agentworkshop 0.8.4 → 0.8.6

package/scripts/test-hitl-legacy-channel-auth.ts

@@ -1,143 +0,0 @@
-/**
- * HITL 无持久化行时的遗留 Channel 授权回归测试:
- *   pnpm exec tsx scripts/test-hitl-legacy-channel-auth.ts
- */
-import { AppError } from '../server/utils/errors'
-import { configureHitlRuntime, getHitlRegistry, type HitlRuntimePort } from '../server/services/workshop/agents/hitl-registry'
-import { decideHitlRequest, registerHitlNativeDispatcher } from '../server/services/workshop/agents/hitl-decision'
-
-const legacyChannel = { id: 'legacy-channel', ownerUserId: null, approvalPolicy: 'any_member' }
-const claimedChannel = { id: 'claimed-channel', ownerUserId: 'u-owner', approvalPolicy: 'any_member' }
-const channels = new Map([
-  [legacyChannel.id, legacyChannel],
-  [claimedChannel.id, claimedChannel],
-])
-const members = new Set(['claimed-channel:u-member'])
-let runtime: HitlRuntimePort | null = null
-let approvalChecks = 0
-let legacyReadChecks = 0
-let nativeCalls = 0
-let failures = 0
-
-function check(name: string, ok: boolean, detail = ''): void {
-  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
-  if (!ok) failures += 1
-}
-
-async function captureError(fn: () => Promise<unknown>): Promise<{ status?: number, code?: string } | null> {
-  try {
-    await fn()
-    return null
-  }
-  catch (err) {
-    const error = err as { status?: number, code?: string }
-    return error
-  }
-}
-
-function register(id: string, channelId: string): void {
-  getHitlRegistry().register({
-    kind: 'codex-approval',
-    id,
-    agentId: `agent-${id}`,
-    channelId,
-    method: 'confirm',
-    title: 'authorization regression',
-    requestType: 'approval',
-  })
-}
-
-async function main(): Promise<void> {
-  configureHitlRuntime(() => runtime)
-  register('legacy-no-row', legacyChannel.id)
-  register('claimed-no-row', claimedChannel.id)
-
-  runtime = {
-    groupChat: {
-      hitl: {
-        find: () => undefined,
-        listNonTerminal: () => [],
-      },
-      members: { listActiveByChannel: () => [] },
-    },
-    notifyUser: () => ({ id: 'notification', inserted: true }),
-    listChannelsVisibleTo: () => [...channels.values()],
-    listChannelsForUser: userId => [...channels.values()].filter(channel => channel.ownerUserId === null || channel.ownerUserId === userId),
-    requireChannelMember: (channelId, user) => {
-      const channel = channels.get(channelId)
-      if (!channel) throw new AppError(404, 'NOT_FOUND', 'channel not found')
-      if (user.role !== 'admin' && channel.ownerUserId === null) throw new AppError(403, 'FORBIDDEN_LEGACY', 'legacy channel')
-      return channel
-    },
-    requireCanApprove: (channelId, user) => {
-      approvalChecks += 1
-      const channel = channels.get(channelId)
-      if (!channel) throw new AppError(404, 'NOT_FOUND', 'channel not found')
-      if (channel.ownerUserId === null) throw new AppError(403, 'FORBIDDEN_LEGACY', 'legacy channel requires claim')
-      if (channel.ownerUserId !== user.id && !(channel.approvalPolicy === 'any_member' && members.has(`${channelId}:${user.id}`))) {
-        throw new AppError(403, 'APPROVAL_FORBIDDEN', 'current approval policy denied')
-      }
-      return channel
-    },
-    getChannelForUser: (channelId, userId) => {
-      legacyReadChecks += 1
-      const channel = channels.get(channelId)
-      if (!channel || (channel.ownerUserId !== null && channel.ownerUserId !== userId)) {
-        throw new AppError(403, 'SCOPE_VIOLATION', 'channel not visible')
-      }
-      return channel
-    },
-    findChannelAgentById: () => undefined,
