agentworkshop 0.7.44 → 0.7.47

package/scripts/three-system-e2e.mjs

@@ -1,3 +1,4 @@
+#!/usr/bin/env node
 /**
  * 三系统集成 e2e — AgentWorkShop × industrial-deep-diagnostic × rag-knowledge
  *
@@ -11,652 +12,29 @@
  * 用法:node scripts/three-system-e2e.mjs [--full]
  * 鉴权:沿用 api-live-e2e 惯例(env AW_E2E_TOKEN 复用,否则注册临时用户);
  *       产线权限由脚本直接向 users.sqlite 种一行 user_line_grants(测试夹具,非平台面)。
+ *
+ * ——本文件是**入口薄壳**:原单文件(663 行顶层线性脚本)按职责拆到 ./three-system-e2e/ 下,
+ *   入口路径与用法保持不变。环境变量语义不变:AW_BASE / KB_BASE / KB_WEB / DIAG_BASE /
+ *   E2E_LINE / E2E_DCW_NODE(另沿用 AW_E2E_TOKEN / AW_E2E_ADMIN_TOKEN / KB_MCP_TOKEN /
+ *   KB_ROOT / IDD_API_TOKEN / FULL_WAIT_MIN)。
+ *
+ * 模块划分:
+ *   three-system-e2e/lib.mjs                          配置 / 断言与计数 / HTTP 辅助
+ *   three-system-e2e/state.mjs                        跨阶段可变状态(getter/setter)
+ *   three-system-e2e/phases/phase-0-user-token.mjs    0. 用户 token
+ *   three-system-e2e/phases/phase-0a2-line-autoselect.mjs 0a2. 目标产线自适应
+ *   three-system-e2e/phases/phase-0b-fixture-grants.mjs   0b. 产线 operate 授权夹具
+ *   three-system-e2e/phases/phase-0c-plugin-outbound-auth.mjs 0c. 插件出站鉴权夹具
+ *   three-system-e2e/phases/stage-1-health.mjs        Stage 1 系统与插件健康
+ *   three-system-e2e/phases/stage-2-teams-tools-hitl.mjs  Stage 2 团队与工具链
+ *   three-system-e2e/phases/stage-2-5-team-plugins.mjs    Stage 2.5 团队插件链
+ *   three-system-e2e/phases/stage-3-diag.mjs          Stage 3 真实诊断
+ *   three-system-e2e/phases/stage-4-plugin-toggle.mjs Stage 4 插件启停
+ *   three-system-e2e/main.mjs                         主流程 + 汇总 + 退出码
  */
-import { DatabaseSync } from 'node:sqlite'
-import { existsSync, readFileSync, writeFileSync, renameSync } from 'node:fs'
-import { fileURLToPath } from 'node:url'
-import { dirname, join, resolve } from 'node:path'
-
-const __dirname = dirname(fileURLToPath(import.meta.url))
-const ROOT = resolve(__dirname, '..')
-const FULL = process.argv.includes('--full')
-
-const BASE = process.env.AW_BASE ?? 'http://localhost:3021'
-const KB = process.env.KB_BASE ?? 'http://127.0.0.1:8770'
-const KBWEB = process.env.KB_WEB ?? 'http://127.0.0.1:6789'
-const DIAG = process.env.DIAG_BASE ?? 'http://127.0.0.1:3210'
-let LINE = process.env.E2E_LINE ?? 'ln-af002514' // 1号产线(6 个 mock 数采节点)
-const DCW_NODE = process.env.E2E_DCW_NODE ?? 'dw-e92bb0e7' // 压力设定器(mock 驱动)
-const CH_A = '产线数据分析组'
-const CH_B = '闭环控制组'
-
-/** 插件出站鉴权 token(0c 夹具取得;Stage 1 断言复用) */
-let kbTokenG = ''
+import { main } from './three-system-e2e/main.mjs'
 
-let pass = 0
-let fail = 0
-const failures = []
-function ok(cond, label, detail = '') {
-  if (cond) {
-    pass++
-    console.log(`  ✔ ${label}${detail ? ` —— ${detail}` : ''}`)
-  }
-  else {
-    fail++
-    failures.push(label)
-    console.error(`  ✘ ${label}${detail ? ` —— ${detail}` : ''}`)
-  }
-}
-const sleep = ms => new Promise(r => setTimeout(r, ms))
-
-async function raw(method, url, { body, token, agent, timeoutMs = 20000 } = {}, retried = 0) {
-  const headers = {}
-  if (body !== undefined) headers['content-type'] = 'application/json'
-  if (token) headers.authorization = `Bearer ${token}`
-  if (agent) headers['x-aw-agent-token'] = agent.token
-  let res
-  try {
-    res = await fetch(url, {
-      method, headers,
-      body: body !== undefined ? JSON.stringify(body) : undefined,
-      signal: AbortSignal.timeout(timeoutMs),
-    })
-  }
-  catch (e) {
-    // 瞬时网络抖动(代理/服务重启窗口)重试一次,避免整场 e2e 因单点超时中止
-    if (retried < 1) {
-      await sleep(1500)
-      return raw(method, url, { body, token, agent, timeoutMs }, retried + 1)
-    }
-    throw e
-  }
-  const json = await res.json().catch(() => null)
-  return { status: res.status, json }
-}
-const api = (method, path, opts = {}) => raw(method, `${BASE}${path}`, opts)
-const envelopeData = r => r?.json?.data
-const resultText = r => String(r?.json?.data?.result?.text ?? '')
-const invoke = (agent, tool, args, timeoutMs = 60000) => api('POST', '/api/workshop/agent-tools/invoke', {
