agentworkshop 0.7.34 → 0.7.38

package/scripts/.mimosa/hook-state/sess_aeaecb58-8833-4b83-b93c-050467d21e03.mtxwtxme-61028-1f4519fbc4.baseline/145a6e6ba811af35aed31e0cc3211f53706a14980fa069ee9e3c1591139f96f0.source

@@ -0,0 +1,180 @@
+/**
+ * 真实 omp harness 场景测试 — tmp 文件夹作为 workspace。
+ *
+ * 场景(简单):
+ *  1. 在 .tmp-omp-e2e/ 建 workspace,放入 input.txt(一段简单内容)
+ *  2. createChannel(workspace=tmp, leadAgent=omp)→ lead 模板 + 克隆实例
+ *  3. createAgent(omp) 模板 → addAgentToChannel 克隆 worker 实例
+ *  4. ensureChannelActive + monitorChannel 挂监控
+ *  5. submitChannelTask:lead 分配,worker 用 omp 原生 read 工具读取 input.txt,回写成果
+ *  6. 监控执行过程(dispatch/working/progress/artifact/completed)
+ *
+ * 运行: npx tsx scripts/e2e-omp-workspace.ts
+ */
+import type { DatabaseSync } from 'node:sqlite'
+import { mkdirSync, writeFileSync, rmSync } from 'node:fs'
+import { resolve } from 'node:path'
+import { openWorkshopDb } from '../server/services/workshop/db/database'
+import { createChannelRepo } from '../server/services/workshop/db/channel.repo'
+import { createAgentRepo } from '../server/services/workshop/db/agent.repo'
+import { createChannelAgentRepo } from '../server/services/workshop/db/channel-agent.repo'
+import { createTaskRepo } from '../server/services/workshop/db/task.repo'
+import { createMemoryRepo } from '../server/services/workshop/db/memory.repo'
+import { createChannelEventRepo } from '../server/services/workshop/db/channel-event.repo'
+import { createTeamRepo } from '../server/services/workshop/db/team.repo'
+import { createTeamMemberRepo } from '../server/services/workshop/db/team-member.repo'
+import { createMessageRepo } from '../server/services/workshop/db/message.repo'
+import { createSubscriptionRepo } from '../server/services/workshop/db/subscription.repo'
+import { createAgentChannelManager } from '../server/services/workshop/runtime/manager'
+import type { AgentChannelManager } from '../server/services/workshop/runtime/manager'
+import { createAgentImpl } from '../server/services/workshop/agents/factory'
+import { monitorChannel } from '../server/services/workshop/runtime/monitor'
+
+let failures = 0
+
+function check(name: string, ok: boolean, detail = ''): void {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+function makeManager(db: DatabaseSync): AgentChannelManager {
+  return createAgentChannelManager({
+    repos: {
+      channels: createChannelRepo(db),
+      agents: createAgentRepo(db),
+      channelAgents: createChannelAgentRepo(db),
+      messages: createMessageRepo(db),
+      subscriptions: createSubscriptionRepo(db),
+      tasks: createTaskRepo(db),
+      memories: createMemoryRepo(db),
+
+      channelEvents: createChannelEventRepo(db),
+      teams: createTeamRepo(db),
+      teamMembers: createTeamMemberRepo(db),
+    },
+    implFactory: createAgentImpl,
+    db,
+  })
+}
+
+const sleep = (ms: number) => new Promise<void>(r => setTimeout(r, ms))
+
+async function main(): Promise<void> {
+  console.log('━━━ 真实 omp harness:tmp workspace 任务执行 + 监控 ━━━')
+
+  const ws = resolve(process.cwd(), '.tmp-omp-e2e')
+  mkdirSync(ws, { recursive: true })
+  const payload = '真实场景作业:omp 读取此文件并原样回写成果'
+  writeFileSync(resolve(ws, 'input.txt'), payload, 'utf8')
+
+  const db = openWorkshopDb(':memory:')
+  const manager = makeManager(db)
+  try {
+    // ---- 1. 创建 Channel(tmp workspace + omp lead)----
+    console.log('\n--- 1. 创建 Channel(workspace=tmp)---')
+    const ch = await manager.createChannel({
+      name: 'OMP 真实场景',
+      description: 'tmp workspace 简单作业',
+      workspace: ws,
+      leadAgent: { name: 'lead-主理人', harness: 'omp', config: {} },
+    })
+    check('Channel 创建成功(workspace 生效)', ch.workspace === ws && !!ch.leadAgentId)
+
+    // ---- 2. Agent 模板 → 克隆 worker 实例 ----
+    console.log('\n--- 2. Agent 模板克隆 worker 实例 ---')
+    const workerTpl = await manager.createAgent({ name: 'worker-执行者', harness: 'omp', config: {} })
+    const worker = await manager.addAgentToChannel({ channelId: ch.channelId, agentId: workerTpl.id, role: 'worker' })
+    check('worker 克隆出独立实例 id', worker.id !== workerTpl.id)
