agentworkshop 0.7.70 → 0.8.0

package/scripts/e2e-simulator-optimizer.mjs

@@ -0,0 +1,262 @@
+#!/usr/bin/env node
+/* eslint-disable @stylistic/max-statements-per-line */
+/**
+ * Physical PLC smoke and optional collected-data training against an isolated AW home.
+ * The simulator runs from a fresh source copy; existing :4010 and business records are untouched.
+ * No truth/optimum endpoint is consumed. Not a benefit benchmark or an autonomous experiment runner.
+ *
+ * AW_PHYSICAL_CONTEXT=<JSON with base/token/home> node scripts/e2e-simulator-optimizer.mjs
+ * Defaults to six 100 s, 1 Hz runs when DAQ infrastructure is healthy (2/2/2 split).
+ * Exit: 0 all attempted checks passed, 1 failure, 2 blocked downstream coverage.
+ */
+import { spawn } from 'node:child_process'
+import { cpSync, existsSync, mkdirSync, mkdtempSync, openSync, readFileSync, symlinkSync, writeFileSync } from 'node:fs'
+import { createServer } from 'node:net'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const contextFile = process.env.AW_PHYSICAL_CONTEXT || join(REPO, '.omc', 'optimizer-full-live-20261023', 'live-context.json')
+const context = JSON.parse(readFileSync(contextFile, 'utf8'))
+const BASE = String(context.base || '')
+const token = String(context.token || '')
+const allowed = new Set(['127.0.0.1', 'localhost', '[::1]'])
+if (!allowed.has(new URL(BASE).hostname) || !token) throw new Error('Only an authenticated loopback test instance is allowed')
+if (!/aw-optimizer-live-e2e|optimizer-physical/i.test(String(context.home || ''))) throw new Error('Expected an explicitly isolated optimizer test home')
+const SIM_PORT = Number(process.env.AW_PHYSICAL_SIM_PORT || 4020)
+const MQTT_PORT = Number(process.env.AW_PHYSICAL_MQTT_PORT || 18840)
+const SIM = `http://127.0.0.1:${SIM_PORT}`
+const TAG = `phy${Date.now().toString(36)}`
+const ROOT = mkdtempSync(join(REPO, '.omc', 'optimizer-physical-'))
+const EVID = join(REPO, 'docs', 'audit', 'evidence', '2026-10-23-optimizer-physical', TAG)
+mkdirSync(EVID, { recursive: true })
+const checks = []
+const scenes = []
+let simulator
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+const record = (id, name, status, detail = '') => {
+  checks.push({ id, name, status, detail })
+  console.log(`${status.toUpperCase()} [${id}] ${name} ${typeof detail === 'string' ? detail : JSON.stringify(detail)}`)
+}
+const check = (id, name, pass, detail = '') => record(id, name, pass ? 'pass' : 'fail', detail)
+async function api(base, method, path, body, auth = false) {
+  if (!allowed.has(new URL(base).hostname) || !path.startsWith('/api/')) throw new Error('Loopback API boundary')
+  if (/\/plant\/(truth|optimum)/.test(path)) throw new Error('Truth is unavailable to this harness')
+  const response = await fetch(base + path, {
+    method, headers: { 'content-type': 'application/json', ...(auth ? { authorization: `Bearer ${token}` } : {}) },
+    ...(body === undefined ? {} : { body: JSON.stringify(body) }), signal: AbortSignal.timeout(120_000),
+  })
+  return { status: response.status, ...await response.json().catch(() => ({})) }
+}
+const aw = (method, path, body) => api(BASE, method, path, body, true)
+const sim = (method, path, body) => api(SIM, method, path, body)
+const error = result => ({ status: result.status, code: result?.data?.error?.code || result.code, message: result.message || result.statusMessage })
+const need = (response, key, label) => {
+  const value = response?.data?.[key]
+  if (response.status !== 200 || !value) throw new Error(`${label}: ${JSON.stringify(error(response))}`)
+  return value
+}
+async function assertFree(port) {
+  const server = createServer()
+  await new Promise((resolvePromise, reject) => { server.once('error', reject); server.listen(port, '127.0.0.1', resolvePromise) })
+  await new Promise(resolvePromise => server.close(resolvePromise))
+}
+async function bootSimulator() {
+  if (process.env.AW_PHYSICAL_SIM_ROOT) {
+    if (!resolve(process.env.AW_PHYSICAL_SIM_ROOT).startsWith(join(REPO, '.omc', 'optimizer-physical-'))) throw new Error('Unexpected simulator runtime root')
+    if ((await sim('GET', '/api/nodes')).status !== 200) throw new Error('Prestarted isolated simulator is unavailable')
+    return
+  }
+  await assertFree(SIM_PORT)
+  await assertFree(MQTT_PORT)
+  const dest = join(ROOT, 'simulator')
+  mkdirSync(dest)
+  cpSync(join(REPO, 'plc-node-simulator', 'src'), join(dest, 'src'), { recursive: true })
+  cpSync(join(REPO, 'plc-node-simulator', 'package.json'), join(dest, 'package.json'))
+  const modules = join(REPO, 'plc-node-simulator', 'node_modules')
+  if (!existsSync(modules)) throw new Error('Simulator dependencies missing; no automatic installation')
+  symlinkSync(modules, join(dest, 'node_modules'), process.platform === 'win32' ? 'junction' : 'dir')
+  const log = openSync(join(ROOT, 'simulator.log'), 'a')
+  simulator = spawn(process.execPath, [join(REPO, 'node_modules', 'tsx', 'dist', 'cli.mjs'), join(dest, 'src', 'server', 'index.ts')], {
+    cwd: dest, env: { ...process.env, SIM_PORT: String(SIM_PORT), MQTT_BROKER_PORT: String(MQTT_PORT), NO_PROXY: '127.0.0.1,localhost' },
+    stdio: ['ignore', log, log], windowsHide: true,
