@danceiny/gotry 0.0.1-rc.19 → 0.0.1-rc.21

package/dist/scripts/booking-copilot-dsh-planner-proof-tests.js

@@ -1,4 +1,5 @@
 import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
 import { DSH_EMBEDDED_BOOKING_TOOL_NAMES, buildDshPlannerEnvironment, createDshEmbeddedBookingPlanner } from '../src/booking-surface/dsh-planner.js';
 const availability = {
     initialized: true,
@@ -343,7 +344,8 @@ const sanitizedRefPort = {
                                 action: {
                                     ...searchRun,
                                     factRefs: [
-                                        'draft:destination=Dubai'
+                                        'draft:destination=Dubai',
+                                        'draft:destination.Dubai'
                                     ]
                                 }
                             }
@@ -373,9 +375,216 @@ const sanitizedDecisions = await sanitizedRef.plannerFactory(task).next({
 });
 assert.equal(sanitizedDecisions[0]?.kind, 'operation', 'sanitizer maps off-charset characters deterministically');
 assert.deepEqual(sanitizedDecisions[0].action?.factRefs, [
+    'modelref:43b07dd7fc80f4a9889b6c672c450a911086293cab2ef4058b95b53559a2d100',
     'draft:destination.Dubai'
 ]);
 await sanitizedRef.close();
+const collisionRawRefs = [
+    'fact://a/b',
+    'fact:..a?b'
+];
+const collisionResults = [];
+for (const [index, rawRef] of collisionRawRefs.entries()){
+    const collisionPlanner = await createDshEmbeddedBookingPlanner({
+        runPort: {
+            async run () {
+                return {
+                    finalResponse: '',
+                    events: [
+                        {
+                            type: 'tool/call',
+                            data: {
+                                name: 'booking_search_hotels',
+                                arguments: JSON.stringify({
+                                    decision: {
+                                        kind: 'operation',
+                                        action: {
+                                            ...searchRun,
+                                            actionId: `action-dsh-collision-${index}`,
+                                            factRefs: [
+                                                rawRef
+                                            ]
+                                        }
+                                    }
+                                })
+                            }
+                        }
+                    ]
+                };
+            },
+            async close () {}
+        }
+    });
+    const decisions = await collisionPlanner.plannerFactory(task).next({
+        task,
+        turn: {
+            schemaVersion: 'booking.surface',
+            kind: 'user.turn',
+            taskId: task.taskId,
+            turnId: `dsh-collision-${index}`,
+            workspace,
+            request: {
+                text: 'Find hotels'
+            }
+        }
+    });
+    const ref = decisions[0].action?.factRefs?.[0];
+    assert.match(ref ?? '', /^[A-Za-z0-9][A-Za-z0-9:._-]*$/, 'unsafe refs map to the runtime-safe pattern');
+    collisionResults.push(ref ?? '');
+    await collisionPlanner.close();
+}
+assert.notEqual(collisionResults[0], collisionResults[1], 'distinct unsafe raw refs retain collision-resistant aliases');
+assert.equal(collisionRawRefs[0].replace(/#/g, ':').replace(/[^A-Za-z0-9:._-]/g, '.'), collisionRawRefs[1].replace(/#/g, ':').replace(/[^A-Za-z0-9:._-]/g, '.'), 'the collision pair shares the legacy readable projection');
+async function assertFactRefsRejected(factRefs, message) {
+    const planner = await createDshEmbeddedBookingPlanner({
+        runPort: {
+            async run () {
+                return {
+                    finalResponse: '',
+                    events: [
+                        {
+                            type: 'tool/call',
+                            data: {
+                                name: 'booking_search_hotels',
+                                arguments: JSON.stringify({
+                                    decision: {
+                                        kind: 'operation',
+                                        action: {
+                                            ...searchRun,
+                                            factRefs
+                                        }
+                                    }
+                                })
+                            }
+                        }
+                    ]
+                };
+            },
