agentworkshop 0.2.1

package/scripts/_dbg-glass-probe.mjs

@@ -0,0 +1,57 @@
+/** 一次性:亮色布局崩坏探针 */
+import puppeteer from 'puppeteer-core'
+
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu'],
+})
+const page = await browser.newPage()
+await page.setViewport({ width: 1920, height: 1200 })
+await page.setCookie({ name: 'token', value: 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c', domain: '127.0.0.1', path: '/' })
+await page.goto('http://127.0.0.1:3000/', { waitUntil: 'networkidle2', timeout: 90000 })
+// 用户真实路径:点 header 主题按钮(store.toggleDark)
+await page.evaluate(() => localStorage.removeItem('app'))
+await page.reload({ waitUntil: 'networkidle2', timeout: 90000 })
+await new Promise(r => setTimeout(r, 4000))
+await page.evaluate(() => {
+  const btns = [...document.querySelectorAll('.icon-btn')]
+  const themeBtn = btns.find(b => b.querySelector('.i-tabler-sun-high, .i-tabler-moon-stars'))
+  themeBtn?.click()
+})
+await new Promise(r => setTimeout(r, 4000))
+const probe = await page.evaluate(() => {
+  const pick = (sel) => {
+    const el = document.querySelector(sel)
+    if (!el) return null
+    const r = el.getBoundingClientRect()
+    const cs = getComputedStyle(el)
+    return { w: Math.round(r.width), display: cs.display, flex: cs.flex, minWidth: cs.minWidth, pos: cs.position, bd: cs.backdropFilter }
+  }
+  const mainEl = document.querySelector('.app-main')
+  let layoutRule = null
+  for (const sheet of document.styleSheets) {
+    let rules
+    try { rules = sheet.cssRules } catch { continue }
+    for (const r of rules) {
+      if (r.selectorText && r.selectorText.includes('.ant-layout') && r.style && r.style.flex) {
+        layoutRule = `${r.selectorText} { flex: ${r.style.flex} }`
+        break
+      }
+    }
+    if (layoutRule) break
+  }
+  return {
+    mainClass: mainEl?.className,
+    layoutRule,
+    dark: document.documentElement.classList.contains('dark'),
+    layout: pick('.app-layout'),
+    main: pick('.app-main'),
+    content: pick('.app-content'),
+    hero: pick('.hero'),
+    header: pick('.app-header'),
+    bodyW: document.body.getBoundingClientRect().width,
+  }
+})
+console.log(JSON.stringify(probe, null, 1))
+await browser.close()

package/scripts/_dbg-glass-shot.mjs

@@ -0,0 +1,50 @@
+/** 一次性:Aurora Glass 双主题四页截图验收 */
+import puppeteer from 'puppeteer-core'
+
+const TOKEN = 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c'
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--window-size=1920,1200'],
+})
+const page = await browser.newPage()
+const errors = []
+page.on('pageerror', e => errors.push(String(e).slice(0, 160)))
+page.on('console', m => { if (m.type() === 'error') errors.push(m.text().slice(0, 160)) })
+await page.setViewport({ width: 1920, height: 1200 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+
+// 用用户真实路径切主题(点 header 按钮;reload 写 localStorage 会踩 dev cssinjs hash 错位)
+const setTheme = async (dark) => {
+  await page.evaluate(() => {
+    const btns = [...document.querySelectorAll('.icon-btn')]
+    const themeBtn = btns.find(b => b.querySelector('.i-tabler-sun-high, .i-tabler-moon-stars'))
+    themeBtn?.click()
+  })
+  await new Promise(r => setTimeout(r, 3500))
+}
+
+// 暗色主题(默认)
+await page.goto('http://127.0.0.1:3000/', { waitUntil: 'networkidle2', timeout: 90000 })
+await new Promise(r => setTimeout(r, 6000))
+await page.screenshot({ path: 'docs/audit/screenshots/glass-dark-dash.png' })
+await page.goto('http://127.0.0.1:3000/daq', { waitUntil: 'networkidle2', timeout: 90000 })
+await new Promise(r => setTimeout(r, 3000))
+await page.screenshot({ path: 'docs/audit/screenshots/glass-dark-daq.png' })
+
+// 亮色主题(点按钮切换)
+await setTheme(false)
+await page.goto('http://127.0.0.1:3000/', { waitUntil: 'networkidle2', timeout: 90000 })
+await new Promise(r => setTimeout(r, 5000))
+await new Promise(r => setTimeout(r, 5000))
+await page.screenshot({ path: 'docs/audit/screenshots/glass-light-dash.png' })
+await page.goto('http://127.0.0.1:3000/daq', { waitUntil: 'networkidle2', timeout: 90000 })
+await new Promise(r => setTimeout(r, 2500))
+await page.screenshot({ path: 'docs/audit/screenshots/glass-light-daq.png' })
+// 中等 viewport 复验
+await page.setViewport({ width: 1366, height: 900 })
+await page.goto('http://127.0.0.1:3000/', { waitUntil: 'networkidle2', timeout: 90000 })
+await new Promise(r => setTimeout(r, 4000))
+await page.screenshot({ path: 'docs/audit/screenshots/glass-dark-dash-1366.png' })
+console.log('shots done | page errors:', errors.length ? errors.slice(0, 4) : 'none')
+await browser.close()

