agentworkshop 0.7.27 → 0.7.34

package/scripts/_audit/verify-data-integrity.mjs

@@ -0,0 +1,112 @@
+#!/usr/bin/env node
+/**
+ * scripts/_audit/verify-data-integrity.mjs —— 数据根完整性核对(只读)
+ *
+ * 背景:DCW 审计 agent 的隔离实验因为仓库改用 ensureDataDir() 而误写真实配置根,
+ * 造成 .AgentWorkShop/data/{dcw-rollback,dcws}.json 被合成数据污染(11.4MB 账本 +
+ * 2 个 phantom 节点),其自述已修复。本脚本独立核对"修复是否真的把两套根收敛回一致",
+ * 以及关键集合规模是否与权威副本相符。
+ *
+ * 用法: node scripts/_audit/verify-data-integrity.mjs
+ * 退出码:0 = 全部一致;1 = 存在分歧。
+ */
+import { readFileSync, statSync, existsSync } from 'node:fs'
+import { join } from 'node:path'
+
+const REPO = process.cwd()
+const ROOTS = {
+  server: join(REPO, 'server', 'data'),
+  config: join(REPO, '.AgentWorkShop', 'data'),
+}
+const FILES = [
+  'dcws.json', 'daqs.json', 'dcw-rollback.json', 'dcw-writes.json', 'dcw-runs.json',
+  'dcw-recipes.json', 'dcw-lines.json', 'dcw-products.json', 'dcw-templates.json',
+  'line-runs.json', 'scene-layouts.json', 'agent-node-bindings.json', 'daq-templates.json',
+]
+
+let bad = 0
+const note = (okFlag, msg) => {
+  if (!okFlag) bad++
+  console.log(`  ${okFlag ? '✔' : '✘'} ${msg}`)
+}
+
+const read = (root, f) => {
+  const p = join(ROOTS[root], f)
+  if (!existsSync(p)) return null
+  return { path: p, size: statSync(p).size, mtime: statSync(p).mtimeMs, text: readFileSync(p, 'utf8') }
+}
+
+/** 从 DCW/DAQ 快照里数出集合规模(兼容数组与 {nodes:[...]} 两种形态) */
+function countOf(text, keys) {
+  try {
+    const j = JSON.parse(text)
+    for (const k of keys) {
+      if (Array.isArray(j[k])) return j[k].length
+      if (Array.isArray(j)) return j.length
+    }
+    return null
+  }
+  catch {
+    return null
+  }
+}
+
+console.log('═══ 数据根完整性核对(只读)═══\n')
+
+console.log('── 1. 两套根的逐文件对照 ──')
+for (const f of FILES) {
+  const s = read('server', f)
+  const c = read('config', f)
+  if (!s && !c) {
+    console.log(`  · ${f}: 两侧均无(未使用)`)
+    continue
+  }
+  if (!s) {
+    console.log(`  · ${f}: 仅 config(${c.size} B)`)
+    continue
+  }
+  if (!c) {
+    console.log(`  · ${f}: 仅 server(${s.size} B)`)
+    continue
+  }
+  const same = s.text === c.text
+  const sizeTag = s.size === c.size ? `${s.size}B` : `${s.size}B vs ${c.size}B`
+  console.log(`  ${same ? '=' : '≠'} ${f}: ${sizeTag}`)
+  if (!same && (f === 'dcws.json' || f === 'dcw-rollback.json')) {
+    // 关键文件必须一致(污染事件的核心)
+    note(false, `${f} 两侧内容不一致 —— 修复未收敛`)
+  }
+}
+
+console.log('\n── 2. 污染痕迹清零核对 ──')
+const dcws = read('config', 'dcws.json')
+if (dcws) {
+  const phantoms = ['dw-cc28b097', 'dw-c37e304b']
+  const found = phantoms.filter(id => dcws.text.includes(id))
+  note(found.length === 0, `phantom 节点已清除${found.length ? ` (残留: ${found.join(', ')})` : ''}`)
+  note(!dcws.text.includes('"decimals": 101') && !dcws.text.includes('"decimals":101'),
+    'decimals=101 污染值已清除')
+  const n = countOf(dcws.text, ['nodes', 'items'])
+  console.log(`    config dcws 节点数 = ${n}`)
+}
+
+const rb = read('config', 'dcw-rollback.json')
+if (rb) {
+  const n = countOf(rb.text, ['records'])
+  const a = countOf(rb.text, ['anchors'])
+  console.log(`    config dcw-rollback: records=${n} anchors=${a} size=${rb.size}B`)
+  note(rb.size < 2_000_000, `账本规模正常(<2MB)${rb.size >= 2_000_000 ? ` —— 实测 ${rb.size}B,疑似合成数据残留` : ''}`)
+  const synthetic = (rb.text.match(/"n-\d+"/g) ?? []).length
+  note(synthetic === 0, `无合成锚 id(n-*)${synthetic ? ` (残留 ${synthetic} 个)` : ''}`)
+}
+
+console.log('\n── 3. 污染备份证据留存 ──')
+const backupDir = join(REPO, 'scripts', '_audit', '.tmp', 'pollution-backup')
+for (const f of ['dcw-rollback.polluted.json', 'dcws.polluted.json']) {
+  const p = join(backupDir, f)
+  const okFlag = existsSync(p)
+  console.log(`  ${okFlag ? '✔' : '·'} 证据 ${f}${okFlag ? ` (${statSync(p).size} B)` : '(未找到)'}`)
+}
+
+console.log(`\n═══ 结果:${bad === 0 ? '全部一致' : `${bad} 项不一致`} ═══`)
+process.exit(bad === 0 ? 0 : 1)

