@danceiny/gotry 0.0.1-rc.9 → 0.2.0-rc.28

package/dist/scripts/smoke.js

@@ -1,328 +1,772 @@
+/**
+ * 冒烟:不启动完整 dsh 运行时,验证插件注册 + execute + 纯 TS 求解器及隔离能力夹具。
+ * 运行(在 ts/ 下):npx tsx scripts/smoke.ts
+ */
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { apply } from '../src/index.js';
+import { renderFlightFact } from '../src/bookable-facts.js';
+import { installModelOverride } from '../capabilities/model-override.js';
+import { offlineSessionFlightResult, sessionLiveEnabled } from '../capabilities/session-search.js';
+import { interpretEffect } from '../capabilities/effect.js';
+// 日期槽位动态化:live 检索(flyai/session)的入参日期必须在未来——硬编码日期
+// 会在次日翻成 past date 被 date-gate 拒绝(2026-10-02 实爆:2026-10-01 变过去)。
+const futureDate = (offsetDays) => new Date(Date.now() + offsetDays * 86_400_000).toISOString().slice(0, 10);
+const SMOKE_FLIGHT_DATE = futureDate(7);
+const SMOKE_HOTEL_CHECKIN = futureDate(10);
+const SMOKE_HOTEL_CHECKOUT = futureDate(12);
 async function main() {
+    // 巡检状态纪律:smoke 的探针数据(wish/profile/sidecar)写进独立临时 stateRoot,
+    // 不与真实用户状态(gotry-state)混居;结束即删
     const { mkdtempSync, rmSync } = await import('node:fs');
     const { tmpdir } = await import('node:os');
     const smokeRoot = mkdtempSync(join(tmpdir(), 'gotry-smoke-'));
     const registered = [];
     const variables = {};
+    const approvalReasons = [];
+    const selectedEffects = [];
+    const effectSummaries = [];
+    let issueNow = new Date('2026-09-10T12:00:00.000Z');
+    const preExecutes = [];
     const ctx = {
-        tools: {
-            register: (t)=>registered.push(t)
+        tools: { register: (t) => registered.push(t) },
+        systemPrompt: { variable: (name, provider) => { variables[name] = provider; } },
+        get: (name) => name === 'approval' ? {
+            request: async (request) => {
+                approvalReasons.push(String(request.reason ?? ''));
+                return 'allowed-once';
+            },
+        } : undefined,
+        on: (event, fn) => {
+            if (event === 'tools/pre-execute')
+                preExecutes.push(fn);
+            return () => { };
         },
-        systemPrompt: {
-            variable: (name, provider)=>{
-                variables[name] = provider;
-            }
-        }
     };
-    apply(ctx, {
+    // 配置对象持引用:授权闸总闸(sessionAccess)在 §13 里运行时切闸验证
+    const cfg = {
         stateRoot: smokeRoot,
         timeoutMs: 30_000,
-        hbcliBin: 'hbcli-not-on-path'
+        hbcliBin: 'hbcli-not-on-path', // 强制走降级路径的确定性验证
+        sessionAccess: 'ask',
+    };
+    const fixtureEffect = async (fx) => {
+        if (fx.effect === 'SESSION_DIDA_SEARCH') {
+            selectedEffects.push(fx.effect);
+            return {
+                result: { ok: true, via: 'session-dida-portal', evidence: '[fixture:session-dida]', latencyMs: 0, verdict: 'hit', rates: [] },
+                trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:session-effect]'] },
+            };
+        }
+        if (fx.effect === 'FLYAI_SEARCH') {
+            selectedEffects.push(fx.effect);
+            if (fx.params?.kind !== 'train') {
+                return {
+                    result: {
+                        ok: false,
+                        via: 'flyai-error',
+                        evidence: '[实时API:flyai@error@fixture-offline]',
+                        latencyMs: 0,
+                        verdict: 'error',
+                        kind: fx.params?.kind === 'hotel' ? 'hotel' : 'flight',
+                        error: 'offline smoke fixture; real FlyAI provider not invoked',
+                    },
+                    trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:flyai-offline]'] },
+                };
+            }
+            return {
+                result: {
+                    ok: true,
+                    via: 'flyai',
+                    evidence: '[fixture:flyai-train]',
+                    latencyMs: 0,
+                    verdict: 'hit',
+                    kind: 'train',
+                    options: [{ no: 'G1375', name: '高铁', depDateTime: '2027-11-11T07:35:00+08:00', arrDateTime: '2027-11-11T15:27:00+08:00', depStation: '上海', arrStation: '昆明', durationMin: 472, price: 0 }],
+                },
+                trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:flyai-train]'] },
+            };
+        }
+        if (fx.effect === 'SESSION_TRAIN_SEARCH') {
+            selectedEffects.push(fx.effect);
+            const date = fx.params?.date ?? '';
+            const from = fx.params?.from ?? '';
+            const to = fx.params?.to ?? '';
+            if (from !== '上海' || to !== '昆明') {
+                const reason = '城市不在 12306 码表;请带 fromStationTelecode/toStationTelecode 重试';
+                return {
+                    result: { ok: false, via: 'session-train-12306-error', evidence: '[fixture:session-train-unresolved]', latencyMs: 0, verdict: 'error', outcome: { kind: 'transport-runtime-error', reason }, error: reason },
+                    trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:session-train-unresolved]'] },
+                };
+            }
+            const response = { url: `https://kyfw.12306.cn/otn/leftTicket/queryG?leftTicketDTO.train_date=${date}&leftTicketDTO.from_station=SHH&leftTicketDTO.to_station=KMM`, fromStationTelecode: 'SHH', toStationTelecode: 'KMM', date };
+            const common = { requested: { from, to, date }, request: { fromStationTelecode: 'SHH', toStationTelecode: 'KMM', date }, response, batchId: `fixture-${date}`, queryId: `session:12306-train:fixture-${date}`, fetchedAt: '2026-09-10T11:59:00.000Z' };
+            const collection = date === '2027-11-15'
+                ? { ...common, requested: { from, to, date: '2027-11-14' } }
+                : common;
+            if (date === '2027-11-13') {
+                return {
+                    result: { ok: false, via: 'session-train-12306-error', evidence: '[fixture:session-train-malformed]', latencyMs: 0, verdict: 'error', outcome: { kind: 'malformed', reason: 'fixture malformed root' }, error: 'fixture malformed root' },
+                    trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:session-train-malformed]'] },
+                };
+            }
+            if (date === '2027-11-14') {
+                return {
+                    result: { ok: false, via: 'session-train-12306-error', evidence: '[fixture:session-train-transport]', latencyMs: 0, verdict: 'error', outcome: { kind: 'transport-runtime-error', reason: 'fixture transport error' }, error: 'fixture transport error' },
+                    trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:session-train-transport]'] },
+                };
+            }
+            if (date === '2027-11-12') {
+                const outcome = { kind: 'recognized-empty', trains: [] };
+                return {
+                    result: { ok: true, via: 'session-train-12306', evidence: '[fixture:session-train-empty]', latencyMs: 0, verdict: 'miss', outcome, collection: common, trains: [] },
+                    trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:session-train-empty]'] },
+                };
+            }
+            const train = { trainCode: 'G1375', fromStation: '上海', toStation: '昆明', depTime: '07:35', arrTime: '15:27', durationMin: 472, startTrainDate: date === '2027-11-11' ? '2027-11-10' : date, canWebBuy: 'Y', seats: { '二等座': '有' }, jumpUrl: 'fixture://12306' };
+            const outcome = { kind: 'recognized-nonempty', trains: [train] };
+            return {
+                result: { ok: true, via: 'session-train-12306', evidence: '[fixture:session-train-hit]', latencyMs: 0, verdict: 'hit', outcome, collection, trains: [train] },
+                trace: { effect: fx.effect, channel: 'fixture', attempts: 1, backoffMs: 0, breaker: 'off', evidence: ['[fixture:session-train-hit]'] },
+            };
+        }
+        return interpretEffect(fx);