+    check('成员结构 1 lead + 1 worker', (await manager.listChannelAgents(ch.channelId)).length === 2)
+
+    // ---- 3. 激活 + 挂监控 ----
+    console.log('\n--- 3. 激活 channel + 挂监控 ---')
+    manager.ensureChannelActive(ch.channelId, { tickMs: 3000, stallMs: 60_000 })
+    const mon = monitorChannel(manager, ch.channelId)
+    check('监控器已启动', mon.events.some(e => e.kind === 'lifecycle'))
+
+    // ---- 4. 提交任务(lead 真实 omp 分配)----
+    console.log('\n--- 4. 提交任务 ---')
+    const task = await manager.submitChannelTask({
+      channelId: ch.channelId,
+      title: '读取并复述 input.txt',
+      description: '读取工作目录里的 input.txt 文件,把内容原样写在任务成果里,然后完成任务。简短回答。',
+    })
+    check('任务已提交(SUBMITTED)', task.state === 'SUBMITTED', `state=${task.state}`)
+    console.log(`  task=${task.id.slice(0, 8)}…`)
+
+    // ---- 5. 监控执行(定向等待主任务 COMPLETED;omp 真实推理,给足时间)----
+    console.log('\n--- 5. 监控执行过程(真实 omp)---')
+    const started = Date.now()
+    const done = await mon.waitFor(e => e.kind === 'task.status' && e.taskId === task.id && e.state === 'COMPLETED', 240_000)
+    const elapsed = ((Date.now() - started) / 1000).toFixed(1)
+    console.log(`  ⏱  耗时 ${elapsed}s`)
+    check('主任务执行完成(COMPLETED)', done !== null)
+
+    const seenAssigned = mon.events.some(e => e.kind === 'task.status' && e.state === 'ASSIGNED')
+    const seenWorking = mon.events.some(e => e.kind === 'task.status' && e.state === 'WORKING')
+    const seenProgress = mon.events.some(e => e.kind === 'task.progress' && e.progress > 0)
+    const seenArtifact = mon.events.some(e => e.kind === 'agent.event' && e.event.kind === 'artifact')
+    const seenBusy = mon.events.some(e => e.kind === 'agent.status' && e.state === 'busy')
+    const seenIdle = mon.events.some(e => e.kind === 'agent.status' && e.state === 'idle')
+    check('监控到任务进入 WORKING', seenWorking)
+    check('监控到进度上报', seenProgress)
+    check('监控到成员 busy → idle', seenBusy && seenIdle)
+    if (!seenAssigned) console.log('  信息:未捕获 ASSIGNED 事件(omp host tool 分发路径可能跳过显式 ASSIGNED 状态事件)')
+    if (!seenArtifact) console.log('  信息:未捕获 artifact 事件(成果可能直接落入任务 artifacts,不经过 agent.event)')
+
+    // ---- 6. 终态校验(成果包含 payload)----
+    const engine = (manager as unknown as {
+      getTaskEngine(): { list(channelId: string): Array<{ id: string, parentId: string | null, state: string, artifacts: Array<{ parts: Array<{ text?: string }> }> }> }
+    }).getTaskEngine()
+    const allTasks = engine.list(ch.channelId)
+    const children = allTasks.filter(t => t.parentId === task.id)
+    const finalTask = allTasks.find(t => t.id === task.id)
+    const artifactTexts = (finalTask?.artifacts ?? []).flatMap(a => a.parts.filter(p => 'text' in p).map(p => (p as { text: string }).text)).join('\n')
+    const childTexts = children.flatMap(c => c.artifacts.flatMap(a => a.parts.filter(p => 'text' in p).map(p => (p as { text: string }).text))).join('\n')
+    check('lead 分配了子任务', children.length >= 1, `子任务=${children.length}`)
+    check('主任务 COMPLETED + 有成果', finalTask?.state === 'COMPLETED' && (finalTask?.artifacts.length ?? 0) > 0, `state=${finalTask?.state} artifacts=${finalTask?.artifacts.length}`)
+    check('成果包含 input.txt 内容(主任务或子任务)', artifactTexts.includes(payload) || childTexts.includes(payload), `parent=${artifactTexts.slice(0, 50)}… | child=${childTexts.slice(0, 50)}…`)
+
+    // ---- 7. 监控时间线 ----
+    console.log('\n--- 监控时间线 ---')
+    console.log(mon.summary())
+    mon.stop()
+
+    // ---- 8. 释放 omp 子进程 ----
+    console.log('\n--- 收尾:卸载 omp 子进程 ---')
+    for (let i = 0; i < 20; i++) {
+      await manager.unloadIdleAgents()
+      if (manager.runtimeStatus().wiredAgents.length === 0) break
+      await sleep(500)
+    }
+    check('完成后卸载(释放 omp 子进程)', manager.runtimeStatus().wiredAgents.length === 0)
+  }
+  finally {
+    await manager.shutdown()
+    db.close()
+    // Windows 收尾竞态:omp 子进程(含终端镜像)可能仍持有 cwd 目录句柄,
+    // 立即 rmSync 会 EPERM —— 带宽限重试,仍失败则告警保留(不掩盖功能断言结果)。
+    for (let attempt = 0; attempt < 5; attempt++) {
+      try {
+        rmSync(ws, { recursive: true, force: true })
+        break
+      }
+      catch {
+        if (attempt === 4) {
