openxiangda-cli 2.0.0-alpha.57 → 2.0.0-alpha.59

package/template/apps/web/e2e/instruments.spec.ts

@@ -1,4 +1,58 @@
-import { expect, test } from '@playwright/test';
+import {
+  expect,
+  test,
+  type Page,
+  type Request,
+  type Route,
+} from '@playwright/test';
+import {
+  instrumentFields,
+} from '../src/fields';
+import * as XLSX from 'xlsx';
+
+const declaredInstrumentFields = new Set(
+  instrumentFields.filter(field => !field.system).map(field => field.key)
+);
+const collegeId = '11111111-1111-4111-8111-111111111111';
+const userId = '22222222-2222-4222-8222-222222222222';
+const departmentId = '33333333-3333-4333-8333-333333333333';
+const minimalDocx = Buffer.from(
+  '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',
+  'base64'
+);
+
+function previewWorkbook() {
+  const workbook = XLSX.utils.book_new();
+  XLSX.utils.book_append_sheet(
+    workbook,
+    XLSX.utils.aoa_to_sheet([
+      ['仪器编码', '仪器名称'],
+      ['INS-PREVIEW-001', '透射电子显微镜'],
+    ]),
+    '仪器清单'
+  );
+  XLSX.utils.book_append_sheet(
+    workbook,
+    XLSX.utils.aoa_to_sheet([['第二个工作表'], ['预览正常']]),
+    '维护记录'
+  );
+  return XLSX.write(workbook, { type: 'buffer', bookType: 'xlsx' }) as Buffer;
+}
+
+function expectDeclaredInstrumentQuery(request: Request) {
+  const body = request.postDataJSON() as {
+    filters?: Array<{ field: string }>;
+    order?: Array<{ field: string }>;
+  };
+  const fields = [
+    ...(body.filters || []).map(filter => filter.field),
+    ...(body.order || []).map(order => order.field),
+  ];
+  expect(fields.every(field => declaredInstrumentFields.has(field))).toBe(true);
+  expect(fields).not.toContain('updatedAt');
+  expect(fields).not.toContain('updated_at');
+  return body;
+}
 
 test('renders the production warning and never requests a role session', async ({
   page,
@@ -44,7 +98,7 @@ test('renders the production warning and never requests a role session', async (
             },
             principal: {
               type: 'user',
-              userId: 'user-e2e',
+              userId,
               roleCodes: ['college_admin', 'instrument_admin'],
               capabilityCodes: [
                 'app:instrument-center:data:instruments:read',
@@ -59,9 +113,11 @@ test('renders the production warning and never requests a role session', async (
       return;
     }
     if (url.pathname.endsWith('/native/data/instruments/query')) {
+      expectDeclaredInstrumentQuery(route.request());
       expect(route.request().postDataJSON()).toMatchObject({
         schemaVersion: 'openxiangda.data-query/v2',
         environmentKey: 'production',
+        order: [{ field: 'instrumentCode', direction: 'asc' }],
       });
       await route.fulfill({
         contentType: 'application/json',
@@ -83,13 +139,13 @@ test('renders the production warning and never requests a role session', async (
                 usageStatus: 'active',
                 instrumentStatus: 'normal',
                 openToOutside: true,
-                collegeId: 'college-am',
-                manageDepartmentId: 'dept-am-test',
-                useDepartmentId: 'dept-am-test',
-                instrumentAdminIds: ['user-e2e'],
-                contactUserIds: ['user-e2e'],
+                collegeId,
+                manageDepartmentId: departmentId,
+                useDepartmentId: departmentId,
+                instrumentAdminIds: [userId],
+                contactUserIds: [userId],
                 contactPhone: '13800138000',
-                updatedAt: '2026-08-21T00:00:00.000Z',
+                updated_at: '2026-08-21T00:00:00.000Z',
               },
             ],
             total: 1,
@@ -100,6 +156,7 @@ test('renders the production warning and never requests a role session', async (
       });
       return;
     }
+    if (await fulfillSelector(route)) return;
     await route.fulfill({
       status: 404,
       contentType: 'application/json',
@@ -110,7 +167,10 @@ test('renders the production warning and never requests a role session', async (
   await expect(page.getByTestId('production-data-warning')).toBeVisible();
   await expect(page.getByTestId('instrument-title')).toHaveText('仪器资源');
   await expect(page.getByText('场发射扫描电子显微镜')).toBeVisible();
-  await expect(page.getByText('college_admin、instrument_admin')).toBeVisible();
+  await expect(
+    page.getByRole('complementary').getByText('仪器管理', { exact: true })
+  ).toBeVisible();
+  await expect(page.getByText('王老师', { exact: true }).first()).toBeVisible();
   expect(requests.filter(url => url.includes('role-session'))).toHaveLength(0);
   expect(
     requests.some(url =>
@@ -119,6 +179,548 @@ test('renders the production warning and never requests a role session', async (
   ).toBe(true);
 });
 
+test('continues create, list, detail, update, and delete with declared query fields', async ({
+  page,
+}) => {
+  test.setTimeout(60_000);
+  let record: Record<string, unknown> | undefined;
+  const queryBodies: unknown[] = [];