package/scripts/_dbg-glass-sweep.mjs

@@ -0,0 +1,25 @@
+/** 一次性:Aurora Glass 全页面扫描(暗色为主,抽查亮色) */
+import puppeteer from 'puppeteer-core'
+
+const TOKEN = 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c'
+const ROUTES = ['/workshop/agents']
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--window-size=1920,1200'],
+})
+const page = await browser.newPage()
+await page.setViewport({ width: 1920, height: 1200 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+const errors = []
+page.on('pageerror', e => errors.push(`${page.url().replace('http://127.0.0.1:3000', '')}: ${String(e).slice(0, 120)}`))
+
+for (const r of ROUTES) {
+  await page.goto(`http://127.0.0.1:3000${r}`, { waitUntil: 'domcontentloaded', timeout: 90000 }).catch(() => {})
+  await new Promise(r2 => setTimeout(r2, 12000))
+  const slug = r.replace(/\//g, '-').replace(/^-/, '') || 'root'
+  await page.screenshot({ path: `docs/audit/screenshots/glass-dark${slug}.png` })
+  console.log(`shot ${r}`)
+}
+console.log('pageerrors:', errors.length ? errors : 'none')
+await browser.close()

package/scripts/_dbg-glb-probe.mjs

@@ -0,0 +1,43 @@
+/** 一次性:逐 GLB 加载探错(浏览器内 GLTFLoader + HTTP 状态) */
+import puppeteer from 'puppeteer-core'
+
+const BASE = 'http://127.0.0.1:3000'
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu'],
+})
+const page = await browser.newPage()
+await page.goto(`${BASE}/town`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+await new Promise(r => setTimeout(r, 3000))
+
+const out = await page.evaluate(async () => {
+  // three 经 vite dev 服务有 hash 化入口,改从页面内已加载的模块拿:直接用相对裸路径 import('three')(vite dev 会解析)
+  let loaderMod = null
+  try { loaderMod = await import('/_nuxt/assets/../../node_modules/.vite/deps/three.js') }
+  catch {}
+  if (!loaderMod?.GLTFLoader) {
+    try { loaderMod = await import('/node_modules/three/examples/jsm/loaders/GLTFLoader.js') }
+    catch {}
+  }
+  if (!loaderMod?.GLTFLoader) {
+    // 兜底:裸说明符(vite index.html 上下文通常可解析裸导入)
+    try { loaderMod = await import('three/examples/jsm/loaders/GLTFLoader.js') }
+    catch (e) { return { error: 'loader import fail: ' + String(e).slice(0, 150) } }
+  }
+  if (!loaderMod.GLTFLoader) return { error: 'gltfloader import fail: ' + JSON.stringify(loaderMod).slice(0, 200) }
+  const loader = new loaderMod.GLTFLoader()
+  const files = ['agv', 'caster', 'device-robot-arm', 'device-scanner', 'extruder', 'mdo', 'power-cabinet', 'pump', 'tdo', 'thickness-scanner', 'winder', 'device-console']
+  const res = []
+  for (const f of files) {
+    const url = `/assets/game/devices/${f}.glb`
+    const http = await fetch(url).then(r => `${r.status} ${r.headers.get('content-type')}`).catch(e => `fetch-err ${e.message}`)
+    const load = await new Promise((resolve) => {
+      loader.load(url, g => resolve(`ok meshes=${g.scene.children.length}`), undefined, e => resolve(`load-err ${String(e).slice(0, 120)}`))
+    })
+    res.push(`${f}: http[${http}] load[${load}]`)
+  }
+  return { res }
+})
+console.log(JSON.stringify(out, null, 1))
+await browser.close()

