@danceiny/gotry 0.0.1-rc.11 → 0.0.1-rc.13

package/dist/scripts/smoke.js

@@ -7,6 +7,7 @@ async function main() {
     const smokeRoot = mkdtempSync(join(tmpdir(), 'gotry-smoke-'));
     const registered = [];
     const variables = {};
+    const preExecutes = [];
     const ctx = {
         tools: {
             register: (t)=>registered.push(t)
@@ -15,13 +16,19 @@ async function main() {
             variable: (name, provider)=>{
                 variables[name] = provider;
             }
+        },
+        on: (event, fn)=>{
+            if (event === 'tools/pre-execute') preExecutes.push(fn);
+            return ()=>{};
         }
     };
-    apply(ctx, {
+    const cfg = {
         stateRoot: smokeRoot,
         timeoutMs: 30_000,
-        hbcliBin: 'hbcli-not-on-path'
-    });
+        hbcliBin: 'hbcli-not-on-path',
+        sessionAccess: 'ask'
+    };
+    apply(ctx, cfg);
     console.log(`registered tools: ${registered.map((t)=>t.name).join(', ')}`);
     const byName = (n)=>{
         const t = registered.find((t)=>t.name === n);
@@ -290,27 +297,118 @@ async function main() {
             }
         }, null);
         const faBlocked = fa.verdict === 'error' && /sentinel|block/i.test(fa.error ?? '');
+        const faErrTerminal = fa.ok === false && fa.verdict === 'error' && /^flyai-error$/.test(String(fa.via ?? '')) && /\[实时API:flyai@error@/.test(String(fa.evidence ?? ''));
         if (faBlocked) {
             console.log('  WARN - flyai Sentinel 限流中,降级合同通过(hit 断言跳过)');
+        } else if (faErrTerminal) {
+            console.log('  WARN - flyai 端点不可达(超时/降级),证据链合同通过(hit 断言跳过)');
         } else if (fa.ok !== true || fa.verdict !== 'hit' || (fa.options?.length ?? 0) < 1 || !/\[实时API:flyai@/.test(fa.evidence ?? '')) {
             throw new Error(`FAIL: flyai 工具应 live hit,实际:${JSON.stringify(fa).slice(0, 200)}`);
         }
         const prof = mkdtempSync(join(smokeRoot, 'sess-'));
-        const ss = await byName('gotry_session_search').execute({
+        const faPast = await byName('gotry_flyai_search').execute({
             query: {
-                from: '上海',
-                to: '丽江',
-                date: '2026-10-01'
+                kind: 'flight',
+                from: '深圳',
+                to: '普吉',
+                date: '2026-01-01'
+            }
+        }, null);
+        if (!(faPast.ok === false && /已是过去/.test(String(faPast.summary ?? '')))) {
+            throw new Error(`FAIL: flyai 过去日期应代码层预校验拒绝,实际:${JSON.stringify(faPast).slice(0, 200)}`);
+        }
+        const previousChromeUserDataDir = process.env.CHROME_USER_DATA_DIR;
+        process.env.CHROME_USER_DATA_DIR = prof;
+        let ss;
+        try {
+            ss = await byName('gotry_session_search').execute({
+                query: {
+                    from: '上海',
+                    to: '丽江',
+                    date: '2026-10-01'
+                }
+            }, null);
+        } finally{
+            if (previousChromeUserDataDir === undefined) delete process.env.CHROME_USER_DATA_DIR;
+            else process.env.CHROME_USER_DATA_DIR = previousChromeUserDataDir;
+            rmSync(prof, {
+                recursive: true,
+                force: true
+            });
+        }
+        const ssErrTerminal = ss.ok === false && /^session-[a-z0-9-]+-error$/.test(String(ss.via ?? '')) && !!ss.evidence;
+        if (!(ss.verdict === 'needs-login' || ss.verdict === 'needs-attach' || ss.verdict === 'hit' || ss.verdict === 'cooldown' || ss.verdict === 'challenged') && !ssErrTerminal) {
+            throw new Error(`FAIL: session 工具终态应属 {needs-attach,needs-login,hit,cooldown,challenged} 或带证据的 error 终态,实际:${JSON.stringify(ss).slice(0, 200)}`);
+        }
