@danceiny/gotry 0.2.0-rc.27 → 0.2.0-rc.29

package/dist/scripts/anything-path-measure.js

@@ -0,0 +1,150 @@
+#!/usr/bin/env tsx
+/**
+ * Read-only measurement of the external Anything path
+ * (hbcli -> hotel-be /api/search/anything), the evidence probe for two trigger trackers:
+ *   #276  does the external path show a material latency/reliability bottleneck at scale?
+ *   #345  what fields does Anything actually return for place-like queries (rating/photos/hours)?
+ *
+ * Discipline:
+ *   - Opt-in only: without GOTRY_UAT_READONLY=1 it exits 0 with `waiting_external_evidence` and spawns nothing
+ *     (CI-safe; same no-spend discipline as nightly-evidence.ts).
+ *   - Read-only `search anything` calls against the environment hbcli is already authenticated for
+ *     (flags fixed to `--json --env=uat`). It never reads, prints or persists credentials.
+ *   - Prints aggregates only (latency percentiles, error counts, candidate-type counts, field-presence
+ *     ratios). Raw responses are not persisted; failure details are scrubbed and truncated.
+ *   - This MEASURES the real path. It does not satisfy either tracker's trigger: both need real M4
+ *     usage evidence (and, for #345, founder approval of per-call billing).
+ */
+import { execFile } from 'node:child_process';
+import { pathToFileURL } from 'node:url';
+export const DEFAULT_KEYWORDS = [
+    'Dali', '大理', '洱海', 'Erhai', 'Lijiang', '丽江', 'Phuket', '普吉', 'Rawai', 'Krabi', '甲米',
+    'Shenzhen', '深圳', 'Hong Kong', '香港', 'Dubai', '迪拜', 'Kunming', '昆明', 'Bangkok', '曼谷',
+    'Tokyo', 'Paris', 'Hilton', 'Marriott', 'Old Town', 'Airport', 'Beach',
+];
+export const OPT_IN_ENV = 'GOTRY_UAT_READONLY';
+export const CALL_TIMEOUT_MS = 60_000;
+export const CONCURRENCY = 5;
+/** Redact credential-looking material and bound the length of anything we keep from a failed call. */
+export function scrub(text) {
+    return text
+        .replace(/(bearer|ticket|token|authorization|secret|api[-_ ]?key|password)\s*[:=]?\s*[^\s"',}]+/gi, '$1=<redacted>')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .slice(0, 160);
+}
+/** Nearest-rank percentile; null for an empty sample. */
+export function percentile(values, p) {
+    if (values.length === 0)
+        return null;
+    const sorted = [...values].sort((a, b) => a - b);
+    return sorted[Math.min(sorted.length - 1, Math.ceil((p / 100) * sorted.length) - 1)] ?? null;
+}
+export function latencyStats(results) {
+    const reasons = {};
+    for (const r of results)
+        if (!r.ok)
+            reasons[r.reason] = (reasons[r.reason] ?? 0) + 1;
+    const times = results.map((r) => r.ms);
+    return {
+        calls: results.length,
+        errors: results.filter((r) => !r.ok).length,
+        error_reasons: reasons,
+        p50_ms: percentile(times, 50),
+        p95_ms: percentile(times, 95),
+        max_ms: times.length ? Math.max(...times) : null,
+    };
+}
+function isPresent(value) {
+    if (value === null || value === undefined || value === '')
+        return false;
+    if (Array.isArray(value))
+        return value.length > 0;
+    if (typeof value === 'object')
+        return Object.keys(value).length > 0;
+    return true;
+}
+/** For each key seen on any object: how many of the n objects carry a non-empty value (`"52/55"`). */
+export function fieldPresence(objects) {
+    const present = {};
+    const real = objects.filter((o) => o !== undefined && o !== null);
+    for (const o of real)
+        for (const [k, v] of Object.entries(o))
+            present[k] = (present[k] ?? 0) + (isPresent(v) ? 1 : 0);