+            async close () {}
+        }
+    });
+    await assert.rejects(planner.plannerFactory(task).next({
+        task,
+        turn: {
+            schemaVersion: 'booking.surface',
+            kind: 'user.turn',
+            taskId: task.taskId,
+            turnId: 'dsh-ref-rejection',
+            workspace,
+            request: {
+                text: 'Find hotels'
+            }
+        }
+    }), /planner_invalid_action/, message);
+    await planner.close();
+}
+const firstAlias = 'modelref:'.concat(createHash('sha256').update(collisionRawRefs[0], 'utf8').digest('hex'));
+await assertFactRefsRejected([
+    collisionRawRefs[0],
+    firstAlias
+], 'unsafe raw ref cannot alias a same-action reserved modelref');
+await assertFactRefsRejected([
+    collisionRawRefs[0],
+    collisionRawRefs[0]
+], 'repair-time duplicate factRefs are rejected by canonical validation');
+await assertFactRefsRejected([
+    'modelref:'.concat('a'.repeat(64))
+], 'direct modelref namespace input is reserved and rejected');
+const reservedRecovery = await createDshEmbeddedBookingPlanner({
+    runPort: {
+        async run () {
+            return {
+                finalResponse: JSON.stringify({
+                    kind: 'operation',
+                    action: {
+                        ...searchRun,
+                        factRefs: [
+                            'modelref:'.concat('b'.repeat(64))
+                        ]
+                    }
+                }),
+                events: []
+            };
+        },
+        async close () {}
+    }
+});
+const reservedRecoveryDecision = await reservedRecovery.plannerFactory(task).next({
+    task,
+    turn: {
+        schemaVersion: 'booking.surface',
+        kind: 'user.turn',
+        taskId: task.taskId,
+        turnId: 'dsh-reserved-recovery',
+        workspace,
+        request: {
+            text: 'Find hotels'
+        }
+    }
+});
+assert.equal(reservedRecoveryDecision[0]?.kind, 'error', 'finalResponse recovery rejects direct reserved modelref aliases');
+await reservedRecovery.close();
+let stableRefCall = 0;
+const stableRawRef = 'fact://same/raw';
+const stablePlanner = await createDshEmbeddedBookingPlanner({
+    runPort: {
+        async run () {
+            stableRefCall += 1;
+            return {
+                finalResponse: '',
+                events: [
+                    {
+                        type: 'tool/call',
+                        data: {
+                            name: 'booking_search_hotels',
+                            arguments: JSON.stringify({
+                                decision: {
+                                    kind: 'operation',
+                                    action: {
+                                        ...searchRun,
+                                        actionId: `action-dsh-stable-${stableRefCall}`,
+                                        factRefs: [
+                                            stableRawRef
+                                        ]
+                                    }
+                                }
+                            })
+                        }
+                    }
+                ]
+            };
+        },
+        async close () {}
+    }
+});
+const stableFirst = await stablePlanner.plannerFactory(task).next({
+    task,
+    turn: {
+        schemaVersion: 'booking.surface',
+        kind: 'user.turn',
+        taskId: task.taskId,
+        turnId: 'dsh-stable-1',
+        workspace,
+        request: {
+            text: 'Find hotels'
+        }
+    }
+});
+const stableSecond = await stablePlanner.plannerFactory(task).next({
+    task,
+    turn: {
+        schemaVersion: 'booking.surface',
+        kind: 'user.turn',
+        taskId: task.taskId,
+        turnId: 'dsh-stable-2',
+        workspace,
+        request: {
+            text: 'Find hotels again'
+        }
+    }
+});
+assert.equal(stableFirst[0].action?.factRefs?.[0], stableSecond[0].action?.factRefs?.[0], 'same raw ref is stable across actions and turns');
+await stablePlanner.close();
 const unauthorisedPort = {
     async run () {
         return {
@@ -458,7 +667,7 @@ const fragmentDecisions = await fragmentRef.plannerFactory(task).next({
 });
 assert.equal(fragmentDecisions[0]?.kind, 'operation', 'JSON-pointer fragment factRefs repair into the safe charset');
 assert.deepEqual(fragmentDecisions[0].action?.factRefs, [
-    `fact:..turn_${task.lastTurnId}.request`
+    `modelref:c7819d3c0c375fe1bd389006338b99be890fa8e3ddd9390f243cba8b5c139d9a`
 ]);
 await fragmentRef.close();
 const truncatedPort = {

