agentworkshop 0.7.66 → 0.7.70

package/scripts/ask-hitl-e2e.mjs

@@ -0,0 +1,96 @@
+#!/usr/bin/env node
+/**
+ * ask-hitl-e2e.mjs —— 原生 ask 提问型 HITL 的最短真实链路。
+ *
+ * 与 e2e-hitl-live.mjs 的终端注入路径互补:本脚本直接给 omp lead 一个任务,
+ * 要求它调用原生 ask 工具提问;断言 hitl/pending 出现 question 型待办、
+ * options 含 yes/no、应答后任务完成且交付物含用户答案。
+ *
+ * 用法:AW_E2E_TOKEN=<admin token> node scripts/ask-hitl-e2e.mjs [--base ...]
+ */
+const args = process.argv.slice(2)
+const argOf = (k, d = '') => {
+  const i = args.indexOf(k)
+  return i >= 0 && args[i + 1] && !args[i + 1].startsWith('--') ? args[i + 1] : d
+}
+const BASE = argOf('--base', process.env.AW_BASE ?? 'http://127.0.0.1:3001')
+const TOKEN = process.env.AW_E2E_TOKEN ?? process.env.AW_TOKEN ?? ''
+const TAG = Date.now().toString(36)
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const checks = []
+const ok = (name, cond, detail = '') => {
+  console.log(`${cond ? 'PASS' : 'FAIL'} | ${name} | ${String(detail).slice(0, 220)}`)
+  checks.push({ name, ok: !!cond, detail: String(detail).slice(0, 500) })
+  return !!cond
+}
+if (!TOKEN) {
+  console.error('缺少 AW_E2E_TOKEN / AW_TOKEN')
+  process.exit(1)
+}
+async function api(method, path, body) {
+  const res = await fetch(BASE + path, {
+    method,
+    headers: { 'content-type': 'application/json', 'authorization': `Bearer ${TOKEN}` },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(120_000),
+  })
+  return { status: res.status, ...(await res.json().catch(() => ({}))) }
+}
+async function main() {
+  console.log(`━━━ ask HITL 最短链路 @ ${BASE} (tag=${TAG}) ━━━`)
+  const ch = await api('POST', '/api/workshop/channels', {
+    name: `ask-${TAG}`,
+    description: `ask-hitl-e2e ${TAG}`,
+    leadAgent: { name: 'ask-operator', harness: 'omp' },
+  })
+  const channelId = ch.data?.channelId
+  const leadId = ch.data?.leadAgentId
+  ok('omp lead channel 创建', Boolean(channelId && leadId), channelId ?? ch.message)
+  const task = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
+    title: `ask-${TAG}`,
+    description: 'Use the ask tool NOW to ask me exactly one question: "Proceed?" with options yes and no. '
+      + 'Do not do anything else. After I answer, call complete_task with summary set to my exact answer.',
+  })
+  const taskId = task.data?.id
+  ok('ask 任务提交', Boolean(taskId), taskId ?? task.message)
+
+  let item = null
+  const end = Date.now() + 180000
+  while (Date.now() < end && !item) {
+    const p = await api('GET', `/api/workshop/hitl/pending?channelId=${channelId}`)
+    item = (p.data?.items ?? []).find((i) => {
+      const opts = JSON.stringify(i.options ?? []).toLowerCase()
+      return opts.includes('yes') && opts.includes('no')
+    }) ?? null
+    if (!item) await sleep(2500)
+  }
+  ok('hitl/pending 出现 ask 提问型待办', Boolean(item), item ? `kind=${item.kind} method=${item.method} options=${JSON.stringify(item.options)}` : '超时')
+  if (!item) {
+    process.exit(1)
+  }
+  ok('待办语义为 question/select', item.method === 'select' && (item.requestType === 'question' || item.kind === 'omp-dialog'), `kind=${item.kind} requestType=${item.requestType} method=${item.method}`)
+
+  const respond = await api('POST', '/api/workshop/hitl/respond', { kind: item.kind, id: item.id, value: 'yes' })
+  ok('应答 ask(选择 yes)', respond.code === 0, respond.message ?? 'ok')
+
+  let done = null
+  const end2 = Date.now() + 120000
+  while (Date.now() < end2) {
+    await sleep(3000)
+    const s = await api('GET', `/api/workshop/tasks/${taskId}`)
+    done = s.data ?? done
+    if (['COMPLETED', 'FAILED', 'CANCELED'].includes(done?.state)) break
+  }
+  const text = (done?.artifacts ?? []).flatMap(a => a.parts ?? []).map(p => String(p.text ?? '')).join('\n')
