openxiangda-cli 2.0.0-alpha.14 → 2.0.0-alpha.141

package/template/apps/web/e2e/workflow.spec.ts

@@ -0,0 +1,809 @@
+import { expect, test, type Page } from '@playwright/test';
+import { appCode } from '../../../packages/contracts/src/generated.js';
+
+const taskId = '11111111-1111-4111-8111-111111111111';
+const instanceId = '22222222-2222-4222-8222-222222222222';
+const commandId = '55555555-5555-4555-8555-555555555555';
+function envelope(data: unknown, code = 200) {
+  return { code, message: code === 200 ? 'success' : 'forbidden', data };
+}
+
+function detailNavigation(custom = false) {
+  return custom
+    ? {
+        custom: true,
+        desktopPath: `/admin/operations/purchases/${instanceId}?taskId=${taskId}`,
+        mobilePath: `/m/purchases/${instanceId}?taskId=${taskId}`,
+      }
+    : {
+        custom: false,
+        desktopPath: `/admin/tasks/${taskId}`,
+        mobilePath: `/m/tasks/${taskId}`,
+      };
+}
+
+function workflowFixtureUrl(
+  initialPath: string,
+  options: { base?: string; state?: string } = {},
+) {
+  const params = new URLSearchParams({ initial: initialPath });
+  if (options.base) params.set('base', options.base);
+  if (options.state) params.set('state', options.state);
+  return `/workflow-experience.e2e.html?${params.toString()}`;
+}
+
+function task(completed = false, customDetail = false) {
+  return {
+    schemaVersion: 'openxiangda.workflow-task/v2',
+    engineVersion: '2.0',
+    id: taskId,
+    instanceId,
+    workflowCode: 'purchase-approval',
+    businessKey: 'PO-2026-0825',
+    nodeId: 'manager-review',
+    title: '采购申请审批',
+    status: completed ? 'completed' : 'assigned',
+    approvalMode: 'single',
+    taskKind: 'normal',
+    assignedRoleSubjectKey: 'membership:manager',
+    activeParticipantId: 'participant-1',
+    participants: [],
+    originTaskId: null,
+    returnSessionId: null,
+    version: completed ? 2 : 1,
+    dataRef: { resourceCode: 'purchase-orders', recordId: 'purchase-1' },
+    createdAt: '2026-08-25T01:00:00.000Z',
+    updatedAt: '2026-08-25T01:10:00.000Z',
+    detailNavigation: detailNavigation(customDetail),
+  };
+}
+
+function surface(completed = false, customDetail = false) {
+  return {
+    schemaVersion: 'openxiangda.workflow-surface/v2',
+    protocolVersion: 'workflow_surface_v2',
+    surfaceRevision: completed ? 'revision-2' : 'revision-1',
+    engineVersion: '2.0',
+    commandToken: 'A'.repeat(43),
+    commandTokenExpiresAt: '2099-08-29T09:05:00.000Z',
+    instanceSequence: completed ? 4 : 3,
+    detailNavigation: detailNavigation(customDetail),
+    navigationTarget: {
+      kind: 'resource_record',
+      appCode,
+      environmentKey: 'preproduction',
+      resourceCode: 'purchase-orders',
+      recordId: 'purchase-1',
+      desktopPath: '/purchase-orders/purchase-1',
+      mobilePath: '/m/purchase-orders/purchase-1',
+    },
+    instance: {
+      schemaVersion: 'openxiangda.workflow-instance/v2',
+      engineVersion: '2.0',
+      id: instanceId,
+      appCode,
+      environmentId: 'preproduction-id',
+      environmentKey: 'preproduction',
+      workflowCode: 'purchase-approval',
+      definitionVersion: 1,
+      bindingVersion: 1,
+      businessKey: 'PO-2026-0825',
+      generation: 1,
+      status: completed ? 'approved' : 'running',
+      initiatorUserId: 'applicant-user',
+      initiatorAuthorizationDigest: null,
+      dataRef: { resourceCode: 'purchase-orders', recordId: 'purchase-1' },
+      dataRevision: '8',
+      currentNodeId: completed ? null : 'manager-review',
+      outcome: completed ? 'approved' : null,
+      version: completed ? 3 : 2,
+      eventSequence: completed ? 4 : 3,
+      startedAt: '2026-08-25T01:00:00.000Z',
+      completedAt: completed ? '2026-08-25T01:12:00.000Z' : null,
+    },
+    task: completed ? null : task(false, customDetail),
+    presentation: {
+      status: { label: completed ? '已同意' : '待审批', tone: 'warning' },