-  agent, timeoutMs, body: { agentId: agent.id, tool, args },
+main().catch((err) => {
+  console.error('E2E 致命异常:', err)
+  process.exit(1)
 })
-
-// ── 0. 用户 token(持久化演示账号 → env → 现场注册)────────────────────────
-console.log('\n══ 三系统集成 e2e ══')
-const TOKEN_FILE = join(ROOT, '.AgentWorkShop', 'data', '.three-system-e2e-token.json')
-let userToken = ''
-let userId = ''
-try {
-  const saved = JSON.parse(readFileSync(TOKEN_FILE, 'utf8'))
-  userToken = saved.token ?? ''
-  userId = saved.uid ?? ''
-}
-catch { /* 首跑 */ }
-if (userToken) {
-  // 持久化 token 可能已随 users.sqlite 重建失效 → 先验证,失效则现场重新注册
-  const me = await api('GET', '/api/workshop/users/me', { token: userToken })
-  if (me.status !== 200) {
-    console.log('  · 持久化 token 已失效,重新注册 e2e 用户')
-    userToken = ''
-    userId = ''
-  }
-}
-if (!userToken && process.env.AW_E2E_TOKEN) userToken = process.env.AW_E2E_TOKEN
-if (!userToken) {
-  const name = `e2e3sys-${Date.now().toString(36)}`
-  const reg = await api('POST', '/api/workshop/users/register', { body: { name } })
-  userToken = reg?.json?.data?.token ?? ''
-  userId = reg?.json?.data?.id ?? ''
-  try {
-    writeFileSync(TOKEN_FILE, JSON.stringify({ token: userToken, uid: userId, name }))
-  }
-  catch { /* 忽略 */ }
-  ok(Boolean(userToken), '注册 e2e 用户拿 token', userToken ? 'ok' : `resp=${JSON.stringify(reg.json).slice(0, 120)}`)
-  if (!userToken) process.exit(1)
-}
-else { console.log('  · 复用持久化演示账号 token') }
-
-// ── 0a2. 目标产线自适应:未显式指定 E2E_LINE 时,自动选「最近 10 分钟有采样」且节点最多的产线 ──
-// 数采按产线批次门控:无活动批次的产线没有样本,写死的默认线会随环境漂移而误报
-// (快照导出 rows=0 / diag_run「该时窗内无数采样本」)。
-if (!process.env.E2E_LINE) {
-  try {
-    const daq = await api('GET', '/api/workshop/daq', { token: userToken })
-    const nodes = daq?.json?.data?.nodes ?? []
-    const now = Date.now()
-    const byLine = new Map()
-    for (const n of nodes) {
-      if (!n.lineId || n.lastAt == null) continue
-      if (now - Date.parse(n.lastAt) > 10 * 60_000) continue
-      byLine.set(n.lineId, (byLine.get(n.lineId) ?? 0) + 1)
-    }
-    const best = [...byLine.entries()].sort((a, b) => b[1] - a[1])[0]
-    if (best) {
-      LINE = best[0]
-      console.log(`  · 自动选定采样中的产线 ${LINE}(新鲜节点 ${best[1]} 个)`)
-    }
-    else {
-      console.log('  ! 未发现采样中的产线,沿用默认线(相关采样断言可能失败)')
-    }
-  }
-  catch { /* 探测失败保持默认线 */ }
-}
-
-// ── 0b. 夹具种子:e2e 用户对目标产线 operate 授权(users.sqlite 直插,测试专用)──
-try {
-  const dbPath = join(ROOT, '.AgentWorkShop', 'data', 'users.sqlite')
-  if (!existsSync(dbPath)) throw new Error(`users.sqlite 不存在: ${dbPath}`)
-  let uid = userId
-  if (!uid) {
-    const db = new DatabaseSync(dbPath)
-    db.exec('PRAGMA busy_timeout=4000')
-    const cand = db.prepare('SELECT id FROM users ORDER BY created_at DESC LIMIT 200').all()
-      .find(() => true) // 兜底:下面按 token 哈希反查不可行,直接用最新 e2e 用户
-    uid = cand?.id ?? ''
-    db.close()
-  }
-  if (uid) {
-    const db2 = new DatabaseSync(dbPath)
-    db2.exec('PRAGMA busy_timeout=4000')
-    db2.prepare(`INSERT OR REPLACE INTO user_line_grants (user_id, line_id, mode, granted_by, granted_at) VALUES (?, ?, 'operate', 'three-system-e2e', ?)`)
-      .run(uid, LINE, new Date().toISOString())
-    db2.close()
-    console.log(`  · 已为用户 ${uid} 种入产线 ${LINE} operate 授权(测试夹具)`)
-  }
-  else {
-    console.log('  ! 未能取得 user id,产线授权未种(相关断言可能失败)')
-  }
-}
-catch (err) {
-  console.log(`  ! 授权夹具异常(继续): ${err?.message ?? err}`)
-}
-
-// ── 0c. 插件出站鉴权夹具:rag-knowledge(MCP token)+ 诊断服务(API token)→ 写入系统配置 ──
-// 两外部服务默认开启鉴权(rag-knowledge server.auth / IDD AUTH_ENABLED!==0),
-// rag-bridge/diag-bridge 的出站 token 走前端全局配置(plugins.kb.token / plugins.diag.token),
-// 此处拿真实 token 后经 PATCH /api/system/settings 配置 —— 同时验证「配置界面 → 插件热生效」链路。
-try {
-  // admin 夹具:注册临时用户 → users.sqlite 直改 role=admin(resolveUser 按请求查库,即时生效)
-  let adminToken = process.env.AW_E2E_ADMIN_TOKEN ?? ''
-  if (!adminToken) {
-    const adminName = `e2e3sys-admin-${Date.now().toString(36)}`
-    const reg = await api('POST', '/api/workshop/users/register', { body: { name: adminName } })