+  ok('应答后任务完成且交付物含 yes', done?.state === 'COMPLETED' && /\byes\b/i.test(text), `state=${done?.state} deliverable=${text.slice(0, 160)}`)
+
+  const pass = checks.filter(c => c.ok).length
+  console.log(`\n=== ask HITL: ${pass} PASS / ${checks.length - pass} FAIL ===`)
+  const { writeFileSync } = await import('node:fs')
+  writeFileSync('docs/audit/2026-10-20-harness-acceptance-evidence/us005-ask-hitl.json', JSON.stringify({ at: new Date().toISOString(), channelId, taskId, item, checks }, null, 2))
+  process.exit(pass === checks.length ? 0 : 1)
+}
+main().catch((err) => {
+  console.error(err)
+  process.exit(1)
+})

package/scripts/channel-interaction-smoke.mjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * Channel 交互冒烟（2026-10-19）：消息落历史 + 任务生命周期 + 真实 worker 身份。
+ * 运行：AW_BASE=... AW_TOKEN=... CHANNEL_ID=... node scripts/channel-interaction-smoke.mjs
+ */
+const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3000'
+const TOKEN = process.env.AW_TOKEN
+const CHANNEL_ID = process.env.CHANNEL_ID
+if (!TOKEN || !CHANNEL_ID) throw new Error('AW_TOKEN and CHANNEL_ID required')
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const H = { 'authorization': `Bearer ${TOKEN}`, 'content-type': 'application/json' }
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const results = []
+const ok = (id, name, cond, detail = '') => {
+  results.push({ id, name, pass: Boolean(cond), detail: String(detail).slice(0, 400) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${cond ? '' : ` — ${String(detail).slice(0, 400)}`}`)
+}
+async function api(method, path, body) {
+  const r = await fetch(BASE + path, {
+    method, headers: H, body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(30_000),
+  })
+  const text = await r.text()
+  try {
+    return { status: r.status, ...JSON.parse(text) }
+  }
+  catch {
+    return { status: r.status, raw: text }
+  }
+}
+const data = r => r?.data ?? null
+const tag = `chsmoke${Date.now().toString(36).slice(-5)}`
+
+try {
+  const ch = await api('GET', `/api/workshop/channels/${CHANNEL_ID}`)
+  const activated = await api('POST', `/api/workshop/channels/${CHANNEL_ID}/activate`)
+  console.log(`  channel activate: code=${activated.code} status=${activated.status}`)
+  ok('H1', '频道详情可读', ch.code === 0 && Boolean(data(ch)?.id), `name=${data(ch)?.name}`)
+
+  const ag = await api('GET', `/api/workshop/channels/${CHANNEL_ID}/agents`)
+  const agents = data(ag) ?? []
+  const opt = agents.find(a => a.role === 'worker' && /工艺优化/.test(a.name))
+  ok('H2', '频道内存在启用的工艺优化 worker', Boolean(opt && opt.enabled), `name=${opt?.name} harness=${opt?.harness}`)
+  ok('H3', 'worker 使用真实 omp + deepseek-flash', opt?.harness === 'omp' && opt?.config?.provider === 'deepseek' && opt?.config?.model === 'deepseek-flash', `harness=${opt?.harness} provider=${opt?.config?.provider} model=${opt?.config?.model}`)
+  ok('H4', '频道 lead 实例 token 可读(任务路由证据)', Boolean(agents.find(a => a.role === 'lead')?.token), 'lead token present')
+
+  const before = await api('GET', `/api/workshop/channels/${CHANNEL_ID}/messages?limit=50`)
+  ok('H5', 'Channel 消息历史可读', before.code === 0 && Array.isArray(data(before)), `msgs=${data(before)?.length}`)
+
+  const lead = agents.find(a => a.role === 'lead')
+  const msg = await api('POST', `/api/workshop/channels/${CHANNEL_ID}/messages`, { toAgentId: lead?.id, text: `channel-interaction-${tag}` })
+  ok('H6', 'POST /channels/:id/messages 发送', msg.code === 0, `code=${msg.code} status=${msg.status}`)
+
+  const after = await api('GET', `/api/workshop/channels/${CHANNEL_ID}/messages?limit=50`)