package/scripts/_dbg-hardening-probe.mjs

@@ -0,0 +1,90 @@
+/**
+ * 加固探针:验证 hardening-plan Phase 1 的行为修复。
+ * 1. B4 入口幂等:同标题在途任务二次提交 → 409(防 HITL 双击/重试重复执行)
+ * 2. D1+D2 数据驱动报警:孪生报警来自节点量程派生(数据)而非硬编码阈值 ——
+ *    构造 168℃ 读数 + 量程 [10,20] 的节点:legacy 85℃ 规则不会 alarm(168<85 不成立…实际 168>85
+ *    会命中 legacy!因此量程改用 [200,300] 使读数 168 **低于量程下限** → 节点 alarm,
+ *    同时 legacy 规则(温度>85 → alarm)也 alarm —— 无法区分。
+ *    → 改用压力模板:读数 ~0.82,量程 [2,3] → 越下限 alarm;legacy 压力规则(>2.0MPa)不触发(0.82<2.0)。
+ *    孪生若 alarm = 数据驱动路径生效;若 running = 修复未生效。
+ * 3. A1 伴生断言:重复回合后 ws 广播仍正常(stream 泄漏修复无回归)。
+ * 运行:dev(3000) 就绪后 node scripts/_dbg-hardening-probe.mjs
+ */
+const TOKEN = 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c'
+const ROOT = 'http://127.0.0.1:3000'
+const H = { authorization: `Bearer ${TOKEN}`, 'content-type': 'application/json' }
+const sleep = (ms) => new Promise(r => setTimeout(r, ms))
+let pass = 0
+const fails = []
+const ok = (m) => { pass++; console.log(`  PASS ${m}`) }
+const fail = (m) => { fails.push(m); console.error(`  FAIL ${m}`) }
+const assert = (cond, m) => (cond ? ok(m) : fail(m))
+const jpost = (u, b) => fetch(ROOT + u, { method: 'POST', headers: H, body: JSON.stringify(b ?? {}) }).then(r => r.json())
+const jget = (u) => fetch(ROOT + u, { headers: H }).then(r => r.json())
+const jdel = (u) => fetch(ROOT + u, { method: 'DELETE', headers: H }).then(r => r.json())
+
+async function main() {
+  // ===== 1. B4: 同标题在途 409 =====
+  console.log('== B4: submitChannelTask 入口幂等 ==')
+  const ch = (await jpost('/api/workshop/channel-templates/chtpl-default-fullstack/instantiate', { name: '加固探针频道' })).data
+  const channelId = ch.channelId
+  try {
+    const t1 = await jpost(`/api/workshop/channels/${channelId}/tasks`, { title: '加固探针唯一标题X9', parts: [{ text: 'noop' }] })
+    const id1 = t1.data?.task?.id ?? t1.data?.id
+    assert(!!id1, '首次提交成功')
+    const t2 = await jpost(`/api/workshop/channels/${channelId}/tasks`, { title: '加固探针唯一标题X9', parts: [{ text: 'noop' }] })
+    assert(t2.error?.code === 'CONFLICT' || /409|已在途/.test(JSON.stringify(t2)), `同标题在途 → 409(实际 ${JSON.stringify(t2).slice(0, 90)})`)
+    const t3 = await jpost(`/api/workshop/channels/${channelId}/tasks`, { title: '加固探针另一标题Y3', parts: [{ text: 'noop' }] })
+    const id3 = t3.data?.task?.id ?? t3.data?.id
+    assert(!!id3, '不同标题不受影响')
+    for (const t of [id1, id3]) await jpost(`/api/workshop/channels/${channelId}/tasks/${t}/cancel`, {}).catch(() => {})
+  }
+  finally {
+    await jdel(`/api/workshop/channels/${channelId}`).catch(() => {})
+  }
+
+  // ===== 2. D1+D2: 数据驱动孪生报警 =====
+  console.log('== D1+D2: telemetryKey 数据字段 + 节点态透传 ==')
+  // 采集门控:节点必须有活动产线批次才采样 → 建产线+产品+配方(mock 设定节点凑参数)+开跑
+  const twin = (await jpost('/api/workshop/device-twins', { name: '加固探针设备', modelRef: 'dev-folder-extruder', kind: 'device', posX: 4500, posZ: 900 })).data.twin
+  const line = (await jpost('/api/workshop/dcw/lines', { name: '加固探针线' })).data.line
+  const prod = (await jpost('/api/workshop/dcw/products', { name: '加固探针产品', lineId: line.id })).data.product
+  const dw = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: '加固探针-温度设定', driver: 'mock', lineId: line.id, deviceBindingId: twin.id })).data.node
+  const rc = (await jpost('/api/workshop/dcw/recipes', { productId: prod.id, name: '加固探针配方', params: [{ nodeId: dw.id, value: 180 }] })).data.recipe
+  // 压力模板读数 ~0.82:量程 [2,3] → 越下限 → 节点 alarm;
+  // legacy 压力阈值(>2.0MPa)与温度阈值(>85℃)都不会命中(0.82<2.0) → 孪生 alarm 只能来自节点态透传
+  const dq = (await jpost('/api/workshop/daq', {
+    templateRef: 'pressure-tx', name: '加固探针-压力',
+    driver: 'mock', intervalMs: 300,
+    min: 2, max: 3, lineId: line.id, deviceBindingId: twin.id,
+  })).data.node
+  const st = await jpost(`/api/workshop/dcw/lines/${line.id}/start`, { recipeId: rc.id })
+  if (!st.data?.line?.active) { fail(`产线开跑失败: ${JSON.stringify(st).slice(0, 100)}`); process.exit(1) }
+  try {
+    await sleep(3500)
+    const twins = (await jget('/api/workshop/device-twins')).data
+    const arr = Array.isArray(twins) ? twins : twins?.twins ?? []
+    const now = arr.find(t => t.id === twin.id)
+    assert(!!now, '孪生存在')
+    assert(now.state === 'alarm', `孪生态=alarm(数据驱动透传;实际 ${now.state})`)
+    assert(now.telemetry && now.telemetry.pressure != null, `telemetry 键=pressure(telemetryKey 数据字段;实际 ${JSON.stringify(now.telemetry).slice(0, 60)})`)
+    const nodes = (await jget('/api/workshop/daq')).data.nodes
+    const nd = nodes.find(n => n.id === dq.id)
+    assert(nd.state === 'alarm', `节点自身 alarm(量程派生;实际 ${nd.state})`)
+  }
+  finally {
+    await jpost(`/api/workshop/dcw/lines/${line.id}/stop`, {}).catch(() => {})
+    await jdel(`/api/workshop/dcw/recipes/${rc.id}`).catch(() => {})
+    await jdel(`/api/workshop/daq/${dq.id}`).catch(() => {})
+    await jdel(`/api/workshop/dcw/${dw.id}`).catch(() => {})
+    await jdel(`/api/workshop/dcw/products/${prod.id}`).catch(() => {})
+    await jdel(`/api/workshop/dcw/lines/${line.id}`).catch(() => {})
+    await jdel(`/api/workshop/device-twins/${twin.id}`).catch(() => {})
+  }
+
+  console.log(`\n===== 加固探针: ${pass} PASS / ${fails.length} FAIL =====`)
+  if (fails.length) { fails.forEach(m => console.error(' -', m)); process.exitCode = 1 }
+  process.exit(process.exitCode ?? 0)
+}
+
+main().catch((e) => { console.error('FATAL:', e.message); process.exit(1) })

