@danceiny/gotry 0.0.1-rc.20 → 0.0.1-rc.22

package/README.md

@@ -7,13 +7,14 @@
 
 GoTry is an AI travel agent for **"departure to next departure."** You tell it where you want to go and why; it interviews you about your working hours and existing bookings, then hands you a **formally verified itinerary** — computed by a Z3 solver, not guessed by a model.
 
+[![GitHub Stars](https://img.shields.io/github/stars/Danceiny/gotry?style=social)](https://github.com/Danceiny/gotry/stargazers)
 [![CI](https://github.com/Danceiny/gotry/actions/workflows/ci.yml/badge.svg)](https://github.com/Danceiny/gotry/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@danceiny/gotry)](https://www.npmjs.com/package/@danceiny/gotry)
 [![License: MIT](https://img.shields.io/badge/License-MIT-informational)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%E2%89%A5%2022.15-blue)](https://www.npmjs.com/package/@danceiny/gotry)
 [![Docs](https://img.shields.io/badge/docs-architecture.md-blue)](docs/architecture.md)
 
-**[What GoTry Does](#what-gotry-does)** · **[How It Works](#how-it-works)** · **[Tools](#tools)** · **[Demo](#demo)** · **[Benchmark](#how-mainstream-ai-answers-the-same-trip)** · **[Quick Start](#quick-start)** · **[Consent and Privacy](#consent-and-privacy)** · **[Trustworthy by Construction](#trustworthy-by-construction)** · **[Project Status](#project-status)** · **[Roadmap](#roadmap)** · **[For AI Agents](#for-ai-agents)** · **[Documentation](#documentation)** · **[License](#license)**
+**[What GoTry Does](#what-gotry-does)** · **[How It Works](#how-it-works)** · **[Tools](#tools)** · **[Demo](#demo)** · **[Benchmark](#how-mainstream-ai-answers-the-same-trip)** · **[Quick Start](#quick-start)** · **[Consent and Privacy](#consent-and-privacy)** · **[Trustworthy by Construction](#trustworthy-by-construction)** · **[Project Status](#project-status)** · **[Roadmap](#roadmap)** · **[For AI Agents](#for-ai-agents)** · **[Documentation](#documentation)** · **[License](#license)** · **[Star History](#star-history)**
 
 > **Tip for newcomers:** one command is enough to feel the difference — `npx @danceiny/gotry web`, open `http://127.0.0.1:3080`, and say *"I want three relaxing days in Dali."* The agent interviews you first; then the solver, not the model, decides what is feasible. Full walkthrough: [`docs/user-guide.md`](docs/user-guide.md).
 
@@ -194,7 +195,7 @@ Current release: **v0.0.1-rc.18** (npm `latest` and `rc` both point here; regist
 
 - **Z3 solving engine** — feasibility verdicts + door-to-door whole-cost; the historical concurrency race is fixed and regression-gated
 - **Realtime retrieval** — flights/trains/hotels (Fliggy official channel), destination/hotel catalogs, weather, live flight observation, route connectivity; realtime prices can overwrite solver prices (`GOTRY_REALTIME_PRICING=1`); exhausted FlyAI anonymous trial quota is classified `needs-setup` with key guidance (no blind retries)
-- **Dependency doctor** — `npx gotry doctor` (CLI) / `gotry_doctor` (in-chat tool): read-only health check of optional dependencies (extension / Agent-Reach / hbcli / FlyAI key / sidebar / dsh-calendar mount / dsh-map-tools & dsh-tool-ask-user presence) with exact repair guidance; `--fix` installs; LLM keys stay with the dsh host
+- **Dependency doctor** — `npx gotry doctor` (CLI) / `gotry_doctor` (in-chat tool): read-only health check of optional dependencies (extension / Agent-Reach / hbcli / FlyAI key / sidebar / dsh-calendar mount / dsh-map-tools & dsh-tool-ask-user presence) with exact repair guidance; map tools ship as a bundled MIT payload rather than an incompatible external npm peer; `--fix` installs; LLM keys stay with the dsh host
 - **Account-session search** — Ctrip flights **and hotels** + 12306 trains on your Chrome (hotels 2026-09-03: real logged-in prices via passive sniffing; trains 2026-09-03: public left-ticket query; interface surfaces calibrate with the first live session); observed runs scored every landed hit 13/13 with zero write attempts, while non-hits stay explicit `miss` records — no live-availability claim beyond that
 - **Extension install on demand** — `[GoTry Session Bridge](https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd)` is offered as a clickable link in the dsh UI when an account-session tool first needs it (one-click install + auto-update); the gotry side never runs a setup wizard
 - **Memory & reachability** — motivation profile / wish pool / companions / travel timeline; English solve output via `GOTRY_LOCALE=en`
@@ -205,7 +206,7 @@ Current release: **v0.0.1-rc.18** (npm `latest` and `rc` both point here; regist
 - **M3 Exit not closed** — engineering & distribution are ready, but real seed-user evidence (50–200 person cohort) has not been accumulated; automated tests prove contracts and formulas, not business pass
 - **Hotel session adapters** — Ctrip-hotel / Meituan logged-in surfaces await real login-state backfill; flights are done
 - **Interface language** — English covers the deterministic solve-output layer; the dsh host UI and dialogue surface belong to the host / calibration samples
-- **External benchmark generalization** — every frozen external run to date remains diagnostic-only (no score, no uplift claim). The bridge now combines the generic `tools/call/errors` recovery surface with per-tool typed descriptors, exact result/domain/failure conformance, and a latest-response terminal fence; the round-by-round engineering ledger lives in [`docs/evaluation/benchmark-environment-bridge.md`](docs/evaluation/benchmark-environment-bridge.md)
+- **External benchmark generalization** — every frozen external run to date remains diagnostic-only (no score, no uplift claim). After the Round 10 `glm-5.3-flash` visibility diagnosis on main `c843fae` (57 empty `{}` calls), Round 11 keeps execution validation exact against frozen descriptors while exposing a flat model-facing `tools/call/errors` wire with descriptor-derived tool names and generic object arguments; the round-by-round engineering ledger lives in [`docs/evaluation/benchmark-environment-bridge.md`](docs/evaluation/benchmark-environment-bridge.md)
 - **Booking** — nothing bookable ships today; M5 opens only through WriteGate and the booking-saga FSM
 