+  ok('H7', '消息持久化到 Channel 历史', after.code === 0 && (data(after) ?? []).some(m => JSON.stringify(m.parts ?? m).includes(`channel-interaction-${tag}`)), `msgs=${data(after)?.length}`)
+
+  const task = await api('POST', `/api/workshop/channels/${CHANNEL_ID}/tasks`, {
+    title: `channel-task-${tag}`, description: 'Channel 交互验收:确认收到并收口', mode: 'goal', modeConfig: { goalCriteria: '收到并收口' },
+  })
+  const taskId = data(task)?.id
+  ok('H8', 'POST /channels/:id/tasks 提交', task.code === 0 && Boolean(taskId), `id=${taskId?.slice(0, 8)} state=${data(task)?.state}`)
+
+  let state = data(task)?.state
+  for (let i = 0; i < 30 && state !== 'COMPLETED' && state !== 'FAILED'; i++) {
+    await sleep(2000)
+    const list = await api('GET', `/api/workshop/channels/${CHANNEL_ID}/tasks`)
+    const mine = (data(list) ?? []).find(x => x.id === taskId)
+    state = mine?.state ?? state
+  }
+  ok('H9', 'Channel 任务生命周期到终态', state === 'COMPLETED', `state=${state}`)
+
+  const list = await api('GET', `/api/workshop/channels/${CHANNEL_ID}/tasks`)
+  ok('H10', '任务在 Channel 任务列表可追溯', (data(list) ?? []).some(x => x.id === taskId), `tasks=${data(list)?.length}`)
+}
+catch (e) {
+  ok('FATAL', '脚本未抛异常', false, e.message)
+}
+const failed = results.filter(x => !x.pass).length
+console.log(`\n${failed === 0 ? '★ ALL PASS' : `✗ ${failed} FAILED`} (${results.length - failed} passed)`)
+process.exit(failed === 0 ? 0 : 1)

package/scripts/data-studio-e2e.mjs

@@ -0,0 +1,332 @@
+/**
+ * data-studio Phase A 端到端验收(plan1 M1 + E1)。
+ *
+ * 覆盖:
+ *  PA1 批量查询:多节点一次返回(每节点≤2000 点);护栏(>8 节点 400 / 省略节点且产线>8 → 400)
+ *  PA2 run 台账(E1):开跑产线 → eda_runs 有行;关账(POST /dcw/runs/:id/close)后
+ *      ended_at 回填 + sample_count 异步回填 >0;runs.json 第 201 批滚丢不再影响查询面
+ *  PA3 批量导出:POST /daq/export(merge)→ job ready → totalRows>0 →
+ *      manifest/merged/nodes 下载 200;路径穿越被拒 404
+ *  PA4 MES 调试台:points 200;未授权/不存在点位 preview 403
+ *  PA5 权限负例:query 指定不可读节点(admin 全量,此处验证不存在节点 → 403)
+ *
+ * 运行:node scripts/data-studio-e2e.mjs <scenario-context.json>
+ */
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs'
+import { join, resolve, dirname } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const CTX = process.argv[2]
+if (!CTX) {
+  console.error('用法: node scripts/data-studio-e2e.mjs <scenario-context.json>')
+  process.exit(1)
+}
+const c = JSON.parse(readFileSync(CTX, 'utf8'))
+const EVID = join(REPO, 'docs', 'audit', 'evidence', '2026-10-21-phase-a')
+mkdirSync(EVID, { recursive: true })
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const randomHex = (n = 8) => Array.from({ length: n }, () => '0123456789abcdef'[Math.floor(Math.random() * 16)]).join('')
+const results = []
+function ok(id, name, cond, detail = '') {
+  results.push({ id, name, pass: Boolean(cond), detail: String(detail).slice(0, 500) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${detail ? ` — ${String(detail).slice(0, 200)}` : ''}`)
+}
+async function api(method, path, body, token = c.adminToken) {
+  const r = await fetch(c.base + path, {
+    method,
+    headers: { ...(body !== undefined ? { 'content-type': 'application/json' } : {}), ...(token ? { authorization: `Bearer ${token}` } : {}) },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(120_000),
+  })
+  const j = await r.json().catch(() => ({}))
+  return { status: r.status, data: j?.data, message: j?.message ?? j?.data?.message ?? '' }
+}
+async function rawGet(path, token = c.adminToken) {
+  const r = await fetch(c.base + path, { headers: { authorization: `Bearer ${token}` }, signal: AbortSignal.timeout(60_000) })
+  const text = await r.text()
+  return { status: r.status, contentType: r.headers.get('content-type') ?? '', text: text.slice(0, 200) }
+}
+
+async function main() {
