fix: 强制隔离 Kafka 调试配置

tools/hwlab-cli/kafka-regenerate.test.ts

@@ -154,6 +154,28 @@ test("reconstruction identity fabrication and product output topic fail closed",
   ], { cwd, env: {}, now: () => "2026-07-10T12:00:00.000Z" });
   assert.equal(productResult.exitCode, 1);
   assert.equal(productResult.payload.error.code, "product_topic_forbidden");
+
+  const productGroupResult = await runKafkaCli([
+    "regenerate", "hwlab", "--from", "jsonl", "--session-id", SESSION_ID,
+    "--jsonl-file", inputFile, "--group-prefix", "hwlab-v03-workbench-live-sse", "--no-publish"
+  ], { cwd, env: {}, now: () => "2026-07-10T12:00:00.000Z" });
+  assert.equal(productGroupResult.exitCode, 1);
+  assert.equal(productGroupResult.payload.error.code, "debug_group_required");
+});
+
+test("Kafka mode requires a CLI or YAML-owned isolated group prefix", async () => {
+  let readCalled = false;
+  const result = await runKafkaCli([
+    "regenerate", "hwlab", "--from", "kafka", "--session-id", SESSION_ID, "--no-publish"
+  ], {
+    env: {},
+    now: () => "2026-07-10T12:00:00.000Z",
+    async readKafka() { readCalled = true; return { events: [] }; }
+  });
+
+  assert.equal(result.exitCode, 1);
+  assert.equal(result.payload.error.code, "kafka_debug_group_missing");
+  assert.equal(readCalled, false);
 });
 
 test("Kafka query exposes the isolated generated group and original value hash", async () => {