agentworkshop 0.2.1

package/scripts/api-live-e2e.mjs

@@ -0,0 +1,467 @@
+/**
+ * 生产服务器实时 API 端到端验证(针对 npm run start 起的 3001 服务)。
+ *
+ * 覆盖:
+ *  - 持久化恢复(重启前的 channels/agents/tasks 在 API 可见)
+ *  - AGENT 模板 CRUD + 实例化(clone 进 channel)
+ *  - CHANNEL CRUD + activate + 成员管理
+ *  - TASK 提交与生命周期:goal / loop(maxIterations 限次)/ pipeline 三模式
+ *    SUBMITTED → ASSIGNED → WORKING → 进度上报 → COMPLETED,parent/child 聚合
+ *  - dispatch / report / complete / cancel 状态机
+ *  - Bearer token 作用域:同 channel 可见,跨 channel → 403 SCOPE_VIOLATION
+ *  - a2a 点对点 + mailbox 拉取 + channel 消息历史
+ *  - agents/subscribe 订阅
+ *  - WebSocket Hub 增量广播(agent.status / task.status / task.progress)
+ *  - MCP Streamable HTTP initialize(Agent harness 作业面)
+ *
+ * 运行: node scripts/api-live-e2e.mjs
+ */
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3001'
+const WS_BASE = BASE.replace(/^http/, 'ws')
+
+let failures = 0
+let passed = 0
+let step = 0
+
+function check(name, ok, detail = '') {
+  const tag = ok ? 'PASS' : 'FAIL'
+  console.log(`  ${tag}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (ok) passed += 1
+  else failures += 1
+}
+
+function section(title) {
+  step += 1
+  console.log(`\n━━━ ${step}. ${title} ━━━`)
+}
+
+// 用户级隔离:注册测试用户;管理面 API 全程携带用户 token。
+// 跨重启复用 AW_E2E_TOKEN(持久化恢复章节要求"重启前的 channel"属于同一用户;
+// 新注册用户看不到旧用户的 channel,必须沿用同一 token)。
+let __user
+if (process.env.AW_E2E_TOKEN) {
+  __user = { data: { token: process.env.AW_E2E_TOKEN } }
+}
+else {
+  __user = await fetch(BASE + '/api/workshop/users/register', {
+    method: 'POST', headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ name: 'e2e-' + Math.random().toString(36).slice(2, 10) }),
+  }).then(r => r.json()).catch(() => null)
+}
+const __userToken = __user?.data?.token
+if (!__userToken) {
+  console.error('用户注册失败')
+  process.exit(1)
+}
+
+async function api(method, path, { body, token } = {}) {
+  const headers = { 'content-type': 'application/json' }
+  headers.authorization = `Bearer ${token ?? __userToken}`
+  const res = await fetch(`${BASE}${path}`, {
+    method,
+    headers,
+    body: body !== undefined ? JSON.stringify(body) : undefined,
+  })
+  const json = await res.json().catch(() => ({}))
+  return { status: res.status, ...json }
+}
+
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+/** 轮询直到断言通过或超时 */
+async function waitUntil(name, cond, timeoutMs = 20_000, intervalMs = 250) {
+  const deadline = Date.now() + timeoutMs
+  let last = null
+  while (Date.now() < deadline) {
+    try {
+      last = await cond()
+      if (last) return last
+    }
+    catch (e) { last = e }
+    await sleep(intervalMs)
+  }
+  throw new Error(`waitUntil timeout: ${name} (last=${JSON.stringify(String(last)).slice(0, 200)})`)
+}
+
+const tag = Date.now().toString(36)
+const ids = { channel: null, template: null, lead: null, worker: null, leadToken: null, workerToken: null }
+
+async function main() {
+  console.log(`目标: ${BASE} (生产构建 .output + scripts/start.mjs)\n`)
+
+  // 幂等预清理:移除上次异常中止遗留的 api-e2e-* / api-tpl* 数据
+  const staleCh = await api('GET', '/api/workshop/channels')