+  const operations: string[] = [];
+  const protectedCapabilities = instrumentFields.flatMap(field => [
+    ...(field.createCapability ? [field.createCapability] : []),
+    ...(field.updateCapability ? [field.updateCapability] : []),
+  ]);
+
+  await installProductionRuntimeMeta(page);
+  await page.route('**/mock-upload/instrument-file-1', route =>
+    route.fulfill({ status: 200, body: '' })
+  );
+  await page.route('**/service/**', async route => {
+    const request = route.request();
+    const url = new URL(request.url());
+    const path = url.pathname;
+    if (
+      path.endsWith('/native/current-user') &&
+      url.searchParams.get('environmentKey') === 'production'
+    ) {
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.current-user/v2',
+            appCode: 'instrument-center',
+            environment: {
+              id: 'production-id',
+              key: 'production',
+              activeAppVersionId: 'app-version-1',
+              headRevision: 7,
+              authzRevisionId: 'authz-revision-1',
+              authzVersion: 3,
+              scopeDataVersion: 'scope-data-version-1',
+            },
+            principal: {
+              type: 'user',
+              userId,
+              roleCodes: ['school_admin'],
+              capabilityCodes: [
+                'app:instrument-center:data:instruments:read',
+                'app:instrument-center:data:instruments:create',
+                'app:instrument-center:data:instruments:update',
+                'app:instrument-center:data:instruments:delete',
+                ...protectedCapabilities,
+              ],
+              isAppSuperAdmin: false,
+            },
+          },
+        }),
+      });
+      return;
+    }
+    if (await fulfillSelector(route)) return;
+    if (path.endsWith('/native/data/instruments/query')) {
+      queryBodies.push(expectDeclaredInstrumentQuery(request));
+      operations.push('query');
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-page/v2',
+            resourceCode: 'instruments',
+            items: record ? [record] : [],
+            total: record ? 1 : 0,
+            limit: 20,
+            offset: 0,
+          },
+        }),
+      });
+      return;
+    }
+    if (path.endsWith('/files/uploads/initiate')) {
+      const body = request.postDataJSON() as {
+        fieldCode: string;
+        fileName: string;
+        fileSize: number;
+      };
+      expect(body).toMatchObject({
+        fieldCode: 'attachments',
+        fileName: '设备说明书.pdf',
+      });
+      operations.push('upload-initiate');
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-file-upload-plan/v2',
+            resourceCode: 'instruments',
+            fieldCode: 'attachments',
+            file: {
+              schemaVersion: 'openxiangda.data-file-ref/v2',
+              id: 'instrument-file-1',
+              name: body.fileName,
+              size: body.fileSize,
+              contentType: 'application/pdf',
+            },
+            uploadMethod: 'PUT',
+            uploadUrl: `${url.origin}/mock-upload/instrument-file-1`,
+            headers: {},
+            expiresAt: '2026-08-21T18:00:00.000Z',
+          },
+        }),
+      });
+      return;
+    }
+    if (path.endsWith('/files/instrument-file-1/complete')) {
+      operations.push('upload-complete');
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-file-ref/v2',
+            id: 'instrument-file-1',
+            name: '设备说明书.pdf',
+            size: 2048,
+            contentType: 'application/pdf',
+          },
+        }),
+      });
+      return;
+    }
+    if (path.endsWith('/native/data/instruments/records')) {
+      const body = request.postDataJSON() as {
+        environmentKey: string;
+        data: Record<string, unknown>;
+      };
+      expect(body.environmentKey).toBe('production');
+      expect(body.data.attachments).toEqual([
+        {
+          schemaVersion: 'openxiangda.data-file-ref/v2',
+          id: 'instrument-file-1',
+          name: '设备说明书.pdf',
+          size: 2048,
+          contentType: 'application/pdf',
+        },
+      ]);
+      record = {
+        ...body.data,
+        id: '092b0000-0000-4000-8000-000000000001',
+        revision: 1,
+        updated_at: '2026-08-21T01:00:00.000Z',
+      };
+      operations.push('create');
+      await fulfillRecord(route, record);
+      return;
+    }
+    if (path.endsWith('/update')) {
+      const body = request.postDataJSON() as {
+        environmentKey: string;
+        expectedRevision: number;
+        data: Record<string, unknown>;
+      };
+      expect(body.environmentKey).toBe('production');
+      expect(body.expectedRevision).toBe(record?.revision);
+      record = {
+        ...record,
+        ...body.data,
+        revision: Number(record?.revision) + 1,
+        updated_at: '2026-08-21T02:00:00.000Z',
+      };
+      operations.push('update');
+      await fulfillRecord(route, record);
