@danceiny/gotry 0.0.1-rc.14 → 0.0.1-rc.15

package/README.md

@@ -46,7 +46,7 @@ GoTry turns "I want to go somewhere" into "can I, how, and at what true cost":
 | **Fact extraction** | LLM | Working hours semantics, leave semantics |
 | **Feasibility verdict** | **Z3 solver** | Which destinations are feasible / infeasible, why, and the **smallest change that makes them feasible** |
 | **Door-to-door true cost** | Solver | Real flight duration (incl. time zones) + early-wake penalty + transfer cost + arrival energy % |
-| **Evidence chain** | Render layer | Every number tagged: `[骨架:openflights]` / `[实时API:flyai]` / `[静态包:估算]` |
+| **Evidence chain** | Render layer | Every number carries a **source tag**: `[骨架:openflights]` = route existence verified against the public route database; `[实时API:flyai]` = pulled live from an API seconds ago; `[静态包:估算]` = a researched estimate (**not realtime — verify before booking**). On degradation the tag switches honestly — an estimate never poses as realtime |
 
 **Unlike a regular AI chat**, the LLM only translates and explains. **Decisions and arithmetic are computed by a Z3 solver**, not guessed.
 
@@ -78,7 +78,7 @@ cp .env.example .env                              # ② set LLM_API_KEY
 
 ---
 
-## 🧰 18 tools
+## 🧰 20 tools
 
 | Group | Tool | What it does |
 |---|---|---|
@@ -94,6 +94,7 @@ cp .env.example .env                              # ② set LLM_API_KEY
 | **Memory & reachability** | `gotry_motivation_save` | Persist motivation profile (evidence mandatory, anti-fabrication) |
 | | `gotry_wish_pool_add` / `gotry_wish_pool_list` | "next departure" wish pool + 0..1 conditional recall |
 | | `gotry_companion_save` · `gotry_trip_log` | companion profile / travel timeline |
+| **Artifacts** | `gotry_artifacts_list` / `gotry_artifacts_read` | Discover & view generated artifacts (async deliverables + working-dir markdown) as a line-numbered file view (read-only) |
 | **General external** | `gotry_web_search` · `gotry_video_subtitle` · `gotry_github_search` · `gotry_agent_reach` | web / subtitles / GitHub / all-channel external info (via Agent-Reach) |
 
 ---
@@ -131,6 +132,8 @@ Engine verdict:
 [static-pack:estimate] G7315/G7316 priced on Jul–Aug off-season rates
 ```
 
+> Tag guide: `[骨架:openflights]` means "this route can be flown" was verified against the public route database; `[实时API:*]` marks data pulled live seconds ago; `[静态包:估算]` flags an off-season estimate — **verify before booking**. Tags are attached by the render layer, never by the model.
+
 ---
 
 ## 🏛️ Architecture
@@ -138,7 +141,7 @@ Engine verdict:
 ```
 ┌──────────────────────────────────────────────────────────────┐
 │ L1  chat-as-interface; gates are in-message choice cards       │
-│ L2  orchestration  dsh runtime + GoTry plugin (ReAct); 18 tools│
+│ L2  orchestration  dsh runtime + GoTry plugin (ReAct); 20 tools│
 │ L3  domain  unified itinerary model + Z3 feasibility engine    │
 │ L4  data  static packs + hotelbyte-cli bridge + OpenFlights    │
 │ L5  governance  LoopX (objective / gates / evidence / quota)   │
@@ -147,9 +150,9 @@ Engine verdict:
 
 | Layer | Module | Role |
 |---|---|---|
-| L2 | `ts/src/index.ts` (dsh plugin) | 18 tools, time-anchor & memory-brief variables; execute isolation + consent gate + process guards |
+| L2 | `ts/src/index.ts` (dsh plugin) | 20 tools, time-anchor & memory-brief variables; execute isolation + consent gate + process guards |
 | L3 | `ts/src/unified.ts` · `py/gotry_feasibility/` | single solving entry (candidate enumeration + flight-chain Z3) |
-| L4 | `ts/capabilities/hbcli.ts` · `skeleton-check.ts` | realtime inventory bridge + OpenFlights skeleton (three-valued semantics) |
+| L4 | `ts/capabilities/effect.ts` · `hbcli.ts` · `skeleton-check.ts` | effect interpreter (backoff retry / circuit breaker / mock interpreter, issue #16) + realtime inventory bridge + OpenFlights skeleton (three-valued semantics) |
 | L5 | loopx governance | objective / gates / evidence / quota |
 