+        console.log(`session-face tools: flyai ${faBlocked ? 'sentinel-限流降级' : `live hit(${fa.options?.length ?? 0} 条)`}; session 终态=${ss.verdict ?? ss.via}(登录态存在前提合同)`);
+        const fh = await byName('gotry_flyai_search').execute({
+            query: {
+                kind: 'hotel',
+                to: '大理',
+                checkIn: '2026-10-01',
+                checkOut: '2026-10-03'
             }
         }, null);
-        rmSync(prof, {
-            recursive: true,
-            force: true
-        });
-        if (!(ss.verdict === 'needs-login' || ss.verdict === 'needs-attach' || ss.verdict === 'hit' || ss.verdict === 'cooldown' || ss.verdict === 'challenged')) {
-            throw new Error(`FAIL: session 工具终态应属 {needs-login,hit,cooldown,challenged},实际:${JSON.stringify(ss).slice(0, 200)}`);
+        const fhBlocked = fh.verdict === 'error' && /sentinel|block/i.test(fh.error ?? '');
+        const fhErrTerminal = fh.ok === false && fh.verdict === 'error' && /^flyai-error$/.test(String(fh.via ?? '')) && /\[实时API:flyai@error@/.test(String(fh.evidence ?? ''));
+        if (fhBlocked || fhErrTerminal) {
+            console.log('  WARN - flyai hotel 限流/端点降级,证据链合同通过(hit 断言跳过)');
+        } else if (fh.ok !== true || fh.verdict !== 'hit' || (fh.hotels?.length ?? 0) < 1 || !/\[实时API:flyai@/.test(fh.evidence ?? '')) {
+            throw new Error(`FAIL: flyai hotel 应 live hit,实际:${JSON.stringify(fh).slice(0, 220)}`);
+        }
+        const fhDest = await byName('gotry_flyai_search').execute({
+            query: {
+                kind: 'hotel'
+            }
+        }, null);
+        if (fhDest.ok !== false) throw new Error('FAIL: hotel 缺目的地应参数闸拒绝');
+        const fhPast = await byName('gotry_flyai_search').execute({
+            query: {
+                kind: 'hotel',
+                to: '大理',
+                checkIn: '2026-01-01',
+                checkOut: '2026-01-03'
+            }
+        }, null);
+        if (!(fhPast.ok === false && /不是未来合法区间/.test(String(fhPast.summary ?? '')))) {
+            throw new Error(`FAIL: 酒店过去入住日应代码层预校验拒绝,实际:${JSON.stringify(fhPast).slice(0, 200)}`);
+        }
+        console.log(`  hotel channel: ${fhBlocked ? 'sentinel-限流降级' : `${fh.hotels?.length ?? 0} 家`}; 参数闸/过去日闸生效`);
+    }
+    {
+        const gate = preExecutes.at(-1);
+        if (!gate) throw new Error('FAIL: tools/pre-execute 授权闸未注册');
+        const next = async ()=>({
+                kind: 'allow'
+            });
+        const ask = await gate({
+            name: 'gotry_session_search'
+        }, next);
+        if (ask.kind !== 'ask' || !/只读检索/.test(String(ask.reason ?? ''))) {
+            throw new Error(`FAIL: 会话工具无审批通道时应交 ask(运行时原生结算),实际:${JSON.stringify(ask)}`);
+        }
+        const pass = await gate({
+            name: 'gotry_anything_search'
+        }, next);
+        if (pass.kind !== 'allow') throw new Error(`FAIL: 非会话工具应原样放行,实际:${JSON.stringify(pass)}`);
+        cfg.sessionAccess = 'off';
+        const deny = await gate({
+            name: 'gotry_session_search'
+        }, next);
+        if (deny.kind !== 'deny' || !/sessionAccess=off/.test(String(deny.reason ?? ''))) {
+            throw new Error(`FAIL: sessionAccess=off 应 fail-closed deny,实际:${JSON.stringify(deny)}`);
+        }
+        cfg.sessionAccess = 'ask';
+        console.log('consent gate: session tool → approval-card ask(每会话一次/拒绝即会话内吊销); off → fail-closed deny; other tools pass through');
+    }
+    {
+        const lo = byName('gotry_session_login');
+        if (typeof lo.presentResult !== 'function') throw new Error('FAIL: gotry_session_login 缺 presentResult');
+        const desc = String(lo.description ?? '');
+        if (!/NEVER collects, stores, or transmits credentials/.test(desc)) {