-    adminToken = reg?.json?.data?.token ?? ''
-    const adminId = reg?.json?.data?.id ?? ''
-    if (adminToken && adminId) {
-      const dbPath = join(ROOT, '.AgentWorkShop', 'data', 'users.sqlite')
-      const db = new DatabaseSync(dbPath)
-      db.exec('PRAGMA busy_timeout=4000')
-      db.prepare('UPDATE users SET role = \'admin\' WHERE id = ?').run(adminId)
-      db.close()
-      console.log(`  · admin 夹具就绪(${adminName} → role=admin)`)
-    }
-    else {
-      console.log('  ! admin 夹具注册失败,系统配置断言将跳过')
-    }
-  }
-  if (adminToken) {
-    // ① rag-knowledge MCP token:优先 env,否则读 rag-knowledge .env
-    let kbToken = process.env.KB_MCP_TOKEN ?? ''
-    if (!kbToken) {
-      const kbRoot = process.env.KB_ROOT ?? 'D:/codes/ClaudeGPT/rag_project/rag-knowledge'
-      try {
-        const envText = readFileSync(join(kbRoot, '.env'), 'utf8')
-        kbToken = (envText.match(/^MCP_AUTH_TOKEN=(.+)$/m) ?? [])[1]?.trim() ?? ''
-      }
-      catch { /* .env 不可读 */ }
-    }
-    kbTokenG = kbToken
-    // ② 诊断服务 token:优先 env,否则在 IDD 上注册 e2e 账号换会话 JWT
-    let diagToken = process.env.IDD_API_TOKEN ?? ''
-    if (!diagToken) {
-      const iu = `e2e3sys_${Date.now().toString(36)}`
-      const ipw = `E2e3sys${Date.now().toString(36)}a1`
-      const reg = await raw('POST', `${DIAG}/api/auth/register`, { body: { username: iu, password: ipw, email: `${iu}@e2e.local` } })
-      if (!reg.json?.data?.user) console.log(`  ! 诊断服务注册失败:${JSON.stringify(reg.json).slice(0, 120)}`)
-      const login = await raw('POST', `${DIAG}/api/auth/login`, { body: { username: iu, password: ipw } })
-      diagToken = login.json?.data?.session_token ?? login.json?.session_token ?? ''
-      if (!diagToken) console.log('  ! 诊断服务注册/登录未取得 token(3210 鉴权断言可能失败)')
-      else console.log('  · 诊断服务 e2e 账号 + 会话 token 就绪')
-    }
-    const patch = {}
-    if (kbToken) patch['plugins.rag-bridge.token'] = kbToken
-    if (diagToken) patch['plugins.diag-bridge.token'] = diagToken
-    if (Object.keys(patch).length) {
-      const set = await api('PATCH', '/api/system/settings', { token: adminToken, body: { override: patch } })
-      ok(set.status === 200 && set.json?.data?.ok !== false, '插件出站 token 写入系统配置(PATCH /api/system/settings)', `keys=${Object.keys(patch).join(',')}`)
-      if (set.status === 200) {
-        // 配置即时查询回读 + 插件侧热生效(diag-bridge health.auth 应变 bearer)
-        let hot = false
-        for (let i = 0; i < 10 && !hot; i++) {
-          await sleep(1000)
-          const h = await raw('GET', `${BASE}/api/plugins/diag-bridge/health`, { token: userToken })
-          if (h.json?.auth === 'bearer') hot = true
-        }
-        ok(hot, 'diag-bridge 热读取新 token(配置保存 → 插件即时生效,免重启)')
-      }
-    }
-    if (kbToken) {
-      // rag-bridge 出站鉴权链路:带 token 后 catalog/建库应成功(kb.id 就绪)
-      let kbReady = false
-      let kbDetail = ''
-      for (let i = 0; i < 12 && !kbReady; i++) {
-        await sleep(2500)
-        const h = await raw('GET', `${BASE}/api/plugins/rag-bridge/health`, { token: userToken })
-        kbDetail = `kb.id=${h.json?.kb?.id} auth=${h.json?.auth}`
-        if (h.json?.kb?.id) kbReady = true
-      }
-      ok(kbReady, 'rag-bridge 带 token 打通 rag-knowledge(ensureKB 自愈 → kb.id 就绪)', kbDetail)
-    }
-  }
-}
-catch (err) {
-  console.log(`  ! 插件出站鉴权夹具异常(继续): ${err?.message ?? err}`)
-}
-
-// ══ Stage 1:四服务健康 + 插件装载 + 鉴权门 ═══════════════════════════════
-console.log('\n── Stage 1 系统与插件健康 ──')
-{
-  const awsGate = await api('GET', '/api/workshop/plugins')
-  ok(awsGate.status === 401, 'AWS 3021 活着(无 token 401 信封)', `status=${awsGate.status}`)
-
-  const kbH = await raw('GET', `${KB}/api/v1/health`)
-  ok(kbH.json?.status === 'healthy', 'rag-knowledge 后端 8770 healthy', JSON.stringify(kbH.json))
-  // web catalog:服务端开启鉴权时无 token 401,带 MCP token 应 success(两种部署形态都接受)
-  const kbWebNoAuth = await raw('GET', `${KBWEB}/api/kb/catalog`)
-  const kbWeb = await raw('GET', `${KBWEB}/api/kb/catalog`, { token: kbTokenG || undefined })