 > 📖 Full ADRs / evolution / debt ledger: [`docs/architecture.md`](docs/architecture.md) (Chinese — English versions planned for v0.1.0)
@@ -158,24 +161,23 @@ Engine verdict:
 
 ## ⚠️ Status & limitations
 
-**Ready (green, verifiable):**
+**Working today** (full-stack regression §1–§34 green; every item has deterministic tests):
 
-- ✅ **Z3 WASM race fixed** (`z3-shared.ts` single instance + session-level mutex; run-all §30 concurrency regression gate)
-- ✅ **Realtime flight/hotel/session retrieval** via the FlyAI official channel (flight/train/hotel; `GOTRY_REALTIME_PRICING=1` optionally overwrites priced legs in the solver)
-- ✅ **English output for the deterministic solve layer** (`GOTRY_LOCALE=en`, zero missing keys)
-- ✅ **Account session: consent gate + productized login + auto-detection** (see [🔐 Account session](#-account-session-consent--privacy))
-- License MIT; legacy shell frontend removed (dsh web is the only product surface)
+- **Z3 solving engine** — feasibility verdicts + door-to-door whole-cost; the historical concurrency race is fixed (§30 regression gate)
+- **Realtime retrieval** — flight/train/hotel (Fliggy official channel), destination/hotel catalogs, weather, live flight observation, route connectivity; realtime prices can overwrite solver prices (`GOTRY_REALTIME_PRICING=1`)
+- **Account session search** — Ctrip flights on your own logged-in Chrome; consent & privacy rules above (see 🔐 **Account session: consent & privacy**)
+- **Memory & reachability** — motivation profile / wish pool / companions / travel timeline; English output via `GOTRY_LOCALE=en`
 
-**Open (honest list):**
+**Open limitations** (as of 2026-08-29, honest list):
 
-- ⏳ **M3 Exit not closed** — engineering & distribution ready, but real seed-user evidence (50–200 person cohort) not yet accumulated; synthetic fixtures prove contracts, not business pass
-- ⏳ **Non-Chinese UI remnants** — the dsh web UI belongs to the host; tool result cards and persona dialogue localization await M4 calibration samples
-- ⏳ **Ctrip-hotel / Meituan session adapters** — flight done; hotel session surfaces await real login-state backfill (next tick)
+- ⏳ **M3 Exit not closed** — engineering & distribution ready, but real seed-user evidence (50–200 person cohort) not yet accumulated; automated tests prove contracts and formulas, not business pass
+- ⏳ **Ctrip-hotel / Meituan logged-in adapters** — flights done; hotel session surfaces await real login-state backfill (next tick)
+- ⏳ **Interface language** — English currently covers the deterministic solve-output layer only; the dsh host UI and dialogue surface belong to the host / calibration samples
 
 <details>
-<summary>📖 Full status ledger (transactional state / evidence contracts / milestone stance)</summary>
+<summary>📖 Deeper engineering state (ledger contracts / evidence contracts / milestone stance)</summary>
 
-Transactional state ledger (ADR-15, `gotry_async_terminal.v1`: 4/4→`succeeded`/ledger `settled`/exit 0; non-4/4→`failed`/`failed`/exit 2; replaying the terminal state recomputes nothing); dual-form architecture freeze (ADR-16: one ledger semantics for local+Web, tenant_id first-class); session-data-plane #21 field fixture scorer, dual-source contract and waiting-attach no-spend are in deterministic regression, real sf-01..08 not yet accepted; milestone stance (2026-08-29): M3 engineering & distribution ready but real seed-user evidence not closed, M4 proceeds under founder authorization without constituting M3 Exit proof, M5/M6 only after their Entry gates — details in [`docs/roadmap.md`](docs/roadmap.md) and [`docs/architecture.md`](docs/architecture.md).
+The authoritative state lives in the docs, not this README: transactional state ledger (ADR-15) + dual-form freeze (ADR-16: one ledger semantics for local+web); the M3 real-cohort evidence contract stands (fixtures don't count toward Exit; 50–200 real samples open the gate); the M4 paired-cohort value evidence contract (run-all §34 — synthetic data is never Exit evidence); async work-order terminal contract (`gotry_async_terminal.v1`: 4/4 → succeeded / ledger settled / exit 0). Details: [`docs/roadmap.md`](docs/roadmap.md) / [`docs/architecture.md`](docs/architecture.md) §1 and issues #19–#22.
 