+    };
+    apply(ctx, cfg, {
+        effect: fixtureEffect,
+        clock: () => issueNow,
     });
-    console.log(`registered tools: ${registered.map((t)=>t.name).join(', ')}`);
-    const byName = (n)=>{
-        const t = registered.find((t)=>t.name === n);
-        if (!t) throw new Error(`tool ${n} not registered`);
+    console.log(`registered tools: ${registered.map(t => t.name).join(', ')}`);
+    const byName = (n) => {
+        const t = registered.find(t => t.name === n);
+        if (!t)
+            throw new Error(`tool ${n} not registered`);
         return t;
     };
+    // 1) 动机画像:evidence 缺失必须被拒绝(P0 反幻觉红线;D-30 后由宿主权 schema 闸——
+    //    evidence required 进嵌套 schema,拒绝更前置,ToolFailure 形状不变)
     const motivation = byName('gotry_motivation_save');
-    try {
-        await motivation.execute({
-            profile: {
-                weights: {
-                    escape_rest: 0.7
-                }
-            }
-        }, null);
-        throw new Error('FAIL: profile without evidence should have been rejected');
-    } catch (e) {
-        console.log(`motivation without evidence rejected: ${e.message.slice(0, 60)}...`);
+    const rejectedMotivation = await motivation.execute({ profile: { weights: { escape_rest: 0.7 } } }, null);
+    if (rejectedMotivation.ok !== false || !/evidence/i.test(rejectedMotivation.summary ?? '')) {
+        throw new Error(`FAIL: profile without evidence should have been rejected, actual ${JSON.stringify(rejectedMotivation).slice(0, 160)}`);
     }
+    console.log(`motivation without evidence rejected: ${(rejectedMotivation.summary ?? '').slice(0, 80)}...`);
     const saved = await motivation.execute({
         profile: {
-            weights: {
-                escape_rest: 0.7,
-                curiosity: 0.3
-            },
-            evidence: [
-                '用户原话:想去湖边什么都不干(洱海照片)'
-            ],
-            hard: {
-                wake_not_before: '06:30',
-                min_arrival_energy_pct: 40
-            }
-        }
+            weights: { escape_rest: 0.7, curiosity: 0.3 },
+            evidence: ['用户原话:想去湖边什么都不干(洱海照片)'],
+            hard: { wake_not_before: '06:30', min_arrival_energy_pct: 40 },
+        },
     }, null);
     console.log(`motivation saved -> ${JSON.stringify(saved).slice(0, 80)}...`);
+    // 2) 可行性引擎:洱海金标准用例,经注册工具跑纯 TS 求解路径
     const payload = JSON.parse(await readFile(join('..', 'data', 'golden_erhai.json'), 'utf-8'));
     const feasibility = byName('gotry_feasibility_check');
-    const result = await feasibility.execute({
-        payload
-    }, null);
+    const result = await feasibility.execute({ payload }, null);
     console.log(`\nfeasibility: recommended=${result.recommended}, via=${result.via}, latency=${result.latency_ms}ms\n`);
     console.log(result.answer_md);
+    // Issue #2:实际注册工具 execute → parseCandidate → segmentsFromCandidate
+    // → applyPlanningWindow → solve。日期下界来自 apply 注入的宿主时钟,不来自 payload。
+    const datedCandidates = payload.candidates.slice(0, 3).map((candidate, i) => ({
+        ...candidate,
+        date: i === 0 ? '2026-09-01' : i === 1 ? '2026-10-01' : '2027-01-01',
+    }));
+    const futurePayload = {
+        ...payload,
+        candidates: datedCandidates,
+        planning: { intent: 'future', requested_year: 2026 },
+    };
+    const noPlanningResult = await feasibility.execute({
+        payload: { ...payload, candidates: datedCandidates.slice(0, 2) },
+    }, null);
+    const futureResult = await feasibility.execute({ payload: futurePayload }, null);
+    const pastId = String(datedCandidates[0]?.['id']);
+    const validId = String(datedCandidates[1]?.['id']);
+    const nextYearId = String(datedCandidates[2]?.['id']);
+    if (noPlanningResult.ok !== true || noPlanningResult.recommended !== validId
+        || noPlanningResult.verdicts?.some(v => v['candidate_id'] === pastId || v['candidate_id'] === nextYearId)) {
+        throw new Error(`FAIL: registered no-planning path accepted a past/cross-year candidate: ${JSON.stringify(noPlanningResult).slice(0, 240)}`);
+    }
+    const allPastResult = await feasibility.execute({
+        payload: { ...payload, candidates: datedCandidates.map(candidate => ({ ...candidate, date: '2026-09-01' })) },
+    }, null);
+    if (allPastResult.ok !== false || allPastResult.code !== 'planning_window_rejected'
+        || allPastResult.evidence !== undefined || !/2026-09-10/.test(allPastResult.summary ?? '')) {
+        throw new Error(`FAIL: no-planning all-past dates should be structured validation rejection: ${JSON.stringify(allPastResult).slice(0, 240)}`);
+    }
+    const incidentsPath = join(smokeRoot, 'gotry-state', 'incidents.jsonl');
+    const incidentBytesBeforeDateValidation = await readFile(incidentsPath, 'utf-8').catch(() => '');
+    if (futureResult.ok !== true || futureResult.recommended !== validId
+        || futureResult.verdicts?.some(v => v['candidate_id'] === pastId || v['candidate_id'] === nextYearId)) {
+        throw new Error(`FAIL: registered Issue #2 path accepted a past candidate: ${JSON.stringify(futureResult).slice(0, 240)}`);
+    }
+    const expiredResult = await feasibility.execute({
+        payload: { ...futurePayload, planning: { intent: 'future', requested_year: 2025 } },
+    }, null);
+    if (expiredResult.ok !== false || expiredResult.code !== 'planning_window_rejected'
+        || expiredResult.evidence !== undefined || !/2025 年已结束/.test(JSON.stringify(expiredResult))) {
+        throw new Error(`FAIL: registered Issue #2 path did not reject expired year: ${JSON.stringify(expiredResult).slice(0, 240)}`);
+    }
+    const historicalResult = await feasibility.execute({
+        payload: { ...payload, candidates: datedCandidates, planning: { intent: 'historical', requested_year: 2026 } },
+    }, null);
+    const historicalIds = new Set((historicalResult.verdicts ?? []).map(v => String(v['candidate_id'])));
+    if (historicalResult.ok !== true || !historicalIds.has(pastId) || !historicalIds.has(validId) || !historicalIds.has(nextYearId)) {
+        throw new Error(`FAIL: explicit historical mode should preserve dated candidates: ${JSON.stringify(historicalResult).slice(0, 240)}`);
+    }
+    issueNow = new Date('2026-10-02T12:00:00.000Z');
+    const advancedClockResult = await feasibility.execute({
+        payload: { ...payload, candidates: [datedCandidates[1]] },
+    }, null);
+    if (advancedClockResult.ok !== false || advancedClockResult.code !== 'planning_window_rejected'
+        || advancedClockResult.evidence !== undefined || !/2026-10-02/.test(advancedClockResult.summary ?? '')) {
+        throw new Error(`FAIL: advanced host clock should reject now-expired dated candidate: ${JSON.stringify(advancedClockResult).slice(0, 240)}`);
+    }
+    const incidentBytesAfterDateValidation = await readFile(incidentsPath, 'utf-8').catch(() => '');
+    if (incidentBytesAfterDateValidation !== incidentBytesBeforeDateValidation) {
+        throw new Error('FAIL: expected date rejections entered incident path');
+    }
+    issueNow = new Date('2026-09-10T12:00:00.000Z');
+    console.log(`Issue #2 registered execute path: dateless compatible, no-planning past/mixed guarded, valid=${validId} recommended, historical explicit, expired-year and advanced-clock rejection structured`);
+    // 3) wish pool:把不可行的憧憬连同成行条件放入「下一次出发」
     const wish = byName('gotry_wish_pool_add');
     const added = await wish.execute({
         entry: {
             name: '大理·洱海',
             reason: '2 天窗口装不下(冲突:duration)',
-            conditions: {
-                days: 5,
-                budget_cny: 4950,
-                best_months: [
-                    3,
-                    4,
-                    5,
-                    9,
-                    10,
-                    11
-                ]
-            }
-        }
+            conditions: { days: 5, budget_cny: 4950, best_months: [3, 4, 5, 9, 10, 11] },
+        },
     }, null);