+          console.warn(`[e2e-omp-workspace] 临时工作区清理失败(Windows 句柄占用),已保留: ${ws}`)
+          break
+        }
+        await sleep(500)
+      }
+    }
+  }
+
+  console.log(`\n${failures === 0 ? 'ALL PASS' : `${failures} FAILED`}`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((e) => {
+  console.error('e2e 异常:', e)
+  process.exit(1)
+})

package/scripts/.mimosa/hook-state/sess_aeaecb58-8833-4b83-b93c-050467d21e03.mtxwtxme-61028-1f4519fbc4.baseline/1ae0fb281f97899c025e368ca73f41349b01fb5f85b19e08d7ebccff49095ed5.source

@@ -0,0 +1,112 @@
+/**
+ * HITL 全局待办层单元测试(tsx 直跑):
+ *   npx tsx scripts/test-hitl-registry.ts
+ *
+ * 覆盖:
+ *  - hitl-registry:登记/快照/幂等/落定/per-channel 订阅/parkDeadline/resolver 补全
+ *  - harness-terminal park 语义:零订阅 park(不再秒取消)/订阅暂停/退订重新计时/
+ *    应答落定 answered/TTL 到期落定 expired 并写 cancelled 到 omp stdin
+ *
+ * TTL 经 AW_SECURITY_HITL_TIMEOUT_MS=250 注入(须在首次 settings 读取前设置)。
+ */
+import type { OmpRpcClient } from '../server/services/workshop/agents/adapters/omp-rpc-client'
+import { securityHitlTimeoutMs } from '../server/services/workshop/settings'
+import { getHitlRegistry } from '../server/services/workshop/agents/hitl-registry'
+import {
+  attachTerminalTap,
+  respondTerminalUi,
+  subscribeTerminal,
+} from '../server/services/workshop/agents/harness-terminal'
+
+process.env.AW_SECURITY_HITL_TIMEOUT_MS = '250'
+
+let failures = 0
+const check = (name: string, cond: boolean, extra = '') => {
+  console.log(`${cond ? '  ✓' : '  ✗ FAIL'} ${name}${extra ? ` (${extra})` : ''}`)
+  if (!cond) failures++
+}
+const sleep = (ms: number) => new Promise(r => setTimeout(r, ms))
+
+console.log('[hitl] park TTL =', securityHitlTimeoutMs(), 'ms')
+const reg = getHitlRegistry()
+
+// ===== 1. registry 基础 =====
+console.log('[1] hitl-registry 基础语义')
+const events: Array<{ type: string, channelId?: string }> = []
+const unsub = reg.subscribe('ch-1', (e) => {
+  events.push({ type: e.type, channelId: (e.payload as { channelId?: string }).channelId })
+})
+reg.register({ kind: 'omp-dialog', id: 'd1', agentId: 'a1', channelId: 'ch-1', agentName: 'lead', method: 'confirm', title: '确认下发?' })
+check('登记后 snapshot 可见', reg.snapshot().length === 1 && reg.snapshot()[0]!.id === 'd1')
+check('channel 订阅者收到 hitl.request', events.length === 1 && events[0]!.type === 'hitl.request')
+reg.register({ kind: 'omp-dialog', id: 'd1', agentId: 'a1', channelId: 'ch-1', title: '重复登记' })
+check('同 kind+id 幂等(不重复)', reg.snapshot().length === 1)
+reg.register({ kind: 'dcw-approval', id: 'ap-x', agentId: 'a2', channelId: 'ch-2', title: 'DCW 下发审批' })
+check('channelId 过滤生效', reg.snapshot('ch-2').length === 1 && reg.snapshot('ch-1').length === 1)
+check('find 取回单条', reg.find('dcw-approval', 'ap-x')?.title === 'DCW 下发审批')
+reg.setParkDeadline('omp-dialog', 'd1', '2026-01-01T00:00:00.000Z')
+check('setParkDeadline 更新 expiresAt', reg.find('omp-dialog', 'd1')?.expiresAt === '2026-01-01T00:00:00.000Z')
+check('resolve 落定并广播 hitl.resolved', reg.resolve('omp-dialog', 'd1', 'answered', 'user-1') && events[1]!.type === 'hitl.resolved')
+check('落定后 snapshot 清空该条', reg.snapshot('ch-1').length === 0 && reg.find('omp-dialog', 'd1') === null)
+check('重复 resolve 幂等返回 false', reg.resolve('omp-dialog', 'd1', 'answered') === false)
+unsub()
+
+// ===== 2. resolver 补全 =====
+console.log('[2] resolver 补全 channelId/agentName')
+reg.configureResolver(agentId => agentId === 'inst-9' ? { channelId: 'ch-9', agentName: '温控工' } : null)
+reg.register({ kind: 'dcw-approval', id: 'ap-r', agentId: 'inst-9', title: 'DCW 下发审批' })
+check('resolver 补全 channelId', reg.find('dcw-approval', 'ap-r')?.channelId === 'ch-9')
+check('resolver 补全 agentName', reg.find('dcw-approval', 'ap-r')?.agentName === '温控工')
+reg.resolve('dcw-approval', 'ap-r', 'cancelled')
+
+// ===== 3. harness-terminal park 语义(假 omp 客户端) =====
+console.log('[3] harness-terminal park 语义')
+const written: Array<Record<string, unknown>> = []
+const fakeClient = {
+  onRawFrame(fn: (f: Record<string, unknown>) => void) {
+    ;(fakeClient as unknown as { __emit: (f: Record<string, unknown>) => void }).__emit = fn
+    return () => {}
+  },