+  console.log(`━━━ data-studio Phase A E2E @ ${c.base} line=${c.lineId} ━━━`)
+  const daqIds = Object.values(c.daq ?? {})
+  const daq = (await api('GET', '/api/workshop/daq'))?.data
+  const nodeNames = new Map((daq?.nodes ?? []).map(n => [n.id, n]))
+  ok('PA0', '上下文就绪(daq 节点≥2)', daqIds.length >= 2, `daq=${daqIds.length}`)
+
+  // PA0.5 确保产线在跑 + 采样活性(上一轮关账后采样停摆会让查询窗无样本):无条件停/开线,等 ≥3 点
+  await api('POST', `/api/workshop/dcw/lines/${c.lineId}/stop`)
+  await sleep(1200)
+  const st = await api('POST', `/api/workshop/dcw/lines/${c.lineId}/start`, { recipeId: c.recipeId })
+  let freshSamples = 0
+  if (st.status === 200) {
+    const probe = daqIds[0]
+    for (let i = 0; i < 20; i++) {
+      await sleep(2000)
+      const s = await api('GET', `/api/workshop/daq/${probe}/samples?from=${Date.now() - 120_000}&to=${Date.now()}&bucketMs=1000&limit=100`)
+      freshSamples = (s.data?.points ?? []).length
+      if (freshSamples >= 3) break
+    }
+  }
+  ok('PA0.5', '产线开跑且采样活性(探针 ≥3 点)', st.status === 200 && freshSamples >= 3, `status=${st.status} samples=${freshSamples} msg=${st.message.slice(0, 80)}`)
+
+  // ── PA1 批量查询 ──
+  const pick = daqIds.slice(0, 2)
+  const q = await api('GET', `/api/workshop/daq/query?node_ids=${pick.join(',')}&last_minutes=5&agg=avg`)
+  const series = q.data?.series ?? []
+  const pointsOk = series.length === 2 && series.every(s => s.points.length > 0 && s.points.length <= 2000)
+  ok('PA1.1', '批量查询:两节点一次返回且每节点≤2000 点', q.status === 200 && pointsOk,
+    `series=${series.length} pts=${series.map(s => s.points.length).join(',')} bucket=${q.data?.window?.bucketMs}`)
+  const asc = series.every(s => s.points.every((p, i) => i === 0 || p.at >= s.points[i - 1].at))
+  ok('PA1.2', '序列时间升序(ASC 契约)', asc)
+  const over = await api('GET', `/api/workshop/daq/query?node_ids=${daqIds.slice(0, 9).join(',')}&last_minutes=5`)
+  ok('PA1.3', '>8 节点 → 400 护栏', over.status === 400, over.message.slice(0, 120))
+  const omit = await api('GET', `/api/workshop/daq/query?line_id=${c.lineId}&last_minutes=5`)
+  ok('PA1.4', '产线>8 节点省略 node_ids → 400 要求显式指定', omit.status === 400, omit.message.slice(0, 120))
+  // 缓存键含显式 from/to(last_minutes 每次换算为不同 fromMs,命中不了属正确行为)
+  const nowMs = Date.now()
+  const cacheQ = `node_ids=${pick.join(',')}&from=${nowMs - 300_000}&to=${nowMs}&agg=avg`
+  await api('GET', `/api/workshop/daq/query?${cacheQ}`)
+  const cache = await api('GET', `/api/workshop/daq/query?${cacheQ}`)
+  ok('PA1.5', '同参数(显式窗口)二次命中缓存', cache.status === 200 && cache.data?.cached === true)
+
+  // ── PA2 run 台账(E1) ──
+  let runsBefore = await api('GET', `/api/workshop/eda/runs?line_id=${c.lineId}`)
+  let openRun = (runsBefore.data?.runs ?? []).find(r => r.outcome === 'open' && !r.endedAt)
+  if (!openRun) {
+    // 台账无 open 行(旧 run 关账/镜像时序):停线→开线制造全新批次(走完整 createRun 钩子)
+    await api('POST', `/api/workshop/dcw/lines/${c.lineId}/stop`)
+    await sleep(1500)
+    const st = await api('POST', `/api/workshop/dcw/lines/${c.lineId}/start`, { recipeId: c.recipeId })
+    if (st.status !== 200) ok('PA2.0', '重开产线(带配方)', false, st.message.slice(0, 120))
+    await sleep(2500)
+    runsBefore = await api('GET', `/api/workshop/eda/runs?line_id=${c.lineId}`)
+    openRun = (runsBefore.data?.runs ?? []).find(r => r.outcome === 'open' && !r.endedAt)
+  }
+  ok('PA2.1', '开跑产线 → run 台账有行(open)', Boolean(openRun), JSON.stringify(runsBefore.data?.runs?.[0] ?? {}).slice(0, 160))
+  if (openRun) {
+    // 新开一批再关:保证不破坏场景后续阶段的活动批次(关闭的是新批次)
+    const dcwSnap = (await api('GET', '/api/workshop/dcw'))?.data
+    void dcwSnap
+    await api('POST', `/api/workshop/dcw/runs/${openRun.id}/close`)
+    let row = null
+    for (let i = 0; i < 20; i++) {