-  ok(kbWeb.json?.success === true || (kbWebNoAuth.status === 401 && kbWebNoAuth.json?.error),
-    'rag-knowledge web 6789 catalog 可用(鉴权形态:无 token 401 / 带 token success)',
-    `noAuth=${kbWebNoAuth.status} withToken=${kbWeb.status} count=${kbWeb.json?.count}`)
-  const dgH = await raw('GET', `${DIAG}/api/health`)
-  ok(dgH.json?.status === 'ok', '诊断服务 3210 healthy', `activeRuns=${dgH.json?.checks?.activeRuns}`)
-  const rgH = await raw('GET', 'http://127.0.0.1:8764/health', { timeoutMs: 5000 }).catch(e => ({ json: { status: String(e) } }))
-  ok(rgH.json?.status === 'healthy', '诊断 RAG 引擎 8764 healthy(降级容忍)', JSON.stringify(rgH.json ?? {}))
-
-  const plugs = await api('GET', '/api/workshop/plugins', { token: userToken })
-  // 兼容两种形状:顶层 {plugins:[...]}(插件清单端点未包信封)/ 信封 data.plugins
-  const list = plugs.json?.plugins ?? envelopeData(plugs)?.plugins ?? []
-  const names = list.map(p => p?.name)
-  const enabled = n => list.find(p => p?.name === n)?.enabled === true
-  ok(Array.isArray(list) && list.length > 0, '插件清单可读', list.length ? `count=${list.length}` : `resp=${JSON.stringify(plugs.json).slice(0, 160)}`)
-  ok(names.includes('rag-bridge'), 'rag-bridge 已装载')
-  ok(names.includes('diag-bridge'), 'diag-bridge 已装载')
-  ok(enabled('rag-bridge') && enabled('diag-bridge'), '两桥接插件均为启用态')
-
-  const noAuthRag = await raw('GET', `${BASE}/api/plugins/rag-bridge/health`)
-  const noAuthDiag = await raw('GET', `${BASE}/api/plugins/diag-bridge/health`)
-  ok(noAuthRag.status === 401 && noAuthDiag.status === 401, '插件路由鉴权门生效(auth:user → 无 token 401)', `rag=${noAuthRag.status} diag=${noAuthDiag.status}`)
-
-  const ragH = await raw('GET', `${BASE}/api/plugins/rag-bridge/health`, { token: userToken })
-  ok(ragH.status === 200 && ragH.json?.outbound === true && ragH.json?.kb?.id, 'rag-bridge 健康(kb.id 就绪)', `kb=${ragH.json?.kb?.id}`)
-  const diagH = await raw('GET', `${BASE}/api/plugins/diag-bridge/health`, { token: userToken })
-  ok(diagH.status === 200 && diagH.json?.remote?.status === 'ok', 'diag-bridge 健康(3210 可达)', `activeRuns=${diagH.json?.remote?.activeRuns}`)
-}
-
-// ══ Stage 2:双团队 + 工具链 + 跨通道 + HITL ═══════════════════════════════
-let leadA
-let toolInvoker // 工具直调执行器(omp;mock lead 不实现 dispatch 面)
-let leadB
-let channelA
-let channelB
-{
-  console.log('\n── Stage 2 团队与工具链 ──')
-  async function ensureChannel(name, leadName, execName) {
-    const found = await api('GET', '/api/workshop/channels', { token: userToken })
-    const items = envelopeData(found) ?? []
-    const hit = (Array.isArray(items) ? items : []).find(c => c?.name === name)
-    let channelId = hit?.id ?? ''
-    if (!channelId) {
-      let created = await api('POST', '/api/workshop/channels', {
-        token: userToken,
-        body: { name, description: `三系统集成示例团队(e2e 创建)`, leadAgent: { name: leadName, harness: 'mock' } },
-      })
-      if (!(created.status === 200 && envelopeData(created)?.channelId)) {
-        // 同名频道被其他账号占用 → 加随机后缀重建(演示语义不变)
-        name = `${name}-${Math.random().toString(36).slice(2, 6)}`
-        created = await api('POST', '/api/workshop/channels', {
-          token: userToken,
-          body: { name, description: `三系统集成示例团队(e2e 创建)`, leadAgent: { name: leadName, harness: 'mock' } },
-        })
-      }
-      channelId = envelopeData(created)?.channelId ?? ''
-    }
-    const readMembers = async () => (envelopeData(await api('GET', `/api/workshop/channels/${channelId}/agents`, { token: userToken })) ?? [])
-    let members = await readMembers()
-    // 每队配一个 omp「执行器」成员:REST 直调工具经共享 host-tool-bridge 分发,零 LLM 会话
-    if (!members.some(m => m?.name === execName)) {
-      await api('POST', `/api/workshop/channels/${channelId}/agents`, {
-        token: userToken,
-        body: { name: execName, harness: 'omp', role: 'worker' },
-      })
-      members = await readMembers()
-    }
-    const lead = members.find(m => m?.role === 'lead')