+      return;
+    }
+    if (path.endsWith('/delete')) {
+      const deleted = record!;
+      const body = request.postDataJSON() as {
+        environmentKey: string;
+        expectedRevision: number;
+      };
+      expect(body.environmentKey).toBe('production');
+      expect(body.expectedRevision).toBe(record?.revision);
+      record = undefined;
+      operations.push('delete');
+      await fulfillRecord(route, deleted);
+      return;
+    }
+    if (path.endsWith('/audit')) {
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-audit-page/v2',
+            resourceCode: 'instruments',
+            recordId: record?.id,
+            items: [],
+            total: 0,
+            limit: 10,
+            offset: 0,
+          },
+        }),
+      });
+      return;
+    }
+    if (path.includes('/native/data/instruments/records/')) {
+      operations.push('get');
+      if (!record) {
+        await route.fulfill({
+          status: 404,
+          contentType: 'application/json',
+          body: JSON.stringify({ code: 404, message: 'not found' }),
+        });
+        return;
+      }
+      await fulfillRecord(route, record);
+      return;
+    }
+    await route.fulfill({
+      status: 404,
+      contentType: 'application/json',
+      body: JSON.stringify({ code: 404, message: 'not mocked' }),
+    });
+  });
+
+  await page.goto('/view/instrument-center/instruments/new');
+  await expect(
+    page.getByRole('heading', { name: '新增仪器', level: 2 })
+  ).toBeVisible();
+  await expect(page.getByText('管理与联系')).toBeVisible();
+  await expect(page.getByText('地址与资料')).toBeVisible();
+  await page.getByLabel('仪器编码').fill('INS-LIVE-001');
+  await page.getByLabel('仪器中文名').fill('原位电子显微镜');
+  await page.getByLabel('规格型号').fill('EM-LIVE');
+  await chooseOption(page, '仪器分类', '显微成像');
+  await page.getByLabel('资产编码').fill('ASSET-LIVE-001');
+  await page.getByLabel('启用日期').fill('2026-08-21');
+  await chooseOption(page, '所属学院', '先进材料学院');
+  await pickDirectoryDepartment(page, '管理部门', '材料测试中心');
+  await pickDirectoryDepartment(page, '使用部门', '材料测试中心');
+  await pickDirectoryMember(page, '仪器管理员', '王老师');
+  await pickDirectoryMember(page, '联系人', '王老师');
+  await page.getByLabel('联系电话').fill('13800138000');
+  await page
+    .locator('.oxa-file-field input[type="file"]')
+    .last()
+    .setInputFiles({
+      name: '设备说明书.pdf',
+      mimeType: 'application/pdf',
+      buffer: Buffer.from('openxiangda instrument manual'),
+    });
+  await expect(page.getByText('设备说明书.pdf')).toBeVisible();
+  await page.getByTestId('save-instrument').click();
+
+  await expect(page).toHaveURL(/\/view\/instrument-center\/instruments$/);
+  await expect(page.getByText('原位电子显微镜')).toBeVisible();
+  await expect(page.locator('.ant-table-tbody')).toContainText('2026');
+  await expect(
+    page
+      .getByRole('columnheader', { name: '更新时间' })
+      .locator('.ant-table-column-sorter')
+  ).toHaveCount(0);
+  const queriesBeforeSort = queryBodies.length;
+  await page.getByRole('columnheader', { name: /仪器名称/ }).click();
+  await expect.poll(() => queryBodies.length).toBeGreaterThan(queriesBeforeSort);
+  expect(
+    (queryBodies.at(-1) as { order: Array<{ field: string; direction: string }> })
+      .order
+  ).toEqual([{ field: 'chineseName', direction: 'asc' }]);
+  await page.getByText('原位电子显微镜').click();
+  await expect(
+    page.getByRole('heading', { name: '仪器详情', level: 2 })
+  ).toBeVisible();
+  await expect(page.getByText('记录信息')).toBeVisible();
+  await expect(page.getByText('设备说明书.pdf')).toBeVisible();
+  await page.getByRole('button', { name: /编.*辑/ }).click();
+  await expect(page.getByRole('dialog')).toHaveCount(0);
+  await expect(page.getByText('管理与联系')).toBeVisible();
+  await page.getByLabel('仪器中文名').fill('原位电子显微镜（更新）');
+  await page.getByTestId('save-instrument').click();
+  await expect(
+    page.getByRole('heading', { name: '原位电子显微镜（更新）' })
+  ).toBeVisible();
+  await page.getByRole('button', { name: '返回列表' }).click();
+  await expect(page).toHaveURL(/\/view\/instrument-center\/instruments$/);
+  await expect(
+    page.locator('.ant-table-tbody').getByText('原位电子显微镜（更新）')
+  ).toBeVisible();
+  await page.getByLabel('删除').click();
+  await page.getByRole('button', { name: /确.*定/ }).click();
+  await expect(
+    page.locator('.ant-table-tbody').getByText('原位电子显微镜（更新）')
+  ).toHaveCount(0);
+
+  await page.setViewportSize({ width: 760, height: 900 });
+  await page.goto('/view/instrument-center/instruments/new');
+  await expect(
+    page.getByRole('heading', { name: '新增仪器', level: 2 })
+  ).toBeVisible();
+  await expect(page.getByRole('dialog', { name: '新增仪器' })).toHaveCount(0);
+  await expect(page.getByRole('button', { name: '展开侧边栏' })).toBeVisible();
+
+  expect(queryBodies.length).toBeGreaterThanOrEqual(2);
+  expect(operations).toEqual(
+    expect.arrayContaining([
+      'upload-initiate',
+      'upload-complete',
+      'create',
+      'query',
+      'get',