-    respondHarnessHitl: async () => {},
-  } as unknown as HitlRuntimePort
-
-  registerHitlNativeDispatcher('codex-approval', async () => {
-    nativeCalls += 1
-    return { via: 'test' }
-  })
-
-  const legacyError = await captureError(() => decideHitlRequest({
-    kind: 'codex-approval',
-    id: 'legacy-no-row',
-    user: { id: 'u-member', role: 'user' },
-    decision: { confirmed: true },
-  }))
-  check('无持久化行的 owner=NULL legacy channel 对普通登录用户 fail-closed',
-    legacyError?.status === 403 && legacyError.code === 'FORBIDDEN_LEGACY_APPROVAL', JSON.stringify(legacyError))
-  check('遗留请求被拒后仍 pending，且未调用旧只读守卫或原生批准',
-    getHitlRegistry().find('codex-approval', 'legacy-no-row')?.status === 'pending'
-    && legacyReadChecks === 0 && nativeCalls === 0,
-    `legacyRead=${legacyReadChecks}, approvalChecks=${approvalChecks}(审批守卫可被咨询,以拒为结论), native=${nativeCalls}`)
-
-  const claimedResult = await decideHitlRequest({
-    kind: 'codex-approval',
-    id: 'claimed-no-row',
-    user: { id: 'u-member', role: 'user' },
-    decision: { confirmed: true },
-  })
-  check('无行但已有显式 owner 与当前 any_member 资格时仍可决策',
-    claimedResult.status === 'approved' && !claimedResult.persisted && nativeCalls === 1)
-
-  runtime = null
-  register('no-auth-runtime', claimedChannel.id)
-  const unavailableError = await captureError(() => decideHitlRequest({
-    kind: 'codex-approval',
-    id: 'no-auth-runtime',
-    user: { id: 'u-member', role: 'user' },
-    decision: { confirmed: true },
-  }))
-  check('无持久化行且当前授权运行时缺失时拒绝，而非跳过授权',
-    unavailableError?.status === 503 && unavailableError.code === 'HITL_AUTH_UNAVAILABLE'
-    && getHitlRegistry().find('codex-approval', 'no-auth-runtime')?.status === 'pending'
-    && nativeCalls === 1, JSON.stringify(unavailableError))
-
-  registerHitlNativeDispatcher('codex-approval', null)
-  configureHitlRuntime(null)
-  console.log(failures === 0 ? '\n[hitl-legacy-channel-auth] 全部通过' : `\n[hitl-legacy-channel-auth] ${failures} 项失败`)
-  process.exit(failures === 0 ? 0 : 1)
-}
-
-main().catch((err) => {
-  console.error('[hitl-legacy-channel-auth] 测试异常终止:', err)
-  process.exit(1)
-})

package/scripts/test-lane-history-live.mjs

@@ -1,126 +0,0 @@
-/**
- * Lane 历史加载端到端验证(针对 pnpm dev 起的 3000 服务):
- *  1. 注册用户 → 建 channel(mock lead)→ goal 任务跑完(产生 agent.status/
- *     agent.message/a2a.message/task.status 等真实事件,常驻录制器落库);
- *  2. GET /channels/:id/events 全量历史:信封形状 + 消息在场;
- *  3. ?agentId=&excludeTypes=agent.delta:lane 按需加载口径(仅该 agent、无过程帧);
- *  4. beforeSeq 翻页 + total 同口径;
- *  5. 清理测试 channel。
- * 运行: node scripts/test-lane-history-live.mjs
- */
-const BASE = process.env.AW_BASE ?? 'http://127.0.0.1:3000'
-
-let failures = 0
-const check = (name, ok, detail = '') => {
-  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
-  if (!ok) failures += 1
-}
-
-async function api(method, path, { body, token } = {}) {
-  const headers = { 'content-type': 'application/json' }
-  if (token) headers.authorization = `Bearer ${token}`
-  const res = await fetch(`${BASE}${path}`, { method, headers, body: body !== undefined ? JSON.stringify(body) : undefined })
-  return { status: res.status, ...(await res.json().catch(() => ({}))) }
-}
-
-const waitUntil = async (name, probe, timeoutMs = 20_000) => {
-  const t0 = Date.now()
-  while (Date.now() - t0 < timeoutMs) {
-    const v = await probe()
-    if (v) return v
-    await new Promise(r => setTimeout(r, 300))
-  }
-  throw new Error(`等待超时: ${name}`)
-}
-
-const tag = Math.random().toString(36).slice(2, 8)
-const user = await api('POST', '/api/workshop/users/register', { body: { name: `lane-hist-${tag}` } })
