yaoyao/tests/server/workspace.test.ts

// @vitest-environment node
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
import { mkdtempSync, rmSync } from 'node:fs'
import { tmpdir } from 'node:os'
import { join } from 'node:path'
import { randomUUID, createHash } from 'node:crypto'
import { WebSocketServer, type WebSocket } from 'ws'
import { defaultAgentIdentity, encodeAgentAvatar, decodeAgentAvatar } from '../../src/shared/agentIdentity'
import {readHostTools,saveHostTools} from '../../src/server/hostToolSettings'
import {DesktopEnvironments} from '../../src/server/desktopEnvironments'
import {HttpError} from '../../src/server/errors'
import * as sessionStop from '../../src/server/sessionStop'
import {ExecutionSettings} from '../../src/server/executionSettings'
import {WorkspaceAssets} from '../../src/server/workspaceAssets'
import { WorkspaceStore } from '../../src/server/workspaceStore'
import { WorkspaceRuntime, mentionedAgents } from '../../src/server/workspaceRuntime'
import type { WorkspacePlugins } from '../../src/server/botPlugins/workspacePlugins'
import type { Work } from '../../src/server/workspaceScheduler'
import { REPEATED_RELAY_NOTICE } from '../../src/server/workspaceRelay'
import { WorkspaceNodes, WorkspaceGateway, type GatewayTarget } from '../../src/server/workspaceGateway'
import { UploadStore } from '../../src/server/uploads'
import type {
  WorkspaceConversation,
  WorkspaceRun,
  WorkspaceMessage,
  WorkspaceInteraction,
} from '../../src/shared/workspace'

let home: string,
  store: WorkspaceStore,
  uploads: UploadStore,
  runtime: WorkspaceRuntime,
  server: WebSocketServer
let requests: Array<{ method: string; params: Record<string, any> }>,
  reply: (socket: WebSocket, params: Record<string, any>) => void
let nodes: WorkspaceNodes
let configuredCwds: Map<string, string>
let rejectPrompt: string | undefined
let observeGatewayRequest: ((frame: { method: string; params: Record<string, any> }) => void) | undefined
let rejectedModelConfig: Record<string, unknown> | undefined
let rejectedInterrupts: number
let nativeStillWorking:boolean
let recoveryHistory: Array<{ role: string; content: string; tool_calls?: unknown }>
let storedByRuntime: Map<string, string>, recoveryByStored: Map<string, Array<{ role: string; content: string }>>
let resumeExistingRuntime: boolean, profileMtime: number | undefined
let modelInfo: Map<string, { model: string; provider: string }>
const owner = 'first-user',
  other = 'second-user'
beforeEach(async () => {
  home = mkdtempSync(join(tmpdir(), 'yaoyao-workspace-test-'))
  store = new WorkspaceStore(home)
  uploads = new UploadStore(home)
  requests = []
  configuredCwds = new Map()
  recoveryHistory = []
  storedByRuntime = new Map(); recoveryByStored = new Map()
  resumeExistingRuntime = false; profileMtime = 1; modelInfo = new Map()
  rejectPrompt = undefined
  observeGatewayRequest = undefined
  rejectedModelConfig = undefined
  rejectedInterrupts = 0
  nativeStillWorking=false
  server = new WebSocketServer({ port: 0, host: '127.0.0.1' })
  await new Promise<void>((resolve) => server.once('listening', resolve))
  const address = server.address() as { port: number }
  const target = {
    url: new URL(`http://127.0.0.1:${address.port}`),
    client: { directAgent: undefined },
    session: {
      webSocketCredential: async () => ({ name: 'ticket', value: 'test' }),
      request: async (path: string, options?: {search?: URLSearchParams}) => ({
        status: 200,
        body: Buffer.from(JSON.stringify(path === '/api/config'
          ? { terminal: { cwd: configuredCwds.get(options?.search?.get('profile') ?? '') } }
          : { messages: (() => { const all = recoveryByStored.get(decodeURIComponent(path.split('/')[3]!)) ?? recoveryHistory; const offset = Number(options?.search?.get('offset') ?? 0); return all.slice(Math.max(0,all.length-offset-500), all.length-offset) })() })),
      }),
    },
  }
  nodes = { requireSource: () => {}, target: () => target } as unknown as WorkspaceNodes
  runtime = new WorkspaceRuntime(store, nodes, uploads)
  reply = (socket, p) =>
    setTimeout(
      () =>
        socket.send(
          JSON.stringify({
            method: 'event',
            params: {
              type: 'message.complete',
              session_id: p.session_id,
              payload: { text: '完成', status: 'complete' },
            },
          }),
        ),
      5,
    )
  server.on('connection', (socket) => {
    socket.send(JSON.stringify({ method: 'event', params: { type: 'gateway.ready' } }))
    socket.on('message', (data) => {
      const frame = JSON.parse(String(data))
      requests.push(frame)
      observeGatewayRequest?.(frame)
      const respond = (result: unknown) => socket.send(JSON.stringify({ id: frame.id, result }))
      if (frame.method === 'session.create' || frame.method === 'session.resume') {
        const previousRuntime = resumeExistingRuntime && frame.method === 'session.resume'
          ? [...storedByRuntime].find(([, stored]) => stored === frame.params.session_id)?.[0] : undefined
        const runtimeId = previousRuntime ?? randomUUID(), storedId = frame.method === 'session.resume' ? frame.params.session_id : randomUUID()
        storedByRuntime.set(runtimeId, storedId)
        respond({ session_id: runtimeId, stored_session_id: storedId, running: false, info: { profile_name: frame.params.profile, ...modelInfo.get(runtimeId) } })
      }
      else if (frame.method === 'session.cwd.set') respond({ cwd: frame.params.cwd })
      else if (frame.method === 'config.get') respond({ mtime: profileMtime })
      else if (frame.method === 'config.set') {
        if (!rejectedModelConfig && frame.params.key === 'model') {
          const [model, route] = frame.params.value.split(' --provider ')
          modelInfo.set(frame.params.session_id, { model, provider: route.split(' --session')[0] })
        }
        respond(rejectedModelConfig ?? { value: frame.params.key === 'model' ? frame.params.value.split(' --provider ')[0] : frame.params.value, scope:'session' })
      }
      else if (frame.method === 'prompt.submit') {
        if (rejectPrompt) { socket.send(JSON.stringify({id:frame.id,error:{code:4006,message:rejectPrompt}})); return }
        respond({ status: 'streaming' })
        reply(socket, frame.params)
      } else if (frame.method === 'session.usage') respond({ context_used: 400, context_max: 1000 })
      else if (frame.method === 'session.active_list') respond({sessions:[{id:frame.params.current_session_id,status:nativeStillWorking?'working':'idle'}]})
      else if (frame.method === 'session.interrupt' && rejectedInterrupts-- > 0) socket.send(JSON.stringify({id:frame.id,error:{code:500,message:'暂时不能中断'}}))
      else respond({ ok: true, status: 'interrupted' })
    })
  })
})
afterEach(async () => {
  runtime.close()
  await new Promise((resolve) => setTimeout(resolve, 10))
  for (const client of server.clients) client.terminate()
  await new Promise<void>((resolve) => server.close(() => resolve()))
  uploads.close()
  store.close()
  rmSync(home, { recursive: true, force: true })
})
function agent(name: string, user = owner) {
  return store.createAgent(user, { name, profile: 'default', instructions: `规则：你是${name}` })
}
it('includes only the connected per-turn MCP inventory in the submitted Bot prompt', async () => {
  const bot = agent('MCP 检查助手'), conversation = direct(bot.id)
  const target = nodes.target(owner, 'local'), request = target.session.request.bind(target.session)
  vi.spyOn(target.session, 'request').mockImplementation(async (path, options) => path.startsWith('/api/plugins/yaoyao-bot-bridge/')
    ? { status: 200, body: Buffer.from(JSON.stringify({ ok: true, version: 1, ready: true, in_process: true, native_tools: true })), headers: new Headers() }
    : request(path, options))
  const services = vi.fn(() => [{ name: 'vaultwarden', transport: 'stdio' as const, toolCount: 59 }])
  const open = vi.fn(async () => ({ services, warnings: () => [], catalog: () => [], call: vi.fn(), dispose: async () => {} }))
  runtime.plugins = { selected: () => true, open } as unknown as WorkspacePlugins
  const run = runtime.send(owner, conversation.id, { requestId: randomUUID(), content: '查看 vaultwarden mcp 是否正常使用' })
  await vi.waitFor(() => expect(['complete', 'failed']).toContain(store.require<WorkspaceRun>(owner, 'run', run.id).status))
  const settled = store.require<WorkspaceRun>(owner, 'run', run.id)
  expect(settled.status, settled.error).toBe('complete')
  expect(open).toHaveBeenCalledOnce()
  expect(services).toHaveBeenCalledOnce()
  const prompt = requests.find(frame => frame.method === 'prompt.submit')!.params.text
  expect(prompt).toContain('"name":"vaultwarden","transport":"stdio","toolCount":59')
  expect(prompt).toContain('yaoyao_tools')
  expect(prompt).toContain('不能根据 hermes mcp list/test 的结果判断这些服务不存在')
})
it('executes a structured assignment on its actual worker and leaves acceptance to its coordinator', async () => {
  const lead = store.updateAgent(owner, agent('负责人').id, { canManageTeam: true })
  const worker = agent('研究成员')
  const source = direct(lead.id)
  const original = runtime.send(owner, source.id, { requestId: randomUUID(), content: '完成研究' })
  for (const work of store.list<any>(owner, 'turn').filter(w => w.runId === original.id))
    store.put(owner, 'turn', work.id, { ...work, status: 'complete', planned: true })
  original.status = 'complete';store.saveRun(owner, original)
  const team = store.createGroup(owner, { name: '研究团队', memberIds: [lead.id,worker.id], administratorId: lead.id })
  const goal = runtime.tasks.begin(owner, store.tasks(owner, team.id)[0]!, lead, '研究事实', { conversationId: source.id, runId: original.id, agentId: lead.id })
  const assignment = runtime.tasks.createAssignment(owner, lead.id, { requestId: randomUUID(), goalId: goal.id, agentId: worker.id, title: '核对事实', brief: '提交核对结果' })
  await vi.waitFor(() => expect(store.get<any>(owner,'assignment',assignment.id)?.status).toBe('review'), { timeout: 5000 })
  const submitted = requests.find(r => r.method === 'prompt.submit' && String(r.params.text).includes('核对事实'))!
  expect(submitted.params.text).toContain('你是 研究成员')
  expect(submitted.params.text).toContain('执行子任务')
  expect(store.get<any>(owner,'goal',goal.id)?.status).not.toBe('complete')
})
it('keeps structured goal coordination on the lead and does not relay mention text as duplicate work', async () => {
  const lead=store.updateAgent(owner,agent('交付负责人').id,{canManageTeam:true}),worker=agent('研究成员')
  const target=nodes.target(owner,'local'), request=target.session.request.bind(target.session)
  vi.spyOn(target.session,'request').mockImplementation(async(path,options)=>path.startsWith('/api/plugins/yaoyao-bot-bridge/')
    ? {status:200,body:Buffer.from(JSON.stringify({ok:true,version:1,ready:true,in_process:true,native_tools:true})),headers:new Headers()}
    : request(path,options))
  const team=store.createGroup(owner,{name:'自由协作交付',memberIds:[lead.id,worker.id],administratorId:lead.id,mode:'free',autoReplyIds:[worker.id]})
  reply=(socket,p)=>socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:p.session_id,payload:{text:'@研究成员 请核对资料',status:'complete'}}}))
  const run=runtime.send(owner,team.id,{requestId:randomUUID(),content:'交付研究报告',mode:'goal'})
  await vi.waitFor(()=>expect(['complete','failed']).toContain(store.require<WorkspaceRun>(owner,'run',run.id).status))
  const settled=store.require<WorkspaceRun>(owner,'run',run.id)
  expect(settled.status,settled.error).toBe('complete')
  const work=store.list<Work>(owner,'turn').filter(w=>w.runId===run.id)
  expect(work.map(w=>w.agentId)).toEqual([lead.id])
  expect(runtime.tasks.assignments(owner,run.goalId!)).toEqual([])
  expect(requests.filter(r=>r.method==='prompt.submit').every(r=>!String(r.params.text).startsWith('你是 研究成员'))).toBe(true)
})
function direct(id: string, user = owner) {
  return store
    .list<WorkspaceConversation>(user, 'conversation')
    .find((c) => c.kind === 'direct' && c.memberIds[0] === id)!
}
function defaultTask(conversationId: string, user = owner) {
  return store.tasks(user, conversationId)[0]!
}
async function finished(id: string) {
  await vi.waitFor(() =>
    expect(store.require<WorkspaceRun>(owner, 'run', id).status).toBe('complete'),
  )
  return store.require<WorkspaceRun>(owner, 'run', id)
}
describe('Web-owned workspace', () => {
  it('restores recent user and assistant context when moving a completed conversation to another runner',async()=>{
    const a=agent('移动成员'),c=direct(a.id)
    await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'保存研究结论'}).id)
    const binding=store.list<any>(owner,'binding')[0]!
    store.put(owner,'binding',binding.id,{...binding,runnerId:'previous-runner'})
    const before=requests.length
    await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'继续后续分析'}).id)
    const next=requests.slice(before)
    expect(next.some(r=>r.method==='session.resume')).toBe(false)
    const text=next.find(r=>r.method==='prompt.submit')!.params.text
    expect(text).toContain('执行节点已切换')
    expect(text).toContain('保存研究结论')
    expect(text).toContain('移动成员（complete）：完成')
    expect(text).toContain('继续后续分析')
  })
  it('uses each base profile cwd and replaces historical cwd before the next Bot turn', async () => {
    configuredCwds.set('default', '/profile/first')
    configuredCwds.set('other', '/profile/other')
    const a = agent('主助手'), c = direct(a.id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: 'first' }).id)
    expect(requests.find(r => r.method === 'session.create')?.params.cwd).toBe('/profile/first')
    expect(requests.find(r => r.method === 'session.cwd.set')?.params.cwd).toBe('/profile/first')
    configuredCwds.set('default', '/profile/changed')
    const before = requests.length
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: 'second' }).id)
    // The prior turn's asynchronous usage refresh can arrive after completion.
    // This assertion concerns the next turn's execution RPCs, not telemetry.
    const next = requests.slice(before).filter(r => r.method !== 'session.usage')
    expect(next[0].method).toBe('session.resume')
    expect(next.find(r => r.method === 'session.cwd.set')?.params.cwd).toBe('/profile/changed')
    expect(next.findIndex(r => r.method === 'session.cwd.set')).toBeLessThan(next.findIndex(r => r.method === 'prompt.submit'))
    const b = store.createAgent(owner, { name: '其他 Profile', profile: 'other' })
    await finished(runtime.send(owner, direct(b.id).id, { requestId: randomUUID(), content: 'third' }).id)
    expect(requests.filter(r => r.method === 'session.create').at(-1)?.params.cwd).toBe('/profile/other')
  })

  it('flushes a paused delta before completion and cancels pending flush on finish', async () => {
    let upstream: { socket: WebSocket; params: Record<string, any> } | undefined
    reply = (socket, params) => {
      upstream = { socket, params }
      const event = (type: string, payload: Record<string, unknown>) => socket.send(JSON.stringify({
        method: 'event', params: { type, session_id: params.session_id, payload },
      }))
      event('message.start', {})
      event('message.delta', { text: '# 流式标题' })
    }
    const bot = agent('流式助手'), conversation = direct(bot.id)
    const run = runtime.send(owner, conversation.id, { requestId: randomUUID(), content: '验证暂停分片' })
    const assistant = () => store.list<WorkspaceMessage>(owner, 'message').find(m => m.runId === run.id && m.role === 'assistant')
    await vi.waitFor(() => expect(assistant()?.content).toBe('# 流式标题'))
    expect(assistant()?.status).toBe('streaming')
    expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).not.toBe('complete')
    const { socket, params } = upstream!
    socket.send(JSON.stringify({ method: 'event', params: { type: 'message.delta', session_id: params.session_id, payload: { text: '\n\n最后一段' } } }))
    completeReply(socket, params, '# 最终正文')
    await finished(run.id)
    await new Promise(resolve => setTimeout(resolve, 150))
    expect(assistant()?.content).toBe('# 最终正文')
    expect(assistant()?.status).toBe('complete')
  })

  it.each([false, true])('shows interim text immediately without duplicating streamed text (already_streamed=%s)', async alreadyStreamed => {
    let upstream!: { socket: WebSocket; params: Record<string, any> }
    reply = (socket, params) => {
      upstream = { socket, params }
      const event = (type: string, payload: Record<string, unknown>) => socket.send(JSON.stringify({ method: 'event', params: { type, session_id: params.session_id, payload } }))
      if (alreadyStreamed) event('message.delta', { text: '正在检查服务器。' })
      event('message.interim', { text: '正在检查服务器。', already_streamed: alreadyStreamed })
    }
    const bot = agent('进度助手'), conversation = direct(bot.id)
    const run = runtime.send(owner, conversation.id, { requestId: randomUUID(), content: '检查服务器' })
    const assistant = () => store.list<WorkspaceMessage>(owner, 'message').find(m => m.runId === run.id && m.role === 'assistant')
    await vi.waitFor(() => expect(assistant()?.content).toBe('正在检查服务器。\n\n'))
    expect(assistant()?.status).toBe('streaming')
    expect(assistant()?.visible).toBe(true)
    completeReply(upstream.socket, upstream.params, '检查完成。')
    await finished(run.id)
    expect(assistant()?.content).toBe('检查完成。')
  })

  it.each(['status', 'delta', 'complete'])('publishes compression progress separately from text and clears it on %s', async next => {
    let upstream!: { socket: WebSocket; params: Record<string, any> }
    reply = (socket, params) => {
      upstream = { socket, params }
      socket.send(JSON.stringify({ method: 'event', params: { type: 'status.update', session_id: params.session_id, payload: { kind: 'compacting', text: 'Internal context details' } } }))
    }
    const bot = agent('长会话助手'), conversation = direct(bot.id)
    const run = runtime.send(owner, conversation.id, { requestId: randomUUID(), content: '继续' })
    const assistant = () => store.list<WorkspaceMessage>(owner, 'message').find(m => m.runId === run.id && m.role === 'assistant')
    await vi.waitFor(() => expect(assistant()?.activity).toBe('compacting'))
    expect(assistant()?.content).toBe('')
    if (next !== 'complete') {
      upstream.socket.send(JSON.stringify({ method: 'event', params: {
        type: next === 'status' ? 'status.update' : 'message.delta', session_id: upstream.params.session_id,
        payload: next === 'status' ? { kind: 'lifecycle', text: 'Done' } : { text: '开始回复' },
      } }))
      await vi.waitFor(() => expect(assistant()?.activity).toBeUndefined())
    }
    completeReply(upstream.socket, upstream.params, '最终结果')
    await finished(run.id)
    expect(assistant()?.activity).toBeUndefined()
    expect(assistant()?.content).toBe('最终结果')
  })