     console.log(`\nwish pool -> ${JSON.stringify(added)}`);
-    if (result.recommended !== 'qiandao') throw new Error('FAIL: expected qiandao recommended');
-    if (typeof feasibility.presentResult !== 'function') throw new Error('FAIL: feasibility 缺 presentResult');
-    const view = feasibility.presentResult({
-        payload
-    }, result);
-    if (!view?.title?.includes('qiandao')) throw new Error(`FAIL: 结果卡标题缺推荐,实际 ${view?.title}`);
+    if (result.recommended !== 'qiandao')
+        throw new Error('FAIL: expected qiandao recommended');
+    // 4) D-4 结果卡:presentResult 把逐候选判定 + 全成本 vs 预算渲染成紧凑行(非裸 JSON)
+    if (typeof feasibility.presentResult !== 'function')
+        throw new Error('FAIL: feasibility 缺 presentResult');
+    const view = feasibility.presentResult({ payload }, result);
+    if (!view?.title?.includes('qiandao'))
+        throw new Error(`FAIL: 结果卡标题缺推荐,实际 ${view?.title}`);
     const body = view?.content?.[0]?.text ?? '';
-    if (!body.includes('✅') || !body.includes('¥')) throw new Error('FAIL: 结果卡缺判定行/成本行');
+    if (!body.includes('✅') || !body.includes('¥'))
+        throw new Error('FAIL: 结果卡缺判定行/成本行');
     console.log(`\nresult card: ${view?.title}\n${body.split('\n').slice(0, 5).join('\n')}`);
-    for (const n of [
-        'gotry_feasibility_check',
-        'gotry_hotel_search',
-        'gotry_weather_check',
-        'gotry_anything_search',
-        'gotry_agent_reach'
-    ]){
-        if (typeof byName(n).presentResult !== 'function') throw new Error(`FAIL: ${n} 缺 presentResult`);
+    // 5) D-4 结果卡面:高流量 5 工具均带 presentResult;agent_reach 纯函数实拍
+    for (const n of ['gotry_feasibility_check', 'gotry_hotel_search', 'gotry_weather_check', 'gotry_anything_search', 'gotry_agent_reach']) {
+        if (typeof byName(n).presentResult !== 'function')
+            throw new Error(`FAIL: ${n} 缺 presentResult`);
     }
     const ar = byName('gotry_agent_reach');
-    const arView = ar.presentResult({
-        query: {
-            action: 'reach',
-            channel: 'v2ex',
-            method: 'get_hot_topics'
-        }
-    }, {
-        verdict: 'found',
-        summary: '10 topics'
-    });
-    if (!arView?.title?.includes('✅') || !arView.title.includes('v2ex.get_hot_topics')) throw new Error(`FAIL: agent_reach 结果卡,实际 ${arView?.title}`);
+    const arView = ar.presentResult({ action: 'reach', channel: 'v2ex', method: 'get_hot_topics' }, { verdict: 'found', summary: '10 topics' });
+    if (!arView?.title?.includes('✅') || !arView.title.includes('v2ex.get_hot_topics'))
+        throw new Error(`FAIL: agent_reach 结果卡,实际 ${arView?.title}`);
     console.log(`result cards on 5 tools; agent_reach card: ${arView.title}`);
+    // 6) D-30 typed 契约后(#12/#13 形态兼容的演进终态):字符串 blob 形态被宿主权结构化拒绝
+    //    (url required 进 schema);平铺 url 进 execute 走正常抓取/降级,不再有「裸形态落 url」
     const ws = byName('gotry_web_search');
-    const r1 = await ws.execute({
-        query: 'not-a-url'
-    }, null);
-    const r2 = await ws.execute({
-        url: 'not-a-url'
-    }, null);
-    for (const [name, r] of [
-        [
-            'string',
-            r1
-        ],
-        [
-            'bare-obj',
-            r2
-        ]
-    ]){
-        if (r.summary === 'url 必填') throw new Error(`FAIL: ${name} 形态未被 unwrapQuery 接住`);
-    }
-    console.log('unwrapQuery: string + bare-object shapes both accepted');
+    const r1 = await ws.execute({ query: 'not-a-url' }, null);
+    if (!(r1.ok === false && !!r1.evidence))
+        throw new Error(`FAIL: 字符串 blob 形态应被宿主权结构化拒绝(ToolFailure),实际 ${JSON.stringify(r1).slice(0, 160)}`);
+    const r2 = await ws.execute({ url: 'not-a-url' }, null);
+    if (r2.summary === 'url 必填')
+        throw new Error(`FAIL: 平铺 url 应进 execute 走降级,而非参数闸,实际 ${r2.summary}`);
+    console.log('D-30 typed 契约:web_search 字符串 blob → 宿主权拒绝;平铺 url → 正常降级');
+    // 7) 骨架输出 schema 放宽回归:execute 正常返回三字段;guard 错误兜底(ok/summary)
+    // 不再被 strict schema 拒(dsh 参数层拒错→guard 兜底→旧 strict schema 校验炸,
+    // 真实错误信息被掩盖——patrol 实测抓到)
     const skTool = byName('gotry_skeleton_check');
-    const skFlat = await skTool.execute({
-        from: 'HKG',
-        to: 'BKK'
-    }, null);
-    if (skFlat.connected !== true) throw new Error(`FAIL: 骨架平铺调用应 connected=true,实际 ${JSON.stringify(skFlat).slice(0, 120)}`);
-    const skBad = await skTool.execute({
-        from: '',
-        to: ''
-    }, null);
+    const skFlat = await skTool.execute({ from: 'HKG', to: 'BKK' }, null);
+    if (skFlat.connected !== true)
+        throw new Error(`FAIL: 骨架平铺调用应 connected=true,实际 ${JSON.stringify(skFlat).slice(0, 120)}`);
+    const skBad = await skTool.execute({ from: '', to: '' }, null);
     if (typeof skBad?.summary === 'string' && skBad.connected === undefined) {
+        // guard 兜底路径:宽松 schema 下字段可存在即可,不抛
         console.log('skeleton guard-fallback shape survives (loose schema)');
     }
     console.log(`skeleton flat-args: connected=${skFlat.connected}`);
+    // 8) issue #283 闸:D-10 切片 B 接入点(逐字自然表达代码层换算;闸后保持 slot-resolved
+    //    note 回显语义不变;闸失败路径走 input_required 不再无日期降级)
     {
         const hotel = byName('gotry_hotel_search');
-        const resolved = await hotel.execute({
-            query: {
-                destination: '大理',
-                checkIn: '2026-9-4',
-                checkOut: '2026-09-06'
-            }
-        }, null);
-        if (!resolved.date_notes?.some((n)=>n.includes('2026-9-4 → 2026-09-04'))) {
+        // 8a) 非规整 ISO「2026-9-4」由 slot-spec 归一为「2026-09-04」,进 hbcli 的 argv 与 date_notes 回显
+        const resolved = await hotel.execute({ destination: '大理', checkIn: '2026-9-4', checkOut: '2026-09-06' }, null);
+        if (!resolved.date_notes?.some(n => n.includes('2026-9-4 → 2026-09-04'))) {
             throw new Error(`FAIL: 非规整 ISO 应产生 slot-resolved note,实际 ${JSON.stringify(resolved.date_notes)}`);
         }
-        const unresolved = await hotel.execute({
-            query: {
-                destination: '大理',
-                checkIn: '近期'
-            }
-        }, null);
-        if (!unresolved.date_notes?.some((n)=>n.includes('日期未解析:近期'))) {
-            throw new Error(`FAIL: 词表外表达应产生「日期未解析」note(不猜),实际 ${JSON.stringify(unresolved.date_notes)}`);
+        // 8b) 词表外表达(只给单侧 checkIn)→ 闸拒(input_required);issue #283 起,unresolved
+        //     不再走无日期降级——退化为「当前窗口价」是用户语义丢失的红线
+        const unresolved = await hotel.execute({ destination: '大理', checkIn: '近期' }, null);
+        if (unresolved.ok !== false || unresolved.verdict !== 'input_required' || unresolved.reason !== 'check_out_missing') {
+            throw new Error(`FAIL: 词表外/单侧日期闸应拒,实际 ${JSON.stringify(unresolved).slice(0, 200)}`);
         }
-        console.log('hotel date slots: verbatim resolved in code layer; unresolved degrades with explicit note');
+        if (!unresolved.missing?.includes('checkOut'))
+            throw new Error(`FAIL: 闸失败应指出缺 checkOut,实际 ${JSON.stringify(unresolved.missing)}`);
+        console.log('hotel date slots: verbatim resolved in code layer; unresolved/single-side rejected by date-gate (issue #283)');
     }
+    // 9) RFC S1 observation envelope:成功路径平铺 ok:true;guard 兜底即失败分支同形
     {
         const wish = byName('gotry_wish_pool_add');
-        const w = await wish.execute({
-            entry: {
-                name: 'envelope-probe',
-                conditions: {
-                    days: 3
-                }
-            }
-        }, null);
-        if (w.ok !== true) throw new Error(`FAIL: wish 添加应 ok:true,实际 ${JSON.stringify(w)}`);
-        if (result.ok !== true) throw new Error(`FAIL: feasibility 应 ok:true,实际 ${String(result.ok)}`);
+        const w = await wish.execute({ entry: { name: 'envelope-probe', conditions: { days: 3 } } }, null);
+        if (w.ok !== true)
+            throw new Error(`FAIL: wish 添加应 ok:true,实际 ${JSON.stringify(w)}`);
+        if (result.ok !== true)
+            throw new Error(`FAIL: feasibility 应 ok:true,实际 ${String(result.ok)}`);