+      await sleep(1500)
+      const after = await api('GET', `/api/workshop/eda/runs?line_id=${c.lineId}`)
+      row = (after.data?.runs ?? []).find(r => r.id === openRun.id)
+      if (row?.endedAt && (row.sampleCount ?? 0) > 0) break
+    }
+    ok('PA2.2', '关账后 ended_at 回填且 sample_count>0(异步回填)', Boolean(row?.endedAt) && (row?.sampleCount ?? 0) > 0,
+      `ended=${row?.endedAt} samples=${row?.sampleCount}`)
+  }
+
+  // ── PA3 批量导出 ──
+  const ex = await api('POST', '/api/workshop/daq/export', {
+    node_ids: pick, last_minutes: 5, merge: true, title: 'PhaseA 定向导出',
+  })
+  const jobId = ex.data?.job?.id
+  ok('PA3.1', '导出任务受理(running)', ex.status === 200 && Boolean(jobId), JSON.stringify(ex.data?.job ?? ex.message).slice(0, 160))
+  let job = null
+  for (let i = 0; i < 60 && job?.status !== 'ready' && job?.status !== 'failed'; i++) {
+    await sleep(2000)
+    job = (await api('GET', `/api/workshop/daq/export/${jobId}`)).data?.job
+  }
+  ok('PA3.2', '导出完成(ready)且 totalRows>0', job?.status === 'ready' && (job?.result?.totalRows ?? 0) > 0,
+    `status=${job?.status} rows=${job?.result?.totalRows} files=${job?.result?.files?.length} merged=${Boolean(job?.result?.mergedFile)}`)
+  const manifest = await rawGet(`/api/workshop/daq/export-file?job=${jobId}&path=manifest.json`)
+  ok('PA3.3', 'manifest.json 下载 200(application/json)', manifest.status === 200 && manifest.contentType.includes('json'), manifest.text.slice(0, 100))
+  const mergedOk = job?.result?.mergedFile ? (await rawGet(`/api/workshop/daq/export-file?job=${jobId}&path=merged.csv`)).status : 404
+  ok('PA3.4', 'merged.csv 下载 200', mergedOk === 200)
+  const nodeCsv = await rawGet(`/api/workshop/daq/export-file?job=${jobId}&path=nodes/${pick[0]}.csv`)
+  ok('PA3.5', 'nodes/<id>.csv 下载 200', nodeCsv.status === 200 && nodeCsv.contentType.includes('csv'), nodeCsv.text.slice(0, 80))
+  const trav = await rawGet(`/api/workshop/daq/export-file?job=${jobId}&path=${encodeURIComponent('../platform.log')}`)
+  ok('PA3.6', '路径穿越被拒(404)', trav.status === 404, `status=${trav.status}`)
+
+  // ── PA4 MES 调试台(注塑预设无 mes-rest 点位:负例+形状) ──
+  const pts = await api('GET', '/api/workshop/mes/points')
+  ok('PA4.1', 'MES 点位目录 200(空目录合法)', pts.status === 200 && Array.isArray(pts.data?.points), `count=${pts.data?.count}`)
+  const pv = await api('POST', '/api/workshop/mes/preview', { node_id: 'dw-not-exist', from: new Date(Date.now() - 60000).toISOString(), to: new Date().toISOString() })
+  ok('PA4.2', '不存在/不可读点位 preview → 403', pv.status === 403, pv.message.slice(0, 100))
+
+  // ── PA5 权限负例 ──
+  const nf = await api('GET', `/api/workshop/daq/query?node_ids=dn-never-exists&last_minutes=5`)
+  ok('PA5.1', '不存在节点查询 → 403', nf.status === 403, nf.message.slice(0, 100))
+
+  // ── PB1 图表 CRUD + B4 可见性 ──
+  const mk = await api('POST', '/api/workshop/eda/charts', {
+    title: 'PhaseB 私图', viz_type: 'trend',
+    datasource: { lineId: c.lineId, nodeIds: pick, preset: '60', agg: 'avg' },
+    encoding: { y: pick.map(id => ({ nodeId: id, name: id, unit: '', axis: 'L' })) },
+    visibility: 'private',
+  })
+  const chartId = mk.data?.chart?.id
+  ok('PB1.1', '创建私图 200', mk.status === 200 && Boolean(chartId), JSON.stringify(mk.data?.chart ?? mk.message).slice(0, 120))
+  const noLine = await api('POST', '/api/workshop/eda/charts', { title: 'x', viz_type: 'trend', visibility: 'line' })
+  ok('PB1.2', 'visibility=line 无 line_id → 400', noLine.status === 400, noLine.message.slice(0, 100))
+  const patched = await api('PATCH', `/api/workshop/eda/charts/${chartId}`, { title: 'PhaseB 私图 v2' })
+  ok('PB1.3', 'PATCH 版本自增', patched.status === 200 && patched.data?.chart?.version === 2)