+      'update',
+      'delete',
+    ])
+  );
+});
+
+test('college admin can choose only granted college on create and cannot reassign on update', async ({
+  page,
+}) => {
+  const requests: string[] = [];
+  page.on('request', request => requests.push(request.url()));
+  const protectedCreate = instrumentFields.flatMap(field =>
+    field.createCapability ? [field.createCapability] : []
+  );
+  const protectedUpdate = instrumentFields.flatMap(field =>
+    field.updateCapability && field.key !== 'collegeId'
+      ? [field.updateCapability]
+      : []
+  );
+  await installProductionRuntimeMeta(page);
+  await page.route('**/service/**', async route => {
+    const url = new URL(route.request().url());
+    if (url.pathname.endsWith('/native/current-user')) {
+      await fulfillIdentity(route, 'college_admin', [
+        'app:instrument-center:data:instruments:read',
+        'app:instrument-center:data:instruments:create',
+        'app:instrument-center:data:instruments:update',
+        ...protectedCreate,
+        ...protectedUpdate,
+      ]);
+      return;
+    }
+    if (await fulfillSelector(route)) return;
+    if (url.pathname.includes('/native/data/instruments/records/')) {
+      await fulfillRecord(route, instrumentFixture());
+      return;
+    }
+    await route.fulfill({ status: 404, body: '{}' });
+  });
+
+  await page.goto('/view/instrument-center/instruments/new');
+  await expect(page.getByLabel('所属学院')).toBeEnabled();
+  await chooseOption(page, '所属学院', '先进材料学院');
+  await expect(page.getByLabel('所属学院')).toHaveValue('');
+  await expect(page.getByLabel('仪器管理员')).toBeEnabled();
+
+  await page.goto(
+    '/view/instrument-center/instruments/092b0000-0000-4000-8000-000000000001/edit'
+  );
+  await expect(page.getByLabel('所属学院')).toBeDisabled();
+  await expect(page.getByLabel('仪器管理员')).toBeEnabled();
+  expect(requests.filter(url => url.includes('role-session'))).toHaveLength(0);
+});
+
+test('instrument admin edits ordinary fields but every protected field stays disabled', async ({
+  page,
+}) => {
+  const requests: string[] = [];
+  page.on('request', request => requests.push(request.url()));
+  await installProductionRuntimeMeta(page);
+  await page.route('**/service/**', async route => {
+    const url = new URL(route.request().url());
+    if (url.pathname.endsWith('/native/current-user')) {
+      await fulfillIdentity(route, 'instrument_admin', [
+        'app:instrument-center:data:instruments:read',
+        'app:instrument-center:data:instruments:update',
+      ]);
+      return;
+    }
+    if (await fulfillSelector(route)) return;
+    if (url.pathname.includes('/native/data/instruments/records/')) {
+      await fulfillRecord(route, instrumentFixture());
+      return;
+    }
+    await route.fulfill({ status: 404, body: '{}' });
+  });
+
+  await page.goto(
+    '/view/instrument-center/instruments/092b0000-0000-4000-8000-000000000001/edit'
+  );
+  for (const label of [
+    '仪器编码',
+    '资产编码',
+    '资产价值（元）',
+    '所属学院',
+    '仪器管理员',
+  ]) {
+    await expect(page.getByLabel(label)).toBeDisabled();
+  }
+  await expect(page.getByLabel('仪器中文名')).toBeEnabled();
+  expect(requests.filter(url => url.includes('role-session'))).toHaveLength(0);
+});
+
+test('directory selector debounces search and keeps empty or failed results honest', async ({
+  page,
+}) => {
+  const keywords: string[] = [];
+  await installProductionRuntimeMeta(page);
+  await page.route('**/service/**', async route => {
+    const url = new URL(route.request().url());
+    if (url.pathname.endsWith('/native/current-user')) {
+      await fulfillIdentity(route, 'school_admin', [
+        'app:instrument-center:data:instruments:read',
+        'app:instrument-center:data:instruments:create',
+        ...instrumentFields.flatMap(field =>
+          field.createCapability ? [field.createCapability] : []
+        ),
+      ]);
+      return;
+    }
+    if (url.pathname.endsWith('/directory/users')) {
+      const keyword = url.searchParams.get('keyword') || '';
+      keywords.push(keyword);
+      if (keyword === '错误词') {
+        await route.fulfill({
+          status: 503,
+          contentType: 'application/json',
+          body: JSON.stringify({
+            code: 503,
+            errorCode: 'DIRECTORY_UNAVAILABLE',
+            message: '目录暂不可用',
+          }),
+        });
+        return;
+      }
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: directoryPage('user', []),
+        }),
+      });
+      return;
+    }
+    if (await fulfillSelector(route)) return;
+    await route.fulfill({ status: 404, body: '{}' });
+  });
+
+  await page.goto('/view/instrument-center/instruments/new');
+  await page.getByRole('button', { name: /仪器管理员/ }).click();
+  const dialog = page.getByRole('dialog', { name: '选择成员' });
+  const input = dialog.getByPlaceholder('搜索成员姓名或工号');
+  await input.fill('王老师');
+  await input.fill('李老师');
+  await expect.poll(() => keywords).toEqual(['李老师']);