package/scripts/_dbg-agents-dropdown-shot.py

@@ -0,0 +1,33 @@
+import asyncio, os
+from playwright.async_api import async_playwright
+
+BASE = os.environ.get('AW_BASE', 'http://127.0.0.1:3000')
+SHOT = '.e2e-shots'
+
+async def main():
+    async with async_playwright() as p:
+        browser = await p.chromium.launch()
+        page = await browser.new_page(viewport={'width': 1500, 'height': 950})
+        await page.goto(BASE + '/workshop', wait_until='domcontentloaded', timeout=120000)
+        await page.wait_for_selector('input[placeholder="邮箱 / 用户名"]', timeout=90000)
+        await page.wait_for_timeout(4000)
+        await page.get_by_placeholder('邮箱 / 用户名').click(timeout=8000)
+        await page.get_by_placeholder('邮箱 / 用户名').fill('admin', timeout=8000)
+        await page.locator('input[type="password"]').first.click(timeout=8000)
+        await page.locator('input[type="password"]').first.fill('admin123', timeout=8000)
+        await page.get_by_role('button', name='登 录').click(timeout=8000)
+        await page.wait_for_timeout(3500)
+        await page.goto(BASE + '/workshop/agents', wait_until='domcontentloaded', timeout=120000)
+        await page.wait_for_timeout(4000)
+        await page.get_by_role('button', name='新建模板').first.click(timeout=8000)
+        await page.wait_for_timeout(2500)
+        sel = page.locator('.ant-select').nth(1)  # 表单内第 2 个 select(第 1 个是可见性)
+        await sel.scroll_into_view_if_needed()
+        await sel.click()
+        await page.wait_for_timeout(1800)
+        dots = await page.locator('.h-opt-dot').count()
+        print(f'[agents] dropdown option dots = {dots}')
+        await page.screenshot(path=f'{SHOT}/harness-agents-dropdown.png', full_page=False)
+        await browser.close()
+
+asyncio.run(main())

package/scripts/_dbg-anim-verify.mjs

@@ -7,7 +7,7 @@ const sleep = ms => new Promise(r => setTimeout(r, ms))
 const login = await fetch(`${ROOT}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 
 const browser = await puppeteer.launch({

package/scripts/_dbg-audit-all-pages.mjs

@@ -7,7 +7,7 @@ const sleep = ms => new Promise(r => setTimeout(r, ms))
 const login = await fetch(`${ROOT}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 if (!login.data?.token) { console.error('login failed'); process.exit(1) }
 