+  // B4 跨用户:临时开启自助注册 → 注册 viewer → 断言 → 关回
+  const viewerEmail = `viewer-${randomHex(6)}-${Date.now().toString(36)}@awshop.local`
+  const allowKey = 'security.allowRegistration'
+  await api('PATCH', '/api/system/settings', { override: { [allowKey]: true } })
+  const reg = await api('POST', '/api/users/register', { name: `viewer-${randomHex(6)}`, email: viewerEmail, password: `Vw-${randomHex(12)}` })
+  const viewerToken = reg.data?.token
+  await api('PATCH', '/api/system/settings', { override: { [allowKey]: false } })
+  if (viewerToken) {
+    const viewerRead = await api('GET', `/api/workshop/eda/charts/${chartId}`, undefined, viewerToken)
+    ok('PB1.4', '他人读私图 → 404(B4)', viewerRead.status === 404, `status=${viewerRead.status}`)
+    const viewerList = await api('GET', '/api/workshop/eda/charts', undefined, viewerToken)
+    ok('PB1.5', '他人列表不含该私图', !(viewerList.data?.charts ?? []).some(x => x.id === chartId))
+  }
+  else {
+    ok('PB1.4', 'viewer 注册失败,跳过跨用户断言', false, reg.message.slice(0, 100))
+  }
+
+  // ── PB2 golden(E2) ──
+  const runsAll = await api('GET', `/api/workshop/eda/runs?line_id=${c.lineId}`)
+  // golden 需单节点 ≥n_bins 点:选样本最多的关账批 + 该批 cnt 最大的节点,n_bins=20(demo 同款自适应)
+  const closedRun = (runsAll.data?.runs ?? [])
+    .filter(r => r.endedAt && (r.sampleCount ?? 0) >= 100)
+    .sort((a, b) => (b.sampleCount ?? 0) - (a.sampleCount ?? 0))[0]
+  let goldenNodeId = null
+  if (closedRun) {
+    for (let i = 0; i < 20 && !goldenNodeId; i++) {
+      await sleep(1500)
+      const feats = (await api('GET', `/api/workshop/eda/features?run_id=${closedRun.id}&limit=500`)).data?.features ?? []
+      // 恒值节点(std=0)的 golden 全桶零方差,偏差分按设计跳过零方差桶→无重叠;只在变值节点里选
+      goldenNodeId = feats.filter(f => (f.std ?? 0) > 0).sort((a, b) => (b.cnt ?? 0) - (a.cnt ?? 0))[0]?.nodeId ?? null
+    }
+  }
+  const goldenNode = goldenNodeId ?? pick[0]
+  if (closedRun && goldenNode) {
+    const gb = await api('POST', '/api/workshop/eda/golden', { run_id: closedRun.id, node_id: goldenNode, n_bins: 20 })
+    ok('PB2.1', '从关账批次生成 golden 画像', gb.status === 200 && (gb.data?.golden?.profile?.length ?? 0) > 0,
+      `bins=${gb.data?.golden?.profile?.length} fp=${JSON.stringify(gb.data?.golden?.fingerprint ?? {}).slice(0, 120)}`)
+    const gs = await api('GET', `/api/workshop/eda/golden/single?recipe_id=${closedRun.recipeId}&node_id=${goldenNode}`)
+    ok('PB2.2', 'single 取回画像(叠加用)', gs.status === 200 && gs.data?.golden?.profile?.length > 0)
+    const dev = await api('GET', `/api/workshop/eda/golden/deviation?run_id=${closedRun.id}&node_id=${goldenNode}`)
+    ok('PB2.3', '偏差分可算(自身 vs golden,分数有限)', dev.status === 200 && Number.isFinite(dev.data?.score), `score=${dev.data?.score} bins=${dev.data?.bins}`)
+  }
+  else {
+    ok('PB2.1', '无已关账批次,golden 断言跳过', false, '需先关账一个有样本的 run(PA2)')
+  }
+
+  const nodeSummary = pick.map(id => `${id}=${nodeNames.get(id)?.name ?? '?'}`).join(',')
+  // ── PC: Phase C(E3 特征/E4 SPC/E5 共性/E8 上下文) ──
+  const featRun = (runsAll.data?.runs ?? []).find(r => r.endedAt && (r.sampleCount ?? 0) > 0)
+  if (featRun) {
+    // 等 E3 关账钩子的特征队列跑完(并发=1;样本少时秒级)
+    let feats = []
+    for (let i = 0; i < 20; i++) {
+      await sleep(1500)
+      feats = (await api('GET', `/api/workshop/eda/features?run_id=${featRun.id}`)).data?.features ?? []
+      if (feats.length > 0) break
+    }
+    ok('PC1.1', 'E3 特征提取:关账批次有特征行', feats.length > 0, `rows=${feats.length} sample=${JSON.stringify(feats[0] ?? {}).slice(0, 160)}`)
+    ok('PC1.2', 'E3 判定语义:参考带不足 3 批时仅记录不判定(或判定字段有限)', feats.every(f => f.zScore == null || Number.isFinite(f.zScore)))
+    const jobs = (await api('GET', '/api/workshop/eda/features/jobs')).data?.jobs ?? []