+      layout: 'approval_detail',
+      businessData: {
+        status: 'fresh',
+        resourceCode: 'purchase-orders',
+        recordId: 'purchase-1',
+        requestedRevision: 8,
+        sourceRevision: 8,
+        fields: {
+          申请金额: '¥28,600',
+          采购类型: '办公设备',
+          期望到货: '2026-09-05',
+          申请人: '张三',
+        },
+        projectionDigest: 'c'.repeat(64),
+      },
+    },
+    fieldPolicy: { default: 'readonly', fields: {} },
+    operations: completed
+      ? []
+      : [
+          {
+            key: 'approve',
+            kind: 'workflow_command',
+            label: '同意',
+            placement: 'primary',
+            tone: 'primary',
+            visible: true,
+            enabled: true,
+            inputSchema: {
+              type: 'object',
+              properties: {
+                comment: {
+                  type: 'string',
+                  title: '审批意见',
+                  format: 'textarea',
+                  maxLength: 500,
+                },
+              },
+            },
+            uiSchema: {
+              confirmText: '确认同意',
+              confirmation: { description: '提交后流程继续流转。' },
+            },
+            execute: {
+              method: 'POST',
+              href: '/workflow/approve',
+              idempotencyRequired: true,
+            },
+            refresh: ['surface', 'timeline', 'work_center'],
+          },
+          ...['reject', 'return', 'transfer', 'add_assignee'].map(key => ({
+            key,
+            kind: 'workflow_command',
+            label: {
+              reject: '拒绝',
+              return: '退回',
+              transfer: '转交',
+              add_assignee: '加签',
+            }[key],
+            placement: 'secondary',
+            tone: key === 'reject' ? 'danger' : 'neutral',
+            visible: true,
+            enabled: true,
+            inputSchema: { type: 'object', properties: {} },
+            uiSchema: { confirmText: `确认${key}` },
+            execute: {
+              method: 'POST',
+              href: `/workflow/${key}`,
+              idempotencyRequired: true,
+            },
+            refresh: ['surface', 'timeline', 'work_center'],
+          })),
+        ],
+    extensions: {},
+  };
+}
+
+function timeline(completed = false) {
+  return {
+    engineVersion: '2.0',
+    instanceId,
+    flow: [
+      {
+        key: 'start',
+        nodeId: null,
+        kind: 'start',
+        title: '张三',
+        status: 'completed',
+        startedAt: '2026-08-25T01:00:00.000Z',
+        completedAt: '2026-08-25T01:00:00.000Z',
+        assignees: [],
+      },
+      {
+        key: 'manager',
+        nodeId: 'manager-review',
+        kind: 'approval',
+        title: '部门负责人',
+        status: completed ? 'completed' : 'active',
+        startedAt: '2026-08-25T01:01:00.000Z',
+        completedAt: completed ? '2026-08-25T01:12:00.000Z' : null,
+        assignees: [{ userId: 'acceptance-user', displayName: '李明' }],
+      },
+      {
+        key: 'finance',
+        nodeId: 'finance-review',
+        kind: 'approval',
+        title: '财务负责人',
+        status: completed ? 'completed' : 'waiting',
+        startedAt: null,
+        completedAt: null,
+        assignees: [{ userId: 'finance-user', displayName: '财务负责人' }],
+      },
+    ],
+    items: [],
+  };
+}
+
+function launchSurface() {
+  return {
+    schemaVersion: 'openxiangda.workflow-launch-surface/v2',
+    protocolVersion: 'workflow_launch_surface_v2',
+    surfaceRevision: 'launch-revision-1',
+    engineVersion: '2.0',
+    appCode,
+    environmentKey: 'preproduction',
+    environmentId: 'preproduction-id',
+    workflowCode: 'purchase-approval',
+    title: '采购审批',
+    launchMode: 'standalone',
+    processOperationCode: 'openxiangda.workflow.purchase-approval.submit',
+    subject: {
+      resourceCode: 'purchase-orders',
