@danceiny/gotry 0.0.1-rc.11 → 0.0.1-rc.13

package/ts/capabilities/flyai.ts

@@ -4,10 +4,11 @@
  * 链路(同构 anything.ts 的 CLI spawn 模式):
  *   gotry capabilities/flyai.ts
  *     → spawn `npx -y @fly-ai/flyai-cli search-flight|search-train --origin X --destination Y --dep-date D`
+ *        | `search-hotel --dest-name X [--key-words K][--check-in-date A --check-out-date B]`
  *       → 飞猪 MCP API(实时直连官方商品库)
  *
  * 契约(与 hbcli/weather/opensky/anything 同构,L4 不变量):
- *   - 只读:8 工具全只读,交易经 jumpUrl 由人完成(与 WriteGate 哲学同构);
+ *   - 只读:8 工具全只读,交易经 jumpUrl/detailUrl 由人完成(与 WriteGate 哲学同构);
  *   - 永不抛错:网络/超时/解析失败一律降级返回 verdict='error';
  *   - 证据链:成功 [实时API:flyai@ts];失败 [实时API:flyai@error@ts];
  *   - 无 key 可用;FLYAI_API_KEY 为可选增强(env 透传)。
@@ -15,15 +16,24 @@
 
 import { spawn } from 'node:child_process'
 
-export type FlyaiKind = 'flight' | 'train'
+export type FlyaiKind = 'flight' | 'train' | 'hotel'
 
 export interface FlyaiQuery {
   kind: FlyaiKind
-  /** 城市名(中文),如 上海 / 丽江 */
-  origin: string
-  destination: string
-  /** YYYY-MM-DD */
-  depDate: string
+  /** 城市名(中文),如 上海 / 丽江——flight/train 必填 */
+  origin?: string
+  /** 目的地城市名(中文);flight/train=到达城市,hotel 未传 destName 时即目的地 */
+  destination?: string
+  /** YYYY-MM-DD——flight/train 必填(出发日) */
+  depDate?: string
+  /** hotel 目的地(中文,国家/省/市/区均可),缺省取 destination */
+  destName?: string
+  /** hotel 入住日 YYYY-MM-DD(与 checkOutDate 成对,可选;未定档期不带日期先摸底) */
+  checkInDate?: string
+  /** hotel 退房日 YYYY-MM-DD(与 checkInDate 成对) */
+  checkOutDate?: string
+  /** hotel 可选关键词(商业区/地标/酒店名) */
+  keyWords?: string
   /** 默认 30_000 ms(npx 冷启动 + 远端检索) */
   timeoutMs?: number
   /** 显式 CLI bin(默认 npx -y @fly-ai/flyai-cli) */
@@ -48,6 +58,26 @@ export interface FlyaiOption {
   priceRaw?: string
 }
 
+export interface FlyaiHotelOption {
+  /** 酒店名 */
+  name: string
+  /** 档级:舒适型 / 高档型 / 豪华型 …(上游 star) */
+  star?: string
+  /** 数字价(未鉴权态上游打码,恒为 0) */
+  price: number
+  /** 打码价格原值(如 "¥7xx"——真实价以 jumpUrl 落地页为准) */
+  priceRaw?: string
+  /** 评分(未鉴权常缺) */
+  rate?: string
+  address?: string
+  /** 周边地标(上游 interestsPoi) */
+  poi?: string
+  /** 飞猪酒店 id(上游 shId) */
+  hotelId?: string
+  /** 飞猪侧预订/详情跳转(由人完成,agent 不碰) */
+  jumpUrl?: string
+}
+
 export interface FlyaiResult {
   ok: boolean
   via: 'flyai' | 'flyai-error'
@@ -56,6 +86,7 @@ export interface FlyaiResult {
   verdict: 'hit' | 'miss' | 'error'
   kind: FlyaiKind
   options?: FlyaiOption[]
+  hotels?: FlyaiHotelOption[]
   error?: string
 }
 