+  async send() {},
+  writeRaw(frame: Record<string, unknown>) { written.push(frame) },
+} as unknown as OmpRpcClient
+
+attachTerminalTap(fakeClient, { pid: 4242, harness: 'omp', agentId: 'agt-1', channelId: 'ch-1', name: '调度长', role: 'lead' })
+const emit = (f: Record<string, unknown>) => (fakeClient as unknown as { __emit: (f: Record<string, unknown>) => void }).__emit(f)
+
+emit({ type: 'extension_ui_request', id: 'dlg-1', method: 'confirm', title: '允许写入设定值?' })
+await sleep(20)
+check('零订阅到达 → park 而非秒取消(未写 cancelled 到 stdin)', !written.some(w => w.type === 'extension_ui_response'))
+const parked = reg.find('omp-dialog', 'dlg-1')
+check('登记进全局待办且带 park 截止', parked !== null && typeof parked?.expiresAt === 'string')
+
+const unsubTerm = subscribeTerminal(4242, () => {})
+await sleep(10)
+check('订阅者接入 → 计时暂停(expiresAt=null)', reg.find('omp-dialog', 'dlg-1')?.expiresAt === null)
+
+unsubTerm()
+await sleep(10)
+check('订阅者全部离开 → 重新计时(expiresAt 恢复未来时刻)', typeof reg.find('omp-dialog', 'dlg-1')?.expiresAt === 'string')
+
+respondTerminalUi(4242, { id: 'dlg-1', confirmed: true })
+await sleep(10)
+check('应答写入 omp stdin(extension_ui_response confirmed)', written.some(w => w.type === 'extension_ui_response' && w.id === 'dlg-1' && w.confirmed === true))
+check('应答后全局待办落定', reg.find('omp-dialog', 'dlg-1') === null)
+
+// TTL 到期 → expired
+emit({ type: 'extension_ui_request', id: 'dlg-2', method: 'select', title: '选择方案', options: ['A', 'B'] })
+await sleep(20)
+check('第二个对话框已 park', reg.find('omp-dialog', 'dlg-2') !== null)
+await sleep(400)
+check('park 超时 → 落定 expired 且全局待办清空', reg.find('omp-dialog', 'dlg-2') === null)
+check('超时向 omp stdin 写 cancelled', written.some(w => w.type === 'extension_ui_response' && w.id === 'dlg-2' && w.cancelled === true))
+
+// omp 主动撤销(method=cancel)→ 落定 cancelled
+emit({ type: 'extension_ui_request', id: 'dlg-3', method: 'input', title: '补充说明' })
+await sleep(20)
+emit({ type: 'extension_ui_request', method: 'cancel', targetId: 'dlg-3' })
+await sleep(20)
+check('omp 撤销对话框 → 待办落定清空', reg.find('omp-dialog', 'dlg-3') === null)
+
+console.log(failures === 0 ? '\n[hitl] 全部通过' : `\n[hitl] ${failures} 项失败`)
+process.exit(failures === 0 ? 0 : 1)

package/scripts/.mimosa/hook-state/sess_aeaecb58-8833-4b83-b93c-050467d21e03.mtxwtxme-61028-1f4519fbc4.baseline/20ee9967aa0541c516db7575bdd4a1a745939bc7016bd10d7635903113edb8ec.source

@@ -0,0 +1,227 @@
+/**
+ * 双驱动端到端测试 — MCP(Streamable HTTP)与 REST API 同流程驱动真实 Manager。
+ *
+ * 覆盖:
+ *  1. MCP 驱动: 真实 WebStandardStreamableHTTPServerTransport + MCP SDK Client 连接
+ *     → initialize → tools/list(16 工具)→ channel.create → agent.create(lead/worker, 取 token)
+ *     → task.submit → task.list → a2a.send(带 token) → task.dispatch/report/complete
+ *     → 无 token → UNAUTHORIZED
+ *  2. REST 驱动: 同一 Manager,经 h3 app 调用 REST 端点
+ *     → 创建 channel/agent → 发任务 → Bearer token 调 mailbox/subscribe/report/complete/dispatch/tasks
+ *     → 无 token → 401;跨 channel → SCOPE_VIOLATION
+ *
+ * 测试环境: :memory: db + 真实 Manager + mock impl(delayMs=0),h3 toWebHandler 供 MCP client fetch 注入。
+ */
+import { randomUUID } from 'node:crypto'
+import { toWebHandler, createApp, eventHandler } from 'h3'
+import { Client } from '@modelcontextprotocol/sdk/client/index.js'
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js'
+import { openWorkshopDb } from '../server/services/workshop/db/database'
+import { createChannelRepo } from '../server/services/workshop/db/channel.repo'
+import { createAgentRepo } from '../server/services/workshop/db/agent.repo'
+import { createChannelAgentRepo } from '../server/services/workshop/db/channel-agent.repo'
+import { createTaskRepo } from '../server/services/workshop/db/task.repo'
+import { createMemoryRepo } from '../server/services/workshop/db/memory.repo'
+import { createChannelEventRepo } from '../server/services/workshop/db/channel-event.repo'
+import { createTeamRepo } from '../server/services/workshop/db/team.repo'
+import { createTeamMemberRepo } from '../server/services/workshop/db/team-member.repo'
+import { createMessageRepo } from '../server/services/workshop/db/message.repo'