         console.log('observation envelope: success payloads carry flat ok:true (guard fallback = failure branch)');
     }
+    // 10) RFC S2+S3:wish pool sidecar——0..1 召回/muted 不召回/无命中不硬推/owner 确认归因
     {
         const add = byName('gotry_wish_pool_add');
         const list = byName('gotry_wish_pool_list');
-        const a = await add.execute({
-            entry: {
-                name: 'sidecar-probe-洱海',
-                reason: '5 天起',
-                conditions: {
-                    days: 5,
-                    budget_cny: 4950,
-                    best_months: [
-                        3,
-                        4,
-                        5
-                    ]
-                }
-            }
-        }, null);
-        if (!a.wish_id) throw new Error('FAIL: wish add 应返回稳定 wish_id');
-        const recall = await list.execute({
-            query: {
-                action: 'recall',
-                days: 6,
-                budgetCny: 6000,
-                month: 4
-            }
-        }, null);
-        if (!recall.suggestion?.wish_id) throw new Error(`FAIL: 条件命中应召回恰好 1 条(0..1),实际 ${JSON.stringify(recall.suggestion)}`);
-        if ((recall.suggestion.match_score ?? 0) < 3) throw new Error(`FAIL: 召回应按条件匹配评分,实际 ${JSON.stringify(recall.suggestion)}`);
-        const confirm = await list.execute({
-            query: {
-                action: 'confirm-outcome',
-                wishId: a.wish_id,
-                attribution: 'helpful',
-                detail: '用户明说:这条建议成了'
-            }
-        }, null);
-        if (!confirm.ok || confirm.status !== 'helpful') throw new Error(`FAIL: owner 确认归因应落盘,实际 ${JSON.stringify(confirm)}`);
-        const noAttr = await list.execute({
-            query: {
-                action: 'confirm-outcome',
-                wishId: a.wish_id
-            }
-        }, null);
-        if (noAttr.ok !== false) throw new Error('FAIL: 无归因的 confirm 应拒绝(归因不许缺省)');
-        await add.execute({
-            entry: {
-                name: 'sidecar-probe-洱海',
-                conditions: {
-                    days: 5,
-                    budget_cny: 4950,
-                    best_months: [
-                        3,
-                        4,
-                        5
-                    ]
-                },
-                muted: true
-            }
-        }, null);
-        const recall2 = await list.execute({
-            query: {
-                action: 'recall',
-                days: 6,
-                budgetCny: 6000,
-                month: 4
-            }
-        }, null);
-        if (recall2.suggestion?.wish_id === a.wish_id) throw new Error('FAIL: muted wish 不得召回');
+        const a = await add.execute({ entry: { name: 'sidecar-probe-洱海', reason: '5 天起', conditions: { days: 5, budget_cny: 4950, best_months: [3, 4, 5] } } }, null);
+        if (!a.wish_id)
+            throw new Error('FAIL: wish add 应返回稳定 wish_id');
+        const recall = await list.execute({ query: { action: 'recall', days: 6, budgetCny: 6000, month: 4 } }, null);
+        if (!recall.suggestion?.wish_id)
+            throw new Error(`FAIL: 条件命中应召回恰好 1 条(0..1),实际 ${JSON.stringify(recall.suggestion)}`);
+        if ((recall.suggestion.match_score ?? 0) < 3)
+            throw new Error(`FAIL: 召回应按条件匹配评分,实际 ${JSON.stringify(recall.suggestion)}`);
+        const confirm = await list.execute({ query: { action: 'confirm-outcome', wishId: a.wish_id, attribution: 'helpful', detail: '用户明说:这条建议成了' } }, null);
+        if (!confirm.ok || confirm.status !== 'helpful')
+            throw new Error(`FAIL: owner 确认归因应落盘,实际 ${JSON.stringify(confirm)}`);
+        const noAttr = await list.execute({ query: { action: 'confirm-outcome', wishId: a.wish_id } }, null);
+        if (noAttr.ok !== false)
+            throw new Error('FAIL: 无归因的 confirm 应拒绝(归因不许缺省)');
+        // muted:置休眠后 0..1 召回不再出现(同名更新 muted:true)
+        await add.execute({ entry: { name: 'sidecar-probe-洱海', conditions: { days: 5, budget_cny: 4950, best_months: [3, 4, 5] }, muted: true } }, null);
+        const recall2 = await list.execute({ query: { action: 'recall', days: 6, budgetCny: 6000, month: 4 } }, null);
+        if (recall2.suggestion?.wish_id === a.wish_id)
+            throw new Error('FAIL: muted wish 不得召回');
         console.log('wish sidecar: recall 0..1 + muted excluded + owner-confirmed attribution only');
     }
+    // 11) M4 T1 读回:记忆 brief——save 前空态/回访态含画像字段(与用户当轮冲突以用户为准)
     {
         const brief = variables['motivation_brief'];
-        if (typeof brief !== 'function') throw new Error('FAIL: motivation_brief 变量未注册');
+        if (typeof brief !== 'function')
+            throw new Error('FAIL: motivation_brief 变量未注册');
         const saved = await byName('gotry_motivation_save').execute({
-            profile: {
-                weights: {
-                    brief_probe: 0.6
-                },
-                evidence: [
-                    '用户原话:smoke 读回探针'
-                ],
-                hard: {
-                    wake_not_before: '07:15'
-                }
-            }
+            profile: { weights: { brief_probe: 0.6 }, evidence: ['用户原话:smoke 读回探针'], hard: { wake_not_before: '07:15' } },
         }, null);
-        if (saved.ok !== true) throw new Error('FAIL: 读回探针画像应保存成功');
+        if (saved.ok !== true)
+            throw new Error('FAIL: 读回探针画像应保存成功');
         const rendered = brief();
         if (!rendered.includes('brief_probe=') || !rendered.includes('wake_not_before=07:15') || !/证据 [1-9]\d* 条/.test(rendered)) {
             throw new Error(`FAIL: 回访 brief 应含画像字段,实际:${rendered.slice(0, 200)}`);
         }
         console.log('memory read-back: motivation_brief renders profile for returning sessions (empty = first visit)');
     }
+    // 12) 会话数据面工具(P3 切片1):官方通道 live + 会话工具 needs-login 合同(隔离 profile,零导航)
     {
-        const fa = await byName('gotry_flyai_search').execute({
-            query: {
-                kind: 'flight',
-                from: '上海',
-                to: '丽江',
-                date: '2026-10-01'
+        const fa = await byName('gotry_flyai_search').execute({ kind: 'flight', from: '上海', to: '丽江', date: SMOKE_FLIGHT_DATE }, null);
+        const faBlocked = fa.verdict === 'error' && /sentinel|block|trial limit/i.test(fa.error ?? '');
+        // 端点不可达/超时(出口 IP 被拒或网络抖动)→ 工具以带证据链的 error 终态优雅降级,同样合法
+        const faErrTerminal = fa.ok === false && fa.verdict === 'error' && /^flyai-error$/.test(String(fa.via ?? '')) && /\[实时API:flyai@error@/.test(String(fa.evidence ?? ''));
+        // 试用额度达限(2026-09-02 迪拜 session):共享配额耗尽是配置态不是代码故障——
+        // 归 needs-setup 且 setup 带配 key 指引;断言的是指引合同,不是上游配额可用性
+        const faNeedsSetup = fa.ok === false && fa.verdict === 'needs-setup';
+        if (faNeedsSetup) {
+            if (!/FLYAI_API_KEY/.test(String(fa.setup ?? '')) || !/勿重试|不要重试|请勿重试/.test(String(fa.setup ?? ''))) {
+                throw new Error(`FAIL: flyai needs-setup 应带配 key 指引与勿重试明示,实际 setup:${String(fa.setup ?? '').slice(0, 200)}`);
             }
-        }, null);
-        const faBlocked = fa.verdict === 'error' && /sentinel|block/i.test(fa.error ?? '');
-        if (faBlocked) {
-            console.log('  WARN - flyai Sentinel 限流中,降级合同通过(hit 断言跳过)');
-        } else if (fa.ok !== true || fa.verdict !== 'hit' || (fa.options?.length ?? 0) < 1 || !/\[实时API:flyai@/.test(fa.evidence ?? '')) {
+            console.log('  WARN - flyai 匿名试用额度达限(needs-setup,配置态),setup 指引合同通过(hit 断言跳过)');
+        }
+        else if (faBlocked) {
+            console.log('  WARN - flyai 上游限流中(Sentinel/trial-limit 429),降级合同通过(hit 断言跳过)');
+        }
+        else if (faErrTerminal) {
+            console.log('  WARN - flyai 端点不可达(超时/降级),证据链合同通过(hit 断言跳过)');
+        }
+        else if (fa.ok !== true || fa.verdict !== 'hit' || (fa.options?.length ?? 0) < 1 || !/\[实时API:flyai@/.test(fa.evidence ?? '')) {
             throw new Error(`FAIL: flyai 工具应 live hit,实际:${JSON.stringify(fa).slice(0, 200)}`);