-if (!user.data?.token) {
-  console.error('用户注册失败:', user)
-  process.exit(1)
-}
-const token = user.data.token
-console.log(`用户 lane-hist-${tag} 就绪`)
-
-const ch = await api('POST', '/api/workshop/channels', {
-  token,
-  body: {
-    name: `lane-history-${tag}`,
-    leadAgent: { name: 'lead-mock', harness: 'mock', config: { delayMs: 60 } },
-  },
-})
-check('创建 channel(含 mock lead)', ch.code === 0 && ch.data?.channelId, `channel=${ch.data?.channelId?.slice(0, 8)}`)
-const channelId = ch.data.channelId
-const leadId = ch.data.leadAgentId
-
-try {
-  await api('POST', `/api/workshop/channels/${channelId}/activate`, { token })
-  // 该 channel 只有一个 mock lead:补一个 worker 承接子任务,并由 lead 发一条真实 a2a
-  // 消息 —— 子任务 assign 走信箱(不产生 a2a.message 帧),事件类型覆盖需要真实发送。
-  const w = await api('POST', `/api/workshop/channels/${channelId}/agents`, {
-    token,
-    body: { name: 'lane-worker', harness: 'mock', config: { delayMs: 200 } },
-  })
-  const members = await api('GET', `/api/workshop/channels/${channelId}/agents`, { token })
-  const leadToken = (members.data ?? []).find(m => m.id === leadId)?.token
-  if (leadToken && w.data?.id) {
-    await api('POST', '/api/workshop/a2a/send', {
-      token: leadToken,
-      body: { toAgentId: w.data.id, parts: [{ text: 'lane 历史覆盖检查:请确认收到' }] },
-    })
-  }
-  const task = await api('POST', `/api/workshop/channels/${channelId}/tasks`, {
-    token,
-    body: { title: `lane-history-${tag}`, description: '验证历史持久化与按 agent 加载', mode: 'goal', modeConfig: { goalCriteria: '全部完成' } },
-  })
-  check('提交 goal 任务', task.code === 0 && task.data?.state === 'SUBMITTED', `state=${task.data?.state}`)
-  // 等待「事件类型覆盖」成型而非只等条数:任务派发是异步的(lead 回合 → 子任务 assign
-  // 消息 → a2a.message 帧),只按条数 4 判断会在消息帧到达前就取样(实测竞态)。
-  const COVER = ['a2a.message', 'agent.status', 'task.status']
-  let enough = null
-  try {
-    enough = await waitUntil('事件落库(覆盖消息/状态/任务三类)', async () => {
-      const e = await api('GET', `/api/workshop/channels/${channelId}/events?limit=500`, { token })
-      const items = e.data?.items ?? []
-      return items.length >= 4 && COVER.every(t => items.some(x => x.type === t)) ? items : null
-    }, 30_000)
-  }
-  catch {
-    // 超时不直接崩:下方断言会以 FAIL 形式如实报告缺哪类帧
-  }
-  const items = enough ?? (await api('GET', `/api/workshop/channels/${channelId}/events?limit=500`, { token })).data?.items ?? []
-  check('事件已持久化(WORKING 阶段)', items.length >= 4, `events=${items.length}`)
-
-  // ── 1. 全量历史(items 已在上方取到)──
-  const shapeOk = items.every(e => e.v === 1 && typeof e.seq === 'number' && e.type && e.at && e.channelId === channelId)
-  check('AEP 信封同构形状', shapeOk)
-  check('事件类型覆盖(消息+状态+任务)', ['a2a.message', 'agent.status', 'task.status'].every(t => items.some(e => e.type === t)),
-    [...new Set(items.map(e => e.type))].join(','))
-
-  // ── 2. lane 口径:agentId + excludeTypes ──
-  const lane = await api('GET', `/api/workshop/channels/${channelId}/events?agentId=${leadId}&excludeTypes=agent.delta&limit=100`, { token })
-  const laneItems = lane.data?.items ?? []
-  check('agentId 过滤仅返回该 agent', laneItems.length > 0 && laneItems.every(e => e.agentId === leadId), `items=${laneItems.length}`)
-  check('excludeTypes 剔除过程帧', laneItems.every(e => e.type !== 'agent.delta'))
-  check('lane 历史含该 agent 事件', laneItems.some(e => e.type === 'agent.status' || e.type === 'task.status' || e.type === 'a2a.message'),
-    `types=${[...new Set(laneItems.map(e => e.type))].join(',')}`)
-  check('total 与过滤同口径', lane.data?.total === laneItems.length, `total=${lane.data?.total} items=${laneItems.length}`)
-