package/scripts/_dbg-availability-probe.ts

@@ -0,0 +1,11 @@
+/** 可用性探测全览:模拟 GET /api/workshop/harnesses 的核心输出 */
+import { checkHarnessAvailability } from '../server/services/workshop/agents/harness-availability'
+import { harnessMetas } from '../server/services/workshop/agents/registry'
+
+async function main(): Promise<void> {
+  for (const m of harnessMetas()) {
+    const a = await checkHarnessAvailability(m.id)
+    console.log(`${a.id.padEnd(10)} available=${String(a.available).padEnd(5)} inprocess=${String(a.inprocess).padEnd(5)} path=${a.resolvedPath ?? a.error ?? '-'}`)
+  }
+}
+void main()

package/scripts/_dbg-bind-bidi-e2e.mjs

@@ -15,7 +15,7 @@ const H = () => ({ 'authorization': `Bearer ${TOKEN}`, 'content-type': 'applicat
 const login = await fetch(`${BASE}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 TOKEN = login.data.token
 const OUT = 'docs/audit/screenshots/ui-polish-0831'

package/scripts/_dbg-cf-line-shot.mjs

@@ -0,0 +1,18 @@
+/** 一次性:cfB 产线详情页特写截图 */
+import puppeteer from 'puppeteer-core'
+
+const token = process.argv[2]
+const lineId = process.argv[3]
+const b = await puppeteer.launch({
+  executablePath: 'C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe',
+  headless: 'new',
+  args: ['--no-sandbox', '--disable-gpu', '--proxy-server=direct://', '--proxy-bypass-list=*', '--window-size=1920,1400'],
+})
+const p = await b.newPage()
+await p.setViewport({ width: 1920, height: 1400 })
+await p.setCookie({ name: 'token', value: token, domain: '127.0.0.1', path: '/' })
+await p.goto(`http://127.0.0.1:3001/dcw/${lineId}`, { waitUntil: 'domcontentloaded', timeout: 90_000 })
+await new Promise(r => setTimeout(r, 9000))
+await p.screenshot({ path: 'docs/experiments/results/castfilm-ui/06-line-detail-cfB.png' })
+await b.close()
+console.log('shot ok')