package/scripts/_dbg-hero-btn-probe.mjs

@@ -0,0 +1,21 @@
+/** 一次性:hero outline 按钮计算样式探针 */
+import puppeteer from 'puppeteer-core'
+const TOKEN = 'ut-3b8495cf61b34bd4b3c0e02fc242fc66'
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu'],
+})
+const page = await browser.newPage()
+await page.setViewport({ width: 1920, height: 1200, deviceScaleFactor: 1 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+await page.goto('http://127.0.0.1:3000/', { waitUntil: 'domcontentloaded', timeout: 90000 })
+await new Promise(r => setTimeout(r, 9000))
+const probe = await page.evaluate(() => {
+  const btn = document.querySelector('.hero-acts .aw-pill.outline')
+  if (!btn) return 'not found'
+  const cs = getComputedStyle(btn)
+  return { border: cs.borderColor, bg: cs.backgroundColor, color: cs.color }
+})
+console.log(JSON.stringify(probe))
+await browser.close()

package/scripts/_dbg-hidden-check.mjs

@@ -0,0 +1,21 @@
+import puppeteer from 'puppeteer-core'
+const ROOT = 'http://127.0.0.1:3000'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const browser = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'] })
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1 })
+await page.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+await page.goto(`${ROOT}/town`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+await sleep(15000)
+console.log(await page.evaluate(() => ({
+  hidden: document.hidden,
+  vis: document.visibilityState,
+  hasHook: !!globalThis.__townScene3d,
+  disposed: globalThis.__townScene3d?.disposed,
+  frameCount: globalThis.__townScene3d?.frameCount,
+  qTier: globalThis.__townScene3d?.qTier,
+  dtProbe: (() => { const sc = globalThis.__townScene3d; if (!sc) return null; const a = sc.clock.getDelta(); const b = sc.clock.getDelta(); return [+a.toFixed(4), +b.toFixed(4)] })(),
+})))
+await browser.close()
+console.log('DONE')