-  // ── 3. beforeSeq 翻页(lane 维度) ──
-  const midSeq = laneItems[Math.floor(laneItems.length / 2)]?.seq
-  const page = await api('GET', `/api/workshop/channels/${channelId}/events?agentId=${leadId}&excludeTypes=agent.delta&beforeSeq=${midSeq}&limit=100`, { token })
-  const pageItems = page.data?.items ?? []
-  check('beforeSeq 翻页全部早于游标', pageItems.length > 0 && pageItems.every(e => e.seq < midSeq && e.agentId === leadId),
-    `items=${pageItems.length} < seq${midSeq}`)
-
-  // ── 4. 鉴权:无 token 拒绝 ──
-  const noAuth = await api('GET', `/api/workshop/channels/${channelId}/events`)
-  check('无 token 401', noAuth.status === 401, `status=${noAuth.status}`)
-}
-finally {
-  const del = await api('DELETE', `/api/workshop/channels/${channelId}`, { token })
-  console.log(`清理测试 channel:${del.code === 0 ? '已删除' : `失败(${del.code})`}`)
-}
-
-console.log(failures === 0 ? '\n全部通过 ✔' : `\n${failures} 项失败 ✘`)
-process.exit(failures === 0 ? 0 : 1)

package/scripts/test-mcp-tools.ts

@@ -1,285 +0,0 @@
-/**
- * MCP 工具层测试(node + tsx 直跑,无浏览器)。
- *
- * 覆盖:
- *  1. tools/list 返回 §6.1 的 16 个工具(名逐字一致)
- *  2. tools/call 参数校验(zod 错误返回)
- *  3. 无 token → UNAUTHORIZED
- *  4. 无效 token → UNAUTHORIZED
- *  5. a2a.send 的 fromAgentId 由 token 决定(manager 收到 callerAgentId,而非请求体自报)
- *
- * 通过 SDK 的 Client + InMemoryTransport 协议层测试;token 经自定义 transport
- * 注入(Authorization 头 / auth 中间件两种路径)。
- */
-import { Client } from '@modelcontextprotocol/sdk/client/index.js'
-import { InMemoryTransport } from '@modelcontextprotocol/sdk/inMemory.js'
-import { createWorkshopMcpServer } from '../server/mcp/workshop-server'
-import type { AgentChannelManager } from '../server/services/workshop/runtime/manager'
-import type { AgentInfo } from '../server/services/workshop/agents/agent-interface'
-
-let failures = 0
-function check(name: string, ok: boolean, detail = ''): void {
-  console.log(`${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
-  if (!ok) {
-    failures += 1
-  }
-}
-
-/** 提取工具错误文案(isError 结果的第一个文本块) */
-function toolErrorText(result: unknown): string {
-  const block = (result as { content?: Array<{ text?: string }> })?.content?.[0]
-  return typeof block?.text === 'string' ? block.text : ''
-}
-
-/** 可注入 caller token 的客户端 transport(InMemoryTransport 只原生转发 authInfo) */
-class TokenClientTransport extends InMemoryTransport {
-  token: string | undefined
-  /** 'auth' = 经 authInfo.token 注入;'header' = 经 Authorization: Bearer 头(requestInfo)注入 */
-  mode: 'auth' | 'header' = 'auth'
-
-  override async send(message: unknown, options?: { authInfo?: unknown }): Promise<void> {
-    if (this.token === undefined) {
-      return super.send(message as never, options as never)
-    }
-    if (this.mode === 'auth') {
-      return super.send(message as never, {
-        ...options,
-        authInfo: { token: this.token, clientId: 'test-client', scopes: [] },
-      } as never)
-    }
-    // header 模式:复刻 InMemoryTransport.send 但注入 requestInfo(Authorization 头)
-    const self = this as unknown as { _otherTransport?: { onmessage?: (m: unknown, e: unknown) => void, _messageQueue: Array<{ message: unknown, extra: unknown }> } }
-    const other = self._otherTransport
-    if (!other) throw new Error('Not connected')
-    const extra = { requestInfo: { headers: { authorization: `Bearer ${this.token}` } } }
-    if (other.onmessage) other.onmessage(message, extra)
-    else other._messageQueue.push({ message, extra })
-  }
-}
-
-/** 手动链接一对 transport(client 侧为可注入 token 的 TokenClientTransport) */
-function createLinkedPair(): [TokenClientTransport, InMemoryTransport] {
-  const clientTransport = new TokenClientTransport()