+  })
+  for (let i = 0; i < 80; i++) {
+    if (simulator.exitCode !== null) throw new Error(`Simulator exited ${simulator.exitCode}; ${join(ROOT, 'simulator.log')}`)
+    try { if ((await sim('GET', '/api/nodes')).status === 200) return }
+    catch { /* starting */ }
+    await sleep(500)
+  }
+  throw new Error('Simulator boot timeout')
+}
+async function loadScene(key, label, mvName, cvName, sourceDevice) {
+  const blueprint = (await sim('GET', `/api/presets/${key}`)).data
+  if (!blueprint?.plantModel) throw new Error(`Missing physical blueprint ${key}`)
+  for (const node of blueprint.nodes) {
+    node.config ||= {}
+    if (node.config.host) node.config.host = '127.0.0.1'
+    if (typeof node.config.port === 'number') { node.config.port += 1000; await assertFree(node.config.port) }
+    if (node.protocol === 'mqtt') node.config.brokerUrl = `mqtt://127.0.0.1:${MQTT_PORT}`
+    const created = await sim('POST', '/api/nodes', node)
+    if (created.status !== 200) throw new Error(`Simulator node ${node.id}: ${JSON.stringify(error(created))}`)
+  }
+  const plant = { ...blueprint.plantModel, id: label, seed: 42, timeScale: 1, truthExport: false }
+  const loaded = await sim('PUT', '/api/plant/config', { plantModel: plant, warm: true, upsert: true })
+  check(`${label}.plant`, 'Physical model loaded at real time scale', loaded.status === 200, { kind: plant.kind || 'castfilm', timeScale: 1 })
+  const exported = []
+  for (const node of blueprint.nodes) {
+    const result = await sim('GET', `/api/nodes/${node.id}/export`)
+    for (const item of result?.data?.items || []) exported.push({ ...item, deviceId: node.id })
+  }
+  const mv = exported.find(item => item.deviceId === sourceDevice && item.signal === mvName)
+  const cv = exported.find(item => item.signal === cvName)
+  if (!mv || !cv) throw new Error(`${label}: missing MV/CV exports`)
+  const line = need(await aw('POST', '/api/workshop/dcw/lines', { name: `${TAG}-${label}`, simulated: true, simSceneId: key }), 'line', 'line')
+  const product = need(await aw('POST', '/api/workshop/dcw/products', { name: `${TAG}-${label}`, lineId: line.id }), 'product', 'product')
+  const template = need(await aw('POST', '/api/workshop/dcw/templates', { name: `${TAG}-${label}`, unit: mv.unit, min: mv.min, max: mv.max, decimals: mv.decimals || 0 }), 'template', 'template')
+  const initial = label === 'film' ? 140 : 710
+  const control = need(await aw('POST', '/api/workshop/dcw', { templateRef: template.key, name: `${TAG}-${label}-MV`, driver: mv.driver, driverConfig: mv.driverConfig, lineId: line.id, min: mv.min, max: mv.max, unit: mv.unit, stepLimit: 60, writeLockSeconds: 0, holdIntervalMs: 0, readIntervalMs: 500 }), 'node', 'control')
+  const state = { label, key, line, product, control, initial, mv, cv, daq: [], runs: [] }
+  scenes.push(state)
+  // One exposed scalar for each available protocol; include both training channels.
+  const selected = [mv, cv]
+  for (const driver of ['modbus-tcp', 'modbus-rtu', 'opcua', 'mqtt', 'http']) {
+    if (selected.some(item => item.driver === driver)) continue
+    const item = exported.find(item => item.driver === driver && !item.format && !(item.driverConfig?.jsonKey))
+    if (item) selected.push(item)
+  }
+  for (const [i, item] of selected.entries()) {
+    const probe = await aw('POST', '/api/workshop/daq/test-driver', { driver: item.driver, driverConfig: item.driverConfig })
+    check(`${label}.probe.${i}`, `Real ${item.driver} DAQ driver reads exposed ${item.signal}`, probe.status === 200 && probe.data?.test?.ok === true, probe.data?.test || error(probe))
+    const node = need(await aw('POST', '/api/workshop/daq', { templateRef: 'daq-temp-tc', name: `${TAG}-${label}-${i}`, driver: item.driver, driverConfig: item.driverConfig, lineId: line.id, min: item.min, max: item.max, unit: item.unit, intervalMs: 500, publishIntervalMs: 0 }), 'node', 'DAQ create')
+    state.daq.push({ ...node, export: item })
+  }
+  const written = await aw('POST', `/api/workshop/dcw/${control.id}/write`, { value: initial + 5 })
+  check(`${label}.write`, 'Application DCW writes through real PLC protocol', written.status === 200 && written.data?.outcome?.ok === true, written.data?.outcome || error(written))
+  const readback = await aw('POST', '/api/workshop/daq/test-driver', { driver: mv.driver, driverConfig: mv.driverConfig })
+  const probeValue = Number(readback.data?.test?.value ?? readback.data?.test?.preview?.value)
+  // Dedicated simulator node is the independent exposed readback when test-driver response omits value.
+  const simNode = (await sim('GET', '/api/nodes')).data?.find(node => node.id === mv.deviceId)
+  const signal = simNode?.signals?.find(item => item.name === mvName)
+  const observed = Number(signal?.value ?? signal?.runtime?.value ?? probeValue)
+  check(`${label}.readback`, 'Exposed PLC setpoint equals application write', Math.abs(observed - initial - 5) <= 0.01, { expected: initial + 5, observed })
+  state.recipe = need(await aw('POST', '/api/workshop/dcw/recipes', { name: `${TAG}-${label}`, productId: product.id, params: [{ nodeId: control.id, templateRef: template.key, value: initial, min: mv.min, max: mv.max, stepLimit: 60 }], daqWindows: state.daq.map(node => ({ nodeId: node.id, min: node.export.min, max: node.export.max })) }), 'recipe', 'recipe')