  it('backfills legacy group history into the initial task instead of leaving a new empty task', () => {
    const legacyHome = mkdtempSync(join(tmpdir(), 'yaoyao-workspace-task-migration-'))
    let seededStore: WorkspaceStore | undefined = new WorkspaceStore(legacyHome)
    let migratedStore: WorkspaceStore | undefined
    try {
      const administrator = seededStore.createAgent(owner, { name: '历史管理员', profile: 'default' }),
        member = seededStore.createAgent(owner, { name: '历史成员', profile: 'default' }),
        conversation = seededStore.createGroup(owner, {
          name: '公众号文案团队',
          memberIds: [administrator.id, member.id],
          administratorId: administrator.id,
        }),
        initialTask = seededStore.tasks(owner, conversation.id)[0]!,
        userAt = 1_788_000_000_000,
        assistantAt = userAt + 60_000
      seededStore.put(owner, 'message', 'legacy-user', {
        id: 'legacy-user', conversationId: conversation.id, seq: 1, role: 'user',
        content: '请继续完成公众号文案', reasoning: '', status: 'complete',
        attachments: [], tools: [], createdAt: userAt,
      } satisfies WorkspaceMessage)
      seededStore.put(owner, 'message', 'legacy-assistant', {
        id: 'legacy-assistant', conversationId: conversation.id, seq: 2, role: 'assistant',
        agentId: administrator.id, agentName: '历史管理员', content: '旧内容已经完成。',
        reasoning: '', status: 'complete', attachments: [], tools: [], createdAt: assistantAt,
      } satisfies WorkspaceMessage)
      seededStore.put(owner, 'conversation', conversation.id, {
        ...conversation,
        readSeq: 1,
        lastSeq: 2,
        preview: '旧内容已经完成。',
        lastMessageAt: assistantAt,
        updatedAt: assistantAt,
      })
      seededStore.put(owner, 'run', 'legacy-run', {
        id: 'legacy-run', conversationId: conversation.id, messageId: 'legacy-user',
        mentionIds: [], status: 'complete', round: 1, createdAt: userAt, updatedAt: assistantAt,
      } satisfies WorkspaceRun)
      seededStore.put(owner, 'turn', 'legacy-turn', {
        id: 'legacy-turn', runId: 'legacy-run', conversationId: conversation.id,
        agentId: administrator.id, messageId: 'legacy-user', status: 'complete', createdAt: userAt,
      })
      seededStore.put(owner, 'interaction', 'legacy-interaction', {
        id: 'legacy-interaction', conversationId: conversation.id, runId: 'legacy-run',
        agentId: administrator.id, kind: 'clarification', message: '补充说明',
        choices: [], resolved: true,
      } satisfies WorkspaceInteraction)
      seededStore.put(owner, 'interaction-binding', 'legacy-interaction', {
        key: `${conversation.id}:${administrator.id}`,
        upstreamId: 'upstream-interaction', taskId: 'legacy-turn',
      })
      seededStore.put(owner, 'binding', `${conversation.id}:${administrator.id}`, {
        nodeId: 'local', profile: 'default', storedId: 'stored-legacy',
        runtimeId: 'runtime-legacy', aliases: [], runId: 'legacy-run',
        messageId: 'legacy-user', taskId: 'legacy-turn',
      })
      seededStore.put(owner, 'context', conversation.id, {
        usedTokens: 100, limitTokens: 1_000, observedAt: assistantAt,
      })
      seededStore.db.prepare('DELETE FROM workspace_migrations WHERE id=?')
        .run('conversation-task-history-v1')
      seededStore.close()
      seededStore = undefined

      migratedStore = new WorkspaceStore(legacyHome)
      const tasks = migratedStore.tasks(owner, conversation.id)
      expect(tasks).toHaveLength(1)
      expect(tasks[0]).toMatchObject({
        id: initialTask.id,
        title: '请继续完成公众号文案',
        titleSource: 'automatic',
        messageCount: 2,
        readSeq: 1,
        lastSeq: 2,
        unreadCount: 1,
        lastMessageAt: assistantAt,
        createdAt: userAt,
        updatedAt: assistantAt,
      })
      expect(
        migratedStore.messages(
          owner, conversation.id, Number.MAX_SAFE_INTEGER, 100, false, initialTask.id,
        ).map(message => message.id),
      ).toEqual(['legacy-user', 'legacy-assistant'])
      expect(migratedStore.require<WorkspaceRun>(owner, 'run', 'legacy-run').conversationTaskId)
        .toBe(initialTask.id)
      expect(migratedStore.require<{ conversationTaskId: string }>(owner, 'turn', 'legacy-turn').conversationTaskId)
        .toBe(initialTask.id)
      expect(migratedStore.require<WorkspaceInteraction>(owner, 'interaction', 'legacy-interaction').conversationTaskId)
        .toBe(initialTask.id)
      expect(migratedStore.get(owner, 'binding', `${conversation.id}:${administrator.id}`)).toBeUndefined()
      expect(migratedStore.get(owner, 'binding', `${conversation.id}:${initialTask.id}:${administrator.id}`))
        .toMatchObject({ conversationTaskId: initialTask.id })
      expect(migratedStore.get(owner, 'context', conversation.id)).toBeUndefined()
      expect(migratedStore.get(owner, 'context', initialTask.id))
        .toMatchObject({ conversationTaskId: initialTask.id })
    } finally {
      seededStore?.close()
      migratedStore?.close()
      rmSync(legacyHome, { recursive: true, force: true })
    }
  })

  it('runs one Agent across group tasks concurrently while keeping messages, sessions and context isolated', async () => {
    const administrator = store.createAgent(owner, { name: '多任务远程管理员', profile: 'remote-profile', nodeId: 'remote-node' }),
      member = agent('多任务成员'),
      conversation = store.createGroup(owner, {
        name: '多任务群聊',
        memberIds: [administrator.id, member.id],
        administratorId: administrator.id,
      }),
      firstTask = defaultTask(conversation.id),
      secondTask = store.createTask(owner, conversation.id, { title: '显式标题' })
    const pending: Array<{ socket: WebSocket; params: Record<string, any> }> = []
    reply = (socket, params) => {
      pending.push({ socket, params })
    }
    const complete = (item: typeof pending[number]) => {
        const text = item.params.text.includes('第一项工作') ? '第一项结果' : '第二项结果'
        item.socket.send(JSON.stringify({method:'event',params:{type:'context.update',session_id:item.params.session_id,payload:{percent:40}}}))
        setTimeout(() => item.socket.send(JSON.stringify({
          method: 'event',
          params: { type: 'message.complete', session_id: item.params.session_id, payload: { text, status: 'complete' } },
        })), 5)
    }
    const firstRun = runtime.send(owner, conversation.id, { requestId: randomUUID(), taskId: firstTask.id, content: '第一项工作' }),
      secondRun = runtime.send(owner, conversation.id, { requestId: randomUUID(), taskId: secondTask.id, content: '第二项工作' })
    await vi.waitFor(()=>expect(pending).toHaveLength(2))
    expect(store.require<WorkspaceRun>(owner,'run',firstRun.id).status).toBe('running')
    expect(store.require<WorkspaceRun>(owner,'run',secondRun.id).status).toBe('running')
    complete(pending.find(item => item.params.text.includes('第二项工作'))!)
    await finished(secondRun.id)
    expect(store.require<WorkspaceRun>(owner,'run',firstRun.id).status).toBe('running')
    complete(pending.find(item => item.params.text.includes('第一项工作'))!)
    await finished(firstRun.id)
    const firstMessages = store.messages(owner, conversation.id, Number.MAX_SAFE_INTEGER, 100, false, firstTask.id),
      secondMessages = store.messages(owner, conversation.id, Number.MAX_SAFE_INTEGER, 100, false, secondTask.id)
    expect(firstMessages.map(message => message.content)).toEqual(['第一项工作', '第一项结果'])
    expect(secondMessages.map(message => message.content)).toEqual(['第二项工作', '第二项结果'])
    expect(firstMessages.every(message => message.conversationTaskId === firstTask.id)).toBe(true)
    expect(secondMessages.every(message => message.conversationTaskId === secondTask.id)).toBe(true)
    const prompts = requests.filter(request => request.method === 'prompt.submit').map(request => String(request.params.text))
    expect(prompts.find(prompt => prompt.includes('第一项工作'))).not.toContain('第二项工作')
    expect(prompts.find(prompt => prompt.includes('第二项工作'))).not.toContain('第一项工作')
    const bindings = store.list<any>(owner, 'binding')
    expect(bindings.map(binding => binding.conversationTaskId).sort()).toEqual([firstTask.id, secondTask.id].sort())
    expect(bindings.every(binding => binding.nodeId === 'remote-node' && binding.profile === 'remote-profile')).toBe(true)
    expect(new Set(bindings.map(binding => binding.storedId)).size).toBe(2)
    expect(store.get<any>(owner, 'context', firstTask.id)).toMatchObject({ conversationTaskId: firstTask.id, percent: 40 })
    expect(store.get<any>(owner, 'context', secondTask.id)).toMatchObject({ conversationTaskId: secondTask.id, percent: 40 })
    const firstSummary = store.require<any>(owner, 'conversation-task', firstTask.id)
    expect(firstSummary).toMatchObject({ title: '第一项工作', titleSource: 'automatic', messageCount: 2, unread: true, unreadCount: 1 })
    expect(store.require<any>(owner, 'conversation-task', secondTask.id)).toMatchObject({ title: '显式标题', titleSource: 'user', messageCount: 2 })
    expect(store.markTaskRead(owner, conversation.id, firstTask.id, firstSummary.lastSeq).unreadCount).toBe(0)
    store.deleteTask(owner, conversation.id, firstTask.id)
    expect(store.list<WorkspaceMessage>(owner, 'message').some(message => message.conversationTaskId === firstTask.id)).toBe(false)
    expect(store.list<any>(owner, 'binding').some(binding => binding.conversationTaskId === firstTask.id)).toBe(false)
    expect(store.get(owner, 'context', firstTask.id)).toBeUndefined()
    expect(store.messages(owner, conversation.id, Number.MAX_SAFE_INTEGER, 100, false, secondTask.id).map(message => message.content))
      .toEqual(['第二项工作', '第二项结果'])
  })

  it('admits ten active conversation tasks for one Agent and rejects the eleventh without stopping them', async () => {
    const administrator = agent('并发任务管理员'),
      member = agent('并发任务成员'),
      conversation = store.createGroup(owner, {
        name: '并发任务群聊',
        memberIds: [administrator.id, member.id],
        administratorId: administrator.id,
      }),
      tasks = [defaultTask(conversation.id), ...Array.from({ length: 10 }, (_, index) => store.createTask(owner, conversation.id, { title: `任务 ${index + 2}` }))]
    reply = () => {}
    for (const [index, task] of tasks.slice(0, 10).entries())
      runtime.send(owner, conversation.id, { requestId: randomUUID(), taskId: task.id, content: `执行 ${index + 1}` })
    expect(store.activeTaskCount(owner, conversation.id)).toBe(10)
    await vi.waitFor(() => expect(requests.filter(r => r.method === 'prompt.submit')).toHaveLength(10))
    expect(new Set(requests.filter(r => r.method === 'prompt.submit').map(r => r.params.session_id)).size).toBe(10)
    expect(() => runtime.send(owner, conversation.id, { requestId: randomUUID(), taskId: tasks[10]!.id, content: '第十一项' }))
      .toThrow('最多同时运行 10 个任务')
    expect(requests.filter(r => r.method === 'session.interrupt')).toHaveLength(0)
    await Promise.all(tasks.slice(0, 10).map(task => runtime.stopTask(owner, conversation.id, task.id)))
  })

  it('keeps same-named upstream interactions scoped to their conversation task', async () => {
    const administrator = agent('交互隔离管理员'),
      member = agent('交互隔离成员'),
      conversation = store.createGroup(owner, {
        name: '交互隔离群聊',
        memberIds: [administrator.id, member.id],
        administratorId: administrator.id,
      }),
      firstTask = defaultTask(conversation.id),
      secondTask = store.createTask(owner, conversation.id, {})
    const pending: Array<{socket:WebSocket;params:Record<string,any>}> = []
    reply = (socket, params) => { pending.push({socket,params});setTimeout(() => socket.send(JSON.stringify({
      method: 'event',
      params: {
        type: 'approval.request',
        session_id: params.session_id,
        payload: { request_id: 'same-upstream-id', message: '允许执行吗？' },
      },
    })), 5) }
    const firstRun=runtime.send(owner, conversation.id, { requestId: randomUUID(), taskId: firstTask.id, content: '任务甲' })
    // Different tasks admitted in the same millisecond need not win a lane in
    // insertion order. Establish the active task before testing its isolation.
    await vi.waitFor(() => expect(pending).toHaveLength(1))
    const secondRun=runtime.send(owner, conversation.id, { requestId: randomUUID(), taskId: secondTask.id, content: '任务乙' })
    await vi.waitFor(() => expect(store.list<WorkspaceInteraction>(owner, 'interaction').filter(interaction => !interaction.resolved)).toHaveLength(2))
    const first=store.list<WorkspaceInteraction>(owner,'interaction').find(i=>i.conversationTaskId===firstTask.id)!
    expect(store.require<any>(owner, 'conversation-task', firstTask.id).activeRunStatus).toBe('waiting')
    expect(store.require<WorkspaceRun>(owner,'run',secondRun.id).status).toBe('waiting')
    await runtime.respond(owner, first.id, 'once')
    expect(requests.filter(r => r.method === 'approval.respond').map(r => r.params.session_id)).toEqual([pending[0]!.params.session_id])
    pending[0]!.socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:pending[0]!.params.session_id,payload:{text:'任务甲完成',status:'complete'}}}))
    await finished(firstRun.id)
    await vi.waitFor(()=>expect(store.list<WorkspaceInteraction>(owner,'interaction')).toHaveLength(2))
    const second=store.list<WorkspaceInteraction>(owner,'interaction').find(i=>i.conversationTaskId===secondTask.id)!
    expect(second.id).not.toBe(first.id)
    expect(store.require<any>(owner, 'conversation-task', secondTask.id).activeRunStatus).toBe('waiting')
    await runtime.respond(owner,first.id,'once')
    expect(store.require<WorkspaceInteraction>(owner, 'interaction', first.id).resolved).toBe(true)
    expect(store.require<WorkspaceInteraction>(owner, 'interaction', second.id).resolved).toBe(false)
    await Promise.all([runtime.stopTask(owner, conversation.id, firstTask.id), runtime.stopTask(owner, conversation.id, secondTask.id)])
  })