+  for (const c of (staleCh.data ?? []).filter(c => String(c.name).startsWith('api-e2e'))) {
+    await api('DELETE', `/api/workshop/channels/${c.id}`)
+  }
+  const staleAg = await api('GET', '/api/workshop/agents')
+  for (const a of (staleAg.data ?? []).filter(a => String(a.name).startsWith('api-tpl'))) {
+    await api('DELETE', `/api/workshop/agents/${a.id}`)
+  }
+  const preCh = await api('GET', '/api/workshop/channels')
+  if (preCh.data?.some(c => String(c.name).startsWith('api-e2e'))) {
+    throw new Error('预清理失败:api-e2e channel 仍存在')
+  }
+  console.log(`  预清理完成(遗留 api-e2e/api-tpl 数据已移除)`)
+
+  // ═══════════ 1. 持久化恢复 ═══════════
+  section('持久化恢复 — 重启前数据经 API 可见')
+  const ch0 = await api('GET', '/api/workshop/channels')
+  check('GET /channels 恢复 channel 列表', ch0.code === 0 && Array.isArray(ch0.data), `count=${ch0.data?.length}`)
+  const persisted = (ch0.data ?? []).filter(c => c.leadAgentId)
+  check('恢复的 channel 带 lead 实例', persisted.length >= 1, `with-lead=${persisted.length}`)
+
+  const rt0 = await api('GET', '/api/workshop/runtime')
+  check('GET /runtime 形状(懒加载状态)', rt0.code === 0 && Array.isArray(rt0.data?.wiredAgents) && Array.isArray(rt0.data?.activeChannels), `wired=${rt0.data?.wiredAgents?.length} active=${rt0.data?.activeChannels?.length}`)
+  const rt0Wired = rt0.data?.wiredAgents?.length ?? 0
+
+  // 详情请求触发 ensureChannelActive(懒加载恢复)
+  const probeId = persisted[0].id
+  const probe = await api('GET', `/api/workshop/channels/${probeId}`)
+  check('GET /channels/:id 详情(含成员)', probe.code === 0 && Array.isArray(probe.data?.agents) && probe.data.agents.length > 0, `agents=${probe.data?.agents?.length}`)
+  const rt1 = await api('GET', '/api/workshop/runtime')
+  check('详情请求后 lead 运行时装配(懒加载)', rt1.code === 0 && (rt1.data?.wiredAgents?.length ?? 0) >= rt0Wired, `wired=${rt1.data?.wiredAgents?.length} active=${rt1.data?.activeChannels?.length}`)
+  const persistedTasks = await api('GET', `/api/workshop/channels/${probeId}/tasks`)
+  check('GET /channels/:id/tasks 恢复历史任务', persistedTasks.code === 0, `tasks=${persistedTasks.data?.length}`)
+
+  // ═══════════ 2. AGENT 模板 CRUD ═══════════
+  section('AGENT 模板 CRUD(全局定义)')
+  const tpl = await api('POST', '/api/workshop/agents', { body: { name: `api-tpl-${tag}`, harness: 'mock', config: { delayMs: 120 } } })
+  check('POST /agents 创建模板', tpl.code === 0 && tpl.data?.id, `id=${tpl.data?.id?.slice(0, 8)}`)
+  ids.template = tpl.data.id
+
+  const tpl2 = await api('POST', '/api/workshop/agents', { body: { name: `api-tpl2-${tag}`, harness: 'mock' } })
+  check('POST /agents 第二个模板', tpl2.code === 0)
+
+  const listA = await api('GET', '/api/workshop/agents')
+  check('GET /agents 列表含新模板', listA.code === 0 && listA.data.some(a => a.id === ids.template), `count=${listA.data?.length}`)
+
+  const tplGet = await api('GET', `/api/workshop/agents/${ids.template}`)
+  check('GET /agents/:id 详情', tplGet.code === 0 && tplGet.data?.name === `api-tpl-${tag}`)
+
+  const tplPatch = await api('PATCH', `/api/workshop/agents/${ids.template}`, { body: { name: `api-tpl-renamed-${tag}`, enabled: 1 } })