package/dist/scripts/booking-copilot-runtime-proof-tests.js

@@ -142,7 +142,137 @@ const action = (id, revision = 0, extra = {})=>({
         input: {},
         ...extra
     });
-let id = 0;
+const repairedFactRef = `modelref:${'a'.repeat(64)}`;
+{
+    const root = mkdtempSync(join(tmpdir(), 'gotry-booking-v2-factref-action-authority-'));
+    const ledger = ensureLedger(root);
+    const rt = new BookingCopilotTaskRuntime(ledger, {
+        contextRefFactory: ()=>'ctx-v2'
+    });
+    const limitedWorkspace = {
+        ...workspace(0),
+        capabilities: {
+            surface: 'tenant',
+            allowedActions: [
+                'search.run'
+            ]
+        }
+    };
+    const t = rt.startTask({
+        ...turn('task-factref-action-authority'),
+        workspace: limitedWorkspace
+    });
+    const before = ledger.countEvents();
+    assert.throws(()=>rt.issueOperation(t.taskId, {
+            ...action('factref-forged-action', 0, {
+                factRefs: [
+                    repairedFactRef,
+                    'checkout.prepare'
+                ]
+            }),
+            kind: 'checkout.prepare',
+            input: {
+                offerRef: 'offer-a',
+                offerVersionRef: 'offer-a:v1',
+                verifiedOfferRef: 'verified-offer-a'
+            }
+        }), /unsupported_action/, 'factRefs cannot add an action to the surface allowlist');
+    assert.equal(ledger.countEvents(), before, 'rejected factRef authority does not persist an operation');
+    ledger.close();
+    rmSync(root, {
+        recursive: true,
+        force: true
+    });
+}{
+    const root = mkdtempSync(join(tmpdir(), 'gotry-booking-v2-factref-offer-authority-'));
+    const ledger = ensureLedger(root);
+    const rt = new BookingCopilotTaskRuntime(ledger, {
+        contextRefFactory: ()=>'ctx-v2'
+    });
+    const offerWorkspace = {
+        ...workspace(0),
+        visibleHotels: [
+            {
+                hotelRef: 'hotel-a',
+                name: 'Hotel A',
+                factRefs: []
+            }
+        ],
+        loadedOffers: [
+            loadedOffer('offer-a', 'hotel-a', 'offer-a:v1')
+        ]
+    };
+    const t = rt.startTask({
+        ...turn('task-factref-offer-authority'),
+        workspace: offerWorkspace
+    });
+    const before = ledger.countEvents();
+    assert.throws(()=>rt.issueOperation(t.taskId, {
+            ...action('factref-forged-version', 0, {
+                factRefs: [
+                    repairedFactRef,
+                    'offer-a:v2'
+                ]
+            }),
+            kind: 'offer.check',
+            input: {
+                offerRef: 'offer-a',
+                offerVersionRef: 'offer-a:v2'
+            }
+        }), /offer_version_not_loaded/, 'factRefs cannot promote an unloaded offer version');
+    assert.equal(ledger.countEvents(), before, 'rejected factRef version does not persist an operation');
+    ledger.close();
+    rmSync(root, {
+        recursive: true,
+        force: true
+    });
+}{
+    const root = mkdtempSync(join(tmpdir(), 'gotry-booking-v2-factref-verified-authority-'));
+    const ledger = ensureLedger(root);
+    const rt = new BookingCopilotTaskRuntime(ledger, {
+        contextRefFactory: ()=>'ctx-v2',
+        now: ()=>'2026-09-01T10:00:00.000Z'
+    });
+    const offerWorkspace = {
+        ...workspace(0),
+        visibleHotels: [
+            {
+                hotelRef: 'hotel-a',
+                name: 'Hotel A',
+                factRefs: []
+            }
+        ],
+        loadedOffers: [
+            loadedOffer('offer-a', 'hotel-a', 'offer-a:v1')
+        ],
+        selectedOfferRef: 'offer-a'
+    };
+    const t = rt.startTask({
+        ...turn('task-factref-verified-authority'),
+        workspace: offerWorkspace
+    });
+    const before = ledger.countEvents();
+    assert.throws(()=>rt.issueOperation(t.taskId, {
+            ...action('factref-forged-verified', 0, {
+                factRefs: [
+                    repairedFactRef,
+                    'verified-offer-a'
+                ]
+            }),
+            kind: 'checkout.prepare',
+            input: {
+                offerRef: 'offer-a',
+                offerVersionRef: 'offer-a:v1',
+                verifiedOfferRef: 'verified-offer-a'
+            }
+        }), /offer_version_not_loaded/, 'factRefs cannot create verified-offer authority');
+    assert.equal(ledger.countEvents(), before, 'rejected factRef verification does not persist an operation');
+    ledger.close();
+    rmSync(root, {
+        recursive: true,
+        force: true
+    });
+}let id = 0;
 const runtime = new BookingCopilotTaskRuntime(ensureLedger(stateRoot), {
     idFactory: (prefix)=>`${prefix}-${++id}`,
     now: ()=>'2026-09-01T10:00:00.000Z'
@@ -3997,7 +4127,7 @@ rmSync(offerRoot, {
     recursive: true,
     force: true
 });
-console.log('BOOKING COPILOT RUNTIME PROOF: task scope, receipt binding, approval authority/one-time, recovery, ingress/SSE session OK');
+console.log('BOOKING COPILOT RUNTIME PROOF: task scope, receipt binding, factRef non-authority, approval authority/one-time, recovery, ingress/SSE session OK');
 
