@danceiny/gotry 0.0.1-rc.9 → 0.2.0-rc.27

package/ts/capabilities/weather.ts

@@ -0,0 +1,330 @@
+/**
+ * Open-Meteo 天气能力层(免费无 key):预报 + 历史气候回退。
+ *
+ * 产品定位:替代 LLM 的「雨季常识」——季节性建议、窗口内降雨概率、
+ * 体感温度范围,全部走真实数据并带证据标注 [实时API:open-meteo@ts]。
+ *
+ * 契约(与 hbcli.ts 同构,能力层不变量):
+ *   - 永不抛错:网络失败/超时/解析失败一律降级返回,不穿透到调用方;
+ *   - 证据链标注:成功带 [实时API:open-meteo@ts],失败带 [实时API:open-meteo@error@ts];
+ *   - 免费源无配额概念,但仍记录 latency(供 L5 成本工程度量)。
+ *
+ * 端点(全部免费,无 key):
+ *   预报: https://api.open-meteo.com/v1/forecast (≤16 天)
+ *   历史气候: https://archive-api.open-meteo.com/v1/archive (1940→,做季节性)
+ *   地理编码: https://geocoding-api.open-meteo.com/v1/search (地名→坐标)
+ */
+
+export interface WeatherPoint {
+  latitude: number
+  longitude: number
+}
+
+export interface WeatherDaily {
+  date: string
+  tempMaxC: number
+  tempMinC: number
+  precipProbMaxPct: number | null
+  weatherCode: number
+}
+
+export interface WeatherResult {
+  ok: boolean
+  via: 'open-meteo' | 'open-meteo-error'
+  evidence: string
+  latencyMs: number
+  timezone?: string
+  daily?: WeatherDaily[]
+  error?: string
+}
+
+const FORECAST_BASE = 'https://api.open-meteo.com/v1/forecast'
+const ARCHIVE_BASE = 'https://archive-api.open-meteo.com/v1/archive'
+const GEOCODE_BASE = 'https://geocoding-api.open-meteo.com/v1/search'
+
+/** WMO weather code → 中文描述(节选最常用的码) */
+const WMO_ZH: Record<number, string> = {
+  0: '晴', 1: '大致晴', 2: '多云', 3: '阴',
+  45: '雾', 48: '冻雾',
+  51: '毛毛雨', 53: '毛毛雨', 55: '密集毛毛雨',
+  61: '小雨', 63: '中雨', 65: '大雨',
+  66: '冻雨', 67: '强冻雨',
+  71: '小雪', 73: '中雪', 75: '大雪', 77: '雪粒',
+  80: '阵雨', 81: '强阵雨', 82: '暴雨',
+  85: '阵雪', 86: '强阵雪',
+  95: '雷暴', 96: '雷暴伴小冰雹', 99: '雷暴伴大冰雹',
+}
+
+export function wmoLabel(code: number): string {
+  return WMO_ZH[code] ?? `天气码${code}`
+}
+
+type FetchImpl = typeof fetch
+const monotonicNow = (): number => performance.now()
+const MIN_TIMER_MS = 1
+const TIMEOUT_ERROR = 'timeoutMs must be a finite positive integer'
+const BUDGET_EXHAUSTED_ERROR = 'total timeout budget exhausted'
+const REQUEST_ERROR = 'request failed'
+const normalizeTimeout = (value: number): number | null => Number.isInteger(value) && value > 0 ? value : null
+
+/** Rejection values are untrusted: only a real string message is safe to expose. */
+const normalizeError = (value: unknown): string => {
+  try {
+    if (value instanceof Error && typeof value.message === 'string' && value.message.length > 0) {
+      return value.message.slice(0, 200)
+    }
+    if (typeof value === 'string' && value.length > 0) return value.slice(0, 200)
+  } catch {
+    return REQUEST_ERROR
+  }
+  return REQUEST_ERROR
+}
+
+async function fetchJson(url: string, timeoutMs: number, headers: Record<string, string> = {}, fetchImpl: FetchImpl = globalThis.fetch): Promise<{ ok: boolean; data?: unknown; error?: string; timedOut?: boolean }> {
+  if (!Number.isFinite(timeoutMs) || timeoutMs < MIN_TIMER_MS) return { ok: false, error: BUDGET_EXHAUSTED_ERROR }
+  const ctrl = new AbortController()