+    ok('PC1.3', 'E3 特征任务账本有 done 行', jobs.some(j => j.status === 'done' && j.runId === featRun.id), JSON.stringify(jobs[0] ?? {}).slice(0, 120))
+
+    // E4 SPC:注册 + 重算(本环境 run<25,enabled=0 是正确冷启动语义)+ 点序列
+    const spcNode = pick[0]
+    const spcCreate = await api('POST', '/api/workshop/eda/spc', { line_id: c.lineId, node_id: spcNode, kind: 'i_mr' })
+    const spcId = spcCreate.data?.chart?.id
+    ok('PC2.1', 'E4 注册控制图', spcCreate.status === 200 && Boolean(spcId), JSON.stringify(spcCreate.data?.chart ?? spcCreate.message).slice(0, 120))
+    const recompute = await api('POST', `/api/workshop/eda/spc/${spcId}/recompute`)
+    ok('PC2.2', 'E4 重算控制限(run<25 → enabled=0 为正确冷启动语义)', recompute.status === 200 && recompute.data?.chart?.enabled === false && recompute.data?.chart?.nPoints > 0,
+      `n=${recompute.data?.chart?.nPoints} enabled=${recompute.data?.chart?.enabled}`)
+    const spcDetail = await api('GET', `/api/workshop/eda/spc/${spcId}`)
+    ok('PC2.3', 'E4 详情+点序列 200', spcDetail.status === 200 && Array.isArray(spcDetail.data?.points))
+    const spcBad = await api('POST', '/api/workshop/eda/spc', { line_id: c.lineId, node_id: spcNode, kind: 'ma_magic' })
+    ok('PC2.4', 'E4 非法 kind → 400', spcBad.status === 400)
+  }
+
+  // E5 commonality
+  const comNode = await api('GET', `/api/workshop/eda/commonality?line_id=${c.lineId}&factor=node`)
+  ok('PC3.1', 'E5 共性分析(node 因子)200 且行有限', comNode.status === 200 && Array.isArray(comNode.data?.rows), `rows=${comNode.data?.rows?.length} baseline=${comNode.data?.baselineBadRate}`)
+  const comHour = await api('GET', `/api/workshop/eda/commonality?line_id=${c.lineId}&factor=hour`)
+  ok('PC3.2', 'E5 hour 因子可用', comHour.status === 200)
+  const comBad = await api('GET', `/api/workshop/eda/commonality?line_id=${c.lineId}&factor=woo`)
+  ok('PC3.3', 'E5 非法因子 → 400', comBad.status === 400)
+
+  // E8 上下文:节点 PATCH chamber → commonality chamber 因子可见
+  const patchCh = await api('PATCH', `/api/workshop/daq/${pick[0]}`, { chamber: 'CH-A' })
+  if (patchCh.status === 200) {
+    const comCh = await api('GET', `/api/workshop/eda/commonality?line_id=${c.lineId}&factor=chamber`)
+    ok('PC4.1', 'E8 chamber 字段 + chamber 因子共性', comCh.status === 200 && (comCh.data?.rows ?? []).some(r => r.factorValue === 'CH-A'), JSON.stringify(comCh.data?.rows ?? []).slice(0, 160))
+  }
+  else {
+    ok('PC4.1', 'E8 节点 chamber PATCH(端点不支持该字段则如实记)', patchCh.status === 200, `status=${patchCh.status}`)
+  }
+
+  // ── PD: Phase D(E7 OCAP/E6 VM 面/M3 看板+派生/E8 段定义) ──
+  // E7 OCAP:开单 → 追加步骤 → 关单(弱关联) → 清单可见
+  const alarmRef = `ops:${Date.now().toString(36)}`
+  const oc = await api('POST', '/api/workshop/eda/ocap', { alarm_id: alarmRef, run_id: openRun?.id, node_id: pick[0], title: 'PhaseD 处置单' })
+  const ocId = oc.data?.record?.id
+  ok('PD1.1', 'E7 开 OCAP 处置单', oc.status === 200 && Boolean(ocId), JSON.stringify(oc.data?.record ?? oc.message).slice(0, 140))
+  if (ocId) {
+    await api('PATCH', `/api/workshop/eda/ocap/${ocId}`, { step: '现场核查完成,无设备异常' })
+    const closed = await api('PATCH', `/api/workshop/eda/ocap/${ocId}`, { status: 'closed', linked_exploration_id: 'opt-not-exist' })
+    ok('PD1.2', 'E7 关单 + 弱关联(stale 不报错)', closed.status === 200 && closed.data?.record?.status === 'closed'
+    && closed.data?.record?.linkedExplorationExists === false, JSON.stringify(closed.data?.record ?? {}).slice(0, 160))
+    const ocList = await api('GET', `/api/workshop/eda/ocap?status=closed`)
+    ok('PD1.3', 'E7 清单可见(终态过滤)', (ocList.data?.records ?? []).some(x => x.id === ocId))
+  }
+
+  // E6 VM 面:模型不存在 → 404(入口语义;VM 全链训练依赖 AML 作业)