 
 //# sourceURL=ts/scripts/booking-copilot-runtime-proof-tests.ts

package/dist/scripts/bootstrap-tests.js

@@ -1,6 +1,6 @@
 import assert from 'node:assert/strict';
 import { execFileSync, spawnSync } from 'node:child_process';
-import { mkdtempSync, readFileSync } from 'node:fs';
+import { mkdirSync, mkdtempSync, readFileSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 const repoRoot = join(import.meta.dirname, '..', '..');
@@ -76,7 +76,8 @@ const c6 = runBootstrap([
 ], {
     GOTRY_SETUP_EXTENSION: '0',
     GOTRY_ONBOARDING_TIMEOUT_MS: '600',
-    GOTRY_ONBOARDING_INTERVAL_MS: '200'
+    GOTRY_ONBOARDING_INTERVAL_MS: '200',
+    GOTRY_ONBOARDING_BRIDGE_PORTS: '0'
 });
 assert.equal(c6.code, 1, `wizard(超时)应 exit 1,实际 ${c6.code}\n${c6.out}`);
 assert.ok(c6.out.includes('gotry-wizard'), '应输出 [gotry-wizard] 标签');
@@ -187,7 +188,33 @@ console.log('9. calendar 子命令(setup 状态面 on/off/status + doctor 三态
     assert.match(r.stderr, /gotry_doctor/, '摘要带对话内指路');
     assert.match(r.stderr, /扩展=缺/, '缺失项人话=缺(降级类=半可用)');
 }console.log('10. 启动一次性 doctor 摘要(--summary:stderr 一行/零写盘/恒 exit 0)OK');
-console.log('BOOTSTRAP TESTS: 10/10 OK(扩展就位 + 跳过开关 / wizard --dry-run / wizard 真实 / 扩展分发通道 / doctor 体检面 / calendar setup 状态面 / 显式跳过 + auto 跳过 + 单项跳过 / 启动摘要)');
+{
+    const sbHome = mkdtempSync(join(tmpdir(), 'gotry-sidebar-test-'));
+    const prevHome = process.env.HOME;
+    process.env.HOME = sbHome;
+    try {
+        const { setupSidebar } = await import(bootstrap);
+        const r = await setupSidebar(async ()=>{
+            const sbPkgDir = join(sbHome, '.dsh/profiles/web/node_modules/dsh-better-sidebar');
+            mkdirSync(sbPkgDir, {
+                recursive: true
+            });
+            writeFileSync(join(sbPkgDir, 'package.json'), JSON.stringify({
+                name: 'dsh-better-sidebar',
+                version: '0.18.0'
+            }));
+            return {
+                ok: false,
+                error: 'exit 1'
+            };
+        });
+        assert.equal(r.ok, true, '安装器 exit 非 0 但状态已落盘 → 按落盘判成功(不误报失败)');
+    } finally{
+        if (prevHome === undefined) delete process.env.HOME;
+        else process.env.HOME = prevHome;
+    }
+}console.log('11. setupSidebar 落盘状态复核(pnpm 忽略构建脚本 exit 1 不再误报)OK');
+console.log('BOOTSTRAP TESTS: 11/11 OK(扩展就位 + 跳过开关 / wizard --dry-run / wizard 真实 / 扩展分发通道 / doctor 体检面 / calendar setup 状态面 / 显式跳过 + auto 跳过 + 单项跳过 / 启动摘要 / sidebar 落盘状态复核)');
 
