySelector('.lane-earlier'),
+    })))
+  console.log('泳道渲染:', JSON.stringify(lanesInfo))
+  check('泳道列已渲染', lanesInfo.length >= 2, `lanes=${lanesInfo.length}`)
+  const withHistory = lanesInfo.filter(l => l.blocks > 0)
+  check('刷新后泳道渲染出历史事件块', withHistory.length >= 1,
+    withHistory.map(l => `${l.name}:${l.blocks}块`).join(' '))
+  const totalBlocks = lanesInfo.reduce((s, l) => s + l.blocks, 0)
+  check('历史块总量与持久化量级匹配', totalBlocks >= Math.min(4, persisted), `rendered=${totalBlocks} persisted=${persisted}`)
+  check('无页面错误', pageErrors.length === 0, pageErrors.join(' | ').slice(0, 200))
+
+  await browser.close()
+  console.log(failures === 0 ? '\n全部通过 ✔(截图见 ' + OUT + ')' : `\n${failures} 项失败 ✘`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((e) => {
+  console.error(e)
+  process.exit(1)
+})

package/scripts/test-loop-omp.mjs

@@ -0,0 +1,154 @@
+/**
+ * LOOP 模式 omp 实测:
+ *  - 模型:zhipu-coding-plan/glm-5-turbo
+ *  - 提交 [mode:loop][interval:8000] 任务 → lead 派发子任务 → worker 完成 →
+ *    父任务完成后 LoopController 在 interval 后重放同标题新任务
+ *  - 断言:两轮周期完成(重放生效)、每轮派发子任务、在途无重复、
+ *          邮件流有协作记录、取消活跃任务后循环停止
+ * 运行:node scripts/test-loop-omp.mjs(默认 http://127.0.0.1:3101;需 omp CLI)
+ */
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3101'
+const PROVIDER = 'zhipu-coding-plan'
+const MODEL = 'glm-5-turbo'
+const TITLE = 'loop-marker'
+const INTERVAL_MS = 8000
+
+let failures = 0
+let passed = 0
+const check = (name, ok, detail = '') => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (ok) passed += 1
+  else failures += 1
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+async function waitUntil(name, cond, timeoutMs, intervalMs = 3000) {
+  const deadline = Date.now() + timeoutMs
+  let last = null
+  while (Date.now() < deadline) {
+    try {
+      last = await cond()
+      if (last) return last
+    }
+    catch (e) { last = e }
+    await sleep(intervalMs)
+  }
+  throw new Error(`waitUntil timeout: ${name} (last=${String(last).slice(0, 160)})`)
+}
+
+const api = async (method, path, { body, token } = {}) => {
+  const headers = { 'content-type': 'application/json' }
+  if (token) headers.authorization = `Bearer ${token}`
+  const res = await fetch(`${BASE}${path}`, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined })
+  return { status: res.status, ...(await res.json().catch(() => ({}))) }
+}
+
+async function main() {
+  console.log(`目标: ${BASE}(模型 ${PROVIDER}/${MODEL})`)
+  const user = await api('POST', '/api/workshop/users/register', { body: { name: `loop-omp-${Date.now().toString(36)}` } })
+  const token = user.data?.token
+  if (!token) throw new Error('注册失败')
+
+  const ch = await api('POST', '/api/workshop/channels', {
+    body: {
+      name: `loop-${Date.now().toString(36)}`,
+      leadAgent: { name: 'loop-lead', harness: 'omp', config: { provider: PROVIDER, model: MODEL } },
+    },
+    token,
+  })
+  if (ch.code !== 0) throw new Error(`channel 创建失败: ${JSON.stringify(ch).slice(0, 140)}`)
+  const channelId = ch.data.channelId
+  const w = await api('POST', `/api/workshop/channels/${channelId}/agents`, {
+    body: { name: 'loop-worker', harness: 'omp', role: 'worker', config: { provider: PROVIDER, model: MODEL } },
+    token,
+  })
+  if (w.code !== 0) throw new Error('worker 创建失败')
+  check('团队就绪(omp lead + worker)', true, `channel=${channelId.slice(0, 8)}`)
+