  it('persists a visible failure when a fixed member loses its source node',async()=>{
    const a=agent('不可用成员'),c=direct(a.id)
    runtime.close()
    runtime=new WorkspaceRuntime(store,{requireSource: () => {},target:()=>{throw new Error('基础节点不可用')}} as unknown as WorkspaceNodes,uploads)
    const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'执行任务'})
    await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('failed'))
    expect(store.messages(owner,c.id).at(-1)).toMatchObject({role:'system',status:'failed',content:'执行失败：基础节点不可用'})
    expect(store.require<WorkspaceConversation>(owner,'conversation',c.id).activeRunId).toBeUndefined()
  })
  it('interprets a reply against its launch-time roster when names or mode change mid-turn', async () => {
    const a = agent('管理员'),
      b = agent('执行者')
    const c = store.createGroup(owner, {
      name: '配置更新',
      memberIds: [a.id, b.id],
      administratorId: a.id,
      maxReplyRounds: 3,
    })
    let count = 0
    reply = (socket, p) => {
      let text = '已完成'
      if (count++ === 0) {
        store.updateAgent(owner, b.id, { name: '新名字', instructions: '新规则' })
        store.updateConversation(owner, c.id, { mode: 'free', administratorId: b.id })
        text = '请继续 @执行者'
      }
      setTimeout(
        () =>
          socket.send(
            JSON.stringify({
              method: 'event',
              params: { type: 'message.complete', session_id: p.session_id, payload: { text } },
            }),
          ),
        5,
      )
    }
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '开始' }).id)
    expect(
      store
        .messages(owner, c.id)
        .filter((m) => m.role === 'assistant')
        .map((m) => m.agentId),
    ).toEqual([a.id, b.id])
    expect(requests.filter((r) => r.method === 'prompt.submit').at(-1)!.params.text).toContain(
      '新规则',
    )
  })
  it('rejects unscoped and foreign-session completion events', async () => {
    const a = agent('会话隔离'),
      c = direct(a.id)
    reply = (socket, p) => {
      for (const session_id of [undefined, 'another-session'])
        socket.send(
          JSON.stringify({
            method: 'event',
            params: { type: 'message.complete', session_id, payload: { text: '别人的结果' } },
          }),
        )
      setTimeout(
        () =>
          socket.send(
            JSON.stringify({
              method: 'event',
              params: {
                type: 'message.complete',
                session_id: p.session_id,
                payload: { text: '本轮结果' },
              },
            }),
          ),
        15,
      )
    }
    const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '执行' })
    await finished(run.id)
    expect(store.messages(owner, c.id).at(-1)?.content).toBe('本轮结果')
    expect(requests.some(request => request.method === 'session.usage')).toBe(false)
    expect(store.list<any>(owner, 'agent-token-day')).toEqual([expect.objectContaining({agentId:a.id,output:4,total:expect.any(Number)})])
  })
  it('resumes a persisted uncertain run by inspecting history, without resending the prompt', async () => {
    modelBridge()
    const a = agent('恢复测试'),
      c = direct(a.id)
    store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'fast' } })
    reply = (socket, p) => {
      recoveryHistory = [
        { role: 'user', content: p.text },
        { role: 'assistant', content: '已经执行完成' },
      ]
      socket.terminate()
    }
    const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '修改一次' })
    await vi.waitFor(() =>
      expect(store.require<WorkspaceRun>(owner, 'run', run.id).error).toContain('正在恢复原执行'),
    )
    runtime.close()
    const configured = requests.filter(r => r.method === 'config.set').length
    expect(configured).toBe(3)
    store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-b', reasoningEffort: 'none', fastMode: 'cold' } })
    runtime = new WorkspaceRuntime(store, nodes, uploads)
    await runtime.reconcile(owner, run.id)
    await finished(run.id)
    expect(requests.filter((r) => r.method === 'prompt.submit')).toHaveLength(1)
    expect(requests.filter(r => r.method === 'config.set')).toHaveLength(configured)
    expect(store.messages(owner, c.id).map((m) => m.content)).toEqual(['修改一次', '已经执行完成'])
  })
  it('routes approvals and clarifications to the owning run and ignores optional push failures', async () => {
    const a = agent('交互测试'),
      c = direct(a.id)
    runtime.onNotify = () => {
      throw new Error('push storage unavailable')
    }
    let kind = 'approval'
    server.on('connection', (socket) =>
      socket.on('message', (data) => {
        const f = JSON.parse(String(data))
        if (['approval.respond', 'clarify.respond'].includes(f.method))
          socket.send(
            JSON.stringify({
              method: 'event',
              params: {
                type: 'message.complete',
                session_id: f.params.session_id,
                payload: { text: '确认后完成' },
              },
            }),
          )
      }),
    )
    reply = (socket, p) =>
      socket.send(
        JSON.stringify({
          method: 'event',
          params: {
            type: `${kind}.request`,
            session_id: p.session_id,
            payload: { request_id: 'upstream-interaction', message: '请确认' },
          },
        }),
      )
    for (kind of ['approval', 'clarify']) {
      const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '继续' })
      await vi.waitFor(() =>
        expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('waiting'),
      )
      const interaction = store
        .list<WorkspaceInteraction>(owner, 'interaction')
        .find((i) => !i.resolved)!
      await expect(runtime.respond(other, interaction.id, 'once')).rejects.toThrow('记录不存在')
      await runtime.respond(owner, interaction.id, kind === 'approval' ? 'once' : '补充说明')
      await finished(run.id)
      expect(
        store.require<WorkspaceInteraction>(owner, 'interaction', interaction.id).resolved,
      ).toBe(true)
    }
    expect(
      requests
        .filter((r) => r.method === 'approval.respond' || r.method === 'clarify.respond')
        .map((r) => r.params.request_id),
    ).toEqual(['upstream-interaction', 'upstream-interaction'])
  })
  it('creates one direct chat without importing a native profile session', () => {
    const a = agent('编辑')
    expect(direct(a.id).kind).toBe('direct')
    expect(store.list(other, 'agent')).toEqual([])
    expect(() => store.require(other, 'conversation', direct(a.id).id)).toThrow('记录不存在')
    expect(requests).toEqual([])
  })
  it('protects the current administrator and validates member ownership', () => {
    const a = agent('甲'),
      b = agent('乙'),
      foreign = agent('外部', other)
    const c = store.createGroup(owner, {
      name: '团队',
      memberIds: [a.id, b.id],
      administratorId: a.id,
    })
    expect(() => store.updateConversation(owner, c.id, { memberIds: [b.id] })).toThrow('当前管理员不能移除')
    expect(() => store.updateConversation(owner, c.id, { memberIds: [b.id], administratorId: b.id })).toThrow('当前管理员不能移除')
    expect(() => store.updateConversation(owner, c.id, { memberIds: [a.id, foreign.id] })).toThrow('记录不存在')
    expect(() => store.updateConversation(owner, c.id, { memberIds: [a.id, a.id] })).toThrow('群成员或管理员无效')
    expect(() =>
      store.createGroup(owner, {
        name: '越权',
        memberIds: [a.id, foreign.id],
        administratorId: a.id,
      }),
    ).toThrow()
    store.updateAgent(owner, b.id, { archived: true })
    expect(store.require<WorkspaceConversation>(owner, 'conversation', c.id).memberIds).toEqual([
      a.id,
      b.id,
    ])
    expect(() =>
      store.createGroup(owner, { name: '新群', memberIds: [a.id, b.id], administratorId: a.id }),
    ).toThrow('已归档')
    expect(store.updateConversation(owner, c.id, { memberIds: [a.id] }).memberIds).toEqual([a.id])
    expect(() => store.updateConversation(owner, c.id, { memberIds: [a.id, b.id] })).toThrow('已归档')
  })
  it('adds and removes members, cleans automatic replies, and permits removal after administrator transfer', async () => {
    const a = agent('管理员'), b = agent('旧成员'), added = agent('新成员')
    const c = store.createGroup(owner, { name: '成员维护', memberIds: [a.id, b.id], administratorId: a.id, autoReplyIds: [b.id] })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '保留这条历史' }).id)
    const before = store.require<WorkspaceConversation>(owner, 'conversation', c.id)
    const history = store.messages(owner, c.id)
    const changed = store.updateConversation(owner, c.id, { memberIds: [a.id, added.id] })
    expect(changed.memberIds).toEqual([a.id, added.id])
    expect(changed.autoReplyIds).toEqual([])
    expect(changed.lastMessageAt).toBe(before.lastMessageAt)
    expect(store.messages(owner, c.id)).toEqual(history)
    expect(store.events(owner, 0).at(-1)).toMatchObject({ type: 'conversation.changed', data: { memberIds: [a.id, added.id] } })
    store.updateConversation(owner, c.id, { administratorId: added.id })
    expect(store.updateConversation(owner, c.id, { memberIds: [added.id] }).memberIds).toEqual([added.id])
    expect(() => store.updateConversation(owner, c.id, { memberIds: [a.id] })).toThrow('当前管理员不能移除')
  })
  it('skips removed queued members and accepts a newly added member on the next request', async () => {
    const a = agent('管理员'), b = agent('待回复'), added = agent('新成员')
    const c = store.createGroup(owner, { name: '队列维护', memberIds: [a.id, b.id], administratorId: a.id, mode: 'free', autoReplyIds: [a.id, b.id] })
    reply = (socket, p) => {
      socket.send(JSON.stringify({ method: 'event', params: { type: 'message.complete', session_id: p.session_id, payload: { text: '请@待回复继续' } } }))
    }
    const queued = runtime.send(owner, c.id, { requestId: randomUUID(), content: '开始' })
    store.updateConversation(owner, c.id, { memberIds: [a.id, added.id] })
    await finished(queued.id)
    expect(store.messages(owner, c.id).filter(m => m.role === 'assistant').map(m => m.agentId)).toEqual([a.id])
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '请@新成员继续' }).id)
    expect(store.messages(owner, c.id).filter(m => m.role === 'assistant').map(m => m.agentId)).toEqual([a.id, added.id, a.id])
  })
  it('finishes an in-flight removed member reply without scheduling it again', async () => {
    const a = agent('管理员'), b = agent('正在回复')
    const c = store.createGroup(owner, { name: '回复中移除', memberIds: [a.id, b.id], administratorId: a.id })
    let turns = 0
    reply = (socket, p) => {
      if (turns++ === 1) store.updateConversation(owner, c.id, { memberIds: [a.id] })
      socket.send(JSON.stringify({ method: 'event', params: { type: 'message.complete', session_id: p.session_id, payload: { text: turns === 1 ? '请@正在回复继续' : '已完成' } } }))
    }
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '@正在回复 开始' }).id)
    expect(store.messages(owner, c.id).filter(m => m.role === 'assistant').map(m => m.agentId)).toEqual([a.id, b.id, a.id])
    expect(() => runtime.send(owner, c.id, { requestId: randomUUID(), content: '继续', mentionIds: [b.id] })).toThrow('只能 @ 群内成员')
  })
  it('dispatches a request exactly once across retries and rejects payload reuse', async () => {
    const a = agent('编辑'),
      c = direct(a.id),
      requestId = randomUUID(),
      payload = { requestId, content: '检查代码' }
    const run = runtime.send(owner, c.id, payload)
    expect(runtime.send(owner, c.id, payload).id).toBe(run.id)
    expect(() => runtime.send(owner, c.id, { ...payload, content: '另一件事' })).toThrow('请求编号')
    await finished(run.id)
    expect(requests.filter((r) => r.method === 'prompt.submit')).toHaveLength(1)
    expect(store.messages(owner, c.id).map((m) => m.role)).toEqual(['user', 'assistant'])
  })
  it('keeps template responsibilities inside their group and follows Agent identity after rename', async () => {
    const a = agent('现有甲'), b = agent('现有乙')
    const before = store.require<WorkspaceAgent>(owner, 'agent', a.id)
    const c = store.createGroup(owner, { name: '模板群', memberIds: [a.id, b.id], administratorId: a.id, memberRoles: {
      [a.id]: { name: '调研负责人', description: '汇总可信结论' },
      [b.id]: { name: '事实核验', description: '交叉验证来源' },
    } })
    expect(store.require<WorkspaceAgent>(owner, 'agent', a.id)).toEqual(before)
    store.updateAgent(owner, a.id, { name: '改名后的甲' })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '开始调研' }).id)
    const groupPrompt = requests.filter(r => r.method === 'prompt.submit').at(-1)!.params.text
    expect(groupPrompt).toContain('@改名后的甲：调研负责人；汇总可信结论')
    expect(groupPrompt).toContain('@现有乙：事实核验；交叉验证来源')
    await finished(runtime.send(owner, direct(a.id).id, { requestId: randomUUID(), content: '单聊' }).id)
    expect(requests.filter(r => r.method === 'prompt.submit').at(-1)!.params.text).not.toContain('汇总可信结论')
    const changed = store.updateConversation(owner, c.id, { memberIds: [a.id] })
    expect(changed.memberRoles).toEqual({ [a.id]: { name: '调研负责人', description: '汇总可信结论' } })
    expect(() => store.updateConversation(owner, c.id, { memberRoles: { [b.id]: { name: '已移除', description: '' } } })).toThrow('群成员或管理员无效')
  })
  it('applies self-edited names and rules on the next turn without changing a shared Hermes Profile', async () => {
    const a = agent('原来的自己'), b = agent('同 Profile 的同伴')
    const target = nodes.target(owner,'local'), request = target.session.request.bind(target.session)
    const bindings = new Map<string,any>()
    vi.spyOn(target.session,'request').mockImplementation(async(path,options)=>{
      if (!path.startsWith('/api/plugins/yaoyao-bot-bridge/')) return request(path,options)
      if (path.endsWith('/bind')) bindings.set(String((options?.body as any).session_id),options?.body)
      return {status:200,body:Buffer.from(JSON.stringify({ok:true,version:1,ready:true,in_process:true,native_tools:true})),headers:new Headers()}
    })
    let edited = false, toolError: unknown
    reply = async(socket,params)=>{
      if (!edited) {
        edited = true
        try {
          const binding = bindings.get(params.session_id)
          const toolRequest = async(path:string,body:unknown)=>(await fetch(binding.bridge_url+path,{method:'POST',headers:{'Content-Type':'application/json',Authorization:`Bearer ${binding.token}`},body:JSON.stringify(body)})).json()
          const catalog = await toolRequest('/tools/list',{})
          const invoke = (name:string,args:unknown,callId:string)=>toolRequest('/tools/call',{toolId:catalog.tools.find((tool:any)=>tool.name===name).id,arguments:args,callId})
          const current = await invoke('workspace_get_self_rules',{},'read-self')
          const updated = await invoke('workspace_update_self_rules',{requestId:randomUUID(),expectedRevision:current.structuredContent.agent.revision,name:'自己的新名字',instructions:'后续回答先给依据',job:'独立核验事实'},'update-self')
          expect(updated.structuredContent.agent).toMatchObject({id:a.id,revision:2})
          expect((await toolRequest('/tools/list',{})).tools.length).toBeGreaterThan(0)
        } catch (error) { toolError = error }
      }
      socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:params.session_id,payload:{text:'完成',status:'complete'}}}))
    }
    await finished(runtime.send(owner,direct(a.id).id,{requestId:randomUUID(),content:'修改自己的名字和规则'}).id)
    expect(toolError).toBeUndefined()
    const initial = requests.find(frame=>frame.method==='prompt.submit')!.params.text
    expect(initial).toContain('你是 原来的自己')
    expect(initial).not.toContain('后续回答先给依据')
    await finished(runtime.send(owner,direct(a.id).id,{requestId:randomUUID(),content:'继续'}).id)
    const next = requests.filter(frame=>frame.method==='prompt.submit').at(-1)!.params.text
    expect(next).toContain('你是 自己的新名字')
    expect(next).toContain('后续回答先给依据')
    expect(next).toContain('独立核验事实')
    expect(store.require(owner,'agent',b.id)).toEqual(b)
    expect(requests.some(frame=>frame.method==='profiles.configure'||frame.method==='config.set')).toBe(false)
  })
  it('isolates roles over the same profile and applies edited rules on the next turn', async () => {
    const a = agent('编辑'),
      b = agent('审查'),
      ca = direct(a.id),
      cb = direct(b.id)
    const first = runtime.send(owner, ca.id, { requestId: randomUUID(), content: '编辑任务' })
    const second = runtime.send(owner, cb.id, { requestId: randomUUID(), content: '审查任务' })
    await Promise.all([finished(first.id), finished(second.id)])
    expect(requests.filter((r) => r.method === 'session.create')).toHaveLength(2)
    expect(store.messages(owner, ca.id).some((m) => m.content === '审查任务')).toBe(false)
    store.updateAgent(owner, a.id, { instructions: '最新规则：先给证据' })
    await finished(runtime.send(owner, ca.id, { requestId: randomUUID(), content: '继续' }).id)
    expect(requests.filter((r) => r.method === 'prompt.submit').at(-1)!.params.text).toContain(
      '最新规则：先给证据',
    )
    expect(requests.some((r) => r.method === 'profiles.configure')).toBe(false)
    expect(
      requests
        .filter((r) => r.method === 'session.create')
        .every((r) => r.params.hidden && r.params.source === 'yaoyao_workspace'),
    ).toBe(true)
  })
  it('executes bounded administrator delegation and keeps group sessions separate from direct chat', async () => {
    const a = agent('管理员'),
      b = agent('开发者'),
      c = store.createGroup(owner, {
        name: '开发',
        memberIds: [a.id, b.id],
        administratorId: a.id,
        maxReplyRounds: 3,
      })
    let turns = 0
    reply = (socket, p) => {
      const text = turns++ === 0 ? '我已整理需求，现在请@开发者继续实现。' : '任务完成'
      setTimeout(
        () =>
          socket.send(
            JSON.stringify({
              method: 'event',
              params: { type: 'message.complete', session_id: p.session_id, payload: { text } },
            }),
          ),
        5,
      )
    }
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '实现功能' }).id)
    expect(
      store
        .messages(owner, c.id)
        .filter((m) => m.role === 'assistant')
        .map((m) => m.agentId),
    ).toEqual([a.id, b.id, a.id])
    expect(store.messages(owner, direct(a.id).id)).toHaveLength(0)
    expect(turns).toBe(3)
  })
  it('does not trigger delegation from quoted text or code blocks', () => {
    const a = agent('甲'),
      b = agent('乙')
    expect(mentionedAgents('> @乙\n```\n@甲\n```\n`@all`', [a, b])).toEqual([])
    expect(mentionedAgents('请处理 @乙。', [a, b])).toEqual([b.id])
  })
  it('keeps uncertain submissions blocked instead of executing tools twice', async () => {
    const a = agent('执行者'),
      c = direct(a.id)
    reply = (socket) => socket.terminate()
    const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '修改文件' })
    await vi.waitFor(() =>
      expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('uncertain'),
    )
    const queued = runtime.send(owner, c.id, { requestId: randomUUID(), content: '后续请求' })
    expect(queued.status).toBe('queued')
    expect(requests.filter((r) => r.method === 'prompt.submit')).toHaveLength(1)
    await runtime.stopConversation(owner, c.id)
    expect(
      store.require<WorkspaceConversation>(owner, 'conversation', c.id).activeRunId,
    ).toBeUndefined()
  })
  it('publishes durable ordered events only after commit and rolls back failed transactions', () => {
    const a = agent('甲'),
      c = direct(a.id),
      cursor = store.cursor(owner)
    expect(() =>
      store.atomic(() => {
        store.event(owner, 'test', {})
        throw new Error('rollback')
      }),
    ).toThrow('rollback')
    expect(store.cursor(owner)).toBe(cursor)
    store.updateAgent(owner, a.id, { name: '乙' })
    expect(store.events(owner, cursor).map((e) => e.type)).toEqual([
      'agent.changed',
      'conversation.changed',
    ])
    expect(store.events(other, 0)).toEqual([])
    expect(store.require<WorkspaceConversation>(owner, 'conversation', c.id).name).toBe('乙')
  })
})


it('pins a direct chat without injecting or clearing optional profile fields', () => {
  const avatar = encodeAgentAvatar({...defaultAgentIdentity('reviewer'),shape:'triangle',color:'#00b9ac',expression:'curious'})
  const agent = store.createAgent(owner, { name: '审查员', profile: 'default', avatar })
  const chat = store.list<WorkspaceConversation>(owner, 'conversation')[0]!
  expect(store.updateConversation(owner, chat.id, { pinned: true }).pinned).toBe(true)
  expect(store.updateConversation(owner, chat.id, { pinned: false }).pinned).toBe(false)
  expect(store.require<WorkspaceConversation>(owner, 'conversation', chat.id).avatar).toBe(avatar)
  expect(store.updateAgent(owner, agent.id, { instructions: '请检查边界' }).avatar).toBe(avatar)
  expect(decodeAgentAvatar(store.updateAgent(owner, agent.id, { avatar: '' }).avatar)).toMatchObject({shape:'circle',color:'#00c875'})
})

it('accepts the existing cross-client mascot and team avatar formats', () => {
  const a = store.createAgent(owner, { name: '设计', profile: 'default', avatar: 'yaoyao-mascot:v1:square:377fe6:friendly' })
  const b = store.createAgent(owner, { name: '开发', profile: 'default' })
  const group = store.createGroup(owner, { name: '产品团队', memberIds: [a.id, b.id], administratorId: a.id, avatar: 'builtin:team-animal:fox' })
  expect(group.avatar).toBe('builtin:team-animal:fox')
  expect(() => store.updateAgent(owner, a.id, { avatar: 'javascript:alert(1)' })).toThrow()
})

it('assigns a random v2 avatar only when a new Agent omits its avatar', () => {
  const random = vi.spyOn(Math, 'random').mockReturnValue(0)
  const created = store.createAgent(owner, { name: '随机头像', profile: 'default' })
  expect(decodeAgentAvatar(created.avatar)).toMatchObject({ shape: 'circle', color: '#000000', expression: 'idle' })
  expect(created.avatar).not.toBe(encodeAgentAvatar(defaultAgentIdentity(created.id, created.name)))
  random.mockRestore()
})

it('keeps the last message time independent of pinning and metadata edits', () => {
  const agent=store.createAgent(owner,{name:'时间验收',profile:'default'})
  const c=store.list<WorkspaceConversation>(owner,'conversation')[0]!
  const message: WorkspaceMessage={id:randomUUID(),conversationId:c.id,seq:0,role:'user',content:'历史消息',reasoning:'',status:'complete',attachments:[],tools:[],createdAt:Date.now()-600_000}
  store.saveMessage(owner,message)
  const pinned=store.updateConversation(owner,c.id,{pinned:true})
  expect(store.conversationSummary(owner,pinned).lastMessageAt).toBe(message.createdAt)
  store.updateAgent(owner,agent.id,{name:'改名之后'})
  expect(store.conversationSummary(owner,store.require(owner,'conversation',c.id)).lastMessageAt).toBe(message.createdAt)
  // Existing records without the summary field still use their transcript time.
  const previous={...pinned}; delete previous.lastMessageAt
  expect(store.conversationSummary(owner,previous).lastMessageAt).toBe(message.createdAt)
})


it('publishes only the executing member and clears avatar activity when stopped', async () => {
  const a=store.createAgent(owner,{name:'管理员头像',profile:'default'})
  const b=store.createAgent(owner,{name:'执行者头像',profile:'default'})
  const c=store.createGroup(owner,{name:'头像状态',memberIds:[a.id,b.id],administratorId:a.id})
  reply=(socket,p)=>socket.send(JSON.stringify({method:'event',params:{type:'approval.request',session_id:p.session_id,payload:{request_id:'approval-avatar',message:'需要确认'}}}))
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'处理任务',mentionIds:[b.id]})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('waiting'))
  expect(store.require<WorkspaceConversation>(owner,'conversation',c.id)).toMatchObject({activeAgentId:a.id,activeRunStatus:'waiting'})
  await runtime.stop(owner,run.id)
  const stopped=store.require<WorkspaceConversation>(owner,'conversation',c.id)
  expect(stopped.activeAgentId).toBeUndefined()
  expect(stopped.activeRunStatus).toBeUndefined()
})

it('stores the expanded avatar shapes for cross-client role settings', () => {
  const agent=store.createAgent(owner,{name:'扩展头像验收',profile:'default'})
  for(const shape of ['ellipse','capsule','hexagon','cloud','droplet'] as const) {
    const avatar=encodeAgentAvatar({...defaultAgentIdentity('bot'),shape,color:'#f52ba5',expression:'curious'})
    expect(store.updateAgent(owner,agent.id,{avatar}).avatar).toBe(avatar)
  }
})