+  const timerDelay = Math.floor(timeoutMs)
+  if (timerDelay < MIN_TIMER_MS) return { ok: false, error: BUDGET_EXHAUSTED_ERROR }
+  let timer: ReturnType<typeof setTimeout> | undefined
+  let timedOut = false
+  const timeout = new Promise<never>((_, reject) => {
+    timer = setTimeout(() => {
+      timedOut = true
+      ctrl.abort()
+      reject(new Error(`timeout after ${timeoutMs}ms`))
+    }, timerDelay)
+  })
+  const operation = (async () => {
+    const res = await fetchImpl(url, { signal: ctrl.signal, headers: { Accept: 'application/json', ...headers } })
+    if (!res.ok) return { ok: false, error: `HTTP ${res.status}` }
+    return { ok: true, data: await res.json() }
+  })()
+  try {
+    return await Promise.race([operation, timeout])
+  } catch (e) {
+    return { ok: false, error: normalizeError(e), ...(timedOut ? { timedOut: true } : {}) }
+  } finally {
+    if (timer !== undefined) clearTimeout(timer)
+    void operation.catch(() => undefined)
+  }
+}
+
+const NOMINATIM_BASE = 'https://nominatim.openstreetmap.org/search'
+
+/** 行政级/人口重镇 feature_code(open-meteo 命名惯例):PPLC=首都 PPLA*=首府 PPLB=城镇 PPLX=区片 */
+const MAJOR_FEATURE = /^(PPLC|PPLA|PPLB|PPLX)/
+const isRecord = (value: unknown): value is Record<string, unknown> => value !== null && typeof value === 'object' && !Array.isArray(value)
+
+interface GeoHitInternal {
+  name: string
+  latitude: number
+  longitude: number
+  country?: string
+  admin1?: string
+  /** 排序用:open-meteo 有 population;同名小地(村/镇)缺失时按 -1 处理 */
+  population: number
+  featureCode: string
+}
+
+function stripHits(hits: GeoHitInternal[]): Array<{ name: string; latitude: number; longitude: number; country?: string; admin1?: string }> {
+  return hits.map(({ name, latitude, longitude, country, admin1 }) =>
+    ({ ...(country ? { country } : {}), ...(admin1 ? { admin1 } : {}), name, latitude, longitude }))
+}
+
+/** 地名 → 坐标(双源,供 dsh 工具把「大理」转成经纬度):
+ *  1. Open-Meteo(主源):命中按人口/行政级降序——「大理」会同时命中云南州府与四川同名乡,不能盲信次序;
+ *  2. Nominatim(兜底):open-meteo 的中文名覆盖有洞(实测(issue #24)「普吉岛」0 结果、
+ *     裸词「普吉」错配西藏林芝同名村),弱命中/零结果时走 Nominatim 拿正确目标,
+ *     兜底仍空则回退 open-meteo 弱结果(不比此前更差)。 */
+export async function geocodePlace(
+  name: string,
+  opts: { timeoutMs?: number; count?: number; fetchImpl?: FetchImpl } = {},
+): Promise<{ ok: boolean; evidence: string; via?: 'open-meteo' | 'nominatim'; results: Array<{ name: string; latitude: number; longitude: number; country?: string; admin1?: string }>; error?: string }> {
+  const ts = new Date().toISOString()
+  const count = opts.count ?? 5
+  const query = name.trim()
+  const timeoutMs = normalizeTimeout(opts.timeoutMs ?? 15_000)
+  if (timeoutMs === null) return { ok: false, evidence: `[实时API:open-meteo-geo@error@${ts}]`, results: [], error: TIMEOUT_ERROR }
+  const omUrl = `${GEOCODE_BASE}?name=${encodeURIComponent(query)}&count=${count}&language=zh&format=json`
+  // timeoutMs is a budget for the complete primary→fallback chain, not per request.