+  return state
+}
+function specOf(scene) {
+  return {
+    schemaVersion: 2, id: `${TAG}-${scene.label}`, version: 1, lineId: scene.line.id, productId: scene.product.id, recipeId: scene.recipe.id, recipeVersion: scene.recipe.version || 1,
+    conditions: [{ id: 'physical', match: [{ field: 'recipeId', op: 'eq', value: scene.recipe.id }] }],
+    variables: [
+      { id: 'mv', nodeId: scene.daq[0].id, controlNodeId: scene.control.id, role: 'mv', field: 'value', unit: scene.mv.unit, scale: 1, offset: 0, delayMs: 0, min: scene.mv.min, max: scene.mv.max, maxStep: 30 },
+      { id: 'cv', nodeId: scene.daq[1].id, role: 'cv', field: 'value', unit: scene.cv.unit, scale: 1, offset: 0, min: scene.cv.min, max: scene.cv.max },
+    ],
+    timing: { beatMs: 1000, historySteps: 8, horizonSteps: 4, fixedDt: true },
+    trainer: { ref: 'linear_arx@1', config: { arOrder: 1, inputOrder: 1, ridgeLambda: 1e-4, standardize: true } },
+    datasetPolicy: { split: { valRatio: 0.4, testRatio: 0.4, seed: 42 }, cleaning: { hampelK: 0, maxInterpMs: 1000 } },
+    gatePolicyRef: 'process-model.gates@1', modelInterface: { id: 'linear_state_space', version: 1, inputSemantics: 'setpoint', mode: 'state_space' },
+    effectiveDomain: { mv: { mv: { min: scene.mv.min, max: scene.mv.max, maxStep: 30 } }, cv: { cv: { min: scene.cv.min, max: scene.cv.max } } }, purpose: 'mpc_surrogate',
+  }
+}
+async function startRun(scene) {
+  const started = await aw('POST', `/api/workshop/dcw/lines/${scene.line.id}/start`, { recipeId: scene.recipe.id })
+  check(`${scene.label}.run.${scene.runs.length}`, 'Real application line start opens a tagged collection window', started.status === 200 && Boolean(started.data?.run?.id), error(started))
+  if (started.data?.run?.id) scene.runs.push(started.data.run.id)
+}
+async function trainAndSolve(scene) {
+  const spec = specOf(scene)
+  const registered = await aw('POST', '/api/workshop/process-model/specs', spec)
+  check(`${scene.label}.spec`, 'Physical scene configurable ProcessModelSpec accepted', registered.status === 200, error(registered))
+  await aw('POST', `/api/workshop/process-model/specs/${spec.id}/publish?version=1`)
+  const built = await aw('POST', '/api/workshop/process-model/datasets', spec)
+  if (built.status !== 200) { record(`${scene.label}.dataset`, 'Physical collected-data dataset/train/solve', 'blocked', error(built)); return }
+  check(`${scene.label}.dataset`, 'Dataset built exclusively from actual collector data', built.data?.rowCount >= 1 && built.data?.lineageVerified === 1, built.data)
+  const eligible = await aw('POST', '/api/workshop/process-model/eligibility', { specId: spec.id, specVersion: 1, datasetId: built.data.datasetId, scope: 'simulation' })
+  const report = eligible.data?.report
+  check(`${scene.label}.eligibility`, 'Physical intervention data eligibility evaluated', eligible.status === 200 && Boolean(report), report || error(eligible))
+  const submit = await aw('POST', '/api/workshop/process-model/train', { spec, datasetId: built.data.datasetId, modelName: `${TAG}-${scene.label}` })
+  let job = submit.data?.job
+  for (let i = 0; job?.id && !['done', 'failed', 'cancelled', 'timeout', 'interrupted'].includes(job.status) && i < 240; i++) {
+    await sleep(500)
+    job = (await aw('GET', `/api/workshop/aml/jobs/${job.id}`)).data?.job
+  }
+  if (!job?.modelId || report?.optimizationEligible !== true) { record(`${scene.label}.train`, 'Training, model gates and optimization eligibility', 'blocked', { job, report }); return }
+  check(`${scene.label}.train`, 'Physical collected-data training registers a model', job.status === 'done', { jobId: job.id, modelId: job.modelId })
+  const profileId = `${TAG}-${scene.label}-profile`
+  const profile = await aw('POST', '/api/workshop/optimization/profiles', { schemaVersion: 1, id: profileId, version: 1, modelRef: { modelId: job.modelId, artifactKind: 'linear_state_space@1', artifactHash: '', modelInterface: 'linear_state_space', stage: 'candidate' }, processSpecRef: `${spec.id}@1`, conditionIds: [], status: 'draft', problemTemplateRef: 'linear_mpc_quadratic@1', solverRef: 'osqp_mpc@1', solverVersion: '1', problemConfig: { linear_mpc_quadratic: { cvWeights: { cv: 1 }, duWeights: { mv: 0.1 }, terminalWeight: 2, targets: { cv: scene.label === 'film' ? 15 : 710 } } } })
+  if (profile.status !== 200) { record(`${scene.label}.profile`, 'Physical model Profile creation', 'blocked', error(profile)); return }
+  const published = await aw('POST', `/api/workshop/optimization/profiles/${profileId}/publish?version=1`)
+  check(`${scene.label}.publish`, 'Physical model Profile publishes', published.status === 200, error(published))
+  const channel = (await aw('POST', '/api/workshop/channel-templates/chtpl-aml-optimization-default/instantiate', { name: `${TAG}-${scene.label}` })).data
+  const agentId = channel?.leadAgentId || channel?.agents?.find(agent => agent.role === 'lead')?.id
+  const workspace = (await aw('POST', '/api/workshop/workspaces', { name: `${TAG}-${scene.label}` })).data