 </details>
 
@@ -187,7 +189,7 @@ Transactional state ledger (ADR-15, `gotry_async_terminal.v1`: 4/4→`succeeded`
 ./scripts/run-all-tests.sh
 ```
 
-One-shot full-stack green (pure TS, no Python needed): golden engines · dialogue replay · cross-process async work-orders · plugin smoke · hbcli · process guards · weather · flights · Anything · probePoi · agent-reach · dual-path stability · time-awareness eval · memory domain · **Z3 race (§30) · realtime pricing (§31) · i18n catalog (§32) · M3 cohort evidence contract (§33) · M4 value evidence contract (§34)**.
+One-shot full-stack green (pure TS, no Python needed): golden engines · dialogue replay · cross-process async work-orders · plugin smoke · hbcli · process guards · weather · flights · Anything · probePoi · agent-reach · dual-path stability · time-awareness eval · memory domain · **Z3 race (§30) · realtime pricing (§31) · i18n catalog (§32) · M3 cohort evidence contract (§33) · M4 value evidence contract (§34) · M3 nightly evidence producer contract (§35)**.
 
 ---
 
@@ -207,4 +209,4 @@ Standard open-source flow: branch off latest `main` (`feat/ · fix/ · docs/ ·
 
 **Built with**: DeepSeek Harness 0.1.2-alpha.1 (vendored) · Cordis · Z3 (WASM) · loopx (pipx) · hotelbyte-cli · Agent-Reach v1.5.0 (`.venv/`) · OpenFlights · TypeScript
 
-**Last verified against `v0.0.1-rc.14` (2026-08-29)** — full-stack regression green §1-§34 (release flow: `scripts/publish-npm.sh`).
+**Last verified against `v0.0.1-rc.15` (2026-08-29)** — full-stack regression green §1-§36 (release flow: `scripts/publish-npm.sh`).

package/README.zh-CN.md

@@ -62,7 +62,7 @@ GoTry 把「想去哪」变成「能不能、怎么去」:
 | **事实抽取** | LLM | 工作窗口生效 + 休假语义识别 |
 | **可行性判定** | **Z3 求解器** | 哪些候选可行、哪些不可行、为什么、**最小改动让它可行** |
 | **门到门全成本** | 求解器 | 真实飞行时长(含时差)+ 醒来起夜惩罚 + 接驳代价 + 到达精力 % |
-| **证据链** | 渲染层 | 每个数字带标签:`[骨架:openflights]` / `[实时API:flyai]` / `[静态包:估算]` |
+| **证据链** | 渲染层 | 每个数字都带**来源标签**:`[骨架:openflights]`=公开航线数据校验过"这条线能飞";`[实时API:flyai]`=刚从实时接口拉的现价现况;`[静态包:估算]`=非实时的调研估算(**下单前请核实**)。降级时标签如实更换,估算绝不冒充实时 |
 
 **不像普通 AI 聊天**——LLM 只做理解和解释,**判定与算术是数学求解器**算的。
 
@@ -92,11 +92,13 @@ GoTry: 收到。先把约束记下来——
 [静态包:估算] G7315/G7316 价格按 7-8 月淡季估算
 ```
 
-> **Brief English summary**: input → engine verdicts (feasibility + whole-cost) → recommendation + wish-pool entry for infeasible candidates. Every numeric carries an evidence tag.
+> 标签导读:`[骨架:openflights]` 说的是"这条航线能飞"已被公开航线数据校验;`[实时API:*]` 说的是刚从实时接口拉回的当下数据;`[静态包:估算]` 提醒价格是淡季档估算——**订前核实**。
+
+> **Brief English summary**: input → engine verdicts (feasibility + whole-cost) → recommendation + wish-pool entry for infeasible candidates. Every numeric carries an evidence tag. See the 证据链 row above for what each tag means.
 