+  await expect(dialog.getByText('暂无成员')).toBeVisible();
+  await input.fill('错误词');
+  await expect.poll(() => keywords.at(-1)).toBe('错误词');
+  await expect(dialog.getByText(/DIRECTORY_UNAVAILABLE/)).toBeVisible();
+  await expect(dialog.getByText('王老师')).toHaveCount(0);
+});
+
+test('school admin maintains the app-owned college UUID catalog without delete', async ({
+  page,
+}) => {
+  let colleges = [
+    { id: collegeId, revision: 1, name: '先进材料学院', enabled: true },
+  ];
+  const operations: string[] = [];
+  await installProductionRuntimeMeta(page);
+  await page.route('**/service/**', async route => {
+    const request = route.request();
+    const url = new URL(request.url());
+    if (url.pathname.endsWith('/native/current-user')) {
+      await fulfillIdentity(route, 'school_admin', [
+        'app:instrument-center:data:colleges:read',
+        'app:instrument-center:data:colleges:create',
+        'app:instrument-center:data:colleges:update',
+      ]);
+      return;
+    }
+    if (url.pathname.endsWith('/native/data/colleges/query')) {
+      operations.push('query');
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-page/v2',
+            resourceCode: 'colleges',
+            items: colleges,
+            total: colleges.length,
+            limit: 20,
+            offset: 0,
+          },
+        }),
+      });
+      return;
+    }
+    if (url.pathname.endsWith(`/native/data/colleges/records/${collegeId}/update`)) {
+      const body = request.postDataJSON() as {
+        expectedRevision: number;
+        data: { name: string; enabled: boolean };
+      };
+      expect(body.expectedRevision).toBe(1);
+      colleges = [{ ...colleges[0]!, ...body.data, revision: 2 }];
+      operations.push('update');
+      await fulfillCollegeRecord(route, colleges[0]!);
+      return;
+    }
+    if (url.pathname.endsWith('/native/data/colleges/records')) {
+      const body = request.postDataJSON() as {
+        data: { name: string; enabled: boolean };
+      };
+      const created = {
+        id: '44444444-4444-4444-8444-444444444444',
+        revision: 1,
+        ...body.data,
+      };
+      colleges = [...colleges, created];
+      operations.push('create');
+      await fulfillCollegeRecord(route, created);
+      return;
+    }
+    await route.fulfill({ status: 404, body: '{}' });
+  });
+
+  await page.goto('/view/instrument-center/colleges');
+  await expect(page.getByText('先进材料学院')).toBeVisible();
+  await page.getByRole('button', { name: /编.*辑/ }).click();
+  await page.getByLabel('学院名称').fill('材料科学学院');
+  await page.getByRole('button', { name: /保.*存/ }).click();
+  await expect(page.getByText('材料科学学院')).toBeVisible();
+  await page.getByRole('button', { name: /新.*增学院/ }).click();
+  await page.getByLabel('学院名称').fill('生命科学学院');
+  await page.getByRole('button', { name: /保.*存/ }).click();
+  await expect(page.getByText('生命科学学院')).toBeVisible();
+  await expect(page.getByRole('button', { name: /删.*除/ })).toHaveCount(0);
+  expect(operations).toEqual(
+    expect.arrayContaining(['query', 'update', 'create'])
+  );
+});
+
 test('keeps the production warning visible when current-user fails closed', async ({
   page,
 }) => {
@@ -148,3 +750,589 @@ test('keeps the production warning visible when current-user fails closed', asyn
   await expect(page.getByTestId('production-data-warning')).toBeVisible();
   await expect(page.getByText('无法读取平台当前用户')).toBeVisible();
 });
+
+test('previews images in a lightbox and documents in focused new windows', async ({
+  page,
+  context,
+}) => {
+  test.setTimeout(60_000);
+  const image = Buffer.from(
+    'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=',
+    'base64'
+  );
+  const spreadsheet = previewWorkbook();
+  const pdf = Buffer.from(
+    '%PDF-1.4\n1 0 obj<</Type/Catalog/Pages 2 0 R>>endobj\n2 0 obj<</Type/Pages/Kids[3 0 R]/Count 1>>endobj\n3 0 obj<</Type/Page/Parent 2 0 R/MediaBox[0 0 300 200]>>endobj\ntrailer<</Root 1 0 R>>\n%%EOF'
+  );
+  const files = new Map([
+    [
+      'preview-image',
+      {
+        name: '显微镜照片.png',
+        type: 'image/png',
+        body: image,
+        previewType: 'image',
+        renderMode: 'inline',
+        canPreview: true,
+        unsupportedReason: '',
+      },
+    ],
+    [
+      'preview-docx',
+      {
+        name: '设备说明书.docx',
+        type: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+        body: minimalDocx,
+        previewType: 'office',
+        renderMode: 'docx-html',
+        canPreview: true,
+        unsupportedReason: '',
+      },
+    ],
+    [
+      'preview-xlsx',
+      {
+        name: '仪器清单.xlsx',
+        type: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+        body: spreadsheet,
+        previewType: 'spreadsheet',
+        renderMode: 'excel-client',
+        canPreview: true,
+        unsupportedReason: '',
+      },
+    ],
+    [
+      'preview-pdf',
+      {
+        name: '验收报告.pdf',
+        type: 'application/pdf',