         }
+        // smoke 不得 attach 或读取用户日常 Chrome；显式选择 cdp 诊断车道并把发现目录
+        // 指向隔离空目录，确定性验证 needs-attach/no-spend 合同。真实 attach 只走 #21 人在场验收。
         const prof = mkdtempSync(join(smokeRoot, 'sess-'));
-        const ss = await byName('gotry_session_search').execute({
-            query: {
-                from: '上海',
-                to: '丽江',
-                date: '2026-10-01'
+        // 过去日期预校验(issue #24):代码层直接拒绝并指明修正方向,不发上游查询、不产生误导性 miss
+        const faPast = await byName('gotry_flyai_search').execute({ kind: 'flight', from: '深圳', to: '普吉', date: '2026-01-01' }, null);
+        if (!(faPast.ok === false && /已是过去/.test(String(faPast.summary ?? '')))) {
+            throw new Error(`FAIL: flyai 过去日期应代码层预校验拒绝,实际:${JSON.stringify(faPast).slice(0, 200)}`);
+        }
+        let ss;
+        if (!sessionLiveEnabled()) {
+            ss = offlineSessionFlightResult();
+            console.log('  OFFLINE - GOTRY_SESSION_LIVE!=1: session transport was not invoked');
+        }
+        else {
+            const previousChromeUserDataDir = process.env.CHROME_USER_DATA_DIR;
+            process.env.CHROME_USER_DATA_DIR = prof;
+            try {
+                ss = await byName('gotry_session_search').execute({ from: '上海', to: '丽江', date: SMOKE_FLIGHT_DATE }, null);
             }
-        }, null);
-        rmSync(prof, {
-            recursive: true,
-            force: true
+            finally {
+                if (previousChromeUserDataDir === undefined)
+                    delete process.env.CHROME_USER_DATA_DIR;
+                else
+                    process.env.CHROME_USER_DATA_DIR = previousChromeUserDataDir;
+            }
+        }
+        rmSync(prof, { recursive: true, force: true });
+        // puppeteer-core 可用时应为 needs-attach；缺依赖环境仍以带证据链 error 优雅降级。
+        const ssErrTerminal = ss.ok === false && /^session-[a-z0-9-]+-error$/.test(String(ss.via ?? '')) && !!ss.evidence;
+        if (!(ss.verdict === 'needs-login' || ss.verdict === 'needs-attach' || ss.verdict === 'hit' || ss.verdict === 'cooldown' || ss.verdict === 'challenged') && !ssErrTerminal) {
+            throw new Error(`FAIL: session 工具终态应属 {needs-attach,needs-login,hit,cooldown,challenged} 或带证据的 error 终态,实际:${JSON.stringify(ss).slice(0, 200)}`);
+        }
+        const faOutcome = faBlocked
+            ? 'sentinel-限流降级'
+            : faErrTerminal
+                ? '端点不可达降级'
+                : `live hit(${fa.options?.length ?? 0} 条)`;
+        console.log(`session-face tools: flyai ${faOutcome}; session cdp 隔离门禁=needs-attach`);
+        // 酒店平铺接入(2026-08-29):同一 flyai 工具 kind=hotel——live 三合法终态(试用达限 needs-setup / 限流·端点降级 or hit)
+        const fh = await byName('gotry_flyai_search').execute({ kind: 'hotel', to: '大理', checkIn: SMOKE_HOTEL_CHECKIN, checkOut: SMOKE_HOTEL_CHECKOUT }, null);
+        const fhBlocked = fh.verdict === 'error' && /sentinel|block|trial limit/i.test(fh.error ?? '');
+        const fhErrTerminal = fh.ok === false && fh.verdict === 'error' && /^flyai-error$/.test(String(fh.via ?? '')) && /\[实时API:flyai@error@/.test(String(fh.evidence ?? ''));
+        const fhNeedsSetup = fh.ok === false && fh.verdict === 'needs-setup';
+        if (fhNeedsSetup) {
+            if (!/FLYAI_API_KEY/.test(String(fh.setup ?? ''))) {
+                throw new Error(`FAIL: flyai hotel needs-setup 应带配 key 指引,实际 setup:${String(fh.setup ?? '').slice(0, 200)}`);
+            }
+            console.log('  WARN - flyai hotel 试用额度达限(needs-setup,配置态),setup 指引合同通过(hit 断言跳过)');
+        }
+        else if (fhBlocked || fhErrTerminal) {
+            console.log('  WARN - flyai hotel 限流/端点降级,证据链合同通过(hit 断言跳过)');
+        }
+        else if (fh.ok !== true || fh.verdict !== 'hit' || (fh.hotels?.length ?? 0) < 1 || !/\[实时API:flyai@/.test(fh.evidence ?? '')) {
+            throw new Error(`FAIL: flyai hotel 应 live hit,实际:${JSON.stringify(fh).slice(0, 220)}`);
+        }
+        const fhDest = await byName('gotry_flyai_search').execute({ kind: 'hotel' }, null);
+        if (fhDest.ok !== false)
+            throw new Error('FAIL: hotel 缺目的地应参数闸拒绝');
+        // D-30 迁移锁:legacy blob 形态({query:{...}} 包裹)在宿主权校验即被结构化拒绝——
+        // defineTool validateArgs 抛 ToolArgsError,guardToolExecute 兜成 ADR-13 ToolFailure(ok:false+evidence)
+        const faLegacy = await byName('gotry_flyai_search').execute({ query: { kind: 'flight', from: '上海', to: '丽江', date: SMOKE_FLIGHT_DATE } }, null);
+        if (!(faLegacy.ok === false && !!faLegacy.evidence && /内部错误|参数|schema|violat/i.test(String(faLegacy.summary ?? '')))) {
+            throw new Error(`FAIL: flyai legacy blob 形态应被 typed 契约结构化拒绝(ADR-13 ToolFailure),实际:${JSON.stringify(faLegacy).slice(0, 200)}`);
+        }
+        const faBadEnum = await byName('gotry_flyai_search').execute({ kind: 'plane' }, null);
+        if (!(faBadEnum.ok === false && !!faBadEnum.evidence)) {
+            throw new Error(`FAIL: flyai kind 枚举外值应被宿主权校验拒绝,实际:${JSON.stringify(faBadEnum).slice(0, 200)}`);
+        }
+        console.log('  D-30 typed 契约:legacy blob/枚举外值 → 宿主权结构化拒绝(ToolFailure 形状保持)');
+        // 会话酒店路由(2026-09-03 实装):未收录城市在 transport 前短路 → error + cityId 指引(offline 零桥零浏览器)
+        const sh = await byName('gotry_session_search').execute({ kind: 'hotel', to: '不在码表的城市' }, null);
+        if (!(sh.ok === false && /city=/.test(String(sh.summary ?? '')))) {
+            throw new Error(`FAIL: 会话酒店未收录城市应带 cityId 指引,实际:${JSON.stringify(sh).slice(0, 200)}`);
+        }
+        console.log('  hotel kind 路由:未收录城市 → error + cityId 指引(transport 前短路)');
+        // 会话火车路由(2026-09-03 实装):未收录电报码在 transport 前短路 → error + 电报码发现指引(offline 零桥零浏览器)
+        const st = await byName('gotry_session_search').execute({ kind: 'train', from: '不在码表', to: '也不在', date: '2026-12-01' }, null);
+        if (!(st.ok === false && /fromStationTelecode/.test(String(st.summary ?? '')))) {
+            throw new Error(`FAIL: 会话火车未收录电报码应带发现指引,实际:${JSON.stringify(st).slice(0, 200)}`);
+        }
+        console.log('  train kind 路由:未收录电报码 → error + 电报码指引(transport 前短路)');
+        // D-30 第二刀迁移锁:session 工具全字段可选(kind 缺省=flight),根 schema 开放无法宿主权拒 blob
+        // → interpretArgs 容忍层接住(设计 §4③):blob 归一后照常走业务闸——用 kind=hotel 缺 to 的
+        // 参数闸短路出确定性结构化报错(零 transport 零节律闸),证明容忍层归一语义不漂
+        const ssLegacy = await byName('gotry_session_search').execute({ query: { kind: 'hotel' } }, null);
+        if (!(ssLegacy.ok === false && !('routing' in ssLegacy) && /需要 to/.test(String(ssLegacy.summary ?? '')))) {
+            throw new Error(`FAIL: session legacy blob 应经容忍层归一走业务闸(结构化报错,无 routing),实际:${JSON.stringify(ssLegacy).slice(0, 200)}`);
+        }
+        console.log('  D-30 typed 契约:session legacy blob → 容忍层归一 + 结构化业务报错(全字段可选无法宿主权拒)');
+        const fhPast = await byName('gotry_flyai_search').execute({ kind: 'hotel', to: '大理', checkIn: '2026-01-01', checkOut: '2026-01-03' }, null);
+        if (!(fhPast.ok === false && /不是未来合法区间/.test(String(fhPast.summary ?? '')))) {
+            throw new Error(`FAIL: 酒店过去入住日应代码层预校验拒绝,实际:${JSON.stringify(fhPast).slice(0, 200)}`);
+        }
+        const fhOutcome = fhNeedsSetup
+            ? '试用达限(needs-setup)'
+            : fhBlocked
+                ? 'sentinel-限流降级'
+                : fhErrTerminal
+                    ? '端点不可达降级'
+                    : `${fh.hotels?.length ?? 0} 家`;
+        console.log(`  hotel channel: ${fhOutcome}; 参数闸/过去日闸生效`);
+    }
+    // 13) 账号会话授权闸(v2,RFC 支柱④进代码):每会话每站点首次弹卡、会话内记住;
+    // 总闸 off → fail-closed deny(随时可关);其他工具原样放行。授权完整语义(批准记忆/
+    // 拒绝吊销/allow)由 session-tests §I 纯函数覆盖;此处验证闸确实挂上了注册表。
+    {
+        const gate = preExecutes.at(-1);
+        if (!gate)
+            throw new Error('FAIL: tools/pre-execute 授权闸未注册');
+        const next = async () => ({ kind: 'allow' });
+        const ask = await gate({ name: 'gotry_session_search', arguments: { from: '上海' } }, next);
+        if (ask.kind !== 'ask' || !/只读检索/.test(String(ask.reason ?? ''))) {