+      factProjection: { amount: 'amount' },
+      summaryFields: ['amount'],
+    },
+    inputSchema: { type: 'object', properties: {} },
+    head: {
+      workflowRevision: 4,
+      definitionVersion: 1,
+      bindingVersion: 1,
+      nativeRevision: 3,
+      contractRevisionId: 'contract-revision-1',
+    },
+    paths: {
+      desktop: '/admin/workflows/purchase-approval/new',
+      mobile: '/m/workflows/purchase-approval/start',
+    },
+    commit: {
+      method: 'POST',
+      href: `/openxiangda-api/v2/applications/${appCode}/business-process/standard-commands`,
+      idempotencyRequired: true,
+    },
+  };
+}
+
+function processCommand(status: 'accepted' | 'started' = 'started') {
+  return {
+    schemaVersion: 'openxiangda.business-process.command/v2',
+    id: commandId,
+    appCode,
+    environmentKey: 'preproduction',
+    operationCode: 'openxiangda.workflow.purchase-approval.submit',
+    idempotencyKey: 'process:purchase-approval:test',
+    workflowCode: 'purchase-approval',
+    status,
+    revision: status === 'started' ? 4 : 1,
+    subject: {
+      resourceCode: 'purchase-orders',
+      id: '66666666-6666-4666-8666-666666666666',
+      dataRevision: 1,
+      factDigest: 'a'.repeat(64),
+    },
+    definitionVersion: 1,
+    bindingVersion: 1,
+    requirements: [],
+    answers: {},
+    preview: {},
+    workflowInstanceId: status === 'started' ? instanceId : null,
+    attemptCount: 1,
+    lastError: null,
+    replayed: false,
+    createdAt: '2026-08-29T01:00:00.000Z',
+    updatedAt: '2026-08-29T01:00:01.000Z',
+  };
+}
+
+function processCommandSurface() {
+  const command = processCommand('started');
+  const base = `/openxiangda-api/v2/applications/${appCode}/business-process/commands/${commandId}`;
+  return {
+    schemaVersion: 'openxiangda.process-command-surface/v2',
+    surfaceRevision: 'b'.repeat(64),
+    command,
+    subject: {
+      resourceCode: 'purchase-orders',
+      recordId: command.subject.id,
+      dataRevision: 1,
+      form: {
+        kind: 'native-resource-form',
+        resourceCode: 'purchase-orders',
+        recordId: command.subject.id,
+      },
+    },
+    requirements: [],
+    resume: {
+      status: { method: 'GET', href: base },
+      surface: { method: 'GET', href: `${base}/surface` },
+      answer: null,
+      retry: null,
+      navigationTarget: {
+        kind: 'PLATFORM_ROUTE',
+        routeCode: 'resource.record',
+        appCode,
+        pathParams: {
+          resourceCode: 'purchase-orders',
+          recordId: command.subject.id,
+        },
+        query: { processCommandId: commandId },
+        access: 'AUTHENTICATED',
+      },
+      desktop: `/purchase-orders/${command.subject.id}?processCommandId=${commandId}`,
+      mobile: `/m/purchase-orders/${command.subject.id}?processCommandId=${commandId}`,
+    },
+  };
+}
+
+function todoPage() {
+  return {
+    schemaVersion: 'openxiangda.application-todo-center/v2',
+    appCode,
+    environmentKey: 'preproduction',
+    view: 'pending',
+    counts: { pending: 1, informational: 2, completed: 3, unread: 1 },
+    items: [
+      {
+        messageId: '33333333-3333-4333-8333-333333333333',
+        recipientId: '44444444-4444-4444-8444-444444444444',
+        state: 'action_required',
+        interactionState: 'unread',
+        title: '设备采购申请待审批',
+        summary: '张三提交了一笔办公设备采购申请',
+        fields: [
+          { code: 'amount', label: '申请金额', value: '¥28,600' },
+          { code: 'department', label: '申请部门', value: '理学院' },
+        ],
+        actions: [{ code: 'open', label: '去处理' }],
+        sourceKind: 'PLATFORM_EVENT',
+        sourceLabel: '流程中心',
+        occurredAt: '2026-08-28T01:00:00.000Z',
+        updatedAt: '2026-08-28T01:01:00.000Z',
+        navigation: {
+          desktopPath: `/admin/operations/purchases/${instanceId}?taskId=${taskId}`,
+          mobilePath: `/m/purchases/${instanceId}?taskId=${taskId}`,