-  const serverTransport = new InMemoryTransport()
-  const c = clientTransport as unknown as { _otherTransport?: InMemoryTransport }
-  const s = serverTransport as unknown as { _otherTransport?: InMemoryTransport }
-  c._otherTransport = serverTransport
-  s._otherTransport = clientTransport
-  return [clientTransport, serverTransport]
-}
-
-/** MCP 工具目录(与 server/mcp/workshop-server.ts 逐字一致):16 基础 + 4 扩展 + 5 设备孪生 */
-const EXPECTED_TOOLS = [
-  'workshop.channel.create',
-  'workshop.channel.list',
-  'workshop.channel.remove',
-  'workshop.agent.create',
-  'workshop.agent.add',
-  'workshop.agent.definitions',
-  'workshop.agent.list',
-  'workshop.agent.remove',
-  'workshop.task.submit',
-  'workshop.task.dispatch',
-  'workshop.task.list',
-  'workshop.task.get',
-  'workshop.task.report',
-  'workshop.task.complete',
-  'workshop.task.cancel',
-  'workshop.a2a.send',
-  'workshop.a2a.poll',
-  'workshop.a2a.subscribe',
-  'workshop.mail.list',
-  'workshop.queue.overview',
-  'device.list',
-  'device.read',
-  'device.control',
-  'device.push_telemetry',
-  'device.bind_agent',
-]
-
-/** fake manager stub:记录调用 + 返回预设值(与 AgentChannelManager 相同方法签名) */
-function makeFakeManager() {
-  const calls: Array<{ method: string, args: unknown[] }> = []
-
-  const agentsByToken = new Map<string, AgentInfo>()
-  agentsByToken.set('token-lead-1', {
-    id: 'agent-lead-1',
-    channelId: 'ch-1',
-    name: 'Lead',
-    harness: 'mock',
-    role: 'lead',
-    config: {},
-  })
-  agentsByToken.set('token-worker-2', {
-    id: 'agent-worker-2',
-    channelId: 'ch-1',
-    name: 'Worker2',
-    harness: 'mock',
-    role: 'worker',
-    config: {},
-  })
-
-  const record
-    = (method: string, result: unknown) =>
-      (...args: unknown[]) => {
-        calls.push({ method, args })
-        return Promise.resolve(result)
-      }
-
-  const manager = {
-    createChannel: record('createChannel', { channelId: 'ch-1' }),
-    listChannels: record('listChannels', []),
-    removeChannel: record('removeChannel', undefined),
-    createAgent: record('createAgent', {
-      id: 'agent-tpl',
-      name: 'New',
-      harness: 'mock',
-      config: {},
-      enabled: 1,
-      instances: [],
-    }),
-    addAgentToChannel: record('addAgentToChannel', {
-      id: 'agent-inst',
-      channelId: 'ch-1',
-      name: 'New',
-      harness: 'mock',
-      role: 'worker',
-      config: {},
-    }),
-    listAgents: record('listAgents', []),
-    listChannelAgents: record('listChannelAgents', []),
-    submitChannelTask: record('submitChannelTask', { id: 'task-1' }),
-    dispatchTask: record('dispatchTask', { id: 'task-2' }),
-    reportTask: record('reportTask', { id: 'task-1' }),
-    completeTask: record('completeTask', { id: 'task-1' }),
-    cancelTask: record('cancelTask', { id: 'task-1' }),
-    listTasks: record('listTasks', []),
-    getTask: record('getTask', { id: 'task-1' }),
-    sendA2A: record('sendA2A', {
-      messageId: 'm-1',
-      contextId: 'ch-1',
-      role: 'ROLE_AGENT',
-      parts: [{ text: 'hi' }],
-    }),
-    pollMailbox: record('pollMailbox', []),
-    listChannelMail: record('listChannelMail', []),
-    queueOverview: record('queueOverview', []),
-    subscribe: record('subscribe', undefined),
-    findByToken: (token: string) => agentsByToken.get(token),
-    restore: record('restore', undefined),
-  }
-
-  return {
-    manager: manager as unknown as AgentChannelManager,
-    calls,
-    agentsByToken,
-  }
-}
-
-async function main(): Promise<void> {
-  const [clientTransport, serverTransport] = createLinkedPair()