+  await aw('POST', `/api/workshop/workspaces/${workspace.id}/channels/${channel.channelId}`)
+  const binding = await aw('POST', '/api/workshop/optimization/bindings', { workspaceId: workspace.id, channelId: channel.channelId, agentInstanceId: agentId, profileId, profileVersion: 1, mode: 'recommendation' })
+  check(`${scene.label}.binding`, 'Physical profile binds to actual Agent instance', binding.status === 200, error(binding))
+  await startRun(scene)
+  await sleep(12_000)
+  const result = await aw('POST', '/api/workshop/agent-tools/invoke', { agentId, tool: 'optimizer_solve', args: {} })
+  let candidate
+  try { candidate = JSON.parse(result.data?.result?.text || '{}') }
+  catch { /* recorded below */ }
+  check(`${scene.label}.solve`, 'Agent tool produces an optimal candidate from physical history', !result.data?.result?.isError && candidate?.status === 'optimal', candidate || result.data || error(result))
+  if (candidate?.status === 'optimal') {
+    const raw = candidate.firstMove?.mv
+    const engineered = candidate.firstMoveEngineering?.mv
+    check(`${scene.label}.raw-bounds`, 'Unmodified solver first move satisfies declared physical domain', Number.isFinite(raw) && raw >= scene.mv.min - 1e-6 && raw <= scene.mv.max + 1e-6, { raw, min: scene.mv.min, max: scene.mv.max })
+    check(`${scene.label}.units`, 'Tool exposes engineering and model values consistently for scale=1', Number.isFinite(engineered) && Math.abs(engineered - raw) <= 1e-9, { model: raw, engineering: engineered })
+  }
+  record(`${scene.label}.dispatch`, 'Production dispatch and benefit benchmark', 'not-run', 'Recommendation only; no automatic dispatch and no claim of 15% benefit/20 paired runs')
+}
+if (process.argv.includes('--simulator-only')) {
+  await bootSimulator()
+  writeFileSync(join(REPO, '.omc', 'optimizer-full-live-20261023', 'simulator-context.json'), JSON.stringify({ root: ROOT, base: SIM, port: SIM_PORT, mqttPort: MQTT_PORT, pid: simulator.pid }, null, 2))
+  console.log(`Isolated simulator ready ${SIM}, root=${ROOT}`)
+  await new Promise(() => setInterval(() => {}, 60_000))
+}
+try {
+  await bootSimulator()
+  await loadScene('cast-film-physics', 'film', 'ScrewSpeedSP', 'MeltPressure', 'dev-extruder-opcua')
+  await loadScene('anneal-line', 'anneal', '均热区1炉温SP', 'FurnaceTemp', 'anneal-heating-mbtcp')
+  const daq = await aw('GET', '/api/workshop/daq')
+  check('infra.observed', 'DAQ infrastructure state is explicitly observed', daq.status === 200, { infra: daq.data?.infra, meta: daq.data?.meta })
+  const healthy = daq.data?.infra?.degraded === false
+  const seconds = Number(process.env.AW_PHYSICAL_COLLECT_SECONDS || (healthy ? 100 : 20))
+  const runs = healthy && seconds >= 60 ? Number(process.env.AW_PHYSICAL_RUNS || 6) : 1
+  for (let run = 0; run < runs; run++) {
+    for (const scene of scenes) await startRun(scene)
+    for (let elapsed = 0; elapsed < seconds; elapsed++) {
+      if (healthy && elapsed >= 60 && elapsed % 60 === 0) {
+        for (const scene of scenes) {
+          const value = scene.initial + (elapsed % 120 === 0 ? -20 : 25)
+          const changed = await aw('POST', `/api/workshop/dcw/${scene.control.id}/write`, { value })
+          check(`${scene.label}.stimulus.${run}.${elapsed}`, 'Governed online parameter step through DCW', changed.status === 200 && changed.data?.outcome?.ok === true, changed.data?.outcome || error(changed))
+        }
+      }
+      if (elapsed % 30 === 0) console.log(`COLLECT run=${run + 1}/${runs} elapsed=${elapsed}/${seconds}s healthy=${healthy}`)
+      await sleep(1000)
+    }
+    for (const scene of scenes) await aw('POST', `/api/workshop/dcw/lines/${scene.line.id}/stop`)
+  }
+  for (const scene of scenes) {
+    const samples = await aw('GET', `/api/workshop/daq/${scene.daq[1].id}/samples?bucketMs=1000&limit=1000`)
+    const points = samples.data?.points || []
+    const name = `${scene.label}.collection`
+    if (!points.length && !healthy) record(name, 'Physical samples persisted by actual app DAQ', 'blocked', { reason: 'DAQ infrastructure degraded: application disables online acquisition', infra: daq.data?.infra, points: points.length })
+    else check(name, 'Physical samples persisted by actual app DAQ', points.length > 5, { points: points.length, tail: points.slice(-2) })
+    await trainAndSolve(scene)
+  }
+}
+catch (err) { record('harness', 'Physical harness execution', 'fail', err instanceof Error ? err.stack : String(err)) }
+finally {
+  for (const scene of scenes) {
+    await aw('POST', `/api/workshop/dcw/lines/${scene.line.id}/stop`).catch(() => {})
+    for (const node of scene.daq) await aw('PATCH', `/api/workshop/daq/${node.id}`, { enabled: false }).catch(() => {})
+    await aw('PATCH', `/api/workshop/dcw/${scene.control.id}`, { enabled: false }).catch(() => {})
+  }
+  simulator?.kill()
+  const counts = Object.fromEntries(['pass', 'fail', 'blocked', 'not-run'].map(status => [status, checks.filter(item => item.status === status).length]))