+import { createSubscriptionRepo } from '../server/services/workshop/db/subscription.repo'
+import { createAgentChannelManager } from '../server/services/workshop/runtime/manager'
+import { createAgentImpl } from '../server/services/workshop/agents/factory'
+import { SchedulerLoop } from '../server/services/workshop/runtime/scheduler-loop'
+import type { AgentChannelManager } from '../server/services/workshop/runtime/manager'
+import type { ChannelRuntime } from '../server/services/workshop/runtime/channel-runtime'
+
+let failures = 0
+function check(name: string, ok: boolean, detail = ''): void {
+  console.log(`${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+const sleep = (ms: number) => new Promise<void>(r => setTimeout(r, ms))
+
+async function waitUntil(cond: () => boolean | Promise<boolean>, timeoutMs: number): Promise<boolean> {
+  const deadline = Date.now() + timeoutMs
+  while (Date.now() < deadline) {
+    if (await cond()) return true
+    await sleep(50)
+  }
+  return false
+}
+
+/** 白盒取 manager 内部 ChannelRuntime(测试装配 SchedulerLoop 用) */
+function channelRuntimeOf(manager: AgentChannelManager, channelId: string): ChannelRuntime {
+  const internals = manager as unknown as { channels: Map<string, ChannelRuntime> }
+  const cr = internals.channels.get(channelId)
+  if (!cr) throw new Error(`channel runtime 不存在: ${channelId}`)
+  return cr
+}
+
+function attachScheduler(manager: AgentChannelManager, channelId: string, tickMs: number): SchedulerLoop {
+  // 懒加载时代:先激活 channel(装配 lead 运行时与默认循环),再换成测试配置的循环
+  manager.ensureChannelActive(channelId)
+  const cr = channelRuntimeOf(manager, channelId)
+  cr.scheduler?.stop()
+  const lead = cr.getAgents().find(a => a.role === 'lead')
+  if (!lead) throw new Error('无 lead')
+  const internals = manager as unknown as { agentIndex: Map<string, unknown> }
+  const runtime = internals.agentIndex.get(lead.agentId) as { role: string } & { abortCurrent(): void }
+  void runtime
+  const loop = new SchedulerLoop(cr, lead as never, { tickMs })
+  cr.scheduler = loop
+  loop.start()
+  return loop
+}
+
+interface Harness {
+  db: ReturnType<typeof openWorkshopDb>
+  manager: AgentChannelManager
+  loops: SchedulerLoop[]
+  channels: string[]
+  fetchLike: typeof fetch
+}
+
+function setup(): Harness {
+  const db = openWorkshopDb(':memory:')
+  const repos = {
+    channels: createChannelRepo(db),
+    agents: createAgentRepo(db),
+    channelAgents: createChannelAgentRepo(db),
+    messages: createMessageRepo(db),
+    subscriptions: createSubscriptionRepo(db),
+    tasks: createTaskRepo(db),
+    memories: createMemoryRepo(db),
+
+    channelEvents: createChannelEventRepo(db),
+
+    teams: createTeamRepo(db),
+
+    teamMembers: createTeamMemberRepo(db),
+  }
+  const manager = createAgentChannelManager({ repos, implFactory: createAgentImpl, db })
+
+  // h3 app 挂 REST 入口(与生产路由同 handler;MCP 端点单独用原生 fetch 包)
+  const app = createApp()
+  app.use(
+    '/api/workshop/channels',
+    eventHandler(async (_event) => {
+      // 简化:直接走 manager(端点行为在 test-rest 段显式断言)
+      return { code: 0, data: await manager.listChannels() }
+    }),
+  )
+  const webHandle = toWebHandler(app)
+  const fetchLike: typeof fetch = (input, init) => webHandle(input as Request, init)
+  return { db, manager, loops: [], channels: [], fetchLike }
+}
+
+async function main(): Promise<void> {
+  const h = setup()
+  console.log('\n=== 1. MCP Streamable HTTP 驱动(真实 transport + SDK Client) ===')
+
+  // 手动构造 MCP 端点 handler 的 web 包装(与 server/api/mcp/workshop.ts 同逻辑)
+  const sessions = new Map<string, { handle(request: Request): Promise<Response> }>()
+  const mcpFetch: typeof fetch = async (input, init) => {
+    const request = new Request(input, init)
+    const url = new URL(request.url)
+    const sessionId = url.searchParams.get('sessionId') ?? request.headers.get('mcp-session-id')
+    if (request.method === 'DELETE' && sessionId) {
+      sessions.delete(sessionId)
+      return new Response(null, { status: 204 })
+    }
+    let entry = sessionId ? sessions.get(sessionId) : undefined
+    if (!entry) {