 <details>
@@ -280,6 +281,16 @@ Program-level context: [`docs/gotry-master-outline.md`](docs/gotry-master-outlin
 
 **MIT** — same as upstream dsh. See [LICENSE](LICENSE).
 
+## Star History
+
+<a href="https://www.star-history.com/?repos=danceiny%2Fgotry&type=date&legend=top-left">
+ <picture>
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=danceiny/gotry&type=date&theme=dark&legend=top-left" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=danceiny/gotry&type=date&legend=top-left" />
+   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=danceiny/gotry&type=date&legend=top-left" />
+ </picture>
+</a>
+
 ---
 
 **Built with**: DeepSeek Harness 0.1.2-alpha.3 (root-pinned) · Cordis · Z3 (WASM) · loopx (pipx) · hotelbyte-cli · Agent-Reach v1.5.0 · OpenFlights · TypeScript

package/README.zh-CN.md

@@ -7,13 +7,14 @@
 
 **GoTry 是「从出发到下一次出发」的 AI 旅行 Agent**:你用一句话说想去哪、为什么想出发;它先问清楚你的工作窗口和已订资源,再用 **Z3 数学求解器**给你一份经过形式化验证的行程方案——是算出来的,不是模型猜的。
 
+[![GitHub Stars](https://img.shields.io/github/stars/Danceiny/gotry?style=social)](https://github.com/Danceiny/gotry/stargazers)
 [![CI](https://github.com/Danceiny/gotry/actions/workflows/ci.yml/badge.svg)](https://github.com/Danceiny/gotry/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@danceiny/gotry)](https://www.npmjs.com/package/@danceiny/gotry)
 [![License: MIT](https://img.shields.io/badge/License-MIT-informational)](LICENSE)
 [![Node](https://img.shields.io/badge/node-%E2%89%A5%2022.15-blue)](https://www.npmjs.com/package/@danceiny/gotry)
 [![Docs](https://img.shields.io/badge/docs-architecture.md-blue)](docs/architecture.md)
 
-**[它做什么](#它做什么)** · **[工作原理](#工作原理)** · **[工具](#工具)** · **[一段对话](#一段对话)** · **[同题横评](#与主流-ai-同题横评产品人格从哪来)** · **[快速开始](#快速开始)** · **[账号会话:授权与隐私](#账号会话授权与隐私)** · **[构造上可信](#构造上可信)** · **[状态与限制](#状态与限制)** · **[路线图](#路线图)** · **[给 AI Agent](#给-ai-agent)** · **[文档](#文档)** · **[License](#license)**
+**[它做什么](#它做什么)** · **[工作原理](#工作原理)** · **[工具](#工具)** · **[一段对话](#一段对话)** · **[同题横评](#与主流-ai-同题横评产品人格从哪来)** · **[快速开始](#快速开始)** · **[账号会话:授权与隐私](#账号会话授权与隐私)** · **[构造上可信](#构造上可信)** · **[状态与限制](#状态与限制)** · **[路线图](#路线图)** · **[给 AI Agent](#给-ai-agent)** · **[文档](#文档)** · **[License](#license)** · **[Star History](#star-history)**
 
 > **新读者提示**:一条命令就能感受差别——`npx @danceiny/gotry web`,打开 `http://127.0.0.1:3080`,说一句「我想去大理躺三天」。Agent 会先访谈你;然后由求解器(而非模型)判定什么可行。完整走查见 [`docs/user-guide.md`](docs/user-guide.md)。
 
@@ -143,7 +144,7 @@ npx @danceiny/gotry web
 |---|---|---|
 | Web 对话(推荐) | `npx @danceiny/gotry web` | 持续多轮规划,看推理可视化 → `:3080` |
 | headless 一问一答 | `npx @danceiny/gotry "我想从深圳休整两天,预算 3000"` | 脚本 / CI / 定向调试 → stdout |
-| 依赖体检 | `npx @danceiny/gotry doctor`(`--fix` 补装) | 可选渠道不好使时:体检扩展 / Agent-Reach / hbcli / FlyAI key / sidebar,逐项给精确修复指引,报告落 `gotry-state/doctor-report.md`(侧栏工作台可预览) |
+| 依赖体检 | `npx @danceiny/gotry doctor`(`--fix` 补装) | 可选渠道不好使时:体检扩展 / Agent-Reach / hbcli / FlyAI key / sidebar / dsh-calendar / dsh-map-tools / dsh-tool-ask-user,逐项给精确修复指引,报告落 `gotry-state/doctor-report.md`(侧栏工作台可预览) |
 