+  const vmNoModel = await api('POST', '/api/workshop/eda/vm/predict', { model_id: 'aml-none', run_id: openRun?.id })
+  ok('PD2.1', 'E6 VM 推理入口:模型不存在 → 404', vmNoModel.status === 404, vmNoModel.message.slice(0, 100))
+
+  // M3 看板:建板(内嵌 PB 私图)→ 详情含 chart → 布局 PATCH
+  const bd = await api('POST', '/api/workshop/eda/dashboards', { title: 'PhaseD 看板', layout: [{ chartId, x: 0, y: 0, w: 6, h: 3 }], visibility: 'private' })
+  const bdId = bd.data?.dashboard?.id
+  ok('PD3.1', 'M3 创建看板', bd.status === 200 && Boolean(bdId), JSON.stringify(bd.data?.dashboard ?? bd.message).slice(0, 120))
+  if (bdId) {
+    const bdDetail = await api('GET', `/api/workshop/eda/dashboards/${bdId}`)
+    ok('PD3.2', 'M3 看板详情内嵌 chart(B4 判定随行)', bdDetail.status === 200 && bdDetail.data?.charts?.length === 1 && bdDetail.data?.charts?.[0]?.inaccessible === false,
+      JSON.stringify(bdDetail.data?.charts ?? []).slice(0, 140))
+    const saved = await api('PATCH', `/api/workshop/eda/dashboards/${bdId}`, { layout: [{ chartId, x: 0, y: 0, w: 12, h: 3 }] })
+    ok('PD3.3', 'M3 布局保存(version 自增)', saved.status === 200 && saved.data?.dashboard?.version >= 2)
+    if (viewerToken) {
+      const vDetail = await api('GET', `/api/workshop/eda/dashboards/${bdId}`, undefined, viewerToken)
+      ok('PD3.4', 'M3 他人读看板:chart 不泄露(404 或 inaccessible=true)', vDetail.status === 404 || vDetail.data?.charts?.[0]?.inaccessible === true,
+        `status=${vDetail.status}`)
+    }
+  }
+
+  // M3 派生数据集:movavg+delta 管道 + data.csv 下载
+  const dv = await api('POST', '/api/workshop/eda/derived', {
+    title: 'PhaseD 派生', node_ids: pick, last_minutes: 5, ops: [{ kind: 'movavg', window: 5 }, { kind: 'delta' }],
+  })
+  const dvId = dv.data?.jobId
+  ok('PD4.1', 'M3 派生数据集生成', dv.status === 200 && Boolean(dvId) && (dv.data?.rows ?? 0) > 0, JSON.stringify(dv.data ?? dv.message).slice(0, 140))
+  if (dvId) {
+    const dvFile = await rawGet(`/api/workshop/daq/export-file?job=${dvId}&path=data.csv`)
+    ok('PD4.2', 'M3 派生 data.csv 可下载', dvFile.status === 200 && dvFile.contentType.includes('csv'), dvFile.text.slice(0, 80))
+  }
+  const dvBad = await api('POST', '/api/workshop/eda/derived', { node_ids: pick, last_minutes: 5, ops: [{ kind: 'rm-rf' }] })
+  ok('PD4.3', 'M3 非法算子 → 400(白名单)', dvBad.status === 400)
+
+  // E8 段定义:配方两段 → 手动重算特征按段拆分
+  await api('POST', '/api/workshop/eda/run-segments', { recipe_id: c.recipeId, seq: 1, name: 's1', phase_from: 0, phase_to: 0.5 })
+  const seg = await api('POST', '/api/workshop/eda/run-segments', { recipe_id: c.recipeId, seq: 2, name: 's2', phase_from: 0.5, phase_to: 1 })
+  ok('PD5.1', 'E8 相位段定义', seg.status === 200 && (seg.data?.segments?.length ?? 0) >= 2, JSON.stringify(seg.data?.segments ?? seg.message).slice(0, 140))
+  if (featRun) {
+    const rerun = await api('POST', '/api/workshop/eda/features/run', { run_id: featRun.id })
+    const segRows = rerun.status === 200 ? (await api('GET', `/api/workshop/eda/features?run_id=${featRun.id}`)).data?.features ?? [] : []
+    const segmented = segRows.filter(f => f.segment !== '')
+    ok('PD5.2', 'E8 重算特征按段拆分', rerun.status === 200 && segmented.length > 0, `segmented=${segmented.length}/${segRows.length}`)
+  }
+
+  writeFileSync(join(EVID, 'phase-a-e2e.json'), JSON.stringify({ at: new Date().toISOString(), base: c.base, lineId: c.lineId, nodes: nodeSummary, queryWindow: q.data?.window, runOpened: openRun?.id ?? null, exportJob: job, mesPoints: pts.data?.count ?? 0, results }, null, 2))
+
+  const pass = results.filter(r => r.pass).length
+  console.log(`\n═══ data-studio Phase A: ${pass}/${results.length} PASS ═══`)
+  if (pass !== results.length) process.exitCode = 1
+}
+main().catch((e) => {
+  console.error(e)
+  process.exitCode = 1
+})