-    const exec = members.find(m => m?.name === execName)
-    return { channelId, lead, exec, name }
-  }
-  const a = await ensureChannel(CH_A, '分析组长', '数据分析执行器')
-  const b = await ensureChannel(CH_B, '控制组长', '控制执行器')
-  channelA = a.channelId
-  channelB = b.channelId
-  leadA = a.lead
-  leadB = b.lead
-  const execA = a.exec
-  const execB = b.exec
-  const nameB = b.name ?? CH_B
-  ok(Boolean(channelA && leadA?.id && leadA?.token), `团队A「${a.name ?? CH_A}」就绪(lead=${leadA?.name})`)
-  ok(Boolean(channelB && leadB?.id && leadB?.token), `团队B「${nameB}」就绪(lead=${leadB?.name})`)
-  ok(Boolean(execA?.id && execA?.token), '团队A 执行器(omp)就绪', execA?.name)
-  ok(Boolean(execB?.id && execB?.token), '团队B 执行器(omp)就绪', execB?.name)
-  toolInvoker = execA ?? leadA
-
-  // 工具清单:5 工具可见 + 无 url/base_url/host 参数(SSRF 面)
-  const listR = await api('GET', `/api/workshop/agent-tools/list?agentId=${toolInvoker.id}`, { agent: toolInvoker })
-  const tools = listR?.json?.tools ?? listR?.json?.data?.tools ?? []
-  const toolNames = tools.map(t => t?.name)
-  for (const t of ['diag_run', 'diag_status', 'kb_search', 'kb_store', 'kb_index']) {
-    ok(toolNames.includes(t), `agent 工具清单含 ${t}`)
-  }
-  const bridge = tools.filter(t => ['diag_run', 'diag_status', 'kb_search', 'kb_store', 'kb_index'].includes(t?.name))
-  const leak = bridge.some(t => Object.keys(t?.parameters?.properties ?? {}).some(k => /url|host/i.test(k)))
-  ok(bridge.length === 5 && !leak, '桥接工具参数面无 url/host 注入口', `tools=${bridge.length}`)
-
-  // DAQ 实时数据 → 快照导出
-  let snap = await api('POST', '/api/plugins/diag-bridge/snapshot', {
-    token: userToken,
-    body: { line: LINE, from_ms: Date.now() - 15 * 60_000, to_ms: Date.now() },
-  })
-  if (snap.json?.success === false) {
-    snap = await api('POST', '/api/plugins/diag-bridge/snapshot', {
-      token: userToken,
-      body: { line: LINE, from_ms: Date.now() - 120 * 60_000, to_ms: Date.now() },
-    })
-  }
-  ok(snap.json?.success === true && snap.json?.rows > 0, 'DAQ 实时数采 → 快照 CSV 导出成功', `rows=${snap.json?.rows} nodes=${snap.json?.nodes} path=${snap.json?.csvPath}`)
-  if (snap.json?.csvPath) {
-    ok(String(snap.json.csvPath).startsWith('data/aw-snapshots/'), '快照落诊断服务 aw-snapshots 目录(相对路径)', snap.json.csvPath)
-  }
-
-  // KB 回环:kb_index 入库独特自然语句 → kb_search 命中(嵌入/分词对自然语句才可靠);kb_store 沉淀经验
-  const marker = `三系统验证密语${Date.now().toString(36)}:青花瓷泵站三十七号叶片于黄昏完成校准`
-  const idx = await invoke(toolInvoker, 'kb_index', { // rag 负载下事件循环停顿可达 60s+,放宽超时
-    title: `三系统集成验证 ${Date.now().toString(36)}`,
-    content: `# 三系统集成验证\n\n${marker}。\n\n本文由 three-system-e2e 经 rag-bridge 插件写入,验证 文档写盘 → 向量索引 → kb_search 检索 全链路。\n`,
-    tags: ['e2e'],
-  }, 120000)
-  ok(resultText(idx).includes('已入库'), 'kb_index 文档入库成功', resultText(idx).slice(0, 80))
-  let hit = ''
-  for (let i = 0; i < 20; i++) { // 首次检索可能触发 BGE-M3 加载/异步索引落盘,放宽到 20×3s
-    await sleep(3000)
-    const s = await invoke(toolInvoker, 'kb_search', { query: marker }, 120000)
-    hit = resultText(s)
-    if (hit.includes(marker)) break
-  }
-  ok(hit.includes(marker), 'kb_search 检索命中刚入库文档', hit.split('\n')[1]?.slice(0, 90) ?? hit.slice(0, 90))
-
-  const store = await invoke(toolInvoker, 'kb_store', {
-    title: `e2e 经验:${marker} 快照导出前先确认产线在采样`,
-    category: 'troubleshooting',
-    problem: 'diag_run 报「时窗内无数采样本」',
-    solution: '先查产线 LineRun 是否活动、节点 publishIntervalMs 是否在节拍上,再缩窗重试。',
-    key_lessons: ['空窗先查打标窗口', 'bucket 5s 可对齐多节点'],
-    tags: ['e2e', 'daq'],
-  }, 120000)
-  ok(resultText(store).includes('已沉淀'), 'kb_store 经验沉淀成功', resultText(store).slice(0, 80))
-
-  // 跨通道:分析组长 → 控制组长(require_reply;用频道 ID 定向,避免跨账号同名频道歧义)
-  const xmsg = await invoke(leadA, 'send_cross_channel_message', {
-    to_channel_id: channelB,
-    message: `分析组已完成 ${LINE} 最近时窗的数据诊断与知识检索;请控制组给出 ${DCW_NODE}(压力设定器)的控制策略建议。`,
-    require_reply: true,
-  }, 120000)
-  ok(!xmsg.json?.result?.isError, '分析组长 → 控制组长 跨通道消息发送成功', resultText(xmsg).slice(0, 80))
-  let landedB = ''
-  for (let i = 0; i < 8; i++) {