 前置:Node ≥ 22.15。LLM 凭证由 dsh 宿主 UI 配,OpenAI 兼容端点(MiniMax/中转/自建网关)走 dsh 的模型设置。首启 6–15 秒属正常冷启动;`:3080` 被占先腾端口;异常退出会留证据到 `gotry-state/incidents.jsonl`(不静默)。
 
@@ -190,7 +191,7 @@ node scripts/build-dist.mjs                       # 构建 JS runtime
 
 - **Z3 求解引擎** —— 可行性判决 + 门到门全成本;历史并发竞态已根治并进回归闸
 - **实时检索** —— 机票/火车/酒店(飞猪官方通道)、目的地/酒店目录、天气、航班观测、通航性校验;实时票价可覆写求解价(`GOTRY_REALTIME_PRICING=1`);飞猪匿名试用额度达限归类 `needs-setup` 并带配 key 指引(不盲重试)
-- **依赖体检** —— `npx gotry doctor`(CLI)/ `gotry_doctor`(对话内工具):可选依赖(扩展 / Agent-Reach / hbcli / FlyAI key / sidebar)只读体检 + 精确补装指引;`--fix` 补装;LLM key 仍归 dsh 宿主管
+- **依赖体检** —— `npx gotry doctor`(CLI)/ `gotry_doctor`(对话内工具):可选依赖(扩展 / Agent-Reach / hbcli / FlyAI key / sidebar / dsh-calendar / dsh-map-tools / dsh-tool-ask-user)只读体检 + 精确补装指引；地图工具以 MIT payload 随包交付，不再引入与 alpha.3 冲突的外部 npm peer；`--fix` 补装;LLM key 仍归 dsh 宿主管
 - **账号会话检索** —— 你本人登录态查携程机票/酒店 + 12306 火车(酒/火 2026-09-03 实装:酒店为被动嗅探登录态真实价,火车为 12306 公开余票查询面;接口面随首个真会话校准);观测轮次中所有可评分 hit 全过、ReadGuard 零写,非 hit 保持显式 `miss` 记录——不作超出此口径的实时可售声明
 - **扩展按需装** —— `[GoTry Session Bridge](https://chromewebstore.google.com/detail/gotry-session-bridge/oeajpiccmonococjcegddlooeeohlbgd)` 由 dsh 宿主 UI 在账号会话工具首次需要时以可点链接给出(Chrome 商店一键装 + 自动更新);gotry 这边不跑 setup wizard、不开 chrome://extensions、不动剪贴板
 - **记忆与触达** —— 动机画像 / 愿望池 / 同行人 / 旅行时间线;英文输出一键切换(`GOTRY_LOCALE=en`)
@@ -201,7 +202,7 @@ node scripts/build-dist.mjs                       # 构建 JS runtime
 - **M3 Exit 未关闭** —— 工程与分发面就绪,但真实种子用户证据(50–200 人 cohort)尚未积累;自动化测试证明的是合同与公式,不是 business pass
 - **酒店会话适配** —— 携程酒店/美团登录态面等实测回填;机票已通
 - **界面语言** —— 英文仅覆盖求解确定性输出层;dsh 宿主界面与对话面属宿主/校准件
-- **外部 benchmark 泛化** —— 迄今所有冻结外部运行均仅 diagnostic（无分数、无 uplift 声明）。bridge 现已合并通用 `tools/call/errors` 恢复面、逐工具 typed descriptor、严格 result/domain/failure 分流与 latest-response terminal fence；逐轮工程台账见 [`docs/evaluation/benchmark-environment-bridge.md`](docs/evaluation/benchmark-environment-bridge.md)
+- **外部 benchmark 泛化** —— 迄今所有冻结外部运行均仅 diagnostic（无分数、无 uplift 声明）。Round 10 的 `glm-5.3-flash`（main `c843fae`）已诊断为可见性失败（57 次空 `{}` 调用）；Round 11 仅把模型面对的 wire 展平为 `tools/call/errors`、descriptor 派生工具名枚举和 generic object 参数，执行时仍对冻结 descriptor 做 exact 校验；逐轮工程台账见 [`docs/evaluation/benchmark-environment-bridge.md`](docs/evaluation/benchmark-environment-bridge.md)
 - **预订** —— 今天没有任何可下单路径;M5 只经 WriteGate 与 booking-saga 状态机启封
 
 <details>
@@ -276,6 +277,16 @@ npx tsx scripts/evaluation-cadence-tests.ts    # 确定性节奏策略/planner
 
 **MIT**——与上游 dsh 一致。文本见 [LICENSE](LICENSE)。
 
+## Star History
+
+<a href="https://www.star-history.com/?repos=danceiny%2Fgotry&type=date&legend=top-left">
+ <picture>
+   <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=danceiny/gotry&type=date&theme=dark&legend=top-left" />
+   <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=danceiny/gotry&type=date&legend=top-left" />
+   <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=danceiny/gotry&type=date&legend=top-left" />
+ </picture>
+</a>
+
 ---
 