+  check('PATCH /agents/:id 更新', tplPatch.code === 0 && tplPatch.data?.name === `api-tpl-renamed-${tag}`)
+
+  const badTpl = await api('POST', '/api/workshop/agents', { body: { name: '', harness: '' } })
+  check('POST /agents 校验(name 必填 → 400)', badTpl.status === 400 || badTpl.code !== 0)
+
+  // ═══════════ 3. CHANNEL CRUD + 成员 ═══════════
+  section('CHANNEL CRUD + lead/worker 装配')
+  const ch = await api('POST', '/api/workshop/channels', {
+    body: {
+      name: `api-e2e-${tag}`,
+      description: 'API live e2e',
+      leadAgent: { name: 'api-lead', harness: 'mock', config: { delayMs: 80 } },
+    },
+  })
+  check('POST /channels 创建(含 lead)', ch.code === 0 && ch.data?.leadAgentId, `channel=${ch.data?.channelId?.slice(0, 8)}`)
+  ids.channel = ch.data.channelId
+  ids.lead = ch.data.leadAgentId
+
+  const w = await api('POST', `/api/workshop/channels/${ids.channel}/agents`, { body: { agentId: ids.template, role: 'worker' } })
+  check('POST /channels/:id/agents 克隆模板为 worker', w.code === 0 && w.data?.id && w.data?.role === 'worker', `id=${w.data?.id?.slice(0, 8)}`)
+  ids.worker = w.data.id
+
+  const w2 = await api('POST', `/api/workshop/channels/${ids.channel}/agents`, { body: { agentId: tpl2.data.id, role: 'worker' } })
+  check('POST 第二个 worker', w2.code === 0)
+
+  const members = await api('GET', `/api/workshop/channels/${ids.channel}/agents`)
+  check('GET /channels/:id/agents 成员列表', members.code === 0 && members.data.length === 3, `members=${members.data?.length}`)
+  const leadInfo = members.data.find(a => a.id === ids.lead)
+  const workerInfo = members.data.find(a => a.id === ids.worker)
+  ids.leadToken = leadInfo?.token
+  ids.workerToken = workerInfo?.token
+  check('成员带实例 token(auth 基础)', Boolean(ids.leadToken && ids.workerToken))
+
+  const dupLead = await api('POST', `/api/workshop/channels/${ids.channel}/agents`, { body: { agentId: tpl2.data.id, role: 'lead' } })
+  check('第二个 lead → 409 LEAD_EXISTS', dupLead.status === 409 || dupLead.code === 'LEAD_EXISTS', `code=${dupLead.code}`)
+
+  const chGet = await api('GET', `/api/workshop/channels/${ids.channel}`)
+  check('GET /channels/:id 详情', chGet.code === 0 && chGet.data?.name === `api-e2e-${tag}`)
+
+  const chPatch = await api('PATCH', `/api/workshop/channels/${ids.channel}`, { body: { name: `api-e2e-rn-${tag}` } })
+  check('PATCH /channels/:id 更新', chPatch.code === 0 && chPatch.data?.name === `api-e2e-rn-${tag}`)
+
+  const activate = await api('POST', `/api/workshop/channels/${ids.channel}/activate`)
+  check('POST /channels/:id/activate 显式激活', activate.code === 0)
+
+  // ═══════════ 4. TASK 生命周期(goal 模式) ═══════════
+  section('TASK 提交与执行 — goal 模式')
+  const gtask = await api('POST', `/api/workshop/channels/${ids.channel}/tasks`, {
+    body: { title: `goal-${tag}`, description: '验证 goal 模式全链路', mode: 'goal', modeConfig: { goalCriteria: '全部完成' } },
+  })
+  check('POST /channels/:id/tasks 提交(goal)', gtask.code === 0 && gtask.data?.id && gtask.data?.state === 'SUBMITTED', `state=${gtask.data?.state}`)