+      const { WebStandardStreamableHTTPServerTransport } = await import('@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js')
+      const { createWorkshopMcpServer } = await import('../server/mcp/workshop-server')
+      const newSessionId = randomUUID()
+      const transport = new WebStandardStreamableHTTPServerTransport({ sessionIdGenerator: () => newSessionId })
+      const server = createWorkshopMcpServer(h.manager)
+      await server.connect(transport)
+      entry = { handle: req => transport.handleRequest(req) }
+      sessions.set(newSessionId, entry)
+    }
+    const res = await entry.handle(request)
+    console.log(`[mcp] ${request.method} in-session=${sessionId ?? '-'} -> ${res.status} out-session=${res.headers.get('mcp-session-id') ?? '-'}`)
+    return res
+  }
+
+  const client = new Client({ name: 'e2e-test', version: '1.0.0' })
+  await client.connect(new StreamableHTTPClientTransport(new URL('http://localhost/api/mcp/workshop'), { fetch: mcpFetch }))
+
+  const tools = await client.listTools()
+  check('tools/list 返回 25 工具(16 基础 + 4 扩展 + 5 设备孪生)', tools.tools.length === 25, `got=${tools.tools.length}`)
+
+  // channel.create + agent.create(lead/worker)→ 拿 token
+  const ch = await client.callTool({ name: 'workshop.channel.create', arguments: { name: 'mcp-channel', leadAgent: { name: 'lead', harness: 'mock', config: { delayMs: 0 } } } })
+  const channelId = JSON.parse((ch.content as { text: string }[])[0].text).channelId as string
+  h.channels.push(channelId)
+  check('MCP channel.create 返回 channelId', typeof channelId === 'string' && channelId.length > 0)
+
+  const w1Tpl = await client.callTool({ name: 'workshop.agent.create', arguments: { name: 'w1', harness: 'mock', config: { delayMs: 0 } } })
+  const tpl = JSON.parse((w1Tpl.content as { text: string }[])[0].text)
+  check('MCP agent.create 返回模板', typeof tpl.id === 'string' && tpl.id.length > 0)
+  const w1 = await client.callTool({ name: 'workshop.agent.add', arguments: { channelId, agentId: tpl.id, role: 'worker' } })
+  const worker1 = JSON.parse((w1.content as { text: string }[])[0].text)
+  check('MCP agent.add 返回实例 token', typeof worker1.token === 'string' && worker1.token.length > 0)
+
+  const lead = (await h.manager.listChannelAgents(channelId)).find(a => a.role === 'lead')!
+  // 带 lead token 的 client(task.list/a2a.send 等 Agent 作业面工具需要认证)
+  const authedClient = new Client({ name: 'e2e-lead', version: '1.0.0' })
+  await authedClient.connect(new StreamableHTTPClientTransport(new URL('http://localhost/api/mcp/workshop'), {
+    fetch: mcpFetch,
+    requestInit: { headers: { Authorization: `Bearer ${lead.token}` } },
+  }))
+  attachScheduler(h.manager, channelId, 10)
+
+  // task.submit → 自动调度闭环(等 COMPLETED)
+  const sub = await client.callTool({ name: 'workshop.task.submit', arguments: { channelId, title: 'MCP 驱动任务' } })
+  const mainTask = JSON.parse((sub.content as { text: string }[])[0].text)
+  check('MCP task.submit 创建任务', typeof mainTask.id === 'string')
+  const done = await waitUntil(async () => {
+    const list = await authedClient.callTool({ name: 'workshop.task.list', arguments: {} })
+    const tasks = JSON.parse((list.content as { text: string }[])[0].text) as { id: string, state: string }[]
+    return tasks.some(t => t.id === mainTask.id && t.state === 'COMPLETED')
+  }, 10_000)
+  check('MCP 驱动任务自动闭环 COMPLETED', done)
+
+  // 无 token → 工具错误(MCP 工具错误以 isError 结果返回,非异常)
+  const anon = new Client({ name: 'anon', version: '1.0.0' })
+  await anon.connect(new StreamableHTTPClientTransport(new URL('http://localhost/api/mcp/workshop'), { fetch: mcpFetch }))
+  const anonRes = await anon.callTool({ name: 'workshop.a2a.send', arguments: { toAgentId: lead.id, parts: [{ text: 'hi' }] } })
+  const anonText = ((anonRes.content as { text: string }[])[0]?.text ?? '')
+  check('MCP 无 token → UNAUTHORIZED', anonRes.isError === true && anonText.includes('UNAUTHORIZED'), anonText.slice(0, 120))
+
+  console.log('\n=== 2. REST API 驱动 ===')
+  const w1Agent = (await h.manager.listChannelAgents(channelId)).find(a => a.name === 'w1')!
+  const token = w1Agent.token!