+          external: false,
+          navigationUnavailable: false,
+        },
+      },
+    ],
+    total: 1,
+    limit: 12,
+    offset: 0,
+    nextOffset: null,
+  };
+}
+
+async function mockWorkflow(
+  page: Page,
+  options: { forbidden?: boolean; customDetail?: boolean } = {}
+) {
+  let completed = false;
+  await page.route('**/service/**', async route => {
+    const url = new URL(route.request().url());
+    const path = url.pathname;
+    if (path.endsWith('/auth/surface')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope({ csrfToken: 'workflow-csrf-1' })),
+      });
+    }
+    if (path.endsWith('/native/authz/current')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope({
+            schemaVersion: 'openxiangda.runtime-authorization/v2',
+            state: 'active',
+            environment: {
+              id: 'preproduction-id',
+              key: 'preproduction',
+              activeAppVersionId: 'version-1',
+              headRevision: 1,
+              authzRevisionId: 'authz-1',
+              authzVersion: 1,
+              scopeDataVersion: 'scope-1',
+            },
+            subjectProfile: {
+              schemaVersion: 'openxiangda.subject-profile/v2',
+              userId: 'acceptance-user',
+              displayName: '王老师',
+              avatarUrl: null,
+              jobNumber: 'T001',
+              affiliatedDepartment: { id: 'department-1', name: '理学院' },
+            },
+            roles: [
+              {
+                code: 'department_manager',
+                name: '部门管理员',
+                source: 'package',
+              },
+            ],
+            principal: {
+              type: 'user_union',
+              userId: 'acceptance-user',
+              roleCodes: ['department_manager'],
+              capabilityCodes: [],
+              isAppSuperAdmin: true,
+              identityScope:
+                'user-union:preproduction-id:acceptance-user:authz-1',
+            },
+          })
+        ),
+      });
+    }
+    if (path.includes('/directory/')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope({ items: [], nextCursor: null })),
+      });
+    }
+    if (options.forbidden && path.includes('/workflow/')) {
+      return route.fulfill({
+        status: 403,
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(null, 403)),
+      });
+    }
+    if (path.endsWith('/todos') && route.request().method() === 'GET') {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(todoPage())),
+      });
+    }
+    if (path.includes('/todos/') && path.endsWith('/interactions')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope({
+            accepted: true,
+            duplicate: false,
+            interactionState: 'clicked',
+          })
+        ),
+      });
+    }
+    if (
+      path.endsWith(
+        '/workflow/definitions/purchase-approval/launch-surface'
+      )
+    ) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(launchSurface())),
+      });
+    }
+    if (
+      path.endsWith('/business-process/standard-commands') &&
+      route.request().method() === 'POST'
+    ) {
+      const body = route.request().postDataJSON();
+      expect(body).toMatchObject({
+        schemaVersion: 'openxiangda.standard-process.commit/v2',
+        environmentKey: 'preproduction',
+        workflowCode: 'purchase-approval',
+        mutation: { kind: 'create', data: { amount: '28600' } },
+      });
+      for (const forbidden of [
+        'facts',
+        'dataRef',
+        'preparationToken',
+        'processOperationCode',
+      ]) {
+        expect(body).not.toHaveProperty(forbidden);
+      }
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(processCommand('accepted'))),
+      });
+    }
+    if (
+      path.endsWith(`/business-process/commands/${commandId}/surface`) &&
+      route.request().method() === 'GET'