@@ -74,11 +105,76 @@ interface RawItem {
     }>
   }>
   ticketPrice?: string
-  /** 火车条目用顶层 price(且未鉴权态为打码串如 "1xxx") */
+  /** 机/火与酒店条目的顶层 price(未鉴权态为打码串,机/火如 "1xxx",酒店如 "¥7xx") */
   price?: string
   jumpUrl?: string
+  /** 酒店条目字段(实测 2026-08-29,search-hotel 大理:data.itemList) */
+  name?: string
+  shId?: string
+  star?: string
+  rate?: string | null
+  address?: string
+  interestsPoi?: string
+  detailUrl?: string
+}
+
+/**
+ * 从 CLI stdout 中提取首个完整且含 itemList 的 JSON 对象。
+ *
+ * npx/CLI 偶发在业务 JSON 前后追加提示；不能从首个 `{` 一直切到 EOF。
+ * 扫描器识别字符串与转义,因此 JSON 字符串里的花括号不会破坏深度计数。
+ */
+export function parseFlyaiItemList(stdout: string): unknown[] {
+  let start = -1
+  let depth = 0
+  let inString = false
+  let escaped = false
+  let sawIncompleteObject = false
+
+  for (let index = 0; index < stdout.length; index += 1) {
+    const char = stdout[index]!
+    if (start < 0) {
+      if (char === '{') {
+        start = index
+        depth = 1
+        inString = false
+        escaped = false
+        sawIncompleteObject = true
+      }
+      continue
+    }
+
+    if (inString) {
+      if (escaped) escaped = false
+      else if (char === '\\') escaped = true
+      else if (char === '"') inString = false
+      continue
+    }
+
+    if (char === '"') inString = true
+    else if (char === '{') depth += 1
+    else if (char === '}') {
+      depth -= 1
+      if (depth !== 0) continue
+
+      const candidate = stdout.slice(start, index + 1)
+      start = -1
+      sawIncompleteObject = false
+      try {
+        const parsed = JSON.parse(candidate) as { data?: { itemList?: unknown } }
+        if (Array.isArray(parsed.data?.itemList)) return parsed.data.itemList
+      } catch {
+        // 前缀日志可能包含成对花括号但不是 JSON；继续找下一个完整对象。
+      }
+    }
+  }
+
+  throw new Error(sawIncompleteObject
+    ? 'incomplete FlyAI JSON object'
+    : 'no complete FlyAI itemList JSON object')
 }
 
+
 function sh(cmd: string, args: string[], opts: { timeoutMs: number }) {
   const child = spawn(cmd, args, { env: process.env, cwd: process.cwd() })
   let stdout = ''
@@ -98,18 +194,40 @@ function sh(cmd: string, args: string[], opts: { timeoutMs: number }) {
   }).finally(() => clearTimeout(timer))
 }
 