+  const deadline = monotonicNow() + timeoutMs
+  const remaining = (): number | null => {
+    const value = deadline - monotonicNow()
+    return Number.isFinite(value) && value >= MIN_TIMER_MS ? value : null
+  }
+  const primaryRemaining = remaining()
+  const r = primaryRemaining === null
+    ? { ok: false, error: BUDGET_EXHAUSTED_ERROR }
+    : await fetchJson(omUrl, primaryRemaining, {}, opts.fetchImpl)
+  const primaryPayload = r.ok && isRecord(r.data) && Array.isArray(r.data['results']) ? r.data['results'] : null
+  const omResults: GeoHitInternal[] = primaryPayload
+    ? primaryPayload.map((item) => {
+        if (!isRecord(item)) return null
+        const it = item as Record<string, unknown>
+        return {
+          name: String(it['name'] ?? ''),
+          latitude: Number(it['latitude']),
+          longitude: Number(it['longitude']),
+          country: it['country'] ? String(it['country']) : undefined,
+          admin1: it['admin1'] ? String(it['admin1']) : undefined,
+          population: Number(it['population'] ?? 0) || 0,
+          featureCode: String(it['feature_code'] ?? ''),
+        }
+      }).filter((h) => !!h && !!h.name && Number.isFinite(h.latitude) && Number.isFinite(h.longitude)) as GeoHitInternal[]
+    : []
+  omResults.sort((a, b) => (b.population - a.population) || (Number(MAJOR_FEATURE.test(b.featureCode)) - Number(MAJOR_FEATURE.test(a.featureCode))))
+  const top = omResults[0]
+  // 强命中:有人口规模或主要行政级,直接采信(「深圳市」「曼谷」路径不变)
+  if (top && (top.population > 0 || MAJOR_FEATURE.test(top.featureCode))) {
+    return { ok: true, evidence: `[实时API:open-meteo-geo@${ts}]`, via: 'open-meteo', results: stripHits(omResults) }
+  }
+  // 弱命中/零结果/主源请求失败:Nominatim 兜底(免费无 key;中文 accept-language)
+  const nomTs = new Date().toISOString()
+  const nomUrl = `${NOMINATIM_BASE}?q=${encodeURIComponent(query)}&format=jsonv2&limit=${count}&accept-language=zh&addressdetails=1`
+  const fallbackRemaining = primaryRemaining === null || r.timedOut ? null : remaining()
+  const nom = fallbackRemaining === null
+    ? { ok: false, error: BUDGET_EXHAUSTED_ERROR }
+    : await fetchJson(nomUrl, fallbackRemaining, { 'User-Agent': 'gotry-travel-agent/0.1 (+https://github.com/Danceiny/gotry)' }, opts.fetchImpl)
+  const nomResults: Array<{ name: string; latitude: number; longitude: number; country?: string; admin1?: string }> = []
+  if (nom.ok && Array.isArray(nom.data)) {
+    const parsedNom = nom.data.map((item) => {
+        if (!isRecord(item)) return null
+        const it = item as Record<string, unknown>
+        const addr = isRecord(it['address']) ? it['address'] : {}
+        const country = typeof addr['country'] === 'string' ? addr['country'] : undefined
+        const admin1 = [addr['province'], addr['state'], addr['county']].find(v => typeof v === 'string') as string | undefined
+        return { name: String(it['name'] ?? ''), latitude: Number(it['lat']), longitude: Number(it['lon']), ...(country ? { country } : {}), ...(admin1 ? { admin1 } : {}) }
+      }).filter((h) => !!h && !!h.name && Number.isFinite(h.latitude) && Number.isFinite(h.longitude)) as Array<{ name: string; latitude: number; longitude: number; country?: string; admin1?: string }>
+    nomResults.push(...parsedNom)
+  }
+  if (nomResults.length) {
+    const omNote = r.ok
+      ? `open-meteo ${omResults.length} 条弱命中(无人口/行政级,不足采信)`
+      : `open-meteo 失败:${r.error ?? 'HTTP error'}`
+    return { ok: true, evidence: `[实时API:nominatim@${nomTs}](兜底层: ${omNote})`, via: 'nominatim', results: nomResults }