it('automatically reconciles lost completion without submitting the prompt again', async () => {
  const a=agent('自动恢复'),c=direct(a.id)
  reply=(socket,p)=>{recoveryHistory=[{role:'user',content:p.text},{role:'assistant',content:'已完成一次'}];socket.terminate()}
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'执行一次'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('complete'),{timeout:5000})
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1)
  expect(store.messages(owner,c.id).at(-1)).toMatchObject({content:'已完成一次',status:'complete'})
})
it('reports a rejected prompt as failed instead of leaving it uncertain', async () => {
  rejectPrompt='本轮请求被明确拒绝'
  const a=agent('拒绝测试'),c=direct(a.id)
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'执行'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('failed'))
  expect(store.require<WorkspaceConversation>(owner,'conversation',c.id).activeRunId).toBeUndefined()
  expect(store.messages(owner,c.id).some(m=>m.status==='uncertain')).toBe(false)
})
it('keeps an unconfirmed turn separate from a later reply and retries history without resubmitting', async () => {
  const a = agent('恢复边界'), c = direct(a.id)
  let prompt = ''
  reply = (socket, p) => {
    prompt = p.text
    recoveryHistory = [{ role: 'user', content: prompt }, { role: 'user', content: '另一个请求' }, { role: 'assistant', content: '另一轮回复' }]
    socket.terminate()
  }
  const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '只执行一次' })
  await vi.waitFor(() => expect(requests.filter(r => r.method === 'session.resume').length).toBeGreaterThanOrEqual(1), { timeout: 3000 })
  await vi.waitFor(() => expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('uncertain'), { timeout: 3000 })
  expect(store.messages(owner, c.id).at(-1)?.content).not.toBe('另一轮回复')
  recoveryHistory = [{ role: 'user', content: prompt }, { role: 'assistant', content: '本轮结果' }]
  await vi.waitFor(() => expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('complete'), { timeout: 4000 })
  expect(requests.filter(r => r.method === 'prompt.submit')).toHaveLength(1)
  expect(store.messages(owner, c.id).at(-1)).toMatchObject({ content: '本轮结果', status: 'complete' })
})
it('uses one generated avatar for the agent and its direct conversation',()=>{
  const a=agent('默认头像'),c=direct(a.id)
  expect(decodeAgentAvatar(a.avatar)).toMatchObject({version:2,avatarMode:'mascot'})
  expect(store.agentSummary(a).avatar).toBe(store.conversationSummary(owner,c).avatar)
  const changed=store.updateAgent(owner,a.id,{name:'换个名称'})
  expect(store.agentSummary(changed).avatar).toBe(store.agentSummary(a).avatar)
})
it('recognizes mentions inside Chinese sentences and ignores quoted code and emails',()=>{
  const a=agent('瑶儿'),b=agent('竹儿'),c=agent('瑶儿助手'),d=agent('Ann')
  const roster=[a,b,c,d]
  expect(mentionedAgents('先整理，再请@瑶儿帮忙，最后由（@竹儿）复核。',roster)).toEqual([a.id,b.id])
  expect(mentionedAgents('请**@瑶儿助手**继续',roster)).toEqual([c.id])
  expect(mentionedAgents('mail@Ann.com https://site/@竹儿 `@瑶儿` <quoted_message>@瑶儿</quoted_message>',roster)).toEqual([])
  expect(mentionedAgents('@Anna',roster)).toEqual([])
})

function completeReply(socket: WebSocket, p: Record<string, any>, text: string, status = 'complete') {
  socket.send(JSON.stringify({ method: 'event', params: { type: 'message.complete', session_id: p.session_id, payload: { text, status, ...(status === 'failed' ? { error: text } : {}) } } }))
}
const speaker = (p: Record<string, any>) => /你是 (.*?)。/.exec(p.text)?.[1]

describe('automatic relay termination', () => {
  const receipt = '收到 @审核 终审维持通过。\n\n交付状态（不变）：入草稿箱 Media ID `draft-123`，发布目录 `/work/final/`。\n等民哥群发指令。'
  const review = '@竹儿 维持通过，等民哥群发指令。无新事实、无新派工，本轮不重复核验。'
  const promptCount = () => requests.filter(r => r.method === 'prompt.submit').length
  async function idle(runId: string, conversationId: string) {
    await finished(runId)
    const count = promptCount()
    await new Promise(resolve => setTimeout(resolve, 80))
    expect(promptCount()).toBe(count)
    expect(store.list<Work>(owner, 'turn').filter(w => w.runId === runId && (!w.planned || !['complete', 'failed', 'interrupted'].includes(w.status)))).toEqual([])
    const summary = store.conversationSummary(owner, store.require(owner, 'conversation', conversationId))
    expect(summary.activeRunId).toBeUndefined()
    expect(summary.queuedMessageCount ?? 0).toBe(0)
  }
  it('finishes the observed host receipt cycle in exactly three calls and accepts a new user message', async () => {
    const a = agent('竹儿'), b = agent('审核')
    const g = store.createGroup(owner, { name: '收尾验收', memberIds: [a.id, b.id], administratorId: a.id, maxReplyRounds: -1 })
    let admin = 0
    reply = (socket, p) => completeReply(socket, p, speaker(p) === a.name ? admin++ === 0 ? '@审核 请审核文案' : receipt : review)
    const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '请完成文案' })
    await idle(root.id, g.id)
    expect(promptCount()).toBe(3)
    expect(store.messages(owner, g.id).map(m => m.content)).toEqual(['请完成文案', '@审核 请审核文案', review, receipt])
    expect(store.list<Work>(owner, 'turn').find(w => w.reviewOf)?.relay?.suppressed[b.id]).toBe('acknowledgement')
    const next = runtime.send(owner, g.id, { requestId: randomUUID(), content: '好的。' })
    await idle(next.id, g.id)
    expect(promptCount()).toBe(4)
  })
  it.each(['感谢 @审核，等待用户指令。', '收到，等待用户指令。'])('does not turn a free-mode receipt into an automatic broadcast: %s', content => {
    const a = agent('竹儿'), b = agent('审核')
    const g = store.createGroup(owner, { name: '自动收尾', memberIds: [a.id, b.id], administratorId: a.id, mode: 'free', autoReplyIds: [b.id], maxReplyRounds: -1 })
    reply = (socket, p) => completeReply(socket, p, content)
    return (async () => {
      const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '@竹儿 请处理' })
      await idle(root.id, g.id)
      expect(promptCount()).toBe(1)
      const next = runtime.send(owner, g.id, { requestId: randomUUID(), content: '感谢 @审核' })
      await idle(next.id, g.id)
      expect(speaker(requests.filter(r => r.method === 'prompt.submit').at(-1)!.params)).toBe(b.name)
    })()
  })
  it.each([
    ['host', 2, 5], ['host', 3, 7], ['free', 2, 4], ['free', 3, 5],
  ] as const)('bounds unchanged %s cooperation with %i members at %i calls', async (mode, size, expected) => {
    const members = [agent('甲'), agent('乙'), ...(size === 3 ? [agent('丙')] : [])]
    const g = store.createGroup(owner, { name: '重复往返', memberIds: members.map(a => a.id), administratorId: members[0]!.id, mode, maxReplyRounds: -1 })
    let count = 0
    reply = (socket, p) => {
      const index = members.findIndex(a => a.name === speaker(p)), whitespace = count++ % 2 ? '  ' : ' '
      const text = mode === 'host' ? index === 0 ? members.slice(1).map(a => `@${a.name}${whitespace}再检查一次`).join('，') : '检查结果相同'
        : `@${members[(index + 1) % members.length]!.name}${whitespace}再检查一次`
      completeReply(socket, p, count > 20 ? '完成' : text)
      completeReply(socket, p, count > 20 ? '完成' : text) // Duplicate completion must not double-plan.
    }
    const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '@甲 开始' })
    await idle(root.id, g.id)
    expect(count).toBe(expected)
    expect(store.messages(owner, g.id).filter(m => m.content === REPEATED_RELAY_NOTICE)).toHaveLength(1)
    expect(store.list<Work>(owner, 'turn').some(w => Object.values(w.relay?.suppressed ?? {}).includes('repeated'))).toBe(true)
  })
  it.each(['result', 'tool', 'attachment', 'interaction'] as const)('allows repeated instructions with new %s evidence beyond thirteen calls', async kind => {
    const a = agent('负责人'), b = agent('审核')
    const g = store.createGroup(owner, { name: '持续推进', memberIds: [a.id, b.id], administratorId: a.id, maxReplyRounds: -1 })
    let admin = 0, worker = 0
    reply = (socket, p) => {
      if (speaker(p) === a.name) completeReply(socket, p, admin++ < 7 ? '感谢 @审核，请重新检查第二段' : '完成')
      else { worker++; completeReply(socket, p, kind === 'result' ? `第 ${worker} 版结果` : '本次检查结果') }
    }
    runtime.onMessage = async (_owner, message) => {
      if (message.agentId !== b.id) return
      if (kind === 'tool') message.tools = [{ id: randomUUID(), name: 'verify', status: 'tool.complete', result: { revision: worker } }]
      if (kind === 'attachment') message.attachments = [{ id: randomUUID(), name: 'revision.txt', mimeType: 'text/plain', size: 10, createdAt: Date.now() }]
      if (kind === 'interaction') {
        const id = randomUUID()
        store.put(owner, 'interaction', id, { id, runId: message.runId, conversationId: g.id, conversationTaskId: message.conversationTaskId, agentId: b.id, kind: 'clarification', message: '继续重试？', answer: '继续', responseState: 'sent', resolved: true })
        store.put(owner, 'interaction-binding', id, { taskId: message.taskId })
      }
      store.saveMessage(owner, message)
    }
    const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '反复改进' })
    await idle(root.id, g.id)
    expect(promptCount()).toBe(15)
    expect(store.messages(owner, g.id).some(m => m.content === REPEATED_RELAY_NOTICE)).toBe(false)
  })
  it('ends only the repeating free-mode branch while an independent member finishes', async () => {
    const a = agent('甲'), b = agent('乙'), c = agent('独立成员')
    const g = store.createGroup(owner, { name: '分支隔离', memberIds: [a.id, b.id, c.id], administratorId: a.id, mode: 'free', maxReplyRounds: -1 })
    let pending: { socket: WebSocket; p: Record<string, any> } | undefined, loops = 0
    reply = (socket, p) => {
      if (speaker(p) === c.name) { pending = { socket, p }; return }
      completeReply(socket, p, ++loops > 15 ? '完成' : speaker(p) === a.name ? '@乙 再检查' : '@甲 再检查')
    }
    const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '@甲 @独立成员 请分别处理' })
    await vi.waitFor(() => expect(store.messages(owner, g.id).some(m => m.content === REPEATED_RELAY_NOTICE)).toBe(true))
    expect(store.require<WorkspaceRun>(owner, 'run', root.id).status).toBe('running')
    expect(store.list<Work>(owner, 'turn').filter(w => w.cancelRequested)).toEqual([])
    expect(loops).toBe(4)
    completeReply(pending!.socket, pending!.p, '完成')
    await idle(root.id, g.id)
    expect(store.messages(owner, g.id).find(m => m.agentId === c.id)).toMatchObject({ content: '完成', status: 'complete' })
  })
  it('checks each target independently when a new automatic member joins the same repeated reply', async () => {
    const a = agent('甲'), b = agent('乙'), c = agent('丙')
    const g = store.createGroup(owner, { name: '目标隔离', memberIds: [a.id, b.id, c.id], administratorId: a.id, mode: 'free', autoReplyIds: [a.id], maxReplyRounds: -1 })
    let calls = 0, admin = 0
    reply = (socket, p) => { calls++; completeReply(socket, p, calls > 15 ? '完成' : speaker(p) === a.name ? '@乙 再检查' : speaker(p) === b.name ? '继续检查' : '完成') }
    runtime.onMessage = async (_owner, message) => {
      if (message.agentId === b.id && ++admin === 2) store.updateConversation(owner, g.id, { autoReplyIds: [a.id, c.id] })
    }
    const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '@甲 开始' })
    await idle(root.id, g.id)
    expect(calls).toBe(5)
    const blocked = store.list<Work>(owner, 'turn').find(w => w.relay?.suppressed[a.id] === 'repeated')!
    expect(blocked.relay?.suppressed[c.id]).toBeUndefined()
    expect(store.list<Work>(owner, 'turn').find(w => w.batchId === blocked.id && w.agentId === c.id)?.status).toBe('complete')
  })
  it('starts fresh for identical new requests in the same task and a different task', async () => {
    const a = agent('甲'), b = agent('乙')
    const g = store.createGroup(owner, { name: '任务隔离', memberIds: [a.id, b.id], administratorId: a.id, mode: 'free', maxReplyRounds: -1 })
    let calls = 0
    reply = (socket, p) => { calls++; completeReply(socket, p, calls > 20 ? '完成' : speaker(p) === a.name ? '@乙 再检查' : '@甲 再检查') }
    const originalTask = defaultTask(g.id), secondTask = store.createTask(owner, g.id, { title: '另一个任务' })
    for (const [index, task] of [originalTask, originalTask, secondTask].entries()) {
      const root = runtime.send(owner, g.id, { requestId: randomUUID(), taskId: task.id, content: '@甲 开始' })
      await idle(root.id, g.id)
      expect(calls).toBe((index + 1) * 4)
      expect(store.messages(owner, g.id, Number.MAX_SAFE_INTEGER, 100, false, task.id).filter(m => m.runId === root.id && m.content === REPEATED_RELAY_NOTICE)).toHaveLength(1)
    }
  })
  it.each([false, true])('recovers repeat suppression across restart before planning (legacy=%s)', async legacy => {
    const a = agent('负责人'), b = agent('成员')
    const g = store.createGroup(owner, { name: '循环恢复', memberIds: [a.id, b.id], administratorId: a.id, maxReplyRounds: -1 })
    let calls = 0
    reply = (socket, p) => { calls++; completeReply(socket, p, calls > 15 ? '完成' : speaker(p) === a.name ? '@成员 再检查' : '结果相同') }
    runtime.onMessage = async () => { if (calls === 5) runtime.close() }
    const root = runtime.send(owner, g.id, { requestId: randomUUID(), content: '开始' })
    await vi.waitFor(() => expect(store.list<Work>(owner, 'turn').filter(w => w.status === 'complete')).toHaveLength(5))
    if (legacy) for (const work of store.list<Work>(owner, 'turn')) { delete work.relay; store.put(owner, 'turn', work.id, work) }
    runtime = new WorkspaceRuntime(store, nodes, uploads); runtime.start()
    await idle(root.id, g.id)
    expect(calls).toBe(5)
    expect(store.messages(owner, g.id).filter(m => m.content === REPEATED_RELAY_NOTICE)).toHaveLength(1)
    runtime.close(); runtime = new WorkspaceRuntime(store, nodes, uploads); runtime.start()
    await idle(root.id, g.id)
    expect(calls).toBe(5)
    expect(store.messages(owner, g.id).filter(m => m.content === REPEATED_RELAY_NOTICE)).toHaveLength(1)
  })
})

it('starts with the administrator, executes a batch concurrently, and reviews failures once without spending a round', async () => {
  const a = agent('管理员'), b = agent('成员乙'), c = agent('成员丙')
  const group = store.createGroup(owner, { name: '并行验收', memberIds: [a.id,b.id,c.id], administratorId: a.id, maxReplyRounds: 2 })
  const pending = new Map<string, { socket: WebSocket; p: Record<string, any> }>()
  let admin = 0, review = ''
  reply = (socket,p) => {
    if (speaker(p) === a.name) { if (admin++ === 0) completeReply(socket,p,'请@成员乙检查接口，@成员丙检查数据'); else { review=p.text; completeReply(socket,p,'汇总完成') } }
    else pending.set(speaker(p)!, {socket,p})
  }
  const root = runtime.send(owner,group.id,{requestId:randomUUID(),content:'@成员乙 请处理'})
  await vi.waitFor(()=>expect(pending.size).toBe(2))
  expect(admin).toBe(1)
  expect(store.require<WorkspaceConversation>(owner,'conversation',group.id).activeAgentStates).toEqual({[b.id]:'running',[c.id]:'running'})
  completeReply(pending.get(c.name)!.socket,pending.get(c.name)!.p,'数据检查失败','failed')
  await vi.waitFor(()=>expect(store.messages(owner,group.id).some(m=>m.status==='failed')).toBe(true))
  expect(admin).toBe(1)
  completeReply(pending.get(b.name)!.socket,pending.get(b.name)!.p,'接口正常')
  await finished(root.id)
  expect(admin).toBe(2)
  expect(review).toContain('数据检查失败')
  expect(review).toContain('接口正常')
  expect(store.require<WorkspaceRun>(owner,'run',root.id).round).toBe(1)
})

it('allows successive dependent delegations and does not charge administrator reviews against the limit', async () => {
  const a=agent('负责人'),b=agent('先做'),c=agent('后做')
  const g=store.createGroup(owner,{name:'串行依赖',memberIds:[a.id,b.id,c.id],administratorId:a.id,maxReplyRounds:3})
  const order:string[]=[];let admin=0
  reply=(socket,p)=>{const name=speaker(p)!;order.push(name);completeReply(socket,p,name===a.name ? ['@先做 第一步','@后做 第二步','完成'][admin++]! : '结果已提交')}
  await finished(runtime.send(owner,g.id,{requestId:randomUUID(),content:'执行'}).id)
  expect(order).toEqual([a.name,b.name,a.name,c.name,a.name])
})

it('continues free discussion automatically and hides irrelevant automatic replies', async () => {
  const a=agent('公开管理员'),b=agent('自动成员')
  const g=store.createGroup(owner,{name:'自由讨论',memberIds:[a.id,b.id],administratorId:a.id,mode:'free',autoReplyIds:[b.id],maxReplyRounds:3})
  reply=(socket,p)=>completeReply(socket,p,speaker(p)===a.name?'我来回答':'[[YAOYAO_NO_REPLY_V1]]')
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'一个问题'})
  await finished(root.id)
  expect(requests.filter(r=>r.method==='prompt.submit'&&speaker(r.params)===b.name)).toHaveLength(2)
  expect(store.messages(owner,g.id).map(m=>m.content)).toEqual(['一个问题','我来回答'])
  expect(store.conversationSummary(owner,store.require(owner,'conversation',g.id))).toMatchObject({unread:true, unreadCount:1})
  expect(store.hiddenMessageIds(owner,g.id)).toHaveLength(2)
})

it('requires a public administrator reply when the model tries to remain silent', async () => {
  const a=agent('必须答复'),b=agent('旁观者'),g=store.createGroup(owner,{name:'公开答复',memberIds:[a.id,b.id],administratorId:a.id})
  reply=(socket,p)=>completeReply(socket,p,'[[YAOYAO_NO_REPLY_V1]]')
  await finished(runtime.send(owner,g.id,{requestId:randomUUID(),content:'帮助我'}).id)
  const answer=store.messages(owner,g.id).at(-1)!
  expect(answer.content).toContain('请补充具体目标')
  expect(answer.content).not.toContain('YAOYAO_')
})

it('queues later user requests durably without leaking them into the preceding collaboration', async () => {
  const a=agent('排队管理员'),b=agent('排队执行者'),g=store.createGroup(owner,{name:'消息排队',memberIds:[a.id,b.id],administratorId:a.id})
  let first: {socket:WebSocket;p:Record<string,any>}|undefined
  let admin=0;const prompts:string[]=[]
  reply=(socket,p)=>{prompts.push(p.text);if(speaker(p)===a.name&&admin++===0)first={socket,p};else completeReply(socket,p,'已完成')}
  const one=runtime.send(owner,g.id,{requestId:randomUUID(),content:'第一条任务'})
  await vi.waitFor(()=>expect(first).toBeDefined())
  const two=runtime.send(owner,g.id,{requestId:randomUUID(),content:'之后才处理的秘密标记'})
  expect(two.status).toBe('queued')
  expect(store.require<WorkspaceConversation>(owner,'conversation',g.id).activeRunId).toBe(one.id)
  completeReply(first!.socket,first!.p,'请@排队执行者继续')
  await finished(one.id);await finished(two.id)
  expect(prompts).toHaveLength(4)
  expect(prompts.slice(0,3).every(p=>!p.includes('之后才处理的秘密标记'))).toBe(true)
  expect(prompts[3]).toContain('之后才处理的秘密标记')
})