-/** FlyAI 官方只读检索(机/火车票) — 任何失败走降级;不抛错 */
+const YMD = /^\d{4}-\d{2}-\d{2}$/
+
+/** FlyAI 官方只读检索(机票/火车票/酒店) — 任何失败走降级;不抛错 */
 export async function flyaiSearch(q: FlyaiQuery): Promise<FlyaiResult> {
   const started = Date.now()
   const ts = new Date().toISOString()
   const base = { kind: q.kind, latencyMs: 0 }
-  const origin = (q.origin ?? '').trim()
-  const destination = (q.destination ?? '').trim()
-  if (!origin || !destination || !/^\d{4}-\d{2}-\d{2}$/.test(q.depDate ?? '')) {
-    return { ...base, ok: false, via: 'flyai-error', verdict: 'error', evidence: `[实时API:flyai@error@${ts}] bad args`, error: 'origin/destination/depDate(YYYY-MM-DD) required' }
+  const argErr = (error: string): FlyaiResult =>
+    ({ ...base, ok: false, via: 'flyai-error', verdict: 'error', evidence: `[实时API:flyai@error@${ts}] bad args`, error })
+
+  // per-kind 参数闸:机/火与酒店参数面不同,各自校验,不合法走 error 不静默容错
+  let cliArgs: string[]
+  if (q.kind === 'hotel') {
+    const dest = (q.destName ?? q.destination ?? '').trim()
+    if (!dest) return argErr('hotel 需要 to/destName(目的地中文)')
+    const badPair = (q.checkInDate ? 1 : 0) !== (q.checkOutDate ? 1 : 0)
+      || (q.checkInDate && q.checkOutDate && (!YMD.test(q.checkInDate) || !YMD.test(q.checkOutDate)))
+    if (badPair) return argErr('checkInDate/checkOutDate 须成对且为 YYYY-MM-DD(未定档期可不带日期先摸底)')
+    cliArgs = [
+      'search-hotel', '--dest-name', dest,
+      ...(q.checkInDate && q.checkOutDate ? ['--check-in-date', q.checkInDate, '--check-out-date', q.checkOutDate] : []),
+      ...(q.keyWords ? ['--key-words', q.keyWords] : []),
+    ]
+  } else {
+    const origin = (q.origin ?? '').trim()
+    const destination = (q.destination ?? '').trim()
+    if (!origin || !destination || !YMD.test(q.depDate ?? '')) {
+      return argErr('origin/destination/depDate(YYYY-MM-DD) required')
+    }
+    const sub = q.kind === 'flight' ? 'search-flight' : 'search-train'
+    cliArgs = [sub, '--origin', origin, '--destination', destination, '--dep-date', (q.depDate ?? '') as string]
   }
-  const sub = q.kind === 'flight' ? 'search-flight' : 'search-train'
-  const r = await sh(q.cliBin ?? 'npx', ['-y', '@fly-ai/flyai-cli', sub, '--origin', origin, '--destination', destination, '--dep-date', q.depDate], {
+
+  const r = await sh(q.cliBin ?? 'npx', ['-y', '@fly-ai/flyai-cli', ...cliArgs], {
     timeoutMs: q.timeoutMs ?? 30_000,
   })
   const latencyMs = Date.now() - started
@@ -118,14 +236,28 @@ export async function flyaiSearch(q: FlyaiQuery): Promise<FlyaiResult> {
   }
   let items: RawItem[]
   try {
-    const jStart = r.stdout.indexOf('{')
-    const parsed = JSON.parse(jStart >= 0 ? r.stdout.slice(jStart) : r.stdout) as { data?: { itemList?: RawItem[] } }
-    items = parsed.data?.itemList ?? []
-  } catch {
+    // main-lane 加固的扫描器:容忍 npx 前缀日志/不完整对象——data:null 语义失败
+    // (issue #24)的「出发日期非法」原话经 raw stdout 片段进 error 终态,语义不丢
+    items = parseFlyaiItemList(r.stdout) as RawItem[]
+  } catch (e) {
     // 实测(2026-08-28):Sentinel 限流时 CLI exit=0 但 stdout 是 {"message":"SentinelBlockException..."}
     const raw = r.stdout.replace(/\s+/g, ' ').slice(0, 160)
-    return { ...base, latencyMs, ok: false, via: 'flyai-error', verdict: 'error', evidence: `[实时API:flyai@error@${ts}] parse failed: ${raw}`, error: `failed to parse flyai output as JSON: ${raw}` }
+    const reason = e instanceof Error ? e.message : String(e)
+    return { ...base, latencyMs, ok: false, via: 'flyai-error', verdict: 'error', evidence: `[实时API:flyai@error@${ts}] parse failed(${reason}): ${raw}`, error: `failed to parse flyai output as JSON (${reason}): ${raw}` }
   }
+
+  if (q.kind === 'hotel') {
+    const hotels = parseHotelItems(items)
+    const verdict: FlyaiResult['verdict'] = hotels.length > 0 ? 'hit' : 'miss'
+    return { kind: q.kind, latencyMs, ok: true, via: 'flyai', verdict, evidence: `[实时API:flyai@${ts}] ${hotels.length}/${items.length} hotel options`, hotels }
+  }
+  const options = parseTransportItems(items)
+  const verdict: FlyaiResult['verdict'] = options.length > 0 ? 'hit' : 'miss'
+  return { kind: q.kind, latencyMs, ok: true, via: 'flyai', verdict, evidence: `[实时API:flyai@${ts}] ${options.length}/${items.length} ${q.kind} options`, options }
+}
+
+/** 机/火条目 → FlyaiOption(journeys[0].segments[0];缺航班号/时刻的条目跳过) */
+function parseTransportItems(items: RawItem[]): FlyaiOption[] {
   const options: FlyaiOption[] = []
   for (const it of items) {
     const seg = it.journeys?.[0]?.segments?.[0]
@@ -146,6 +278,29 @@ export async function flyaiSearch(q: FlyaiQuery): Promise<FlyaiResult> {
       jumpUrl: it.jumpUrl,
     })
   }
-  const verdict: FlyaiResult['verdict'] = options.length > 0 ? 'hit' : 'miss'
-  return { kind: q.kind, latencyMs, ok: true, via: 'flyai', verdict, evidence: `[实时API:flyai@${ts}] ${options.length}/${items.length} ${q.kind} options`, options }
+  return options
 }
+
+/** 酒店条目 → FlyaiHotelOption(实测 2026-08-29:price 未鉴权为打码串"¥7xx",rate 常 null) */
+function parseHotelItems(items: RawItem[]): FlyaiHotelOption[] {
+  const hotels: FlyaiHotelOption[] = []
+  for (const it of items) {
+    if (!it.name) continue
+    const rawPrice = String(it.price ?? '')
+    // 打码价如 "¥7xx" 绝不能截成数字 7(会伪装成真价)——仅全数字串才落 price
+    const bare = rawPrice.replace(/^[¥]/, '')
+    const numericPrice = Number(bare)
+    hotels.push({
+      name: it.name,
+      star: it.star,
+      price: /^\d+(\.\d+)?$/.test(bare) && numericPrice > 0 ? numericPrice : 0,
+      priceRaw: rawPrice || undefined,
+      rate: it.rate != null ? String(it.rate) : undefined,
+      address: it.address,
+      poi: it.interestsPoi,
+      hotelId: it.shId,
+      jumpUrl: it.detailUrl,
+    })
+  }
+  return hotels
+}