 ---
 
-## 🧰 18 个工具 — Tools
+## 🧰 20 个工具 — Tools
 
 | 组 | 工具 | 干什么 |
 |---|---|---|
@@ -112,6 +114,7 @@ GoTry: 收到。先把约束记下来——
 | **记忆与触达** | `gotry_motivation_save` | 动机画像落盘(evidence 强制,反幻觉) |
 | | `gotry_wish_pool_add` / `gotry_wish_pool_list` | 「下一次出发」愿望池 + 0..1 条件召回 |
 | | `gotry_companion_save` · `gotry_trip_log` | 同行人档案 / 旅行时间线 |
+| **产物** | `gotry_artifacts_list` / `gotry_artifacts_read` | 发现与查看已生成的产物(异步交付 + 工作目录 markdown),行号文件视图,只读 |
 | **通用外部** | `gotry_web_search` · `gotry_video_subtitle` · `gotry_github_search` · `gotry_agent_reach` | 网页/字幕/GitHub/全渠道外部信息(经 Agent-Reach) |
 
 ---
@@ -134,7 +137,7 @@ GoTry: 收到。先把约束记下来——
 ```
 ┌──────────────────────────────────────────────────────────────┐
 │ L1  对话即界面  chat-as-UI; gates 是消息内选择题                 │
-│ L2  编排  dsh 运行时 + GoTry 插件(ReAct);18 个工具            │
+│ L2  编排  dsh 运行时 + GoTry 插件(ReAct);20 个工具            │
 │ L3  领域  统一行程模型 + Z3 可行性引擎(枚举/Z3 双形态)        │
 │ L4  数据  静态数据包 + hotelbyte-cli 实时桥 + OpenFlights 骨架 │
 │ L5  治理  LoopX(objective / gates / evidence / quota)         │
@@ -143,9 +146,9 @@ GoTry: 收到。先把约束记下来——
 
 | 层 | 模块 | 角色 |
 |---|---|---|
-| L2 | `ts/src/index.ts`(dsh 插件) | 注册 18 工具,挂时间锚点/记忆 brief 变量;execute 异常隔离 + 授权闸 + 进程护栏 |
+| L2 | `ts/src/index.ts`(dsh 插件) | 注册 20 工具,挂时间锚点/记忆 brief 变量;execute 异常隔离 + 授权闸 + 进程护栏 |
 | L3 | `ts/src/unified.ts` · `py/gotry_feasibility/` | 唯一求解入口(候选枚举 + 航班链 Z3) |
-| L4 | `ts/capabilities/hbcli.ts` · `skeleton-check.ts` | 实时库存桥 + OpenFlights 骨架(三值语义) |
+| L4 | `ts/capabilities/effect.ts` · `hbcli.ts` · `skeleton-check.ts` | 效应解译层(退避重试/断路器/mock 解译器,issue #16)+ 实时库存桥 + OpenFlights 骨架(三值语义) |
 | L5 | loopx 治理面 | objective / gates / evidence / quota |
 
 > 📖 完整 ADR / 演进 / 债务清单: [`docs/architecture.md`](docs/architecture.md)
@@ -154,24 +157,23 @@ GoTry: 收到。先把约束记下来——
 
 ## ⚠️ 状态与限制 — Status & limitations
 
-**已就绪(全绿可验)**:
+**今天可用的能力**(全栈回归 §1–§34 全绿,每项都有确定性测试):
 
-- ✅ **Z3 WASM race 已根治**(`z3-shared.ts` 单实例+会话级互斥;run-all §30 并发回归闸)
-- ✅ **实时机票/酒店/会话检索**已接入:FlyAI 官方通道(机/火/酒;`GOTRY_REALTIME_PRICING=1` 可选把实时票价覆写进求解)
-- ✅ **英文面(工程层)**:`GOTRY_LOCALE=en` 一键切换,en 零缺键,金标准行为不变
-- ✅ **账号会话:授权闸 + 登录产品化 + 自动检测**(见上方 [🔐 账号会话](#-账号会话授权与隐私--account-consent))
-- ✅ License MIT;薄壳遗留已删除(dsh web 唯一产品面)
+- **Z3 求解引擎** —— 可行性判定 + 门到门全成本;历史并发竞态已根治(§30 并发回归闸)
+- **实时检索**:机票/火车/酒店(飞猪官方通道)、目的地/酒店目录、天气、航班观测、通航性校验;可选让实时票价覆写进求解(`GOTRY_REALTIME_PRICING=1`)
+- **账号会话检索**:你本人登录态查携程机票,授权与隐私规则见上方 **🔐 账号会话:授权与隐私** 小节
+- **记忆与触达**:动机画像 / 愿望池 / 同行人 / 旅行时间线;英文输出一键切换(`GOTRY_LOCALE=en`)
 
-**未收口(诚实清单)**:
+**已知限制**(截至 2026-08-29,诚实清单):
 
-- ⏳ **M3 Exit 未关闭** —— 工程与分发面就绪,但真实种子用户 evidence(50–200 人 cohort)未积累;合成 fixture 只证明合同不证明 business pass
-- ⏳ **中文之外的界面残余** —— dsh web 界面属宿主;工具结果卡与人格对话面的英文校准件挂 M4 校准样本
-- ⏳ **携程酒店/美团会话适配器** —— 机票已通,酒店会话面等登录态实测回填(下一 tick)
+- ⏳ **M3 Exit 未关闭** —— 工程与分发面就绪,但"真实种子用户"证据(50–200 人 cohort)尚未积累;自动化测试证明的是合同与公式,不是 business pass
+- ⏳ **携程酒店 / 美团的登录态会话适配** —— 机票已通,酒店面等登录态实测回填(下一个 tick)
+- ⏳ **界面语言** —— 英文界面仅覆盖求解确定性输出层;dsh 宿主界面与对话面属宿主/校准件
 
 <details>
-<summary>📖 展开完整状态表(账本/证据合同/里程碑口径)</summary>
+<summary>📖 更深的工程状态(账本合同 / 证据合同 / 里程碑口径)</summary>
 