+  writeFileSync(join(EVID, 'report.json'), JSON.stringify({ at: new Date().toISOString(), base: BASE, simulator: SIM, simulatorRoot: process.env.AW_PHYSICAL_SIM_ROOT || ROOT, applicationHome: context.home, counts, scope: { businessInstanceTouched: false, originalSimulatorTouched: false, realHardwareTouched: false, truthConsumed: false, benefitBenchmark: false, realAgentLlm: false }, scenes: scenes.map(scene => ({ scene: scene.label, lineId: scene.line.id, recipeId: scene.recipe?.id, runs: scene.runs })), checks }, null, 2))
+  console.log(JSON.stringify({ counts, report: join(EVID, 'report.json') }))
+  process.exitCode = counts.fail ? 1 : counts.blocked ? 2 : 0
+}

package/scripts/e2e-tool-surface-multiagent.mjs

@@ -0,0 +1,353 @@
+#!/usr/bin/env node
+/**
+ * 工具面元数据驱动 · 多 Agent 实机 E2E(2026-10-24,隔离实例,真实 HTTP + MCP stdio)
+ *
+ * 验证用户核心关切:
+ *  - 同一频道内不同 Agent(仅绑定不同)拿到不同工具描述(同一份 host-tools.json 动态装配);
+ *  - 执行期 verify 按绑定面裁剪:自己的节点放行、跨线节点拒绝(原生 invoke 与 MCP 桥同源);
+ *  - 配方写面:绑定配方的 Agent 进入 HITL 审批;未绑定者被 recipe 门直接拒绝;
+ *  - WP2:ingest 兜底路径要求产线 operate 权限(普通用户 403,admin 200);回填窗 ±1h;
+ *  - WP3:rotate-token 后旧 token 宽限内可用、新 token 立即可用;列表只回 tokenTail;
+ *  - WP6:/agent-tools/list 带 ETag,If-None-Match 命中 304;industrial_resources 分页可用;
+ *  - 面 B(stdio 桥)= 权威 per-agent 面:tools/list 描述按 Agent 差异化,tools/call 同链治理。
+ *
+ * 运行:node scripts/e2e-tool-surface-multiagent.mjs
+ */
+import { spawn, spawnSync } from 'node:child_process'
+import { mkdirSync, openSync, writeFileSync } from 'node:fs'
+import { dirname, join, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { tmpdir } from 'node:os'
+import { DatabaseSync } from 'node:sqlite'
+import { createInterface } from 'node:readline'
+
+const REPO = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const TAG = `ts${Date.now().toString(36).slice(-4)}`
+const ROOT = join(tmpdir(), `aw-tool-surface-e2e-${TAG}`)
+mkdirSync(join(ROOT, 'home'), { recursive: true })
+// 审批超时 1.5s:让「进入 HITL」可判定(未获批准路径),无需人工交互
+writeFileSync(join(ROOT, 'home', 'runtime-settings.json'), JSON.stringify({ version: 1, overrides: { 'security.hitl_timeout_ms': 1500 } }))
+const results = []
+const ok = (id, name, cond, detail = '') => {
+  results.push({ id, name, pass: Boolean(cond), detail: String(detail).slice(0, 400) })
+  console.log(`${cond ? '✔' : '✖'} [${id}] ${name}${cond ? '' : ` — ${String(detail).slice(0, 400)}`}`)
+}
+const sleep = ms => new Promise(r => setTimeout(r, ms))
+
+let port = 0
+for (const p of [3993, 3992, 3991, 3990]) {
+  try {
+    const r = await fetch(`http://127.0.0.1:${p}/api/health`, { signal: AbortSignal.timeout(1200) })
+    if (r.ok) continue
+  }
+  catch { /* 空闲 */ }
+  port = p
+  break
+}
+if (!port) {
+  console.error('无空闲端口')
+  process.exit(1)
+}
+const BASE = `http://127.0.0.1:${port}`
+process.env.NO_PROXY = '127.0.0.1,localhost'
+const logFd = openSync(join(ROOT, 'dev.log'), 'a')
+const child = spawn(process.execPath, [join(REPO, 'bin', 'aw.mjs'), 'dev', '--port', String(port)], {
+  cwd: REPO,
+  env: {
+    ...process.env,
+    AW_MODE: 'home',
+    AW_HOME: join(ROOT, 'home'),
+    AW_RATE_LIMIT_OFF: '1',
+    NUXT_SESSION_PASSWORD: 'ToolSurface#2026-e2e-key',
+    NO_PROXY: '127.0.0.1,localhost',
+  },
+  stdio: ['ignore', logFd, logFd],
+  windowsHide: true,
+})
+
+async function api(method, path, body, token, extraHeaders = {}, timeoutMs = 120_000) {
+  const res = await fetch(BASE + path, {
+    method,
+    headers: {
+      ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
+      ...(token ? { authorization: `Bearer ${token}` } : {}),
+      ...extraHeaders,
+    },
+    body: body === undefined ? undefined : JSON.stringify(body),
+    signal: AbortSignal.timeout(timeoutMs),
+  })
+  let json = null
+  try {
+    json = await res.json()
+  }
+  catch { /* 非 JSON */ }
+  return { status: res.status, headers: res.headers, ...json }
+}
+const invText = r => String(r?.data?.result?.text ?? r?.data?.text ?? '')
+const invErr = r => Boolean(r?.data?.result?.isError ?? r?.data?.isError)
+const dbPath = join(ROOT, 'home', 'data', 'workshop.sqlite')
+const agentTokenOf = (agentId) => {
+  const db = new DatabaseSync(dbPath)
+  try {
+    return String(db.prepare('SELECT token FROM channel_agents WHERE id = ?').get(agentId)?.token ?? '')
+  }
+  finally {
+    db.close()
+  }
+}
+/** 取描述中的某段(段首标签 → 到行尾) */
+const segment = (desc, label) => {
+  const m = String(desc ?? '').match(new RegExp(`${label.replace(/[()（）]/g, m2 => `\\${m2}`)}[:：]([^\\n]*)`))
+  return m ? m[1] : ''
+}
+
+/** 起一个 stdio MCP 桥(面 B)并完成 initialize */
+async function startBridge(agentId, agentToken) {
+  const proc = spawn(process.execPath, [join(REPO, 'server', 'harness', 'aw-mcp-bridge.mjs')], {
+    cwd: REPO,
+    env: { ...process.env, NO_PROXY: '127.0.0.1,localhost', HTTP_PROXY: '', HTTPS_PROXY: '', AW_BASE_URL: BASE, AW_AGENT_ID: agentId, AW_AGENT_TOKEN: agentToken },
+    stdio: ['pipe', 'pipe', 'pipe'],
+    windowsHide: true,
+  })
+  const pending = new Map()
+  let nextId = 1
+  const rl = createInterface({ input: proc.stdout })
+  rl.on('line', (line) => {
+    let msg
+    try {
+      msg = JSON.parse(line)
+    }
+    catch { return }
+    if (msg?.id != null && pending.has(msg.id)) {
+      pending.get(msg.id)(msg)
+      pending.delete(msg.id)
+    }
+  })
+  const request = (method, params) => new Promise((resolveRpc, reject) => {
+    const id = nextId++