+  const tasksOf = async () =>
+    (await api('GET', `/api/workshop/channels/${channelId}/tasks`, { token })).data ?? []
+  // 顶层 loop 主任务(lead 派发的子任务可能与父任务同标题,须按 parentId 区分)
+  const loopsOf = async () => (await tasksOf()).filter(t => t.title === TITLE && !t.parentId)
+
+  const t0 = Date.now()
+  const task = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
+    body: {
+      title: TITLE,
+      description: `[mode:loop][interval:${INTERVAL_MS}] Delegate to the worker: reply with a sentence containing the word LOOP-TICK, then complete.`,
+    },
+    token,
+  })
+  const parentId = task.data.id
+
+  // 第一轮完成
+  await waitUntil('loop 首轮完成', async () => {
+    const t = (await loopsOf()).find(x => x.id === parentId)
+    return t?.state === 'COMPLETED' ? t.state : null
+  }, 480_000)
+  check('loop 首轮完成', true, `耗时=${Math.round((Date.now() - t0) / 1000)}s`)
+
+  // 自动重放:出现同标题新任务(id 不同)进入活跃态
+  const round2 = await waitUntil('loop 自动重放新任务', async () => {
+    const fresh = (await loopsOf()).find(x => x.id !== parentId && !['COMPLETED', 'FAILED', 'CANCELED'].includes(x.state ?? ''))
+    return fresh ?? null
+  }, 120_000)
+  check('loop 重放生效(同标题新任务自动提交)', true, `round2=${round2.id.slice(0, 8)} state=${round2.state}`)
+
+  // 第二轮完成
+  await waitUntil('loop 第二轮完成', async () => {
+    const t = (await loopsOf()).find(x => x.id === round2.id)
+    return t?.state === 'COMPLETED' ? t.state : null
+  }, 480_000)
+  check('loop 第二轮完成(周期作业可持续)', true, `总耗时=${Math.round((Date.now() - t0) / 1000)}s`)
+
+  // 每轮都有子任务派发且完成
+  const tasks = await tasksOf()
+  const loops = tasks.filter(t => t.title === TITLE && !t.parentId)
+  const children = tasks.filter(t => t.parentId && loops.some(l => l.id === t.parentId))
+  const doneChildren = children.filter(c => c.state === 'COMPLETED')
+  check('循环内子任务派发且完成(≥2 轮)', children.length >= 2 && doneChildren.length >= 2, `children=${children.length}, done=${doneChildren.length}`)
+
+  // 无重复在途
+  const active = children.filter(c => ['ASSIGNED', 'WORKING', 'WAITING'].includes(c.state))
+  const activeTitles = active.map(c => c.title.replace(/\s+/g, ' ').trim().toLowerCase())
+  const dupActive = activeTitles.filter((t, i) => activeTitles.indexOf(t) !== i)
+  check('在途子任务无重复', dupActive.length === 0, `active=${active.length}`)
+
+  // 团队知情:邮件流有协作记录
+  const mails = (await api('GET', '/api/workshop/mailbox/all', { token }).catch(() => ({ data: [] }))).data ?? []
+  check('邮件流含协作记录(lead/worker 彼此知情)', Array.isArray(mails), `mails=${Array.isArray(mails) ? mails.length : 'n/a'}`)
+
+  // 取消第三轮活跃任务 → 循环停止(重放只在 COMPLETED 后发生)
+  const round3 = await waitUntil('第三轮任务出现', async () => {
+    const t = (await loopsOf()).find(x => ![parentId, round2.id].includes(x.id) && !['COMPLETED', 'FAILED', 'CANCELED'].includes(x.state ?? ''))
+    return t ?? null
+  }, 120_000)
+  const cancel = await api('POST', `/api/workshop/tasks/${round3.id}/cancel`, { body: {}, token }).catch(e => ({ code: -1, message: String(e) }))
+  check('取消第三轮活跃任务', cancel.code === 0, JSON.stringify(cancel).slice(0, 90))
+
+  const canceledState = await waitUntil('第三轮任务进入 CANCELED', async () => {
+    const t = (await loopsOf()).find(x => x.id === round3.id)
+    return t?.state === 'CANCELED' ? t.state : null
+  }, 60_000)
+  check('取消生效', canceledState === 'CANCELED', `state=${canceledState}`)
+
+  // 循环停止:等待超过 interval×2 无新任务出现