package/ts/capabilities/hbcli.ts

@@ -129,16 +129,28 @@ export async function searchHotels(
   if (live.via === 'hbcli-realtime') {
     return { ...live, hotels: live.result, summary: `${query.destination}:hbcli 实时返回${query.checkIn || query.checkOut ? '(日期不传上游 list,以当前窗口房价返回)' : ''}` }
   }
-  // 降级:读静态包
+  // 降级:读静态包,按目的地过滤命中的住宿块(issue #24)——整包倾倒会把无关场景
+  // (深圳/普吉/曼谷/云南/大理混装)灌给模型且不指明哪块相关;包内无该目的地时明示
+  // 「无数据」而不是伪装成可用结果。
   const fallback = opts.fallbackPath
   if (fallback) {
     try {
       const { readFile } = await import('node:fs/promises')
-      const pack = JSON.parse(await readFile(fallback, 'utf-8')) as Record<string, unknown>
+      const pack = JSON.parse(await readFile(fallback, 'utf-8')) as { stays?: unknown[] } & Record<string, unknown>
+      const kw = query.destination.trim()
+      const stays = Array.isArray(pack.stays) ? pack.stays : []
+      const matched = kw ? stays.filter(s => JSON.stringify(s).includes(kw)) : stays
+      if (matched.length) {
+        return {
+          ...live,
+          hotels: { stays: matched },
+          summary: `${query.destination}:hbcli 不可用(${live.error ?? live.via}),降级到静态包,命中 ${matched.length} 个住宿块`,
+        }
+      }
       return {
         ...live,
-        hotels: pack,
-        summary: `${query.destination}:hbcli 不可用(${live.error ?? live.via}),降级到静态包`,
+        hotels: null,
+        summary: `${query.destination}:hbcli 不可用(${live.error ?? live.via}),且静态包无「${query.destination}」住宿数据(静态包仅覆盖内置场景)`,
       }
     } catch { /* 静态包读不到也优雅降级 */ }
   }