+        body: pdf,
+        previewType: 'pdf',
+        renderMode: 'pdfjs',
+        canPreview: true,
+        unsupportedReason: '',
+      },
+    ],
+    [
+      'preview-doc',
+      {
+        name: '旧版说明书.doc',
+        type: 'application/msword',
+        body: Buffer.from('legacy-word-file'),
+        previewType: 'download',
+        renderMode: 'download',
+        canPreview: false,
+        unsupportedReason: '该旧版 Office 格式暂不支持在线预览，请下载后打开',
+      },
+    ],
+  ]);
+  const byName = new Map([...files].map(([id, file]) => [file.name, id]));
+  const inlineReads: string[] = [];
+  await context.route('**/mock-upload/**', route =>
+    route.fulfill({ status: 200, body: '' })
+  );
+  await context.route('**/service/**', async route => {
+    const request = route.request();
+    const url = new URL(request.url());
+    if (url.pathname.endsWith('/dev-sessions/current')) {
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            environment: { id: 'test-id', key: 'preproduction' },
+            principal: {
+              userId,
+              roleCodes: ['school_admin'],
+              capabilityCodes: [],
+              isAppSuperAdmin: true,
+            },
+          },
+        }),
+      });
+      return;
+    }
+    if (url.pathname.endsWith('/files/uploads/initiate')) {
+      const input = request.postDataJSON() as {
+        fileName: string;
+        fileSize: number;
+        contentType: string;
+      };
+      const id = byName.get(input.fileName)!;
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-file-upload-plan/v2',
+            resourceCode: 'instruments',
+            fieldCode: input.contentType.startsWith('image/') ? 'image' : 'attachments',
+            file: {
+              schemaVersion: 'openxiangda.data-file-ref/v2',
+              id,
+              name: input.fileName,
+              size: input.fileSize,
+              contentType: input.contentType,
+            },
+            uploadMethod: 'PUT',
+            uploadUrl: `${url.origin}/mock-upload/${id}`,
+            headers: {},
+            expiresAt: '2026-08-21T18:00:00.000Z',
+          },
+        }),
+      });
+      return;
+    }
+    const complete = url.pathname.match(/\/files\/(preview-[^/]+)\/complete$/);
+    if (complete) {
+      const id = complete[1]!;
+      const file = files.get(id)!;
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-file-ref/v2',
+            id,
+            name: file.name,
+            size: file.body.length,
+            contentType: file.type,
+          },
+        }),
+      });
+      return;
+    }
+    const preview = url.pathname.match(/\/files\/(preview-[^/]+)\/preview$/);
+    if (preview) {
+      const id = preview[1]!;
+      const file = files.get(id)!;
+      await route.fulfill({
+        contentType: 'application/json',
+        body: JSON.stringify({
+          code: 200,
+          data: {
+            schemaVersion: 'openxiangda.data-file-preview/v2',
+            resourceCode: 'instruments',
+            file: {
+              schemaVersion: 'openxiangda.data-file-ref/v2',
+              id,
+              name: file.name,
+              size: file.body.length,
+              contentType: file.type,
+            },
+            extension: file.name.split('.').pop(),
+            previewType: file.previewType,
+            renderMode: file.renderMode,
+            previewSurface: file.previewType === 'image' ? 'media' : 'document',
+            previewProvider: 'browser',
+            canPreview: file.canPreview,
+            canDownload: true,
+            ...(file.unsupportedReason
+              ? { unsupportedReason: file.unsupportedReason }
+              : {}),
+          },
+        }),
+      });
+      return;
+    }
+    const content = url.pathname.match(/\/files\/(preview-[^/]+)\/content$/);
+    if (content) {
+      const id = content[1]!;
+      const file = files.get(id)!;
+      if (url.searchParams.get('disposition') === 'inline') inlineReads.push(id);
+      await route.fulfill({
+        status: 200,
+        contentType: file.type,
+        body: file.body,
+      });
+      return;
+    }
+    await route.fulfill({ status: 404, body: '{}' });
+  });
+
+  await page.goto('/instruments/new');
+  const fileFields = page.locator('.oxa-file-field');
+  const imageInput = fileFields.nth(0).locator('input[type="file"]').first();
+  const attachmentInput = fileFields.nth(1).locator('input[type="file"]').first();
+  await imageInput.setInputFiles({
+    name: '显微镜照片.png',
+    mimeType: 'image/png',
+    buffer: image,
+  });
+  for (const [name, mimeType, buffer] of [
+    ['设备说明书.docx', files.get('preview-docx')!.type, minimalDocx],
+    ['仪器清单.xlsx', files.get('preview-xlsx')!.type, spreadsheet],
+    ['验收报告.pdf', 'application/pdf', pdf],
+    ['旧版说明书.doc', 'application/msword', files.get('preview-doc')!.body],
+  ] as const) {
+    await attachmentInput.setInputFiles({ name, mimeType, buffer });