+  await sleep(INTERVAL_MS * 2 + 4000)
+  const finalLoops = await loopsOf()
+  check('取消后循环停止(无新重放任务)', finalLoops.length === 3, `total=${finalLoops.length}`)
+
+  // 清理
+  const members = await api('GET', `/api/workshop/channels/${channelId}/agents`, { token })
+  for (const m of members.data ?? []) {
+    await api('POST', '/api/system/monitor/terminate', { body: { channelId, agentId: m.id }, token }).catch(() => {})
+  }
+  await api('DELETE', `/api/workshop/channels/${channelId}`, { token })
+
+  console.log(`\n★ 结果: ${passed} passed, ${failures} failed`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((err) => {
+  console.error('e2e 异常:', err.message)
+  process.exit(1)
+})

package/scripts/test-mcp-tools.ts

@@ -0,0 +1,285 @@
+/**
+ * MCP 工具层测试(node + tsx 直跑,无浏览器)。
+ *
+ * 覆盖:
+ *  1. tools/list 返回 §6.1 的 16 个工具(名逐字一致)
+ *  2. tools/call 参数校验(zod 错误返回)
+ *  3. 无 token → UNAUTHORIZED
+ *  4. 无效 token → UNAUTHORIZED
+ *  5. a2a.send 的 fromAgentId 由 token 决定(manager 收到 callerAgentId,而非请求体自报)
+ *
+ * 通过 SDK 的 Client + InMemoryTransport 协议层测试;token 经自定义 transport
+ * 注入(Authorization 头 / auth 中间件两种路径)。
+ */
+import { Client } from '@modelcontextprotocol/sdk/client/index.js'
+import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js'
+import { createWorkshopMcpServer } from '../server/mcp/workshop-server'
+import type { AgentChannelManager } from '../server/services/workshop/runtime/manager'
+import type { AgentInfo } from '../server/services/workshop/agents/agent-interface'
+
+let failures = 0
+function check(name: string, ok: boolean, detail = ''): void {
+  console.log(`${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) {
+    failures += 1
+  }
+}
+
+/** 提取工具错误文案(isError 结果的第一个文本块) */
+function toolErrorText(result: unknown): string {
+  const block = (result as { content?: Array<{ text?: string }> })?.content?.[0]
+  return typeof block?.text === 'string' ? block.text : ''
+}
+
+/** 可注入 caller token 的客户端 transport(InMemoryTransport 只原生转发 authInfo) */
+class TokenClientTransport extends InMemoryTransport {
+  token: string | undefined
+  /** 'auth' = 经 authInfo.token 注入;'header' = 经 Authorization: Bearer 头(requestInfo)注入 */
+  mode: 'auth' | 'header' = 'auth'
+
+  override async send(message: unknown, options?: { authInfo?: unknown }): Promise<void> {
+    if (this.token === undefined) {
+      return super.send(message as never, options as never)
+    }
+    if (this.mode === 'auth') {
+      return super.send(message as never, {
+        ...options,
+        authInfo: { token: this.token, clientId: 'test-client', scopes: [] },
+      } as never)
+    }
+    // header 模式:复刻 InMemoryTransport.send 但注入 requestInfo(Authorization 头)
+    const self = this as unknown as { _otherTransport?: { onmessage?: (m: unknown, e: unknown) => void, _messageQueue: Array<{ message: unknown, extra: unknown }> } }
+    const other = self._otherTransport
+    if (!other) throw new Error('Not connected')
+    const extra = { requestInfo: { headers: { authorization: `Bearer ${this.token}` } } }
+    if (other.onmessage) other.onmessage(message, extra)
+    else other._messageQueue.push({ message, extra })
+  }
+}
+
+/** 手动链接一对 transport(client 侧为可注入 token 的 TokenClientTransport) */
+function createLinkedPair(): [TokenClientTransport, InMemoryTransport] {
+  const clientTransport = new TokenClientTransport()