package/ts/capabilities/session/benchmark.ts

@@ -0,0 +1,273 @@
+/**
+ * Session 双源字段合同与 fixture 评分器。
+ *
+ * 只处理已经脱敏、结构化的证据；不打开浏览器、不读登录态，也不执行任何写操作。
+ */
+
+export type SessionEvidenceVerdict = 'hit' | 'miss' | 'error' | 'challenged' | 'cooldown' | 'needs-login' | 'needs-attach'
+
+export const SESSION_BENCHMARK_SCHEMA_VERSION = 'session-double-source.v1' as const
+export const SESSION_FIELD_ACCURACY_THRESHOLD = 0.9
+export const REQUIRED_COMPARABLE_FIELDS = [
+  'query_id',
+  'route_segments',
+  'journey_type',
+  'route_segments[].departure_at',
+  'route_segments[].arrival_at',
+  'route_segments[].transport_number',
+  'currency',
+  'price',
+  'source',
+  'fetched_at',
+  'verdict',
+] as const
+
+export interface SessionComparableSegment {
+  from: string
+  to: string
+  departure_at: string
+  arrival_at: string
+  transport_number: string
+}
+
+export interface SessionComparableRecord {
+  query_id: string
+  route_segments: SessionComparableSegment[]
+  journey_type: 'direct' | 'transfer'
+  currency: string
+  price: number
+  /** 具体通道标识,如 flyai / ctrip-flight;official/session 角色由双源输入位置表达。 */
+  source: string
+  fetched_at: string
+  verdict: SessionEvidenceVerdict
+  latency_ms: number
+  read_guard_blocked: number
+}
+
+export interface SessionFixtureScore {
+  pass: boolean
+  threshold: number
+  correct: number
+  total: number
+  accuracy: number
+  missing: string[]
+  incorrect: string[]
+  fixture_errors: string[]
+}
+
+interface ComparableRecordInput {
+  query_id?: unknown
+  route_segments?: Array<Partial<SessionComparableSegment>>
+  journey_type?: unknown
+  currency?: unknown
+  price?: unknown
+  source?: unknown
+  fetched_at?: unknown
+  verdict?: unknown
+  latency_ms?: unknown
+  read_guard_blocked?: unknown
+}
+
+interface FieldComparison {
+  path: string
+  expected: unknown
+  actual: unknown
+}
+
+function isMissing(value: unknown): boolean {
+  return value === undefined || value === null || (typeof value === 'string' && value.trim() === '')
+}
+
+function sameValue(left: unknown, right: unknown): boolean {
+  if (typeof left !== typeof right) return false
+  return typeof left === 'number' && typeof right === 'number'
+    ? Object.is(left, right)
+    : left === right
+}
+
+function sameComparison(row: FieldComparison): boolean {
+  if (/\.(?:departure_at|arrival_at)$/.test(row.path)
+    && typeof row.expected === 'string'
+    && typeof row.actual === 'string') {
+    const expectedAt = Date.parse(row.expected)
+    const actualAt = Date.parse(row.actual)
+    if (Number.isFinite(expectedAt) && Number.isFinite(actualAt)) return expectedAt === actualAt
+  }
+  return sameValue(row.expected, row.actual)
+}
+
+function fixtureComparisons(expected: SessionComparableRecord, actual: ComparableRecordInput): FieldComparison[] {
+  const rows: FieldComparison[] = [
+    { path: 'query_id', expected: expected.query_id, actual: actual.query_id },
+    { path: 'route_segments.length', expected: expected.route_segments.length, actual: actual.route_segments?.length },
+    { path: 'journey_type', expected: expected.journey_type, actual: actual.journey_type },
+    { path: 'currency', expected: expected.currency, actual: actual.currency },
+    { path: 'price', expected: expected.price, actual: actual.price },
+    { path: 'source', expected: expected.source, actual: actual.source },
+    { path: 'fetched_at', expected: expected.fetched_at, actual: actual.fetched_at },
+    { path: 'verdict', expected: expected.verdict, actual: actual.verdict },