+    const fields = {};
+    for (const k of Object.keys(present).sort())
+        fields[k] = `${present[k]}/${real.length}`;
+    return { n: real.length, fields };
+}
+/** Real runner: one hbcli call, classified, bounded, scrubbed. Never throws. */
+export const hbcliRunner = (args) => new Promise((resolve) => {
+    const started = performance.now();
+    execFile('hbcli', ['--json', '--env=uat', 'search', 'anything', ...args], { timeout: CALL_TIMEOUT_MS, maxBuffer: 8 << 20 }, (error, stdout, stderr) => {
+        const ms = Math.round(performance.now() - started);
+        if (error) {
+            const killed = error.killed === true;
+            const code = error.code;
+            const reason = killed ? 'timeout' : typeof code === 'number' ? `exit_${code}` : 'spawn_error';
+            resolve({ ok: false, ms, reason, detail: scrub(String(stderr || stdout || error.message)) });
+            return;
+        }
+        try {
+            const parsed = JSON.parse(String(stdout));
+            resolve({ ok: true, ms, candidates: Array.isArray(parsed.candidates) ? parsed.candidates : [] });
+        }
+        catch {
+            resolve({ ok: false, ms, reason: 'non_json', detail: scrub(String(stdout)) });
+        }
+    });
+});
+async function sequential(run, keywords, extra) {
+    const out = [];
+    for (const kw of keywords)
+        out.push(await run([kw, ...extra]));
+    return out;
+}
+async function concurrent(run, keywords, width) {
+    const out = [];
+    for (let i = 0; i < keywords.length; i += width) {
+        out.push(...await Promise.all(keywords.slice(i, i + width).map((kw) => run([kw]))));
+    }
+    return out;
+}
+/** Pure given a runner and a clock: the whole measurement, no environment access. */
+export async function measure(run, keywords = DEFAULT_KEYWORDS, now = () => new Date()) {
+    const mixed = await sequential(run, keywords, []);
+    const placeOnly = await sequential(run, keywords, ['--content-type', 'place']);
+    const burst = await concurrent(run, keywords, CONCURRENCY);
+    const mixedCandidates = mixed.flatMap((r) => (r.ok ? r.candidates : []));
+    const placeCandidates = placeOnly.flatMap((r) => (r.ok ? r.candidates : []));
+    const byType = {};
+    for (const c of mixedCandidates)
+        byType[c.type ?? 'unknown'] = (byType[c.type ?? 'unknown'] ?? 0) + 1;
+    const zeroPlace = placeOnly.filter((r) => r.ok && r.candidates.length === 0).length;
+    return {
+        state: 'measured',
+        measured_at: now().toISOString(),
+        hbcli_json_flags: '--json --env=uat',
+        sequential_mixed: latencyStats(mixed),
+        sequential_place_only: latencyStats(placeOnly),
+        concurrent_mixed: { ...latencyStats(burst), concurrency: CONCURRENCY },
+        mixed_candidates_by_type: byType,
+        place_only_total_candidates: placeCandidates.length,
+        keywords_with_zero_place_results: `${zeroPlace}/${keywords.length}`,
+        hotel_object_field_presence: fieldPresence(mixedCandidates.filter((c) => c.type === 'hotel').map((c) => c.hotel)),
+        city_region_field_presence: fieldPresence(mixedCandidates.filter((c) => c.type === 'city').map((c) => c.region)),
+        place_object_field_presence: fieldPresence(placeCandidates.map((c) => c.place)),
+    };
+}
+/** The opt-in gate: nothing is spawned unless the environment explicitly asks for it. */
+export async function measureIfOptedIn(env, run) {
+    if (env[OPT_IN_ENV] !== '1') {