package/scripts/_dbg-hitl-timeout-e2e.mjs

@@ -0,0 +1,93 @@
+/** HITL 超时默认拒绝 E2E(需 HITL_TIMEOUT_MS=5000 的 server):挂起→到期→自动拒绝→Agent 收到保持原值语义。 */
+const ROOT = 'http://127.0.0.1:3100'
+const H = { authorization: 'Bearer ut-ffc1dfbbc0c1444c87c1ec69a9e8208c', 'content-type': 'application/json' }
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const fail = m => { console.error('FAIL:', m); process.exitCode = 1 }
+const jget = u => fetch(ROOT + u, { headers: H }).then(r => r.json())
+const jpost = (u, b) => fetch(ROOT + u, { method: 'POST', headers: H, body: JSON.stringify(b ?? {}) }).then(r => r.json())
+const jdel = u => fetch(ROOT + u, { method: 'DELETE', headers: H }).then(r => r.json())
+
+const cleanup = []
+async function main() {
+  // 1. 产线 + 数采/数控 + 配方 + 开跑(dcw_control 需要产线运行窗口)
+  const line = (await jpost('/api/workshop/dcw/lines', { name: 'HITL超时验证线' })).data.line
+  cleanup.push(['line', line.id])
+  const dq = (await jpost('/api/workshop/daq', { templateRef: 'daq-temp-tc', name: 'HITL温度采集', lineId: line.id, intervalMs: 500 })).data.node
+  const dw = (await jpost('/api/workshop/dcw', { templateRef: 'dcw-temp-sp', name: 'HITL温度设定', lineId: line.id })).data.node
+  cleanup.push(['daq', dq.id], ['dcw', dw.id])
+  const prod = (await jpost('/api/workshop/dcw/products', { name: 'HITL验证产品', lineId: line.id })).data.product
+  cleanup.push(['product', prod.id])
+  const rc = (await jpost('/api/workshop/dcw/recipes', {
+    productId: prod.id, name: 'HITL验证配方',
+    params: [{ templateRef: 'dcw-temp-sp', nodeId: dw.id, value: 180, min: 170, max: 190 }],
+    daqWindows: [],
+  })).data.recipe
+  cleanup.push(['recipe', rc.id])
+  const st = await jpost(`/api/workshop/dcw/lines/${line.id}/start`, { recipeId: rc?.id })
+  if (!st.data?.line?.active) { fail('产线开跑失败: ' + JSON.stringify(st).slice(0, 120)); return }
+  console.log('[产线] 已开跑,设定节点目标 180')
+
+  // 2. 团队 + 部署 + manual 绑定
+  const ch = (await jpost('/api/workshop/channels', { name: 'HITL超时验证' })).data
+  cleanup.push(['channel', ch.channelId])
+  const team = (await jpost('/api/workshop/teams', { name: 'HITL超时验证组' })).data
+  cleanup.push(['team', team.id])
+  await jpost(`/api/workshop/teams/${team.id}/members`, { agentId: 'tpl-default-lead', role: 'lead' })
+  const w = (await jpost('/api/workshop/agents', {
+    name: 'HITL验证worker', harness: 'omp',
+    config: { intro: '验证用', systemPromptPrefix: '验证 HITL 超时默认拒绝。' },
+  })).data
+  cleanup.push(['agent', w.id])
+  await jpost(`/api/workshop/teams/${team.id}/members`, { agentId: w.id, role: 'worker' })
+  await jpost(`/api/workshop/teams/${team.id}/deploy`, { channelId: ch.channelId })
+  const inst = (await jget(`/api/workshop/channels/${ch.channelId}/agents`)).data.find(a => a.role === 'worker')
+  cleanup.push(['cagent', `${ch.channelId}:${inst.id}`])
+  await jpost('/api/workshop/agent-tools/bindings', { agentId: inst.id, nodeId: dw.id, kind: 'dcw', mode: 'manual' })
+  console.log('[部署] worker 实例就绪,manual 绑定智控节点')
+
+  // 3. 发起 dcw_control(不 await 完成态)→ 审批应挂起且带 expiresAt
+  const invokeP = jpost('/api/workshop/agent-tools/invoke', { agentId: inst.id, tool: 'dcw_control', args: { node_id: dw.id, value: 185 } })
+  await sleep(1500)
+  const pend = (await jget(`/api/workshop/agent-tools/approvals?agentId=${inst.id}`)).data.approvals
+  const ap = pend.find(a => a.nodeId === dw.id)
+  if (!ap) { fail('审批未挂起'); return }
+  const ttl = Math.round((Date.parse(ap.expiresAt) - Date.now()) / 1000)
+  console.log(`[审批] 挂起成功 expiresAt 剩余 ${ttl}s`, ttl > 0 && ttl <= 6 ? 'PASS(短超时窗生效)' : `FAIL(期望 ≤6s)`)
+  if (!(ttl > 0 && ttl <= 6)) fail('expiresAt/超时窗不符')
+
+  // 4. 等超时(5s 窗 + 余量)→ invoke 应以「默认拒绝」收敛
+  const res = await Promise.race([invokeP, sleep(15000).then(() => null)])
+  const text = res?.data?.result?.text ?? JSON.stringify(res).slice(0, 200)
+  const rejected = !res ? 'TIMEOUT' : ((text.includes('超时') || text.includes('拒绝')) && text.includes('指令未执行'))
+  console.log('[超时] 工具结果:', text.slice(0, 140))
+  console.log('[超时] 默认拒绝语义:', rejected === true ? 'PASS(超时→拒绝→指令未执行)' : 'FAIL')
+  if (rejected !== true) fail('超时未按默认拒绝收敛')
+
+  // 5. 历史留痕:expired 状态可查(scope=history)
+  const hist = (await jget('/api/workshop/agent-tools/approvals?scope=history&limit=10')).data?.approvals ?? []
+  const exp = Array.isArray(hist) ? hist.find(x => x.id === ap.id && x.status === 'expired') : null
+  console.log('[留痕] expired 历史记录:', exp ? 'PASS' : `WARN(未查到: ${JSON.stringify(hist).slice(0, 100)})`)
+
+  // 6. 节点值未被改动(默认拒绝 = 指令不执行)
+  const dwNow = (await jget('/api/workshop/dcw')).data.nodes.find(n => n.id === dw.id)
+  console.log(`[语义] 设定值保持 ${dwNow.value}(应 ≈180 配方目标)`, Math.abs(dwNow.value - 180) < 0.01 ? 'PASS' : 'FAIL')
+  if (Math.abs(dwNow.value - 180) >= 0.01) fail('超时拒绝后设定值被意外改动')
+}
+
+main().then(async () => {
+  for (const [kind, id] of [...cleanup].reverse()) {
+    try {
+      if (kind === 'line') await jpost(`/api/workshop/dcw/lines/${id}/stop`, {})
+      else if (kind === 'daq') await jdel(`/api/workshop/daq/${id}`)
+      else if (kind === 'dcw') await jdel(`/api/workshop/dcw/${id}`)
+      else if (kind === 'recipe') await jdel(`/api/workshop/dcw/recipes/${id}`)
+      else if (kind === 'product') await jdel(`/api/workshop/dcw/products/${id}`)
+      else if (kind === 'cagent') { const [c, a] = String(id).split(':'); await jdel(`/api/workshop/channels/${c}/agents/${a}`) }
+      else if (kind === 'channel') await jdel(`/api/workshop/channels/${id}`)
+      else if (kind === 'team') await jdel(`/api/workshop/teams/${id}`)
+      else if (kind === 'agent') await jdel(`/api/workshop/agents/${id}`)
+    } catch { /* 尽力清理 */ }
+  }
+  console.log(process.exitCode ? 'HITL E2E FAILED' : 'HITL E2E ALL PASS')
+  process.exit(process.exitCode ?? 0)
+})