+  const serverTransport = new InMemoryTransport()
+  const c = clientTransport as unknown as { _otherTransport?: InMemoryTransport }
+  const s = serverTransport as unknown as { _otherTransport?: InMemoryTransport }
+  c._otherTransport = serverTransport
+  s._otherTransport = clientTransport
+  return [clientTransport, serverTransport]
+}
+
+/** MCP 工具目录(与 server/mcp/workshop-server.ts 逐字一致):16 基础 + 4 扩展 + 5 设备孪生 */
+const EXPECTED_TOOLS = [
+  'workshop.channel.create',
+  'workshop.channel.list',
+  'workshop.channel.remove',
+  'workshop.agent.create',
+  'workshop.agent.add',
+  'workshop.agent.definitions',
+  'workshop.agent.list',
+  'workshop.agent.remove',
+  'workshop.task.submit',
+  'workshop.task.dispatch',
+  'workshop.task.list',
+  'workshop.task.get',
+  'workshop.task.report',
+  'workshop.task.complete',
+  'workshop.task.cancel',
+  'workshop.a2a.send',
+  'workshop.a2a.poll',
+  'workshop.a2a.subscribe',
+  'workshop.mail.list',
+  'workshop.queue.overview',
+  'device.list',
+  'device.read',
+  'device.control',
+  'device.push_telemetry',
+  'device.bind_agent',
+]
+
+/** fake manager stub:记录调用 + 返回预设值(与 AgentChannelManager 相同方法签名) */
+function makeFakeManager() {
+  const calls: Array<{ method: string, args: unknown[] }> = []
+
+  const agentsByToken = new Map<string, AgentInfo>()
+  agentsByToken.set('token-lead-1', {
+    id: 'agent-lead-1',
+    channelId: 'ch-1',
+    name: 'Lead',
+    harness: 'mock',
+    role: 'lead',
+    config: {},
+  })
+  agentsByToken.set('token-worker-2', {
+    id: 'agent-worker-2',
+    channelId: 'ch-1',
+    name: 'Worker2',
+    harness: 'mock',
+    role: 'worker',
+    config: {},
+  })
+
+  const record
+    = (method: string, result: unknown) =>
+      (...args: unknown[]) => {
+        calls.push({ method, args })
+        return Promise.resolve(result)
+      }
+
+  const manager = {
+    createChannel: record('createChannel', { channelId: 'ch-1' }),
+    listChannels: record('listChannels', []),
+    removeChannel: record('removeChannel', undefined),
+    createAgent: record('createAgent', {
+      id: 'agent-tpl',
+      name: 'New',
+      harness: 'mock',
+      config: {},
+      enabled: 1,
+      instances: [],
+    }),
+    addAgentToChannel: record('addAgentToChannel', {
+      id: 'agent-inst',
+      channelId: 'ch-1',
+      name: 'New',
+      harness: 'mock',
+      role: 'worker',
+      config: {},
+    }),
+    listAgents: record('listAgents', []),
+    listChannelAgents: record('listChannelAgents', []),
+    submitChannelTask: record('submitChannelTask', { id: 'task-1' }),
+    dispatchTask: record('dispatchTask', { id: 'task-2' }),
+    reportTask: record('reportTask', { id: 'task-1' }),
+    completeTask: record('completeTask', { id: 'task-1' }),
+    cancelTask: record('cancelTask', { id: 'task-1' }),
+    listTasks: record('listTasks', []),
+    getTask: record('getTask', { id: 'task-1' }),
+    sendA2A: record('sendA2A', {
+      messageId: 'm-1',
+      contextId: 'ch-1',
+      role: 'ROLE_AGENT',
+      parts: [{ text: 'hi' }],
+    }),
+    pollMailbox: record('pollMailbox', []),
+    listChannelMail: record('listChannelMail', []),
+    queueOverview: record('queueOverview', []),
+    subscribe: record('subscribe', undefined),
+    findByToken: (token: string) => agentsByToken.get(token),
+    restore: record('restore', undefined),