+            throw new Error(`FAIL: 登录工具描述缺「不经手凭证」语义红线,实际 ${desc.slice(0, 120)}`);
         }
-        console.log(`session-face tools: flyai ${faBlocked ? 'sentinel-限流降级' : `live hit(${fa.options?.length ?? 0} 条)`}; session 终态=${ss.verdict}(登录态存在前提合同)`);
+        console.log('login tool: registered; 登录=外部网站+用户自己的浏览器,gotry 只读票据名(0 值过手)语义钉死');
     }
     rmSync(smokeRoot, {
         recursive: true,

package/dist/scripts/weather-tests.js

@@ -9,6 +9,13 @@ const dali = geo.results.find((r)=>(r.admin1 ?? '').includes('云南')) ?? geo.r
 assert.ok(Math.abs(dali.latitude - 25.6) < 0.5, `纬度应≈25.6,实际 ${dali.latitude}(${dali.name},${dali.admin1})`);
 assert.match(geo.evidence, /open-meteo-geo@2/, '证据链带时间戳');
 console.log(`1. geocode 大理市 → ${dali.latitude},${dali.longitude} (${dali.name},${dali.admin1}) OK`);
+const phuket = await geocodePlace('普吉岛');
+assert.equal(phuket.ok, true, `普吉岛 geocode ok: ${phuket.error ?? ''}`);
+assert.equal(phuket.via, 'nominatim', 'open-meteo 0 结果应走 nominatim 兜底层');
+assert.ok(Math.abs(phuket.results[0].latitude - 8.0) < 0.5, `普吉岛纬度应≈8,实际 ${phuket.results[0].latitude}(${phuket.results[0].name})`);
+assert.match(phuket.results[0].country ?? '', /泰国/, '国家标签应为泰国');
+assert.match(phuket.evidence, /\[实时API:nominatim@2/, '兜底层证据链带时间戳');
+console.log(`1b. geocode 普吉岛(兜底层)→ ${phuket.results[0].name}(${phuket.results[0].admin1},${phuket.results[0].country}) OK`);
 const fc = await getForecast({
     latitude: dali.latitude,
     longitude: dali.longitude
@@ -42,7 +49,7 @@ assert.equal(wmoLabel(0), '晴');
 assert.equal(wmoLabel(95), '雷暴');
 assert.match(wmoLabel(999), /天气码999/, '未知码回退');
 console.log('5. WMO 码映射 OK');
-console.log('\nWEATHER TESTS: 5/5 OK(Open-Meteo 真实 API,免费无 key)');
+console.log('\nWEATHER TESTS: 6/6 OK(Open-Meteo 真实 API,免费无 key;普吉岛走 Nominatim 兜底层)');
 
 
 //# sourceURL=/Users/bytedance/work/gotry/ts/scripts/weather-tests.ts

package/dist/src/index.js

@@ -21,6 +21,8 @@ import { readUrl, reach, reachStatus } from '../capabilities/agent-reach.js';
 import { videoSubtitle, githubSearch } from '../capabilities/agent-reach-deep.js';
 import { flyaiSearch } from '../capabilities/flyai.js';
 import { sessionFlightSearch } from '../capabilities/session-search.js';
+import { sessionLogin } from '../capabilities/session-login.js';
+import { createConsentGate, approvalFromContext } from '../capabilities/session-consent.js';
 export const name = 'gotry-tools';
 export const inject = [
     'tools',
@@ -29,7 +31,8 @@ export const inject = [
 export const Config = z.object({
     stateRoot: z.string().default('.'),
     timeoutMs: z.number().default(30_000),
-    hbcliBin: z.string().default('hbcli')
+    hbcliBin: z.string().default('hbcli'),
+    sessionAccess: z.string().default('ask')
 });
 const unwrapQuery = interpretArgs;
 function renderMotivationBrief(stateRoot) {
@@ -95,6 +98,13 @@ export function apply(ctx, config) {
         uncaughtException: 'gotry-tools',
         unhandledRejection: 'gotry-tools'
     });
+    const ctxOn = ctx.on;
+    if (typeof ctxOn === 'function') {
+        ctx.on('tools/pre-execute', createConsentGate({
+            access: ()=>config.sessionAccess ?? 'ask',
+            approval: approvalFromContext(ctx)
+        }));
+    }
     const registerGuarded = (tool)=>{
         const t = {
             ...tool
@@ -776,12 +786,12 @@ export function apply(ctx, config) {
     }));
     registerGuarded(defineTool({
         name: 'gotry_flyai_search',
-        description: 'Live flight/train search via Fliggy official FlyAI channel (read-only, no key, booking only via jumpUrl by the human). ' + 'PRIMARY source for real schedules & prices (RFC user-session-data-rfc). Input: kind=flight|train, from/to city names (Chinese), date YYYY-MM-DD. ' + 'Evidence [实时API:flyai@ts]. Cross-validate expensive claims against gotry_session_search when it matters.',