+        return { state: 'waiting_external_evidence', reason: `${OPT_IN_ENV}=1 not set; no hbcli process was spawned, nothing was measured` };
+    }
+    return measure(run);
+}
+if (process.argv[1] !== undefined && import.meta.url === pathToFileURL(process.argv[1]).href) {
+    measureIfOptedIn(process.env, hbcliRunner).then((result) => {
+        console.log(JSON.stringify(result, null, 2));
+    });
+}

package/dist/scripts/anything-tests.js

@@ -10,15 +10,25 @@
  *  6. 超时:fake hbcli hang — AbortError → verdict error + 不抛错
  *  7. 关键词为空:不调 hbcli — verdict error
  *  8. 缺 hbcli(spawn 失败):用户面是人话(不留 `(exit null)`/ENOENT 进程噪音)
+ *  9. 离线开关 GOTRY_HBCLI_LIVE=0|false|off(issue #617):计数 fake hbcli **零次**被调起,
+ *     返回既有降级面(与缺 hbcli 同形:ok:false / hbcli-anything-error / verdict:error + 人话原因);
+ *     含 PATH 解析的真实调用面(runTurn 的 PoI 探针不传 hbcliBin)
+ * 10. 开关未设或任何其他取值:行为与此前完全一致——fake 被调起,hit/miss/error 三值语义不变
+ * 11. 既有入参的既有结果在开关关闭时逐字节不变:空 keyword / pre-aborted 先于离线判定
+ *
+ * 本套件独占 GOTRY_HBCLI_LIVE:开头清掉外部值(`GOTRY_HBCLI_LIVE=0 ./scripts/run-all-tests.sh` 也不得改变 fake 断言),
+ * 结束还原。
  *
  * 运行: cd ts && npx tsx scripts/anything-tests.ts
  */
 import assert from 'node:assert/strict';
-import { mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { anythingSearch } from '../capabilities/anything.js';
 const tmp = await mkdtemp(join(tmpdir(), 'anything-test-'));
+const savedLive = process.env.GOTRY_HBCLI_LIVE;
+delete process.env.GOTRY_HBCLI_LIVE;
 try {
     async function fakeBin(name, behaviour) {
         const p = join(tmp, name);
@@ -144,8 +154,132 @@ while :; do sleep 5; done
     assert.ok(/hbcli/.test(r8.error), `原因须指明是 hbcli,实得:${r8.error}`);
     assert.ok(r8.evidence.includes('[实时API:hbcli-anything@error@'), '证据链 tag 形态不变');
     console.log(`8. 缺 hbcli → 人话降级 OK(${r8.error})`);
-    console.log('\nANYTHING TESTS: 8/8 OK(hbcli fake + wire 对齐 + 降级诚实)');
+    // ---- 9-11. 离线开关 GOTRY_HBCLI_LIVE(issue #617) -------------------------------------------
+    // 计数 fake:每被调起一次就往 calls.log 追加一行(只用 shell 内建,PATH 为空也能跑),再按 kind 回包。
+    const callsLog = join(tmp, 'calls.log');
+    const invocations = async () => {
+        try {
+            return (await readFile(callsLog, 'utf8')).split('\n').filter(Boolean).length;
+        }
+        catch {
+            return 0;
+        }
+    };
+    async function countedBin(name, kind, dir = tmp) {
+        const p = join(dir, name);
+        const reply = kind === 'hit'
+            ? `printf '%s' '{"candidates":[{"type":"city","matchScore":9,"region":{"id":"d1","name":{"zh":"大理市"}}}]}'`
+            : kind === 'miss'
+                ? `printf '%s' '{"candidates":[]}'`
+                : `printf 'hotelbe down\\n' >&2\nexit 1`;
+        await writeFile(p, `#!/bin/sh\nprintf 'call\\n' >> '${callsLog}'\n${reply}\n`, { mode: 0o755 });
+        return p;
+    }
+    async function withLive(value, body) {
+        const prev = process.env.GOTRY_HBCLI_LIVE;
+        if (value === undefined)
+            delete process.env.GOTRY_HBCLI_LIVE;
+        else
+            process.env.GOTRY_HBCLI_LIVE = value;
+        try {
+            return await body();
+        }
+        finally {
+            if (prev === undefined)
+                delete process.env.GOTRY_HBCLI_LIVE;
+            else
+                process.env.GOTRY_HBCLI_LIVE = prev;
+        }
+    }
+    const countedHit = await countedBin('hbcli-counted-hit', 'hit');
+    const countedMiss = await countedBin('hbcli-counted-miss', 'miss');
+    const countedFail = await countedBin('hbcli-counted-fail', 'fail');
+    // 9. 关闭:0/false/off(不分大小写、忽略首尾空白)→ 零 spawn + 既有降级面
