Merge pull request #2589 from pikasTech/fix/workbench-live-admission-diagnostic

fix: 暴露 live Kafka admission 权威

internal/cloud/server-agent-chat.test.ts

@@ -2036,6 +2036,7 @@ test("cloud api AgentRun adapter admits direct live Kafka turns without outbox p
 
     const liveAdmission = await waitForTraceEvent(traceStore, traceId, (event) => event.label === "turn:admitted-live-kafka");
     assert.equal(liveAdmission.waitingFor, "hwlab-live-kafka-sse");
+    assert.match(liveAdmission.message, /without transactional outbox promotion/u);
     assert.equal(admissionPromotionCalls, 0);
 
     await waitForTraceEvent(traceStore, traceId, (event) => event.label === "agentrun:dispatch-intent:admitted");

internal/cloud/server-code-agent-admission-http.ts

@@ -1334,7 +1334,7 @@ async function promoteCodeAgentTurnAdmission({ payload = {}, params = {}, option
       type: "request",
       status: "admitted",
       label: "turn:admitted-live-kafka",
-      message: "Code Agent turn is live after AgentRun durable dispatch; lifecycle visibility is owned only by hwlab.event.v1.",
+      message: "Code Agent turn is live after AgentRun durable dispatch; lifecycle visibility is owned by hwlab.event.v1 without transactional outbox promotion.",
       sessionId: safeSessionId(params.sessionId) || null,
       runId: payload.agentRun?.runId ?? null,
       commandId: payload.agentRun?.commandId ?? null,