-  const fake = makeFakeManager()
-  const server = createWorkshopMcpServer(fake.manager)
-
-  const client = new Client({ name: 'test-client', version: '1.0.0' })
-  await server.connect(serverTransport)
-  await client.connect(clientTransport)
-
-  // ===== 1. tools/list:20 个工具,名逐字一致 =====
-  const { tools } = await client.listTools()
-  const actualNames = tools.map(t => t.name).sort()
-  const expectedNames = [...EXPECTED_TOOLS].sort()
-  check('tools/list 返回 25 个工具', tools.length === 25, `got ${tools.length}`)
-  check(
-    '工具名与 §6.1 逐字一致',
-    JSON.stringify(actualNames) === JSON.stringify(expectedNames),
-    JSON.stringify(actualNames),
-  )
-
-  // ===== 2. 参数校验:zod 错误返回 =====
-  const missingName = await client.callTool({ name: 'workshop.channel.create', arguments: {} })
-  check(
-    '参数校验:channel.create 缺 name → 工具错误',
-    (missingName as { isError?: boolean }).isError === true,
-    toolErrorText(missingName),
-  )
-  check(
-    '参数校验:错误文案含 Input validation error',
-    toolErrorText(missingName).includes('Input validation error'),
-    toolErrorText(missingName),
-  )
-
-  const badRole = await client.callTool({
-    name: 'workshop.agent.add',
-    arguments: { channelId: 'ch-1', agentId: 'agent-tpl', role: 'admin' },
-  })
-  check(
-    '参数校验:agent.add role 非法枚举 → 工具错误',
-    (badRole as { isError?: boolean }).isError === true,
-    toolErrorText(badRole),
-  )
-
-  // ===== 3. 无 token → UNAUTHORIZED =====
-  clientTransport.token = undefined
-  const noToken = await client.callTool({ name: 'workshop.agent.list', arguments: {} })
-  check(
-    '无 token → UNAUTHORIZED',
-    (noToken as { isError?: boolean }).isError === true && toolErrorText(noToken) === 'UNAUTHORIZED',
-    toolErrorText(noToken),
-  )
-
-  // ===== 4. 无效 token → UNAUTHORIZED =====
-  clientTransport.token = 'bad-token'
-  const badToken = await client.callTool({ name: 'workshop.agent.list', arguments: {} })
-  check(
-    '无效 token → UNAUTHORIZED',
-    (badToken as { isError?: boolean }).isError === true && toolErrorText(badToken) === 'UNAUTHORIZED',
-    toolErrorText(badToken),
-  )
-
-  // ===== 5. a2a.send 的 fromAgentId 由 token 决定 =====
-  clientTransport.token = 'token-lead-1'
-  // 请求体故意自报 fromAgentId,应被忽略;caller 由 token 解析为 agent-lead-1
-  const sendResult = await client.callTool({
-    name: 'workshop.a2a.send',
-    arguments: { toAgentId: 'agent-worker-2', parts: [{ text: 'hello' }], fromAgentId: 'evil-agent' },
-  })
-  check('a2a.send(有效 token)→ 成功', (sendResult as { isError?: boolean }).isError !== true, toolErrorText(sendResult))
-
-  const sendCall = fake.calls.find(c => c.method === 'sendA2A')
-  const callerAgentId = sendCall?.args[1]
-  const sendInput = sendCall?.args[2] as { toAgentId?: string, fromAgentId?: string } | undefined
-  check(
-    'a2a.send callerAgentId 由 token 决定(agent-lead-1)',
-    callerAgentId === 'agent-lead-1',
-    `got ${String(callerAgentId)}`,
-  )
-  check(
-    'a2a.send 忽略请求体自报的 fromAgentId',
-    sendInput?.fromAgentId === undefined && sendInput?.toAgentId === 'agent-worker-2',
-    JSON.stringify(sendInput),
-  )
-
-  // ===== 6. Authorization 头路径同样解析 token =====
-  clientTransport.mode = 'header'
-  clientTransport.token = 'token-worker-2'
-  const headerResult = await client.callTool({ name: 'workshop.a2a.send', arguments: { toAgentId: 'agent-lead-1', parts: [{ text: 'hi' }] } })
-  check('Authorization 头解析 token → 成功', (headerResult as { isError?: boolean }).isError !== true, toolErrorText(headerResult))
-  const headerCall = fake.calls.filter(c => c.method === 'sendA2A').at(-1)