+    for (const off of ['0', 'false', 'off', 'OFF', 'False', ' 0 ', ' off\n']) {
+        const before = await invocations();
+        const r9 = await withLive(off, () => anythingSearch({ keyword: '大理', hbcliBin: countedHit }));
+        assert.equal(await invocations(), before, `GOTRY_HBCLI_LIVE=${JSON.stringify(off)}:fake hbcli 必须被调起 0 次`);
+        assert.equal(r9.ok, false);
+        assert.equal(r9.via, 'hbcli-anything-error');
+        assert.equal(r9.verdict, 'error', '「没查」不得说成「查无」:走 error 降级面而非 miss');
+        assert.equal(r9.hits, undefined);
+        assert.deepEqual(Object.keys(r9).sort(), Object.keys(r8).sort(), '与缺 hbcli 降级同形(同一组字段)');
+        assert.match(r9.evidence, /^\[实时API:hbcli-anything@offline@[^\]]+\]/, `证据链应标 offline,实得:${r9.evidence}`);
+        assert.ok(r9.error && /hbcli/.test(r9.error) && /GOTRY_HBCLI_LIVE/.test(r9.error), `原因须说明 hbcli 通道被开关关闭,实得:${r9.error}`);
+        assert.ok(!/(exit null|ENOENT|spawn |timeout)/i.test(r9.error), `用户面不得出现进程噪音(也不得含 timeout:效应层只重试 timeout 类),实得:${r9.error}`);
+    }
+    // 9b. 真实调用面:不传 hbcliBin('hbcli' 由 PATH 解析,runTurn 的 PoI 探针即如此)。
+    //     未设开关的 positive control 证明 fake 确实可达——否则「零次」可能是空断言。
+    const pathBin = join(tmp, 'pathbin');
+    await mkdir(pathBin);
+    await countedBin('hbcli', 'hit', pathBin);
+    const savedPath = process.env.PATH;
+    const savedHome = process.env.HOME;
+    process.env.PATH = `${pathBin}:${savedPath ?? ''}`;
+    process.env.HOME = join(tmp, 'empty-home'); // 已知安装位回退落在空目录,碰不到开发机真实 hbcli
+    try {
+        const base = await invocations();
+        const control = await withLive(undefined, () => anythingSearch({ keyword: '大理' }));
+        assert.equal(control.verdict, 'hit', `positive control:未设开关时 PATH 上的 fake 应被调起,实得:${control.evidence}`);
+        assert.equal(await invocations(), base + 1, 'positive control 恰好调起一次');
+        const off = await withLive('0', () => anythingSearch({ keyword: '大理' }));
+        assert.equal(off.verdict, 'error');
+        assert.match(off.evidence, /@offline@/);
+        assert.equal(await invocations(), base + 1, 'GOTRY_HBCLI_LIVE=0:PATH 上的 hbcli 零次调起');
+    }
+    finally {
+        if (savedPath === undefined)
+            delete process.env.PATH;
+        else
+            process.env.PATH = savedPath;
+        if (savedHome === undefined)
+            delete process.env.HOME;
+        else
+            process.env.HOME = savedHome;
+    }
+    console.log('9. GOTRY_HBCLI_LIVE=0|false|off → 零 spawn + 既有降级面(显式 hbcliBin 与 PATH 解析两种调用面)OK');
+    // 10. 未设或任何其他取值 = 与此前完全一致:fake 被调起,hit/miss/error 三值语义不变
+    for (const on of [undefined, '1']) {
+        const before = await invocations();
+        const h = await withLive(on, () => anythingSearch({ keyword: '大理', hbcliBin: countedHit }));
+        const m = await withLive(on, () => anythingSearch({ keyword: 'nothing', hbcliBin: countedMiss }));
+        const f = await withLive(on, () => anythingSearch({ keyword: 'x', hbcliBin: countedFail }));
+        assert.equal(await invocations(), before + 3, `GOTRY_HBCLI_LIVE=${String(on)}:三只 fake 各被调起一次`);
+        assert.equal(h.verdict, 'hit');
+        assert.equal(h.hits[0].name, '大理市');
+        assert.match(h.evidence, /^\[实时API:hbcli-anything@\d{4}-/, 'hit 证据链形态不变');
+        assert.equal(m.verdict, 'miss');
+        assert.equal(m.hits.length, 0);
+        assert.equal(f.verdict, 'error');
+        assert.match(f.evidence, /^\[实时API:hbcli-anything@error@/, 'error 证据链形态不变(不是 offline)');
+        assert.equal(f.error, 'hbcli 报错:hotelbe down', '既有原因串逐字节不变');
+    }