+    const timer = setTimeout(() => reject(new Error(`MCP ${method} 超时`)), 60_000)
+    pending.set(id, (msg) => {
+      clearTimeout(timer)
+      resolveRpc(msg)
+    })
+    proc.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', id, method, params })}\n`)
+  })
+  await request('initialize', { protocolVersion: '2024-11-05', capabilities: {}, clientInfo: { name: 'e2e', version: '1' } })
+  proc.stdin.write(`${JSON.stringify({ jsonrpc: '2.0', method: 'notifications/initialized' })}\n`)
+  return {
+    proc,
+    request,
+    stop: () => {
+      try {
+        proc.stdin.end()
+      }
+      catch { /* noop */ }
+      try {
+        proc.kill()
+      }
+      catch { /* noop */ }
+    },
+  }
+}
+
+const textOfMcp = msg => String(msg?.result?.content?.map(c => c.text ?? '').join('\n') ?? '')
+
+try {
+  let healthy = false
+  for (let i = 0; i < 90; i++) {
+    await sleep(2000)
+    try {
+      const h = await api('GET', '/api/health', undefined, undefined, {}, 3000)
+      if (h?.data?.status === 'ok' && h?.data?.workshop === 'ready') {
+        healthy = true
+        break
+      }
+    }
+    catch { /* 未就绪 */ }
+  }
+  ok('T1', '隔离实例启动 + workshop ready', healthy, `port=${port}`)
+  if (!healthy) throw new Error('实例未就绪')
+
+  const admin = (await api('POST', '/api/users/register', { name: `ts-admin-${TAG}`, email: `ts-${TAG}@awshop.local`, password: 'TsAdmin#2026' })).data?.token
+  ok('T1b', 'admin 注册', Boolean(admin))
+  const H = () => admin
+
+  // T1c:普通用户(admin 建号 + 登录,避开自助注册开关差异)
+  const plainEmail = `ts-plain-${TAG}@awshop.local`
+  const created = await api('POST', '/api/users', { name: `ts-plain-${TAG}`, email: plainEmail, password: 'TsPlain#2026', role: 'user' }, H())
+  const login = await api('POST', '/api/users/login', { email: plainEmail, password: 'TsPlain#2026' })
+  const plain = login?.data?.token
+  ok('T1c', '普通用户创建+登录(无产线授权)', created.status === 200 && Boolean(plain), `create=${created.status} login=${login.status}`)
+
+  // ── T2 场景:两条产线 + 数采节点 + 数控/配方 ──
+  const lineA = (await api('POST', '/api/workshop/dcw/lines', { name: `工具面线A-${TAG}` }, H())).data?.line?.id
+  const lineB = (await api('POST', '/api/workshop/dcw/lines', { name: `工具面线B-${TAG}` }, H())).data?.line?.id
+  const dnA1 = (await api('POST', '/api/workshop/daq', { templateRef: 'daq-temp-tc', name: `A1专属数采-${TAG}`, driver: 'mock', lineId: lineA, intervalMs: 1000, publishIntervalMs: 0 }, H())).data?.node?.id
+  const dnA2 = (await api('POST', '/api/workshop/daq', { templateRef: 'daq-temp-tc', name: `A2专属数采-${TAG}`, driver: 'mock', lineId: lineA, intervalMs: 1000, publishIntervalMs: 0 }, H())).data?.node?.id
+  const dnB1 = (await api('POST', '/api/workshop/daq', { templateRef: 'daq-temp-tc', name: `B线数采-${TAG}`, driver: 'mock', lineId: lineB, intervalMs: 1000, publishIntervalMs: 0 }, H())).data?.node?.id
+  const tpl = (await api('POST', '/api/workshop/dcw/templates', { name: `工具面参数-${TAG}`, ch: '压力', unit: 'bar', min: 0, max: 100, decimals: 1 }, H())).data?.template?.key
+  const dcwA = (await api('POST', '/api/workshop/dcw', { templateRef: tpl, name: `A线数控-${TAG}`, driver: 'mock', lineId: lineA, stepLimit: 20, driverConfig: { key: `ts-${TAG}` } }, H())).data?.node?.id
+  const product = (await api('POST', '/api/workshop/dcw/products', { lineId: lineA, name: `工具面产品-${TAG}` }, H())).data?.product?.id
+  const recipeA = (await api('POST', '/api/workshop/dcw/recipes', { productId: product, name: `工具面配方-${TAG}`, params: [{ nodeId: dcwA, value: 50, min: 0, max: 100 }] }, H())).data?.recipe?.id
+  ok('T2', '建两条线/三数采节点/数控/产品/配方', Boolean(lineA && lineB && dnA1 && dnA2 && dnB1 && dcwA && product && recipeA),
+    JSON.stringify({ lineA, lineB, dnA1, dnA2, dnB1, dcwA, recipeA }).slice(0, 320))
+
+  // ── T3 频道(绑 A 线)+ 两个 worker(同角色,仅绑定不同) ──
+  const ch = (await api('POST', '/api/workshop/channels', { name: `工具面频道-${TAG}`, leadAgent: { name: `工具面lead-${TAG}`, harness: 'omp' } }, H())).data
+  const channelId = ch?.channelId
+  await api('PUT', `/api/workshop/channels/${channelId}/line`, { lineId: lineA }, H())
+  const wA = (await api('POST', `/api/workshop/channels/${channelId}/agents`, { name: `AgentA1-${TAG}`, harness: 'mock', role: 'worker' }, H())).data
+  const wB = (await api('POST', `/api/workshop/channels/${channelId}/agents`, { name: `AgentA2-${TAG}`, harness: 'mock', role: 'worker' }, H())).data
+  const agentA = String(wA?.id ?? wA?.agentId ?? '')
+  const agentB = String(wB?.id ?? wB?.agentId ?? '')
+  ok('T3', '频道创建 + 绑 A 线 + 两个 worker', Boolean(channelId && agentA && agentB), JSON.stringify({ channelId, agentA, agentB }).slice(0, 240))
+
+  // ── T4 差异化绑定:AgentA1→dnA1(daq)+recipeA;B2→dnA2(daq,无配方) ──
+  const bindA = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: agentA, nodeId: dnA1, kind: 'daq' }, H())
+  const bindB = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: agentB, nodeId: dnA2, kind: 'daq' }, H())
+  const bindRecipe = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: agentA, nodeId: recipeA, kind: 'recipe' }, H())
+  ok('T4', '差异化绑定(A1→dnA1+配方;A2→dnA2)', bindA.status === 200 && bindB.status === 200 && bindRecipe.status === 200,
+    `status=${bindA.status}/${bindB.status}/${bindRecipe.status} msg=${String(bindB?.message ?? '').slice(0, 120)}`)