+  ids.goalTask = gtask.data.id
+  check('任务路由到 lead', gtask.data?.assigneeId === ids.lead)
+
+  const goalDone = await waitUntil('goal 任务 COMPLETED', async () => {
+    const t = await api('GET', `/api/workshop/channels/${ids.channel}/tasks`)
+    const mine = (t.data ?? []).find(x => x.id === ids.goalTask)
+    return mine && (mine.state === 'COMPLETED' || mine.state === 'FAILED') ? mine : null
+  }, 20_000)
+  check('goal 任务自动执行至终态', goalDone.state === 'COMPLETED', `state=${goalDone.state} progress=${goalDone.progress}`)
+  check('goal 任务含成果 artifacts', Array.isArray(goalDone.artifacts) && goalDone.artifacts.length > 0, `artifacts=${goalDone.artifacts?.length}`)
+
+  const gDetail = await api('GET', `/api/workshop/tasks/${ids.goalTask}`)
+  check('GET /tasks/:id 详情(管理面,无 token)', gDetail.code === 0 && gDetail.data?.id === ids.goalTask)
+  check('详情含 history 数组', Array.isArray(gDetail.data?.history), `history=${gDetail.data?.history?.length}`)
+
+  // ═══════════ 5. TASK 作用域 + dispatch/report/complete ═══════════
+  section('TASK 作用域校验 + dispatch/report/complete 状态机')
+  const scoped = await api('GET', '/api/workshop/tasks', { token: ids.workerToken })
+  check('带 token 拉取本 channel 任务', scoped.code === 0 && scoped.data.length >= 1, `tasks=${scoped.data?.length}`)
+
+  const badToken = await api('GET', '/api/workshop/tasks', { token: 'deadbeef' })
+  check('无效 token → 401', badToken.status === 401, `status=${badToken.status}`)
+
+  // 跨 channel 作用域:用旧 channel(probeId)的 lead token 查新 channel 任务
+  const probeAgents = await api('GET', `/api/workshop/channels/${probeId}/agents`)
+  const otherToken = probeAgents.data?.find(a => a.role === 'lead')?.token
+  const crossScope = await api('GET', `/api/workshop/tasks`, { token: otherToken })
+  const crossed = await api('GET', `/api/workshop/tasks/${ids.goalTask}`, { token: otherToken })
+  check('跨 channel 访问任务 → 403 SCOPE_VIOLATION', crossScope.code !== 0 || crossed.status === 403 || crossed.code === 'SCOPE_VIOLATION', `code=${crossed.code} status=${crossed.status}`)
+
+  // dispatch 状态机:提交新父任务 → 等 lead 自动派发第 1 个子任务(父转 WAITING)
+  // → API 手工 dispatch 第 2 个子任务(WAITING 父上允许) → 全部完成后父汇总
+  const ptask = await api('POST', `/api/workshop/channels/${ids.channel}/tasks`, {
+    body: { title: `parent-${tag}`, description: '父任务聚合验证' },
+  })
+  check('提交父任务(用于 dispatch)', ptask.code === 0 && ptask.data?.id)
+  ids.parentTask = ptask.data.id
+
+  const autoChild = await waitUntil('lead 自动派发第 1 个子任务(父→WAITING)', async () => {
+    const t = await api('GET', `/api/workshop/tasks/${ids.parentTask}`)
+    const children = await api('GET', `/api/workshop/channels/${ids.channel}/tasks`)
+    const kids = (children.data ?? []).filter(x => x.parentId === ids.parentTask)
+    return kids.length > 0 && t.data?.state === 'WAITING' ? kids : null
+  }, 15_000)
+  check('lead 自动派发子任务', autoChild.length === 1, `autoChild=${autoChild[0]?.id?.slice(0, 8)}`)
+
+  const subtask = await api('POST', `/api/workshop/tasks/${ids.parentTask}/dispatch`, {