+    // 非 0/false/off 的取值一律视为开启(与此前一致):空串/1/true/on/yes/no/disabled/00/任意字符串
+    for (const other of ['', 'true', 'on', 'yes', 'no', 'disabled', '00', 'maybe']) {
+        const before = await invocations();
+        const r = await withLive(other, () => anythingSearch({ keyword: '大理', hbcliBin: countedHit }));
+        assert.equal(r.verdict, 'hit', `GOTRY_HBCLI_LIVE=${JSON.stringify(other)} 不是关闭值,应保持 live,实得:${r.evidence}`);
+        assert.equal(await invocations(), before + 1);
+    }
+    console.log('10. 开关未设/其他取值 → 与此前一致(hit/miss/error 三值 + 既有原因串)OK');
+    // 11. 关闭时,既有入参的既有结果逐字节不变:空 keyword / pre-aborted 先于离线判定(两者本就零 spawn)
+    const before11 = await invocations();
+    const rEmpty = await withLive('0', () => anythingSearch({ keyword: '   ', hbcliBin: countedHit }));
+    assert.equal(rEmpty.error, 'keyword is required');
+    assert.match(rEmpty.evidence, /^\[实时API:hbcli-anything@error@[^\]]+\] keyword empty$/);
+    const preAborted = new AbortController();
+    preAborted.abort();
+    const rAbort = await withLive('0', () => anythingSearch({ keyword: '大理', hbcliBin: countedHit, signal: preAborted.signal }));
+    assert.equal(rAbort.error, 'aborted by host signal');
+    assert.match(rAbort.evidence, /^\[实时API:hbcli-anything@abort@[^\]]+\] pre-aborted, zero spawn$/);
+    assert.equal(await invocations(), before11, '两条既有降级路径均零 spawn');
+    console.log('11. 关闭态下空 keyword / pre-aborted 的既有结果不变 OK');
+    console.log('\nANYTHING TESTS: 11/11 OK(hbcli fake + wire 对齐 + 降级诚实 + #617 离线开关零 spawn)');
 }
 finally {
+    if (savedLive === undefined)
+        delete process.env.GOTRY_HBCLI_LIVE;
+    else
+        process.env.GOTRY_HBCLI_LIVE = savedLive;
     await rm(tmp, { recursive: true, force: true });
 }

package/dist/scripts/booking-copilot-dsh-warmer-proof.js

@@ -15,9 +15,12 @@ mkdirSync(markerDir, { recursive: true });
 const actualBin = pathToFileURL(join(dirname(fileURLToPath(import.meta.resolve('@deepseek-ai/dsh/package.json'))), 'lib/bin.js')).href;
 const gateBin = join(root, 'blocked-dsh.mjs');
 writeFileSync(gateBin, `
-import { existsSync, writeFileSync } from 'node:fs'
+import { existsSync, renameSync, writeFileSync } from 'node:fs'
 const marker = ${JSON.stringify(markerDir)} + '/gate-' + process.pid + '.json'
-writeFileSync(marker, JSON.stringify({ pid: process.pid, workerPid: process.ppid }))
+// Atomic publish: the proof parses each marker the moment the directory lists it, so a marker must never be visible half-written (writeFileSync creates the empty file first).
+const staging = ${JSON.stringify(root)} + '/gate-' + process.pid + '.staging'
+writeFileSync(staging, JSON.stringify({ pid: process.pid, workerPid: process.ppid }))
+renameSync(staging, marker)
 while (!existsSync(${JSON.stringify(releaseFile)})) await new Promise((resolve) => setTimeout(resolve, 10))
 const { runCli } = await import(${JSON.stringify(actualBin)})
 await runCli()

package/dist/scripts/bootstrap-tests.js

@@ -10,6 +10,7 @@
  *  4. GOTRY_SETUP_EXTENSION=0 单项跳过
  *  5. wizard --dry-run 与真实路径(probe 失败 exit 1)
  *  8. doctor 子命令:体检清单/LLM key 让渡/报告落盘(状态面回归)
+ * 24. hbcli 凭证判定(#623):CLI doctor 按 whoami 三档 JSON 判而非退出码,并与工具层 doctor 对拍同结论
  *
  * 不测真实安装(浏览器商店一键装已上架,扩展就位检测走 runHealthWatch 的回环端口)。
  * 运行: cd ts && npx tsx scripts/bootstrap-tests.ts
@@ -20,6 +21,7 @@ import { EventEmitter } from 'node:events';
 import { chmodSync, copyFileSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join, dirname, delimiter } from 'node:path';
+import { runDoctorChecks } from '../capabilities/doctor.js';