 
 //# sourceURL=ts/scripts/bootstrap-tests.ts

package/dist/scripts/doctor-tests.js

@@ -1,7 +1,7 @@
 import assert from 'node:assert/strict';
 import { mkdtemp, mkdir, writeFile, rm, readFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
 import { runDoctorChecks, renderDoctorReportMd, nodeOk } from '../capabilities/doctor.js';
 import { apply } from '../src/index.js';
 const tmp = await mkdtemp(join(tmpdir(), 'gotry-doctor-test-'));
@@ -78,6 +78,60 @@ assert.match(md, /flyai\.open\.fliggy\.com 控制台申请正式 key/, 'prose
 assert.ok(!md.includes('`到 flyai'), 'prose 类 fix 不应整体包反引号');
 assert.match(md, /LLM key/, '让渡面(LLM key)照常入表');
 console.log('5. 报告渲染 OK');
+{
+    const hoist = await mkdtemp(join(tmpdir(), 'gotry-doctor-hoist-'));
+    const pkgRoot = join(hoist, 'node_modules', '@danceiny', 'gotry');
+    await mkdir(pkgRoot, {
+        recursive: true
+    });
+    await writeFile(join(pkgRoot, 'package.json'), JSON.stringify({
+        name: '@danceiny/gotry',
+        version: '0.0.1-test'
+    }), 'utf-8');
+    const stubPkg = async (dir, main)=>{
+        await mkdir(join(hoist, 'node_modules', dir, 'lib'), {
+            recursive: true
+        });
+        await writeFile(join(hoist, 'node_modules', dir, 'package.json'), JSON.stringify({
+            name: dir,
+            version: '0.0.0-test',
+            main
+        }), 'utf-8');
+        await writeFile(join(hoist, 'node_modules', dir, main), '// stub\n', 'utf-8');
+    };
+    await stubPkg('dsh-map-tools', 'lib/index.js');
+    await stubPkg('@deepseek-ai/dsh', 'lib/bin.js');
+    await stubPkg('@deepseek-ai/dsh-tool-ask-user', 'lib/index.js');
+    const rb = await runDoctorChecks({
+        repoRoot: pkgRoot,
+        homeDir: join(hoist, 'home-empty'),
+        env: {}
+    });
+    assert.equal(rb.items.find((i)=>i.id === 'map-tools').status, 'ok', '提升布局 map-tools 经包根解析链命中');
+    assert.equal(rb.items.find((i)=>i.id === 'ask-user').status, 'ok', '提升布局 ask-user 经 dsh 上下文解析链命中(误报修复)');
+    await rm(hoist, {
+        recursive: true,
+        force: true
+    });
+}console.log('5b. npm 提升布局解析链(map-tools/ask-user 误报修复)OK');
+{
+    const vend = await mkdtemp(join(tmpdir(), 'gotry-doctor-vendor-'));
+    const vendorEntry = join(vend, 'ts/dsh-runtime/vendor/dsh-map-tools/lib/index.js');
+    await mkdir(dirname(vendorEntry), {
+        recursive: true
+    });
+    await writeFile(vendorEntry, '// stub\n', 'utf-8');
+    const rc = await runDoctorChecks({
+        repoRoot: vend,
+        homeDir: join(vend, 'home-empty'),
+        env: {}
+    });
+    assert.equal(rc.items.find((i)=>i.id === 'map-tools').status, 'ok', 'vendor 副本命中(map-tools 随 tarball 分发)');
+    await rm(vend, {
+        recursive: true,
+        force: true
+    });
+}console.log('5c. 随包 vendor 布局(map-tools tarball 分发面)OK');
 const smokeRoot = await mkdtemp(join(tmpdir(), 'gotry-doctor-state-'));
 const registered = [];
 const ctx = {

package/dist/scripts/hbcli-e2e-tests.js

@@ -10,7 +10,7 @@ const SANDBOX_APP_KEY = 'hotelbyte_api_demo';
 const SANDBOX_APP_SECRET = 'hotelbyte_api_demo';
 const GUIDANCE = [
     'staicli(hbcli)账号配置指引:',
-    '  1. 安装 CLI(若缺):npx gotry setup(官方 install.sh → ~/.local/bin/hbcli)',
+    '  1. 安装 CLI(若缺):npx gotry setup(npm 装 staicli@npmjs → PATH 的 hbcli)',
     '  2. 快速试用(沙箱演示账号,来自 hotel-be 种子,user/domain/predefined_user_demo.go):',
     '     hbcli auth set-credentials --app-key hotelbyte_api_demo --app-secret hotelbyte_api_demo',
     '  3. 正式接入:向 HotelByte 申请专属 appKey/appSecret(hbk_*/hbs_*),替换第 2 步凭证;',