package/scripts/_dbg-channel-plugin-ui.mjs

@@ -0,0 +1,94 @@
+/**
+ * Channel 设置弹窗插件开关区 UI 验证:建 workspace+channel → 打开工作台 → 设置 → 截图断言。
+ * 用法:NO_PROXY='*' node scripts/_dbg-channel-plugin-ui.mjs
+ */
+import puppeteer from 'puppeteer-core'
+import { mkdirSync } from 'node:fs'
+import { DatabaseSync } from 'node:sqlite'
+import { join, resolve } from 'node:path'
+
+const BASE = process.env.BASE_URL ?? 'http://127.0.0.1:3021'
+const EDGE = 'C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe'
+const SHOT_DIR = '.design-verify'
+const stamp = Date.now().toString(36)
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+let fail = 0
+const ok = (cond, label, detail = '') => {
+  console.log(`  ${cond ? '✔' : '✘'} ${label}${detail ? ` —— ${detail}` : ''}`)
+  if (!cond) fail++
+}
+
+async function main() {
+  mkdirSync(SHOT_DIR, { recursive: true })
+  // ① 注册 admin 测试用户(设置弹窗要 GET /channels/:id/plugins,user 即可,但顺手 admin)
+  const email = `chplug-ui-${stamp}@test.local`
+  const reg = await fetch(`${BASE}/api/users/register`, {
+    method: 'POST', headers: { 'content-type': 'application/json' },
+    body: JSON.stringify({ name: `chplugui-${stamp}`, email, password: 'Passw0rd!123' }),
+  }).then(r => r.json()).catch(() => null)
+  ok(Boolean(reg?.data?.token), 'API 注册测试用户', reg?.data?.user?.name ?? '')
+  if (reg?.data?.user?.id) {
+    const db = new DatabaseSync(join(resolve('.'), '.AgentWorkShop', 'data', 'users.sqlite'))
+    db.exec('PRAGMA busy_timeout=4000')
+    db.prepare('UPDATE users SET role = \'admin\' WHERE id = ?').run(reg.data.user.id)
+    db.close()
+  }
+  const auth = { authorization: `Bearer ${reg.data.token}` }
+
+  // ② 建 channel(带 mock lead)→ 建 workspace → 挂载 channel
+  const ch = await fetch(`${BASE}/api/workshop/channels`, {
+    method: 'POST', headers: { 'content-type': 'application/json', ...auth },
+    body: JSON.stringify({ name: `插件UI频道-${stamp}`, description: 'channel 设置弹窗插件区验证', leadAgent: { name: 'UI-lead', harness: 'mock' } }),
+  }).then(r => r.json()).catch(() => null)
+  ok(Boolean(ch?.data?.channelId), '创建 channel', ch?.data?.channelId ?? '')
+  const ws = await fetch(`${BASE}/api/workshop/workspaces`, {
+    method: 'POST', headers: { 'content-type': 'application/json', ...auth },
+    body: JSON.stringify({ name: `插件UI工作区-${stamp}` }),
+  }).then(r => r.json()).catch(() => null)
+  const wsId = ws?.data?.id
+  ok(Boolean(wsId), '创建 workspace', wsId ?? JSON.stringify(ws).slice(0, 100))
+  if (wsId && ch?.data?.channelId) {
+    const mount = await fetch(`${BASE}/api/workshop/workspaces/${wsId}/channels/${ch.data.channelId}`, {
+      method: 'POST', headers: { ...auth },
+    }).then(r => r.json()).catch(() => null)
+    ok(mount?.code === 0 || mount?.data != null, '挂载 channel 到 workspace', JSON.stringify(mount ?? {}).slice(0, 100))
+  }
+
+  // ③ 浏览器:cookie 登录 → 工作台 → 打开 channel 设置
+  const browser = await puppeteer.launch({
+    executablePath: EDGE, headless: 'new',
+    args: ['--no-sandbox', '--disable-gpu'],
+    defaultViewport: { width: 1440, height: 900 },
+  })
+  const page = await browser.newPage()
+  await page.goto(`${BASE}/workshop`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+  await sleep(2200)
+  await page.evaluate((t) => { document.cookie = `token=${t}; path=/` }, reg.data.token)
+  await page.goto(`${BASE}/workshop/w/${wsId}`, { waitUntil: 'domcontentloaded', timeout: 60000 })
+  await sleep(4500)
+  // 点 Channel 会话列表的「设置」(title = `设置 ${channelName}`;避免命中侧栏「系统设置」)
+  let opened = false
+  for (const el of await page.$$('button, [class*="op"], a, span')) {
+    const t = (await el.evaluate(e => (e.getAttribute('aria-label') || e.getAttribute('title') || e.textContent) ?? '')) || ''
+    if (t.includes('设置') && t.includes('插件UI频道')) {
+      await el.click().catch(() => {})
+      opened = true
+      break
+    }
+  }
+  console.log('  · 设置按钮点击:', opened)
+  await sleep(2500)
+  const dlg = await page.evaluate(() => document.body.innerText)
+  ok(dlg.includes('插件'), 'Channel 设置弹窗含插件开关区', dlg.includes('rag-bridge') ? 'rag-bridge 行可见' : '')
+  ok(dlg.includes('diag-bridge') && dlg.includes('rag-bridge'), '插件行渲染(diag-bridge/rag-bridge)')
+  await page.screenshot({ path: `${SHOT_DIR}/plug-04-channel-settings.png` })
+  console.log(`  · 截图 ${SHOT_DIR}/plug-04-channel-settings.png`)
+
+  await page.goto('about:blank').catch(() => {})
+  await sleep(1200)
+  await browser.close()
+  console.log(fail === 0 ? '\n★ Channel 插件 UI ALL PASS' : `\n✘ ${fail} 项失败`)
+  process.exit(fail > 0 ? 1 : 0)
+}
+
+main().catch((e) => { console.error(e); process.exit(2) })