+  check('REST 作业面 token 有效(findByToken)', h.manager.findByToken(token)?.id === w1Agent.id)
+
+  // 跨 channel 作用域:另一 channel 的 agent 查任务 → SCOPE_VIOLATION
+  const chB = await h.manager.createChannel({ name: 'b-channel' })
+  h.channels.push(chB.channelId)
+  const leadB = await h.manager.addAgentToChannel({ channelId: chB.channelId, agentId: (await h.manager.createAgent({ name: 'leadB', harness: 'mock', config: { delayMs: 0 } })).id, role: 'lead' })
+  let scopeCode = ''
+  try {
+    await h.manager.getTask(chB.channelId, leadB.id, mainTask.id)
+  }
+  catch (e) {
+    scopeCode = (e as { code?: string }).code ?? ''
+  }
+  check('REST 跨 channel 访问 → SCOPE_VIOLATION', scopeCode === 'SCOPE_VIOLATION', scopeCode)
+
+  // a2a.send 投递(caller=worker token;A2AMessage 无 toAgentId 字段,以 messageId+parts 断言)
+  const msg = await h.manager.sendA2A(channelId, w1Agent.id, { toAgentId: lead.id, parts: [{ text: 'REST 消息' }] })
+  check('REST 作业面 a2a.send 投递', msg.messageId.length > 0 && msg.parts.length === 1 && msg.metadata?.['x-aw-target-agent'] === lead.id, JSON.stringify(msg.metadata))
+
+  for (const loop of h.loops) loop.stop()
+  for (const cid of h.channels) await h.manager.removeChannel(cid)
+  h.db.close()
+
+  console.log(`\n${failures === 0 ? 'ALL PASS' : `${failures} FAILED`}`)
+  process.exit(failures === 0 ? 0 : 1)
+}
+
+main().catch((e) => {
+  console.error('双驱动测试异常:', e)
+  process.exit(1)
+})

package/scripts/.mimosa/hook-state/sess_aeaecb58-8833-4b83-b93c-050467d21e03.mtxwtxme-61028-1f4519fbc4.baseline/233751843aeba9d4c5263f275b8102de00443c06f286918cbd23e0b6729e01aa.source

@@ -0,0 +1,131 @@
+/**
+ * Agent 数控读写真机验证(协议级):
+ * ①真实 omp --mode rpc 子进程接受含 dcw_read/dcw_control 的 set_host_tools
+ * ②真实 OmpRpcAgentImpl.handleHostTool 分发 → toolDcwRead/toolDcwControl 执行体:
+ *   mock 节点写读对照 / 真实 Modbus TCP(1502 从站 40023)写读 roundtrip / 越权与量程联锁。
+ * 数据目录 AW_HOME 隔离,不触碰检出内 .AgentWorkShop。
+ * 运行: npx tsx --tsconfig .nuxt/tsconfig.server.json scripts/_dbg-agent-dcw-rw.ts
+ */
+import { spawn } from 'node:child_process'
+import { mkdtempSync } from 'node:fs'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
+
+// 进程级隔离:配置根落在一次性目录(须在业务模块 import 前设置)
+const awHome = mkdtempSync(join(tmpdir(), 'aw-agent-dcw-rw-'))
+process.env.AW_MODE = 'home'
+process.env.AW_HOME = awHome
+process.env.NO_PROXY = '127.0.0.1,localhost'
+
+let failures = 0
+const check = (name: string, ok: boolean, detail = ''): void => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
+  if (!ok) failures += 1
+}
+
+// ===== 环境准备(隔离配置根内):mock 节点 + 真实 Modbus 节点 + Agent 绑定 =====
+const { getDcwController } = await import('../server/services/workshop/dcw/dcw-controller')
+const { getAgentNodeBindingRepo } = await import('../server/services/workshop/agents/node-bindings.repo')
+const AGENT = 'agent-rw-verify'
+const mockNode = getDcwController().create({ templateRef: 'dcw-temp-sp', name: 'Agent验证·mock', driver: 'mock', driverConfig: { key: 'agent-rw-mock' }, readIntervalMs: 0 })
+const modbusNode = getDcwController().create({
+  templateRef: 'dcw-temp-sp', name: 'Agent验证·Modbus真实', driver: 'modbus-tcp', readIntervalMs: 0,
+  min: 0, max: 300,
+  driverConfig: { host: '127.0.0.1', port: 1502, unitId: 1, register: 40023, dataType: 'float32', byteOrder: 'big' },
+})
+const repo = getAgentNodeBindingRepo()
+repo.bind(AGENT, mockNode.id, 'dcw', 'auto')
+repo.bind(AGENT, modbusNode.id, 'dcw', 'auto')
+console.log(`mock=${mockNode.id} modbus=${modbusNode.id}(40023)\n`)
+
+// ===== ① 真实 omp 子进程:set_host_tools 含 dcw_read/dcw_control → 协议接受 =====
+console.log('--- ① 真实 omp 子进程工具面注入 ---')
+const { hostToolsForRole, OmpRpcAgentImpl } = await import('../server/services/workshop/agents/omp-agent')
+
+{
+  const tools = hostToolsForRole('worker')
+  const child = spawn('omp', ['--mode', 'rpc'], { stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true })
+  let buf = ''
+  let sent = false
+  let accepted: unknown = null
+  await new Promise<unknown>((resolve) => {
+    const timer = setTimeout(() => resolve('timeout'), 30_000)
+    child.stdout!.setEncoding('utf-8')
+    child.stdout!.on('data', (chunk: string) => {
+      buf += chunk
+      let idx: number
+      while ((idx = buf.indexOf('\n')) >= 0) {
+        const line = buf.slice(0, idx)
+        buf = buf.slice(idx + 1)