+    ) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(processCommandSurface())),
+      });
+    }
+    if (path.endsWith('/workflow/work-center/items')) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope({
+            engineVersion: '2.0',
+            authorizationMode: 'current_user_role_union',
+            authorizationDigest: 'digest-1',
+            status: 'pending',
+            total: 1,
+            limit: 20,
+            offset: 0,
+            items: [task(completed, options.customDetail)],
+          })
+        ),
+      });
+    }
+    if (path.endsWith(`/workflow/tasks/${taskId}/surface`)) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope(surface(completed, options.customDetail))
+        ),
+      });
+    }
+    if (path.endsWith(`/workflow/instances/${instanceId}/surface`)) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(
+          envelope(surface(completed, options.customDetail))
+        ),
+      });
+    }
+    if (path.endsWith(`/workflow/instances/${instanceId}/timeline`)) {
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope(timeline(completed))),
+      });
+    }
+    if (path.endsWith(`/workflow/tasks/${taskId}/commands/approve`)) {
+      expect(route.request().headers()['x-openxiangda-csrf-token']).toBe(
+        'workflow-csrf-1'
+      );
+      expect(route.request().postDataJSON()).toMatchObject({
+        commandToken: 'A'.repeat(43),
+        input: { comment: '同意采购' },
+      });
+      expect(route.request().postDataJSON()).not.toHaveProperty(
+        'expectedTaskVersion'
+      );
+      expect(route.request().postDataJSON()).not.toHaveProperty(
+        'expectedInstanceVersion'
+      );
+      completed = true;
+      return route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify(envelope({ status: 'completed' })),
+      });
+    }
+    return route.fulfill({
+      status: 404,
+      contentType: 'application/json',
+      body: JSON.stringify(envelope(null, 404)),
+    });
+  });
+}
+
+test('renders a paged desktop work center from the current-user role union', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  await page.goto('/workflow-experience.e2e.html?initial=/admin/work-center');
+  await expect(page.getByRole('heading', { name: '审批工作台' })).toBeVisible();
+  await expect(page.getByRole('link', { name: '采购申请审批' })).toBeVisible();
+  await expect(page.getByText('PO-2026-0825')).toBeVisible();
+});
+
+test('renders the generic desktop and mobile application todo center without a second router', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  await page.goto('/workflow-experience.e2e.html?initial=/admin/todos');
+  await expect(page.getByRole('heading', { name: '待办中心' })).toBeVisible();
+  await expect(page.locator('.oxa-todo-table')).toBeVisible();
+  await expect(page.locator('.oxa-todo-preview-card')).toHaveCount(0);
+  await expect(page.getByText('设备采购申请待审批').first()).toBeVisible();
+  await expect(page.getByText('¥28,600').first()).toBeVisible();
+  await expect(page.locator('.ant-spin-spinning')).toHaveCount(0);
+  const unreadRequest = page.waitForRequest(request => {
+    const url = new URL(request.url());
+    return url.pathname.endsWith('/todos') && url.searchParams.get('unread') === 'true';
+  });
+  await page.getByRole('switch', { name: '仅看未读' }).click();
+  await unreadRequest;
+  await page.getByRole('button', { name: /查看详情/ }).first().click();
+  await expect(page).toHaveURL(
+    new RegExp(`/admin/operations/purchases/${instanceId}\\?taskId=${taskId}`)
+  );
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`
+  );
+
+  await page.setViewportSize({ width: 390, height: 844 });
+  await page.goto('/workflow-experience.e2e.html?initial=/m/todos');
+  await expect(page.locator('.oxa-todo-center-mobile')).toBeVisible();
+  await expect(page.locator('.oxa-todo-preview-card')).toHaveCount(0);
+  await page.getByRole('button', { name: /查看详情/ }).first().click();
+  await expect(page).toHaveURL(