it('stops one member while keeping its sibling running and returns the interrupted result for review', async () => {
  const a=agent('停止管理员'),b=agent('停止乙'),c=agent('继续丙'),g=store.createGroup(owner,{name:'独立停止',memberIds:[a.id,b.id,c.id],administratorId:a.id})
  const pending=new Map<string,{socket:WebSocket;p:Record<string,any>}>();let admin=0,review=''
  reply=(socket,p)=>{if(speaker(p)===a.name){if(admin++===0)completeReply(socket,p,'@停止乙 @继续丙');else {review=p.text;completeReply(socket,p,'已汇总')}}else pending.set(speaker(p)!,{socket,p})}
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'开始'})
  await vi.waitFor(()=>expect(pending.size).toBe(2))
  await runtime.stopAgent(owner,g.id,b.id)
  expect(admin).toBe(1)
  expect(store.require<WorkspaceConversation>(owner,'conversation',g.id).activeAgentStates?.[c.id]).toBe('running')
  completeReply(pending.get(c.name)!.socket,pending.get(c.name)!.p,'丙完成')
  await finished(root.id)
  expect(review).toContain('interrupted')
  expect(review).toContain('丙完成')
})

it('recovers a partially completed parallel batch after restart without resubmitting members or duplicating review', async () => {
  const a=agent('恢复管理员'),b=agent('恢复乙'),c=agent('恢复丙'),g=store.createGroup(owner,{name:'批次恢复',memberIds:[a.id,b.id,c.id],administratorId:a.id})
  let admin=0;const pending=new Map<string,{socket:WebSocket;p:Record<string,any>}>()
  reply=(socket,p)=>{if(speaker(p)===a.name)completeReply(socket,p,admin++===0?'@恢复乙 @恢复丙':'复核完成');else pending.set(speaker(p)!,{socket,p})}
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'并行执行'})
  await vi.waitFor(()=>expect(pending.size).toBe(2))
  completeReply(pending.get(b.name)!.socket,pending.get(b.name)!.p,'乙已完成')
  const last=pending.get(c.name)!
  recoveryByStored.set(storedByRuntime.get(last.p.session_id)!,[{role:'user',content:last.p.text},{role:'assistant',content:'丙已完成'}])
  last.socket.terminate()
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',root.id).error).toContain('正在恢复原执行'))
  runtime.close();runtime=new WorkspaceRuntime(store,nodes,uploads);runtime.start()
  await finished(root.id)
  expect(admin).toBe(2)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(4)
  expect(store.list<any>(owner,'turn').filter(t=>t.reviewOf)).toHaveLength(1)
})

it('persists the next delegation when restarted between reply completion and cascade planning', async () => {
  const a=agent('记录管理员'),b=agent('记录成员'),g=store.createGroup(owner,{name:'计划恢复',memberIds:[a.id,b.id],administratorId:a.id})
  let admin=0
  reply=(socket,p)=>completeReply(socket,p,speaker(p)===a.name&&admin++===0?'@记录成员 执行':'完成')
  runtime.onMessage=async()=>{runtime.close()}
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'执行一次'})
  await vi.waitFor(()=>expect(store.list<any>(owner,'turn')[0]?.status).toBe('complete'))
  runtime=new WorkspaceRuntime(store,nodes,uploads);runtime.start()
  await finished(root.id)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(3)
})

it('bounds long context while preserving the task beginning and ending', async () => {
  const a=agent('长上下文'),b=agent('辅助'),g=store.createGroup(owner,{name:'上下文边界',memberIds:[a.id,b.id],administratorId:a.id})
  const text='任务开始标记'+ '文'.repeat(60_000)+'任务结束标记'
  await finished(runtime.send(owner,g.id,{requestId:randomUUID(),content:text}).id)
  const prompt=requests.find(r=>r.method==='prompt.submit')!.params.text
  expect(prompt).toContain('任务开始标记');expect(prompt).toContain('任务结束标记')
  expect(prompt).toContain('保留首尾片段');expect(prompt.length).toBeLessThan(32_000)
})

it('serializes a session and stops only that task while the same Agent keeps replying elsewhere', async () => {
  const a=agent('同一机器人'), b=agent('旁观成员')
  const c=store.createGroup(owner,{name:'会话隔离',memberIds:[a.id,b.id],administratorId:a.id})
  const first=defaultTask(c.id), second=store.createTask(owner,c.id,{})
  const pending:Array<{socket:WebSocket;p:Record<string,any>}>=[]
  reply=(socket,p)=>pending.push({socket,p})
  const one=runtime.send(owner,c.id,{requestId:randomUUID(),taskId:first.id,content:'第一话题开始'})
  await vi.waitFor(()=>expect(pending).toHaveLength(1))
  const queued=runtime.send(owner,c.id,{requestId:randomUUID(),taskId:first.id,content:'第一话题追问'})
  const other=runtime.send(owner,c.id,{requestId:randomUUID(),taskId:second.id,content:'第二话题独立执行'})
  await vi.waitFor(()=>expect(pending).toHaveLength(2))
  expect(store.require<WorkspaceRun>(owner,'run',queued.id).status).toBe('queued')
  completeReply(pending[0]!.socket,pending[0]!.p,'第一话题首轮结果')
  await finished(one.id)
  await vi.waitFor(()=>expect(pending).toHaveLength(3))
  const firstBinding=store.get<any>(owner,'binding',`${c.id}:${first.id}:${a.id}`)!
  expect(requests.filter(r=>r.method==='session.resume').map(r=>r.params.session_id)).toEqual([firstBinding.storedId])
  expect(pending[2]!.p.text).not.toContain('第二话题独立执行')
  await runtime.stopTask(owner,c.id,first.id)
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='session.interrupt').map(r=>r.params.session_id)).toEqual([pending[2]!.p.session_id]))
  expect(store.require<WorkspaceRun>(owner,'run',other.id).status).toBe('running')
  expect(store.require<any>(owner,'conversation-task',second.id).activeRunStatus).toBe('running')
  completeReply(pending[1]!.socket,pending[1]!.p,'第二话题独立完成')
  await finished(other.id)
  expect(store.messages(owner,c.id,Number.MAX_SAFE_INTEGER,100,false,second.id).map(m=>m.content)).toEqual(['第二话题独立执行','第二话题独立完成'])
  expect(store.require<WorkspaceRun>(owner,'run',queued.id).status).toBe('interrupted')
})

it('recovers simultaneous sessions for one Agent after restart without replaying either prompt', async () => {
  const a=agent('恢复机器人'),b=agent('恢复旁观者')
  const c=store.createGroup(owner,{name:'并发恢复',memberIds:[a.id,b.id],administratorId:a.id})
  const tasks=[defaultTask(c.id),store.createTask(owner,c.id,{})]
  reply=(_socket,p)=>recoveryByStored.set(storedByRuntime.get(p.session_id)!,[
    {role:'user',content:p.text},{role:'assistant',content:p.text.includes('恢复甲')?'甲的最终结果':'乙的最终结果'},
  ])
  const runs=tasks.map((task,i)=>runtime.send(owner,c.id,{requestId:randomUUID(),taskId:task.id,content:i===0?'恢复甲':'恢复乙'}))
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(2))
  runtime.close();runtime=new WorkspaceRuntime(store,nodes,uploads);runtime.start()
  await Promise.all(runs.map(r=>finished(r.id)))
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(2)
  expect(requests.filter(r=>r.method==='session.interrupt')).toHaveLength(0)
  expect(tasks.map(task=>store.messages(owner,c.id,Number.MAX_SAFE_INTEGER,100,false,task.id).at(-1)?.content)).toEqual(['甲的最终结果','乙的最终结果'])
})

it('enforces three turns per topic and ten globally while preserving queued work', async () => {
  const agents=Array.from({length:12},(_,i)=>agent(`并发成员${i}`))
  const group=store.createGroup(owner,{name:'并发限制',memberIds:agents.slice(0,4).map(a=>a.id),administratorId:agents[0]!.id,mode:'free',autoReplyIds:agents.slice(0,4).map(a=>a.id),maxReplyRounds:1})
  const pending=new Map<string,{socket:WebSocket;p:Record<string,any>}>()
  reply=(socket,p)=>pending.set(speaker(p)!,{socket,p})
  const one=runtime.send(owner,group.id,{requestId:randomUUID(),content:'并发测试'})
  await vi.waitFor(()=>expect(pending.size).toBe(3))
  const others=agents.slice(4).map(a=>runtime.send(owner,direct(a.id).id,{requestId:randomUUID(),content:'另一群'}))
  await vi.waitFor(()=>expect(pending.size).toBe(10))
  expect(Object.keys(store.require<WorkspaceConversation>(owner,'conversation',group.id).activeAgentStates!)).toHaveLength(3)
  expect(store.list<any>(owner,'turn').filter(t=>t.status==='running')).toHaveLength(10)
  expect(store.list<any>(owner,'turn').filter(t=>t.status==='queued')).toHaveLength(2)
  expect(requests.filter(r=>r.method==='session.interrupt')).toHaveLength(0)
  const released=[...pending.values()]
  for(const v of released) completeReply(v.socket,v.p,'完成')
  await vi.waitFor(()=>expect(pending.size).toBe(12))
  expect(store.list<any>(owner,'turn').filter(t=>t.status==='running').length).toBeLessThanOrEqual(10)
  for(const v of pending.values()) if(!released.includes(v)) completeReply(v.socket,v.p,'完成')
  await finished(one.id);await Promise.all(others.map(r=>finished(r.id)))
})

it('supports unlimited rounds beyond the finite limit and still permits stopping', async () => {
  const a=agent('不限甲'),b=agent('不限乙'),g=store.createGroup(owner,{name:'不限轮次',memberIds:[a.id,b.id],administratorId:a.id,mode:'free',autoReplyIds:[a.id],maxReplyRounds:-1})
  let count=0
  reply=(socket,p)=>{
    if(count++===0){const work=store.list<any>(owner,'turn').find(t=>t.status==='running')!;work.depth=100;store.put(owner,'turn',work.id,work);completeReply(socket,p,'继续讨论')}
    else completeReply(socket,p,'[[YAOYAO_NO_REPLY_V1]]')
  }
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'@不限乙 开始'})
  await finished(root.id)
  expect(count).toBe(2)
  expect(store.require<WorkspaceRun>(owner,'run',root.id).round).toBe(101)
  expect(()=>store.updateConversation(owner,g.id,{maxReplyRounds:0})).toThrow()
})

it('applies one global approval policy to all Bots, ignoring legacy overrides and duplicate requests', async () => {
  const bots=[agent('旧询问'),agent('旧允许'),agent('旧拒绝')]
  bots.forEach((bot,index)=>store.put(owner,'agent',bot.id,{...bot,approvalPolicy:['ask','allow','deny'][index]}))
  server.on('connection',socket=>socket.on('message',raw=>{const frame=JSON.parse(String(raw));if(frame.method==='approval.respond')completeReply(socket,frame.params,'审批已处理')}))
  reply=(socket,params)=>{const frame=JSON.stringify({method:'event',params:{type:'approval.request',session_id:params.session_id,payload:{request_id:'same-id',message:'是否执行'}}});socket.send(frame);socket.send(frame)}
  for(const policy of ['allow','deny'] as const){
    saveHostTools(home,{approvalPolicy:policy})
    const runs=bots.map(bot=>runtime.send(owner,direct(bot.id).id,{requestId:randomUUID(),content:'执行任务'}))
    await Promise.all(runs.map(run=>finished(run.id)))
    expect(requests.filter(f=>f.method==='approval.respond').slice(-3).map(f=>f.params.choice)).toEqual(Array(3).fill(policy==='allow'?'once':'deny'))
  }
  expect(requests.filter(f=>f.method==='approval.respond')).toHaveLength(6)
})

it('treats a legacy auto reply as one approval without altering global or other Bot policy', async () => {
  const bot = agent('选择自动允许'), peer = agent('同一基础机器人')
  reply = (socket, params) => socket.send(JSON.stringify({ method: 'event', params: { type: 'approval.request', session_id: params.session_id, payload: { request_id: 'first-approval', message: '生成图片' } } }))
  server.on('connection', socket => socket.on('message', raw => {
    const frame = JSON.parse(String(raw))
    if (frame.method !== 'approval.respond') return
    if (frame.params.request_id === 'first-approval') socket.send(JSON.stringify({ method: 'event', params: { type: 'approval.request', session_id: frame.params.session_id, payload: { request_id: 'next-approval', message: '保存图片' } } }))
    else completeReply(socket, frame.params, '自动完成')
  }))
  const run = runtime.send(owner, direct(bot.id).id, { requestId: randomUUID(), content: '生成图片' })
  await vi.waitFor(() => expect(store.list<WorkspaceInteraction>(owner, 'interaction')).toHaveLength(1))
  const request = store.list<WorkspaceInteraction>(owner, 'interaction')[0]!
  await expect(runtime.respond(other, request.id, 'auto')).rejects.toThrow('记录不存在')
  expect(store.require<any>(owner, 'agent', bot.id).approvalPolicy).toBe('ask')
  await runtime.respond(owner, request.id, 'auto')
  await vi.waitFor(()=>expect(store.list<WorkspaceInteraction>(owner,'interaction').filter(i=>!i.resolved)).toHaveLength(1))
  const next=store.list<WorkspaceInteraction>(owner,'interaction').find(i=>!i.resolved)!
  expect(readHostTools(home).approvalPolicy).toBe('ask')
  await runtime.respond(owner,next.id,'once')
  await finished(run.id)
  expect(requests.filter(frame => frame.method === 'approval.respond').map(frame => frame.params.choice)).toEqual(['once', 'once'])
  expect(store.agentSummary(store.require<any>(owner, 'agent', bot.id)).approvalPolicy).toBe('ask')
  expect(store.require<any>(owner, 'agent', peer.id).approvalPolicy).toBe('ask')
  store.updateAgent(owner, bot.id, { approvalPolicy: 'ask' })
  await runtime.respond(owner, request.id, 'auto')
  expect(store.require<any>(owner, 'agent', bot.id).approvalPolicy).toBe('ask')
  expect(requests.filter(frame => frame.method === 'approval.respond')).toHaveLength(2)
})

it('preserves current team grants for approval-only edits without reviving revoked grants', () => {
  const bot = agent('有效工具授权')
  store.put(owner, 'turn', 'valid-grant', { id: 'valid-grant', agentId: bot.id, status: 'waiting', teamManagementRevision: bot.revision })
  store.put(owner, 'turn', 'revoked-grant', { id: 'revoked-grant', agentId: bot.id, status: 'running', teamManagementRevision: bot.revision - 1 })
  const updated = store.updateAgent(owner, bot.id, { approvalPolicy: 'allow' })
  expect(store.require<any>(owner, 'turn', 'valid-grant').teamManagementRevision).toBe(updated.revision)
  expect(store.require<any>(owner, 'turn', 'revoked-grant').teamManagementRevision).toBe(bot.revision - 1)
  store.updateAgent(owner, bot.id, { instructions: '新规则' })
  expect(store.require<any>(owner, 'turn', 'valid-grant').teamManagementRevision).toBe(updated.revision)
})

it('keeps an explicit automatic preference but reports an unconfirmed reply without retrying it', async () => {
  const bot = agent('自动设置与答复状态')
  reply = (socket, params) => socket.send(JSON.stringify({ method: 'event', params: { type: 'approval.request', session_id: params.session_id, payload: { request_id: 'uncertain-auto', message: '需要确认' } } }))
  runtime.send(owner, direct(bot.id).id, { requestId: randomUUID(), content: '继续' })
  await vi.waitFor(() => expect(store.list<WorkspaceInteraction>(owner, 'interaction')).toHaveLength(1))
  const interaction = store.list<WorkspaceInteraction>(owner, 'interaction')[0]!
  const rpc = WorkspaceGateway.prototype.rpc
  const spy = vi.spyOn(WorkspaceGateway.prototype, 'rpc').mockImplementation(function (this: WorkspaceGateway, method, params) {
    return method === 'approval.respond' ? Promise.reject(new Error('connection lost')) : rpc.call(this, method, params)
  })
  try {
    await expect(runtime.respond(owner, interaction.id, 'auto')).rejects.toMatchObject({ code: 'approval_auto_response_failed' })
    expect(store.agentSummary(store.require<any>(owner, 'agent', bot.id)).approvalPolicy).toBe('ask')
    expect(store.require<any>(owner, 'interaction', interaction.id)).toMatchObject({ resolved: false, responseState: 'uncertain', answer: 'auto' })
    await expect(runtime.respond(owner, interaction.id, 'auto')).rejects.toMatchObject({ code: 'interaction_uncertain' })
    expect(spy.mock.calls.filter(call => call[0] === 'approval.respond')).toHaveLength(1)
  } finally { spy.mockRestore() }
})

it('leaves clarifications and already pending approvals for the user after a policy change', async () => {
  const bot = agent('更改审批')
  let kind = 'approval'
  server.on('connection', socket => socket.on('message', raw => {
    const frame = JSON.parse(String(raw))
    if (['approval.respond', 'clarify.respond'].includes(frame.method)) completeReply(socket, frame.params, '已答复')
  }))
  reply = (socket, params) => socket.send(JSON.stringify({ method: 'event', params: { type: `${kind}.request`, session_id: params.session_id, payload: { request_id: 'pending', message: '请确认' } } }))
  for (kind of ['approval', 'clarify']) {
    const run = runtime.send(owner, direct(bot.id).id, { requestId: randomUUID(), content: '继续任务' })
    await vi.waitFor(() => expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('waiting'))
    saveHostTools(home, { approvalPolicy: 'allow' })
    const interaction = store.list<WorkspaceInteraction>(owner, 'interaction').find(item => !item.resolved)!
    expect(requests.filter(frame => ['approval.respond', 'clarify.respond'].includes(frame.method))).toHaveLength(kind === 'approval' ? 0 : 1)
    await runtime.respond(owner, interaction.id, kind === 'approval' ? 'once' : '下一步')
    await finished(run.id)
  }
})

it('defaults legacy and newly created Bots to manual approval and prevents autonomous grants', () => {
  const parent = agent('创建者')
  expect(parent.approvalPolicy).toBe('ask')
  const child = store.createAgent(owner, { name: '子成员', profile: parent.profile, approvalPolicy: 'allow' }, { createdByAgentId: parent.id, createdFromRunId: randomUUID() })
  expect(child.approvalPolicy).toBe('ask')
  expect(() => store.updateAgent(owner, child.id, { approvalPolicy: 'always' })).toThrow('approvalPolicy')
  store.put(owner, 'agent', child.id, { ...child, remoteAgentId: randomUUID() })
  expect(store.agentSummary(store.updateAgent(owner, child.id, { approvalPolicy: 'deny' })).approvalPolicy).toBe('ask')
  expect(() => store.updateAgent(owner, child.id, { name: '不能改远端资料' })).toThrow('远端管理')
})