+  }
+  // 双源皆空/兜底失败:open-meteo 有弱结果仍返回(同构「降级不阻塞」契约),否则维持失败终态
+  if (omResults.length) {
+    return { ok: true, evidence: `[实时API:open-meteo-geo@${ts}]`, via: 'open-meteo', results: stripHits(omResults) }
+  }
+  return {
+    ok: false,
+    evidence: `[实时API:open-meteo-geo@error@${ts}];[实时API:nominatim@error@${nomTs}]`,
+    results: [],
+    error: r.ok ? `双源无结果:${nom.error ?? 'nominatim empty'}` : (r.error),
+  }
+}
+
+/** 未来天气预报(≤16 天) */
+export async function getForecast(
+  point: WeatherPoint,
+  opts: { days?: number; timeoutMs?: number; fetchImpl?: FetchImpl } = {},
+): Promise<WeatherResult> {
+  const started = monotonicNow()
+  const ts = new Date().toISOString()
+  const requestedDays = opts.days ?? 7
+  const days = Number.isInteger(requestedDays) && requestedDays > 0 ? Math.min(requestedDays, 16) : 0
+  const timeoutMs = normalizeTimeout(opts.timeoutMs ?? 15_000)
+  if (days < 1 || timeoutMs === null) return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo@error@${ts}]`, latencyMs: monotonicNow() - started, error: days < 1 ? 'days must be valid positive values' : TIMEOUT_ERROR }
+  const url = `${FORECAST_BASE}?latitude=${point.latitude}&longitude=${point.longitude}`
+    + `&daily=temperature_2m_max,temperature_2m_min,precipitation_probability_max,weathercode`
+    + `&forecast_days=${days}&timezone=auto`
+  const r = await fetchJson(url, timeoutMs, {}, opts.fetchImpl)
+  const latencyMs = monotonicNow() - started
+  if (!r.ok) {
+    return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo@error@${ts}]`, latencyMs, error: r.error }
+  }
+  const payload = isRecord(r.data) ? r.data : null
+  const daily = isRecord(payload?.['daily']) ? payload['daily'] as { time?: unknown[]; temperature_2m_max?: unknown[]; temperature_2m_min?: unknown[]; precipitation_probability_max?: unknown[]; weathercode?: unknown[] } : null
+  if (!daily || !Array.isArray(daily.time) || !Array.isArray(daily.temperature_2m_max)
+    || !Array.isArray(daily.temperature_2m_min) || !Array.isArray(daily.weathercode)
+    || daily.time.length !== days || daily.temperature_2m_max.length !== days
+    || daily.temperature_2m_min.length !== days || daily.weathercode.length !== days
+    || daily.time.some(v => typeof v !== 'string')
+    || daily.temperature_2m_max.some(v => typeof v !== 'number' || !Number.isFinite(v))
+    || daily.temperature_2m_min.some(v => typeof v !== 'number' || !Number.isFinite(v))
+    || daily.weathercode.some(v => typeof v !== 'number' || !Number.isFinite(v))
+    || (daily.precipitation_probability_max !== undefined && daily.precipitation_probability_max !== null
+      && !Array.isArray(daily.precipitation_probability_max))
+    || (Array.isArray(daily.precipitation_probability_max)
+      && (daily.precipitation_probability_max.length !== days
+        || daily.precipitation_probability_max.some(v => v !== null && (typeof v !== 'number' || !Number.isFinite(v)))))) {
+    return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo@error@${ts}]`, latencyMs, error: 'empty daily payload' }
+  }
+  const times = daily.time as string[]
+  const maxes = daily.temperature_2m_max as number[]
+  const mins = daily.temperature_2m_min as number[]
+  const codes = daily.weathercode as number[]
+  const precip = Array.isArray(daily.precipitation_probability_max)
+    ? daily.precipitation_probability_max as Array<number | null>
+    : undefined
+  const rows: WeatherDaily[] = times.map((date, i) => ({