+    token: ids.leadToken,
+    body: { assigneeId: ids.worker, title: `manual-child-${tag}`, description: 'API 手工派发' },
+  })
+  check('POST /tasks/:id/dispatch 手工派发第 2 个子任务', subtask.code === 0 && subtask.data?.parentId === ids.parentTask, `child=${subtask.data?.id?.slice(0, 8)}`)
+  ids.childTask = subtask.data.id
+
+  // worker 上报进度(带 message → 写入 history)
+  const rep = await api('POST', `/api/workshop/tasks/${ids.childTask}/report`, {
+    token: ids.workerToken,
+    body: { progress: 42, message: `人工上报-${tag}` },
+  })
+  check('POST /tasks/:id/report 上报进度', rep.code === 0 && typeof rep.data?.progress === 'number' && rep.data.progress <= 100, `progress=${rep.data?.progress}`)
+
+  const childDone = await waitUntil('子任务 COMPLETED(worker 剧本)', async () => {
+    const t = await api('GET', `/api/workshop/tasks/${ids.childTask}`, { token: ids.workerToken })
+    return t.data && (t.data.state === 'COMPLETED' || t.data.state === 'FAILED') ? t.data : null
+  }, 15_000)
+  check('子任务执行至 COMPLETED', childDone.state === 'COMPLETED', `state=${childDone.state}`)
+  const childDetail = await api('GET', `/api/workshop/tasks/${ids.childTask}`)
+  check('上报 message 已写入任务 history', (childDetail.data?.history ?? []).some(h => JSON.stringify(h.parts).includes(`人工上报-${tag}`)), `history=${childDetail.data?.history?.length}`)
+
+  // 完成父任务(lead 剧本:子任务全完成 → complete 父)
+  const parentDone = await waitUntil('父任务汇总 COMPLETED(两个子任务)', async () => {
+    const t = await api('GET', `/api/workshop/tasks/${ids.parentTask}`)
+    return t.data && (t.data.state === 'COMPLETED' || t.data.state === 'FAILED') ? t.data : null
+  }, 15_000)
+  check('父任务自动汇总 COMPLETED', parentDone.state === 'COMPLETED', `state=${parentDone.state}`)
+
+  // complete 状态机:已完成任务再次 complete → 终态幂等(产品刻意支持:防御 Agent/重试重复收口,
+  // 与 omp-agent complete_task 的"任务可能已被平台收口,不可重复完成"引导一致):
+  // 或 400 INVALID_TRANSITION(旧语义)或 200 code=0 返回原已终态任务(新语义)。
+  const reComplete = await api('POST', `/api/workshop/tasks/${ids.childTask}/complete`, {
+    token: ids.workerToken,
+    body: { artifacts: [{ artifactId: 'a1', name: 'x', parts: [{ text: 'y' }] }] },
+  })
+  check('终态重复 complete → 幂等成功或 400', reComplete.status === 400
+  || reComplete.code === 'INVALID_TRANSITION'
+  || (reComplete.code === 0 && reComplete.data?.state === 'COMPLETED'),
+  `code=${reComplete.code} state=${reComplete.data?.state}`)
+
+  // ═══════════ 6. cancel 状态机 ═══════════
+  section('TASK cancel(系统身份回收)')
+  const ctask = await api('POST', `/api/workshop/channels/${ids.channel}/tasks`, {
+    body: { title: `cancel-me-${tag}`, description: '将被取消' },
+  })
+  check('提交待取消任务', ctask.code === 0)
+  const cancel = await api('POST', `/api/workshop/tasks/${ctask.data.id}/cancel`)
+  check('POST /tasks/:id/cancel → CANCELED', cancel.code === 0 && cancel.data?.state === 'CANCELED', `state=${cancel.data?.state}`)
+  const cancelAgain = await api('POST', `/api/workshop/tasks/${ctask.data.id}/cancel`)
+  check('终态重复 cancel → 400', cancelAgain.status === 400 || cancelAgain.code === 'INVALID_TRANSITION')
+