-    await sleep(1000)
-    const msgs = await api('GET', `/api/workshop/channels/${channelB}/messages`, { token: userToken })
-    const items = envelopeData(msgs)?.items ?? envelopeData(msgs) ?? []
-    const arr = Array.isArray(items) ? items : (items?.messages ?? [])
-    landedB = JSON.stringify(arr)
-    if (landedB.includes('控制策略建议')) break
-  }
-  ok(landedB.includes('控制策略建议'), '跨通道消息落入控制组频道')
-
-  // DCW(manual)→ HITL → 写回
-  const dcwView = await api('GET', '/api/workshop/dcw', { token: userToken })
-  const dcwNodes = envelopeData(dcwView)?.nodes ?? []
-  const node = dcwNodes.find(n => n?.id === DCW_NODE)
-  ok(Boolean(node), `DCW 节点 ${DCW_NODE} 对授权用户可见`, `driver=${node?.driver} value=${node?.value}`)
-  const target = Number(node?.value ?? 0)
-  const bind = await api('POST', '/api/workshop/agent-tools/bindings', {
-    token: userToken,
-    body: { agentId: execB.id, nodeId: DCW_NODE, kind: 'dcw', mode: 'manual' },
-  })
-  ok(bind.status === 200 && Boolean(envelopeData(bind)?.binding?.id), '控制执行器绑定 DCW 节点(manual)', bind.status === 200 ? `mode=${envelopeData(bind)?.binding?.mode}` : JSON.stringify(bind.json).slice(0, 120))
-  ok(envelopeData(bind)?.binding?.mode === 'manual', '绑定模式确为 manual(审批路径生效前置)')
-
-  const pendingInvoke = invoke(execB, 'dcw_control', {
-    node_id: DCW_NODE,
-    value: target,
-    hypothesis: `依据分析组诊断结论与历史经验,维持设定值 ${target}(e2e 闭环演示)`,
-  }, 300000)
-  let approved = false
-  let pendRaw = '[]'
-  for (let i = 0; i < 15 && !approved; i++) {
-    await sleep(2000)
-    const pend = await api('GET', '/api/workshop/hitl/pending', { token: userToken })
-    const pd = envelopeData(pend)
-    const arr = Array.isArray(pd) ? pd : (pd?.items ?? pd?.pending ?? [])
-    pendRaw = JSON.stringify(arr)
-    const item = arr.find(x => x?.kind === 'dcw-approval' && x?.agentId === execB.id)
-    if (item?.id) {
-      const resp = await api('POST', '/api/workshop/hitl/respond', {
-        token: userToken,
-        body: { kind: 'dcw-approval', id: item.id, confirmed: true, comment: 'three-system-e2e 批准' },
-      })
-      approved = resp.status === 200
-    }
-  }
-  const writeRes = await pendingInvoke
-  ok(approved, 'HITL 待办出现并经 respond 批准', approved ? 'ok' : `pending=${pendRaw.slice(0, 200)}`)
-  ok(resultText(writeRes).includes('下发成功'), 'dcw_control 经审批写回成功', resultText(writeRes).slice(0, 120))
-}
-
-// ══ Stage 2.5:团队插件链(建队勾选 → 团队开关 → 部署传导 → channel 工具过滤)══
-{
-  console.log('\n── Stage 2.5 团队插件链(建队勾选/部署传导/按 Channel 过滤)──')
-  const tplRes = await api('POST', '/api/workshop/agents', {
-    token: userToken,
-    body: { name: `插件链执行器-${Date.now().toString(36)}`, harness: 'mock' },
-  })
-  const tplId = envelopeData(tplRes)?.id
-  ok(Boolean(tplId), '成员 Agent 模板创建', tplId ?? JSON.stringify(tplRes.json).slice(0, 100))
-
-  const teamName = `插件链团队-${Date.now().toString(36)}`
-  const teamRes = await api('POST', '/api/workshop/teams', {
-    token: userToken,
-    body: {
-      name: teamName,
-      plugins: [{ name: 'rag-bridge', enabled: false }, { name: 'diag-bridge', enabled: true }],
-    },
-  })
-  const team = envelopeData(teamRes)
-  ok(Boolean(team?.id), '建队带 plugins 勾选(POST /teams 落团队偏好)', team?.id ?? JSON.stringify(teamRes.json).slice(0, 120))
-
-  if (team?.id) {
-    await api('POST', `/api/workshop/teams/${team.id}/members`, { token: userToken, body: { agentId: tplId, role: 'worker' } })
-    // ① 团队插件视图(team 作用域端点)
-    const tp = await api('GET', `/api/workshop/teams/${team.id}/plugins`, { token: userToken })
-    const tpRows = envelopeData(tp)?.plugins ?? []
-    ok(envelopeData(tp)?.source === 'explicit'
-      && tpRows.find(p => p.name === 'rag-bridge')?.enabled === false
-      && tpRows.find(p => p.name === 'diag-bridge')?.enabled === true,
-    'GET /teams/:id/plugins 显式视图(rag-bridge 关 / diag-bridge 开)', JSON.stringify(tpRows.map(p => [p.name, p.enabled])))
-
-    // ② 部署到新 channel → 团队开关传导
-    const chRes = await api('POST', '/api/workshop/channels', {