+  }
+
+  return {
+    manager: manager as unknown as AgentChannelManager,
+    calls,
+    agentsByToken,
+  }
+}
+
+async function main(): Promise<void> {
+  const [clientTransport, serverTransport] = createLinkedPair()
+  const fake = makeFakeManager()
+  const server = createWorkshopMcpServer(fake.manager)
+
+  const client = new Client({ name: 'test-client', version: '1.0.0' })
+  await server.connect(serverTransport)
+  await client.connect(clientTransport)
+
+  // ===== 1. tools/list:20 个工具,名逐字一致 =====
+  const { tools } = await client.listTools()
+  const actualNames = tools.map(t => t.name).sort()
+  const expectedNames = [...EXPECTED_TOOLS].sort()
+  check('tools/list 返回 25 个工具', tools.length === 25, `got ${tools.length}`)
+  check(
+    '工具名与 §6.1 逐字一致',
+    JSON.stringify(actualNames) === JSON.stringify(expectedNames),
+    JSON.stringify(actualNames),
+  )
+
+  // ===== 2. 参数校验:zod 错误返回 =====
+  const missingName = await client.callTool({ name: 'workshop.channel.create', arguments: {} })
+  check(
+    '参数校验:channel.create 缺 name → 工具错误',
+    (missingName as { isError?: boolean }).isError === true,
+    toolErrorText(missingName),
+  )
+  check(
+    '参数校验:错误文案含 Input validation error',
+    toolErrorText(missingName).includes('Input validation error'),
+    toolErrorText(missingName),
+  )
+
+  const badRole = await client.callTool({
+    name: 'workshop.agent.add',
+    arguments: { channelId: 'ch-1', agentId: 'agent-tpl', role: 'admin' },
+  })
+  check(
+    '参数校验:agent.add role 非法枚举 → 工具错误',
+    (badRole as { isError?: boolean }).isError === true,
+    toolErrorText(badRole),
+  )
+
+  // ===== 3. 无 token → UNAUTHORIZED =====
+  clientTransport.token = undefined
+  const noToken = await client.callTool({ name: 'workshop.agent.list', arguments: {} })
+  check(
+    '无 token → UNAUTHORIZED',
+    (noToken as { isError?: boolean }).isError === true && toolErrorText(noToken) === 'UNAUTHORIZED',
+    toolErrorText(noToken),
+  )
+
+  // ===== 4. 无效 token → UNAUTHORIZED =====
+  clientTransport.token = 'bad-token'
+  const badToken = await client.callTool({ name: 'workshop.agent.list', arguments: {} })
+  check(
+    '无效 token → UNAUTHORIZED',
+    (badToken as { isError?: boolean }).isError === true && toolErrorText(badToken) === 'UNAUTHORIZED',
+    toolErrorText(badToken),
+  )
+
+  // ===== 5. a2a.send 的 fromAgentId 由 token 决定 =====
+  clientTransport.token = 'token-lead-1'
+  // 请求体故意自报 fromAgentId,应被忽略;caller 由 token 解析为 agent-lead-1
+  const sendResult = await client.callTool({
+    name: 'workshop.a2a.send',
+    arguments: { toAgentId: 'agent-worker-2', parts: [{ text: 'hello' }], fromAgentId: 'evil-agent' },
+  })
+  check('a2a.send(有效 token)→ 成功', (sendResult as { isError?: boolean }).isError !== true, toolErrorText(sendResult))
+
+  const sendCall = fake.calls.find(c => c.method === 'sendA2A')
+  const callerAgentId = sendCall?.args[1]
+  const sendInput = sendCall?.args[2] as { toAgentId?: string, fromAgentId?: string } | undefined
+  check(
+    'a2a.send callerAgentId 由 token 决定(agent-lead-1)',
+    callerAgentId === 'agent-lead-1',
+    `got ${String(callerAgentId)}`,
+  )
+  check(
+    'a2a.send 忽略请求体自报的 fromAgentId',
+    sendInput?.fromAgentId === undefined && sendInput?.toAgentId === 'agent-worker-2',
+    JSON.stringify(sendInput),
+  )
+