it('keeps a failed automatic approval pending and does not retry a replayed request', async () => {
  const bot = agent('审批失败')
  saveHostTools(home,{approvalPolicy:'allow'})
  const rpc = WorkspaceGateway.prototype.rpc
  let attempts = 0
  const spy = vi.spyOn(WorkspaceGateway.prototype, 'rpc').mockImplementation(function (this: WorkspaceGateway, method, params) {
    if (method === 'approval.respond' && attempts++ === 0) return Promise.reject(new HttpError(409, '暂时拒绝答复', 'gateway_rejected'))
    return rpc.call(this, method, params)
  })
  try {
    const notify = vi.fn()
    runtime.onNotify = notify
    reply = (socket, params) => {
      const frame = JSON.stringify({ method: 'event', params: { type: 'approval.request', session_id: params.session_id, payload: { request_id: 'failure', message: '确认操作' } } })
      socket.send(frame); socket.send(frame)
    }
    server.on('connection', socket => socket.on('message', raw => {
      const frame = JSON.parse(String(raw))
      if (frame.method === 'approval.respond') completeReply(socket, frame.params, '手动处理完成')
    }))
    const run = runtime.send(owner, direct(bot.id).id, { requestId: randomUUID(), content: '继续' })
    await vi.waitFor(() => expect(notify.mock.calls.some(call => call[4]?.kind === 'approval')).toBe(true))
    expect(attempts).toBe(1)
    const interaction = store.list<WorkspaceInteraction>(owner, 'interaction').find(item => !item.resolved)!
    expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('waiting')
    await runtime.respond(owner, interaction.id, 'deny')
    await finished(run.id)
  } finally { spy.mockRestore() }
})

it('keeps parallel approval cards scoped to their member and deduplicates replayed requests and answers', async () => {
  const a=agent('审批管理员'),b=agent('审批乙'),c=agent('审批丙'),g=store.createGroup(owner,{name:'并发审批',memberIds:[a.id,b.id,c.id],administratorId:a.id})
  let admin=0
  server.on('connection',socket=>socket.on('message',raw=>{const f=JSON.parse(String(raw));if(f.method==='approval.respond')completeReply(socket,f.params,'已确认')}))
  reply=(socket,p)=>{
    if(speaker(p)===a.name){completeReply(socket,p,admin++===0?'@审批乙 @审批丙':'汇总');return}
    const frame=JSON.stringify({method:'event',params:{type:'approval.request',session_id:p.session_id,payload:{request_id:'same-request',message:'是否继续'}}})
    socket.send(frame);socket.send(frame)
  }
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'开始'})
  await vi.waitFor(()=>expect(store.list<WorkspaceInteraction>(owner,'interaction').filter(i=>!i.resolved)).toHaveLength(2))
  const interactions=store.list<WorkspaceInteraction>(owner,'interaction')
  expect(store.require<WorkspaceConversation>(owner,'conversation',g.id).activeAgentStates).toEqual({[b.id]:'waiting',[c.id]:'waiting'})
  await runtime.respond(owner,interactions[0]!.id,'once')
  await runtime.respond(owner,interactions[0]!.id,'once')
  await expect(runtime.respond(owner,interactions[0]!.id,'deny')).rejects.toThrow('其他答复')
  expect(admin).toBe(1)
  await runtime.respond(owner,interactions[1]!.id,'once')
  await finished(root.id)
  expect(requests.filter(r=>r.method==='approval.respond')).toHaveLength(2)
  expect(admin).toBe(2)
})

it('retries a rolled-back cascade plan without losing or duplicating delegation', async () => {
  const a=agent('事务管理员'),b=agent('事务成员'),g=store.createGroup(owner,{name:'调度事务',memberIds:[a.id,b.id],administratorId:a.id})
  const original=store.put.bind(store);let failed=false,admin=0
  store.put=(user,kind,id,value)=>{if(!failed&&kind==='turn'&&(value as any).agentId===b.id){failed=true;throw new Error('模拟一次写入失败')}original(user,kind,id,value)}
  reply=(socket,p)=>completeReply(socket,p,speaker(p)===a.name&&admin++===0?'@事务成员 继续':'完成')
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'开始'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',root.id).status).toBe('complete'),{timeout:4000})
  expect(failed).toBe(true)
  expect(store.list<any>(owner,'turn').filter(t=>t.agentId===b.id)).toHaveLength(1)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(3)
})

it('upgrades an admitted v0.3.7 execution without submitting its prompt again', async () => {
  const a=agent('升级执行'),c=direct(a.id)
  reply=(socket,p)=>{recoveryHistory=[{role:'user',content:p.text},{role:'assistant',content:'升级前已完成'}];socket.terminate()}
  const root=runtime.send(owner,c.id,{requestId:randomUUID(),content:'只执行一次'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',root.id).error).toContain('正在恢复原执行'))
  runtime.close()
  const old=store.list<any>(owner,'turn')[0]!
  for(const task of store.list<any>(owner,'turn'))store.remove(owner,'turn',task.id)
  const legacy=store.require<any>(owner,'run',root.id)
  Object.assign(legacy,{queue:[a.id],next:[],hostReturn:false,currentMessageId:old.currentMessageId,turnConfiguration:old.turnConfiguration})
  store.put(owner,'run',root.id,legacy)
  const binding=store.get<any>(owner,'binding',`${c.id}:${a.id}`)!
  delete binding.taskId;store.put(owner,'binding',binding.id,binding)
  runtime=new WorkspaceRuntime(store,nodes,uploads);runtime.start()
  await finished(root.id)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1)
  expect(store.messages(owner,c.id).at(-1)?.content).toBe('升级前已完成')
})

it('does not read unrelated or orphaned historical runs when projecting a group prompt', async () => {
  const a=agent('上下文隔离'),b=agent('组内成员'),g=store.createGroup(owner,{name:'干净群',memberIds:[a.id,b.id],administratorId:a.id})
  store.put(owner,'run','historical-orphan',{id:'historical-orphan',conversationId:'unrelated-conversation',messageId:'missing-history',mentionIds:[],status:'complete',round:0,createdAt:1,updatedAt:1})
  await finished(runtime.send(owner,g.id,{requestId:randomUUID(),content:'当前群任务'}).id)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1)
})

it('pages backwards to find a long-running turn marker and never mistakes a tool call for a final answer', async () => {
  const a=agent('分页恢复'),c=direct(a.id)
  reply=(socket,p)=>{
    recoveryHistory=[{role:'user',content:p.text},...Array.from({length:600},()=>({role:'tool',content:'工具结果'})),{role:'assistant',content:'最终结果'}]
    socket.terminate()
  }
  await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'长时间执行'}).id)
  expect(store.messages(owner,c.id).at(-1)?.content).toBe('最终结果')
  let submitted=''
  reply=(socket,p)=>{submitted=p.text;recoveryHistory=[{role:'user',content:submitted},{role:'assistant',content:'准备调用工具',tool_calls:[{id:'tool'}]},{role:'tool',content:'工具输出'}];socket.terminate()}
  const root=runtime.send(owner,c.id,{requestId:randomUUID(),content:'不要把过程当结论'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',root.id).status).toBe('uncertain'))
  await runtime.reconcile(owner,root.id)
  await new Promise(resolve=>setTimeout(resolve,100))
  expect(store.require<WorkspaceRun>(owner,'run',root.id).status).toBe('uncertain')
  recoveryHistory.push({role:'assistant',content:'真正完成'})
  await runtime.reconcile(owner,root.id)
  await finished(root.id)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(2)
})

it('keeps explicit replies visible and emits one notice when the configured cascade limit is reached', async () => {
  const a=agent('轮数管理员'),b=agent('轮数成员'),g=store.createGroup(owner,{name:'有限轮次',memberIds:[a.id,b.id],administratorId:a.id,maxReplyRounds:2})
  reply=(socket,p)=>completeReply(socket,p,speaker(p)===a.name?'@轮数成员 继续':'已完成本步')
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'开始'})
  await finished(root.id)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(3)
  expect(store.messages(owner,g.id).filter(m=>m.content.includes('轮数上限'))).toHaveLength(1)
  store.updateConversation(owner,g.id,{mode:'free',autoReplyIds:[]})
  reply=(socket,p)=>completeReply(socket,p,'[[YAOYAO_NO_REPLY_V1]]')
  await finished(runtime.send(owner,g.id,{requestId:randomUUID(),content:'@轮数成员 显示这个字符串'}).id)
  expect(store.messages(owner,g.id).at(-1)?.content).toBe('[[YAOYAO_NO_REPLY_V1]]')
})

it('retries a failed stop of a live task without falsely completing it or resubmitting work', async () => {
  const a=agent('停止恢复'),c=direct(a.id)
  reply=()=>{}
  const root=runtime.send(owner,c.id,{requestId:randomUUID(),content:'等待停止'})
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1))
  rejectedInterrupts=1
  await runtime.stop(owner,root.id)
  expect(store.require<WorkspaceRun>(owner,'run',root.id).status).toBe('interrupted')
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='session.interrupt')).toHaveLength(2),{timeout:3000})
  expect(requests.filter(r=>r.method==='session.interrupt')).toHaveLength(2)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1)
})

it('retains the stop barrier and original binding after ACK, including a restart, until native work is idle',async()=>{
  const a=agent('真正停止'),c=direct(a.id)
  reply=()=>{};nativeStillWorking=true
  const root=runtime.send(owner,c.id,{requestId:randomUUID(),content:'长任务'})
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1))
  await runtime.stop(owner,root.id)
  await vi.waitFor(()=>expect(requests.some(r=>r.method==='session.active_list')).toBe(true))
  const work=store.list<Work>(owner,'turn').find(item=>item.runId===root.id)!
  expect(store.require<Work>(owner,'turn',work.id)).toMatchObject({status:'interrupted',cleanupPending:true})
  const original=store.require<any>(owner,'binding',`${c.id}:${a.id}`)
  expect(()=>runtime.send(owner,c.id,{requestId:randomUUID(),content:'下一轮'})).toThrow('尚未确认停止')
  expect(()=>store.updateAgent(owner,a.id,{archived:true})).toThrow('尚未确认停止')
  expect(runtime.idleForUpdate).toBe(false)
  runtime.close()
  runtime=new WorkspaceRuntime(store,nodes,uploads)
  nativeStillWorking=false;runtime.start()
  await vi.waitFor(()=>expect(store.require<Work>(owner,'turn',work.id).cleanupPending).toBe(false))
  expect(store.require<any>(owner,'binding',`${c.id}:${a.id}`).storedId).toBe(original.storedId)
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1)
})
it('retains cleanup and refuses reuse when native stop confirmation times out',async()=>{
  const a=agent('停止超时'),c=direct(a.id)
  reply=()=>{}
  const root=runtime.send(owner,c.id,{requestId:randomUUID(),content:'超时长任务'})
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1))
  const confirmation=vi.spyOn(sessionStop,'waitForHermesSessionIdle').mockRejectedValueOnce(new HttpError(409,'Hermes 原任务尚未停止','session_still_stopping'))
  try{
    await runtime.stop(owner,root.id)
    const work=store.list<Work>(owner,'turn').find(item=>item.runId===root.id)!
    await vi.waitFor(()=>expect(store.require<Work>(owner,'turn',work.id).cleanupError).toContain('原任务尚未停止'))
    expect(store.require<Work>(owner,'turn',work.id).cleanupPending).toBe(true)
    expect(store.get(owner,'binding',`${c.id}:${a.id}`)).toBeTruthy()
    expect(()=>runtime.send(owner,c.id,{requestId:randomUUID(),content:'不能复用'})).toThrow('尚未确认停止')
    expect(()=>store.changeConversationLifecycle(owner,c.id,'delete',store.conversationLifecycle(owner,c.id).confirmationToken)).toThrow('尚未确认停止')
    expect(runtime.idleForUpdate).toBe(false)
  }finally{confirmation.mockRestore()}
  await vi.waitFor(()=>expect(store.list<Work>(owner,'turn').find(item=>item.runId===root.id)?.cleanupPending).toBe(false),{timeout:3000})
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1)
})
it('marks a stopped administrator as interrupted without sending a false completion notification', async () => {
  const a=agent('管理员停止'),b=agent('普通成员'),g=store.createGroup(owner,{name:'停止管理员',memberIds:[a.id,b.id],administratorId:a.id})
  reply=()=>{}
  const notifications: string[]=[]
  runtime.onNotify=(_owner,_c,run)=>notifications.push(run.status)
  const root=runtime.send(owner,g.id,{requestId:randomUUID(),content:'等待'})
  await vi.waitFor(()=>expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(1))
  await runtime.stopAgent(owner,g.id,a.id)
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',root.id).status).toBe('interrupted'))
  expect(notifications).toEqual([])
})

it('randomizes old default avatars once while preserving photos, custom v2 settings and direct snapshots',()=>{
  const a=store.createAgent(owner,{name:'旧头像',profile:'default',instructions:'保留规则'})
  const photo='data:image/png;base64,aGVsbG8='
  const b=store.createAgent(owner,{name:'照片',profile:'default',avatar:photo})
  store.put(owner,'agent',a.id,{...a,avatar:'yaoyao-mascot:v1:triangle:ff0000:friendly'})
  store.put(owner,'agent',b.id,{...b,avatar:photo})
  store.db.prepare("DELETE FROM workspace_migrations WHERE id IN ('avatar-v2','avatar-random-default-v1')").run()
  const random=vi.spyOn(Math,'random').mockReturnValue(0)
  const migrated=new WorkspaceStore(home)
  random.mockRestore()
  const next=migrated.require<any>(owner,'agent',a.id)
  expect(next.instructions).toBe('保留规则')
  expect(decodeAgentAvatar(next.avatar)).toMatchObject({avatarMode:'mascot'})
  expect(next.avatar).not.toBe(encodeAgentAvatar(defaultAgentIdentity(a.id,a.name)))
  const image=migrated.require<any>(owner,'agent',b.id)
  expect(decodeAgentAvatar(image.avatar)).toMatchObject({avatarMode:'image',imageDataURL:photo,imageCrop:'rounded'})
  for(const c of migrated.list<WorkspaceConversation>(owner,'conversation')) expect(c.avatar).toBe(migrated.require<any>(owner,'agent',c.memberIds[0]!).avatar)
  const customized=encodeAgentAvatar({...defaultAgentIdentity('bot'),bodyId:'star',expression:'proud',color:'#1488ff'})
  migrated.updateAgent(owner,a.id,{avatar:customized})
  migrated.close()
  const reopened=new WorkspaceStore(home)
  expect(reopened.require<any>(owner,'agent',a.id).avatar).toBe(customized)
  expect(reopened.db.prepare("SELECT count(*) AS count FROM workspace_migrations WHERE id='avatar-random-default-v1'").get()!.count).toBe(1)
  reopened.close()
})

// A member can have a queued follow-up while their current task needs approval.
it('keeps active avatar state ahead of queued work and publishes only recent outcomes', () => {
  const a=agent('状态优先级'), c=direct(a.id), now=Date.now()
  const run: WorkspaceRun={id:'avatar-run',conversationId:c.id,messageId:'unused',mentionIds:[],status:'complete',round:1,createdAt:now,updatedAt:now}
  for (const [id,status] of [['current','waiting'],['next','queued']] as const)
    store.put(owner,'turn',id,{id,conversationId:c.id,agentId:a.id,status,planned:true,updatedAt:now})
  store.put(owner,'turn','result',{id:'result',conversationId:c.id,agentId:a.id,status:'failed',updatedAt:now})
  store.saveRun(owner,run)
  let summary=store.require<WorkspaceConversation>(owner,'conversation',c.id)
  expect(summary.activeAgentStates).toEqual({[a.id]:'waiting'})
  expect(summary.avatarSignals?.[a.id]).toMatchObject({id:'result',state:'failure'})
  store.put(owner,'turn','result',{id:'result',conversationId:c.id,agentId:a.id,status:'complete',updatedAt:now-3000})
  store.saveRun(owner,run)
  expect(store.require<WorkspaceConversation>(owner,'conversation',c.id).avatarSignals).toEqual({})
})

it('queues an unsubmitted turn while computer capacity is unavailable and submits it once after recovery',async()=>{
  const a=agent('等候电脑'),c=direct(a.id),target=nodes.target(owner,'local')
  vi.spyOn(target.session,'request').mockRejectedValueOnce(new HttpError(429,'资源不足','computer_quota'))
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'等待资源后执行'})
  await vi.waitFor(()=>expect(store.list<any>(owner,'turn').find(work=>work.runId===run.id)?.resourceWait).toBe(true))
  expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('queued')
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('complete'),{timeout:5000})
  expect(requests.filter(request=>request.method==='prompt.submit')).toHaveLength(1)
})

it('keeps legacy VM Bots chatting on the server while their Runner is offline',async()=>{
 const a=store.updateAgent(owner,agent('离线电脑').id,{execution:'computer',computer:'vm'}),c=direct(a.id)
 nodes.targetForAgent=vi.fn(()=>{throw new HttpError(503,'节点未连接','runner_offline')})
 const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'普通聊天不需要虚拟机'})
 await finished(run.id)
 expect(nodes.targetForAgent).not.toHaveBeenCalled()
 expect(store.get<any>(owner,'binding',`${c.id}:${a.id}`)).toMatchObject({execution:'profile'})
})

it('can stop an unsubmitted turn that is waiting for computer capacity',async()=>{
  const a=store.updateAgent(owner,agent('可停止等候').id,{execution:'computer',computer:'vm'}),c=direct(a.id)
  vi.spyOn(nodes.target(owner,'local').session,'request').mockRejectedValue(new HttpError(429,'资源不足','computer_quota'))
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'等待中停止'})
  const work=await vi.waitFor(()=>{
    const current=store.list<Work>(owner,'turn').find(work=>work.runId===run.id)
    expect(current?.resourceWait).toBe(true)
    return current!
  })
  await runtime.stop(owner,run.id)
  await vi.waitFor(()=>expect(store.require<Work>(owner,'turn',work.id).status).toBe('interrupted'))
})

it('forwards a generated artifact to a new task without changing its original provenance',async()=>{
  const a=agent('产物接收者'),c=direct(a.id)
  const first=runtime.send(owner,c.id,{requestId:randomUUID(),content:'first'})
  await finished(first.id)
  const message=store.messages(owner,c.id).find(message=>message.role==='assistant')!
  const assets=new WorkspaceAssets(store,nodes,home)
  const file=assets.publish(owner,message,a,'review.txt',Buffer.from('verified artifact'))
  const sent=runtime.dispatch(owner,c.id,{requestId:randomUUID(),content:'复核附件',fileIds:[file.id]},{agentId:a.id,kind:'task_review'})
  await finished(sent.id)
  const attached=requests.find(request=>request.method==='file.attach')!
  expect(Buffer.from(attached.params.data_url.split(',')[1],'base64').toString()).toBe('verified artifact')
  expect(store.require<any>(owner,'file',file.id).messageId).toBe(message.id)
  expect(store.require<WorkspaceMessage>(owner,'message',sent.messageId).attachments.map(file=>file.id)).toEqual([file.id])
  assets.close()
})


it('migrates a stored Worker binding to server Hermes once and preserves prior conversation',async()=>{
 const a=store.updateAgent(owner,agent('迁移测试').id,{execution:'computer',computer:'vm',vmExecution:'profile'}),c=direct(a.id)
 const first=runtime.send(owner,c.id,{requestId:randomUUID(),content:'已确认的原会话事实'})
 await finished(first.id)
 const key=`${c.id}:${a.id}`,old=store.get<any>(owner,'binding',key)!
 store.put(owner,'binding',key,{...old,execution:'computer',runnerId:'old-runner',hermesComputer:true})
 nodes.targetForAgent=vi.fn(()=>{throw new Error('旧 Runner 不应打开')})
 const second=runtime.send(owner,c.id,{requestId:randomUUID(),content:'继续这次任务'})
 await finished(second.id)
 const migrated=store.get<any>(owner,'binding',key)!
 expect(migrated.execution).toBe('profile');expect(migrated.storedId).not.toBe(old.storedId)
 expect(requests.filter(r=>r.method==='session.create')).toHaveLength(2)
 expect(requests.filter(r=>r.method==='prompt.submit')[1].params.text).toContain('已确认的原会话事实')
 const third=runtime.send(owner,c.id,{requestId:randomUUID(),content:'再次继续'})
 await finished(third.id)
 expect(requests.filter(r=>r.method==='session.resume')).toHaveLength(1)
 expect(nodes.targetForAgent).not.toHaveBeenCalled()
})