 **Built with**: DeepSeek Harness 0.1.2-alpha.3 (root-pinned) · Cordis · Z3 (WASM) · loopx (pipx) · hotelbyte-cli · Agent-Reach v1.5.0 · OpenFlights · TypeScript

package/bin/gotry-bootstrap.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 /**
  * gotry 外部依赖自举(founder 2026-08-29 指令:安装 gotry 时按上游本身的方式装好外部依赖):
- *   hbcli(hotelbyte-cli)  → 官方 install.sh(原生二进制,~/.local/bin/hbcli)
+ *   hbcli(hotelbyte-cli)  → npm 优先(staicli@npmjs;Node ≥ 20),原生二进制 install.sh 兜底
  *   agent-reach            → 官方 pip 安装 git+ upstream(包内 .venv,与 z3-solver 同址原则)
  *   flyai                  → 无需安装(npx 每次自拉 @fly-ai/flyai-cli)
  *   dsh-better-sidebar     → dsh 宿主层插件市场组件(dshmarket.com #1 UI,18.9 万周装):
@@ -70,7 +70,9 @@ const WIZARD_DRY_RUN = process.argv.includes('--dry-run')
 const EXT_FROM_ARG = (process.argv.find((a) => a.startsWith('--extension-from=')) ?? '').split('=')[1]
 const EXTENSION_FROM = EXT_FROM_ARG === 'github' || EXT_FROM_ARG === 'bundled' ? EXT_FROM_ARG : process.env.GOTRY_EXTENSION_SOURCE === 'github' ? 'github' : 'bundled'
 
-const HBCLI_INSTALL_CMD = 'curl -fsSL https://github.com/hotelbyte-com/docs/releases/latest/download/install.sh | bash'
+// hbcli 安装通道:npm 优先(staicli@npmjs 双轨;显式 registry 防 bnpm 404),install.sh 兜底
+const HBCLI_NPM_INSTALL_CMD = 'npm install -g staicli --registry=https://registry.npmjs.org/'
+const HBCLI_INSTALL_CMD = HBCLI_NPM_INSTALL_CMD
 const REACH_INSTALL_URL = 'git+https://github.com/Panniantong/Agent-Reach.git'
 
 /** 带超时的子进程(inherit stdio 让用户看见上游安装进度) */
@@ -99,20 +101,59 @@ function probe(cmd, args, timeoutMs = 10_000) {
 
 const say = (s) => console.log(s)
 