-      token: userToken,
-      body: { name: `插件链频道-${Date.now().toString(36)}`, description: '三系统 e2e 团队插件链' },
-    })
-    const channelId = envelopeData(chRes)?.channelId ?? ''
-    ok(Boolean(channelId), '空频道创建(部署目标)', channelId)
-    if (channelId) {
-      const dep = await api('POST', `/api/workshop/teams/${team.id}/deploy`, { token: userToken, body: { channelId } })
-      const depAgents = envelopeData(dep)?.agents ?? []
-      ok(dep.status === 200 && depAgents.length > 0, '团队部署到频道(成员克隆)', `agents=${depAgents.length}`)
-      const cp = await api('GET', `/api/workshop/channels/${channelId}/plugins`, { token: userToken })
-      const cpRows = envelopeData(cp)?.plugins ?? []
-      ok(envelopeData(cp)?.source === 'explicit'
-        && cpRows.find(p => p.name === 'rag-bridge')?.enabled === false,
-      '团队插件开关随部署传导到 channel', JSON.stringify(cpRows.map(p => [p.name, p.enabled])))
-
-      // ③ 工具清单过滤:kb_*(rag-bridge 关)不可见,diag_*(开)可见
-      const member = depAgents[0]
-      const list1 = await api('GET', `/api/workshop/agent-tools/list?agentId=${member.id}`, { agent: member })
-      const names1 = (list1?.json?.data?.tools ?? list1?.json?.tools ?? []).map(t => t?.name)
-      ok(!names1.includes('kb_search') && !names1.includes('kb_store') && !names1.includes('kb_index'),
-        '关闭插件的工具不注入该团队(kb_* 从清单消失)')
-      ok(names1.includes('diag_run') && names1.includes('diag_status'), '开启插件的工具正常注入(diag_*)')
-
-      // ④ dispatch 同源拒绝:关掉的插件工具直调被拒
-      const denied = await invoke(member, 'kb_search', { query: '不应执行' }, 30000)
-      ok(resultText(denied).includes('未启用插件'), 'dispatch 层同源拒绝(团队未启用插件)', resultText(denied).slice(0, 60))
-
-      // ⑤ channel 级反转:重新开启 rag-bridge → 工具即时回归(热通知)
-      const put5 = await api('PUT', `/api/workshop/channels/${channelId}/plugins`, {
-        token: userToken,
-        body: { plugins: [{ name: 'rag-bridge', enabled: true }, { name: 'diag-bridge', enabled: true }] },
-      })
-      ok(put5.status === 200, 'channel 级插件开关 PUT(rag-bridge 重开)')
-      let back5 = false
-      for (let i = 0; i < 8 && !back5; i++) {
-        await sleep(1000)
-        const list5 = await api('GET', `/api/workshop/agent-tools/list?agentId=${member.id}`, { agent: member })
-        const names5 = (list5?.json?.data?.tools ?? list5?.json?.tools ?? []).map(t => t?.name)
-        if (names5.includes('kb_search')) back5 = true
-      }
-      ok(back5, '重开后 kb_search 回归工具清单(热刷新 ≤ 数秒)')
-    }
-  }
-}
-
-// ══ Stage 3:真实诊断(kickoff 常跑;--full 才轮询到完成)═══════════════════
-let runId = ''
-{
-  console.log('\n── Stage 3 真实深度诊断(omp 引擎)──')
-  let r = null
-  for (const mins of [30, 180, 1440]) { // 采样间歇(共享实例节拍被并行调节)→ 逐步加宽窗口
-    r = await invoke(toolInvoker, 'diag_run', {
-      line: LINE,
-      from_ms: Date.now() - mins * 60_000,
-      to_ms: Date.now(),
-      question: `${LINE} 近期数采数据深度根因诊断(three-system-e2e,窗口 ${mins} 分钟)`,
-      scene: 'three_system_e2e',
-    }, 120000)
-    if (resultText(r).includes('runId=')) break
-    console.log(`  … ${mins} 分钟窗无样本,加宽重试`)
-    await sleep(2000)
-  }
-  const text = resultText(r)
-  runId = (text.match(/runId=([a-z0-9-]+)/i) ?? [])[1] ?? ''
-  if (!runId) {
-    // 产线上已有在跑诊断(如事件自动触发)→ 收养它继续验证,而非报错
-    const adopted = (text.match(/run_id=([a-z0-9-]+)/i) ?? [])[1] ?? ''
-    if (adopted) {
-      runId = adopted
-      console.log(`  · 产线已有在跑诊断,收养 run_id=${adopted} 继续验证`)
-    }
-  }
-  ok(Boolean(runId), 'diag_run 异步发起(或收养在跑诊断)拿到 runId', runId || `resp=${JSON.stringify(r.json).slice(0, 260)}`)
-
-  if (FULL && runId) {
-    let done = false
-    let lastText = ''
-    const maxIter = Math.round(Number(process.env.FULL_WAIT_MIN ?? 45) * 3) // 每 20s 一轮
-    for (let i = 0; i < maxIter && !done; i++) {
-      await sleep(20_000)
-      const s = await invoke(toolInvoker, 'diag_status', { run_id: runId }, 30000)
-      lastText = resultText(s)
-      if (/状态=completed/.test(lastText)) done = true
-      else if (/状态=(failed|stopped)/.test(lastText)) break
