feat(research): streamline template details and enable bot versioning

backend/tests/test_mcp_templates.py

@@ -236,3 +236,32 @@ async def test_browser_can_issue_template_only_and_all_permissions(app, logged_i
         async with app.state.sessions() as db:
             principal = await authenticate(db, response.json()["token"])
             assert principal.scopes == scopes
+
+
+async def test_mcp_template_version_is_idempotent_and_preserves_history(app, completed_source):
+    principal, _ = await credentials(app, {"research:read", "research:write"})
+    body = template_request(completed_source["id"])
+    created = await invoke(app, principal, TOOL, body)
+    content = deepcopy(body["template"])
+    content["variables"]["field"] = {"kind": "field", "field_type": "MATRIX", "description": "数据准备中的矩阵字段"}
+    update = {**body, "template": content, "template_id": created["id"],
+              "expected_version": 1, "idempotency_key": "version-2"}
+    tool = "create_research_template_version"
+    first = await invoke(app, principal, tool, update)
+    replay = await invoke(app, principal, tool, update)
+    assert first == replay and first["version"] == 2
+    assert first["combination_count"] is None
+    assert first["provenance"]["parent_template"] == {"id": created["id"], "version": 1}
+    read = await invoke(app, principal, "get_research_template", {"template_id": created["id"], "version": 1})
+    assert read["content"]["variables"]["field"]["values"] == ["TEST_FIN_001", "TEST_FIN_002"]
+    listed = await invoke(app, principal, "search_research_templates", {"q": content["name"]})
+    assert listed["items"][0]["version"] == 2
+    stale = await app.state.mcp.invoke(principal, tool, update | {"idempotency_key": "stale-version"})
+    assert stale.is_error and stale.structured_content["error"]["code"] == "CONFLICT"
+    async with app.state.sessions() as db:
+        assert await db.scalar(select(func.count()).select_from(ResearchRevision)) == 2
+    denied, _ = await credentials(app, {"research:read"})
+    from fastapi import HTTPException
+    with pytest.raises(HTTPException) as forbidden:
+        await app.state.mcp.invoke(denied, tool, update)
+    assert forbidden.value.status_code == 403