+/** hbcli 最低版本(可用 GOTRY_MIN_HBCLI_VERSION 覆盖)。
+ * 0.0.3 修了 portal-ticket fallback bug(issue #142):低于该版本的 hbcli
+ * 会把 literal "stored-ticket" 当 bearer 发到 hotel-be,让 trade.* /
+ * search/checkAvail 等 @permission: openapi 端点全部 401。 */
+const MIN_HBCLI_VERSION = process.env.GOTRY_MIN_HBCLI_VERSION ?? '0.0.3'
+
+function parseVersion(v) {
+  const m = String(v || '').match(/(\d+)\.(\d+)\.(\d+)/)
+  return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null
+}
+
+function versionAtLeast(v, min) {
+  // v 可能是 hbcliVersion 已解析的数组,也可能是原始字符串——两者都接受
+  const a = Array.isArray(v) ? v : parseVersion(v); const b = parseVersion(min)
+  if (!a || !b) return false
+  for (let i = 0; i < 3; i++) { if (a[i] !== b[i]) return a[i] > b[i] }
+  return true
+}
+
+async function hbcliVersion(bin) {
+  const cmd = bin === 'hbcli(PATH)' ? 'hbcli' : bin
+  return new Promise((resolve) => {
+    const child = spawn(cmd, ['--version'], { stdio: ['ignore', 'pipe', 'ignore'] })
+    let out = ''
+    let done = false
+    const timer = setTimeout(() => { if (!done) { done = true; try { child.kill('SIGKILL') } catch { /* ignore */ } resolve(null) } }, 10_000)
+    child.on('error', () => { if (!done) { done = true; clearTimeout(timer); resolve(null) } })
+    child.stdout?.on('data', (d) => { out += d.toString() })
+    child.on('exit', (code) => { if (!done) { done = true; clearTimeout(timer); resolve(code === 0 ? parseVersion(out.trim()) : null) } })
+  })
+}
+
 async function setupHbcli() {
-  say('[gotry-setup] hbcli(hotelbyte-cli,可选酒店实时源)')
+  say(`[gotry-setup] hbcli(hotelbyte-cli,可选酒店实时源;需 ≥ v${MIN_HBCLI_VERSION},低于会踩 issue #142 的 401)`)
   const candidates = ['hbcli', join(homedir(), '.local/bin/hbcli'), join(homedir(), '.staicli/current/hbcli')]
   const present = candidates.some((p) => existsSync(p)) && (await probe(candidates[0], ['version']) || await probe(candidates[1], ['version']) || await probe(candidates[2], ['version']))
   const credFile = join(homedir(), '.staicli', 'credentials.json')
   if (present) {
-    say('  ✓ 已安装')
+    const hit = candidates.find((p) => existsSync(p)) || 'hbcli'
+    const v = await hbcliVersion(hit)
+    if (v && !versionAtLeast(v, MIN_HBCLI_VERSION)) {
+      say(`  ✗ 版本过旧(v${v.join('.')} < v${MIN_HBCLI_VERSION})——@permission: openapi 端点(trade.* / search/checkAvail)会 401(issue #142)`)
+      say(`    升级: npm install -g staicli --registry=https://registry.npmjs.org/`)
+      return { ok: CHECK_ONLY ? true : false }
+    }
+    say(`  ✓ 已安装(v${v ? v.join('.') : '?'})`)
     if (existsSync(credFile)) say('  ✓ 凭证已配置(自检: hbcli auth whoami)')
     else say('  ✗ 凭证未配置——酒店检索将用内置静态包(非实时),账号配置见下方指引')
     if (CHECK_ONLY) say('  (--check-only 只报告,不安装)')
     return { ok: true }
   }
   if (CHECK_ONLY) { say('  ✗ 未安装(--check-only 只报告)'); return { ok: true } }
-  say(`  安装中(官方脚本): ${HBCLI_INSTALL_CMD}`)
+  say(`  安装中(npm,staicli@npmjs): ${HBCLI_INSTALL_CMD}`)
   const r = await run('bash', ['-c', HBCLI_INSTALL_CMD], { timeoutMs: 120_000 })
   if (!r.ok) { say(`  ✗ 安装失败(${r.error})——不影响 gotry,酒店检索将用内置静态包;可稍后重试: npx gotry setup`); return { ok: false } }
   const binDir = join(homedir(), '.local/bin')
@@ -278,14 +319,19 @@ async function doctorChecks() {
   const reachOk = existsSync(reachBin)
   const reachLevel = reachOk ? 'ok' : existsSync(venvPython) ? 'degraded' : 'missing'
   items.push({ label: 'Agent Reach(网页/社媒读取)', ok: reachOk, level: reachLevel, detail: reachOk ? `已安装(${reachBin})` : reachLevel === 'degraded' ? '.venv 在但缺 agent-reach 包——gotry_agent_reach / gotry_web_search 读页会失败' : '未装配——gotry_agent_reach / gotry_web_search(读网页)/ gotry_video_subtitle / gotry_github_search 全部不可用', fix: reachOk ? undefined : 'npx gotry doctor --fix' })
-  // hbcli(裸名靠 PATH 探测;绝对路径 existsSync)
+  // hbcli(裸名靠 PATH 探测;绝对路径 existsSync;版本 < MIN_HBCLI_VERSION 视为 missing,见 issue #142)
   let hbBin = ''
   for (const p of ['hbcli', join(homedir(), '.local/bin/hbcli'), join(homedir(), '.staicli/current/hbcli')]) {
     if (p === 'hbcli') { if (await probe(p, ['version'])) { hbBin = 'hbcli(PATH)'; break } } else if (existsSync(p)) { hbBin = p; break }
   }
   if (hbBin) {
-    const whoami = await probe(hbBin === 'hbcli(PATH)' ? 'hbcli' : hbBin, ['auth', 'whoami'])
-    items.push({ label: 'hbcli(酒店实时源)', ok: whoami, level: whoami ? 'ok' : 'degraded', detail: whoami ? `已安装且凭证有效(${hbBin})` : '二进制在,但凭证未配置/失效——酒店检索将降级静态包(非实时)', fix: whoami ? undefined : 'hbcli auth set-credentials --app-key hotelbyte_api_demo --app-secret hotelbyte_api_demo(快速试用沙箱;正式 key 向 HotelByte 申请)' })
+    const v = await hbcliVersion(hbBin)
+    if (v && !versionAtLeast(v, MIN_HBCLI_VERSION)) {
+      items.push({ label: 'hbcli(酒店实时源)', ok: false, level: 'missing', detail: `版本过旧(v${v.join('.')} < v${MIN_HBCLI_VERSION})——trade.* / search/checkAvail 会 401(issue #142)`, fix: 'npm install -g staicli --registry=https://registry.npmjs.org/' })
+    } else {
+      const whoami = await probe(hbBin === 'hbcli(PATH)' ? 'hbcli' : hbBin, ['auth', 'whoami'])
+      items.push({ label: 'hbcli(酒店实时源)', ok: whoami, level: whoami ? 'ok' : 'degraded', detail: whoami ? `已安装且凭证有效(${hbBin}, v${v ? v.join('.') : '?'})` : '二进制在,但凭证未配置/失效——酒店检索将降级静态包(非实时)', fix: whoami ? undefined : 'hbcli auth set-credentials --app-key hotelbyte_api_demo --app-secret hotelbyte_api_demo(快速试用沙箱;正式 key 向 HotelByte 申请)' })
+    }
   } else {
     items.push({ label: 'hbcli(酒店实时源)', ok: false, level: 'missing', detail: '未安装——酒店检索降级静态包(公开渠道估算,非实时,仅覆盖内置场景)', fix: 'npx gotry doctor --fix' })
   }

package/cordis.gotry-patch.yml

@@ -17,10 +17,10 @@
     # {ask-user-insert} ← inner 运行时填充(dsh-user-questions 服务 + ask_user_question
     # 工具,结构化澄清卡);解析失败整块剔除
 
-# 注:insert 里 dsh-map-tools 的 name 是占位符,bin/gotry-inner.js 运行时重写为
-# 绝对路径(source/package 优先依赖解析;legacy vendor 仅作兼容解析,裸包名绕
-# exports 子路径限制);
-# 依赖缺失时该条目整块剔除,不挡启动。地图/路线/POI 工具,零 key 走 OSRM/OSRM。
+# 注:insert 里 dsh-map-tools 的 name 是占位符,bin/gotry-inner.js 运行时优先重写为
+# 随包 ts/dsh-runtime/vendor/dsh-map-tools/lib/index.js 的绝对路径(source/package
+# 均可用;旧 source/npm 依赖路径仅作兼容回退)。payload 缺失时该条目整块剔除,
+# 不挡启动。地图/路线/POI 工具,零 key 走 OSM/OSRM。
 