package/scripts/_dbg-hmi-audit.mjs

@@ -0,0 +1,164 @@
+/**
+ * 工业 HMI 改版后的 /town 页面审计(一次性调试脚本):
+ *  - 载入小镇 → 检查 HUD 骨架(顶部状态条/左右轨/底部日志带);
+ *  - 选中 Agent → 会话台出现,校验历史行数;
+ *  - 注入该 Agent 的实时事件 → 校验实时行入列(合并流);
+ *  - 收集 pageerror + 三张截图(全景 / 会话台 / 气泡特写)。
+ */
+import puppeteer from 'puppeteer-core'
+
+const BASE = process.env.AW_PAGE_BASE ?? 'http://127.0.0.1:3000'
+const TOKEN = process.env.AW_PAGE_TOKEN ?? ''
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--no-first-run', '--disable-extensions', '--window-size=1600,1000'],
+})
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 1000 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+const errors = []
+page.on('pageerror', e => errors.push(String(e).slice(0, 200)))
+await page.goto(`${BASE}/town`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+for (let i = 0; i < 30; i++) {
+  if (await page.evaluate(() => !!window.__town?.scene?.agents?.size)) break
+  await new Promise(r => setTimeout(r, 1000))
+}
+await new Promise(r => setTimeout(r, 4000))
+
+// 1) HUD 骨架
+const hud = await page.evaluate(() => ({
+  agents: window.__town?.scene?.agents?.size ?? 0,
+  blocks: window.__town?.scene?.blocks?.size ?? 0,
+  topStrip: !!document.querySelector('.top-strip'),
+  hudLeft: !!document.querySelector('.hud-left'),
+  hudRight: !!document.querySelector('.hud-right'),
+  tickerBox: !!document.querySelector('.ticker-box'),
+  tickerRows: document.querySelectorAll('.ticker-row').length,
+  tickerEmpty: document.querySelector('.tk-empty')?.textContent?.trim() ?? '',
+  minimap: !!document.querySelector('.mini-map'),
+  twinPanel: !!document.querySelector('.twin-panel'),
+  libPanel: !!document.querySelector('.lib-panel'),
+  channelDock: !!document.querySelector('.channel-dock'),
+  dockCards: document.querySelectorAll('.dock-card').length,
+}))
+console.log('hud:', JSON.stringify(hud))
+await page.screenshot({ path: 'docs/audit/screenshots/town-hmi-full.png' })
+
+// 2) 选中调度主管 → 会话台
+const sel = await page.evaluate(() => {
+  const s = window.__town.scene
+  const agent = [...s.agents.values()].find(a => a.name === '调度主管') ?? [...s.agents.values()][0]
+  s.setSelected?.({ kind: 'agent', id: agent.agentId })
+  return { id: agent.agentId, name: agent.name }
+})
+console.log('selected:', JSON.stringify(sel))
+await new Promise(r => setTimeout(r, 2500))
+const before = await page.evaluate(() => {
+  const d = document.querySelector('.agent-chat')
+  if (!d) return { err: 'no agent-chat' }
+  return {
+    name: d.querySelector('.chat-name')?.textContent,
+    stateChip: d.querySelector('.chat-state')?.textContent,
+    refresh: !!d.querySelector('.chat-refresh'),
+    histCount: d.querySelectorAll('.rpg-line.hist').length,
+    liveCount: d.querySelectorAll('.rpg-line.live').length,
+    times: [...d.querySelectorAll('.rpg-time')].slice(0, 3).map(e => e.textContent),
+    divider: [...d.querySelectorAll('.rpg-divider')].map(e => e.textContent.trim()),
+    histSample: d.querySelector('.rpg-line.hist .rpg-text')?.textContent?.slice(0, 40) ?? '',
+  }
+})
+console.log('chat(before live):', JSON.stringify(before))
+await page.screenshot({ path: 'docs/audit/screenshots/town-agent-log.png' })
+
+// 3) 经真实 townBus 总线注入该 Agent 的实时事件 → 实时行应入列(与 WS 同路径)
+await page.evaluate((selId) => {
+  const s = window.__town.scene
+  const bus = window.__townBus
+  const cid = s.blocks.keys().next().value
+  bus?.emit?.({
+    v: 1, type: 'agent.message', seq: 99001, at: Date.now(), channelId: cid, agentId: selId,