+  ]
+  for (let index = 0; index < expected.route_segments.length; index += 1) {
+    const exp = expected.route_segments[index]!
+    const act = actual.route_segments?.[index]
+    rows.push(
+      { path: `route_segments[${index}].from`, expected: exp.from, actual: act?.from },
+      { path: `route_segments[${index}].to`, expected: exp.to, actual: act?.to },
+      { path: `route_segments[${index}].departure_at`, expected: exp.departure_at, actual: act?.departure_at },
+      { path: `route_segments[${index}].arrival_at`, expected: exp.arrival_at, actual: act?.arrival_at },
+      { path: `route_segments[${index}].transport_number`, expected: exp.transport_number, actual: act?.transport_number },
+    )
+  }
+  return rows
+}
+
+export function scoreSessionFixture(
+  expected: SessionComparableRecord,
+  actual: ComparableRecordInput,
+  threshold = SESSION_FIELD_ACCURACY_THRESHOLD,
+): SessionFixtureScore {
+  const rows = fixtureComparisons(expected, actual)
+  const fixtureErrors = [
+    ...rows.filter((row) => isMissing(row.expected)).map((row) => row.path),
+    ...requiredMissing(expected),
+  ]
+  const missing: string[] = []
+  const incorrect: string[] = []
+  let correct = 0
+  for (const row of rows) {
+    if (isMissing(row.actual)) {
+      missing.push(row.path)
+    } else if (!sameValue(row.expected, row.actual)) {
+      incorrect.push(row.path)
+    } else {
+      correct += 1
+    }
+  }
+  const total = rows.length
+  const accuracy = total > 0 ? correct / total : 0
+  return {
+    pass: fixtureErrors.length === 0 && accuracy >= threshold,
+    threshold,
+    correct,
+    total,
+    accuracy,
+    missing,
+    incorrect,
+    fixture_errors: [...new Set(fixtureErrors)],
+  }
+}
+
+export type DoubleSourceState =
+  | 'comparable'
+  | 'divergent'
+  | 'waiting_attach'
+  | 'waiting_login'
+  | 'challenge_stop'
+  | 'guard_violation'
+  | 'source_unavailable'
+  | 'invalid_contract'
+
+export interface DoubleSourceEvaluation {
+  state: DoubleSourceState
+  retry_allowed: boolean
+  quota_disposition: 'evidence_ready' | 'no_spend_waiting_user' | 'no_spend_stop'
+  mismatches: string[]
+  missing: string[]
+  price_delta?: number
+}
+
+function isIsoTimestamp(value: string): boolean {
+  return value.trim() !== '' && Number.isFinite(Date.parse(value))
+}
+
+function requiredMissing(record: SessionComparableRecord): string[] {
+  const missing: string[] = []
+  if (!record.query_id.trim()) missing.push('query_id')
+  if (record.route_segments.length === 0) missing.push('route_segments')
+  if (!record.currency.trim()) missing.push('currency')
+  if (!(record.price > 0)) missing.push('price')
+  if (!record.source.trim()) missing.push('source')
+  if (!isIsoTimestamp(record.fetched_at)) missing.push('fetched_at')
+  if (record.journey_type === 'direct' && record.route_segments.length !== 1) missing.push('journey_type/route_segments')
+  if (record.journey_type === 'transfer' && record.route_segments.length < 2) missing.push('journey_type/route_segments')
+  for (let index = 0; index < record.route_segments.length; index += 1) {
+    const segment = record.route_segments[index]!
+    if (!segment.from.trim()) missing.push(`route_segments[${index}].from`)
+    if (!segment.to.trim()) missing.push(`route_segments[${index}].to`)
+    if (!isIsoTimestamp(segment.departure_at)) missing.push(`route_segments[${index}].departure_at`)
+    if (!isIsoTimestamp(segment.arrival_at)) missing.push(`route_segments[${index}].arrival_at`)