 # GoTry 成品人格:行为契约=产品语义
 - id: system-prompt
@@ -52,7 +52,9 @@
       直接点明(如「现在正是雨季」而非把当前月份当成远期选项);用户给的绝对日期
       早于今天时,主动点明已过并请用户裁决(笔误还是指明年),不静默顺延;
       周/月/节日表述一律按锚点卡换算,不自算;用户说「在 X 年内完成」时,
-      只推荐今天之后的时段,今天之前的一律排除。
+      只推荐今天之后的时段,今天之前的一律排除;
+      澄清卡/访谈/选项里向用户列出的候选时段示例(节日/周末/月份)同样只取
+      今天之后的——已过的节日不进示例枚举,不拿过去节日当「想用的时候」的候选。
       (9)年界断言:「元旦/新年/春节」先断年再谈——今天是 {{current_date}},
       「2026 年内」不含 2027-01-01 元旦;农历节日先换算公历日期再判断归属年份。
       (10)不重复问:预算/日期/窗口/出发地等已问过或用户已给的信息,会话内
@@ -119,3 +121,8 @@
       (22)到达账必达:红眼/凌晨起飞、或落地当天有硬安排(上班/办事)的航段,解释方案时必须
       显式给出到达账——当地到达时刻(含日期偏移)、时差、到达精力与落地后可用时长,并主动给
       前一晚落脚建议;时刻表正确不等于行程可行。
+      (23)子任务等待纪律:派发后台子任务(subagent)后,它的回执 id 是子代理会话 id,
+      不是 job_output/job_kill 的后台 job id——对子代理绝不调用 job_output/job_kill
+      轮询或停止(会撞 unknown job 硬错误);子任务完成通知会自动送达当前会话,耐心做
+      别的独立步骤;要给子代理追加输入用 send_message。job_output/job_kill 只用于
+      回执明写「background job」的后台任务。

package/dist/capabilities/doctor.js

@@ -43,10 +43,68 @@ function probe(bin, args, timeoutMs = 8_000) {
         });
     });
 }
+function probeStdout(bin, args, timeoutMs = 8_000) {
+    return new Promise((resolveProbe)=>{
+        const child = spawn(bin, args, {
+            stdio: [
+                'ignore',
+                'pipe',
+                'ignore'
+            ],
+            env: process.env
+        });
+        let out = '';
+        let done = false;
+        const timer = setTimeout(()=>{
+            if (!done) {
+                done = true;
+                try {
+                    child.kill('SIGKILL');
+                } catch  {}
+                resolveProbe(null);
+            }
+        }, timeoutMs);
+        child.on('error', ()=>{
+            if (!done) {
+                done = true;
+                clearTimeout(timer);
+                resolveProbe(null);
+            }
+        });
+        child.stdout?.on('data', (d)=>{
+            out += d.toString();
+        });
+        child.on('exit', (code)=>{
+            if (!done) {
+                done = true;
+                clearTimeout(timer);
+                resolveProbe(code === 0 ? out.trim() : null);
+            }
+        });
+    });
+}
+function parseVersion(v) {
+    const m = String(v || '').match(/(\d+)\.(\d+)\.(\d+)/);
+    return m ? [
+        Number(m[1]),
+        Number(m[2]),
+        Number(m[3])
+    ] : null;
+}
+function versionAtLeast(v, min) {
+    const a = v;
+    const b = parseVersion(min);
+    if (!a || !b) return false;
+    for(let i = 0; i < 3; i++){
+        if (a[i] !== b[i]) return a[i] > b[i];
+    }
+    return true;
+}
 export function nodeOk(version) {
     const [maj = '0', min = '0'] = version.split('.');
     return Number(maj) > 22 || Number(maj) === 22 && Number(min) >= 15;
 }
+const MIN_HBCLI_VERSION = process.env.GOTRY_MIN_HBCLI_VERSION ?? '0.0.3';
 export async function runDoctorChecks(opts = {}) {
     const repoRoot = opts.repoRoot ? resolve(opts.repoRoot) : resolve(import.meta.dirname, '..', '..');
     const home = opts.homeDir ?? homedir();
@@ -118,22 +176,36 @@ export async function runDoctorChecks(opts = {}) {
         }
     }
     if (hbPresent) {
-        const whoami = await probe(hbPresent === 'hbcli(PATH)' ? 'hbcli' : hbPresent, [
-            'auth',
-            'whoami'
-        ]);
-        items.push(whoami ? {
-            id: 'hbcli',
-            label: 'hbcli(酒店实时源)',
-            status: 'ok',
-            detail: `已安装且凭证有效(${hbPresent})`
-        } : {
-            id: 'hbcli',
-            label: 'hbcli(酒店实时源)',
-            status: 'degraded',
-            detail: '二进制在,但凭证未配置/失效——酒店检索将降级静态包(非实时)',
-            fix: 'hbcli auth set-credentials --app-key hotelbyte_api_demo --app-secret hotelbyte_api_demo(快速试用沙箱;正式 key 向 HotelByte 申请)'
-        });
+        const hbCmd = hbPresent === 'hbcli(PATH)' ? 'hbcli' : hbPresent;
+        const v = parseVersion(await probeStdout(hbCmd, [
+            '--version'
+        ]));
+        if (v && !versionAtLeast(v, MIN_HBCLI_VERSION)) {
+            items.push({
+                id: 'hbcli',
+                label: 'hbcli(酒店实时源)',
+                status: 'missing',
+                detail: `版本过旧(v${v.join('.')} < v${MIN_HBCLI_VERSION})——trade.* / search/checkAvail 会 401(issue #142)`,
+                fix: 'npm install -g staicli --registry=https://registry.npmjs.org/'
+            });
+        } else {
+            const whoami = await probe(hbCmd, [
+                'auth',
+                'whoami'
+            ]);
+            items.push(whoami ? {
+                id: 'hbcli',
+                label: 'hbcli(酒店实时源)',
+                status: 'ok',
+                detail: `已安装且凭证有效(${hbPresent}, v${v ? v.join('.') : '?'})`
+            } : {
+                id: 'hbcli',
+                label: 'hbcli(酒店实时源)',
+                status: 'degraded',
+                detail: '二进制在,但凭证未配置/失效——酒店检索将降级静态包(非实时)',
+                fix: 'hbcli auth set-credentials --app-key hotelbyte_api_demo --app-secret hotelbyte_api_demo(快速试用沙箱;正式 key 向 HotelByte 申请)'
+            });
+        }
     } else {
         items.push({
             id: 'hbcli',