+
+  // T4c:频道产线一致性——绑他线节点应被拒(产品规则,证明隔离)
+  const crossBind = await api('POST', '/api/workshop/agent-tools/bindings', { agentId: agentB, nodeId: dnB1, kind: 'daq' }, H())
+  ok('T4c', '频道绑 A 线 → 成员绑 B 线节点被拒(403 产线隔离)', crossBind.status === 403,
+    `status=${crossBind.status} code=${String(crossBind?.code ?? '')} msg=${String(crossBind?.message ?? '').slice(0, 140)}`)
+
+  const tokenA = agentTokenOf(agentA)
+  const tokenB = agentTokenOf(agentB)
+  ok('T4b', '两个 Agent 实例 token 独立', tokenA.length > 20 && tokenB.length > 20 && tokenA !== tokenB, `lenA=${tokenA.length} lenB=${tokenB.length}`)
+
+  // ── T5 注入面:同一份工具面,描述按各自绑定差异化 ──
+  const listA = await api('GET', `/api/workshop/agent-tools/list?agentId=${agentA}`, undefined, undefined, { 'x-aw-agent-token': tokenA })
+  const listB = await api('GET', `/api/workshop/agent-tools/list?agentId=${agentB}`, undefined, undefined, { 'x-aw-agent-token': tokenB })
+  const toolsA = listA?.data?.tools ?? []
+  const toolsB = listB?.data?.tools ?? []
+  const descA = String(toolsA.find(t => t.name === 'daq_query')?.description ?? '')
+  const descB = String(toolsB.find(t => t.name === 'daq_query')?.description ?? '')
+  const boundSegA = segment(descA, '本 Agent 直接绑定的数采节点(仅这些可查)')
+  const boundSegB = segment(descB, '本 Agent 直接绑定的数采节点(仅这些可查)')
+  const recipeSegA = segment(String(toolsA.find(t => t.name === 'recipe_update')?.description ?? ''), '本 Agent 已绑定的配方(仅这些可写/下发)')
+  const recipeSegB = segment(String(toolsB.find(t => t.name === 'recipe_update')?.description ?? ''), '本 Agent 已绑定的配方(仅这些可写/下发)')
+  ok('T5a', '两 Agent 工具面非空(同一份目录装配)', toolsA.length > 20 && toolsB.length > 20, `A=${toolsA.length} B=${toolsB.length}`)
+  ok('T5b', 'A1 绑定段含 dnA1、不含 dnA2', boundSegA.includes(dnA1) && !boundSegA.includes(dnA2), boundSegA.slice(0, 180))
+  ok('T5c', 'A2 绑定段含 dnA2、不含 dnA1', boundSegB.includes(dnA2) && !boundSegB.includes(dnA1), boundSegB.slice(0, 180))
+  ok('T5d', '配方绑定只进 A1 描述(A2 无配方段)', recipeSegA.includes(recipeA) && !recipeSegB.includes(recipeA), `A=${recipeSegA.slice(0, 90)} B=${recipeSegB.slice(0, 60)}`)
+  ok('T5e', 'A1 描述不含他线节点 dnB1', !descA.includes(dnB1), '')
+  // T5f(对象模型取证):两 Agent 工具名集合完全一致、同一工具描述不同 ——
+  // 证明设计是「单一静态定义 + 按 Agent 即时编译视图」,不是为每个 Agent 克隆一套工具对象
+  const namesA = toolsA.map(t => t.name).sort()
+  const namesB = toolsB.map(t => t.name).sort()
+  ok('T5f', '同名工具集 + 不同描述(视图编译,非对象克隆)', JSON.stringify(namesA) === JSON.stringify(namesB) && descA !== descB,
+    `names equal=${JSON.stringify(namesA) === JSON.stringify(namesB)} descDiff=${descA !== descB}`)
+
+  // ── T6 ETag/304(WP6) ──
+  const etag = listA.headers?.get('etag') ?? ''
+  const cond = await fetch(`${BASE}/api/workshop/agent-tools/list?agentId=${agentA}`, {
+    headers: { 'x-aw-agent-token': tokenA, 'if-none-match': etag },
+    signal: AbortSignal.timeout(15_000),
+  })
+  ok('T6', '工具面 ETag + If-None-Match → 304 空体', Boolean(etag) && cond.status === 304, `etag=${etag} status=${cond.status}`)
+
+  // ── T7 执行面 verify:原生 invoke 按绑定面裁剪 ──
+  const callAs = (agentId, tok, tool, args) => api('POST', '/api/workshop/agent-tools/invoke', { agentId, tool, args }, undefined, { 'x-aw-agent-token': tok })
+  const ownA = await callAs(agentA, tokenA, 'daq_query', { node_id: dnA1 })
+  const otherA = await callAs(agentA, tokenA, 'daq_query', { node_id: dnB1 })
+  const ownB = await callAs(agentB, tokenB, 'daq_query', { node_id: dnA2 })
+  const sharedB = await callAs(agentB, tokenB, 'daq_query', { node_id: dnA1 })
+  ok('T7a', 'A1 查自己绑定节点 → 放行', !invErr(ownA), invText(ownA).slice(0, 120))
+  ok('T7b', 'A1 查他线节点 → 拒绝(引用校验,越线)', invErr(otherA) && /工具调用被拒/.test(invText(otherA)), invText(otherA).slice(0, 200))
+  ok('T7c', 'A2 查自己绑定节点 → 放行', !invErr(ownB), invText(ownB).slice(0, 120))
+  ok('T7d', '频道绑线只读扩权:A2 可读 A 线未绑定节点', !invErr(sharedB), invText(sharedB).slice(0, 120))
+
+  // ── T8 配方写面:未绑定被 recipe 门拒;已绑定进入 HITL(超时拒绝) ──
+  const trialB = await callAs(agentB, tokenB, 'recipe_trial', { recipe_id: recipeA, params: [{ node_id: dcwA, value: 55 }], hypothesis: 'E2E:验证未绑定配方写面被拒' })
+  ok('T8a', 'A2(未绑配方)recipe_trial → 绑定门拒绝(未进入审批)', invErr(trialB) && /绑定|授权|被拒/.test(invText(trialB)) && !/审批/.test(invText(trialB)), invText(trialB).slice(0, 220))
+  const trialA = await callAs(agentA, tokenA, 'recipe_trial', { recipe_id: recipeA, params: [{ node_id: dcwA, value: 55 }], hypothesis: 'E2E:验证已绑定配方进入 HITL' })
+  // 运行门:未开跑的配方不可写入/下发(产品约束)。因此可判定的差异是「闸门深度」:
+  // 未绑定者停在①绑定门;已绑定者通过①②,停在③运行门 —— 证明绑定面真的在参与执行期判定。
+  ok('T8b', 'A1(已绑配方)通过绑定门、被更深层运行门拒绝(未绑定者到不了该门)',
+    invErr(trialA) && /运行门|未在执行/.test(invText(trialA)) && !/你未绑定该配方/.test(invText(trialA)), invText(trialA).slice(0, 240))
+
+  // ── T9 MCP 桥(面 B):per-agent tools/list + tools/call 同链治理 ──
+  const bridgeA = await startBridge(agentA, tokenA)
+  try {
+    const list = await bridgeA.request('tools/list', {})
+    const mcpTools = list?.result?.tools ?? []
+    const mcpDescA = String(mcpTools.find(t => t.name === 'daq_query')?.description ?? '')
+    ok('T9a', 'MCP tools/list 返回 per-agent 工具面(≥20)', mcpTools.length >= 20, `count=${mcpTools.length}`)
+    ok('T9b', 'MCP 描述与原生注入面同源(A1 绑定段含 dnA1)', segment(mcpDescA, '本 Agent 直接绑定的数采节点(仅这些可查)').includes(dnA1), mcpDescA.slice(-140))