 const repoRoot = join(import.meta.dirname, '..', '..');
 const bootstrap = join(repoRoot, 'bin', 'gotry-bootstrap.js');
 function runBootstrap(extraArgs, extraEnv, bootstrapPath = bootstrap) {
@@ -39,7 +41,7 @@ function runBootstrap(extraArgs, extraEnv, bootstrapPath = bootstrap) {
 // 1. --check-only:扩展就位探测,exit 0(已不替用户管 hbcli/agent-reach/sidebar)
 const c1 = runBootstrap(['--check-only'], {});
 assert.equal(c1.code, 0, `--check-only 应 exit 0,实际 ${c1.code}\n${c1.out}`);
-assert.ok(c1.out.includes('Session Bridge'), '报告应含扩展就位节(issue #21 传输层方案 C)');
+assert.ok(c1.out.includes('Stai Travel Bridge'), '报告应含扩展就位节(issue #21 传输层方案 C)');
 assert.ok(!c1.out.includes('hbcli'), 'setup 不再替用户管 hbcli(已让出)');
 assert.ok(!c1.out.includes('agent-reach'), 'setup 不再替用户管 agent-reach(已让出)');
 assert.ok(!c1.out.includes('dsh-better-sidebar'), 'setup 不再替用户管 dsh-better-sidebar(已让出)');
@@ -191,7 +193,7 @@ console.log('11. setupSidebar 落盘状态复核(pnpm 忽略构建脚本 exit 1
 // 只取 missing 一态;degraded 分类在 12 里用独立 item 单测,避免 label-keyed Map 碰撞。
 const onboardingItems = [
     { label: 'Node 运行时', level: 'ok', detail: 'Node 22.x', fix: undefined },
-    { label: 'GoTry Session Bridge 扩展', level: 'missing', detail: '未安装', fix: 'https://chromewebstore...' },
+    { label: 'Stai Travel Bridge 扩展', level: 'missing', detail: '未安装', fix: 'https://chromewebstore...' },
     { label: 'Agent Reach(网页/社媒读取)', level: 'missing', detail: '未装配', fix: 'npx @danceiny/gotry doctor --fix' },
     { label: 'hbcli(酒店实时源)', level: 'missing', detail: '未安装', fix: 'npx @danceiny/gotry doctor --fix' },
     { label: 'FlyAI(飞猪官方检索)', level: 'degraded', detail: '未配 FLYAI_API_KEY', fix: '到 flyai 控制台申请 key' },
@@ -276,7 +278,7 @@ console.log('13. onboardingSkipReason(非 TTY/CI/benchmark/--no-onboarding/SKIP
     assert.equal(byLabel.get('Agent Reach(网页/社媒读取)').status, 'installed');
     assert.equal(byLabel.get('hbcli(酒店实时源)').status, 'installed');
     assert.equal(byLabel.get('dsh-better-sidebar(侧栏工作台)').status, 'installed');
-    assert.equal(byLabel.get('GoTry Session Bridge 扩展').status, 'needs-user-action');
+    assert.equal(byLabel.get('Stai Travel Bridge 扩展').status, 'needs-user-action');
     assert.equal(byLabel.get('FlyAI(飞猪官方检索)').status, 'needs-user-action');
     assert.equal(byLabel.get('dsh-calendar(日历工作窗口)').status, 'needs-user-action');
     assert.equal(byLabel.get('dsh-map-tools(地图/路线/POI)').status, 'unavailable');
@@ -410,7 +412,7 @@ console.log('18. onboarding CLI 跳过(非 TTY / CI / GOTRY_SETUP_SKIP / GOTRY_O
     assert.ok(autoLabels.includes('hbcli(酒店实时源)'), 'hbcli missing(空 PATH)→ auto');
     assert.ok(autoLabels.includes('Agent Reach(网页/社媒读取)'), 'reach missing(fixture 无 .venv)→ auto');
     const userActionLabels = plan.userAction.map((g) => g.label);
-    assert.ok(userActionLabels.includes('GoTry Session Bridge 扩展'), '扩展 missing(隔离 HOME)→ user-action(浏览器商店)');
+    assert.ok(userActionLabels.includes('Stai Travel Bridge 扩展'), '扩展 missing(隔离 HOME)→ user-action(浏览器商店)');
     assert.ok(userActionLabels.some(label => label.startsWith('FlyAI(飞猪官方检索')), 'flyai 无 key → user-action');
     assert.ok(!plan.unavailable.some((g) => g.label.startsWith('dsh-map-tools')), 'map-tools 随包就位 → 非 unavailable');
     assert.ok(!plan.unavailable.some((g) => g.label.startsWith('dsh-tool-ask-user')), 'ask-user 随包就位 → 非 unavailable');
@@ -592,7 +594,7 @@ console.log('19. onboarding --scan(临时包 fixture + 隔离 HOME + 受控 PATH
         assert.ok(visible.includes('dsh-better-sidebar(侧栏工作台)'), '渲染 sidebar 不可用行');
         assert.match(visible, /Windows[^\n]*dsh-better-sidebar/, 'sidebar 行带 Windows 原因');
