browser/openspec/changes/verify-current-platform-e2e-baseline/proof-report.md

# Current Platform E2E Baseline Proof Report

Date: 2026-07-08

## Classification Legend

- `real`: backed by executable platform/run/plugin evidence in this baseline.
- `partial`: some real backing exists, but a missing integration step prevents full end-to-end proof.
- `demo-only`: visible behavior is local fallback, seed data, or simulated behavior.
- `blocked`: verification could not run because of a reproducible environment, service, auth, or tooling blocker.

## Command Evidence

| Area | Command | Result | Evidence |
| --- | --- | --- | --- |
| Platform | `cd platform && go test ./... -count=1` | Passed | Packages `api`, `config`, `domain`, `dto`, `model`, `repo`, `service`, and `validator` passed. |
| Run | `cd run && go test ./... -count=1` | Passed | Packages `api`, `config`, `protocol`, `runtime`, and `spool` passed. |
| Plugins | `cd plugins && npm run typecheck` | Passed | TypeScript completed with no errors. |
| Plugins | `cd plugins && npm run test` | Passed | Vitest reported 1 test file / 10 tests passed. |
| Plugins | `cd plugins && npm run validate:manifest` | Passed after sandbox retry | Initial sandbox run failed with `listen EPERM` for the `tsx` IPC pipe; escalated run printed `validated examples/dev-game-plugin/manifest.json`. |
| Frontend | `cd platform_web && npm run typecheck` | Passed | TypeScript completed with no errors. |
| Frontend | `cd platform_web && npm test` | Passed | Vitest reported 11 test files / 47 tests passed. |
| Frontend | `cd platform_web && npm run build` | Passed | Vite built `dist/` assets successfully. |
| Browser server | `cd platform_web && VITE_ENABLE_LOCAL_AUTH_FALLBACK=true npm run dev -- --port 5173` | Passed after sandbox retry | Initial sandbox run failed with `listen EPERM 127.0.0.1:5173`; escalated run served `http://127.0.0.1:5174/`. |

## Browser Walkthrough Evidence

The browser walkthrough used `http://127.0.0.1:5174/` with `VITE_ENABLE_LOCAL_AUTH_FALLBACK=true`.

| Page / Flow | Browser Result | Classification | Follow-up |
| --- | --- | --- | --- |
| Auth entry | Login screen showed `本地回退可用` and `进入本地回退工作台`, proving the auth API was unavailable in this local browser stack. | `partial` | Use a local stack that starts platform API, run, and frontend together so browser auth can prove real sessions. |
| 服务器管理 | Local fallback entered `#/servers` as `Local Server Operator`; page showed `服务器列表加载失败` with `path /api/v1/jobs was not found`. | `partial` | Fix local browser stack/API routing and rerun server lifecycle walkthrough against real platform APIs. |
| 首页 | Navigating to `#/home` as fallback server admin redirected/rendered the server workspace rather than 首页. | `blocked` | Verify with a real platform-admin session. |
| 插件市场 | Navigating to `#/plugins` as fallback server admin redirected/rendered the server workspace. | `blocked` | Verify with a real platform-admin session and API-backed plugin marketplace data. |
| 用户管理 | Navigating to `#/users` as fallback server admin redirected/rendered the server workspace. | `blocked` | Verify with a real platform-admin session. |
| AI 提供商管理 | Navigating to `#/aiProviders` as fallback server admin redirected/rendered the server workspace. | `blocked` | Verify with a real platform-admin session and API-backed provider data. |
| Personal/account settings | `#/profile` rendered `个人设置`, `本地会话`, editable profile fields, palette/background controls, and logout. | `demo-only` | Rerun with a real API-authenticated user to prove profile/theme persistence. |
| Visible unsafe fields | Browser-visible fallback pages did not expose raw host paths, run credentials, direct sockets, raw AI keys, or plugin-owned transport details. | `partial` | Repeat on real server/plugin/detail pages after API-backed browser stack works. |

## Platform API and Storage Matrix

| Flow | Classification | Evidence | Follow-up |
| --- | --- | --- | --- |
| Auth/session API | `real` for handler/service tests; `partial` for browser | `platform` test suite passed; browser auth used local fallback because API was unavailable. | Add a repeatable local full-stack browser auth smoke path. |
| Users API | `real` for platform tests; `blocked` in browser | `platform` test suite passed; fallback role cannot open 用户管理. | Browser verify with real platform-admin session. |
| Server instances and lifecycle APIs | `real` for platform tests; `partial` in browser | `platform` tests include server lifecycle/API packages; browser server page failed `/api/v1/jobs`. | Fix local stack/proxy and rerun create/start/stop browser flow. |
| Plugin registry and marketplace APIs | `real` for platform/plugin tests; `blocked` in browser | `platform` and `plugins` tests passed; fallback role could not open 插件市场. | Browser verify marketplace with API-backed admin session. |
| AI provider APIs | `real` for platform tests; `blocked` in browser | `platform` validator/dto/API tests passed and protect raw keys; fallback role could not open AI 提供商管理. | Browser verify create/test/status with API-backed admin session. |
| Jobs API | `real` for platform/run tests; `partial` in browser | `platform` and `run` tests passed; browser surfaced `path /api/v1/jobs was not found`. | Start compatible platform API with frontend proxy for browser proof. |
| Logs API/storage | `partial` | `platform` and `run` tests passed for log-related packages, but this baseline did not prove restart-surviving log history in a live stack. | Add local durable log history smoke with restart/query evidence. |
| Artifacts API/storage | `real` for chunk/checksum/download tests; `partial` for live stack | `platform` and `run` tests passed; artifact download tests prove platform-mediated references and safe fields. No live browser artifact download was reachable. | Rerun browser server detail artifact flow with real API stack. |
| Config diff/write and file dispatch | `real` for platform tests; `partial` for browser | `platform` tests passed; browser could not reach server detail/config due server list API failure. | Rerun config diff/write dispatch in browser with real server instance. |
| Storage durability | `partial` | Package tests passed, but this baseline did not run a database restart or cross-process durability smoke. | Add explicit MySQL-backed create/restart/query proof in local debug workspace. |