+        description: 'Live travel search through the Fliggy official FlyAI channel (read-only, no key; booking/comparison happens by the HUMAN on the jumpUrl page). ' + 'kind="flight"|"train": { kind, from, to, date } (中文城市名, date YYYY-MM-DD) — real schedules & prices, split 直达/中转 in results. ' + 'kind="hotel": { kind:"hotel", to:"大理"(目的地中文), checkIn?, checkOut? (YYYY-MM-DD,成对可选——未定档期可不填先摸底), keyWords? }. ' + 'Hotel prices may be masked upstream (priceRaw like "¥7xx"): always present the mask as a range, and let the human open jumpUrl for the real price. ' + 'Evidence [实时API:flyai@ts]. Errors (rate-limit Sentinel / invalid dates) degrade as structured errors with the upstream message — surface them, never guess.',
         parameters: {
             query: {
                 type: 'json',
                 required: true,
-                description: '{ kind: "flight"|"train", from: "上海", to: "丽江", date: "2026-10-01" }'
+                description: 'kind=flight|train: { kind, from: "上海", to: "丽江", date: "2026-10-01" }; kind="hotel": { kind:"hotel", to:"大理", checkIn?: "YYYY-MM-DD", checkOut?: "YYYY-MM-DD", keyWords?: "洱海" }'
             }
         },
         output: {
@@ -797,6 +807,50 @@ export function apply(ctx, config) {
         },
         async execute (args, _exec) {
             const q = unwrapQuery(args, 'from');
+            if (q.kind === 'hotel') {
+                const dest = (q.to ?? '').trim();
+                if (!dest) return {
+                    ok: false,
+                    summary: 'kind=hotel 需要 to(目的地中文,如 大理)'
+                };
+                if ((q.checkIn ? 1 : 0) !== (q.checkOut ? 1 : 0) || q.checkIn && !/^\d{4}-\d{2}-\d{2}$/.test(q.checkIn)) {
+                    return {
+                        ok: false,
+                        summary: '酒店 checkIn/checkOut 须成对且为 YYYY-MM-DD(未定档期可不填,先摸底)'
+                    };
+                }
+                if (q.checkIn) {
+                    const now = new Date();
+                    const todayYmd = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}-${String(now.getDate()).padStart(2, '0')}`;
+                    if (q.checkIn < todayYmd || (q.checkOut ?? '') < q.checkIn) {
+                        return JSON.parse(JSON.stringify({
+                            ok: false,
+                            verdict: 'error',
+                            kind: 'hotel',
+                            summary: `未发起查询:入住 ${q.checkIn}/退房 ${q.checkOut ?? ''} 不是未来合法区间(今天 ${todayYmd})。向用户确认日期后再查。`
+                        }));
+                    }
+                    if ((q.checkOut ?? '').length !== 10) {
+                        return {
+                            ok: false,
+                            summary: 'checkOut 需 YYYY-MM-DD(与 checkIn 成对)'
+                        };
+                    }
+                }
+                const r = await flyaiSearch({
+                    kind: 'hotel',
+                    destName: dest,
+                    checkInDate: q.checkIn,
+                    checkOutDate: q.checkOut,
+                    keyWords: q.keyWords
+                });
+                const top = (r.hotels ?? []).slice(0, 8).map((o)=>`${o.name}${o.star ? `(${o.star})` : ''} ${o.priceRaw ?? '价待询'}${o.poi ? ` · ${o.poi}` : ''}`);
+                const summary = r.verdict === 'hit' ? `${dest} 酒店(飞猪官方只读)前 ${top.length} 家(价格多为打码,真实价以 jumpUrl 为准):\n${top.join('\n')}\n${r.evidence}` : `${dest} 酒店无结果或失败:${r.error ?? 'miss'} ${r.evidence}`;
+                return JSON.parse(JSON.stringify({
+                    ...r,
+                    summary
+                }));