package/scripts/_dbg-configroot-audit.mjs

@@ -0,0 +1,84 @@
+/**
+ * 配置根解析审计 —— 验证「启动目录的 ./.AgentWorkShop 优先,~/.AgentWorkShop 兜底」
+ * 在解析层与三条启动路径(start.mjs / dev-guard.mjs / 直跑 .output)上的一致性。
+ *
+ * 运行:node scripts/_dbg-configroot-audit.mjs
+ */
+import { existsSync, mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs'
+import { homedir, tmpdir } from 'node:os'
+import { join, resolve } from 'node:path'
+import { resolveRunMode, dataDirFor } from '../shared/config/home.mjs'
+import { groupsPathFor } from '../shared/config/groups.mjs'
+
+const REPO = resolve(new URL('..', import.meta.url).pathname.replace(/^\/([A-Za-z]:)/, '$1'))
+const HOME = homedir()
+let pass = 0, fail = 0
+const ok = (n, cond, d = '') => {
+  if (cond) { pass++; console.log(`  PASS  ${n}${d ? `  — ${d}` : ''}`) }
+  else { fail++; console.log(`  FAIL  ${n}${d ? `  — ${d}` : ''}`) }
+}
+const show = (label, rm) => console.log(`   · ${label}: mode=${rm.mode} configRoot=${rm.configRoot} settings=${rm.settingsPath}`)
+
+console.log('\n━━━ 1. 解析层:优先级与兜底 ━━━')
+
+// ① 检出目录内(有 ./.AgentWorkShop)→ 项目运行时根
+const rmRepo = resolveRunMode({ cwd: REPO, env: process.env })
+show('检出内(repo)', rmRepo)
+ok('repo 模式 = 项目运行时根 <repo>/.AgentWorkShop', rmRepo.mode === 'repo' && rmRepo.configRoot === join(REPO, '.AgentWorkShop'), rmRepo.configRoot)
+ok('settingsPath 在项目运行时根', rmRepo.settingsPath === join(REPO, '.AgentWorkShop', 'runtime-settings.json'))
+ok('AW_HOME 不抢项目根(② 优先于 ④)', resolveRunMode({ cwd: REPO, env: { ...process.env, AW_HOME: join(HOME, '.AgentWorkShop') } }).configRoot === join(REPO, '.AgentWorkShop'))
+
+// ② 检出内但无 ./.AgentWorkShop → 回退 ~/.AgentWorkShop
+const tmp = mkdtempSync(join(tmpdir(), 'aw-root-'))
+mkdirSync(join(tmp, 'server'), { recursive: true })
+writeFileSync(join(tmp, 'config.yml'), 'app:\n  title: probe\n')
+writeFileSync(join(tmp, 'nuxt.config.ts'), 'export default {}\n')
+const rmCheckoutNoRoot = resolveRunMode({ cwd: tmp, env: process.env })
+show('检出内但无 .AgentWorkShop', rmCheckoutNoRoot)
+ok('回退 ~/.AgentWorkShop(项目根的 config.yml 仍生效)', rmCheckoutNoRoot.configRoot === join(HOME, '.AgentWorkShop') && rmCheckoutNoRoot.configPath === join(tmp, 'config.yml'))
+
+// ③ 任意目录(非检出)→ ~/.AgentWorkShop,AW_HOME 可重定向
+const rmAny = resolveRunMode({ cwd: tmpdir(), env: process.env })
+show('任意目录', rmAny)
+ok('非检出目录 → ~/.AgentWorkShop(兜底)', rmAny.configRoot === join(HOME, '.AgentWorkShop'))
+const redirected = join(tmp, 'aw-home-redirect')