it('keeps memory flags out of session.create and grants scoped memory through the bridge',async()=>{
  const a=agent('独立记忆'),c=direct(a.id),target=nodes.target(owner,'local'),request=target.session.request.bind(target.session),bindings:any[]=[]
  vi.spyOn(target.session,'request').mockImplementation(async(path,options)=>{
    if(path.endsWith('/capabilities'))return {status:200,headers:new Headers(),body:Buffer.from(JSON.stringify({ready:true,native_tools:true,in_process:true,memory_isolation:true}))}
    if(path.endsWith('/bind')){bindings.push(options?.body);return {status:200,headers:new Headers(),body:Buffer.from(JSON.stringify({ok:true,native_tools:true,workspace_memory:true}))}}
    if(path.endsWith('/unbind'))return {status:200,headers:new Headers(),body:Buffer.from('{"ok":true}')}
    return request(path,options)
  })
  await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'验证完整创建链路'}).id)
  const create=requests.find(r=>r.method==='session.create')!
  expect(create.params).not.toHaveProperty('skip_memory')
  expect(create.params).not.toHaveProperty('workspace_memory')
  expect(bindings).toContainEqual(expect.objectContaining({workspace_memory:true}))
})

describe('Bot memory session reuse', () => {
  beforeEach(() => {
    const target = nodes.target(owner, 'local'), request = target.session.request.bind(target.session)
    vi.spyOn(target.session, 'request').mockImplementation(async (path, options) => {
      if (path.endsWith('/capabilities')) return { status: 200, headers: new Headers(), body: Buffer.from(JSON.stringify({ ready: true, native_tools: true, in_process: true, memory_isolation: true })) }
      if (path.endsWith('/bind')) return { status: 200, headers: new Headers(), body: Buffer.from(JSON.stringify({ ok: true, native_tools: true, workspace_memory: true })) }
      if (path.endsWith('/unbind')) return { status: 200, headers: new Headers(), body: Buffer.from('{"ok":true}') }
      return request(path, options)
    })
  })
  it('reuses persisted sessions for added facts and submits only new memory after restart', async () => {
    const bot = agent('记忆复用'), c = direct(bot.id)
    await runtime.knowledge.writeMemory(owner, { requestId: randomUUID(), scope: 'agent', agentId: bot.id, tier: 'profile', content: '偏好内容甲' })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
    const original = store.list<any>(owner, 'binding')[0].storedId
    await runtime.knowledge.writeMemory(owner, { requestId: randomUUID(), scope: 'agent', agentId: bot.id, tier: 'profile', content: '新增内容乙' })
    runtime.close(); runtime = new WorkspaceRuntime(store, nodes, uploads)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第二轮' }).id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第三轮' }).id)
    expect(store.list<any>(owner, 'binding')[0].storedId).toBe(original)
    expect(requests.filter(r => r.method === 'session.create')).toHaveLength(1)
    expect(requests.filter(r => r.method === 'session.resume')).toHaveLength(2)
    const prompts = requests.filter(r => r.method === 'prompt.submit').map(r => String(r.params.text))
    expect(prompts[1]).toContain('新增内容乙'); expect(prompts[1]).not.toContain('偏好内容甲')
    expect(prompts[2]).not.toContain('新增内容乙'); expect(prompts[2]).not.toContain('偏好内容甲')
  })
  it.each(['edit', 'forget'] as const)('rebuilds after %s and records the reason without restoring the old memory', async operation => {
    const bot = agent('记忆失效'), c = direct(bot.id), record = vi.fn()
    runtime.inspector = { record } as any
    const input = { scope: 'agent' as const, agentId: bot.id, tier: 'profile' as const, content: '旧的长期事实' }
    const fact = await runtime.knowledge.writeMemory(owner, { ...input, requestId: randomUUID() })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
    const revision = { ...input, id: fact.id, expectedRevision: fact.revision, requestId: randomUUID() }
    if (operation === 'forget') await runtime.knowledge.forget(owner, revision)
    else await runtime.knowledge.writeMemory(owner, { ...revision, content: '修正后的事实' })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第二轮' }).id)
    expect(requests.filter(r => r.method === 'session.create')).toHaveLength(2)
    const prompt = requests.filter(r => r.method === 'prompt.submit').at(-1)!.params.text
    expect(prompt).not.toContain('旧的长期事实')
    if (operation === 'edit') expect(prompt).toContain('修正后的事实')
    expect(record.mock.calls.some(([, , entry]) => entry.method === 'bot.session-reset' && entry.data.reason === 'memory_changed_or_removed')).toBe(true)
  })
  it('does not acknowledge an added fact when prompt admission is rejected', async () => {
    const bot = agent('记忆提交'), c = direct(bot.id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
    await runtime.knowledge.writeMemory(owner, { requestId: randomUUID(), scope: 'agent', agentId: bot.id, tier: 'profile', content: '尚未确认的注入' })
    rejectPrompt = '拒绝本次提交'
    const rejected = runtime.send(owner, c.id, { requestId: randomUUID(), content: '第二轮' })
    await vi.waitFor(() => expect(store.require<WorkspaceRun>(owner, 'run', rejected.id).status).toBe('failed'))
    rejectPrompt = undefined
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第三轮' }).id)
    expect(requests.filter(r => r.method === 'prompt.submit').at(-1)!.params.text).toContain('尚未确认的注入')
    expect(requests.filter(r => r.method === 'session.create')).toHaveLength(1)
  })
  it('rebuilds once when an old or unconfirmed memory baseline cannot prove which facts were admitted', async () => {
    const bot = agent('记忆基线'), c = direct(bot.id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
    for (const state of ['legacy', 'pending']) {
      const binding = store.list<any>(owner, 'binding')[0]
      store.put(owner, 'binding', binding.id, state === 'legacy'
        ? { ...binding, memoryState: undefined, memoryVersion: 'legacy' }
        : { ...binding, memoryState: undefined, memoryVersion: undefined, memoryPending: true })
      await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: state }).id)
    }
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '已恢复正常复用' }).id)
    expect(requests.filter(r => r.method === 'session.create')).toHaveLength(3)
    expect(requests.filter(r => r.method === 'session.resume')).toHaveLength(1)
  })
})

it('snapshots each message origin and uses inherited provenance for internal dispatch only',async()=>{
 const bot=agent('来源上下文'),c=direct(bot.id),a=randomUUID(),b=randomUUID()
 runtime.desktopEnvironments=new DesktopEnvironments(store,{} as any,{localNodeID:'fixture',requireSource:()=>{}} as any)
 const first=runtime.send(owner,c.id,{requestId:randomUUID(),content:'在本机工作',deviceHost:a})
 await finished(first.id)
 const second=runtime.send(owner,c.id,{requestId:randomUUID(),content:'切换设备',deviceHost:b})
 await finished(second.id)
 const delegated=runtime.dispatch(owner,c.id,{requestId:randomUUID(),content:'继续子任务',deviceHost:b},{agentId:bot.id,kind:'assignment',deviceHost:a})
 await finished(delegated.id)
 const unknown=runtime.send(owner,c.id,{requestId:randomUUID(),content:'浏览器消息',deviceHost:null})
 await finished(unknown.id)
 expect([first.deviceHost,second.deviceHost,delegated.deviceHost,unknown.deviceHost]).toEqual([a,b,a,undefined])
 const prompts=requests.filter(r=>r.method==='prompt.submit').map(r=>r.params.text)
 expect(prompts[0]).toContain(a);expect(prompts[1]).toContain(b);expect(prompts[2]).toContain(a)
 expect(prompts[3]).toContain('历史消息的设备来源不适用于本轮')
 expect(store.require<any>(owner,'message',delegated.messageId).deviceHost).toBe(a)
})

it.each(['none','server','virtual'] as const)('copies between allowed hosts and preserves message-local aliases with default %s',async mode=>{
 runtime.executionSettings=new ExecutionSettings(store,nodes,{isUserActive:()=>true} as any)
 runtime.executionSettings.saveSelection({mode,revision:1})
 const bot=agent('传文件'),c=direct(bot.id),target=nodes.target(owner,'local'),originalRequest=target.session.request.bind(target.session)
 let binding:any,integrationError:unknown
 vi.spyOn(target.session,'request').mockImplementation(async(path,options)=>{
  if(path.startsWith('/api/plugins/yaoyao-bot-bridge/')){
   if(path.endsWith('/bind'))binding=options?.body
   return {status:200,headers:new Headers(),body:Buffer.from(JSON.stringify({ok:true,version:1,ready:true,native_tools:true,in_process:true,computer_runtime_version:2}))}
  }
  return originalRequest(path,options)
 })
 const desktop=new DesktopEnvironments(store,{pushAuthorizationVersion:()=>0} as any,{localNodeID:'fixture',requireSource:()=>{}} as any)
 runtime.desktopEnvironments=desktop
 const payload=Buffer.alloc(300_000,123),sha256=createHash('sha256').update(payload).digest('hex'),clientId=randomUUID(),commands:Array<{host:string;op:string}>=[]
 const info={platform:'darwin',screen:false,accessibility:false,approved:[],full:[createHash('sha256').update('fixture:'+owner).digest('hex')]}
 const machines=[{key:'server',host:{...info,id:randomUUID(),name:'server'},exchange:(body:unknown)=>desktop.exchange(body)},
  {key:'mac1',host:{...info,id:randomUUID(),name:'mac1'},exchange:(body:unknown)=>desktop.remoteExchange(clientId,body)}]
 const timers=machines.map(machine=>{let results:any[]=[];machine.exchange({host:machine.host,results});return setInterval(()=>{
  const response=machine.exchange({host:machine.host,results})
  results=response.commands.map((command:any)=>{commands.push({host:machine.key,op:command.operation==='shell'?'shell':command.action.op});return {id:command.id,value:command.operation==='shell'?{stdout:machine.key,stderr:'',exitCode:0}:command.action.op==='read'
   ? {size:payload.length,data:payload.toString('base64')}
   : {path:command.action.path,size:Buffer.from(command.action.data,'base64').length,sha256:createHash('sha256').update(Buffer.from(command.action.data,'base64')).digest('hex')}}})
 },5)})
 const publish=vi.spyOn(runtime,'publishArtifact')
 const http=async(path:string,body:unknown)=>{const response=await fetch(binding.bridge_url+path,{method:'POST',headers:{'Content-Type':'application/json',Authorization:`Bearer ${binding.token}`},body:JSON.stringify(body)});expect(response.status).toBe(200);return response.json()}
 reply=(socket,p)=>{void(async()=>{
  try{
   expect(p.text).toContain('电脑间传文件用 desktop_file_copy')
   const catalog=await http('/tools/list',{}),tool=catalog.tools.find((tool:any)=>tool.name==='desktop_file_copy')
   expect(tool.inputSchema.required).toEqual(['sourceHost','sourcePath','targetHost','targetPath'])
   const call={toolId:tool.id,callId:randomUUID(),arguments:{sourceHost:'mac1',sourcePath:'Desktop/a.txt',targetHost:'server',targetPath:'Desktop/a.txt'}}
   const result=await http('/tools/call',call)
   expect(result.isError).not.toBe(true)
   expect(result.structuredContent).toMatchObject({copied:true,source:{host:clientId},target:{host:'local'},size:payload.length,sha256})
   expect(JSON.stringify(result).length).toBeLessThan(1500)
   expect(await http('/tools/call',call)).toEqual(result)
   const shell=catalog.tools.find((tool:any)=>tool.name==='desktop_shell')
   for(const args of [{command:'pwd'},{host:'local',command:'pwd'},{host:clientId,command:'pwd'}]){
    const result=await http('/tools/call',{toolId:shell.id,callId:randomUUID(),arguments:args})
    expect(result.isError).not.toBe(true)
    expect(result.structuredContent.stdout).toBe('mac1')
   }
   saveHostTools(home,{scriptMachine:false})
   const denied=await http('/tools/call',{toolId:shell.id,callId:randomUUID(),arguments:{host:clientId,command:'pwd'}})
   expect(denied.isError).toBe(true)

  }catch(error){integrationError=error}
  socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:p.session_id,payload:{text:'文件复制完成',status:'complete'}}}))
 })()}
 try{
  await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'帮我把 mac1 桌面的 a.txt 放到服务器桌面',deviceHost:clientId}).id)
  if(integrationError)throw integrationError
  expect(commands).toEqual([{host:'mac1',op:'read'},{host:'server',op:'receive'},...Array.from({length:3},()=>({host:'mac1',op:'shell'}))])
  expect(publish).not.toHaveBeenCalled();expect(store.list(owner,'file')).toEqual([])
 }finally{timers.forEach(clearInterval);desktop.close()}
})

function modelBridge() {
  const target = nodes.target(owner, 'local'), original = target.session.request.bind(target.session)
  target.session.request = async (path, options) => {
    if (path.endsWith('/model-settings/resolve')) {
      const settings = (options?.body as any)?.settings ?? {}
      return { status:200, headers:new Headers(), body:Buffer.from(JSON.stringify({version:1,confirmationMessage:null,effective:{provider:settings.provider??'base',model:settings.model??'base-model',reasoningEffort:settings.reasoningEffort??'medium',fastMode:settings.fastMode??'normal'}})) }
    }
    return original(path, options)
  }
}
it('reuses only an acknowledged model on a warm unchanged session and still reapplies reasoning and speed', async () => {
  modelBridge(); resumeExistingRuntime = true
  const a = agent('连续追问'), c = direct(a.id)
  store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'auto' } })
  const record = vi.fn(); runtime.inspector = { record } as any
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
  expect(requests.filter(r => r.method === 'config.set').map(r => r.params.key)).toEqual(['model', 'reasoning', 'fast'])
  const before = requests.length
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '连续追问' }).id)
  expect(requests.slice(before).filter(r => r.method === 'config.set').map(r => r.params.key)).toEqual(['reasoning', 'fast'])
  expect(requests.slice(before).filter(r => r.method === 'prompt.submit')).toHaveLength(1)
  expect(record.mock.calls.some(([, , e]) => e.method === 'bot.model-settings' && e.data.reusedModel === true && e.data.resolveMs >= 0 && e.data.applyMs >= 0)).toBe(true)
})
it.each(['profile-change', 'cold-resume', 'external-switch', 'missing-info', 'unknown-revision'])(
  'reconfirms the model when reuse is uncertain: %s', async change => {
    modelBridge(); resumeExistingRuntime = true
    const a = agent('模型复用边界'), c = direct(a.id)
    store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'medium', fastMode: 'normal' } })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
    if (change === 'profile-change') profileMtime = 2
    if (change === 'cold-resume') resumeExistingRuntime = false
    if (change === 'external-switch') for (const info of modelInfo.values()) info.model = 'external-model'
    if (change === 'missing-info') modelInfo.clear()
    if (change === 'unknown-revision') profileMtime = undefined
    const before = requests.length
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '核对后续轮次' }).id)
    expect(requests.slice(before).filter(r => r.method === 'config.set').map(r => r.params.key)).toEqual(['model', 'reasoning', 'fast'])
  },
)
it('discards the confirmed model after a failed setting acknowledgement', async () => {
  modelBridge(); resumeExistingRuntime = true
  const a = agent('配置失败后重试'), c = direct(a.id)
  store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'fast' } })
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
  rejectedModelConfig = { value: 'wrong' }
  const failed = runtime.send(owner, c.id, { requestId: randomUUID(), content: '失败轮次' })
  await vi.waitFor(() => expect(store.require<WorkspaceRun>(owner, 'run', failed.id).status).toBe('failed'))
  expect(store.list<any>(owner, 'binding')[0].confirmedModel).toBeUndefined()
  expect(requests.filter(r => r.method === 'prompt.submit')).toHaveLength(1)
  rejectedModelConfig = undefined
  const before = requests.length
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '重试' }).id)
  expect(requests.slice(before).filter(r => r.method === 'config.set').map(r => r.params.key)).toEqual(['model', 'reasoning', 'fast'])
})
it('uses live session info after tool binding rather than a stale resume snapshot', async () => {
  modelBridge(); resumeExistingRuntime = true
  const a = agent('绑定后状态'), c = direct(a.id)
  store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'fast' } })
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
  observeGatewayRequest = frame => {
    if (frame.method !== 'config.get') return
    for (const socket of server.clients) socket.send(JSON.stringify({ method: 'event', params: {
      type: 'session.info', session_id: frame.params.session_id, payload: { model: 'rebuilt-model', provider: 'openai' },
    } }))
  }
  const before = requests.length
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '重建后继续' }).id)
  expect(requests.slice(before).filter(r => r.method === 'config.set').map(r => r.params.key)).toEqual(['model', 'reasoning', 'fast'])
})
it('prepares the session while read-only model resolution is pending and submits only after confirmation', async () => {
  modelBridge()
  const target = nodes.target(owner, 'local'), original = target.session.request.bind(target.session)
  let release!: () => void
  const pending = new Promise<void>(resolve => { release = resolve })
  target.session.request = async (path, options) => {
    if (path.endsWith('/model-settings/resolve')) await pending
    return original(path, options)
  }
  const a = agent('并行准备'), c = direct(a.id)
  store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'fast' } })
  const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '开始' })
  await vi.waitFor(() => expect(requests.some(r => r.method === 'session.create')).toBe(true))
  expect(requests.some(r => r.method === 'prompt.submit' || r.method === 'config.set')).toBe(false)
  release(); await finished(run.id)
  expect(requests.filter(r => r.method === 'config.set').map(r => r.params.key)).toEqual(['model', 'reasoning', 'fast'])
})
it('cannot restore cached settings or submit after cancellation during model resolution', async () => {
  modelBridge(); resumeExistingRuntime = true
  const a = agent('准备阶段取消'), c = direct(a.id)
  store.updateAgent(owner, a.id, { modelSettings: { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'fast' } })
  await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '第一轮' }).id)
  const target = nodes.target(owner, 'local'), original = target.session.request.bind(target.session)
  let release!: () => void
  const pending = new Promise<void>(resolve => { release = resolve })
  target.session.request = async (path, options) => {
    if (path.endsWith('/model-settings/resolve')) await pending
    return original(path, options)
  }
  const before = requests.length
  const run = runtime.send(owner, c.id, { requestId: randomUUID(), content: '取消这一轮' })
  await vi.waitFor(() => expect(requests.slice(before).some(r => r.method === 'session.resume')).toBe(true))
  await runtime.stop(owner, run.id)
  release()
  await vi.waitFor(() => expect(store.require<WorkspaceRun>(owner, 'run', run.id).status).toBe('interrupted'))
  await new Promise(resolve => setTimeout(resolve, 20))
  expect(requests.slice(before).some(r => r.method === 'config.set' || r.method === 'prompt.submit')).toBe(false)
  expect(store.list<any>(owner, 'binding')[0]?.confirmedModel).toBeUndefined()
})
it.each([{value:'wrong'}, {confirm_required:true,confirm_message:'切换长上下文将增加费用'}])('stops before submission on a failed native model acknowledgement and keeps its confirmation in the profile: %j',async rejection=>{
  modelBridge(); rejectedModelConfig=rejection
  const a=agent('配置失败'),c=direct(a.id)
  store.updateAgent(owner,a.id,{modelSettings:{provider:'openai',model:'model-a',reasoningEffort:'high',fastMode:'fast'}})
  const record=vi.fn(); runtime.inspector={record} as any
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'不能用旧模型执行'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('failed'))
  expect(requests.some(r=>r.method==='prompt.submit')).toBe(false)
  expect(record.mock.calls.some(([, , e])=>e.method==='bot.model-settings'&&e.data.applied===false&&e.data.revision===2)).toBe(true)
  if('confirm_required' in rejection) expect(store.require<any>(owner,'agent',a.id).modelSettingsPendingConfirmation).toEqual({target:'["openai","model-a"]',message:rejection.confirm_message})
})
it('updates the same Bot across an existing direct chat and two groups without changing its Profile peers', async () => {
  modelBridge()
  const a=agent('模型甲'), b=agent('模型乙'), c=direct(a.id)
  const groups=[1,2].map(n=>store.createGroup(owner,{name:`模型群${n}`,memberIds:[a.id,b.id],administratorId:a.id}))
  const settings={provider:'openai',model:'model-a',reasoningEffort:'high',fastMode:'fast'}
  store.updateAgent(owner,a.id,{modelSettings:settings})
  await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'建立已有会话'}).id)
  const before=requests.length
  store.updateAgent(owner,a.id,{modelSettings:{...settings,model:'model-b',reasoningEffort:'none',fastMode:'cold'}})
  for(const chat of [c,...groups]) await finished(runtime.send(owner,chat.id,{requestId:randomUUID(),content:'@模型甲 继续'}).id)
  const updates=requests.slice(before).filter(r=>r.method==='config.set')
  expect(updates.map(r=>[r.params.key,r.params.value])).toEqual(Array.from({length:3},()=>[
    ['model','model-b --provider openai --session'],['reasoning','none'],['fast','cold'],
  ]).flat())
  expect(requests.slice(before).some(r=>r.method==='session.resume')).toBe(true)
  expect(store.require<any>(owner,'agent',b.id).modelSettings).toBeUndefined()
  store.updateAgent(owner,a.id,{modelSettings:null})
  const reset=requests.length
  await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'恢复继承'}).id)
  expect(requests.slice(reset).filter(r=>r.method==='config.set').map(r=>r.params.value)).toEqual(['base-model --provider base --session','medium','normal'])
})
it('keeps a running reply on its snapshot and applies new settings to the queued reply', async () => {
  modelBridge()
  const a=agent('切换成员'), c=direct(a.id)
  store.updateAgent(owner,a.id,{modelSettings:{provider:'openai',model:'model-a',reasoningEffort:'low',fastMode:'normal'}})
  let release:()=>void=()=>{}
  reply=(socket,p)=>{release=()=>socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:p.session_id,payload:{text:'完成',status:'complete'}}}))}
  const first=runtime.send(owner,c.id,{requestId:randomUUID(),content:'第一轮'})
  await vi.waitFor(()=>expect(requests.some(r=>r.method==='prompt.submit')).toBe(true))
  const before=requests.length
  store.updateAgent(owner,a.id,{modelSettings:{provider:'openai',model:'model-b',reasoningEffort:'ultra',fastMode:'auto'}})
  const queued=runtime.send(owner,c.id,{requestId:randomUUID(),content:'排队的新轮'})
  expect(requests.length).toBe(before)
  reply=(socket,p)=>socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:p.session_id,payload:{text:'完成',status:'complete'}}}))
  release(); await finished(first.id); await finished(queued.id)
  expect(requests.slice(before).filter(r=>r.method==='config.set').map(r=>r.params.value)).toEqual(['model-b --provider openai --session','ultra','auto'])
  expect(requests.filter(r=>r.method==='session.interrupt')).toHaveLength(0)
})
it('does not send a prompt when the model bridge cannot resolve the saved setting', async () => {
  const a=agent('失败成员'),c=direct(a.id)
  store.updateAgent(owner,a.id,{modelSettings:{provider:'openai',model:'gone',reasoningEffort:'high',fastMode:'fast'}})
  const run=runtime.send(owner,c.id,{requestId:randomUUID(),content:'不能回退'})
  await vi.waitFor(()=>expect(store.require<WorkspaceRun>(owner,'run',run.id).status).toBe('failed'))
  expect(requests.filter(r=>r.method==='prompt.submit')).toHaveLength(0)
})