+    if (!segment.transport_number.trim()) missing.push(`route_segments[${index}].transport_number`)
+  }
+  return missing
+}
+
+function baseEvaluation(
+  state: DoubleSourceState,
+  quotaDisposition: DoubleSourceEvaluation['quota_disposition'],
+  extra: Partial<Pick<DoubleSourceEvaluation, 'mismatches' | 'missing' | 'price_delta'>> = {},
+): DoubleSourceEvaluation {
+  return {
+    state,
+    retry_allowed: false,
+    quota_disposition: quotaDisposition,
+    mismatches: extra.mismatches ?? [],
+    missing: extra.missing ?? [],
+    ...(extra.price_delta === undefined ? {} : { price_delta: extra.price_delta }),
+  }
+}
+
+function alignmentComparisons(official: SessionComparableRecord, session: SessionComparableRecord): FieldComparison[] {
+  const rows: FieldComparison[] = [
+    { path: 'query_id', expected: official.query_id, actual: session.query_id },
+    { path: 'route_segments.length', expected: official.route_segments.length, actual: session.route_segments.length },
+    { path: 'journey_type', expected: official.journey_type, actual: session.journey_type },
+    { path: 'currency', expected: official.currency, actual: session.currency },
+  ]
+  const comparableSegments = Math.min(official.route_segments.length, session.route_segments.length)
+  for (let index = 0; index < comparableSegments; index += 1) {
+    const exp = official.route_segments[index]!
+    const act = session.route_segments[index]!
+    rows.push(
+      { path: `route_segments[${index}].from`, expected: exp.from, actual: act.from },
+      { path: `route_segments[${index}].to`, expected: exp.to, actual: act.to },
+      { path: `route_segments[${index}].departure_at`, expected: exp.departure_at, actual: act.departure_at },
+      { path: `route_segments[${index}].arrival_at`, expected: exp.arrival_at, actual: act.arrival_at },
+      { path: `route_segments[${index}].transport_number`, expected: exp.transport_number, actual: act.transport_number },
+    )
+  }
+  return rows
+}
+
+export function evaluateDoubleSource(input: {
+  official?: SessionComparableRecord
+  session?: SessionComparableRecord
+}): DoubleSourceEvaluation {
+  const official = input.official
+  const session = input.session
+  if (session?.verdict === 'challenged' || official?.verdict === 'challenged') {
+    return baseEvaluation('challenge_stop', 'no_spend_stop')
+  }
+  if ((session?.read_guard_blocked ?? 0) !== 0 || (official?.read_guard_blocked ?? 0) !== 0) {
+    return baseEvaluation('guard_violation', 'no_spend_stop')
+  }
+  if (!session) return baseEvaluation('source_unavailable', 'no_spend_stop')
+  if (session.verdict === 'needs-attach') return baseEvaluation('waiting_attach', 'no_spend_waiting_user')
+  if (session.verdict === 'needs-login') return baseEvaluation('waiting_login', 'no_spend_waiting_user')
+  if (!official || official.verdict !== 'hit' || session.verdict !== 'hit') {
+    return baseEvaluation('source_unavailable', 'no_spend_stop')
+  }
+  const missing = [
+    ...requiredMissing(official).map((path) => `official.${path}`),
+    ...requiredMissing(session).map((path) => `session.${path}`),
+  ]
+  if (missing.length > 0) {
+    return baseEvaluation('invalid_contract', 'no_spend_stop', { missing })
+  }
+  const mismatches = alignmentComparisons(official, session)
+    .filter((row) => !sameComparison(row))
+    .map((row) => row.path)
+  return baseEvaluation(mismatches.length === 0 ? 'comparable' : 'divergent', 'evidence_ready', {
+    mismatches,
+    price_delta: session.price - official.price,
+  })
+}