-  check(
-    'Authorization 头路径 callerAgentId = agent-worker-2',
-    headerCall?.args[1] === 'agent-worker-2',
-    `got ${String(headerCall?.args[1])}`,
-  )
-
-  await client.close()
-  await server.close()
-
-  console.log(`\n${failures === 0 ? 'ALL PASS' : `${failures} FAILED`}`)
-  process.exit(failures === 0 ? 0 : 1)
-}
-
-main().catch((e) => {
-  console.error(e)
-  process.exit(1)
-})

package/scripts/test-memory-dynamic.ts

@@ -1,101 +0,0 @@
-/**
- * 动态记忆感知测试:按需抓取(recallRows scope 过滤/原文还原/touch)、
- * 主动沉淀(save 私有/共享分流 + 共享域 dedupKey 命名空间)、
- * 记忆引子(小预算 primer + 工具提示行)。
- * 运行: npx tsx scripts/test-memory-dynamic.ts
- */
-import type { DatabaseSync } from 'node:sqlite'
-import { openWorkshopDb } from '../server/services/workshop/db/database'
-import { createMemoryRepo, TEAM_AGENT_ID } from '../server/services/workshop/db/memory.repo'
-import { AgentMemory } from '../server/services/workshop/runtime/memory'
-
-let failures = 0
-function check(name: string, ok: boolean, detail = ''): void {
-  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${detail ? ` — ${detail}` : ''}`)
-  if (!ok) failures += 1
-}
-
-const db: DatabaseSync = openWorkshopDb(':memory:')
-const repo = createMemoryRepo(db)
-const seg = (s: string): string => s.replace(/([\u4e00-\u9fff])/g, ' $1 ')
-
-// 播种:a1 私有 × 2、a2 私有 × 1、team 公共 × 1、他 channel 的 team 行 × 1(隔离守卫)
-repo.upsert({ channelId: 'ch1', agentId: 'a1', kind: 'episodic-task', title: '网关限流方案', titleFts: seg('网关限流方案'), content: seg('最终采用令牌桶算法限流,阈值100qps'), importance: 0.8, taskId: 't1', dedupKey: 'task:t1' })
-repo.upsert({ channelId: 'ch1', agentId: 'a1', kind: 'episodic-task', title: '部署脚本草稿', titleFts: seg('部署脚本草稿'), content: seg('deploy.sh 需要先source env'), importance: 0.4, taskId: 't2', dedupKey: 'task:t2' })
-repo.upsert({ channelId: 'ch1', agentId: 'a2', kind: 'episodic-task', title: '他人限流笔记', titleFts: seg('他人限流笔记'), content: seg('a2自己的限流杂记'), importance: 0.8, taskId: 't3', dedupKey: 'task:t3' })
-repo.upsert({ channelId: 'ch1', agentId: TEAM_AGENT_ID, kind: 'semantic', title: 'channel 限流约定', titleFts: seg('channel 限流约定'), content: seg('全channel统一用令牌桶,禁用计数器'), importance: 0.9, taskId: null, dedupKey: 'conv:ratelimit' })
-repo.upsert({ channelId: 'ch2', agentId: TEAM_AGENT_ID, kind: 'semantic', title: '他channel限流约定', titleFts: seg('他channel限流约定'), content: seg('ch2专属公共记忆不应被ch1看到'), importance: 0.9, taskId: null, dedupKey: 'conv:other' })
-
-const memA1 = new AgentMemory(repo, { channelId: 'ch1', agentId: 'a1' })
-
-console.log('--- 按需抓取 recallRows ---')
-{
-  const auto = await memA1.recallRows('限流 令牌桶')
-  check('auto 域命中本人 + 公共记忆', auto.some(s => s.title === '网关限流方案') && auto.some(s => s.title === 'channel 限流约定'), JSON.stringify(auto.map(s => s.title)))
-  check('auto 域不含他人私有记忆', auto.every(s => s.title !== '他人限流笔记'))
-  check('auto 域不含他 channel 公共记忆', auto.every(s => s.title !== '他channel限流约定'))
-  check('source 标注 private/shared', auto.some(s => s.source === 'private') && auto.some(s => s.source === 'shared'))
-  const own = auto.find(s => s.title === '网关限流方案')
-  check('content 还原为未切分原文', own !== undefined && !/\s/.test(own.content.slice(0, 4)) && own.content.includes('令牌桶'), own?.content.slice(0, 20))
-  check('返回综合分 score', auto.every(s => typeof s.score === 'number' && s.score > 0))
-
-  const sharedOnly = await memA1.recallRows('限流', { scope: 'shared' })
-  check('shared 域仅公共记忆', sharedOnly.length > 0 && sharedOnly.every(s => s.source === 'shared'), JSON.stringify(sharedOnly.map(s => s.title)))
-  check('shared 域严格本 channel', sharedOnly.every(s => s.title !== '他channel限流约定'))
-