+    new RegExp(`/m/purchases/${instanceId}\\?taskId=${taskId}`)
+  );
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`
+  );
+});
+
+test('launches the same workflow from the canonical mobile Surface and follows custom detail routing', async ({
+  page,
+}) => {
+  await mockWorkflow(page, { customDetail: true });
+  await page.setViewportSize({ width: 390, height: 844 });
+  await page.goto(
+    '/workflow-experience.e2e.html?initial=/m/workflows/purchase-approval/start'
+  );
+  await expect(page.locator('.oxa-workflow-submission-mobile')).toBeVisible();
+  await expect(page.getByRole('heading', { name: '采购审批' })).toBeVisible();
+  await page.getByRole('spinbutton', { name: '请输入申请金额' }).fill('28600');
+  await page.getByRole('button', { name: '提交审批' }).click();
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`
+  );
+  await expect(page).toHaveURL(
+    new RegExp(`/m/purchases/${instanceId}\\?taskId=${taskId}$`)
+  );
+});
+
+test('routes desktop and mobile work-center entries to the declared custom detail pages', async ({
+  page,
+}) => {
+  await mockWorkflow(page, { customDetail: true });
+  await page.goto('/workflow-experience.e2e.html?initial=/admin/work-center');
+  await page.getByRole('link', { name: '采购申请审批' }).click();
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`
+  );
+  await expect(page).toHaveURL(
+    new RegExp(`/admin/operations/purchases/${instanceId}\\?taskId=${taskId}$`)
+  );
+
+  await page.setViewportSize({ width: 390, height: 844 });
+  await page.goto('/workflow-experience.e2e.html?initial=/m/work-center');
+  await page.getByText('采购申请审批').click();
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`
+  );
+  await expect(page).toHaveURL(
+    new RegExp(`/m/purchases/${instanceId}\\?taskId=${taskId}$`)
+  );
+});
+
+test('redirects a direct standard task URL to the declared custom detail page', async ({
+  page,
+}) => {
+  await mockWorkflow(page, { customDetail: true });
+  await page.goto(
+    `/workflow-experience.e2e.html?initial=/admin/tasks/${taskId}`
+  );
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`
+  );
+});
+
+test('renders the independent mobile task and executes only a Surface operation', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  await page.setViewportSize({ width: 390, height: 844 });
+  await page.goto(`/workflow-experience.e2e.html?initial=/m/tasks/${taskId}`);
+  await expect(page.locator('.oxa-workflow-mobile-page')).toBeVisible();
+  await expect(page.getByText('¥28,600')).toBeVisible();
+  await expect(page.getByText('财务负责人').first()).toBeVisible();
+  await expect(page.getByRole('button', { name: /同\s*意/ })).toBeVisible();
+  await page.getByRole('button', { name: /同\s*意/ }).click();
+  await page.getByLabel('审批意见').fill('同意采购');
+  await page.getByRole('button', { name: '确认同意' }).click();
+  await expect(page.getByText('同意已提交')).toBeVisible();
+  await expect(page.getByRole('button', { name: /同\s*意/ })).toHaveCount(0);
+});
+
+test('shows an explicit authorization error instead of an empty work center', async ({
+  page,
+}) => {
+  test.setTimeout(45_000);
+  await mockWorkflow(page, { forbidden: true });
+  await page.goto('/workflow-experience.e2e.html?initial=/admin/work-center', {
+    waitUntil: 'domcontentloaded',
+  });
+  await expect(page.getByRole('alert')).toContainText('403: forbidden', {
+    timeout: 30_000,
+  });
+  await expect(page.getByRole('link', { name: '采购申请审批' })).toHaveCount(0);
+});
+
+test('negotiates direct standard routes after BrowserRouter listener setup', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  await page.setViewportSize({ width: 360, height: 844 });
+  await page.goto(
+    workflowFixtureUrl('/admin/todos?view=pending#unread', {
+      state: 'deep-link',
+    }),
+  );
+
+  // The initial desktop URL is replaced by the mobile pair and the rendered
+  // surface follows the Router update. The fixture is StrictMode-mounted.