+  // ═══════════ 7. loop 模式(限次) ═══════════
+  section('TASK loop 模式(LoopController 限次重放)')
+  const loop = await api('POST', `/api/workshop/channels/${ids.channel}/tasks`, {
+    body: {
+      title: `loop-${tag}`,
+      description: 'loop 模式限次验证',
+      mode: 'loop',
+      modeConfig: { intervalMs: 300, maxIterations: 2 },
+    },
+  })
+  check('POST 提交(loop, max=2)', loop.code === 0 && loop.data?.id, `id=${loop.data?.id?.slice(0, 8)}`)
+  ids.loopTask = loop.data.id
+
+  // loop 重放 = 同标题新任务被再次创建;等 2 次迭代后所有 loop 任务终态
+  const loopDone = await waitUntil('loop 迭代重放并全部完成', async () => {
+    const t = await api('GET', `/api/workshop/channels/${ids.channel}/tasks`)
+    const loops = (t.data ?? []).filter(x => x.title === `loop-${tag}`)
+    if (loops.length < 2) return null
+    return loops.every(x => x.state === 'COMPLETED' || x.state === 'FAILED') ? loops : null
+  }, 25_000)
+  check('loop 重放 ≥2 次且全部终态', Array.isArray(loopDone) && loopDone.length >= 2, `iterations=${loopDone?.length}`)
+
+  // ═══════════ 8. pipeline 模式(提交与元数据) ═══════════
+  section('TASK pipeline 模式(提交 + 模式元数据)')
+  const pipe = await api('POST', `/api/workshop/channels/${ids.channel}/tasks`, {
+    body: {
+      title: `pipe-${tag}`,
+      description: '流水线验证',
+      mode: 'pipeline',
+      modeConfig: { stages: [{ name: 'stage-A', description: '阶段A' }, { name: 'stage-B', description: '阶段B' }] },
+    },
+  })
+  check('POST 提交(pipeline)', pipe.code === 0 && pipe.data?.id)
+  const pipeDetail = await api('GET', `/api/workshop/tasks/${pipe.data.id}`)
+  const meta = pipeDetail.data?.metadata ?? {}
+  check('pipeline 模式元数据编码(mode/stages)', meta['x-aw-exec-mode'] === 'pipeline' || String(pipeDetail.data?.description ?? '').includes('pipeline'), `desc=${String(pipeDetail.data?.description ?? '').slice(0, 80)}`)
+  const pipeDone = await waitUntil('pipeline 任务执行至终态', async () => {
+    const t = await api('GET', `/api/workshop/tasks/${pipe.data.id}`)
+    return t.data && (t.data.state === 'COMPLETED' || t.data.state === 'FAILED') ? t.data : null
+  }, 20_000)
+  check('pipeline 执行至 COMPLETED', pipeDone.state === 'COMPLETED', `state=${pipeDone.state}`)
+
+  // ═══════════ 9. a2a + mailbox + 消息 ═══════════
+  section('A2A 点对点 + mailbox + channel 消息历史')
+  const a2a = await api('POST', '/api/workshop/a2a/send', {
+    token: ids.workerToken,
+    body: { toAgentId: ids.lead, parts: [{ text: `hello-lead-${tag}` }], metadata: { via: 'api-e2e' } },
+  })
+  check('POST /a2a/send worker→lead', a2a.code === 0 && a2a.data?.messageId, `msg=${a2a.data?.messageId?.slice(0, 8)}`)
+
+  // mock lead 空闲即消费(consumeLoop),pending 队列瞬时清空属正常;
+  // 持久化证据 = channel 消息历史(含 from/to 路由)
+  const mb = await api('GET', '/api/workshop/mailbox?limit=20', { token: ids.leadToken })
+  check('GET /mailbox 端点形状(可拉取队列)', mb.code === 0 && Array.isArray(mb.data), `pending=${mb.data?.length}`)
+  const a2aHistory = await api('GET', `/api/workshop/channels/${ids.channel}/messages?limit=50`)
+  const a2aMsg = (a2aHistory.data ?? []).find(m => JSON.stringify(m.parts).includes(`hello-lead-${tag}`))