+    date, tempMaxC: maxes[i]!, tempMinC: mins[i]!, precipProbMaxPct: precip?.[i] ?? null, weatherCode: codes[i]!,
+  }))
+  return {
+    ok: true, via: 'open-meteo',
+    evidence: `[实时API:open-meteo@${ts}]`,
+    latencyMs,
+    timezone: typeof payload?.['timezone'] === 'string' ? payload['timezone'] : undefined,
+    daily: rows,
+  }
+}
+
+/** 历史气候(季节性推荐底座:去年同期日均温/降雨概率) */
+export async function getClimate(
+  point: WeatherPoint,
+  month: number,
+  opts: { year?: number; timeoutMs?: number; fetchImpl?: FetchImpl } = {},
+): Promise<WeatherResult> {
+  const started = monotonicNow()
+  const ts = new Date().toISOString()
+  const timeoutMs = normalizeTimeout(opts.timeoutMs ?? 15_000)
+  if (timeoutMs === null) return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo-climate@error@${ts}]`, latencyMs: monotonicNow() - started, error: TIMEOUT_ERROR }
+  // 默认取去年同月做气候基线
+  const year = opts.year ?? (new Date().getUTCFullYear() - 1)
+  if (!Number.isInteger(month) || month < 1 || month > 12 || !Number.isInteger(year) || year < 1940 || year > new Date().getUTCFullYear()) {
+    return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo-climate@error@${ts}]`, latencyMs: monotonicNow() - started, error: 'month/year must be valid historical calendar values' }
+  }
+  const lastDay = new Date(Date.UTC(year, month, 0)).getUTCDate()
+  const expectedDates = Array.from({ length: lastDay }, (_, i) => `${year}-${String(month).padStart(2, '0')}-${String(i + 1).padStart(2, '0')}`)
+  const start = `${year}-${String(month).padStart(2, '0')}-01`
+  const end = `${year}-${String(month).padStart(2, '0')}-${String(lastDay).padStart(2, '0')}`
+  const url = `${ARCHIVE_BASE}?latitude=${point.latitude}&longitude=${point.longitude}`
+    + `&start_date=${start}&end_date=${end}`
+    + `&daily=temperature_2m_max,temperature_2m_min,precipitation_sum,weathercode&timezone=auto`
+  const r = await fetchJson(url, timeoutMs, {}, opts.fetchImpl)
+  const latencyMs = monotonicNow() - started
+  if (!r.ok) {
+    return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo-climate@error@${ts}]`, latencyMs, error: r.error }
+  }
+  const payload = isRecord(r.data) ? r.data : null
+  const daily = isRecord(payload?.['daily']) ? payload['daily'] as { time?: unknown[]; temperature_2m_max?: unknown[]; temperature_2m_min?: unknown[]; weathercode?: unknown[] } : null
+  if (!daily || !Array.isArray(daily.time) || !Array.isArray(daily.temperature_2m_max)
+    || !Array.isArray(daily.temperature_2m_min) || !Array.isArray(daily.weathercode)
+    || daily.time.length !== lastDay
+    || daily.time.length !== daily.temperature_2m_max.length
+    || daily.time.length !== daily.temperature_2m_min.length
+    || daily.time.length !== daily.weathercode.length
+    || daily.time.some(v => typeof v !== 'string')
+    || daily.time.some((v, i) => v !== expectedDates[i])
+    || daily.temperature_2m_max.some(v => typeof v !== 'number' || !Number.isFinite(v))
+    || daily.temperature_2m_min.some(v => typeof v !== 'number' || !Number.isFinite(v))
+    || daily.weathercode.some(v => typeof v !== 'number' || !Number.isFinite(v))) {
+    return { ok: false, via: 'open-meteo-error', evidence: `[实时API:open-meteo-climate@error@${ts}]`, latencyMs, error: 'empty daily payload' }
+  }
+  const times = daily.time as string[]
+  const maxes = daily.temperature_2m_max as number[]
+  const mins = daily.temperature_2m_min as number[]
+  const codes = daily.weathercode as number[]
+  const rows: WeatherDaily[] = times.map((date, i) => ({
+    date, tempMaxC: maxes[i]!, tempMinC: mins[i]!, precipProbMaxPct: null, // archive 端点没有概率,用降水量另行估算