package/dist/capabilities/session/health-watch.js

@@ -73,10 +73,17 @@ export function startExtensionHealthWatch(opts = {}) {
     const businessProbe = opts.businessProbe ?? true;
     const probe = opts.probe ?? (async ()=>{
         const bridge = await import('./extension-bridge.js');
-        await bridge.getOrCreateSessionBridge({
-            keepBridge: opts.keepBridge === true
+        const created = await bridge.getOrCreateSessionBridge({
+            keepBridge: opts.keepBridge === true,
+            ports: opts.ports
         });
-        return combinedProbe(opts, businessProbe);
+        const probeOpts = created.ok && opts.ports ? {
+            ...opts,
+            ports: [
+                created.bridge.port
+            ]
+        } : opts;
+        return combinedProbe(probeOpts, businessProbe);
     });
     const now = opts.now ?? Date.now;
     const state = {

package/dist/scripts/benchmark-environment-bridge-e2e.js

@@ -251,6 +251,20 @@ function toolResultPresent(body) {
 function anyToolResultPresent(body) {
     return (body.messages ?? []).some((m)=>m.role === 'tool');
 }
+const BRIDGE_E2E_BODY_SCHEMA = {
+    type: 'object',
+    properties: {
+        status: {
+            type: 'string'
+        },
+        payload: {
+            type: 'string'
+        }
+    },
+    required: [],
+    additionalProperties: false
+};
+const TERMINAL_OUTLINE = 'object{?status:string,?payload:string}';
 async function runCase(mode, executableOverride, extraEnv = {}) {
     const requests = [];
     let servedToolCalls = 0;
@@ -303,7 +317,7 @@ async function runCase(mode, executableOverride, extraEnv = {}) {
         mode: 0o700
     });
     writeFileSync(configPath, JSON.stringify({
-        schema_version: mode === 'invalid-schema' ? 'invalid' : 'gotry_benchmark_environment_bridge_v3',
+        schema_version: mode === 'invalid-schema' ? 'invalid' : 'gotry_benchmark_environment_bridge_v4',
         enabled: true,
         executable: mode === 'spawn-failed' ? spawnTarget : process.execPath,
         cwd,
@@ -334,7 +348,8 @@ async function runCase(mode, executableOverride, extraEnv = {}) {
         max_output_bytes: mode === 'output-truncated' ? 1_024 : 4_096,
         terminal_output: {
             tag: 'benchmark_terminal',
-            max_bytes: 4_096
+            max_bytes: 4_096,
+            body_schema: BRIDGE_E2E_BODY_SCHEMA
         },
         isolation: {
             mode: 'host-enforced',
@@ -481,15 +496,25 @@ async function assertRuntimeContract(executableOverride) {
             ]
         }).includes(TOOL));
     const flatSchema = bridgeTool?.function?.parameters;
-    assert.ok(Array.isArray(flatSchema?.oneOf), `${target} bridge exposes flat oneOf schema`);
-    const lookupBranch = flatSchema.oneOf.find((branch)=>branch?.properties?.tool?.const === 'lookup');
-    assert.deepEqual(lookupBranch?.required, [
-        'action',
-        'tool',
-        'arguments'
+    assert.equal(flatSchema?.type, 'object', `${target} bridge exposes an object-root wire schema`);
+    assert.equal(flatSchema?.oneOf, undefined, `${target} bridge wire has no top-level oneOf`);
+    assert.deepEqual(flatSchema?.required, [
+        'action'
+    ]);
+    assert.equal(flatSchema?.additionalProperties, false);
+    assert.deepEqual(flatSchema?.properties?.action?.enum, [
+        'tools',
+        'call',
+        'errors'
+    ]);
+    assert.deepEqual(flatSchema?.properties?.tool?.enum, [
+        'lookup'
     ]);
-    assert.equal(lookupBranch?.additionalProperties, false);
-    assert.deepEqual(lookupBranch?.properties?.arguments, LOOKUP_INPUT_SCHEMA);
+    assert.deepEqual(flatSchema?.properties?.arguments, {
+        type: 'object',
+        additionalProperties: true,
+        description: 'action=call 时传给工具的参数对象'
+    });
     assert.equal(enabledToolNames.some((name)=>name.startsWith('calendar_') || name.startsWith('map_')), false, `${target} benchmark projection must not expose calendar/map tools`);
     assert.deepEqual(enabled.optionalResolutionHits, {
         calendar: 0,
@@ -745,7 +770,8 @@ function conformanceResponse(mode, request, plannerCount) {
         'b',
         'd',
         'f',
-        'large'
+        'large',
+        'schema'
     ].includes(mode) && plannerCount === 1;
     if (call && !hasToolResult) return toolCall();
     if (mode === 'f' && plannerCount === 3) return toolCall('bridge-call-retry');
@@ -754,6 +780,9 @@ function conformanceResponse(mode, request, plannerCount) {