+    payload: { parts: [{ text: '[实时注入] 泵组 P-201 遥测恢复正常,压力 1.82 MPa,温度 61℃' }] },
+  })
+  bus?.emit?.({
+    v: 1, type: 'a2a.artifact', seq: 99002, at: Date.now() + 10, channelId: cid, agentId: selId,
+    payload: { artifact: { artifactId: 'art-live-1', name: '巡检日报', parts: [{ text: 'P-201/P-202 运行平稳,建议保持当前转速' }] } },
+  })
+}, sel.id)
+await new Promise(r => setTimeout(r, 1600))
+const after = await page.evaluate(() => {
+  const d = document.querySelector('.agent-chat')
+  return {
+    histCount: d?.querySelectorAll('.rpg-line.hist').length ?? -1,
+    liveCount: d?.querySelectorAll('.rpg-line.live').length ?? -1,
+    liveSample: d?.querySelector('.rpg-line.live .rpg-text')?.textContent?.slice(0, 40) ?? '',
+    liveTime: d?.querySelector('.rpg-line.live .rpg-time')?.textContent ?? '',
+    kindStamps: [...(d?.querySelectorAll('.rpg-kind') ?? [])].slice(0, 4).map(e => e.textContent),
+  }
+})
+console.log('chat(after live):', JSON.stringify(after))
+
+// 4) 气泡存在性(场景内 sprite)+ 近景特写 + 最终截图
+await new Promise(r => setTimeout(r, 2000))
+const bub = await page.evaluate(() => {
+  const s = window.__town.scene
+  const agents = [...s.agents.values()]
+  return {
+    withBubble: agents.filter(a => a.bubble).length,
+    dbgBubbles: s.getDebugState?.()?.bubbles?.length ?? s.dbgBubbles?.length ?? -1,
+    recentActivity: s.getRecentActivity?.().length ?? -1,
+    tickerTimes: [...document.querySelectorAll('.tk-time')].slice(0, 3).map(e => e.textContent),
+  }
+})
+console.log('bubbles:', JSON.stringify(bub))
+// 近景:镜头聚焦选中 Agent,截取中央 720x520(验证名牌/气泡/投影近观质量)
+await page.evaluate((selId) => {
+  const s = window.__town.scene
+  const a = s.agents.get(selId)
+  if (a) s.focusTo(a.root.position.x, a.root.position.z)
+}, sel.id)
+await new Promise(r => setTimeout(r, 1800))
+await page.screenshot({
+  path: 'docs/audit/screenshots/town-closeup.png',
+  clip: { x: 440, y: 240, width: 720, height: 520 },
+})
+await page.screenshot({ path: 'docs/audit/screenshots/town-hmi-live.png' })
+// 5) 小地图(镜头居中):实体形状/准星/镜头平移 → viewBox 滑动但准星钉在图心
+const mini1 = await page.evaluate(() => {
+  const svg = document.querySelector('.mini-svg')
+  if (!svg) return { err: 'no mini-svg' }
+  const vb = svg.viewBox.baseVal
+  return {
+    viewBox: [Math.round(vb.x), Math.round(vb.y), Math.round(vb.width), Math.round(vb.height)],
+    territoryShapes: svg.querySelectorAll('ellipse, rect').length,
+    agentDots: svg.querySelectorAll('circle').length,
+    reticle: !!svg.querySelector('.mini-reticle path'),
+  }
+})
+console.log('minimap(before pan):', JSON.stringify(mini1))
+await page.evaluate(() => {
+  window.__town.scene.panBy(600, 400)
+})
+await new Promise(r => setTimeout(r, 500))
+const mini2 = await page.evaluate(() => {
+  const svg = document.querySelector('.mini-svg')
+  if (!svg) return { err: 'no mini-svg' }
+  const vb = svg.viewBox.baseVal
+  const ret = svg.querySelector('.mini-reticle rect')
+  const rb = ret ? ret.getBBox() : null
+  return {
+    viewBox: [Math.round(vb.x), Math.round(vb.y), Math.round(vb.width), Math.round(vb.height)],
+    // 准星中心应仍在 viewBox 中心(镜头居中契约)
+    reticleAtCenter: rb ? Math.abs((rb.x + rb.width / 2) - (vb.x + vb.width / 2)) < 2 : false,
+  }
+})
+console.log('minimap(after pan):', JSON.stringify(mini2))
+
+// 小地图特写(右下角导航图区域)
+await page.screenshot({
+  path: 'docs/audit/screenshots/town-minimap.png',
+  clip: { x: 1368, y: 640, width: 224, height: 348 },
+})
+
+console.log('errors:', errors.slice(0, 8))
+await browser.close()