+            throw new Error(`FAIL: 会话工具无审批通道时应交 ask(运行时原生结算),实际:${JSON.stringify(ask)}`);
+        }
+        if (!/携程机票/.test(String(ask.reason ?? ''))) {
+            throw new Error(`FAIL: 缺省 kind 必须选择 flight 站点,实际:${JSON.stringify(ask)}`);
+        }
+        const conflictArgs = { kind: 'flight', query: { kind: 'dida' } };
+        const conflict = await gate({
+            name: 'gotry_session_search',
+            callId: 'conflict-site',
+            arguments: conflictArgs,
+        }, next);
+        if (conflict.kind !== 'ask' || !/Dida 供应商门户/.test(String(conflict.reason ?? ''))) {
+            throw new Error(`FAIL: actual registered pre-execute hook must follow query-first selected site,实际:${JSON.stringify(conflict)}`);
+        }
+        const effectAgent = {};
+        const sessionTool = byName('gotry_session_search');
+        const pipeline = await gate({
+            name: 'gotry_session_search', agent: effectAgent, callId: 'conflict-effect', arguments: conflictArgs,
+        }, async () => {
+            const result = await sessionTool.execute(conflictArgs, null);
+            effectSummaries.push(result && typeof result === 'object' && 'summary' in result ? String(result.summary ?? '') : '');
+            return { kind: 'allow' };
         });
-        if (!(ss.verdict === 'needs-login' || ss.verdict === 'needs-attach' || ss.verdict === 'hit' || ss.verdict === 'cooldown' || ss.verdict === 'challenged')) {
-            throw new Error(`FAIL: session 工具终态应属 {needs-login,hit,cooldown,challenged},实际:${JSON.stringify(ss).slice(0, 200)}`);
+        const didaEffects = selectedEffects.filter(effect => effect === 'SESSION_DIDA_SEARCH');
+        if (pipeline.kind !== 'allow' || approvalReasons.length !== 1 || didaEffects.length !== 1 || didaEffects[0] !== 'SESSION_DIDA_SEARCH' || !effectSummaries[0]?.startsWith('Dida 门户实时价')) {
+            throw new Error(`FAIL: pre-execute→approval→selected effect fixture 未锁定 Dida,实际:${JSON.stringify({ pipeline, approvalReasons, selectedEffects, effectSummaries })}`);
         }
-        console.log(`session-face tools: flyai ${faBlocked ? 'sentinel-限流降级' : `live hit(${fa.options?.length ?? 0} 条)`}; session 终态=${ss.verdict}(登录态存在前提合同)`);
+        console.log(`consent pipeline fixture: query-first conflict → approval=${approvalReasons.length}, effect=${selectedEffects[0]}, summary=${effectSummaries[0]}`);
+        const pass = await gate({ name: 'gotry_anything_search' }, next);
+        if (pass.kind !== 'allow')
+            throw new Error(`FAIL: 非会话工具应原样放行,实际:${JSON.stringify(pass)}`);
+        cfg.sessionAccess = 'off';
+        const deny = await gate({ name: 'gotry_session_search', arguments: { kind: 'flight' } }, next);
+        if (deny.kind !== 'deny' || !/sessionAccess=off/.test(String(deny.reason ?? ''))) {
+            throw new Error(`FAIL: sessionAccess=off 应 fail-closed deny,实际:${JSON.stringify(deny)}`);
+        }
+        const trainDeny = await gate({ name: 'gotry_session_search', arguments: { kind: 'train' } }, next);
+        if (trainDeny.kind !== 'deny' || !/sessionAccess=off/.test(String(trainDeny.reason ?? ''))) {
+            throw new Error(`FAIL: sessionAccess=off 不得绕过 train,实际:${JSON.stringify(trainDeny)}`);
+        }
+        cfg.sessionAccess = 'ask';
+        console.log('consent gate: session tool → approval-card ask(每会话一次/拒绝即会话内吊销); off → fail-closed deny; other tools pass through');
     }
-    rmSync(smokeRoot, {
-        recursive: true,
-        force: true
-    });
+    // 14) 登录引导产品工具(gotry_session_login,第 18 工具):注册 + 「登录在外部网站完成、
+    // gotry 不经手任何凭证」红线钉在描述里;不真调 execute(测试纪律:不开用户浏览器/不 attach)
+    {
+        const lo = byName('gotry_session_login');
+        if (typeof lo.presentResult !== 'function')
+            throw new Error('FAIL: gotry_session_login 缺 presentResult');
+        const desc = String(lo.description ?? '');
+        if (!/NEVER collects, stores, or transmits credentials/.test(desc)) {
+            throw new Error(`FAIL: 登录工具描述缺「不经手凭证」语义红线,实际 ${desc.slice(0, 120)}`);
+        }
+        console.log('login tool: registered; 登录=外部网站+用户自己的浏览器,gotry 只读票据名(0 值过手)语义钉死');
+    }
+    // 15) 产物面(issue #25):账本工单 + cwd md 可发现;read 行号窗口;dsh read 卡字段;越界/类型护栏
+    {
+        const { writeFileSync } = await import('node:fs');
+        const { listArtifacts, readArtifact } = await import('../capabilities/artifacts.js');
+        const { ensureLedger } = await import('../src/state-ledger.js');
+        const cwdDir = mkdtempSync(join(tmpdir(), 'gotry-artifacts-cwd-'));
+        const twelve = Array.from({ length: 12 }, (_, i) => `第 ${i + 1} 行`).join('\n');
+        writeFileSync(join(cwdDir, 'trip-2027-probe.md'), `# 行程·产物探针\n${twelve}\n`);
+        // 账本权威路径:种一个已交付工单(隔离 stateRoot,不碰真实 gotry-state)
+        const ledger = ensureLedger(smokeRoot);
+        ledger.createWorkflowRun({ id: 'art-probe-1', goal: '行程·产物探针(账本)', ticket: { objective: 'probe' }, state: {} });
+        ledger.settleWorkflowRun('art-probe-1', '# 交付·账本权威\nD1 大理\nD2 洱海');
+        const listTool = byName('gotry_artifacts_list');
+        const artifactExec = { agent: { session: { header: { cwd: cwdDir } } } };
+        const ledList = await listTool.execute({}, artifactExec);
+        const run = ledList.artifacts?.find(a => a.id === 'art-probe-1');
+        if (!ledList.ok || !run || run.source !== 'async-run' || run.status !== 'settled') {
+            throw new Error(`FAIL: artifacts list 应发现账本已交付工单,实际:${JSON.stringify(ledList).slice(0, 200)}`);
+        }
+        const direct = await listArtifacts({ stateRoot: smokeRoot, cwd: cwdDir });
+        if (!direct.artifacts.some(a => a.source === 'cwd-file' && a.id === 'trip-2027-probe.md')) {
+            throw new Error(`FAIL: artifacts list 应发现 cwd 顶层 md,实际:${JSON.stringify(direct.artifacts.map(a => a.id))}`);
+        }
+        const readTool = byName('gotry_artifacts_read');
+        const r1 = await readTool.execute({ path: 'art-probe-1' }, artifactExec);
+        if (!r1.ok || r1.lines?.[0]?.number !== 1 || !r1.lines?.[0]?.text.includes('交付·账本权威') || r1.lang !== 'markdown') {
+            throw new Error(`FAIL: 裸工单 id 应从账本读出行号视图,实际:${JSON.stringify(r1).slice(0, 200)}`);
+        }
+        const readOutput = readTool.output;
+        const view = readTool.presentResult?.({ path: 'art-probe-1' }, {
+            isError: false,
+            content: readOutput?.render?.({ path: 'art-probe-1' }, r1) ?? [],
+            meta: readOutput?.presentationMeta?.({ path: 'art-probe-1' }, r1),
+        });
+        if (view?.card !== 'read' || view.path !== r1.path || view.offset !== 1 || view.lines?.length !== r1.lines?.length || view.totalLines !== r1.totalLines || view.lang !== 'markdown') {
+            throw new Error(`FAIL: read 卡字段不齐,实际:${JSON.stringify(view).slice(0, 200)}`);
+        }
+        const r2 = await readArtifact({ stateRoot: smokeRoot, cwd: cwdDir, path: 'trip-2027-probe.md', offset: 10, limit: 5 });
+        if (!r2.ok || r2.lines[0].number !== 10 || r2.windowed !== false) {
+            throw new Error(`FAIL: 行窗口 12 行文件 offset=10 应从行号 10 起,实际:${JSON.stringify(r2.ok ? { o: r2.offset, first: r2.lines[0]?.number } : r2)}`);
+        }
+        if (r2.lines.length !== 5)
+            throw new Error(`FAIL: 14 行文件 offset=10/limit=5 窗口应恰 5 行(10-14),实际 ${r2.lines.length}`);
+        const badPath = await readArtifact({ stateRoot: smokeRoot, cwd: cwdDir, path: '../../../../../etc/passwd' });
+        if (badPath.ok)
+            throw new Error('FAIL: 越界路径必须被拒');
+        const badExt = await readArtifact({ stateRoot: smokeRoot, cwd: cwdDir, path: 'gotry-state/gotry-state.db' });
+        if (badExt.ok)
+            throw new Error('FAIL: 白名单外扩展名(.db)必须被拒');
+        // 15b) dsh Host presenter 契约(issue #285):
+        //   - list 的 presentResult 是 SearchPathsResultView(card:'search' shape:'paths');
+        //     DSH Web 的 public Client adapter separately consumes the runtime block;
+        //   - read 的 presentCall 加 locations:[{path,line:1}],editor 视图在 call 阶段就 follow-along;