             payload: LARGE_TERMINAL_PAYLOAD
         })}</benchmark_terminal>`);
     }
+    if (mode === 'schema') {
+        return finalText('<benchmark_terminal>{"status":"succeeded","budget":{"total_cost":1}}</benchmark_terminal>');
+    }
     const valid = mode === 'a' ? hasToolResult : mode === 'b' ? plannerCount >= 3 : mode === 'e' ? true : false;
     return finalText(mode === 'c' || mode === 'd' ? 'bad benchmark body' : taggedTerminal(valid));
 }
@@ -815,7 +844,7 @@ async function runConformanceCase(mode, executableOverride) {
     const configPath = join(cwd, 'benchmark-env-config.json');
     writeFileSync(runner, `const fs = require('node:fs'); const path = ${JSON.stringify(runnerCount)}; const count = fs.existsSync(path) ? Number(fs.readFileSync(path, 'utf8')) : 0; fs.writeFileSync(path, String(count + 1)); process.stdout.write(JSON.stringify({ schema_version: 'gotry_benchmark_tool_result_v1', status: 'ok', result: { marker: '${MARKER}' } }))`);
     writeFileSync(configPath, JSON.stringify({
-        schema_version: 'gotry_benchmark_environment_bridge_v3',
+        schema_version: 'gotry_benchmark_environment_bridge_v4',
         enabled: true,
         executable: process.execPath,
         cwd,
@@ -843,7 +872,8 @@ async function runConformanceCase(mode, executableOverride) {
         max_output_bytes: 4_096,
         terminal_output: {
             tag: 'benchmark_terminal',
-            max_bytes: mode === 'large' ? 128 * 1024 : 4_096
+            max_bytes: mode === 'large' ? 128 * 1024 : 4_096,
+            body_schema: BRIDGE_E2E_BODY_SCHEMA
         },
         isolation: {
             mode: 'host-enforced',
@@ -981,6 +1011,7 @@ async function assertOutputConformance(executableOverride) {
     assert.equal(a.servedToolCalls, 1, 'A exposes exactly one bridge call');
     assert.equal(a.runnerInvocations, 1, 'A executes the bridge subprocess exactly once');
     assert.ok(a.stdout.includes('<benchmark_terminal>'), 'A forwards only tagged terminal output');
+    assert.ok(a.requests.some((request)=>JSON.stringify(request).includes(`matching exactly ${TERMINAL_OUTLINE}`)), 'A system prompt projects the exact terminal schema outline');
     const b = await runConformanceCase('b', executableOverride);
     assert.equal(b.exit, 0, 'B malformed terminal correction then valid terminal exits 0');
     assert.equal(b.servedToolCalls, 1, `B exposes exactly one bridge call; request shapes=${JSON.stringify(b.requests.map((request)=>({
@@ -988,6 +1019,12 @@ async function assertOutputConformance(executableOverride) {
             roles: (request.messages ?? []).map((message)=>message.role)
         })))}`);
     assert.equal(b.runnerInvocations, 1, 'B format-only correction does not rerun the bridge subprocess');
+    assert.ok(b.requests.some((request)=>JSON.stringify(request).includes('BENCHMARK_CONFORMANCE_TERMINAL') && JSON.stringify(request).includes(`matching exactly ${TERMINAL_OUTLINE}`)), 'B terminal correction projects the same schema outline as the system prompt');
+    const schema = await runConformanceCase('schema', executableOverride);
+    assert.notEqual(schema.exit, 0, 'schema-invalid terminal body (extra root key) is rejected after the single correction');
+    assert.match(schema.stderr, /benchmark terminal output unavailable \(child_conformance_failure\)/, 'schema-invalid terminal emits the stable conformance reason code');
+    assert.equal(schema.runnerInvocations, 1, 'schema-invalid terminal still executed the bridge exactly once');
+    assert.equal(schema.stdout.includes('<benchmark_terminal>'), false, 'schema-invalid terminal body is never released to stdout');
     for (const mode of [
         'c',
         'd'
@@ -1032,7 +1069,7 @@ if (packaged) {
     try {
         const configPath = join(missingServiceRoot, 'bridge.json');
         writeFileSync(configPath, JSON.stringify({
-            schema_version: 'gotry_benchmark_environment_bridge_v3',
+            schema_version: 'gotry_benchmark_environment_bridge_v4',
             enabled: true,
             executable: process.execPath,
             cwd: missingServiceRoot,
@@ -1061,7 +1098,8 @@ if (packaged) {
             max_output_bytes: 4_096,
             terminal_output: {
                 tag: 'benchmark_terminal',
-                max_bytes: 4_096
+                max_bytes: 4_096,
+                body_schema: BRIDGE_E2E_BODY_SCHEMA
             },
             isolation: {
                 mode: 'host-enforced',