it('applies Bot settings to the live agent after a cold resume restores its persisted runtime during tool binding', async () => {
  modelBridge()
  const a = agent('冷启动模型切换'), c = direct(a.id)
  const target = nodes.target(owner, 'local'), original = target.session.request.bind(target.session)
  const models = new Map<string, Record<string, string>>()
  const submitted: Array<Record<string, string>> = []
  target.session.request = async (path, options) => {
    if (path.endsWith('/capabilities')) return { status: 200, headers: new Headers(), body: Buffer.from(JSON.stringify({ version: 1, ready: true, in_process: true, native_tools: true })) }
    if (path.endsWith('/bind')) {
      // Hermes acknowledges config.set before a deferred resume builds the agent.
      // That build restores the stored runtime, replacing any premature settings.
      const sid = (options?.body as any).session_id
      models.set(sid, { model: 'persisted-model', reasoning: 'medium', fast: 'normal' })
      return { status: 200, headers: new Headers(), body: Buffer.from(JSON.stringify({ ok: true, native_tools: true })) }
    }
    if (path.endsWith('/unbind')) return { status: 200, headers: new Headers(), body: Buffer.from('{"ok":true}') }
    return original(path, options)
  }
  observeGatewayRequest = frame => {
    if (frame.method !== 'config.set') return
    const sid = frame.params.session_id, current = models.get(sid) ?? {}
    current[frame.params.key] = frame.params.value
    models.set(sid, current)
  }
  reply = (socket, params) => {
    submitted.push({ ...models.get(params.session_id) })
    socket.send(JSON.stringify({ method: 'event', params: { type: 'message.complete', session_id: params.session_id, payload: { text: '完成', status: 'complete' } } }))
  }
  configuredCwds.set('default', '/profile/working-directory')
  for (const settings of [
    { provider: 'openai', model: 'model-a', reasoningEffort: 'high', fastMode: 'fast' },
    { provider: 'custom:provider', model: 'model-b', reasoningEffort: 'none', fastMode: 'cold' },
    null,
  ]) {
    store.updateAgent(owner, a.id, { modelSettings: settings })
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '切换模型并保留上下文' }).id)
  }
  expect(submitted).toEqual([
    { model: 'model-a --provider openai --session', reasoning: 'high', fast: 'fast' },
    { model: 'model-b --provider custom:provider --session', reasoning: 'none', fast: 'cold' },
    { model: 'base-model --provider base --session', reasoning: 'medium', fast: 'normal' },
  ])
  expect(requests.filter(r => r.method === 'session.resume')).toHaveLength(2)
})

it.each([
  { hostname:'127.0.0.1', reported:true },
  { hostname:'localhost', reported:true },
  { hostname:'127.0.0.1', reported:false },
  { hostname:'localhost', reported:false },
])('keeps Hermes connected across client startup and shutdown at $hostname (metadata=$reported)', async ({hostname,reported}) => {
  const bot=agent('独立服务器'),c=direct(bot.id),target=nodes.target(owner,'local')
  target.url=new URL(`http://${hostname}:${target.url.port}`)
  const original=target.session.request.bind(target.session)
  const metadata={version:1,profile:'default',platform:'linux',osRelease:'6.8',arch:'x86_64',nativeTools:{terminal:['terminal'],files:['read_file','write_file'],desktop:['computer_use'],browser:['browser_navigate']}}
  vi.spyOn(target.session,'request').mockImplementation(async(path,options)=>path.startsWith('/api/plugins/yaoyao-bot-bridge/')
    ? {status:200,headers:new Headers(),body:Buffer.from(JSON.stringify({ok:true,version:1,ready:true,native_tools:true,in_process:true,...(reported?{runtime_environment:metadata}:{})}))}
    : original(path,options))
  configuredCwds.set('default','/hermes/project')
  saveHostTools(home,{vm:false,cloud:false})
  const desktop=new DesktopEnvironments(store,{pushAuthorizationVersion:()=>0} as any,{localNodeID:'fixture',requireSource:()=>{}} as any)
  runtime.desktopEnvironments=desktop
  const record=vi.fn();runtime.inspector={record} as any
  const clientId=randomUUID()
  try {
    await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'检查服务端目录',deviceHost:null}).id)
    desktop.remoteExchange(clientId,{host:{id:randomUUID(),name:'服务器',platform:'darwin',screen:false,accessibility:false,approved:[]},results:[]})
    await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'检查服务端目录',deviceHost:clientId}).id)
    desktop.dropHost(clientId)
    await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'检查服务端目录',deviceHost:clientId}).id)
    const snapshots=record.mock.calls.map(([, ,entry])=>entry).filter(entry=>entry.method==='bot.environment').map(entry=>entry.data.snapshot)
    expect(snapshots).toHaveLength(3)
    expect(snapshots.every(snapshot=>snapshot.runtime.connected&&snapshot.cwd==='/hermes/project')).toBe(true)
    expect(snapshots.map(snapshot=>snapshot.runtime.metadata)).toEqual(reported?[metadata,metadata,metadata]:[undefined,undefined,undefined])
    expect(snapshots[0].desktop.hosts).toEqual([])
    expect(snapshots[1].desktop.hosts[0]).toMatchObject({id:clientId,kind:'computer',platform:'darwin',online:true})
    expect(snapshots[2].desktop.hosts[0]).toMatchObject({id:clientId,kind:'computer',online:false})
    const prompts=requests.filter(request=>request.method==='prompt.submit').map(request=>String(request.params.text))
    expect(prompts).toHaveLength(3)
    for(const prompt of prompts){
      expect(prompt).toContain('服务端 Hermes 已连接')
      expect(prompt).toContain('操作服务端运行环境时优先使用')
      expect(prompt).toContain('Hermes 本轮工作目录（已确认）："/hermes/project"')
      expect(prompt).toContain(reported?'"desktop":["computer_use"]':'原生能力与系统信息尚未由工具桥上报')
    }
    expect(prompts[1]).toContain(`host="${clientId}"`)
    expect(prompts[2]).toContain('当前离线或未连接')
  } finally {desktop.close()}
})

it('submits capability-based Bot context with current origins, confirmed cwd and no keyword-selected environment', async () => {
  const bot = agent('环境助手'), c = direct(bot.id), target = nodes.target(owner, 'local')
  const originalRequest = target.session.request.bind(target.session)
  vi.spyOn(target.session, 'request').mockImplementation(async (path, options) => path.startsWith('/api/plugins/yaoyao-bot-bridge/')
    ? { status: 200, headers: new Headers(), body: Buffer.from(JSON.stringify({ ok: true, version: 1, ready: true, native_tools: true, in_process: true })) }
    : originalRequest(path, options))
  const record=vi.fn();runtime.inspector={record} as any
  let binding:any,integrationError:unknown
  const catalogs:string[][]=[]
  const bridgeRequest=target.session.request.bind(target.session)
  target.session.request=async(path,options)=>{if(path.endsWith('/bind'))binding=options?.body;return bridgeRequest(path,options)}
  const originalReply=reply
  reply=(socket,params)=>{void(async()=>{try{const response=await fetch(binding.bridge_url+'/tools/list',{method:'POST',headers:{Authorization:`Bearer ${binding.token}`,'Content-Type':'application/json'},body:'{}'});const result=await response.json() as any;catalogs.push(result.tools.filter((tool:any)=>/^(desktop_|computer_|cloud_computer_)/.test(tool.name)).map((tool:any)=>tool.name).sort())}catch(error){integrationError=error}originalReply(socket,params)})()}
  configuredCwds.set('default', '/fixture/server-workspace')
  saveHostTools(home, { vm: false, cloud: false })
  const desktop = new DesktopEnvironments(store, { pushAuthorizationVersion: () => 0 } as any, { localNodeID: 'fixture', requireSource: () => {} } as any)
  runtime.desktopEnvironments = desktop
  const clientId = randomUUID(), grant = createHash('sha256').update('fixture:' + owner).digest('hex')
  desktop.exchange({ host: { id: randomUUID(), name: '服务器', platform: 'darwin', screen: true, accessibility: true, approved: [grant] }, results: [] })
  desktop.remoteExchange(clientId, { host: { id: randomUUID(), name: '工作 Mac', platform: 'darwin', screen: false, accessibility: false, approved: [], full: [grant], environment: {version:1,osRelease:'25.0.0',arch:'arm64',shell:'/bin/zsh',homeDirectory:'/Users/work',defaultCwd:'/Users/work',fileRoots:['/Users/work'],shellScope:'user',timezone:'Asia/Shanghai'} }, results: [] })
  try {
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '读取本机目录，再解释 Grok 模型与虚拟机的区别', deviceHost: clientId }).id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '继续', deviceHost: clientId }).id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '读取本机目录', deviceHost: 'local' }).id)
    await finished(runtime.send(owner, c.id, { requestId: randomUUID(), content: '读取本机目录', deviceHost: null }).id)
    const prompts = requests.filter(r => r.method === 'prompt.submit').map(r => String(r.params.text))
    if(integrationError)throw integrationError
    expect(prompts).toHaveLength(4)
    const inspections=record.mock.calls.map(([, , entry])=>entry).filter(entry=>entry.method==='bot.environment')
    expect(inspections).toHaveLength(4)
    expect(inspections.map(entry=>entry.data.computerToolIds.slice().sort())).toEqual(catalogs)
    expect(inspections.map(entry=>entry.data.snapshot.desktop.sourceHost)).toEqual([clientId,clientId,'local',undefined])
    expect(inspections.every(entry=>entry.data.snapshot.cwd==='/fixture/server-workspace')).toBe(true)
    expect(inspections[0].data.snapshot.desktop.hosts.find((host:any)=>host.id===clientId).metadata.fileRoots).toEqual(['/Users/work'])
    expect(JSON.stringify(inspections)).not.toContain(grant)
    const environments = prompts.map(prompt => prompt.split('【本轮环境与设备】')[1]!.split('【Bot 记忆与相关事实】')[0])
    expect(environments[0]).toBe(environments[1])
    expect(environments[0]).toContain('本轮用户消息来自电脑「工作 Mac」')
    expect(environments[2]).toContain('本轮用户消息来自服务器「服务器」')
    expect(environments[3]).toContain('「本机」无法确定，必须指定目标电脑')
    expect(environments[0]).toContain('Hermes 本轮工作目录（已确认）："/fixture/server-workspace"')
    for (const prompt of prompts) {
      expect(prompt).not.toContain('当前环境是')
      expect(prompt).not.toContain('cloud_computer_*')
      expect(prompt).not.toContain('computer_shell')
      expect(prompt.match(/本轮电脑清单/g)).toHaveLength(1)
      expect(prompt).toContain('Shell="/bin/zsh"')
      expect(prompt).toContain('文件工具允许根目录=["/Users/work"]')
      expect(prompt).toContain(`host="${clientId}"`)
      expect(prompt).toContain('屏幕控制=未授权；文件与命令=就绪')
      expect(prompt).toContain('屏幕控制=就绪；文件与命令=未授权')
    }
  } finally { desktop.close() }
})


it.each(['none','server','virtual'] as const)('dispatches browser and VM tools with default %s and migrates exclusive sessions once',async mode=>{
 const bot=agent('多环境回归'),c=direct(bot.id),target=nodes.target(owner,'local'),original=target.session.request.bind(target.session)
 runtime.executionSettings=new ExecutionSettings(store,nodes,{isUserActive:()=>true} as any)
 runtime.executionSettings.saveSelection({mode,revision:1})
 saveHostTools(home,{managedBrowser:true,vm:true,cloud:false,scriptMachine:false,serverComputer:false})
 let binding:any,integrationError:unknown
 vi.spyOn(target.session,'request').mockImplementation(async(path,options)=>{
  if(path.startsWith('/api/plugins/yaoyao-bot-bridge/')){
   if(path.endsWith('/bind'))binding=options?.body
   return {status:200,headers:new Headers(),body:Buffer.from(JSON.stringify({ok:true,version:1,ready:true,native_tools:true,in_process:true,computer_runtime_version:2}))}
  }
  return original(path,options)
 })
 const vmTarget=vi.fn(()=>target);nodes.targetForAgent=vmTarget
 const browserCall=vi.fn(async()=>({open:true,tabs:[{url:'https://example.com/'}]})),browserOpen=vi.fn(()=>({call:browserCall,close:async()=>{}}))
 runtime.managedBrowsers={available:()=>true,openTurn:browserOpen} as any
 const pluginOpen=vi.fn(async()=>({services:()=>[{name:'测试 stdio',transport:'stdio',toolCount:1}],warnings:()=>[],catalog:()=>[],dispose:async()=>{}}))
 runtime.plugins={selected:()=>true,open:pluginOpen} as any
 const http=async(path:string,body:unknown)=>{
  const response=await fetch(binding.bridge_url+path,{method:'POST',headers:{'Content-Type':'application/json',Authorization:`Bearer ${binding.token}`},body:JSON.stringify(body)})
  expect(response.status).toBe(200);return response.json()
 }
 reply=(socket,p)=>{void(async()=>{
  try{
   expect(binding.computer_policy).toEqual({mode:'profile',hostAccess:true})
   expect(p.text).toContain('默认使用 managed_browser_open')
   expect(p.text).toContain('不限制其他已开放且获授权的环境')
   expect(p.text).toContain('测试 stdio')
   const catalog=await http('/tools/list',{})
   const call=async(name:string,args:unknown)=>{
    const tool=catalog.tools.find((tool:any)=>tool.name===name);expect(tool).toBeDefined()
    return http('/tools/call',{toolId:tool.id,callId:randomUUID(),arguments:args})
   }
   expect((await call('managed_browser_open',{url:'https://example.com/'})).isError).not.toBe(true)
   expect((await call('computer_shell',{command:'pwd'})).isError).not.toBe(true)
   saveHostTools(home,{vm:false})
   expect((await call('computer_shell',{command:'pwd'})).isError).toBe(true)
   saveHostTools(home,{vm:true})
  }catch(error){integrationError=error}
  socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:p.session_id,payload:{text:'回归完成',status:'complete'}}}))
 })()}
 let statusAtVmCompletion:string|undefined
 observeGatewayRequest=frame=>{if(frame.method==='computer.complete')statusAtVmCompletion=store.list<any>(owner,'turn').find(work=>work.agentId===bot.id)?.status}
 await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'打开网页，然后在虚拟机执行 pwd'}).id)
 if(integrationError)throw integrationError
 expect(browserOpen).toHaveBeenCalledOnce();expect(browserCall).toHaveBeenCalledWith('managed_browser_open',{url:'https://example.com/'},expect.any(String))
 expect(vmTarget).toHaveBeenCalledWith(owner,expect.objectContaining({id:bot.id,execution:'computer'}))
 expect(requests.filter(call=>call.method==='computer.invoke')).toHaveLength(1)
 expect(requests.find(call=>call.method==='computer.invoke')?.params).toMatchObject({name:'computer_shell',arguments:{command:'pwd'}})
 expect(requests.filter(call=>call.method==='computer.complete')).toHaveLength(1)
 expect(statusAtVmCompletion).toBe('running')
 const saved=store.list<any>(owner,'binding')[0]
 store.put(owner,'binding',saved.id,{...saved,executionPolicyVersion:undefined})
 reply=(socket,p)=>socket.send(JSON.stringify({method:'event',params:{type:'message.complete',session_id:p.session_id,payload:{text:'完成',status:'complete'}}}))
 const before=requests.length
 await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'继续'}).id)
 expect(requests.slice(before).filter(call=>call.method==='session.create')).toHaveLength(1)
 expect(store.list<any>(owner,'binding')[0].executionPolicyVersion).toBe(2)
 const afterReset=requests.length
 await finished(runtime.send(owner,c.id,{requestId:randomUUID(),content:'再次继续'}).id)
 expect(requests.slice(afterReset).some(call=>call.method==='session.create')).toBe(false)
 expect(requests.slice(afterReset).some(call=>call.method==='session.resume')).toBe(true)
})