-事务化状态账本(ADR-15,`gotry_async_terminal.v1`:4/4→`succeeded`/ledger `settled`/exit 0,非 4/4→`failed`/`failed`/exit 2,终态复诵零重算);双形态架构冻结(ADR-16:本地+Web 一套账本语义,tenant_id 一等字段);会话数据面 #21 的字段 fixture scorer、双源合同与 waiting-attach no-spend 已进确定性回归,真实 sf-01..08 尚未验收;里程碑口径(2026-08-29):M3 工程与分发面已就绪但真实种子用户 evidence 未收口,M4 由 founder 授权并行推进不构成 M3 Exit 证明,M5/M6 仅在各自 Entry gate 满足后启动——细则见 [`docs/roadmap.md`](docs/roadmap.md) 与 [`docs/architecture.md`](docs/architecture.md)。
+状态权威面在这里,README 不展开:事务化状态账本(ADR-15)+ 双形态冻结(ADR-16:本地+Web 一套账本语义);M3 真实 cohort 证据合同已立(fixture 不充当 Exit,真实 50–200 人样本即开 Exit);M4 paired-cohort 价值证据合同(run-all §34)合成数据不充当 Exit 证据;异步工单终态合同(`gotry_async_terminal.v1`:4/4→succeeded/ledger settled/exit 0)。细则见 [`docs/roadmap.md`](docs/roadmap.md) / [`docs/architecture.md`](docs/architecture.md) §1 与 #19–#22。
 
 </details>
 
@@ -230,4 +232,4 @@ GoTry: 收到。先把约束记下来——
 
 **Built with**: DeepSeek Harness 0.1.2-alpha.1 (vendored) · Cordis · Z3 (WASM) · loopx (pipx) · hotelbyte-cli · Agent-Reach v1.5.0 (`.venv/`) · OpenFlights · TypeScript
 
-**Last verified against `v0.0.1-rc.14`(2026-08-29)** — 全栈回归全绿 §1-§34(发布流程见 `scripts/publish-npm.sh`)。
+**Last verified against `v0.0.1-rc.15`(2026-08-29)** — 全栈回归全绿 §1-§36(发布流程见 `scripts/publish-npm.sh`)。

package/bin/gotry-bootstrap.js

@@ -4,6 +4,10 @@
  *   hbcli(hotelbyte-cli)  → 官方 install.sh(原生二进制,~/.local/bin/hbcli)
  *   agent-reach            → 官方 pip 安装 git+ upstream(包内 .venv,与 z3-solver 同址原则)
  *   flyai                  → 无需安装(npx 每次自拉 @fly-ai/flyai-cli)
+ *   dsh-better-sidebar     → dsh 宿主层插件市场组件(dshmarket.com #1 UI,18.9 万周装):
+ *                           dsh web 侧栏工作台(文件浏览/Markdown/Mermaid/PDF 预览)——
+ *                           gotry 产物(工单交付 md/行程 md)的成熟查看面(issue #25)。
+ *                           宿主层安装(dsh plugin → ~/.dsh/profiles/web),不进 gotry 依赖。
  *
  * 用法:
  *   node bin/gotry-bootstrap.js              # 显式安装(缺啥装啥;失败 exit 1)
@@ -14,6 +18,7 @@
  *   GOTRY_SETUP_SKIP=1            全部跳过
  *   GOTRY_SETUP_HBCLI=0           跳过 hbcli
  *   GOTRY_SETUP_REACH=0           跳过 agent-reach
+ *   GOTRY_SETUP_SIDEBAR=0         跳过 dsh-better-sidebar
  *
  * 契约:安装外部依赖永远不挡 gotry 本体——能力层各有降级路径(静态包/not-installed
  * verdict),自举失败只降级体验,不产生故障。凭证(hbcli auth / agent-reach 渠道
@@ -93,10 +98,42 @@ async function setupReach() {
   return { ok: true }
 }
 
+async function setupSidebar() {
+  say('[gotry-setup] dsh-better-sidebar(dsh web 侧栏工作台,产物查看面 issue #25)')
+  const installed = existsSync(join(homedir(), '.dsh/profiles/web/node_modules/dsh-better-sidebar/package.json'))
+  if (installed) { say('  ✓ 已安装(~/.dsh/profiles/web)'); return { ok: true } }
+  if (CHECK_ONLY) { say('  ✗ 未安装(--check-only 只报告)'); return { ok: true } }
+  const SIDEBAR_PKG = 'dsh-better-sidebar@latest'
+  // dsh CLI:本包依赖里的 @deepseek-ai/dsh 优先;解析不到走 npx 自拉(官方安装途径同款)
+  const { createRequire } = await import('node:module')
+  const require_ = createRequire(join(repoRoot, 'package.json'))
+  let launched = false
+  try {
+    const dshBin = require_.resolve('@deepseek-ai/dsh/lib/bin.js')
+    say(`  安装中(dsh plugin → web profile): ${SIDEBAR_PKG}`)
+    const r = await run(process.execPath, [dshBin, 'plugin', '--profile', 'web', 'add', SIDEBAR_PKG], { timeoutMs: 300_000 })