## Run Channel Matrix

| Flow | Classification | Evidence | Follow-up |
| --- | --- | --- | --- |
| Control hello/heartbeat | `real` at package level | `cd run && go test ./... -count=1` passed `api` and `protocol` packages. | Include a live run-to-platform heartbeat in local debug workspace. |
| Job claim/ack/progress/result | `real` at package level | `run` package tests passed for API/runtime behavior. | Add integrated platform/run smoke with actual queued job. |
| Lifecycle install/start/stop executor | `real` at package level; `partial` end to end | `run` runtime tests passed; browser could not prove create/start/stop because platform API stack was unavailable. | Implement/verify real game plugin lifecycle proof. |
| Log spool/ingest acknowledgement | `real` at package level; `partial` for durable history | `run` spool tests passed; no live restart/query proof ran. | Add durable log history smoke. |
| Artifact chunk/resume/checksum | `real` at package level | `run` artifact API tests passed and platform artifact tests passed. | Add browser artifact download walkthrough against a real completed artifact. |
| Channel isolation | `partial` | Prior package-level tests passed, but this baseline did not run concurrent live artifact/file transfer alongside heartbeat/job/log traffic. | Implement hardening proof for log/artifact channel isolation. |

## Plugin Boundary Matrix

| Flow | Classification | Evidence | Follow-up |
| --- | --- | --- | --- |
| Manifest schema validation | `real` | `npm run validate:manifest` passed for `examples/dev-game-plugin/manifest.json` after sandbox retry. |
| Unsafe manifest rejection | `real` | `npm run test` passed; tests include rejection of direct run and raw AI key requests. |
| SDK bridge request envelopes | `real` | `npm run typecheck` and `npm run test` passed; tests cover typed bridge request envelopes without owning transport. |
| AI invocation request boundaries | `real` at SDK/manifest level | Tests and schema include `ai.invoke`; plugin docs state provider keys remain platform-mediated. |
| Real multi-instance game server operation | `partial` | Plugin manifests and SDK can request lifecycle/log/artifact/AI capabilities, but this baseline did not prove a real plugin creating/managing multiple live server instances through platform/run. | Generate/implement `implement-real-game-plugin-lifecycle-proof`. |

## Required First-Party Area Summary

| Area | Current Baseline Classification | Reason |
| --- | --- | --- |
| 首页 | `blocked` | Fallback server-admin browser session redirected/rendered server workspace; no platform-admin browser proof. |
| 服务器管理 | `partial` | API/package evidence exists, but browser flow failed `/api/v1/jobs` without a live platform API stack. |
| 插件市场 | `blocked` | Fallback browser session could not access platform-admin route; package/API tests pass. |
| 用户管理 | `blocked` | Fallback browser session could not access platform-admin route; package/API tests pass. |
| AI 提供商管理 | `blocked` | Fallback browser session could not access platform-admin route; package/API tests pass. |

## Follow-up OpenSpec Recommendations

1. `implement-real-game-plugin-lifecycle-proof`: prove one game management plugin can create and manage multiple server instances only through platform-mediated platform/run contracts.
2. `implement-local-debug-workspace`: provide one repeatable command path that starts platform, run, frontend, storage, and plugin fixtures for browser/API proof without relying on local fallback.
3. `implement-browser-acceptance-suite`: automate browser coverage for 首页、服务器管理、插件市场、用户管理、AI 提供商管理 and plugin/server detail operations.
4. `harden-log-artifact-channel-isolation`: run concurrent artifact/file operations while proving control heartbeat, job ack/result, and durable log ingest continue independently.
5. Reopen/finish `fix-env-profile-settings` task `3.5` in a working browser/dev-server session to close the older guard.

## Bottom Line

The codebase has substantial real backend/run/plugin capability evidence from tests, but the current local browser proof is not yet a real platform-wide E2E baseline. The visible browser experience fell back to a local server-admin session, server management failed on `/api/v1/jobs`, and platform-admin first-party areas could not be reached. The next architecture work should make the real full-stack proof path repeatable, then prove a game plugin lifecycle against it.