+mkdirSync(redirected, { recursive: true })
+const rmRedirect = resolveRunMode({ cwd: tmpdir(), env: { ...process.env, AW_HOME: redirected } })
+ok('AW_HOME 可重定向兜底根', rmRedirect.configRoot === redirected, rmRedirect.configRoot)
+
+// ④ AW_MODE=home 强制 home(全局安装的 aw 在检出内运行时,载荷来自包目录)
+const rmForced = resolveRunMode({ cwd: REPO, env: { ...process.env, AW_MODE: 'home' } })
+show('AW_MODE=home(强制)', rmForced)
+ok('AW_MODE=home → configRoot=~/.AgentWorkShop(即使 cwd 是检出)', rmForced.configRoot === join(HOME, '.AgentWorkShop'))
+
+console.log('\n━━━ 2. 派生路径一致性 ━━━')
+ok('dataDir = 配置根/data', dataDirFor(REPO) === join(REPO, '.AgentWorkShop', 'data'), dataDirFor(REPO))
+const repoConfRoot = join(REPO, '.AgentWorkShop')
+ok('分组注册表与 settings 同目录(配置根)', groupsPathFor(repoConfRoot) === join(repoConfRoot, 'config-groups.json'), groupsPathFor(repoConfRoot))
+ok('~ 兜底下分组注册表同样落 ~/.AgentWorkShop', groupsPathFor(join(HOME, '.AgentWorkShop')) === join(HOME, '.AgentWorkShop', 'config-groups.json'))
+
+console.log('\n━━━ 3. 启动器与运行时服务同源 ━━━')
+const fsMod = await import('node:fs')
+const read = (p) => fsMod.readFileSync(p, 'utf8')
+const startSrc = read(join(REPO, 'scripts', 'start.mjs'))
+const devSrc = read(join(REPO, 'scripts', 'dev-guard.mjs'))
+ok('start.mjs 用 resolveRunMode(cwd) 解析配置根', /resolveRunMode\(\{ cwd: process\.cwd\(\)/.test(startSrc))
+ok('dev-guard.mjs 用 resolveRunMode(cwd) 解析配置根', /resolveRunMode\(\{ cwd: process\.cwd\(\)/.test(devSrc))
+// 启动插件不得写死 <cwd>/data(遗留位置);真实路径须经 resolveRunMode 解析并如实打印
+const bootSrc = read(join(REPO, 'server', 'plugins', 'system-config.ts'))
+ok('system-config 启动插件走 resolveRunMode(与启动器同源)', /resolveRunMode/.test(bootSrc))
+ok('启动插件不再写死 <cwd>/data/runtime-settings.json', !/runtime-settings\.json`\)/.test(bootSrc))
+
+const scSrc = read(join(REPO, 'server', 'services', 'system-config.ts'))
+const stSrc = read(join(REPO, 'server', 'services', 'workshop', 'settings.ts'))
+const hostSrc = read(join(REPO, 'server', 'services', 'workshop', 'plugins', 'host.mjs'))
+ok('SystemConfigService 走 resolveRunMode(与启动器同源)', /resolveRunMode/.test(scSrc))
+ok('settings 服务走 resolveRunMode', /resolveRunMode/.test(stSrc))
+ok('插件宿主走 resolveRunMode(插件目录/状态文件同根)', /resolveRunMode/.test(hostSrc))
+
+console.log('\n━━━ 4. 分组注册表随配置根走 ━━━')
+ok('repo 的分组注册表存在(本机已由设置页写入)', existsSync(groupsPathFor(repoConfRoot)))
+rmSync(tmp, { recursive: true, force: true })
+
+console.log(`\n━━ 结果:${pass} passed, ${fail} failed ━━`)
+process.exit(fail === 0 ? 0 : 1)