+  check('a2a 消息持久化到 channel 历史(from/to 正确)', Boolean(a2aMsg && a2aMsg.fromAgentId === ids.worker && a2aMsg.toAgentId === ids.lead), `from=${a2aMsg?.fromAgentId?.slice(0, 8)} to=${a2aMsg?.toAgentId?.slice(0, 8)}`)
+  check('API messageId == 历史 id(可关联)', a2aMsg?.id === a2a.data.messageId, `api=${a2a.data.messageId?.slice(0, 8)} hist=${a2aMsg?.id?.slice(0, 8)}`)
+
+  const badA2a = await api('POST', '/api/workshop/a2a/send', {
+    token: ids.workerToken,
+    body: { toAgentId: 'not-exist', parts: [{ text: 'x' }] },
+  })
+  check('a2a 目标不存在 → 404/校验失败', badA2a.status === 404 || badA2a.code !== 0, `status=${badA2a.status}`)
+
+  const msg = await api('POST', `/api/workshop/channels/${ids.channel}/messages`, {
+    body: { toAgentId: ids.worker, text: `immediate-${tag}`, priority: 'immediate' },
+  })
+  check('POST /channels/:id/messages immediate 注入', msg.code === 0, `code=${msg.code}`)
+
+  const history = await api('GET', `/api/workshop/channels/${ids.channel}/messages?limit=50`)
+  check('GET /channels/:id/messages 历史含新消息', history.code === 0 && history.data?.some(m => JSON.stringify(m.parts).includes(`immediate-${tag}`)), `msgs=${history.data?.length}`)
+
+  const sub = await api('POST', '/api/workshop/agents/subscribe', {
+    token: ids.workerToken,
+    body: { agentIds: [ids.lead] },
+  })
+  check('POST /agents/subscribe 订阅', sub.code === 0 && sub.data?.subscribed === true)
+
+  // ═══════════ 10. WebSocket Hub 增量广播 ═══════════
+  section('WebSocket Hub — 前端观察入口')
+  const wsEvents = []
+  const ws = new WebSocket(`${WS_BASE}/api/workshop/ws?channelId=${ids.channel}&token=${encodeURIComponent(__userToken)}`)
+  const wsReady = new Promise((resolve, reject) => {
+    ws.onopen = () => resolve(true)
+    ws.onerror = e => reject(new Error(`ws error: ${JSON.stringify(e.message ?? e)}`))
+    ws.onmessage = (ev) => {
+      try {
+        wsEvents.push(JSON.parse(ev.data))
+      }
+      catch {
+        // 忽略非 JSON 帧
+      }
+    }
+  })
+  await Promise.race([wsReady, sleep(4000).then(() => Promise.reject(new Error('ws open timeout')))])
+  check('WS 连接成功', true)
+
+  // 提交新任务观察广播
+  const wsTask = await api('POST', `/api/workshop/channels/${ids.channel}/tasks`, {
+    body: { title: `ws-${tag}`, description: 'ws 广播验证' },
+  })
+  await waitUntil('WS 收到 task.status/progress 事件', async () => {
+    return wsEvents.some(e => (e.type === 'task.status' || e.type === 'task.progress') && JSON.stringify(e.payload).includes(wsTask.data.id)) ? true : null
+  }, 15_000)
+  const hasTaskEvents = wsEvents.some(e => (e.type === 'task.status' || e.type === 'task.progress'))
+  // a2a 事件与 task.status 几乎同时到达但顺序不定(事件驱动直推),带短窗口等待消除竞态
+  const hasA2aEvents = await waitUntil('WS a2a 事件', async () => {
+    return wsEvents.some(e => (e.type === 'a2a.artifact' || e.type === 'a2a.message')) ? true : null
+  }, 5000).then(() => true, () => false)
+  const hasAgentEvents = wsEvents.some(e => e.type === 'agent.status')
+  check('WS 广播 task.status/task.progress', hasTaskEvents, `events=${wsEvents.map(e => e.type).join(',')}`)