+    launched = true
+    if (r.ok) {
+      say('  ✓ 安装完成(gotry web 刷新浏览器即见右侧工作台;工作区里的产物 md 可直接预览)')
+      return { ok: true }
+    }
+    say(`  ✗ dsh plugin 安装失败(${r.error})——尝试 npx 途径`)
+  } catch { /* 本包未携带 @deepseek-ai/dsh */ }
+  if (!launched) say('  本包未携带 @deepseek-ai/dsh,走 npx 途径安装')
+  const r2 = await run('npx', ['-y', '--package', '@deepseek-ai/dsh', 'dsh', 'plugin', '--profile', 'web', 'add', SIDEBAR_PKG], { timeoutMs: 300_000 })
+  if (!r2.ok) {
+    say('  ✗ 安装失败——不影响 gotry:产物仍可在对话里说「看看我生成的行程」经 gotry_artifacts_list/read 查看;可稍后重试: npx gotry setup')
+    return { ok: false }
+  }
+  say('  ✓ 安装完成(gotry web 刷新浏览器即见右侧工作台)')
+  return { ok: true }
+}
+
 async function main() {
   if (process.platform === 'win32') {
     say('[gotry-setup] Windows 暂不支持自动安装(hbcli 上游仅 darwin/linux)。手动指引:')
     say(`  hbcli: ${HBCLI_INSTALL_CMD}(WSL);agent-reach: python -m venv .venv && .venv/Scripts/pip install ${REACH_INSTALL_URL}`)
+    say('  dsh-better-sidebar: npx -y --package @deepseek-ai/dsh dsh plugin --profile web add dsh-better-sidebar@latest')
     process.exit(AUTO ? 0 : 1)
   }
   if (AUTO && (process.env.CI || process.env.GOTRY_SETUP_SKIP === '1')) {
@@ -110,6 +147,8 @@ async function main() {
   else say('[gotry-setup] hbcli:GOTRY_SETUP_HBCLI=0 跳过')
   if (process.env.GOTRY_SETUP_REACH !== '0') results.push(await setupReach())
   else say('[gotry-setup] agent-reach:GOTRY_SETUP_REACH=0 跳过')
+  if (process.env.GOTRY_SETUP_SIDEBAR !== '0') results.push(await setupSidebar())
+  else say('[gotry-setup] dsh-better-sidebar:GOTRY_SETUP_SIDEBAR=0 跳过')
   say('[gotry-setup] flyai:无需安装(npx 每次自拉 @fly-ai/flyai-cli,免 key)')
   const failed = results.filter((r) => !r.ok).length
   if (failed > 0) {

package/dist/capabilities/artifacts.js

@@ -0,0 +1,217 @@
+import { readdir, readFile, stat } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { isAbsolute, join, resolve, sep } from 'node:path';
+import { openLedgerIfExists } from '../src/state-ledger.js';
+const MAX_LIST = 50;
+const MAX_WINDOW = 400;
+const MAX_BYTES = 2 * 1024 * 1024;
+const TEXT_EXT_LANG = {
+    md: 'markdown',
+    txt: 'text',
+    json: 'json',
+    jsonl: 'json',
+    csv: 'csv',
+    log: 'text',
+    yaml: 'yaml',
+    yml: 'yaml'
+};
+const DIR_DENY = [
+    'node_modules',
+    '.git'
+];
+function rootOf(stateRoot) {
+    return stateRoot === '.' ? process.cwd() : resolve(stateRoot);
+}
+function underRoot(p, root) {
+    const r = resolve(root);
+    return p === r || p.startsWith(r + sep);
+}
+function hasDeniedSegment(p) {
+    return p.split(sep).some((seg)=>DIR_DENY.includes(seg));
+}
+function asyncDeliverablePath(root, id) {
+    return join(root, 'gotry-state', 'async', `${id}.deliverable.md`);
+}
+function listRunsFromLedger(root, tenant, limit) {
+    const ledger = openLedgerIfExists(root, tenant);
+    if (!ledger) return [];
+    const rows = ledger.db.prepare('SELECT id, goal, status, deliverable, updated FROM workflow_runs WHERE tenant_id = ? ORDER BY updated DESC LIMIT ?').all(ledger.tenant, limit);
+    return rows.map((r)=>{