+            }
             const kind = q.kind === 'train' ? 'train' : 'flight';
             if (!q.from || !q.to || !q.date) {
                 return {
@@ -804,6 +858,16 @@ export function apply(ctx, config) {
                     summary: '需要 from/to(中文城市名)与 date(YYYY-MM-DD)'
                 };
             }
+            const now = new Date();
+            const todayYmd = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}-${String(now.getDate()).padStart(2, '0')}`;
+            if (q.date < todayYmd) {
+                return JSON.parse(JSON.stringify({
+                    ok: false,
+                    verdict: 'error',
+                    kind,
+                    summary: `未发起查询:日期 ${q.date} 已是过去(今天 ${todayYmd}),过去不存在在售机/火车票。` + `多为用户时间表达未带年份所致——向用户确认年份(或按未来最近的同月日修正)后再查。`
+                }));
+            }
             const r = await flyaiSearch({
                 kind,
                 origin: q.from,
@@ -825,10 +889,65 @@ export function apply(ctx, config) {
                 rawInput: args.query
             }),
         presentResult: (args, value)=>{
+            const isHotel = String(args.query?.kind) === 'hotel';
+            const r = value;
+            const n = Math.max((r.options ?? []).length, (r.hotels ?? []).length);
+            return {
+                card: 'generic',
+                title: `${isHotel ? '飞猪酒店' : '飞猪检索'}:${r.ok && n > 0 ? `${n} 条` : '降级'}`,
+                content: [
+                    {
+                        type: 'text',
+                        text: String(value.summary ?? '')
+                    }
+                ]
+            };
+        }
+    }));
+    registerGuarded(defineTool({
+        name: 'gotry_session_login',
+        description: 'Productized login bootstrap for the account session channel (call this when gotry_session_search returns needs-login — the user never needs a terminal). ' + 'AUTO-DETECTION FIRST: it reads ticket-cookie NAMES before anything else — if the user already logged in (on the external site) it confirms instantly WITHOUT opening any page. ' + 'OPENS the site login entry in the USER\'S OWN Chrome and waits for the user to finish logging in on the external site. ' + 'GoTry NEVER collects, stores, or transmits credentials: no passwords, no SMS codes, no cookie values — it only checks the boolean fact "already logged in" (reads cookie NAMES only, zero values). ' + 'verdict logged-in (tickets detected) | pending (login tab opened, user not done yet — offer to re-check later) | needs-attach (one-time Chrome remote-debugging switch instructions). ' + 'Evidence [会话:<site>-login@ts].',
+        parameters: {
+            query: {
+                type: 'json',
+                required: true,
+                description: '可空对象 {}: { waitSeconds?: number }(等待用户完成登录的上限秒数,默认 90,至多 300)'
+            }
+        },
+        output: {
+            schema: {
+                type: 'json'
+            },
+            render: (_a, v)=>[
+                    {
+                        type: 'text',
+                        text: String(v.evidence ?? JSON.stringify(v).slice(0, 600))
+                    }
+                ]
+        },
+        async execute (args, _exec) {
+            const q = unwrapQuery(args, 'waitSeconds');
+            const r = await sessionLogin({
+                waitMs: typeof q?.waitSeconds === 'number' ? q.waitSeconds * 1000 : undefined
+            });
+            const summary = r.verdict === 'logged-in' ? `${r.site} 登录完成确认(票据 cookie 名已检出,只读名字)。说明:登录是在携程官网、用你自己的浏览器完成的——gotry 全程未接触任何密码/验证码/cookie 值。现在可以继续会话检索了。${r.evidence}` : r.verdict === 'pending' ? `登录入口已在你的 Chrome 打开;请在弹出的标签页里正常登录携程(登录由你在官网完成,不属于 gotry)。完成后说一声"继续",我再确认。gotry 只检查"是否已登录",永不收集你的账号信息。${r.evidence}` : r.verdict === 'needs-attach' ? `需要一次性开启你 Chrome 的远程调试开关:在你的 Chrome 地址栏打开 chrome://inspect/#remote-debugging 并打开开关,然后说一声"重试"。${r.evidence}` : `登录引导未完成:${r.error ?? '未知原因'} ${r.evidence}`;