-  const privOnly = await memA1.recallRows('限流', { scope: 'private' })
-  check('private 域仅本人记忆', privOnly.length > 0 && privOnly.every(s => s.source === 'private'), JSON.stringify(privOnly.map(s => s.title)))
-
-  const before = repo.listByAgent('a1', 10).find(r => r.title === '网关限流方案')!.accessCount
-  await memA1.recallRows('网关 限流')
-  const after = repo.listByAgent('a1', 10).find(r => r.title === '网关限流方案')!.accessCount
-  check('recallRows 触发 touch(强化后续排序)', after === before + 1, `before=${before} after=${after}`)
-
-  // scope 域内完全无记忆才真正返回空(全新 channel;有记忆时弱命中/时近兜底会返回行,by design)
-  const none = await new AgentMemory(repo, { channelId: 'ch-empty', agentId: 'nobody' }).recallRows('完全不存在的关键词xyzq')
-  check('无命中返回空数组(无记忆 agent)', Array.isArray(none) && none.length === 0)
-  const fallback = await memA1.recallRows('完全不存在的关键词xyzq')
-  check('FTS 无命中走时近兜底(有记忆 agent 返回最近行)', fallback.length > 0, JSON.stringify(fallback.map(s => s.title)))
-}
-
-console.log('\n--- 主动沉淀 save(私有/共享分流)---')
-{
-  const priv = await memA1.save({ title: 'SQLite 并发写坑', content: '并发写会 SQLITE_BUSY,须串行化写入', scope: 'private', dedupKey: 'note:sqlite' })
-  check('私有沉淀落入本人域', repo.findByAgentDedup('ch1', 'a1', 'note:sqlite') !== null && priv.scope === 'private')
-
-  const shared = await memA1.save({ title: '限流阈值结论', content: '全队统一令牌桶阈值100qps', scope: 'shared', dedupKey: 'conv:threshold' })
-  const teamRow = repo.findByAgentDedup('ch1', TEAM_AGENT_ID, `agent:a1:conv:threshold`)
-  check('共享沉淀落入 team 公共域(来源命名空间 dedupKey)', teamRow !== null && shared.dedupKey === 'agent:a1:conv:threshold')
-
-  // 同 raw key 不同 agent:命名空间隔离互不覆盖
-  const memA2 = new AgentMemory(repo, { channelId: 'ch1', agentId: 'a2' })
-  await memA2.save({ title: 'a2 的阈值结论', content: 'a2认为阈值应按服务分级', scope: 'shared', dedupKey: 'conv:threshold' })
-  const teamRows = repo.listByAgentChannel('ch1', TEAM_AGENT_ID, 100).filter(r => r.content.includes('阈值') || r.title.includes('阈值'))
-  check('多 agent 同 raw key 共享沉淀互不覆盖', repo.findByAgentDedup('ch1', TEAM_AGENT_ID, 'agent:a1:conv:threshold') !== null && repo.findByAgentDedup('ch1', TEAM_AGENT_ID, 'agent:a2:conv:threshold') !== null, `rows=${teamRows.length}`)
-
-  // 共享沉淀即时对全员可检索
-  const a2sees = await memA2.recallRows('阈值 令牌桶', { scope: 'shared' })
-  check('共享沉淀对其他 agent 即时可检索', a2sees.some(s => s.title === '限流阈值结论'), JSON.stringify(a2sees.map(s => s.title)))
-
-  // 稳定 dedupKey 幂等刷新不重复
-  await memA1.save({ title: '限流阈值结论', content: '修订:阈值升到200qps', scope: 'shared', dedupKey: 'conv:threshold' })
-  const count = repo.listByAgentChannel('ch1', TEAM_AGENT_ID, 100).filter(r => r.dedupKey === undefined && r.title === '限流阈值结论').length
-  const refreshed = repo.listByAgentChannel('ch1', TEAM_AGENT_ID, 100).some(r => r.title === '限流阈值结论')
-  check('稳定 dedupKey 幂等刷新', refreshed && count <= 1)
-}
-
-console.log('\n--- 记忆引子 primer(小预算注入)---')
-{
-  const block = await memA1.recall('限流 令牌桶 部署', { touch: false })
-  check('primer 返回记忆块', block !== null)
-  check('primer 含按需抓取工具提示', block !== null && block.includes('search_memory'), block?.slice(-80))
-  // v2 三层注入:L0 简报(save(shared) 后自动存在)+ L1 引子 + 提示,同在 300 tok 引子预算 + 500 tok 总预算内
-  check('primer 含 L0 会话简报', block !== null && block.includes('会话简报'))
-  check('primer 小预算(行数受限)', block !== null && block.split('\n').length < 16, `lines=${block?.split('\n').length}`)
-
-  const memTiny = new AgentMemory(repo, { channelId: 'ch1', agentId: 'a1', budgetTokens: 5 })
-  check('极小预算 primer 无行则 null', (await memTiny.recall('限流')) === null)
-}
-
-console.log(failures === 0 ? '\nALL PASS' : `\n${failures} FAILED`)
-process.exit(failures === 0 ? 0 : 1)