+        const file = asyncDeliverablePath(root, r.id);
+        return {
+            source: 'async-run',
+            id: r.id,
+            title: r.goal,
+            path: file,
+            status: r.status,
+            updated: r.updated,
+            bytes: r.deliverable?.length
+        };
+    });
+}
+async function listDeliverableFiles(root, limit) {
+    const dir = join(root, 'gotry-state', 'async');
+    let names = [];
+    try {
+        names = (await readdir(dir)).filter((n)=>n.endsWith('.deliverable.md'));
+    } catch  {
+        return [];
+    }
+    const entries = [];
+    for (const n of names.slice(0, limit * 2)){
+        const p = join(dir, n);
+        const st = await stat(p).catch(()=>null);
+        if (!st?.isFile()) continue;
+        entries.push({
+            source: 'async-run',
+            id: n.replace(/\.deliverable\.md$/, ''),
+            title: n.replace(/\.deliverable\.md$/, ''),
+            path: p,
+            status: existsSync(p.replace(/\.deliverable\.md$/, '.json')) ? 'pending-view' : 'legacy',
+            updated: new Date(st.mtimeMs).toISOString(),
+            bytes: st.size
+        });
+    }
+    return entries.sort((a, b)=>String(b.updated).localeCompare(String(a.updated)));
+}
+async function listCwdMarkdown(cwd, limit) {
+    let dirents;
+    try {
+        dirents = await readdir(cwd, {
+            withFileTypes: true
+        });
+    } catch  {
+        return [];
+    }
+    const entries = [];
+    for (const d of dirents){
+        if (!d.isFile() || !/\.md$/i.test(d.name) || d.name.startsWith('.')) continue;
+        const p = join(cwd, d.name);
+        const st = await stat(p).catch(()=>null);
+        if (!st) continue;
+        entries.push({
+            source: 'cwd-file',
+            id: d.name,
+            title: d.name.replace(/\.md$/i, ''),
+            path: p,
+            updated: new Date(st.mtimeMs).toISOString(),
+            bytes: st.size
+        });
+    }
+    return entries.sort((a, b)=>String(b.updated).localeCompare(String(a.updated))).slice(0, limit);
+}
+export async function listArtifacts(opts) {
+    const limit = Math.max(1, Math.min(opts.limit ?? 20, MAX_LIST));
+    const root = rootOf(opts.stateRoot);
+    const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();
+    const seenPath = new Set();
+    const merged = [];
+    for (const e of [
+        ...listRunsFromLedger(root, 'local', limit),
+        ...await listDeliverableFiles(root, limit),
+        ...await listCwdMarkdown(cwd, limit)
+    ]){
+        if (seenPath.has(e.path)) continue;
+        seenPath.add(e.path);
+        merged.push(e);
+    }
+    merged.sort((a, b)=>String(b.updated ?? '').localeCompare(String(a.updated ?? '')));
+    const total = merged.length;
+    return {
+        artifacts: merged.slice(0, limit),
+        total,
+        truncated: total > limit,
+        roots: [
+            root,
+            cwd
+        ]
+    };
+}
+export async function readArtifact(opts) {
+    const root = rootOf(opts.stateRoot);
+    const cwd = opts.cwd ? resolve(opts.cwd) : process.cwd();