+        if (!line.trim()) continue
+        try {
+          const frame = JSON.parse(line)
+          if (frame.type === 'ready' && !sent) {
+            sent = true
+            child.stdin!.write(`${JSON.stringify({ id: 'req_tools', type: 'set_host_tools', tools })}\n`)
+          }
+          else if (frame.type === 'response' && frame.id === 'req_tools') {
+            clearTimeout(timer)
+            accepted = frame
+            resolve(frame)
+          }
+        }
+        catch { /* 非 JSON 行忽略 */ }
+      }
+    })
+    child.on('exit', () => resolve(accepted ?? 'exit'))
+  })
+  child.kill()
+  const resp = accepted as { success?: boolean, data?: { toolNames?: string[] } } | null
+  const names = resp?.data?.toolNames ?? []
+  check('①真实 omp 接受含 dcw_read/dcw_control 的 set_host_tools',
+    !!resp && resp.success === true && names.includes('dcw_read') && names.includes('dcw_control'),
+    `工具数=${names.length}`)
+}
+
+// ===== ② 真实分发 + 执行:handleHostTool → dcw_read / dcw_control =====
+console.log('\n--- ② Agent 工具真实执行(mock) ---')
+{
+  const impl = new OmpRpcAgentImpl({ agentId: AGENT, name: '读写验证员', role: 'worker', channelId: 'ch-rw-v' })
+  // 真实 server 里 workspace 由 run 上下文注入 ensureClient;工具执行体不依赖 workspace
+  // 内函数 —— harness 注入最小桩以通过就绪门(与 server 行为一致:非空即放行)
+  ;(impl as unknown as { workspace: unknown }).workspace = { listAgents: async () => [] }
+  const handle = (impl as unknown as Record<string, (req: unknown) => Promise<{ text: string, isError?: boolean }>>).handleHostTool.bind(impl)
+
+  const r0 = await handle({ toolName: 'dcw_read', arguments: { node_id: mockNode.id } })
+  check('②dcw_read:mock 未写入如实报失败(鉴权通过)', r0.isError === true && /读取失败/.test(r0.text) && !/无权/.test(r0.text), r0.text.slice(0, 90))
+
+  const w = await handle({ toolName: 'dcw_control', arguments: { node_id: mockNode.id, value: 175.5, hypothesis: 'Agent 真机验证写入' } })
+  check('②Agent 下发 175.5 成功(开优化记录)', !w.isError && /下发成功/.test(w.text), w.text.replace(/\n/g, ' ').slice(0, 100))
+  const r1 = await handle({ toolName: 'dcw_read', arguments: { node_id: mockNode.id } })
+  check('②dcw_read 读回 ACT=175.5 且与 SET 一致', !r1.isError && /175\.5/.test(r1.text) && /一致/.test(r1.text), r1.text.replace(/\n/g, ' ').slice(0, 120))
+
+  // 越权:未绑定节点读取/写入均拒
+  const rDeny = await handle({ toolName: 'dcw_read', arguments: { node_id: 'dw-not-bound' } })
+  const wDeny = await handle({ toolName: 'dcw_control', arguments: { node_id: 'dw-not-bound', value: 1 } })
+  check('②未绑定节点读取/写入均被拒', rDeny.isError === true && wDeny.isError === true && /无权/.test(rDeny.text) && /无权/.test(wDeny.text))
+
+  // 量程联锁:越工艺安全量程下发被拒
+  const wRange = await handle({ toolName: 'dcw_control', arguments: { node_id: mockNode.id, value: 999 } })
+  check('②越量程下发被拒(999 ∉ [150,200])', wRange.isError === true && /越出|量程/.test(wRange.text), wRange.text.slice(0, 80))
+}
+
+// ===== ③ 真实 Modbus TCP:Agent 写 → 读(真寄存器 roundtrip) =====
+console.log('\n--- ③ Agent 经真实 Modbus(1502 从站 40023)读写 ---')
+{
+  const impl = new OmpRpcAgentImpl({ agentId: AGENT, name: '读写验证员', role: 'worker', channelId: 'ch-rw-v' })
+  ;(impl as unknown as { workspace: unknown }).workspace = { listAgents: async () => [] }
+  const handle = (impl as unknown as Record<string, (req: unknown) => Promise<{ text: string, isError?: boolean }>>).handleHostTool.bind(impl)
+
+  const wm = await handle({ toolName: 'dcw_control', arguments: { node_id: modbusNode.id, value: 4.5, hypothesis: '真实链路验证' } })
+  check('③Agent 经真实 Modbus 下发 4.5 成功(同址回读一致)', !wm.isError && /下发成功/.test(wm.text), wm.text.replace(/\n/g, ' ').slice(0, 110))
+  const rm = await handle({ toolName: 'dcw_read', arguments: { node_id: modbusNode.id } })
+  check('③Agent 从真实寄存器读回 4.5(ACT=SET)', !rm.isError && /4\.5/.test(rm.text) && /一致/.test(rm.text), rm.text.replace(/\n/g, ' ').slice(0, 130))
+
+  const wm2 = await handle({ toolName: 'dcw_control', arguments: { node_id: modbusNode.id, value: 12.75 } })
+  const rm2 = await handle({ toolName: 'dcw_read', arguments: { node_id: modbusNode.id } })
+  check('③第二轮:写 12.75 → 读回 12.75', !wm2.isError && !rm2.isError && /12\.75/.test(rm2.text), rm2.text.replace(/\n/g, ' ').slice(0, 110))
+}
+
+console.log(failures === 0 ? '\nAGENT-DCW-RW ALL PASS' : `\nAGENT-DCW-RW FAILED(${failures})`)
+process.exit(failures === 0 ? 0 : 1)