+    await expect(page.getByText(name, { exact: true })).toBeVisible();
+  }
+
+  await page.getByRole('button', { name: '预览显微镜照片.png' }).click();
+  await expect(page.locator('.ant-image-preview-img')).toBeVisible();
+  await page.keyboard.press('Escape');
+
+  const docxPagePromise = context.waitForEvent('page');
+  await page.getByRole('button', { name: '预览设备说明书.docx' }).click();
+  const docxPage = await docxPagePromise;
+  await expect(docxPage.getByText('OpenXiangda Word Preview')).toBeVisible();
+  await docxPage.close();
+
+  const xlsxPagePromise = context.waitForEvent('page');
+  await page.getByRole('button', { name: '预览仪器清单.xlsx' }).click();
+  const xlsxPage = await xlsxPagePromise;
+  await expect(xlsxPage.getByText('透射电子显微镜')).toBeVisible();
+  await xlsxPage.getByText('维护记录', { exact: true }).click();
+  await expect(xlsxPage.getByText('预览正常')).toBeVisible();
+  await xlsxPage.close();
+
+  const pdfPagePromise = context.waitForEvent('page');
+  await page.getByRole('button', { name: '预览验收报告.pdf' }).click();
+  const pdfPage = await pdfPagePromise;
+  await expect(pdfPage.locator('iframe[title="验收报告.pdf PDF 预览"]')).toBeVisible();
+  await pdfPage.close();
+
+  const legacyPagePromise = context.waitForEvent('page');
+  await page.getByRole('button', { name: '预览旧版说明书.doc' }).click();
+  const legacyPage = await legacyPagePromise;
+  await expect(
+    legacyPage.getByText('该旧版 Office 格式暂不支持在线预览，请下载后打开')
+  ).toBeVisible();
+  await expect(legacyPage.getByRole('link', { name: '下载文件' })).toBeVisible();
+  await legacyPage.close();
+
+  expect(inlineReads).toEqual(
+    expect.arrayContaining([
+      'preview-image',
+      'preview-docx',
+      'preview-xlsx',
+      'preview-pdf',
+    ])
+  );
+  expect(inlineReads).not.toContain('preview-doc');
+});
+
+async function installProductionRuntimeMeta(page: Page) {
+  await page.route('**/view/instrument-center/**', async route => {
+    if (route.request().resourceType() !== 'document') {
+      await route.continue();
+      return;
+    }
+    const response = await route.fetch();
+    const body = (await response.text()).replace(
+      '<head>',
+      `<head>
+        <meta name="openxiangda-runtime-base" content="/view/instrument-center/" />
+        <meta name="openxiangda-app-code" content="instrument-center" />
+        <meta name="openxiangda-environment" content="production" />`
+    );
+    await route.fulfill({ response, body });
+  });
+}
+
+async function chooseOption(page: Page, label: string, option: string) {
+  const input = page.getByLabel(label);
+  await input.focus();
+  await input.press('ArrowDown');
+  await expect(
+    page.getByRole('option', { name: option, exact: true })
+  ).toHaveCount(1);
+  await input.press('Enter');
+  await input.press('Escape');
+}
+
+async function pickDirectoryMember(
+  page: Page,
+  label: string,
+  option: string
+) {
+  const trigger = page.getByRole('button', { name: new RegExp(label) });
+  await trigger.click();
+  const dialog = page.getByRole('dialog', { name: '选择成员' });
+  await expect(dialog.getByText(option, { exact: true })).toBeVisible();
+  await dialog.getByText(option, { exact: true }).click();
+  await dialog.getByRole('button', { name: /确.*定/ }).click();
+  await expect(trigger).toContainText(option);
+}
+
+async function pickDirectoryDepartment(
+  page: Page,
+  label: string,
+  option: string
+) {
+  const trigger = page.getByRole('button', { name: new RegExp(label) });
+  await trigger.click();
+  const dialog = page.getByRole('dialog', { name: '选择部门' });
+  await dialog.getByText(option, { exact: true }).click();
+  await dialog.getByRole('button', { name: /确.*定/ }).click();
+  await expect(trigger).toContainText(option);
+}
+
+async function fulfillSelector(route: Route) {
+  const request = route.request();
+  const url = new URL(request.url());
+  if (url.pathname.endsWith('/directory/departments/tree')) {
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: directoryPage('department', [
+          {
+            kind: 'department',
+            id: departmentId,
+            label: '材料测试中心',
+            description: '先进材料学院 / 材料测试中心',
+            path: [
+              { id: collegeId, label: '先进材料学院' },
+              { id: departmentId, label: '材料测试中心' },
+            ],
+            hasChildren: false,
+            selectable: true,
+          },
+        ]),
+      }),
+    });
+    return true;
+  }
+  if (
+    url.pathname.endsWith(
+      `/directory/departments/${encodeURIComponent(departmentId)}/users`
+    )
+  ) {
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: directoryPage('user', [
+          {
+            kind: 'user',
+            id: userId,
+            label: '王老师',
+            description: '工号 10001 · 材料测试中心',
+            selectable: true,
+          },
+        ]),
+      }),
+    });
+    return true;
+  }
+  if (url.pathname.endsWith('/directory/users')) {
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: directoryPage('user', [