+        //   - read 的 presentResult 是 ReadResultView(path/offset/lines/totalLines/lang 齐全),
+        //     Host content[0] 是 source 身份行(显示「从哪个产物读」,避免把旧摘要当新内容)。
+        const listPayload = await listTool.execute({ limit: 5 }, artifactExec);
+        const listOutput = listTool.output;
+        const listView = listTool.presentResult?.({}, {
+            isError: false,
+            content: listOutput?.render?.({}, listPayload) ?? [],
+            meta: listOutput?.presentationMeta?.({}, listPayload),
+        });
+        if (listView?.card !== 'search' || listView?.shape !== 'paths') {
+            throw new Error(`FAIL: list 卡片应为 card='search' shape='paths',实际:${JSON.stringify({ card: listView?.card, shape: listView?.shape }).slice(0, 200)}`);
+        }
+        if (!Array.isArray(listView.paths) || listView.paths.length !== (listPayload.artifacts?.length ?? 0)) {
+            throw new Error(`FAIL: list paths 长度应等于 artifacts 长度,实际 ${listView.paths?.length} vs ${listPayload.artifacts?.length}`);
+        }
+        if (listView.truncated !== Boolean(listPayload.truncated) || listView.total !== (listPayload.total ?? 0)) {
+            throw new Error(`FAIL: list truncated/total 应与 execute 返回一致,实际 truncated=${listView.truncated} total=${listView.total} vs ${listPayload.truncated}/${listPayload.total}`);
+        }
+        const readCall = readTool.presentCall?.({ path: 'trip-2027-probe.md' });
+        if (readCall?.kind !== 'read' || !Array.isArray(readCall.locations) || readCall.locations[0]?.path !== 'trip-2027-probe.md') {
+            throw new Error(`FAIL: read presentCall 应 kind='read' + locations[0].path='trip-2027-probe.md',实际:${JSON.stringify(readCall).slice(0, 200)}`);
+        }
+        // 复用 r1(账本已交付工单,绝对 path),断言 read 卡片字段 + identity 源行
+        const readView = readTool.presentResult?.({ path: 'art-probe-1' }, {
+            isError: false,
+            content: readOutput?.render?.({ path: 'art-probe-1' }, r1) ?? [],
+            meta: readOutput?.presentationMeta?.({ path: 'art-probe-1' }, r1),
+        });
+        if (readView?.card !== 'read' || readView.path !== r1.path || readView.totalLines !== r1.totalLines || readView.lang !== 'markdown') {
+            throw new Error(`FAIL: read 卡片字段不齐,实际:${JSON.stringify(readView).slice(0, 200)}`);
+        }
+        const identityText = readView.content?.[0]?.text ?? '';
+        if (!identityText.includes('source:') || !identityText.includes(r1.path ?? '')) {
+            throw new Error(`FAIL: read fallback content[0] 应含 source 身份行 + 完整 path,实际:${identityText.slice(0, 200)}`);
+        }
+        rmSync(cwdDir, { recursive: true, force: true });
+        console.log(`artifacts: ledger run + cwd md discovered; read window(${r2.ok ? r2.lines.length : '?'} lines @10) + read card; list→SearchPathsResultView + read locations + source identity; path/ext guardrails hold`);
+    }
+    // 16) 产物事实闸(issue #46,第 21 工具):事实落账(hit 正事实 + miss 负事实,隔离 stateRoot)
+    //     → 闸内回溯:已验证措辞 pass;exact-date miss 的 route+date 被航班号填充 = blocked
+    {
+        const { appendFacts, loadFactRegistry } = await import('../capabilities/fact-log.js');
+        const { factsFromFlyai } = await import('../src/bookable-facts.js');
+        // 与生产同路径:事实落账即归一到 IATA 空间(index.ts 传 city_alias;闸侧 claim 也归一,两边才可比)
+        const avMap = JSON.parse(await readFile(join(import.meta.dirname, '..', '..', 'data', 'airline-airports.json'), 'utf-8'));
+        const fetchedAt = '2026-08-29T00:00:00.000Z';
+        await appendFacts(smokeRoot, [
+            ...factsFromFlyai({ kind: 'flight', origin: '香港', destination: '普吉', date: '2027-07-18' }, { verdict: 'hit', options: [{ no: 'CX771', name: '国泰航空', depDateTime: '2027-07-18T08:05:00+08:00', arrDateTime: '2027-07-18T10:35:00+07:00', price: 1234 }], evidence: '' }, fetchedAt, avMap.city_alias),
+            ...factsFromFlyai({ kind: 'flight', origin: '深圳', destination: '普吉', date: '2027-07-16' }, { verdict: 'miss', options: [], evidence: '' }, fetchedAt, avMap.city_alias),
+        ]);
+        const registry = await loadFactRegistry(smokeRoot);
+        // §12 的 flyai live 检索也会落账(接线正确性的副产品)——按本次探针的 query_id 过滤
+        const probeFacts = registry.filter((f) => f.kind !== 'policy' && (f.query_id.endsWith(':2027-07-16') || f.query_id.endsWith(':2027-07-18')));
+        if (probeFacts.length !== 2 || !probeFacts.some(f => f.bookability === 'unavailable_exact_date') || !probeFacts.some(f => f.bookability === 'bookable_exact_date')) {
+            throw new Error(`FAIL: 事实侧车应落 1 正 1 负两条,实际:${JSON.stringify(probeFacts.map(f => f.bookability))}`);
+        }
+        const gate = byName('gotry_fact_gate');
+        const passMd = ['# 行程片段', '## D3 7.18 香港 → 普吉', '- 国泰航空 CX771 08:05→10:35(已按 exact-date 检索记录)'].join('\n');
+        const pass = await gate.execute({ markdown: passMd, tripYear: 2027 }, null);
+        if (pass.verdict !== 'pass' || pass.presentation !== 'verified_itinerary_allowed') {
+            throw new Error(`FAIL: 可回溯产物应 pass,实际:${JSON.stringify(pass).slice(0, 300)}`);
+        }
+        const badMd = ['# 行程片段', '## D1 7.16 深圳 → 普吉', '- 香港快运 UO784 10:05→12:40 直飞 ✓'].join('\n');
+        const blocked = await gate.execute({ markdown: badMd, tripYear: 2027 }, null);
+        if (blocked.verdict !== 'blocked' || !blocked.violations?.some(v => v.kind === 'not_in_source')) {
+            throw new Error(`FAIL: exact-date miss 被 UO784 填充必须 blocked(not_in_source),实际:${JSON.stringify(blocked).slice(0, 300)}`);
+        }
+        const view = gate.presentResult?.({}, blocked);
+        if (!view?.title?.includes('blocked'))
+            throw new Error(`FAIL: blocked 呈现卡标题应含 blocked,实际:${view?.title}`);
+        console.log(`fact gate: registry 1+1(hit/miss);verified 措辞 pass;miss 填充 UO784 blocked(not_in_source) + 呈现卡`);
+        // 16b) #299 FlyAI train 的真实注册工具 seam:
+        //      gotry_flyai_search execute → factsFromFlyai → appendFacts → loadFactRegistry
+        //      → canonical renderer(anchor) → gotry_fact_gate execute;不触碰真实 provider。
+        const flyaiTrain = byName('gotry_flyai_search');
+        const searchedTrain = await flyaiTrain.execute({ kind: 'train', from: '上海', to: '昆明', date: '2027-11-11' }, null);
+        if (searchedTrain.kind !== 'train' || searchedTrain.verdict !== 'hit') {
+            throw new Error(`FAIL: FlyAI train fixture 应经注册工具返回 hit,实际:${JSON.stringify(searchedTrain).slice(0, 300)}`);
+        }
+        const trainRegistry = (await loadFactRegistry(smokeRoot)).filter((f) => f.kind === 'train' && f.query_id === 'flyai:train:上海-昆明:2027-11-11');
+        if (trainRegistry.length !== 1 || trainRegistry[0].bookability !== 'bookable_exact_date' || trainRegistry[0].source !== 'flyai') {
+            throw new Error(`FAIL: FlyAI train fixture 应经真实工具 seam 落 typed fact,实际:${JSON.stringify(trainRegistry).slice(0, 500)}`);
+        }
+        const trainMarkdown = `# 车次片段\n## D1 11.11 上海 → 昆明\n${renderFlightFact(trainRegistry[0])}`;
+        if (!trainMarkdown.includes(`<!-- fact:${trainRegistry[0].fact_id} -->`)
+            || !trainMarkdown.includes('车次')
+            || trainMarkdown.includes('直飞')
+            || trainMarkdown.includes('¥')
+            || trainMarkdown.includes('价待询')) {
+            throw new Error(`FAIL: train canonical renderer 应只携带车次语义与 typed anchor,不得直飞/价格:${trainMarkdown}`);
+        }
+        const trainGate = await gate.execute({ markdown: trainMarkdown, tripYear: 2027 }, null);
+        if (trainGate.verdict !== 'pass' || (trainGate.violations?.length ?? 0) !== 0) {
+            throw new Error(`FAIL: FlyAI train canonical anchor 经 gotry_fact_gate 应 pass,实际:${JSON.stringify(trainGate).slice(0, 500)}`);
+        }
+        console.log('fact gate: registered FlyAI train → typed log → canonical anchor → gotry_fact_gate pass');
+        // 16c) #355 registered gotry_session_search seam: typed outcome → isolated
+        // bookable-facts bytes → existing canonical rail anchor → fact gate.