+            return JSON.parse(JSON.stringify({
+                ...r,
+                summary
+            }));
+        },
+        presentCall: (_args)=>({
+                card: 'generic',
+                title: '登录携程(用你自己的浏览器,不在 gotry 输入)',
+                kind: 'fetch',
+                rawInput: {}
+            }),
+        presentResult: (_args, value)=>{
             const r = value;
+            const label = r.verdict === 'logged-in' ? `已登录(${(r.tickets ?? []).length} 票据)` : r.verdict === 'pending' ? '等待你在携程页面完成登录' : r.verdict ?? '降级';
             return {
                 card: 'generic',
-                title: `飞猪检索:${r.ok && (r.options?.length ?? 0) > 0 ? `${r.options.length} 条` : '降级'}`,
+                title: `账号登录:${label}`,
                 content: [
                     {
                         type: 'text',
@@ -840,7 +959,7 @@ export function apply(ctx, config) {
     }));
     registerGuarded(defineTool({
         name: 'gotry_session_search',
-        description: 'Cross-validation search on the user\'s OWN logged-in browser session (dedicated persistent profile, ReadGuard = physically read-only: ' + 'write requests are aborted at network layer; agent NEVER touches credentials/captcha; on captcha it stops and returns challenged). ' + 'Currently ctrip-flight: sniffs the site search API for structured options. Evidence [会话:ctrip-flight@ts]. ' + 'verdict needs-login = run scripts/session-login.ts once with the human logging in. Rate-limited (≥30s between same-site calls). ' + 'Use to verify/double-check prices from gotry_flyai_search on the same itinerary (split by 直达/中转).',
+        description: 'Search on the USER\'S OWN logged-in browser session (Ctrip flights today; the account channel, not an anonymous instance). ' + 'Consent gate: the FIRST call in a session asks the user via the runtime approval card; once granted it holds for the session, a refusal revokes it for the session (no repeat prompting). ' + 'ReadGuard = physically read-only (write requests aborted at network layer; agent NEVER touches credentials/captcha; on captcha it stops and returns challenged). ' + 'Currently ctrip-flight: sniffs the site search API for structured options. Evidence [会话:ctrip-flight@ts]. ' + 'verdict needs-login = call gotry_session_login (product tool: opens the Ctrip login entry in the user\'s own Chrome and waits for them to log in on the external site — no terminal, no credentials through GoTry); needs-attach = one-time Chrome remote-debugging switch. ' + 'Rate-limited (≥30s between same-site calls; a challenged/timeout verdict means STOP — never retry, fall back to other tools).',
         parameters: {
             query: {
                 type: 'json',

package/dist/src/loop.js

@@ -71,6 +71,35 @@ export function validateSpec(spec) {
     }
     return null;
 }
+export const ASYNC_TERMINAL_SCHEMA = 'gotry_async_terminal.v1';
+function asyncTerminalOutcome(ticketId, checks) {
+    const failedChecks = Object.entries(checks).filter(([, passed])=>!passed).map(([name])=>name);
+    return {
+        schema: ASYNC_TERMINAL_SCHEMA,
+        ticket_id: ticketId,
+        status: failedChecks.length === 0 ? 'succeeded' : 'failed',
+        passed: Object.values(checks).filter(Boolean).length,
+        total: 4,
+        checks,
+        failed_checks: failedChecks
+    };
+}
+function terminalOutcomeFromState(ticketId, state) {
+    if (!state.spec || !state.solve) {
+        return asyncTerminalOutcome(ticketId, {
+            '1_承诺时间后必有明确产物': false,
+            '2_产物通过自检清单': false,