package/scripts/_dbg-crash-recovery.mjs

@@ -17,7 +17,7 @@ const LINE = 'ln-af002514'
 const login = await fetch(`${BASE}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 const H = { authorization: `Bearer ${login.data.token}`, 'content-type': 'application/json' }
 const sleep = ms => new Promise(r => setTimeout(r, ms))

package/scripts/_dbg-crush-probe.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+# crush 探针:用 impl 生成的同款 .crushrc 实测智谱 openai-compat 网关(凭据走 env)
+set -u
+KEY="${ZHIPU_API_KEY:?export ZHIPU_API_KEY first}"
+export AW_CRUSH_API_KEY="$KEY"
+T="$(mktemp -d)"
+BRIDGE="D:/codes/ABO/AgentWorkShop/server/harness/aw-mcp-bridge.mjs"
+NODE="$(command -v node)"
+cat > "$T/.crushrc" <<EOF
+mcp add aw --command "$NODE" --args "$BRIDGE" --timeout 30
+provider add zhipu --type openai-compat --base-url https://open.bigmodel.cn/api/coding/paas/v4 --api-key "\${AW_CRUSH_API_KEY}"
+model add zhipu/glm-5.3-flash
+model large zhipu/glm-5.3-flash
+EOF
+cd "$T"
+echo "== generated .crushrc =="
+cat .crushrc
+echo "== crush run -q =="
+timeout 90 crush run -q "reply with exactly: ok" 2>&1 | head -c 1500
+echo; echo "== exit=$? =="
+cd /; rm -rf "$T"

package/scripts/_dbg-crush-spawn-probe.ts

@@ -0,0 +1,22 @@
+/** spawnLineProcess 直接探针:crush 短 prompt(定位 cmd 包装路径问题) */
+import { spawnLineProcess } from '../server/services/workshop/agents/adapters/line-spawn'
+
+const key = process.env.ZHIPU_API_KEY ?? ''
+const child = spawnLineProcess('crush', ['run', '-q', '-m', 'zhipu/glm-5.3-flash', 'reply with exactly: ok'], {
+  cwd: process.cwd(),
+  env: { AW_AGENT_ID: 'probe', AW_AGENT_TOKEN: 'probe', AW_BASE_URL: 'http://127.0.0.1:59999', AW_CRUSH_API_KEY: key },
+})
+let out = ''
+let err = ''
+child.stdout?.on('data', (d) => {
+  out += d
+})
+child.stderr?.on('data', (d) => {
+  err += d
+})
+child.on('exit', (code) => {
+  console.log('exit', code)
+  console.log('stdout:', out.slice(0, 400))
+  console.log('stderr:', err.slice(0, 400))
+  process.exit(0)
+})

package/scripts/_dbg-daq-acc-probe.mjs

@@ -1,7 +1,7 @@
 import puppeteer from 'puppeteer-core'
 const ROOT = 'http://127.0.0.1:3000'
 const sleep = ms => new Promise(r => setTimeout(r, ms))
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const browser = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'] })
 const page = await browser.newPage()
 const errors = []

package/scripts/_dbg-daq-attrib.mjs

@@ -3,7 +3,7 @@ import puppeteer from 'puppeteer-core'
 
 const ROOT = 'http://127.0.0.1:3000'
 const sleep = ms => new Promise(r => setTimeout(r, ms))
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const browser = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'] })
 const page = await browser.newPage()
 await page.setViewport({ width: 1600, height: 1000, deviceScaleFactor: 1 })

package/scripts/_dbg-daq-debug.mjs

@@ -1,7 +1,7 @@
 import puppeteer from 'puppeteer-core'
 const ROOT = 'http://127.0.0.1:3000'
 const sleep = ms => new Promise(r => setTimeout(r, ms))
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const browser = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'] })
 const page = await browser.newPage()
 const errs = []

package/scripts/_dbg-daq-diag.mjs

@@ -7,7 +7,7 @@ const sleep = ms => new Promise(r => setTimeout(r, ms))
 const login = await fetch(`${ROOT}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 
 const browser = await puppeteer.launch({

package/scripts/_dbg-daq-e2e.mjs

@@ -6,7 +6,7 @@ const BASE = 'http://127.0.0.1:3000'
 const login = await fetch(`${BASE}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 const token = login?.data?.token
 if (!token) throw new Error(`login failed: ${JSON.stringify(login).slice(0, 200)}`)

package/scripts/_dbg-daq-filter-e2e.mjs

@@ -8,7 +8,7 @@ const fail = m => { console.error('FAIL:', m); process.exitCode = 1 }
 const login = await fetch(`${ROOT}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 
 const browser = await puppeteer.launch({

