checkpoint: preserve zero-core agent handoff

product-source/hololake-native-desktop/scripts/human-authorization.test.mjs

@@ -15,6 +15,7 @@ test('human authorization is a durable numbered state machine rather than a UI-o
   assert.equal(contract.ticket.requester_session_bound, true)
   assert.equal(contract.invariants.proposal_is_not_authorization, true)
   assert.equal(contract.invariants.approval_is_not_execution, true)
+  assert.ok(contract.supported_actions.includes('TEST_COMPILED_HLDP_TOOL'))
 })
 
 test('the human client and external execution carrier meet through distinct exact numbered routes', () => {
@@ -25,3 +26,15 @@ test('the human client and external execution carrier meet through distinct exac
   const decisions = webview.operations.filter((item) => contract.routes.human_client.includes(item.operation_number))
   assert.ok(decisions.every((item) => item.admission === 'VERIFIED_HUMAN_ROUTE'))
 })
+
+test('approving an HLDP tool test returns the single-use ticket to the original forge flow', () => {
+  const center = read('src/modules/human-authorization-center.tsx')
+  const forge = read('src/modules/knowledge-agent/ToolForgePanel.tsx')
+
+  assert.match(center, /request\.action === 'TEST_COMPILED_HLDP_TOOL'/)
+  assert.match(center, /numberedInvoke<\{ testReceiptHash: string \}>\('test_hldp_tool'/)
+  assert.match(center, /ticketId: decided\.ticketId/)
+  assert.match(center, /同意并运行一次性测试/)
+  assert.doesNotMatch(forge, /placeholder="在授权中心批准后取得的 ticketId"/)
+  assert.match(forge, /系统不会要求你复制机器票据/)
+})