+    const raw = String(opts.path ?? '').trim();
+    if (!raw) return {
+        ok: false,
+        error: 'path 必填(来自 gotry_artifacts_list 的 path,或异步工单 id)'
+    };
+    let text = null;
+    let filePath = '';
+    if (!raw.includes('/') && !raw.includes('\\') && !raw.includes('.')) {
+        const ledger = openLedgerIfExists(root, 'local');
+        const run = ledger?.db.prepare('SELECT id, goal, status, deliverable FROM workflow_runs WHERE id = ? AND tenant_id = ?').get(raw, ledger.tenant);
+        if (run?.deliverable) {
+            text = run.deliverable;
+            filePath = asyncDeliverablePath(root, raw);
+        } else {
+            const p = asyncDeliverablePath(root, raw);
+            if (existsSync(p)) {
+                filePath = p;
+                text = await readFile(p, 'utf-8');
+            }
+        }
+        if (text === null) return {
+            ok: false,
+            error: `工单 ${raw} 无 deliverable(未交付或不存在)`,
+            hint: '先 gotry_artifacts_list 看在册产物'
+        };
+    }
+    if (text === null) {
+        const candidates = isAbsolute(raw) ? [
+            resolve(raw)
+        ] : [
+            resolve(cwd, raw),
+            resolve(root, raw),
+            resolve(root, 'gotry-state', 'async', raw)
+        ];
+        const allowed = candidates.find((p)=>(underRoot(p, cwd) || underRoot(p, root)) && !hasDeniedSegment(p));
+        if (!allowed) {
+            return {
+                ok: false,
+                error: `路径越界:${raw}`,
+                hint: `只读 ${root} 与 dsh 工作目录内的文本产物`
+            };
+        }
+        const ext = allowed.slice(allowed.lastIndexOf('.') + 1).toLowerCase();
+        if (!TEXT_EXT_LANG[ext]) {
+            return {
+                ok: false,
+                error: `不支持的文件类型 .${ext}`,
+                hint: `白名单:${Object.keys(TEXT_EXT_LANG).join('/')}`
+            };
+        }
+        const st = await stat(allowed).catch(()=>null);
+        if (!st?.isFile()) return {
+            ok: false,
+            error: `文件不存在:${raw}`,
+            hint: '先 gotry_artifacts_list 看在册产物'
+        };
+        if (st.size > MAX_BYTES) return {
+            ok: false,
+            error: `文件过大(${st.size} bytes > ${MAX_BYTES})`
+        };
+        filePath = allowed;
+        text = await readFile(allowed, 'utf-8');
+    }
+    const allLines = text.split('\n');
+    const offset = Math.max(1, Math.min(opts.offset ?? 1, allLines.length));
+    const limit = Math.max(1, Math.min(opts.limit ?? MAX_WINDOW, MAX_WINDOW));
+    const slice = allLines.slice(offset - 1, offset - 1 + limit);
+    const ext = filePath.slice(filePath.lastIndexOf('.') + 1).toLowerCase();
+    return {
+        ok: true,
+        path: filePath,
+        offset,
+        lines: slice.map((t, i)=>({
+                number: offset + i,
+                text: t
+            })),
+        totalLines: allLines.length,
+        lang: TEXT_EXT_LANG[ext] ?? 'text',
+        content: slice.join('\n'),
+        windowed: allLines.length > offset - 1 + slice.length
+    };
+}
+
+
+//# sourceURL=/Users/bytedance/work/gotry/ts/capabilities/artifacts.ts