+          { kind: 'user', id: userId, label: '王老师', selectable: true },
+        ]),
+      }),
+    });
+    return true;
+  }
+  if (url.pathname.endsWith('/directory/departments')) {
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: directoryPage('department', [
+          {
+            kind: 'department',
+            id: departmentId,
+            label: '材料测试中心',
+            selectable: true,
+          },
+        ]),
+      }),
+    });
+    return true;
+  }
+  if (url.pathname.endsWith('/directory/resolve')) {
+    const body = request.postDataJSON() as {
+      kind: 'user' | 'department';
+      ids: string[];
+    };
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: directoryPage(
+          body.kind,
+          body.ids.map(id => ({
+            kind: body.kind,
+            id,
+            label: body.kind === 'user' ? '王老师' : '材料测试中心',
+            selectable: true,
+          }))
+        ),
+      }),
+    });
+    return true;
+  }
+  if (url.pathname.endsWith('/scope-values')) {
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: scopePage(url.searchParams.get('operation') || 'update', [
+          { value: collegeId, label: '先进材料学院', selectable: true },
+        ]),
+      }),
+    });
+    return true;
+  }
+  if (url.pathname.endsWith('/scope-values/resolve')) {
+    const body = request.postDataJSON() as {
+      operation: string;
+      values: string[];
+    };
+    await route.fulfill({
+      contentType: 'application/json',
+      body: JSON.stringify({
+        code: 200,
+        data: scopePage(
+          body.operation,
+          body.values.map(value => ({
+            value,
+            label: '先进材料学院',
+            selectable: true,
+          }))
+        ),
+      }),
+    });
+    return true;
+  }
+  return false;
+}
+
+function directoryPage(
+  kind: 'user' | 'department',
+  items: Array<{
+    kind: 'user' | 'department';
+    id: string;
+    label: string;
+    description?: string;
+    path?: Array<{ id: string; label: string }>;
+    hasChildren?: boolean;
+    selectable: boolean;
+  }>
+) {
+  return {
+    schemaVersion: 'openxiangda.directory-entry-page/v2',
+    kind,
+    items,
+    nextCursor: null,
+  };
+}
+
+function scopePage(
+  operation: string,
+  items: Array<{ value: string; label: string; selectable: boolean }>
+) {
+  return {
+    schemaVersion: 'openxiangda.native-scope-value-page/v2',
+    environment: {
+      id: 'production-id',
+      key: 'production',
+      activeAppVersionId: 'app-version-1',
+      headRevision: 7,
+      authzRevisionId: 'authz-revision-1',
+      authzVersion: 3,
+      scopeDataVersion: 'scope-data-version-1',
+    },
+    resourceCode: 'instruments',
+    fieldCode: 'collegeId',
+    dimensionCode: 'college',
+    operation,
+    items,
+    nextCursor: null,
+  };
+}
+
+async function fulfillRecord(
+  route: Route,
+  record: Record<string, unknown>
+) {
+  await route.fulfill({
+    contentType: 'application/json',
+    body: JSON.stringify({
+      code: 200,
+      data: {
+        schemaVersion: 'openxiangda.data-record/v2',
+        resourceCode: 'instruments',
+        data: record,
+      },
+    }),
+  });
+}
+
+async function fulfillCollegeRecord(
+  route: Route,
+  record: Record<string, unknown>
+) {
+  await route.fulfill({
+    contentType: 'application/json',
+    body: JSON.stringify({
+      code: 200,
+      data: {
+        schemaVersion: 'openxiangda.data-record/v2',
+        resourceCode: 'colleges',
+        data: record,
+      },
+    }),
+  });
+}
+
+async function fulfillIdentity(
+  route: Route,
+  roleCode: string,
+  capabilityCodes: string[]
+) {
+  await route.fulfill({
+    contentType: 'application/json',
+    body: JSON.stringify({
+      code: 200,
+      data: {
+        schemaVersion: 'openxiangda.current-user/v2',
+        appCode: 'instrument-center',
+        environment: {
+          id: 'production-id',
+          key: 'production',
+          activeAppVersionId: 'app-version-1',
+          headRevision: 7,
+          authzRevisionId: 'authz-revision-1',
+          authzVersion: 3,
+          scopeDataVersion: 'scope-data-version-1',
+        },
+        principal: {
+          type: 'user',
+          userId,
+          roleCodes: [roleCode],
+          capabilityCodes,
+          isAppSuperAdmin: false,
+        },
+      },
+    }),
+  });
+}
+
+function instrumentFixture() {
+  return {
+    id: '092b0000-0000-4000-8000-000000000001',
+    revision: 2,
+    instrumentCode: 'INS-001',
+    chineseName: '场发射扫描电子显微镜',
+    specModel: 'SU8600',
+    categoryId: 'analysis_microscope',
+    assetCode: 'ASSET-001',
+    enabledDate: '2025-01-01',
+    usageStatus: 'active',
+    instrumentStatus: 'normal',
+    openToOutside: true,
+    collegeId,
+    manageDepartmentId: departmentId,
+    useDepartmentId: departmentId,
+    instrumentAdminIds: [userId],
+    contactUserIds: [userId],
+    contactPhone: '13800138000',
+  };
+}