+            '3_待决问题全部是简单选择题': false,
+            '4_做不到的诚实说': false
+        });
+    }
+    return asyncTerminalOutcome(ticketId, {
+        '1_承诺时间后必有明确产物': Boolean(state.solve.legs?.length || state.solve.verdicts?.length),
+        '2_产物通过自检清单': state.solve.feasible ? state.solve.legs?.every((l)=>l['energy_pct'] !== undefined) ?? false : Boolean(state.solve.unsat_core?.length),
+        '3_待决问题全部是简单选择题': state.gates.every((g)=>g.id === 'budget' || g.options.length >= 2),
+        '4_做不到的诚实说': state.solve.feasible || Boolean(state.solve.suggestions?.length)
+    });
+}
 export function isComplex(state) {
     const p = state.profile;
     return Boolean(p.workWindow && p.bookedResources) && (state.gates.length > 0 || Boolean(state.spec));
@@ -95,22 +124,22 @@ export async function requestDeepPlanning(state) {
 }
 export async function collectDeepPlanning(state, ticket, solve) {
     const spec = state.spec;
-    if (!spec) return {
-        reply: '(内部状态缺失 spec——深度规划未就绪,这是不应发生的路径)',
-        state
-    };
+    if (!spec) {
+        const outcome = terminalOutcomeFromState(ticket.id, state);
+        return {
+            reply: '(内部状态缺失 spec——深度规划未就绪,这是不应发生的路径)',
+            state,
+            outcome
+        };
+    }
     state.solve = await solve(spec);
     state.gates = state.gates.filter((g)=>!g.id.startsWith('async-'));
-    const checks = {
-        '1_承诺时间后必有明确产物': Boolean(state.solve.legs?.length || state.solve.verdicts?.length),
-        '2_产物通过自检清单': state.solve.feasible ? state.solve.legs?.every((l)=>l['energy_pct'] !== undefined) ?? false : Boolean(state.solve.unsat_core?.length),
-        '3_待决问题全部是简单选择题': state.gates.every((g)=>g.id === 'budget' || g.options.length >= 2),
-        '4_做不到的诚实说': state.solve.feasible || Boolean(state.solve.suggestions?.length)
-    };
-    const head = `# 回访交付:${ticket.objective}\n(工单 ${ticket.id},不失望四条:${Object.values(checks).every(Boolean) ? '4/4 ✅' : '有未达项 ❌'})`;
+    const outcome = terminalOutcomeFromState(ticket.id, state);
+    const head = `# 回访交付:${ticket.objective}\n(工单 ${ticket.id},不失望四条:${outcome.status === 'succeeded' ? '4/4 ✅' : '有未达项 ❌'})`;
     return {
         reply: `${head}\n\n${renderSolve(state)}`,
-        state
+        state,
+        outcome
     };
 }
 export function renderSolve(state) {
@@ -311,13 +340,35 @@ export async function loadAsyncTicket(ticketId, stateRoot = '.') {
         return null;
     }
 }
-export async function settleAsyncTicket(ticketId, reply, stateRoot = '.') {
-    openLedgerIfExists(stateRoot)?.settleWorkflowRun(ticketId, reply);
+export async function settleAsyncTicket(ticketId, reply, stateRoot = '.', outcome) {
+    const ledger = openLedgerIfExists(stateRoot);
+    const terminalOutcome = outcome ?? recoverAsyncTerminalOutcome(ledger, ticketId);
+    if (ledger && !terminalOutcome) {
+        throw new Error(`workflow ${ticketId} 缺少可恢复的 ${ASYNC_TERMINAL_SCHEMA}，拒绝误结算`);
+    }
+    if (terminalOutcome?.status === 'failed') ledger?.failWorkflowRun(ticketId, reply, terminalOutcome);
+    else ledger?.settleWorkflowRun(ticketId, reply, terminalOutcome);
     const dir = await asyncDir(stateRoot);
     const p = join(dir, `${ticketId}.deliverable.md`);
     await atomicWrite(p, reply);
     return p;
 }
+function recoverAsyncTerminalOutcome(ledger, ticketId) {
+    if (!ledger) return undefined;
+    const run = ledger.getWorkflowRun(ticketId);
+    if (!run) return undefined;
+    try {
+        const state = JSON.parse(run.state_json);
+        if (!state.spec) return terminalOutcomeFromState(ticketId, state);
+        const solveStep = ledger.getWorkflowStep(ticketId, 'solve');
+        if (solveStep?.status !== 'done' || !solveStep.result) return undefined;