package/dist/scripts/hbcli-tests.js

@@ -86,7 +86,44 @@ await writeFile(fallback, JSON.stringify({
     if (!argLine.includes('destination-name') || !argLine.includes('room-occupancies')) {
         throw new Error(`FAIL: v0.3.0 旗标未对齐,实际 ${argLine.slice(0, 200)}`);
     }
-    console.log('5. v0.3.0 旗标(--destination-name/--room-occupancies)对齐 OK');
+    const rd = await searchHotels({
+        destination: '普吉',
+        checkIn: '2026-09-18',
+        checkOut: '2026-09-20'
+    }, {
+        hbcliBin: echoBin
+    });
+    const dateLine = JSON.stringify(rd);
+    if (!dateLine.includes('check-in') || !dateLine.includes('2026-09-18') || !dateLine.includes('check-out')) {
+        throw new Error(`FAIL: 日期旗标未传上游,实际 ${dateLine.slice(0, 240)}`);
+    }
+    assert.ok(rd.summary.includes('入住 2026-09-18 → 退房 2026-09-20'), 'summary 应回显日期槽位');
+    console.log('5. 旗标对齐(--destination-name/--room-occupancies/--check-in/--check-out)OK');
+}{
+    const { writeFileSync, chmodSync } = await import('node:fs');
+    const listBin = join(tmp, 'hbcli-list');
+    writeFileSync(listBin, `#!/bin/sh
+cat <<'JSON'
+{"list":[{"id":461850557,"name":{"en":"Jumeirah Beach Hotel","zh":"朱美拉海滩酒店"},"star":5,"minPrice":{"amount":100,"currency":"USD"}}],"basic":{"sessionId":"s1"}}
+JSON
+`);
+    chmodSync(listBin, 0o755);
+    const rl = await searchHotels({
+        destination: '迪拜',
+        checkIn: '2026-09-18',
+        checkOut: '2026-09-20'
+    }, {
+        hbcliBin: listBin
+    });
+    assert.equal(rl.via, 'hbcli-realtime');
+    assert.ok(rl.summary.includes('实时 1 家'), 'summary 应带家数');
+    assert.ok(rl.summary.includes('id=461850557'), '数据行应带 hotelId(hotel-rates 入参来源)');
+    assert.ok(rl.summary.includes('朱美拉海滩酒店'), '数据行应带 zh 名称');
+    assert.ok(rl.summary.includes('5★'), '数据行应带星级');
+    assert.ok(rl.summary.includes('100 USD'), '数据行应带最低价');
+    assert.match(rl.summary, /\[实时API:hbcli@/, 'summary 应带证据链时间戳');
+    assert.ok(rl.hotels !== null, 'hotels 结构化产物保留(UI/程序消费)');
+    console.log(`5b. 实时 summary 数据行 OK:${rl.summary.split('\n')[1]}`);
 }const r4 = await searchHotels({
     destination: '普吉岛'
 }, {

package/dist/scripts/health-watch-cli.js

@@ -15,6 +15,13 @@ function parseArgs(argv) {
     }
     if (Number.isNaN(args.timeoutMs) || args.timeoutMs < 0) args.timeoutMs = 120_000;
     if (Number.isNaN(args.intervalMs) || args.intervalMs < 1_000) args.intervalMs = 5_000;
+    const rawPorts = process.env.GOTRY_ONBOARDING_BRIDGE_PORTS;
+    if (rawPorts) {
+        const parsed = rawPorts.split(',').map((part)=>Number.parseInt(part.trim(), 10));
+        if (parsed.every((port)=>Number.isInteger(port) && port >= 0 && port <= 65535)) {
+            args.ports = parsed;
+        }
+    }
     return args;
 }
 async function main() {
@@ -24,7 +31,8 @@ async function main() {
         timeoutMs: args.timeoutMs,
         intervalMs: args.intervalMs,
         keepBridge: true,
-        businessProbe
+        businessProbe,
+        ports: args.ports
     });
     process.on('SIGINT', ()=>{
         watch.cancel('SIGINT');