         // user-action 项平台无关,仍渲染(扩展商店/flyai key/calendar)
-        assert.ok(visible.includes('GoTry Session Bridge 扩展'), '渲染扩展 user-action 行');
+        assert.ok(visible.includes('Stai Travel Bridge 扩展'), '渲染扩展 user-action 行');
         assert.ok(visible.includes('FlyAI(飞猪官方检索)'), '渲染 flyai user-action 行');
         assert.ok(visible.includes('dsh-calendar(日历工作窗口)'), '渲染 calendar user-action 行');
     }
@@ -1415,7 +1417,7 @@ console.log('21. spawned installed-package inner(21a TTY-eligible 真实 prompt
     assert.match(unavail.get('dsh-better-sidebar(侧栏工作台)').detail, /Windows/, 'sidebar unavailable 给 win 平台具体原因');
     // user-action 项不受平台影响(扩展商店/flyai key/calendar profile)
     const ua = new Set(plan.userAction.map((g) => g.label));
-    assert.ok(ua.has('GoTry Session Bridge 扩展'), 'win32 扩展仍 user-action(平台无关)');
+    assert.ok(ua.has('Stai Travel Bridge 扩展'), 'win32 扩展仍 user-action(平台无关)');
     assert.ok(ua.has('FlyAI(飞猪官方检索)'), 'win32 flyai 仍 user-action(平台无关)');
     assert.ok(ua.has('dsh-calendar(日历工作窗口)'), 'win32 calendar 仍 user-action(平台无关)');
     // darwin 计划对照:auto=3,promptable=true(不回归)
@@ -1476,4 +1478,72 @@ console.log('22. win32 platform boundary(hbcli/reach/sidebar → unavailable +
     }
 }
 console.log('23. result 通道排他写入(预存文件不被覆盖 + symlink 不跟随 victim,mode 0600 + flag wx)OK');
-console.log('BOOTSTRAP TESTS: 25/25 OK(扩展就位 + 跳过开关 / wizard --dry-run / wizard 真实 / 扩展分发通道 / doctor 体检面 / calendar setup 状态面 / 显式跳过 + auto 跳过 + 单项跳过 / 启动摘要 / sidebar 落盘状态复核 / onboarding 分类+计划+env opt-out+跳过原因+yes+partial-failure+幂等+prompt+CLI 跳过+--scan / 编排缝 orchestrateWebLaunch × 6 / prompt waiter failure deterministic process-group reap / waiter 原始错误 + cleanup timeout/failure handled / 临时安装包 spawned inner 21a TTY-eligible 真实 prompt→n→web + 摘要抑制 + 无残留 / 21b non-TTY 零 prompt / 21c POSIX 信号清理 SIGTERM→清 result+patch 目录 + 无残留子进程 / 21f yes-path installer 子树信号清理 / 21g yes-path timeout installer 子树清理 / 21d timeout 诊断 + 无残留 / 21e dsh-lifecycle 信号转发 / win32 平台边界 / result 通道排他写入)');
+// 24. hbcli 凭证判定(#623):`gotry doctor` 的 CLI 面按 `hbcli --json auth whoami` 的三档 JSON 判,不看退出码——
+//     whoami 没有凭证时也退 0,旧判法对「没登录」恒报「凭证有效」(rc.27 已发布版实测 14/14)。
+//     CLI(bin/gotry-bootstrap.js)与工具层(ts/capabilities/doctor.ts)是同一检查的两份实现,
+//     故同一份假 hbcli 夹具同时喂两边对拍:结论必须一致(漂移即红)。受控 PATH 只含 node 软链 + 假 hbcli,
+//     隔离 HOME,不碰真机 hbcli(开发机常把真 hbcli 装在 node 同目录)。
+{
+    const { classifyHbcliWhoami } = await import(bootstrap);
+    const allFalse = '{"env":"uat","api_key":{"configured":false},"portal":{"configured":false},"customer":{"configured":false}}';
+    const unit = (out) => classifyHbcliWhoami(out);
+    assert.deepEqual(unit(allFalse), { ok: false, customer: false }, '三档全 false → 未配置');
+    assert.deepEqual(unit(allFalse.replace('"customer":{"configured":false}', '"customer":{"configured":true}')), { ok: true, customer: true }, 'customer 档 → 有效且标注 customer');
+    assert.deepEqual(unit(allFalse.replace('"api_key":{"configured":false}', '"api_key":{"configured":true}')), { ok: true, customer: false }, 'api_key 档 → 有效');
+    assert.deepEqual(unit('not json'), { ok: true, customer: false }, '非 JSON(超旧版/异常)保守视为有效,与工具层同语义');
+    assert.deepEqual(unit(''), { ok: true, customer: false }, '空输出同属不可解析,保守视为有效');
+    assert.deepEqual(unit(null), { ok: false, customer: false }, '取不到输出(非零退出/超时/spawn 失败)→ 未确认');
+    const fakeHbcli = (whoamiArm) => `#!/bin/sh\ncase "$*" in\n  *--version*) echo '0.0.4';;\n  *version*) echo '0.0.4';;\n  *whoami*) ${whoamiArm};;\nesac\n`;
+    const cases = [
+        { name: 'allfalse', arm: `echo '${allFalse}'`, expect: 'degraded' },