+        state.solve = JSON.parse(solveStep.result);
+        state.gates = state.gates.filter((g)=>!g.id.startsWith('async-'));
+        return terminalOutcomeFromState(ticketId, state);
+    } catch  {
+        return undefined;
+    }
+}
 export function makeJournaledSolvePort(ledger, runId, solve, opts) {
     return async (spec)=>{
         const step = ledger.getWorkflowStep(runId, 'solve');

package/dist/src/state-ledger.js

@@ -543,21 +543,47 @@ export class StateLedger {
     markStepDone(runId, name, result) {
         this.db.prepare(`UPDATE workflow_steps SET status = 'done', result = ?, done_ts = ? WHERE run_id = ? AND name = ? AND tenant_id = ?`).run(JSON.stringify(result), new Date().toISOString(), runId, name, this.tenant);
     }
-    settleWorkflowRun(id, deliverable, actor = 'system:async-collect') {
+    finishWorkflowRun(id, status, eventKind, deliverable, terminalOutcome, actor = 'system:async-collect') {
         const run = this.db.transaction(()=>{
-            this.db.prepare(`UPDATE workflow_runs SET status = 'settled', deliverable = ?, updated = ? WHERE id = ? AND tenant_id = ?`).run(deliverable, new Date().toISOString(), id, this.tenant);
+            const update = this.db.prepare(`UPDATE workflow_runs SET status = ?, deliverable = ?, updated = ?
+         WHERE id = ? AND tenant_id = ? AND status = 'pending'`).run(status, deliverable, new Date().toISOString(), id, this.tenant);
+            if (update.changes === 0) {
+                const existing = this.getWorkflowRun(id);
+                if (existing?.status === status) return;
+                throw new Error(`workflow ${id} cannot transition ${existing?.status ?? 'missing'} -> ${status}`);
+            }
             this.insertEvent({
                 actor,
-                kind: 'async.settled',
+                kind: eventKind,
                 subjectId: id,
                 payload: {
-                    bytes: deliverable.length
+                    bytes: deliverable.length,
+                    terminal_outcome: terminalOutcome
                 },
+                idemKey: `async-terminal:${id}`,
                 runId: id
             });
         });
         run();
     }
+    settleWorkflowRun(id, deliverable, terminalOutcome, actor = 'system:async-collect') {
+        this.finishWorkflowRun(id, 'settled', 'async.settled', deliverable, terminalOutcome, actor);
+    }
+    failWorkflowRun(id, deliverable, terminalOutcome, actor = 'system:async-collect') {
+        this.finishWorkflowRun(id, 'failed', 'async.failed', deliverable, terminalOutcome, actor);
+    }
+    getWorkflowTerminalOutcome(id) {
+        const row = this.db.prepare(`SELECT payload FROM events
+       WHERE tenant_id = ? AND run_id = ? AND kind IN ('async.settled', 'async.failed')
+       ORDER BY seq DESC LIMIT 1`).get(this.tenant, id);
+        if (!row) return null;
+        try {
+            const payload = JSON.parse(row.payload);
+            return payload.terminal_outcome ?? null;
+        } catch  {
+            return null;
+        }
+    }
     requestPendingWrite(input, actor = 'system:writegate') {
         const ts = new Date().toISOString();
         const run = this.db.transaction(()=>{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danceiny/gotry",
-  "version": "0.0.1-rc.11",
+  "version": "0.0.1-rc.13",
   "description": "GoTry — 从出发到下一次出发的 AI 旅行 Agent(dsh 插件)。npm 包入口 + vendored dsh runtime + 5 行 README 安装路径。",
   "type": "module",
   "main": "ts/src/index.ts",
@@ -47,7 +47,9 @@
     "ts/package.json",
     "cordis.gotry-patch.yml",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "ts/capabilities/session-consent.ts",
+    "ts/capabilities/session-login.ts"
   ],
   "engines": {
     "node": ">=22.0.0"