-      if (i % 6 === 5) console.log(`  … 轮询中(${(i + 1) * 20}s):${(lastText.match(/状态=\S+/) ?? [''])[0]}`)
-    }
-    ok(done, '真实诊断跑至 completed', (lastText.match(/评分=\S+|状态=\S+/g) ?? []).join(' '))
-    if (done) {
-      let stored = ''
-      for (let i = 0; i < 6; i++) {
-        await sleep(5000)
-        const runs = await raw('GET', `${BASE}/api/plugins/diag-bridge/runs`, { token: userToken })
-        const mine = (runs.json?.runs ?? []).find(x => x.runId === runId)
-        stored = JSON.stringify(mine ?? {})
-        if (mine?.stored === true) break
-      }
-      ok(stored.includes('"stored":true'), '报告自动入库(diag-bridge → KB)')
-      let kbHit = ''
-      for (let i = 0; i < 8; i++) {
-        await sleep(5000)
-        const s = await invoke(leadA, 'kb_search', { query: `${LINE} 深度根因诊断 three_system_e2e 结论` }, 60000)
-        kbHit = resultText(s)
-        if (!kbHit.startsWith('未检索到') && kbHit.length > 0) break
-      }
-      ok(!kbHit.startsWith('未检索到') && kbHit.length > 0, 'kb_search 检索到诊断报告/经验', kbHit.split('\n')[0]?.slice(0, 90))
-    }
-  }
-  else {
-    console.log('  ·(未加 --full:不等待诊断完成;完成后的入库由 diag-bridge 轮询器自动完成,可重跑 --full 或用 diag_status 观察)')
-  }
-}
-
-// ══ Stage 4:插件启停(热重载 → 工具与路由同时生灭)═════════════════════════
-{
-  console.log('\n── Stage 4 插件启停 ──')
-  const candidates = [join(ROOT, '.AgentWorkShop', 'plugins-state.json'), join(process.env.USERPROFILE ?? process.env.HOME ?? '', '.AgentWorkShop', 'plugins-state.json')]
-  const statePath = candidates.find(p => existsSync(p))
-  ok(Boolean(statePath), '定位 plugins-state.json', statePath ?? '未找到')
-  if (statePath && leadA?.id) {
-    const readState = () => JSON.parse(readFileSync(statePath, 'utf8'))
-    const writeState = (obj) => {
-      const tmp = `${statePath}.tmp`
-      writeFileSync(tmp, JSON.stringify(obj, null, 2))
-      renameSync(tmp, statePath)
-    }
-    const st0 = readState()
-    const disabled0 = Array.isArray(st0.disabled) ? st0.disabled : []
-    writeState({ ...st0, disabled: [...new Set([...disabled0, 'diag-bridge'])], updatedAt: new Date().toISOString() })
-    // 热重载会停止并重建 agent 运行时,每轮重新取成员(拿最新 token)再断言
-    const freshLead = async () => {
-      const members = await api('GET', `/api/workshop/channels/${channelA}/agents`, { token: userToken })
-      return (envelopeData(members) ?? []).find(m => m?.role === 'lead') ?? leadA
-    }
-    let gone = false
-    for (let i = 0; i < 40 && !gone; i++) { // 共享实例 agent 运行时重建慢,60s 窗
-      await sleep(1500)
-      const fl = await freshLead()
-      const h = await raw('GET', `${BASE}/api/plugins/diag-bridge/health`, { token: userToken })
-      const l = await api('GET', `/api/workshop/agent-tools/list?agentId=${fl.id}`, { agent: fl })
-      const names4 = (l?.json?.data?.tools ?? l?.json?.tools ?? []).map(t => t?.name)
-      gone = h.status === 404 && !names4.includes('diag_run')
-    }
-    ok(gone, '停用 diag-bridge → 路由 404 且 diag_run 从工具清单消失(热重载 + 工具注销)')
-
-    writeState({ ...st0, disabled: disabled0, updatedAt: new Date().toISOString() })
-    let back = false
-    for (let i = 0; i < 25 && !back; i++) {
-      await sleep(1500)
-      const fl = await freshLead()
-      const h = await raw('GET', `${BASE}/api/plugins/diag-bridge/health`, { token: userToken })
-      const l = await api('GET', `/api/workshop/agent-tools/list?agentId=${fl.id}`, { agent: fl })
-      const names4 = (l?.json?.data?.tools ?? l?.json?.tools ?? []).map(t => t?.name)
-      back = h.status === 200 && names4.includes('diag_run')
-    }
-    ok(back, '重新启用 diag-bridge → 路由与工具恢复')
-  }
-}
-
-// ══ 汇总 ══════════════════════════════════════════════════════════════════
-console.log(`\n══ 结果:${pass} 通过 / ${fail} 失败 ══`)
-if (failures.length) {
-  console.error('失败项:')
-  for (const f of failures) console.error(`  - ${f}`)
-}
-if (!FULL && runId) console.log(`\n提示:本次发起的诊断 runId=${runId},完成可加 --full 重跑或调 diag_status 观察。`)
-process.exit(fail > 0 ? 1 : 0)