package/scripts/_dbg-daq-filter-e2e2.mjs

@@ -8,7 +8,7 @@ const fail = m => { console.error('FAIL:', m); process.exitCode = 1 }
 const login = await fetch(`${ROOT}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 
 const browser = await puppeteer.launch({

package/scripts/_dbg-daq-final-regression.mjs

@@ -5,7 +5,7 @@ const ROOT = process.env.E2E_ROOT ?? 'http://127.0.0.1:3000'
 const sleep = ms => new Promise(r => setTimeout(r, ms))
 const fail = m => { console.error('FAIL:', m); process.exitCode = 1 }
 
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const browser = await puppeteer.launch({ executablePath: 'C:/Program Files/Google/Chrome/Application/chrome.exe', headless: 'new', args: ['--no-sandbox', '--disable-gpu', '--window-size=1600,1000'] })
 const page = await browser.newPage()
 const errors = []

package/scripts/_dbg-daq-frame-alarm.mjs

@@ -8,7 +8,7 @@ const ROOT = process.env.E2E_ROOT ?? 'http://127.0.0.1:3000'
 const sleep = ms => new Promise(r => setTimeout(r, ms))
 const fail = (msg) => { console.error('FAIL:', msg); process.exitCode = 1 }
 
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const H = { authorization: `Bearer ${login.data.token}`, 'content-type': 'application/json' }
 const j = (u, m = 'GET', b) => fetch(ROOT + u, { method: m, headers: H, body: b ? JSON.stringify(b) : undefined }).then(r => r.json())
 

package/scripts/_dbg-daq-frame-ui.mjs

@@ -6,7 +6,7 @@ const sleep = ms => new Promise(r => setTimeout(r, ms))
 let failed = 0
 const check = (name, ok, detail = '') => { console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`); if (!ok) failed++ }
 
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const H = { authorization: `Bearer ${login.data.token}`, 'content-type': 'application/json' }
 const cookie = { name: 'token', value: login.data.token, domain: '127.0.0.1', path: '/' }
 const j = (u, m = 'GET', b) => fetch(ROOT + u, { method: m, headers: H, body: b ? JSON.stringify(b) : undefined }).then(r => r.json())

package/scripts/_dbg-daq-frame-ws.mjs

@@ -10,7 +10,7 @@ const ROOT = process.env.E2E_ROOT ?? 'http://127.0.0.1:3000'
 const sleep = ms => new Promise(r => setTimeout(r, ms))
 const fail = (msg) => { console.error('FAIL:', msg); process.exitCode = 1 }
 
-const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }) }).then(r => r.json())
+const login = await fetch(`${ROOT}/api/users/login`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }) }).then(r => r.json())
 const token = login.data.token
 const H = { authorization: `Bearer ${token}`, 'content-type': 'application/json' }
 const j = (u, m = 'GET', b) => fetch(ROOT + u, { method: m, headers: H, body: b ? JSON.stringify(b) : undefined }).then(r => r.json())

package/scripts/_dbg-daq-frames-e2e.mjs

@@ -15,7 +15,7 @@ const fail = (msg) => { console.error('FAIL:', msg); process.exitCode = 1 }
 const login = await fetch(`${ROOT}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 const token = login?.data?.token
 if (!token) { console.error('FAIL: login:', JSON.stringify(login).slice(0, 200)); process.exit(1) }

package/scripts/_dbg-daq-full-check.mjs

@@ -16,7 +16,7 @@ function check(name, cond, detail = '') {
 const login = await fetch(`${BASE}/api/users/login`, {
   method: 'POST',
   headers: { 'content-type': 'application/json' },
-  body: JSON.stringify({ email: 'zhangwei@awshop.io', password: 'Awshop@123' }),
+  body: JSON.stringify({ email: process.env.E2E_USER ?? 'zhangwei@awshop.io', password: process.env.E2E_PASS ?? 'Awshop@123' }),
 }).then(r => r.json())
 const token = login.data?.token
 check('登录', Boolean(token))