+    const callOwn = await bridgeA.request('tools/call', { name: 'daq_query', arguments: { node_id: dnA1 } })
+    ok('T9c', 'MCP tools/call 自己节点 → 成功', !callOwn?.result?.isError, textOfMcp(callOwn).slice(0, 120))
+    const callOther = await bridgeA.request('tools/call', { name: 'daq_query', arguments: { node_id: dnB1 } })
+    ok('T9d', 'MCP tools/call 他线节点 → 同链拒绝(与原生一致)', Boolean(callOther?.result?.isError) && /工具调用被拒/.test(textOfMcp(callOther)), textOfMcp(callOther).slice(0, 200))
+    const callRes = await bridgeA.request('tools/call', { name: 'industrial_resources', arguments: { limit: 10 } })
+    ok('T9e', 'industrial_resources 经 MCP 可用(分页绑定面)', !callRes?.result?.isError && /绑定面资源/.test(textOfMcp(callRes)), textOfMcp(callRes).slice(0, 160))
+  }
+  finally {
+    bridgeA.stop()
+  }
+
+  // ── T10 WP2:ingest 兜底路径需产线 operate ──
+  const pushPlain = await api('POST', `/api/workshop/daq/${dnA1}/ingest`, { value: 42, at: new Date().toISOString() }, plain)
+  const pushAdmin = await api('POST', `/api/workshop/daq/${dnA1}/ingest`, { value: 42, at: new Date().toISOString() }, admin)
+  ok('T10a', '普通用户(无产线授权)推送 → 403 LINE_FORBIDDEN', pushPlain.status === 403, `status=${pushPlain.status} code=${String(pushPlain?.code ?? '')} msg=${String(pushPlain?.message ?? '').slice(0, 120)}`)
+  ok('T10b', 'admin(operate)推送 → 200 落库', pushAdmin.status === 200 && pushAdmin?.data?.accepted === true, `status=${pushAdmin.status}`)
+  const tooOld = await api('POST', `/api/workshop/daq/${dnA1}/ingest`, { value: 1, at: new Date(Date.now() - 6 * 3600_000).toISOString() }, admin)
+  ok('T10c', '超回填窗(6h 前)→ 400(默认 ±1h)', tooOld.status === 400, `status=${tooOld.status} msg=${String(tooOld?.message ?? '').slice(0, 120)}`)
+
+  // ── T11 WP3:rotate 后旧 token 宽限内可用;列表只回 tokenTail ──
+  const rotated = await api('POST', `/api/workshop/channels/${channelId}/agents/${agentA}/rotate-token`, {}, H())
+  const newToken = String(rotated?.data?.token ?? '')
+  ok('T11a', 'rotate-token 返回一次性新 token', rotated.status === 200 && newToken.length > 20 && newToken !== tokenA, `status=${rotated.status}`)
+  const afterOld = await callAs(agentA, tokenA, 'daq_query', { node_id: dnA1 })
+  const afterNew = await callAs(agentA, newToken, 'daq_query', { node_id: dnA1 })
+  ok('T11b', '旧 token 宽限窗内仍可用(桥重连过渡)', !invErr(afterOld), invText(afterOld).slice(0, 100))
+  ok('T11c', '新 token 立即生效', !invErr(afterNew), invText(afterNew).slice(0, 100))
+  const tpls = await api('GET', '/api/workshop/agents', undefined, H())
+  const arr = Array.isArray(tpls?.data) ? tpls.data : []
+  const inst = arr.flatMap(a => a.instances ?? []).find(i => i.id === agentA) ?? null
+  ok('T11d', '列表接口不回全量 token(只回 tokenTail)', inst == null || (inst.token === undefined && typeof inst.tokenTail === 'string' && inst.tokenTail.length === 4),
+    JSON.stringify(inst).slice(0, 160))
+
+  // ── T12 审计:rotate 留痕 ──
+  const audit = await api('GET', '/api/workshop/ops-logs?scope=all&limit=300', undefined, H())
+  const acts = (audit?.data?.logs ?? []).map(x => x.action)
+  ok('T12', 'rotate 审计落账(agent.token.rotate)', acts.includes('agent.token.rotate'), acts.filter(a => String(a).startsWith('agent.')).join(','))
+
+  // ── T13 真实作业:两 Agent 并行各自完成一次真实作业闭环(查数→结论留痕) ──
+  // 每个作业链只触碰自己绑定面的对象:作业 A 读 dnA1、作业 B 读 dnA2,各自 analysis_save 留痕
+  // (台账 target line=频道绑线),再从台账读面核验归因。
+  {
+    const runInspectionJob = async (agentId, tok, nodeId, title, summary) => {
+      const q = await callAs(agentId, tok, 'daq_query', { node_id: nodeId })
+      if (invErr(q)) return { text: invText(q), err: true }
+      const save = await callAs(agentId, tok, 'analysis_save', { title, summary })
+      return { text: invText(save), err: invErr(save) }
+    }
+    const [rA, rB] = await Promise.all([
+      runInspectionJob(agentA, tokenA, dnA1, `作业A-节点健康巡检-${TAG}`, `AgentA1 基于 dnA1 窗口数据完成巡检留痕(作业闭环验证)`),
+      runInspectionJob(agentB, tokenB, dnA2, `作业B-节点健康巡检-${TAG}`, `AgentA2 基于 dnA2 窗口数据完成巡检留痕(作业闭环验证)`),
+    ])
+    ok('T13a', '作业A 闭环(查数+留痕)成功', !rA.err && /已保存|留痕|台账/.test(rA.text ?? ''), String(rA.text).slice(0, 180))
+    ok('T13b', '作业B 闭环(查数+留痕)成功', !rB.err && /已保存|留痕|台账/.test(rB.text ?? ''), String(rB.text).slice(0, 180))
+    const ledger = await callAs(agentA, tokenA, 'analysis_query', {})
+    const bothVisible = /作业A-节点健康巡检/.test(invText(ledger)) && /作业B-节点健康巡检/.test(invText(ledger))
+    ok('T13c', '两份作业产物均落分析台账(可读回)', !invErr(ledger) && bothVisible, invText(ledger).slice(0, 220))
+  }
+
+  const pass = results.filter(r => r.pass).length
+  const total = results.length
+  console.log(`\n═══ 工具面多 Agent 实机 E2E:${pass} PASS / ${total - pass} FAIL ═══`)
+  const outDir = join(REPO, 'docs', 'audit', 'evidence', '2026-10-24-tool-surface')
+  mkdirSync(outDir, { recursive: true })
+  writeFileSync(join(outDir, 'multiagent-report.json'), JSON.stringify({ at: new Date().toISOString(), port, results, pass, total }, null, 2))
+  process.exitCode = total - pass === 0 ? 0 : 1
+}
+finally {
+  try {
+    const pid = child.pid
+    if (pid) spawnSync('taskkill', ['//T', '//F', '//PID', String(pid)], { stdio: 'ignore', windowsHide: true })
+  }
+  catch { /* 清场失败不掩盖结果 */ }
+}