+  await expect(page.locator('.oxa-todo-center-mobile')).toBeVisible();
+  await expect(page.locator('.oxa-todo-center-desktop')).toHaveCount(0);
+  await expect(page).toHaveURL(/\/m\/todos\?view=pending#unread$/);
+  const historyLength = await page.evaluate(() => window.history.length);
+  const negotiatedUrl = page.url();
+  await expect
+    .poll(() => page.url(), { timeout: 1_000 })
+    .toBe(negotiatedUrl);
+  expect(await page.evaluate(() => window.history.state?.usr)).toEqual({
+    routeNegotiationState: 'deep-link',
+  });
+
+  // 900px remains mobile; crossing to 901px switches the same manifest pair
+  // back to desktop without adding a browser-history entry.
+  await page.setViewportSize({ width: 900, height: 844 });
+  await expect(page.locator('.oxa-todo-center-mobile')).toBeVisible();
+  await page.setViewportSize({ width: 901, height: 844 });
+  await expect(page.locator('.oxa-todo-center-desktop')).toBeVisible();
+  await expect(page).toHaveURL(/\/admin\/todos\?view=pending#unread$/);
+  expect(await page.evaluate(() => window.history.length)).toBe(historyLength);
+  expect(await page.evaluate(() => window.history.state?.usr)).toEqual({
+    routeNegotiationState: 'deep-link',
+  });
+  await page.goBack();
+  await expect(page).not.toHaveURL(/\/admin\/todos\?view=pending#unread$/);
+
+  // Direct task and instance URLs carry their dynamic parameter and deep-link
+  // context to the independent mobile renderer at the narrow width.
+  await page.setViewportSize({ width: 360, height: 844 });
+  await page.goto(
+    workflowFixtureUrl(`/admin/tasks/${taskId}?from=todo#approval`),
+  );
+  await expect(page.locator('.oxa-workflow-detail-mobile')).toBeVisible();
+  await expect(page).toHaveURL(
+    new RegExp(`/m/tasks/${taskId}\\?from=todo#approval$`),
+  );
+
+  await page.goto(
+    workflowFixtureUrl(`/admin/workflows/${instanceId}?from=todo#timeline`),
+  );
+  await expect(page.locator('.oxa-workflow-detail-mobile')).toBeVisible();
+  await expect(page).toHaveURL(
+    new RegExp(`/m/workflows/${instanceId}\\?from=todo#timeline$`),
+  );
+});
+
+test('negotiates launch pairs in both directions and preserves the mount basename', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  const base = '/runtime/route-negotiation';
+  await page.setViewportSize({ width: 360, height: 844 });
+  await page.goto(
+    workflowFixtureUrl(
+      `${base}/admin/workflows/purchase-approval/new?source=todo#launch`,
+      { base },
+    ),
+  );
+  await expect(page.locator('.oxa-workflow-submission-mobile')).toBeVisible();
+  await expect(page).toHaveURL(
+    new RegExp(
+      `${base}/m/workflows/purchase-approval/start\\?source=todo#launch$`,
+    ),
+  );
+
+  await page.setViewportSize({ width: 1_440, height: 900 });
+  await expect(page.locator('.oxa-workflow-submission-desktop')).toBeVisible();
+  await expect(page).toHaveURL(
+    new RegExp(
+      `${base}/admin/workflows/purchase-approval/new\\?source=todo#launch$`,
+    ),
+  );
+});
+
+test('does not negotiate non-standard application contribution routes', async ({
+  page,
+}) => {
+  await mockWorkflow(page);
+  const base = '/runtime/route-negotiation';
+  await page.setViewportSize({ width: 360, height: 844 });
+  const customPath = `${base}/admin/operations/purchases/${instanceId}?taskId=${taskId}`;
+  await page.goto(workflowFixtureUrl(customPath, { base }));
+  await expect(page.getByTestId('custom-workflow-detail')).toContainText(
+    `${instanceId} / ${taskId}`,
+  );
+  const customUrl = page.url();
+  await expect(page).toHaveURL(new RegExp(`${base}/admin/operations/`));
+  await expect
+    .poll(() => page.url(), { timeout: 1_000 })
+    .toBe(customUrl);
+});