+        { name: 'customer', arm: `echo '${allFalse.replace('"customer":{"configured":false}', '"customer":{"configured":true}')}'`, expect: 'ok', customer: true },
+        { name: 'apikey', arm: `echo '${allFalse.replace('"api_key":{"configured":false}', '"api_key":{"configured":true}')}'`, expect: 'ok' },
+        { name: 'plaintext', arm: `echo 'not json'`, expect: 'ok' },
+        { name: 'failing', arm: `echo boom >&2; exit 3`, expect: 'degraded' },
+    ];
+    const emptyRepo = mkdtempSync(join(tmpdir(), 'gotry-hbcli-parity-repo-'));
+    const prevPath = process.env.PATH;
+    try {
+        for (const c of cases) {
+            const root = mkdtempSync(join(tmpdir(), `gotry-hbcli-${c.name}-`));
+            try {
+                const binDir = join(root, 'bin');
+                const home = join(root, 'home');
+                mkdirSync(binDir);
+                mkdirSync(home);
+                symlinkSync(process.execPath, join(binDir, 'node'));
+                writeFileSync(join(binDir, 'hbcli'), fakeHbcli(c.arm), { mode: 0o755 });
+                // CLI 面
+                const cli = runBootstrap(['doctor'], { HOME: home, PATH: binDir, FLYAI_API_KEY: '' });
+                const line = cli.out.split('\n').find((l) => l.includes('hbcli(酒店实时源)'));
+                assert.ok(line, `${c.name}: CLI doctor 应输出 hbcli 行\n${cli.out}`);
+                const cliLevel = line.includes('已安装且凭证有效') ? 'ok' : line.includes('二进制在,但凭证未配置/失效') ? 'degraded' : 'other';
+                assert.equal(cliLevel, c.expect, `${c.name}: CLI doctor 的 hbcli 结论应为 ${c.expect}\n${line}`);
+                if (c.customer)
+                    assert.ok(line.includes('customer 档在用'), `${c.name}: CLI 应标注 customer 档在用\n${line}`);
+                // 工具层(同一夹具、同一受控 PATH)
+                process.env.PATH = binDir;
+                const tool = (await runDoctorChecks({ repoRoot: emptyRepo, homeDir: home, env: {} })).items.find((i) => i.id === 'hbcli');
+                process.env.PATH = prevPath;
+                assert.equal(tool.status, c.expect, `${c.name}: 工具层 doctor 的 hbcli 结论应为 ${c.expect},实际 ${tool.status}`);
+                assert.equal(cliLevel, tool.status, `${c.name}: CLI 与工具层必须同结论(两份实现不得漂移)`);
+            }
+            finally {
+                process.env.PATH = prevPath;
+                try {
+                    rmSync(root, { recursive: true, force: true });
+                }
+                catch { /* ignore */ }
+            }
+        }
+    }
+    finally {
+        process.env.PATH = prevPath;
+        try {
+            rmSync(emptyRepo, { recursive: true, force: true });
+        }
+        catch { /* ignore */ }
+    }
+}
+console.log('24. hbcli 凭证判定(CLI doctor 按 whoami 三档 JSON 判,不看退出码;与工具层 doctor 对拍 5 夹具同结论:全 false=degraded / customer·api_key=ok / 非 JSON=保守 ok / 非零退出=degraded)OK');
+console.log('BOOTSTRAP TESTS: 26/26 OK(扩展就位 + 跳过开关 / wizard --dry-run / wizard 真实 / 扩展分发通道 / doctor 体检面 / calendar setup 状态面 / 显式跳过 + auto 跳过 + 单项跳过 / 启动摘要 / sidebar 落盘状态复核 / onboarding 分类+计划+env opt-out+跳过原因+yes+partial-failure+幂等+prompt+CLI 跳过+--scan / 编排缝 orchestrateWebLaunch × 6 / prompt waiter failure deterministic process-group reap / waiter 原始错误 + cleanup timeout/failure handled / 临时安装包 spawned inner 21a TTY-eligible 真实 prompt→n→web + 摘要抑制 + 无残留 / 21b non-TTY 零 prompt / 21c POSIX 信号清理 SIGTERM→清 result+patch 目录 + 无残留子进程 / 21f yes-path installer 子树信号清理 / 21g yes-path timeout installer 子树清理 / 21d timeout 诊断 + 无残留 / 21e dsh-lifecycle 信号转发 / win32 平台边界 / result 通道排他写入 / hbcli 凭证判定 CLI↔工具层对拍)');