+  // ===== 6. Authorization 头路径同样解析 token =====
+  clientTransport.mode = 'header'
+  clientTransport.token = 'token-worker-2'
+  const headerResult = await client.callTool({ name: 'workshop.a2a.send', arguments: { toAgentId: 'agent-lead-1', parts: [{ text: 'hi' }] } })
+  check('Authorization 头解析 token → 成功', (headerResult as { isError?: boolean }).isError !== true, toolErrorText(headerResult))
+  const headerCall = fake.calls.filter(c => c.method === 'sendA2A').at(-1)
+  check(
+    'Authorization 头路径 callerAgentId = agent-worker-2',
+    headerCall?.args[1] === 'agent-worker-2',
+    `got ${String(headerCall?.args[1])}`,
+  )
+
+  await client.close()
+  await server.close()
+
+  console.log(`\n${failures === 0 ? 'ALL PASS' : `${failures} FAILED`}`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((e) => {
+  console.error(e)
+  process.exit(1)
+})

package/scripts/test-mdlite.ts

@@ -0,0 +1,53 @@
+/**
+ * mdLite 围栏代码块单测:
+ *  - 段落与代码块共存互不干扰;语言标签/复制按钮/正文转义保真
+ *  - 未闭合围栏(流式中)安全渲染;行内代码不受影响
+ * 运行:pnpm exec tsx scripts/test-mdlite.ts
+ */
+import { mdLite } from '../app/composables/workshop/useEventBlocks'
+
+let failures = 0
+const check = (name: string, ok: boolean): void => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}`)
+  if (!ok) failures += 1
+}
+
+const out = mdLite('说明文字\n\n```ts\nconst a: number = 1\nconst b = 2\n```\n\n结尾段落')
+check('代码块容器', out.includes('code-block'))
+check('语言标签 ts', out.includes('data-lang="ts"'))
+check('复制按钮', out.includes('code-copy'))
+check('正文保真', out.includes('const a: number = 1'))
+check('段落保留', out.includes('<p>说明文字</p>') && out.includes('<p>结尾段落</p>'))
+
+const u = mdLite('流式中\n\n```js\nlet x = 1')
+check('未闭合围栏(流式)', u.includes('data-lang="js"') && u.includes('let x = 1'))
+
+const inline = mdLite('行内 `code` 与 **加粗**')
+check('行内代码/加粗不受影响', inline.includes('<code>code</code>') && inline.includes('<b>加粗</b>'))
+
+const multi = mdLite('```python\nprint(1)\n```\n\n中间段落\n\n```bash\necho hi\n```')
+check('多代码块还原顺序', multi.indexOf('python') < multi.indexOf('中间段落') && multi.indexOf('中间段落') < multi.indexOf('echo hi'))
+
+// ===== GitHub 提示框(`> [!NOTE]` 等;open-tag github-alert 移植) =====
+const alert1 = mdLite('> [!NOTE]\n> 这是说明内容')
+check('提示框-容器', alert1.includes('gh-alert') && alert1.includes('gh-note'))
+check('提示框-标题', alert1.includes('gh-title') && alert1.includes('说明'))
+check('提示框-正文', alert1.includes('这是说明内容'))
+const alert2 = mdLite('> [!WARNING] 标题同行\n> 第二行')
+check('提示框-同行标题', alert2.includes('gh-warning') && alert2.includes('标题同行') && alert2.includes('第二行'))
+const alert3 = mdLite('> [!TIP]\n> 提示 A\n> 提示 B')
+check('提示框-多行正文', alert3.includes('提示 A<br>提示 B'))
+const bq = mdLite('> 普通引用不受影响')
+check('普通引用保持', bq.includes('<blockquote>') && !bq.includes('gh-alert'))
+
+// ===== 任务列表(`- [ ]` / `- [x]`;open-tag task-list 移植) =====
+const tasks = mdLite('- [ ] 待办事项\n- [x] 已完成事项')
+check('任务列表-容器', tasks.includes('task-list'))
+check('任务列表-未完成', tasks.includes('<li class="task-item"><span class="task-check">'))
+check('任务列表-勾选', tasks.includes('task-check on') && tasks.includes('✓'))
+check('任务列表-完成态划线', tasks.includes('task-item done') && tasks.includes('已完成事项'))
+const plain = mdLite('- 普通列表项')
+check('普通列表保持', plain.includes('<ul>') && !plain.includes('task-list'))
+
+console.log(failures === 0 ? '\n★ mdLite 代码块回归通过' : `\n${failures} 项失败`)
+process.exit(failures === 0 ? 0 : 1)