package/ts/capabilities/session/transport.ts

@@ -49,6 +49,22 @@ export interface TransportOptions {
   headless?: boolean
   /** ReadGuard 审计落盘路径(缺省仅内存计数) */
   auditPath?: string
+  /**
+   * 是否挂 ReadGuard(默认 true;检索面强制:检索会话不存在无守卫形态)。
+   * 唯一豁免 = 登录 bootstrap(guard:false):那是用户本人的凭证入口页,agent 只开页+只读轮询
+   * cookie 名,从不检索/点提交——守卫若在场,反而会物理 abort 用户自己的登录 POST
+   * (护照登录端点多为 POST /login/submit,命中写词模式),既挡登录又让我们站在用户
+   * 凭证流的中间(隐私+可靠性双输)。该形态下不发起任何检索导航、不落审计。
+   */
+  guard?: boolean
+  /**
+   * 开**自己的新标签页**(默认 false=沿用既有首页——那是用户的页面!)。
+   * 人机共治纪律(2026-08-29 founder:「我根本就看不到登录页面」):登录与检索一律
+   * newPage 开自己的页,绝不劫持用户已有标签页;closeOwnPage 控制收尾是否关掉自己开的页。
+   */
+  newPage?: boolean
+  /** newPage:true 时,close() 是否连自己开的标签页一起关(默认 true;登录引导保持 false——把登录页留给用户) */
+  closeOwnPage?: boolean
 }
 
 function devtoolsWsEndpoint(): { ws: string } | { err: string } {
@@ -92,22 +108,38 @@ export async function openSession(opts: TransportOptions = {}): Promise<SessionT
       return { ok: false, summary: `chrome launch failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` }
     }
   }
-  // fail-closed:guard 装不上即断开返回失败——不给无守卫的导航面
-  let guard: ReadGuardHandle
-  try {
-    guard = await attachReadGuardPuppeteer(browser as unknown as Parameters<typeof attachReadGuardPuppeteer>[0], opts.auditPath)
-  } catch (e) {
-    await (isCdp ? browser.disconnect() : browser.close()).catch(() => { /* ignore */ })
-    return { ok: false, summary: `read-guard attach failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` }
+  // fail-closed:guard 装不上即断开返回失败——不给无守卫的检索会话形态
+  // (唯一豁免:登录 bootstrap 显式 guard:false,见 TransportOptions 注释)
+  let guard: ReadGuardHandle | undefined
+  if (opts.guard !== false) {
+    try {
+      guard = await attachReadGuardPuppeteer(browser as unknown as Parameters<typeof attachReadGuardPuppeteer>[0], opts.auditPath)
+    } catch (e) {
+      await (isCdp ? browser.disconnect() : browser.close()).catch(() => { /* ignore */ })
+      return { ok: false, summary: `read-guard attach failed: ${e instanceof Error ? e.message.split('\n')[0] : String(e)}` }
+    }
+  }
+  // 标签页纪律:ownPage=自己开的新页(newPage:true)——用它,收尾按 closeOwnPage 关;
+  // 否则沿用既有首页(仅 persistent 兼容形态;cdp 检索/登录一律 newPage)
+  let ownPage: boolean = false
+  let page
+  if (opts.newPage) {
+    page = await browser.newPage()
+    ownPage = true
+  } else {
+    page = (await browser.pages())[0] ?? await browser.newPage()
   }
-  const page = (await browser.pages())[0] ?? (await browser.newPage())
   return {
     ok: true,
     browser,
     page,
-    guard,
+    guard: guard ?? { blockedCount: () => 0, requestCount: () => 0 },
     close: async () => {
+      // 自己开的标签页按 closeOwnPage 收尾(登录引导保持 false——登录页留给用户);
       // cdp:只断开连接,绝不关用户浏览器;persistent:关自己拉起的实例
+      if (ownPage && (opts.closeOwnPage ?? true)) {
+        await (page as { close(): Promise<void> }).close().catch(() => { /* ignore */ })
+      }
       await (isCdp ? browser.disconnect() : browser.close()).catch(() => { /* ignore */ })
     },
   }