package/scripts/_dbg-home-repro.mjs

@@ -0,0 +1,24 @@
+/** 复现扫谱序列:先 town 后 home,抓 dispose 堆栈。 */
+import puppeteer from 'puppeteer-core'
+
+const ROOT = process.env.E2E_ROOT ?? 'http://127.0.0.1:3000'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+
+const bA = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu'] })
+const pA = await bA.newPage()
+await pA.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1 })
+await pA.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+await pA.goto(`${ROOT}/town`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+await sleep(15000)
+await bA.close()
+
+const bB = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu'] })
+const pB = await bB.newPage()
+await pB.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1.25 })
+await pB.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+pB.on('pageerror', e => console.log('HOME PAGEERROR:\n', e.stack?.slice(0, 1500) ?? String(e)))
+await pB.goto(`${ROOT}/`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+await sleep(9000)
+console.log('done')
+await bB.close()

package/scripts/_dbg-home-stack.mjs

@@ -0,0 +1,13 @@
+import puppeteer from 'puppeteer-core'
+const ROOT = 'http://127.0.0.1:3000'
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const browser = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu'] })
+const page = await browser.newPage()
+await page.setViewport({ width: 1600, height: 1000 })
+await page.setCookie({ name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' })
+page.on('pageerror', (e) => { console.log('PAGEERROR STACK:\n', e.stack?.slice(0, 1200) ?? String(e)) })
+await page.goto(`${ROOT}/`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+await sleep(8000)
+console.log('done')
+await browser.close()

package/scripts/_dbg-huashu-survey.mjs

@@ -0,0 +1,31 @@
+/** 一次性:huashu-design 美化前勘察 —— 6 路由暗色截图 + console/pageerror 收集 */
+import puppeteer from 'puppeteer-core'
+
+const TOKEN = 'ut-ffc1dfbbc0c1444c87c1ec69a9e8208c'
+const routes = [
+  ['dash', '/', 9000],
+  ['daq', '/daq', 6000],
+  ['dcw', '/dcw', 6000],
+  ['town', '/town', 26000],
+  ['agents', '/workshop/agents', 6000],
+  ['tokens', '/tokens', 6000],
+]
+const browser = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--window-size=1920,1200'],
+})
+const page = await browser.newPage()
+const errors = []
+page.on('pageerror', e => errors.push(`[pageerror] ${String(e).slice(0, 160)}`))
+page.on('console', (m) => { if (m.type() === 'error') errors.push(`[console] ${m.text().slice(0, 160)}`) })
+await page.setViewport({ width: 1920, height: 1200, deviceScaleFactor: 1 })
+await page.setCookie({ name: 'token', value: TOKEN, domain: '127.0.0.1', path: '/' })
+for (const [name, path, wait] of routes) {
+  await page.goto(`http://127.0.0.1:3000${path}`, { waitUntil: 'domcontentloaded', timeout: 90000 })
+  await new Promise(r => setTimeout(r, wait))
+  await page.screenshot({ path: `docs/audit/screenshots/huashu-survey-${name}.png` })
+  console.log('shot:', name)
+}
+await browser.close()
+console.log(errors.length ? `ERRORS:\n${errors.join('\n')}` : 'no page errors')