+    weatherCode: codes[i]!,
+  }))
+  return {
+    ok: true, via: 'open-meteo',
+    evidence: `[实时API:open-meteo-climate@${ts}]`,
+    latencyMs,
+    timezone: typeof payload?.['timezone'] === 'string' ? payload['timezone'] : undefined,
+    daily: rows,
+  }
+}

package/ts/dsh-runtime/vendor/README.md

@@ -0,0 +1,68 @@
+# vendored dsh runtime(`vendor/`)
+
+本目录是 [DeepSeek Harness(dsh CLI)](https://github.com/deepseek-ai/DeepSeek-Harness)
+dsh 发布家族的全量 vendored 成员,pnpm workspace 方式参与安装
+(`ts/dsh-runtime/pnpm-workspace.yaml` 声明 `vendor/*`,`linkWorkspacePackages: true`)。
+
+## 当前版本
+
+- 上游:`dsh-v0.1.2-alpha.1`(tag;alpha 面向 monorepo 内部,尚未发布到
+  npm 公共 registry——npm latest 仍为 `0.1.1-rc.2`,等上游 publish 后本目录
+  可整体换回 npm 依赖形态)。
+- 源 commit:`cd5ef814`(/tmp 构建树为浅克隆同源;发布 tag 见上游 releases)。
+- License:MIT © DeepSeek(upstream LICENSE);本仓 MIT 使用。
+
+## 为什么 vendored(而不是 npm 依赖)
+
+- 上游只挂 GitHub 预发布 tag;依赖闭包(dsh 家族 ~187 个内部包 + cordis/
+  schemastery 等 vendor 家族)里 **dsh 家族全部 0.1.2-alpha.1 均不在公共
+  npm**,外部环境不可安装。
+- `ts/dsh-runtime` 只影响 repo 工作副本与 `./gotry`;npm 公共分发面
+  (root `package.json`)仍钉 rc.2,不受影响;CI 不安装本目录。
+- workspace 成员 + `linkWorkspacePackages: true` 让成员间
+  `^0.1.2-alpha.1` 的 range 直接命中本地版本,干净克隆只依赖本仓文件 +
+  公共 registry(第三方),不依赖内部镜像。
+
+## 非 dsh 家族成员:`vendor/dsh-map-tools`
+
+`dsh-map-tools`(dshmarket 第三方宿主插件,地图/路线/POI,零 key 走
+OSM/OSRM)与 dsh 家族不同源,进本目录的原因是 **npm 依赖形态被上游
+peerDependencies 否决**:历史上游要求 `dsh-settings`/`dsh-tools`
+`>=0.1.2-rc.1`,而 gotry 历史锁定的运行时家族是 `0.1.2-alpha.3`
+(semver 上 alpha < rc)——npm/npx 严格 peer 解析直接 ERESOLVE
+(optionalDependencies 也不豁免),硬依赖会弄坏 `npx @danceiny/gotry`
+主安装路径。当前锁定 `0.2.0-rc.2` 家族(issue #600):上游 `>=0.1.2-rc.1`
+开区间直接满足,npm 解析与 0.2.0 起的运行时 peer 兼容闸均通过;但继续
+保持 vendored 形态(避免在 npm 依赖面引入额外硬依赖而弄坏
+`npx @danceiny/gotry` 主安装路径),vendored 副本为上游 `0.7.3`
+原样内容 + settings-ns.js 适配(SettingsForms 页策略,旧线型兼容)+ 双语 README 来源通知。vendor 副本随 tarball 分发
+(root `package.json` `files[]` 含本目录),`bin/gotry-inner.js`
+解析链 vendor 优先;
+升级 = 从 npm 拉 `dsh-map-tools@<new>` 覆盖本目录(保留来源与
+license:MIT,上游 package.json 里无 devDependencies 需清理;
+0.5.1→0.7.3 实操:`npm pack dsh-map-tools@0.7.3` 解包覆盖 +
+双语 README 追加 vendored 通知 + 更新 map-tools-vendor-package-proof
+的 version/fileCount/aggregateSha256)。
+
+## 升级/复现流程(dsh 家族,下个版本照抄)
+
+1. `git clone --depth 1 --branch <tag> https://github.com/deepseek-ai/DeepSeek-Harness.git /tmp/dsh-<tag>`
+2. `cd /tmp/dsh-<tag> && pnpm install && pnpm build:official`
+3. `pnpm release:pack --family dsh --out dist/dsh`(产出 241 个 tarball)
+4. 解包 tarball(`package/` 前缀剥掉)平铺进 `vendor/<kebab-name>/`
+5. manifest 归一处:**删除各成员的 `devDependencies`**(上游 devDeps 引用
+   未进发布家族的 experimental 私有包,npm 安装形态本就不装 devDeps;
+   唯 `@deepseek-ai/dsh-subprocess-local` 的 `postinstall` 保
+   留——恢复 node-pty spawn-helper 可执行位,终局面依赖);
+   `scripts` 里 dev 期 `bundle/watch/build` 一并丢弃。
+6. 更新 `package.json` 的 4 个直接依赖版本 + `pnpm install` 重新生成 lockfile
+7. 验证:`./gotry help` 报版本;`cd ts && npx tsc --noEmit && npx tsx scripts/smoke.ts`;
+   全量 `bash scripts/run-all-tests.sh` 全绿后才可提交。
+
+## 纪律
+
+- 本目录内容必须与上游 tag 的 tarball 逐字节一致(`devDependencies`/
+  dev 期 `scripts` 除外);不得手改 vendor 内代码——补丁面一律走 gotry 侧
+  (`cordis.gotry-patch.yml` / `bin/gotry-inner.js`)。
+- `gotry-state/`、`node_modules/` 已 gitignore;`vendor/` 与三份 manifest
+  (package.json / pnpm-lock.yaml / pnpm-workspace.yaml / .npmrc)入 git。

package/ts/dsh-runtime/vendor/dsh-map-tools/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 HorusJiang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.