+  check('WS 广播 a2a.artifact/a2a.message', hasA2aEvents)
+  // agent.status 为 500ms 快照 diff:mock worker busy 窗口(~400ms)可能夹在两帧之间,
+  // 用慢 worker 单独验证过 diff 机制(busy/idle 均会广播);此处仅记录不判失败
+  console.log(`  INFO  agent.status diff 事件(mock 忙窗口 < 500ms 轮询时可能不出现): ${hasAgentEvents ? '出现' : '未出现'}`)
+  const wsTaskDone = await waitUntil('ws 任务终态', async () => {
+    const t = await api('GET', `/api/workshop/tasks/${wsTask.data.id}`)
+    return t.data && (t.data.state === 'COMPLETED' || t.data.state === 'FAILED') ? t.data : null
+  }, 20_000)
+  check('ws 任务执行完成', wsTaskDone.state === 'COMPLETED', `state=${wsTaskDone.state}`)
+  ws.close()
+
+  // ═══════════ 11. MCP Streamable HTTP(Agent harness 作业面) ═══════════
+  section('MCP 端点 — initialize 会话建立')
+  const mcpRes = await fetch(`${BASE}/api/mcp/workshop`, {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', 'accept': 'application/json, text/event-stream' },
+    body: JSON.stringify({
+      jsonrpc: '2.0',
+      id: 1,
+      method: 'initialize',
+      params: {
+        protocolVersion: '2025-03-26',
+        capabilities: {},
+        clientInfo: { name: 'api-e2e', version: '1.0.0' },
+      },
+    }),
+  })
+  const mcpBody = await mcpRes.text()
+  const mcpOk = mcpRes.status === 200 && mcpBody.includes('serverInfo')
+  check('POST /api/mcp/workshop initialize', mcpOk, `status=${mcpRes.status} hasServerInfo=${mcpBody.includes('serverInfo')}`)
+  const mcpSid = mcpRes.headers.get('mcp-session-id')
+  check('MCP 会话 id 下发(状态复用)', Boolean(mcpSid), `sid=${mcpSid?.slice(0, 8)}`)
+  if (mcpSid) {
+    const toolsRes = await fetch(`${BASE}/api/mcp/workshop`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json', 'accept': 'application/json, text/event-stream', 'mcp-session-id': mcpSid },
+      body: JSON.stringify({ jsonrpc: '2.0', id: 2, method: 'tools/list', params: {} }),
+    })
+    const toolsBody = await toolsRes.text()
+    const toolCount = (toolsBody.match(/"name":"/g) ?? []).length
+    check('MCP tools/list 返回工具集', toolCount > 0, `tools≈${toolCount}`)
+    // 清理会话
+    await fetch(`${BASE}/api/mcp/workshop?sessionId=${mcpSid}`, { method: 'DELETE' })
+  }
+
+  // ═══════════ 12. 清理(删除本测试数据) ═══════════
+  section('清理与级联删除')
+  const delCh = await api('DELETE', `/api/workshop/channels/${ids.channel}`)
+  check('DELETE /channels/:id 级联删除', delCh.code === 0 && delCh.data?.ok === true)
+  const delTpl = await api('DELETE', `/api/workshop/agents/${ids.template}`)
+  check('DELETE /agents/:id', delTpl.code === 0)
+  await api('DELETE', `/api/workshop/agents/${tpl2.data.id}`)
+  const afterCh = await api('GET', '/api/workshop/channels')
+  check('删除后 channel 列表回退(旧数据保留)', afterCh.code === 0 && !afterCh.data.some(c => c.id === ids.channel), `count=${afterCh.data?.length}`)
+
+  // ═══════════ 结果 ═══════════
+  console.log(`\n${failures === 0 ? '★ ALL PASS' : `✗ ${failures} FAILED`}  (${passed} passed)`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((e) => {
+  console.error('\n[api-live-e2e] 异常中止:', e)
+  process.exit(2)
+})