+        const sessionTrain = byName('gotry_session_search');
+        const trainHit = await sessionTrain.execute({ kind: 'train', from: '上海', to: '昆明', date: '2027-11-11' }, null);
+        const trainEmpty = await sessionTrain.execute({ kind: 'train', from: '上海', to: '昆明', date: '2027-11-12' }, null);
+        const trainMalformed = await sessionTrain.execute({ kind: 'train', from: '上海', to: '昆明', date: '2027-11-13' }, null);
+        const trainTransport = await sessionTrain.execute({ kind: 'train', from: '上海', to: '昆明', date: '2027-11-14' }, null);
+        const trainTampered = await sessionTrain.execute({ kind: 'train', from: '上海', to: '昆明', date: '2027-11-15' }, null);
+        if (trainHit.ok !== true || trainHit.verdict !== 'hit' || trainHit.outcome?.kind !== 'recognized-nonempty' || !trainHit.collection?.queryId || (trainHit.trains?.length ?? 0) !== 1) {
+            throw new Error(`FAIL: registered session train hit typed result,实际:${JSON.stringify(trainHit).slice(0, 600)}`);
+        }
+        if (trainEmpty.ok !== true || trainEmpty.verdict !== 'miss' || trainEmpty.outcome?.kind !== 'recognized-empty') {
+            throw new Error(`FAIL: registered session train genuine empty,实际:${JSON.stringify(trainEmpty).slice(0, 400)}`);
+        }
+        if (trainMalformed.ok !== false || trainMalformed.verdict !== 'error' || trainMalformed.outcome?.kind !== 'malformed') {
+            throw new Error(`FAIL: registered session train malformed,实际:${JSON.stringify(trainMalformed).slice(0, 400)}`);
+        }
+        if (trainTransport.ok !== false || trainTransport.verdict !== 'error' || trainTransport.outcome?.kind !== 'transport-runtime-error') {
+            throw new Error(`FAIL: registered session train transport error,实际:${JSON.stringify(trainTransport).slice(0, 400)}`);
+        }
+        if (trainTampered.ok !== true || trainTampered.verdict !== 'hit' || trainTampered.outcome?.kind !== 'recognized-nonempty'
+            || trainTampered.collection?.requested?.date !== '2027-11-14' || (trainTampered.trains?.length ?? 0) !== 1) {
+            throw new Error(`FAIL: tampered collection fixture should remain hit-shaped but carry mismatched binding,实际:${JSON.stringify(trainTampered).slice(0, 600)}`);
+        }
+        const sessionFactBytes = await readFile(join(smokeRoot, 'gotry-state', 'bookable-facts.jsonl'), 'utf8');
+        const sessionFacts = sessionFactBytes.split('\n').filter(Boolean).map(line => JSON.parse(line));
+        const sessionTrainFacts = sessionFacts.filter(f => f.source === 'session:12306-train');
+        if (sessionTrainFacts.length !== 2
+            || !sessionTrainFacts.some(f => f.query_id === trainHit.collection.queryId && f.bookability === 'bookable_exact_date' && f.kind === 'train')
+            || !sessionTrainFacts.some(f => f.query_id === 'session:12306-train:fixture-2027-11-12' && f.bookability === 'unavailable_exact_date')
+            || sessionFacts.some(f => /2027-11-13|2027-11-14|2027-11-15/.test(f.query_id))) {
+            throw new Error(`FAIL: session train isolated fact bytes 应仅含 hit+empty,实际:${JSON.stringify(sessionTrainFacts).slice(0, 900)}`);
+        }
+        const sessionHitFact = sessionTrainFacts.find(f => f.query_id === trainHit.collection.queryId);
+        const sessionMarkdown = `# 车次片段\n## 11.11 上海 → 昆明\n${renderFlightFact(sessionHitFact)}`;
+        if (!sessionMarkdown.includes(`<!-- fact:${sessionHitFact.fact_id} -->`) || !sessionMarkdown.includes('车次') || sessionMarkdown.includes('直飞') || sessionMarkdown.includes('¥') || sessionMarkdown.includes('价待询')) {
+            throw new Error(`FAIL: session train canonical anchored line,实际:${sessionMarkdown}`);
+        }
+        const sessionGate = await gate.execute({ markdown: sessionMarkdown, tripYear: 2027 }, null);
+        if (sessionGate.verdict !== 'pass' || (sessionGate.violations?.length ?? 0) !== 0) {
+            throw new Error(`FAIL: session train anchor 经 gotry_fact_gate 应 pass,实际:${JSON.stringify(sessionGate).slice(0, 700)}`);
+        }
+        console.log(`fact gate: registered session train previous-origin-date hit/miss/malformed/transport/tampered-binding → ${sessionTrainFacts.length} isolated facts → anchored canonical line → pass`);
+    }
+    // 17) LLM_MODEL 会话面覆盖(issue #77):未设 GOTRY_LLM_MODEL 不挂监听(默认路径
+    //     面不变);设了则 agent/request 瀑布 post-next 覆盖 provider/model 并清掉继承
+    //     effort——用户层(~/.dsh)选择被显式 .env 意图压过,内存态零持久化
+    {
+        // 17a 未设环境变量 → 不挂监听(默认面不变)
+        const none = [];
+        const ctxNone = { on: (_e, fn) => { none.push(fn); } };
+        if (installModelOverride(ctxNone, {}) !== false || none.length !== 0) {
+            throw new Error('FAIL: 未设 GOTRY_LLM_MODEL 时不得挂 agent/request 覆盖');
+        }
+        // 17b 无事件总线的极简宿主 → false 而非抛错
+        if (installModelOverride({}, { GOTRY_LLM_MODEL: 'MiniMax-M2' }) !== false) {
+            throw new Error('FAIL: 无事件总线宿主应返回 false 而非抛错');
+        }
+        // 17c 设定 → 覆盖生效且清继承 effort(其余请求字段原样保留)
+        const listeners = [];
+        const ctxOn = { on: (_e, fn) => { listeners.push(fn); } };
+        if (installModelOverride(ctxOn, { GOTRY_LLM_MODEL: 'MiniMax-M2' }) !== true || listeners.length !== 1) {
+            throw new Error('FAIL: 设定 GOTRY_LLM_MODEL 后应挂恰好一条 agent/request 覆盖');
+        }
+        const inner = async () => ({ provider: 'deepseek-official', model: 'glm-5.3-flash', reasoningEffort: 'high', maxTokens: 4096 });
+        const overridden = await listeners[0](null, inner);
+        if (overridden.model !== 'MiniMax-M2' || overridden.provider !== 'deepseek-official'
+            || 'reasoningEffort' in overridden || overridden.maxTokens !== 4096) {
+            throw new Error(`FAIL: 覆盖结果不符预期:${JSON.stringify(overridden)}`);
+        }
+        console.log('model override: 未设不挂/无总线不抛/设定后压过用户层选择(glm-5.3-flash→MiniMax-M2)且清继承 effort');
+    }
+    rmSync(smokeRoot, { recursive: true, force: true });
     console.log(`smoke state cleaned: ${smokeRoot}`);
     console.log('\nSMOKE OK');
 }
-main().catch((e)=>{
-    console.error(e);
-    process.exit(1);
-});
-
-
-//# sourceURL=/Users/bytedance/work/gotry/ts/scripts/smoke.ts
+main().catch((e) => { console.error(e); process.exit(1); });